last executing test programs: 2m16.84585632s ago: executing program 3 (id=939): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x202000a, 0x8000000003, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x4bc9) (async, rerun: 64) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x1d, 0xffffffffffffffff, 0x8000008000) (async, rerun: 64) socket(0x2, 0x3, 0xa) (async) socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x10000, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) setresuid$auto(0x0, 0x8, 0x0) (async) r2 = setfsuid$auto(0x0) (async) mmap$auto(0x8, 0x400005, 0xe2, 0x9b72, r1, 0x5) r3 = socket(0x11, 0x3, 0x2) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) (async) setuid$auto(r2) (async) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0xc4000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r4) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r4) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) 2m15.925953268s ago: executing program 3 (id=944): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) readahead$auto(r0, 0x4, 0x4) (async) sysfs$auto(0x1003, 0x401, 0x0) (async) unshare$auto(0x40000080) (async) recvmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f00000000c0)="88adeb1cd13ba1a126bf2f6e4f9a750381c27cd9da8c18a0ceb8c085b173c7d0e9b8a4a353c27158c3a1da51da66a91e3c99b27a180e6de3902d3c668697f462928b2d03ea8f1c7baf6a20560bd893feaf30d4b8e2abb92ab0e896f6f5d902735ef19addf6294e23f08a4322f4205a0db8437d2a3c5cb05ae67c1f8c", 0x7, &(0x7f0000000140)={&(0x7f0000000500)="8b28c86ce6f77d57bdb687db5308d9e3f63e95245e9cdf3bd5cc3fb107b229a0134f390d1ca8650fcdc3e9967fcaa017cdc0ff68ccaccb2ca951870338ea836bf4e6c0cf451bb1746c5114da4e5766de33d0ee9dd18c126679ceb92c2e5c47094b3c6518d044b983a47921d40f978dec36ed805e28c882c2237b66fc1bf448e7e7d734c7819a79e968419cbd186d40c3e1b9f7a4d02d69da4405b970aa02daa0", 0x8}, 0x7ff, &(0x7f0000000440)="bbc26a06eb1f37690d03d75e4b27302a7e80010a0fbf988c5610abbe2e3b20dee53eb4611b8779eb56397516bad30c3810cf3ac2e32738eb87e2040f71e7cf46a00f167e87512b1476e6c340318cdb2ae68c7b9fb9435c9d6a414d46b6ea6482a767e9", 0x6, 0x5}, 0x5cc}, 0x6, 0xe9e, &(0x7f00000004c0)={0x7, 0x2}) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7a=v^\x951\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeC\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95\a\xf5e\xfa\x94M\xb8%a\xa53fc\x95\'\xedc\xc5\xad\x7fM\xb4\xf39\x82\xdf8Y)\x8e\xa6\x0e[\xe1\x88\x1d\x0f[j\xe9\x83\x11\x1e\xca2\xba\xdb\xe4\b%\n\xcb\xbar\xf8\x84\xb0\x00$V\xa6`;\xfao\xe6A\x1b\xf2d\xfc\xb4}\xecP\x80h\xfb\x9f3e}\x8edq\x86\x00\xe0bb\x16\xb1kM\xc6GW#-\xf6\x17$BW\x83J\xd7g\xf1\xc0\xbf\x03>\xf2\xeb g\xb7\x14\xc6\xc7\xc9]\xce.\x82Y\x98\tg\v\x11a\v\xb4\xab\x12\xc7', 0x8) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) (async) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) (async) socket(0xa, 0x3, 0x3a) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000010c0)=""/22, 0x16) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_single_file_operations_base(r3, 0x0, 0x0) (async, rerun: 32) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x40001) (rerun: 32) 2m15.794091942s ago: executing program 3 (id=945): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$auto(r0, 0x0, 0x45c) writev$auto(r0, &(0x7f0000000180)={&(0x7f00000002c0)="90abaac403391581d3f1da6225d3aabfa305ad6944be0d223c903049935bb4753e77602f93b09fae05685fefaaa720bc180155bdf0ef974627387b467570f9e01ccaa89f742333b9b7bf2b6c411d0ad63efc3475e4ed2e88d074cd16e7b2e9f02a0e640983dd134dec7c6c1f80a0bb263860ba295b0ae20d9e10d031477b0e28e58b2de06321004fde6104665cd47953fc9f2ce9e24b2bac614077a296486d3d10ec8724a6f7be125a2018a41e511b59a44c0ed3799c7ff74bb330d29b9143", 0x72e2749e}, 0x5) unshare$auto(0x40000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r3, 0x80045105, &(0x7f0000000200)="5719ed914183ffba4ce2eb7d18bf365aa51818da2a40f8cf07b0ea3eeefe03ccb791022d229eca747b8415a44148de5a387b97f30e8a6d797ae7a7be7631383befcf13c327c91a4d0b80012dc3570c5f02ec32980c9f7d1793c5ecec082c73ea5c923d99fa36b361f408d9e70776b351e8e79425b1ebbc60d67a311a74b3bdc4f15e37a2e8394fff0cae2ce750") r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd70007ddbdf250c000000040003800c00018008000100", @ANYRES32=r5, @ANYBLOB="b28105536b9d33621a171931e1b68974c8f14f83174ba0e4f099354472e07739969b91c8fe8d4a9335cc2e1b509d730838d186657e7700667e08519a7c13cc4515"], 0x24}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) 2m14.778954522s ago: executing program 3 (id=950): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x402000, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) (async) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x40001) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) (async) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/irq/8/smp_affinity\x00', 0x2aea02, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0xfffffe36) (async) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000040)=""/9, 0x9) (async) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) ioctl$auto(0x3, 0x541b, 0xffffffffffffffff) (async) bpf$auto(0x40, &(0x7f00000000c0)=@bpf_attr_0={0x0, 0x5, 0x4, 0x4, 0x800, 0xffffffffffffffff, 0x13, "f0f59673e700", 0x0, r6, 0xbffff588, 0x8, 0x2, 0x100000000000200}, 0x7f) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r7, 0x1, &(0x7f00000003c0)="1f985afe540b7757a1e85c4d079bce71db9e41e8deb2cf07fa6ee0f996f20d41e5687d9120b1bf8f342709fb416b3e9cb1c4c82cc98255d49b4e6b567917d0fddb166e9dbfa063f407a9508a09cfac425faa825717037ae525af93669a4051c6c6e03727e83d9337876a16faf4b6cb5adde31f97d93b4241b30507a67625035b37292f0937ffaa6c33") socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth1_to_bridge\x00'}) (async) rename$auto(&(0x7f0000000140)='.\x00', &(0x7f0000000240)='./file0\x00') (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2m13.761805359s ago: executing program 3 (id=953): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000580)="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", 0x392) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000100)="17") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a7f725bd7000fddbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+$', 0x0) r5 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a082, 0x0) write$auto(r5, &(0x7f0000000100)='/dev/cec31\x00', 0x200) r6 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40aa2, 0x0) write$auto_dfs_global_fops_debug(r6, &(0x7f0000000d80)='0', 0x1) r7 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) pread64$auto(r7, &(0x7f0000000000)='\x00\x80_\x93gX\x90\x8cA;O0\x03\xcab\xa6\x8bU/t\xc5', 0xd56c, 0xa84) r8 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000180), r2) bind$auto(r0, &(0x7f0000000280)=@in={0x2, 0x6, @dev={0xac, 0x14, 0x14, 0xa}}, 0x200) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000048eda9bddc460acbe9d78da54a3b93ea088b867716d8b2cf69cc56646e840c3196f2786deacdfcaf64202f444e264ba8eaca652b2e80ca309c1ea223998b9c88c4b4a40d4ef9fffca2981ef12dc", @ANYRES16=r8, @ANYBLOB="000128bd7000ffdbdf25040000000800020001000080"], 0x1c}, 0x1, 0x0, 0x0, 0x10001}, 0x4000010) msgctl$auto(0xeb4, 0x40, &(0x7f0000000400)={{0x126f, 0x0, 0xffffffffffffffff, 0x80000001, 0x1, 0x3, 0x4}, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x7, 0x3, 0x1e1, 0x80000000, 0x10000, 0x1, 0x2, 0x9, 0xc02, @inferred=0xffffffffffffffff, @raw=0x9f8d}) shmctl$auto_IPC_RMID(0x8, 0x0, &(0x7f0000000940)={{0x7, 0xffffffffffffffff, 0x0, 0x200, 0x8, 0x6cd6dd38, 0x8}, 0x81, 0x0, 0x1, 0x80, @raw=0xffffe4ad, @raw=0x640, 0x6, 0x0, &(0x7f0000000480)="4b4c54a285ecc91c5f7ed5a5df7384e77a26b2bf1c16c03e53f9a7ecedfa3994c10e5002da576a4d3b121350a47c02b7df6e7838c63a", &(0x7f00000004c0)="44090150c2b7267f96b73fb67eda270abba59a161708239836e46bd311242f4054f3ecf65d27c78ea39e4a6fd94f0421c07716a84a85205fcfbb2aad5091b31e89cf84e87a19df00c1e08262b5e9e160cb82c6e5655ed592b2b450f27bf54f9f2f95ef8d7b694aab91aff4"}) setresuid$auto(r9, 0xffffffffffffffff, r10) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x80000000, "321b8a964f21b47c830e9fca8ac7d395058a72fc9ab7e397ed0c589cd33781e3", @inferred=r1}) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r11, 0xc0385720, &(0x7f0000000340)={0x4, "1c95c0db", 0x6, 0x9, 0x1, 0x6, "0aec0062914b678265f4d287aec10760"}) 2m13.142963666s ago: executing program 3 (id=958): r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) shutdown$auto(0x200000003, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) accept$auto(r2, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) fcntl$auto(0x3, 0x4, 0xa553) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40000, 0x0) socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) (async) shutdown$auto(0x200000003, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) (async) read$auto(r2, 0x0, 0x20) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) (async) accept$auto(r2, 0x0, 0x0) (async) connect$auto(0x3, 0x0, 0x54) (async) fcntl$auto(0x3, 0x4, 0xa553) (async) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) (async) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) 1m58.014024088s ago: executing program 32 (id=958): r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) shutdown$auto(0x200000003, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) accept$auto(r2, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) fcntl$auto(0x3, 0x4, 0xa553) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40000, 0x0) socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) (async) shutdown$auto(0x200000003, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) (async) read$auto(r2, 0x0, 0x20) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) (async) accept$auto(r2, 0x0, 0x0) (async) connect$auto(0x3, 0x0, 0x54) (async) fcntl$auto(0x3, 0x4, 0xa553) (async) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) (async) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) 1m35.609557546s ago: executing program 0 (id=1092): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0b02, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x48802, 0x0) read$auto(r1, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0xa, 0x64, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000100)='7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00,X\xb9\x0eQ\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xca\x03\xe4\x15\v]\x00\x00\x00\x11\x00'/67, 0x2) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x8, 0x3) 1m34.716398924s ago: executing program 0 (id=1095): lsm_get_self_attr$auto(0x64, &(0x7f0000001400)={0x10, 0x1, 0x7fffffffffffffff}, &(0x7f0000002440)=0x1fb, 0x0) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x9, 0x1, 0x5, 0x87f, [0x7, 0x4, 0x3, 0x7, 0x1, 0x100000001]}) recvmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000080)="7a4d93bf20ce8ce5b8e7f7822560e87511e4f40ac90cf86905b8ac31b1802e1a384c3a2fc17b35294493dcccc5653f4810ce92d7955018e0d5ae18d9861743f98cb6beafabd64e4272b1143cf13f9728aa09d72ea1b0d31e3b7c76b55e1bf2284828c03f727bd8c6e9aa341bb1e75bf6661af37772a7dbdef6129e69e17b3ba31b2f7c02b08ec55a662c6a775fd5e3026be9389dfffbb259f67b2a85ddc6cd83d77c749d5f488d0b59fb6fdd32bf7ef820182262383002e2f25f5ee6473dad28d4074471c0a871", 0xc, &(0x7f0000000280)={&(0x7f0000000180)="a6a728e9fb9c1d9fa879f7fe9ef3d71d9ea0712344c92eaf8bd76d082d098f9b0a05d2cdd20879dcd8b94587e8a6c3c404dbb7862d1fab41946c13d0567a9b613b9ca090d65909f4b84c4f3279f086109a68834a9eaf050df80ce2c0f2ab5439c1ae7b85f9e11a3b7fceeb9727e171fdc77e0f8506cfd02c05de72bf0aa1a822ba47d30277a125422948d5de8c5dda291d07345fddf7e04945d94fb7f2c2d94c770cd139295befc15fa864f58ca5cfbe933a571cef343f97025fd141b0f412c76ea4c8fb7f327b1242016872976392", 0x3}, 0x7, &(0x7f00000002c0)="e684d7cdb14f05ea3cba22dea9f5cda3c459b97487954d57d2be18aa16abec3d8535462f42e707277283b943d97dc763b60af5b666f2722426a9d1", 0x3, 0x9}, 0x9}, 0xc343, 0x5, &(0x7f0000000340)={0x80000001, 0xa}) 1m34.608817824s ago: executing program 0 (id=1097): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x88c00, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r1, 0x40044145, &(0x7f0000000000)=0x3) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), r2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x29d, 0x7, @old_map_fd=0x6}, 0xa3) r3 = openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim4/psample/latency_max\x00', 0x2, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@test={r3, 0xfffffc00, 0x46ad, 0x1bb3, 0x81, 0x41, 0x4, 0x8, 0x8, 0xffff, 0x65, 0xffffffffffffffff, 0xc15, 0x6, 0x4}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x4, 0x0, 0x3}, 0x4) 1m33.572335216s ago: executing program 0 (id=1100): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = getpid() r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/target/dbroot\x00', 0x40040, 0x0) read$auto_configfs_file_operations_configfs_internal(r2, &(0x7f0000000200)=""/24, 0x18) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x4100, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xffe}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000280)="0aacb0f22bc80c71d52919ebbb6601b53605c1bd20ca4079a0990273b74378d8e347edfa41d9b38c3784c7573b0741b3e089f6d4d3a70bd21bd1aa45908b4a182b3ad58f166e5029766a40fc913f5490eb4ad9cc2d0e8f701693580b9e70fc2d590dccefb0e59f6ced979423d2229de9b73d08553f8dcb2161124f16f1f130a958c8ef1c4898ca18539ebc27242c62cf1f558f937e5045b30561d579634c", 0x6bf7f181) ioctl$auto(0x3, 0x400454ca, 0x38) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec30\x00', 0x688402, 0x0) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r3, 0x805c6103, &(0x7f00000000c0)={"13dbeca7", 0xa, 0x8, 0x0, 0x200, 0x6, "6331de032a2de0ab12a69d1e7c6af6", "c85f1fc0", "ac286c1a", "4521659d", ["7c34aafb07f28971ac0ce672", "c7b14e08bfe18032fca29c8c", "09f1b7908aa042be6177e5cb", "bde796635aad37a9a7c3333c"]}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/bInterfaceProtocol\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001c00)=""/4111, 0x100f) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1c, r7, 0xb81, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) ioctl$auto_VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) r8 = socket(0xa, 0x2, 0x0) setsockopt$auto(r8, 0x29, 0x18, 0x0, 0x1) tkill$auto(r5, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/fail-nth\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m33.133158472s ago: executing program 0 (id=1101): r0 = open(&(0x7f0000000040)='./file0\x00', 0x608d83, 0x120) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000440)="0db1eb") ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000080), r0) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVL={0x34, 0x7, 0x0, 0x1, [@nested={0x18, 0xa4, 0x0, 0x1, [@generic, @generic="8f261d46cc3652287f041e450309f61c2dedffb6"]}, @typed={0xc, 0xdb, 0x0, 0x0, @u64=0x6}, @typed={0xc, 0xc5, 0x0, 0x0, @u64=0x8}]}, @NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0xf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4ac2}, @NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008084}, 0x8050) io_uring_register$auto_IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000001c0)="45148fb328bc72a7ec41165e08d9180cf2dd100ad905f639c9d50831150b8aab56ab9e60692e17c30d04686906c05f1c35c97f434db7eae533c332881a24ef9fd4", 0xfffffffd) mount$auto(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x9f1e, 0x0) 1m32.824357119s ago: executing program 0 (id=1104): mmap$auto(0x0, 0xd2, 0xfffffffffffffffe, 0x15, 0x401, 0x8000) mmap$auto(0x1, 0x200000000002004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f00000000c0)=@phonet={0x23, 0x1d, 0x0, 0xfb}, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000000280)={0x4, 0x6, 0xa, @state_change={0x200, 0x9, 0x3}}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)="adfde4867180163e6cbef783718e40a50bc2f7e69b8fcc92bde08fc48cf64e8a54d2486a00bc52a6dee1bf860ec85c352ddf0e25b52152fec6e95de340692229418d661df4854346c11ef0f3464e7ecec51b42fe75356fe54aead9ddc7a34d352672eb46ae90194d4777c466561c8bcb982a00593e28e90361f5ba9dc7790909c9e30defba391ddffc7ecb9103471508369c8ec4bdbf2817748a6bf1fc520bfa20b857715ff1a92836983b") openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20402, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x0, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x40004, 0x3, 0x2, &(0x7f0000000040)=0x10) r4 = socket(0x26, 0x80000, 0x7f) ioctl$auto(r2, 0x8e06, r4) select$auto(0xb, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0x7, 0x6d3c, 0x7, 0x2, 0x7]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x8000000000003, 0xd, 0x1, 0x948b, 0x0, 0x6, 0x41000000003, 0x9, 0x62, 0x80000017, 0x7, 0x6d3e, 0x9, 0x5, 0x200]}, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x101, 0x6}) socket(0x27, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) symlink$auto(&(0x7f0000000300)='\\\':.\x00', &(0x7f0000000100)='\xfb\x00') r5 = socket(0x2, 0x801, 0x84) getsockopt$auto(r5, 0x84, 0x2, 0x0, 0x0) 1m17.787139854s ago: executing program 33 (id=1104): mmap$auto(0x0, 0xd2, 0xfffffffffffffffe, 0x15, 0x401, 0x8000) mmap$auto(0x1, 0x200000000002004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f00000000c0)=@phonet={0x23, 0x1d, 0x0, 0xfb}, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000000280)={0x4, 0x6, 0xa, @state_change={0x200, 0x9, 0x3}}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)="adfde4867180163e6cbef783718e40a50bc2f7e69b8fcc92bde08fc48cf64e8a54d2486a00bc52a6dee1bf860ec85c352ddf0e25b52152fec6e95de340692229418d661df4854346c11ef0f3464e7ecec51b42fe75356fe54aead9ddc7a34d352672eb46ae90194d4777c466561c8bcb982a00593e28e90361f5ba9dc7790909c9e30defba391ddffc7ecb9103471508369c8ec4bdbf2817748a6bf1fc520bfa20b857715ff1a92836983b") openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20402, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x0, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x40004, 0x3, 0x2, &(0x7f0000000040)=0x10) r4 = socket(0x26, 0x80000, 0x7f) ioctl$auto(r2, 0x8e06, r4) select$auto(0xb, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0x7, 0x6d3c, 0x7, 0x2, 0x7]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x8000000000003, 0xd, 0x1, 0x948b, 0x0, 0x6, 0x41000000003, 0x9, 0x62, 0x80000017, 0x7, 0x6d3e, 0x9, 0x5, 0x200]}, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x101, 0x6}) socket(0x27, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) symlink$auto(&(0x7f0000000300)='\\\':.\x00', &(0x7f0000000100)='\xfb\x00') r5 = socket(0x2, 0x801, 0x84) getsockopt$auto(r5, 0x84, 0x2, 0x0, 0x0) 7.334342663s ago: executing program 2 (id=1393): mmap$auto(0xc, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbf9, {0x1, 0x0, 0xff0f}}, 0xfffffccd}}, 0x40010) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x541c, r2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/softnet_stat\x00', 0x8340, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000001700)=""/4096, 0x1000) clock_nanosleep$auto(0x8000a, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x0, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 5.202956561s ago: executing program 5 (id=1403): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x11, 0x2, 0x7ffe) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x200, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x200, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x460400, 0x0) (async) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x460400, 0x0) epoll_create$auto(0x3e) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x6) socketpair$auto(0x9, 0x2, 0xb, 0x0) (async) socketpair$auto(0x9, 0x2, 0xb, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x80047437, 0x0) (async) ioctl$auto_TCFLSH2(r0, 0x80047437, 0x0) mmap$auto(0x1, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x1, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) (async) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) (async) mincore$auto(0x1000, 0x8001, 0x0) socket(0x11, 0x80003, 0x300) (async) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r3 = open$auto(&(0x7f00000000c0)='./file0\x00', 0x7ff, 0x8) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/fail-nth\x00', 0x20a02, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0xfffffffffffffffd) 4.881783732s ago: executing program 5 (id=1406): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000280)={0x4, 0x80003, 0xa, @state_change={0x200, 0x9, 0x3}}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1495fdff"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) mmap$auto(0x4, 0x0, 0x9, 0x15, 0xffffffffffffffff, 0xce9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x4f, 0x400, 0x10, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x8200000001, 0x0, 0x801, 0x0) stat$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x7, 0xbf82, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x3, 0xfffffffffffffffa, 0x5, 0x37ff, 0x2, 0x20d, 0x0, 0xffffffffffffffff}) setresuid$auto(r0, 0x0, r0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x4, 0x9, 0x1c) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x7, 0x19) rmdir$auto(&(0x7f0000000040)='./file0\x00') mmap$auto(0x0, 0x20009, 0x1, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 4.654287448s ago: executing program 2 (id=1407): sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="9bff29bd7000fbdbdf250100"], 0x14}}, 0x0) io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0)="1e1d462f96deec369d7de6c7bd60ac818751006b1ef5a3036c2a6dcbdb00bcb087203d725e9a2a5946bfa84f27e21abcb5158d812b1d951dad04a1313272d5ba83e145f9e7834c3bfc68abb107f7e20fc90a2b64451b2ffc4ce17d64c5b5c6a6746105d1f5fc16470834ac3b0353f7abbf3da07d6358832a2cdcf8ab4671b14efc4c00172c8388816b8470759df9a57247d76aab40a60a3732694fed180ecfb910b347f22ef162ddad3cd622", 0x5) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r0, 0x4c82, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x7f, 0x0, [{0x48b, 0x80400, 0x100000000}]}) sendfile$auto(0x1, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9) write$auto(0x6, 0x0, 0x100000001) prctl$auto(0x43, 0x17, 0x0, 0x400000000000000, 0x0) 3.310818523s ago: executing program 2 (id=1410): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x81fe, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x2000000003}, 0x6f4) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = getpid() pidfd_open$auto(r1, 0x8001) socket(0xa, 0x801, 0x84) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000800"/17, 0x11) 2.934154361s ago: executing program 4 (id=1413): socket(0x2, 0x3, 0x2) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto(r0, 0x542e, r0) r1 = waitid$auto(0x8c65, 0xffffffffffffffff, 0x0, 0x4, 0x0) read$auto_fops_u16_(0xffffffffffffffff, 0x0, 0x0) mq_open$auto(0x0, 0x62, 0xfffc, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) timer_create$auto_CLOCK_BOOTTIME_ALARM(0x9, &(0x7f0000000100)={@sival_int=0xd3, @inferred=r0, 0xe5, @_tid=r1}, 0x0) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) 2.652042906s ago: executing program 2 (id=1415): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/blank\x00', 0xa001, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sockstat6\x00', 0x40, 0x0) pread64$auto(r1, 0x0, 0x200000000009, 0xfc) unshare$auto(0x40000080) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161340, 0x130) open(&(0x7f0000000100)='./file0\x00', 0x40801, 0x175) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/loop4/size\x00', 0x40000, 0x0) finit_module$auto(r4, 0x0, 0x3) ptrace$auto(0xd, r3, 0x4, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000140)={0xa0000, 0xfffffffffffffffc, 0x98, 0x4, 0x4, 0x6, 0x3ff, 0x8000, 0x2b0e, 0x6, 0x9, 0xffff, 0x3, 0x9, 0x6ff5}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)) mmap$auto(0x0, 0x80003, 0xffd, 0x8000000008012, 0x3, 0x0) r6 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/prev\x00', 0x1, 0x0) pwrite64$auto(r6, 0x0, 0xd12, 0x4000005) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000100)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(r0, r0, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) 2.546764533s ago: executing program 5 (id=1416): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x7) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x40801, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x1, 0x1, 0x0, 0x3, 0x15f4da07, 0x3, 0x5, 0x65, 0x8000001f, 0x1000, 0x8000000000006d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x60d80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/2/hwirq\x00', 0x0, 0x0) unshare$auto(0x200) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f00000002c0)={r2, &(0x7f0000000540)="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"/310, 0x7, 0x0, 0x6, &(0x7f0000000200)="eb2cbf355668ad148ef23e702d7489c05d6d4b143395d46060935ca06b93e8aa77ff044458f3919372d3d508c692999cbf54934b6651f7adf7c4dfdf177b5810ebbfdeac4006fe24551b050000", &(0x7f0000000280)=0xffff}) ioctl$auto_NS_GET_MNTNS_ID(r3, 0x8008b705, &(0x7f0000000000)=0xca6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) fchown$auto(r4, 0x0, 0xffffffffffffffff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r5, 0x0, 0x20) 2.543531376s ago: executing program 1 (id=1417): mmap$auto(0x0, 0x4, 0x4000000000df, 0x7fffffffffffffff, 0x403, 0x4) (async) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=ANY=[@ANYBLOB="88120000", @ANYRES16=0x0, @ANYBLOB="010025bd700002dcdf2503000000050009000500000004000600040006003d1202805000a500c667d9d0cca65d36490648637f04abd8489cc9506022c8fdacd8c22e41b7d2fa985dddd4b2a5bc76074abe9f0f7649f33e5d77a8ea4c3b443b183ae146e3f9ca235415abb72b1863c0166ebb22114580bbb94c93b312191f84de52174ef5b9d6d59c8cc74f0058dded57a7a541a3008eb7fd96705f9056abb12127a7a862b213720a9138cc5e515206c2c67d96a85f4ed00755cfe9337a385153519e144b6a1b58dac5d963d89bb2577d048c71bc80aac3c8f21168defd407d32a5321443eeff8e5942c2f43bc93e0a8cb1dd317a9e8b1666edf829be42389b40da3cdd62d74927de8a89201eddd9a799cacaf4d1f69a7427eed9b3e7fc5555965125c44ee35d835ee3e1c3db437900c59e9531f473c9a25420a693b5a0a4230bdd74b2a3d9958215efa47728727a4b736b4f44b20800", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c00028008001000e600000008000a00c066ffff05", @ANYRESDEC=r1], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x40800) (async, rerun: 64) syz_genetlink_get_family_id$auto_macsec(0x0, r0) (async, rerun: 64) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4db0a, 0x3, 0x3, 0x62, 0x1080000001, 0x9, 0x1, 0x2, 0x1, 0xfffffffffffffffc]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub4/info\x00', 0x5b5f03, 0x0) pread64$auto(r4, 0x0, 0x594c, 0x9fffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r4) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/lowpan0/netdev_group\x00', 0x143262, 0x0) write$auto(r6, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000500", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 32) ioperm$auto(0x7, 0x6, 0x2) (rerun: 32) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) (async) gettid() kexec_load$auto(0x5, 0x2, 0x0, 0x4) kill$auto(0x0, 0x11) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x0, 0xa, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x1ff, 0x900, 0x80, 0x102, 0x6, 0x6}, {0x100, 0x1, 0x55, 0x5, 0x6, 0x40, 0x876c5, 0x8, 0xfffffffc}}) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14) (async, rerun: 32) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="d7de420c970c585aca18ca1c5630000000", @ANYRES8=0x0, @ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2.413480663s ago: executing program 1 (id=1418): socket(0x2, 0x3, 0x2) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto(r0, 0x542e, r0) r1 = waitid$auto(0xfffffff8, 0xffffffffffffffff, 0x0, 0x4, 0x0) read$auto_fops_u16_(0xffffffffffffffff, 0x0, 0x0) timer_create$auto_CLOCK_BOOTTIME_ALARM(0x9, &(0x7f0000000100)={@sival_int=0xd3, @inferred=r0, 0xe5, @_tid=r1}, 0x0) setsockopt$auto(0x3, 0xffa4, 0xc8, 0xfffffffffffffffc, 0x4) 2.174674264s ago: executing program 1 (id=1419): r0 = syz_clone(0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(r0, r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket(0x2, 0x2, 0x0) (async, rerun: 32) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) (rerun: 32) sendfile$auto(r2, r2, 0x0, 0x7fffe000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r3 = socket(0x2, 0x3, 0xa) (async, rerun: 64) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 64) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYRESHEX=r4], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000001340)="4b90826bbc762bb1682c8f87d33de5e09bab36a08eba0724080fd4f3b3f22a7f998139f01974b750cd8b7475252fbf7e22b341a813d898f04679aa9689173d8455147450f2aaa52d971b845ae62deb5eb9fd76966978295ff2e3cc882168fd45f3eeb49671c6e91424a0dbd695786b9e4e1e32f3cdb18f469da2032d09318de9e52281ddd3bc29348f5c2e15c65ca671054f45e548e1c8382848ebf14b3b3da32f8b0dbf697a6b5be2ab75214251418f714e8fe40ae5604c4baaf080f77b9b5dfea2c449297d6f670915060af01c0fb3cf8ccf7984d957634622ce92191bd05841a022400b2e135b39e28d0f", 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) mmap$auto(0x0, 0xe983, 0x400000000000003, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) preadv2$auto(r1, &(0x7f0000000200)={&(0x7f0000001440)="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", 0xfffffffffffffffd}, 0x3, 0x8, 0x600000000, 0x9) (async) setsockopt$auto(r3, 0x8, 0x0, &(0x7f0000000180)='SMC_GEN_NETLINK\x00', 0x4) (async) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000002c0), r3) sendmsg$auto_IPVS_CMD_GET_DEST(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x69c, r6, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x28a, 0x1, 0x0, 0x1, [@typed={0x14, 0xa2, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@empty}, @generic="337254d130ac8527a2473b787af9c35166e19dd01679d6c98dfc5707d98cc14de4ce32cb20400935da6ce4c762caedd02e4571053fdc598a395616a6302f488caa53a8284403bdbd713efedf4c8fa4c3431eb22866f584dc4868559b38caeace1237216517d9869ff6c651c6fd20a11084f5487d9233ce3ee7535bcc57e027132945ae91ec34b8b07e", @typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@broadcast}, @generic="0e5de7be965c6fc381315f931889f532d06d6cdd890dcd5d31cd3725baee08c677b1c1b8ee7e2b2b630c1e74c6076b7c3f9d25e10a51dff90c28029bcfdd19dc51e35b7d66cd8295a0b6543b952b4c49759d9d31e4f682c328088d6a8ca8778679a83903828a5d0536388b67dddf7fcaca9f32f85abe6526f13d875bdc21c995da72d30bf2ffd21bb5ad036b632f95a721cf9d7a48e4bad5a81db1bfda725b6b87782857814c03a60d9eeaed090258d9244403bcb7c435b72b0a384eca46ed465c24ac9772dada93ce7a8fdc50d16ca0aff66a15351dfee2992848c3b9385f39d5373e4eb9bc371a1523", @typed={0x8, 0xa8, 0x0, 0x0, @u32=0x1310}, @generic="33f4b233b04dd9027a4201402d0f9473f523ed5d4698be065585288d0022025d7a730ae242f51b3aea46c53957396e02608d0768b72a614b62c9143901698a4de851ceb978e2ff4118e0afce8dbdc699e34e255dd930116846bcc8cab6c5c89d90393858122b5b72ece6fae782d929ffa3ea7d1ea7cc81a6d188a1cc3537ce2accb01c2b96fecb5ef79f181200a7a112f258adc06760270550e47c6f0102b945f42a82a0b0e0b79c8817e51f5c9375fc15a8d02636f08683fbd2f1396ff868595599a46e4e692980dc68fb4f6d8f8d989d2790362c40746b4ba556"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x140, 0x2, 0x0, 0x1, [@nested={0x65, 0x53, 0x0, 0x1, [@typed={0xc, 0x21, 0x0, 0x0, @u64=0x3ff}, @generic="66b354732828e91dbb808357f7f46b8b2ae138861c7677e90f2eedd82b58cfe06b6d5faf2cf7e953237793acf3c6ea64b87c7a93783f8ccacfb76d2f7ce06f10dd", @typed={0x8, 0x48, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xd7}, @nested={0x4, 0x60}, @nested={0x4, 0x127}]}, @generic="02aef98aeab89169a9490bd8a01b98900d4974d5f30cd702fc25a227cdf9c77c31ef518bfd9059262f5608177c40e510c8b877a05777d8210464d8e9440714c05ca6d53cae0098322d2b6c2911ead9b2710439989b51b058099440a6b1dbb889c4e4480160a490276252e1ee78d6aed5ebcebcc83a8045285ccc1200628ccedb5f2ef5b1ce117fed1d4c99044a7432846c5b1d71c3042df3b996ad4b0f8f30fa41b9854d96b42e5b5eeac56ffa687bb2a427cb6ce2fe444becbbc58117a325a5bee8022e27a1dc33cbc708e92d9be1e96efca90d"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x2a2, 0x3, 0x0, 0x1, [@typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x119, 0x0, 0x0, @u32=0x3}, @generic="47e0ffe4ada886fd88fad17ee2d95de02b3b1dfceb78c0fa20d4ab563b6a30d19176d3c2bd44da907ade24e33faea99509eeb6ea6e4bb5b6ff6068705e3809afc68e81153090af313330bf4bd62a01fc4236cfd5e0997eb6dafaad12fb9a8ca6e7a9d263644c6edbee07609e9d50f3cb8a6c855af4b951508ec379e63e5c531dd6ee8801bd6402e6d93d83af887a71ee37f3a3f2c776e1a6230dd31d001c666bf365c476c65ca99b4223c02e28788b8067d1461eeabd4564879e5f30baa0bea24c9ec4d26926a03cb5cf6c917480a7e813f78ebc2cc8bb82bf31278f12afb063e29bbcf183b9a44530458a", @generic="b506e2dd6125167024daae151d730ed89b84bf4979351d3fbf1d014afcc0cd2455d3183ec95207243b32f04fe535365e53f0586bc8e7cba3e6ef770144bc338a68fdbb10327f9341b43f9e5c5b45dfa2549b4da40a6441e7f74ad75ac2d96cbc7fc7ac4ec1b5904bd6b5e7772852e37dff03aa3cc1ba8d710227ffe5d24e2e932a99ef5b7ec5703c4e6a00902f2e9764cc25bb", @typed={0x5, 0x86, 0x0, 0x0, @str='\x00'}, @generic="799685074ab226c8b69c3bce950d2f52f25fa90fd28f37e508d9ced7702cfd5fc876b4b22f82c97109e0025064afd3a6c37ae4a7b6688cd7076975aa710867ff52af4ffc08c7cfcf1d435b071709a95dcdacb5d8cf5936720444331dbeff0c7ff6b0ad5edcde9199e6b58df6bf682af7da44cb82c4738417dc898a40ab8ab55b33628aabd8c7cb1464f2ca14bb1a6df1f4e35706f9f83913d11848c2ed027953073150eaa28c1f231dc6441d75c36b231f16f8d5f1854053a8dd44279d99b31b3687bee878b7bb79cf90a8c6a7ac326f5e16485fb0b9f60b2c405e2b3fc739", @nested={0x14, 0x5b, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @pid=r0}, @generic, @typed={0x8, 0xd5, 0x0, 0x0, @pid=r0}]}, @generic="fdfdf3b7997d0564e2"]}]}, 0x69c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000012c0)={"ef65ce168d6c0000000b00002709fa00000000ffffffffffffff2900", 0x3ff, 0x418, 0x4, 0x7ff, 0x200000000040000d}) (async) close_range$auto(r4, r2, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = socket(0x11, 0x80003, 0x300) (async) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r8, 0x107, 0x14, 0x0, 0x4) (async) syz_genetlink_get_family_id$auto_seg6(&(0x7f00000000c0), r1) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x1a000}}, 0x22) 1.982550817s ago: executing program 4 (id=1420): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000080)="c2", 0x1) (async) mmap$auto(0x0, 0x6, 0xdb, 0x9b72, 0x2, 0x8003) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x1a, 0x3, 0x0, 0x1, 0x7) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x4000000000000005, 0x2020009, 0x5, 0xf8, r2, 0x101) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) ioctl$auto(0xffffffffffffffff, 0x8001, r3) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x5, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x1ff, 0x80000000, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xffffffffffffffff, 0x8, 0x10007, 0x2000080, 0x4, 0x3, 0xa, 0xffffffff, 0x7, 0x0, 0x84, 0x0, 0xfff, 0x0, 0x0, 0x2, [0x9a8, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffc, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0xd) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptypc\x00', 0x2d8340, 0x0) readv$auto(r5, 0x0, 0x3) (async, rerun: 32) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) (async, rerun: 32) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/general_profit\x00', 0xa800, 0x0) (async) fadvise64$auto_POSIX_FADV_NOREUSE(r1, 0x8, 0xd680000000000000, 0x5) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd03, &(0x7f00000001c0)) 1.769808492s ago: executing program 1 (id=1421): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) rseq$auto(0x0, 0x8000, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x55) read$auto(0x3, 0x0, 0x7f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x11, 0x0, 0x1, [@typed={0x6, 0xc4, 0x0, 0x0, @str='@\x00'}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x5eb4862d, 0x26, 0x7b64e722}) read$auto_drm_edid_fops_drm_debugfs(r3, &(0x7f0000000100)=""/147, 0x93) madvise$auto(0x0, 0x454, 0x9) 1.706358439s ago: executing program 4 (id=1422): r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) setsockopt$auto(r0, 0xc, 0xd, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2d, 0x2, 0x0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r3, &(0x7f0000000240)={&(0x7f0000000340)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={0x0}}, 0x24040804) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0xef}, @ETHTOOL_A_WOL_HEADER={0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x3, 0x3a) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) socket(0x29, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002e80)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8050}, 0x4000080) r6 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(r6, 0x6, 0x12, 0x0, 0x40) open(0x0, 0x80842, 0x91) 1.595297927s ago: executing program 1 (id=1423): r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) fcntl$auto_F_GETOWN_EX(r0, 0x10, 0xcd7b) (async) r1 = bpf$auto(0x3, &(0x7f0000000040)=@bpf_attr_1={r0, 0x8, @next_key=0x5, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) r4 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000140), 0x169400, 0x0) (async) r5 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, &(0x7f0000000180)=0x4) r6 = bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x2748, 0x401, 0x2, 0x8, r2, 0x80000000, "5792c7f29108f8a1b19e896d7ddb6daa", r3, r4, 0x3000000, 0x2, 0xf, 0x1, r5, r0}, 0x7a38) r10 = syz_clone(0x40000000, &(0x7f0000000280)="95c32a28f23dd3f7faf96100fa351bdebddc488022291e8a1d8f3545a4065c86c796f48319c510e793fc4a1af119ebc14f359c66244af5bc81520bbab9238a3e59714c65ace960de34c97a86d6fa711fb73137efb634b066d15a4dd96b3fda38e1f36efc9957bd0e256d08c10e07b77402a80041bcccf6b493740bcf2ed623dcc14094812522d0bf026a0cc72dc3ddbf621faf5ac0e270b503265cff92ec1257b778ef9b960bd21f7d767c85", 0xac, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="8a62cf144cf0e4b91d64dff5801d846f9f1c147d30e0f4e078268a920ab90e693a5250054ebe2f5e57a76eab50c5eabf2a497373d7ec6cf7ce409917090f8a83e37d862d9cf0945078276e88673474ce1e8919ac72d4d983a99488c08a5388bf48d644c2a3ae90ab3abaa5cd") rt_sigqueueinfo$auto_SIGCONT(r10, 0x12, &(0x7f0000000500)={@siginfo_0_0={0x9, 0xffffff9d, 0x66d, @_sigsys={&(0x7f0000000440)="40c4578dbe5af8b948931107ae52c38592d52f0fb6843554c42b40c5bbf07ac5e9fdf79aadab04e19f23ed707abe3c0fc167b215976ba8af6bbee32c88fad2998003d7db43312b0749fb055dbdf4c87329fd25f21266e79005d651fff13874183116aa1ce9e3fb3b0e7f943df9bc8d8077e84999c3c1c887fcca735fd870d2a5fb76abcd269fd4b374e3075fe547857257fec348cbe52dc58a6083c513d4671d2d5ccce2f107647e06e60a60afae53c187f11e9affb3", 0x0, 0x8}}}) (async) mbind$auto(0xfffffffffffff801, 0x80, 0x9, &(0x7f0000000580)=0x6, 0x7, 0x1) (async) r11 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000600), r8) sendmsg$auto_NETDEV_CMD_NAPI_GET(r9, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r11, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETDEV_A_NAPI_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sg0\x00', 0x101000, 0x0) (async) bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f0000000740)=@iter_create={r9, 0x1}, 0x2) r12 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000840), r9) (async) shmctl$auto_SHM_INFO(0x6, 0xe, &(0x7f0000000900)={{0x9, 0xee00, 0xee01, 0x509e17f3, 0x2b3, 0x10001, 0x2}, 0x2, 0x4, 0x8000000000000000, 0x7, @inferred, @raw, 0x3, 0x0, &(0x7f0000000880)="2a9a810c683da79010e6a79ffc96cfcb5876d814f950014b4ffb720362c444f93d5fdaf88f89f1125707f5a0", &(0x7f00000008c0)="9e434a0e37c6f8554e8afb54ddee581f2bfb482592dddc7ce7d875ed32559680562bcda9b6cada4c802d57af3c6b9729b0ad76aa8027b8cfa0810739d9"}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r8, &(0x7f0000001e00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000980)={0x1440, r12, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0x1df, 0x2, 0x0, 0x1, [@nested={0x1c, 0x13e, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0xa4, 0x0, 0x0, @pid=r10}]}, @generic="8be5506aee93a68618af4d3d09241cbf597ca8270f7c3c25878a278995fa730376f311afe6c944c73faa170243f95c1c7b63b98c8696fcbc3e7d142aaca9b42ed2bc5ab0ce2edd1b886d7e4d9e9db2856fdade518eeb195abc440d662ebd5c25aa588bb9d3e98d6b4f9dc03173b483a89e748ef25385c55d998a8f89a2742aa7b25b482ed4ec8577fca5530290bc073a69c2545b01f6552d1e176ad80411f98dbda9abe898f4", @typed={0xc, 0x104, 0x0, 0x0, @u64=0x4}, @nested={0x38, 0x114, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@multicast2}, @generic="3ae5de4a01f0f7d87147a3a4279a2d508efea39e3b2c1ada3a6714fccead2ca098094819eaf344a7ef0443e6"]}, @generic="b906c08642ffed52ee9c7931e0c616bbba455acc24314469096344cbd4a7ea584822534c15870d5a0d476b94216e7bc8ba4c2bbeb1fe0ca4a80a6f3deaaaab2095af05a51972de639903736a8b71e0d8c2adfc3b15d35511064b7479867c9832562011a7bcf35c01535c56e218ca6a8f702819178e69884271b702d353b643bffe58b29aecc5caf9597a0b94eaddf4e765697166c66a86783b4ec94228d1ecf37e256c66bc0e88b7e87995cde80cb579f04bfe1cbe56f75ff9cf957eb5af5362a7a6c4d64ed8fa6457ac64172680ae263f2d1f3d58"]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x11fc, 0x2, 0x0, 0x1, [@nested={0x192, 0xad, 0x0, 0x1, [@generic="0223ac41c7bd3a0313cf06fc70bf45475e0afcb36be12c263cea0ca0b8d4e0a172deb57a2b595fbbc5d71fbd5632c8e876ab5421c2a6a294ea612f90a2f436380e16f4c930689735e03822ace43657357caad1b3a342f5820eceb2b77282531a774836b4b27aa56f269ff01795f53b1e0c88090a25e8c4d47905865eda5d4a781ef872d05fc71da095f8d458ddab383151edcf05ca506791ff93af56afd33019d262e45fed1bbc60d94c3f7b3cd6c7c5986e7f272c376644b80cd202eed6efb4650739feab28a894b6bd064d3a6979cdeacbe5dc93d12186bbf642e440e8be4e320b7a", @typed={0x8, 0x136, 0x0, 0x0, @ipv4=@local}, @generic="0c0a08ac46fb6c349d3bd2723fe84655fbea01c99419e9183b2a54d71ee8131d39fe706923", @nested={0x4, 0xc4}, @generic="87b08796e7e32c3c092ffa3c1190392c238d889fb9282e4ca3ca8f2ed7dfb6c23031cfcfd0407a9292eb0ea955b998f1ca95e7c3dedcc0e71050316fe3bece81506e951a1716cba166c6fa0a7c8b1c513c61c2eafc58f6d71b383b0c5f76a68456c98aea35c0ccb9a7827bbd8801d6152a9bc48bee41f6ab2ac0"]}, @nested={0x18, 0x142, 0x0, 0x1, [@typed={0x8, 0x11b, 0x0, 0x0, @uid=r13}, @typed={0x9, 0xd8, 0x0, 0x0, @str='9[,-\x00'}]}, @generic="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", @typed={0x8, 0x10d, 0x0, 0x0, @fd=r0}, @nested={0x44, 0xc2, 0x0, 0x1, [@typed={0x4, 0xad}, @typed={0x3c, 0xce, 0x0, 0x0, @binary="687d91d23f2654de1d3c6af413aa632046b3e9e84426a05a84637bfd4ec96e3d2385966e09f6e6a8ce7cea6ad0102b13b71f8af13c806a4b"}]}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x1440}, 0x1, 0x0, 0x0, 0x4801}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/null_blk/parameters/gb\x00', 0x0, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x20, r12, 0x2, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) (async) fcntl$auto_F_SETOWN_EX(r1, 0xf, 0x3) (async) fsync$auto(r0) (async) r15 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000001f80)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x4200, 0x0) ioctl$auto_BTRFS_IOC_TREE_SEARCH(r15, 0xd0009411, &(0x7f0000001fc0)={{0x100000001, 0x5, 0xfffffffffffffff8, 0x7fff, 0x8000000000000001, 0x5, 0x9, 0x7f, 0x4ea7506a, 0x7ff}, "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"}) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000002fc0)='/proc/self/oom_adj\x00', 0x202140, 0x0) (async) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000030c0)={&(0x7f0000003040)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x3}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0xf8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xeb}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x4}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000801) (async) r16 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000003180), r6) sendmsg$auto_NET_SHAPER_CMD_GROUP(r15, &(0x7f0000003280)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x48242084}, 0xc, &(0x7f0000003240)={&(0x7f00000031c0)={0x44, r16, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NET_SHAPER_A_HANDLE={0x1c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x9}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x6}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}, @NET_SHAPER_A_BW_MIN={0xc, 0x3, 0x400}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x48090) (async) r17 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000003300), r5) sendmsg$auto_GTP_CMD_GETPDP(r2, &(0x7f0000003400)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003340)={0x4c, r17, 0x10, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0xa01}, @GTPA_TID={0xc}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1e0}, @GTPA_FLOW={0x6, 0x6, 0x6194}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008880) (async) shmctl$auto_IPC_STAT(0x48d, 0x2, &(0x7f0000003580)={{0xd, r13, r14, 0xe, 0x7, 0x8, 0x9}, 0x4, 0x2, 0x0, 0x5a35, @raw=0x7, @inferred=r10, 0xe6, 0x0, &(0x7f0000003440)="d6804548bfdad16046f2e7f9ccc19456dfcd51f2055fc280a6cf8136f806868b1c131b2c6c42be15d0baeeb4e2ab394e1ec1bf79b14cba1e36", &(0x7f0000003480)="009598e20b3629bc246ef7e58ddb1d5e260657d82d76b4ee35cc652879f13c2ad0043aabac53d182985b593099600776d8bc7f142dcc480fcf00649ab64ba368f6c059f8c0fc8058a1a9292e64ac2285650e0f079664306314548c048ef3672bf029e23821899e8711eb845ca49709a2a314200c23700e4369b5c62d32298d484eeff2d2deab535586755998384af5244b40252d67bbe540acafc3d3488a09597e0ae61e758c8bcecb12bc124cca1006f212ea14229b7a848c9cfe7dd0e8171bc593caacd683014a2cd265b5ba9a5a179ff2ae3ab933eb51e2e04a866489a96d6ac9"}) 1.534353145s ago: executing program 5 (id=1424): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) r0 = socket(0x5, 0x1, 0x84) (async) io_uring_setup$auto(0x401, 0x0) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r0, 0x84, 0x14, 0x0, 0x0) 1.213047793s ago: executing program 4 (id=1425): socket(0x2, 0x3, 0x2) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x711a03, 0x0) ioctl$auto(r0, 0x542e, r0) r1 = waitid$auto(0xfffffff8, 0xffffffffffffffff, 0x0, 0x4, 0x0) read$auto_fops_u16_(0xffffffffffffffff, 0x0, 0x0) timer_create$auto_CLOCK_BOOTTIME_ALARM(0x9, &(0x7f0000000100)={@sival_int=0xd3, @inferred=r0, 0xe5, @_tid=r1}, 0x0) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) 987.250157ms ago: executing program 2 (id=1426): unshare$auto(0x20000) unshare$auto(0x20000) r0 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0x7ffc) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) pread64$auto(0xffffffffffffffff, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x2, 0x2, 0x1) mmap$auto(0x2, 0x8, 0xdf, 0x9b72, 0x2, 0x7ffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) sendfile$auto(r2, r2, 0x0, 0x4f64a1d2) madvise$auto(0x0, 0x80000001, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000080), r1) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x40482, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfdef) msgctl$auto_IPC_STAT(0x839c, 0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff, 0xee01, 0x9, 0xb822, 0xffffffff, 0x5}, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=0x7f, 0x4, 0x4d805b98, 0x5, 0xc1be, 0x6, 0x8d, 0x4, 0x0, @raw=0x10000, @raw=0x8}) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) prctl$auto(0x23, 0xe, 0x0, 0x6c, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0) socket(0x10, 0x2, 0xc) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000140), 0x10001, 0x0) 849.729791ms ago: executing program 4 (id=1427): madvise$auto(0x0, 0x7ffffffffffffffe, 0xa) madvise$auto(0x2, 0x319e5ee1, 0xffffffff) r0 = syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) fanotify_init$auto(0x7fffffff, 0xb5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000200)='\x1bEer/audi\xff9\xc6M\xa3\x13\x8a\xadho1j\xc6\xef\xee\xee\xf2\xd2\xfe\x00VI\xa3\xba\xb1;\x9d\x05\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xec\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\~\x89C:jD\x1duFH\x9f\x00k,A`\xf7t\x02\xf8\xb7\x96\x19\x16\xb4\x9ab\x02\x00\x00\x00\x14w\xb4\x14\x1dU\x9d\x8b\xb4U\x953.Obk\xa0c\x1f\xe7g\xceK\xb4\x90\xc0\xbfw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8#J\x00\x00\xcc\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&!q\xedP\aUc\x15a\xfaT\x8e-\xea\xc6\xa7x\xda\x9d\xcbq\xbdl\x18\xe8\x85\xbb\v|!\x91\xa6\xcaD\xe0\"7)\xdb\x12\xe5\xf4\xbd\xf1\xf5jf\x85#y\x9fu\x06\xac\xb5\x91\xd6M_\x9d}\xd3\\\xc6^\x1f/\am\xd2\xab\x8f\xeaWQ\x1c\v\xeac\xc8\xebQ(\x8c\rYLM(\\29\xfbW\xb4\x10^\xa73\x19\x98DC\x0ep\x10\xaa`\xbf\xea\"@\xd1x\x9b\xab%\xb8\xc4\xea\x9f\x88h\x8e\x9c\xf22U\xa3c\xe9\x1c\xcb\x17\xcf\xf8L\x04zx\\h\x1a\x12c\\\xef&\"\x89\xe8\xfd\x10\x12\xde\xcb\x83\"\x19\xd5#\xbbR\x8dz/\x81Kb\x8e\xc5xDq\x98/*\x7f\x91\x9c\x16\xa7bxC#\xce]\xd9|\xf8Y!>\x1e\xbdD\xba\xc7\xd0\x0ev\x10N\xe1\x14\xc2\x03\x1dWx\xf4\x1fCa\x9eO\xa0\x00\x83t\x01Z\x1cY\xb4w\r\xc6\x94\xc8AKr\x14\xc6\x92nv\x1b\xbd[\x7f}B\xbc\xc9\xa5\x91\xf6=?\xd3\r\xa3\xd5D(\xbe\xaa\xb9\x88 \xd8S\xca\xba\xc5`\xad\xbb\xb2K\xfd\xe2\t\xc36j\x91\x9ft\x00t}J\xf1^\x96\"\xc7\xd9\xd5\xef}\r`yW|\xb0\b\xcb\xecc\x1e\xcf8.\x92+\xe01\xd6\xd4E\xfc\xd8z\xad\x84\\IgX1\a\xb23n\x1a\x06\xca\x85\xe8\xdb\x95=}bs=\xaeC\x8f\xb5o\'!>\xa3\x1d\x9cR\xd9\xfdz\xe7\xba&\x9b\x15\x0f\bO\xb6', 0x180000a2d9) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xc0, 0x0, 0x20) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb0800000051a0094a3836d6c7996e841f08b6f08fc9b963560a6c36b0b2fd1678e816201cf5000000004161695e68bd16800000000000000000000400", 0xa}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) geteuid() sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x200000c0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0x60}, 0x1, 0x68, 0x0, 0x24000e00}, 0xd0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/040/001\x00', 0x10b880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/uevent\x00', 0x1, 0x0) openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000001400), 0x60600, 0x0) r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1c\x00', 0x4100, 0x0) read$auto_snd_pcm_f_ops_pcm1(r4, &(0x7f0000000480)=""/14, 0xf) prctl$auto(0x23, 0x7, r0, 0x8000000, 0x0) socket(0x25, 0x3, 0xa) 849.594756ms ago: executing program 5 (id=1428): close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x27ff) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) (async) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) 557.743255ms ago: executing program 5 (id=1429): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) (async, rerun: 32) io_uring_setup$auto(0x1, 0x0) (async, rerun: 32) r1 = socket(0x29, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f00000000c0), 0x34000}, 0x1, &(0x7f00000000c0), 0x3, 0xab}, 0x80670}, 0x3f800000, 0xd9) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0) read$auto(r2, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000007e80)='/sys/devices/virtual/net/lapb4/statistics/rx_frame_errors\x00', 0x181000, 0x0) (rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000007ec0)=""/254, 0xfe) socket(0x2b, 0x1, 0x1) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x1, 0x2, 0x15, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x802, 0x1) socketpair$auto(0x3, 0x5, 0x7, 0x0) (async) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x2000000}, 0x68) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) unshare$auto(0x40000080) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3f83, 0xfffffffb) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r4, 0x0, 0x6bc, 0x3) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40040) readahead$auto(r4, 0x4, 0x4) (async, rerun: 64) socket(0x10, 0x2, 0x0) (rerun: 64) 453.847664ms ago: executing program 2 (id=1430): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c09, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) socket(0x1d, 0x3, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/l2tp_ip6/uevent\x00', 0x2a001, 0x0) write$auto(r1, &(0x7f0000000040)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto(0x3, 0x5411, 0x10000000000402) setsockopt$auto(r0, 0x4, 0x7493, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) read$auto(0xffffffffffffffff, 0x0, 0x20) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r3 = ioctl$auto_TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=0x9) fsconfig$auto_FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000180)='\x86Y\xa6\x00', &(0x7f0000000200)="7cdaa7c75d233396fe83d6007b92380ba7e5", 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x12, 0x4, 0x440a) ioctl$auto_BLKRASET(r2, 0x1262, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/bInterfaceNumber\x00', 0xa140, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0x7f}, 0x6, 0x40005, 0x2005) pwrite64$auto(0xc8, &(0x7f0000000000)='p\x10\xb5n\x91p\xe6\x94\xa1\x90Z\x99\x88d\x11\x1cJ\x99\x12:\x00!\r>\x94\x1a\xd3\xd3\x1d\x93\xab{Lh\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CQ\"\x01\x0e\xa4\xdf\x11\xbb\a\x90\x11x\xfb\xdav\x1cC\x8a\xeeq\xf0\xcdr\xc1\xa8\xcd\xf9.=(\xeb\xd1\x14^\x87&^\xcc\x181\xd6\xa3k\xd9\x9f\xefC\xda\x1f+\xb4`\xdd02S\x18\x9efHu\xfe\xfd\x90\x13\xa2(o\xdf\x82\xca\xb4C\x06-&\xf1\xa22(\xc7}\x0eE.R<\xea\x8e-\x9cv\x0e\xcb\x95\x15\xce\xb3\x8f\xb9]\x9f\xd6\xa0;', 0x28, 0x6) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x3) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jfs/loglevel\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x5) close_range$auto(0x2, 0x8, 0x0) 177.799086ms ago: executing program 1 (id=1431): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="73da00003ac95c29bc938571664ec200", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf252c000000050092004000000008001f010900000005005300e00000000800c900020000000e00130092449550a5edd0fe25530000"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0xc0) (async) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) write$auto(0x3, 0x0, 0x3f00) sysfs$auto(0x2, 0xe, 0x1df) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x0) (async) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r2 = prctl$auto_PR_SCHED_CORE_CREATE(0x1, 0x1, 0x0, 0x0, 0x4) (async) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) (async) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) (async) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) (async, rerun: 64) madvise$auto(0x0, 0x200204, 0x15) (rerun: 64) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) landlock_create_ruleset$auto(0x0, 0x9, 0x0) (async, rerun: 32) landlock_restrict_self$auto(0xffffffffffffffff, 0x1) (async, rerun: 32) socket(0x2, 0x2, 0x0) (async) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) ioctl$auto_PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000800), r3) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), r3) (async) connect$auto(r3, &(0x7f0000000940)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x1e) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), r3) (async) semctl$auto(0x7, 0x2, 0x13, 0x1) mmap$auto(0xb, 0x8400008, 0xdf, 0x9b72, r2, 0x8000) 0s ago: executing program 4 (id=1432): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0x22001, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.avg_queue_size\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) r2 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f00000006c0), 0x24680, 0x0) getsockopt$auto_SO_BINDTOIFINDEX(r2, 0x5, 0x3e, &(0x7f0000000700)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00', &(0x7f0000000800)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x6) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000400)=r3) sendmmsg$auto(r6, &(0x7f0000000680)={{&(0x7f0000000440)="daaf2e57ae0bddcb27a99beb28b2992ee2333365287bb2e57adffc5265861deb01bb52bf1ba069d7ff993212a58d750ed4c56797ff43eb5f695cd63f8259ce28b96c0ffb3fe32fdd763691610434952652031b76aaa15ce16b94d210d2d5eec0e561ab9054c4157e3c06316c2b635937e751527c1c10f7ae0cca86ed78bc49cdb0eaf2c27dce3794fd6248e7e7f243205ed6103d70cd716d2acbe84b9625a321e4f994e62bc4efd46cccfd3dd29f72612710bc", 0x8001, &(0x7f0000000580)={&(0x7f0000000500)="16b71140349c02c4ae3708c7e0242884810cf4417443ca63544fb7ba1e24a7f13c874dc41636745cc91554eca5b04c5194cc1bb121d424cededc9d09eff71f5687959a186028757e070d5ae9e4", 0x40}, 0x7, &(0x7f00000005c0)="0fce8c01c30d315a22bc154fb60b60f532be8f947084069230b950b86958494f52457ea8ca00f3ef44be0d61033aca6dd7b30afe84eee4078d555d94e475d1fff31453e92648fd3d8596bf562cae565e8d3cb547908a1f78c9900bfc15ec2699f02853e470e140c9af45c2ded21ef34700cce4a060a6c7f9fc89ecb88bb2106d4136f5c8e48d357131ae4c1171", 0x1, 0x5}, 0x6}, 0xd8, 0xf5) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) fsconfig$auto_XFS_DAX_ALWAYS(r3, 0x2, &(0x7f0000000280)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', &(0x7f0000000300)="f808f06f6d521137abbc305a49b3bd794ca2dbd0259b6a5bd1d4dbaa16de3f741466550ddb8c7fa1d736091dd8d5dab94f3db3bb3ccd98f0929e09a1f7669ca64e7fee8eee3a60071172e3d526b5ea72b418c51b2eef6d9b4ca25f998e19824cef7ddd6f835a9bbc59f965114ee834558e343acc3913c9e296993916d9de2985ec5cdbc3d0945253872754bd7f321f810830ccf29ea54b77e678fe65002ee4bc29a864705aab4acdb6cfa038956739ceea37732a1c11d54906717573338236e32215d98adcd8b2c002e1ea5ce6175a27220f028b6d241f74aa87d03bdb3112c612f9d3ccbab7", 0x1) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000180)="b3edbd518d464ae30a03eeb88132026458282108a7888e331c83a6377a7fd914b57332a00b12ce4efc17982eaee86d7e0e98ee4d62cfb0389c9ca3cb29ec53a1a2", 0x41) sendfile$auto(r5, r7, 0x0, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x2, &(0x7f0000000100)={0x6, 0xfffffffc, 0x4, 0xfe2, 0x3, 0x5, r4, [0x6, 0x9, 0x2], {0x5, 0x5, 0x3, 0x3, 0x0, 0x0, 0x2, 0xe633af7, 0xed20}, {0x2, 0x8, 0x0, 0x1, 0xc, 0x800, 0x9f32, 0xe1a, 0x2}}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): 21103][ T7169] veth1_macvtap: entered allmulticast mode [ 140.038374][ T7169] veth1_macvtap: left allmulticast mode [ 140.499965][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 140.563023][ T7177] netlink: 354 bytes leftover after parsing attributes in process `syz.0.285'. [ 141.280908][ T7212] FAULT_INJECTION: forcing a failure. [ 141.280908][ T7212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.323654][ T7212] CPU: 0 UID: 0 PID: 7212 Comm: syz.3.288 Not tainted syzkaller #0 PREEMPT(full) [ 141.323687][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.323701][ T7212] Call Trace: [ 141.323710][ T7212] [ 141.323721][ T7212] dump_stack_lvl+0x16c/0x1f0 [ 141.323759][ T7212] should_fail_ex+0x512/0x640 [ 141.323800][ T7212] strncpy_from_user+0x3b/0x2e0 [ 141.323838][ T7212] getname_flags.part.0+0x8f/0x550 [ 141.323876][ T7212] ? lockdep_init_map_type+0x5c/0x280 [ 141.323916][ T7212] getname_flags+0x93/0xf0 [ 141.323944][ T7212] __do_sys_swapon+0x845/0x3bd0 [ 141.323977][ T7212] ? __pfx_do_futex+0x10/0x10 [ 141.324013][ T7212] ? __pfx___might_resched+0x10/0x10 [ 141.324044][ T7212] ? __x64_sys_futex+0x1e0/0x4c0 [ 141.324078][ T7212] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 141.324114][ T7212] ? __pfx___do_sys_swapon+0x10/0x10 [ 141.324155][ T7212] do_syscall_64+0xcd/0x490 [ 141.324190][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.324217][ T7212] RIP: 0033:0x7f6341d8ebe9 [ 141.324237][ T7212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.324261][ T7212] RSP: 002b:00007f6342b5d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 141.324293][ T7212] RAX: ffffffffffffffda RBX: 00007f6341fb5fa0 RCX: 00007f6341d8ebe9 [ 141.324311][ T7212] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 141.324326][ T7212] RBP: 00007f6341e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 141.324342][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.324358][ T7212] R13: 00007f6341fb6038 R14: 00007f6341fb5fa0 R15: 00007ffc91c58ea8 [ 141.324393][ T7212] [ 142.937051][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'. [ 143.220329][ T7255] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [7] [ 143.633544][ T7270] random: crng reseeded on system resumption [ 144.244370][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.304'. [ 144.443921][ T7301] netlink: 'syz.1.307': attribute type 3 has an invalid length. [ 146.128930][ T7316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.152992][ T7316] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.330839][ T7329] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 146.349855][ T7316] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.362051][ T7316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.369670][ T7316] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.384675][ T7316] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.400634][ T7316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.412460][ T7316] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.431760][ T7316] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.449222][ T7316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.457988][ T7316] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 146.517960][ T7316] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.409567][ T5878] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.356180][ T5878] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.445327][ T5878] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.515011][ T5878] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.471187][ T5878] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.435120][ T5878] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.504701][ T5878] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.586832][ T5878] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.613480][ T7390] ovs_: entered promiscuous mode [ 151.222995][ T7409] ecryptfs_miscdev_write: Invalid packet size [111] [ 151.510024][ T7424] input: f as /devices/virtual/input/input8 [ 151.539488][ T5878] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.500519][ T5878] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.574124][ T5878] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.653675][ T5878] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.033316][ T7448] bridge0: port 4(veth1_macvtap) entered blocking state [ 153.040976][ T7448] bridge0: port 4(veth1_macvtap) entered disabled state [ 153.050135][ T7448] veth1_macvtap: entered allmulticast mode [ 153.098423][ T7448] veth1_macvtap: left allmulticast mode [ 153.880279][ T7458] netlink: 346 bytes leftover after parsing attributes in process `syz.2.342'. [ 154.132057][ T30] audit: type=1800 audit(1755973531.830:12): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.343" name="members" dev="configfs" ino=16408 res=0 errno=0 [ 154.158348][ T7468] random: crng reseeded on system resumption [ 154.499980][ T7475] binder: 7474:7475 ioctl c0046209 ffffffffffffffff returned -22 [ 154.668703][ T7484] FAULT_INJECTION: forcing a failure. [ 154.668703][ T7484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.686357][ T7484] CPU: 0 UID: 0 PID: 7484 Comm: syz.3.348 Not tainted syzkaller #0 PREEMPT(full) [ 154.686387][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.686401][ T7484] Call Trace: [ 154.686409][ T7484] [ 154.686418][ T7484] dump_stack_lvl+0x16c/0x1f0 [ 154.686453][ T7484] should_fail_ex+0x512/0x640 [ 154.686491][ T7484] _copy_to_user+0x32/0xd0 [ 154.686517][ T7484] simple_read_from_buffer+0xcb/0x170 [ 154.686546][ T7484] proc_fail_nth_read+0x197/0x240 [ 154.686572][ T7484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.686597][ T7484] ? rw_verify_area+0xcf/0x6c0 [ 154.686617][ T7484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.686640][ T7484] vfs_read+0x1e4/0xcf0 [ 154.686666][ T7484] ? __pfx___mutex_lock+0x10/0x10 [ 154.686693][ T7484] ? __pfx_vfs_read+0x10/0x10 [ 154.686724][ T7484] ? __fget_files+0x20e/0x3c0 [ 154.686755][ T7484] ksys_read+0x12a/0x250 [ 154.686777][ T7484] ? __pfx_ksys_read+0x10/0x10 [ 154.686818][ T7484] do_syscall_64+0xcd/0x490 [ 154.686847][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.686868][ T7484] RIP: 0033:0x7f6341d8d5fc [ 154.686885][ T7484] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 154.686903][ T7484] RSP: 002b:00007f6342b3c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.686923][ T7484] RAX: ffffffffffffffda RBX: 00007f6341fb6090 RCX: 00007f6341d8d5fc [ 154.686937][ T7484] RDX: 000000000000000f RSI: 00007f6342b3c0a0 RDI: 0000000000000004 [ 154.686949][ T7484] RBP: 00007f6342b3c090 R08: 0000000000000000 R09: 0000000000000000 [ 154.686962][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.686974][ T7484] R13: 00007f6341fb6128 R14: 00007f6341fb6090 R15: 00007ffc91c58ea8 [ 154.687002][ T7484] [ 154.927228][ T7486] queue_state_write: operation too long [ 154.933547][ T7486] queue_state_write: use 'run', 'start' or 'kick' [ 155.402742][ T7496] random: crng reseeded on system resumption [ 155.734513][ T7508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.354'. [ 156.221755][ T7528] netlink: 'syz.2.359': attribute type 11 has an invalid length. [ 156.247006][ T7528] netlink: 'syz.2.359': attribute type 11 has an invalid length. [ 156.256753][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 156.295168][ T7528] netlink: 67 bytes leftover after parsing attributes in process `syz.2.359'. [ 156.323203][ T7529] netlink: 342 bytes leftover after parsing attributes in process `syz.2.359'. [ 156.332312][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 156.347593][ T7528] netlink: 200 bytes leftover after parsing attributes in process `syz.2.359'. [ 157.925578][ T7585] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 158.170856][ T7590] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 158.809212][ T7604] random: crng reseeded on system resumption [ 159.231247][ T7574] kexec: Could not allocate control_code_buffer [ 160.481027][ T7654] sd 0:0:1:0: PR command failed: 1026 [ 160.522130][ T7654] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 160.563555][ T7654] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 160.591425][ T7659] random: crng reseeded on system resumption [ 161.539931][ T7643] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 161.549740][ T30] audit: type=1800 audit(1755973539.269:13): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.383" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 161.586985][ T7643] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 161.612961][ T7643] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 162.079704][ T7680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.389'. [ 162.134104][ T5878] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 162.690456][ T7698] capability: warning: `syz.2.393' uses 32-bit capabilities (legacy support in use) [ 164.526743][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 164.594595][ T7758] netlink: 354 bytes leftover after parsing attributes in process `syz.3.404'. [ 165.651958][ T5878] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 169.253778][ T7852] zswap: compressor not available [ 171.762242][ T7893] ima: policy update failed [ 171.778234][ T30] audit: type=1802 audit(1755975597.573:14): pid=7893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.430" res=0 errno=0 [ 172.697482][ T7922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.725583][ T7922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.745276][ T7922] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.887114][ T7922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.908380][ T7922] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.947634][ T7922] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 173.072063][ T7943] cgroup: fork rejected by pids controller in /syz3 [ 173.993191][ T5878] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.398271][ T8137] syz.0.449 (8137): attempted to duplicate a private mapping with mremap. This is not supported. [ 174.438609][ T5878] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 174.780563][ T5878] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.939970][ T5878] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.940059][ T5866] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.449726][ T5866] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.847583][ T5866] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.010379][ T5866] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.935623][ T8225] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 180.086969][ T8285] FAULT_INJECTION: forcing a failure. [ 180.086969][ T8285] name failslab, interval 1, probability 0, space 0, times 0 [ 180.115554][ T8285] CPU: 0 UID: 0 PID: 8285 Comm: syz.2.468 Not tainted syzkaller #0 PREEMPT(full) [ 180.115592][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.115611][ T8285] Call Trace: [ 180.115624][ T8285] [ 180.115634][ T8285] dump_stack_lvl+0x16c/0x1f0 [ 180.115675][ T8285] should_fail_ex+0x512/0x640 [ 180.115709][ T8285] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 180.115742][ T8285] should_failslab+0xc2/0x120 [ 180.115776][ T8285] __kmalloc_cache_noprof+0x6a/0x3e0 [ 180.115805][ T8285] ? nfs_alloc_fhandle+0x3b/0x90 [ 180.115839][ T8285] nfs_alloc_fhandle+0x3b/0x90 [ 180.115867][ T8285] nfs_init_fs_context+0x65/0x11f0 [ 180.115897][ T8285] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 180.115929][ T8285] alloc_fs_context+0x54a/0x9c0 [ 180.115967][ T8285] __x64_sys_fsopen+0xeb/0x240 [ 180.116004][ T8285] do_syscall_64+0xcd/0x490 [ 180.116040][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.116066][ T8285] RIP: 0033:0x7f9dc558ebe9 [ 180.116087][ T8285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.116111][ T8285] RSP: 002b:00007f9dc6453038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 180.116142][ T8285] RAX: ffffffffffffffda RBX: 00007f9dc57b6090 RCX: 00007f9dc558ebe9 [ 180.116159][ T8285] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 180.116175][ T8285] RBP: 00007f9dc5611e19 R08: 0000000000000000 R09: 0000000000000000 [ 180.116191][ T8285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.116207][ T8285] R13: 00007f9dc57b6128 R14: 00007f9dc57b6090 R15: 00007ffc3420c9d8 [ 180.116242][ T8285] [ 180.610484][ T8285] could not allocate digest TFM handle nfs4 [ 182.709296][ T8299] HfR: entered promiscuous mode [ 184.434174][ T8312] ima: policy update failed [ 184.439917][ T30] audit: type=1802 audit(1755975610.299:15): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.475" res=0 errno=0 [ 186.686191][ T8378] syz.0.487 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 187.493401][ T8405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.490'. [ 187.576548][ T8405] random: crng reseeded on system resumption [ 188.879861][ T8422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.494'. [ 190.539597][ T8451] FAULT_INJECTION: forcing a failure. [ 190.539597][ T8451] name failslab, interval 1, probability 0, space 0, times 0 [ 190.632385][ T8451] CPU: 0 UID: 0 PID: 8451 Comm: syz.0.502 Not tainted syzkaller #0 PREEMPT(full) [ 190.632419][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.632434][ T8451] Call Trace: [ 190.632443][ T8451] [ 190.632453][ T8451] dump_stack_lvl+0x16c/0x1f0 [ 190.632491][ T8451] should_fail_ex+0x512/0x640 [ 190.632526][ T8451] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 190.632557][ T8451] should_failslab+0xc2/0x120 [ 190.632590][ T8451] __kmalloc_cache_noprof+0x6a/0x3e0 [ 190.632616][ T8451] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 190.632645][ T8451] ? fscontext_alloc_log+0x4a/0x1b0 [ 190.632690][ T8451] fscontext_alloc_log+0x4a/0x1b0 [ 190.632727][ T8451] __x64_sys_fsopen+0x157/0x240 [ 190.632763][ T8451] do_syscall_64+0xcd/0x490 [ 190.632795][ T8451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.632819][ T8451] RIP: 0033:0x7ff71358ebe9 [ 190.632845][ T8451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.632869][ T8451] RSP: 002b:00007ff7117d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 190.632893][ T8451] RAX: ffffffffffffffda RBX: 00007ff7137b6090 RCX: 00007ff71358ebe9 [ 190.632911][ T8451] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 190.632925][ T8451] RBP: 00007ff713611e19 R08: 0000000000000000 R09: 0000000000000000 [ 190.632940][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.632954][ T8451] R13: 00007ff7137b6128 R14: 00007ff7137b6090 R15: 00007fffd37b11c8 [ 190.632988][ T8451] [ 191.309191][ T8443] syz.2.500 (8443) used greatest stack depth: 17368 bytes left [ 192.517518][ T8480] nbd: couldn't find device at index 137 [ 193.576096][ T8488] ICMPv6: process `syz.2.514' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 193.648341][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.654880][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.900605][ T8497] Invalid ELF header magic: != ELF [ 193.965148][ T8497] Invalid ELF header magic: != ELF [ 194.013242][ T8497] Invalid ELF header magic: != ELF [ 194.096044][ T8497] Invalid ELF header magic: != ELF [ 194.142984][ T8497] Invalid ELF header magic: != ELF [ 194.171029][ T8497] Invalid ELF header magic: != ELF [ 194.253150][ T8497] Invalid ELF header magic: != ELF [ 194.341611][ T8497] Invalid ELF header magic: != ELF [ 194.394635][ T8497] Invalid ELF header magic: != ELF [ 194.434677][ T8497] Invalid ELF header magic: != ELF [ 194.442268][ T7951] syz.3.438 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 194.452758][ T7951] CPU: 0 UID: 0 PID: 7951 Comm: syz.3.438 Not tainted syzkaller #0 PREEMPT(full) [ 194.452790][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.452804][ T7951] Call Trace: [ 194.452813][ T7951] [ 194.452822][ T7951] dump_stack_lvl+0x16c/0x1f0 [ 194.452860][ T7951] dump_header+0x101/0x930 [ 194.452897][ T7951] oom_kill_process+0x272/0xa40 [ 194.452933][ T7951] out_of_memory+0x350/0x1700 [ 194.452972][ T7951] ? __pfx_out_of_memory+0x10/0x10 [ 194.453014][ T7951] mem_cgroup_out_of_memory+0x118/0x130 [ 194.453052][ T7951] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 194.453098][ T7951] ? do_raw_spin_unlock+0x172/0x230 [ 194.453142][ T7951] try_charge_memcg+0x72b/0xd50 [ 194.453180][ T7951] ? __pfx_try_charge_memcg+0x10/0x10 [ 194.453212][ T7951] ? __print_lock_name+0x81/0xe0 [ 194.453236][ T7951] ? rcu_read_unlock+0x17/0x60 [ 194.453279][ T7951] charge_memcg+0x8a/0x230 [ 194.453310][ T7951] __mem_cgroup_charge+0x2b/0x1e0 [ 194.453346][ T7951] shmem_alloc_and_add_folio+0x514/0xc20 [ 194.453385][ T7951] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 194.453420][ T7951] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 194.453457][ T7951] shmem_get_folio_gfp+0x67f/0x1600 [ 194.453502][ T7951] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 194.453543][ T7951] shmem_write_begin+0x160/0x300 [ 194.453577][ T7951] ? __pfx_shmem_write_begin+0x10/0x10 [ 194.453605][ T7951] ? timestamp_truncate+0x21e/0x2d0 [ 194.453637][ T7951] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 194.453683][ T7951] generic_perform_write+0x3c5/0x900 [ 194.453724][ T7951] ? __pfx_generic_perform_write+0x10/0x10 [ 194.453755][ T7951] ? inode_needs_update_time.part.0+0x191/0x270 [ 194.453797][ T7951] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 194.453829][ T7951] shmem_file_write_iter+0x10e/0x140 [ 194.453866][ T7951] __kernel_write_iter+0x317/0xb10 [ 194.453900][ T7951] ? __pfx___kernel_write_iter+0x10/0x10 [ 194.453928][ T7951] ? __up_read+0x1f8/0x750 [ 194.453969][ T7951] ? dump_user_range+0x756/0xb70 [ 194.454003][ T7951] dump_user_range+0x413/0xb70 [ 194.454037][ T7951] ? __pfx_dump_user_range+0x10/0x10 [ 194.454066][ T7951] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 194.454112][ T7951] ? __pfx_writenote+0x10/0x10 [ 194.454150][ T7951] elf_core_dump+0x2929/0x3b60 [ 194.454198][ T7951] ? __pfx_elf_core_dump+0x10/0x10 [ 194.454229][ T7951] ? check_preempt_wakeup_fair+0x51e/0x9d0 [ 194.454274][ T7951] ? find_held_lock+0x2b/0x80 [ 194.454298][ T7951] ? 0xffffffffff600000 [ 194.454320][ T7951] ? rcu_is_watching+0x12/0xc0 [ 194.454345][ T7951] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 194.454375][ T7951] ? lockdep_hardirqs_on+0x7c/0x110 [ 194.454463][ T7951] ? vfs_coredump+0x2b97/0x5670 [ 194.454495][ T7951] vfs_coredump+0x2b97/0x5670 [ 194.454535][ T7951] ? __pfx_vfs_coredump+0x10/0x10 [ 194.454562][ T7951] ? __lock_acquire+0x62e/0x1ce0 [ 194.454603][ T7951] ? __lock_acquire+0x62e/0x1ce0 [ 194.454639][ T7951] ? lock_acquire+0x179/0x350 [ 194.454689][ T7951] ? is_bpf_text_address+0x8a/0x1a0 [ 194.454719][ T7951] ? bpf_ksym_find+0x124/0x1c0 [ 194.454753][ T7951] ? __kernel_text_address+0xd/0x40 [ 194.454777][ T7951] ? unwind_get_return_address+0x59/0xa0 [ 194.454805][ T7951] ? arch_stack_walk+0xa6/0x100 [ 194.454847][ T7951] ? stack_trace_save+0x8e/0xc0 [ 194.454875][ T7951] ? __pfx_stack_trace_save+0x10/0x10 [ 194.454905][ T7951] ? stack_depot_save_flags+0x29/0x9c0 [ 194.454940][ T7951] ? __lock_acquire+0xb97/0x1ce0 [ 194.455038][ T7951] ? proc_coredump_connector+0x2d1/0x4f0 [ 194.455067][ T7951] ? __pfx_proc_coredump_connector+0x10/0x10 [ 194.455115][ T7951] ? rcu_is_watching+0x12/0xc0 [ 194.455146][ T7951] get_signal+0x22e3/0x26d0 [ 194.455185][ T7951] ? force_sig_fault+0xc4/0x100 [ 194.455215][ T7951] ? __pfx_get_signal+0x10/0x10 [ 194.455255][ T7951] arch_do_signal_or_restart+0x8f/0x790 [ 194.455286][ T7951] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 194.455324][ T7951] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 194.455380][ T7951] irqentry_exit_to_user_mode+0x12a/0x270 [ 194.455414][ T7951] asm_exc_page_fault+0x26/0x30 [ 194.455439][ T7951] RIP: 0033:0x7f6341d8ebf1 [ 194.455459][ T7951] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 194.455487][ T7951] RSP: 002b:0000080000000002 EFLAGS: 00010217 [ 194.455511][ T7951] RAX: 0000000000000000 RBX: 00007f6341fb5fa0 RCX: 00007f6341d8ebe9 [ 194.455531][ T7951] RDX: 0000000000000000 RSI: 0000080000000002 RDI: 0100000020003b49 [ 194.455547][ T7951] RBP: 00007f6341e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 194.455562][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.455577][ T7951] R13: 00007f6341fb6038 R14: 00007f6341fb5fa0 R15: 00007ffc91c58ea8 [ 194.455613][ T7951] [ 194.455623][ T7951] memory: usage 307200kB, limit 307200kB, failcnt 22433 [ 194.484652][ T8497] Invalid ELF header magic: != ELF [ 194.529021][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.516'. [ 194.592870][ T8497] Invalid ELF header magic: != ELF [ 194.803947][ T7951] memory+swap: usage 429176kB, limit 9007199254740988kB, failcnt 0 [ 194.983792][ T8515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.516'. [ 195.016007][ T7951] kmem: usage 3512kB, limit 9007199254740988kB, failcnt 0 [ 195.088288][ T8497] Invalid ELF header magic: != ELF [ 195.102489][ T8522] netlink: 334 bytes leftover after parsing attributes in process `syz.2.518'. [ 195.125805][ T8497] Invalid ELF header magic: != ELF [ 195.146069][ T8497] Invalid ELF header magic: != ELF [ 195.165289][ T8497] Invalid ELF header magic: != ELF [ 195.185760][ T8497] Invalid ELF header magic: != ELF [ 195.208443][ T8497] Invalid ELF header magic: != ELF [ 195.233381][ T8524] netlink: 334 bytes leftover after parsing attributes in process `syz.2.518'. [ 195.250568][ T8497] Invalid ELF header magic: != ELF [ 195.272882][ T8497] Invalid ELF header magic: != ELF [ 195.290359][ T8497] Invalid ELF header magic: != ELF [ 195.309154][ T8497] Invalid ELF header magic: != ELF [ 195.328361][ T8497] Invalid ELF header magic: != ELF [ 195.343551][ T7951] Memory cgroup stats for /syz3: [ 195.346369][ T8497] Invalid ELF header magic: != ELF [ 195.366976][ T7951] cache 306532352 [ 195.378833][ T8497] Invalid ELF header magic: != ELF [ 195.420902][ T7951] rss 4222976 [ 195.432748][ T8497] Invalid ELF header magic: != ELF [ 195.455024][ T7951] rss_huge 0 [ 195.458237][ T7951] shmem 306528256 [ 195.468424][ T8497] Invalid ELF header magic: != ELF [ 195.494448][ T8497] Invalid ELF header magic: != ELF [ 195.519907][ T8497] Invalid ELF header magic: != ELF [ 195.569282][ T8497] Invalid ELF header magic: != ELF [ 195.613717][ T8497] Invalid ELF header magic: != ELF [ 195.638953][ T8497] Invalid ELF header magic: != ELF [ 195.641652][ T7951] mapped_file 0 [ 195.647614][ T7951] dirty 0 [ 195.668759][ T8497] Invalid ELF header magic: != ELF [ 195.712661][ T8497] Invalid ELF header magic: != ELF [ 195.752968][ T8497] Invalid ELF header magic: != ELF [ 195.767462][ T8497] Invalid ELF header magic: != ELF [ 195.773013][ T7951] writeback 0 [ 195.776302][ T7951] workingset_refault_anon 843 [ 195.784024][ T8497] Invalid ELF header magic: != ELF [ 195.797049][ T8497] Invalid ELF header magic: != ELF [ 195.810288][ T8497] Invalid ELF header magic: != ELF [ 195.823253][ T8497] Invalid ELF header magic: != ELF [ 195.837646][ T8497] Invalid ELF header magic: != ELF [ 195.850693][ T8497] Invalid ELF header magic: != ELF [ 195.863700][ T8497] Invalid ELF header magic: != ELF [ 195.870666][ T7951] workingset_refault_file 356 [ 195.875355][ T7951] swap 124948480 [ 195.897116][ T7951] swapcached 94208 [ 195.900736][ T8497] Invalid ELF header magic: != ELF [ 195.917259][ T7951] pgpgin 164256 [ 195.945780][ T8497] Invalid ELF header magic: != ELF [ 195.961968][ T7951] pgpgout 91431 [ 195.971648][ T7951] pgfault 88381 [ 195.978231][ T7951] pgmajfault 183 [ 195.986387][ T7951] inactive_anon 298491904 [ 196.001088][ T7951] active_anon 12353536 [ 196.005165][ T7951] inactive_file 0 [ 196.021271][ T8497] Invalid ELF header magic: != ELF [ 196.028131][ T7951] active_file 4096 [ 196.032493][ T7951] unevictable 0 [ 196.055650][ T7951] hierarchical_memory_limit 314572800 [ 196.076423][ T7951] hierarchical_memsw_limit 9223372036854771712 [ 196.102326][ T8497] Invalid ELF header magic: != ELF [ 196.125556][ T8497] Invalid ELF header magic: != ELF [ 196.126857][ T7951] total_cache 306532352 [ 196.159277][ T7951] total_rss 4222976 [ 196.164014][ T7951] total_rss_huge 0 [ 196.167574][ T8497] Invalid ELF header magic: != ELF [ 196.167989][ T7951] total_shmem 306528256 [ 196.177259][ T7951] total_mapped_file 0 [ 196.181553][ T7951] total_dirty 0 [ 196.185180][ T8497] Invalid ELF header magic: != ELF [ 196.188840][ T7951] total_writeback 0 [ 196.201218][ T7951] total_workingset_refault_anon 843 [ 196.206943][ T7951] total_workingset_refault_file 356 [ 196.212919][ T7951] total_swap 124948480 [ 196.214272][ T8497] Invalid ELF header magic: != ELF [ 196.217326][ T7951] total_swapcached 94208 [ 196.226616][ T7951] total_pgpgin 164256 [ 196.230775][ T7951] total_pgpgout 91431 [ 196.234848][ T7951] total_pgfault 88381 [ 196.238172][ T8497] Invalid ELF header magic: != ELF [ 196.245364][ T7951] total_pgmajfault 183 [ 196.249537][ T7951] total_inactive_anon 298491904 [ 196.283545][ T7951] total_active_anon 12353536 [ 196.330586][ T8497] Invalid ELF header magic: != ELF [ 196.342473][ T7951] total_inactive_file 0 [ 196.346875][ T7951] total_active_file 4096 [ 196.351209][ T7951] total_unevictable 0 [ 196.355208][ T7951] anon_cost 10694 [ 196.361649][ T7951] file_cost 313 [ 196.365175][ T7951] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.438,pid=7974,uid=0 [ 196.390553][ T8497] Invalid ELF header magic: != ELF [ 196.405028][ T8497] Invalid ELF header magic: != ELF [ 196.424377][ T7951] Memory cgroup out of memory: Killed process 7974 (syz.3.438) total-vm:102412kB, anon-rss:5032kB, file-rss:41768kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 196.425035][ T8497] Invalid ELF header magic: != ELF [ 196.464070][ T8497] Invalid ELF header magic: != ELF [ 196.489189][ T8497] Invalid ELF header magic: != ELF [ 196.503609][ T8497] Invalid ELF header magic: != ELF [ 196.583374][ T8497] Invalid ELF header magic: != ELF [ 196.621406][ T8497] Invalid ELF header magic: != ELF [ 196.658264][ T8497] Invalid ELF header magic: != ELF [ 196.770459][ T8497] Invalid ELF header magic: != ELF [ 198.012285][ T8581] FAULT_INJECTION: forcing a failure. [ 198.012285][ T8581] name failslab, interval 1, probability 0, space 0, times 0 [ 198.663645][ T32] oom_reaper: reaped process 7974 (syz.3.438), now anon-rss:116kB, file-rss:40476kB, shmem-rss:0kB [ 198.689611][ T8581] CPU: 1 UID: 0 PID: 8581 Comm: syz.3.519 Not tainted syzkaller #0 PREEMPT(full) [ 198.689647][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.689662][ T8581] Call Trace: [ 198.689672][ T8581] [ 198.689681][ T8581] dump_stack_lvl+0x16c/0x1f0 [ 198.689722][ T8581] should_fail_ex+0x512/0x640 [ 198.689757][ T8581] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 198.689790][ T8581] should_failslab+0xc2/0x120 [ 198.689834][ T8581] __kmalloc_cache_noprof+0x6a/0x3e0 [ 198.689864][ T8581] ? nfs_alloc_fhandle+0x3b/0x90 [ 198.689902][ T8581] nfs_alloc_fhandle+0x3b/0x90 [ 198.689931][ T8581] nfs_init_fs_context+0x65/0x11f0 [ 198.689963][ T8581] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 198.690001][ T8581] alloc_fs_context+0x54a/0x9c0 [ 198.690040][ T8581] __x64_sys_fsopen+0xeb/0x240 [ 198.690078][ T8581] do_syscall_64+0xcd/0x490 [ 198.690115][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.690142][ T8581] RIP: 0033:0x7f6341d8ebe9 [ 198.690163][ T8581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.690187][ T8581] RSP: 002b:00007f6342b3c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 198.690212][ T8581] RAX: ffffffffffffffda RBX: 00007f6341fb6090 RCX: 00007f6341d8ebe9 [ 198.690230][ T8581] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 198.690246][ T8581] RBP: 00007f6341e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 198.690262][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.690278][ T8581] R13: 00007f6341fb6128 R14: 00007f6341fb6090 R15: 00007ffc91c58ea8 [ 198.690313][ T8581] [ 199.300840][ T8585] could not allocate digest TFM handle nfs4 [ 199.592293][ T8600] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 203.822379][ T8640] vmstat_refresh: nr_hugetlb -2048 [ 205.060285][ T8668] bond0: option all_slaves_active: invalid value () [ 206.635903][ T8692] netlink: 268 bytes leftover after parsing attributes in process `syz.0.551'. [ 210.916047][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.571'. [ 210.992022][ T8767] veth1_macvtap: left promiscuous mode [ 211.908305][ T8781] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 213.364882][ T8808] can: request_module (can-proto-0) failed. [ 215.679659][ T8851] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 215.679809][ T5866] Bluetooth: hci0: unexpected event 0x32 length: 10 > 9 [ 219.898260][ T8905] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 223.058563][ T8977] __vm_enough_memory: pid: 8977, comm: syz.0.613, bytes: 4398046511104 not enough memory for the allocation [ 223.098053][ T8976] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 229.104943][ T9041] netlink: 93 bytes leftover after parsing attributes in process `syz.2.626'. [ 229.568314][ T9059] bridge0: port 4(team0) entered blocking state [ 229.613526][ T9059] bridge0: port 4(team0) entered disabled state [ 229.634887][ T9059] team0: entered allmulticast mode [ 229.650380][ T9059] team_slave_0: entered allmulticast mode [ 229.665927][ T9059] team_slave_1: entered allmulticast mode [ 229.676170][ T9063] svc: failed to register nfsdv3 RPC service (errno 111). [ 229.684054][ T9059] team0: entered promiscuous mode [ 229.689095][ T9059] team_slave_0: entered promiscuous mode [ 229.705265][ T9059] team_slave_1: entered promiscuous mode [ 229.715650][ T9063] svc: failed to register nfsaclv3 RPC service (errno 111). [ 229.725359][ T9059] bridge0: port 4(team0) entered blocking state [ 229.731736][ T9059] bridge0: port 4(team0) entered forwarding state [ 229.765635][ T9050] kexec: Could not allocate control_code_buffer [ 231.326753][ T9098] FAULT_INJECTION: forcing a failure. [ 231.326753][ T9098] name failslab, interval 1, probability 0, space 0, times 0 [ 231.339539][ T9098] CPU: 0 UID: 0 PID: 9098 Comm: syz.2.639 Not tainted syzkaller #0 PREEMPT(full) [ 231.339569][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.339583][ T9098] Call Trace: [ 231.339591][ T9098] [ 231.339600][ T9098] dump_stack_lvl+0x16c/0x1f0 [ 231.339635][ T9098] should_fail_ex+0x512/0x640 [ 231.339666][ T9098] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 231.339699][ T9098] should_failslab+0xc2/0x120 [ 231.339730][ T9098] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 231.339758][ T9098] ? security_file_alloc+0x34/0x2b0 [ 231.339793][ T9098] security_file_alloc+0x34/0x2b0 [ 231.339824][ T9098] init_file+0x93/0x4c0 [ 231.339857][ T9098] alloc_empty_file+0x73/0x1e0 [ 231.339892][ T9098] path_openat+0xda/0x2cb0 [ 231.339919][ T9098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.339959][ T9098] ? __pfx_path_openat+0x10/0x10 [ 231.340000][ T9098] do_filp_open+0x20b/0x470 [ 231.340030][ T9098] ? __pfx_do_filp_open+0x10/0x10 [ 231.340090][ T9098] ? alloc_fd+0x471/0x7d0 [ 231.340127][ T9098] do_sys_openat2+0x11b/0x1d0 [ 231.340163][ T9098] ? __pfx_do_sys_openat2+0x10/0x10 [ 231.340197][ T9098] ? __pfx___might_resched+0x10/0x10 [ 231.340232][ T9098] __x64_sys_openat+0x174/0x210 [ 231.340280][ T9098] ? __pfx___x64_sys_openat+0x10/0x10 [ 231.340338][ T9098] do_syscall_64+0xcd/0x490 [ 231.340380][ T9098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.340411][ T9098] RIP: 0033:0x7f9dc558ebe9 [ 231.340433][ T9098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.340465][ T9098] RSP: 002b:00007f9dc6453038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 231.340492][ T9098] RAX: ffffffffffffffda RBX: 00007f9dc57b6090 RCX: 00007f9dc558ebe9 [ 231.340511][ T9098] RDX: 000000000034d802 RSI: 0000200000001a40 RDI: ffffffffffffff9c [ 231.340530][ T9098] RBP: 00007f9dc5611e19 R08: 0000000000000000 R09: 0000000000000000 [ 231.340549][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.340568][ T9098] R13: 00007f9dc57b6128 R14: 00007f9dc57b6090 R15: 00007ffc3420c9d8 [ 231.340607][ T9098] [ 232.237738][ T9107] netlink: 194 bytes leftover after parsing attributes in process `syz.2.641'. [ 232.598252][ T30] audit: type=1800 audit(1755975658.709:16): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.640" name="dbroot" dev="configfs" ino=23862 res=0 errno=0 [ 233.387531][ T9130] FAULT_INJECTION: forcing a failure. [ 233.387531][ T9130] name failslab, interval 1, probability 0, space 0, times 0 [ 233.445674][ T9130] CPU: 1 UID: 0 PID: 9130 Comm: syz.3.645 Not tainted syzkaller #0 PREEMPT(full) [ 233.445708][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.445722][ T9130] Call Trace: [ 233.445730][ T9130] [ 233.445740][ T9130] dump_stack_lvl+0x16c/0x1f0 [ 233.445776][ T9130] should_fail_ex+0x512/0x640 [ 233.445816][ T9130] ? __kvmalloc_node_noprof+0x124/0x620 [ 233.445848][ T9130] should_failslab+0xc2/0x120 [ 233.445881][ T9130] __kvmalloc_node_noprof+0x137/0x620 [ 233.445909][ T9130] ? __lock_acquire+0xb97/0x1ce0 [ 233.445941][ T9130] ? seq_read_iter+0x826/0x12c0 [ 233.445973][ T9130] ? seq_read_iter+0x826/0x12c0 [ 233.445995][ T9130] seq_read_iter+0x826/0x12c0 [ 233.446021][ T9130] ? __mutex_trylock_common+0xe9/0x250 [ 233.446067][ T9130] kernfs_fop_read_iter+0x40f/0x5a0 [ 233.446092][ T9130] ? rw_verify_area+0xcf/0x6c0 [ 233.446122][ T9130] vfs_read+0x8bf/0xcf0 [ 233.446155][ T9130] ? __pfx___mutex_lock+0x10/0x10 [ 233.446188][ T9130] ? __pfx_vfs_read+0x10/0x10 [ 233.446246][ T9130] ksys_read+0x12a/0x250 [ 233.446273][ T9130] ? __pfx_ksys_read+0x10/0x10 [ 233.446318][ T9130] do_syscall_64+0xcd/0x490 [ 233.446354][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.446379][ T9130] RIP: 0033:0x7f6341d8ebe9 [ 233.446399][ T9130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.446422][ T9130] RSP: 002b:00007f6342b5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.446446][ T9130] RAX: ffffffffffffffda RBX: 00007f6341fb5fa0 RCX: 00007f6341d8ebe9 [ 233.446463][ T9130] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 233.446478][ T9130] RBP: 00007f6342b5d090 R08: 0000000000000000 R09: 0000000000000000 [ 233.446494][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.446509][ T9130] R13: 00007f6341fb6038 R14: 00007f6341fb5fa0 R15: 00007ffc91c58ea8 [ 233.446545][ T9130] [ 234.807571][ T9170] FAULT_INJECTION: forcing a failure. [ 234.807571][ T9170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.968657][ T9170] CPU: 0 UID: 0 PID: 9170 Comm: syz.0.657 Not tainted syzkaller #0 PREEMPT(full) [ 234.968699][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.968714][ T9170] Call Trace: [ 234.968722][ T9170] [ 234.968731][ T9170] dump_stack_lvl+0x16c/0x1f0 [ 234.968769][ T9170] should_fail_ex+0x512/0x640 [ 234.968808][ T9170] _copy_to_iter+0x29f/0x1710 [ 234.968835][ T9170] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 234.968868][ T9170] ? level_show+0x6e/0x120 [ 234.968894][ T9170] ? __pfx__copy_to_iter+0x10/0x10 [ 234.968918][ T9170] ? kernfs_seq_stop+0xcd/0x120 [ 234.968946][ T9170] ? kernfs_put_active+0x86/0xe0 [ 234.968984][ T9170] seq_read_iter+0xcf8/0x12c0 [ 234.969027][ T9170] kernfs_fop_read_iter+0x40f/0x5a0 [ 234.969051][ T9170] ? rw_verify_area+0xcf/0x6c0 [ 234.969080][ T9170] vfs_read+0x8bf/0xcf0 [ 234.969112][ T9170] ? __pfx___mutex_lock+0x10/0x10 [ 234.969145][ T9170] ? __pfx_vfs_read+0x10/0x10 [ 234.969193][ T9170] ksys_read+0x12a/0x250 [ 234.969221][ T9170] ? __pfx_ksys_read+0x10/0x10 [ 234.969260][ T9170] do_syscall_64+0xcd/0x490 [ 234.969294][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.969321][ T9170] RIP: 0033:0x7ff71358ebe9 [ 234.969341][ T9170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.969365][ T9170] RSP: 002b:00007ff7117f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.969389][ T9170] RAX: ffffffffffffffda RBX: 00007ff7137b5fa0 RCX: 00007ff71358ebe9 [ 234.969406][ T9170] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 234.969421][ T9170] RBP: 00007ff7117f6090 R08: 0000000000000000 R09: 0000000000000000 [ 234.969437][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.969452][ T9170] R13: 00007ff7137b6038 R14: 00007ff7137b5fa0 R15: 00007fffd37b11c8 [ 234.969488][ T9170] [ 235.418764][ T9177] bond0: option all_slaves_active: invalid value () [ 238.215376][ T30] audit: type=1804 audit(1755975664.348:17): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.674" name="/newroot/136/file0" dev="tmpfs" ino=749 res=1 errno=0 [ 240.559628][ T9257] kexec: Could not allocate control_code_buffer [ 241.144742][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 241.730599][ T9271] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 241.761885][ T9271] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 241.863897][ T9271] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.874197][ T9271] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.882210][ T9271] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.902834][ T9269] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 241.970888][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 242.983637][ T5866] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.859065][ T5866] Bluetooth: hci1: command 0x0c1a tx timeout [ 243.941445][ T5866] Bluetooth: hci3: command 0x0c1a tx timeout [ 243.942989][ T5878] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.052861][ T5878] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.284090][ T30] audit: type=1804 audit(1755975671.465:18): pid=9351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.693" name="file0" dev="tmpfs" ino=1095 res=1 errno=0 [ 248.575550][ T30] audit: type=1800 audit(1755975674.772:19): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.698" name="dbroot" dev="configfs" ino=24446 res=0 errno=0 [ 251.575006][ T9453] can: request_module (can-proto-0) failed. [ 251.601221][ T9441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.712'. [ 254.768323][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.776421][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.968204][ T9556] bcache: register_bcache() error : failed to open device [ 256.463487][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 257.796613][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 260.049340][ T9617] netlink: zone id is out of range [ 260.095957][ T9617] netlink: zone id is out of range [ 260.845447][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 261.076920][ T9664] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 262.126096][ T9684] netlink: 'syz.2.767': attribute type 1 has an invalid length. [ 262.963974][ T9709] svc: failed to register nfsdv3 RPC service (errno 111). [ 263.024131][ T9709] svc: failed to register nfsaclv3 RPC service (errno 111). [ 263.540731][ T9721] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 264.203930][ T9725] vivid-003: ================= START STATUS ================= [ 264.269373][ T9725] vivid-003: Radio HW Seek Mode: Bounded [ 264.293311][ T9725] vivid-003: Radio Programmable HW Seek: false [ 264.314240][ T9725] vivid-003: RDS Rx I/O Mode: Block I/O [ 264.362420][ T9725] vivid-003: Generate RBDS Instead of RDS: false [ 264.376353][ T9725] vivid-003: RDS Reception: true [ 264.401565][ T9725] vivid-003: RDS Program Type: 0 inactive [ 264.438352][ T9725] vivid-003: RDS PS Name: inactive [ 264.443685][ T9725] vivid-003: RDS Radio Text: inactive [ 264.449257][ T9725] vivid-003: RDS Traffic Announcement: false inactive [ 264.456157][ T9725] vivid-003: RDS Traffic Program: false inactive [ 264.462652][ T9725] vivid-003: RDS Music: false inactive [ 264.468156][ T9725] vivid-003: ================== END STATUS ================== [ 266.102798][ T9763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.786'. [ 266.285194][ T9777] svc: failed to register nfsdv3 RPC service (errno 111). [ 266.335602][ T9777] svc: failed to register nfsaclv3 RPC service (errno 111). [ 266.893993][ T9789] netlink: 5 bytes leftover after parsing attributes in process `syz.0.791'. [ 267.688147][ T9800] zswap: compressor not available [ 269.628374][ T9830] netlink: zone id is out of range [ 269.663769][ T9830] netlink: zone id is out of range [ 269.979349][ T9838] netlink: 44 bytes leftover after parsing attributes in process `syz.3.799'. [ 270.944707][ T9863] random: crng reseeded on system resumption [ 271.134955][ T9866] can: request_module (can-proto-0) failed. [ 272.587036][ T9900] block nbd7: not configured, cannot reconfigure [ 274.026070][ T30] audit: type=1800 audit(4294967320.958:20): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.818" name="members" dev="configfs" ino=28230 res=0 errno=0 [ 274.882295][ T9925] random: crng reseeded on system resumption [ 276.253060][ T9963] random: crng reseeded on system resumption [ 276.468462][ T9973] svc: failed to register nfsdv3 RPC service (errno 111). [ 276.502090][ T9973] svc: failed to register nfsaclv3 RPC service (errno 111). [ 277.257087][T10000] __vm_enough_memory: pid: 10000, comm: syz.3.836, bytes: 4398046511104 not enough memory for the allocation [ 278.580655][T10020] FAULT_INJECTION: forcing a failure. [ 278.580655][T10020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.620146][T10020] CPU: 0 UID: 0 PID: 10020 Comm: syz.3.840 Not tainted syzkaller #0 PREEMPT(full) [ 278.620180][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.620196][T10020] Call Trace: [ 278.620204][T10020] [ 278.620214][T10020] dump_stack_lvl+0x16c/0x1f0 [ 278.620252][T10020] should_fail_ex+0x512/0x640 [ 278.620291][T10020] _copy_to_user+0x32/0xd0 [ 278.620318][T10020] simple_read_from_buffer+0xcb/0x170 [ 278.620347][T10020] proc_fail_nth_read+0x197/0x240 [ 278.620377][T10020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.620407][T10020] ? rw_verify_area+0xcf/0x6c0 [ 278.620433][T10020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.620461][T10020] vfs_read+0x1e4/0xcf0 [ 278.620491][T10020] ? __pfx_blkdev_issue_flush+0x10/0x10 [ 278.620531][T10020] ? __pfx_vfs_read+0x10/0x10 [ 278.620560][T10020] ? __pfx_submit_bio_wait_endio+0x10/0x10 [ 278.620601][T10020] ? file_check_and_advance_wb_err+0xc2/0x340 [ 278.620639][T10020] ksys_read+0x12a/0x250 [ 278.620666][T10020] ? __pfx_ksys_read+0x10/0x10 [ 278.620692][T10020] ? vfs_fsync_range+0x140/0x220 [ 278.620730][T10020] do_syscall_64+0xcd/0x490 [ 278.620766][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.620791][T10020] RIP: 0033:0x7f6341d8d5fc [ 278.620812][T10020] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 278.620836][T10020] RSP: 002b:00007f6342b5d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.620861][T10020] RAX: ffffffffffffffda RBX: 00007f6341fb5fa0 RCX: 00007f6341d8d5fc [ 278.620878][T10020] RDX: 000000000000000f RSI: 00007f6342b5d0a0 RDI: 0000000000000001 [ 278.620902][T10020] RBP: 00007f6342b5d090 R08: 0000000000000000 R09: 0000000000000000 [ 278.620917][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.620932][T10020] R13: 00007f6341fb6038 R14: 00007f6341fb5fa0 R15: 00007ffc91c58ea8 [ 278.620966][T10020] [ 279.128157][T10031] svc: failed to register nfsdv3 RPC service (errno 111). [ 279.139666][T10031] svc: failed to register nfsaclv3 RPC service (errno 111). [ 279.793007][T10052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.849'. [ 280.466213][T10067] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 280.505403][T10069] __report_access: 56 callbacks suppressed [ 280.505415][T10069] ptrace attach of "./syz-executor exec"[10071] was attempted by "./syz-executor exec"[10069] [ 280.540930][T10072] ptrace attach of "./syz-executor exec"[10071] was attempted by "./syz-executor exec"[10072] [ 280.922865][T10087] zero sized request [ 281.657177][T10097] svc: failed to register nfsdv3 RPC service (errno 111). [ 281.730626][T10097] svc: failed to register nfsaclv3 RPC service (errno 111). [ 283.302248][T10129] [U]  [ 283.305421][T10129] [U] [ 283.308154][T10129] [U] [ 283.310868][T10129] [U] [ 283.333090][T10122] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 283.376540][T10129] [U] [ 283.379275][T10129] [U] [ 283.381989][T10129] [U] [ 283.384707][T10129] [U] [ 283.388781][T10129] [U] [ 283.391512][T10129] [U] [ 283.394224][T10129] [U] [ 283.396936][T10129] [U] [ 283.400297][T10129] [U] [ 283.403027][T10129] [U] [ 283.405741][T10129] [U] [ 283.408445][T10129] [U] [ 283.416706][T10129] [U] [ 283.419389][T10129] [U] [ 283.422058][T10129] [U] [ 283.424754][T10129] [U] [ 283.433441][T10129] [U] [ 283.436175][T10129] [U] [ 283.438889][T10129] [U] [ 283.441605][T10129] [U] [ 283.589025][T10129] [U] [ 283.591772][T10129] [U] [ 283.594461][T10129] [U] [ 283.597134][T10129] [U] [ 283.713517][T10141] [U] [ 285.041695][T10161] svc: failed to register nfsdv3 RPC service (errno 111). [ 285.062524][T10161] svc: failed to register nfsaclv3 RPC service (errno 111). [ 285.158164][T10169] FAULT_INJECTION: forcing a failure. [ 285.158164][T10169] name failslab, interval 1, probability 0, space 0, times 0 [ 285.177304][T10169] CPU: 0 UID: 0 PID: 10169 Comm: syz.2.874 Not tainted syzkaller #0 PREEMPT(full) [ 285.177340][T10169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.177356][T10169] Call Trace: [ 285.177365][T10169] [ 285.177375][T10169] dump_stack_lvl+0x16c/0x1f0 [ 285.177414][T10169] should_fail_ex+0x512/0x640 [ 285.177450][T10169] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 285.177485][T10169] should_failslab+0xc2/0x120 [ 285.177520][T10169] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 285.177552][T10169] ? __kernfs_new_node+0xd2/0x8e0 [ 285.177590][T10169] __kernfs_new_node+0xd2/0x8e0 [ 285.177627][T10169] ? __pfx___kernfs_new_node+0x10/0x10 [ 285.177670][T10169] ? find_held_lock+0x2b/0x80 [ 285.177697][T10169] ? kernfs_root+0xee/0x2a0 [ 285.177737][T10169] kernfs_new_node+0x13c/0x1e0 [ 285.177780][T10169] kernfs_create_link+0xcc/0x240 [ 285.177811][T10169] sysfs_do_create_link_sd+0x90/0x140 [ 285.177846][T10169] sysfs_create_link+0x61/0xc0 [ 285.177878][T10169] driver_sysfs_add+0x112/0x2d0 [ 285.177914][T10169] device_bind_driver+0x16/0x70 [ 285.177950][T10169] mac80211_hwsim_new_radio+0x3e5/0x54d0 [ 285.177996][T10169] ? __asan_memset+0x23/0x50 [ 285.178025][T10169] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 285.178066][T10169] hwsim_new_radio_nl+0xb51/0x12c0 [ 285.178098][T10169] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 285.178144][T10169] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 285.178189][T10169] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 285.178240][T10169] genl_family_rcv_msg_doit+0x206/0x2f0 [ 285.178284][T10169] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 285.178337][T10169] ? bpf_lsm_capable+0x9/0x10 [ 285.178361][T10169] ? security_capable+0x7e/0x260 [ 285.178391][T10169] ? ns_capable+0xd7/0x110 [ 285.178422][T10169] genl_rcv_msg+0x55c/0x800 [ 285.178466][T10169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.178507][T10169] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 285.178548][T10169] netlink_rcv_skb+0x155/0x420 [ 285.178583][T10169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.178624][T10169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.178674][T10169] ? netlink_deliver_tap+0x1ae/0xd30 [ 285.178714][T10169] genl_rcv+0x28/0x40 [ 285.178748][T10169] netlink_unicast+0x5aa/0x870 [ 285.178788][T10169] ? __pfx_netlink_unicast+0x10/0x10 [ 285.178822][T10169] ? __pfx___might_resched+0x10/0x10 [ 285.178854][T10169] ? __lock_acquire+0xb97/0x1ce0 [ 285.178897][T10169] netlink_sendmsg+0x8d1/0xdd0 [ 285.178939][T10169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.178979][T10169] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 285.179015][T10169] ____sys_sendmsg+0xa95/0xc70 [ 285.179041][T10169] ? copy_msghdr_from_user+0x10a/0x160 [ 285.179075][T10169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.179108][T10169] ? __pfx_futex_wake_mark+0x10/0x10 [ 285.179158][T10169] ___sys_sendmsg+0x134/0x1d0 [ 285.179195][T10169] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.179276][T10169] __sys_sendmsg+0x16d/0x220 [ 285.179313][T10169] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.179346][T10169] ? __x64_sys_futex+0x1e0/0x4c0 [ 285.179401][T10169] do_syscall_64+0xcd/0x490 [ 285.179438][T10169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.179465][T10169] RIP: 0033:0x7f9dc558ebe9 [ 285.179486][T10169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.179512][T10169] RSP: 002b:00007f9dc6474038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.179536][T10169] RAX: ffffffffffffffda RBX: 00007f9dc57b5fa0 RCX: 00007f9dc558ebe9 [ 285.179554][T10169] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000006 [ 285.179571][T10169] RBP: 00007f9dc5611e19 R08: 0000000000000000 R09: 0000000000000000 [ 285.179587][T10169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.179604][T10169] R13: 00007f9dc57b6038 R14: 00007f9dc57b5fa0 R15: 00007ffc3420c9d8 [ 285.179641][T10169] [ 286.587334][T10189] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 286.587335][T10188] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 289.661011][T10335] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 289.667966][T10335] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.687350][T10335] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.717171][T10335] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 290.143882][ T30] audit: type=1400 audit(4294967337.152:21): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10359 comm="syz.2.900" [ 291.376678][T10394] FAULT_INJECTION: forcing a failure. [ 291.376678][T10394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.411731][T10394] CPU: 1 UID: 0 PID: 10394 Comm: syz.3.907 Not tainted syzkaller #0 PREEMPT(full) [ 291.411752][T10394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.411761][T10394] Call Trace: [ 291.411767][T10394] [ 291.411773][T10394] dump_stack_lvl+0x16c/0x1f0 [ 291.411796][T10394] should_fail_ex+0x512/0x640 [ 291.411818][T10394] _copy_from_user+0x2e/0xd0 [ 291.411841][T10394] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 291.411862][T10394] snd_rawmidi_write+0x26e/0xc10 [ 291.411881][T10394] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 291.411897][T10394] ? __pfx_default_wake_function+0x10/0x10 [ 291.411916][T10394] ? bpf_lsm_file_permission+0x9/0x10 [ 291.411935][T10394] ? security_file_permission+0x71/0x210 [ 291.411955][T10394] ? rw_verify_area+0xcf/0x6c0 [ 291.411971][T10394] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 291.411985][T10394] vfs_write+0x29d/0x11d0 [ 291.412004][T10394] ? __pfx_vfs_write+0x10/0x10 [ 291.412018][T10394] ? find_held_lock+0x2b/0x80 [ 291.412032][T10394] ? __fget_files+0x204/0x3c0 [ 291.412049][T10394] ? __fget_files+0x20e/0x3c0 [ 291.412068][T10394] ksys_write+0x1f8/0x250 [ 291.412082][T10394] ? __pfx_ksys_write+0x10/0x10 [ 291.412103][T10394] do_syscall_64+0xcd/0x490 [ 291.412121][T10394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.412136][T10394] RIP: 0033:0x7f6341d8ebe9 [ 291.412147][T10394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.412160][T10394] RSP: 002b:00007f6342b3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.412174][T10394] RAX: ffffffffffffffda RBX: 00007f6341fb6090 RCX: 00007f6341d8ebe9 [ 291.412186][T10394] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000003 [ 291.412194][T10394] RBP: 00007f6341e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 291.412202][T10394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.412210][T10394] R13: 00007f6341fb6128 R14: 00007f6341fb6090 R15: 00007ffc91c58ea8 [ 291.412227][T10394] [ 291.690376][ T9505] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.698607][ T9505] Bluetooth: hci1: command 0x0c1a tx timeout [ 291.706361][ T9529] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.773635][ T9505] Bluetooth: hci3: command 0x0c1a tx timeout [ 294.614515][T10465] [U]  [ 294.617357][T10465] [U] [ 294.620078][T10465] [U] [ 294.622789][T10465] [U] [ 294.672859][T10465] [U] [ 294.675597][T10465] [U] [ 294.678307][T10465] [U] [ 294.681019][T10465] [U] [ 294.716846][T10465] [U] [ 294.719578][T10465] [U] [ 294.722288][T10465] [U] [ 294.725001][T10465] [U] [ 294.852228][T10465] [U] [ 294.854968][T10465] [U] [ 294.857667][T10465] [U] [ 294.860359][T10465] [U] [ 294.893867][T10476] [U] [ 297.041199][T10509] bond0: option all_slaves_active: invalid value () [ 297.484387][T10523] FAULT_INJECTION: forcing a failure. [ 297.484387][T10523] name failslab, interval 1, probability 0, space 0, times 0 [ 297.513682][T10523] CPU: 0 UID: 0 PID: 10523 Comm: syz.3.939 Not tainted syzkaller #0 PREEMPT(full) [ 297.513715][T10523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.513729][T10523] Call Trace: [ 297.513738][T10523] [ 297.513746][T10523] dump_stack_lvl+0x16c/0x1f0 [ 297.513782][T10523] should_fail_ex+0x512/0x640 [ 297.513814][T10523] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 297.513849][T10523] should_failslab+0xc2/0x120 [ 297.513880][T10523] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 297.513911][T10523] ? sock_alloc_inode+0x25/0x1c0 [ 297.513952][T10523] ? __pfx_sock_alloc_inode+0x10/0x10 [ 297.513985][T10523] sock_alloc_inode+0x25/0x1c0 [ 297.514018][T10523] alloc_inode+0x61/0x240 [ 297.514051][T10523] sock_alloc+0x40/0x280 [ 297.514086][T10523] __sock_create+0xc1/0x8d0 [ 297.514116][T10523] __sys_socket+0x14d/0x260 [ 297.514141][T10523] ? __pfx___sys_socket+0x10/0x10 [ 297.514166][T10523] ? xfd_validate_state+0x61/0x180 [ 297.514198][T10523] ? __pfx_ksys_write+0x10/0x10 [ 297.514234][T10523] __x64_sys_socket+0x72/0xb0 [ 297.514257][T10523] ? lockdep_hardirqs_on+0x7c/0x110 [ 297.514287][T10523] do_syscall_64+0xcd/0x490 [ 297.514322][T10523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.514347][T10523] RIP: 0033:0x7f6341d8ebe9 [ 297.514367][T10523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.514391][T10523] RSP: 002b:00007f6342b5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 297.514415][T10523] RAX: ffffffffffffffda RBX: 00007f6341fb5fa0 RCX: 00007f6341d8ebe9 [ 297.514432][T10523] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002 [ 297.514447][T10523] RBP: 00007f6341e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 297.514462][T10523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.514477][T10523] R13: 00007f6341fb6038 R14: 00007f6341fb5fa0 R15: 00007ffc91c58ea8 [ 297.514518][T10523] [ 297.579774][T10523] socket: no more sockets [ 298.674270][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 300.512034][T10604] FAULT_INJECTION: forcing a failure. [ 300.512034][T10604] name failslab, interval 1, probability 0, space 0, times 0 [ 300.573988][T10604] CPU: 0 UID: 0 PID: 10604 Comm: syz.0.955 Not tainted syzkaller #0 PREEMPT(full) [ 300.574024][T10604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.574038][T10604] Call Trace: [ 300.574047][T10604] [ 300.574056][T10604] dump_stack_lvl+0x16c/0x1f0 [ 300.574093][T10604] should_fail_ex+0x512/0x640 [ 300.574135][T10604] ? __kmalloc_noprof+0xbf/0x510 [ 300.574166][T10604] ? aa_getprocattr+0x3d4/0x1110 [ 300.574198][T10604] should_failslab+0xc2/0x120 [ 300.574231][T10604] __kmalloc_noprof+0xd2/0x510 [ 300.574268][T10604] aa_getprocattr+0x3d4/0x1110 [ 300.574308][T10604] ? __pfx_aa_getprocattr+0x10/0x10 [ 300.574351][T10604] apparmor_getselfattr+0x16d/0x380 [ 300.574385][T10604] ? __pfx_apparmor_getselfattr+0x10/0x10 [ 300.574417][T10604] ? __might_fault+0x13b/0x190 [ 300.574456][T10604] security_getselfattr+0x2f2/0x500 [ 300.574489][T10604] ? __pfx_security_getselfattr+0x10/0x10 [ 300.574516][T10604] ? fput+0x9b/0xd0 [ 300.574550][T10604] ? ksys_write+0x1ac/0x250 [ 300.574578][T10604] ? __pfx_ksys_write+0x10/0x10 [ 300.574613][T10604] __x64_sys_lsm_get_self_attr+0x96/0x100 [ 300.574643][T10604] ? lockdep_hardirqs_on+0x7c/0x110 [ 300.574673][T10604] do_syscall_64+0xcd/0x490 [ 300.574708][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.574734][T10604] RIP: 0033:0x7ff71358ebe9 [ 300.574755][T10604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.574779][T10604] RSP: 002b:00007ff7117f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 300.574803][T10604] RAX: ffffffffffffffda RBX: 00007ff7137b5fa0 RCX: 00007ff71358ebe9 [ 300.574820][T10604] RDX: 0000200000002440 RSI: 0000200000001400 RDI: 0000000000000064 [ 300.574836][T10604] RBP: 00007ff7117f6090 R08: 0000000000000000 R09: 0000000000000000 [ 300.574852][T10604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.574867][T10604] R13: 00007ff7137b6038 R14: 00007ff7137b5fa0 R15: 00007fffd37b11c8 [ 300.574900][T10604] [ 300.949913][T10633] cgroup: fork rejected by pids controller in /syz2 [ 301.091284][T10657] FAULT_INJECTION: forcing a failure. [ 301.091284][T10657] name failslab, interval 1, probability 0, space 0, times 0 [ 301.104427][T10657] CPU: 1 UID: 0 PID: 10657 Comm: syz.3.958 Not tainted syzkaller #0 PREEMPT(full) [ 301.104459][T10657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.104473][T10657] Call Trace: [ 301.104482][T10657] [ 301.104491][T10657] dump_stack_lvl+0x16c/0x1f0 [ 301.104528][T10657] should_fail_ex+0x512/0x640 [ 301.104562][T10657] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 301.104597][T10657] should_failslab+0xc2/0x120 [ 301.104630][T10657] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 301.104661][T10657] ? fasync_helper+0x3d/0xd0 [ 301.104703][T10657] fasync_helper+0x3d/0xd0 [ 301.104740][T10657] sock_fasync+0x92/0x140 [ 301.104779][T10657] ? __pfx_sock_fasync+0x10/0x10 [ 301.104812][T10657] do_fcntl+0xa3a/0x15a0 [ 301.104848][T10657] ? __pfx_do_fcntl+0x10/0x10 [ 301.104893][T10657] ? tomoyo_file_fcntl+0xa5/0xc0 [ 301.104923][T10657] __x64_sys_fcntl+0x163/0x200 [ 301.104963][T10657] do_syscall_64+0xcd/0x490 [ 301.104999][T10657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.105025][T10657] RIP: 0033:0x7f6341d8ebe9 [ 301.105046][T10657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.105070][T10657] RSP: 002b:00007f6342b3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 301.105094][T10657] RAX: ffffffffffffffda RBX: 00007f6341fb6090 RCX: 00007f6341d8ebe9 [ 301.105111][T10657] RDX: 000000000000a553 RSI: 0000000000000004 RDI: 0000000000000003 [ 301.105126][T10657] RBP: 00007f6341e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 301.105142][T10657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.105157][T10657] R13: 00007f6341fb6128 R14: 00007f6341fb6090 R15: 00007ffc91c58ea8 [ 301.105194][T10657] [ 301.312678][T10715] netlink: 326 bytes leftover after parsing attributes in process `syz.0.959'. [ 301.322637][T10715] netlink: 326 bytes leftover after parsing attributes in process `syz.0.959'. [ 301.331984][T10715] netlink: 326 bytes leftover after parsing attributes in process `syz.0.959'. [ 301.537603][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 301.629679][T10724] netlink: 25 bytes leftover after parsing attributes in process `syz.1.961'. [ 302.131357][T10812] FAULT_INJECTION: forcing a failure. [ 302.131357][T10812] name failslab, interval 1, probability 0, space 0, times 0 [ 302.166035][T10812] CPU: 1 UID: 0 PID: 10812 Comm: syz.0.964 Not tainted syzkaller #0 PREEMPT(full) [ 302.166069][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.166084][T10812] Call Trace: [ 302.166093][T10812] [ 302.166102][T10812] dump_stack_lvl+0x16c/0x1f0 [ 302.166138][T10812] should_fail_ex+0x512/0x640 [ 302.166171][T10812] ? __kmalloc_noprof+0xbf/0x510 [ 302.166202][T10812] ? lsm_fill_user_ctx+0xc1/0x340 [ 302.166225][T10812] should_failslab+0xc2/0x120 [ 302.166258][T10812] __kmalloc_noprof+0xd2/0x510 [ 302.166293][T10812] lsm_fill_user_ctx+0xc1/0x340 [ 302.166321][T10812] apparmor_getselfattr+0x30f/0x380 [ 302.166354][T10812] ? __pfx_apparmor_getselfattr+0x10/0x10 [ 302.166384][T10812] ? __might_fault+0x13b/0x190 [ 302.166422][T10812] security_getselfattr+0x2f2/0x500 [ 302.166455][T10812] ? __pfx_security_getselfattr+0x10/0x10 [ 302.166482][T10812] ? fput+0x9b/0xd0 [ 302.166516][T10812] ? ksys_write+0x1ac/0x250 [ 302.166543][T10812] ? __pfx_ksys_write+0x10/0x10 [ 302.166579][T10812] __x64_sys_lsm_get_self_attr+0x96/0x100 [ 302.166608][T10812] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.166639][T10812] do_syscall_64+0xcd/0x490 [ 302.166673][T10812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.166699][T10812] RIP: 0033:0x7ff71358ebe9 [ 302.166718][T10812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.166743][T10812] RSP: 002b:00007ff7117f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 302.166767][T10812] RAX: ffffffffffffffda RBX: 00007ff7137b5fa0 RCX: 00007ff71358ebe9 [ 302.166784][T10812] RDX: 0000200000002440 RSI: 0000200000001400 RDI: 0000000000000064 [ 302.166801][T10812] RBP: 00007ff7117f6090 R08: 0000000000000000 R09: 0000000000000000 [ 302.166816][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.166831][T10812] R13: 00007ff7137b6038 R14: 00007ff7137b5fa0 R15: 00007fffd37b11c8 [ 302.166866][T10812] [ 303.829467][T10838] random: crng reseeded on system resumption [ 303.998154][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 304.438400][T10850] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163f829 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 304.453984][T10850] Call Trace: [ 304.457258][T10850] [ 304.460184][T10850] mce_cpu_restart+0x98/0xb0 [ 304.464770][T10850] ? __pfx_mce_cpu_restart+0x10/0x10 [ 304.470046][T10850] smp_call_function_many_cond+0x122a/0x1600 [ 304.476028][T10850] ? __pfx_mce_cpu_restart+0x10/0x10 [ 304.481311][T10850] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 304.487116][T10850] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 304.493440][T10850] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 304.499428][T10850] ? __pfx_mce_cpu_restart+0x10/0x10 [ 304.504708][T10850] on_each_cpu_cond_mask+0x40/0x90 [ 304.509820][T10850] set_bank+0x240/0x3a0 [ 304.513975][T10850] ? __pfx_set_bank+0x10/0x10 [ 304.518657][T10850] ? find_held_lock+0x2b/0x80 [ 304.523329][T10850] ? __pfx_set_bank+0x10/0x10 [ 304.528006][T10850] dev_attr_store+0x55/0x80 [ 304.532519][T10850] ? __pfx_dev_attr_store+0x10/0x10 [ 304.537717][T10850] sysfs_kf_write+0xf2/0x150 [ 304.542312][T10850] kernfs_fop_write_iter+0x354/0x510 [ 304.547615][T10850] ? __pfx_sysfs_kf_write+0x10/0x10 [ 304.552813][T10850] vfs_write+0x7d0/0x11d0 [ 304.557141][T10850] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 304.562951][T10850] ? __pfx___mutex_lock+0x10/0x10 [ 304.567989][T10850] ? __pfx_vfs_write+0x10/0x10 [ 304.572774][T10850] ksys_write+0x12a/0x250 [ 304.577104][T10850] ? __pfx_ksys_write+0x10/0x10 [ 304.581962][T10850] do_syscall_64+0xcd/0x490 [ 304.586469][T10850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.592357][T10850] RIP: 0033:0x7f9dc558ebe9 [ 304.596768][T10850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.616373][T10850] RSP: 002b:00007f9dc6453038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.624785][T10850] RAX: ffffffffffffffda RBX: 00007f9dc57b6090 RCX: 00007f9dc558ebe9 [ 304.632756][T10850] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000002 [ 304.640726][T10850] RBP: 00007f9dc5611e19 R08: 0000000000000000 R09: 0000000000000000 [ 304.648693][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.656656][T10850] R13: 00007f9dc57b6128 R14: 00007f9dc57b6090 R15: 00007ffc3420c9d8 [ 304.664643][T10850] [ 304.704633][T10854] FAULT_INJECTION: forcing a failure. [ 304.704633][T10854] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 304.847224][T10854] CPU: 1 UID: 0 PID: 10854 Comm: syz.0.972 Not tainted syzkaller #0 PREEMPT(full) [ 304.847259][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.847275][T10854] Call Trace: [ 304.847284][T10854] [ 304.847294][T10854] dump_stack_lvl+0x16c/0x1f0 [ 304.847333][T10854] should_fail_ex+0x512/0x640 [ 304.847376][T10854] should_fail_alloc_page+0xe7/0x130 [ 304.847413][T10854] prepare_alloc_pages+0x3c2/0x610 [ 304.847456][T10854] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 304.847499][T10854] ? __lock_acquire+0x62e/0x1ce0 [ 304.847537][T10854] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 304.847585][T10854] ? filemap_get_entry+0x1a7/0x3b0 [ 304.847622][T10854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 304.847673][T10854] ? policy_nodemask+0xea/0x4e0 [ 304.847711][T10854] alloc_pages_mpol+0x1fb/0x550 [ 304.847747][T10854] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 304.847781][T10854] ? _raw_spin_unlock+0x28/0x50 [ 304.847809][T10854] ? swap_entry_swapped+0x122/0x190 [ 304.847841][T10854] ? __pfx_swap_entry_swapped+0x10/0x10 [ 304.847878][T10854] folio_alloc_mpol_noprof+0x36/0x2f0 [ 304.847919][T10854] __read_swap_cache_async+0x3b6/0x5a0 [ 304.847954][T10854] ? __pfx___read_swap_cache_async+0x10/0x10 [ 304.847983][T10854] ? swp_swap_info+0xce/0x130 [ 304.848015][T10854] ? __pfx_swp_swap_info+0x10/0x10 [ 304.848051][T10854] ? __pfx_filemap_get_entry+0x10/0x10 [ 304.848088][T10854] swap_cluster_readahead+0x3eb/0x710 [ 304.848124][T10854] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 304.848152][T10854] ? __filemap_get_folio+0x32b/0xc30 [ 304.848199][T10854] ? __pfx_get_swap_device+0x10/0x10 [ 304.848233][T10854] ? walk_pgd_range+0x1135/0x1f50 [ 304.848269][T10854] shmem_swapin_folio+0x1d4a/0x25a0 [ 304.848302][T10854] ? find_held_lock+0x2b/0x80 [ 304.848337][T10854] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 304.848364][T10854] ? __pfx_filemap_get_entry+0x10/0x10 [ 304.848402][T10854] ? xas_find+0x303/0x890 [ 304.848445][T10854] shmem_get_folio_gfp+0x2c5/0x1600 [ 304.848484][T10854] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 304.848517][T10854] ? filemap_map_pages+0xf58/0x1670 [ 304.848552][T10854] shmem_fault+0x1fe/0xa30 [ 304.848585][T10854] ? __pfx_shmem_fault+0x10/0x10 [ 304.848620][T10854] ? __pfx_filemap_map_pages+0x10/0x10 [ 304.848671][T10854] ? __pfx_filemap_map_pages+0x10/0x10 [ 304.848701][T10854] __do_fault+0x10d/0x490 [ 304.848737][T10854] ? __pfx_filemap_map_pages+0x10/0x10 [ 304.848767][T10854] do_pte_missing+0xf50/0x3ba0 [ 304.848795][T10854] ? find_held_lock+0x2b/0x80 [ 304.848821][T10854] ? __handle_mm_fault+0x14fd/0x2a50 [ 304.848854][T10854] __handle_mm_fault+0x152a/0x2a50 [ 304.848885][T10854] ? mt_find+0x3ef/0xa30 [ 304.848921][T10854] ? __pfx___handle_mm_fault+0x10/0x10 [ 304.848945][T10854] ? __pfx_mt_find+0x10/0x10 [ 304.848999][T10854] ? find_vma+0xbf/0x140 [ 304.849031][T10854] ? __pfx_find_vma+0x10/0x10 [ 304.849067][T10854] handle_mm_fault+0x589/0xd10 [ 304.849096][T10854] ? __bpf_trace_exceptions+0x1/0x40 [ 304.849136][T10854] do_user_addr_fault+0x7a6/0x1370 [ 304.849177][T10854] ? rcu_is_watching+0x12/0xc0 [ 304.849208][T10854] exc_page_fault+0x5c/0xb0 [ 304.849241][T10854] asm_exc_page_fault+0x26/0x30 [ 304.849265][T10854] RIP: 0010:strncpy_from_user+0x147/0x2e0 [ 304.849299][T10854] Code: 00 00 4d 89 74 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 d7 02 a7 fc 48 83 fd 07 76 22 e8 5c 07 a7 fc 45 31 ff <49> 8b 04 1c 31 ff 44 89 fe 49 89 c6 e8 88 02 a7 fc 45 85 ff 0f 84 [ 304.849325][T10854] RSP: 0018:ffffc90003cd7d10 EFLAGS: 00050246 [ 304.849346][T10854] RAX: 000000000000003b RBX: 0000000000000000 RCX: ffffc9000ccc9000 [ 304.849363][T10854] RDX: 0000000000080000 RSI: ffffffff85140134 RDI: 0000000000000007 [ 304.849379][T10854] RBP: 0000000000000fe0 R08: 0000000000000007 R09: 0000000000000007 [ 304.849395][T10854] R10: 0000000000000fe0 R11: 0000000000000000 R12: 0000000000000000 [ 304.849410][T10854] R13: ffff8880305a4420 R14: 0000000000000fe0 R15: 0000000000000000 [ 304.849438][T10854] ? strncpy_from_user+0x144/0x2e0 [ 304.849483][T10854] getname_flags.part.0+0x8f/0x550 [ 304.849527][T10854] getname_flags+0x93/0xf0 [ 304.849555][T10854] do_sys_openat2+0xb8/0x1d0 [ 304.849593][T10854] ? __pfx_do_sys_openat2+0x10/0x10 [ 304.849654][T10854] __x64_sys_openat+0x174/0x210 [ 304.849699][T10854] ? __pfx___x64_sys_openat+0x10/0x10 [ 304.849752][T10854] do_syscall_64+0xcd/0x490 [ 304.849789][T10854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.849815][T10854] RIP: 0033:0x7ff71358ebe9 [ 304.849835][T10854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.849861][T10854] RSP: 002b:00007ff7117d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 304.849885][T10854] RAX: ffffffffffffffda RBX: 00007ff7137b6090 RCX: 00007ff71358ebe9 [ 304.849901][T10854] RDX: 0000000000040040 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 304.849918][T10854] RBP: 00007ff713611e19 R08: 0000000000000000 R09: 0000000000000000 [ 304.849934][T10854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.849949][T10854] R13: 00007ff7137b6128 R14: 00007ff7137b6090 R15: 00007fffd37b11c8 [ 304.849984][T10854] [ 307.041275][ T30] audit: type=1800 audit(4294967354.140:22): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.975" name="lu_gp_id" dev="configfs" ino=32986 res=0 errno=0 [ 307.130056][ T9505] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 307.750370][T10890] netlink: 322 bytes leftover after parsing attributes in process `syz.1.979'. [ 307.825405][T10887] svc: failed to register nfsdv3 RPC service (errno 111). [ 307.902808][T10887] svc: failed to register nfsaclv3 RPC service (errno 111). [ 310.005140][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 311.191010][T10920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 311.217691][T10920] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 311.325349][T10920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.346155][T10920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 311.408112][T10920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.695768][T10939] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input16 [ 312.868080][T10953] FAULT_INJECTION: forcing a failure. [ 312.868080][T10953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 312.951084][T10953] CPU: 1 UID: 0 PID: 10953 Comm: syz.0.993 Not tainted syzkaller #0 PREEMPT(full) [ 312.951122][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.951138][T10953] Call Trace: [ 312.951148][T10953] [ 312.951158][T10953] dump_stack_lvl+0x16c/0x1f0 [ 312.951198][T10953] should_fail_ex+0x512/0x640 [ 312.951236][T10953] should_fail_alloc_page+0xe7/0x130 [ 312.951258][T10953] prepare_alloc_pages+0x3c2/0x610 [ 312.951278][T10953] ? rcu_is_watching+0x12/0xc0 [ 312.951295][T10953] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 312.951314][T10953] ? rcu_is_watching+0x12/0xc0 [ 312.951327][T10953] ? trace_mm_page_alloc+0x11f/0x1a0 [ 312.951347][T10953] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 312.951365][T10953] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 312.951384][T10953] ? find_held_lock+0x2b/0x80 [ 312.951402][T10953] ? trace_sched_exit_tp+0xd1/0x120 [ 312.951422][T10953] ? __schedule+0x11a3/0x5de0 [ 312.951443][T10953] alloc_pages_bulk_noprof+0x71c/0x1410 [ 312.951459][T10953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.951479][T10953] ? policy_nodemask+0xea/0x4e0 [ 312.951499][T10953] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 312.951516][T10953] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 312.951541][T10953] kasan_populate_vmalloc+0xf1/0x1f0 [ 312.951560][T10953] alloc_vmap_area+0x959/0x29c0 [ 312.951586][T10953] ? __pfx_alloc_vmap_area+0x10/0x10 [ 312.951610][T10953] __get_vm_area_node+0x1ca/0x330 [ 312.951633][T10953] __vmalloc_node_range_noprof+0x271/0x14b0 [ 312.951647][T10953] ? __do_sys_listmount+0x1c2/0xf80 [ 312.951660][T10953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.951680][T10953] ? policy_nodemask+0xea/0x4e0 [ 312.951699][T10953] ? __do_sys_listmount+0x1c2/0xf80 [ 312.951716][T10953] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 312.951732][T10953] ? ___kmalloc_large_node+0xed/0x160 [ 312.951755][T10953] __kvmalloc_node_noprof+0x30a/0x620 [ 312.951770][T10953] ? __do_sys_listmount+0x1c2/0xf80 [ 312.951784][T10953] ? __do_sys_listmount+0x1c2/0xf80 [ 312.951800][T10953] ? __do_sys_listmount+0x1c2/0xf80 [ 312.951812][T10953] __do_sys_listmount+0x1c2/0xf80 [ 312.951829][T10953] ? __x64_sys_futex+0x1e0/0x4c0 [ 312.951845][T10953] ? __x64_sys_futex+0x1e9/0x4c0 [ 312.951861][T10953] ? __pfx___do_sys_listmount+0x10/0x10 [ 312.951883][T10953] do_syscall_64+0xcd/0x490 [ 312.951902][T10953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.951916][T10953] RIP: 0033:0x7ff71358ebe9 [ 312.951928][T10953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.951941][T10953] RSP: 002b:00007ff7117d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 312.951955][T10953] RAX: ffffffffffffffda RBX: 00007ff7137b6090 RCX: 00007ff71358ebe9 [ 312.951973][T10953] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 312.951982][T10953] RBP: 00007ff713611e19 R08: 0000000000000000 R09: 0000000000000000 [ 312.951991][T10953] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 312.951999][T10953] R13: 00007ff7137b6128 R14: 00007ff7137b6090 R15: 00007fffd37b11c8 [ 312.952017][T10953] [ 313.273115][ T9505] Bluetooth: hci0: command 0x0c1a tx timeout [ 313.337822][ T9505] Bluetooth: hci2: command 0x0c1a tx timeout [ 313.343855][ T9505] Bluetooth: hci1: command 0x0c1a tx timeout [ 313.417330][ T9505] Bluetooth: hci3: command 0x0c1a tx timeout [ 313.452283][T10953] syz.0.993: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 313.526881][T10953] CPU: 1 UID: 0 PID: 10953 Comm: syz.0.993 Not tainted syzkaller #0 PREEMPT(full) [ 313.526928][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.526944][T10953] Call Trace: [ 313.526954][T10953] [ 313.526964][T10953] dump_stack_lvl+0x16c/0x1f0 [ 313.527003][T10953] warn_alloc+0x248/0x3a0 [ 313.527037][T10953] ? __pfx_warn_alloc+0x10/0x10 [ 313.527071][T10953] ? kfree+0x2b4/0x4d0 [ 313.527106][T10953] ? __get_vm_area_node+0x208/0x330 [ 313.527154][T10953] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 313.527182][T10953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 313.527223][T10953] ? policy_nodemask+0xea/0x4e0 [ 313.527259][T10953] ? __do_sys_listmount+0x1c2/0xf80 [ 313.527296][T10953] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.527329][T10953] ? ___kmalloc_large_node+0xed/0x160 [ 313.527375][T10953] __kvmalloc_node_noprof+0x30a/0x620 [ 313.527405][T10953] ? __do_sys_listmount+0x1c2/0xf80 [ 313.527434][T10953] ? __do_sys_listmount+0x1c2/0xf80 [ 313.527468][T10953] ? __do_sys_listmount+0x1c2/0xf80 [ 313.527493][T10953] __do_sys_listmount+0x1c2/0xf80 [ 313.527527][T10953] ? __x64_sys_futex+0x1e0/0x4c0 [ 313.527558][T10953] ? __x64_sys_futex+0x1e9/0x4c0 [ 313.527592][T10953] ? __pfx___do_sys_listmount+0x10/0x10 [ 313.527637][T10953] do_syscall_64+0xcd/0x490 [ 313.527674][T10953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.527702][T10953] RIP: 0033:0x7ff71358ebe9 [ 313.527723][T10953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.527750][T10953] RSP: 002b:00007ff7117d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 313.527776][T10953] RAX: ffffffffffffffda RBX: 00007ff7137b6090 RCX: 00007ff71358ebe9 [ 313.527795][T10953] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 313.527812][T10953] RBP: 00007ff713611e19 R08: 0000000000000000 R09: 0000000000000000 [ 313.527829][T10953] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 313.527845][T10953] R13: 00007ff7137b6128 R14: 00007ff7137b6090 R15: 00007fffd37b11c8 [ 313.527882][T10953] [ 313.527891][T10953] Mem-Info: [ 313.743467][T10953] active_anon:9328 inactive_anon:25858 isolated_anon:0 [ 313.743467][T10953] active_file:21269 inactive_file:38052 isolated_file:0 [ 313.743467][T10953] unevictable:2635 dirty:846 writeback:0 [ 313.743467][T10953] slab_reclaimable:11869 slab_unreclaimable:94038 [ 313.743467][T10953] mapped:41299 shmem:24155 pagetables:1426 [ 313.743467][T10953] sec_pagetables:0 bounce:0 [ 313.743467][T10953] kernel_misc_reclaimable:0 [ 313.743467][T10953] free:1277974 free_pcp:25679 free_cma:0 [ 313.804783][T10953] Node 0 active_anon:37312kB inactive_anon:103932kB active_file:84584kB inactive_file:152076kB unevictable:9004kB isolated(anon):0kB isolated(file):0kB mapped:165772kB dirty:3384kB writeback:0kB shmem:95684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11944kB pagetables:5588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 313.837236][T10953] Node 1 active_anon:0kB inactive_anon:0kB active_file:492kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 313.931121][T10953] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.093220][T10953] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 314.154221][T10953] Node 0 DMA32 free:1231036kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37164kB inactive_anon:112948kB active_file:83440kB inactive_file:151804kB unevictable:9104kB writepending:3384kB present:3129332kB managed:2539592kB mlocked:7568kB bounce:0kB free_pcp:45760kB local_pcp:14452kB free_cma:0kB [ 314.263113][T10953] lowmem_reserve[]: 0 0 1 1 1 [ 314.271691][T10953] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1244kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 314.391390][T10953] lowmem_reserve[]: 0 0 0 0 0 [ 314.401518][T10953] Node 1 Normal free:3852664kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:492kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58120kB local_pcp:28468kB free_cma:0kB [ 314.481854][T10953] lowmem_reserve[]: 0 0 0 0 0 [ 314.492726][T10953] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 314.541697][T10953] Node 0 DMA32: 1514*4kB (UME) 1080*8kB (UME) 477*16kB (UE) 4*32kB (ME) 664*64kB (UME) 584*128kB (UM) 286*256kB (UME) 85*512kB (UME) 40*1024kB (UM) 11*2048kB (UME) 219*4096kB (UM) = 1216952kB [ 314.648595][T10953] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 314.681007][T10953] Node 1 Normal: 89*4kB (UME) 11*8kB (UME) 13*16kB (ME) 155*32kB (UME) 95*64kB (UME) 34*128kB (UME) 15*256kB (UME) 10*512kB (UME) 4*1024kB (UM) 5*2048kB (UME) 931*4096kB (M) = 3852716kB [ 314.750788][T10953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.830152][T10953] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 314.887643][T10953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.939701][T10953] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 314.976815][T10953] 92229 total pagecache pages [ 314.990558][T10953] 54 pages in swap cache [ 315.008963][T10953] Free swap = 117648kB [ 315.050423][T10953] Total swap = 124996kB [ 315.083431][T10953] 2097051 pages RAM [ 315.095905][T10953] 0 pages HighMem/MovableOnly [ 315.112979][T10953] 430191 pages reserved [ 315.146942][T10953] 0 pages cma reserved [ 315.327387][ T9505] Bluetooth: hci0: command 0x0c1a tx timeout [ 315.891848][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.901431][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.824825][T10399] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.833360][T10399] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.873576][T11002] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.891573][T11002] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.899152][T11002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.436000][T11018] device-mapper: ioctl: Invalid ioctl structure: name , dev 8 [ 318.173043][T10999] chnl_net:caif_netlink_parms(): no params data found [ 318.527399][ T9509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.757660][ T9509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.877194][T10999] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.885398][T10999] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.898911][T10999] bridge_slave_0: entered allmulticast mode [ 318.906636][T10999] bridge_slave_0: entered promiscuous mode [ 318.919941][T11002] Bluetooth: hci4: command tx timeout [ 318.941141][T10999] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.959856][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.978876][T10999] bridge_slave_1: entered allmulticast mode [ 318.996556][T10999] bridge_slave_1: entered promiscuous mode [ 319.008496][T11052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1011'. [ 319.110477][ T9509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.186748][T10999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.301630][T11057] bond0: option all_slaves_active: invalid value () [ 319.319490][ T9509] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.346155][T10999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.483530][T10999] team0: Port device team_slave_0 added [ 319.505504][T10999] team0: Port device team_slave_1 added [ 319.615625][T10999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.622581][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.714969][T10999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.795901][T10999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.813027][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.894671][T10999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.923942][T11002] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9 [ 320.010296][ T9509] team0: left allmulticast mode [ 320.022894][ T9509] team_slave_0: left allmulticast mode [ 320.028400][ T9509] team_slave_1: left allmulticast mode [ 320.106340][ T9509] team0: left promiscuous mode [ 320.148709][ T9509] team_slave_0: left promiscuous mode [ 320.196325][ T9509] team_slave_1: left promiscuous mode [ 320.404651][ T9509] bridge0: port 4(team0) entered disabled state [ 320.412907][T11082] Falling back ldisc for ttyS2. [ 320.574040][ T9509] bond0: left allmulticast mode [ 320.619995][ T9509] bond_slave_0: left allmulticast mode [ 320.634066][ T9509] bond_slave_1: left allmulticast mode [ 320.639613][ T9509] bond0: left promiscuous mode [ 320.646459][ T9509] bond_slave_0: left promiscuous mode [ 320.655782][ T9509] bond_slave_1: left promiscuous mode [ 320.661857][ T9509] bridge0: port 3(bond0) entered disabled state [ 320.680074][ T9509] bridge_slave_1: left allmulticast mode [ 320.685733][ T9509] bridge_slave_1: left promiscuous mode [ 320.702199][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.727161][ T9509] bridge_slave_0: left allmulticast mode [ 320.736245][ T9509] bridge_slave_0: left promiscuous mode [ 320.742369][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.926583][ T30] audit: type=1800 audit(4294967368.102:23): pid=11106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1018" name="lu_gp_id" dev="configfs" ino=34254 res=0 errno=0 [ 320.977847][T11002] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 320.998125][ T9505] Bluetooth: hci4: command tx timeout [ 321.208718][ T9509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.220915][ T9509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.230980][ T9509] bond0 (unregistering): Released all slaves [ 321.332066][ T9509] ovs_: left promiscuous mode [ 321.385567][T10999] hsr_slave_0: entered promiscuous mode [ 321.401002][T10999] hsr_slave_1: entered promiscuous mode [ 321.407703][T10999] debugfs: 'hsr0' already exists in 'hsr' [ 321.414044][T10999] Cannot create hsr debugfs directory [ 322.222244][T11130] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input18 [ 322.538381][ T9509] hsr_slave_0: left promiscuous mode [ 322.579431][ T9509] hsr_slave_1: left promiscuous mode [ 322.590812][ T9509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.640788][ T9509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.725638][ T9509] veth1_macvtap: left promiscuous mode [ 322.732104][ T9509] veth0_macvtap: left promiscuous mode [ 322.770578][ T9509] veth1_vlan: left promiscuous mode [ 322.824899][ T9509] veth0_vlan: left promiscuous mode [ 323.049548][ T9505] Bluetooth: hci4: command tx timeout [ 323.436208][ T9509] team0 (unregistering): Port device team_slave_1 removed [ 323.539703][T11153] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1027'. [ 323.562495][ T9509] team0 (unregistering): Port device team_slave_0 removed [ 323.877208][T10999] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.913357][T10999] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 324.022139][T10999] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.048756][T10999] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.318622][T10999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.365593][T10999] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.408595][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.415785][T10804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.451504][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.458692][T10804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.514885][T10999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.116719][ T9505] Bluetooth: hci4: command tx timeout [ 325.380423][T10999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.088300][T10999] veth0_vlan: entered promiscuous mode [ 326.109540][T10999] veth1_vlan: entered promiscuous mode [ 326.156311][T10999] veth0_macvtap: entered promiscuous mode [ 326.183829][T10999] veth1_macvtap: entered promiscuous mode [ 326.209219][T10999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.255888][T10999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.293811][ T9560] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.324559][ T9560] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.372510][ T9560] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.389695][T11224] bridge0: port 3(team0) entered blocking state [ 326.396414][T11224] bridge0: port 3(team0) entered disabled state [ 326.470646][T11224] team0: entered allmulticast mode [ 326.475781][T11224] team_slave_0: entered allmulticast mode [ 326.562145][T11224] team_slave_1: entered allmulticast mode [ 326.577737][T11224] team0: entered promiscuous mode [ 326.591687][T11224] team_slave_0: entered promiscuous mode [ 326.597613][T11224] team_slave_1: entered promiscuous mode [ 326.604745][T11224] bridge0: port 3(team0) entered blocking state [ 326.611151][T11224] bridge0: port 3(team0) entered forwarding state [ 326.634918][ T9560] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.122106][ T9504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.132471][ T9504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.295453][ T9509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.304281][ T9509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.648744][T11254] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1001'. [ 327.771410][T11248] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1001'. [ 327.879520][T11254] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 328.599886][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 328.833552][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 333.076599][ T9505] Bluetooth: hci3: unexpected subevent 0x03 length: 253 > 9 [ 333.695942][T11379] cgroup: fork rejected by pids controller in /syz4 [ 336.355281][T11481] Invalid ELF header magic: != ELF [ 338.423712][T11537] netlink: 13832 bytes leftover after parsing attributes in process `syz.2.1089'. [ 339.595720][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1096'. [ 339.731771][T11577] hub 8-0:1.0: USB hub found [ 339.753060][T11577] hub 8-0:1.0: 1 port detected [ 340.625503][ T30] audit: type=1800 audit(4294967387.904:24): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1100" name="dbroot" dev="configfs" ino=36715 res=0 errno=0 [ 344.911387][T11704] FAULT_INJECTION: forcing a failure. [ 344.911387][T11704] name failslab, interval 1, probability 0, space 0, times 0 [ 344.993126][T11704] CPU: 1 UID: 0 PID: 11704 Comm: syz.4.1113 Not tainted syzkaller #0 PREEMPT(full) [ 344.993157][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.993172][T11704] Call Trace: [ 344.993181][T11704] [ 344.993189][T11704] dump_stack_lvl+0x16c/0x1f0 [ 344.993223][T11704] should_fail_ex+0x512/0x640 [ 344.993256][T11704] ? __kmalloc_noprof+0xbf/0x510 [ 344.993286][T11704] ? realloc_user_queue+0x288/0x320 [ 344.993309][T11704] should_failslab+0xc2/0x120 [ 344.993340][T11704] __kmalloc_noprof+0xd2/0x510 [ 344.993376][T11704] realloc_user_queue+0x288/0x320 [ 344.993402][T11704] ? __pfx_snd_timer_user_open+0x10/0x10 [ 344.993427][T11704] snd_timer_user_open+0xfc/0x180 [ 344.993453][T11704] snd_open+0x22d/0x4c0 [ 344.993487][T11704] ? __pfx_snd_open+0x10/0x10 [ 344.993519][T11704] chrdev_open+0x231/0x6a0 [ 344.993549][T11704] ? __pfx_apparmor_file_open+0x10/0x10 [ 344.993577][T11704] ? __pfx_chrdev_open+0x10/0x10 [ 344.993610][T11704] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 344.993645][T11704] do_dentry_open+0x97f/0x1530 [ 344.993675][T11704] ? __pfx_chrdev_open+0x10/0x10 [ 344.993713][T11704] vfs_open+0x82/0x3f0 [ 344.993752][T11704] path_openat+0x1de4/0x2cb0 [ 344.993792][T11704] ? __pfx_path_openat+0x10/0x10 [ 344.993831][T11704] do_filp_open+0x20b/0x470 [ 344.993860][T11704] ? __pfx_do_filp_open+0x10/0x10 [ 344.993914][T11704] ? alloc_fd+0x471/0x7d0 [ 344.993950][T11704] do_sys_openat2+0x11b/0x1d0 [ 344.993985][T11704] ? __pfx_do_sys_openat2+0x10/0x10 [ 344.994034][T11704] __x64_sys_openat+0x174/0x210 [ 344.994078][T11704] ? __pfx___x64_sys_openat+0x10/0x10 [ 344.994129][T11704] do_syscall_64+0xcd/0x490 [ 344.994163][T11704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.994189][T11704] RIP: 0033:0x7fb8ba38ebe9 [ 344.994209][T11704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.994239][T11704] RSP: 002b:00007fb8bb13c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 344.994262][T11704] RAX: ffffffffffffffda RBX: 00007fb8ba5b6180 RCX: 00007fb8ba38ebe9 [ 344.994279][T11704] RDX: 0000000000101440 RSI: 0000200000001cc0 RDI: ffffffffffffff9c [ 344.994295][T11704] RBP: 00007fb8ba411e19 R08: 0000000000000000 R09: 0000000000000000 [ 344.994311][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.994325][T11704] R13: 00007fb8ba5b6218 R14: 00007fb8ba5b6180 R15: 00007ffdf7a96f68 [ 344.994360][T11704] [ 349.072272][T11759] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.131072.4294967293), cmd(3) [ 349.121438][T11756] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 349.181277][T11756] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 349.227502][T11756] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 349.311177][T11756] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 349.340474][T11756] page dumped because: unmovable page [ 349.346167][T11756] page_owner info is not present (never set?) [ 350.305478][T11772] can: request_module (can-proto-0) failed. [ 351.784945][T11794] could not allocate digest TFM handle [ 351.849613][T11794] could not allocate digest TFM handle [ 354.259784][T11866] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1142'. [ 354.289693][T11869] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1142'. [ 354.777973][T11875] FAULT_INJECTION: forcing a failure. [ 354.777973][T11875] name failslab, interval 1, probability 0, space 0, times 0 [ 354.861802][T11875] CPU: 0 UID: 0 PID: 11875 Comm: syz.2.1143 Not tainted syzkaller #0 PREEMPT(full) [ 354.861833][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.861842][T11875] Call Trace: [ 354.861848][T11875] [ 354.861854][T11875] dump_stack_lvl+0x16c/0x1f0 [ 354.861877][T11875] should_fail_ex+0x512/0x640 [ 354.861897][T11875] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 354.861916][T11875] should_failslab+0xc2/0x120 [ 354.861935][T11875] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 354.861951][T11875] ? sk_prot_alloc+0x60/0x2a0 [ 354.861974][T11875] sk_prot_alloc+0x60/0x2a0 [ 354.861995][T11875] sk_alloc+0x36/0xc20 [ 354.862011][T11875] tipc_sk_create+0xcf/0x21a0 [ 354.862029][T11875] ? find_held_lock+0x2b/0x80 [ 354.862043][T11875] ? __sock_create+0x2f2/0x8d0 [ 354.862059][T11875] __sock_create+0x335/0x8d0 [ 354.862075][T11875] __sys_socket+0x14d/0x260 [ 354.862089][T11875] ? __pfx___sys_socket+0x10/0x10 [ 354.862103][T11875] ? xfd_validate_state+0x61/0x180 [ 354.862127][T11875] __x64_sys_socket+0x72/0xb0 [ 354.862139][T11875] ? lockdep_hardirqs_on+0x7c/0x110 [ 354.862156][T11875] do_syscall_64+0xcd/0x490 [ 354.862175][T11875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.862195][T11875] RIP: 0033:0x7f9dc558ebe9 [ 354.862207][T11875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.862221][T11875] RSP: 002b:00007f9dc6474038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 354.862235][T11875] RAX: ffffffffffffffda RBX: 00007f9dc57b5fa0 RCX: 00007f9dc558ebe9 [ 354.862245][T11875] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 354.862253][T11875] RBP: 00007f9dc5611e19 R08: 0000000000000000 R09: 0000000000000000 [ 354.862262][T11875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.862270][T11875] R13: 00007f9dc57b6038 R14: 00007f9dc57b5fa0 R15: 00007ffc3420c9d8 [ 354.862289][T11875] [ 356.384974][T11899] block nbd9: NBD_DISCONNECT [ 357.143217][ T9505] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.151965][ T9505] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.162098][ T9505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.170906][ T9505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.243635][ T9505] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.420690][T11911] chnl_net:caif_netlink_parms(): no params data found [ 359.162186][T11911] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.171804][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.220934][T11911] bridge_slave_0: entered allmulticast mode [ 359.256256][T11911] bridge_slave_0: entered promiscuous mode [ 359.341514][T11002] Bluetooth: hci1: command tx timeout [ 359.410939][T11911] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.454172][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.518359][T11911] bridge_slave_1: entered allmulticast mode [ 359.545722][T11911] bridge_slave_1: entered promiscuous mode [ 359.689290][T11911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.728174][T11911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.879273][T11911] team0: Port device team_slave_0 added [ 359.907896][T11911] team0: Port device team_slave_1 added [ 360.027651][T11911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.034603][T11911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.174657][T11911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.225899][T11911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.232863][T11911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.341571][T11911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.716963][T11911] hsr_slave_0: entered promiscuous mode [ 360.742109][T11911] hsr_slave_1: entered promiscuous mode [ 360.774143][T11911] debugfs: 'hsr0' already exists in 'hsr' [ 360.796847][T11911] Cannot create hsr debugfs directory [ 361.083695][T11977] kafs: addr_prefs: Too many elements in string [ 361.495335][T11002] Bluetooth: hci1: command tx timeout [ 362.273967][T11911] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 362.393378][T11911] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 362.436235][T11911] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 362.468721][T11911] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 362.956791][T11911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.013751][T11911] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.073372][T11421] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.080490][T11421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.108412][T11421] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.115547][T11421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.557091][T11002] Bluetooth: hci1: command tx timeout [ 363.646817][T11911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.239040][T11911] veth0_vlan: entered promiscuous mode [ 364.250226][T11911] veth1_vlan: entered promiscuous mode [ 364.277835][T11911] veth0_macvtap: entered promiscuous mode [ 364.289579][T11911] veth1_macvtap: entered promiscuous mode [ 364.306648][T11911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.391032][T11911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.481943][ T9504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.527524][ T9504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.539263][ T9504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.597019][ T9504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.930830][T11424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.970105][T11424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.185074][T11426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.200731][T11426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.626098][T11002] Bluetooth: hci1: command tx timeout [ 367.119717][T12077] Malformed UNC in devname [ 367.119717][T12077] [ 367.126657][T12077] CIFS: VFS: Malformed UNC in devname [ 369.060497][T12119] QAT: Stopping all acceleration devices. [ 369.199572][T11002] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 369.199606][T11002] Bluetooth: hci1: unexpected subevent 0x0a length: 725 > 30 [ 371.806482][T12140] netlink: 32241 bytes leftover after parsing attributes in process `syz.2.1199'. [ 372.212515][T12146] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 372.411340][T12149] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 372.548312][T12151] tipc: Started in network mode [ 372.578049][T12151] tipc: Node identity 30303030, cluster identity 4711 [ 372.597418][T12151] tipc: Node number set to 808464432 [ 373.673333][T12168] FAULT_INJECTION: forcing a failure. [ 373.673333][T12168] name failslab, interval 1, probability 0, space 0, times 0 [ 373.773916][T12168] CPU: 1 UID: 0 PID: 12168 Comm: syz.5.1207 Not tainted syzkaller #0 PREEMPT(full) [ 373.773951][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.773966][T12168] Call Trace: [ 373.773974][T12168] [ 373.773983][T12168] dump_stack_lvl+0x16c/0x1f0 [ 373.774022][T12168] should_fail_ex+0x512/0x640 [ 373.774059][T12168] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 373.774091][T12168] should_failslab+0xc2/0x120 [ 373.774126][T12168] __kmalloc_cache_noprof+0x6a/0x3e0 [ 373.774152][T12168] ? do_signalfd4+0x169/0x430 [ 373.774187][T12168] do_signalfd4+0x169/0x430 [ 373.774221][T12168] __x64_sys_signalfd+0x120/0x1a0 [ 373.774253][T12168] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 373.774295][T12168] do_syscall_64+0xcd/0x490 [ 373.774327][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.774353][T12168] RIP: 0033:0x7f795f38ebe9 [ 373.774374][T12168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.774399][T12168] RSP: 002b:00007f7960213038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 373.774423][T12168] RAX: ffffffffffffffda RBX: 00007f795f5b6090 RCX: 00007f795f38ebe9 [ 373.774440][T12168] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff [ 373.774455][T12168] RBP: 00007f795f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 373.774470][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.774486][T12168] R13: 00007f795f5b6128 R14: 00007f795f5b6090 R15: 00007ffecd77ed08 [ 373.774519][T12168] [ 377.012012][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.018642][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.983372][T12225] openvswitch: netlink: Duplicate or invalid key (type 0). [ 378.985834][T12248] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1224'. [ 381.346457][T12300] QAT: Stopping all acceleration devices. [ 381.471884][ T9505] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 381.471925][ T9505] Bluetooth: hci4: unexpected subevent 0x0a length: 725 > 30 [ 383.003434][T12333] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 384.649479][T12368] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1245'. [ 384.850993][T12368] net veth1_virt_wifi : renamed from virt_wifi0 [ 385.941005][T12391] FAULT_INJECTION: forcing a failure. [ 385.941005][T12391] name failslab, interval 1, probability 0, space 0, times 0 [ 386.311179][T12391] CPU: 0 UID: 0 PID: 12391 Comm: syz.5.1253 Not tainted syzkaller #0 PREEMPT(full) [ 386.311216][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.311233][T12391] Call Trace: [ 386.311242][T12391] [ 386.311253][T12391] dump_stack_lvl+0x16c/0x1f0 [ 386.311293][T12391] should_fail_ex+0x512/0x640 [ 386.311329][T12391] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 386.311361][T12391] should_failslab+0xc2/0x120 [ 386.311395][T12391] __kmalloc_cache_noprof+0x6a/0x3e0 [ 386.311422][T12391] ? __lock_acquire+0xb97/0x1ce0 [ 386.311456][T12391] ? snd_timer_instance_new+0x47/0x2e0 [ 386.311502][T12391] snd_timer_instance_new+0x47/0x2e0 [ 386.311542][T12391] snd_seq_timer_open+0x1cc/0x600 [ 386.311577][T12391] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 386.311612][T12391] ? find_held_lock+0x2b/0x80 [ 386.311649][T12391] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 386.311680][T12391] ? lockdep_hardirqs_on+0x7c/0x110 [ 386.311714][T12391] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 386.311750][T12391] queue_use+0xe3/0x250 [ 386.311778][T12391] snd_seq_queue_alloc+0x2e5/0x5a0 [ 386.311813][T12391] snd_seq_ioctl_create_queue+0xa9/0x380 [ 386.311852][T12391] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 386.311896][T12391] alloc_seq_queue+0xda/0x180 [ 386.311934][T12391] ? __pfx_alloc_seq_queue+0x10/0x10 [ 386.311994][T12391] ? mark_held_locks+0x49/0x80 [ 386.312027][T12391] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.312059][T12391] snd_seq_oss_open+0x38c/0xa20 [ 386.312105][T12391] odev_open+0x6f/0x90 [ 386.312138][T12391] ? __pfx_odev_open+0x10/0x10 [ 386.312172][T12391] soundcore_open+0x40c/0x580 [ 386.312211][T12391] ? __pfx_soundcore_open+0x10/0x10 [ 386.312247][T12391] chrdev_open+0x231/0x6a0 [ 386.312279][T12391] ? __pfx_apparmor_file_open+0x10/0x10 [ 386.312309][T12391] ? __pfx_chrdev_open+0x10/0x10 [ 386.312344][T12391] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 386.312380][T12391] do_dentry_open+0x97f/0x1530 [ 386.312413][T12391] ? __pfx_chrdev_open+0x10/0x10 [ 386.312453][T12391] vfs_open+0x82/0x3f0 [ 386.312494][T12391] path_openat+0x1de4/0x2cb0 [ 386.312537][T12391] ? __pfx_path_openat+0x10/0x10 [ 386.312578][T12391] do_filp_open+0x20b/0x470 [ 386.312610][T12391] ? __pfx_do_filp_open+0x10/0x10 [ 386.312675][T12391] ? alloc_fd+0x471/0x7d0 [ 386.312714][T12391] do_sys_openat2+0x11b/0x1d0 [ 386.312748][T12391] ? __pfx_do_sys_openat2+0x10/0x10 [ 386.312799][T12391] __x64_sys_openat+0x174/0x210 [ 386.312838][T12391] ? __pfx___x64_sys_openat+0x10/0x10 [ 386.312893][T12391] do_syscall_64+0xcd/0x490 [ 386.312930][T12391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.312958][T12391] RIP: 0033:0x7f795f38ebe9 [ 386.312980][T12391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.313006][T12391] RSP: 002b:00007f7960234038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 386.313032][T12391] RAX: ffffffffffffffda RBX: 00007f795f5b5fa0 RCX: 00007f795f38ebe9 [ 386.313051][T12391] RDX: 0000000000000042 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 386.313069][T12391] RBP: 00007f795f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 386.313085][T12391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.313102][T12391] R13: 00007f795f5b6038 R14: 00007f795f5b5fa0 R15: 00007ffecd77ed08 [ 386.313137][T12391] [ 387.720199][T12407] FAULT_INJECTION: forcing a failure. [ 387.720199][T12407] name failslab, interval 1, probability 0, space 0, times 0 [ 387.790547][T12407] CPU: 1 UID: 0 PID: 12407 Comm: syz.2.1257 Not tainted syzkaller #0 PREEMPT(full) [ 387.790582][T12407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.790598][T12407] Call Trace: [ 387.790608][T12407] [ 387.790618][T12407] dump_stack_lvl+0x16c/0x1f0 [ 387.790651][T12407] should_fail_ex+0x512/0x640 [ 387.790680][T12407] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 387.790710][T12407] should_failslab+0xc2/0x120 [ 387.790739][T12407] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 387.790765][T12407] ? do_epoll_ctl+0x1170/0x3790 [ 387.790793][T12407] do_epoll_ctl+0x1170/0x3790 [ 387.790829][T12407] ? __pfx_do_epoll_ctl+0x10/0x10 [ 387.790851][T12407] ? find_held_lock+0x2b/0x80 [ 387.790871][T12407] ? __might_fault+0xe3/0x190 [ 387.790895][T12407] ? __might_fault+0xe3/0x190 [ 387.790930][T12407] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 387.790952][T12407] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 387.790976][T12407] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 387.791009][T12407] do_syscall_64+0xcd/0x490 [ 387.791038][T12407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.791060][T12407] RIP: 0033:0x7f9dc558ebe9 [ 387.791078][T12407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.791099][T12407] RSP: 002b:00007f9dc6474038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 387.791120][T12407] RAX: ffffffffffffffda RBX: 00007f9dc57b5fa0 RCX: 00007f9dc558ebe9 [ 387.791136][T12407] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 387.791150][T12407] RBP: 00007f9dc5611e19 R08: 0000000000000000 R09: 0000000000000000 [ 387.791165][T12407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.791178][T12407] R13: 00007f9dc57b6038 R14: 00007f9dc57b5fa0 R15: 00007ffc3420c9d8 [ 387.791208][T12407] [ 390.751865][T12447] CIFS: VFS: Invalid SecurityFlags: [ 393.204625][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 395.575203][T12572] FAULT_INJECTION: forcing a failure. [ 395.575203][T12572] name fail_futex, interval 1, probability 0, space 0, times 1 [ 395.602615][T12572] CPU: 0 UID: 0 PID: 12572 Comm: syz.5.1284 Not tainted syzkaller #0 PREEMPT(full) [ 395.602650][T12572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.602659][T12572] Call Trace: [ 395.602665][T12572] [ 395.602670][T12572] dump_stack_lvl+0x16c/0x1f0 [ 395.602693][T12572] should_fail_ex+0x512/0x640 [ 395.602716][T12572] get_futex_key+0x1d0/0x1560 [ 395.602734][T12572] ? __pfx_get_futex_key+0x10/0x10 [ 395.602756][T12572] futex_wake+0xea/0x530 [ 395.602775][T12572] ? rcu_is_watching+0x12/0xc0 [ 395.602790][T12572] ? __pfx_futex_wake+0x10/0x10 [ 395.602811][T12572] ? kmem_cache_free+0x2d1/0x4d0 [ 395.602825][T12572] ? fd_install+0x225/0x750 [ 395.602838][T12572] ? putname+0x154/0x1a0 [ 395.602859][T12572] do_futex+0x1e3/0x350 [ 395.602876][T12572] ? __pfx_do_futex+0x10/0x10 [ 395.602897][T12572] __x64_sys_futex+0x1e0/0x4c0 [ 395.602915][T12572] ? __x64_sys_openat+0x174/0x210 [ 395.602935][T12572] ? __pfx___x64_sys_futex+0x10/0x10 [ 395.602959][T12572] do_syscall_64+0xcd/0x490 [ 395.602977][T12572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.602991][T12572] RIP: 0033:0x7f795f38ebe9 [ 395.603003][T12572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.603016][T12572] RSP: 002b:00007f79602340e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 395.603029][T12572] RAX: ffffffffffffffda RBX: 00007f795f5b5fa8 RCX: 00007f795f38ebe9 [ 395.603038][T12572] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f795f5b5fac [ 395.603046][T12572] RBP: 00007f795f5b5fa0 R08: 00007f7960235000 R09: 0000000000000000 [ 395.603055][T12572] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 395.603063][T12572] R13: 00007f795f5b6038 R14: 00007ffecd77ec20 R15: 00007ffecd77ed08 [ 395.603080][T12572] [ 397.218284][T12609] random: crng reseeded on system resumption [ 400.589657][T12656] [ 406.799834][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1318'. [ 406.812201][T12740] netlink: 'syz.5.1318': attribute type 1 has an invalid length. [ 406.819907][T12740] netlink: 'syz.5.1318': attribute type 6 has an invalid length. [ 407.180260][T12744] ima: policy update failed [ 407.184941][ T30] audit: type=1802 audit(4294967454.810:25): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1320" res=0 errno=0 [ 407.240970][T12744] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1320'. [ 407.505529][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1323'. [ 407.863944][T12763] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1325'. [ 409.764034][T12792] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1330'. [ 410.243805][T12803] FAULT_INJECTION: forcing a failure. [ 410.243805][T12803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.264428][T12803] CPU: 1 UID: 0 PID: 12803 Comm: syz.4.1331 Not tainted syzkaller #0 PREEMPT(full) [ 410.264450][T12803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.264459][T12803] Call Trace: [ 410.264464][T12803] [ 410.264470][T12803] dump_stack_lvl+0x16c/0x1f0 [ 410.264493][T12803] should_fail_ex+0x512/0x640 [ 410.264515][T12803] strncpy_from_user+0x3b/0x2e0 [ 410.264534][T12803] getname_flags.part.0+0x8f/0x550 [ 410.264559][T12803] getname_flags+0x93/0xf0 [ 410.264573][T12803] __x64_sys_renameat2+0xd4/0x130 [ 410.264593][T12803] do_syscall_64+0xcd/0x490 [ 410.264611][T12803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.264634][T12803] RIP: 0033:0x7fb8ba38ebe9 [ 410.264646][T12803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.264660][T12803] RSP: 002b:00007fb8bb13c038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 410.264674][T12803] RAX: ffffffffffffffda RBX: 00007fb8ba5b6180 RCX: 00007fb8ba38ebe9 [ 410.264684][T12803] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffffff [ 410.264693][T12803] RBP: 00007fb8ba411e19 R08: 0000000000000004 R09: 0000000000000000 [ 410.264702][T12803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.264710][T12803] R13: 00007fb8ba5b6218 R14: 00007fb8ba5b6180 R15: 00007ffdf7a96f68 [ 410.264727][T12803] [ 413.842785][T12864] Invalid ELF header magic: != ELF [ 414.930437][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 415.062974][T12908] FAULT_INJECTION: forcing a failure. [ 415.062974][T12908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.109693][T12908] CPU: 1 UID: 0 PID: 12908 Comm: syz.2.1348 Not tainted syzkaller #0 PREEMPT(full) [ 415.109729][T12908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.109744][T12908] Call Trace: [ 415.109752][T12908] [ 415.109762][T12908] dump_stack_lvl+0x16c/0x1f0 [ 415.109796][T12908] should_fail_ex+0x512/0x640 [ 415.109834][T12908] _copy_to_user+0x32/0xd0 [ 415.109861][T12908] simple_read_from_buffer+0xcb/0x170 [ 415.109892][T12908] proc_fail_nth_read+0x197/0x240 [ 415.109920][T12908] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.109962][T12908] ? rw_verify_area+0xcf/0x6c0 [ 415.109988][T12908] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.110016][T12908] vfs_read+0x1e4/0xcf0 [ 415.110049][T12908] ? __pfx___mutex_lock+0x10/0x10 [ 415.110081][T12908] ? __pfx_vfs_read+0x10/0x10 [ 415.110125][T12908] ? __fget_files+0x20e/0x3c0 [ 415.110162][T12908] ksys_read+0x12a/0x250 [ 415.110187][T12908] ? __pfx_ksys_read+0x10/0x10 [ 415.110225][T12908] do_syscall_64+0xcd/0x490 [ 415.110259][T12908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.110284][T12908] RIP: 0033:0x7f9dc558d5fc [ 415.110303][T12908] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 415.110328][T12908] RSP: 002b:00007f9dc6432030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.110352][T12908] RAX: ffffffffffffffda RBX: 00007f9dc57b6180 RCX: 00007f9dc558d5fc [ 415.110369][T12908] RDX: 000000000000000f RSI: 00007f9dc64320a0 RDI: 0000000000000007 [ 415.110384][T12908] RBP: 00007f9dc6432090 R08: 0000000000000000 R09: 0000000000000009 [ 415.110400][T12908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.110415][T12908] R13: 00007f9dc57b6218 R14: 00007f9dc57b6180 R15: 00007ffc3420c9d8 [ 415.110451][T12908] [ 418.162365][T12958] could not allocate digest TFM handle [ 418.873415][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 420.762162][T13009] [ 420.767226][ T30] audit: type=1800 audit(4294967468.461:26): pid=13008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1372" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 421.854067][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1368'. [ 429.554314][T13194] FAULT_INJECTION: forcing a failure. [ 429.554314][T13194] name failslab, interval 1, probability 0, space 0, times 0 [ 429.567552][T13194] CPU: 1 UID: 0 PID: 13194 Comm: syz.4.1408 Not tainted syzkaller #0 PREEMPT(full) [ 429.567580][T13194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.567595][T13194] Call Trace: [ 429.567603][T13194] [ 429.567612][T13194] dump_stack_lvl+0x16c/0x1f0 [ 429.567649][T13194] should_fail_ex+0x512/0x640 [ 429.567693][T13194] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 429.567729][T13194] should_failslab+0xc2/0x120 [ 429.567762][T13194] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 429.567794][T13194] ? getname_flags.part.0+0x4c/0x550 [ 429.567839][T13194] getname_flags.part.0+0x4c/0x550 [ 429.567881][T13194] __x64_sys_mkdir+0xd8/0x140 [ 429.567913][T13194] do_syscall_64+0xcd/0x490 [ 429.567948][T13194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.567974][T13194] RIP: 0033:0x7fb8ba38ebe9 [ 429.567995][T13194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.568020][T13194] RSP: 002b:00007fb8bb17e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 429.568046][T13194] RAX: ffffffffffffffda RBX: 00007fb8ba5b5fa0 RCX: 00007fb8ba38ebe9 [ 429.568064][T13194] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 429.568080][T13194] RBP: 00007fb8ba411e19 R08: 0000000000000000 R09: 0000000000000000 [ 429.568096][T13194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.568112][T13194] R13: 00007fb8ba5b6038 R14: 00007fb8ba5b5fa0 R15: 00007ffdf7a96f68 [ 429.568147][T13194] [ 429.953263][T13198] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 429.963584][T13198] flags: 0xfff00000000014(referenced|dirty|node=0|zone=1|lastcpupid=0x7ff) [ 429.998405][T13198] raw: 00fff00000000014 0000000000000000 dead000000000122 0000000000000000 [ 430.143968][T13198] raw: ffff888078006000 0000000000000000 0000000400000002 0000000000000000 [ 430.209892][T13198] page dumped because: unmovable page [ 430.215350][T13198] page_owner tracks the page as allocated [ 430.221553][T13198] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 11896, tgid 11896 (syz-executor), ts 356538688165, free_ts 310695416762 [ 430.335167][T13198] post_alloc_hook+0x1c0/0x230 [ 430.352234][T13198] get_page_from_freelist+0x132b/0x38e0 [ 430.372390][T13198] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 430.385443][T13198] alloc_pages_mpol+0x1fb/0x550 [ 430.414129][T13198] alloc_pages_noprof+0x131/0x390 [ 430.435626][T13198] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 430.459606][T13198] vmalloc_user_noprof+0x9e/0xe0 [ 430.464572][T13198] kcov_ioctl+0x4c/0x730 [ 430.501807][T13198] __x64_sys_ioctl+0x18e/0x210 [ 430.515377][T13198] do_syscall_64+0xcd/0x490 [ 430.528249][T13198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.537532][T13198] page last free pid 10929 tgid 10928 stack trace: [ 430.570328][T13198] __free_frozen_pages+0x7d5/0x10f0 [ 430.588951][T13198] __put_partials+0x165/0x1c0 [ 430.594904][T13198] qlist_free_all+0x4d/0x120 [ 430.599950][T13198] kasan_quarantine_reduce+0x195/0x1e0 [ 430.605436][T13198] __kasan_slab_alloc+0x69/0x90 [ 430.610893][T13198] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 430.616379][T13198] ptlock_alloc+0x1f/0x70 [ 430.655952][T13198] pte_alloc_one+0x82/0x3a0 [ 430.677597][T13198] __do_fault+0x320/0x490 [ 430.687604][T13198] do_pte_missing+0x1a6/0x3ba0 [ 430.699008][T13198] __handle_mm_fault+0x152a/0x2a50 [ 430.717285][T13198] handle_mm_fault+0x589/0xd10 [ 430.722088][T13198] __get_user_pages+0x551/0x34a0 [ 430.728744][T13198] faultin_page_range+0x338/0x940 [ 430.733814][T13198] madvise_do_behavior+0x34c/0x530 [ 430.739505][T13198] do_madvise+0x176/0x240 [ 432.370312][T13257] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 433.511607][T13305] input: jJǸ-9%v as /devices/virtual/input/input21 [ 433.624436][T13310] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 434.080754][T13323] nbd: must specify at least one socket [ 434.343628][T13328] ================================================================== [ 434.343639][T13328] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 434.343663][T13328] Read of size 256 at addr ffff888029968360 by task syz.4.1432/13328 [ 434.343675][T13328] [ 434.343683][T13328] CPU: 0 UID: 0 PID: 13328 Comm: syz.4.1432 Not tainted syzkaller #0 PREEMPT(full) [ 434.343700][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.343709][T13328] Call Trace: [ 434.343714][T13328] [ 434.343720][T13328] dump_stack_lvl+0x116/0x1f0 [ 434.343739][T13328] print_report+0xcd/0x630 [ 434.343756][T13328] ? __virt_addr_valid+0x81/0x610 [ 434.343773][T13328] ? __phys_addr+0xe8/0x180 [ 434.343789][T13328] ? fbcon_prepare_logo+0xa03/0xc70 [ 434.343805][T13328] kasan_report+0xe0/0x110 [ 434.343822][T13328] ? fbcon_prepare_logo+0xa03/0xc70 [ 434.343841][T13328] kasan_check_range+0x100/0x1b0 [ 434.343860][T13328] __asan_memcpy+0x23/0x60 [ 434.343880][T13328] fbcon_prepare_logo+0xa03/0xc70 [ 434.343901][T13328] fbcon_init+0xd77/0x1900 [ 434.343920][T13328] visual_init+0x320/0x620 [ 434.343935][T13328] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 434.343956][T13328] store_bind+0x61d/0x760 [ 434.343973][T13328] ? sysfs_file_kobj+0xe4/0x290 [ 434.343988][T13328] ? __pfx_store_bind+0x10/0x10 [ 434.344003][T13328] dev_attr_store+0x55/0x80 [ 434.344023][T13328] ? __pfx_dev_attr_store+0x10/0x10 [ 434.344041][T13328] sysfs_kf_write+0xf2/0x150 [ 434.344056][T13328] kernfs_fop_write_iter+0x354/0x510 [ 434.344068][T13328] ? __pfx_sysfs_kf_write+0x10/0x10 [ 434.344083][T13328] iter_file_splice_write+0xa24/0x12e0 [ 434.344103][T13328] ? __pfx_iter_file_splice_write+0x10/0x10 [ 434.344119][T13328] ? __pfx_copy_splice_read+0x10/0x10 [ 434.344140][T13328] ? __pfx_iter_file_splice_write+0x10/0x10 [ 434.344155][T13328] direct_splice_actor+0x192/0x6c0 [ 434.344170][T13328] splice_direct_to_actor+0x345/0xa30 [ 434.344184][T13328] ? __pfx_direct_splice_actor+0x10/0x10 [ 434.344199][T13328] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 434.344215][T13328] do_splice_direct+0x174/0x240 [ 434.344229][T13328] ? __pfx_do_splice_direct+0x10/0x10 [ 434.344242][T13328] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 434.344257][T13328] ? rw_verify_area+0xcf/0x6c0 [ 434.344271][T13328] do_sendfile+0xb06/0xe50 [ 434.344286][T13328] ? __pfx_do_sendfile+0x10/0x10 [ 434.344301][T13328] ? __x64_sys_futex+0x1e0/0x4c0 [ 434.344317][T13328] ? __x64_sys_futex+0x1e9/0x4c0 [ 434.344334][T13328] __x64_sys_sendfile64+0x1d8/0x220 [ 434.344352][T13328] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 434.344383][T13328] do_syscall_64+0xcd/0x490 [ 434.344416][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.344443][T13328] RIP: 0033:0x7fb8ba38ebe9 [ 434.344463][T13328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.344489][T13328] RSP: 002b:00007fb8bb17e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 434.344504][T13328] RAX: ffffffffffffffda RBX: 00007fb8ba5b5fa0 RCX: 00007fb8ba38ebe9 [ 434.344514][T13328] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 434.344523][T13328] RBP: 00007fb8ba411e19 R08: 0000000000000000 R09: 0000000000000000 [ 434.344532][T13328] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 434.344541][T13328] R13: 00007fb8ba5b6038 R14: 00007fb8ba5b5fa0 R15: 00007ffdf7a96f68 [ 434.344555][T13328] [ 434.344560][T13328] [ 434.344564][T13328] Allocated by task 5879: [ 434.344570][T13328] kasan_save_stack+0x33/0x60 [ 434.344586][T13328] kasan_save_track+0x14/0x30 [ 434.344600][T13328] __kasan_kmalloc+0xaa/0xb0 [ 434.344613][T13328] __kmalloc_noprof+0x223/0x510 [ 434.344628][T13328] tomoyo_realpath_from_path+0xc2/0x6e0 [ 434.344647][T13328] tomoyo_check_open_permission+0x2ab/0x3c0 [ 434.344662][T13328] tomoyo_file_open+0x6b/0x90 [ 434.344673][T13328] security_file_open+0x84/0x1e0 [ 434.344690][T13328] do_dentry_open+0x596/0x1530 [ 434.344704][T13328] vfs_open+0x82/0x3f0 [ 434.344720][T13328] path_openat+0x1de4/0x2cb0 [ 434.344735][T13328] do_filp_open+0x20b/0x470 [ 434.344748][T13328] do_sys_openat2+0x11b/0x1d0 [ 434.344765][T13328] __x64_sys_openat+0x174/0x210 [ 434.344783][T13328] do_syscall_64+0xcd/0x490 [ 434.344798][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.344811][T13328] [ 434.344814][T13328] Freed by task 5879: [ 434.344820][T13328] kasan_save_stack+0x33/0x60 [ 434.344833][T13328] kasan_save_track+0x14/0x30 [ 434.344847][T13328] kasan_save_free_info+0x3b/0x60 [ 434.344866][T13328] __kasan_slab_free+0x60/0x70 [ 434.344888][T13328] kfree+0x2b4/0x4d0 [ 434.344899][T13328] tomoyo_realpath_from_path+0x19f/0x6e0 [ 434.344918][T13328] tomoyo_check_open_permission+0x2ab/0x3c0 [ 434.344934][T13328] tomoyo_file_open+0x6b/0x90 [ 434.344945][T13328] security_file_open+0x84/0x1e0 [ 434.344962][T13328] do_dentry_open+0x596/0x1530 [ 434.344976][T13328] vfs_open+0x82/0x3f0 [ 434.344993][T13328] path_openat+0x1de4/0x2cb0 [ 434.345006][T13328] do_filp_open+0x20b/0x470 [ 434.345019][T13328] do_sys_openat2+0x11b/0x1d0 [ 434.345037][T13328] __x64_sys_openat+0x174/0x210 [ 434.345054][T13328] do_syscall_64+0xcd/0x490 [ 434.345070][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.345082][T13328] [ 434.345085][T13328] The buggy address belongs to the object at ffff888029968000 [ 434.345085][T13328] which belongs to the cache kmalloc-4k of size 4096 [ 434.345097][T13328] The buggy address is located 864 bytes inside of [ 434.345097][T13328] freed 4096-byte region [ffff888029968000, ffff888029969000) [ 434.345111][T13328] [ 434.345114][T13328] The buggy address belongs to the physical page: [ 434.345120][T13328] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29968 [ 434.345136][T13328] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 434.345147][T13328] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 434.345160][T13328] page_type: f5(slab) [ 434.345173][T13328] raw: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 434.345186][T13328] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 434.345200][T13328] head: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 434.345212][T13328] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 434.345224][T13328] head: 00fff00000000003 ffffea0000a65a01 00000000ffffffff 00000000ffffffff [ 434.345236][T13328] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 434.345244][T13328] page dumped because: kasan: bad access detected [ 434.345250][T13328] page_owner tracks the page as allocated [ 434.345255][T13328] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5963, tgid 5961 (syz.3.4), ts 82258161480, free_ts 82094090367 [ 434.345279][T13328] post_alloc_hook+0x1c0/0x230 [ 434.345292][T13328] get_page_from_freelist+0x132b/0x38e0 [ 434.345307][T13328] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 434.345321][T13328] alloc_pages_mpol+0x1fb/0x550 [ 434.345337][T13328] new_slab+0x247/0x330 [ 434.345347][T13328] ___slab_alloc+0xcf2/0x1740 [ 434.345358][T13328] __slab_alloc.constprop.0+0x56/0xb0 [ 434.345371][T13328] __kmalloc_cache_noprof+0xfb/0x3e0 [ 434.345383][T13328] kobject_uevent_env+0x265/0x1870 [ 434.345402][T13328] device_add+0x10dd/0x1aa0 [ 434.345413][T13328] netdev_register_kobject+0x1a9/0x3d0 [ 434.345432][T13328] register_netdevice+0x13dc/0x2270 [ 434.345450][T13328] register_netdev+0x34/0x50 [ 434.345466][T13328] loopback_net_init+0x7a/0x170 [ 434.345480][T13328] ops_init+0x1e2/0x5f0 [ 434.345497][T13328] setup_net+0x10f/0x380 [ 434.345523][T13328] page last free pid 5966 tgid 5966 stack trace: [ 434.345535][T13328] __free_frozen_pages+0x7d5/0x10f0 [ 434.345557][T13328] __put_partials+0x165/0x1c0 [ 434.345579][T13328] qlist_free_all+0x4d/0x120 [ 434.345601][T13328] kasan_quarantine_reduce+0x195/0x1e0 [ 434.345625][T13328] __kasan_slab_alloc+0x69/0x90 [ 434.345640][T13328] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 434.345654][T13328] vm_area_alloc+0x1f/0x160 [ 434.345666][T13328] __mmap_region+0xf90/0x27b0 [ 434.345680][T13328] mmap_region+0x1ab/0x3f0 [ 434.345694][T13328] do_mmap+0xa3e/0x1210 [ 434.345710][T13328] vm_mmap_pgoff+0x29e/0x470 [ 434.345727][T13328] ksys_mmap_pgoff+0x32c/0x5c0 [ 434.345743][T13328] __x64_sys_mmap+0x125/0x190 [ 434.345761][T13328] do_syscall_64+0xcd/0x490 [ 434.345777][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.345790][T13328] [ 434.345793][T13328] Memory state around the buggy address: [ 434.345800][T13328] ffff888029968200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.345810][T13328] ffff888029968280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.345819][T13328] >ffff888029968300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.345827][T13328] ^ [ 434.345834][T13328] ffff888029968380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.345844][T13328] ffff888029968400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.345851][T13328] ================================================================== [ 434.356181][T13328] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 434.356194][T13328] CPU: 0 UID: 0 PID: 13328 Comm: syz.4.1432 Not tainted syzkaller #0 PREEMPT(full) [ 434.356212][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.356221][T13328] Call Trace: [ 434.356226][T13328] [ 434.356231][T13328] dump_stack_lvl+0x3d/0x1f0 [ 434.356252][T13328] vpanic+0x6e8/0x7a0 [ 434.356272][T13328] ? __pfx_vpanic+0x10/0x10 [ 434.356293][T13328] ? fbcon_prepare_logo+0xa03/0xc70 [ 434.356310][T13328] panic+0xca/0xd0 [ 434.356327][T13328] ? __pfx_panic+0x10/0x10 [ 434.356345][T13328] ? fbcon_prepare_logo+0xa03/0xc70 [ 434.356361][T13328] ? preempt_schedule_common+0x44/0xc0 [ 434.356378][T13328] ? preempt_schedule_thunk+0x16/0x30 [ 434.356397][T13328] check_panic_on_warn+0xab/0xb0 [ 434.356416][T13328] end_report+0x107/0x170 [ 434.356432][T13328] kasan_report+0xee/0x110 [ 434.356449][T13328] ? fbcon_prepare_logo+0xa03/0xc70 [ 434.356467][T13328] kasan_check_range+0x100/0x1b0 [ 434.356486][T13328] __asan_memcpy+0x23/0x60 [ 434.356500][T13328] fbcon_prepare_logo+0xa03/0xc70 [ 434.356519][T13328] fbcon_init+0xd77/0x1900 [ 434.356537][T13328] visual_init+0x320/0x620 [ 434.356552][T13328] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 434.356571][T13328] store_bind+0x61d/0x760 [ 434.356588][T13328] ? sysfs_file_kobj+0xe4/0x290 [ 434.356603][T13328] ? __pfx_store_bind+0x10/0x10 [ 434.356618][T13328] dev_attr_store+0x55/0x80 [ 434.356637][T13328] ? __pfx_dev_attr_store+0x10/0x10 [ 434.356655][T13328] sysfs_kf_write+0xf2/0x150 [ 434.356670][T13328] kernfs_fop_write_iter+0x354/0x510 [ 434.356682][T13328] ? __pfx_sysfs_kf_write+0x10/0x10 [ 434.356698][T13328] iter_file_splice_write+0xa24/0x12e0 [ 434.356718][T13328] ? __pfx_iter_file_splice_write+0x10/0x10 [ 434.356734][T13328] ? __pfx_copy_splice_read+0x10/0x10 [ 434.356758][T13328] ? __pfx_iter_file_splice_write+0x10/0x10 [ 434.356784][T13328] direct_splice_actor+0x192/0x6c0 [ 434.356818][T13328] splice_direct_to_actor+0x345/0xa30 [ 434.356846][T13328] ? __pfx_direct_splice_actor+0x10/0x10 [ 434.356881][T13328] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 434.356900][T13328] do_splice_direct+0x174/0x240 [ 434.356914][T13328] ? __pfx_do_splice_direct+0x10/0x10 [ 434.356929][T13328] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 434.356944][T13328] ? rw_verify_area+0xcf/0x6c0 [ 434.356959][T13328] do_sendfile+0xb06/0xe50 [ 434.356975][T13328] ? __pfx_do_sendfile+0x10/0x10 [ 434.356990][T13328] ? __x64_sys_futex+0x1e0/0x4c0 [ 434.357006][T13328] ? __x64_sys_futex+0x1e9/0x4c0 [ 434.357023][T13328] __x64_sys_sendfile64+0x1d8/0x220 [ 434.357041][T13328] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 434.357062][T13328] do_syscall_64+0xcd/0x490 [ 434.357080][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.357094][T13328] RIP: 0033:0x7fb8ba38ebe9 [ 434.357105][T13328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.357118][T13328] RSP: 002b:00007fb8bb17e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 434.357135][T13328] RAX: ffffffffffffffda RBX: 00007fb8ba5b5fa0 RCX: 00007fb8ba38ebe9 [ 434.357146][T13328] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 434.357155][T13328] RBP: 00007fb8ba411e19 R08: 0000000000000000 R09: 0000000000000000 [ 434.357164][T13328] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 434.357172][T13328] R13: 00007fb8ba5b6038 R14: 00007fb8ba5b5fa0 R15: 00007ffdf7a96f68 [ 434.357186][T13328] [ 434.357417][T13328] Kernel Offset: disabled