last executing test programs: 7.183436214s ago: executing program 0 (id=2363): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x2b0ec1, 0x0) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) sendmmsg$auto(r0, &(0x7f0000001180)={{&(0x7f0000000180)="fdc2c5c4ad8abf9ff5d5eab73f3f3f49fbb18b11398de97557abb9b2af070d3614f9ecdb10c879e1ceed2d8b1c652364ac9d", 0x3, 0x0, 0x8, 0x0, 0x5, 0x8}, 0x10000}, 0x7, 0x30000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) mmap$auto(0xfffffffffffffff8, 0x400028, 0xdf, 0x9b72, 0xffffffffffffffff, 0x3) membarrier$auto(0x2, 0x0, 0x1) prctl$auto(0x7f, 0x1, 0x0, 0xffffffffffffff80, 0xb) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000a) read$auto(0xffffffffffffffff, 0x0, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40800) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b67, r3) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0xe, 0xffffffffffffffff) read$auto(r4, 0x0, 0x4) write$auto(r3, 0x0, 0xf9ef) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/start_ro\x00', 0x80302, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) ioctl$auto(0x3, 0xae60, 0x10000000000402) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) 6.064258394s ago: executing program 2 (id=2366): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20803, 0x0) setsockopt$auto(0xffffffffffffffff, 0x3, 0x8, &(0x7f00000001c0)='/dev/dsp1\x00', 0x44) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x880, 0x0) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd6/queue/iosched/writes_starved\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000100)='%\x00', 0x38f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r5, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) close_range$auto(0x2, 0xa, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0x8, 0x0) 5.441120838s ago: executing program 0 (id=2369): mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) getresgid$auto(&(0x7f0000000040)=0x7f, &(0x7f0000000180)=0x1ff, 0xfffffffffffffffc) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) unshare$auto(0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) syz_clone(0xa00c2000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x7) sendto$auto(0x3, 0x0, 0xfdef, 0x101, 0x0, 0x1c) 5.198932013s ago: executing program 1 (id=2371): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x0, 0x5, 0x7f, 0x10}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x3}, 0x6f3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x6) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r0 = socket(0x1e, 0x1, 0x0) socket(0x11, 0x2, 0x0) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r1, 0xc0045627, r0) 4.879736944s ago: executing program 1 (id=2373): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) writev$auto(0x3, 0x0, 0x8009) (rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) mmap$auto(0x5, 0x4020009, 0xdf, 0xeb1, r0, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (rerun: 64) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) (async) mmap$auto(0x80, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x5) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x2085c2, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) (rerun: 64) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000300)=0x8) (async) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) (async) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, 0x0, 0x40072) (async) pread64$auto(r3, 0x0, 0x8, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) (async) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) 4.607367691s ago: executing program 0 (id=2375): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000300)={0x48, 0x4, "c292b0bcc2136c38e30baae6690e8d7c8506ba8f41a3e671f2d166cf15d22ee3c1e3b6ae574fb04763b2f8e35d0690ace6f82bcac5ba0ce1978d0f93165fbfd4afcecb85145b6e29"}, 0x80000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000080)=ANY=[@ANYBLOB="62fe185527b5b14a5f0cf92e572987080000000000000030f94b"]) madvise$auto(0x0, 0xffffffffffff0006, 0x55) r1 = socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/12, 0xc) r3 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) mmap$auto(0x5, 0x8, 0x5, 0x100000011, r0, 0xe) writev$auto(r3, &(0x7f0000000000)={&(0x7f0000000240)="9be3df59904dca5271fa4d25086c96e3b9e182928dfc69277d334fc20f97578be5a8b235474bf12f8c5fa7ed738e2742aa92a166ae57eb928dc8a8917ca9de977749aa178e9184c8a968b1f67dbb616ecfa0b4f156d1acd4ecedb06023991d97000000000000000000", 0x9}, 0x1) mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x6, @link_local}, 0x58) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x3f00) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1f40) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001440)='/dev/sequencer2\x00', 0x191482, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000300)="678b73cbd156dc4e0ee402302f807683e8538ef809e3fed8ea85864bce5bbbde5e98726c4b78c7dad44378f692089306e0813e2d4eec42d6efd7496b4ff77bd702c8a62681dc06dec245eef46d90dd9bd6ff5452c69ccccf07673e517a9e56d9995aa79c5b6d5ad2dccb7ccb84a18a359595173c961656eaddb5d8026cdde2d18daf23aeee19d521104be491a90a2c26d12362d4628e1f") openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 4.589570563s ago: executing program 2 (id=2376): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r2 = mq_open$auto(&(0x7f0000000280), 0x7e, 0x9, 0x0) mq_timedsend$auto(r2, &(0x7f00000000c0)='\xcf\x8d\xb6\xaa\x80\xd5\xb4_:A\xacz\xdc\xa0\x1d', 0x2, 0x6, &(0x7f0000000240)={0x2000000000000003, 0x101}) mmap$auto(0x40000000000000, 0x400008, 0xb58, 0x411, 0x2, 0x8002) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) socket(0x23, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r4, 0x4020ae76, r5) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) socket(0x6, 0x2, 0x6) semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 4.489617645s ago: executing program 1 (id=2377): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,v\xf58\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000140)=@sco={0x1f, @none}, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) unshare$auto(0x40000080) utime$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x802000c, 0x8, 0x10, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x2, 0x0, 0x208) read$auto(0xffffffffffffffff, 0x0, 0x9) 4.43534705s ago: executing program 3 (id=2378): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x9, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x5, 0x40, 0x76c5, 0x8, 0x100000000}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) write$auto(r0, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x10000, 0x1, 0x3, 0x5, 0xee01, 0xee00, 0x0, 0x8, 0x8001, 0x43, 0x0, 0x26e2de87, 0xa, 0x9, 0x5, 0x0, 0x5}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) pread64$auto(r2, 0x0, 0x3, 0x1000007ffe) setitimer$auto(0x5, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0xa, 0xfd) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen\x00', 0x80400, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4008014) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x42, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0400558004"], 0x226c}, 0x1, 0x0, 0x0, 0xc4}, 0x1880) r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r5, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 3.943555581s ago: executing program 0 (id=2379): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x4, 0x0, 0x100082) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0xf5, 0x24000000}, 0x18800) madvise$auto(0xfffffffffffffffe, 0x43226f3d, 0x0) close_range$auto(r0, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, 0x0, 0xda) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) 3.436084895s ago: executing program 3 (id=2380): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x9) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000100), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0x4500, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00'}) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x490, 0x80, 0x3, 0x6, 0x8000000000000001, 0xfffffffffffffff7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffb]}, 0x0) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) r5 = clone3$auto(0x0, 0xa) capset$auto(&(0x7f0000000080)={0x2, r5}, &(0x7f0000000280)={0xe, 0x1000, 0x8}) mmap$auto(0x0, 0x20009, 0x1ff, 0xeb1, r3, 0xffffffff) read$auto(r4, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000006c0)={0x0, [{[0x4, 0x2, 0x5, 0xe8, 0x0, 0x8, 0x200, 0xffffff00]}, {[0x2, 0xfffff374, 0x5, 0x3ff, 0x2, 0xd, 0x800, 0xfffffffc]}, {[0x2, 0x78e, 0x197, 0x5, 0x100, 0x9, 0x3, 0x3]}], [{[0xd, 0x80d, 0x9796, 0x8001, 0x8e16, 0x9b, 0x3, 0xffffff13]}, {[0xa9f, 0xd, 0x8, 0x0, 0x9, 0xa6a0, 0x1, 0x8]}, {[0x1, 0x5, 0x80, 0x8, 0x9, 0x9, 0x6, 0x6]}, {[0x1, 0x5, 0xa34a, 0xffffffff, 0x6, 0x2, 0x6, 0x3]}, {[0xc, 0x2, 0x16a464d0, 0x1fffc0, 0xda07, 0xffffffff, 0x3]}], [{0xc, 0x9, 0x1, 0x1, 0x1}, {0x1000, 0x10001, 0x1, 0x1, 0x0, 0x1}, {0xd, 0xf7a, 0x0, 0x1}, {0x7ffffffb, 0x10001, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x5}, {0xc0000000, 0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x9, 0x1, 0x0, 0x1}, {0x5b9e, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x100, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xc, 0x4, 0x1, 0x1, 0x0, 0x1}, {0xb, 0xffffffff, 0x1, 0x1, 0x0, 0x1}], [{0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x0, 0x1}, {0x4, 0x5f, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}, {0x4, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x9ca, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x401, 0x0, 0x1}, {0x3, 0x9, 0x0, 0x1}], 0x0, 0x1, 0xbfc5, 0x0, 0x7, 0x6, 0x7, "79a40432ea7ee5b06e740907be144d26", "c3b7c39d857e5996b2faeb964875b073bba39ea360fe0c8c65eb4d6a4cc16395e49948a84dc75492deeeac740bd86c86"}) 3.021089726s ago: executing program 2 (id=2381): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x0, 0x5, 0x7f, 0x10}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x3}, 0x6f3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x6) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r0 = socket(0x1e, 0x1, 0x0) socket(0x11, 0x2, 0x0) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r1, 0xc0045627, r0) 2.884327376s ago: executing program 0 (id=2382): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x40000000000eb1, 0x401, 0x1008000) request_key$auto_KEY_SPEC_PROCESS_KEYRING(&(0x7f0000000100)='[{%\xbc::(\x00\x7fX\fc\xcb\xa3\xbf\xe1\xe0\xe1Xm\xce@/Z\"\xd5\xc8\x81\x977T\xdb\xcdY\xab\\\xf2\xd5\xaa\x14V\xd7\xc7\xa8)F\x14_vY\x99,|\xd3\xb5cq\xb1pz\xd4ZZ\xc7D$\xfec+C_sw\xb6\xe4F\xbb\xb0\xf5#n!.-\xd9\xf1w\xb9\b2\x0f\x96\xbd\xb1\xf2\xcf4M\xa7\xed=4\xac\xd8\x11\xa2`\aL\x91\x99\xeb\x86tK\x81)#', 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x6) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x2200, 0x0) close_range$auto(r0, r2, 0x3fd5) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mmap$auto(0x3fc, 0x8, 0x100000002, 0xffffffffffffffff, r1, 0x8000000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) write$auto(0xca, &(0x7f00000002c0)='\x04=\x01\r\xfb\a\x00\x00\x00\x00\x00\x00\x00\xa2\x00\x00\xccb\xc9\x19AWL\x00\b2\xa7e\xbd\x97\x9c\x05z\xccs\xba\xa2,&\xe9\x11\xfe{ai\x8a\x86V \x8eb=OJC\xaf.D\x8f\x97\x03g*\x1c\x98~\x15\xc3\\\xcbed\xff\xb1\x92~\x89S\"\xdac\x99\xf7!\a\xfb\xf8Vf\x18\xc8\xbbu\xcd\xf6\x80\x92\xa9\xda(\xa2\x93p\n\xe5t\x1b$\x9f\xa3\x1a\x82\x06\x12\xa6\a\"\xba\x8a\x88t\xf2A\xb9g$H\xcc\xc7\x8eoi\xf5\x02\n\"\xdf9\xa5>\x91\xf2\xde\xa8\xd3\x9f\x9d\xba6\xc0\xcb!w\a\xdd\xbb\xf1kox\x04\xe8a\x93\xf3\x12eE]\f\a\xf7N\xb7\x85\a\xf1+\x05\xe7\xb5\xa9m-+(\xaf\xf9\xa4r\x0fX~\v\xa7\xf3\x9cD\t\x80\x8b\x9d6\x1f\xdc\xc4y\x1d\x9a\xff\x0e\xbb\x8c^\xb9\x06\xcd\xa1\xf9\xec\xc1\xc3\xd7\x0fr\x16Hf\xb5\x17\x10\xf9\x03H\x19\x1a\xa8\xd1\xad\xa2\xd3\xe7\xa7\x883Y\x7fS\x80|\x9e\x91O\xca@\xe45\x80\x95\xdf\xdbn\x01\xde\xfd\vH\xfc\xe6o\xf5\x1c\x034\xf5\xd8\xb1}JX{\xf0\x89\x1d\xb5P`j\x10I\xf2\x16PQ\x85\xa7\t\x98\x1c\xe2Y\xa1\x03\x9b\xdd4VQF\x8d\xc9\xa5\fm\xca\xfd\x92\n\\\xf8\xb5C\xce\xa9\xdc\xddg\x8e2x\xde\xdf\x14zd\x01s\xaa\xd7v\xfa\xe3\x99\v|2', 0x2d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca481, 0x0) 2.564554083s ago: executing program 2 (id=2383): mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) getresgid$auto(&(0x7f0000000040)=0x7f, &(0x7f0000000180)=0x1ff, 0xfffffffffffffffc) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) unshare$auto(0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) syz_clone(0xa00c2000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x7) sendto$auto(0x3, 0x0, 0xfdef, 0x101, 0x0, 0x1c) 2.146111158s ago: executing program 3 (id=2384): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x78d482, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/device_hdr\x00', 0x10b402, 0x0) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x40, 0x83) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x10001, 0x2100002, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8, 0xc351, 0x5, 0x2c, 0x3, 0x7}) mmap$auto(0x0, 0x400008, 0xd9, 0x9b72, r0, 0x8000) read$auto(0x3, 0x0, 0x80) read$auto(r0, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x4}, 0x3) getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000280), 0x440, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2202, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.979953311s ago: executing program 2 (id=2385): bpf$auto(0xa, &(0x7f0000000200)=@query={@target_ifindex, 0x4, 0x0, 0x2, 0x3, @count, 0x0, 0xdb, 0x80000001, 0x1800000000, 0x3}, 0x91) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x4008000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r2) (async) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) landlock_create_ruleset$auto(0x0, 0x9, 0x0) socket(0x1, 0x1, 0x1) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000300000400000a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="2620576acff6d342d5b714c65150343c2769faf5dcd972ef1e85c5592be6e8b0c38356e1fa5ddbac2ece1335ca7445a6875508fc53ba6cbe6a21024f8ac705bd4d592c2d58d307fdaeda07da518934af3b92725d5bac2171ee9163be990b504472649d98e5f77ea42af720d8d744377b202ef12bdcf4383b3c0ec4e2ac045a2b8fb69d074d9dbb23ad7dc6fee4db8473f54dee07a6bd4473271544b8066b4ffa923941c413"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01f2080007000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) write$auto(r4, 0x0, 0x3f00) (async) memfd_create$auto(0x0, 0x5) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) (async) read$auto(r3, 0x0, 0xffffffff) (async) r5 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r5, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) 1.813487109s ago: executing program 1 (id=2386): r0 = fanotify_init$auto(0xb07e, 0xfffff001) io_uring_register$auto_IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000000)="e1919d359eec332b8383c090", 0x3) write$auto(r0, &(0x7f0000000040)='-(-/[,\\\x84#\x00', 0x8) ioctl$auto_BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000080)={@inferred=r0, "b473ede39be089f4f93e9f0b0760c45300b4e85768edf61e86bc50c5917ed8c83bee6430fb84bad7c2c8638dc2e5927bf85e59a5edf6c6377268e612a29d7d704bb482dfb002d7bb4de28c11b2d284b1aa594f3a8ed99a04879698cb73f7e89fa24605d32e3e76a94800f0ad58833c2ebe75536f0a77a937947477b8e74c6a18777dd53a156219d781541ce376ee531a288f2a4b8823cc7ec1eabb5995bfda0446a924dfc881d29919b29f268cb32c8cb30bae529ef09d59686b92389d64289e0abdf7b5464bfd5b12d94bb29bac651a26e080ca0686e2994fb5b4be79da2f59bbe7470f69d2584de9f64c00504fb8eac048eb1993320ac67761016ef02831c030443018926224e891845a89e01cf5251cc5b19c32c701c161b25128836c724e86dd7a126d746cbbcf0d996be2df655989f864db1c72f25caa134ed1ffbdef91722911ccaa7d916b09acc58f868fd9eaa1eca0fe7e8a3407b2f6b09e3292ee36802d5c20bf841a1fc71c8a73cd09dcfeb8694123b33d3d526ce5ab70d91edc995853c742410c95f6ab44b03512e04a8e5f73da4027623ce031b567cb4e90a98e666f0e651215a72c05bc8f39f75941bba30943d04e0d404d63dce024cefeeaec7becf2818b6ca821ed7a6a1e55da6ccc2994de98bc5cdd1aa892ecd6fadcdb45ccb681165a12df8ade8b2a5ad01803008f79e50244d983bc2b54b49ad6b976c927fd3e80cd54bb60e90c997813612d07ae7775244ac1285874d9b9666a72b92bc309f9dd1fb588927f6e8a93c9f494bb6459c003b03794fdeedb03fdd8a65574967abbf147ba45efeb2f5812e95673e19458a3c941d59724ebe4cde2168c3f8e5e8ed03cdf077f2e455102b8fff7e6eeea6884c40eb5a3a1db18e21bf1a5d118ed1d9a3da76d14ff1ad0726d556c9ad5f8b1f8b5390744085f925753d28f509642e1538a43ff1d8ac3bec6199ed24154e8b6a99d3ead192ec29d880231e0f8e401a9dd710ec5b6884e548939a70b2da961cf5cfcf834a43c966433526bbff2e34affcff3fbd5345e6ec57563c44df604d4f701093a2690a1759ae5bf19aa1d4aaab358ad8317739d6eca7b404d02462ad4d64fdd706aae23cc7b4437dc3b0038c5a62cbb70471d3b32bf8b5413d08ce00c44d40063024fd847342d046ef84d50a3ac6829d509857ef33bdb544c919016bc82944f235180bd51ec9d483a1b17a326c471362b66bd29a8466eaefe0cb25c53102a0304e1c9e1e1967a862471456dcb647bf2387a7172ae7483c4fb56fe5b1051f9b6af99c9be1369a1712b44fd0cfe097da332ca724eb42422dde2ac7af182e2e0d2157706d081745df9ac8d09c18144d7682159cce04b4c10550c0ddfb14e43cc90ae4c17236df9c4635784a585fc29119d098d2b5081479a4532b54e51572440f75538b66613d691c4f46edc5d73e35c141fe152955d04d3dc195b65c054ed83a7bac464d6794fee493f38efc216c658da4a198c9b9e379a9911480829cda33fe9184d61c5ce1f958630ee1659968d5a2e12428d2d63728efd1c71f9dcc988afad0259c5b0d2a7d5b20dc35bb813fb0262a3dfb26ac9eb64b1a96823c61b9be9bbf854be320262add920b83876654ded4ab88c73484f6b29447ab92daac78c672b29cd78604eb2725c6b50cb95d6cb424071f589b4ed6b7b8bc89e269165a2d2bf79caef5e338207396a213ad880531fbfda94a64b22842c5cf0937bf32a0609e51ec5faa8f82d6801fbde25cccee88074fdc34c32f3df671acff2599d36f4de4aa54d958ae2d89a6dd5834c9033abaf83f673c27a24daef2f9735c3c4141c809ac238101532e50704bd12406769315f926c714cb22b038896546ce1519172c3500fef552300d1890559032c52299c963abf4cabd08b44835ad327f2eb5098979455a3e402c84832a8a73abba38f223633c575f7337b4de822b554ed2f8f62d973cd52027ee60e2241eda9a1e86c47565a031590f1f18db6c0aaad9944ba394e514c0764bb7c7d70973dc709d0562fb53d34af4b6b9b2a06bfeefc6687176b1a6692f2b3dba18bb4b5a7df424c56d7d8fe2537f397a5a13106451d7e8ee9aa5623a0a37587e29d0a51cd35004757a6f841609038a91c7cf26358fa39361ec79f2f0ec7815f9b9551925fcdff58a7b4971015189b4aaf05b67d194f75ce73147dc4fbfc4444ee81d49cbca0f74409ec85a2f48f195b62423b13129dc38eaa36c20ede8495baacef66df1bfaf1dd7aa30fccde3a40d76a9a16bcbba75584776993ec7275b3bfa61d0877c9b08566ceacadb676a83841079b254b030dfb0f9113c9f1f7294c70826a97275ba41603f6e73c248c5aeea0b580a7338af5d36e8cac316fa765db5e108714e7afc0062fd115686194d935c82d0b7b8c0937a3d35906ddb897fa5f1d1370dc148249b57a831acdbe45445c7cc6063c5d1ecaa55de74093d052e469f5fa527b51be7e93e3dbd6f40eaf14ebc5f30be2850afae0c7d3bfd1220fd8f0865c8fd95eb4238f100261081025987c6ecb16211931855f64fb7a7411db0576ceccb63e219f5328f52293d35859a14866c81bddc52f3893224b12d2a367ee371289cb4436f1386a92772aaac0d12bb7889a130a36d2759728d259eeb41a74c422af0508eb3f0738892f26ec896035f0d89a964ca0ac8c759a824f476fef86bd6a270ea0e35d43746541f0a5366244dc77730a01ec933df6a875b9384c13e27dee713e860037b648fc0a23e7f0bb533666a293e1e80fa2ac56c869a9bd0478dcfd115fb323c7c5da33f58f39a22e8e2dda6bfc9391696f7945dc5c8d9b1047c2428ae9472907bfb312a53e9a96e5e3d55a83b01325ff57c24d1d2a27411614cf684263a31f4c14cb37f789fd06d15a448bb0624ec75a1baba77b1dc79a03d8731df97fccc8f873d1b53cd3789a48ce9d1c70fdbc843e1de111a078b674fccf292a04d36cabfb2f80ebc8435432349f97548e7b2f9d302b6e885a175ab987528a521deba66903d1cd3edc6a6a03ccb5be73276682213bb5d6ac9dadebe886a47adf5a6f330940a4d17e8608f13bfe08e220ad6322b28021d21f9b03ff84bbf7ff8867daea1ce6841b704b8586178653b9e88988fa42a88d3ac0669d105a666f13dd83ab0aab9894087a03751f20653cb9e39937abb630c2d56c46bf8031cc7affb0450223ee367f736f2d19801af5fee878c3321dd11fdb2e40bed6ad42fcc041e6e19898c3e606879462858bbb1b4bddfc73bef0ad57f0e7243dd4419400317858fb8c77d01010952ec149db0ddf5f553a2336ddeb939dd1b9f6cfa4cb7eb1c4976eeb4f7b02d101bde894876689e7951c36e65877a6dbf653ab9966630b2426f3e367d9e3c0c03b70ea6228805103c156693f04d8ef6236c8b8517b450943848b296687227463aaf83f71064589ce0b42fa38346242d4c61c9058ac592a361b6bebf19914eaeab34a4946c4d0af7280999c7110bc917dacedca3939a08b4a7669ed91743a4ae1176ae7532770905647ae74d04bb7370d2e8bca4be50fa723a7e1f2391a09faa427165decf6e376a8f273bb46eeb72c2c28e829656594fc73ed5ab64933548768d83863a6c769953227e479c380a765925c50fd0c428f33f749ee5c26e1b7723124dcb4777770232e0ce4548f1ee0408a55728a4fe4ec55a2a2e0236a5fe4ab47b077f790658aae540b484782114fd3c41e1ee70fd69e7b5850d780da06a48b7112eedda8a038be4fafd656322f34ff6b67b78db1fd2b58c520bbd53507fd4cc018729c31ebc314a65ff589e6eac53f56754a71f5e60214b2f90f1567e32f92c2c08e60e48be0f9c18aaae71a8eca4059730e61a4ff4b2339c59e8543db148e5fbc8957343d065649be9ecf70b2afef208db417d23bad140a35a11da7da8c5b098bb593bb86e3188943544415ec9b2acdc4c21a5c70b1db7531594da562d43c479d746db07cebe7b65b76e2b18cdbe2c2283ed673002dd8a90fab90846e183b6e0d60c51d2ca8cceddbe32608dd1179479e6a9c34a943ea22de51e6787e5460b3f9828b0a69daeb3d1a6512403c7fbfd9876e4ea5d2624bf03aede0e045f7555b5981a472cbf1ea5855c39570875d95739650c21e3da16937a7ab63ce0240449599280069bfdc8aaeff44f1b2219a9a1d7a0e4141fc6974d93dcee1d861ec9740135ddff85c6feaa9cf30f66ddf8a0a89166b28c74796041fb56e12c1fe4f8b7bc95d708924514fe48f2edd8a1bca76c42875dad3794749dbd5e804579227139a19cc261d17c57c204c30d9510a1d6121251c0d4014b11a33f52f46de2ad785de170d09de2c1f245b0fcecb5e62f452e93467aea75007365e1f490756ecd6bcf92c1092fee490842057847cdb3ba6266afad7abaa2dd3cb74cece1d4111d8b6a15efb5692181febdd969a97d52faa80889c23e8f09e664dd897d1af4695c4e79712ea15150e689473d5b4b16087ab8ab2ab568ee702fee93347b1ea7628f98fb9504ac7398e61cf751bfc3b82ae43ca9a072477e555147e2c8e22ae5196cce14a95719fa7ccabbe80218551f22734b0b65ffa6db596d7c73a814f0afc126bfc1c77f313c8ff06e5b4f60ca041f5febbf232570f6eb47c1670a06564e487678b8f37c5a7c5968deda9d05eceee1dd27d88e48ac20c1f2c7775306298bd809cdf21af860099200e73a4dddd4ad5a96a30f8ec78b1092a5059e9f99411a673f1530f728c9bebaea651f4fdefb9ba06dcf64aae44e2cdabf99abac2742b566896afb21f8e93328e455d0fc913e409dc3ca57a647957c644f3941d36e33ffaaa6bf11dfd0ad364dc861ca94f7a833b22778610d6e85e1543e711a41e65382079c21a97127174ba8fcfecc5166db9c788a2412d24ec7f707d7984aec70174b9d60ff6c41d932ee1bf41529992a163ead056a569b9e3177109189bf96e026596e97d900937036d38a7802f1cfd17bf925aa8de926d3a125169683d8d6059daa3813a93541b33c0ce4b3f2a15b49117857f2285059d7806a42f0b662a78b13630dbb41391e6c4831e7b09d646a626d077478b25f58cd74d482f242d2813ef9e482534e5fa555d01d55a7a34e917d71f2d71eab57b854d5f1533f88126dc01474ce119761017d462fa922819e7ea9bc53573c9b7d5ce2dcea8e3a878533e10f20ee0611bbc876d5884e6684fa3eb0242a2eefc542685abb1246c12e43cf257d16f11df71b32068e742a6c70768289b4073c69f2d146fbd1ca18e5b44bb9333aecb9f3e439f287b7f978f68561a485ed7a463569893e70583cd470d1aea6a41e7f8afb8eeb854cef825da9e8b70ad1f63ec42732f3b60c6eb703790b477cee78ee78ce9622edd3473a1b239de59899bdb89e64bd59b79921816e3ca6cb93863e2ae51616d1a773c20d34fee8b88b0c9a45e658c6a728c53791af643445796b022e3e243a79ce9a0a04c4e14d92334b3309347e027185165ccb65270ebd54e7bbca794fc79ec402c13f6a320a15284abf0641f5fa25b9bd9e082270a9e494a835945d153ea665ccec6eeb6564d553088e59b78115a0834397682d43f524838fca8b593420cc7b2209760cabe07e12cac11d74c08291ff80336923c4181cadd53f1a90976514ca202f0aae6ec6a0dcf773d8a0844b9a7188042c38b24868dfd8858810f5574959dbb6a605464b66964ed7d0a7035c8c5a0b3e43c0dec42aad5e53fdcaf5c0b41acd5817a402355cbe488af1689cd16871b5da5f01b36e8a55afd"}) ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000001080)="74d8583563fe5a9c4eb305f7cb27fe8eae2aebebe7fa8b15608ddbf596a276f98c209b2560416f56427c8cc1d615d6fbf10ab58ca1397d0f57b2ceda35424c113317f67d859f6666013cc91a01176547d043010a4b1a04bbdbcc1932f0881f1ff85c8cfd51446f1afaa0d0f749763ea916f513e37f6045ced10ad05e0bb066360fd1fd09296920582919a049be91141236ca584ce5e4e374f9f3f0c21940f45afec8bb55296c65a2") pwrite64$auto(r0, &(0x7f0000001140)='-(-/[,\\\x84#\x00', 0x7ff, 0x7) getsockopt$auto_SO_PASSPIDFD(r1, 0x1, 0x4c, &(0x7f0000001180)='-(-/[,\\\x84#\x00', &(0x7f00000011c0)=0x4) mincore$auto(0x3, 0xcb, &(0x7f0000001200)='-(-/[,\\\x84#\x00') r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001280), 0xffffffffffffffff) r3 = getpid() sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x3c, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xf}, @NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TIMED_OUT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x40) dup2$auto(0xffffffffffffffff, r0) mincore$auto(0x40, 0x8000, &(0x7f0000001380)='%]@,$\\$:\x00') r4 = socketcall$auto(0x8, &(0x7f00000013c0)=0x81) write$auto(r4, &(0x7f0000001400)='@&.:-[\x00', 0xbe) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001480), r1) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xb8, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x6}, @L2TP_ATTR_NONE={0x81, 0x0, "ce29147def735dfc4091ae613c1e5c930e7485be445e8159dfff4eb85cb3b10e7dc60db26212c9209cdb84bbbd4c053333b950d2db32c1750b21327a59cbb2ff0d4cddcce9dcaae8061b81b7d814c79c7c750b12ee3bb8db2c3940282a0a311c0d95a456493e804c4561915a52fc1a4a685e330702b0050b18871e1143"}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x5551}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80080}, 0x4040080) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001640), r0) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r0, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xcc, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xb8, 0x3, 0x0, 0x1, [@nested={0xa0, 0xd4, 0x0, 0x1, [@generic="1c414150a207f77a5ffe414ec6fd6bb053f63ceb2cd687f5f245d4489d3223c9eea48528c3c6bc3ce9af6fe65a0b7f944f8af6c36d8a5b22508f8fe3a431168a77075d92398503", @typed={0xc, 0x30, 0x0, 0x0, @u64=0x86}, @generic="d35f488f71884ca543f9b22ec7f01b150b276a9509bb78a50824952a2c5c3e72cae314628d058d56cc0424f26c13a1d4ef4f680efa88552abb8c797c67ada10c14e6370166e58f7de1"]}, @nested={0x14, 0x97, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @u32=0xfffff001}, @nested={0x4, 0x8c}, @nested={0x4, 0x7d}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040000}, 0x28004) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), r1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'geneve0\x00', 0x0}) stat$auto(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x3, 0xa94, 0x2, 0x9, 0xffffffffffffffff, 0xee00, 0x0, 0x1, 0x5, 0xfffffffffffffff9, 0x2, 0x200, 0x800, 0xe, 0x1, 0x8, 0x7f}) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000003dc0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003d80)={&(0x7f00000019c0)={0x23c0, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x228, 0x30, 0x0, 0x1, [@generic="72dde4e489ed6871ac1bb2cde58a53abcaca16e99cd6097e23bec786a22dbc42b991df0c3dceff1e8e9b6ec6c2e348eafe0a4af3fa33bcb6fc359e0935dc17b985053c19a1f6f3c0755157", @typed={0x8, 0x144, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x9b, 0x0, 0x0, @pid=r3}, @generic="5a305d7d01849d9927fad8c6e6454e44b1795a8c15724233e715d643a3f2ee9a82c6f28389597a170026e88dc634680e25586717ac72a7a7e0dd8c0d851e5f429787d267b9b51f94433b81", @generic="9e0c38618fe316d34c3c49cab11567ffc05263f42ff55ded85d0208298d011195e9706570e3ecb666107e8b537222e7fe0da8d69d4540dc216390a59740db15eacc6387ffd823423cd35f6cd6477f65963b1c4e31b56ce966a6beb20c0fa41c54b3d375473da7f67f1c27d56191caa75d983fae2811334485e1dd0e935c42d949be03af577c98129affbd17e3c3b59a6065d0a2dffe05e32dd6fe538b23fe84fc893853e2a8ee4a0c6b80af93f57927d0830f84b28ed99e6066aaae7aa56dd9fb9ae2422979455ccfa04e2fa59205657cd9be9f4730dbbdc625d48f33c40d8acae663f8aea87ae", @nested={0x24, 0x40, 0x0, 0x1, [@nested={0x4, 0xaa}, @generic="7fa7b56d53134be32162c1a15721b83949cc2e8a198ffa0ac70388fe"]}, @generic="98082ea15c3634c481ad7c2dbfa47be96dc09db83b85e1ebec96dcefed223d1064fcee1770ec84f40e844a056d84a11fa59d4681d0bdad3060d68295a8a9dd8d4ff70e4e5bb51af381db8c3db91f155d5902924012b34171c0e1d6ab81cce8bbb4ec450c0e16ca2d4df0eb504e55b7", @typed={0x4, 0x6a}]}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10001}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x215c, 0x19, 0x0, 0x1, [@nested={0x1057, 0xfe, 0x0, 0x1, [@nested={0x4, 0x41}, @generic="68fcd830cc53b047fc8d18eef2e5cc88824cd8", @generic="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", @generic="f95b63072d4ed7eb0bd1c95c16974906c27d30f22d4c257fdbadb116d365d8a5484da81da1dfc8c8ecc0c4391841a00f3934abebe4bb5cd5", @nested={0x4, 0x127}]}, @generic="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", @typed={0x8, 0x8c, 0x0, 0x0, @uid=r9}, @typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="923fef8a761a17771fd89393d2d031f585d0f81069e839ca4133d19c0aa5eb342cf628125dd927270cde55dcf322a6f752e802207ca5438108393d13c81ca4ea539aa3ea241d36de65dce61978e04d4c25243dfb92ae362eea3fc416da4b737ab9d6b2bdfd279279fd686d0fdbf3bd1cfdaa9a07d2e882a768ad390e630d3912ead5d8cd0610a0e9b7f1a46a6ccc14558aaf0630db36df9b3f3fc3c3917a63016570a31f7d1ef45b3ba25e74c5d2e28b9192afb152765e78dac59a51d0133e030d7c3781bf01075a5a2e148b8d2f49cc008b9a6f3de9755a60f82373c1c77c3afe2963b7"]}]}, 0x23c0}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000003e00), 0x40, 0x0) io_uring_register$auto_IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000003e40)="3424f707ddb0dd00d9cae2fbd203dce959b51d2ce65e1b51ea53fc6065e681d5ff69c1d1436ffa2e2b3289e0959c2ee40016f505b17eda9ca11ebfb3198cc9f4246ad50f0672777fa8a9b5d052f1e66d5a927b4a4c2e517b0b588fd2e0e7089494dad61995fab5ce730dcd61c72fece73a347f01718cb78a2d55f29b62430a0cf7f20668503659550d393709985880a16e342a819f0f3f01b8a34378c400dd17416c215e6bb30c8c1a08c63f73040781610f0c3a2e685b62af9ffd124e655f13c4425830f830d1b6", 0xffffffff) r10 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000003f80), r4) sendmsg$auto_WG_CMD_GET_DEVICE(r4, &(0x7f0000004040)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004000)={&(0x7f0000003fc0)={0x20, r10, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xd, &(0x7f0000004080)="07058c426f901292ef9a9324b8096537677e7925798e6832b7faecc55d7087fd7d11e8e3b7eeefb310e2d06829fa025024ebc4265a7551732879c7") write$auto_fops_u32_(r1, &(0x7f00000040c0)="487f9dfc58e5f1beb6cbd5f1c2684b271c60df7a695ea693edf049e6dbb24090c51c464d193e3430b6b09dfb0556037d300f6d8682dfd8e61529f23bf931a60bac70ab673e3ba24fe3de45c5dda779ececa24e47bd229bf2ee2d769c9e5025882e77c53a9f640ea1b09e50b17f2a8b567353d314d2e73cc81588faa26a480972dbcb44bce127a11b0db2f049748b05c27996361a76584ea82d542f1a645fb9f2f673a4b59156c5ba2ad9f6c146282d12fea35615e546a6", 0xb7) 1.653314846s ago: executing program 2 (id=2387): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/speed\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000280)={0x4, 0x80003, 0xa, @state_change={0x200, 0x9, 0x3}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x0, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x4, 0x2, 0x10, &(0x7f0000000040)=0x7) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x8200000001, 0x0, 0x801, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x2000000000, 0x8000000000000001, 0x3, 0x8000eb1, 0xfffffffffffffffa, 0x80000001) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x9, &(0x7f0000000680)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI+\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\x1e\t\xef\xe4&\x91\x8ey\x97\x00e:\v\xe6\x14\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2\x96\xf97\xe3\x05\xf7\x19\x9f\xb7r\x9b-=\\N\xc7\xc3\xbcg:\xaf\xb1\x1d\xa1\xe4\xb7\xd6\xe4\xb6\x1c\x11LE\xb7\xcb\x1bTD\xa6\v\xf8\xa5\xce%-\x06FVa\xc8\xca\xc5\xea\bF\xc2\x94\xef\nI\xe6\x04\xbe\xe8-d]Q\xfc.5 \xa7@w\xd8\xd9pEW\xe4`\x85;d\t\xd8\x10lT\x88xS{\xb9\x94P\xc3\x1f\x0f\xbc\xcb\xbc\xe9\x85zC\x86\xc976\xf8\xb3\x85lQ\xdd\x9c\xc6\x93mA\x1dH#fr2\xed \x8a\xc5\x8f\x01\x9a\x01I\x95H)rEF\xe2\x00\x11\x18\xfb\xc7N\x02Qn\x92\xa8\x8c\x87\xc4\x1c/\xf4\x15\xa6\xea\xa9A8\x99(\xfds@aq\xbeo&}\x9f`\xc1\xd3\xecYU\x11!\x8a8\xf5B6\xc6\x83\xf1\x93\xaa\x1c\x81`\xbe\xfcO\v<>\r\xcc\xd5C\x93\xe0\xcd\x125K\xb41\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r2) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8000e, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x4, 0xf, 0x1, 0x958b, 0x2, 0x8, 0x5, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x4, 0x10000]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0xc) sysfs$auto(0x2, 0x16, 0x0) 1.6408521s ago: executing program 1 (id=2389): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x71) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) r1 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r0, 0x100065, 0x9, 0x1, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x100, 0x0) getdents64$auto(r2, 0x0, 0x400) io_uring_setup$auto(0x1, 0x0) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x4008080) mmap$auto(0x0, 0x716bd397, 0xdf, 0x2658, r0, 0x8000) close_range$auto(0x2, 0x8, 0x3) r3 = socketpair$auto(0x10002, 0xfffffffc, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10bb81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto(r4, 0x13, r3) socketpair$auto(0x4, 0x1, 0x20000, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) io_uring_register$auto_IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f00000000c0)="a68191ec2326e3e19eadcd613f4d", 0x7f) fchown$auto(0xffffffffffffffff, 0xfffe, 0x7ff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0xa) 651.918082ms ago: executing program 3 (id=2390): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mlock$auto(0xfbe8, 0x6) munlock$auto(0xffff, 0x1) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptyba\x00', 0x0, 0x0) ioctl$auto_TIOCGWINSZ2(r1, 0x5413, &(0x7f0000000500)) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r2, r2, 0x0, 0x4f64) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80f02, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000100)="0001") mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x2, 0x1, 0x0) ioprio_set$auto(0x81b, 0xff, 0xffffffff) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22c02, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)=0x1ff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x11, 0x124, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @str='[{(\x00'}, @generic="34f488e47b"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x400c080) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={"cad0abd748dc5300ddedf0199885285e3ea9ed02b8595f33be52dc2c2c5821b9", 0x481, 0x800, 0x6, 0x4cc, 0x7, 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0xa74, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc32}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2fa, 0x2, 0x0, 0x1, [@typed={0x8, 0xfe, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x57}, @typed={0x8, 0x4d, 0x0, 0x0, @u32=0x52c0}, @generic="67a350576c02a1bf4807d68e456321688214c1ce37d5e63684e44f863e44770a708a", @nested={0xb7, 0x85, 0x0, 0x1, [@nested={0x4, 0x85}, @generic="04222c1bbd2c3037a789cbced580361cc026ad35ba25dc84cac4a749228341f9eedd7f8e", @generic="721744f4189f0c2cbe75b642b74c8a1bf560011252", @typed={0x8, 0x53, 0x0, 0x0, @u32=0x5}, @generic="7909718266b2949e0c69bea339b0bcd8f8c60463ade3032f5c153ab462fecb72d5c232aa45e59b6a8b93a06908d18c705bd789b003810deb42a812c593f13ea27b757038a72958643a93c4251c5072a7b28c7e354bde025e4ce8815a43fc3aceff118d15ad10", @nested={0x4, 0xa5}, @nested={0x4, 0x1d}]}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@remote}, @typed={0x4, 0xcd}, @nested={0x1e3, 0xbb, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @pid=r8}, @typed={0x4, 0xc5}, @generic="d0887357e936f56a41ca09494fbd53b3ce0e9c8da855fda5fab6df6836a5ef7ac11dccbfc676795d45b396a5e67232719923ff49660cc3fa9f7e7e780fb66c082691d4778e3870132c4b991e8167f192cae2575b4edef32cec8f2fdeeb0015b09a51acda854730175a526d0c13da9dd6a92a4c5ed2fff9bd84288817e7cdc2386481dbabed8612b78bad9aebc300e3aef0977ec02315e8", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@empty}, @typed={0xcb, 0x121, 0x0, 0x0, @binary="8cd272ba8af2e25bf2137b9933bf037fad39206f136dc2601270177a289609a58960107cde60fdcd685c4b857c540dafa2723dc699c6d29eabb8b8fd7a481b246d7d6273822cb91c26f5fbeccc20f681a5d9462451c12c779bf63df77376dd2f9b91be66f2e567050bdd580efe62eeca807243c5de44f4e0189b5ab7f2bb114ea22197bc30a271edf048e339ed3785d9ac7b0aa566fbfaaacf645e21b828cb8f65cf2bf5825a9168cc296700fc1c4cdac755fc8c9c41e9487ec08df837af787171872402af5b92"}, @typed={0x67, 0xab, 0x0, 0x0, @binary="f3882b633451494ea567597574c5e2b7278af0e55ea00c07dde8fecfe2bf7dad2bd1c085d6fd7759cf89e26fc0ab86c9ba924832a5521db9b1d661a204c12097bab662e611ca38c81437c7dd71745c9e1a2a9e8fc4500cf18724e0302c9ca6aea34ea3"}]}, @typed={0xc, 0x151, 0x0, 0x0, @u64=0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x708, 0x2, 0x0, 0x1, [@nested={0x1c, 0x87, 0x0, 0x1, [@nested={0x4, 0x44}, @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xbe}]}, @nested={0x475, 0x57, 0x0, 0x1, [@generic="5aeea6425faa1e9717b8ba6d1d02308bdc6483635fee4282dfb950fca99632b14fba6f00a8d5f18a35f13e8f42359ff52edd9ff3338e", @nested={0x4, 0xb1}, @nested={0x4, 0x115}, @generic="c15e5cd3629b069959455ffa0412aa3a2a8945d99099c417d9fc09c5ed72652c5545cf9e930a1257614e02c2608cf8c029cc8b73384c2f0e7f6ab9b0206a3a534fafe1f90041f350088ba13c551a71ebf7b588078e21c41a67d2b937091090553d72f9e650a6a7044aa9b399e80c1fb84605403afb6159fabdcbd6a8f0787008040ef028ba20bbad72dc45f07e8a91ce783334d752196d44c8401e16abb0125088392437996d3846a919c57743bd7282869cd63b93e80f67f9d4713dbe233d3f1556506f4c1ba5ce7059433055645af9", @generic="941ef51d54346747be5cd902a531133e84f072ec9bd0cf2ad1572b9ded91b1402c4114ca4a84863913c6385d604449844ddd3f20e1b25fc4aa1a8a60d488ea2aeb3931c6fc1cb4d7c8c62d79ab3647d51fa0e69651b31be55244adff5e6404be41101b2f1406bde0353520f910c1271e088c8466920108951ce471b389f8b609576ec524aa77927c869bf52779c8dfb358ea4e9e714638923f0d0687e924c65568a7fb2c70beddf2e63e3a29d8691c67e33ebd82f0b4742ebc", @generic="381c3bd6cd9a2f7d59c89c7bd4b4ce9682569d136404eebf1be817e30725c83c0f77ffc03bd278cde61af173aad71e3a8f05f80b6521d31ae85a46d2d6322df48c2cbe64380a8a7a145100c45daaa9b4f724d7cb73f0e6dffd747dab9a8527e5e7bcb90a397f70823e8da9672f8cdb36f1a8a8d6abd9348c7202a51f6855198193ba33f0c6ac885db8f86a1a31c81cbaecb1ed6d8d4a277348dcd605d3725d602afaf1b7d6c876d72186a5597595794c", @generic="a3b1749e6f13dc2c92d0ae5c770b0f3558e21ec8cfca5b0153bb1f974175e7548a6cf2755e7eefd78c8098463051020eb944f1af65786d50fd80b17332dd2ff465", @generic="538dbec0a0527237fa53a5f5909f2f6ecb025b6e244e27f50dffe8fe35d60f8d8085e56ad9d1ef26b98e38dea4a285c80926eea14fed18b51d7a8270e510e1797c1890ce8a5bb7f7d68094463207c77bcdd7b430efc24ea336f99b1de71f58c538edf196f143e83c782c2a58ae1e8c5d2aa83e9294564b97776e21e1f0a3a7b7b62b575321aaecff5dbd8d7ee36a93e89b864774e3dd8c925996ea0ba23ce25256ce113c9b709522165fee6b818c83687ba8b0239461ac7403", @typed={0xf4, 0x117, 0x0, 0x0, @binary="b077b1a13266dea6ce6ee5c63ee9f39a164059080bbcbc54938235213faa81291fab6d45806cca5f1240c39db9717b33c6a053ae12f16699d82d592a8800199353a2412db1d296e1ed367604a2cd594b9ff6d6736c47bb7ac4fd1d239500cd0af08b09c0db7e06b6f155a39b3437f81762f175c716a0826eeb368ff024394f5f80e05df3a09f4240d7d98c0b0eea3af582b4c995e0d0409cfc2971c5496c824be3eda97cffdb523571eb814fd51f01896c6ba5127fbfcec93ebdb30d4c7912bf2299b91f87a7ef6de11cc21b749ed11dcbfdf9c8268e63b599e3053dadd1f6cc194a150b811e86554e43adc75d67a8cf"}, @typed={0xc, 0x21, 0x0, 0x0, @u64=0x1000}]}, @typed={0x8, 0x43, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="99b97e95738a9f77ef445a2fbd7ff7a3ec4351738a006c1db7cca08aeb11024d51389912b10e3dec5750aef5cf01a987bfedc937bb7aa75fd8859faa1573b5aa86de70a532eb7756f0d3a71be6f3605cce5eacaaa10150665b405d4718fab226cfa4e28abbf768a291272f283f569ca7a05c0092d0267dcf36a6c04c455e9ca9fb95d427008f3475352d9b58df904cc7f17031149f8affc3506a48fb0ecf5a056b623e5acccc0df7ad6ee0437b167267b40e0fb16f3c01296052f1fe3c988c2ea0a826b4f09fa723a9e8a1aa800b858627bcdb99b8417abaa33c6e9b72004a593fc019828292764592e5d86a", @nested={0x94, 0x77, 0x0, 0x1, [@typed={0x4, 0x13a}, @typed={0xf, 0xdd, 0x0, 0x0, @str='/dev/audio\x00'}, @generic="970b28cd21898292813c82144e09df87b3e696a05f5b88395923f367b9b270e69a4686b4a07c25cdf7f7aae1a99938369e6a6a21584e2d466b65e9fe6750c0c63779b1efa7cbea7308c85b9075897c79ccf22a0dcbaf789b04fb018a75e5ec70f7919dad5d017bbf805ab03f702ffb429e2e43a2bd5fbd6c1cc5ef13"]}, @nested={0xe8, 0x11a, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="0de32f45c772675dd705706c4e7ce3e4fed167b566d2e8946c03520e7e420139dffd0c26d282b05572bb95c0df441fd25a66f4ec8ed169146658999494af2c8fbdbe719201d4c6aa662c01416140835098e6b748b0cac61c73d19058f06e5ebefd088e4a9f1415f06ccbf3914e4b4b706f25ba00aca512ab92a28c475376d8c53f499ae9bd1ddf79cdcd30b0db961567abcb855957df0e2f0024d8e375ebc498c20fc29c80fb", @generic="2b428e2fdfcca68d85b89aeb00093f5cab035066971044a2c648523361cdcded56f2962b837c1926f00c03d8c71e8682a99fda9ab55129b5505b"]}]}]}, 0xa74}, 0x1, 0x0, 0x0, 0x4}, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, 0x0, 0x5, 0x20000000) ioctl$auto(0x3, 0x80000541b, 0x38) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000002c80)="3f0be77a4f8954f9ec") madvise$auto(0x0, 0x400053, 0x9) 84.667591ms ago: executing program 3 (id=2391): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x4, 0x0, 0x100082) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x1f00, 0x24000000}, 0x18800) madvise$auto(0xfffffffffffffffe, 0x43226f3d, 0x0) close_range$auto(r0, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, 0x0, 0xda) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) 53.512158ms ago: executing program 1 (id=2392): madvise$auto(0x0, 0xffffffffffff0106, 0x12) r0 = setfsuid$auto(0xee00) madvise$auto(0x8, 0x5, 0x760) r1 = setfsuid$auto(0xee01) clock_gettime$auto(0x80000000, 0x0) unshare$auto(0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0x1e, 0x5, 0x40000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) setresuid$auto(r0, r1, r0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, r1, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) madvise$auto(0x0, 0xffffffffffff0106, 0x12) (async) setfsuid$auto(0xee00) (async) madvise$auto(0x8, 0x5, 0x760) (async) setfsuid$auto(0xee01) (async) clock_gettime$auto(0x80000000, 0x0) (async) unshare$auto(0x3) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) (async) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) (async) socketpair$auto(0x1e, 0x5, 0x40000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) (async) setresuid$auto(r0, r1, r0) (async) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, r1, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) (async) 0s ago: executing program 0 (id=2393): r0 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000200), 0xffffffffffffffff) r1 = openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim6/ports/2/udp_ports_table0\x00', 0x200000, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000002c0)={0x570, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0xe3, 0x2, 0x0, 0x1, [@nested={0x8, 0x79, 0x0, 0x1, [@nested={0x4, 0x31}]}, @generic="55a584f827d5f11eebd6b173de97e4f0513151b651dcd60773df29c949b146e4fe4a169aa75c14d5fadc1728ff5ff5ab25ebaf0bafdd01f0843ecc02c0f0130c0b16f702f4e994b6ff4885fcb86b573157ffe91478f849b9530df4a964731f801c519cee193a3c75f0a01aa03ab1e1cdfb541015edfe8906848c6d7ef7ab9fcb142c98473bff9dc11bb14e51bde02f7c0383d37c1b3cac25a20d8eb4e4c72619764248f32b9580d9e947cd240f35891924748ad1aa31f1e37f42eb2c11e7f061f9681df1660053682160ae38ef9f507d7a1e37512e6a9d"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x476, 0x2, 0x0, 0x1, [@generic="07e59f9033554d6690c7cc9e4a83ed40a7c6f6aa3ee2cfee64574c4a50f986135c0dc3a77c425b5b57e9b6ee51b8f38aff00b0392f1505a6afa9575ca1f48aaebfc9e6f639e8ff6817d8d8701bc65a2dbdc1c067e0324cff57d4d04d03b326d3ac26a0fc8545bfe11be40c5ae8bd1c6336af5616088bafada4e8d0d3d769bbc243ddc645a66f4b00b3b62f71d55e4ad27c5e5ce158de7d81fc102e55204cf5d23af9488e51a6ddd95e6e0d1b22eb86a1a761758ce1893d404c6f1b9c3cca64b2a81d446efe", @typed={0xc, 0x82, 0x0, 0x0, @u64=0x1}, @generic="9db8a63a3f22fb45f4709647ad219d8548e3b4055b966d0275de09843e3101c2b2c51b53785f1352795f3ef84df4c892716ba82e3110e98453560f3679d7665300fc25c7c63854afcb320376642761b4fe390226d62e897fa7bb5b48bb5a2a8a200efe4a678a187bbd0e80e4b49856f3a8596287c5196abafedcf8231bf33fdde2b5bc83e6f8", @generic="46bc56cc288db84857f611035b8cf1ae22ccbb53a1153329578e0a78e59ad0f3b9db34", @nested={0xfc, 0xb8, 0x0, 0x1, [@generic="2e7c978246527392e0f9bb86a52fd0c775f788b5f2527cd92857547f42a1f726a9533e2fa8ce5d9c3b10db13ff93adbd597881ca1df34094f51755a8219609a70758e6f642e25d8c4c281c30921712e057639c07f7fc8e58c0db79d3dc12efc4a75d9b20268ccc70228352410dce890ba1cb79309e", @generic="6aa4364042cf7de21274683174b8137936e316d7109dc9995829a56de62cea43f3ebd66eddc8efa68d480e5953977d7bee52e71579e0a124783a215a7df2416eac83562969f9382db735e302f3dcf55c94e2099930c1e47c89567140a66da9825ace6ae6313ae93c6794aef77b1d9fa34062fce1a04dbb", @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xb4}]}, @typed={0x8, 0xb0, 0x0, 0x0, @fd=r1}, @nested={0x1f3, 0x92, 0x0, 0x1, [@generic="10c3b36af623cdf777354204d461033077c2dc1168cc81106a6473d0edaec832f6f6998cfd218767020e766ec2b0411989f40dbdade1286fa5170c3753f90479f985fbda8b456fd8e3b42fff978355b771ebf3e914a66e9af2ebecc151106d913bf3109331f356aecd9f583e1b26e42c0a9ed3248216e61b624e5f3754afe694a1374c83d685c0ea8a58ea2562a93be30c430e94e70c96a9a3c837307aacfd75745e84248ea4cc8dec87d11af660bcc441a293714993221ab1633e60a18ef663f5b520c5796feb7b895ca803a1ce62201d7e895e750773ac963351d81eadb958ecde8efeb5f1a6f33bfa0798165fa74279a01aae32fbec5339fb1f465d", @generic="1d0c40385082b8fb2975bb83ebc443cc276851bde2dcbe9eeb30117753123f80fe103e77561b3bd0bc7edaa24d85300e8469897986b9a82c96d3d5ec664a65346c05cd361402606a109d3db58b9228ac48562136ea66586e6b91718977194d73abb27fe801694e9030fc93f4193807af74987f5dbb4e23e8c6df80b0a1b72ddb2899f69300fceac32e52130795f0cf0d206da76e0729c6cdb814638cf0dcdada67dbbb79391d4dd97820ab4aa4e2dd712e88d8bb07a57cdd2ab6202a449bcda3f12be5865c1f01ffe2a10acba9afe74afa73310e186084655c2a80203dc228df135e", @nested={0x4, 0x144}, @nested={0x4, 0x53}, @nested={0x4, 0x10e}, @nested={0x4, 0xf5}]}]}]}, 0x570}, 0x1, 0x0, 0x0, 0x840}, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x101000, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/tracepoint_printk\x00', 0x101202, 0x0) sendfile$auto(r2, r2, 0x0, 0x4) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptyp5\x00', 0x48142, 0x0) ioctl$auto(0x3, 0x5419, 0x10000000000402) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty31\x00', 0x0, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r5 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) fcntl$auto_F_NOTIFY(r5, 0x402, 0x3) ioctl$auto(r4, 0x404b72, r3) read$auto_nsim_pp_hold_fops_netdev(r4, &(0x7f0000000080)=""/75, 0x4b) r6 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyc2\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) fchown$auto(r6, 0xff, 0x5) fcntl$auto(r6, 0x4, 0xfffffffffffffff9) socketpair$auto(0xfffffffd, 0x7, 0x5, &(0x7f0000000040)=0xc) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r4, 0x4018bc0e, &(0x7f0000000180)={0xfffffffe, 0x0, 0xff8, 0x9}) kernel console output (not intermixed with test programs): expected event 0x3e length: 726 > 260 [ 355.719569][ T5870] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 355.734824][ T5870] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 355.734864][ T5870] Bluetooth: hci2: adv larger than maximum supported [ 355.742037][ T5870] Bluetooth: hci2: adv larger than maximum supported [ 355.750011][ T5870] Bluetooth: hci2: Malformed LE Event: 0x0d [ 355.769654][ T5870] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 355.769672][ T5870] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 355.786087][ T5870] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 355.786103][ T5870] Bluetooth: hci2: adv larger than maximum supported [ 355.793303][ T5870] Bluetooth: hci2: adv larger than maximum supported [ 355.800020][ T5870] Bluetooth: hci2: Malformed LE Event: 0x0d [ 356.712349][T11653] sd 0:0:1:0: PR command failed: 1026 [ 356.792467][T11653] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 356.909157][T11653] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 357.406006][T11669] netlink: 346 bytes leftover after parsing attributes in process `syz.2.1177'. [ 357.880064][T11674] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163f829 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 357.895498][T11674] Call Trace: [ 357.898762][T11674] [ 357.901677][T11674] mce_cpu_restart+0x98/0xb0 [ 357.906256][T11674] ? __pfx_mce_cpu_restart+0x10/0x10 [ 357.911523][T11674] smp_call_function_many_cond+0x1227/0x1600 [ 357.917501][T11674] ? __pfx_mce_cpu_restart+0x10/0x10 [ 357.922763][T11674] ? mark_held_locks+0x49/0x80 [ 357.927510][T11674] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 357.933302][T11674] ? lockdep_hardirqs_on+0x7c/0x110 [ 357.938500][T11674] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.944290][T11674] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 357.950603][T11674] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 357.956572][T11674] ? __pfx_mce_cpu_restart+0x10/0x10 [ 357.961837][T11674] on_each_cpu_cond_mask+0x40/0x90 [ 357.966932][T11674] set_bank+0x240/0x3a0 [ 357.971072][T11674] ? __pfx_set_bank+0x10/0x10 [ 357.975732][T11674] ? find_held_lock+0x2b/0x80 [ 357.980389][T11674] ? __pfx_set_bank+0x10/0x10 [ 357.985050][T11674] dev_attr_store+0x55/0x80 [ 357.989541][T11674] ? __pfx_dev_attr_store+0x10/0x10 [ 357.994722][T11674] sysfs_kf_write+0xf2/0x150 [ 357.999296][T11674] kernfs_fop_write_iter+0x354/0x510 [ 358.004576][T11674] ? __pfx_sysfs_kf_write+0x10/0x10 [ 358.009756][T11674] vfs_write+0x7d0/0x11d0 [ 358.014066][T11674] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 358.019849][T11674] ? __pfx___mutex_lock+0x10/0x10 [ 358.024854][T11674] ? __pfx_vfs_write+0x10/0x10 [ 358.029610][T11674] ksys_write+0x12a/0x250 [ 358.033920][T11674] ? __pfx_ksys_write+0x10/0x10 [ 358.038774][T11674] do_syscall_64+0xcd/0x490 [ 358.043264][T11674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.049137][T11674] RIP: 0033:0x7fd16d78ebe9 [ 358.053530][T11674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.073116][T11674] RSP: 002b:00007fd16e60b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.081509][T11674] RAX: ffffffffffffffda RBX: 00007fd16d9b6090 RCX: 00007fd16d78ebe9 [ 358.089458][T11674] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000002 [ 358.097410][T11674] RBP: 00007fd16d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 358.105365][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.113316][T11674] R13: 00007fd16d9b6128 R14: 00007fd16d9b6090 R15: 00007ffdf9837f08 [ 358.121542][T11674] [ 358.830541][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 358.866726][T11692] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1182'. [ 359.391691][T11705] ubi0: attaching mtd0 [ 359.423596][T11705] ubi0: scanning is finished [ 359.428206][T11705] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 359.706819][T11705] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 360.030657][T11704] zswap: compressor not available [ 361.997319][T11675] kexec: Could not allocate control_code_buffer [ 362.960201][T11800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1208'. [ 363.923361][T11827] FAULT_INJECTION: forcing a failure. [ 363.923361][T11827] name failslab, interval 1, probability 0, space 0, times 0 [ 363.996519][T11827] CPU: 0 UID: 0 PID: 11827 Comm: syz.1.1212 Tainted: G U syzkaller #0 PREEMPT(full) [ 363.996543][T11827] Tainted: [U]=USER [ 363.996549][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.996557][T11827] Call Trace: [ 363.996562][T11827] [ 363.996568][T11827] dump_stack_lvl+0x16c/0x1f0 [ 363.996592][T11827] should_fail_ex+0x512/0x640 [ 363.996612][T11827] ? fs_reclaim_acquire+0xae/0x150 [ 363.996634][T11827] should_failslab+0xc2/0x120 [ 363.996653][T11827] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 363.996671][T11827] ? security_inode_alloc+0x3b/0x2b0 [ 363.996690][T11827] security_inode_alloc+0x3b/0x2b0 [ 363.996706][T11827] inode_init_always_gfp+0xce4/0x1030 [ 363.996725][T11827] alloc_inode+0x86/0x240 [ 363.996744][T11827] new_inode+0x22/0x1c0 [ 363.996764][T11827] rpc_new_dir+0xa1/0x440 [ 363.996788][T11827] rpc_populate.constprop.0+0x51/0x1d0 [ 363.996802][T11827] ? d_instantiate+0x77/0x90 [ 363.996819][T11827] ? __pfx_rpc_fill_super+0x10/0x10 [ 363.996831][T11827] rpc_fill_super+0x2b9/0x4f0 [ 363.996845][T11827] ? __pfx_rpc_fill_super+0x10/0x10 [ 363.996857][T11827] get_tree_keyed+0x10e/0x1d0 [ 363.996873][T11827] vfs_get_tree+0x8b/0x340 [ 363.996886][T11827] vfs_cmd_create+0xd7/0x2a0 [ 363.996905][T11827] __do_sys_fsconfig+0x7b8/0xbe0 [ 363.996924][T11827] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 363.996951][T11827] do_syscall_64+0xcd/0x490 [ 363.996971][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.996985][T11827] RIP: 0033:0x7fe15a58ebe9 [ 363.996996][T11827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.997019][T11827] RSP: 002b:00007fe15b3b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 363.997033][T11827] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a58ebe9 [ 363.997043][T11827] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 363.997051][T11827] RBP: 00007fe15a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 363.997060][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.997068][T11827] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 363.997087][T11827] [ 363.997357][T11827] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 365.604272][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 367.955777][T11901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1231'. [ 368.201632][T11901] team0 (unregistering): Port device team_slave_0 removed [ 368.214914][T11901] team0 (unregistering): Port device team_slave_1 removed [ 370.826539][T11988] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1246'. [ 370.970126][T11988] : renamed from gre0 (while UP) [ 371.014886][T11988] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1246'. [ 372.447504][T12003] ima: policy update failed [ 372.455548][ T30] audit: type=1802 audit(6051169470.770:14): pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1249" res=0 errno=0 [ 373.357999][ T5870] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 373.358022][ T5870] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 373.378691][ T5870] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 373.378730][ T5870] Bluetooth: hci1: adv larger than maximum supported [ 373.385937][ T5870] Bluetooth: hci1: adv larger than maximum supported [ 373.394097][ T5870] Bluetooth: hci1: adv larger than maximum supported [ 373.400762][ T5870] Bluetooth: hci1: Malformed LE Event: 0x0d [ 375.796815][T12099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.865111][T12099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.940067][T12099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.029700][T12099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.170886][T12099] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 377.418542][T12121] kexec: Could not allocate control_code_buffer [ 377.849935][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.922557][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 378.004938][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 378.082772][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 378.898812][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.917191][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.507257][T12190] nfs: Unknown parameter 'w' [ 379.750450][T12198] netlink: 'syz.0.1285': attribute type 11 has an invalid length. [ 380.163216][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 381.620162][T12244] could not allocate digest TFM handle [ 382.773800][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 382.842201][T12281] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1298'. [ 383.846538][T12314] FAULT_INJECTION: forcing a failure. [ 383.846538][T12314] name failslab, interval 1, probability 0, space 0, times 0 [ 383.981765][T12314] CPU: 0 UID: 0 PID: 12314 Comm: syz.0.1306 Tainted: G U syzkaller #0 PREEMPT(full) [ 383.981791][T12314] Tainted: [U]=USER [ 383.981795][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.981804][T12314] Call Trace: [ 383.981810][T12314] [ 383.981816][T12314] dump_stack_lvl+0x16c/0x1f0 [ 383.981839][T12314] should_fail_ex+0x512/0x640 [ 383.981859][T12314] ? fs_reclaim_acquire+0xae/0x150 [ 383.981887][T12314] should_failslab+0xc2/0x120 [ 383.981906][T12314] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 383.981923][T12314] ? security_inode_alloc+0x3b/0x2b0 [ 383.981943][T12314] security_inode_alloc+0x3b/0x2b0 [ 383.981958][T12314] inode_init_always_gfp+0xce4/0x1030 [ 383.981977][T12314] alloc_inode+0x86/0x240 [ 383.981997][T12314] new_inode+0x22/0x1c0 [ 383.982014][T12314] ? proc_lookup_de+0x201/0x360 [ 383.982035][T12314] proc_get_inode+0x1d/0x780 [ 383.982054][T12314] proc_lookup_de+0x236/0x360 [ 383.982076][T12314] proc_tgid_net_lookup+0x75/0x120 [ 383.982098][T12314] __lookup_slow+0x24e/0x460 [ 383.982120][T12314] ? __pfx___lookup_slow+0x10/0x10 [ 383.982151][T12314] ? lookup_fast+0x156/0x610 [ 383.982167][T12314] walk_component+0x353/0x5b0 [ 383.982182][T12314] link_path_walk+0x627/0xe20 [ 383.982202][T12314] path_openat+0x1b0/0x2cb0 [ 383.982217][T12314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.982237][T12314] ? __pfx_path_openat+0x10/0x10 [ 383.982257][T12314] do_filp_open+0x20b/0x470 [ 383.982273][T12314] ? __pfx_do_filp_open+0x10/0x10 [ 383.982296][T12314] ? __pfx_kfree_link+0x10/0x10 [ 383.982321][T12314] ? alloc_fd+0x471/0x7d0 [ 383.982340][T12314] do_sys_openat2+0x11b/0x1d0 [ 383.982361][T12314] ? __pfx_do_sys_openat2+0x10/0x10 [ 383.982388][T12314] __x64_sys_openat+0x174/0x210 [ 383.982408][T12314] ? __pfx___x64_sys_openat+0x10/0x10 [ 383.982436][T12314] do_syscall_64+0xcd/0x490 [ 383.982456][T12314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.982472][T12314] RIP: 0033:0x7fd16d78ebe9 [ 383.982484][T12314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.982497][T12314] RSP: 002b:00007fd16e62c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.982512][T12314] RAX: ffffffffffffffda RBX: 00007fd16d9b5fa0 RCX: 00007fd16d78ebe9 [ 383.982521][T12314] RDX: 0000000000020602 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 383.982529][T12314] RBP: 00007fd16d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 383.982537][T12314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.982545][T12314] R13: 00007fd16d9b6038 R14: 00007fd16d9b5fa0 R15: 00007ffdf9837f08 [ 383.982564][T12314] [ 386.300365][T12329] svc: failed to register nfsdv3 RPC service (errno 111). [ 386.343374][T12329] svc: failed to register nfsaclv3 RPC service (errno 512). [ 387.035148][T12349] netlink: 'syz.3.1315': attribute type 16 has an invalid length. [ 387.073233][T12349] netlink: 226 bytes leftover after parsing attributes in process `syz.3.1315'. [ 387.109132][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1315'. [ 389.792768][T12396] __vm_enough_memory: pid: 12396, comm: syz.2.1322, bytes: 4398046511104 not enough memory for the allocation [ 391.321786][T12429] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1328'. [ 391.762652][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 391.778851][T12388] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 392.250691][T12452] zram: Added device: zram1 [ 392.731900][T12461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 392.817475][T12388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 392.848277][T12388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 392.896720][T12388] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 393.842764][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 394.061982][T12499] bridge0: port 3(veth1_macvtap) entered blocking state [ 394.147862][T12499] bridge0: port 3(veth1_macvtap) entered disabled state [ 394.194044][T12499] veth1_macvtap: entered allmulticast mode [ 394.201119][T12499] veth1_macvtap: left allmulticast mode [ 394.813122][T12512] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1346'. [ 394.884416][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 394.966691][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 396.048377][T12533] usb usb36: usbfs: process 12533 (syz.0.1350) did not claim interface 0 before use [ 396.461233][T12565] FAULT_INJECTION: forcing a failure. [ 396.461233][T12565] name failslab, interval 1, probability 0, space 0, times 0 [ 396.536204][T12565] CPU: 0 UID: 0 PID: 12565 Comm: syz.1.1357 Tainted: G U syzkaller #0 PREEMPT(full) [ 396.536229][T12565] Tainted: [U]=USER [ 396.536234][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.536242][T12565] Call Trace: [ 396.536248][T12565] [ 396.536254][T12565] dump_stack_lvl+0x16c/0x1f0 [ 396.536278][T12565] should_fail_ex+0x512/0x640 [ 396.536297][T12565] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 396.536320][T12565] should_failslab+0xc2/0x120 [ 396.536338][T12565] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 396.536355][T12565] ? security_file_alloc+0x34/0x2b0 [ 396.536377][T12565] security_file_alloc+0x34/0x2b0 [ 396.536395][T12565] init_file+0x93/0x4c0 [ 396.536415][T12565] alloc_empty_file+0x73/0x1e0 [ 396.536435][T12565] alloc_file_pseudo+0x13a/0x230 [ 396.536456][T12565] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 396.536481][T12565] ioctx_alloc+0x5ab/0x2120 [ 396.536503][T12565] ? find_held_lock+0x2b/0x80 [ 396.536518][T12565] ? __pfx_ioctx_alloc+0x10/0x10 [ 396.536531][T12565] ? __might_fault+0x13b/0x190 [ 396.536552][T12565] __x64_sys_io_setup+0xc9/0x210 [ 396.536569][T12565] do_syscall_64+0xcd/0x490 [ 396.536589][T12565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.536603][T12565] RIP: 0033:0x7fe15a58ebe9 [ 396.536615][T12565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.536628][T12565] RSP: 002b:00007fe15b3b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 396.536641][T12565] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a58ebe9 [ 396.536651][T12565] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 396.536659][T12565] RBP: 00007fe15a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 396.536667][T12565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.536675][T12565] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 396.536692][T12565] [ 396.750077][T12570] Invalid ELF header magic: != ELF [ 398.148219][ T5870] Bluetooth: hci1: Malformed LE Event: 0x1d [ 399.161965][T12624] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1374'. [ 399.497647][T12633] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 400.617785][T12648] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 400.629216][T12653] ubi0: attaching mtd0 [ 400.659355][T12653] ubi0 error: ubi_attach_mtd_dev: bad VID header (536870975) or data offsets (536871039) [ 401.131516][ T30] audit: type=1800 audit(6051169499.450:15): pid=12657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1383" name="dbroot" dev="configfs" ino=46186 res=0 errno=0 [ 405.916429][T12778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1411'. [ 406.143946][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 406.329961][T12799] netlink: 'syz.3.1417': attribute type 1 has an invalid length. [ 406.357527][T12799] netlink: 'syz.3.1417': attribute type 2 has an invalid length. [ 406.675203][T12813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1421'. [ 406.794832][T12813] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 407.149944][T12827] random: crng reseeded on system resumption [ 407.406106][T12833] zswap: compressor not available [ 408.845284][T12880] netlink: zone id is out of range [ 408.856717][T12883] __vm_enough_memory: pid: 12883, comm: syz.2.1434, bytes: 4398046511104 not enough memory for the allocation [ 408.874017][T12880] netlink: zone id is out of range [ 408.884743][T12880] netlink: zone id is out of range [ 408.896407][T12880] netlink: zone id is out of range [ 408.944517][T12880] netlink: zone id is out of range [ 409.056329][T12880] netlink: zone id is out of range [ 409.074853][T12880] netlink: zone id is out of range [ 409.135399][T12880] netlink: zone id is out of range [ 409.206144][T12880] netlink: zone id is out of range [ 409.236994][T12880] netlink: zone id is out of range [ 411.571051][T12948] vhci_hcd: invalid port number 16 [ 411.606032][T12948] vhci_hcd: invalid port number 16 [ 411.865786][T12960] FAULT_INJECTION: forcing a failure. [ 411.865786][T12960] name failslab, interval 1, probability 0, space 0, times 0 [ 411.904233][T12960] CPU: 0 UID: 0 PID: 12960 Comm: syz.0.1447 Tainted: G U syzkaller #0 PREEMPT(full) [ 411.904257][T12960] Tainted: [U]=USER [ 411.904262][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.904271][T12960] Call Trace: [ 411.904276][T12960] [ 411.904282][T12960] dump_stack_lvl+0x16c/0x1f0 [ 411.904312][T12960] should_fail_ex+0x512/0x640 [ 411.904333][T12960] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 411.904353][T12960] should_failslab+0xc2/0x120 [ 411.904371][T12960] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 411.904388][T12960] ? __d_alloc+0x32/0xae0 [ 411.904408][T12960] __d_alloc+0x32/0xae0 [ 411.904426][T12960] d_alloc_pseudo+0x1c/0xc0 [ 411.904446][T12960] alloc_file_pseudo+0xcf/0x230 [ 411.904467][T12960] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 411.904487][T12960] ? alloc_fd+0x471/0x7d0 [ 411.904504][T12960] sock_alloc_file+0x50/0x210 [ 411.904525][T12960] __sys_socket+0x1c0/0x260 [ 411.904539][T12960] ? __pfx___sys_socket+0x10/0x10 [ 411.904552][T12960] ? xfd_validate_state+0x61/0x180 [ 411.904572][T12960] ? __pfx_do_writev+0x10/0x10 [ 411.904590][T12960] __x64_sys_socket+0x72/0xb0 [ 411.904603][T12960] ? lockdep_hardirqs_on+0x7c/0x110 [ 411.904620][T12960] do_syscall_64+0xcd/0x490 [ 411.904639][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.904653][T12960] RIP: 0033:0x7fd16d78ebe9 [ 411.904664][T12960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.904677][T12960] RSP: 002b:00007fd16e60b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 411.904690][T12960] RAX: ffffffffffffffda RBX: 00007fd16d9b6090 RCX: 00007fd16d78ebe9 [ 411.904699][T12960] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 411.904707][T12960] RBP: 00007fd16d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 411.904718][T12960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.904726][T12960] R13: 00007fd16d9b6128 R14: 00007fd16d9b6090 R15: 00007ffdf9837f08 [ 411.904743][T12960] [ 411.909695][T12962] FAULT_INJECTION: forcing a failure. [ 411.909695][T12962] name failslab, interval 1, probability 0, space 0, times 0 [ 412.496895][T12962] CPU: 0 UID: 1 PID: 12962 Comm: syz.1.1448 Tainted: G U syzkaller #0 PREEMPT(full) [ 412.496920][T12962] Tainted: [U]=USER [ 412.496925][T12962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.496933][T12962] Call Trace: [ 412.496939][T12962] [ 412.496945][T12962] dump_stack_lvl+0x16c/0x1f0 [ 412.496969][T12962] should_fail_ex+0x512/0x640 [ 412.496990][T12962] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 412.497006][T12962] should_failslab+0xc2/0x120 [ 412.497026][T12962] __kmalloc_cache_noprof+0x6a/0x3e0 [ 412.497040][T12962] ? trace_pid_list_alloc+0x1b0/0x3f0 [ 412.497061][T12962] trace_pid_list_alloc+0x1b0/0x3f0 [ 412.497080][T12962] trace_pid_write+0x10e/0x480 [ 412.497101][T12962] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 412.497120][T12962] ? __pfx_trace_pid_write+0x10/0x10 [ 412.497139][T12962] ? __pfx___mutex_lock+0x10/0x10 [ 412.497155][T12962] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 412.497184][T12962] event_pid_write.isra.0+0x1e4/0x7f0 [ 412.497205][T12962] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 412.497227][T12962] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 412.497245][T12962] vfs_write+0x2a0/0x11d0 [ 412.497264][T12962] ? __pfx___mutex_lock+0x10/0x10 [ 412.497281][T12962] ? __pfx_vfs_write+0x10/0x10 [ 412.497307][T12962] ? __fget_files+0x20e/0x3c0 [ 412.497326][T12962] ksys_write+0x12a/0x250 [ 412.497341][T12962] ? __pfx_ksys_write+0x10/0x10 [ 412.497364][T12962] do_syscall_64+0xcd/0x490 [ 412.497383][T12962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.497398][T12962] RIP: 0033:0x7fe15a58ebe9 [ 412.497409][T12962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.497422][T12962] RSP: 002b:00007fe15b3b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.497435][T12962] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a58ebe9 [ 412.497444][T12962] RDX: 000000000000fdf3 RSI: 0000000000000000 RDI: 0000000000000003 [ 412.497452][T12962] RBP: 00007fe15a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 412.497460][T12962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.497467][T12962] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 412.497485][T12962] [ 415.242650][T13055] input: f as /devices/virtual/input/input37 [ 415.618668][T13059] Invalid ELF header magic: != ELF [ 415.899994][T13077] netlink: 'syz.2.1468': attribute type 2 has an invalid length. [ 416.617889][T13086] WARNING! power/level is deprecated; use power/control instead [ 416.791733][T13096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1475'. [ 417.157370][T13106] FAULT_INJECTION: forcing a failure. [ 417.157370][T13106] name failslab, interval 1, probability 0, space 0, times 0 [ 417.248000][T13106] CPU: 0 UID: 0 PID: 13106 Comm: syz.2.1477 Tainted: G U syzkaller #0 PREEMPT(full) [ 417.248032][T13106] Tainted: [U]=USER [ 417.248037][T13106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.248045][T13106] Call Trace: [ 417.248051][T13106] [ 417.248057][T13106] dump_stack_lvl+0x16c/0x1f0 [ 417.248080][T13106] should_fail_ex+0x512/0x640 [ 417.248100][T13106] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 417.248117][T13106] should_failslab+0xc2/0x120 [ 417.248135][T13106] __kmalloc_cache_noprof+0x6a/0x3e0 [ 417.248148][T13106] ? lockdep_init_map_type+0x5c/0x280 [ 417.248167][T13106] ? nci_hci_allocate+0x45/0x330 [ 417.248187][T13106] nci_hci_allocate+0x45/0x330 [ 417.248205][T13106] nci_allocate_device+0x26f/0x430 [ 417.248221][T13106] virtual_ncidev_open+0x6f/0x220 [ 417.248237][T13106] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 417.248252][T13106] misc_open+0x35a/0x420 [ 417.248267][T13106] ? __pfx_misc_open+0x10/0x10 [ 417.248281][T13106] chrdev_open+0x234/0x6a0 [ 417.248298][T13106] ? __pfx_apparmor_file_open+0x10/0x10 [ 417.248313][T13106] ? __pfx_chrdev_open+0x10/0x10 [ 417.248331][T13106] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 417.248350][T13106] do_dentry_open+0x982/0x1530 [ 417.248367][T13106] ? __pfx_chrdev_open+0x10/0x10 [ 417.248388][T13106] vfs_open+0x82/0x3f0 [ 417.248409][T13106] path_openat+0x1de4/0x2cb0 [ 417.248432][T13106] ? __pfx_path_openat+0x10/0x10 [ 417.248452][T13106] do_filp_open+0x20b/0x470 [ 417.248468][T13106] ? __pfx_do_filp_open+0x10/0x10 [ 417.248497][T13106] ? alloc_fd+0x471/0x7d0 [ 417.248516][T13106] do_sys_openat2+0x11b/0x1d0 [ 417.248536][T13106] ? __pfx_do_sys_openat2+0x10/0x10 [ 417.248563][T13106] __x64_sys_openat+0x174/0x210 [ 417.248583][T13106] ? __pfx___x64_sys_openat+0x10/0x10 [ 417.248611][T13106] do_syscall_64+0xcd/0x490 [ 417.248631][T13106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.248645][T13106] RIP: 0033:0x7fec2ad8ebe9 [ 417.248656][T13106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.248669][T13106] RSP: 002b:00007fec2bbb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 417.248682][T13106] RAX: ffffffffffffffda RBX: 00007fec2afb5fa0 RCX: 00007fec2ad8ebe9 [ 417.248692][T13106] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 417.248701][T13106] RBP: 00007fec2ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 417.248709][T13106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.248717][T13106] R13: 00007fec2afb6038 R14: 00007fec2afb5fa0 R15: 00007ffc5f0c6678 [ 417.248736][T13106] [ 418.121490][T13130] FAULT_INJECTION: forcing a failure. [ 418.121490][T13130] name failslab, interval 1, probability 0, space 0, times 0 [ 418.194946][T13130] CPU: 0 UID: 0 PID: 13130 Comm: syz.2.1481 Tainted: G U syzkaller #0 PREEMPT(full) [ 418.194980][T13130] Tainted: [U]=USER [ 418.194985][T13130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.194994][T13130] Call Trace: [ 418.195000][T13130] [ 418.195006][T13130] dump_stack_lvl+0x16c/0x1f0 [ 418.195030][T13130] should_fail_ex+0x512/0x640 [ 418.195050][T13130] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 418.195070][T13130] should_failslab+0xc2/0x120 [ 418.195088][T13130] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 418.195104][T13130] ? vma_merge_new_range+0x3ae/0xa50 [ 418.195118][T13130] ? vm_area_alloc+0x1f/0x160 [ 418.195135][T13130] vm_area_alloc+0x1f/0x160 [ 418.195148][T13130] __mmap_region+0xf90/0x27b0 [ 418.195164][T13130] ? lock_acquire+0x179/0x350 [ 418.195182][T13130] ? __pfx___mmap_region+0x10/0x10 [ 418.195202][T13130] ? lockdep_hardirqs_on+0x7c/0x110 [ 418.195219][T13130] ? finish_task_switch.isra.0+0x221/0xc10 [ 418.195234][T13130] ? rcu_is_watching+0x12/0xc0 [ 418.195248][T13130] ? trace_sched_exit_tp+0xd1/0x120 [ 418.195268][T13130] ? __schedule+0x11a3/0x5de0 [ 418.195317][T13130] ? mm_get_unmapped_area+0x95/0xe0 [ 418.195344][T13130] mmap_region+0x1ab/0x3f0 [ 418.195360][T13130] ? __get_unmapped_area+0x267/0x440 [ 418.195381][T13130] do_mmap+0xa3e/0x1210 [ 418.195403][T13130] ? __pfx_do_mmap+0x10/0x10 [ 418.195422][T13130] ? __pfx_down_write_killable+0x10/0x10 [ 418.195443][T13130] ? kmem_cache_free+0x2d1/0x4d0 [ 418.195460][T13130] vm_mmap_pgoff+0x29e/0x470 [ 418.195482][T13130] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 418.195505][T13130] ? __x64_sys_futex+0x1e0/0x4c0 [ 418.195522][T13130] ? __x64_sys_futex+0x1e9/0x4c0 [ 418.195541][T13130] ksys_mmap_pgoff+0x7d/0x5c0 [ 418.195558][T13130] ? xfd_validate_state+0x61/0x180 [ 418.195581][T13130] __x64_sys_mmap+0x125/0x190 [ 418.195603][T13130] do_syscall_64+0xcd/0x490 [ 418.195623][T13130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.195637][T13130] RIP: 0033:0x7fec2ad8ebe9 [ 418.195649][T13130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.195664][T13130] RSP: 002b:00007fec2bb8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 418.195677][T13130] RAX: ffffffffffffffda RBX: 00007fec2afb6090 RCX: 00007fec2ad8ebe9 [ 418.195686][T13130] RDX: 0000000080000000 RSI: 0000000002020009 RDI: 0000000000400000 [ 418.195694][T13130] RBP: 00007fec2ae11e19 R08: fffffffffffffffa R09: 0000000000008000 [ 418.195703][T13130] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 418.195711][T13130] R13: 00007fec2afb6128 R14: 00007fec2afb6090 R15: 00007ffc5f0c6678 [ 418.195729][T13130] [ 419.988361][ T30] audit: type=1800 audit(6051169518.310:16): pid=13167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1487" name="features" dev="configfs" ino=49357 res=0 errno=0 [ 421.455365][T13188] FAULT_INJECTION: forcing a failure. [ 421.455365][T13188] name failslab, interval 1, probability 0, space 0, times 0 [ 421.514264][T13188] CPU: 0 UID: 0 PID: 13188 Comm: syz.1.1493 Tainted: G U syzkaller #0 PREEMPT(full) [ 421.514287][T13188] Tainted: [U]=USER [ 421.514292][T13188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.514300][T13188] Call Trace: [ 421.514305][T13188] [ 421.514310][T13188] dump_stack_lvl+0x16c/0x1f0 [ 421.514332][T13188] should_fail_ex+0x512/0x640 [ 421.514351][T13188] ? fs_reclaim_acquire+0xae/0x150 [ 421.514373][T13188] should_failslab+0xc2/0x120 [ 421.514390][T13188] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 421.514407][T13188] ? security_inode_alloc+0x3b/0x2b0 [ 421.514425][T13188] security_inode_alloc+0x3b/0x2b0 [ 421.514441][T13188] inode_init_always_gfp+0xce4/0x1030 [ 421.514459][T13188] alloc_inode+0x86/0x240 [ 421.514478][T13188] sock_alloc+0x40/0x280 [ 421.514497][T13188] __sock_create+0xc1/0x8d0 [ 421.514513][T13188] __sys_socket+0x14d/0x260 [ 421.514527][T13188] ? __pfx___sys_socket+0x10/0x10 [ 421.514542][T13188] ? do_user_addr_fault+0x843/0x1370 [ 421.514565][T13188] __x64_sys_socket+0x72/0xb0 [ 421.514578][T13188] ? lockdep_hardirqs_on+0x7c/0x110 [ 421.514594][T13188] do_syscall_64+0xcd/0x490 [ 421.514613][T13188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.514627][T13188] RIP: 0033:0x7fe15a590b07 [ 421.514639][T13188] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.514652][T13188] RSP: 002b:00007fe15b3b4fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 421.514665][T13188] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a590b07 [ 421.514674][T13188] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 421.514682][T13188] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 421.514690][T13188] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000000 [ 421.514698][T13188] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 421.514715][T13188] [ 421.514734][T13188] net_ratelimit: 62 callbacks suppressed [ 421.514741][T13188] socket: no more sockets [ 422.031583][T13205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1496'. [ 422.188239][T13205] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 422.315536][T13213] nvme_fcloop: unknown parameter or missing value '7' [ 423.858433][T13261] syz.1.1507(13261): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 424.133881][ T30] audit: type=1806 audit(6051169522.460:17): xattr=2ED245C6E633E1F70ED30F7F9880A0CE08793228EF0639703496D201FD8CD7DC res=-22 [ 424.553818][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 427.583857][T13366] FAULT_INJECTION: forcing a failure. [ 427.583857][T13366] name failslab, interval 1, probability 0, space 0, times 0 [ 427.629181][T13366] CPU: 0 UID: 0 PID: 13366 Comm: syz.0.1529 Tainted: G U syzkaller #0 PREEMPT(full) [ 427.629206][T13366] Tainted: [U]=USER [ 427.629211][T13366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.629219][T13366] Call Trace: [ 427.629224][T13366] [ 427.629230][T13366] dump_stack_lvl+0x16c/0x1f0 [ 427.629253][T13366] should_fail_ex+0x512/0x640 [ 427.629273][T13366] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 427.629293][T13366] should_failslab+0xc2/0x120 [ 427.629311][T13366] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 427.629327][T13366] ? __pfx___might_resched+0x10/0x10 [ 427.629342][T13366] ? __alloc_skb+0x2b2/0x380 [ 427.629358][T13366] ? rcu_is_watching+0x12/0xc0 [ 427.629374][T13366] __alloc_skb+0x2b2/0x380 [ 427.629390][T13366] ? __pfx___alloc_skb+0x10/0x10 [ 427.629405][T13366] ? rcu_is_watching+0x12/0xc0 [ 427.629432][T13366] inet6_ifmcaddr_notify+0xd6/0x1d0 [ 427.629451][T13366] ? __pfx_inet6_ifmcaddr_notify+0x10/0x10 [ 427.629475][T13366] __ipv6_dev_mc_dec+0x297/0x340 [ 427.629499][T13366] ipv6_mc_destroy_dev+0x2cd/0x690 [ 427.629520][T13366] ? __local_bh_enable_ip+0xa4/0x120 [ 427.629538][T13366] addrconf_ifdown.isra.0+0x1400/0x1aa0 [ 427.629559][T13366] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 427.629581][T13366] addrconf_notify+0x220/0x19e0 [ 427.629597][T13366] ? ip6mr_device_event+0x1bc/0x230 [ 427.629618][T13366] notifier_call_chain+0xbc/0x410 [ 427.629634][T13366] ? __pfx_addrconf_notify+0x10/0x10 [ 427.629654][T13366] call_netdevice_notifiers_info+0xbe/0x140 [ 427.629678][T13366] unregister_netdevice_many_notify+0xf76/0x24c0 [ 427.629704][T13366] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 427.629725][T13366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 427.629746][T13366] ? __fsnotify_parent+0x24b/0xc40 [ 427.629761][T13366] ? __pfx___mutex_lock+0x10/0x10 [ 427.629783][T13366] unregister_netdevice_queue+0x305/0x3f0 [ 427.629803][T13366] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 427.629824][T13366] ? __pfx_locks_remove_file+0x10/0x10 [ 427.629841][T13366] ? __pfx_ppp_release+0x10/0x10 [ 427.629858][T13366] ppp_release+0x209/0x230 [ 427.629876][T13366] __fput+0x402/0xb70 [ 427.629899][T13366] task_work_run+0x14d/0x240 [ 427.629921][T13366] ? __pfx_task_work_run+0x10/0x10 [ 427.629941][T13366] ? __pfx___do_sys_close_range+0x10/0x10 [ 427.629961][T13366] exit_to_user_mode_loop+0xeb/0x110 [ 427.629982][T13366] do_syscall_64+0x3f6/0x490 [ 427.630002][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.630015][T13366] RIP: 0033:0x7fd16d78ebe9 [ 427.630027][T13366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.630041][T13366] RSP: 002b:00007fd16e62c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 427.630055][T13366] RAX: 0000000000000000 RBX: 00007fd16d9b5fa0 RCX: 00007fd16d78ebe9 [ 427.630063][T13366] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 427.630071][T13366] RBP: 00007fd16d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 427.630079][T13366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.630088][T13366] R13: 00007fd16d9b6038 R14: 00007fd16d9b5fa0 R15: 00007ffdf9837f08 [ 427.630106][T13366] [ 428.012567][T13367] usb usb2: usbfs: process 13367 (syz.2.1528) did not claim interface 0 before use [ 428.974014][T13382] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1531'. [ 429.732253][T13445] FAULT_INJECTION: forcing a failure. [ 429.732253][T13445] name failslab, interval 1, probability 0, space 0, times 0 [ 429.802077][T13435] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 429.824558][T13445] CPU: 0 UID: 0 PID: 13445 Comm: syz.0.1546 Tainted: G U syzkaller #0 PREEMPT(full) [ 429.824589][T13445] Tainted: [U]=USER [ 429.824595][T13445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.824604][T13445] Call Trace: [ 429.824609][T13445] [ 429.824615][T13445] dump_stack_lvl+0x16c/0x1f0 [ 429.824638][T13445] should_fail_ex+0x512/0x640 [ 429.824661][T13445] should_failslab+0xc2/0x120 [ 429.824680][T13445] __kmalloc_cache_noprof+0x6a/0x3e0 [ 429.824696][T13445] ? proc_thread_self_get_link+0x1c6/0x240 [ 429.824717][T13445] proc_thread_self_get_link+0x1c6/0x240 [ 429.824735][T13445] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 429.824753][T13445] step_into+0x195e/0x2270 [ 429.824771][T13445] ? __pfx_step_into+0x10/0x10 [ 429.824787][T13445] ? lookup_fast+0x156/0x610 [ 429.824803][T13445] walk_component+0xfc/0x5b0 [ 429.824819][T13445] link_path_walk+0x627/0xe20 [ 429.824839][T13445] path_openat+0x1b0/0x2cb0 [ 429.824853][T13445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.824873][T13445] ? __pfx_path_openat+0x10/0x10 [ 429.824894][T13445] do_filp_open+0x20b/0x470 [ 429.824910][T13445] ? __pfx_do_filp_open+0x10/0x10 [ 429.824939][T13445] ? alloc_fd+0x471/0x7d0 [ 429.824958][T13445] do_sys_openat2+0x11b/0x1d0 [ 429.824978][T13445] ? __pfx_do_sys_openat2+0x10/0x10 [ 429.824999][T13445] ? __sys_sendmsg+0x18c/0x220 [ 429.825022][T13445] __x64_sys_openat+0x174/0x210 [ 429.825043][T13445] ? __pfx___x64_sys_openat+0x10/0x10 [ 429.825071][T13445] do_syscall_64+0xcd/0x490 [ 429.825090][T13445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.825103][T13445] RIP: 0033:0x7fd16d78ebe9 [ 429.825115][T13445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.825128][T13445] RSP: 002b:00007fd16e62c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 429.825141][T13445] RAX: ffffffffffffffda RBX: 00007fd16d9b5fa0 RCX: 00007fd16d78ebe9 [ 429.825150][T13445] RDX: 0000000000000802 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 429.825159][T13445] RBP: 00007fd16d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 429.825167][T13445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.825175][T13445] R13: 00007fd16d9b6038 R14: 00007fd16d9b5fa0 R15: 00007ffdf9837f08 [ 429.825192][T13445] [ 430.322411][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 430.341543][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 430.465351][T13452] FAULT_INJECTION: forcing a failure. [ 430.465351][T13452] name fail_page_alloc, interval 1, probability 0, space 0, times 393216 [ 430.525867][T13452] CPU: 0 UID: 0 PID: 13452 Comm: syz.1.1548 Tainted: G U syzkaller #0 PREEMPT(full) [ 430.525892][T13452] Tainted: [U]=USER [ 430.525897][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.525907][T13452] Call Trace: [ 430.525912][T13452] [ 430.525918][T13452] dump_stack_lvl+0x16c/0x1f0 [ 430.525941][T13452] should_fail_ex+0x512/0x640 [ 430.525964][T13452] should_fail_alloc_page+0xe7/0x130 [ 430.525984][T13452] prepare_alloc_pages+0x3c2/0x610 [ 430.526007][T13452] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 430.526024][T13452] ? alloc_file_pseudo+0x13a/0x230 [ 430.526043][T13452] ? __x64_sys_io_setup+0xc9/0x210 [ 430.526058][T13452] ? do_syscall_64+0xcd/0x490 [ 430.526075][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.526096][T13452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 430.526124][T13452] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 430.526145][T13452] ? policy_nodemask+0xea/0x4e0 [ 430.526164][T13452] alloc_pages_mpol+0x1fb/0x550 [ 430.526182][T13452] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 430.526199][T13452] ? lockdep_init_map_type+0x5c/0x280 [ 430.526219][T13452] ? percpu_counter_add_batch+0xb8/0x1f0 [ 430.526238][T13452] ? ioctx_alloc+0x1679/0x2120 [ 430.526251][T13452] ___kmalloc_large_node+0xed/0x160 [ 430.526274][T13452] ? ioctx_alloc+0x1679/0x2120 [ 430.526297][T13452] __kmalloc_large_node_noprof+0x1c/0x70 [ 430.526320][T13452] __kmalloc_noprof.cold+0xc/0x61 [ 430.526345][T13452] ioctx_alloc+0x1679/0x2120 [ 430.526367][T13452] ? find_held_lock+0x2b/0x80 [ 430.526380][T13452] ? __pfx_ioctx_alloc+0x10/0x10 [ 430.526394][T13452] ? __might_fault+0x13b/0x190 [ 430.526414][T13452] __x64_sys_io_setup+0xc9/0x210 [ 430.526431][T13452] do_syscall_64+0xcd/0x490 [ 430.526450][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.526463][T13452] RIP: 0033:0x7fe15a58ebe9 [ 430.526475][T13452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.526488][T13452] RSP: 002b:00007fe15b3b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 430.526501][T13452] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a58ebe9 [ 430.526510][T13452] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 430.526519][T13452] RBP: 00007fe15a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 430.526528][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.526536][T13452] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 430.526554][T13452] [ 430.799445][T13456] Invalid ELF header magic: != ELF [ 432.022644][T13467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 432.032405][T13467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 432.047948][T13467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 432.062400][T13467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 433.522818][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout [ 433.675821][T13531] netlink: 29 bytes leftover after parsing attributes in process `syz.0.1567'. [ 433.699970][T13530] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1566'. [ 434.083605][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 434.090205][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 434.096442][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 436.062095][T13595] FAULT_INJECTION: forcing a failure. [ 436.062095][T13595] name failslab, interval 1, probability 0, space 0, times 0 [ 436.128256][T13595] CPU: 0 UID: 0 PID: 13595 Comm: syz.2.1584 Tainted: G U syzkaller #0 PREEMPT(full) [ 436.128280][T13595] Tainted: [U]=USER [ 436.128285][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.128294][T13595] Call Trace: [ 436.128299][T13595] [ 436.128305][T13595] dump_stack_lvl+0x16c/0x1f0 [ 436.128328][T13595] should_fail_ex+0x512/0x640 [ 436.128348][T13595] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 436.128369][T13595] should_failslab+0xc2/0x120 [ 436.128387][T13595] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 436.128405][T13595] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.128422][T13595] ? ip6_route_net_init+0x301/0x8b0 [ 436.128445][T13595] kmemdup_noprof+0x29/0x60 [ 436.128462][T13595] ip6_route_net_init+0x301/0x8b0 [ 436.128484][T13595] ? __pfx_ip6_route_net_init+0x10/0x10 [ 436.128503][T13595] ops_init+0x1e2/0x5f0 [ 436.128525][T13595] setup_net+0x10f/0x380 [ 436.128542][T13595] ? lockdep_init_map_type+0x5c/0x280 [ 436.128561][T13595] ? __pfx_setup_net+0x10/0x10 [ 436.128580][T13595] ? debug_mutex_init+0x37/0x70 [ 436.128596][T13595] copy_net_ns+0x2a6/0x5f0 [ 436.128618][T13595] create_new_namespaces+0x3ea/0xa90 [ 436.128638][T13595] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 436.128655][T13595] ksys_unshare+0x45b/0xa40 [ 436.128675][T13595] ? __pfx_ksys_unshare+0x10/0x10 [ 436.128693][T13595] ? xfd_validate_state+0x61/0x180 [ 436.128718][T13595] __x64_sys_unshare+0x31/0x40 [ 436.128736][T13595] do_syscall_64+0xcd/0x490 [ 436.128756][T13595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.128769][T13595] RIP: 0033:0x7fec2ad8ebe9 [ 436.128782][T13595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.128795][T13595] RSP: 002b:00007fec2bbb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 436.128808][T13595] RAX: ffffffffffffffda RBX: 00007fec2afb5fa0 RCX: 00007fec2ad8ebe9 [ 436.128818][T13595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 436.128826][T13595] RBP: 00007fec2ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 436.128834][T13595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.128842][T13595] R13: 00007fec2afb6038 R14: 00007fec2afb5fa0 R15: 00007ffc5f0c6678 [ 436.128860][T13595] [ 437.089152][T13622] syz.0.1586 (13622): /proc/13604/oom_adj is deprecated, please use /proc/13604/oom_score_adj instead. [ 438.366936][T13667] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 440.330435][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.337785][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.560118][T13716] sp0: Synchronizing with TNC [ 441.134038][T13719] random: crng reseeded on system resumption [ 441.794300][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1614'. [ 442.164414][T13756] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 442.988006][T13553] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 443.873800][T13865] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 444.074400][T13871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1628'. [ 445.334644][T13932] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input40 [ 445.676961][T13939] FAULT_INJECTION: forcing a failure. [ 445.676961][T13939] name failslab, interval 1, probability 0, space 0, times 0 [ 445.739170][T13939] CPU: 0 UID: 0 PID: 13939 Comm: syz.0.1637 Tainted: G U syzkaller #0 PREEMPT(full) [ 445.739195][T13939] Tainted: [U]=USER [ 445.739199][T13939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.739208][T13939] Call Trace: [ 445.739214][T13939] [ 445.739219][T13939] dump_stack_lvl+0x16c/0x1f0 [ 445.739242][T13939] should_fail_ex+0x512/0x640 [ 445.739262][T13939] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 445.739278][T13939] should_failslab+0xc2/0x120 [ 445.739296][T13939] __kmalloc_cache_noprof+0x6a/0x3e0 [ 445.739309][T13939] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 445.739325][T13939] ? fscontext_alloc_log+0x4a/0x1b0 [ 445.739346][T13939] fscontext_alloc_log+0x4a/0x1b0 [ 445.739365][T13939] __x64_sys_fsopen+0x157/0x240 [ 445.739384][T13939] do_syscall_64+0xcd/0x490 [ 445.739412][T13939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.739426][T13939] RIP: 0033:0x7fd16d78ebe9 [ 445.739438][T13939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.739452][T13939] RSP: 002b:00007fd16e60b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 445.739466][T13939] RAX: ffffffffffffffda RBX: 00007fd16d9b6090 RCX: 00007fd16d78ebe9 [ 445.739476][T13939] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 445.739484][T13939] RBP: 00007fd16d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 445.739492][T13939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.739500][T13939] R13: 00007fd16d9b6128 R14: 00007fd16d9b6090 R15: 00007ffdf9837f08 [ 445.739517][T13939] [ 446.979139][T13998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1639'. [ 447.040049][T13998] bridge_slave_1: left allmulticast mode [ 447.102123][T13998] bridge_slave_1: left promiscuous mode [ 447.134908][T13998] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.238965][T13998] bridge_slave_0: left allmulticast mode [ 447.276691][T13998] bridge_slave_0: left promiscuous mode [ 447.282398][T13998] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.196374][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'. [ 450.917315][T14215] sd 0:0:1:0: PR command failed: 1026 [ 450.953467][T14215] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 450.960168][T14215] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 453.453617][T14323] svc: failed to register nfsdv3 RPC service (errno 101). [ 453.493785][T14323] svc: failed to register nfsaclv3 RPC service (errno 101). [ 456.717252][T14524] FAULT_INJECTION: forcing a failure. [ 456.717252][T14524] name failslab, interval 1, probability 0, space 0, times 0 [ 456.762590][T14524] CPU: 0 UID: 0 PID: 14524 Comm: syz.1.1685 Tainted: G U syzkaller #0 PREEMPT(full) [ 456.762614][T14524] Tainted: [U]=USER [ 456.762619][T14524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.762629][T14524] Call Trace: [ 456.762634][T14524] [ 456.762640][T14524] dump_stack_lvl+0x16c/0x1f0 [ 456.762664][T14524] should_fail_ex+0x512/0x640 [ 456.762683][T14524] ? fs_reclaim_acquire+0xae/0x150 [ 456.762705][T14524] should_failslab+0xc2/0x120 [ 456.762723][T14524] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 456.762741][T14524] ? security_inode_alloc+0x3b/0x2b0 [ 456.762765][T14524] security_inode_alloc+0x3b/0x2b0 [ 456.762781][T14524] inode_init_always_gfp+0xce4/0x1030 [ 456.762801][T14524] alloc_inode+0x86/0x240 [ 456.762821][T14524] new_inode+0x22/0x1c0 [ 456.762842][T14524] __debugfs_create_file+0x11c/0x6b0 [ 456.762862][T14524] debugfs_create_file_full+0x41/0x60 [ 456.762881][T14524] ref_tracker_dir_debugfs+0x19d/0x290 [ 456.762901][T14524] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 456.762937][T14524] ? lockdep_init_map_type+0x5c/0x280 [ 456.762960][T14524] preinit_net+0x47f/0x8f0 [ 456.762979][T14524] copy_net_ns+0x1da/0x5f0 [ 456.763001][T14524] create_new_namespaces+0x3ea/0xa90 [ 456.763021][T14524] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 456.763039][T14524] ksys_unshare+0x45b/0xa40 [ 456.763058][T14524] ? __pfx_ksys_unshare+0x10/0x10 [ 456.763076][T14524] ? xfd_validate_state+0x61/0x180 [ 456.763101][T14524] __x64_sys_unshare+0x31/0x40 [ 456.763118][T14524] do_syscall_64+0xcd/0x490 [ 456.763138][T14524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.763152][T14524] RIP: 0033:0x7fe15a58ebe9 [ 456.763164][T14524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.763177][T14524] RSP: 002b:00007fe15b3b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 456.763191][T14524] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a58ebe9 [ 456.763200][T14524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 456.763208][T14524] RBP: 00007fe15a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 456.763216][T14524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.763224][T14524] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 456.763242][T14524] [ 456.763267][T14524] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888032824a68' [ 457.469540][T14531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1687'. [ 457.511538][T14531] hsr_slave_0: left promiscuous mode [ 457.522122][T14531] hsr_slave_1: left promiscuous mode [ 459.571484][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'. [ 459.729424][T14659] HfR: entered promiscuous mode [ 460.213196][T14684] vhci_hcd: invalid port number 21 [ 462.026149][T14744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1704'. [ 462.112578][T14745] tipc: Started in network mode [ 462.117445][T14745] tipc: Node identity ee00, cluster identity 4711 [ 462.160314][T14745] tipc: Node number set to 60928 [ 462.286319][T14752] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 462.853294][T14742] Process accounting resumed [ 463.163326][T14778] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 463.788226][T14787] Invalid ELF header magic: != ELF [ 465.786561][T13553] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 465.786584][T13553] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 465.802802][T13553] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 465.802843][T13553] Bluetooth: hci3: Malformed LE Event: 0x0d [ 466.599023][T14950] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1735'. [ 466.641918][T14950] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1735'. [ 468.466002][T15073] random: crng reseeded on system resumption [ 469.906740][T12080] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.080051][T15143] netlink: 'syz.2.1757': attribute type 4 has an invalid length. [ 470.114498][T15143] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1757'. [ 470.142216][T15143] IPv6: NLM_F_CREATE should be specified when creating new route [ 470.556760][T15157] HfR: entered promiscuous mode [ 470.580719][T15157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1759'. [ 470.619599][T15157] HfR: left promiscuous mode [ 470.674436][T15166] FAULT_INJECTION: forcing a failure. [ 470.674436][T15166] name failslab, interval 1, probability 0, space 0, times 0 [ 470.725656][T15166] CPU: 0 UID: 0 PID: 15166 Comm: syz.2.1761 Tainted: G U syzkaller #0 PREEMPT(full) [ 470.725681][T15166] Tainted: [U]=USER [ 470.725685][T15166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 470.725695][T15166] Call Trace: [ 470.725700][T15166] [ 470.725709][T15166] dump_stack_lvl+0x16c/0x1f0 [ 470.725733][T15166] should_fail_ex+0x512/0x640 [ 470.725754][T15166] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 470.725773][T15166] should_failslab+0xc2/0x120 [ 470.725792][T15166] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 470.725809][T15166] ? key_alloc+0x3e0/0x1330 [ 470.725829][T15166] key_alloc+0x3e0/0x1330 [ 470.725851][T15166] ? rcu_is_watching+0x12/0xc0 [ 470.725865][T15166] ? __pfx_key_alloc+0x10/0x10 [ 470.725881][T15166] ? __kmalloc_noprof+0x242/0x510 [ 470.725900][T15166] keyring_alloc+0x44/0xc0 [ 470.725921][T15166] install_thread_keyring_to_cred+0xc1/0x140 [ 470.725940][T15166] keyctl_set_reqkey_keyring+0xcf/0x1c0 [ 470.725956][T15166] __do_sys_keyctl+0x6d/0x590 [ 470.725973][T15166] do_syscall_64+0xcd/0x490 [ 470.725999][T15166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.726014][T15166] RIP: 0033:0x7fec2ad8ebe9 [ 470.726026][T15166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.726040][T15166] RSP: 002b:00007fec2bbb0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 470.726054][T15166] RAX: ffffffffffffffda RBX: 00007fec2afb5fa0 RCX: 00007fec2ad8ebe9 [ 470.726063][T15166] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 470.726071][T15166] RBP: 00007fec2ae11e19 R08: 0000000000000008 R09: 0000000000000000 [ 470.726079][T15166] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 470.726087][T15166] R13: 00007fec2afb6038 R14: 00007fec2afb5fa0 R15: 00007ffc5f0c6678 [ 470.726104][T15166] [ 470.917098][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.157079][T15268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1770'. [ 473.325581][T15268] hsr_slave_0 (unregistering): left promiscuous mode [ 474.036711][T15328] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1774'. [ 477.938825][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 482.103464][T15690] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1807'. [ 484.905794][T15818] __vm_enough_memory: pid: 15818, comm: syz.3.1814, bytes: 4398046511104 not enough memory for the allocation [ 485.638097][T15851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1817'. [ 487.008601][T15884] FAULT_INJECTION: forcing a failure. [ 487.008601][T15884] name fail_futex, interval 1, probability 0, space 0, times 0 [ 487.241641][T15884] CPU: 0 UID: 8 PID: 15884 Comm: syz.2.1822 Tainted: G U syzkaller #0 PREEMPT(full) [ 487.241665][T15884] Tainted: [U]=USER [ 487.241670][T15884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 487.241678][T15884] Call Trace: [ 487.241684][T15884] [ 487.241690][T15884] dump_stack_lvl+0x16c/0x1f0 [ 487.241712][T15884] should_fail_ex+0x512/0x640 [ 487.241734][T15884] get_futex_key+0x1d0/0x1560 [ 487.241753][T15884] ? __pfx_get_futex_key+0x10/0x10 [ 487.241767][T15884] ? __lock_acquire+0x62e/0x1ce0 [ 487.241791][T15884] futex_wake+0xea/0x530 [ 487.241809][T15884] ? lock_acquire+0x179/0x350 [ 487.241827][T15884] ? __pfx_futex_wake+0x10/0x10 [ 487.241848][T15884] ? find_ucounts+0x222/0x3e0 [ 487.241867][T15884] do_futex+0x1e3/0x350 [ 487.241884][T15884] ? __pfx_do_futex+0x10/0x10 [ 487.241900][T15884] ? dec_rlimit_ucounts+0x114/0x170 [ 487.241920][T15884] __x64_sys_futex+0x1e0/0x4c0 [ 487.241939][T15884] ? __pfx___x64_sys_futex+0x10/0x10 [ 487.241958][T15884] ? __sys_setresuid+0x6ad/0x1160 [ 487.241977][T15884] do_syscall_64+0xcd/0x490 [ 487.241996][T15884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.242010][T15884] RIP: 0033:0x7fec2ad8ebe9 [ 487.242021][T15884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.242034][T15884] RSP: 002b:00007fec2bb8f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 487.242052][T15884] RAX: ffffffffffffffda RBX: 00007fec2afb6098 RCX: 00007fec2ad8ebe9 [ 487.242061][T15884] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fec2afb609c [ 487.242069][T15884] RBP: 00007fec2afb6090 R08: 00007fec2bbb1000 R09: 0000000000000000 [ 487.242077][T15884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.242085][T15884] R13: 00007fec2afb6128 R14: 00007ffc5f0c6590 R15: 00007ffc5f0c6678 [ 487.242102][T15884] [ 487.242203][T15884] FAULT_INJECTION: forcing a failure. [ 487.242203][T15884] name failslab, interval 1, probability 0, space 0, times 0 [ 488.140434][T15941] zswap: compressor not available [ 489.409280][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1831'. [ 490.233870][T15884] CPU: 0 UID: 8 PID: 15884 Comm: syz.2.1822 Tainted: G U syzkaller #0 PREEMPT(full) [ 490.233894][T15884] Tainted: [U]=USER [ 490.233905][T15884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.233913][T15884] Call Trace: [ 490.233918][T15884] [ 490.233924][T15884] dump_stack_lvl+0x16c/0x1f0 [ 490.233946][T15884] should_fail_ex+0x512/0x640 [ 490.233965][T15884] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 490.233981][T15884] should_failslab+0xc2/0x120 [ 490.233999][T15884] __kmalloc_cache_noprof+0x6a/0x3e0 [ 490.234013][T15884] ? sctp_auth_shkey_create+0x9e/0x210 [ 490.234032][T15884] sctp_auth_shkey_create+0x9e/0x210 [ 490.234050][T15884] sctp_endpoint_new+0x562/0xcd0 [ 490.234070][T15884] sctp_init_sock+0xe2d/0x1330 [ 490.234085][T15884] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 490.234101][T15884] sctp_v6_init_sock+0x16/0x70 [ 490.234115][T15884] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 490.234130][T15884] inet6_create+0xb30/0x12b0 [ 490.234145][T15884] ? inet6_create+0x7f/0x12b0 [ 490.234159][T15884] __sock_create+0x338/0x8d0 [ 490.234176][T15884] __sys_socket+0x14d/0x260 [ 490.234190][T15884] ? __pfx___sys_socket+0x10/0x10 [ 490.234203][T15884] ? xfd_validate_state+0x61/0x180 [ 490.234227][T15884] __x64_sys_socket+0x72/0xb0 [ 490.234239][T15884] ? lockdep_hardirqs_on+0x7c/0x110 [ 490.234256][T15884] do_syscall_64+0xcd/0x490 [ 490.234275][T15884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.234289][T15884] RIP: 0033:0x7fec2ad8ebe9 [ 490.234300][T15884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.234313][T15884] RSP: 002b:00007fec2bb8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 490.234325][T15884] RAX: ffffffffffffffda RBX: 00007fec2afb6090 RCX: 00007fec2ad8ebe9 [ 490.234334][T15884] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 490.234342][T15884] RBP: 00007fec2ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 490.234350][T15884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.234357][T15884] R13: 00007fec2afb6128 R14: 00007fec2afb6090 R15: 00007ffc5f0c6678 [ 490.234375][T15884] [ 492.090638][T16033] kAFS: Invalid Command on /proc/fs/afs/cells file [ 493.238918][T15407] Process accounting paused [ 493.916864][T16201] vivid-003: ================= START STATUS ================= [ 493.987857][T16201] vivid-003: Radio HW Seek Mode: Bounded [ 494.035368][T16201] vivid-003: Radio Programmable HW Seek: false [ 494.085908][T16201] vivid-003: RDS Rx I/O Mode: Block I/O [ 494.133766][T16201] vivid-003: Generate RBDS Instead of RDS: false [ 494.209582][T16201] vivid-003: RDS Reception: true [ 494.292647][T16201] vivid-003: RDS Program Type: 0 inactive [ 494.424045][T16201] vivid-003: RDS PS Name: inactive [ 494.612912][T16201] vivid-003: RDS Radio Text: inactive [ 494.671802][T16201] vivid-003: RDS Traffic Announcement: false inactive [ 494.732546][T16201] vivid-003: RDS Traffic Program: false inactive [ 494.738905][T16201] vivid-003: RDS Music: false inactive [ 494.882646][T16201] vivid-003: ================== END STATUS ================== [ 495.045352][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1852'. [ 495.294938][T16288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.375271][T16288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.436908][T16288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.464090][T16288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.952273][T16381] program syz.2.1861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.187301][T16492] HfR: entered promiscuous mode [ 501.768943][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.778535][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.965138][T16743] FAULT_INJECTION: forcing a failure. [ 501.965138][T16743] name fail_page_alloc, interval 1, probability 0, space 0, times 393214 [ 502.218248][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.2.1884 Tainted: G U syzkaller #0 PREEMPT(full) [ 502.218273][T16743] Tainted: [U]=USER [ 502.218278][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.218287][T16743] Call Trace: [ 502.218292][T16743] [ 502.218298][T16743] dump_stack_lvl+0x16c/0x1f0 [ 502.218321][T16743] should_fail_ex+0x512/0x640 [ 502.218344][T16743] should_fail_alloc_page+0xe7/0x130 [ 502.218365][T16743] prepare_alloc_pages+0x3c2/0x610 [ 502.218388][T16743] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 502.218411][T16743] ? rcu_is_watching+0x12/0xc0 [ 502.218425][T16743] ? trace_mm_page_alloc+0x11f/0x1a0 [ 502.218445][T16743] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 502.218461][T16743] ? alloc_file_pseudo+0x13a/0x230 [ 502.218481][T16743] ? __x64_sys_io_setup+0xc9/0x210 [ 502.218500][T16743] ? do_syscall_64+0xcd/0x490 [ 502.218517][T16743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.218534][T16743] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 502.218560][T16743] ? __lock_acquire+0x62e/0x1ce0 [ 502.218578][T16743] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.218599][T16743] ? policy_nodemask+0xea/0x4e0 [ 502.218618][T16743] alloc_pages_mpol+0x1fb/0x550 [ 502.218637][T16743] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 502.218655][T16743] ? filemap_get_entry+0x1a7/0x3b0 [ 502.218676][T16743] folio_alloc_noprof+0x20/0x2d0 [ 502.218696][T16743] filemap_alloc_folio_noprof+0x3a1/0x470 [ 502.218720][T16743] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 502.218742][T16743] ? rcu_is_watching+0x12/0xc0 [ 502.218759][T16743] __filemap_get_folio+0x5e1/0xc30 [ 502.218781][T16743] ioctx_alloc+0x761/0x2120 [ 502.218804][T16743] ? __pfx_ioctx_alloc+0x10/0x10 [ 502.218818][T16743] ? __might_fault+0x13b/0x190 [ 502.218838][T16743] __x64_sys_io_setup+0xc9/0x210 [ 502.218855][T16743] do_syscall_64+0xcd/0x490 [ 502.218874][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.218887][T16743] RIP: 0033:0x7fec2ad8ebe9 [ 502.218899][T16743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.218912][T16743] RSP: 002b:00007fec2bbb0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 502.218925][T16743] RAX: ffffffffffffffda RBX: 00007fec2afb5fa0 RCX: 00007fec2ad8ebe9 [ 502.218934][T16743] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 502.218943][T16743] RBP: 00007fec2ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 502.218950][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.218958][T16743] R13: 00007fec2afb6038 R14: 00007fec2afb5fa0 R15: 00007ffc5f0c6678 [ 502.218978][T16743] [ 502.580530][T16779] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 502.580530][T16779] The task syz.3.1888 (16779) triggered the difference, watch for misbehavior. [ 502.636212][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1890'. [ 502.883605][T16780] team0: Port device team_slave_1 removed [ 503.433202][T16788] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 503.551901][T16852] __vm_enough_memory: pid: 16852, comm: syz.3.1894, bytes: 4398046511104 not enough memory for the allocation [ 504.384339][T16840] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 506.375271][T17004] zswap: compressor not available [ 509.516053][T17239] kernel read not supported for file /gMQ_g _N{7vGlq wĉu}OUVW.uw.`O:KdYѮaj7nwKQHg[壣%'ϖX:DktހX [$O8 bŹ9F@eMU;$Q8҇ŝ赵DtSd0YJpu (pid: 17239 comm: syz.2.1927) [ 509.619625][ T30] audit: type=1800 audit(6051169607.946:18): pid=17239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1927" name=BEF282E71467B5EE4D5113A25F67BF09FAF25F4EB07BF9B53776EE47D96CBF8671207796D9E9A8E1F0C71F1EC4C4897583E87DBD7F4F91C15556572EB6AD047502772EEC604FC10E15E73AC91B4BCD64590395D1AEC19B969F616AD2FCFC1F37AFCA6EF6C0774BCEE751AEC9486701EFDA5BE5A3A325278FCF96583A04446B747FDE8001DD58B188A109C3F1FE5B93244F382062B492F4BCC5B99839FC46ECDC40DDDA654DE055C83BF5E7245138D287DDC59DC5E8B5B5B8DF44D0E8748A53AABEAABA9E64301AF859F54A700875BA98 dev="mqueue" ino=60352 res=0 errno=0 [ 510.070830][T17199] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 511.604386][T17326] mkiss: ax0: crc mode is auto. [ 512.235978][T17381] FAULT_INJECTION: forcing a failure. [ 512.235978][T17381] name failslab, interval 1, probability 0, space 0, times 0 [ 512.313304][T17381] CPU: 0 UID: 0 PID: 17381 Comm: syz.2.1942 Tainted: G U syzkaller #0 PREEMPT(full) [ 512.313328][T17381] Tainted: [U]=USER [ 512.313333][T17381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.313344][T17381] Call Trace: [ 512.313350][T17381] [ 512.313355][T17381] dump_stack_lvl+0x16c/0x1f0 [ 512.313378][T17381] should_fail_ex+0x512/0x640 [ 512.313397][T17381] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 512.313417][T17381] should_failslab+0xc2/0x120 [ 512.313435][T17381] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 512.313452][T17381] ? __alloc_skb+0x2b2/0x380 [ 512.313472][T17381] __alloc_skb+0x2b2/0x380 [ 512.313488][T17381] ? __pfx___alloc_skb+0x10/0x10 [ 512.313504][T17381] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 512.313525][T17381] ? tcp_send_mss+0x159/0x2c0 [ 512.313541][T17381] mptcp_sendmsg_frag+0x4d7/0x2c70 [ 512.313563][T17381] ? __pfx_mptcp_sendmsg_frag+0x10/0x10 [ 512.313580][T17381] __subflow_push_pending+0x345/0xac0 [ 512.313603][T17381] __mptcp_push_pending+0x2ce/0x550 [ 512.313623][T17381] ? __pfx___mptcp_push_pending+0x10/0x10 [ 512.313646][T17381] mptcp_sendmsg+0x17a4/0x1eb0 [ 512.313671][T17381] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 512.313692][T17381] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 512.313709][T17381] inet_sendmsg+0x119/0x140 [ 512.313724][T17381] __sys_sendto+0x43c/0x520 [ 512.313741][T17381] ? __pfx___sys_sendto+0x10/0x10 [ 512.313763][T17381] ? find_held_lock+0x2b/0x80 [ 512.313790][T17381] __x64_sys_sendto+0xe0/0x1c0 [ 512.313805][T17381] ? do_syscall_64+0x91/0x490 [ 512.313822][T17381] ? lockdep_hardirqs_on+0x7c/0x110 [ 512.313839][T17381] do_syscall_64+0xcd/0x490 [ 512.313858][T17381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.313872][T17381] RIP: 0033:0x7fec2ad90a7c [ 512.313890][T17381] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 512.313904][T17381] RSP: 002b:00007fec2bbaeec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 512.313918][T17381] RAX: ffffffffffffffda RBX: 00007fec2bbaefc0 RCX: 00007fec2ad90a7c [ 512.313927][T17381] RDX: 0000000000000020 RSI: 00007fec2bbaf010 RDI: 0000000000000003 [ 512.313936][T17381] RBP: 0000000000000000 R08: 00007fec2bbaef14 R09: 000000000000000c [ 512.313944][T17381] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 512.313953][T17381] R13: 00007fec2bbaef68 R14: 00007fec2bbaf010 R15: 0000000000000000 [ 512.313971][T17381] [ 512.563623][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.578397][T17400] FAULT_INJECTION: forcing a failure. [ 512.578397][T17400] name failslab, interval 1, probability 0, space 0, times 0 [ 512.591112][T17400] CPU: 0 UID: 0 PID: 17400 Comm: syz.1.1943 Tainted: G U syzkaller #0 PREEMPT(full) [ 512.591136][T17400] Tainted: [U]=USER [ 512.591141][T17400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.591150][T17400] Call Trace: [ 512.591155][T17400] [ 512.591160][T17400] dump_stack_lvl+0x16c/0x1f0 [ 512.591183][T17400] should_fail_ex+0x512/0x640 [ 512.591203][T17400] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 512.591222][T17400] should_failslab+0xc2/0x120 [ 512.591241][T17400] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 512.591257][T17400] ? security_file_alloc+0x34/0x2b0 [ 512.591279][T17400] security_file_alloc+0x34/0x2b0 [ 512.591296][T17400] init_file+0x93/0x4c0 [ 512.591316][T17400] alloc_empty_file+0x73/0x1e0 [ 512.591335][T17400] alloc_file_pseudo+0x13a/0x230 [ 512.591356][T17400] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 512.591381][T17400] ioctx_alloc+0x5ab/0x2120 [ 512.591404][T17400] ? find_held_lock+0x2b/0x80 [ 512.591418][T17400] ? __pfx_ioctx_alloc+0x10/0x10 [ 512.591432][T17400] ? __might_fault+0x13b/0x190 [ 512.591452][T17400] __x64_sys_io_setup+0xc9/0x210 [ 512.591469][T17400] do_syscall_64+0xcd/0x490 [ 512.591488][T17400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.591502][T17400] RIP: 0033:0x7fe15a58ebe9 [ 512.591513][T17400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.591526][T17400] RSP: 002b:00007fe15b3b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 512.591540][T17400] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a58ebe9 [ 512.591549][T17400] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 512.591557][T17400] RBP: 00007fe15a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 512.591565][T17400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.591573][T17400] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 512.591591][T17400] [ 512.786329][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.811002][T17417] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 513.824025][T17416] ima: policy update failed [ 513.867707][T13553] Bluetooth: hci3: unexpected event 0x04 length: 64 > 10 [ 513.867953][T13553] Bluetooth: hci3: connection err: -111 [ 513.932548][ T30] audit: type=1802 audit(6051169612.246:19): pid=17416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1948" res=0 errno=0 [ 514.098017][T17425] Setting dangerous option i915.mitigations - tainting kernel [ 514.128926][T17425] Bad "i915.mitigations=!h@S", 'h@S' is unknown [ 514.159477][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 514.176536][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 514.184359][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.191879][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.230653][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.437504][T17458] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 514.755771][T12080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.907724][T12080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.014594][T12080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.039606][T17504] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 515.361136][T12080] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.702910][T17426] chnl_net:caif_netlink_parms(): no params data found [ 515.923135][T17648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1957'. [ 516.214160][T17648] team0: Port device team_slave_1 removed [ 516.302325][T12080] bridge_slave_1: left allmulticast mode [ 516.321159][T12080] bridge_slave_1: left promiscuous mode [ 516.330922][T13553] Bluetooth: hci4: command tx timeout [ 516.353531][T12080] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.388124][T12080] bridge_slave_0: left allmulticast mode [ 516.409018][T12080] bridge_slave_0: left promiscuous mode [ 516.428550][T12080] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.522196][T12080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.534496][ T30] audit: type=1804 audit(6051169615.866:20): pid=17741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1959" name="/newroot/279/file0" dev="tmpfs" ino=1496 res=1 errno=0 [ 517.601409][ T30] audit: type=1804 audit(6051169615.886:21): pid=17742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1959" name="/newroot/279/file0" dev="tmpfs" ino=1496 res=1 errno=0 [ 517.653148][T12080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.670548][T12080] bond0 (unregistering): Released all slaves [ 517.912038][T17426] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.934807][T17426] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.949727][T17426] bridge_slave_0: entered allmulticast mode [ 517.968308][T17426] bridge_slave_0: entered promiscuous mode [ 518.034423][T17426] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.041499][T17426] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.103577][T17426] bridge_slave_1: entered allmulticast mode [ 518.129994][T17426] bridge_slave_1: entered promiscuous mode [ 518.402803][T13553] Bluetooth: hci4: command tx timeout [ 518.617942][T17426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.730160][T17426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.917036][T17426] team0: Port device team_slave_0 added [ 519.033540][T17426] team0: Port device team_slave_1 added [ 519.484155][T17426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.523987][T17426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.661110][T17426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.682158][T17930] svc: failed to register nfsdv3 RPC service (errno 111). [ 519.735137][T17426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.767867][T17426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.794373][T17930] svc: failed to register nfsaclv3 RPC service (errno 512). [ 519.924255][T17426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.062377][T17958] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 520.320369][T17426] hsr_slave_0: entered promiscuous mode [ 520.350189][T17426] hsr_slave_1: entered promiscuous mode [ 520.391846][T17426] debugfs: 'hsr0' already exists in 'hsr' [ 520.419328][T17426] Cannot create hsr debugfs directory [ 520.483107][T13553] Bluetooth: hci4: command tx timeout [ 520.908287][T18022] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 521.320817][T18084] FAULT_INJECTION: forcing a failure. [ 521.320817][T18084] name fail_page_alloc, interval 1, probability 0, space 0, times 393213 [ 521.354212][T12080] hsr_slave_0: left promiscuous mode [ 521.386617][T12080] hsr_slave_1: left promiscuous mode [ 521.403602][T18084] CPU: 0 UID: 0 PID: 18084 Comm: syz.2.1973 Tainted: G U syzkaller #0 PREEMPT(full) [ 521.403626][T18084] Tainted: [U]=USER [ 521.403631][T18084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 521.403640][T18084] Call Trace: [ 521.403645][T18084] [ 521.403651][T18084] dump_stack_lvl+0x16c/0x1f0 [ 521.403674][T18084] should_fail_ex+0x512/0x640 [ 521.403697][T18084] should_fail_alloc_page+0xe7/0x130 [ 521.403719][T18084] prepare_alloc_pages+0x3c2/0x610 [ 521.403742][T18084] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 521.403759][T18084] ? alloc_file_pseudo+0x13a/0x230 [ 521.403779][T18084] ? __x64_sys_io_setup+0xc9/0x210 [ 521.403794][T18084] ? do_syscall_64+0xcd/0x490 [ 521.403810][T18084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.403832][T18084] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 521.403860][T18084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 521.403881][T18084] ? policy_nodemask+0xea/0x4e0 [ 521.403900][T18084] alloc_pages_mpol+0x1fb/0x550 [ 521.403918][T18084] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 521.403935][T18084] ? lockdep_init_map_type+0x5c/0x280 [ 521.403954][T18084] ? percpu_counter_add_batch+0xb8/0x1f0 [ 521.403973][T18084] ? ioctx_alloc+0x1679/0x2120 [ 521.403987][T18084] ___kmalloc_large_node+0xed/0x160 [ 521.404012][T18084] ? ioctx_alloc+0x1679/0x2120 [ 521.404026][T18084] __kmalloc_large_node_noprof+0x1c/0x70 [ 521.404048][T18084] __kmalloc_noprof.cold+0xc/0x61 [ 521.404072][T18084] ioctx_alloc+0x1679/0x2120 [ 521.404094][T18084] ? find_held_lock+0x2b/0x80 [ 521.404108][T18084] ? __pfx_ioctx_alloc+0x10/0x10 [ 521.404121][T18084] ? __might_fault+0x13b/0x190 [ 521.404142][T18084] __x64_sys_io_setup+0xc9/0x210 [ 521.404158][T18084] do_syscall_64+0xcd/0x490 [ 521.404185][T18084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.404199][T18084] RIP: 0033:0x7fec2ad8ebe9 [ 521.404211][T18084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.404224][T18084] RSP: 002b:00007fec2bbb0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 521.404238][T18084] RAX: ffffffffffffffda RBX: 00007fec2afb5fa0 RCX: 00007fec2ad8ebe9 [ 521.404246][T18084] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 521.404255][T18084] RBP: 00007fec2ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 521.404263][T18084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.404271][T18084] R13: 00007fec2afb6038 R14: 00007fec2afb5fa0 R15: 00007ffc5f0c6678 [ 521.404289][T18084] [ 521.744560][T12080] veth0_macvtap: left promiscuous mode [ 521.751089][T12080] veth1_vlan: left promiscuous mode [ 521.818905][T12080] veth0_vlan: left promiscuous mode [ 522.563334][T13553] Bluetooth: hci4: command tx timeout [ 522.989794][T12080] team0 (unregistering): Port device team_slave_1 removed [ 523.186753][T12080] team0 (unregistering): Port device team_slave_0 removed [ 524.926016][T18102] Process accounting resumed [ 525.206518][T17426] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 525.247045][T18253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1982'. [ 525.268246][T17426] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 525.332321][T18240] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1982'. [ 525.364657][T17426] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 525.447141][T17426] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 526.170679][T17426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.275363][T17426] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.340261][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.347376][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.430730][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.437857][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.064800][T18331] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 527.434937][T18382] random: crng reseeded on system resumption [ 527.541380][T18390] Debayer A: ================= START STATUS ================= [ 527.560857][T17426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.592732][T18390] Debayer A: Debayer Mean Window Size: 3 [ 527.598577][T18390] Debayer A: ================== END STATUS ================== [ 527.708141][T17426] veth0_vlan: entered promiscuous mode [ 527.782438][T17426] veth1_vlan: entered promiscuous mode [ 527.918707][T17426] veth0_macvtap: entered promiscuous mode [ 528.130150][T17426] veth1_macvtap: entered promiscuous mode [ 528.229928][T17426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.339329][T17426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.468613][ T7842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.509221][ T7842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.552042][ T7842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.588271][ T7842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.737256][ T7842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.778292][ T7842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.898832][T12080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.947760][T12080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.497704][T18458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1995'. [ 529.547653][T18458] bridge_slave_1: left allmulticast mode [ 529.576833][T18458] bridge_slave_1: left promiscuous mode [ 529.608670][T18458] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.652284][T18458] bridge_slave_0: left allmulticast mode [ 529.670128][T18458] bridge_slave_0: left promiscuous mode [ 529.709289][T18458] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.873394][T18423] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1992'. [ 530.040410][T18479] netlink: 'syz.0.1999': attribute type 1 has an invalid length. [ 530.078344][T18481] netlink: 'syz.0.1999': attribute type 1 has an invalid length. [ 530.125603][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 530.703078][T18510] tc_dump_action: action bad kind [ 530.818363][T18518] Invalid ELF header magic: != ELF [ 531.023896][T18518] input: jJ-9%vlQ J86 as /devices/virtual/input/input45 [ 531.226685][T18537] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2010'. [ 531.310368][T18541] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2010'. [ 532.513170][ T30] audit: type=1800 audit(6051169630.836:22): pid=18634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2014" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 532.636578][T18647] binder: 18640:18647 ioctl c00c620f 200000000180 returned -22 [ 533.188380][T18706] __vm_enough_memory: pid: 18706, comm: syz.2.2016, bytes: 4398046511104 not enough memory for the allocation [ 535.762143][T18821] Malformed UNC in devname [ 535.762143][T18821] [ 535.807109][T18818] Malformed UNC in devname [ 535.807109][T18818] [ 535.874898][T18821] CIFS: VFS: Malformed UNC in devname [ 535.904948][T18818] CIFS: VFS: Malformed UNC in devname [ 537.314021][T18874] zswap: compressor not available [ 537.329421][T18881] Setting dangerous option i915.mitigations - tainting kernel [ 539.128666][T18976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2039'. [ 540.547339][T19037] binder: 19035:19037 ioctl c0306201 0 returned -14 [ 541.353163][T19104] netlink: 'syz.3.2052': attribute type 4 has an invalid length. [ 541.360910][T19104] netlink: 314 bytes leftover after parsing attributes in process `syz.3.2052'. [ 541.437826][T19104] IPv6: NLM_F_CREATE should be specified when creating new route [ 541.776369][T19135] ptrace attach of "./syz-executor exec"[19136] was attempted by "./syz-executor exec"[19135] [ 542.281523][T19142] Invalid ELF header magic: != ELF [ 543.008441][T19191] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 543.707000][T19236] ACPI: Can not change Invalid GPE/Fixed Event status [ 543.742195][T19235] ACPI: Can not change Invalid GPE/Fixed Event status [ 543.829786][T19155] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 545.098848][T19274] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(13) [ 545.354048][T19309] blktrace: Concurrent blktraces are not allowed on ram7 [ 546.321855][T19334] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 548.529182][T19427] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 549.778759][T19476] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2091'. [ 549.823728][T19476] net veth1_virt_wifi : renamed from virt_wifi0 [ 550.272008][T19505] usb usb36: usbfs: process 19505 (syz.1.2092) did not claim interface 0 before use [ 551.592235][T19604] FAULT_INJECTION: forcing a failure. [ 551.592235][T19604] name fail_page_alloc, interval 1, probability 0, space 0, times 393212 [ 551.765486][T19604] CPU: 0 UID: 0 PID: 19604 Comm: syz.3.2098 Tainted: G U syzkaller #0 PREEMPT(full) [ 551.765511][T19604] Tainted: [U]=USER [ 551.765516][T19604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.765525][T19604] Call Trace: [ 551.765531][T19604] [ 551.765537][T19604] dump_stack_lvl+0x16c/0x1f0 [ 551.765560][T19604] should_fail_ex+0x512/0x640 [ 551.765583][T19604] should_fail_alloc_page+0xe7/0x130 [ 551.765604][T19604] prepare_alloc_pages+0x3c2/0x610 [ 551.765624][T19604] ? rcu_is_watching+0x12/0xc0 [ 551.765640][T19604] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 551.765660][T19604] ? __lock_acquire+0x62e/0x1ce0 [ 551.765680][T19604] ? css_rstat_updated+0x1c2/0x510 [ 551.765696][T19604] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 551.765716][T19604] ? rcu_is_watching+0x12/0xc0 [ 551.765735][T19604] ? __lock_acquire+0x62e/0x1ce0 [ 551.765752][T19604] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 551.765773][T19604] ? policy_nodemask+0xea/0x4e0 [ 551.765792][T19604] alloc_pages_mpol+0x1fb/0x550 [ 551.765810][T19604] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 551.765829][T19604] ? filemap_get_entry+0x1a7/0x3b0 [ 551.765849][T19604] folio_alloc_noprof+0x20/0x2d0 [ 551.765869][T19604] filemap_alloc_folio_noprof+0x3a1/0x470 [ 551.765892][T19604] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 551.765914][T19604] ? rcu_is_watching+0x12/0xc0 [ 551.765931][T19604] __filemap_get_folio+0x5e1/0xc30 [ 551.765953][T19604] ioctx_alloc+0x761/0x2120 [ 551.765977][T19604] ? __pfx_ioctx_alloc+0x10/0x10 [ 551.765991][T19604] ? __might_fault+0x13b/0x190 [ 551.766011][T19604] __x64_sys_io_setup+0xc9/0x210 [ 551.766028][T19604] do_syscall_64+0xcd/0x490 [ 551.766048][T19604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.766062][T19604] RIP: 0033:0x7f9f0e58ebe9 [ 551.766073][T19604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.766087][T19604] RSP: 002b:00007f9f0f4bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 551.766100][T19604] RAX: ffffffffffffffda RBX: 00007f9f0e7b5fa0 RCX: 00007f9f0e58ebe9 [ 551.766109][T19604] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 551.766117][T19604] RBP: 00007f9f0e611e19 R08: 0000000000000000 R09: 0000000000000000 [ 551.766126][T19604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.766134][T19604] R13: 00007f9f0e7b6038 R14: 00007f9f0e7b5fa0 R15: 00007ffc6a48a748 [ 551.766153][T19604] [ 552.584939][T19630] zswap: compressor 000 not available [ 556.244955][T19803] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 556.365773][T19803] MTRR 1 not used [ 556.413495][T19786] zswap: compressor not available [ 556.759730][T19816] zswap: compressor not available [ 557.218045][T19870] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2125'. [ 557.309715][T19880] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2125'. [ 557.614569][T19857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2121'. [ 557.702153][T19857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.727462][T19857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.772247][T19857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.803256][T19857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.315669][ T30] audit: type=1800 audit(6051169657.646:23): pid=20046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2136" name="lu_gp_id" dev="configfs" ino=66776 res=0 errno=0 [ 560.338417][T20085] FAULT_INJECTION: forcing a failure. [ 560.338417][T20085] name failslab, interval 1, probability 0, space 0, times 0 [ 560.556023][T20085] CPU: 0 UID: 0 PID: 20085 Comm: syz.0.2141 Tainted: G U syzkaller #0 PREEMPT(full) [ 560.556048][T20085] Tainted: [U]=USER [ 560.556052][T20085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 560.556061][T20085] Call Trace: [ 560.556066][T20085] [ 560.556071][T20085] dump_stack_lvl+0x16c/0x1f0 [ 560.556100][T20085] should_fail_ex+0x512/0x640 [ 560.556120][T20085] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 560.556140][T20085] should_failslab+0xc2/0x120 [ 560.556161][T20085] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 560.556178][T20085] ? sock_alloc_inode+0x25/0x1c0 [ 560.556201][T20085] ? __pfx_sock_alloc_inode+0x10/0x10 [ 560.556220][T20085] sock_alloc_inode+0x25/0x1c0 [ 560.556239][T20085] alloc_inode+0x64/0x240 [ 560.556260][T20085] sock_alloc+0x40/0x280 [ 560.556279][T20085] __sock_create+0xc1/0x8d0 [ 560.556295][T20085] __sys_socket+0x14d/0x260 [ 560.556308][T20085] ? __fget_files+0x20e/0x3c0 [ 560.556322][T20085] ? __pfx___sys_socket+0x10/0x10 [ 560.556335][T20085] ? xfd_validate_state+0x61/0x180 [ 560.556359][T20085] __x64_sys_socket+0x72/0xb0 [ 560.556372][T20085] ? lockdep_hardirqs_on+0x7c/0x110 [ 560.556388][T20085] do_syscall_64+0xcd/0x490 [ 560.556408][T20085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.556421][T20085] RIP: 0033:0x7fd16d78ebe9 [ 560.556433][T20085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.556446][T20085] RSP: 002b:00007fd16e5c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 560.556459][T20085] RAX: ffffffffffffffda RBX: 00007fd16d9b6270 RCX: 00007fd16d78ebe9 [ 560.556468][T20085] RDX: 0000000000000004 RSI: 0000000000000002 RDI: 0000000000000010 [ 560.556476][T20085] RBP: 00007fd16d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 560.556484][T20085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.556492][T20085] R13: 00007fd16d9b6308 R14: 00007fd16d9b6270 R15: 00007ffdf9837f08 [ 560.556509][T20085] [ 560.560733][T20085] socket: no more sockets [ 561.605615][T20104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2146'. [ 563.220675][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.227059][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.859708][T13553] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 565.537963][T20300] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 568.626050][T20547] svc: failed to register nfsdv3 RPC service (errno 111). [ 568.777652][T20547] svc: failed to register nfsaclv3 RPC service (errno 111). [ 569.936418][T20649] random: crng reseeded on system resumption [ 570.707181][T20697] bridge0: port 3(batadv0) entered blocking state [ 570.748581][T20697] bridge0: port 3(batadv0) entered disabled state [ 570.777848][T20697] batadv0: entered allmulticast mode [ 570.801117][T20697] batadv0: entered promiscuous mode [ 570.829985][T20697] bridge0: port 3(batadv0) entered blocking state [ 570.836504][T20697] bridge0: port 3(batadv0) entered forwarding state [ 570.984006][ T7842] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 570.993879][ T7842] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 571.256836][T20741] binder: 20725:20741 ioctl c018620c 0 returned -1 [ 571.641481][T20748] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 571.970677][T20753] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 573.399585][T20849] random: crng reseeded on system resumption [ 577.205050][T21111] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2223'. [ 577.323618][T21115] random: crng reseeded on system resumption [ 577.355363][T21112] Invalid ELF header magic: != ELF [ 577.767209][T21112] : entered promiscuous mode [ 577.864546][T21122] can: request_module (can-proto-3) failed. [ 578.605118][T21162] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 580.074554][T21286] random: crng reseeded on system resumption [ 581.892245][T21337] cougar: G6 mapped to space [ 581.997217][T21337] svc: failed to register nfsdv3 RPC service (errno 111). [ 582.026462][T21337] svc: failed to register nfsaclv3 RPC service (errno 111). [ 582.101995][T21343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 582.538637][T21324] syz.2.2237 (21324): attempted to duplicate a private mapping with mremap. This is not supported. [ 585.481554][T21500] QAT: Stopping all acceleration devices. [ 587.874818][T21576] FAULT_INJECTION: forcing a failure. [ 587.874818][T21576] name failslab, interval 1, probability 0, space 0, times 0 [ 588.012490][T21576] CPU: 0 UID: 0 PID: 21576 Comm: syz.1.2257 Tainted: G U syzkaller #0 PREEMPT(full) [ 588.012516][T21576] Tainted: [U]=USER [ 588.012521][T21576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.012529][T21576] Call Trace: [ 588.012535][T21576] [ 588.012541][T21576] dump_stack_lvl+0x16c/0x1f0 [ 588.012564][T21576] should_fail_ex+0x512/0x640 [ 588.012584][T21576] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 588.012601][T21576] should_failslab+0xc2/0x120 [ 588.012619][T21576] __kmalloc_cache_noprof+0x6a/0x3e0 [ 588.012632][T21576] ? lockdep_init_map_type+0x5c/0x280 [ 588.012652][T21576] ? nci_hci_allocate+0x45/0x330 [ 588.012672][T21576] nci_hci_allocate+0x45/0x330 [ 588.012690][T21576] nci_allocate_device+0x26f/0x430 [ 588.012706][T21576] virtual_ncidev_open+0x6f/0x220 [ 588.012722][T21576] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 588.012737][T21576] misc_open+0x35a/0x420 [ 588.012752][T21576] ? __pfx_misc_open+0x10/0x10 [ 588.012766][T21576] chrdev_open+0x234/0x6a0 [ 588.012783][T21576] ? __pfx_apparmor_file_open+0x10/0x10 [ 588.012799][T21576] ? __pfx_chrdev_open+0x10/0x10 [ 588.012817][T21576] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 588.012836][T21576] do_dentry_open+0x982/0x1530 [ 588.012853][T21576] ? __pfx_chrdev_open+0x10/0x10 [ 588.012874][T21576] vfs_open+0x82/0x3f0 [ 588.012895][T21576] path_openat+0x1de4/0x2cb0 [ 588.012918][T21576] ? __pfx_path_openat+0x10/0x10 [ 588.012938][T21576] do_filp_open+0x20b/0x470 [ 588.012954][T21576] ? __pfx_do_filp_open+0x10/0x10 [ 588.012983][T21576] ? alloc_fd+0x471/0x7d0 [ 588.013003][T21576] do_sys_openat2+0x11b/0x1d0 [ 588.013023][T21576] ? __pfx_do_sys_openat2+0x10/0x10 [ 588.013050][T21576] __x64_sys_openat+0x174/0x210 [ 588.013070][T21576] ? __pfx___x64_sys_openat+0x10/0x10 [ 588.013098][T21576] do_syscall_64+0xcd/0x490 [ 588.013117][T21576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.013131][T21576] RIP: 0033:0x7fe15a58ebe9 [ 588.013142][T21576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.013156][T21576] RSP: 002b:00007fe15b3b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 588.013169][T21576] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a58ebe9 [ 588.013179][T21576] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 588.013187][T21576] RBP: 00007fe15a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 588.013195][T21576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.013203][T21576] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 588.013222][T21576] [ 588.932801][T21586] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 589.272078][T21588] can: request_module (can-proto-0) failed. [ 590.612654][T21608] FAULT_INJECTION: forcing a failure. [ 590.612654][T21608] name failslab, interval 1, probability 0, space 0, times 0 [ 590.838502][T21608] CPU: 0 UID: 0 PID: 21608 Comm: syz.3.2262 Tainted: G U syzkaller #0 PREEMPT(full) [ 590.838527][T21608] Tainted: [U]=USER [ 590.838533][T21608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.838541][T21608] Call Trace: [ 590.838546][T21608] [ 590.838551][T21608] dump_stack_lvl+0x16c/0x1f0 [ 590.838574][T21608] should_fail_ex+0x512/0x640 [ 590.838594][T21608] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 590.838613][T21608] should_failslab+0xc2/0x120 [ 590.838631][T21608] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 590.838648][T21608] ? inode_set_ctime_current+0x2a1/0x8f0 [ 590.838666][T21608] ? __d_alloc+0x32/0xae0 [ 590.838685][T21608] __d_alloc+0x32/0xae0 [ 590.838703][T21608] d_alloc_pseudo+0x1c/0xc0 [ 590.838722][T21608] alloc_file_pseudo+0xcf/0x230 [ 590.838743][T21608] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 590.838764][T21608] ? hugetlbfs_get_inode+0x31f/0x730 [ 590.838781][T21608] hugetlb_file_setup+0x4ce/0x620 [ 590.838798][T21608] ksys_mmap_pgoff+0x189/0x5c0 [ 590.838820][T21608] __x64_sys_mmap+0x125/0x190 [ 590.838843][T21608] do_syscall_64+0xcd/0x490 [ 590.838863][T21608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.838876][T21608] RIP: 0033:0x7f9f0e58ebe9 [ 590.838888][T21608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.838902][T21608] RSP: 002b:00007f9f0f4bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 590.838915][T21608] RAX: ffffffffffffffda RBX: 00007f9f0e7b5fa0 RCX: 00007f9f0e58ebe9 [ 590.838924][T21608] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 590.838932][T21608] RBP: 00007f9f0e611e19 R08: 0000000000000004 R09: 0000300000000000 [ 590.838941][T21608] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 590.838949][T21608] R13: 00007f9f0e7b6038 R14: 00007f9f0e7b5fa0 R15: 00007ffc6a48a748 [ 590.838966][T21608] [ 592.163378][T21645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2266'. [ 592.240880][T21656] FAULT_INJECTION: forcing a failure. [ 592.240880][T21656] name failslab, interval 1, probability 0, space 0, times 0 [ 592.375011][T21656] CPU: 0 UID: 0 PID: 21656 Comm: syz.1.2267 Tainted: G U syzkaller #0 PREEMPT(full) [ 592.375035][T21656] Tainted: [U]=USER [ 592.375040][T21656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.375049][T21656] Call Trace: [ 592.375054][T21656] [ 592.375060][T21656] dump_stack_lvl+0x16c/0x1f0 [ 592.375084][T21656] should_fail_ex+0x512/0x640 [ 592.375104][T21656] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 592.375123][T21656] should_failslab+0xc2/0x120 [ 592.375143][T21656] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 592.375158][T21656] ? _raw_spin_unlock+0x28/0x50 [ 592.375173][T21656] ? alloc_inode+0xc3/0x240 [ 592.375195][T21656] alloc_inode+0xc3/0x240 [ 592.375214][T21656] new_inode+0x22/0x1c0 [ 592.375235][T21656] simple_fill_super+0x306/0x720 [ 592.375253][T21656] ? __pfx_nfsd_fill_super+0x10/0x10 [ 592.375270][T21656] nfsd_fill_super+0x90/0x530 [ 592.375284][T21656] ? __pfx_set_anon_super_fc+0x10/0x10 [ 592.375299][T21656] ? __pfx_nfsd_fill_super+0x10/0x10 [ 592.375314][T21656] get_tree_keyed+0x10e/0x1d0 [ 592.375330][T21656] vfs_get_tree+0x8b/0x340 [ 592.375344][T21656] path_mount+0x1513/0x2000 [ 592.375364][T21656] ? __pfx_path_mount+0x10/0x10 [ 592.375382][T21656] ? kmem_cache_free+0x2d1/0x4d0 [ 592.375396][T21656] ? putname+0x154/0x1a0 [ 592.375417][T21656] ? putname+0x154/0x1a0 [ 592.375436][T21656] ? __x64_sys_mount+0x28d/0x310 [ 592.375451][T21656] __x64_sys_mount+0x28d/0x310 [ 592.375468][T21656] ? __pfx___x64_sys_mount+0x10/0x10 [ 592.375503][T21656] do_syscall_64+0xcd/0x490 [ 592.375523][T21656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.375538][T21656] RIP: 0033:0x7fe15a58ebe9 [ 592.375550][T21656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.375563][T21656] RSP: 002b:00007fe15b3b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 592.375577][T21656] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a58ebe9 [ 592.375586][T21656] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 592.375594][T21656] RBP: 00007fe15a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 592.375602][T21656] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 592.375610][T21656] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 592.375628][T21656] [ 593.163282][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'. [ 593.236865][T21675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2269'. [ 593.300994][T21679] Invalid ELF header magic: != ELF [ 593.516063][T21679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2269'. [ 593.959779][T21675] geneve1: entered promiscuous mode [ 594.008526][T21675] geneve1: entered allmulticast mode [ 596.676467][T21792] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input49 [ 596.889138][T21754] FAULT_INJECTION: forcing a failure. [ 596.889138][T21754] name failslab, interval 1, probability 0, space 0, times 0 [ 596.998780][T21754] CPU: 0 UID: 0 PID: 21754 Comm: syz.1.2275 Tainted: G U syzkaller #0 PREEMPT(full) [ 596.998805][T21754] Tainted: [U]=USER [ 596.998809][T21754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 596.998818][T21754] Call Trace: [ 596.998824][T21754] [ 596.998830][T21754] dump_stack_lvl+0x16c/0x1f0 [ 596.998853][T21754] should_fail_ex+0x512/0x640 [ 596.998879][T21754] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 596.998901][T21754] should_failslab+0xc2/0x120 [ 596.998920][T21754] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 596.998939][T21754] ? dm_hash_insert+0x72/0x6e0 [ 596.998954][T21754] kstrdup+0x53/0x100 [ 596.998971][T21754] dm_hash_insert+0x72/0x6e0 [ 596.998984][T21754] ? dm_create+0xe5f/0x1160 [ 596.999004][T21754] dev_create+0x19c/0x290 [ 596.999016][T21754] ? __pfx_dev_create+0x10/0x10 [ 596.999027][T21754] ? __might_fault+0x13b/0x190 [ 596.999047][T21754] ctl_ioctl+0x798/0xd60 [ 596.999067][T21754] ? __pfx_dev_create+0x10/0x10 [ 596.999080][T21754] ? __pfx_ctl_ioctl+0x10/0x10 [ 596.999118][T21754] ? __fget_files+0x20e/0x3c0 [ 596.999136][T21754] dm_ctl_ioctl+0x22/0x30 [ 596.999155][T21754] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 596.999174][T21754] __x64_sys_ioctl+0x18e/0x210 [ 596.999196][T21754] do_syscall_64+0xcd/0x490 [ 596.999216][T21754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.999230][T21754] RIP: 0033:0x7fe15a58ebe9 [ 596.999241][T21754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.999255][T21754] RSP: 002b:00007fe15b3b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.999269][T21754] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a58ebe9 [ 596.999277][T21754] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000006 [ 596.999286][T21754] RBP: 00007fe15a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 596.999294][T21754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.999302][T21754] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 596.999320][T21754] [ 597.773579][T21812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2282'. [ 598.751863][T21865] random: crng reseeded on system resumption [ 599.502350][T21895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2285'. [ 599.594772][T21899] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2286'. [ 599.852211][T21908] binder: 21907:21908 ioctl c018620c 0 returned -22 [ 600.220301][ T30] audit: type=1800 audit(6051169698.546:24): pid=21923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2289" name="lu_gp_id" dev="configfs" ino=71027 res=0 errno=0 [ 603.892028][T22122] zswap: compressor not available [ 604.383817][T22167] FAULT_INJECTION: forcing a failure. [ 604.383817][T22167] name failslab, interval 1, probability 0, space 0, times 0 [ 604.475684][T22167] CPU: 0 UID: 0 PID: 22167 Comm: syz.1.2302 Tainted: G U syzkaller #0 PREEMPT(full) [ 604.475711][T22167] Tainted: [U]=USER [ 604.475715][T22167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.475724][T22167] Call Trace: [ 604.475729][T22167] [ 604.475735][T22167] dump_stack_lvl+0x16c/0x1f0 [ 604.475759][T22167] should_fail_ex+0x512/0x640 [ 604.475780][T22167] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 604.475799][T22167] should_failslab+0xc2/0x120 [ 604.475818][T22167] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 604.475836][T22167] ? security_file_alloc+0x34/0x2b0 [ 604.475858][T22167] security_file_alloc+0x34/0x2b0 [ 604.475877][T22167] init_file+0x93/0x4c0 [ 604.475898][T22167] alloc_empty_file+0x73/0x1e0 [ 604.475919][T22167] alloc_file_pseudo+0x13a/0x230 [ 604.475941][T22167] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 604.475968][T22167] ioctx_alloc+0x5ab/0x2120 [ 604.475990][T22167] ? find_held_lock+0x2b/0x80 [ 604.476006][T22167] ? __pfx_ioctx_alloc+0x10/0x10 [ 604.476021][T22167] ? __might_fault+0x13b/0x190 [ 604.476043][T22167] __x64_sys_io_setup+0xc9/0x210 [ 604.476060][T22167] do_syscall_64+0xcd/0x490 [ 604.476081][T22167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.476096][T22167] RIP: 0033:0x7fe15a58ebe9 [ 604.476109][T22167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.476123][T22167] RSP: 002b:00007fe15b3b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 604.476137][T22167] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a58ebe9 [ 604.476147][T22167] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 604.476157][T22167] RBP: 00007fe15a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 604.476165][T22167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.476173][T22167] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 604.476192][T22167] [ 605.252831][T22172] FAULT_INJECTION: forcing a failure. [ 605.252831][T22172] name failslab, interval 1, probability 0, space 0, times 0 [ 605.372473][T22172] CPU: 0 UID: 0 PID: 22172 Comm: syz.3.2303 Tainted: G U syzkaller #0 PREEMPT(full) [ 605.372499][T22172] Tainted: [U]=USER [ 605.372503][T22172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.372512][T22172] Call Trace: [ 605.372518][T22172] [ 605.372523][T22172] dump_stack_lvl+0x16c/0x1f0 [ 605.372546][T22172] should_fail_ex+0x512/0x640 [ 605.372566][T22172] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 605.372585][T22172] should_failslab+0xc2/0x120 [ 605.372604][T22172] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 605.372620][T22172] ? sk_prot_alloc+0x60/0x2a0 [ 605.372646][T22172] sk_prot_alloc+0x60/0x2a0 [ 605.372668][T22172] sk_alloc+0x36/0xc20 [ 605.372685][T22172] tipc_sk_create+0xcf/0x21a0 [ 605.372703][T22172] ? find_held_lock+0x2b/0x80 [ 605.372717][T22172] ? __sock_create+0x2f2/0x8d0 [ 605.372732][T22172] __sock_create+0x338/0x8d0 [ 605.372749][T22172] __sys_socket+0x14d/0x260 [ 605.372764][T22172] ? __pfx___sys_socket+0x10/0x10 [ 605.372778][T22172] ? xfd_validate_state+0x61/0x180 [ 605.372803][T22172] __x64_sys_socket+0x72/0xb0 [ 605.372816][T22172] ? lockdep_hardirqs_on+0x7c/0x110 [ 605.372833][T22172] do_syscall_64+0xcd/0x490 [ 605.372852][T22172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.372865][T22172] RIP: 0033:0x7f9f0e58ebe9 [ 605.372876][T22172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.372889][T22172] RSP: 002b:00007f9f0f4bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 605.372903][T22172] RAX: ffffffffffffffda RBX: 00007f9f0e7b5fa0 RCX: 00007f9f0e58ebe9 [ 605.372912][T22172] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 605.372920][T22172] RBP: 00007f9f0e611e19 R08: 0000000000000000 R09: 0000000000000000 [ 605.372928][T22172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.372935][T22172] R13: 00007f9f0e7b6038 R14: 00007f9f0e7b5fa0 R15: 00007ffc6a48a748 [ 605.372952][T22172] [ 607.502344][T13553] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 607.553368][T22234] FAULT_INJECTION: forcing a failure. [ 607.553368][T22234] name failslab, interval 1, probability 0, space 0, times 0 [ 607.699464][T22234] CPU: 0 UID: 0 PID: 22234 Comm: syz.2.2311 Tainted: G U syzkaller #0 PREEMPT(full) [ 607.699490][T22234] Tainted: [U]=USER [ 607.699498][T22234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 607.699506][T22234] Call Trace: [ 607.699512][T22234] [ 607.699518][T22234] dump_stack_lvl+0x16c/0x1f0 [ 607.699541][T22234] should_fail_ex+0x512/0x640 [ 607.699561][T22234] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 607.699581][T22234] should_failslab+0xc2/0x120 [ 607.699599][T22234] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 607.699616][T22234] ? __d_alloc+0x32/0xae0 [ 607.699636][T22234] __d_alloc+0x32/0xae0 [ 607.699654][T22234] d_alloc_parallel+0x111/0x1480 [ 607.699680][T22234] ? find_held_lock+0x2b/0x80 [ 607.699695][T22234] ? __pfx_d_alloc_parallel+0x10/0x10 [ 607.699718][T22234] ? __d_lookup+0x266/0x4a0 [ 607.699742][T22234] lookup_open.isra.0+0x665/0x1580 [ 607.699760][T22234] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 607.699783][T22234] ? __pfx_down_write+0x10/0x10 [ 607.699802][T22234] ? mnt_get_write_access+0x20c/0x300 [ 607.699825][T22234] path_openat+0x893/0x2cb0 [ 607.699846][T22234] ? __pfx_path_openat+0x10/0x10 [ 607.699867][T22234] do_filp_open+0x20b/0x470 [ 607.699883][T22234] ? __pfx_do_filp_open+0x10/0x10 [ 607.699912][T22234] ? alloc_fd+0x471/0x7d0 [ 607.699931][T22234] do_sys_openat2+0x11b/0x1d0 [ 607.699953][T22234] ? __pfx_do_sys_openat2+0x10/0x10 [ 607.699980][T22234] __x64_sys_openat+0x174/0x210 [ 607.700000][T22234] ? __pfx___x64_sys_openat+0x10/0x10 [ 607.700028][T22234] do_syscall_64+0xcd/0x490 [ 607.700047][T22234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.700061][T22234] RIP: 0033:0x7fec2ad8ebe9 [ 607.700074][T22234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.700088][T22234] RSP: 002b:00007fec2bb8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 607.700101][T22234] RAX: ffffffffffffffda RBX: 00007fec2afb6090 RCX: 00007fec2ad8ebe9 [ 607.700110][T22234] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 607.700119][T22234] RBP: 00007fec2ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 607.700128][T22234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.700136][T22234] R13: 00007fec2afb6128 R14: 00007fec2afb6090 R15: 00007ffc5f0c6678 [ 607.700155][T22234] [ 611.467270][T22347] FAULT_INJECTION: forcing a failure. [ 611.467270][T22347] name failslab, interval 1, probability 0, space 0, times 0 [ 611.512145][T22347] CPU: 0 UID: 0 PID: 22347 Comm: syz.1.2322 Tainted: G U syzkaller #0 PREEMPT(full) [ 611.512170][T22347] Tainted: [U]=USER [ 611.512175][T22347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.512184][T22347] Call Trace: [ 611.512189][T22347] [ 611.512195][T22347] dump_stack_lvl+0x16c/0x1f0 [ 611.512217][T22347] should_fail_ex+0x512/0x640 [ 611.512237][T22347] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 611.512255][T22347] should_failslab+0xc2/0x120 [ 611.512275][T22347] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 611.512291][T22347] ? alloc_uid+0x13d/0x4c0 [ 611.512308][T22347] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.512325][T22347] alloc_uid+0x13d/0x4c0 [ 611.512342][T22347] ? __pfx_alloc_uid+0x10/0x10 [ 611.512358][T22347] ? security_prepare_creds+0xa7/0x270 [ 611.512385][T22347] __sys_setresuid+0x507/0x1160 [ 611.512403][T22347] do_syscall_64+0xcd/0x490 [ 611.512424][T22347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.512439][T22347] RIP: 0033:0x7fe15a58ebe9 [ 611.512450][T22347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.512463][T22347] RSP: 002b:00007fe15b3b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 611.512477][T22347] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a58ebe9 [ 611.512486][T22347] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 611.512493][T22347] RBP: 00007fe15a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 611.512501][T22347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.512508][T22347] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 611.512525][T22347] [ 616.337752][T22465] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 616.367909][T22471] FAULT_INJECTION: forcing a failure. [ 616.367909][T22471] name failslab, interval 1, probability 0, space 0, times 0 [ 616.471697][T22465] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 616.557767][T22471] CPU: 0 UID: 0 PID: 22471 Comm: syz.0.2337 Tainted: G U syzkaller #0 PREEMPT(full) [ 616.557789][T22471] Tainted: [U]=USER [ 616.557794][T22471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 616.557802][T22471] Call Trace: [ 616.557807][T22471] [ 616.557813][T22471] dump_stack_lvl+0x16c/0x1f0 [ 616.557835][T22471] should_fail_ex+0x512/0x640 [ 616.557854][T22471] ? __kmalloc_noprof+0xbf/0x510 [ 616.557871][T22471] ? lsm_blob_alloc+0x68/0x90 [ 616.557882][T22471] should_failslab+0xc2/0x120 [ 616.557899][T22471] __kmalloc_noprof+0xd2/0x510 [ 616.557918][T22471] lsm_blob_alloc+0x68/0x90 [ 616.557930][T22471] security_sk_alloc+0x30/0x270 [ 616.557945][T22471] sk_prot_alloc+0x1c7/0x2a0 [ 616.557967][T22471] sk_alloc+0x36/0xc20 [ 616.557984][T22471] __netlink_create+0x5e/0x2c0 [ 616.557998][T22471] ? __wake_up+0x3f/0x60 [ 616.558013][T22471] netlink_create+0x39e/0x620 [ 616.558028][T22471] ? __pfx_genl_bind+0x10/0x10 [ 616.558046][T22471] ? __pfx_genl_unbind+0x10/0x10 [ 616.558063][T22471] ? __pfx_genl_release+0x10/0x10 [ 616.558083][T22471] __sock_create+0x338/0x8d0 [ 616.558099][T22471] __sys_socket+0x14d/0x260 [ 616.558113][T22471] ? __pfx___sys_socket+0x10/0x10 [ 616.558127][T22471] ? do_user_addr_fault+0x843/0x1370 [ 616.558150][T22471] __x64_sys_socket+0x72/0xb0 [ 616.558162][T22471] ? lockdep_hardirqs_on+0x7c/0x110 [ 616.558179][T22471] do_syscall_64+0xcd/0x490 [ 616.558198][T22471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.558211][T22471] RIP: 0033:0x7fd16d790b07 [ 616.558223][T22471] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.558235][T22471] RSP: 002b:00007fd16e609fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 616.558248][T22471] RAX: ffffffffffffffda RBX: 00007fd16d9b6090 RCX: 00007fd16d790b07 [ 616.558257][T22471] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 616.558265][T22471] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 616.558273][T22471] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 616.558281][T22471] R13: 00007fd16d9b6128 R14: 00007fd16d9b6090 R15: 00007ffdf9837f08 [ 616.558297][T22471] [ 616.558573][T22465] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 618.429957][T22574] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 618.609871][T22465] page_type: f5(slab) [ 618.679706][T22465] raw: 00fff00000000040 ffff88801ce9a640 0000000000000000 dead000000000001 [ 618.771975][T22465] raw: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 618.852347][T22465] head: 00fff00000000040 ffff88801ce9a640 0000000000000000 dead000000000001 [ 618.923709][T22465] head: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 619.016381][T22465] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 619.108583][T22465] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 619.133946][T22595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 619.169228][T22465] page dumped because: unmovable page [ 619.210365][T22465] page_owner tracks the page as allocated [ 619.257280][T22465] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5233, tgid 5233 (udevd), ts 324715482259, free_ts 312487477152 [ 619.406173][T22465] post_alloc_hook+0x1c0/0x230 [ 619.440919][T22465] get_page_from_freelist+0x132b/0x38e0 [ 619.469335][T22465] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 619.475662][T22617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2347'. [ 619.495253][T22465] alloc_pages_mpol+0x1fb/0x550 [ 619.520394][T22465] new_slab+0x247/0x330 [ 619.548092][T22465] ___slab_alloc+0xcf2/0x1740 [ 619.568616][T22465] __slab_alloc.constprop.0+0x56/0xb0 [ 619.592862][T22465] kmem_cache_alloc_noprof+0xef/0x3b0 [ 619.617191][T22465] getname_flags.part.0+0x4c/0x550 [ 619.643265][T22465] getname_flags+0x93/0xf0 [ 619.663228][T22465] do_sys_openat2+0xb8/0x1d0 [ 619.683228][T22465] __x64_sys_openat+0x174/0x210 [ 619.697310][T22465] do_syscall_64+0xcd/0x490 [ 619.707664][T22465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.727569][T22465] page last free pid 10612 tgid 10612 stack trace: [ 619.755068][T22465] __free_frozen_pages+0x7d5/0x10f0 [ 619.766405][T22465] qlist_free_all+0x4d/0x120 [ 619.776536][T22465] kasan_quarantine_reduce+0x195/0x1e0 [ 619.789754][T22465] __kasan_kmalloc+0x8a/0xb0 [ 619.799386][T22465] __get_vm_area_node+0x101/0x330 [ 619.810865][T22465] __vmalloc_node_range_noprof+0x271/0x14b0 [ 619.825111][T22465] __vmalloc_node_noprof+0xad/0xf0 [ 619.836559][T22465] copy_process+0x2c70/0x7690 [ 619.860674][T22465] kernel_clone+0xfc/0x930 [ 619.879620][T22465] __do_sys_clone3+0x212/0x290 [ 619.905911][T22465] do_syscall_64+0xcd/0x490 [ 619.932465][T22465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.310181][T22632] hub 8-0:1.0: USB hub found [ 621.441379][T22632] hub 8-0:1.0: 1 port detected [ 622.347145][T22707] FAULT_INJECTION: forcing a failure. [ 622.347145][T22707] name failslab, interval 1, probability 0, space 0, times 0 [ 622.408931][T22707] CPU: 0 UID: 0 PID: 22707 Comm: syz.1.2357 Tainted: G U syzkaller #0 PREEMPT(full) [ 622.408956][T22707] Tainted: [U]=USER [ 622.408961][T22707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 622.408970][T22707] Call Trace: [ 622.408976][T22707] [ 622.408982][T22707] dump_stack_lvl+0x16c/0x1f0 [ 622.409005][T22707] should_fail_ex+0x512/0x640 [ 622.409024][T22707] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 622.409043][T22707] should_failslab+0xc2/0x120 [ 622.409061][T22707] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 622.409078][T22707] ? sk_prot_alloc+0x60/0x2a0 [ 622.409102][T22707] sk_prot_alloc+0x60/0x2a0 [ 622.409123][T22707] sk_alloc+0x36/0xc20 [ 622.409140][T22707] __vsock_create.constprop.0+0x3c/0xbb0 [ 622.409156][T22707] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 622.409178][T22707] vsock_create+0x139/0x500 [ 622.409196][T22707] __sock_create+0x338/0x8d0 [ 622.409212][T22707] __sys_socket+0x14d/0x260 [ 622.409226][T22707] ? __pfx___sys_socket+0x10/0x10 [ 622.409239][T22707] ? xfd_validate_state+0x61/0x180 [ 622.409259][T22707] ? __task_pid_nr_ns+0x17c/0x500 [ 622.409280][T22707] __x64_sys_socket+0x72/0xb0 [ 622.409293][T22707] ? lockdep_hardirqs_on+0x7c/0x110 [ 622.409310][T22707] do_syscall_64+0xcd/0x490 [ 622.409329][T22707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.409343][T22707] RIP: 0033:0x7fe15a58ebe9 [ 622.409354][T22707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.409367][T22707] RSP: 002b:00007fe15b3b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 622.409381][T22707] RAX: ffffffffffffffda RBX: 00007fe15a7b5fa0 RCX: 00007fe15a58ebe9 [ 622.409390][T22707] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 622.409397][T22707] RBP: 00007fe15a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 622.409405][T22707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.409413][T22707] R13: 00007fe15a7b6038 R14: 00007fe15a7b5fa0 R15: 00007ffce777b208 [ 622.409439][T22707] [ 623.505292][T22732] zswap: compressor not available [ 624.336299][T22763] ptrace attach of "./syz-executor exec"[22769] was attempted by "./syz-executor exec"[22763] [ 624.648301][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.666354][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.010404][T22794] warning: `syz.3.2370' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 625.609040][T22825] netlink: 'syz.3.2374': attribute type 1 has an invalid length. [ 625.665001][T22825] netlink: 'syz.3.2374': attribute type 1 has an invalid length. [ 627.342512][ T30] audit: type=1800 audit(6051169725.666:25): pid=22904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2380" name="features" dev="configfs" ino=73054 res=0 errno=0 [ 628.424621][T22939] netlink: 'syz.2.2385': attribute type 1 has an invalid length. [ 629.036967][T13553] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14 [ 630.877640][T23067] ================================================================== [ 630.892795][T23067] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 630.900505][T23067] Read of size 8 at addr ffff888140a8d818 by task syz.0.2393/23067 [ 630.908379][T23067] [ 630.910689][T23067] CPU: 0 UID: 0 PID: 23067 Comm: syz.0.2393 Tainted: G U syzkaller #0 PREEMPT(full) [ 630.910710][T23067] Tainted: [U]=USER [ 630.910714][T23067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.910723][T23067] Call Trace: [ 630.910729][T23067] [ 630.910735][T23067] dump_stack_lvl+0x116/0x1f0 [ 630.910756][T23067] print_report+0xcd/0x630 [ 630.910774][T23067] ? __virt_addr_valid+0x81/0x610 [ 630.910790][T23067] ? __phys_addr+0xe8/0x180 [ 630.910807][T23067] ? dvb_device_open+0x36a/0x3b0 [ 630.910837][T23067] kasan_report+0xe0/0x110 [ 630.910854][T23067] ? dvb_device_open+0x36a/0x3b0 [ 630.910874][T23067] ? __pfx_dvb_device_open+0x10/0x10 [ 630.910894][T23067] dvb_device_open+0x36a/0x3b0 [ 630.910912][T23067] ? __pfx_dvb_device_open+0x10/0x10 [ 630.910931][T23067] chrdev_open+0x234/0x6a0 [ 630.910953][T23067] ? __pfx_apparmor_file_open+0x10/0x10 [ 630.910968][T23067] ? __pfx_chrdev_open+0x10/0x10 [ 630.910986][T23067] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 630.911004][T23067] do_dentry_open+0x982/0x1530 [ 630.911021][T23067] ? __pfx_chrdev_open+0x10/0x10 [ 630.911040][T23067] vfs_open+0x82/0x3f0 [ 630.911060][T23067] path_openat+0x1de4/0x2cb0 [ 630.911078][T23067] ? __pfx_path_openat+0x10/0x10 [ 630.911096][T23067] do_filp_open+0x20b/0x470 [ 630.911110][T23067] ? __pfx_do_filp_open+0x10/0x10 [ 630.911131][T23067] ? alloc_fd+0x471/0x7d0 [ 630.911147][T23067] do_sys_openat2+0x11b/0x1d0 [ 630.911167][T23067] ? __pfx_do_sys_openat2+0x10/0x10 [ 630.911187][T23067] ? __pfx___might_resched+0x10/0x10 [ 630.911203][T23067] __x64_sys_openat+0x174/0x210 [ 630.911222][T23067] ? __pfx___x64_sys_openat+0x10/0x10 [ 630.911245][T23067] do_syscall_64+0xcd/0x490 [ 630.911263][T23067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.911277][T23067] RIP: 0033:0x7fd16d78ebe9 [ 630.911289][T23067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.911302][T23067] RSP: 002b:00007fd16e62c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 630.911315][T23067] RAX: ffffffffffffffda RBX: 00007fd16d9b5fa0 RCX: 00007fd16d78ebe9 [ 630.911325][T23067] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 630.911334][T23067] RBP: 00007fd16d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 630.911343][T23067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.911351][T23067] R13: 00007fd16d9b6038 R14: 00007fd16d9b5fa0 R15: 00007ffdf9837f08 [ 630.911365][T23067] [ 630.911370][T23067] [ 631.160881][T23067] Allocated by task 22231: [ 631.165274][T23067] kasan_save_stack+0x33/0x60 [ 631.169943][T23067] kasan_save_track+0x14/0x30 [ 631.174599][T23067] __kasan_kmalloc+0xaa/0xb0 [ 631.179170][T23067] mirred_init_net+0x56/0x270 [ 631.183826][T23067] ops_init+0x1e2/0x5f0 [ 631.187963][T23067] setup_net+0x10f/0x380 [ 631.192188][T23067] copy_net_ns+0x2a6/0x5f0 [ 631.196587][T23067] create_new_namespaces+0x3ea/0xa90 [ 631.201850][T23067] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 631.207460][T23067] ksys_unshare+0x45b/0xa40 [ 631.211947][T23067] __x64_sys_unshare+0x31/0x40 [ 631.216691][T23067] do_syscall_64+0xcd/0x490 [ 631.221176][T23067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.227054][T23067] [ 631.229358][T23067] Freed by task 12080: [ 631.233400][T23067] kasan_save_stack+0x33/0x60 [ 631.238056][T23067] kasan_save_track+0x14/0x30 [ 631.242710][T23067] kasan_save_free_info+0x3b/0x60 [ 631.247719][T23067] __kasan_slab_free+0x60/0x70 [ 631.252462][T23067] kfree+0x2b4/0x4d0 [ 631.256333][T23067] mirred_exit_net+0xaa/0x120 [ 631.260990][T23067] ops_undo_list+0x363/0xab0 [ 631.265562][T23067] cleanup_net+0x408/0x890 [ 631.269964][T23067] process_one_work+0x9cf/0x1b70 [ 631.274886][T23067] worker_thread+0x6c8/0xf10 [ 631.279452][T23067] kthread+0x3c5/0x780 [ 631.283504][T23067] ret_from_fork+0x5d4/0x6f0 [ 631.288080][T23067] ret_from_fork_asm+0x1a/0x30 [ 631.292848][T23067] [ 631.295153][T23067] The buggy address belongs to the object at ffff888140a8d800 [ 631.295153][T23067] which belongs to the cache kmalloc-256 of size 256 [ 631.309182][T23067] The buggy address is located 24 bytes inside of [ 631.309182][T23067] freed 256-byte region [ffff888140a8d800, ffff888140a8d900) [ 631.322864][T23067] [ 631.325166][T23067] The buggy address belongs to the physical page: [ 631.331550][T23067] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888140a8d800 pfn:0x140a8c [ 631.341675][T23067] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 631.350147][T23067] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 631.358707][T23067] page_type: f5(slab) [ 631.362666][T23067] raw: 057ff00000000240 ffff88801b841b40 ffff888140400708 ffffea00052da690 [ 631.371227][T23067] raw: ffff888140a8d800 000000000010000f 00000000f5000000 0000000000000000 [ 631.379786][T23067] head: 057ff00000000240 ffff88801b841b40 ffff888140400708 ffffea00052da690 [ 631.388436][T23067] head: ffff888140a8d800 000000000010000f 00000000f5000000 0000000000000000 [ 631.397082][T23067] head: 057ff00000000001 ffffea000502a301 00000000ffffffff 00000000ffffffff [ 631.405749][T23067] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 631.414392][T23067] page dumped because: kasan: bad access detected [ 631.420779][T23067] page_owner tracks the page as allocated [ 631.426468][T23067] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20424031899, free_ts 0 [ 631.446153][T23067] post_alloc_hook+0x1c0/0x230 [ 631.451335][T23067] get_page_from_freelist+0x132b/0x38e0 [ 631.456862][T23067] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 631.462736][T23067] alloc_pages_mpol+0x1fb/0x550 [ 631.467590][T23067] new_slab+0x247/0x330 [ 631.471722][T23067] ___slab_alloc+0xcf2/0x1740 [ 631.476373][T23067] __slab_alloc.constprop.0+0x56/0xb0 [ 631.481721][T23067] __kmalloc_cache_noprof+0xfb/0x3e0 [ 631.486985][T23067] bus_add_driver+0x92/0x690 [ 631.491556][T23067] driver_register+0x15c/0x4b0 [ 631.496301][T23067] usb_register_driver+0x216/0x4d0 [ 631.501395][T23067] do_one_initcall+0x120/0x6e0 [ 631.506140][T23067] kernel_init_freeable+0x5c2/0x910 [ 631.511319][T23067] kernel_init+0x1c/0x2b0 [ 631.515624][T23067] ret_from_fork+0x5d4/0x6f0 [ 631.520197][T23067] ret_from_fork_asm+0x1a/0x30 [ 631.524944][T23067] page_owner free stack trace missing [ 631.530285][T23067] [ 631.532585][T23067] Memory state around the buggy address: [ 631.538190][T23067] ffff888140a8d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 631.546228][T23067] ffff888140a8d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 631.554272][T23067] >ffff888140a8d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 631.562309][T23067] ^ [ 631.567132][T23067] ffff888140a8d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 631.575168][T23067] ffff888140a8d900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 631.583204][T23067] ================================================================== [ 631.861680][T23067] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 631.868922][T23067] CPU: 0 UID: 0 PID: 23067 Comm: syz.0.2393 Tainted: G U syzkaller #0 PREEMPT(full) [ 631.879839][T23067] Tainted: [U]=USER [ 631.883620][T23067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.893652][T23067] Call Trace: [ 631.896911][T23067] [ 631.899822][T23067] dump_stack_lvl+0x3d/0x1f0 [ 631.904402][T23067] vpanic+0x6e8/0x7a0 [ 631.908373][T23067] ? __pfx_vpanic+0x10/0x10 [ 631.912860][T23067] ? __pfx_vprintk_emit+0x10/0x10 [ 631.917868][T23067] ? dvb_device_open+0x36a/0x3b0 [ 631.922801][T23067] panic+0xca/0xd0 [ 631.926507][T23067] ? __pfx_panic+0x10/0x10 [ 631.930908][T23067] ? dvb_device_open+0x36a/0x3b0 [ 631.935830][T23067] ? preempt_schedule_common+0x44/0xc0 [ 631.941273][T23067] ? preempt_schedule_thunk+0x16/0x30 [ 631.946630][T23067] check_panic_on_warn+0xab/0xb0 [ 631.951550][T23067] end_report+0x107/0x170 [ 631.955864][T23067] kasan_report+0xee/0x110 [ 631.960271][T23067] ? dvb_device_open+0x36a/0x3b0 [ 631.965193][T23067] ? __pfx_dvb_device_open+0x10/0x10 [ 631.970461][T23067] dvb_device_open+0x36a/0x3b0 [ 631.975208][T23067] ? __pfx_dvb_device_open+0x10/0x10 [ 631.980475][T23067] chrdev_open+0x234/0x6a0 [ 631.984874][T23067] ? __pfx_apparmor_file_open+0x10/0x10 [ 631.990406][T23067] ? __pfx_chrdev_open+0x10/0x10 [ 631.995351][T23067] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 632.001664][T23067] do_dentry_open+0x982/0x1530 [ 632.006411][T23067] ? __pfx_chrdev_open+0x10/0x10 [ 632.011352][T23067] vfs_open+0x82/0x3f0 [ 632.015412][T23067] path_openat+0x1de4/0x2cb0 [ 632.019990][T23067] ? __pfx_path_openat+0x10/0x10 [ 632.024910][T23067] do_filp_open+0x20b/0x470 [ 632.029393][T23067] ? __pfx_do_filp_open+0x10/0x10 [ 632.034404][T23067] ? alloc_fd+0x471/0x7d0 [ 632.038715][T23067] do_sys_openat2+0x11b/0x1d0 [ 632.043379][T23067] ? __pfx_do_sys_openat2+0x10/0x10 [ 632.048563][T23067] ? __pfx___might_resched+0x10/0x10 [ 632.053833][T23067] __x64_sys_openat+0x174/0x210 [ 632.058669][T23067] ? __pfx___x64_sys_openat+0x10/0x10 [ 632.064030][T23067] do_syscall_64+0xcd/0x490 [ 632.068519][T23067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.074393][T23067] RIP: 0033:0x7fd16d78ebe9 [ 632.078797][T23067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.098384][T23067] RSP: 002b:00007fd16e62c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 632.106775][T23067] RAX: ffffffffffffffda RBX: 00007fd16d9b5fa0 RCX: 00007fd16d78ebe9 [ 632.114725][T23067] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 632.122697][T23067] RBP: 00007fd16d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 632.130646][T23067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.138595][T23067] R13: 00007fd16d9b6038 R14: 00007fd16d9b5fa0 R15: 00007ffdf9837f08 [ 632.146551][T23067] [ 632.149616][T23067] Kernel Offset: disabled [ 632.153945][T23067] Rebooting in 86400 seconds..