last executing test programs: 14m31.551510009s ago: executing program 1 (id=195): prctl$auto(0xffffffff, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1000, 0xe983, 0xb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400003, 0x0, 0x9b72, r0, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1db, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) connect$auto(0x3, 0x0, 0x54) sendto$auto(0xffffffffffffffff, 0x0, 0x8000000, 0xfff, 0x0, 0x8101) socket$nl_generic(0x10, 0x3, 0x10) getpgid$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f00000001c0)="2c380a70ac791ee7af33b5df209b8e5935732802de7ee57fbba413c1e505ea8e23cb370d02e2e811537be5676cd1f432551b18fb6da6e0db758c86e652812057f45fda5d18de0e356ecff0fa2f7bedcaefaecef248daf8029e89a5aa09ca906251bd36163a3bfedb5e17c698fdb7cbdac32a049f29214e91be7bda0b00071ff0637700e9a7482c0e2dbefb17263bc8ca897287bb999ad06a30325ab8b0ae75c84ec7495942c028226cbf3b0b1a01e20c9cea1910a6848c9bcdc092b9a687b26b8063f91e15e462b9e0f3abd8d7bcdcb2632be2ee6ae0f88abac538cb") r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x9, 0x402, 0x101}, 0x6, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000000)) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000100)="15") getpid() r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r5 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r5, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r4, 0x40}, 0x2, 0x0, 0x0, 0x8) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000440), r2) modify_ldt$auto(0x1, 0x0, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(r6, 0xe, &(0x7f0000000340)="a8bfb76df65d2a4d5c6aee3aac7a134db2fb9f1c0e5730cba6d3a57050b020c2b05b25d4bb1cf8d2e66dcabc5c1878dfb4407ad13783e91caab4582691c74fa3834ae16ec5682993dafbbac7dff695a47fadb92124c44885a42095844c52a2b97ee406e99d6d194fa87dd5163e53ee8545e9d363436c1755a69fdeebb44b2f31b8b71cb2e14d05037b43d217548c28f5ac7c501efe5fe5f7771b5fee0b834a685df5a1c1da2d3855ae746725e78e63fa92af38d1d905112ff0366c8e78b860cf27d74e5e01882f3f48543446c5cd88f07104d03af1d9ab", 0x7fff) 14m31.001340767s ago: executing program 1 (id=198): socket(0x2, 0x2, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) fcntl$auto(0x3, 0xc, 0x0) open(0x0, 0x22240, 0x154) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) futex_waitv$auto(0x0, 0x81, 0x0, &(0x7f0000000340)={0x92, 0x6}, 0x8) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, 0x0, 0x80040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x1d, 0x2, 0x7) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) socket(0x9, 0xa, 0x39) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/admmidi2\x00', 0xa00, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x108002, 0x0) epoll_create$auto(0x3e) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) eventfd$auto(0x6) socketpair$auto(0x9, 0x2, 0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 14m29.399940453s ago: executing program 1 (id=206): socket(0x27, 0xa, 0x10000aaf) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) unshare$auto(0x40000080) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/set_event\x00', 0x20c8c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x9, 0x24de, 0x16, 0x401, 0xd5be) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video52\x00', 0x2181, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x101, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x80e7) socket(0x2b, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) read$auto(0x3, 0x0, 0x7) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r2, 0x0, 0x1) pipe$auto(0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) 14m28.209005492s ago: executing program 1 (id=209): setitimer$auto(0x7, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2c017}, 0x40400) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto(0x3, 0xc0303e03, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff, 0x5, 0x8, 0x401, 0x40}, 0x41f, 0xffffffffffffffff, 0xa9a, 0xffffffffffffffff, @raw=0x1, @inferred=0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0}) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYBLOB="00012bbd7000fddbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x60040440}, 0x8810) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={"4edc8a1ff3da63c3dde0f3ab642444a7f80af403620241c3739b8355c88acaf5", 0x9, 0x1, 0x8, 0xb, 0x6}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$auto(r4, 0x0, 0x20) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) open(&(0x7f0000000000)='./file0\x00', 0xe600, 0x20) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x8) 14m27.558030719s ago: executing program 1 (id=213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x100) eventfd2$auto(0x6af3, 0x800) (async) r2 = eventfd2$auto(0x6af3, 0x800) socket(0x1e, 0x1, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x83, 0x2, 0x400, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) madvise$auto(0x1, 0xffffffffffff0001, 0x7ffff) socket(0x29, 0x5, 0x1000000) mmap$auto(0x0, 0x4, 0x10000000000, 0x11, 0x3, 0x100000000) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)=@link_update={r2, @new_prog_fd=r1, 0x3, @old_prog_fd=r1}, 0x1) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pipe2$auto(&(0x7f0000000680)=r0, 0x10000) (async) pipe2$auto(&(0x7f0000000680)=r0, 0x10000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x2901, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7440, 0x1, 0x9, 0x1]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7440, 0x1, 0x9, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x6]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x6]}, 0x0) openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f00000032c0), 0x1000, 0x0) (async) r4 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f00000032c0), 0x1000, 0x0) preadv$auto(r4, &(0x7f0000003340)={&(0x7f0000003300), 0x40}, 0x9, 0x5, 0x100000001) ioperm$auto(0x0, 0xffff, 0x4) (async) ioperm$auto(0x0, 0xffff, 0x4) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x40140, 0x12d) rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000640)={r4, &(0x7f0000000340)="8fefe94b62", 0xdcb, &(0x7f0000000380)="e9", 0x9, &(0x7f0000000700)="cb0431457f43131273a16323375d4fe12459affdc39176248ab56a001344bf586986927e6baeba8008505c953d31fd6ae7b6a048af8ffcc99060383bc3873409e829486c988ab8a5ce756ba0d7ddd12e3595653f8e18168eea06", &(0x7f0000000480)=0x50}) ioctl$auto_SNDRV_PCM_IOCTL_RESUME2(r5, 0x4147, 0x0) (async) ioctl$auto_SNDRV_PCM_IOCTL_RESUME2(r5, 0x4147, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) (async) r6 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) pread64$auto(r6, 0x0, 0x2ffffffff, 0xfff) (async) pread64$auto(r6, 0x0, 0x2ffffffff, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4) openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)=':-.\x00', 0x5d5400, 0x13e) 14m27.084307178s ago: executing program 1 (id=215): io_cancel$auto(0x4, &(0x7f0000000040)={0x8, 0x2, 0x10, 0x4, 0x5, 0xffffffffffffffff, 0x7, 0xc7, 0x6, 0x0, 0x8de, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x7, 0x7, 0x2}) utimes$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x6}) mmap$auto(0x0, 0x3fffffffffffff, 0x7, 0x40eb1, r1, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) memfd_create$auto(0x0, 0x9) fallocate$auto(r0, 0xfff, 0x8000000000002, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, 0x0, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/o2cb/logmask/ERROR\x00', 0x183042, 0x0) sendfile$auto(r5, r5, 0x0, 0x8000) socket(0x2, 0x2, 0x0) fcntl$auto_F_NOTIFY(r3, 0x402, 0x1) mmap$auto(0x4, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x50b880, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) gettid() r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r6, 0x0, 0x5, 0x7fff) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 14m12.080585686s ago: executing program 32 (id=215): io_cancel$auto(0x4, &(0x7f0000000040)={0x8, 0x2, 0x10, 0x4, 0x5, 0xffffffffffffffff, 0x7, 0xc7, 0x6, 0x0, 0x8de, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x7, 0x7, 0x2}) utimes$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x6}) mmap$auto(0x0, 0x3fffffffffffff, 0x7, 0x40eb1, r1, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) memfd_create$auto(0x0, 0x9) fallocate$auto(r0, 0xfff, 0x8000000000002, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, 0x0, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/o2cb/logmask/ERROR\x00', 0x183042, 0x0) sendfile$auto(r5, r5, 0x0, 0x8000) socket(0x2, 0x2, 0x0) fcntl$auto_F_NOTIFY(r3, 0x402, 0x1) mmap$auto(0x4, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x50b880, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) gettid() r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r6, 0x0, 0x5, 0x7fff) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 6m34.290357908s ago: executing program 0 (id=1585): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) execve$auto(0x0, 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0xffffffffffffffff, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/i8042/serio1/firmware_id\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xc40, 0x0) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) fsconfig$auto_SHMEM_HUGE_ADVISE(r4, 0x25800000, &(0x7f0000000140)='^\x00', &(0x7f0000000180), 0x3) write$auto(r3, 0x0, 0x1ff) 6m33.707770289s ago: executing program 0 (id=1587): mmap$auto(0x2, 0x2020009, 0x1, 0x3ab0b294, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000035, 0x0) mmap$auto(0x800000000002000, 0x200002000d, 0x8, 0xeb1, 0xffffffffffffffff, 0x20000008000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) r2 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x8000000000000d3e, 0x2, 0x948f, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x6, 0x62, 0x80000000, 0x0, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0x8000000000000a, 0x1, 0x4, 0x3, 0xa199, 0x5, 0x3, 0x8, 0x3, 0x79d, 0x80006d3e, 0x8, 0x6, 0x200000008]}, 0x0) settimeofday$auto(&(0x7f0000000040)={0x400, 0x100}, &(0x7f00000000c0)={0x8, 0x8}) r4 = prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x40) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(r4, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(r2, 0x0, 0x100000a3d9) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x10004010) close_range$auto(r0, 0x8, 0x4) timer_settime$auto(0x3, 0x268, &(0x7f00000003c0)={{0xfffffffffffffffd}, {0x7, 0x97}}, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x5, &(0x7f0000000240)='4\x93\x03\x00\x04\x00\x00', &(0x7f0000000180)="fb266912a90bbc13a209946ee669a2b93d94566d829fb927694a29f7f9ff445bb5238a9f302a0c0987bb0b12cc9bc1a815361d4d748a2ebe004fae9b855ea723ca0806da325cc5ea0a2641656f6196cd4f37f90ca369ae8a6f15d210224e865845ea86c1a5f08a6fd78daa621867028f4083a1d31ac7e6cb89a78c0d110000000000", 0x0) 6m31.960009769s ago: executing program 0 (id=1591): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getpgid$auto(0xffffffffffffffff) r1 = waitid$auto(0x6000000, 0xffffffffffffffff, &(0x7f0000000100)={@_si_pad}, 0x8, &(0x7f0000000180)={{0x7, 0x8}, {0x8, 0x8001}, 0x5, 0x2, 0xfff, 0xfffffffffffff8f4, 0xe800000000000000, 0x0, 0x401, 0x2, 0xff, 0xfffffffffffffffb, 0x253b, 0x1, 0x5, 0x3}) rt_tgsigqueueinfo$auto(r0, r1, 0x6, &(0x7f0000000240)={@_si_pad}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r3 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r3, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x2, 0x6, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) connect$auto(0x3, 0x0, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) read$auto(0x3, 0x0, 0x80) read$auto(0x4, 0x0, 0xfdef) 6m29.341236344s ago: executing program 0 (id=1598): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x14) (async) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x100) (async, rerun: 64) socket(0x2, 0x80002, 0x73) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x5, 0x0) (async, rerun: 32) socket(0xa, 0x3, 0xf2) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x9, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x1, 0x6, 0x0, 0x420, 0x1001, 0x3fdc, 0x3, 0x5}, {0x2, 0x140, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0x3}}) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22040, 0x75) (async, rerun: 32) socket(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000300)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4) (async) ioctl$auto(0x3, 0x89e1, 0x91) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) 6m28.016315892s ago: executing program 0 (id=1603): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r0, 0x0) mmap$auto(0x0, 0x400005, 0x80000000df, 0x9b72, 0x2, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x2, 0x4, 0x4, 0x7, 0xc) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/schedstat\x00', 0x2, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000040)=""/228, 0xe4) madvise$auto(0x0, 0x200007, 0x19) r2 = syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="000328bd7000fedbdf256b00000021000d01fd5736a95c80db53e7c4aadb2715ac2f8807943d1727244eba33fc42fe000000"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x4000890) mincore$auto(0x1000, 0x8001, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = pidfd_open$auto(r2, 0x0) setns(r4, 0x60020000) 6m18.952575563s ago: executing program 0 (id=1621): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setresuid$auto(0x8, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_tgids\x00', 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x100) eventfd2$auto(0x6af3, 0x800) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x9, 0xdffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x68006, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0x5c8) read$auto(0x3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 6m3.593193291s ago: executing program 33 (id=1621): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setresuid$auto(0x8, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_tgids\x00', 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x100) eventfd2$auto(0x6af3, 0x800) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x9, 0xdffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x68006, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0x5c8) read$auto(0x3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 1m47.130111012s ago: executing program 3 (id=2370): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) ioperm$auto(0x7, 0x800, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/225, 0xe1) getsockopt$auto(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x01\x00\xa8a\xe0a\x1cJ4\x00\xaaN\xc8\xf9\x12\xeb\x00\xab`{U\x04\x12\xb0\x96\x82\x1f\x16\x11_\x97\x0e\x06\xa7Y}`@\x1b\x00\x00\x00\x00\x00\x00\x00\x00\xd22z\x14z\xbf\xf94\x92mP\x87[\xa4p\x93\xd4\xe3\xe8Vhpy\xf6\xce\xbb\x8c\xb2\xc9>\xd9Y\x8d\xbe\x90\xbcu*\xc8\xdc\x0e]\x01\xd1\x9e\x0f\x05_\xfc\xb8\xeb\xd9\xb7\xa4\a\xae\xa5I\f7\x17\x91L}m\xea\r+\xecy\xe1\xe0D\x824\xfc[+\x0f\xe0\x11\xe8\x83\xc4\"\xcc&z\x8c@pC\xb2\xf6k\x14~iA?\x90Pnj\x82\xea\xf0\xfa\xe8\xe1\x81Q6\x11\xe4T\xd5\xf0\xb1\xc65tr\x8b\x83^\xa17uXf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, r5, 0xfffe) socket(0x11, 0x80003, 0x300) r6 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r6, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) r8 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0) ioctl$auto(r8, 0x901064aa, 0xffeffffffffffdff) read$auto(r7, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)="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", 0x8, &(0x7f0000000600)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf6205", 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) 1m31.948265096s ago: executing program 5 (id=2409): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400005, 0x80000000df, 0x9b72, 0x2, 0x4) mkdir$auto(0x0, 0x8001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x2, 0x4, 0x4, 0x7, 0xc) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/schedstat\x00', 0x2, 0x0) madvise$auto(0x0, 0x200007, 0x19) r1 = syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = pidfd_open$auto(r1, 0x0) setns(r2, 0x60020000) 1m30.760355529s ago: executing program 5 (id=2410): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setresuid$auto(0x8, 0x8, 0x0) close_range$auto(0x0, 0x5, 0x0) socket(0xa, 0x1, 0x100) eventfd2$auto(0x6af3, 0x800) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x68006, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0x5c8) read$auto(0x3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$auto_IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)="2b5886221337a3ec91f4d139b412788e01e2a96efa2035bfc90aa49d44551b8a2e2fdf7232a152e9413b6a67bd8251f6bc837a14ef46b152b10b6bf88a119aab8fa4eb1b9bfc9bade946f5546f580f4a1e", 0x1e) 1m29.080236267s ago: executing program 5 (id=2415): r0 = socket(0x2b, 0x1, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20040000) setsockopt$auto(r0, 0x29, 0x36, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={0x0, 0x13}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x1a000, 0x100) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x40) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(r2, &(0x7f0000000140)='[/]&].%[[[\\&.#}}\x00', 0x9, 0x7f) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fadvise64$auto(r4, 0x7ca, 0x5, 0x8) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$auto_RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000040)={0x0, 0xfe, {0xfffffe00, 0x46904f51, 0x7fffffff, 0x5, 0x24ca, 0x4471, 0x9, 0x1ff, 0xd63b}}) poll$auto(&(0x7f0000000480)={r3, 0x8000, 0xff81}, 0x7, 0x54b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) acct$auto(&(0x7f0000000280)='/dev/rtc0\x00') execve$auto(0x0, 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 1m27.6951329s ago: executing program 5 (id=2417): r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000040)="87ff42f52ca8f7ddf0a0aabb4d8be7ceade58752a307b6b3d7f5104a259ef7f948e4af0c3899106e4c30017b", 0x5, &(0x7f0000000100)={&(0x7f0000000080)="67d5225023428e362e19abf9b0025b9f4caba4ce26ca0fbe9b7964799283fb7022b7b6be20131a51a0e6b19c040a596443150d8dc173b39000c584fe875b5e9700a229da5eb1f822ab69afb69c26462896"}, 0x2000200000000000, &(0x7f0000000140)="057e1f2e41754ae9810cd7d2085b5ccf48f5dee57638dbc9b0e771e0374e330fd4610c62dbcebf77dda2fa80a0214d4e4dcd93680aca786660a11584de3041f9e5c2d3828f22981b3d8937b9db082e33bff1a1d07d0a7c76bf126d4bd88fddf6a03c2c2c5c09958bdc79eca27a8cd5279c9b806133e528c82a8dd1b78a81091ed0ef492246ab2897e4b0aedb0c811d3598e617d99428a12c724834081d3d7f637e1f0b378dcaf8e899236ed876c5fa6f70925c3b529740e0f8bb25511afef6385cad7d6f4656b3bb64ddcc9bd5ff168a9af4083b9824d4250566", 0x3, 0x1}, 0x19}, 0x4873, 0xc0000000) io_uring_register$auto_IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000280)="34c7c2b3d8c4336d51d7c91d56e682e1ec94667164d03e697c9884", 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x404002, 0x81) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, &(0x7f0000000380)=0xf) ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f00000003c0)={0x5, @raw=0x41, @inferred=r0, 0x9fc, 0x4, '\x00', {0x0, 0x1ff, 0x0, 0x0, 0xffffffffffffffff, 0xc51d, 0x3, 0xbb1, {0x80, 0x100}, {0x9, 0x1ff}, {0x8000000000000000, 0xc8011cd}, 0x9, 0x5, 0x5, 0xebf5, 0x7, 0xb35d, 0x4, 0xa3a4, 0x3, 0x9, '\x00', 0x58a, 0x2, 0x101, 0x3}}) shmctl$auto_SHM_INFO(0x5, 0xe, &(0x7f0000000640)={{0xfffffffc, 0xee01, 0xee01, 0x6, 0x614, 0x100, 0x2}, 0x9, 0x7, 0xb8, 0xfffffffffffffffa, @inferred, @raw=0xfff, 0x3, 0x0, &(0x7f0000000480)="5619140936a6252a0267d2df05a78a4c46797c326f0663ae069f29ec9094dcfff1e67047770242126fa1dfcadc84d006965981403e009a17cb8684c43b339e3b3f4a4392f04635e84707c50bec714e210f7858a6b3c8925dcbe7cc81baf724c8cc3d3504818ff8488dd7850b5c4b06fd68b117f749d7955c95a4e0204180b7b256a0bf", &(0x7f0000000540)="07ca01e26047275c4aab12a49c66ced302248d786f4900eb6dcf2e8aa442ff6d9177bb9c31c3664be4d3b7b5ee4361b302cb408d65c494deda8ad56e869a4c77a60094ffdb51c7f80b94a0dba888008944f2dc1e214d92d5ae9f6a658fe7910398f3bc75cabf2b583c9085201978aade56fe8734118423016eb17ebf56e07004bb614dd5830b06fa00ecdb4e09621128a5deefa4465d7746094bab479dc5c57d6ec58114341280bf9c5be46038a0a6a13a3bbcbcea794dd2854e37ced57e008cc97847a8ab41cda3be9d8464f5ba1315d9b038d87bd7336e3afb51f3cbbf83ffbafc5485dd0d2f"}) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000002c80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002c40)={&(0x7f00000006c0)={0x2554, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NAME_TABLE={0x1315, 0x8, 0x0, 0x1, [@nested={0x1020, 0x91, 0x0, 0x1, [@nested={0x4, 0x116}, @generic="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", @nested={0x4, 0x136}, @generic, @nested={0x4, 0xdf}, @typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x108}, @nested={0x4, 0x9d}]}, @typed={0x8, 0x12, 0x0, 0x0, @pid=r3}, @generic="efae2de27ad059b4223ab5ff8381d5de5b487e20da52965e2b1b03ad72970cb855c733abcd34378e5bc167ebd35686bb0f3ce117c7c4fc3e671e1868fd33eb45bf0aab1a040a612e15be2841894fa4e732b21a454a6f1d7473d0a80a1e6dde0794511c5053b23ed6a8c48f771fe2f3654b3271b3dedc", @typed={0x8, 0xa9, 0x0, 0x0, @uid=0xee00}, @generic="96c0fc6afdf3f7f26c19edb839db5c276af99538c8e7a5f4d82d97f590e6ea53cab9245f04d0f2901a42f69ac49e3be071255f54eaca9514cec519f4d5d30275498e276129972bc0dbc3ab3ddad2e0b19427f764184ea5ccc71411caa7622739aa91c3bace6af8fc99d59ed4d7e314bd5c9555f7a095e9e594f83e244c906db126a8e2678eaa8eead4895ec56fe3770f047eac13846bf4602534b22456714a00eb709a8a", @generic="f20ad8238558e8470f44291fe311307181c537c5ad6168f42af9a4302aaf8821502c6672fbccdcb71af620a3a8497061ccc834cc9cec9aed3bccb0ae50ab05a2d29c1ff1b9b1e129ed53b7fe77153402ce8b7a4b6011c81e01e135e3906472b6ee079afcd5a6c092425f410bfa3d25df11c498f1e90d5bb451088fc41562e593d71fbc74fc0cdd70090555013f623c70b5ec5dfa934837e0286103180048d405d6a03b9424ed17407612b2c8a3340dd5973985e7fddb10cb339af8c03b5e5bab44cef0b58769ae0f64f9995a140868e8c24f8843059a4a4c3e32ea6f370e80c2d59751e47a15fdc7be2812", @nested={0xdc, 0x10, 0x0, 0x1, [@nested={0x4, 0x12f}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7f, 0x0, 0x0, @uid=r5}, @typed={0x4, 0x107}, @generic="1773104c5074606d51eab49d2981b7daf1fdcfc2363f2f79d1cbb348fd1e6e38c97a43f6a56603a420fa564b494bffbf1e662e7356d20bc7086147b9355ac3397aa97ad76d07a9ca67c73f257f", @nested={0x4, 0x34}, @generic="d083e86a02f033d06d634d8902d1bb472a590634c228112662bd843e2578110059361a1b72542bc064f7292bbc60ba226b6395ee4be8f83c34ad72af0e24335e4e7ef8ffa7f232836d37425e0851d2057b1744feea89a847e970d18074a27bc8dd7a1e5bbb513ee1a86aeddbf61e8e"]}]}, @TIPC_NLA_MON={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@typed={0x4, 0x5f}]}, @TIPC_NLA_PUBL={0xca, 0x3, 0x0, 0x1, [@nested={0x4a, 0xe4, 0x0, 0x1, [@typed={0x8, 0xab, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x10d, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x85}, @nested={0x4, 0x6c}, @typed={0x5, 0x35, 0x0, 0x0, @str='\x00'}, @generic="1720b73370bcee44d1066c1f7a8b", @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0xbd}]}, @generic="4a7c4ae86e637c68d13926516df03049f51a4bf0e66b6ed878bb028b3bbfdf6b980057e5a77f12278d15bad39916aadcf567e3906598618307726d4b8e77988b11f1e9ad6195b0c1251d1923ad31b675d88d917d551464b8d1dead4ef50ea028e5c259d13d5611fb3bf58e788791fe5af17a14588288e8a22b90"]}, @TIPC_NLA_MON={0x1139, 0x9, 0x0, 0x1, [@typed={0x1004, 0x2c, 0x0, 0x0, @binary="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"}, @generic="fc72a4529c7209b92c6a3ac43fd6553f3c8ed3d1da67e7ed1f770e508751a4caa92466d66cc28986cded8c1a9384e31f70ed21ba3251fac34b75f1007beab8add26419125d9393d24cde5a8f53fe04987257f1d37d77e5b01599bd72f383f2f093373bc1405cc63ca7c44f5b4fcb3cee1dfe7a96cfbac1a783c3e4e71fc1cce952a46a764cfefe6524972087d6d0f348819404601283214a863b", @generic="65994dd4a67688096d0ccb463df22c488004b4619c3ea8c6464a53829c82ab423d341b8db79edd822b5e6127be9053f4ae062db31ad5d4422017deb2ab802a540da013a6578585fb80a1d39f640ad3af3fb4617cf7b978b2bbbc67f738898c99fd6c2191fdf6d90aa056c544fbf786b5508437e879fd2930900959ab1cf35f32c6e45f3e7329fcafbba565c1bb5ad326bbce0bb5f5626d"]}]}, 0x2554}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002cc0)='/dev/tty23\x00', 0x800, 0x0) fcntl$auto_F_NOTIFY(r7, 0x402, 0x77) getpriority$auto_PRIO_USER(0x2, r5) set_mempolicy_home_node$auto(0x80, 0xf8, 0x0, 0x1dfa) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002d40), r4) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x20, r8, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x1) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000002e40)='/dev/input/event1\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000002e80)="5c99ab990f002a52e414d27ed7cc149f00ee970e4b143632537aab9a419af0175e7839603884c757825ac7") ioctl$auto_VHOST_GET_FEATURES2(r4, 0x8008af00, &(0x7f0000002ec0)=0x1) set_mempolicy_home_node$auto(0x0, 0x4, 0x26db, 0x3) read$auto_media_devnode_fops_mc_devnode(r1, &(0x7f0000002f00)=""/32, 0x20) ioctl$auto_FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000002f40)="81d4f6bfe3c0ad27b7f81376cf580677e3902d776031102d2777e0491deb58219078dd762b1e561861d5d54cf11ee1990289bd5b5c6684dd2eb37944971cd4f6d9d2a7f59c076fee4f286de7dd7a7384a389ab533626337b539e0ffe96b5105ca02285a80c4152c17ff318147584574f0bf0bbd6b622c622cdc11eae62a86078ae2939f98a") setsockopt$auto_SO_RCVBUFFORCE(r7, 0x7, 0x21, &(0x7f0000003000)='/dev/input/event1\x00', 0x2) openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000003040)='/sys/kernel/debug/ieee80211/phy17/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats\x00', 0x4000, 0x0) sendmsg$auto_NL80211_CMD_SET_BEACON(r4, &(0x7f0000003440)={&(0x7f00000030c0), 0xc, &(0x7f0000003400)={&(0x7f0000003100)={0x300, r8, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2d2, 0x6e, 0x0, 0x1, [@generic="88d028b4744cd51c3d685e394d6ffcd1809c1ba0775bf205d3546fabd613a6a6d4e4a33fee7458389b9ea6edc61beeb62da77c0abcade4bf481fbb937b528d78b36d4af613d58399858fe5a651974935c385e69e21a943f3a1c74a09bc593149e494db5bd307c8dbf257fbe6b9682710c62f35c75e6c5ec5e48d3bddd1488bb7a63d9cb093598db41370a0dac7de6d0fa267d1d426184bf59371ad2adfdc22dae4bb0a57d90ea94e3ac4c7007e2ebeb7c9e78454e9c1c9b3f3c3f193d7a6", @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x1e1, 0xfa, 0x0, 0x1, [@nested={0x4, 0x1b}, @generic="ce2dce65cae29619a19d343d439189422a11f0b9cfe58315c6ac0e71f19f64154b531224874398679a45c8f580f37fe9e56ad44d844c006f217c30b7243c1170808ab3afc270283827cf1b4517ad96be325ddda026f9208f1df96d7bbf4a5ffcba8900772e74b4dfb5439d9c9a7754ccb8a2e16ab41a317f0b21973a2ae05cc4caffd56f957fa18941fd06e91d321e676e32cb7c23296957af8e0c7bc479db2c9e25fe4cdf415485c74de90488419e2e7596a32877e9bb2b73a1b008ef564d58c0522af6b690286bbf90034341b1f827d5d9ecf0dc9767aa962b4bdeade238fb6104584ac29471", @generic="608227ce450745fe48085f475afb17d29a06eef38b06f5c9ead2f741bd24f45053bd02bf89175d53851e71bb9e6dd0c464570a05af37a5d3726967f91e7d9fff401269ed9b4a07541b4eb5f209273d1ea3f84fa4a113418a84849cf6ea696acdd84d8a7ea5a8bbc4b77ed89b3bfe49fd7525407f05172985841e2e1299bdbbe2744ce96b24506d9b7924f848930a831de7207a59ff25f56c162e3fd15799dd446f0736fb60f9df6b7631619b52f5f8edd41990c406030bae2040d55cc507fe9c5528697aa782a8a8e1ab", @nested={0x4, 0x11e}, @typed={0x14, 0xb1, 0x0, 0x0, @ipv6=@loopback}, @typed={0x4, 0x113}, @typed={0x5, 0x35, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xaf}]}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x4e}, @nested={0x18, 0x34, 0x0, 0x1, [@typed={0x4, 0x75}, @nested={0x4, 0xfa}, @nested={0x4, 0xa4}, @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x6}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xf}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x20008082}, 0x2009005) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0xf1, 0x52, &(0x7f0000003480)='@.#^\x00', &(0x7f00000034c0)=0x9) mmap$auto(0x9, 0x10000, 0x5, 0xffffffffffff865b, r0, 0x2) set_mempolicy_home_node$auto(0xffffffff, 0x8100000000000000, 0xffffffff, 0x6) r9 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000003500)='/dev/sequencer2\x00', 0x101040, 0x0) fsconfig$auto_SHMEM_HUGE_NEVER(r9, 0x1, &(0x7f0000003540)='$\'!#\x00', &(0x7f0000003580)="a5092b2f698d8f7fafef764dbd30", 0x0) pread64$auto(r4, &(0x7f00000035c0)='$\'!#\x00', 0x2, 0x7) 1m26.718900344s ago: executing program 5 (id=2418): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400005, 0x80000000df, 0x9b72, 0x2, 0x4) mkdir$auto(0x0, 0x8001) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x2, 0x4, 0x4, 0x7, 0xc) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/limits\x00', 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns(0xffffffffffffffff, 0x60020000) 1m25.639994461s ago: executing program 5 (id=2420): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/lockd/nlm_end_grace\x00', 0x480580, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x408) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x1) 1m10.197774911s ago: executing program 34 (id=2420): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/lockd/nlm_end_grace\x00', 0x480580, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x408) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x1) 23.677238744s ago: executing program 4 (id=2545): mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x9a28) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) read$auto_proc_fail_nth_operations_base(r1, &(0x7f0000000040)=""/221, 0xdd) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x540, 0x0) r3 = prctl$auto_PR_SET_SECCOMP(0x16, 0x9d9, 0x879, 0x1, 0xc606) write$auto_buffer_percent_fops_trace(r3, &(0x7f00000001c0)="dbfe17262f658241b1413a667aaf8ccce5568fd198858540d847b75cfeead603d108cb5efbebc459a98c", 0x2a) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000003dc0), 0x402800, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0x1000, 0x0) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) read$auto_proc_oom_score_adj_operations_base(0xffffffffffffffff, &(0x7f0000003e40)=""/4096, 0x1000) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003e00)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r5 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r5, 0x0, 0xfffffff9, 0x10, 0x0) setresuid$auto(0xf5, 0x8000, 0x67) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 22.726062222s ago: executing program 4 (id=2546): r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x86, 0x0, &(0x7f0000000000)=0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority$auto_PRIO_PGRP(0x1, r2, 0xfff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af23, r3) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r5, 0x0, 0x39b8) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r6, 0x227b, 0x0) read$auto(r6, 0x0, 0x57) mmap$auto(0x0, 0x2020009, 0x80000001, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x4, 0xb3) madvise$auto(0x0, 0x2003f2, 0x15) 21.143374207s ago: executing program 4 (id=2548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004540)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0xc9, 0x0, 0x1, [@nested={0x20, 0x90, 0x0, 0x1, [@nested={0x1c, 0x9, 0x0, 0x1, [@nested={0x18, 0xa4, 0x0, 0x1, [@typed={0x14, 0x87, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}]}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) (fail_nth: 11) 20.940284692s ago: executing program 4 (id=2549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004540)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0xc9, 0x0, 0x1, [@nested={0x20, 0x90, 0x0, 0x1, [@nested={0x1c, 0x9, 0x0, 0x1, [@nested={0x18, 0xa4, 0x0, 0x1, [@typed={0x14, 0x87, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}]}]}]}]}]}, 0x40}, 0x1, 0xb00, 0x0, 0x48080}, 0x20000000) 20.757921615s ago: executing program 4 (id=2550): mmap$auto(0xfffffffffffffffe, 0x408008, 0x1, 0x16, 0xffffffffffffffff, 0x51) madvise$auto(0x0, 0x200007, 0x19) adjtimex$auto(&(0x7f00000004c0)={0xf332a6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x200000000000001, 0x3692, 0x2, {0x1, 0x10000}, 0x5, 0x6, 0xfffffffffffffffc, 0x1008000, 0x0, 0x9, 0x7fffffff, 0x8, 0x6, 0xdeb1, 0x808}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x4831) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/250, 0xfa) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x400c058) io_uring_setup$auto(0x1, 0x0) unshare$auto(0x40000080) 19.141778049s ago: executing program 4 (id=2551): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x3, 0x2000000000230006, 0x4, 0x6, 0x5, 0x2, 0x7, 0xaf, 0x6, 0x24, 0x3, 0x103, 0xfffffffffffffff7, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x8, 0x4, 0x5, 0x2) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2c0c02, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0) read$auto(r1, &(0x7f0000000440)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xecC\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb08\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk\x02_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1e\xe9T1\xbf\xc8_^\a\x03\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xddC\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3\xb0\x84\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda+U\b\x88\xa7\x88\x1fC\xbb\xa8\xce\x0f\xd5\xdew\x99\x18G.s\x16\xfa\xf2\x96|\x1e]\xe5\xf8\xb1\x8b.}\x841\xd8\x98\xd8f86h\xab\x94\x7f\xc4<\x03\xdd\x86=\xb6\x1e@\xab6\x81\xce\xaa\xcf\xfd\x947\xc3\x86\xfe\xb7O\xd9\xa9\xb6[\xcc\xd8\xe1\xa9\x84[\xe0\xd4\x03\x90@\x03\xbe\xba\xee\xed\xe9\xb1\xd2\xf1\x8cgn\xb7m/\xf1\"\xc2\xeb\x1d\x04\xf3\xf1\x96\xf2\x00C\xf0wg\xd6\x11\x18\xb5o\x9d\xd7`\xce\x81\x9b1b\x8ce\x99*\xa3\xd2\x8dAw\xd9\xa6l\\\x17\xbb\xf6\xe2\xa2<\n\xc0\f:\x97\xff\xc6y\x05<\xa6\x81\xd92\xc9\x9e\f[\xf9\xfc\xf1ih\"J\x92\xd2\xd4\xc2\xe8\x89 \x81\xbf8C\xa9\x1at\xa1\xdc\x94\xc5\xc8K\xbb\x14h\xa9)\xaa\xf2\xda\xaf\xb1\rs\xe6\x97\x1e\xcc6\x94\xff\x1b\x8e\x98\xf7\xa0', 0x67b) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/netdevsim/netdevsim3/ports/3/udp_ports_reset\x00', 0x2000, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000001540), 0x900, 0x0) ioctl$auto_SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000001580)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004bc0)=ANY=[], 0x21e8}, 0x1, 0x0, 0x0, 0x24000055}, 0x804) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000810) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x0, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) 4.684601894s ago: executing program 2 (id=2562): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x800, 0x9) mmap$auto(0x3, 0x2020009, 0x8, 0xe72, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) dup$auto(r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x400000008000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/wbt_lat_usec\x00', 0x2101, 0x0) write$auto(r4, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000280)=""/175, 0xaf) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/queues/tx-0/tx_maxrate\x00', 0x10b142, 0x0) read$auto(r5, &(0x7f0000000000)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/queues/tx-0/tx_maxrate\x00', 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3.521961408s ago: executing program 35 (id=2551): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x3, 0x2000000000230006, 0x4, 0x6, 0x5, 0x2, 0x7, 0xaf, 0x6, 0x24, 0x3, 0x103, 0xfffffffffffffff7, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x8, 0x4, 0x5, 0x2) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2c0c02, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0) read$auto(r1, &(0x7f0000000440)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xecC\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb08\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk\x02_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1e\xe9T1\xbf\xc8_^\a\x03\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xddC\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3\xb0\x84\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda+U\b\x88\xa7\x88\x1fC\xbb\xa8\xce\x0f\xd5\xdew\x99\x18G.s\x16\xfa\xf2\x96|\x1e]\xe5\xf8\xb1\x8b.}\x841\xd8\x98\xd8f86h\xab\x94\x7f\xc4<\x03\xdd\x86=\xb6\x1e@\xab6\x81\xce\xaa\xcf\xfd\x947\xc3\x86\xfe\xb7O\xd9\xa9\xb6[\xcc\xd8\xe1\xa9\x84[\xe0\xd4\x03\x90@\x03\xbe\xba\xee\xed\xe9\xb1\xd2\xf1\x8cgn\xb7m/\xf1\"\xc2\xeb\x1d\x04\xf3\xf1\x96\xf2\x00C\xf0wg\xd6\x11\x18\xb5o\x9d\xd7`\xce\x81\x9b1b\x8ce\x99*\xa3\xd2\x8dAw\xd9\xa6l\\\x17\xbb\xf6\xe2\xa2<\n\xc0\f:\x97\xff\xc6y\x05<\xa6\x81\xd92\xc9\x9e\f[\xf9\xfc\xf1ih\"J\x92\xd2\xd4\xc2\xe8\x89 \x81\xbf8C\xa9\x1at\xa1\xdc\x94\xc5\xc8K\xbb\x14h\xa9)\xaa\xf2\xda\xaf\xb1\rs\xe6\x97\x1e\xcc6\x94\xff\x1b\x8e\x98\xf7\xa0', 0x67b) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/netdevsim/netdevsim3/ports/3/udp_ports_reset\x00', 0x2000, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000001540), 0x900, 0x0) ioctl$auto_SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000001580)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004bc0)=ANY=[], 0x21e8}, 0x1, 0x0, 0x0, 0x24000055}, 0x804) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000810) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x0, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) 3.505907158s ago: executing program 2 (id=2564): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) execve$auto(0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x800, 0x0) read$auto_dfs_cpu_ops_debugfs(r0, &(0x7f00000000c0)=""/128, 0x80) lseek$auto(0x0, 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x7, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xc40, 0x0) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r5 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) fsconfig$auto_SHMEM_HUGE_ADVISE(r5, 0x25800000, &(0x7f0000000140)='^\x00', &(0x7f0000000180), 0x3) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$auto(r4, 0x0, 0x1ff) 2.961802481s ago: executing program 2 (id=2565): socket(0x2, 0x3, 0xa) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) write$auto(r0, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xd542, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x80002, 0x19, 0x3fd, 0x80015f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\xdb\x97(\xf5', 0x100000a3d9) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000680)="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", 0x658) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x9, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x402080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) 1.429970826s ago: executing program 2 (id=2566): r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_futex/probability\x00', 0x54001, 0x0) mmap$auto(0x2, 0x2020009, 0x23, 0xebd, r0, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3e, 0x0) fsopen$auto(0x0, 0x1) socket(0x15, 0x5, 0x0) r1 = socket(0x25, 0x1, 0x0) sendto$auto(r1, 0x0, 0x0, 0x0, 0x0, 0x3) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) socket(0xa, 0x1, 0x100) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/45, 0x2d) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x5, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x6, 0x3fd6, 0x0, 0x1ffffffe) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r6, &(0x7f0000001680)="a7", 0x80000) 367.640686ms ago: executing program 2 (id=2567): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x88) r0 = prctl$auto_PR_SET_MM_END_DATA(0x2, 0x4, 0xffffffffffffffff, 0x6b2, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r1, 0x5501, 0x1f) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r2, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 0s ago: executing program 2 (id=2568): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000780), 0x20101, 0x0) mmap$auto(0x0, 0x20009, 0xdc, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000fbdbdf25141738000000b6674803d2ae5457ad70a306ed1e9feb5ca634a41840f86baeee74832cba5c8ef57162e76c4bb3cd5ac4a3c1e3d422b606036a6f3f"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000100)={@raw=0x9da7, 0x7, 0x0, @btrfs_ioctl_vol_args_v2_3_0={0x7, &(0x7f0000000080)={0x1, 0x2, 0x4, 0x8, {0x8003, 0x8000, 0x88f, 0x6, 0x1}, [0x7b, 0x2d10, 0x0, 0xffffffffffffffff, 0x9, 0x7fffffff]}}, @devid}) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001200)=@link_update={r2, @new_map_fd=r2, 0x8001, @old_map_fd=r2}, 0x5) open_tree$auto(0x6, 0x0, 0x101) r3 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy13/hwflags\x00', 0x400401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_TP_METER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044010}, 0x44800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_STARTING_UP(r6, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r7, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x10) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE_EXT(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4000801) read$auto_hwflags_ops_debugfs(r3, &(0x7f0000000040)=""/6, 0x6) fcntl$auto_F_OFD_SETLK(r2, 0x25, 0x7) kernel console output (not intermixed with test programs): 6914] __d_alloc+0x32/0xae0 [ 851.868742][T16914] d_alloc_pseudo+0x1c/0xc0 [ 851.868794][T16914] alloc_file_pseudo+0xcf/0x230 [ 851.868849][T16914] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 851.868901][T16914] ? alloc_fd+0x471/0x7d0 [ 851.868954][T16914] sock_alloc_file+0x50/0x210 [ 851.868990][T16914] __sys_socket+0x1c0/0x260 [ 851.869031][T16914] ? __pfx___sys_socket+0x10/0x10 [ 851.869071][T16914] ? ksys_read+0x1ac/0x250 [ 851.869109][T16914] ? __pfx_ksys_read+0x10/0x10 [ 851.869157][T16914] __x64_sys_socket+0x72/0xb0 [ 851.869197][T16914] ? lockdep_hardirqs_on+0x7c/0x110 [ 851.869248][T16914] do_syscall_64+0xcd/0x4c0 [ 851.869305][T16914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.869340][T16914] RIP: 0033:0x7fd7c138eba9 [ 851.869366][T16914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.869399][T16914] RSP: 002b:00007fd7c2231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 851.869431][T16914] RAX: ffffffffffffffda RBX: 00007fd7c15d5fa0 RCX: 00007fd7c138eba9 [ 851.869452][T16914] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 851.869471][T16914] RBP: 00007fd7c1411e19 R08: 0000000000000000 R09: 0000000000000000 [ 851.869490][T16914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.869508][T16914] R13: 00007fd7c15d6038 R14: 00007fd7c15d5fa0 R15: 00007ffe546a7dd8 [ 851.869550][T16914] [ 852.077009][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.888041][T16933] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 854.885445][T16963] FAULT_INJECTION: forcing a failure. [ 854.885445][T16963] name failslab, interval 1, probability 0, space 0, times 0 [ 854.977865][T16963] CPU: 1 UID: 8 PID: 16963 Comm: syz.5.2191 Tainted: G U syzkaller #0 PREEMPT(full) [ 854.977916][T16963] Tainted: [U]=USER [ 854.977932][T16963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 854.977950][T16963] Call Trace: [ 854.977960][T16963] [ 854.977972][T16963] dump_stack_lvl+0x16c/0x1f0 [ 854.978027][T16963] should_fail_ex+0x512/0x640 [ 854.978076][T16963] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 854.978127][T16963] should_failslab+0xc2/0x120 [ 854.978170][T16963] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 854.978209][T16963] ? __d_alloc+0x32/0xae0 [ 854.978254][T16963] __d_alloc+0x32/0xae0 [ 854.978298][T16963] d_alloc_pseudo+0x1c/0xc0 [ 854.978346][T16963] alloc_file_pseudo+0xcf/0x230 [ 854.978413][T16963] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 854.978462][T16963] ? alloc_fd+0x471/0x7d0 [ 854.978503][T16963] sock_alloc_file+0x50/0x210 [ 854.978536][T16963] __sys_socket+0x1c0/0x260 [ 854.978575][T16963] ? __pfx___sys_socket+0x10/0x10 [ 854.978614][T16963] ? xfd_validate_state+0x61/0x180 [ 854.978661][T16963] ? __pfx_ksys_read+0x10/0x10 [ 854.978706][T16963] __x64_sys_socket+0x72/0xb0 [ 854.978751][T16963] ? lockdep_hardirqs_on+0x7c/0x110 [ 854.978798][T16963] do_syscall_64+0xcd/0x4c0 [ 854.978850][T16963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.978883][T16963] RIP: 0033:0x7f253998eba9 [ 854.978906][T16963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.978937][T16963] RSP: 002b:00007f2537bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 854.978967][T16963] RAX: ffffffffffffffda RBX: 00007f2539bd5fa0 RCX: 00007f253998eba9 [ 854.978988][T16963] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 854.979007][T16963] RBP: 00007f2539a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 854.979027][T16963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.979045][T16963] R13: 00007f2539bd6038 R14: 00007f2539bd5fa0 R15: 00007ffd5936df18 [ 854.979085][T16963] [ 856.034047][T16951] Process accounting paused [ 856.952779][T16940] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 857.051568][T16981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 857.058050][T16981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 857.069392][T16981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 857.134457][T16981] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 857.140743][T16981] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 857.147876][T16981] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 857.247258][T16994] vivid-007: ================= START STATUS ================= [ 857.323157][T16994] vivid-007: Generate PTS: true [ 857.361426][T16994] vivid-007: Generate SCR: true [ 857.385739][T16994] tpg source WxH: 320x240 (Y'CbCr) [ 857.392422][T16994] tpg field: 1 [ 857.425302][T16994] tpg crop: (0,0)/320x240 [ 857.493534][T16994] tpg compose: (0,0)/320x240 [ 857.498207][T16994] tpg colorspace: 8 [ 857.540480][T16994] tpg transfer function: 0/0 [ 857.560140][T16994] tpg Y'CbCr encoding: 0/0 [ 857.566474][T16994] tpg quantization: 0/0 [ 857.587006][T16994] tpg RGB range: 0/2 [ 857.605403][T16994] vivid-007: ================== END STATUS ================== [ 858.035149][T16994] can: request_module (can-proto-0) failed. [ 858.434810][ T5872] Bluetooth: hci2: command 0x0c1a tx timeout [ 859.037669][T17024] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2202'. [ 859.051675][T17024] mac80211_hwsim hwsim8 : renamed from wlan0 (while UP) [ 859.071160][ T5872] Bluetooth: hci1: command 0x0c1a tx timeout [ 859.077236][ T5872] Bluetooth: hci3: command 0x0c1a tx timeout [ 859.150637][ T5872] Bluetooth: hci5: command 0x0c1a tx timeout [ 859.158093][T10985] Bluetooth: hci4: command 0x0406 tx timeout [ 860.217383][T17052] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 861.218396][ T5872] Bluetooth: hci5: command 0x0c1a tx timeout [ 863.110223][T17105] FAULT_INJECTION: forcing a failure. [ 863.110223][T17105] name failslab, interval 1, probability 0, space 0, times 0 [ 863.159912][T17105] CPU: 0 UID: 8 PID: 17105 Comm: syz.5.2218 Tainted: G U syzkaller #0 PREEMPT(full) [ 863.159965][T17105] Tainted: [U]=USER [ 863.159977][T17105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 863.159997][T17105] Call Trace: [ 863.160007][T17105] [ 863.160019][T17105] dump_stack_lvl+0x16c/0x1f0 [ 863.160075][T17105] should_fail_ex+0x512/0x640 [ 863.160124][T17105] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 863.160168][T17105] should_failslab+0xc2/0x120 [ 863.160212][T17105] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 863.160251][T17105] ? d_instantiate+0x77/0x90 [ 863.160292][T17105] ? alloc_empty_file+0x55/0x1e0 [ 863.160346][T17105] alloc_empty_file+0x55/0x1e0 [ 863.160395][T17105] alloc_file_pseudo+0x13a/0x230 [ 863.160448][T17105] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 863.160506][T17105] ? alloc_fd+0x471/0x7d0 [ 863.160548][T17105] sock_alloc_file+0x50/0x210 [ 863.160581][T17105] __sys_socket+0x1c0/0x260 [ 863.160620][T17105] ? __pfx___sys_socket+0x10/0x10 [ 863.160658][T17105] ? xfd_validate_state+0x61/0x180 [ 863.160702][T17105] ? __pfx_ksys_read+0x10/0x10 [ 863.160748][T17105] __x64_sys_socket+0x72/0xb0 [ 863.160786][T17105] ? lockdep_hardirqs_on+0x7c/0x110 [ 863.160833][T17105] do_syscall_64+0xcd/0x4c0 [ 863.160887][T17105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.160919][T17105] RIP: 0033:0x7f253998eba9 [ 863.160944][T17105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.160976][T17105] RSP: 002b:00007f2537bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 863.161008][T17105] RAX: ffffffffffffffda RBX: 00007f2539bd5fa0 RCX: 00007f253998eba9 [ 863.161030][T17105] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 863.161050][T17105] RBP: 00007f2539a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 863.161071][T17105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.161091][T17105] R13: 00007f2539bd6038 R14: 00007f2539bd5fa0 R15: 00007ffd5936df18 [ 863.161134][T17105] [ 863.371601][ C0] vkms_vblank_simulate: vblank timer overrun [ 863.708884][T17099] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input32 [ 865.191859][T17132] FAULT_INJECTION: forcing a failure. [ 865.191859][T17132] name fail_futex, interval 1, probability 0, space 0, times 0 [ 865.214970][T17132] CPU: 0 UID: 0 PID: 17132 Comm: syz.3.2224 Tainted: G U syzkaller #0 PREEMPT(full) [ 865.215020][T17132] Tainted: [U]=USER [ 865.215029][T17132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 865.215046][T17132] Call Trace: [ 865.215056][T17132] [ 865.215069][T17132] dump_stack_lvl+0x16c/0x1f0 [ 865.215133][T17132] should_fail_ex+0x512/0x640 [ 865.215189][T17132] get_futex_key+0x1d0/0x1560 [ 865.215233][T17132] ? __pfx_get_futex_key+0x10/0x10 [ 865.215267][T17132] ? find_held_lock+0x2b/0x80 [ 865.215299][T17132] ? find_held_lock+0x2b/0x80 [ 865.215331][T17132] ? follow_page_pte.constprop.0+0x8fb/0x1390 [ 865.215391][T17132] futex_wait_setup+0x9d/0x550 [ 865.215439][T17132] __futex_wait+0x194/0x2f0 [ 865.215487][T17132] ? __pfx___futex_wait+0x10/0x10 [ 865.215541][T17132] ? __pfx_futex_wake_mark+0x10/0x10 [ 865.215592][T17132] ? futex_private_hash_put+0x176/0x300 [ 865.215634][T17132] ? futex_private_hash_put+0x18a/0x300 [ 865.215674][T17132] futex_wait+0xe8/0x380 [ 865.215720][T17132] ? __pfx_futex_wait+0x10/0x10 [ 865.215776][T17132] ? __mm_populate+0x299/0x380 [ 865.215815][T17132] do_futex+0x229/0x350 [ 865.215858][T17132] ? __pfx_do_futex+0x10/0x10 [ 865.215916][T17132] ? do_mlock+0x395/0x810 [ 865.215959][T17132] __x64_sys_futex+0x1e0/0x4c0 [ 865.216003][T17132] ? fput+0x9b/0xd0 [ 865.216047][T17132] ? __pfx___x64_sys_futex+0x10/0x10 [ 865.216097][T17132] ? xfd_validate_state+0x61/0x180 [ 865.216147][T17132] ? __pfx_ksys_write+0x10/0x10 [ 865.216198][T17132] do_syscall_64+0xcd/0x4c0 [ 865.216253][T17132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.216287][T17132] RIP: 0033:0x7fd7c138eba9 [ 865.216313][T17132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.216345][T17132] RSP: 002b:00007fd7c22310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 865.216376][T17132] RAX: ffffffffffffffda RBX: 00007fd7c15d5fa8 RCX: 00007fd7c138eba9 [ 865.216397][T17132] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd7c15d5fa8 [ 865.216415][T17132] RBP: 00007fd7c15d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 865.216434][T17132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.216453][T17132] R13: 00007fd7c15d6038 R14: 00007ffe546a7cf0 R15: 00007ffe546a7dd8 [ 865.216493][T17132] [ 865.458060][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.252980][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 869.217299][T17179] LfLER: entered promiscuous mode [ 871.590902][T17195] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 871.865833][T17215] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 873.949896][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.956449][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.179927][T17240] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2244'. [ 874.415640][T17251] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input33 [ 877.943849][T17260] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 878.115833][T17279] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 880.110473][T17307] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2258'. [ 880.168239][T17307] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2258'. [ 880.866970][T17237] ima: policy update failed [ 880.871728][ T30] audit: type=1802 audit(1269.026:34): pid=17237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2243" res=0 errno=0 [ 882.294439][T17316] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 883.759136][T17336] zswap: compressor not available [ 884.376930][T17368] CIFS mount error: No usable UNC path provided in device string! [ 884.376930][T17368] [ 884.443727][T17367] svc: failed to register nfsdv3 RPC service (errno 111). [ 884.495949][T17367] svc: failed to register nfsaclv3 RPC service (errno 111). [ 884.533075][T17368] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 885.870026][T17386] netlink: get zone limit has 4 unknown bytes [ 885.936995][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 886.007776][T17389] Process accounting resumed [ 886.733182][T17393] FAULT_INJECTION: forcing a failure. [ 886.733182][T17393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.828508][T17393] CPU: 1 UID: 0 PID: 17393 Comm: syz.3.2278 Tainted: G U syzkaller #0 PREEMPT(full) [ 886.828558][T17393] Tainted: [U]=USER [ 886.828575][T17393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 886.828594][T17393] Call Trace: [ 886.828604][T17393] [ 886.828617][T17393] dump_stack_lvl+0x16c/0x1f0 [ 886.828670][T17393] should_fail_ex+0x512/0x640 [ 886.828729][T17393] _copy_to_user+0x32/0xd0 [ 886.828766][T17393] simple_read_from_buffer+0xcb/0x170 [ 886.828805][T17393] proc_fail_nth_read+0x197/0x240 [ 886.828842][T17393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 886.828878][T17393] ? rw_verify_area+0xcf/0x6c0 [ 886.828917][T17393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 886.828952][T17393] vfs_read+0x1e1/0xcf0 [ 886.828993][T17393] ? __pfx___mutex_lock+0x10/0x10 [ 886.829042][T17393] ? __pfx_vfs_read+0x10/0x10 [ 886.829086][T17393] ? __fget_files+0x20e/0x3c0 [ 886.829135][T17393] ksys_read+0x12a/0x250 [ 886.829171][T17393] ? __pfx_ksys_read+0x10/0x10 [ 886.829222][T17393] do_syscall_64+0xcd/0x4c0 [ 886.829274][T17393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.829308][T17393] RIP: 0033:0x7fd7c138d5bc [ 886.829333][T17393] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 886.829364][T17393] RSP: 002b:00007fd7c2231030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 886.829395][T17393] RAX: ffffffffffffffda RBX: 00007fd7c15d5fa0 RCX: 00007fd7c138d5bc [ 886.829416][T17393] RDX: 000000000000000f RSI: 00007fd7c22310a0 RDI: 0000000000000006 [ 886.829436][T17393] RBP: 00007fd7c2231090 R08: 0000000000000000 R09: 0000000000000000 [ 886.829455][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.829474][T17393] R13: 00007fd7c15d6038 R14: 00007fd7c15d5fa0 R15: 00007ffe546a7dd8 [ 886.829516][T17393] [ 887.508484][T17424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2284'. [ 887.586962][T17426] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 889.295629][T17453] __vm_enough_memory: pid: 17453, comm: syz.3.2289, bytes: 4398046511104 not enough memory for the allocation [ 890.478098][T17472] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 891.949678][T17456] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 892.425789][T10985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 892.451784][T10985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 892.460741][T10985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 892.470665][T10985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 892.478693][T10985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 893.192351][ T30] audit: type=1807 audit(1281.604:35): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 893.236350][ T30] audit: type=1802 audit(1281.624:36): pid=17497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.2298" res=0 errno=0 [ 893.748095][T17497] ima: policy update failed [ 893.856213][ T30] audit: type=1802 audit(1282.280:37): pid=17497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2298" res=0 errno=0 [ 894.503202][T10985] Bluetooth: hci0: command tx timeout [ 895.024373][T14878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.189572][T17485] chnl_net:caif_netlink_parms(): no params data found [ 895.467218][T14878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.829401][T14878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.289632][T14878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.374610][T17485] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.390954][T17485] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.438999][T17485] bridge_slave_0: entered allmulticast mode [ 896.465345][T17485] bridge_slave_0: entered promiscuous mode [ 896.487101][T17485] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.551916][T10985] Bluetooth: hci0: command tx timeout [ 896.576721][T17485] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.584534][T17485] bridge_slave_1: entered allmulticast mode [ 896.593788][T17485] bridge_slave_1: entered promiscuous mode [ 896.734328][T17485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.789724][T17485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.948130][T17485] team0: Port device team_slave_0 added [ 897.081659][T17485] team0: Port device team_slave_1 added [ 897.538295][T17485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.560282][T17485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.736475][T17485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.409195][T17551] FAULT_INJECTION: forcing a failure. [ 898.409195][T17551] name failslab, interval 1, probability 0, space 0, times 0 [ 898.451606][T17551] CPU: 1 UID: 8 PID: 17551 Comm: syz.3.2307 Tainted: G U syzkaller #0 PREEMPT(full) [ 898.451660][T17551] Tainted: [U]=USER [ 898.451670][T17551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 898.451690][T17551] Call Trace: [ 898.451702][T17551] [ 898.451715][T17551] dump_stack_lvl+0x16c/0x1f0 [ 898.451772][T17551] should_fail_ex+0x512/0x640 [ 898.451826][T17551] ? __kmalloc_noprof+0xbf/0x510 [ 898.451869][T17551] ? process_preds+0x48b/0x1c50 [ 898.451909][T17551] should_failslab+0xc2/0x120 [ 898.451955][T17551] __kmalloc_noprof+0xd2/0x510 [ 898.452005][T17551] process_preds+0x48b/0x1c50 [ 898.452064][T17551] ? create_filter_start.constprop.0+0x56/0x300 [ 898.452114][T17551] create_filter+0x140/0x210 [ 898.452157][T17551] ? __pfx_create_filter+0x10/0x10 [ 898.452204][T17551] ? __pfx___mutex_lock+0x10/0x10 [ 898.452253][T17551] ? find_held_lock+0x2b/0x80 [ 898.452290][T17551] apply_event_filter+0x220/0x500 [ 898.452335][T17551] ? __pfx_apply_event_filter+0x10/0x10 [ 898.452389][T17551] event_filter_write+0x16d/0x290 [ 898.452443][T17551] ? __pfx_event_filter_write+0x10/0x10 [ 898.452492][T17551] vfs_write+0x29d/0x11d0 [ 898.452538][T17551] ? __pfx___mutex_lock+0x10/0x10 [ 898.452589][T17551] ? __pfx_vfs_write+0x10/0x10 [ 898.452639][T17551] ? __fget_files+0x20e/0x3c0 [ 898.452689][T17551] ksys_write+0x12a/0x250 [ 898.452728][T17551] ? __pfx_ksys_write+0x10/0x10 [ 898.452781][T17551] do_syscall_64+0xcd/0x4c0 [ 898.452837][T17551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.452871][T17551] RIP: 0033:0x7fd7c138eba9 [ 898.452899][T17551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.452932][T17551] RSP: 002b:00007fd7c2231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 898.452963][T17551] RAX: ffffffffffffffda RBX: 00007fd7c15d5fa0 RCX: 00007fd7c138eba9 [ 898.452984][T17551] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 898.453004][T17551] RBP: 00007fd7c1411e19 R08: 0000000000000000 R09: 0000000000000000 [ 898.453025][T17551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.453045][T17551] R13: 00007fd7c15d6038 R14: 00007fd7c15d5fa0 R15: 00007ffe546a7dd8 [ 898.453097][T17551] [ 898.762053][T10985] Bluetooth: hci0: command tx timeout [ 899.503252][T17538] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 900.241630][T14878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.243683][T14878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.248222][T14878] bond0 (unregistering): Released all slaves [ 900.306916][T17485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.306933][T17485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.306964][T17485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.459553][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.765073][T10985] Bluetooth: hci0: command tx timeout [ 900.881899][T17485] hsr_slave_0: entered promiscuous mode [ 900.895643][T17485] hsr_slave_1: entered promiscuous mode [ 900.902077][T17485] debugfs: 'hsr0' already exists in 'hsr' [ 900.912289][T17485] Cannot create hsr debugfs directory [ 903.245664][T14878] hsr_slave_0: left promiscuous mode [ 903.267848][T14878] hsr_slave_1: left promiscuous mode [ 903.283978][T14878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.307002][T14878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.336550][T14878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.364642][T14878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.428233][T14878] veth1_vlan: left promiscuous mode [ 903.451877][T14878] veth0_vlan: left promiscuous mode [ 904.472274][T14878] team0 (unregistering): Port device team_slave_1 removed [ 904.574902][T14878] team0 (unregistering): Port device team_slave_0 removed [ 906.928524][T17485] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 907.026456][T17485] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 907.123352][T17485] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 907.173342][T17485] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 907.732718][T17485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.865854][T17485] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.973008][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.980305][ T6149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.094136][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.101377][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.783213][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2326'. [ 909.394783][T17485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.773695][T17485] veth0_vlan: entered promiscuous mode [ 909.873654][T17485] veth1_vlan: entered promiscuous mode [ 910.076624][T17485] veth0_macvtap: entered promiscuous mode [ 910.146472][T17485] veth1_macvtap: entered promiscuous mode [ 910.247335][T17485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.350526][T17485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.572651][ T6156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.587562][ T6156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.612401][ T6156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.621244][ T6156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.101980][ T6162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.140348][ T6162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.378717][ T6162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.483313][ T6162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.393602][T17770] netlink: zone id is out of range [ 913.084739][T17784] FAULT_INJECTION: forcing a failure. [ 913.084739][T17784] name failslab, interval 1, probability 0, space 0, times 0 [ 913.154722][T17784] CPU: 1 UID: 0 PID: 17784 Comm: syz.3.2338 Tainted: G U syzkaller #0 PREEMPT(full) [ 913.154794][T17784] Tainted: [U]=USER [ 913.154805][T17784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 913.154825][T17784] Call Trace: [ 913.154836][T17784] [ 913.154849][T17784] dump_stack_lvl+0x16c/0x1f0 [ 913.154916][T17784] should_fail_ex+0x512/0x640 [ 913.154983][T17784] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 913.155037][T17784] should_failslab+0xc2/0x120 [ 913.155082][T17784] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 913.155128][T17784] ? devinet_init_net+0xc3/0x910 [ 913.155169][T17784] kmemdup_noprof+0x29/0x60 [ 913.155212][T17784] devinet_init_net+0xc3/0x910 [ 913.155250][T17784] ? __pfx_devinet_init_net+0x10/0x10 [ 913.155285][T17784] ops_init+0x1df/0x5f0 [ 913.155319][T17784] setup_net+0x10f/0x380 [ 913.155346][T17784] ? lockdep_init_map_type+0x5c/0x280 [ 913.155411][T17784] ? __pfx_setup_net+0x10/0x10 [ 913.155445][T17784] ? debug_mutex_init+0x37/0x70 [ 913.155484][T17784] copy_net_ns+0x2a6/0x5f0 [ 913.155524][T17784] create_new_namespaces+0x3ea/0xa90 [ 913.155575][T17784] copy_namespaces+0x468/0x560 [ 913.155616][T17784] copy_process+0x2822/0x7690 [ 913.155681][T17784] ? __pfx_copy_process+0x10/0x10 [ 913.155725][T17784] ? futex_private_hash_put+0x176/0x300 [ 913.155774][T17784] ? futex_private_hash_put+0x18a/0x300 [ 913.155822][T17784] ? 0xffffffffff600000 [ 913.155844][T17784] kernel_clone+0xfc/0x930 [ 913.155891][T17784] ? __pfx_kernel_clone+0x10/0x10 [ 913.155976][T17784] ? 0xffffffffff600000 [ 913.156001][T17784] ? 0xffffffffff600000 [ 913.156023][T17784] __do_sys_clone+0xce/0x120 [ 913.156068][T17784] ? __pfx___do_sys_clone+0x10/0x10 [ 913.156113][T17784] ? 0xffffffffff600000 [ 913.156135][T17784] ? 0xffffffffff600000 [ 913.156156][T17784] ? 0xffffffffff600000 [ 913.156193][T17784] ? xfd_validate_state+0x61/0x180 [ 913.156242][T17784] ? __pfx_ksys_write+0x10/0x10 [ 913.156311][T17784] do_syscall_64+0xcd/0x4c0 [ 913.156367][T17784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.156401][T17784] RIP: 0033:0x7fd7c138eba9 [ 913.156426][T17784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.156459][T17784] RSP: 002b:00007fd7c2231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 913.156490][T17784] RAX: ffffffffffffffda RBX: 00007fd7c15d5fa0 RCX: 00007fd7c138eba9 [ 913.156511][T17784] RDX: ffffffffff600000 RSI: 0000000000000002 RDI: 010fffffffe22000 [ 913.156527][T17784] RBP: 00007fd7c1411e19 R08: 000000000000e45e R09: 0000000000000000 [ 913.156542][T17784] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 913.156557][T17784] R13: 00007fd7c15d6038 R14: 00007fd7c15d5fa0 R15: 00007ffe546a7dd8 [ 913.156578][T17784] ? 0xffffffffff600000 [ 913.156597][T17784] ? 0xffffffffff600000 [ 913.156618][T17784] [ 914.886999][T17809] FAULT_INJECTION: forcing a failure. [ 914.886999][T17809] name failslab, interval 1, probability 0, space 0, times 0 [ 914.971811][T17809] CPU: 1 UID: 0 PID: 17809 Comm: syz.5.2342 Tainted: G U syzkaller #0 PREEMPT(full) [ 914.971861][T17809] Tainted: [U]=USER [ 914.971870][T17809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 914.971889][T17809] Call Trace: [ 914.971898][T17809] [ 914.971910][T17809] dump_stack_lvl+0x16c/0x1f0 [ 914.971962][T17809] should_fail_ex+0x512/0x640 [ 914.972010][T17809] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 914.972045][T17809] should_failslab+0xc2/0x120 [ 914.972084][T17809] __kmalloc_cache_noprof+0x6a/0x3e0 [ 914.972117][T17809] ? snd_seq_pool_new+0x44/0x230 [ 914.972156][T17809] ? __pfx_snd_seq_open+0x10/0x10 [ 914.972188][T17809] snd_seq_pool_new+0x44/0x230 [ 914.972227][T17809] seq_create_client1+0x66/0x5e0 [ 914.972262][T17809] ? __pfx_snd_seq_open+0x10/0x10 [ 914.972293][T17809] snd_seq_open+0x59/0x550 [ 914.972325][T17809] ? __pfx_snd_seq_open+0x10/0x10 [ 914.972354][T17809] snd_open+0x22a/0x4c0 [ 914.972385][T17809] ? __pfx_snd_open+0x10/0x10 [ 914.972415][T17809] chrdev_open+0x231/0x6a0 [ 914.972455][T17809] ? __pfx_apparmor_file_open+0x10/0x10 [ 914.972491][T17809] ? __pfx_chrdev_open+0x10/0x10 [ 914.972534][T17809] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 914.972595][T17809] do_dentry_open+0x97f/0x1530 [ 914.972658][T17809] ? __pfx_chrdev_open+0x10/0x10 [ 914.972713][T17809] vfs_open+0x82/0x3f0 [ 914.972778][T17809] path_openat+0x1de4/0x2cb0 [ 914.972831][T17809] ? __pfx_path_openat+0x10/0x10 [ 914.972888][T17809] do_filp_open+0x20b/0x470 [ 914.972930][T17809] ? __pfx_do_filp_open+0x10/0x10 [ 914.973009][T17809] ? alloc_fd+0x471/0x7d0 [ 914.973058][T17809] do_sys_openat2+0x11b/0x1d0 [ 914.973109][T17809] ? __pfx_do_sys_openat2+0x10/0x10 [ 914.973181][T17809] __x64_sys_openat+0x174/0x210 [ 914.973213][T17809] ? __pfx___x64_sys_openat+0x10/0x10 [ 914.973262][T17809] do_syscall_64+0xcd/0x4c0 [ 914.973318][T17809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.973352][T17809] RIP: 0033:0x7f253998eba9 [ 914.973380][T17809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.973413][T17809] RSP: 002b:00007f2537bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 914.973445][T17809] RAX: ffffffffffffffda RBX: 00007f2539bd5fa0 RCX: 00007f253998eba9 [ 914.973467][T17809] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 914.973488][T17809] RBP: 00007f2539a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 914.973508][T17809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.973527][T17809] R13: 00007f2539bd6038 R14: 00007f2539bd5fa0 R15: 00007ffd5936df18 [ 914.973569][T17809] [ 915.739260][T17804] Process accounting paused [ 916.288869][T17820] futex_wake_op: syz.4.2344 tries to shift op by -2048; fix this program [ 916.338099][T17820] futex_wake_op: syz.4.2344 tries to shift op by -2048; fix this program [ 917.585797][T17835] netlink: zone id is out of range [ 917.597804][T17835] netlink: get zone limit has 4 unknown bytes [ 918.120726][T17838] FAULT_INJECTION: forcing a failure. [ 918.120726][T17838] name failslab, interval 1, probability 0, space 0, times 0 [ 918.143827][T17838] CPU: 1 UID: 0 PID: 17838 Comm: syz.5.2348 Tainted: G U syzkaller #0 PREEMPT(full) [ 918.143880][T17838] Tainted: [U]=USER [ 918.143890][T17838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 918.143910][T17838] Call Trace: [ 918.143921][T17838] [ 918.143932][T17838] dump_stack_lvl+0x16c/0x1f0 [ 918.143985][T17838] should_fail_ex+0x512/0x640 [ 918.144034][T17838] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 918.144074][T17838] should_failslab+0xc2/0x120 [ 918.144120][T17838] __kmalloc_cache_noprof+0x6a/0x3e0 [ 918.144156][T17838] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 918.144218][T17838] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 918.144277][T17838] devlink_fmsg_u64_pair_put+0x270/0x2f0 [ 918.144309][T17838] ? __pfx_devlink_fmsg_u64_pair_put+0x10/0x10 [ 918.144346][T17838] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 918.144406][T17838] nsim_dev_dummy_fmsg_put+0x61/0x1e0 [ 918.144459][T17838] devlink_health_do_dump+0x240/0x620 [ 918.144499][T17838] devlink_health_report+0x3c9/0x9c0 [ 918.144549][T17838] ? __pfx_devlink_health_report+0x10/0x10 [ 918.144584][T17838] ? _copy_from_user+0x59/0xd0 [ 918.144625][T17838] nsim_dev_health_break_write+0x166/0x210 [ 918.144676][T17838] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 918.144740][T17838] full_proxy_write+0x12e/0x1a0 [ 918.144795][T17838] ? __pfx_full_proxy_write+0x10/0x10 [ 918.144848][T17838] vfs_write+0x29d/0x11d0 [ 918.144895][T17838] ? __pfx___mutex_lock+0x10/0x10 [ 918.144946][T17838] ? __pfx_vfs_write+0x10/0x10 [ 918.144997][T17838] ? __fget_files+0x20e/0x3c0 [ 918.145046][T17838] ksys_write+0x12a/0x250 [ 918.145085][T17838] ? __pfx_ksys_write+0x10/0x10 [ 918.145135][T17838] do_syscall_64+0xcd/0x4c0 [ 918.145190][T17838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.145223][T17838] RIP: 0033:0x7f253998eba9 [ 918.145249][T17838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.145300][T17838] RSP: 002b:00007f2537bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 918.145332][T17838] RAX: ffffffffffffffda RBX: 00007f2539bd5fa0 RCX: 00007f253998eba9 [ 918.145354][T17838] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000008 [ 918.145372][T17838] RBP: 00007f2539a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 918.145391][T17838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.145410][T17838] R13: 00007f2539bd6038 R14: 00007f2539bd5fa0 R15: 00007ffd5936df18 [ 918.145454][T17838] [ 918.815895][T17852] Invalid ELF header magic: != ELF [ 920.482438][T17877] netlink: zone id is out of range [ 920.488271][T17877] netlink: get zone limit has 4 unknown bytes [ 920.972242][T17885] FAULT_INJECTION: forcing a failure. [ 920.972242][T17885] name failslab, interval 1, probability 0, space 0, times 0 [ 920.995315][T17885] CPU: 0 UID: 0 PID: 17885 Comm: syz.2.2359 Tainted: G U syzkaller #0 PREEMPT(full) [ 920.995366][T17885] Tainted: [U]=USER [ 920.995377][T17885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 920.995397][T17885] Call Trace: [ 920.995408][T17885] [ 920.995421][T17885] dump_stack_lvl+0x16c/0x1f0 [ 920.995477][T17885] should_fail_ex+0x512/0x640 [ 920.995527][T17885] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 920.995580][T17885] should_failslab+0xc2/0x120 [ 920.995623][T17885] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 920.995664][T17885] ? alloc_inode+0x61/0x240 [ 920.995714][T17885] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 920.995746][T17885] alloc_inode+0x61/0x240 [ 920.995794][T17885] new_inode+0x22/0x1c0 [ 920.995845][T17885] __debugfs_create_file+0x11c/0x6b0 [ 920.995888][T17885] debugfs_create_file_full+0x41/0x60 [ 920.995932][T17885] kvm_dev_ioctl+0x1775/0x1af0 [ 920.995981][T17885] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 920.996026][T17885] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 920.996061][T17885] __x64_sys_ioctl+0x18b/0x210 [ 920.996117][T17885] do_syscall_64+0xcd/0x4c0 [ 920.996171][T17885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.996204][T17885] RIP: 0033:0x7f436378eba9 [ 920.996229][T17885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.996261][T17885] RSP: 002b:00007f43619d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 920.996291][T17885] RAX: ffffffffffffffda RBX: 00007f43639d6180 RCX: 00007f436378eba9 [ 920.996311][T17885] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 920.996329][T17885] RBP: 00007f4363811e19 R08: 0000000000000000 R09: 0000000000000000 [ 920.996347][T17885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.996365][T17885] R13: 00007f43639d6218 R14: 00007f43639d6180 R15: 00007ffee8cad7d8 [ 920.996405][T17885] [ 920.996417][T17885] debugfs: out of free dentries, can not create file 'halt_attempted_poll' [ 921.430836][T17887] netlink: 'syz.4.2360': attribute type 1 has an invalid length. [ 921.857164][T17898] Format for adding new port is "id [perm_addr]" (uint MAC). [ 921.984636][T17900] vhci_hcd: invalid port number 16 [ 922.030148][T17900] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 922.114102][T17900] usb usb37: usbfs: process 17900 (syz.3.2363) did not claim interface 3 before use [ 923.215503][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2365'. [ 924.129347][T17917] netlink: zone id is out of range [ 924.153204][T17917] netlink: get zone limit has 4 unknown bytes [ 925.360178][T17931] hub 3-0:1.0: USB hub found [ 925.411732][T17931] hub 3-0:1.0: 1 port detected [ 925.436553][T17931] usb usb3: authorized to connect [ 926.864853][T17960] netlink: zone id is out of range [ 926.875089][T17960] netlink: zone id is out of range [ 926.882119][T17960] netlink: get zone limit has 4 unknown bytes [ 928.105826][T17973] random: crng reseeded on system resumption [ 928.429108][T17985] FAULT_INJECTION: forcing a failure. [ 928.429108][T17985] name failslab, interval 1, probability 0, space 0, times 0 [ 928.473523][T17985] CPU: 0 UID: 0 PID: 17985 Comm: syz.3.2386 Tainted: G U syzkaller #0 PREEMPT(full) [ 928.473575][T17985] Tainted: [U]=USER [ 928.473588][T17985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 928.473605][T17985] Call Trace: [ 928.473615][T17985] [ 928.473628][T17985] dump_stack_lvl+0x16c/0x1f0 [ 928.473684][T17985] should_fail_ex+0x512/0x640 [ 928.473735][T17985] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 928.473775][T17985] should_failslab+0xc2/0x120 [ 928.473819][T17985] __kmalloc_cache_noprof+0x6a/0x3e0 [ 928.473851][T17985] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 928.473908][T17985] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 928.473951][T17985] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 928.473990][T17985] hugetlb_reserve_pages+0x151/0xf40 [ 928.474044][T17985] ? __vma_enter_locked+0x163/0x3f0 [ 928.474080][T17985] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 928.474134][T17985] ? atime_needs_update+0x8b/0x710 [ 928.474194][T17985] hugetlbfs_file_mmap+0x4a1/0x730 [ 928.474256][T17985] __mmap_region+0x1311/0x27b0 [ 928.474318][T17985] ? __pfx___mmap_region+0x10/0x10 [ 928.474371][T17985] ? is_bpf_text_address+0x94/0x1a0 [ 928.474416][T17985] ? kernel_text_address+0x8d/0x100 [ 928.474448][T17985] ? __kernel_text_address+0xd/0x40 [ 928.474477][T17985] ? unwind_get_return_address+0x59/0xa0 [ 928.474513][T17985] ? arch_stack_walk+0xa6/0x100 [ 928.474621][T17985] ? trace_cap_capable+0x18d/0x200 [ 928.474674][T17985] mmap_region+0x32b/0x3f0 [ 928.474723][T17985] do_mmap+0xa3e/0x1210 [ 928.474781][T17985] ? __pfx_do_mmap+0x10/0x10 [ 928.474829][T17985] ? __pfx_down_write_killable+0x10/0x10 [ 928.474879][T17985] vm_mmap_pgoff+0x29e/0x470 [ 928.474938][T17985] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 928.474985][T17985] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 928.475051][T17985] ? hugetlbfs_get_inode+0x31f/0x730 [ 928.475100][T17985] ksys_mmap_pgoff+0x1c8/0x5c0 [ 928.475154][T17985] __x64_sys_mmap+0x125/0x190 [ 928.475207][T17985] do_syscall_64+0xcd/0x4c0 [ 928.475261][T17985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.475292][T17985] RIP: 0033:0x7fd7c138eba9 [ 928.475316][T17985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.475348][T17985] RSP: 002b:00007fd7c2231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 928.475379][T17985] RAX: ffffffffffffffda RBX: 00007fd7c15d5fa0 RCX: 00007fd7c138eba9 [ 928.475399][T17985] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 928.475418][T17985] RBP: 00007fd7c1411e19 R08: 0000000000000602 R09: 0000300000000000 [ 928.475437][T17985] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 928.475455][T17985] R13: 00007fd7c15d6038 R14: 00007fd7c15d5fa0 R15: 00007ffe546a7dd8 [ 928.475496][T17985] [ 928.852827][T17985] HugeTLB: unable to allocate vma specific lock [ 929.394791][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.404632][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 929.406900][T17997] netlink: zone id is out of range [ 929.424966][T17997] netlink: zone id is out of range [ 929.469097][T17997] netlink: get zone limit has 4 unknown bytes [ 932.505243][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 932.515766][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 932.526982][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 932.574018][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 932.590245][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 933.391446][ T9195] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.634811][ T9195] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.961939][ T9195] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.039818][T18044] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 934.323317][ T9195] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.586459][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.593738][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.659472][T10985] Bluetooth: hci1: command tx timeout [ 935.012233][T18063] Setting dangerous option i915.mitigations - tainting kernel [ 935.147766][ T9195] bridge_slave_1: left allmulticast mode [ 935.166329][ T9195] bridge_slave_1: left promiscuous mode [ 935.249302][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.317923][ T9195] bridge_slave_0: left allmulticast mode [ 935.323645][ T9195] bridge_slave_0: left promiscuous mode [ 935.330483][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.918592][T18050] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 936.380479][T18083] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:7 is already present [ 936.727560][T10985] Bluetooth: hci1: command tx timeout [ 936.832324][T18090] netlink: 13 bytes leftover after parsing attributes in process `syz.5.2403'. [ 936.846148][T18090] vhci_hcd: invalid port number 21 [ 937.399050][T18096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2405'. [ 937.488454][ T9195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.502654][ T9195] bond0 (unregistering): Released all slaves [ 937.528644][T18037] chnl_net:caif_netlink_parms(): no params data found [ 937.615556][ T9195] LfLER: left promiscuous mode [ 938.111385][ T9195] tipc: Left network mode [ 938.717863][T18037] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.760991][T18037] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.779286][T18037] bridge_slave_0: entered allmulticast mode [ 938.795718][T10985] Bluetooth: hci1: command tx timeout [ 938.796308][T18037] bridge_slave_0: entered promiscuous mode [ 938.881468][T18037] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.934680][T18037] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.943460][T18037] bridge_slave_1: entered allmulticast mode [ 938.951957][T18037] bridge_slave_1: entered promiscuous mode [ 939.566343][T18037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.805066][T18037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.191053][T18037] team0: Port device team_slave_0 added [ 940.243634][T18037] team0: Port device team_slave_1 added [ 940.596880][T18037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.638311][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.746620][T18037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.795849][T18037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.803346][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.865115][T10985] Bluetooth: hci1: command tx timeout [ 940.882529][T18037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.355106][T18037] hsr_slave_0: entered promiscuous mode [ 941.373651][T18037] hsr_slave_1: entered promiscuous mode [ 941.411132][T18037] debugfs: 'hsr0' already exists in 'hsr' [ 941.416931][T18037] Cannot create hsr debugfs directory [ 943.454873][ T6154] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.731085][T18177] FAULT_INJECTION: forcing a failure. [ 943.731085][T18177] name failslab, interval 1, probability 0, space 0, times 0 [ 943.793717][T18177] CPU: 0 UID: 0 PID: 18177 Comm: syz.2.2413 Tainted: G U syzkaller #0 PREEMPT(full) [ 943.793755][T18177] Tainted: [U]=USER [ 943.793763][T18177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 943.793776][T18177] Call Trace: [ 943.793785][T18177] [ 943.793793][T18177] dump_stack_lvl+0x16c/0x1f0 [ 943.793846][T18177] should_fail_ex+0x512/0x640 [ 943.793884][T18177] ? __kmalloc_noprof+0xbf/0x510 [ 943.793914][T18177] ? __register_sysctl_table+0xb3/0x1900 [ 943.793949][T18177] should_failslab+0xc2/0x120 [ 943.793981][T18177] __kmalloc_noprof+0xd2/0x510 [ 943.794016][T18177] __register_sysctl_table+0xb3/0x1900 [ 943.794052][T18177] ? is_module_address+0x5f/0xf0 [ 943.794090][T18177] ? __pfx___register_sysctl_table+0x10/0x10 [ 943.794125][T18177] ? is_module_address+0x69/0xf0 [ 943.794157][T18177] ? register_net_sysctl_sz+0x228/0x3e0 [ 943.794182][T18177] ? __asan_memcpy+0x3c/0x60 [ 943.794209][T18177] xfrm4_net_init+0xf0/0x1c0 [ 943.794246][T18177] ? __pfx_xfrm4_net_init+0x10/0x10 [ 943.794280][T18177] ops_init+0x1df/0x5f0 [ 943.794305][T18177] setup_net+0x10f/0x380 [ 943.794324][T18177] ? lockdep_init_map_type+0x5c/0x280 [ 943.794358][T18177] ? __pfx_setup_net+0x10/0x10 [ 943.794381][T18177] ? debug_mutex_init+0x37/0x70 [ 943.794407][T18177] copy_net_ns+0x2a6/0x5f0 [ 943.794434][T18177] create_new_namespaces+0x3ea/0xa90 [ 943.794469][T18177] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 943.794499][T18177] ksys_unshare+0x45b/0xa40 [ 943.794533][T18177] ? __pfx_ksys_unshare+0x10/0x10 [ 943.794566][T18177] ? xfd_validate_state+0x61/0x180 [ 943.794610][T18177] __x64_sys_unshare+0x31/0x40 [ 943.794642][T18177] do_syscall_64+0xcd/0x4c0 [ 943.794681][T18177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.794723][T18177] RIP: 0033:0x7f436378eba9 [ 943.794743][T18177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.794767][T18177] RSP: 002b:00007f43619d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 943.794790][T18177] RAX: ffffffffffffffda RBX: 00007f43639d6180 RCX: 00007f436378eba9 [ 943.794806][T18177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 943.794828][T18177] RBP: 00007f4363811e19 R08: 0000000000000000 R09: 0000000000000000 [ 943.794854][T18177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.794869][T18177] R13: 00007f43639d6218 R14: 00007f43639d6180 R15: 00007ffee8cad7d8 [ 943.794900][T18177] [ 944.636210][ T9195] hsr_slave_0: left promiscuous mode [ 944.731827][ T9195] hsr_slave_1: left promiscuous mode [ 944.889294][ T9195] veth1_vlan: left promiscuous mode [ 944.918596][ T9195] veth0_vlan: left promiscuous mode [ 945.351756][T18183] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 946.180806][T18209] netlink: 588 bytes leftover after parsing attributes in process `syz.4.2422'. [ 946.606038][ T9195] team0 (unregistering): Port device team_slave_1 removed [ 946.628552][ T30] audit: type=1800 audit(4700.429:38): pid=18214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2423" name="features" dev="configfs" ino=65489 res=0 errno=0 [ 946.737823][ T9195] team0 (unregistering): Port device team_slave_0 removed [ 949.587517][T18242] Setting dangerous option i915.mitigations - tainting kernel [ 950.277718][T18228] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 952.507087][T18285] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 961.871725][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 961.886673][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 961.897278][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 961.912171][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 961.920202][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 962.299175][T18317] could not allocate digest TFM handle [ 962.530992][T18313] chnl_net:caif_netlink_parms(): no params data found [ 962.545981][ T5872] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 962.671241][T18343] FAULT_INJECTION: forcing a failure. [ 962.671241][T18343] name failslab, interval 1, probability 0, space 0, times 0 [ 962.671394][T18343] CPU: 0 UID: 0 PID: 18343 Comm: syz.2.2439 Tainted: G U syzkaller #0 PREEMPT(full) [ 962.671440][T18343] Tainted: [U]=USER [ 962.671451][T18343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 962.671469][T18343] Call Trace: [ 962.671481][T18343] [ 962.671494][T18343] dump_stack_lvl+0x16c/0x1f0 [ 962.671557][T18343] should_fail_ex+0x512/0x640 [ 962.671609][T18343] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 962.671649][T18343] should_failslab+0xc2/0x120 [ 962.671693][T18343] __kmalloc_cache_noprof+0x6a/0x3e0 [ 962.671728][T18343] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 962.671774][T18343] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 962.671817][T18343] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 962.671856][T18343] hugetlb_reserve_pages+0x151/0xf40 [ 962.671907][T18343] ? __vma_enter_locked+0x163/0x3f0 [ 962.671944][T18343] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 962.671996][T18343] ? atime_needs_update+0x8b/0x710 [ 962.672059][T18343] hugetlbfs_file_mmap+0x4a1/0x730 [ 962.672138][T18343] __mmap_region+0x1311/0x27b0 [ 962.672185][T18343] ? __pfx___mmap_region+0x10/0x10 [ 962.672238][T18343] ? is_bpf_text_address+0x94/0x1a0 [ 962.672282][T18343] ? kernel_text_address+0x8d/0x100 [ 962.672313][T18343] ? __kernel_text_address+0xd/0x40 [ 962.672345][T18343] ? unwind_get_return_address+0x59/0xa0 [ 962.672382][T18343] ? arch_stack_walk+0xa6/0x100 [ 962.672494][T18343] ? trace_cap_capable+0x18d/0x200 [ 962.672580][T18343] mmap_region+0x32b/0x3f0 [ 962.672630][T18343] do_mmap+0xa3e/0x1210 [ 962.672689][T18343] ? __pfx_do_mmap+0x10/0x10 [ 962.672741][T18343] ? __pfx_down_write_killable+0x10/0x10 [ 962.672798][T18343] vm_mmap_pgoff+0x29e/0x470 [ 962.672874][T18343] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 962.672921][T18343] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 962.672974][T18343] ? hugetlbfs_get_inode+0x31f/0x730 [ 962.673023][T18343] ksys_mmap_pgoff+0x1c8/0x5c0 [ 962.673091][T18343] __x64_sys_mmap+0x125/0x190 [ 962.673168][T18343] do_syscall_64+0xcd/0x4c0 [ 962.673225][T18343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.673260][T18343] RIP: 0033:0x7f436378eba9 [ 962.673287][T18343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.673321][T18343] RSP: 002b:00007f436453c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 962.673353][T18343] RAX: ffffffffffffffda RBX: 00007f43639d5fa0 RCX: 00007f436378eba9 [ 962.673376][T18343] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 962.673397][T18343] RBP: 00007f4363811e19 R08: 0000000000000602 R09: 0000300000000000 [ 962.673418][T18343] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 962.673438][T18343] R13: 00007f43639d6038 R14: 00007f43639d5fa0 R15: 00007ffee8cad7d8 [ 962.673482][T18343] [ 962.951996][T18313] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.952193][T18313] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.952640][T18313] bridge_slave_0: entered allmulticast mode [ 962.954688][T18313] bridge_slave_0: entered promiscuous mode [ 962.999130][T18313] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.310931][T18313] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.329960][T18313] bridge_slave_1: entered allmulticast mode [ 963.348590][T18313] bridge_slave_1: entered promiscuous mode [ 963.454715][T18313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.479612][T18313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.722629][T18350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2440'. [ 963.755824][T18350] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2440'. [ 963.793459][T18313] team0: Port device team_slave_0 added [ 963.802513][T18313] team0: Port device team_slave_1 added [ 963.917100][T18356] random: crng reseeded on system resumption [ 963.945930][T18313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.957519][T18313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.006820][T18313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.018649][ T5872] Bluetooth: hci3: command tx timeout [ 964.029258][T18313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.036613][T18313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.063927][T18313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.199591][T18313] hsr_slave_0: entered promiscuous mode [ 964.249381][T18313] hsr_slave_1: entered promiscuous mode [ 964.267037][T18313] debugfs: 'hsr0' already exists in 'hsr' [ 964.275031][T18363] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2444'. [ 964.284291][T18313] Cannot create hsr debugfs directory [ 964.300495][T18361] FAULT_INJECTION: forcing a failure. [ 964.300495][T18361] name failslab, interval 1, probability 0, space 0, times 0 [ 964.345251][T18361] CPU: 0 UID: 0 PID: 18361 Comm: syz.2.2443 Tainted: G U syzkaller #0 PREEMPT(full) [ 964.345300][T18361] Tainted: [U]=USER [ 964.345310][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 964.345329][T18361] Call Trace: [ 964.345340][T18361] [ 964.345352][T18361] dump_stack_lvl+0x16c/0x1f0 [ 964.345404][T18361] should_fail_ex+0x512/0x640 [ 964.345482][T18361] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 964.345530][T18361] should_failslab+0xc2/0x120 [ 964.345576][T18361] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 964.345617][T18361] ? __alloc_skb+0x2b2/0x380 [ 964.345670][T18361] __alloc_skb+0x2b2/0x380 [ 964.345716][T18361] ? __pfx___alloc_skb+0x10/0x10 [ 964.345768][T18361] ? __pfx___register_sysctl_table+0x10/0x10 [ 964.345817][T18361] ? is_module_address+0x69/0xf0 [ 964.345868][T18361] inet_netconf_notify_devconf+0x8b/0x1f0 [ 964.345907][T18361] __devinet_sysctl_register+0x227/0x360 [ 964.345948][T18361] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 964.345985][T18361] ? devinet_init_net+0xeb/0x910 [ 964.346019][T18361] ? __asan_memcpy+0x3c/0x60 [ 964.346054][T18361] devinet_init_net+0x315/0x910 [ 964.346090][T18361] ? __pfx_devinet_init_net+0x10/0x10 [ 964.346123][T18361] ops_init+0x1df/0x5f0 [ 964.346155][T18361] setup_net+0x10f/0x380 [ 964.346180][T18361] ? lockdep_init_map_type+0x5c/0x280 [ 964.346225][T18361] ? __pfx_setup_net+0x10/0x10 [ 964.346258][T18361] ? debug_mutex_init+0x37/0x70 [ 964.346295][T18361] copy_net_ns+0x2a6/0x5f0 [ 964.346335][T18361] create_new_namespaces+0x3ea/0xa90 [ 964.346384][T18361] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 964.346436][T18361] ksys_unshare+0x45b/0xa40 [ 964.346484][T18361] ? __pfx_ksys_unshare+0x10/0x10 [ 964.346533][T18361] ? xfd_validate_state+0x61/0x180 [ 964.346593][T18361] __x64_sys_unshare+0x31/0x40 [ 964.346638][T18361] do_syscall_64+0xcd/0x4c0 [ 964.346694][T18361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.346728][T18361] RIP: 0033:0x7f436378eba9 [ 964.346755][T18361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.346789][T18361] RSP: 002b:00007f436453c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 964.346822][T18361] RAX: ffffffffffffffda RBX: 00007f43639d5fa0 RCX: 00007f436378eba9 [ 964.346843][T18361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 964.346864][T18361] RBP: 00007f4363811e19 R08: 0000000000000000 R09: 0000000000000000 [ 964.346884][T18361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.346905][T18361] R13: 00007f43639d6038 R14: 00007f43639d5fa0 R15: 00007ffee8cad7d8 [ 964.346946][T18361] [ 964.623244][ T5872] Bluetooth: hci4: command 0x0406 tx timeout [ 965.405549][ T5872] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 966.080346][ T5872] Bluetooth: hci3: command tx timeout [ 966.188166][T18396] ptrace attach of "./syz-executor exec"[7293] was attempted by ""[18396] [ 967.698156][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2453'. [ 968.148550][ T5872] Bluetooth: hci3: command tx timeout [ 968.336337][T18423] netlink: zone id is out of range [ 968.385200][T18423] netlink: zone id is out of range [ 968.716415][T18425] netlink: zone id is out of range [ 968.721597][T18425] netlink: zone id is out of range [ 970.050643][T18438] bridge0: port 3(hsr0) entered blocking state [ 970.059557][T18438] bridge0: port 3(hsr0) entered disabled state [ 970.065967][T18438] hsr0: entered allmulticast mode [ 970.080595][T18438] hsr_slave_0: entered allmulticast mode [ 970.086296][T18438] hsr_slave_1: entered allmulticast mode [ 970.158650][T18438] hsr0: entered promiscuous mode [ 970.164212][T18438] bridge0: port 3(hsr0) entered blocking state [ 970.170538][T18438] bridge0: port 3(hsr0) entered forwarding state [ 970.218691][ T5872] Bluetooth: hci3: command tx timeout [ 970.545207][T18430] FAULT_INJECTION: forcing a failure. [ 970.545207][T18430] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 970.564739][T18430] CPU: 0 UID: 0 PID: 18430 Comm: syz.2.2458 Tainted: G U syzkaller #0 PREEMPT(full) [ 970.564794][T18430] Tainted: [U]=USER [ 970.564803][T18430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 970.564817][T18430] Call Trace: [ 970.564825][T18430] [ 970.564835][T18430] dump_stack_lvl+0x16c/0x1f0 [ 970.564877][T18430] should_fail_ex+0x512/0x640 [ 970.564921][T18430] should_fail_alloc_page+0xe7/0x130 [ 970.564958][T18430] prepare_alloc_pages+0x3c2/0x610 [ 970.564997][T18430] ? rcu_is_watching+0x12/0xc0 [ 970.565026][T18430] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 970.565058][T18430] ? finish_task_switch.isra.0+0x221/0xc10 [ 970.565086][T18430] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 970.565114][T18430] ? rcu_is_watching+0x12/0xc0 [ 970.565139][T18430] ? trace_sched_exit_tp+0xd1/0x120 [ 970.565182][T18430] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 970.565225][T18430] ? __lock_acquire+0x62e/0x1ce0 [ 970.565263][T18430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 970.565304][T18430] ? policy_nodemask+0xea/0x4e0 [ 970.565349][T18430] alloc_pages_mpol+0x1fb/0x550 [ 970.565384][T18430] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 970.565419][T18430] ? __lock_acquire+0x62e/0x1ce0 [ 970.565455][T18430] folio_alloc_mpol_noprof+0x36/0x2f0 [ 970.565495][T18430] vma_alloc_folio_noprof+0xed/0x1e0 [ 970.565533][T18430] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 970.565580][T18430] do_pte_missing+0x2230/0x3ba0 [ 970.565606][T18430] ? find_held_lock+0x2b/0x80 [ 970.565637][T18430] __handle_mm_fault+0x152a/0x2a50 [ 970.565672][T18430] ? __pfx___handle_mm_fault+0x10/0x10 [ 970.565700][T18430] ? __pte_offset_map_lock+0x174/0x310 [ 970.565735][T18430] ? find_held_lock+0x2b/0x80 [ 970.565768][T18430] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 970.565813][T18430] handle_mm_fault+0x589/0xd10 [ 970.565844][T18430] __get_user_pages+0x551/0x34a0 [ 970.565893][T18430] ? __pfx___get_user_pages+0x10/0x10 [ 970.565939][T18430] populate_vma_page_range+0x267/0x3f0 [ 970.565981][T18430] ? __pfx_populate_vma_page_range+0x10/0x10 [ 970.566020][T18430] ? __pfx_find_vma_intersection+0x10/0x10 [ 970.566057][T18430] ? do_mmap+0x69c/0x1210 [ 970.566096][T18430] __mm_populate+0x1d8/0x380 [ 970.566119][T18430] ? __pfx___mm_populate+0x10/0x10 [ 970.566144][T18430] ? up_write+0x1b2/0x520 [ 970.566183][T18430] vm_mmap_pgoff+0x37f/0x470 [ 970.566222][T18430] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 970.566264][T18430] ? __x64_sys_futex+0x1e0/0x4c0 [ 970.566294][T18430] ? __x64_sys_futex+0x1e9/0x4c0 [ 970.566335][T18430] ksys_mmap_pgoff+0x7d/0x5c0 [ 970.566371][T18430] ? xfd_validate_state+0x61/0x180 [ 970.566406][T18430] ? __pfx_do_writev+0x10/0x10 [ 970.566437][T18430] __x64_sys_mmap+0x125/0x190 [ 970.566478][T18430] do_syscall_64+0xcd/0x4c0 [ 970.566520][T18430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.566545][T18430] RIP: 0033:0x7f436378eba9 [ 970.566564][T18430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.566588][T18430] RSP: 002b:00007f436453c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 970.566611][T18430] RAX: ffffffffffffffda RBX: 00007f43639d5fa0 RCX: 00007f436378eba9 [ 970.566627][T18430] RDX: 00000000000000e3 RSI: 0000000000400005 RDI: 0000000000000000 [ 970.566642][T18430] RBP: 00007f4363811e19 R08: 0000000000000002 R09: 0000000000008000 [ 970.566657][T18430] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 970.566671][T18430] R13: 00007f43639d6038 R14: 00007f43639d5fa0 R15: 00007ffee8cad7d8 [ 970.566702][T18430] [ 970.619638][T18429] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 971.168963][ T30] audit: type=1800 audit(4725.109:39): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2459" name="dbroot" dev="configfs" ino=66993 res=0 errno=0 [ 971.896495][T18453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2461'. [ 973.545319][T18464] netlink: zone id is out of range [ 973.550572][T18464] netlink: zone id is out of range [ 974.199654][T18461] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 975.703232][T18490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 975.714431][T18490] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 975.734532][T18490] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 975.743924][T18490] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 975.750734][T18490] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 975.757296][T18490] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 975.765435][T18490] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 975.773654][T18490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 975.780687][T18490] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 975.803139][T18490] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 975.823660][T18490] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 975.840494][T18490] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 975.853587][T18490] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 976.978981][T18508] FAULT_INJECTION: forcing a failure. [ 976.978981][T18508] name failslab, interval 1, probability 0, space 0, times 0 [ 976.985720][ T5872] Bluetooth: hci2: command 0x0c1a tx timeout [ 977.032087][T18508] CPU: 0 UID: 0 PID: 18508 Comm: syz.2.2476 Tainted: G U syzkaller #0 PREEMPT(full) [ 977.032135][T18508] Tainted: [U]=USER [ 977.032145][T18508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 977.032163][T18508] Call Trace: [ 977.032174][T18508] [ 977.032185][T18508] dump_stack_lvl+0x16c/0x1f0 [ 977.032236][T18508] should_fail_ex+0x512/0x640 [ 977.032287][T18508] ? fs_reclaim_acquire+0xae/0x150 [ 977.032339][T18508] should_failslab+0xc2/0x120 [ 977.032380][T18508] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 977.032419][T18508] ? ext4_init_io_end+0x24/0x170 [ 977.032456][T18508] ext4_init_io_end+0x24/0x170 [ 977.032487][T18508] ext4_do_writepages+0x9e7/0x3cf0 [ 977.032536][T18508] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 977.032616][T18508] ? __pfx_ext4_do_writepages+0x10/0x10 [ 977.032682][T18508] ? ext4_writepages+0x37a/0x7d0 [ 977.032725][T18508] ext4_writepages+0x37a/0x7d0 [ 977.032770][T18508] ? __pfx_ext4_writepages+0x10/0x10 [ 977.032836][T18508] ? __pfx_ext4_writepages+0x10/0x10 [ 977.032884][T18508] do_writepages+0x277/0x600 [ 977.032921][T18508] ? __pfx_do_writepages+0x10/0x10 [ 977.032950][T18508] ? do_raw_spin_unlock+0x172/0x230 [ 977.033002][T18508] ? _raw_spin_unlock+0x28/0x50 [ 977.033048][T18508] filemap_fdatawrite_wbc+0x104/0x160 [ 977.033085][T18508] __filemap_fdatawrite_range+0xb9/0x100 [ 977.033128][T18508] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 977.033232][T18508] file_write_and_wait_range+0xca/0x140 [ 977.033280][T18508] ext4_sync_file+0x310/0xf10 [ 977.033321][T18508] ? __pfx___up_read+0x10/0x10 [ 977.033368][T18508] ? __pfx_ext4_sync_file+0x10/0x10 [ 977.033406][T18508] vfs_fsync_range+0x136/0x220 [ 977.033450][T18508] __do_sys_msync+0x3cb/0x5c0 [ 977.033499][T18508] do_syscall_64+0xcd/0x4c0 [ 977.033552][T18508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.033624][T18508] RIP: 0033:0x7f436378eba9 [ 977.033649][T18508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.033681][T18508] RSP: 002b:00007f436453c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 977.033712][T18508] RAX: ffffffffffffffda RBX: 00007f43639d5fa0 RCX: 00007f436378eba9 [ 977.033733][T18508] RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 [ 977.033763][T18508] RBP: 00007f4363811e19 R08: 0000000000000000 R09: 0000000000000000 [ 977.033781][T18508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.033799][T18508] R13: 00007f43639d6038 R14: 00007f43639d5fa0 R15: 00007ffee8cad7d8 [ 977.033842][T18508] [ 977.775390][ T5872] Bluetooth: hci1: command 0x0c1a tx timeout [ 977.781495][ T5872] Bluetooth: hci0: command 0x0c1a tx timeout [ 977.787834][T10985] Bluetooth: hci5: command 0x0c1a tx timeout [ 977.794099][ T5872] Bluetooth: hci4: command 0x0406 tx timeout [ 977.853289][T18524] Bluetooth: hci3: command 0x0c1a tx timeout [ 978.612319][T18528] FAULT_INJECTION: forcing a failure. [ 978.612319][T18528] name failslab, interval 1, probability 0, space 0, times 0 [ 978.625606][T18528] CPU: 1 UID: 0 PID: 18528 Comm: syz.2.2479 Tainted: G U syzkaller #0 PREEMPT(full) [ 978.625659][T18528] Tainted: [U]=USER [ 978.625670][T18528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 978.625690][T18528] Call Trace: [ 978.625701][T18528] [ 978.625715][T18528] dump_stack_lvl+0x16c/0x1f0 [ 978.625777][T18528] should_fail_ex+0x512/0x640 [ 978.625829][T18528] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 978.625869][T18528] should_failslab+0xc2/0x120 [ 978.625913][T18528] __kmalloc_cache_noprof+0x6a/0x3e0 [ 978.625959][T18528] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 978.626003][T18528] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 978.626045][T18528] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 978.626081][T18528] hugetlb_reserve_pages+0x151/0xf40 [ 978.626150][T18528] ? __vma_enter_locked+0x163/0x3f0 [ 978.626186][T18528] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 978.626241][T18528] ? atime_needs_update+0x8b/0x710 [ 978.626304][T18528] hugetlbfs_file_mmap+0x4a1/0x730 [ 978.626365][T18528] __mmap_region+0x1311/0x27b0 [ 978.626410][T18528] ? __pfx___mmap_region+0x10/0x10 [ 978.626470][T18528] ? is_bpf_text_address+0x94/0x1a0 [ 978.626514][T18528] ? kernel_text_address+0x8d/0x100 [ 978.626545][T18528] ? __kernel_text_address+0xd/0x40 [ 978.626576][T18528] ? unwind_get_return_address+0x59/0xa0 [ 978.626612][T18528] ? arch_stack_walk+0xa6/0x100 [ 978.626718][T18528] ? trace_cap_capable+0x18d/0x200 [ 978.626768][T18528] mmap_region+0x32b/0x3f0 [ 978.626822][T18528] do_mmap+0xa3e/0x1210 [ 978.626878][T18528] ? __pfx_do_mmap+0x10/0x10 [ 978.626928][T18528] ? __pfx_down_write_killable+0x10/0x10 [ 978.626971][T18528] vm_mmap_pgoff+0x29e/0x470 [ 978.627027][T18528] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 978.627071][T18528] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 978.627125][T18528] ? hugetlbfs_get_inode+0x31f/0x730 [ 978.627173][T18528] ksys_mmap_pgoff+0x1c8/0x5c0 [ 978.627226][T18528] __x64_sys_mmap+0x125/0x190 [ 978.627280][T18528] do_syscall_64+0xcd/0x4c0 [ 978.627334][T18528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.627367][T18528] RIP: 0033:0x7f436378eba9 [ 978.627393][T18528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 978.627426][T18528] RSP: 002b:00007f436453c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 978.627455][T18528] RAX: ffffffffffffffda RBX: 00007f43639d5fa0 RCX: 00007f436378eba9 [ 978.627477][T18528] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 978.627497][T18528] RBP: 00007f4363811e19 R08: 0000000000000602 R09: 0000300000000000 [ 978.627518][T18528] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 978.627537][T18528] R13: 00007f43639d6038 R14: 00007f43639d5fa0 R15: 00007ffee8cad7d8 [ 978.627580][T18528] [ 979.841750][T18524] Bluetooth: hci4: command 0x0406 tx timeout [ 979.847838][T18524] Bluetooth: hci0: command 0x0c1a tx timeout [ 979.853991][T18523] Bluetooth: hci1: command 0x0c1a tx timeout [ 979.927691][T18524] Bluetooth: hci3: command 0x0c1a tx timeout [ 980.395591][T18548] FAULT_INJECTION: forcing a failure. [ 980.395591][T18548] name fail_futex, interval 1, probability 0, space 0, times 0 [ 980.443622][T18548] CPU: 0 UID: 0 PID: 18548 Comm: syz.2.2483 Tainted: G U syzkaller #0 PREEMPT(full) [ 980.443671][T18548] Tainted: [U]=USER [ 980.443682][T18548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 980.443701][T18548] Call Trace: [ 980.443712][T18548] [ 980.443725][T18548] dump_stack_lvl+0x16c/0x1f0 [ 980.443779][T18548] should_fail_ex+0x512/0x640 [ 980.443838][T18548] get_futex_key+0x1d0/0x1560 [ 980.443884][T18548] ? __pfx_get_futex_key+0x10/0x10 [ 980.443941][T18548] futex_wake+0xea/0x530 [ 980.443986][T18548] ? kasan_quarantine_put+0x10a/0x240 [ 980.444030][T18548] ? __pfx_futex_wake+0x10/0x10 [ 980.444088][T18548] ? getname_flags.part.0+0x1c5/0x550 [ 980.444145][T18548] do_futex+0x1e3/0x350 [ 980.444188][T18548] ? __pfx_do_futex+0x10/0x10 [ 980.444234][T18548] ? find_held_lock+0x2b/0x80 [ 980.444272][T18548] __x64_sys_futex+0x1e0/0x4c0 [ 980.444318][T18548] ? __x64_sys_openat+0x174/0x210 [ 980.444348][T18548] ? __pfx___x64_sys_futex+0x10/0x10 [ 980.444419][T18548] do_syscall_64+0xcd/0x4c0 [ 980.444473][T18548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.444504][T18548] RIP: 0033:0x7f436378eba9 [ 980.444534][T18548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.444565][T18548] RSP: 002b:00007f436453c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 980.444595][T18548] RAX: ffffffffffffffda RBX: 00007f43639d5fa8 RCX: 00007f436378eba9 [ 980.444617][T18548] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f43639d5fac [ 980.444636][T18548] RBP: 00007f43639d5fa0 R08: 00007f436453d000 R09: 0000000000000000 [ 980.444655][T18548] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 980.444674][T18548] R13: 00007f43639d6038 R14: 00007ffee8cad6f0 R15: 00007ffee8cad7d8 [ 980.444715][T18548] [ 981.346112][T18563] tipc: Enabling of bearer <@):^\/\> rejected, media not registered [ 981.814486][T18562] FAULT_INJECTION: forcing a failure. [ 981.814486][T18562] name failslab, interval 1, probability 0, space 0, times 0 [ 981.832898][T18562] CPU: 1 UID: 0 PID: 18562 Comm: syz.2.2485 Tainted: G U syzkaller #0 PREEMPT(full) [ 981.832948][T18562] Tainted: [U]=USER [ 981.832960][T18562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 981.832979][T18562] Call Trace: [ 981.832989][T18562] [ 981.833014][T18562] dump_stack_lvl+0x16c/0x1f0 [ 981.833085][T18562] should_fail_ex+0x512/0x640 [ 981.833137][T18562] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 981.833193][T18562] should_failslab+0xc2/0x120 [ 981.833252][T18562] __kmalloc_cache_noprof+0x6a/0x3e0 [ 981.833285][T18562] ? preempt_count_add+0x76/0x150 [ 981.833334][T18562] ? mpi_alloc+0x46/0x230 [ 981.833390][T18562] mpi_alloc+0x46/0x230 [ 981.833428][T18562] mpi_read_raw_from_sgl+0x222/0x5b0 [ 981.833470][T18562] ? __pfx_mpi_read_raw_from_sgl+0x10/0x10 [ 981.833520][T18562] ? kasan_save_track+0x14/0x30 [ 981.833557][T18562] ? __kasan_kmalloc+0xaa/0xb0 [ 981.833607][T18562] rsa_enc+0x15d/0x3b0 [ 981.833644][T18562] ? __pfx_rsa_enc+0x10/0x10 [ 981.833679][T18562] ? __virt_addr_valid+0x81/0x610 [ 981.833719][T18562] ? __phys_addr+0xe8/0x180 [ 981.833757][T18562] ? sg_init_one+0xf5/0x1b0 [ 981.833807][T18562] rsassa_pkcs1_verify+0x502/0xb60 [ 981.833861][T18562] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 981.833925][T18562] ? rsa_max_size+0xd/0x70 [ 981.833957][T18562] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 981.834004][T18562] public_key_verify_signature+0x672/0x970 [ 981.834047][T18562] ? __pfx_public_key_verify_signature+0x10/0x10 [ 981.834114][T18562] ? __pfx_public_key_verify_signature_2+0x10/0x10 [ 981.834156][T18562] verify_signature+0xdf/0x130 [ 981.834192][T18562] pkcs7_validate_trust+0x220/0x7e0 [ 981.834246][T18562] verify_pkcs7_message_sig+0x12c/0x250 [ 981.834294][T18562] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 981.834341][T18562] ? kfree+0x2b4/0x4d0 [ 981.834368][T18562] ? public_key_signature_free+0xda/0x110 [ 981.834414][T18562] ? pkcs7_parse_message+0x536/0x720 [ 981.834460][T18562] verify_pkcs7_signature+0x6d/0xa0 [ 981.834511][T18562] valid_regdb+0x211/0x590 [ 981.834558][T18562] ? __pfx___mutex_lock+0x10/0x10 [ 981.834618][T18562] ? __pfx_valid_regdb+0x10/0x10 [ 981.834692][T18562] reg_reload_regdb+0x11a/0x460 [ 981.834726][T18562] ? __pfx_reg_reload_regdb+0x10/0x10 [ 981.834760][T18562] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 981.834799][T18562] ? nl80211_pre_doit+0x1b0/0xb10 [ 981.834845][T18562] genl_family_rcv_msg_doit+0x206/0x2f0 [ 981.834885][T18562] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 981.834919][T18562] ? rcu_is_watching+0x12/0xc0 [ 981.834966][T18562] ? bpf_lsm_capable+0x9/0x10 [ 981.834996][T18562] ? security_capable+0x7e/0x260 [ 981.835038][T18562] genl_rcv_msg+0x55c/0x800 [ 981.835078][T18562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 981.835113][T18562] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 981.835153][T18562] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 981.835230][T18562] ? __pfx_nl80211_post_doit+0x10/0x10 [ 981.835275][T18562] netlink_rcv_skb+0x155/0x420 [ 981.835327][T18562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 981.835364][T18562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 981.835432][T18562] ? netlink_deliver_tap+0x1ae/0xd30 [ 981.835488][T18562] genl_rcv+0x28/0x40 [ 981.835516][T18562] netlink_unicast+0x5aa/0x870 [ 981.835578][T18562] ? __pfx_netlink_unicast+0x10/0x10 [ 981.835631][T18562] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 981.835696][T18562] netlink_sendmsg+0x8d1/0xdd0 [ 981.835755][T18562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.835811][T18562] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 981.835855][T18562] ____sys_sendmsg+0xa95/0xc70 [ 981.835893][T18562] ? copy_msghdr_from_user+0x10a/0x160 [ 981.835943][T18562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.835991][T18562] ? __pfx_futex_wake_mark+0x10/0x10 [ 981.836047][T18562] ___sys_sendmsg+0x134/0x1d0 [ 981.836100][T18562] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.836200][T18562] __sys_sendmsg+0x16d/0x220 [ 981.836263][T18562] ? __pfx___sys_sendmsg+0x10/0x10 [ 981.836310][T18562] ? __x64_sys_futex+0x1e0/0x4c0 [ 981.836377][T18562] do_syscall_64+0xcd/0x4c0 [ 981.836461][T18562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.836511][T18562] RIP: 0033:0x7f436378eba9 [ 981.836537][T18562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.836577][T18562] RSP: 002b:00007f436453c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.836609][T18562] RAX: ffffffffffffffda RBX: 00007f43639d5fa0 RCX: 00007f436378eba9 [ 981.836631][T18562] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009 [ 981.836650][T18562] RBP: 00007f4363811e19 R08: 0000000000000000 R09: 0000000000000000 [ 981.836670][T18562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.836689][T18562] R13: 00007f43639d6038 R14: 00007f43639d5fa0 R15: 00007ffee8cad7d8 [ 981.836730][T18562] [ 982.318654][T18524] Bluetooth: hci0: command 0x0c1a tx timeout [ 982.324766][T18524] Bluetooth: hci1: command 0x0c1a tx timeout [ 982.330885][T18524] Bluetooth: hci3: command 0x0c1a tx timeout [ 982.474608][T18568] syz.4.2486: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 982.566376][T18568] CPU: 1 UID: 0 PID: 18568 Comm: syz.4.2486 Tainted: G U syzkaller #0 PREEMPT(full) [ 982.566426][T18568] Tainted: [U]=USER [ 982.566438][T18568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 982.566457][T18568] Call Trace: [ 982.566468][T18568] [ 982.566481][T18568] dump_stack_lvl+0x16c/0x1f0 [ 982.566542][T18568] warn_alloc+0x248/0x3a0 [ 982.566586][T18568] ? __pfx_warn_alloc+0x10/0x10 [ 982.566653][T18568] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 982.566687][T18568] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 982.566723][T18568] ? __pfx___might_resched+0x10/0x10 [ 982.566758][T18568] ? rcu_is_watching+0x12/0xc0 [ 982.566791][T18568] ? trace_contention_end+0xdd/0x130 [ 982.566838][T18568] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 982.566871][T18568] ? tomoyo_path_number_perm+0x295/0x580 [ 982.566921][T18568] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 982.566952][T18568] ? __pfx___mutex_lock+0x10/0x10 [ 982.567005][T18568] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 982.567056][T18568] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 982.567087][T18568] __vmalloc_node_noprof+0xad/0xf0 [ 982.567118][T18568] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 982.567156][T18568] dvb_dvr_do_ioctl+0x15d/0x290 [ 982.567197][T18568] dvb_usercopy+0x167/0x340 [ 982.567227][T18568] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 982.567263][T18568] ? __pfx_dvb_usercopy+0x10/0x10 [ 982.567311][T18568] ? __fget_files+0x20e/0x3c0 [ 982.567355][T18568] dvb_dvr_ioctl+0x29/0x40 [ 982.567385][T18568] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 982.567418][T18568] __x64_sys_ioctl+0x18b/0x210 [ 982.567471][T18568] do_syscall_64+0xcd/0x4c0 [ 982.567532][T18568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.567566][T18568] RIP: 0033:0x7f495d98eba9 [ 982.567591][T18568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 982.567624][T18568] RSP: 002b:00007f495e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 982.567655][T18568] RAX: ffffffffffffffda RBX: 00007f495dbd5fa0 RCX: 00007f495d98eba9 [ 982.567677][T18568] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 982.567698][T18568] RBP: 00007f495da11e19 R08: 0000000000000000 R09: 0000000000000000 [ 982.567719][T18568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.567739][T18568] R13: 00007f495dbd6038 R14: 00007f495dbd5fa0 R15: 00007ffefa6af6a8 [ 982.567782][T18568] [ 982.567794][T18568] Mem-Info: [ 982.711487][T18574] Invalid ELF header magic: != ELF [ 982.713603][T18568] active_anon:10181 inactive_anon:7164 isolated_anon:0 [ 982.713603][T18568] active_file:21917 inactive_file:43320 isolated_file:0 [ 982.713603][T18568] unevictable:768 dirty:4491 writeback:0 [ 982.713603][T18568] slab_reclaimable:11838 slab_unreclaimable:99023 [ 982.713603][T18568] mapped:39152 shmem:5441 pagetables:1284 [ 982.713603][T18568] sec_pagetables:0 bounce:0 [ 982.713603][T18568] kernel_misc_reclaimable:0 [ 982.713603][T18568] free:1275838 free_pcp:8060 free_cma:0 [ 982.922063][T18568] Node 0 active_anon:40724kB inactive_anon:28656kB active_file:87212kB inactive_file:173148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156356kB dirty:17732kB writeback:0kB shmem:20228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12588kB pagetables:5068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 983.007205][T18568] Node 1 active_anon:0kB inactive_anon:0kB active_file:456kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:252kB dirty:232kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 983.073209][T18568] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 983.137546][T18568] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 983.143801][T18568] Node 0 DMA32 free:1171300kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40676kB inactive_anon:28656kB active_file:85956kB inactive_file:173076kB unevictable:1536kB writepending:17732kB present:3129332kB managed:2539532kB mlocked:0kB bounce:0kB free_pcp:29888kB local_pcp:10768kB free_cma:0kB [ 983.232579][T18568] lowmem_reserve[]: 0 0 1 1 1 [ 983.254103][T18568] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1256kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 983.380532][T18568] lowmem_reserve[]: 0 0 0 0 0 [ 983.390679][T18568] Node 1 Normal free:3916424kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:456kB inactive_file:132kB unevictable:1536kB writepending:232kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:648kB local_pcp:0kB free_cma:0kB [ 983.449987][T18568] lowmem_reserve[]: 0 0 0 0 0 [ 983.454958][T18568] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 983.468322][T18568] Node 0 DMA32: 452*4kB (UME) 1255*8kB (UME) 1581*16kB (UME) 1297*32kB (UME) 829*64kB (UME) 674*128kB (ME) 330*256kB (ME) 123*512kB (UME) 67*1024kB (UM) 4*2048kB (UM) 178*4096kB (UME) = 1171320kB [ 983.488052][T18568] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 983.500350][T18568] Node 1 Normal: 170*4kB (UME) 58*8kB (UME) 47*16kB (UME) 193*32kB (UME) 90*64kB (UE) 29*128kB (UE) 14*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 949*4096kB (UM) = 3916424kB [ 983.519447][T18568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.529440][T18568] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 983.539997][T18568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.549795][T18568] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 983.559236][T18568] 70706 total pagecache pages [ 983.564421][T18568] 44 pages in swap cache [ 983.568715][T18568] Free swap = 115740kB [ 983.573013][T18568] Total swap = 124996kB [ 983.577279][T18568] 2097051 pages RAM [ 983.581976][T18568] 0 pages HighMem/MovableOnly [ 983.586686][T18568] 430206 pages reserved [ 983.592241][T18568] 0 pages cma reserved [ 983.713503][T18588] FAULT_INJECTION: forcing a failure. [ 983.713503][T18588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.733843][T18588] CPU: 0 UID: 0 PID: 18588 Comm: syz.2.2488 Tainted: G U syzkaller #0 PREEMPT(full) [ 983.733894][T18588] Tainted: [U]=USER [ 983.733905][T18588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 983.733924][T18588] Call Trace: [ 983.733934][T18588] [ 983.733947][T18588] dump_stack_lvl+0x16c/0x1f0 [ 983.734001][T18588] should_fail_ex+0x512/0x640 [ 983.734059][T18588] _copy_from_iter+0x29f/0x1720 [ 983.734100][T18588] ? __alloc_skb+0x200/0x380 [ 983.734147][T18588] ? __pfx__copy_from_iter+0x10/0x10 [ 983.734187][T18588] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 983.734249][T18588] ? __lock_acquire+0xb97/0x1ce0 [ 983.734306][T18588] netlink_sendmsg+0x829/0xdd0 [ 983.734365][T18588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.734424][T18588] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 983.734469][T18588] ____sys_sendmsg+0xa95/0xc70 [ 983.734508][T18588] ? copy_msghdr_from_user+0x10a/0x160 [ 983.734557][T18588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.734615][T18588] ___sys_sendmsg+0x134/0x1d0 [ 983.734670][T18588] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.734773][T18588] __sys_sendmsg+0x16d/0x220 [ 983.734826][T18588] ? __pfx___sys_sendmsg+0x10/0x10 [ 983.734902][T18588] do_syscall_64+0xcd/0x4c0 [ 983.734958][T18588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.734992][T18588] RIP: 0033:0x7f436378eba9 [ 983.735018][T18588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.735050][T18588] RSP: 002b:00007f436453c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.735081][T18588] RAX: ffffffffffffffda RBX: 00007f43639d5fa0 RCX: 00007f436378eba9 [ 983.735104][T18588] RDX: 0000000020000000 RSI: 0000200000002040 RDI: 0000000000000003 [ 983.735126][T18588] RBP: 00007f436453c090 R08: 0000000000000000 R09: 0000000000000000 [ 983.735147][T18588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.735166][T18588] R13: 00007f43639d6038 R14: 00007f43639d5fa0 R15: 00007ffee8cad7d8 [ 983.735215][T18588] [ 985.556473][T18594] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 986.122246][T18617] FAULT_INJECTION: forcing a failure. [ 986.122246][T18617] name failslab, interval 1, probability 0, space 0, times 0 [ 986.146847][T18617] CPU: 1 UID: 0 PID: 18617 Comm: syz.2.2494 Tainted: G U syzkaller #0 PREEMPT(full) [ 986.146903][T18617] Tainted: [U]=USER [ 986.146915][T18617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 986.146937][T18617] Call Trace: [ 986.146949][T18617] [ 986.146973][T18617] dump_stack_lvl+0x16c/0x1f0 [ 986.147029][T18617] should_fail_ex+0x512/0x640 [ 986.147084][T18617] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 986.147126][T18617] should_failslab+0xc2/0x120 [ 986.147174][T18617] __kmalloc_cache_noprof+0x6a/0x3e0 [ 986.147214][T18617] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 986.147261][T18617] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 986.147306][T18617] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 986.147346][T18617] hugetlb_reserve_pages+0x151/0xf40 [ 986.147402][T18617] ? __vma_enter_locked+0x163/0x3f0 [ 986.147440][T18617] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 986.147497][T18617] ? atime_needs_update+0x8b/0x710 [ 986.147564][T18617] hugetlbfs_file_mmap+0x4a1/0x730 [ 986.147629][T18617] __mmap_region+0x1311/0x27b0 [ 986.147677][T18617] ? __pfx___mmap_region+0x10/0x10 [ 986.147730][T18617] ? find_held_lock+0x2b/0x80 [ 986.147770][T18617] ? mark_held_locks+0x49/0x80 [ 986.147814][T18617] ? finish_task_switch.isra.0+0x221/0xc10 [ 986.147869][T18617] ? lockdep_hardirqs_on+0x7c/0x110 [ 986.147937][T18617] ? finish_task_switch.isra.0+0x221/0xc10 [ 986.148053][T18617] ? trace_cap_capable+0x18d/0x200 [ 986.148107][T18617] mmap_region+0x32b/0x3f0 [ 986.148157][T18617] do_mmap+0xa3e/0x1210 [ 986.148219][T18617] ? __pfx_do_mmap+0x10/0x10 [ 986.148270][T18617] ? __pfx_down_write_killable+0x10/0x10 [ 986.148316][T18617] vm_mmap_pgoff+0x29e/0x470 [ 986.148375][T18617] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 986.148422][T18617] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 986.148478][T18617] ? hugetlbfs_get_inode+0x31f/0x730 [ 986.148531][T18617] ksys_mmap_pgoff+0x1c8/0x5c0 [ 986.148588][T18617] __x64_sys_mmap+0x125/0x190 [ 986.148654][T18617] do_syscall_64+0xcd/0x4c0 [ 986.148713][T18617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.148748][T18617] RIP: 0033:0x7f436378eba9 [ 986.148776][T18617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.148810][T18617] RSP: 002b:00007f436453c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 986.148843][T18617] RAX: ffffffffffffffda RBX: 00007f43639d5fa0 RCX: 00007f436378eba9 [ 986.148866][T18617] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 986.148887][T18617] RBP: 00007f4363811e19 R08: 0000000000000602 R09: 0000300000000000 [ 986.148910][T18617] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 986.148931][T18617] R13: 00007f43639d6038 R14: 00007f43639d5fa0 R15: 00007ffee8cad7d8 [ 986.148989][T18617] [ 987.311659][T18632] zswap: compressor not available [ 987.865781][T18639] FAULT_INJECTION: forcing a failure. [ 987.865781][T18639] name failslab, interval 1, probability 0, space 0, times 0 [ 987.879366][T18639] CPU: 1 UID: 8 PID: 18639 Comm: syz.2.2498 Tainted: G U syzkaller #0 PREEMPT(full) [ 987.879418][T18639] Tainted: [U]=USER [ 987.879430][T18639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 987.879449][T18639] Call Trace: [ 987.879461][T18639] [ 987.879473][T18639] dump_stack_lvl+0x16c/0x1f0 [ 987.879528][T18639] should_fail_ex+0x512/0x640 [ 987.879578][T18639] ? __kmalloc_noprof+0xbf/0x510 [ 987.879620][T18639] ? lsm_blob_alloc+0x68/0x90 [ 987.879648][T18639] should_failslab+0xc2/0x120 [ 987.879691][T18639] __kmalloc_noprof+0xd2/0x510 [ 987.879738][T18639] lsm_blob_alloc+0x68/0x90 [ 987.879769][T18639] security_sk_alloc+0x30/0x270 [ 987.879810][T18639] sk_prot_alloc+0x1c7/0x2a0 [ 987.879849][T18639] sk_alloc+0x36/0xc20 [ 987.879896][T18639] __netlink_create+0x5e/0x2c0 [ 987.879946][T18639] ? __wake_up+0x3f/0x60 [ 987.879985][T18639] netlink_create+0x39e/0x620 [ 987.880030][T18639] ? __pfx_genl_bind+0x10/0x10 [ 987.880060][T18639] ? __pfx_genl_unbind+0x10/0x10 [ 987.880090][T18639] ? __pfx_genl_release+0x10/0x10 [ 987.880128][T18639] __sock_create+0x335/0x8d0 [ 987.880174][T18639] __sys_socket+0x14d/0x260 [ 987.880215][T18639] ? __pfx___sys_socket+0x10/0x10 [ 987.880254][T18639] ? xfd_validate_state+0x61/0x180 [ 987.880302][T18639] ? __pfx_ksys_read+0x10/0x10 [ 987.880347][T18639] __x64_sys_socket+0x72/0xb0 [ 987.880386][T18639] ? lockdep_hardirqs_on+0x7c/0x110 [ 987.880433][T18639] do_syscall_64+0xcd/0x4c0 [ 987.880487][T18639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.880520][T18639] RIP: 0033:0x7f436378eba9 [ 987.880545][T18639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.880578][T18639] RSP: 002b:00007f436453c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 987.880609][T18639] RAX: ffffffffffffffda RBX: 00007f43639d5fa0 RCX: 00007f436378eba9 [ 987.880631][T18639] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 987.880650][T18639] RBP: 00007f4363811e19 R08: 0000000000000000 R09: 0000000000000000 [ 987.880670][T18639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.880690][T18639] R13: 00007f43639d6038 R14: 00007f43639d5fa0 R15: 00007ffee8cad7d8 [ 987.880731][T18639] [ 988.223181][T18642] netlink: zone id is out of range [ 988.232660][T18642] netlink: zone id is out of range [ 989.758773][T18656] netlink: zone id is out of range [ 989.764105][T18656] netlink: zone id is out of range [ 990.104996][T18663] netlink: zone id is out of range [ 990.120884][T18663] netlink: zone id is out of range [ 990.143117][T18663] netlink: zone id is out of range [ 990.148383][T18663] netlink: zone id is out of range [ 990.171763][T18663] netlink: zone id is out of range [ 990.182076][T18663] netlink: zone id is out of range [ 991.754202][T18686] Invalid ELF header magic: != ELF [ 992.319175][T18524] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 992.340679][T18524] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 992.349871][T18524] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 992.358316][T18524] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 992.396144][T18524] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 993.336372][T18691] chnl_net:caif_netlink_parms(): no params data found [ 993.689891][T18691] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.697321][T18691] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.705152][T18691] bridge_slave_0: entered allmulticast mode [ 993.713561][T18691] bridge_slave_0: entered promiscuous mode [ 993.731715][T18691] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.742645][T18691] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.750444][T18691] bridge_slave_1: entered allmulticast mode [ 993.761706][T18691] bridge_slave_1: entered promiscuous mode [ 994.064085][T18691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.086443][T18691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.274434][T18691] team0: Port device team_slave_0 added [ 994.354126][T18691] team0: Port device team_slave_1 added [ 994.488288][T18524] Bluetooth: hci6: command tx timeout [ 994.511402][T18691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.547506][T18691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.583628][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.617845][T18691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.656910][T18691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.671848][T18691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.697846][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.707914][T18691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.015996][T18691] hsr_slave_0: entered promiscuous mode [ 995.068011][T18691] hsr_slave_1: entered promiscuous mode [ 995.105567][T18691] debugfs: 'hsr0' already exists in 'hsr' [ 995.168004][T18691] Cannot create hsr debugfs directory [ 995.292632][T18711] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 995.741797][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.748161][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.374676][T18723] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 996.546857][T18524] Bluetooth: hci6: command tx timeout [ 997.857615][T18730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 997.864401][T18730] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 997.892187][T18730] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 997.898608][T18730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 997.937807][T18730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 997.961219][T18730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 997.971107][T18730] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 997.977336][T18730] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 997.986490][T18730] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 998.420800][T18760] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input38 [ 998.526155][T18762] cgroup: fork rejected by pids controller in /syz2 [ 999.242545][T18906] ubi0: attaching mtd0 [ 999.296900][T18906] ubi0: scanning is finished [ 999.302232][T18906] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 999.738318][T18524] Bluetooth: hci2: command 0x0c1a tx timeout [ 999.887731][T18524] Bluetooth: hci0: command 0x0c1a tx timeout [ 999.893904][T18524] Bluetooth: hci5: command 0x0c1a tx timeout [ 999.897382][T18523] Bluetooth: hci4: command 0x0406 tx timeout [ 999.976986][T10985] Bluetooth: hci6: command 0x0419 tx timeout [ 999.977774][T18523] Bluetooth: hci3: command 0x0c1a tx timeout [ 999.984473][T18524] Bluetooth: hci1: command 0x0c1a tx timeout [ 1000.349235][T18906] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1002.041766][T18524] Bluetooth: hci6: command 0x0419 tx timeout [ 1004.103789][T18524] Bluetooth: hci6: command 0x0419 tx timeout [ 1006.176038][T18524] Bluetooth: hci6: command 0x0419 tx timeout [ 1007.024303][T19011] vhci_hcd: invalid port number 16 [ 1007.036922][T19011] vhci_hcd: invalid port number 16 [ 1008.681768][T19017] FAULT_INJECTION: forcing a failure. [ 1008.681768][T19017] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.925949][T19017] CPU: 1 UID: 0 PID: 19017 Comm: syz.2.2544 Tainted: G U syzkaller #0 PREEMPT(full) [ 1008.926006][T19017] Tainted: [U]=USER [ 1008.926019][T19017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1008.926040][T19017] Call Trace: [ 1008.926053][T19017] [ 1008.926068][T19017] dump_stack_lvl+0x16c/0x1f0 [ 1008.926128][T19017] should_fail_ex+0x512/0x640 [ 1008.926180][T19017] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1008.926228][T19017] should_failslab+0xc2/0x120 [ 1008.926274][T19017] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1008.926338][T19017] ? getname_flags.part.0+0x4c/0x550 [ 1008.926401][T19017] getname_flags.part.0+0x4c/0x550 [ 1008.926461][T19017] getname_flags+0x93/0xf0 [ 1008.926508][T19017] do_sys_openat2+0xb8/0x1d0 [ 1008.926565][T19017] ? __pfx_do_sys_openat2+0x10/0x10 [ 1008.926635][T19017] __x64_sys_openat+0x174/0x210 [ 1008.926668][T19017] ? __pfx___x64_sys_openat+0x10/0x10 [ 1008.926718][T19017] do_syscall_64+0xcd/0x4c0 [ 1008.926777][T19017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.926813][T19017] RIP: 0033:0x7f436378eba9 [ 1008.926841][T19017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.926877][T19017] RSP: 002b:00007f436453c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1008.926909][T19017] RAX: ffffffffffffffda RBX: 00007f43639d5fa0 RCX: 00007f436378eba9 [ 1008.926931][T19017] RDX: 0000000000000140 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1008.926953][T19017] RBP: 00007f4363811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1008.926974][T19017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.926994][T19017] R13: 00007f43639d6038 R14: 00007f43639d5fa0 R15: 00007ffee8cad7d8 [ 1008.927037][T19017] [ 1010.588471][T19030] net_ratelimit: 26 callbacks suppressed [ 1010.588501][T19030] netlink: zone id is out of range [ 1010.632758][T19030] netlink: zone id is out of range [ 1013.379533][T18775] syz.2.2532 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1013.389547][T18775] CPU: 0 UID: 0 PID: 18775 Comm: syz.2.2532 Tainted: G U syzkaller #0 PREEMPT(full) [ 1013.389596][T18775] Tainted: [U]=USER [ 1013.389607][T18775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1013.389626][T18775] Call Trace: [ 1013.389637][T18775] [ 1013.389650][T18775] dump_stack_lvl+0x16c/0x1f0 [ 1013.389706][T18775] dump_header+0x101/0x930 [ 1013.389754][T18775] oom_kill_process+0x272/0xa40 [ 1013.389793][T18775] ? __lock_acquire+0x62e/0x1ce0 [ 1013.389843][T18775] out_of_memory+0x350/0x1700 [ 1013.389910][T18775] ? __pfx_out_of_memory+0x10/0x10 [ 1013.389963][T18775] mem_cgroup_out_of_memory+0x118/0x130 [ 1013.390014][T18775] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1013.390076][T18775] ? do_raw_spin_unlock+0x172/0x230 [ 1013.390135][T18775] try_charge_memcg+0x72b/0xd50 [ 1013.390190][T18775] ? __pfx_try_charge_memcg+0x10/0x10 [ 1013.390232][T18775] ? __print_lock_name+0x41/0xe0 [ 1013.390268][T18775] ? rcu_read_unlock+0x17/0x60 [ 1013.390321][T18775] charge_memcg+0x8a/0x230 [ 1013.390363][T18775] __mem_cgroup_charge+0x2b/0x1e0 [ 1013.390411][T18775] shmem_alloc_and_add_folio+0x514/0xc20 [ 1013.390461][T18775] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1013.390523][T18775] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1013.390573][T18775] shmem_get_folio_gfp+0x67f/0x1600 [ 1013.390622][T18775] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1013.390677][T18775] shmem_write_begin+0x160/0x300 [ 1013.390723][T18775] ? __pfx_shmem_write_begin+0x10/0x10 [ 1013.390759][T18775] ? timestamp_truncate+0x21e/0x2d0 [ 1013.390802][T18775] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1013.390867][T18775] generic_perform_write+0x3c2/0x900 [ 1013.390920][T18775] ? __pfx_generic_perform_write+0x10/0x10 [ 1013.390962][T18775] ? inode_needs_update_time.part.0+0x191/0x270 [ 1013.391016][T18775] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1013.391063][T18775] shmem_file_write_iter+0x10e/0x140 [ 1013.391115][T18775] __kernel_write_iter+0x317/0xb10 [ 1013.391160][T18775] ? __pfx___kernel_write_iter+0x10/0x10 [ 1013.391206][T18775] ? __up_read+0x1f8/0x750 [ 1013.391260][T18775] ? dump_user_range+0x756/0xb70 [ 1013.391293][T18775] ? dump_user_range+0x16e/0xb70 [ 1013.391334][T18775] dump_user_range+0x413/0xb70 [ 1013.391379][T18775] ? __pfx_dump_user_range+0x10/0x10 [ 1013.391417][T18775] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 1013.391481][T18775] ? __pfx_writenote+0x10/0x10 [ 1013.391530][T18775] elf_core_dump+0x2929/0x3b60 [ 1013.391603][T18775] ? __pfx_elf_core_dump+0x10/0x10 [ 1013.391649][T18775] ? check_preempt_wakeup_fair+0x51e/0x9d0 [ 1013.391706][T18775] ? find_held_lock+0x2b/0x80 [ 1013.391764][T18775] ? 0xffffffffff600000 [ 1013.391791][T18775] ? rcu_is_watching+0x12/0xc0 [ 1013.391838][T18775] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1013.391878][T18775] ? lockdep_hardirqs_on+0x7c/0x110 [ 1013.391985][T18775] ? vfs_coredump+0x2b97/0x5670 [ 1013.392015][T18775] vfs_coredump+0x2b97/0x5670 [ 1013.392065][T18775] ? __pfx_vfs_coredump+0x10/0x10 [ 1013.392101][T18775] ? __lock_acquire+0x62e/0x1ce0 [ 1013.392153][T18775] ? __lock_acquire+0x62e/0x1ce0 [ 1013.392209][T18775] ? lock_acquire+0x179/0x350 [ 1013.392271][T18775] ? is_bpf_text_address+0x8a/0x1a0 [ 1013.392313][T18775] ? bpf_ksym_find+0x124/0x1c0 [ 1013.392354][T18775] ? __kernel_text_address+0xd/0x40 [ 1013.392384][T18775] ? unwind_get_return_address+0x59/0xa0 [ 1013.392419][T18775] ? arch_stack_walk+0xa6/0x100 [ 1013.392472][T18775] ? stack_trace_save+0x8e/0xc0 [ 1013.392510][T18775] ? __pfx_stack_trace_save+0x10/0x10 [ 1013.392549][T18775] ? stack_depot_save_flags+0x29/0x9c0 [ 1013.392599][T18775] ? __lock_acquire+0xb97/0x1ce0 [ 1013.392716][T18775] ? proc_coredump_connector+0x2d1/0x4f0 [ 1013.392758][T18775] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1013.392808][T18775] ? rcu_is_watching+0x12/0xc0 [ 1013.392847][T18775] get_signal+0x22e3/0x26d0 [ 1013.392903][T18775] ? __pfx_get_signal+0x10/0x10 [ 1013.392941][T18775] ? __pfx_force_sig+0x10/0x10 [ 1013.392987][T18775] arch_do_signal_or_restart+0x8f/0x790 [ 1013.393031][T18775] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1013.393084][T18775] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 1013.393132][T18775] ? do_error_trap+0x214/0x240 [ 1013.393188][T18775] irqentry_exit_to_user_mode+0x13e/0x290 [ 1013.393241][T18775] asm_exc_stack_segment+0x26/0x30 [ 1013.393271][T18775] RIP: 0033:0x7f436378ebb1 [ 1013.393296][T18775] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1013.393328][T18775] RSP: 002b:0100000000000005 EFLAGS: 00010217 [ 1013.393354][T18775] RAX: 0000000000000000 RBX: 00007f43639d6090 RCX: 00007f436378eba9 [ 1013.393374][T18775] RDX: 0000000000000000 RSI: 0100000000000005 RDI: 0000000020003b46 [ 1013.393393][T18775] RBP: 00007f4363811e19 R08: 0000000000000002 R09: 0000000000000000 [ 1013.393411][T18775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.393428][T18775] R13: 00007f43639d6128 R14: 00007f43639d6090 R15: 00007ffee8cad7d8 [ 1013.393470][T18775] [ 1013.952420][T18775] memory: usage 307200kB, limit 307200kB, failcnt 24128 [ 1013.959423][T18775] memory+swap: usage 423064kB, limit 9007199254740988kB, failcnt 0 [ 1013.967330][T18775] kmem: usage 3716kB, limit 9007199254740988kB, failcnt 0 [ 1013.974499][T18775] Memory cgroup stats for /syz2: [ 1013.974637][T18775] cache 307556352 [ 1013.984067][T18775] rss 3203072 [ 1013.987352][T18775] rss_huge 0 [ 1013.990576][T18775] shmem 307539968 [ 1013.994208][T18775] mapped_file 0 [ 1013.997663][T18775] dirty 0 [ 1014.000636][T18775] writeback 0 [ 1014.003937][T18775] workingset_refault_anon 5012 [ 1014.009132][T18775] workingset_refault_file 3528 [ 1014.013904][T18775] swap 118644736 [ 1014.017444][T18775] swapcached 0 [ 1014.020845][T18775] pgpgin 877789 [ 1014.024320][T18775] pgpgout 810605 [ 1014.027864][T18775] pgfault 791037 [ 1014.031446][T18775] pgmajfault 1029 [ 1014.035077][T18775] inactive_anon 308359168 [ 1014.039432][T18775] active_anon 2318336 [ 1014.043414][T18775] inactive_file 0 [ 1014.047045][T18775] active_file 0 [ 1014.050522][T18775] unevictable 0 [ 1014.053976][T18775] hierarchical_memory_limit 314572800 [ 1014.059366][T18775] hierarchical_memsw_limit 9223372036854771712 [ 1014.065519][T18775] total_cache 307556352 [ 1014.069691][T18775] total_rss 3203072 [ 1014.073497][T18775] total_rss_huge 0 [ 1014.077212][T18775] total_shmem 307539968 [ 1014.082233][T18775] total_mapped_file 0 [ 1014.086220][T18775] total_dirty 0 [ 1014.089698][T18775] total_writeback 0 [ 1014.093502][T18775] total_workingset_refault_anon 5012 [ 1014.098801][T18775] total_workingset_refault_file 3528 [ 1014.104098][T18775] total_swap 118644736 [ 1014.108280][T18775] total_swapcached 0 [ 1014.112520][T18775] total_pgpgin 877789 [ 1014.116504][T18775] total_pgpgout 810605 [ 1014.120588][T18775] total_pgfault 791037 [ 1014.124658][T18775] total_pgmajfault 1029 [ 1014.128909][T18775] total_inactive_anon 308359168 [ 1014.133758][T18775] total_active_anon 2318336 [ 1014.138288][T18775] total_inactive_file 0 [ 1014.142441][T18775] total_active_file 0 [ 1014.146423][T18775] total_unevictable 0 [ 1014.150421][T18775] anon_cost 13232 [ 1014.154077][T18775] file_cost 15 [ 1014.157468][T18775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2532,pid=18790,uid=0 [ 1014.172510][T18775] Memory cgroup out of memory: Killed process 18790 (syz.2.2532) total-vm:102480kB, anon-rss:2140kB, file-rss:42916kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 1018.892915][T19051] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1019.362062][T19058] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 1019.708535][T19060] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 1020.967874][T19072] random: crng reseeded on system resumption [ 1021.369569][T19079] FAULT_INJECTION: forcing a failure. [ 1021.369569][T19079] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.417225][T19079] CPU: 0 UID: 0 PID: 19079 Comm: syz.2.2557 Tainted: G U syzkaller #0 PREEMPT(full) [ 1021.417275][T19079] Tainted: [U]=USER [ 1021.417287][T19079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1021.417306][T19079] Call Trace: [ 1021.417317][T19079] [ 1021.417329][T19079] dump_stack_lvl+0x16c/0x1f0 [ 1021.417382][T19079] should_fail_ex+0x512/0x640 [ 1021.417432][T19079] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1021.417471][T19079] should_failslab+0xc2/0x120 [ 1021.417513][T19079] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1021.417547][T19079] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 1021.417592][T19079] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 1021.417636][T19079] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 1021.417673][T19079] hugetlb_reserve_pages+0x151/0xf40 [ 1021.417723][T19079] ? __vma_enter_locked+0x163/0x3f0 [ 1021.417759][T19079] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 1021.417811][T19079] ? atime_needs_update+0x8b/0x710 [ 1021.417879][T19079] hugetlbfs_file_mmap+0x4a1/0x730 [ 1021.417940][T19079] __mmap_region+0x1311/0x27b0 [ 1021.417985][T19079] ? __pfx___mmap_region+0x10/0x10 [ 1021.418054][T19079] ? is_bpf_text_address+0x94/0x1a0 [ 1021.418097][T19079] ? kernel_text_address+0x8d/0x100 [ 1021.418129][T19079] ? __kernel_text_address+0xd/0x40 [ 1021.418158][T19079] ? unwind_get_return_address+0x59/0xa0 [ 1021.418193][T19079] ? arch_stack_walk+0xa6/0x100 [ 1021.418298][T19079] ? trace_cap_capable+0x18d/0x200 [ 1021.418347][T19079] mmap_region+0x32b/0x3f0 [ 1021.418395][T19079] do_mmap+0xa3e/0x1210 [ 1021.418452][T19079] ? __pfx_do_mmap+0x10/0x10 [ 1021.418499][T19079] ? __pfx_down_write_killable+0x10/0x10 [ 1021.418541][T19079] vm_mmap_pgoff+0x29e/0x470 [ 1021.418597][T19079] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1021.418644][T19079] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1021.418696][T19079] ? hugetlbfs_get_inode+0x31f/0x730 [ 1021.418745][T19079] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1021.418799][T19079] __x64_sys_mmap+0x125/0x190 [ 1021.418853][T19079] do_syscall_64+0xcd/0x4c0 [ 1021.418915][T19079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.418948][T19079] RIP: 0033:0x7f436378eba9 [ 1021.418975][T19079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.419008][T19079] RSP: 002b:00007f436453c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1021.419039][T19079] RAX: ffffffffffffffda RBX: 00007f43639d5fa0 RCX: 00007f436378eba9 [ 1021.419062][T19079] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 1021.419082][T19079] RBP: 00007f4363811e19 R08: 0000000000000602 R09: 0000300000000000 [ 1021.419104][T19079] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1021.419123][T19079] R13: 00007f43639d6038 R14: 00007f43639d5fa0 R15: 00007ffee8cad7d8 [ 1021.419165][T19079] [ 1021.952145][T10985] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1021.965270][T10985] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1021.979173][T10985] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1021.992902][T10985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1022.001674][T10985] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1022.423106][T19083] chnl_net:caif_netlink_parms(): no params data found [ 1022.696648][T19083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.709819][T19083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.717911][T19083] bridge_slave_0: entered allmulticast mode [ 1022.738656][T19083] bridge_slave_0: entered promiscuous mode [ 1022.752713][T19083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.763288][T19083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.771330][T19083] bridge_slave_1: entered allmulticast mode [ 1022.785710][T19083] bridge_slave_1: entered promiscuous mode [ 1022.850361][T19083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.873018][T19083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.958453][T19083] team0: Port device team_slave_0 added [ 1022.976324][T19083] team0: Port device team_slave_1 added [ 1023.043924][T19083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.053208][T19083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.083466][T19083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.132054][T19083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.139083][T19083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.176656][T19083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.351212][T19083] hsr_slave_0: entered promiscuous mode [ 1023.376101][T19083] hsr_slave_1: entered promiscuous mode [ 1023.399570][T19083] debugfs: 'hsr0' already exists in 'hsr' [ 1023.405851][T19083] Cannot create hsr debugfs directory [ 1024.076381][T18524] Bluetooth: hci7: command tx timeout [ 1026.145695][T18524] Bluetooth: hci7: command tx timeout [ 1028.214769][T18524] Bluetooth: hci7: command tx timeout [ 1028.576913][T10985] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1028.587285][T10985] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1028.599511][T10985] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1028.618419][T10985] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1028.635932][T10985] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1028.958155][T19123] chnl_net:caif_netlink_parms(): no params data found [ 1029.297068][T19123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.315202][T19123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.357544][T19123] bridge_slave_0: entered allmulticast mode [ 1029.367869][T19123] bridge_slave_0: entered promiscuous mode [ 1029.385514][T19123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.401310][T19123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.414116][T19123] bridge_slave_1: entered allmulticast mode [ 1029.434563][T19123] bridge_slave_1: entered promiscuous mode [ 1029.494486][T19123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.529013][T19123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.683392][T19123] team0: Port device team_slave_0 added [ 1029.692134][T19123] team0: Port device team_slave_1 added [ 1029.781229][T19123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.793922][T19123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.896404][T19123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.962885][T19123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.970162][T19123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.005447][T19123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.132211][T19139] random: crng reseeded on system resumption [ 1030.171940][T19123] hsr_slave_0: entered promiscuous mode [ 1030.196641][T19123] hsr_slave_1: entered promiscuous mode [ 1030.203206][T19123] debugfs: 'hsr0' already exists in 'hsr' [ 1030.214195][T19123] Cannot create hsr debugfs directory [ 1030.283965][T10985] Bluetooth: hci7: command tx timeout [ 1030.681980][T10985] Bluetooth: hci8: command tx timeout [ 1031.340226][T19149] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2567'. [ 1031.788780][T19153] i2c i2c-0: delete_device: Can't find device in list [ 1031.804135][T19153] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1032.761127][T10985] Bluetooth: hci8: command tx timeout [ 1034.820353][T10985] Bluetooth: hci8: command tx timeout [ 1036.899533][T10985] Bluetooth: hci8: command tx timeout [ 1052.334785][T18524] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1052.346066][T18524] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1052.356362][T18524] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1052.368044][T18524] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1052.376012][T18524] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1052.726693][T19158] chnl_net:caif_netlink_parms(): no params data found [ 1052.901657][T19158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.908997][T19158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.917082][T19158] bridge_slave_0: entered allmulticast mode [ 1052.925892][T19158] bridge_slave_0: entered promiscuous mode [ 1052.934890][T19158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.942304][T19158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.950396][T19158] bridge_slave_1: entered allmulticast mode [ 1052.958687][T19158] bridge_slave_1: entered promiscuous mode [ 1053.005387][T19158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.019825][T19158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.066248][T19158] team0: Port device team_slave_0 added [ 1053.077009][T19158] team0: Port device team_slave_1 added [ 1053.120423][T19158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.128049][T19158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.155114][T19158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.169073][T19158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.176493][T19158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.203398][T19158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.288830][T19158] hsr_slave_0: entered promiscuous mode [ 1053.295720][T19158] hsr_slave_1: entered promiscuous mode [ 1053.303243][T19158] debugfs: 'hsr0' already exists in 'hsr' [ 1053.309550][T19158] Cannot create hsr debugfs directory [ 1054.408907][T18524] Bluetooth: hci9: command tx timeout [ 1056.477783][T18524] Bluetooth: hci9: command tx timeout [ 1056.791388][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.798412][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.537295][T18524] Bluetooth: hci9: command tx timeout [ 1060.606668][T18524] Bluetooth: hci9: command tx timeout [ 1082.411898][T10985] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1082.422437][T10985] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1082.431153][T10985] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1082.440855][T10985] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1082.462668][T10985] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1082.823939][T19172] chnl_net:caif_netlink_parms(): no params data found [ 1082.966334][T19172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.982358][T19172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.996141][T19172] bridge_slave_0: entered allmulticast mode [ 1083.007337][T19172] bridge_slave_0: entered promiscuous mode [ 1083.023659][T19172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.041097][T19172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.057655][T19172] bridge_slave_1: entered allmulticast mode [ 1083.068385][T19172] bridge_slave_1: entered promiscuous mode [ 1083.166224][T19172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.188571][T19172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.268100][T19172] team0: Port device team_slave_0 added [ 1083.277844][T19172] team0: Port device team_slave_1 added [ 1083.324622][T19172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.331746][T19172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.360213][T19172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.373971][T19172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.381576][T19172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.408531][T19172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.502994][T19172] hsr_slave_0: entered promiscuous mode [ 1083.518257][T19172] hsr_slave_1: entered promiscuous mode [ 1083.524965][T19172] debugfs: 'hsr0' already exists in 'hsr' [ 1083.531333][T19172] Cannot create hsr debugfs directory [ 1084.482222][T10985] Bluetooth: hci10: command tx timeout [ 1086.551355][T10985] Bluetooth: hci10: command tx timeout [ 1088.630997][T18524] Bluetooth: hci10: command tx timeout [ 1088.850437][T18524] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1088.863654][T18524] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1088.877006][T18524] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1088.887213][T18524] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1088.896092][T18524] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1089.241606][T19184] chnl_net:caif_netlink_parms(): no params data found [ 1089.393268][T19184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.401315][T19184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.408780][T19184] bridge_slave_0: entered allmulticast mode [ 1089.423848][T19184] bridge_slave_0: entered promiscuous mode [ 1089.432955][T19184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.440853][T19184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.448445][T19184] bridge_slave_1: entered allmulticast mode [ 1089.457746][T19184] bridge_slave_1: entered promiscuous mode [ 1089.505145][T19184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.520558][T19184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.569062][T19184] team0: Port device team_slave_0 added [ 1089.578777][T19184] team0: Port device team_slave_1 added [ 1089.623123][T19184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.630776][T19184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.657357][T19184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.671174][T19184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.679150][T19184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.706160][T19184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.790318][T19184] hsr_slave_0: entered promiscuous mode [ 1089.797617][T19184] hsr_slave_1: entered promiscuous mode [ 1089.805121][T19184] debugfs: 'hsr0' already exists in 'hsr' [ 1089.810887][T19184] Cannot create hsr debugfs directory [ 1090.689969][T18524] Bluetooth: hci10: command tx timeout [ 1090.929077][T18524] Bluetooth: hci11: command tx timeout [ 1092.441072][ T31] INFO: task syz-executor:18037 blocked for more than 143 seconds. [ 1092.449368][ T31] Tainted: G U syzkaller #0 [ 1092.456058][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1092.464853][ T31] task:syz-executor state:D stack:24424 pid:18037 tgid:18037 ppid:1 task_flags:0x480140 flags:0x00004006 [ 1092.476974][ T31] Call Trace: [ 1092.480280][ T31] [ 1092.483293][ T31] __schedule+0x1190/0x5de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1092.487878][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1092.492998][ T31] ? __pfx___schedule+0x10/0x10 [ 1092.498514][ T31] ? find_held_lock+0x2b/0x80 [ 1092.503325][ T31] ? schedule+0x2d7/0x3a0 [ 1092.507715][ T31] schedule+0xe7/0x3a0 [ 1092.511908][ T31] schedule_timeout+0x257/0x290 [ 1092.516820][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1092.523229][ T31] ? mark_held_locks+0x49/0x80 [ 1092.528251][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1092.533721][ T31] __wait_for_common+0x2fc/0x4e0 [ 1092.538730][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1092.544268][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1092.549803][ T31] remove_one+0x312/0x420 [ 1092.554715][ T31] ? find_next_child+0x18f/0x280 [ 1092.559723][ T31] __simple_recursive_removal+0x158/0x610 [ 1092.565538][ T31] ? __pfx_remove_one+0x10/0x10 [ 1092.570500][ T31] debugfs_remove+0x5d/0x80 [ 1092.575068][ T31] nsim_drv_remove+0xd2/0x1d0 [ 1092.579785][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1092.585829][ T31] device_remove+0xcb/0x170 [ 1092.590722][ T31] device_release_driver_internal+0x44b/0x620 [ 1092.596836][ T31] bus_remove_device+0x22f/0x420 [ 1092.602307][ T31] device_del+0x396/0x9f0 [ 1092.606695][ T31] ? __pfx_device_del+0x10/0x10 [ 1092.612061][ T31] device_unregister+0x1d/0xc0 [ 1092.616913][ T31] del_device_store+0x355/0x4a0 [ 1092.622273][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1092.628866][ T31] ? find_held_lock+0x2b/0x80 [ 1092.634021][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1092.638907][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1092.649546][ T31] bus_attr_store+0x74/0xb0 [ 1092.654727][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 1092.669827][ T31] sysfs_kf_write+0xef/0x150 [ 1092.674527][ T31] kernfs_fop_write_iter+0x3ac/0x570 [ 1092.689716][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1092.694996][ T31] vfs_write+0x7d3/0x11d0 [ 1092.709614][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1092.715583][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1092.739089][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1092.744416][ T31] ksys_write+0x12a/0x250 [ 1092.748802][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1092.768954][ T31] do_syscall_64+0xcd/0x4c0 [ 1092.773573][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.788840][ T31] RIP: 0033:0x7fb16eb8d65f [ 1092.793319][ T31] RSP: 002b:00007ffc31636150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1092.818669][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb16eb8d65f [ 1092.826734][ T31] RDX: 0000000000000001 RSI: 00007ffc316361a0 RDI: 0000000000000005 [ 1092.848543][ T31] RBP: 00007fb16ec130c1 R08: 0000000000000000 R09: 00007ffc31635fa7 [ 1092.856896][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1092.878742][ T31] R13: 00007ffc316361a0 R14: 00007fb16f904620 R15: 0000000000000003 [ 1092.886798][ T31] [ 1092.909920][ T31] INFO: task syz.5.2420:18205 blocked for more than 143 seconds. [ 1092.917709][ T31] Tainted: G U syzkaller #0 [ 1092.995635][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1093.004743][T18524] Bluetooth: hci11: command tx timeout [ 1093.047468][ T31] task:syz.5.2420 state:D stack:27320 pid:18205 tgid:18203 ppid:14209 task_flags:0x400140 flags:0x00004004 [ 1093.087311][ T31] Call Trace: [ 1093.090649][ T31] [ 1093.093605][ T31] __schedule+0x1190/0x5de0 [ 1093.125230][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1093.133536][ T31] ? __pfx___schedule+0x10/0x10 [ 1093.156071][ T31] ? find_held_lock+0x2b/0x80 [ 1093.161260][ T31] ? schedule+0x2d7/0x3a0 [ 1093.166326][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1093.186760][ T31] schedule+0xe7/0x3a0 [ 1093.190914][ T31] schedule_preempt_disabled+0x13/0x30 [ 1093.196431][ T31] __mutex_lock+0x81b/0x1060 [ 1093.216607][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1093.222587][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1093.256393][ T31] ? __pfx_kstrtouint+0x10/0x10 [ 1093.261350][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1093.286592][ T31] nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1093.292406][ T31] ? __pfx_nsim_bus_dev_max_vfs_write+0x10/0x10 [ 1093.306566][ T31] ? __debugfs_file_get+0x1fe/0x840 [ 1093.311878][ T31] full_proxy_write+0x12e/0x1a0 [ 1093.335980][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 1093.342449][ T31] vfs_write+0x29d/0x11d0 [ 1093.355888][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1093.361012][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1093.375331][ T31] ? __fget_files+0x20e/0x3c0 [ 1093.384960][ T31] ksys_write+0x12a/0x250 [ 1093.405798][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1093.410773][ T31] do_syscall_64+0xcd/0x4c0 [ 1093.415344][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.455359][ T31] RIP: 0033:0x7f253998eba9 [ 1093.459953][ T31] RSP: 002b:00007f2537bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1093.484419][ T31] RAX: ffffffffffffffda RBX: 00007f2539bd5fa0 RCX: 00007f253998eba9 [ 1093.492601][ T31] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 1093.525076][ T31] RBP: 00007f2539a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1093.533107][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.551882][ T31] R13: 00007f2539bd6038 R14: 00007f2539bd5fa0 R15: 00007ffd5936df18 [ 1093.568876][ T31] [ 1093.587872][ T31] [ 1093.587872][ T31] Showing all locks held in the system: [ 1093.608891][ T31] 1 lock held by ksoftirqd/0/15: [ 1093.613887][ T31] #0: ffff8880b843a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1093.624069][ T31] 1 lock held by khungtaskd/31: [ 1093.631164][ T31] #0: ffffffff8e5c1420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1093.666081][ T31] 1 lock held by syz.1.215/7020: [ 1093.671082][ T31] 3 locks held by kworker/u8:9/14880: [ 1093.679788][ T31] 2 locks held by syz-executor/17485: [ 1093.685558][ T31] #0: ffffffff90388bc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1093.694925][ T31] #1: ffffffff8e5cc9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1093.705332][ T31] 7 locks held by syz-executor/18037: [ 1093.710726][ T31] #0: ffff88807d20e428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1093.720462][ T31] #1: ffff88805a473c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1093.730697][ T31] #2: ffff888028162d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1093.741590][ T31] #3: ffffffff8f8f7788 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1093.754059][ T31] #4: ffff88807c09c0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 1093.765048][ T31] #5: ffff88807c09d250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 1093.775906][ T31] #6: ffff88805b4d6f20 (&sb->s_type->i_mutex_key#3/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 [ 1093.788202][ T31] 3 locks held by syz.5.2420/18205: [ 1093.793426][ T31] #0: ffff88807bf8c478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1093.802834][ T31] #1: ffff88801faf2428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1093.812652][ T31] #2: ffff88807c09d250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1093.824258][ T31] 4 locks held by syz-executor/18313: [ 1093.829660][ T31] #0: ffff88807d20e428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1093.839431][ T31] #1: ffff88805ad6b888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1093.850419][ T31] #2: ffff888028162d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1093.865702][ T31] #3: ffffffff8f8f7788 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1093.877357][ T31] 4 locks held by syz-executor/18691: [ 1093.882769][ T31] #0: ffff88807d20e428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1093.900841][ T31] #1: ffff88805a234888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1093.911811][ T31] #2: ffff888028162d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1093.929754][ T31] #3: ffffffff8f8f7788 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1093.941318][ T31] 1 lock held by syz.4.2551/19043: [ 1093.952976][ T31] #0: ffff88805b4d6f20 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: walk_component+0x345/0x5b0 [ 1093.972789][ T31] 4 locks held by syz-executor/19083: [ 1093.978867][ T31] #0: ffff88807d20e428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1093.989950][ T31] #1: ffff888059c4cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1094.000145][ T31] #2: ffff888028162d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1094.010635][ T31] #3: ffffffff8f8f7788 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1094.021335][ T31] 4 locks held by syz-executor/19123: [ 1094.027033][ T31] #0: ffff88807d20e428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1094.036875][ T31] #1: ffff888027687088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1094.047361][ T31] #2: ffff888028162d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1094.058361][ T31] #3: ffffffff8f8f7788 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1094.069278][ T31] 4 locks held by syz-executor/19158: [ 1094.075903][ T31] #0: ffff88807d20e428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1094.085871][ T31] #1: ffff88807c880c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1094.097273][ T31] #2: ffff888028162d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1094.107675][ T31] #3: ffffffff8f8f7788 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1094.118517][ T31] 4 locks held by syz-executor/19172: [ 1094.126739][ T31] #0: ffff88807d20e428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1094.142182][ T31] #1: ffff88808630a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1094.161027][ T31] #2: ffff888028162d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1094.172366][ T31] #3: ffffffff8f8f7788 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1094.198347][ T31] 4 locks held by syz-executor/19184: [ 1094.211401][ T31] #0: ffff88807d20e428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1094.220483][ T31] #1: ffff8880994fa488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1094.239456][ T31] #2: ffff888028162d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1094.250648][ T31] #3: ffffffff8f8f7788 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1094.270363][ T31] [ 1094.276651][ T31] ============================================= [ 1094.276651][ T31] [ 1094.285994][ T31] NMI backtrace for cpu 1 [ 1094.286017][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 1094.286063][ T31] Tainted: [U]=USER [ 1094.286072][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1094.286088][ T31] Call Trace: [ 1094.286097][ T31] [ 1094.286108][ T31] dump_stack_lvl+0x116/0x1f0 [ 1094.286155][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1094.286186][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1094.286228][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1094.286270][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1094.286307][ T31] watchdog+0xf0e/0x1260 [ 1094.286366][ T31] ? __pfx_watchdog+0x10/0x10 [ 1094.286401][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1094.286441][ T31] ? __kthread_parkme+0x19e/0x250 [ 1094.286474][ T31] ? __pfx_watchdog+0x10/0x10 [ 1094.286511][ T31] kthread+0x3c5/0x780 [ 1094.286549][ T31] ? __pfx_kthread+0x10/0x10 [ 1094.286588][ T31] ? rcu_is_watching+0x12/0xc0 [ 1094.286614][ T31] ? __pfx_kthread+0x10/0x10 [ 1094.286652][ T31] ret_from_fork+0x56d/0x730 [ 1094.286690][ T31] ? __pfx_kthread+0x10/0x10 [ 1094.286727][ T31] ret_from_fork_asm+0x1a/0x30 [ 1094.286773][ T31] [ 1094.286783][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1094.415731][ C0] NMI backtrace for cpu 0 [ 1094.415754][ C0] CPU: 0 UID: 0 PID: 6151 Comm: kworker/u8:15 Tainted: G U syzkaller #0 PREEMPT(full) [ 1094.415791][ C0] Tainted: [U]=USER [ 1094.415801][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1094.415818][ C0] Workqueue: bat_events batadv_nc_worker [ 1094.415857][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x20 [ 1094.415899][ C0] Code: bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <40> 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 86 fe ff ff 66 0f 1f 44 [ 1094.415925][ C0] RSP: 0018:ffffc9000b3f7b20 EFLAGS: 00000246 [ 1094.415944][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8b5ea3d8 [ 1094.415961][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1094.415976][ C0] RBP: 0000000000000264 R08: 0000000000000005 R09: 0000000000000000 [ 1094.415992][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 1094.416008][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1094.416024][ C0] FS: 0000000000000000(0000) GS:ffff8881246ba000(0000) knlGS:0000000000000000 [ 1094.416053][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1094.416070][ C0] CR2: 00005640f4eba4d8 CR3: 000000007b774000 CR4: 00000000003526f0 [ 1094.416088][ C0] Call Trace: [ 1094.416096][ C0] [ 1094.416105][ C0] batadv_nc_worker+0xb98/0x1030 [ 1094.416141][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1094.416182][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1094.416220][ C0] ? rcu_is_watching+0x12/0xc0 [ 1094.416250][ C0] process_one_work+0x9cf/0x1b70 [ 1094.416278][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1094.416312][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1094.416340][ C0] ? assign_work+0x1a0/0x250 [ 1094.416379][ C0] worker_thread+0x6c8/0xf10 [ 1094.416410][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1094.416432][ C0] kthread+0x3c5/0x780 [ 1094.416470][ C0] ? __pfx_kthread+0x10/0x10 [ 1094.416509][ C0] ? rcu_is_watching+0x12/0xc0 [ 1094.416534][ C0] ? __pfx_kthread+0x10/0x10 [ 1094.416573][ C0] ret_from_fork+0x56d/0x730 [ 1094.416612][ C0] ? __pfx_kthread+0x10/0x10 [ 1094.416650][ C0] ret_from_fork_asm+0x1a/0x30 [ 1094.416690][ C0] [ 1094.417604][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1094.647732][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 1094.658464][ T31] Tainted: [U]=USER [ 1094.662287][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1094.672374][ T31] Call Trace: [ 1094.675684][ T31] [ 1094.678640][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1094.683284][ T31] vpanic+0x6e8/0x7a0 [ 1094.687345][ T31] ? __pfx_vpanic+0x10/0x10 [ 1094.691899][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1094.697849][ T31] panic+0xca/0xd0 [ 1094.701618][ T31] ? __pfx_panic+0x10/0x10 [ 1094.706087][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1094.711505][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1094.717705][ T31] ? watchdog+0xd78/0x1260 [ 1094.722170][ T31] ? watchdog+0xd6b/0x1260 [ 1094.726636][ T31] watchdog+0xd89/0x1260 [ 1094.730933][ T31] ? __pfx_watchdog+0x10/0x10 [ 1094.735664][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1094.740943][ T31] ? __kthread_parkme+0x19e/0x250 [ 1094.746011][ T31] ? __pfx_watchdog+0x10/0x10 [ 1094.750745][ T31] kthread+0x3c5/0x780 [ 1094.754860][ T31] ? __pfx_kthread+0x10/0x10 [ 1094.759498][ T31] ? rcu_is_watching+0x12/0xc0 [ 1094.764303][ T31] ? __pfx_kthread+0x10/0x10 [ 1094.768947][ T31] ret_from_fork+0x56d/0x730 [ 1094.773593][ T31] ? __pfx_kthread+0x10/0x10 [ 1094.778238][ T31] ret_from_fork_asm+0x1a/0x30 [ 1094.783054][ T31] [ 1094.786605][ T31] Kernel Offset: disabled [ 1094.791028][ T31] Rebooting in 86400 seconds..