last executing test programs: 22m48.159591149s ago: executing program 1 (id=1061): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x5, 0x1, 0x84) syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) statmount$auto(0x0, 0x0, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00', @ANYBLOB="000229bd7000fbcbdf2502000000080003ddffffff0008000100050000a5"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x2006, 0x7fa, 0x7fb, &(0x7f0000000280)}) sendmsg$auto_IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$auto_IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000040)=0x3ff) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/rtc\x00', 0x88000, 0x0) pread64$auto(r3, 0x0, 0x1f, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) 22m47.795789986s ago: executing program 1 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r1, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r2, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000040)={0x401, @raw=0x6, @raw=0x3d7ef620, 0x5, 0xffffffffffff3f41, '\x00', {0x8, 0x1, 0x74a1, 0xee01, 0x0, 0x9, 0x7, 0x9, {0x4, 0xa0}, {0x7, 0x4}, {0x8, 0x6}, 0x2, 0x4580000, 0x8, 0x7, 0x9, 0x0, 0x5, 0x81, 0x9ff6, 0x4, '\x00', 0xb, 0x3, 0x1ff, 0x5222}}) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x74f6, 0xffffffffffffffff, 0x0, 0x8, 0x56a4, 0x5, 0x5}, &(0x7f0000000240)=0x5, 0x0, 0x2, 0x7, 0x927, 0x6, 0x1, 0x4b, 0x7, 0x0, @inferred=0xffffffffffffffff, @raw=0xd}) r5 = getuid() keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x7, 0xffffffffffffffff, r5, r4, 0x7fff) sendmsg$auto_TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x3b0, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x5a, 0x1, 0x0, 0x1, [@typed={0x8, 0x7e0, 0x0, 0x0, @u32=0x3}, @typed={0xc, 0x13c, 0x0, 0x0, @str=',]]$-/+\x00'}, @generic="58998bb8abbc68b758d53650427d862457a78c76aaef14b716b80b8fcf76ed96b52217656915843179ca1c88d96fdfb205e58f7e7673a5a51bff6128db6149926ab8"]}, @TIPC_NLA_SOCK={0x1b0, 0x2, 0x0, 0x1, [@typed={0x8, 0x15c, 0x0, 0x0, @uid=r3}, @nested={0x8a, 0x85, 0x0, 0x1, [@generic="b673c0745a92f7accf1f8ff25c763d9e3d6a70dd5b5bfc8d80c4e293f7010120e0b381dee849c69e0393a1b66a31ffbb1833c39fd4eaa85e6b4a8733d7a959da616f9108b9326a99eb7555ec97093cae7ba9e10b8f88d77b", @generic="7b6163b270f31ace52d9d2cbbc1fdb72a2a25415e037eee4817ad454e38bcf78c0a8f84b406058aa7b624ce5f601"]}, @typed={0x103, 0x76, 0x0, 0x0, @binary="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"}, @typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @TIPC_NLA_BEARER={0x190, 0x1, 0x0, 0x1, [@nested={0xa0, 0x4d, 0x0, 0x1, [@nested={0x4, 0x1b}, @nested={0x4}, @generic="c8b2e6dfaefd36e438818d12409e07ff5544f4317432714bf9ccc862d334a20a2e5b128f0a6d3e37290264ea760af60546eed5359c36fd6a6e7151730998320e11b0e5992c5e40f917415d5f7de1eec061fe9f00079bb8eeba3b2353", @typed={0x8, 0x95, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x142}, @typed={0x28, 0x6d, 0x0, 0x0, @binary="143d7bcaa8bd3ec19629c9ad044d3d0000c4f5cc804555236c52f9be14d429f29f268e7c"}, @nested={0x4, 0x4}]}, @nested={0xec, 0x0, 0x0, 0x1, [@generic="79c2f811c38c9f55a29f3b0e821dcc51d95ac3530c3b9522b935c076e742ef4d3ada9aa2d36f904b95d853e337a1dd7ebc8c562d260bb8be4edffbe8bed92edf06493bbe76d8a2a54e0f41b9044a4ece7ae9794db7fe02535b51164f50afc6bfaf2e6eafcb087a4e43198fcf5d7f3e3e419591f7d8e016fc298f171be88e8b02354632cddb178619a3426ec91475eb51c87f48e395660a6501e7c9018ec9b72855eb82c9410c6c650bdfd82e3d22f13b25fecd5da90d8145daa0974b87aa4e79a802808299577e695e2289538d6da5d8161b10a1bf367b17e8b153b37872060dd4275f66", @nested={0x4, 0x157}]}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x200448c5}, 0x40004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) 22m47.543775389s ago: executing program 1 (id=1066): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) socket(0x28, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="05032abd7000fcdbdf252100eeff752517bf94d47c512c0f2e4d0c792337b6e42a2846fd87bbc4cb8ec59bf868eebff60b9f0e4c525d6343ee1e0e968d6cf64e67be76d26481241bd5efed7365bed4d09080a2b047e1cfc35b95511d2a0cd4a48a77e6fb80875dee5ed680adfef4fdb0d30c0145eefe6df11f37c72b9e24c7432d366020c977981673382e0a0cd6ea39e335397a6f7a75e8cbdcdf27b868dfe72d494f06006638e5641e23ab2477a313d33b95f7c12312ae1403f6"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4050) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) semctl$auto(0xb6, 0x5, 0x9, 0x401) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r4, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x9}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0xc800) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 22m46.589060464s ago: executing program 1 (id=1071): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000000c0), r2) (async) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) mprotect$auto(0xc000, 0x8, 0x8) (async) pwritev$auto(r4, &(0x7f0000000180)={0x0, 0x765}, 0x3, 0x5, 0x5) (async) r5 = gettid() sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000043c0)={0x244c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_TRIP={0x399, 0x4, 0x0, 0x1, [@nested={0xbf, 0xd7, 0x0, 0x1, [@generic='.', @generic="46030ceb68fc90f7f8d51a198fa5c2b5a874d8b659322f447f32c1626f9b7b824cfc622d45055b9f53f74819307fb4e90cda5a63224c370e286acee0f3b07dff0964435398d783622844626e0b22b327cce2be54e28f049b65362bffe20c8ea35ca481bdd99f8852ea708427c1cbcafdb4c2cf05e3773df8aea9dfa269d8a766f06291fc171bac85c5cd2414de79d285a417ced2f0560f239864cbedb42298aec0a7ed0a94497bf397ce892931db46186f68", @typed={0x8, 0x26, 0x0, 0x0, @u32=0x4}]}, @generic="c5fa85f372f009fa27b98c451f25f5ead5ede4d7b8346b3e538fdf028560a460d797b3563549caf48f72f420562ce6b33a69d4ce1e32ca9c7ca9c0b866b83a380fa9c65347af60a9699c76c4b27eaa28cbfe245273b187ae18ef1610fbacbd3969efd92163bbd9bb1e8a44e97848ef81b556cfe969c880d3708aabe176fe6dccde53c7c895a7", @typed={0x4, 0x68}, @generic="e735583aa2c2", @generic="d97a7e7aaa6df7c74c658c1bfa1e8743004db9e321015bc7e3e2b8fdbbe7afc630ab7fbeb1a79f51ff8953d32b768318fb25020349d8fad0eb40d6dd43da121efe31bbc71b079f538ad0c22fb85a3bb7c7da737931", @nested={0x78, 0x110, 0x0, 0x1, [@generic="643c0599d4dfc80d75b541eaa231f23189bb5fcbf3407641802bea507215f653d5066823fe0fa579b681add43f9ae876", @generic="1d09", @typed={0x8, 0x111, 0x0, 0x0, @ipv4=@local}, @generic="482b6429afd83de2d4f8e0c9de964d820be08ea2c7bede300812a0aaa2f19374e68f9daf52fe0b0c4c1aad29e7286c9c9ca2", @typed={0x4, 0x2e}, @nested={0x4, 0x15c}]}, @typed={0x14, 0x11f, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x152, 0x2b, 0x0, 0x1, [@nested={0x14c, 0x82, 0x0, 0x1, [@nested={0x40, 0xd4, 0x0, 0x1, [@generic="1271607afc785a2223404eead415d1c74761f83972b1bcf0b412a02a613609f3af0c44d14bbb84f23336ad41f62bdb5f", @nested={0x4, 0xfb}, @typed={0x8, 0xcc, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @typed={0x8, 0x76, 0x0, 0x0, @pid=r5}, @nested={0xfd, 0x37, 0x0, 0x1, [@typed={0xc, 0x14a, 0x0, 0x0, @u64=0x5}, @typed={0x5b, 0xd0, 0x0, 0x0, @binary="b0726d2d264473f20e4561b05b00f55838b0dfbbcf8f0d396d45b46d6cfcc6026a5e3e16345b369900925ce1b2965e8d43582fc3f693447b6eb8d602d97ff9cd22178dc851bb2bc74fca278d637c5ce2e4fc0b1fa4ad30"}, @typed={0x8, 0xe7, 0x0, 0x0, @u32=0xeb3d}, @nested={0x4, 0x93}, @typed={0xc, 0x122, 0x0, 0x0, @u64=0x6}, @generic="3080ce82f1150586d4c00d329cf23852f0f5e17fc5425ed3260dda57d18b9ac3fd3374c92029a4490cd88789f5f670978e4a57fd5cb7e8810986d4a965b1cb2412d25876d5923c3acb0066b00b5b5a031416296b78ccfef2ebde16d1d4b76407bc76b48be15c9bff89adf18ec8", @typed={0x8, 0xf2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0x129}]}]}, @generic="a3ef"]}, @typed={0x4, 0x35}, @typed={0xc, 0x3c, 0x0, 0x0, @u64=0x3}]}, @THERMAL_GENL_ATTR_TZ={0x209c, 0x1, 0x0, 0x1, [@nested={0x5d, 0xe8, 0x0, 0x1, [@generic="151929df637993a5702df3bf3ffc1c64a869c5fc729a3de46b893670c4259161c7af7055060f038ee56f0b0e4931d73b0ee9d6e1e307f89f16e4a5fdb00e00fda06c0e2411a8b3bf1b8d72c47549ed0df70ade5aeaeeb3dfbe"]}, @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x7}, @generic="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", @generic="acfff4c582387a42c7ae7b4a4b51829d106ebb11903c981fd5332c29f2c26f6bc74826969be4f9d37fa66f87", @generic="613790f862595d61a388528220709b44b791196cfb1c234edd597679c2f18afbd6e9b4a5a6c8fb53e36a3c382623316b35bb5ff82b3ad53d47c19bb3c3b669ed46aeca68dab3263bfac9713a1a6ead44fe5b560339685cad07728904bea0f7ade78661fbf93b85107c89a5cc5d306cd239330a22705bb4702354d86d0d3a0d25b6c2bc486e0534c1c9ccf69fe277415652904ee29aa0179a02420ee58ef941e7ea4f6a880e72ad8da77966b9502c940113f4648c3a8020f62beeb05097a1989d3bcc8d3ff3b0d8570f8e51c8bf5e5890865777dc0ab056481bb7b2644686a439830c120b500b4de8f40f570f69c349f3981235e65c87187e6739268011ebe020bd0be6d90ce6b84d89befcf9a7c7a3251d12a89eaf4b9ca80c5c75b77539be9df1a5f7088b53b3192fa86f6feab35ab56afdfea5d34a867b335e6acf6d10a3da26bb24d529ae01692c648b2a7ac1b7c483499e5b7bde4faa0f0662b6c4cb328c744c96cb44eaa77196452f2784f78ef9e10f676bfea4d818ced2e34d22b74d3f8a4febdf4fa89b54c7e960c3671eb0434e8ae09fc9a4d265adef65b8ae96690ef719d22496af4a71da466b2bf066a1eb8d3cd6e409b0a50df5047a39f8c6d9b48021b541406eee3f793a2664d1936b5f78060f7258d11a39c673e8506edf3c566b40693625bac9e16ebcdafdb087b904c3178587fce15e89ecbc5c46af135b9a3db59fbb392beae0b18119f0619871cc609eb0a30f1cd5eccb9f92ed3120add91bbc88a0e32dbbaa5b89e9abfa86beeb49f09abd8bc3cef6e0de24b9bb3c35f8c6d8b80f3510e2a551668b93c230800ea26fe1ba700da7d4e8d3d413deaaaa19fb134201b4d940f233618883266010ea1d8db892e8683884cb0dbef1190ff365e295b50e33f9f8bc820b0a0970532282fbea47171a25e6e316639d247ad10cf7f219f3bb53efe0cd2e1f2980265bdb68694d1c0b8df35d51e3634b29cbe7138972ef37cf208ec122979ad0d86a649912e88b44259df4de119452a8339fdeb82222344e7d788d92e406bd12cac7af358fe6b92204d73d54cc247da269f6f26fa4532e9f93faaa6f05035275ad7343156e8fa141da3c592216ce61d2b091f936ac99eedea353e774e47b1d68514b8ab03431929993513a75d6620ded2f319ebf41f85bfcebc8d8acc20638ee8d7d052fcd0bfbbf14964e8e4adf77e79d7fa2513d198948eea1295a3093e5cc7bda81cfc82ba4b1f24c51814c4ea819fdbce5fd0190159644e59b82682d3a7ca9a574c55d62e03b8858ba752c1becda781a132e493e1fbf70c51b8e1348a18d17e531958f4190746e9aa29aefd391d5ee4c59e74fb4001861f63564f397138bd0215ae0f598d95b3574f8a790f47ae8f38fb7a42462d36b93ce3949a6faf4161052502207ad02d418224bf240d36c75c06131be2da8b9ddb9b421ae2f128fa892cf98ddfce12913a8449fb764097e8c6d744cf8969044e381482a999c50f5c6a343fd58aeb3a96136746d203a58636dd63088e01b749bc9bf4d1b1ce3933c0a9eb7eba383587de2f8cc2662987e627e9da1d8a06c82abb7f840812f3fcbf8684936f16fb1dcc92c570b761626d026d3fe9c875bea85b445951f08fcdcd6375413847bd147f22ad22108b391634652f438e6da6c8b361bef71983b5fc693a6809da89a22d1b820da307e6df077e61cb46cc1904a90a284912948da94cd515c14fc4e5c4405dd6d9201c92fb930005605a4e014bfc28b4de78f2f6cb52a9bff845947b23a9f0ea9eb85b9b41c5f09981990e15e471420a0be270803192060fcec9c1c3c99287ac4c56bac117392925eb9737ae32150eb18f9333705c24fffda56f7d10d5fe022d46a8176273c2deef9286682fc207ae20226dac3075127f76a2d35866617c7d5979fa0fca2e7406035a601902690f6b2f811dda23c2c66ebf410f2e1b7472f0ec385f3526297fea19ea9f9436c9e09a0ba6c7f3f7f5b924339781e884cbb8c7d1e4797cf94de5eeac46786b244bdc9a2ee159afab476989b34e0713d15a87787f52f86c026863f3e7a44003ff9d73c5a010e7b59d89d845db3988fed905875355476de7bc927e3766a5ad0e14c5ed41a73b1789c4b98e76a7d00aa18a57221a3c6d64049a599d01676779e6d76fc79becd1ab0a147c7650197affec176ed89a5950f58c9a3f2ecb135eb39f5048c4e289325bca011050aa61e2fdbcd5ad8ba2a474e6e2cde95b7c9e7cee6af7631c1b48d6838babfcd372204097ab6a503cd7db71a4825b54825936d2b8e664493c080b35054c2abd2fad009c8759a6e237120c5a0557d5aa036e47861843eda4ed774f145ce1eebffe8f36841edf69c1b51b201f0e1ed60bab3f5b110a9a76968302846de95b2ec78729bf5631f7155c8164685e7e2c15c4cf5fa1ad2814add822a233fee7008ef665138a6c47af1afabb30586581af270fe6eab31b13417487bdd2a7aea95e677a6fd1bca7dde4bb29350ffec95b92c2eaede3a5eb6e6858531a83d93376e7ca86b2c77971320398f47b49999fd981e91bfae81b603708f0b06900d37be57325e704448c63139953a0a69bcbb94efeb5a410660abc20fef8d1d640711d67edae10831b74e411599ea15406ba01221edd61fd7cf3b94ead8feba246e3bde234b3ed6a822800948cb006d0e84451efd66363d65588a7c4258bbbf0f891af9d75b3fa99f103b6f33929ebb70acde72bbf55a19ede11ccec4e91717fe53d8dcb4e83f87b21e23e6960fbf303dc7c8e7db38992dd9a741f6f346014c7a0e58628a1eedc337e90b0cb339910d90eea83340d3a0ed07f0e1a007e68fb84c6e720698994d0242a7234f3981d3d5f9fc7211b929c5d690c183503023087c353f15878f6ea2c64a131ad0f4fb2dfdb99e6c19f79502e7aaa6bb97521a11cba1b5a8145771bb161d611a45f101e7813ce483153a215a41e7aea3961385f30f24dd6d33313b8441ac846056dbb561afc12ade521f2374b21fa72eedae8b9563d40d8551b369b53b216f7e3a5660c6885fba7d94a7c63e2b88de0db9fe4d584e95a1aa01be0f6b40e38388654a9c3175e956d88825b6f1f67387df221fa9c45f70fd15172c7bc2923bf2ea968569ede494b56e21016930641a1f4ab24ddba37fb1f0181caa860a93fde26fb7916269726d3faeaddfe5bf23a7af4b8f4b8e876981823376512cd288e06f32ce97a302e16a4d5f54f3f85400f8f3b7ccf7a2ea03fd40da07c4a6a237728524a2c285eb1ec3bb27f848ecba98c164e69c1bd27e5720f88ddd21e7fb541f516b368902c5c5d1270ec206c76f2ac14e134e5d397dc5abb7ce18fcb1c7575cb12c81e2c619440e1172275f5fe9637c0b3b47db60e70aec54624ccfc78fa02ab7ba4f263ed34afd6d0b1e6f452963bdd773efc9616756959679d5c7053782744e10464e3957c10a513599ed185172a18f459755d7ba957dfb2c566307bf22adc2c8f4bb0abf04cb10103604039b9a617787d56f84231252d093926d4040d9879a28927e4d48b104f70f1582e0c46fec885fb2104d2279fc873886091f8e5e34e31f7f22e949f81660f4ef6bac45c06afc3ef6b8aeba0035432a133c337f061e1bda4edcb7d328cac627b5405dd37bdfb37c18e8c4d2652d1b1db11735aff281cc719ad5addf0e46c92bcdb0c1d4034401f1721d19ba1133442ea65c54c9b1d2e59e4cd0300f76c11dc98842c1885819df025ca5eb424e84249902950126347696dc2f42085da0a9586d5ae2d1af3947e64e0d69370a7400a682628f2b5c46c5d71d64f1b1e3a33b18acb3f721471e3117e523cc42487c9f788466d4725afdf702e5204db7867bc05c4d4b79d7b9dec9dcaf7780516e93125161c3a0ba3fbc09e0b1dd35350c83cdd0643b59ac6bc8b7945327dfd69cde53aff9cd25ee21a8f374eda94f42c30bcfd40f5e3dfa1602e613053f29e649b9f62c77216a2e3e81b25593c360a6924fb5a4652b7c6d98992569ce272980378419e2e2d13c4bf0d15e4f6b0d7b52373fa5dbc9fd96d65857a2cd5cbc285d17619079407dfa824ab57376d088161ffa245f9299229eb054c1a589b196efba330db69c258d2ee5f9fadd3e82c4e2900a0509ab1ce1ee4f99e8985c32f701c1607d9836368f41dd25cf8ab21cd80f2ffcdc9c0e688829ff551d95d8267a9e6e768f5a0a31a965be79a4d05d99c8eae587568d119fe3c6bed5d6093249c18134c172d023a81c130877e495842cd5b5539b6b001d6fd109c91dfd947ccf7b3f9d8ca11a46a62c41902fdf17c7dba2603798a72f8848e6e67660c337380c428109d84106fc2b7265fc1cc4c4ae07c149e8eb15c906627c2506c8a0f8392a034784b9e5204836d36bbd461f344dfb4c7572323b7b28f865b200bbdc59bd017b5a9dcb33c6de62d21c25358c3ac14d7ea671562dc28569ac2a4042b4b2b16d8936d01f30688aa5d6551eb773dd7fd88e4dc2e2fed3de5166ea0260d9ae5a576b89b5f53720275d34179e421bb409f608a4e1cfa646c404e65116e16ad17b2439f1ca413020cab5c5dcf3b127033425f6aaade537ad2392746bed179383d3ba3eb42c340b7b271435e5edf24b6ce5618ccaded56bcb3d7d8aeec342becae492960dbfc89b11837ffefc6510e3d5b1e0c12c2241c7bac6fa9d4d88af61f6fceba8e5a8b3371fb4ef1d58407457c61d5959f90785989d5347a44a1fdae6a173258812b77cfd662bca033665c3d280aa176038540787b685848f7fd685feb48774db22115185ea74f51d53d3a8ae51466751bd1ea99a08d63c9fcc33271b9f40017765f02a4c5939a6d4da69c1f50a4675cd30c920d5d4cdb52243eeb7dcdcaba7010e8447fbe0b5b08eb1dbd3bf291968d3bdc0f49b13e925f40a70f6e4e911c61f66bb4360208642fe689bcb54e0a1043b59ebefa1c2b9ed547631b456b1b4ca14b0deba9cd4d3b1c15965e7f5d106989dcebe323eb7980803857fd58ba89fdd634d2a5b6ea101cdbf681492cc70e6bca2c60a9b64aa7a0ba9fd5283a6bbfb2c7e30a3b29cd1ec6f5f5cc72c80bf90c5d58e6dff4148bf97b6dc2e177d890fdfda8ebb7a56bc45705badc103706bcd49dbdcad237d1ad5fcd3cd5462574e502656fdc5f521cd5cb1c520afb69cc58f2ad413bab9800e335bdb94b496e0e75d89e85b955faf973449a19be9f7eccaa7024b605005f453bcb6ccdaa309ba2e3449bd52eaaf401e0ba021df8a0dec2ad8f81c7440c0c223d91a628f6db82c7c2b95c37189f4bb7975bc411940fd30a6378f6c90bce905e58a326d3fab507e064e2b3b0c791c572b688f42722da592d68a4317d793dc8d7a26399bc3ba3e964f29712152c4f6536615cc20a1c79b8a959fa781441dd1a232a5e81ed5497e63489520ae6c073abc2f5f40e89cae7a86dae0f2d72c15db5fbf6460da4c735ab05379ce7901c2787a685df57da3cf7a8463eb9ca9b96326469439d05e1eef80cd55fe64579aa44835009ad3f938de3737092f1152793e8db0e8c8f9ff4dd010ad99b0380f7dc6f1d935fd51b41c080b5cfe40b783f0e12efc03ded993c176d0995ff0301402dc4d6b201dc0ec319d758a6546948211597165c5a29b20f86588c1739fb41b2ec5c6ab3719f66e36371b0973e47c52e11a24fd91b5158875415c9d71a7aef45cbb08433e8c5e0dd600a05ac47b1b5b042c4ef025e18ad3312a0a823e7d8c529c1f8ebc432ab4eb77967968afb8fd2fe2475f093d8b09d79097ab849b5bbe0e3d877df229"]}]}, 0x244c}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) (async) read$auto(r2, 0x0, 0x1) (async) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000004c5590718cb8cccc37b", @ANYRES16=r1, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x48090}, 0x20000000) 22m46.263666178s ago: executing program 1 (id=1072): r0 = setfsuid$auto(0xee00) r1 = setfsuid$auto(0xee01) setresuid$auto(r0, r1, r0) (async) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000020, 0xffffffffffffffff, 0x8}, 0x0, 0x7ff7fffff000, 0x0) (async) getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0x3, 0x6, 0x0, &(0x7f0000000080)=0x4) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) sysfs$auto(0x2, 0x23, 0x0) (async) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x4) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) 22m46.169777718s ago: executing program 1 (id=1074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000300080009808847338012000100898771f1c19f17790485908286dd0000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 22m30.925482334s ago: executing program 32 (id=1074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000300080009808847338012000100898771f1c19f17790485908286dd0000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 20m51.854062854s ago: executing program 2 (id=1464): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r0 = socket(0xa, 0x2, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyxd\x00', 0x301202, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f00000002c0)="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") (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x18, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) read$auto_aoe_fops_aoechr(0xffffffffffffffff, &(0x7f0000000080)=""/166, 0xa6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0x2, 0x1, 0x106) (async) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) (async) unshare$auto(0x40000080) (async) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x4004ae99, 0x0) 20m50.403011344s ago: executing program 2 (id=1468): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0xffffffff, &(0x7f0000000040)={[0x54, 0x10, 0x800000c8be, 0x8, 0x273a, 0x0, 0xb, 0x5, 0x5, 0x330, 0x7, 0x200cf, 0x45, 0xc, 0x5, 0xb98]}, 0x0, 0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/route/flush\x00', 0x80401, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/kernel/perf_cpu_time_max_percent\x00', 0xa042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f00000002c0)="81", 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x519fe2330e8225a8, 0x0, 0x44, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 20m49.273397676s ago: executing program 2 (id=1473): pipe$auto(&(0x7f0000000500)) fcntl$auto(0x3, 0x4, 0xa553) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x6, 0x0, 0x18) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0081, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) futex_wait$auto(0x0, 0x4002, 0xb, 0x2, &(0x7f0000000080)={0x80000000005, 0x8000007fff}, 0x1) select$auto(0x5, &(0x7f0000000080)={[0x400020000006, 0x6d7, 0x7, 0x6, 0x8, 0x2000003, 0x3, 0x1ffe000, 0x1, 0x2, 0xc, 0xc, 0xa657, 0x203, 0xcf, 0x1]}, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x2001) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fsopen$auto(&(0x7f0000000000)='*!\\#{\xa7#\\*@\xfc+*.\x00', 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x7, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/state\x00', 0x189e42, 0x0) socket(0x2d, 0x2, 0x0) ioctl$auto_FS_IOC_GETVERSION(0xffffffffffffffff, 0xff01, &(0x7f0000000080)=0x80) write$auto(r3, 0x0, 0xf) 20m47.875905501s ago: executing program 2 (id=1477): r0 = prctl$auto_SIGCONT(0xf, 0x12, 0xffffffffffffffff, 0x5, 0x9) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000200)=@iter_create={r0, 0x7fff}, 0x5) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r1, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) acct$auto(&(0x7f0000000140)='/sys/kernel/debug/page_tables/current_user\x00') r2 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r2, &(0x7f00000002c0)=""/190, 0xfffffe39) write$auto(0x3, 0x0, 0x8) read$auto(0x3, 0x0, 0x7fffffff) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 20m44.697410879s ago: executing program 2 (id=1490): syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={0x0}, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x0, 0x400003, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000004c0)={[0x4000000e3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x17d, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000002640)='/dev/mtd0\x00', 0x8000, 0x0) ioctl$auto_MEMGETBADBLOCK(r2, 0x40084d0b, &(0x7f0000002680)=0x4d831b35) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = accept$auto(r1, &(0x7f0000000100)=@generic={0x8, "00e7ffffff00"}, &(0x7f0000000080)=0xe) ioctl$auto_FIONCLEX(r3, 0x5450, 0x6) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket(0xa, 0x2, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) 20m43.404992842s ago: executing program 2 (id=1498): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183841, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x5c8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) semget$auto(0x3be05e76, 0x6, 0x5) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hid_magicmouse/parameters/scroll_speed\x00', 0x20142, 0x0) write$auto(0x3, 0x0, 0x81) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) r2 = socket(0x11, 0x80003, 0x300) recvmmsg$auto(r2, 0x0, 0x0, 0x9, &(0x7f00000007c0)={0x9, 0x5}) ioctl$auto(0x3, 0x5402, r1) 20m28.211299145s ago: executing program 33 (id=1498): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183841, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x5c8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) semget$auto(0x3be05e76, 0x6, 0x5) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hid_magicmouse/parameters/scroll_speed\x00', 0x20142, 0x0) write$auto(0x3, 0x0, 0x81) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) r2 = socket(0x11, 0x80003, 0x300) recvmmsg$auto(r2, 0x0, 0x0, 0x9, &(0x7f00000007c0)={0x9, 0x5}) ioctl$auto(0x3, 0x5402, r1) 17m54.486982564s ago: executing program 5 (id=2010): r0 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_GET_TXSC(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB='{o&'], 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40080c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd10/queue/iosched/read_expire\x00', 0x1c2b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010b27bd7000fcdbdf251500000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000140), r1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) madvise$auto(0x0, 0x268, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_VDPA_CMD_MGMTDEV_GET(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80101908}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x5}, @VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x1}, @VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x5}]}, 0x30}}, 0x40000c1) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 17m53.917804531s ago: executing program 5 (id=2014): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/prev\x00', 0x101002, 0x0) write$auto_proc_pid_attr_operations_base(r0, &(0x7f0000000200), 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r1 = open(&(0x7f0000000100)='./file0/file0\x00', 0x28800, 0x0) fcntl$auto_F_SETPIPE_SZ(r1, 0x407, 0x6) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x141041, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="110000000700"/15, 0xf) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) ioctl$auto(0xffffffffffffffff, 0x40146f2c, 0xffffffffffffffff) fcntl$auto(r3, 0x595834f3, 0x0) shmctl$auto_SHM_INFO(0x10000, 0xe, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) fanotify_init$auto(0x1ff, 0xc7) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x40482, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, 0x0) timerfd_create$auto(0x101, 0x400) 17m53.654329504s ago: executing program 5 (id=2016): mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x28342, 0x0) r1 = pipe2$auto(0x0, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2c40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r2, @ANYBLOB="1b0026bd7000fddbdf250300000004000800340003803000e000429a7032a45f07b2849782a84e422b9c192b753ba781b007e161f26aed2c12309de62bfe6c12f0df107ed4ad12000100898771f1c19f17790485908286dd00004e000280"], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0xc800) r3 = socket(0x1d, 0x3, 0x5) r4 = socket(0x6, 0x6, 0x2) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) bind$auto(0x3, &(0x7f0000000200)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x5810, 0xffc, 0x8000000008011, 0x3, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r3) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYRESHEX=r4], 0x14}, 0x1, 0xffff0000}, 0xc4) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) getsockopt$auto(r3, 0x65, 0x40002, 0xffffffffffffffff, 0x0) bpf$auto(0xd3, &(0x7f0000000140)=@test={r3, 0x80000001, 0x7ff0, 0x8000, 0x3, 0x7c5, 0x3, 0xfffffffc, 0x9, 0x2, 0x10000, 0xbc, 0xe, 0x9, 0x7}, 0xa81) r7 = epoll_create$auto(0x8800001) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000080)='7', 0x1) epoll_ctl$auto(r7, 0x1, r0, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/o2cb/logmask/ERROR\x00', 0x183042, 0x0) sendfile$auto(r9, r9, 0x0, 0x8000) close_range$auto(0x0, 0x5, 0x0) 17m52.972915651s ago: executing program 5 (id=2018): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) socket(0x28, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="05032abd7000fcdbdf252100eeff752517bf94d47c512c0f2e4d0c792337b6e42a2846fd87bbc4cb8ec59bf868eebff60b9f0e4c525d6343ee1e0e968d6cf64e67be76d26481241bd5efed7365bed4d09080a2b047e1cfc35b95511d2a0cd4a48a77e6fb80875dee5ed680adfef4fdb0d30c0145eefe6df11f37c72b9e24c7432d366020c977981673382e0a0cd6ea39e335397a6f7a75e8cbdcdf27b868dfe72d494f06006638e5641e23ab2477a313"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4050) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) semctl$auto(0xb6, 0x5, 0x9, 0x401) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r4, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x9}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0xc800) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 17m52.489357588s ago: executing program 5 (id=2022): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/fscaps\x00', 0xe0a00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000010c0)=""/136, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) socket(0x2, 0x5, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) io_uring_setup$auto(0x1000, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x6, 0x5, 0x5]}, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r1, 0x5412, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) syz_clone(0x519fe2330e8225a8, 0x0, 0x44, 0x0, 0x0, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 17m51.357264332s ago: executing program 5 (id=2027): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x5, 0x1, 0x84) syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) statmount$auto(0x0, 0x0, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00', @ANYBLOB="000229bd7000fbcbdf2502000000080003ddffffff0008000100050000a5"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 2) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x2006, 0x7fa, 0x7fb, &(0x7f0000000280)}) sendmsg$auto_IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$auto_IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000040)=0x3ff) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/rtc\x00', 0x88000, 0x0) pread64$auto(r3, 0x0, 0x1f, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) 17m35.906671791s ago: executing program 34 (id=2027): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x5, 0x1, 0x84) syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) statmount$auto(0x0, 0x0, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00', @ANYBLOB="000229bd7000fbcbdf2502000000080003ddffffff0008000100050000a5"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 2) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x2006, 0x7fa, 0x7fb, &(0x7f0000000280)}) sendmsg$auto_IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$auto_IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000040)=0x3ff) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/rtc\x00', 0x88000, 0x0) pread64$auto(r3, 0x0, 0x1f, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) 11.344934418s ago: executing program 4 (id=5477): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xfffffffd, 0x9, 0x3, 0x16, 0x4, 0x5, 0x3, 0x800000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x3, 0xb414, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, [0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff], "c4cbb7ab40a4d6220aa6d6ea4305f533c9e9bee6fcfc61722ccb678e0e2cba7194bc385b26d84c96723400de3b5aacff44f65a10b6c36a9a55945d88270da0f18327ed7c66498ace94f97e799732311e069e26edbb6db1b0ddede50878458b27f5e2fb6581"}, 0x200, 0x81) setfsuid$auto(0xee00) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x18, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) readahead$auto(r3, 0x2, 0x10001) 9.851271673s ago: executing program 6 (id=5483): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xfffffffd, 0x9, 0x3, 0x16, 0x4, 0x5, 0x3, 0x800000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x3, 0xb414, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, [0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff], "c4cbb7ab40a4d6220aa6d6ea4305f533c9e9bee6fcfc61722ccb678e0e2cba7194bc385b26d84c96723400de3b5aacff44f65a10b6c36a9a55945d88270da0f18327ed7c66498ace94f97e799732311e069e26edbb6db1b0ddede50878458b27f5e2fb6581"}, 0x200, 0x81) setfsuid$auto(0xee00) sysfs$auto(0x2, 0x5, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x18, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) readahead$auto(r3, 0x2, 0x10001) 7.779192409s ago: executing program 0 (id=5487): statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xfffffffd, 0x9, 0x3, 0x16, 0x4, 0x5, 0x3, 0x800000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x3, 0xb414, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, [0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff], "c4cbb7ab40a4d6220aa6d6ea4305f533c9e9bee6fcfc61722ccb678e0e2cba7194bc385b26d84c96723400de3b5aacff44f65a10b6c36a9a55945d88270da0f18327ed7c66498ace94f97e799732311e069e26edbb6db1b0ddede50878458b27f5e2fb6581"}, 0x200, 0x81) setfsuid$auto(0xee00) sysfs$auto(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) socket(0x18, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0xca400, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r2, 0x0) unshare$auto(0x40000080) 7.369865197s ago: executing program 4 (id=5488): pipe2$auto(0x0, 0x0) r0 = open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x4) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STOP_OLD(r0, 0x5421, &(0x7f0000000100)="3e9c7eaee5fafe68678b7f5e1648142b11c29c62ff58898ad47401e20a80535bbdf95a24c3c887c5311dc635af40547b5b0f67de14c757d510f892b993") socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r1, [], {0x6, 0x40000006, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0xff}, {0x100, 0x1, 0x101, 0x85, 0x0, 0x24, 0xfe000000, 0x8, 0x4}}) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) select$auto(0x5, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xff, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) acct$auto(&(0x7f00000001c0)='/dev/vhci\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) request_key$auto_KEY_SPEC_GROUP_KEYRING(&(0x7f0000000300)='\x00', &(0x7f0000000340)='/dev/psaux\x00', &(0x7f0000000380)=')@#\x00', 0xfffffffffffffffa) 6.325105953s ago: executing program 6 (id=5491): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000000000006) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r2, 0x7005, 0x0) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x20) mmap$auto(0x8005, 0x2020009, 0x3, 0xeb1, r1, 0x8000) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, 0x0) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='40CB', @ANYRES16=0x0, @ANYBLOB="200b28bd7000fbdbdf250c00000005000a00060000000a001000ae1950aee28500000a001000ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x4011}, 0x4000855) write$auto_tomoyo_operations_securityfs_if(r5, 0x0, 0x0) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 6.098870395s ago: executing program 0 (id=5492): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0x9, 0x5, 0x1) connect$auto(r1, &(0x7f0000000080)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x51) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_pwait2$auto(r2, 0xfffffffffffffffc, 0x1000, 0x0, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000003c0)={{0x0, 0x6, 0x220800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r3, 0x5420, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x9, 0x7b, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x10000000008000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) mmap$auto(0x0, 0xb9f, 0xf002, 0x9b7e, 0xffffffffffffffff, 0x8004) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000180)="e9fa89a53e03ac7a", 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x140) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x1a6b75d63882a712, 0x0) close_range$auto(0x2, r0, 0x0) acct$auto(&(0x7f0000000100)='/dev/psaux\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0xffffffffffffffff, r4, &(0x7f0000000040)=0x91, 0xc3dd) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a80), 0xffffffffffffffff) 5.314862398s ago: executing program 6 (id=5494): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3c, 0x800000800, 0x0, 0x1, 0x2000f) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x3, 0xa) getsockopt$auto(r2, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x103301, 0x0) ioctl$auto_RNDGETENTCNT2(r3, 0x80045200, 0xffffffffffffffff) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x7ffc) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000540)=@bpf_attr_1={0xffffffffffffffff, 0xfffffffffffefffa, @value, 0x7fffffff}, 0xbebd4e73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r6, 0x0, 0x100000002, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7f, 0x9, 0x0) mq_timedsend$auto(r4, 0x0, 0x2, 0x9, 0x0) 5.176301295s ago: executing program 0 (id=5495): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000006c0), 0x20040, 0x0) readv$auto(r0, &(0x7f00000007c0)={0x0, 0x5}, 0x5) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = memfd_secret$auto(0xfff) msgctl$auto(0x6, 0x9, &(0x7f0000000240)={{0xff, 0xee00, 0xee00, 0xffff, 0x0, 0x3, 0x5}, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x1, 0x0, 0x2, 0x7fffffffffffffff, 0x9, 0x2, 0x1000, 0x6, 0xe, @raw=0x64d5}) shmctl$auto_IPC_SET(0x6, 0x1, &(0x7f0000000380)={{0x19, 0xee01, 0xffffffffffffffff, 0x36, 0xb, 0x3, 0xc2}, 0x0, 0x5, 0x9, 0x8, @inferred=0xffffffffffffffff, @inferred, 0x0, 0x0, &(0x7f0000000300)="bad99a68f40bad84a49a40645ddb3b8601353e6c3ffa8c1d86ebe8f6a8fea64f19287d04ed94fd848f69e470e04f411ca5e643f836c4205f647724ad79", &(0x7f0000000340)="96c092383a6b6155d0d356f6544e"}) statx$auto(r1, &(0x7f0000000000)='./file0\x00', 0xe6e, 0x8, &(0x7f0000000400)={0x8001, 0xfffffff7, 0x7ff, 0x1, r2, r3, 0xff1d, 0x7fff, 0x7, 0x9, 0xb, 0x2e57, {0x2, 0x797}, {0xffffffffffffffff, 0xec72}, {0xffffffffffffff00, 0x92c}, {0x2, 0xf5}, 0xfffff0e1, 0x7, 0x80000000, 0x8, 0x7, 0x4, 0x1, 0xa6a, 0x0, 0x4, 0xd, 0x200, [0x7, 0xdc1, 0xe, 0x80000000, 0xee1d, 0x7fffffffffffffff, 0xe648, 0x95, 0x4]}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0xffffffffffffffff, 0xc01070ce, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0xffffffffffffffff, 0xeffffffeffffffff, 0xd2) socket(0x28, 0x5, 0x28) socket(0x2, 0x3, 0x6) r4 = socket(0x2, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0xb2c, 0x2, 0x20000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_settime$auto(0x14, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) 4.775754272s ago: executing program 0 (id=5497): mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = getsockopt$auto(0xffffffffffffffff, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00", 0x3ff, 0x408, 0xc, 0x400004, 0x200000000040000d}) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/free_buffer\x00', 0x7118c1, 0x0) madvise$auto(0x0, 0x5, 0x15) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r4 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x217102, 0x0) recvmmsg$auto(r4, 0x0, 0xd, 0xc, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(r2, 0x0, 0x8) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto_console_fops_tty_io(r0, &(0x7f0000000180)="bef90f87513d2d633b0f69e47c8e6d774a556bfff71d1cfaec17f7a8557363193c27896b9b16aec69b175b7f5dd032e9b6612829635a3696aba1c41c4affa748ee8800494df2d189a0b48440f1633b84d484dfbea91167e5eccb9ac8bb0348aea915971f7c198ba303494694018519372db271", 0x73) prctl$auto(0x1000000003b, 0xea7, 0x4, 0x5, 0xb) madvise$auto(0x2, 0x8544, 0xaa) madvise$auto(0x0, 0x200007, 0x19) prctl$auto(0x43, 0x0, 0x0, 0xfffffffffffffffe, 0x5) syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/mb_stats\x00', 0x88000, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/maps\x00', 0x201, 0x0) 4.657412695s ago: executing program 3 (id=5498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="10002c8008004b", @ANYRES32, @ANYBLOB="040600"], 0x2c}}, 0x4000000) (fail_nth: 4) 4.015527009s ago: executing program 3 (id=5499): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, &(0x7f0000000080)={0x7ffffffe, 0x3, 0xa63e, 0x8, 0x0, 0xfe}) r3 = ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000040)=0x1) r4 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfe02, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000805}, 0x4040011) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) pwrite64$auto(r1, 0x0, 0x8, 0x400000000000000) mmap$auto(0x20000000000000, 0x20009, 0x2, 0xeb1, 0x401, 0x8000) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) sendmsg$auto(r1, &(0x7f0000000640)={&(0x7f0000000380)="8005267da0fa78f4e8c5a364b0b9a2e0d1c3a65b790e0a172797ee19759628917bd6abd308c3f2f13f5c21c8761bf241b85f9952a029ee6cb443a554af38306f63d1715fb8911ae5fbe4eb2ca8685ff9f7acf48a7078ed", 0x100, &(0x7f0000000540)={&(0x7f0000000440)="885ea9071d6c0bb0e44195a2e947ab3d3d190768b29bef68e0b5f105815e37ac2c024313fd15d4dee76724ae0f52e7f8a68e96718f4498e48f31bd0daff5f6fd17bfed2e6657b484538515a3b9bbc5b5b7d131090a4b9f41a4ea9ebc2f1d4e68848ebe0aca0d45dd049f9a0a5c275c14fff55a1aa9bfb464b793bc7192f4b9ad3645e47de311125ae34231a61d5465594082339dbdbe43f2122b7e8f9cccc640418d6ac4e4f2ad2a5b185731387b3b0061d32d476004c1e6df024548de534a0f14bbf45d929a785e8de5717c6d", 0x5}, 0x10, &(0x7f0000000580)="acb810fa217b3b9aedc860934371746e64c6c64bca74800eb146f8864b25ee12ec60ddbd27f48efd9bc11ca30d3bd40c735946205dd8cd30118a35f8e4072d32e08fb7461857d2eb53fcd1ad9ede3ab2e909f26fadd1b9c1ef3f0c45b2a9ca7236f56cd31dc041c48b966e57c923b29b38220fbf7946013143609716cedcb6b92a64", 0x3, 0x200}, 0xb2b) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/nvram\x00', 0xa502, 0x0) mlockall$auto(0x76c) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ram8\x00', 0x48000, 0x0) fadvise64$auto_POSIX_FADV_NOREUSE(r6, 0xfffffffffffffff8, 0x200, 0x5) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f00000001c0)=""/213, 0xd5) 3.184351125s ago: executing program 4 (id=5500): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0xa, 0xa) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = fcntl$getown(r0, 0x9) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000000)={"18d779f3905e204a9328b02c54ca6d67d92af7214de6bd02b8325513aee1c3de", 0x8001, 0xffff, 0x5, 0x8, 0x7, r1}) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x862a, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0x6, 0x0, 0x4, 0x2a17, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x33e, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x8000]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) 3.105352185s ago: executing program 0 (id=5501): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xfffffffd, 0x9, 0x3, 0x16, 0x4, 0x5, 0x3, 0x800000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x3, 0xb414, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, [0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff], "c4cbb7ab40a4d6220aa6d6ea4305f533c9e9bee6fcfc61722ccb678e0e2cba7194bc385b26d84c96723400de3b5aacff44f65a10b6c36a9a55945d88270da0f18327ed7c66498ace94f97e799732311e069e26edbb6db1b0ddede50878458b27f5e2fb6581"}, 0x200, 0x81) setfsuid$auto(0xee00) sysfs$auto(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, 0x0, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) socket(0x2, 0x1, 0x106) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x18, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0xca400, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r2, 0x0) unshare$auto(0x40000080) readahead$auto(r2, 0x2, 0x10001) 2.898932653s ago: executing program 3 (id=5502): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103041, 0x0) mmap$auto(0x0, 0x2020049, 0x7, 0xeb1, 0xffffffffffffffff, 0x401) get_robust_list$auto(0x1, 0x0, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r0, 0x40047459, 0x0) write$auto(r0, 0x0, 0xa3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) r1 = prctl$auto(0x43, 0x1000000000000017, 0x0, 0x9, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x801, 0x84) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, 0x0, 0x3a) sendmmsg$auto(r1, 0x0, 0x9a6, 0x212) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x1c0103, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) connect$auto(0x3, 0x0, 0x54) connect$auto(0x4, 0x0, 0x10) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) r4 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x303800, 0x0) sendfile$auto(r3, r4, &(0x7f0000000100)=0x50000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.59413206s ago: executing program 3 (id=5503): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bond_slave_1\x00', 0x0}) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0x1, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x20499d, 0x9) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'pim6reg0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET2(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r1}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r4}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24044840) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) stat$auto(0x0, &(0x7f0000000100)={0xfffffffffffffff7, 0x2, 0x8c0, 0x40d, 0xee00, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0xe, 0xb, 0x457c, 0x5, 0xf6b, 0xa, 0x8}) ioctl$auto_PROCMAP_QUERY(r6, 0xc0686611, &(0x7f0000000080)={0x101, 0x31, 0x7fff, 0x5, 0x8, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0xd}) 2.242676671s ago: executing program 4 (id=5504): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x601, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/dummy_hcd.3/usb4/ep_00/power/runtime_suspended_time\x00', 0x20200, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000080)={{@raw=0x6, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x1, 0x4, @raw=0x3, @integer64={0x9, 0xec, 0x340}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) setsockopt$auto_SO_SNDBUFFORCE(r2, 0xd, 0x20, &(0x7f0000000080)='\x00', 0x4) ioctl$auto_VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x2}) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r2, 0xc0884123, &(0x7f00000021c0)={0xa000, 0x0, @status={0xd, 0x0, {}, 0x0, {}, {0x3, 0xe}, 0x2, 0x0, {0xfffffffffffff1af, 0x5}}, @reserved="f35874c92112449e7fd4fef7e9c5395063bf2b6e655dab345919d402376165b4c9e339e25ae88cc065d57566caddb3756a0726743683be0d7d86660a25738d9f"}) write$auto(r0, 0x0, 0xd4d0) 1.917229598s ago: executing program 4 (id=5505): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x839) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) write$auto(r0, &(0x7f0000000000)='0\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x7fff) (fail_nth: 7) 1.827598639s ago: executing program 3 (id=5506): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/loginuid\x00', 0x202840, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/5/smp_affinity\x00', 0x129542, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b80040043"], 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fedbdf2502000000080003008000400008001d"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x841) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) io_uring_setup$auto(0x7, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(r4, 0x80200000, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_SET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000855}, 0x0) clock_settime$auto(0x26f, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.359657712s ago: executing program 6 (id=5507): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x2, 0x0) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) read$auto_dma_buf_debug_fops_(r0, &(0x7f0000000000)=""/102, 0x66) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) 1.255766543s ago: executing program 6 (id=5508): syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) socket(0x23, 0xa, 0x0) seccomp$auto(0x2, 0x10, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/boot_params/data\x00', 0x2c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4109, 0x100d) fchmodat2$auto(0xffffffffffffffff, 0x0, 0x6, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) get_mempolicy$auto(0x0, 0x0, 0x2, 0x86, 0x9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card2\x00', 0x688200, 0x0) mmap$auto(0xd, 0x2000a, 0x5, 0xeb1, 0x401, 0x10000008000) socket(0xa, 0x801, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/use_carrier\x00', 0x103b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x8080000001) mmap$auto(0x4, 0x6, 0xdb, 0xebb, 0x40000000000a5, 0x8000) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) close_range$auto(0x0, 0x5, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.069711396s ago: executing program 3 (id=5509): pipe2$auto(0x0, 0x0) r0 = open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x4) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STOP_OLD(r0, 0x5421, &(0x7f0000000100)="3e9c7eaee5fafe68678b7f5e1648142b11c29c62ff58898ad47401e20a80535bbdf95a24c3c887c5311dc635af40547b5b0f67de14c757d510f892b993") socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r1, [], {0x6, 0x40000006, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0xff}, {0x100, 0x1, 0x101, 0x85, 0x0, 0x24, 0xfe000000, 0x8, 0x4}}) read$auto_vhci_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000d40)=""/16, 0x10) select$auto(0x5, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xff, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) acct$auto(&(0x7f00000001c0)='/dev/vhci\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) request_key$auto_KEY_SPEC_GROUP_KEYRING(&(0x7f0000000300)='\x00', &(0x7f0000000340)='/dev/psaux\x00', &(0x7f0000000380)=')@#\x00', 0xfffffffffffffffa) 883.691916ms ago: executing program 4 (id=5510): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x2, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x35, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x7, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) (async) select$auto(0x2, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x35, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x7, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x2480, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0be4f2597d8b11ed14dfa636bad65cae9c0d21", 0x16, 0x0, 0x0, 0x0) (async) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0be4f2597d8b11ed14dfa636bad65cae9c0d21", 0x16, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/platform/drivers/dln2-gpio/unbind\x00', 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xad7) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xad7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0xe6e43, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x6, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x4000004, 0x6}, 0x40018, 0x4) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r4, 0x0, 0x97}, 0x6f4) (async) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r4, 0x0, 0x97}, 0x6f4) read$auto(r3, 0x0, 0x20) socket(0x1d, 0x0, 0x1ff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48043, 0x0) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48043, 0x0) write$auto(r5, 0x0, 0x6) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)="b2", 0x1) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r1, r7, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 798.519037ms ago: executing program 0 (id=5511): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) statmount$auto(0x0, 0x0, 0x200, 0x81) setfsuid$auto(0xee00) sysfs$auto(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) socket(0x18, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0xca400, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r2, 0x0) unshare$auto(0x40000080) 0s ago: executing program 6 (id=5512): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) statmount$auto(0x0, 0x0, 0x200, 0x81) setfsuid$auto(0xee00) sysfs$auto(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) socket(0x18, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0xca400, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r2, 0x0) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): e 0x0c03 failed: -110 [ 1389.594658][T26390] random: crng reseeded on system resumption [ 1394.894783][T26449] nvme_fcloop: unknown parameter or missing value 'l' [ 1401.022057][T25248] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 1407.821366][T26624] blktrace: Concurrent blktraces are not allowed on loop12 [ 1408.259713][T26635] random: crng reseeded on system resumption [ 1408.664441][T26644] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1409.996909][T26664] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 1410.541715][T26679] blktrace: Concurrent blktraces are not allowed on loop12 [ 1410.702029][T26669] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55 [ 1416.031936][T26766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4652'. [ 1416.161452][T26768] [U] 0="­/ [ 1416.181921][T26768] [U] [ 1416.194209][T26768] [U] EÇeÅQ‰Í@’ [ 1417.077183][T26768] [U]  [ 1418.030176][T11998] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1418.043731][T11998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1418.054348][T11998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1418.073500][T11998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1418.082831][T11998] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1419.876105][T26789] chnl_net:caif_netlink_parms(): no params data found [ 1420.132371][T11998] Bluetooth: hci2: command tx timeout [ 1420.298816][T26789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.359951][T26789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.403844][T26789] bridge_slave_0: entered allmulticast mode [ 1420.443210][T26789] bridge_slave_0: entered promiscuous mode [ 1420.478726][T26789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.506677][T26789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.540960][T26789] bridge_slave_1: entered allmulticast mode [ 1420.573376][T26789] bridge_slave_1: entered promiscuous mode [ 1420.688047][T26789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.732779][T26789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.884820][T26789] team0: Port device team_slave_0 added [ 1420.929630][T26789] team0: Port device team_slave_1 added [ 1421.051189][T26789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.070453][T26789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.160042][T26789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.214136][T26789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.235920][T26789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.332911][T26789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.653126][T26789] hsr_slave_0: entered promiscuous mode [ 1421.698685][T26789] hsr_slave_1: entered promiscuous mode [ 1421.735476][T26789] debugfs: 'hsr0' already exists in 'hsr' [ 1421.774755][T26789] Cannot create hsr debugfs directory [ 1422.187103][T26844] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1422.205880][T11998] Bluetooth: hci2: command tx timeout [ 1422.542458][T26789] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.868575][T26789] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.010850][T26789] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.140521][T26789] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.411999][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.424620][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.003456][T26789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1424.244894][T26789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1424.286307][T11998] Bluetooth: hci2: command tx timeout [ 1424.329646][T26789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1424.480743][T26789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1425.057403][T26883] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1425.094602][T26789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.261431][T26789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.302614][T25236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.311191][T25236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.379684][T25236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.388246][T25236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.900042][T26789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1426.366384][T11998] Bluetooth: hci2: command tx timeout [ 1426.763525][T26913] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1426.821381][T26789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.374451][T26789] veth0_vlan: entered promiscuous mode [ 1427.600536][T26789] veth1_vlan: entered promiscuous mode [ 1427.811526][T26921] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1427.981491][T26789] veth0_macvtap: entered promiscuous mode [ 1428.034338][T26789] veth1_macvtap: entered promiscuous mode [ 1428.203987][T26789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.344295][T26789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.427076][ T8896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.478176][ T8896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.533649][ T8896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.562693][ T8896] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.930834][T25236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.994959][T25236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.134903][ T8896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.185213][ T8896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.554990][T11998] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1430.564219][T11998] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 1431.865383][T26980] [U] 0="­/ [ 1431.882701][T26980] [U] [ 1431.902890][T26980] [U] EÇeÅQ‰Í@’ [ 1431.919967][T26979] [U]  [ 1432.104779][T26982] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1435.676824][T27034] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1436.185764][T27042] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1439.267317][T11998] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1439.283106][T11998] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 1440.087701][T27114] FAULT_INJECTION: forcing a failure. [ 1440.087701][T27114] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.269349][T27114] CPU: 0 UID: 0 PID: 27114 Comm: syz.3.4729 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1440.269388][T27114] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1440.269397][T27114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1440.269418][T27114] Call Trace: [ 1440.269426][T27114] [ 1440.269435][T27114] dump_stack_lvl+0x100/0x190 [ 1440.269484][T27114] should_fail_ex.cold+0x5/0xa [ 1440.269509][T27114] ? aa_getprocattr+0x3ca/0x1070 [ 1440.269531][T27114] should_failslab+0xc2/0x120 [ 1440.269552][T27114] __kmalloc_noprof+0xe0/0x850 [ 1440.269591][T27114] aa_getprocattr+0x3ca/0x1070 [ 1440.269617][T27114] ? __pfx_aa_getprocattr+0x10/0x10 [ 1440.269647][T27114] apparmor_getselfattr+0x401/0x810 [ 1440.269683][T27114] ? __pfx_apparmor_getselfattr+0x10/0x10 [ 1440.269725][T27114] security_getselfattr+0x2f5/0x500 [ 1440.269757][T27114] ? __pfx_security_getselfattr+0x10/0x10 [ 1440.269788][T27114] ? ksys_write+0x1ac/0x250 [ 1440.269821][T27114] ? __pfx_ksys_write+0x10/0x10 [ 1440.269851][T27114] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1440.269883][T27114] __x64_sys_lsm_get_self_attr+0x96/0x100 [ 1440.269915][T27114] ? lockdep_hardirqs_on+0x78/0x100 [ 1440.269940][T27114] do_syscall_64+0x106/0xf80 [ 1440.269962][T27114] ? clear_bhb_loop+0x40/0x90 [ 1440.269993][T27114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.270015][T27114] RIP: 0033:0x7f8d8c99c629 [ 1440.270032][T27114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.270052][T27114] RSP: 002b:00007f8d8d7da028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 1440.270072][T27114] RAX: ffffffffffffffda RBX: 00007f8d8cc16270 RCX: 00007f8d8c99c629 [ 1440.270087][T27114] RDX: 0000200000002440 RSI: 0000000000000000 RDI: 0000000000000064 [ 1440.270100][T27114] RBP: 00007f8d8d7da090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.270114][T27114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.270127][T27114] R13: 00007f8d8cc16308 R14: 00007f8d8cc16270 R15: 00007ffd1811a5f8 [ 1440.270154][T27114] [ 1444.064795][T27167] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1445.013033][T24820] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1445.576605][T27197] FAULT_INJECTION: forcing a failure. [ 1445.576605][T27197] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.669377][T27197] CPU: 0 UID: 0 PID: 27197 Comm: syz.0.4748 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1445.669421][T27197] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1445.669432][T27197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1445.669447][T27197] Call Trace: [ 1445.669456][T27197] [ 1445.669466][T27197] dump_stack_lvl+0x100/0x190 [ 1445.669510][T27197] should_fail_ex.cold+0x5/0xa [ 1445.669541][T27197] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1445.669571][T27197] should_failslab+0xc2/0x120 [ 1445.669592][T27197] __kmalloc_noprof+0xe0/0x850 [ 1445.669622][T27197] ? __pfx_aa_file_perm+0x10/0x10 [ 1445.669650][T27197] kernfs_fop_write_iter+0x26a/0x5f0 [ 1445.669674][T27197] do_iter_readv_writev+0x6ee/0x920 [ 1445.669707][T27197] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1445.669749][T27197] vfs_writev+0x360/0xe10 [ 1445.669778][T27197] ? rcu_is_watching+0x12/0xc0 [ 1445.669817][T27197] ? __pfx_vfs_writev+0x10/0x10 [ 1445.669845][T27197] ? fdget_pos+0x2aa/0x380 [ 1445.669867][T27197] ? find_held_lock+0x2b/0x80 [ 1445.669902][T27197] ? __fget_files+0x21f/0x3d0 [ 1445.669940][T27197] ? do_writev+0x13e/0x340 [ 1445.669969][T27197] do_writev+0x13e/0x340 [ 1445.670000][T27197] ? __pfx_do_writev+0x10/0x10 [ 1445.670037][T27197] do_syscall_64+0x106/0xf80 [ 1445.670060][T27197] ? clear_bhb_loop+0x40/0x90 [ 1445.670087][T27197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.670109][T27197] RIP: 0033:0x7f960f99c629 [ 1445.670126][T27197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.670147][T27197] RSP: 002b:00007f96107c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1445.670167][T27197] RAX: ffffffffffffffda RBX: 00007f960fc15fa0 RCX: 00007f960f99c629 [ 1445.670182][T27197] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1445.670195][T27197] RBP: 00007f96107c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.670208][T27197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.670221][T27197] R13: 00007f960fc16038 R14: 00007f960fc15fa0 R15: 00007ffdf2b0dc38 [ 1445.670248][T27197] [ 1446.643684][T27210] netlink: 'syz.0.4752': attribute type 2 has an invalid length. [ 1446.838935][T27208] zswap: compressor not available [ 1447.787845][T27227] FAULT_INJECTION: forcing a failure. [ 1447.787845][T27227] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.849473][T27227] CPU: 0 UID: 0 PID: 27227 Comm: syz.0.4755 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1447.849511][T27227] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1447.849520][T27227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1447.849534][T27227] Call Trace: [ 1447.849541][T27227] [ 1447.849550][T27227] dump_stack_lvl+0x100/0x190 [ 1447.849588][T27227] should_fail_ex.cold+0x5/0xa [ 1447.849614][T27227] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1447.849636][T27227] should_failslab+0xc2/0x120 [ 1447.849659][T27227] __kmalloc_noprof+0xe0/0x850 [ 1447.849697][T27227] kernfs_fop_write_iter+0x26a/0x5f0 [ 1447.849723][T27227] vfs_write+0x6ac/0x1070 [ 1447.849758][T27227] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1447.849798][T27227] ? __pfx_vfs_write+0x10/0x10 [ 1447.849850][T27227] ksys_write+0x12a/0x250 [ 1447.849883][T27227] ? __pfx_ksys_write+0x10/0x10 [ 1447.849925][T27227] do_syscall_64+0x106/0xf80 [ 1447.849949][T27227] ? clear_bhb_loop+0x40/0x90 [ 1447.849980][T27227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.850004][T27227] RIP: 0033:0x7f960f99c629 [ 1447.850023][T27227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1447.850046][T27227] RSP: 002b:00007f96107c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1447.850068][T27227] RAX: ffffffffffffffda RBX: 00007f960fc15fa0 RCX: 00007f960f99c629 [ 1447.850084][T27227] RDX: 000000000000d4d0 RSI: 0000000000000000 RDI: 0000000000000003 [ 1447.850098][T27227] RBP: 00007f96107c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1447.850112][T27227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1447.850126][T27227] R13: 00007f960fc16038 R14: 00007f960fc15fa0 R15: 00007ffdf2b0dc38 [ 1447.850156][T27227] [ 1449.420117][T27254] FAULT_INJECTION: forcing a failure. [ 1449.420117][T27254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1449.523069][T27254] CPU: 0 UID: 0 PID: 27254 Comm: syz.3.4760 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1449.523110][T27254] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1449.523119][T27254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1449.523139][T27254] Call Trace: [ 1449.523147][T27254] [ 1449.523156][T27254] dump_stack_lvl+0x100/0x190 [ 1449.523197][T27254] should_fail_ex.cold+0x5/0xa [ 1449.523225][T27254] _copy_to_user+0x32/0xd0 [ 1449.523264][T27254] simple_read_from_buffer+0xcb/0x170 [ 1449.523301][T27254] proc_fail_nth_read+0x1af/0x230 [ 1449.523329][T27254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1449.523358][T27254] ? rw_verify_area+0xce/0x6d0 [ 1449.523389][T27254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1449.523416][T27254] vfs_read+0x1e4/0xb30 [ 1449.523454][T27254] ? __pfx_vfs_read+0x10/0x10 [ 1449.523488][T27254] ? __fget_files+0x215/0x3d0 [ 1449.523530][T27254] ? __fget_files+0x21f/0x3d0 [ 1449.523574][T27254] ksys_read+0x12a/0x250 [ 1449.523608][T27254] ? __pfx_ksys_read+0x10/0x10 [ 1449.523642][T27254] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1449.523673][T27254] ? syscall_user_dispatch+0x76/0x130 [ 1449.523710][T27254] do_syscall_64+0x106/0xf80 [ 1449.523735][T27254] ? clear_bhb_loop+0x40/0x90 [ 1449.523764][T27254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.523792][T27254] RIP: 0033:0x7f8d8c95cece [ 1449.523811][T27254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1449.523835][T27254] RSP: 002b:00007f8d8d7d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1449.523869][T27254] RAX: ffffffffffffffda RBX: 00007f8d8d7da6c0 RCX: 00007f8d8c95cece [ 1449.523885][T27254] RDX: 000000000000000f RSI: 00007f8d8d7da0a0 RDI: 0000000000000007 [ 1449.523899][T27254] RBP: 00007f8d8d7da090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.523914][T27254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1449.523928][T27254] R13: 00007f8d8cc16308 R14: 00007f8d8cc16270 R15: 00007ffd1811a5f8 [ 1449.523958][T27254] [ 1451.321494][T24820] Bluetooth: hci0: ISO packet too small [ 1453.748034][T27311] netlink: 980 bytes leftover after parsing attributes in process `syz.0.4769'. [ 1460.371128][T27417] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1461.039778][T27429] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1462.592950][T27445] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1464.746393][T27474] FAULT_INJECTION: forcing a failure. [ 1464.746393][T27474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1464.841248][T27474] CPU: 0 UID: 0 PID: 27474 Comm: syz.3.4802 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1464.841287][T27474] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1464.841296][T27474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1464.841310][T27474] Call Trace: [ 1464.841317][T27474] [ 1464.841327][T27474] dump_stack_lvl+0x100/0x190 [ 1464.841367][T27474] should_fail_ex.cold+0x5/0xa [ 1464.841394][T27474] _copy_to_user+0x32/0xd0 [ 1464.841432][T27474] simple_read_from_buffer+0xcb/0x170 [ 1464.841468][T27474] proc_fail_nth_read+0x1af/0x230 [ 1464.841495][T27474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1464.841522][T27474] ? rw_verify_area+0xce/0x6d0 [ 1464.841552][T27474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1464.841577][T27474] vfs_read+0x1e4/0xb30 [ 1464.841615][T27474] ? __pfx_vfs_read+0x10/0x10 [ 1464.841647][T27474] ? __fget_files+0x215/0x3d0 [ 1464.841688][T27474] ? __fget_files+0x21f/0x3d0 [ 1464.841730][T27474] ksys_read+0x12a/0x250 [ 1464.841763][T27474] ? __pfx_ksys_read+0x10/0x10 [ 1464.841804][T27474] do_syscall_64+0x106/0xf80 [ 1464.841829][T27474] ? clear_bhb_loop+0x40/0x90 [ 1464.841857][T27474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.841881][T27474] RIP: 0033:0x7f8d8c95cece [ 1464.841899][T27474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1464.841922][T27474] RSP: 002b:00007f8d8d83cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1464.841944][T27474] RAX: ffffffffffffffda RBX: 00007f8d8d83d6c0 RCX: 00007f8d8c95cece [ 1464.841959][T27474] RDX: 000000000000000f RSI: 00007f8d8d83d0a0 RDI: 0000000000000005 [ 1464.841974][T27474] RBP: 00007f8d8d83d090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.841988][T27474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.842002][T27474] R13: 00007f8d8cc16038 R14: 00007f8d8cc15fa0 R15: 00007ffd1811a5f8 [ 1464.842037][T27474] [ 1465.435925][T27478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4804'. [ 1465.447336][T27478] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4804'. [ 1465.867696][T27480] block2mtd: parameter too long [ 1466.655183][T27492] zswap: compressor not available [ 1466.935838][T27513] [U] 0="­/ [ 1466.960872][T27513] [U] [ 1466.980786][T27513] [U] EÇeÅQ‰Í@’ [ 1467.143115][T27510] [U]  [ 1467.661716][T27523] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1468.312736][T27529] FAULT_INJECTION: forcing a failure. [ 1468.312736][T27529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1468.384348][T27529] CPU: 0 UID: 0 PID: 27529 Comm: syz.0.4816 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1468.384388][T27529] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1468.384398][T27529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1468.384411][T27529] Call Trace: [ 1468.384426][T27529] [ 1468.384435][T27529] dump_stack_lvl+0x100/0x190 [ 1468.384494][T27529] should_fail_ex.cold+0x5/0xa [ 1468.384521][T27529] _copy_from_iter+0x1f4/0x1690 [ 1468.384564][T27529] ? __pfx__copy_from_iter+0x10/0x10 [ 1468.384600][T27529] ? rcu_is_watching+0x12/0xc0 [ 1468.384636][T27529] ? trace_kmalloc+0x101/0x130 [ 1468.384658][T27529] ? __kasan_kmalloc+0xaa/0xb0 [ 1468.384694][T27529] ? __kmalloc_noprof+0x320/0x850 [ 1468.384732][T27529] kernfs_fop_write_iter+0x186/0x5f0 [ 1468.384760][T27529] vfs_write+0x6ac/0x1070 [ 1468.384850][T27529] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1468.384893][T27529] ? __pfx_vfs_write+0x10/0x10 [ 1468.384947][T27529] ksys_write+0x12a/0x250 [ 1468.384983][T27529] ? __pfx_ksys_write+0x10/0x10 [ 1468.385026][T27529] do_syscall_64+0x106/0xf80 [ 1468.385052][T27529] ? clear_bhb_loop+0x40/0x90 [ 1468.385082][T27529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.385107][T27529] RIP: 0033:0x7f960f99c629 [ 1468.385127][T27529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1468.385150][T27529] RSP: 002b:00007f96107c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1468.385172][T27529] RAX: ffffffffffffffda RBX: 00007f960fc15fa0 RCX: 00007f960f99c629 [ 1468.385188][T27529] RDX: 0000000000007fff RSI: 0000200000000000 RDI: 0000000000000003 [ 1468.385203][T27529] RBP: 00007f96107c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.385218][T27529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.385233][T27529] R13: 00007f960fc16038 R14: 00007f960fc15fa0 R15: 00007ffdf2b0dc38 [ 1468.385264][T27529] [ 1468.784588][T27532] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1469.101079][T27544] netlink: 29 bytes leftover after parsing attributes in process `syz.3.4820'. [ 1469.119072][T11998] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1469.717032][T27550] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1469.885696][T24820] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1470.340576][T27543] kexec: Could not allocate control_code_buffer [ 1471.452028][T27574] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1473.203729][T27598] FAULT_INJECTION: forcing a failure. [ 1473.203729][T27598] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1473.371763][T27598] CPU: 0 UID: 0 PID: 27598 Comm: syz.3.4832 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1473.371804][T27598] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1473.371814][T27598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1473.371828][T27598] Call Trace: [ 1473.371836][T27598] [ 1473.371849][T27598] dump_stack_lvl+0x100/0x190 [ 1473.371889][T27598] should_fail_ex.cold+0x5/0xa [ 1473.371918][T27598] get_futex_key+0x1d2/0x1620 [ 1473.371950][T27598] ? __pfx_get_futex_key+0x10/0x10 [ 1473.371976][T27598] ? lock_acquire+0x1cf/0x380 [ 1473.372015][T27598] futex_wake+0xea/0x530 [ 1473.372052][T27598] ? __pfx_futex_wake+0x10/0x10 [ 1473.372103][T27598] ? exit_mm_release+0x19/0x30 [ 1473.372138][T27598] do_futex+0x32b/0x350 [ 1473.372167][T27598] ? __pfx_do_futex+0x10/0x10 [ 1473.372194][T27598] ? __might_fault+0xc5/0x140 [ 1473.372231][T27598] mm_release+0x24a/0x2f0 [ 1473.372254][T27598] do_exit+0x675/0x2aa0 [ 1473.372281][T27598] ? pipe_unlock+0x67/0x80 [ 1473.372317][T27598] ? __pfx_do_exit+0x10/0x10 [ 1473.372345][T27598] ? do_raw_spin_lock+0x128/0x260 [ 1473.372377][T27598] ? find_held_lock+0x2b/0x80 [ 1473.372397][T27598] ? get_signal+0x7e0/0x21e0 [ 1473.372422][T27598] do_group_exit+0xd5/0x2a0 [ 1473.372461][T27598] get_signal+0x1ec7/0x21e0 [ 1473.372484][T27598] ? __pfx_tracing_buffers_splice_read+0x10/0x10 [ 1473.372530][T27598] ? __pfx_get_signal+0x10/0x10 [ 1473.372552][T27598] ? do_sendfile+0x44d/0xe20 [ 1473.372591][T27598] arch_do_signal_or_restart+0x91/0x770 [ 1473.372620][T27598] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1473.372655][T27598] ? __x64_sys_sendfile64+0x189/0x220 [ 1473.372678][T27598] ? ksys_write+0x1ac/0x250 [ 1473.372716][T27598] exit_to_user_mode_loop+0x86/0x4a0 [ 1473.372749][T27598] do_syscall_64+0x668/0xf80 [ 1473.372773][T27598] ? clear_bhb_loop+0x40/0x90 [ 1473.372801][T27598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.372825][T27598] RIP: 0033:0x7f8d8c99c629 [ 1473.372843][T27598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1473.372865][T27598] RSP: 002b:00007f8d8d83d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1473.372887][T27598] RAX: fffffffffffffe00 RBX: 00007f8d8cc15fa0 RCX: 00007f8d8c99c629 [ 1473.372902][T27598] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 1473.372916][T27598] RBP: 00007f8d8d83d090 R08: 0000000000000000 R09: 0000000000000000 [ 1473.372929][T27598] R10: 0000040000000c07 R11: 0000000000000246 R12: 0000000000000001 [ 1473.372943][T27598] R13: 00007f8d8cc16038 R14: 00007f8d8cc15fa0 R15: 00007ffd1811a5f8 [ 1473.372973][T27598] [ 1473.811453][T27607] futex_wake_op: syz.4.4833 tries to shift op by -2048; fix this program [ 1474.601187][T27619] FAULT_INJECTION: forcing a failure. [ 1474.601187][T27619] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.646546][T27619] CPU: 0 UID: 0 PID: 27619 Comm: syz.3.4836 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1474.646586][T27619] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1474.646595][T27619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1474.646628][T27619] Call Trace: [ 1474.646636][T27619] [ 1474.646646][T27619] dump_stack_lvl+0x100/0x190 [ 1474.646690][T27619] should_fail_ex.cold+0x5/0xa [ 1474.646717][T27619] ? copy_splice_read+0x1a3/0xb90 [ 1474.646753][T27619] should_failslab+0xc2/0x120 [ 1474.646776][T27619] __kmalloc_noprof+0xe0/0x850 [ 1474.646816][T27619] copy_splice_read+0x1a3/0xb90 [ 1474.646858][T27619] ? __pfx_copy_splice_read+0x10/0x10 [ 1474.646897][T27619] ? look_up_lock_class+0x55/0x120 [ 1474.646929][T27619] ? lockdep_init_map_type+0x5c/0x250 [ 1474.646962][T27619] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1474.646999][T27619] ? __pfx_copy_splice_read+0x10/0x10 [ 1474.647036][T27619] do_splice_read+0x285/0x370 [ 1474.647075][T27619] splice_direct_to_actor+0x2a1/0xa30 [ 1474.647115][T27619] ? __pfx_direct_splice_actor+0x10/0x10 [ 1474.647157][T27619] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1474.647202][T27619] do_splice_direct+0x174/0x240 [ 1474.647240][T27619] ? __pfx_do_splice_direct+0x10/0x10 [ 1474.647279][T27619] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1474.647319][T27619] ? rw_verify_area+0xce/0x6d0 [ 1474.647354][T27619] do_sendfile+0xadc/0xe20 [ 1474.647393][T27619] ? __pfx_do_sendfile+0x10/0x10 [ 1474.647433][T27619] ? __fget_files+0x21f/0x3d0 [ 1474.647476][T27619] __x64_sys_sendfile64+0x1d8/0x220 [ 1474.647500][T27619] ? ksys_write+0x1ac/0x250 [ 1474.647534][T27619] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1474.647567][T27619] do_syscall_64+0x106/0xf80 [ 1474.647592][T27619] ? clear_bhb_loop+0x40/0x90 [ 1474.647620][T27619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.647644][T27619] RIP: 0033:0x7f8d8c99c629 [ 1474.647663][T27619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.647687][T27619] RSP: 002b:00007f8d8d83d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1474.647709][T27619] RAX: ffffffffffffffda RBX: 00007f8d8cc15fa0 RCX: 00007f8d8c99c629 [ 1474.647726][T27619] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1474.647740][T27619] RBP: 00007f8d8d83d090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.647755][T27619] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1474.647769][T27619] R13: 00007f8d8cc16038 R14: 00007f8d8cc15fa0 R15: 00007ffd1811a5f8 [ 1474.647811][T27619] [ 1475.325710][T24820] Bluetooth: hci4: Opcode 0x0c03 failed: -110 SYZKALLER SYZKALLER LOGIN: [ 1476.352215][T27636] FAULT_INJECTION: forcing a failure. [ 1476.352215][T27636] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.416945][T27636] CPU: 0 UID: 0 PID: 27636 Comm: syz.0.4840 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1476.416986][T27636] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1476.416996][T27636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1476.417011][T27636] Call Trace: [ 1476.417019][T27636] [ 1476.417029][T27636] dump_stack_lvl+0x100/0x190 [ 1476.417071][T27636] should_fail_ex.cold+0x5/0xa [ 1476.417099][T27636] should_failslab+0xc2/0x120 [ 1476.417123][T27636] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1476.417158][T27636] ? security_inode_alloc+0x3b/0x2c0 [ 1476.417195][T27636] ? lockdep_init_map_type+0x5c/0x250 [ 1476.417231][T27636] security_inode_alloc+0x3b/0x2c0 [ 1476.417276][T27636] inode_init_always_gfp+0xced/0x1040 [ 1476.417321][T27636] alloc_inode+0x8e/0x250 [ 1476.417352][T27636] sock_alloc+0x44/0x280 [ 1476.417380][T27636] ? security_socket_create+0x7f/0x250 [ 1476.417415][T27636] __sock_create+0xc2/0x860 [ 1476.417455][T27636] __sys_socket+0x14d/0x260 [ 1476.417492][T27636] ? __pfx___sys_socket+0x10/0x10 [ 1476.417538][T27636] __x64_sys_socket+0x72/0xb0 [ 1476.417574][T27636] ? lockdep_hardirqs_on+0x78/0x100 [ 1476.417605][T27636] do_syscall_64+0x106/0xf80 [ 1476.417631][T27636] ? clear_bhb_loop+0x40/0x90 [ 1476.417662][T27636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.417687][T27636] RIP: 0033:0x7f960f99c629 [ 1476.417720][T27636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.417745][T27636] RSP: 002b:00007f96107c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1476.417768][T27636] RAX: ffffffffffffffda RBX: 00007f960fc15fa0 RCX: 00007f960f99c629 [ 1476.417784][T27636] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1476.417798][T27636] RBP: 00007f960fa32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1476.417813][T27636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1476.417827][T27636] R13: 00007f960fc16038 R14: 00007f960fc15fa0 R15: 00007ffdf2b0dc38 [ 1476.417857][T27636] [ 1476.683574][T27636] socket: no more sockets [ 1476.752084][ T30] audit: type=1326 audit(4294967648.350:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27634 comm="syz.0.4840" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f960f99c629 code=0x0 [ 1478.486580][T27661] netlink: 146 bytes leftover after parsing attributes in process `syz.6.4846'. [ 1478.580918][T27663] FAULT_INJECTION: forcing a failure. [ 1478.580918][T27663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1478.662255][T27663] CPU: 0 UID: 0 PID: 27663 Comm: syz.4.4847 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1478.662294][T27663] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1478.662303][T27663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1478.662317][T27663] Call Trace: [ 1478.662325][T27663] [ 1478.662334][T27663] dump_stack_lvl+0x100/0x190 [ 1478.662374][T27663] should_fail_ex.cold+0x5/0xa [ 1478.662402][T27663] _copy_to_user+0x32/0xd0 [ 1478.662441][T27663] simple_read_from_buffer+0xcb/0x170 [ 1478.662479][T27663] proc_fail_nth_read+0x1af/0x230 [ 1478.662506][T27663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1478.662547][T27663] ? rw_verify_area+0xce/0x6d0 [ 1478.662578][T27663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1478.662604][T27663] vfs_read+0x1e4/0xb30 [ 1478.662642][T27663] ? __pfx_vfs_read+0x10/0x10 [ 1478.662675][T27663] ? __fget_files+0x215/0x3d0 [ 1478.662716][T27663] ? __fget_files+0x21f/0x3d0 [ 1478.662758][T27663] ksys_read+0x12a/0x250 [ 1478.662803][T27663] ? __pfx_ksys_read+0x10/0x10 [ 1478.662842][T27663] do_syscall_64+0x106/0xf80 [ 1478.662866][T27663] ? clear_bhb_loop+0x40/0x90 [ 1478.662892][T27663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.662915][T27663] RIP: 0033:0x7f1b2f55cece [ 1478.662932][T27663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1478.662972][T27663] RSP: 002b:00007f1b30422fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1478.662994][T27663] RAX: ffffffffffffffda RBX: 00007f1b304236c0 RCX: 00007f1b2f55cece [ 1478.663010][T27663] RDX: 000000000000000f RSI: 00007f1b304230a0 RDI: 0000000000000004 [ 1478.663023][T27663] RBP: 00007f1b30423090 R08: 0000000000000000 R09: 0000000000000000 [ 1478.663037][T27663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1478.663051][T27663] R13: 00007f1b2f816038 R14: 00007f1b2f815fa0 R15: 00007ffff19af538 [ 1478.663080][T27663] [ 1483.030161][T27699] FAULT_INJECTION: forcing a failure. [ 1483.030161][T27699] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.150666][T27699] CPU: 0 UID: 0 PID: 27699 Comm: syz.0.4856 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1483.150706][T27699] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1483.150716][T27699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1483.150730][T27699] Call Trace: [ 1483.150739][T27699] [ 1483.150749][T27699] dump_stack_lvl+0x100/0x190 [ 1483.150796][T27699] should_fail_ex.cold+0x5/0xa [ 1483.150823][T27699] ? sk_prot_alloc+0x10b/0x2a0 [ 1483.150854][T27699] should_failslab+0xc2/0x120 [ 1483.150878][T27699] __kmalloc_noprof+0xe0/0x850 [ 1483.150917][T27699] sk_prot_alloc+0x10b/0x2a0 [ 1483.150951][T27699] sk_alloc+0x36/0xe80 [ 1483.150975][T27699] packet_create+0x127/0x8e0 [ 1483.151011][T27699] __sock_create+0x339/0x860 [ 1483.151050][T27699] __sys_socket+0x14d/0x260 [ 1483.151086][T27699] ? __pfx___sys_socket+0x10/0x10 [ 1483.151130][T27699] __x64_sys_socket+0x72/0xb0 [ 1483.151164][T27699] ? lockdep_hardirqs_on+0x78/0x100 [ 1483.151191][T27699] do_syscall_64+0x106/0xf80 [ 1483.151216][T27699] ? clear_bhb_loop+0x40/0x90 [ 1483.151265][T27699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.151290][T27699] RIP: 0033:0x7f960f99c629 [ 1483.151311][T27699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1483.151336][T27699] RSP: 002b:00007f96107a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1483.151359][T27699] RAX: ffffffffffffffda RBX: 00007f960fc16090 RCX: 00007f960f99c629 [ 1483.151376][T27699] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000011 [ 1483.151395][T27699] RBP: 00007f960fa32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1483.151410][T27699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1483.151425][T27699] R13: 00007f960fc16128 R14: 00007f960fc16090 R15: 00007ffdf2b0dc38 [ 1483.151456][T27699] [ 1484.855398][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.863180][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.107591][T27738] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 1486.156025][T27738] ep_00: uevent: failed to send synthetic uevent: -22 [ 1486.210239][T27739] [U] [ 1486.213503][T27739] [U] [ 1486.216737][T27739] [U] [ 1486.219965][T27739] [U] [ 1486.272983][T27741] [U] [ 1486.305833][T27741] [U] [ 1486.309222][T27741] [U] EÇeÅQ‰Í@’ [ 1486.353344][T27737] [U]  [ 1486.797483][T27748] FAULT_INJECTION: forcing a failure. [ 1486.797483][T27748] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1486.926436][T27748] CPU: 0 UID: 0 PID: 27748 Comm: syz.4.4865 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1486.926475][T27748] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1486.926484][T27748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1486.926497][T27748] Call Trace: [ 1486.926505][T27748] [ 1486.926514][T27748] dump_stack_lvl+0x100/0x190 [ 1486.926562][T27748] should_fail_ex.cold+0x5/0xa [ 1486.926604][T27748] ? prepare_alloc_pages+0x16d/0x5f0 [ 1486.926631][T27748] should_fail_alloc_page+0xeb/0x140 [ 1486.926655][T27748] prepare_alloc_pages+0x1f0/0x5f0 [ 1486.926679][T27748] ? kernel_text_address+0x8d/0x100 [ 1486.926717][T27748] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1486.926761][T27748] ? copy_splice_read+0x1a3/0xb90 [ 1486.926797][T27748] ? stack_trace_save+0x8e/0xc0 [ 1486.926819][T27748] ? __pfx_stack_trace_save+0x10/0x10 [ 1486.926844][T27748] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1486.926882][T27748] ? copy_splice_read+0x1a3/0xb90 [ 1486.926916][T27748] ? kasan_save_stack+0x3f/0x50 [ 1486.926949][T27748] ? kasan_save_stack+0x30/0x50 [ 1486.926981][T27748] ? kasan_save_track+0x14/0x30 [ 1486.927014][T27748] ? __kasan_kmalloc+0xaa/0xb0 [ 1486.927045][T27748] ? __kmalloc_noprof+0x301/0x850 [ 1486.927077][T27748] ? copy_splice_read+0x1a3/0xb90 [ 1486.927111][T27748] ? do_splice_read+0x285/0x370 [ 1486.927147][T27748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.927188][T27748] alloc_pages_bulk_noprof+0x782/0x1490 [ 1486.927232][T27748] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1486.927275][T27748] ? __kmalloc_noprof+0x320/0x850 [ 1486.927313][T27748] copy_splice_read+0x1e1/0xb90 [ 1486.927355][T27748] ? __pfx_copy_splice_read+0x10/0x10 [ 1486.927394][T27748] ? look_up_lock_class+0x55/0x120 [ 1486.927425][T27748] ? lockdep_init_map_type+0x5c/0x250 [ 1486.927457][T27748] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1486.927498][T27748] ? __pfx_copy_splice_read+0x10/0x10 [ 1486.927539][T27748] do_splice_read+0x285/0x370 [ 1486.927579][T27748] splice_direct_to_actor+0x2a1/0xa30 [ 1486.927619][T27748] ? __pfx_direct_splice_actor+0x10/0x10 [ 1486.927660][T27748] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1486.927707][T27748] do_splice_direct+0x174/0x240 [ 1486.927745][T27748] ? __pfx_do_splice_direct+0x10/0x10 [ 1486.927796][T27748] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1486.927836][T27748] ? rw_verify_area+0xce/0x6d0 [ 1486.927869][T27748] do_sendfile+0xadc/0xe20 [ 1486.927907][T27748] ? __pfx_do_sendfile+0x10/0x10 [ 1486.927940][T27748] ? __fget_files+0x21f/0x3d0 [ 1486.927982][T27748] __x64_sys_sendfile64+0x1d8/0x220 [ 1486.928005][T27748] ? ksys_write+0x1ac/0x250 [ 1486.928038][T27748] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1486.928070][T27748] do_syscall_64+0x106/0xf80 [ 1486.928094][T27748] ? clear_bhb_loop+0x40/0x90 [ 1486.928122][T27748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.928145][T27748] RIP: 0033:0x7f1b2f59c629 [ 1486.928163][T27748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.928186][T27748] RSP: 002b:00007f1b30423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1486.928208][T27748] RAX: ffffffffffffffda RBX: 00007f1b2f815fa0 RCX: 00007f1b2f59c629 [ 1486.928224][T27748] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1486.928238][T27748] RBP: 00007f1b30423090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.928253][T27748] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1486.928267][T27748] R13: 00007f1b2f816038 R14: 00007f1b2f815fa0 R15: 00007ffff19af538 [ 1486.928296][T27748] [ 1488.455656][T24820] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1492.328889][T27803] Invalid ELF header magic: != ELF [ 1497.175945][T27836] futex_wake_op: syz.3.4885 tries to shift op by -2048; fix this program [ 1500.767930][T24820] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1501.042964][T27919] openvswitch: netlink: Message has 85 unknown bytes. [ 1504.135969][T27955] futex_wake_op: syz.3.4907 tries to shift op by -2048; fix this program [ 1504.862274][T24820] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1507.993551][T28001] NFSD: Failed to start, no listeners configured. [ 1509.291853][T28021] FAULT_INJECTION: forcing a failure. [ 1509.291853][T28021] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.349252][T28021] CPU: 0 UID: 0 PID: 28021 Comm: syz.0.4921 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1509.349290][T28021] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1509.349299][T28021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1509.349312][T28021] Call Trace: [ 1509.349319][T28021] [ 1509.349328][T28021] dump_stack_lvl+0x100/0x190 [ 1509.349366][T28021] should_fail_ex.cold+0x5/0xa [ 1509.349393][T28021] should_failslab+0xc2/0x120 [ 1509.349416][T28021] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1509.349448][T28021] ? skb_clone+0x190/0x400 [ 1509.349489][T28021] skb_clone+0x190/0x400 [ 1509.349513][T28021] netlink_deliver_tap+0xaed/0xcc0 [ 1509.349544][T28021] netlink_unicast+0x650/0x870 [ 1509.349574][T28021] ? __pfx_netlink_unicast+0x10/0x10 [ 1509.349609][T28021] netlink_sendmsg+0x8b0/0xda0 [ 1509.349639][T28021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1509.349664][T28021] ? __import_iovec+0x1d2/0x640 [ 1509.349719][T28021] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1509.349754][T28021] ____sys_sendmsg+0xa54/0xc30 [ 1509.349790][T28021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1509.349834][T28021] ___sys_sendmsg+0x190/0x1e0 [ 1509.349870][T28021] ? __pfx____sys_sendmsg+0x10/0x10 [ 1509.349936][T28021] __sys_sendmsg+0x170/0x220 [ 1509.349962][T28021] ? __pfx___sys_sendmsg+0x10/0x10 [ 1509.350005][T28021] do_syscall_64+0x106/0xf80 [ 1509.350030][T28021] ? clear_bhb_loop+0x40/0x90 [ 1509.350067][T28021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.350090][T28021] RIP: 0033:0x7f960f99c629 [ 1509.350109][T28021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1509.350139][T28021] RSP: 002b:00007f96107c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1509.350161][T28021] RAX: ffffffffffffffda RBX: 00007f960fc15fa0 RCX: 00007f960f99c629 [ 1509.350177][T28021] RDX: 0000000000004050 RSI: 0000200000000100 RDI: 0000000000000003 [ 1509.350191][T28021] RBP: 00007f96107c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.350205][T28021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1509.350219][T28021] R13: 00007f960fc16038 R14: 00007f960fc15fa0 R15: 00007ffdf2b0dc38 [ 1509.350248][T28021] [ 1512.400879][T25248] team0: left allmulticast mode [ 1512.438181][T25248] team_slave_0: left allmulticast mode [ 1512.489512][T25248] team_slave_1: left allmulticast mode [ 1512.506962][T25248] team0: left promiscuous mode [ 1512.512705][T25248] team_slave_0: left promiscuous mode [ 1512.555311][T25248] team_slave_1: left promiscuous mode [ 1512.574998][T25248] bridge0: port 3(team0) entered disabled state [ 1512.627530][T25248] bridge_slave_1: left allmulticast mode [ 1512.666210][T25248] bridge_slave_1: left promiscuous mode [ 1512.699129][T25248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.770073][T25248] bridge_slave_0: left allmulticast mode [ 1512.814733][T25248] bridge_slave_0: left promiscuous mode [ 1512.860543][T25248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.534285][T25248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1513.568239][T25248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1513.589453][T25248] bond0 (unregistering): Released all slaves [ 1513.749314][T25248] HfR: left promiscuous mode [ 1513.845237][T25248] tipc: Left network mode [ 1517.586767][T11998] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1517.604185][T11998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1517.614675][T11998] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1517.624791][T11998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1517.667546][T11998] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1517.981060][T25248] hsr_slave_0: left promiscuous mode [ 1518.033680][T25248] hsr_slave_1: left promiscuous mode [ 1518.079960][T25248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1518.124838][T25248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.226763][T25248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1518.278680][T25248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.381726][T25248] veth1_macvtap: left promiscuous mode [ 1518.403098][T25248] veth0_macvtap: left promiscuous mode [ 1518.438771][T25248] veth1_vlan: left promiscuous mode [ 1518.466016][T25248] veth0_vlan: left promiscuous mode [ 1519.245224][T25248] team0 (unregistering): Port device team_slave_1 removed [ 1519.283957][T25248] team0 (unregistering): Port device team_slave_0 removed [ 1519.725848][T24820] Bluetooth: hci4: command tx timeout [ 1520.864986][T25248] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.987842][T25248] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.005744][T11998] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1521.228623][T25248] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.429046][T25248] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.497881][T28118] chnl_net:caif_netlink_parms(): no params data found [ 1521.812246][T11998] Bluetooth: hci4: command tx timeout [ 1522.096029][T28118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.132543][T28118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.169572][T28155] Invalid ELF header magic: != ELF [ 1522.177625][T28118] bridge_slave_0: entered allmulticast mode [ 1522.215478][T28118] bridge_slave_0: entered promiscuous mode [ 1522.236583][T28167] FAULT_INJECTION: forcing a failure. [ 1522.236583][T28167] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.288788][T28118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.327749][T28118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.344645][T28167] CPU: 0 UID: 0 PID: 28167 Comm: syz.4.4949 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1522.344683][T28167] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1522.344692][T28167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1522.344706][T28167] Call Trace: [ 1522.344714][T28167] [ 1522.344723][T28167] dump_stack_lvl+0x100/0x190 [ 1522.344762][T28167] should_fail_ex.cold+0x5/0xa [ 1522.344789][T28167] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1522.344810][T28167] should_failslab+0xc2/0x120 [ 1522.344833][T28167] __kmalloc_noprof+0xe0/0x850 [ 1522.344871][T28167] kernfs_fop_write_iter+0x26a/0x5f0 [ 1522.344898][T28167] vfs_write+0x6ac/0x1070 [ 1522.344933][T28167] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1522.344974][T28167] ? __pfx_vfs_write+0x10/0x10 [ 1522.345026][T28167] ksys_write+0x12a/0x250 [ 1522.345060][T28167] ? __pfx_ksys_write+0x10/0x10 [ 1522.345103][T28167] do_syscall_64+0x106/0xf80 [ 1522.345127][T28167] ? clear_bhb_loop+0x40/0x90 [ 1522.345165][T28167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.345188][T28167] RIP: 0033:0x7f1b2f59c629 [ 1522.345207][T28167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.345229][T28167] RSP: 002b:00007f1b30423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1522.345251][T28167] RAX: ffffffffffffffda RBX: 00007f1b2f815fa0 RCX: 00007f1b2f59c629 [ 1522.345266][T28167] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 1522.345280][T28167] RBP: 00007f1b30423090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.345295][T28167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1522.345309][T28167] R13: 00007f1b2f816038 R14: 00007f1b2f815fa0 R15: 00007ffff19af538 [ 1522.345339][T28167] [ 1522.575985][T28118] bridge_slave_1: entered allmulticast mode [ 1522.584617][T28118] bridge_slave_1: entered promiscuous mode [ 1522.615698][T28118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.629955][T28118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.662226][T28118] team0: Port device team_slave_0 added [ 1522.671355][T28118] team0: Port device team_slave_1 added [ 1522.697683][T28118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.706488][T28118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1522.738550][T28118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.752817][T28118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1522.761657][T28118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1522.792972][T28118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.841278][T28118] hsr_slave_0: entered promiscuous mode [ 1522.889236][T28118] hsr_slave_1: entered promiscuous mode [ 1522.916693][T28118] debugfs: 'hsr0' already exists in 'hsr' [ 1522.944050][T28118] Cannot create hsr debugfs directory [ 1523.464618][T25248] bridge_slave_0: left allmulticast mode [ 1523.472466][T25248] bridge_slave_0: left promiscuous mode [ 1523.489878][T25248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.893645][T11998] Bluetooth: hci4: command tx timeout [ 1524.604592][T25248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1524.659774][T25248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1524.697050][T25248] bond0 (unregistering): Released all slaves [ 1525.966149][T11998] Bluetooth: hci4: command tx timeout [ 1526.352675][T28207] tipc: Started in network mode [ 1526.405827][T28207] tipc: Node identity ee00, cluster identity 4711 [ 1526.455239][T28207] tipc: Node number set to 60928 [ 1527.301859][T28118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1527.509316][T28118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1527.564254][T28118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1527.678264][T28118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1528.924785][T28249] NFSD: Failed to start, no listeners configured. [ 1529.067320][T28118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1529.532299][T28118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1529.873042][T28271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4962'. [ 1529.905574][T25246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.914119][T25246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1530.021353][T25246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.029940][T25246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1531.395228][T25248] hsr_slave_0: left promiscuous mode [ 1531.427437][T25248] hsr_slave_1: left promiscuous mode [ 1531.449894][T25248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1531.479164][T25248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.519333][T25248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1531.569885][T25248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.627359][T25248] veth1_macvtap: left promiscuous mode [ 1531.671206][T25248] veth0_macvtap: left promiscuous mode [ 1531.691612][T25248] veth1_vlan: left promiscuous mode [ 1531.716404][T25248] veth0_vlan: left promiscuous mode [ 1531.723487][T28301] [U] 0=J­/ [ 1531.739937][T28301] [U] [ 1531.751464][T28301] [U] EÇeÅQ‰Í@’ [ 1531.767259][T28300] [U]  [ 1532.372834][T25248] team0 (unregistering): Port device team_slave_1 removed [ 1532.413020][T25248] team0 (unregistering): Port device team_slave_0 removed [ 1532.814840][T28306] FAULT_INJECTION: forcing a failure. [ 1532.814840][T28306] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.894762][T28306] CPU: 0 UID: 0 PID: 28306 Comm: syz.4.4965 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1532.894804][T28306] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1532.894814][T28306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1532.894829][T28306] Call Trace: [ 1532.894838][T28306] [ 1532.894848][T28306] dump_stack_lvl+0x100/0x190 [ 1532.894890][T28306] should_fail_ex.cold+0x5/0xa [ 1532.894918][T28306] should_failslab+0xc2/0x120 [ 1532.894943][T28306] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1532.894981][T28306] ? devinet_init_net+0xa3/0x8d0 [ 1532.895016][T28306] ? __pfx_devinet_init_net+0x10/0x10 [ 1532.895047][T28306] kmemdup_noprof+0x29/0x60 [ 1532.895085][T28306] devinet_init_net+0xa3/0x8d0 [ 1532.895118][T28306] ? __pfx_devinet_init_net+0x10/0x10 [ 1532.895150][T28306] ops_init+0x1e2/0x5f0 [ 1532.895182][T28306] setup_net+0x118/0x3a0 [ 1532.895211][T28306] ? __pfx_setup_net+0x10/0x10 [ 1532.895238][T28306] ? lockdep_init_map_type+0x5c/0x250 [ 1532.895272][T28306] ? mutex_init_lockep+0x110/0x150 [ 1532.895309][T28306] copy_net_ns+0x46f/0x7c0 [ 1532.895344][T28306] create_new_namespaces+0x3ea/0xac0 [ 1532.895377][T28306] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1532.895406][T28306] ksys_unshare+0x455/0xab0 [ 1532.895439][T28306] ? __pfx_ksys_unshare+0x10/0x10 [ 1532.895493][T28306] __x64_sys_unshare+0x31/0x40 [ 1532.895524][T28306] do_syscall_64+0x106/0xf80 [ 1532.895551][T28306] ? clear_bhb_loop+0x40/0x90 [ 1532.895581][T28306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.895607][T28306] RIP: 0033:0x7f1b2f59c629 [ 1532.895627][T28306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.895652][T28306] RSP: 002b:00007f1b30423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1532.895676][T28306] RAX: ffffffffffffffda RBX: 00007f1b2f815fa0 RCX: 00007f1b2f59c629 [ 1532.895693][T28306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1532.895708][T28306] RBP: 00007f1b2f632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1532.895723][T28306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1532.895738][T28306] R13: 00007f1b2f816038 R14: 00007f1b2f815fa0 R15: 00007ffff19af538 [ 1532.895770][T28306] [ 1533.254085][T28118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1533.287144][T28118] veth0_vlan: entered promiscuous mode [ 1533.299006][T28118] veth1_vlan: entered promiscuous mode [ 1533.322434][T28118] veth0_macvtap: entered promiscuous mode [ 1533.333053][T28118] veth1_macvtap: entered promiscuous mode [ 1533.350663][T28118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1533.362592][T28118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1533.507836][T25237] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.530752][T25237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.578622][T25237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.618031][T25237] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.706812][T25237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.757058][T25237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.881372][T25246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.931236][T25246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.492364][T11998] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1537.680653][T28382] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1539.374113][T28396] [U] 0="­/ [ 1539.409308][T28396] [U] [ 1539.412669][T28396] [U] EÇeÅQ‰Í@’ [ 1539.445240][T28395] [U]  [ 1540.269657][T28415] FAULT_INJECTION: forcing a failure. [ 1540.269657][T28415] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.369567][T28415] CPU: 0 UID: 0 PID: 28415 Comm: syz.6.4985 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1540.369606][T28415] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1540.369628][T28415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1540.369641][T28415] Call Trace: [ 1540.369649][T28415] [ 1540.369657][T28415] dump_stack_lvl+0x100/0x190 [ 1540.369693][T28415] should_fail_ex.cold+0x5/0xa [ 1540.369718][T28415] should_failslab+0xc2/0x120 [ 1540.369739][T28415] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1540.369765][T28415] ? genl_start+0x1e8/0x970 [ 1540.369793][T28415] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 1540.369829][T28415] genl_start+0x1e8/0x970 [ 1540.369861][T28415] __netlink_dump_start+0x60e/0x990 [ 1540.369890][T28415] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1540.369923][T28415] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1540.369967][T28415] ? __pfx_genl_get_cmd+0x10/0x10 [ 1540.369993][T28415] ? __pfx_genl_start+0x10/0x10 [ 1540.370020][T28415] ? __pfx_genl_dumpit+0x10/0x10 [ 1540.370047][T28415] ? __pfx_genl_done+0x10/0x10 [ 1540.370078][T28415] ? __dev_queue_xmit+0x7fd/0x4750 [ 1540.370110][T28415] ? __radix_tree_lookup+0x217/0x2b0 [ 1540.370177][T28415] genl_rcv_msg+0x471/0x800 [ 1540.370212][T28415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1540.370244][T28415] ? __pfx_macsec_dump_txsc+0x10/0x10 [ 1540.370278][T28415] netlink_rcv_skb+0x159/0x420 [ 1540.370306][T28415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1540.370340][T28415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1540.370393][T28415] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1540.370422][T28415] genl_rcv+0x28/0x40 [ 1540.370448][T28415] netlink_unicast+0x5aa/0x870 [ 1540.370477][T28415] ? __pfx_netlink_unicast+0x10/0x10 [ 1540.370513][T28415] netlink_sendmsg+0x8b0/0xda0 [ 1540.370544][T28415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1540.370569][T28415] ? __import_iovec+0x1d2/0x640 [ 1540.370606][T28415] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1540.370638][T28415] ____sys_sendmsg+0xa54/0xc30 [ 1540.370671][T28415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1540.370713][T28415] ___sys_sendmsg+0x190/0x1e0 [ 1540.370746][T28415] ? __pfx____sys_sendmsg+0x10/0x10 [ 1540.370810][T28415] __sys_sendmsg+0x170/0x220 [ 1540.370834][T28415] ? __pfx___sys_sendmsg+0x10/0x10 [ 1540.370885][T28415] do_syscall_64+0x106/0xf80 [ 1540.370906][T28415] ? clear_bhb_loop+0x40/0x90 [ 1540.370932][T28415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.370957][T28415] RIP: 0033:0x7f018bb9c629 [ 1540.370973][T28415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.370994][T28415] RSP: 002b:00007f018ca94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1540.371013][T28415] RAX: ffffffffffffffda RBX: 00007f018be15fa0 RCX: 00007f018bb9c629 [ 1540.371027][T28415] RDX: 00000000040080c4 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1540.371047][T28415] RBP: 00007f018ca94090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.371060][T28415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1540.371072][T28415] R13: 00007f018be16038 R14: 00007f018be15fa0 R15: 00007ffd02fe3b68 [ 1540.371099][T28415] [ 1541.419587][T28427] futex_wake_op: syz.3.4989 tries to shift op by -2048; fix this program SYZKALLER SYZKALLER LOGIN: [ 1543.329988][T24820] Bluetooth: hci2: command 0x0406 tx timeout [ 1546.307529][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.315093][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.620418][T28514] FAULT_INJECTION: forcing a failure. [ 1546.620418][T28514] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.713802][T28514] CPU: 0 UID: 0 PID: 28514 Comm: syz.6.5012 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1546.713858][T28514] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1546.713866][T28514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1546.713880][T28514] Call Trace: [ 1546.713888][T28514] [ 1546.713897][T28514] dump_stack_lvl+0x100/0x190 [ 1546.713935][T28514] should_fail_ex.cold+0x5/0xa [ 1546.713961][T28514] should_failslab+0xc2/0x120 [ 1546.713984][T28514] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1546.714038][T28514] ? __alloc_skb+0x140/0x710 [ 1546.714067][T28514] __alloc_skb+0x140/0x710 [ 1546.714088][T28514] ? __alloc_skb+0x5b7/0x710 [ 1546.714111][T28514] ? __pfx___alloc_skb+0x10/0x10 [ 1546.714143][T28514] netlink_dump+0x19b/0xd30 [ 1546.714174][T28514] ? __pfx_netlink_dump+0x10/0x10 [ 1546.714213][T28514] ? __asan_memset+0x23/0x50 [ 1546.714244][T28514] ? genl_start+0x67a/0x970 [ 1546.714279][T28514] __netlink_dump_start+0x6d6/0x990 [ 1546.714311][T28514] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1546.714348][T28514] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1546.714389][T28514] ? __pfx_genl_get_cmd+0x10/0x10 [ 1546.714417][T28514] ? __pfx_genl_start+0x10/0x10 [ 1546.714447][T28514] ? __pfx_genl_dumpit+0x10/0x10 [ 1546.714477][T28514] ? __pfx_genl_done+0x10/0x10 [ 1546.714511][T28514] ? __dev_queue_xmit+0x7fd/0x4750 [ 1546.714553][T28514] ? __radix_tree_lookup+0x217/0x2b0 [ 1546.714597][T28514] genl_rcv_msg+0x471/0x800 [ 1546.714636][T28514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1546.714670][T28514] ? __pfx_macsec_dump_txsc+0x10/0x10 [ 1546.714704][T28514] netlink_rcv_skb+0x159/0x420 [ 1546.714733][T28514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1546.714767][T28514] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1546.714808][T28514] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1546.714839][T28514] genl_rcv+0x28/0x40 [ 1546.714868][T28514] netlink_unicast+0x5aa/0x870 [ 1546.714901][T28514] ? __pfx_netlink_unicast+0x10/0x10 [ 1546.714940][T28514] netlink_sendmsg+0x8b0/0xda0 [ 1546.714974][T28514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1546.715001][T28514] ? __import_iovec+0x1d2/0x640 [ 1546.715042][T28514] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1546.715078][T28514] ____sys_sendmsg+0xa54/0xc30 [ 1546.715114][T28514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1546.715160][T28514] ___sys_sendmsg+0x190/0x1e0 [ 1546.715196][T28514] ? __pfx____sys_sendmsg+0x10/0x10 [ 1546.715266][T28514] __sys_sendmsg+0x170/0x220 [ 1546.715293][T28514] ? __pfx___sys_sendmsg+0x10/0x10 [ 1546.715338][T28514] do_syscall_64+0x106/0xf80 [ 1546.715363][T28514] ? clear_bhb_loop+0x40/0x90 [ 1546.715403][T28514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.715428][T28514] RIP: 0033:0x7f018bb9c629 [ 1546.715446][T28514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.715470][T28514] RSP: 002b:00007f018ca94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1546.715493][T28514] RAX: ffffffffffffffda RBX: 00007f018be15fa0 RCX: 00007f018bb9c629 [ 1546.715510][T28514] RDX: 00000000040080c4 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1546.715529][T28514] RBP: 00007f018ca94090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.715545][T28514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.715559][T28514] R13: 00007f018be16038 R14: 00007f018be15fa0 R15: 00007ffd02fe3b68 [ 1546.715590][T28514] [ 1548.605860][T28524] futex_wake_op: syz.4.5015 tries to shift op by -2048; fix this program [ 1548.788859][T28528] FAULT_INJECTION: forcing a failure. [ 1548.788859][T28528] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.886411][T28528] CPU: 0 UID: 0 PID: 28528 Comm: syz.3.5017 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1548.886456][T28528] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1548.886465][T28528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1548.886479][T28528] Call Trace: [ 1548.886486][T28528] [ 1548.886495][T28528] dump_stack_lvl+0x100/0x190 [ 1548.886534][T28528] should_fail_ex.cold+0x5/0xa [ 1548.886563][T28528] should_failslab+0xc2/0x120 [ 1548.886586][T28528] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1548.886637][T28528] ? __pmd_alloc+0xbf/0x9c0 [ 1548.886668][T28528] __pmd_alloc+0xbf/0x9c0 [ 1548.886695][T28528] __handle_mm_fault+0xa99/0x2b60 [ 1548.886730][T28528] ? mt_find+0x45e/0x8e0 [ 1548.886759][T28528] ? __pfx___handle_mm_fault+0x10/0x10 [ 1548.886788][T28528] ? __pfx_mt_find+0x10/0x10 [ 1548.886832][T28528] ? find_vma+0xbf/0x140 [ 1548.886868][T28528] ? __pfx_find_vma+0x10/0x10 [ 1548.886907][T28528] handle_mm_fault+0x36d/0xa20 [ 1548.886946][T28528] do_user_addr_fault+0x74c/0x12f0 [ 1548.886995][T28528] exc_page_fault+0x6f/0xd0 [ 1548.887024][T28528] asm_exc_page_fault+0x26/0x30 [ 1548.887048][T28528] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1548.887082][T28528] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1548.887106][T28528] RSP: 0018:ffffc900061efb98 EFLAGS: 00050206 [ 1548.887124][T28528] RAX: 0000000000000001 RBX: ffff88802a545200 RCX: 0000000000000081 [ 1548.887140][T28528] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802a545200 [ 1548.887154][T28528] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10054a8a50 [ 1548.887169][T28528] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900061efd80 [ 1548.887184][T28528] R13: 0000000000000000 R14: 0000000000000081 R15: 0000000000000000 [ 1548.887213][T28528] _copy_from_iter+0x355/0x1690 [ 1548.887258][T28528] ? __pfx__copy_from_iter+0x10/0x10 [ 1548.887294][T28528] ? rcu_is_watching+0x12/0xc0 [ 1548.887330][T28528] ? trace_kmalloc+0x101/0x130 [ 1548.887351][T28528] ? __kasan_kmalloc+0xaa/0xb0 [ 1548.887387][T28528] ? __kmalloc_noprof+0x320/0x850 [ 1548.887426][T28528] kernfs_fop_write_iter+0x186/0x5f0 [ 1548.887463][T28528] vfs_write+0x6ac/0x1070 [ 1548.887501][T28528] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1548.887544][T28528] ? __pfx_vfs_write+0x10/0x10 [ 1548.887598][T28528] ksys_write+0x12a/0x250 [ 1548.887633][T28528] ? __pfx_ksys_write+0x10/0x10 [ 1548.887677][T28528] do_syscall_64+0x106/0xf80 [ 1548.887702][T28528] ? clear_bhb_loop+0x40/0x90 [ 1548.887731][T28528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.887755][T28528] RIP: 0033:0x7f8d8c99c629 [ 1548.887773][T28528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.887796][T28528] RSP: 002b:00007f8d8d83d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1548.887818][T28528] RAX: ffffffffffffffda RBX: 00007f8d8cc15fa0 RCX: 00007f8d8c99c629 [ 1548.887834][T28528] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 1548.887848][T28528] RBP: 00007f8d8d83d090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.887863][T28528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1548.887878][T28528] R13: 00007f8d8cc16038 R14: 00007f8d8cc15fa0 R15: 00007ffd1811a5f8 [ 1548.887909][T28528] SYZKALLER SYZKALLER LOGIN: [ 1550.241600][T28539] netlink: 'syz.4.5019': attribute type 1 has an invalid length. [ 1550.264363][T28539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5019'. [ 1552.204249][T28577] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1555.091106][T11998] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1556.435082][T28619] zswap: compressor not available [ 1556.830607][T28624] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1556.882019][T28624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1556.913292][T28624] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1556.935662][T28624] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1557.103981][T28624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1557.123549][T28624] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1557.163793][T28624] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1557.567050][T28644] FAULT_INJECTION: forcing a failure. [ 1557.567050][T28644] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.617676][T28644] CPU: 0 UID: 0 PID: 28644 Comm: syz.6.5041 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1557.617720][T28644] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1557.617729][T28644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1557.617745][T28644] Call Trace: [ 1557.617753][T28644] [ 1557.617763][T28644] dump_stack_lvl+0x100/0x190 [ 1557.617816][T28644] should_fail_ex.cold+0x5/0xa [ 1557.617845][T28644] should_failslab+0xc2/0x120 [ 1557.617869][T28644] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1557.617900][T28644] ? do_epoll_create+0x62/0x4b0 [ 1557.617944][T28644] do_epoll_create+0x62/0x4b0 [ 1557.617984][T28644] __x64_sys_epoll_create+0x45/0x70 [ 1557.618008][T28644] do_syscall_64+0x106/0xf80 [ 1557.618035][T28644] ? clear_bhb_loop+0x40/0x90 [ 1557.618065][T28644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.618090][T28644] RIP: 0033:0x7f018bb9c629 [ 1557.618110][T28644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.618135][T28644] RSP: 002b:00007f018ca94028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 1557.618159][T28644] RAX: ffffffffffffffda RBX: 00007f018be15fa0 RCX: 00007f018bb9c629 [ 1557.618176][T28644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1557.618191][T28644] RBP: 00007f018bc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1557.618206][T28644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1557.618221][T28644] R13: 00007f018be16038 R14: 00007f018be15fa0 R15: 00007ffd02fe3b68 [ 1557.618252][T28644] [ 1558.313799][T11998] Bluetooth: hci0: command 0x0406 tx timeout [ 1558.926869][T11998] Bluetooth: hci2: command 0x0406 tx timeout [ 1558.934153][T24820] Bluetooth: hci3: command 0x0c1a tx timeout [ 1559.165625][T11998] Bluetooth: hci4: command 0x0c1a tx timeout [ 1561.012169][T24820] Bluetooth: hci2: command 0x0406 tx timeout [ 1561.245867][T24820] Bluetooth: hci4: command 0x0c1a tx timeout [ 1562.685617][T11998] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1563.325669][T11998] Bluetooth: hci4: command 0x0c1a tx timeout [ 1568.568035][T28805] [U] 0="­/ [ 1568.604472][T28805] [U] [ 1568.627165][T28805] [U] EÇeÅQ‰Í@’ [ 1568.660870][T28804] [U]  [ 1569.863365][T28827] futex_wake_op: syz.3.5080 tries to shift op by -2048; fix this program [ 1569.946145][T28827] netlink: 334 bytes leftover after parsing attributes in process `syz.3.5080'. [ 1570.504974][T28845] FAULT_INJECTION: forcing a failure. [ 1570.504974][T28845] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1570.612500][T28845] CPU: 0 UID: 0 PID: 28845 Comm: syz.3.5082 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1570.612547][T28845] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1570.612557][T28845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1570.612571][T28845] Call Trace: [ 1570.612579][T28845] [ 1570.612588][T28845] dump_stack_lvl+0x100/0x190 [ 1570.612628][T28845] should_fail_ex.cold+0x5/0xa [ 1570.612655][T28845] get_futex_key+0x1d2/0x1620 [ 1570.612688][T28845] ? __pfx_get_futex_key+0x10/0x10 [ 1570.612715][T28845] ? find_held_lock+0x2b/0x80 [ 1570.612737][T28845] ? futex_wake+0x456/0x530 [ 1570.612779][T28845] futex_wake+0xea/0x530 [ 1570.612817][T28845] ? __pfx_futex_wake+0x10/0x10 [ 1570.612850][T28845] ? __do_sys_fsconfig+0x564/0xcb0 [ 1570.612885][T28845] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1570.612920][T28845] do_futex+0x32b/0x350 [ 1570.612956][T28845] ? __pfx_do_futex+0x10/0x10 [ 1570.612987][T28845] ? cap_task_prctl+0x104/0xa50 [ 1570.613020][T28845] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1570.613050][T28845] __x64_sys_futex+0x34f/0x4d0 [ 1570.613084][T28845] ? __pfx___x64_sys_futex+0x10/0x10 [ 1570.613116][T28845] ? __pfx___do_sys_prctl+0x10/0x10 [ 1570.613160][T28845] do_syscall_64+0x106/0xf80 [ 1570.613185][T28845] ? clear_bhb_loop+0x40/0x90 [ 1570.613214][T28845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.613239][T28845] RIP: 0033:0x7f8d8c99c629 [ 1570.613259][T28845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1570.613281][T28845] RSP: 002b:00007f8d8d7fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1570.613304][T28845] RAX: ffffffffffffffda RBX: 00007f8d8cc16188 RCX: 00007f8d8c99c629 [ 1570.613320][T28845] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8d8cc1618c [ 1570.613335][T28845] RBP: 00007f8d8cc16180 R08: 0000000000000000 R09: 0000000000000000 [ 1570.613350][T28845] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1570.613365][T28845] R13: 00007f8d8cc16218 R14: 00007ffd1811a510 R15: 00007ffd1811a5f8 [ 1570.613395][T28845] SYZKALLER SYZKALLER LOGIN: [ 1572.962699][T28891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5095'. [ 1573.354038][T28899] [U] 0x00060000 [ 1573.358346][T28899] [U] [ 1573.361586][T28899] [U] [ 1573.364811][T28899] [U] [ 1573.368067][T28899] [U] [ 1573.552010][T28899] [U] [ 1573.555272][T28899] [U] [ 1573.558520][T28899] [U] [ 1573.561738][T28899] [U] [ 1573.667843][T28899] [U] [ 1573.671105][T28899] [U] [ 1573.674345][T28899] [U] [ 1573.677573][T28899] [U] [ 1573.764768][T28899] [U] [ 1573.768054][T28899] [U] [ 1573.771278][T28899] [U] [ 1573.774520][T28899] [U] [ 1573.866172][T28899] [U] [ 1573.869437][T28899] [U] [ 1573.872666][T28899] [U] [ 1573.875999][T28899] [U] [ 1573.970932][T28899] [U] [ 1573.974351][T28899] [U] [ 1573.977586][T28899] [U] [ 1573.980815][T28899] [U] [ 1574.065758][T28899] [U] [ 1574.069030][T28899] [U] [ 1574.072258][T28899] [U] [ 1574.075484][T28899] [U] [ 1574.265654][T28899] [U] [ 1575.319639][T28933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5105'. [ 1576.482494][T28947] ptp ptp0: new virtual clock ptp1 [ 1576.525838][T28947] ptp ptp0: guarantee physical clock free running [ 1576.563510][T28950] ptp ptp0: guarantee physical clock free running [ 1579.580153][T28991] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(14) [ 1580.570722][T29006] FAULT_INJECTION: forcing a failure. [ 1580.570722][T29006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1580.679775][T29006] CPU: 0 UID: 0 PID: 29006 Comm: syz.3.5119 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1580.679813][T29006] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1580.679822][T29006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1580.679836][T29006] Call Trace: [ 1580.679844][T29006] [ 1580.679853][T29006] dump_stack_lvl+0x100/0x190 [ 1580.679892][T29006] should_fail_ex.cold+0x5/0xa [ 1580.679914][T29006] ? prepare_alloc_pages+0x16d/0x5f0 [ 1580.679941][T29006] should_fail_alloc_page+0xeb/0x140 [ 1580.679965][T29006] prepare_alloc_pages+0x1f0/0x5f0 [ 1580.679994][T29006] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1580.680038][T29006] ? __lock_acquire+0x4a5/0x2630 [ 1580.680070][T29006] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1580.680121][T29006] ? find_held_lock+0x2b/0x80 [ 1580.680141][T29006] ? is_bpf_text_address+0x8a/0x1a0 [ 1580.680194][T29006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1580.680235][T29006] ? policy_nodemask+0xed/0x4f0 [ 1580.680261][T29006] alloc_pages_mpol+0x1fb/0x550 [ 1580.680292][T29006] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1580.680330][T29006] folio_alloc_mpol_noprof+0x36/0x340 [ 1580.680360][T29006] shmem_alloc_folio+0x135/0x160 [ 1580.680391][T29006] shmem_alloc_and_add_folio+0x371/0xd40 [ 1580.680430][T29006] ? __pfx_filemap_get_entry+0x10/0x10 [ 1580.680466][T29006] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1580.680502][T29006] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1580.680538][T29006] ? xas_find+0x32c/0x8e0 [ 1580.680568][T29006] shmem_get_folio_gfp+0x6ab/0x1900 [ 1580.680608][T29006] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1580.680643][T29006] ? filemap_map_pages+0xe69/0x2020 [ 1580.680680][T29006] shmem_fault+0x1f9/0xa20 [ 1580.680712][T29006] ? __lock_acquire+0x4a5/0x2630 [ 1580.680741][T29006] ? __pfx_shmem_fault+0x10/0x10 [ 1580.680776][T29006] ? rcu_is_watching+0x12/0xc0 [ 1580.680819][T29006] ? __pfx_filemap_map_pages+0x10/0x10 [ 1580.680860][T29006] __do_fault+0x10d/0x550 [ 1580.680900][T29006] do_fault+0xaf9/0x1950 [ 1580.680925][T29006] ? __pmd_alloc+0x6aa/0x9c0 [ 1580.680952][T29006] __handle_mm_fault+0x180f/0x2b60 [ 1580.680987][T29006] ? mt_find+0x45e/0x8e0 [ 1580.681016][T29006] ? __pfx___handle_mm_fault+0x10/0x10 [ 1580.681044][T29006] ? __pfx_mt_find+0x10/0x10 [ 1580.681088][T29006] ? find_vma+0xbf/0x140 [ 1580.681124][T29006] ? __pfx_find_vma+0x10/0x10 [ 1580.681163][T29006] handle_mm_fault+0x36d/0xa20 [ 1580.681199][T29006] do_user_addr_fault+0x74c/0x12f0 [ 1580.681245][T29006] exc_page_fault+0x6f/0xd0 [ 1580.681270][T29006] asm_exc_page_fault+0x26/0x30 [ 1580.681298][T29006] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1580.681332][T29006] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1580.681356][T29006] RSP: 0018:ffffc90005e4fb98 EFLAGS: 00050206 [ 1580.681376][T29006] RAX: 0000000000000001 RBX: ffff888029ef9300 RCX: 0000000000000081 [ 1580.681391][T29006] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888029ef9300 [ 1580.681406][T29006] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10053df270 [ 1580.681421][T29006] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90005e4fd80 [ 1580.681448][T29006] R13: 0000000000000000 R14: 0000000000000081 R15: 0000000000000000 [ 1580.681476][T29006] _copy_from_iter+0x355/0x1690 [ 1580.681520][T29006] ? __pfx__copy_from_iter+0x10/0x10 [ 1580.681554][T29006] ? rcu_is_watching+0x12/0xc0 [ 1580.681586][T29006] ? trace_kmalloc+0x101/0x130 [ 1580.681607][T29006] ? __kasan_kmalloc+0xaa/0xb0 [ 1580.681662][T29006] ? __kmalloc_noprof+0x320/0x850 [ 1580.681701][T29006] kernfs_fop_write_iter+0x186/0x5f0 [ 1580.681729][T29006] vfs_write+0x6ac/0x1070 [ 1580.681766][T29006] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1580.681809][T29006] ? __pfx_vfs_write+0x10/0x10 [ 1580.681863][T29006] ksys_write+0x12a/0x250 [ 1580.681898][T29006] ? __pfx_ksys_write+0x10/0x10 [ 1580.681942][T29006] do_syscall_64+0x106/0xf80 [ 1580.681967][T29006] ? clear_bhb_loop+0x40/0x90 [ 1580.681997][T29006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.682020][T29006] RIP: 0033:0x7f8d8c99c629 [ 1580.682039][T29006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.682063][T29006] RSP: 002b:00007f8d8d83d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1580.682084][T29006] RAX: ffffffffffffffda RBX: 00007f8d8cc15fa0 RCX: 00007f8d8c99c629 [ 1580.682100][T29006] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 1580.682114][T29006] RBP: 00007f8d8d83d090 R08: 0000000000000000 R09: 0000000000000000 [ 1580.682128][T29006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1580.682143][T29006] R13: 00007f8d8cc16038 R14: 00007f8d8cc15fa0 R15: 00007ffd1811a5f8 [ 1580.682174][T29006] [ 1583.646452][T29039] FAULT_INJECTION: forcing a failure. [ 1583.646452][T29039] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.685716][T29039] CPU: 0 UID: 0 PID: 29039 Comm: syz.3.5125 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1583.685754][T29039] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1583.685763][T29039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1583.685777][T29039] Call Trace: [ 1583.685784][T29039] [ 1583.685793][T29039] dump_stack_lvl+0x100/0x190 [ 1583.685831][T29039] should_fail_ex.cold+0x5/0xa [ 1583.685857][T29039] should_failslab+0xc2/0x120 [ 1583.685879][T29039] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1583.685909][T29039] ? newseg+0x269/0xed0 [ 1583.685935][T29039] newseg+0x269/0xed0 [ 1583.685976][T29039] ? __pfx_futex_wait+0x10/0x10 [ 1583.686015][T29039] ? __pfx_newseg+0x10/0x10 [ 1583.686043][T29039] ? down_write+0x146/0x1f0 [ 1583.686074][T29039] ? __sched_setaffinity+0x17c/0x280 [ 1583.686099][T29039] ? __pfx___sched_setaffinity+0x10/0x10 [ 1583.686127][T29039] ipcget+0xee/0xf50 [ 1583.686150][T29039] ? do_futex+0x192/0x350 [ 1583.686180][T29039] ? __pfx_do_futex+0x10/0x10 [ 1583.686211][T29039] ? sched_setaffinity+0xe0/0x400 [ 1583.686232][T29039] ? __might_fault+0xc5/0x140 [ 1583.686265][T29039] ? __pfx_ipcget+0x10/0x10 [ 1583.686289][T29039] ? __x64_sys_futex+0x34f/0x4d0 [ 1583.686318][T29039] ? __x64_sys_futex+0x358/0x4d0 [ 1583.686353][T29039] __x64_sys_shmget+0x13b/0x1b0 [ 1583.686377][T29039] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1583.686409][T29039] do_syscall_64+0x106/0xf80 [ 1583.686434][T29039] ? clear_bhb_loop+0x40/0x90 [ 1583.686463][T29039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.686488][T29039] RIP: 0033:0x7f8d8c99c629 [ 1583.686507][T29039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.686531][T29039] RSP: 002b:00007f8d8d81c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1583.686553][T29039] RAX: ffffffffffffffda RBX: 00007f8d8cc16090 RCX: 00007f8d8c99c629 [ 1583.686575][T29039] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 1583.686590][T29039] RBP: 00007f8d8ca32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1583.686605][T29039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1583.686639][T29039] R13: 00007f8d8cc16128 R14: 00007f8d8cc16090 R15: 00007ffd1811a5f8 [ 1583.686671][T29039] [ 1583.688750][T29027] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1584.419017][T29027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1584.436192][T29027] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1584.453722][T29027] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1584.664537][T29042] FAULT_INJECTION: forcing a failure. [ 1584.664537][T29042] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.085912][T11998] Bluetooth: hci0: command 0x0406 tx timeout [ 1585.231640][T29042] CPU: 0 UID: 0 PID: 29042 Comm: syz.6.5126 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1585.231680][T29042] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1585.231689][T29042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1585.231703][T29042] Call Trace: [ 1585.231711][T29042] [ 1585.231719][T29042] dump_stack_lvl+0x100/0x190 [ 1585.231757][T29042] should_fail_ex.cold+0x5/0xa [ 1585.231782][T29042] ? lsm_blob_alloc+0x68/0x90 [ 1585.231806][T29042] should_failslab+0xc2/0x120 [ 1585.231828][T29042] __kmalloc_noprof+0xe0/0x850 [ 1585.231859][T29042] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1585.231885][T29042] lsm_blob_alloc+0x68/0x90 [ 1585.231909][T29042] security_prepare_creds+0x2d/0x290 [ 1585.231933][T29042] prepare_creds+0x5d6/0x950 [ 1585.231982][T29042] copy_creds+0xa7/0xa50 [ 1585.232018][T29042] copy_process+0x1029/0x7a10 [ 1585.232046][T29042] ? __pfx___futex_wait+0x10/0x10 [ 1585.232079][T29042] ? kasan_save_stack+0x3f/0x50 [ 1585.232111][T29042] ? kasan_save_stack+0x30/0x50 [ 1585.232142][T29042] ? kasan_save_track+0x14/0x30 [ 1585.232181][T29042] ? __pfx_copy_process+0x10/0x10 [ 1585.232219][T29042] kernel_clone+0xfc/0x9a0 [ 1585.232242][T29042] ? __pfx_futex_wait+0x10/0x10 [ 1585.232276][T29042] ? __pfx_kernel_clone+0x10/0x10 [ 1585.232316][T29042] __do_sys_clone+0xd9/0x120 [ 1585.232341][T29042] ? __pfx___do_sys_clone+0x10/0x10 [ 1585.232388][T29042] do_syscall_64+0x106/0xf80 [ 1585.232412][T29042] ? clear_bhb_loop+0x40/0x90 [ 1585.232438][T29042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.232462][T29042] RIP: 0033:0x7f018bb9c629 [ 1585.232480][T29042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1585.232502][T29042] RSP: 002b:00007f018ca93fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1585.232524][T29042] RAX: ffffffffffffffda RBX: 00007f018be15fa0 RCX: 00007f018bb9c629 [ 1585.232539][T29042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1585.232553][T29042] RBP: 00007f018bc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1585.232567][T29042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1585.232581][T29042] R13: 00007f018be16038 R14: 00007f018be15fa0 R15: 00007ffd02fe3b68 [ 1585.232609][T29042] [ 1586.447635][T11998] Bluetooth: hci2: command 0x0406 tx timeout [ 1586.455261][T11998] Bluetooth: hci3: command 0x0c1a tx timeout [ 1586.528176][T29075] Bluetooth: hci4: command 0x0c1a tx timeout [ 1588.557542][T29101] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1589.965700][T29075] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1592.300669][T29163] FAULT_INJECTION: forcing a failure. [ 1592.300669][T29163] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1592.384458][T29163] CPU: 0 UID: 0 PID: 29163 Comm: syz.0.5150 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1592.384500][T29163] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1592.384509][T29163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1592.384524][T29163] Call Trace: [ 1592.384532][T29163] [ 1592.384542][T29163] dump_stack_lvl+0x100/0x190 [ 1592.384592][T29163] should_fail_ex.cold+0x5/0xa [ 1592.384617][T29163] ? bpf_ksym_find+0x124/0x1c0 [ 1592.384649][T29163] get_futex_key+0x1d2/0x1620 [ 1592.384683][T29163] ? __pfx_get_futex_key+0x10/0x10 [ 1592.384711][T29163] ? arch_stack_walk+0xa6/0xf0 [ 1592.384744][T29163] futex_wait_setup+0x81/0x500 [ 1592.384790][T29163] __futex_wait+0x19f/0x300 [ 1592.384829][T29163] ? __pfx___futex_wait+0x10/0x10 [ 1592.384865][T29163] ? kasan_save_free_info+0x3b/0x70 [ 1592.384894][T29163] ? __kasan_slab_free+0x5f/0x80 [ 1592.384931][T29163] ? kfree+0x1f6/0x6b0 [ 1592.384962][T29163] ? __pfx_futex_wake_mark+0x10/0x10 [ 1592.385003][T29163] ? futex_hash+0x2c5/0x380 [ 1592.385040][T29163] futex_wait+0xed/0x380 [ 1592.385077][T29163] ? __pfx_futex_wait+0x10/0x10 [ 1592.385124][T29163] ? kasan_quarantine_put+0x104/0x240 [ 1592.385159][T29163] ? lockdep_hardirqs_on+0x78/0x100 [ 1592.385190][T29163] do_futex+0x1ef/0x350 [ 1592.385222][T29163] ? __pfx_do_futex+0x10/0x10 [ 1592.385254][T29163] ? mntput+0x70/0xa0 [ 1592.385289][T29163] ? do_handle_open+0x2ca/0xce0 [ 1592.385318][T29163] __x64_sys_futex+0x34f/0x4d0 [ 1592.385354][T29163] ? __pfx___x64_sys_futex+0x10/0x10 [ 1592.385398][T29163] do_syscall_64+0x106/0xf80 [ 1592.385424][T29163] ? clear_bhb_loop+0x40/0x90 [ 1592.385466][T29163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.385496][T29163] RIP: 0033:0x7fb24439c629 [ 1592.385516][T29163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.385540][T29163] RSP: 002b:00007fb2452aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1592.385569][T29163] RAX: ffffffffffffffda RBX: 00007fb244615fa8 RCX: 00007fb24439c629 [ 1592.385585][T29163] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb244615fa8 [ 1592.385600][T29163] RBP: 00007fb244615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.385614][T29163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1592.385629][T29163] R13: 00007fb244616038 R14: 00007ffd2a0ea7d0 R15: 00007ffd2a0ea8b8 [ 1592.385659][T29163] [ 1593.660984][T29075] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1594.839163][T29203] FAULT_INJECTION: forcing a failure. [ 1594.839163][T29203] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.932037][T29203] CPU: 0 UID: 0 PID: 29203 Comm: syz.0.5162 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1594.932077][T29203] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1594.932086][T29203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1594.932101][T29203] Call Trace: [ 1594.932109][T29203] [ 1594.932119][T29203] dump_stack_lvl+0x100/0x190 [ 1594.932175][T29203] should_fail_ex.cold+0x5/0xa [ 1594.932203][T29203] should_failslab+0xc2/0x120 [ 1594.932227][T29203] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1594.932263][T29203] ? fcloop_parse_nm_options.isra.0+0x117/0x450 [ 1594.932308][T29203] ? __lock_acquire+0x4a5/0x2630 [ 1594.932342][T29203] kstrdup+0x51/0xe0 [ 1594.932379][T29203] fcloop_parse_nm_options.isra.0+0x117/0x450 [ 1594.932421][T29203] ? __pfx_fcloop_parse_nm_options.isra.0+0x10/0x10 [ 1594.932473][T29203] ? __lock_acquire+0x4a5/0x2630 [ 1594.932504][T29203] ? __pfx_fcloop_delete_remote_port+0x10/0x10 [ 1594.932544][T29203] fcloop_delete_remote_port+0x93/0x1f0 [ 1594.932583][T29203] ? __pfx_fcloop_delete_remote_port+0x10/0x10 [ 1594.932627][T29203] ? find_held_lock+0x2b/0x80 [ 1594.932648][T29203] ? sysfs_file_kobj+0xe4/0x290 [ 1594.932674][T29203] ? sysfs_file_kobj+0xe4/0x290 [ 1594.932702][T29203] ? __pfx_fcloop_delete_remote_port+0x10/0x10 [ 1594.932742][T29203] dev_attr_store+0x58/0x80 [ 1594.932779][T29203] ? __pfx_dev_attr_store+0x10/0x10 [ 1594.932815][T29203] sysfs_kf_write+0xf2/0x150 [ 1594.932845][T29203] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1594.932868][T29203] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1594.932899][T29203] vfs_write+0x6ac/0x1070 [ 1594.932936][T29203] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1594.932980][T29203] ? __pfx_vfs_write+0x10/0x10 [ 1594.933035][T29203] ksys_write+0x12a/0x250 [ 1594.933071][T29203] ? __pfx_ksys_write+0x10/0x10 [ 1594.933116][T29203] do_syscall_64+0x106/0xf80 [ 1594.933142][T29203] ? clear_bhb_loop+0x40/0x90 [ 1594.933173][T29203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.933197][T29203] RIP: 0033:0x7fb24439c629 [ 1594.933217][T29203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.933241][T29203] RSP: 002b:00007fb2452aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1594.933263][T29203] RAX: ffffffffffffffda RBX: 00007fb244615fa0 RCX: 00007fb24439c629 [ 1594.933286][T29203] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 1594.933300][T29203] RBP: 00007fb2452aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.933314][T29203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.933329][T29203] R13: 00007fb244616038 R14: 00007fb244615fa0 R15: 00007ffd2a0ea8b8 [ 1594.933361][T29203] [ 1595.586176][T29208] kvm: user requested TSC rate below hardware speed [ 1598.302245][T29250] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5173'. [ 1599.399017][T24820] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1599.412112][T24820] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 1599.725918][T29075] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1600.004369][T29261] [U] ^Z [ 1601.302075][T29297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5181'. [ 1604.601012][T29350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5195'. [ 1605.046984][T29358] futex_wake_op: syz.3.5198 tries to shift op by -2048; fix this program [ 1605.115331][T29358] futex_wake_op: syz.3.5198 tries to shift op by -2048; fix this program [ 1606.853277][T29392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5205'. [ 1607.310247][T29404] futex_wake_op: syz.6.5209 tries to shift op by -2048; fix this program [ 1607.368663][T29404] futex_wake_op: syz.6.5209 tries to shift op by -2048; fix this program [ 1607.734965][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.742624][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.846490][T29075] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1610.146042][T29444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5217'. [ 1610.952480][T29467] FAULT_INJECTION: forcing a failure. [ 1610.952480][T29467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1611.046845][T29467] CPU: 0 UID: 0 PID: 29467 Comm: syz.3.5221 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1611.046886][T29467] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1611.046896][T29467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1611.046911][T29467] Call Trace: [ 1611.046918][T29467] [ 1611.046929][T29467] dump_stack_lvl+0x100/0x190 [ 1611.046969][T29467] should_fail_ex.cold+0x5/0xa [ 1611.046997][T29467] _copy_to_user+0x32/0xd0 [ 1611.047036][T29467] simple_read_from_buffer+0xcb/0x170 [ 1611.047073][T29467] proc_fail_nth_read+0x1af/0x230 [ 1611.047100][T29467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1611.047129][T29467] ? rw_verify_area+0xce/0x6d0 [ 1611.047160][T29467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1611.047187][T29467] vfs_read+0x1e4/0xb30 [ 1611.047225][T29467] ? __pfx_vfs_read+0x10/0x10 [ 1611.047267][T29467] ? __fget_files+0x215/0x3d0 [ 1611.047309][T29467] ? __fget_files+0x21f/0x3d0 [ 1611.047352][T29467] ksys_read+0x12a/0x250 [ 1611.047386][T29467] ? __pfx_ksys_read+0x10/0x10 [ 1611.047429][T29467] do_syscall_64+0x106/0xf80 [ 1611.047455][T29467] ? clear_bhb_loop+0x40/0x90 [ 1611.047484][T29467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.047508][T29467] RIP: 0033:0x7f8d8c95cece [ 1611.047527][T29467] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1611.047551][T29467] RSP: 002b:00007f8d8d83cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1611.047574][T29467] RAX: ffffffffffffffda RBX: 00007f8d8d83d6c0 RCX: 00007f8d8c95cece [ 1611.047590][T29467] RDX: 000000000000000f RSI: 00007f8d8d83d0a0 RDI: 0000000000000004 [ 1611.047605][T29467] RBP: 00007f8d8d83d090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.047620][T29467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1611.047634][T29467] R13: 00007f8d8cc16038 R14: 00007f8d8cc15fa0 R15: 00007ffd1811a5f8 [ 1611.047665][T29467] [ 1612.284143][T29484] netlink: 2468 bytes leftover after parsing attributes in process `syz.6.5226'. [ 1613.710650][T29517] futex_wake_op: syz.6.5235 tries to shift op by -2048; fix this program [ 1620.266959][T29636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5262'. [ 1623.005701][T29075] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1625.198173][T29713] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5280'. [ 1629.006578][T29273] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1634.356701][T29859] bond0: invalid ARP target specified [ 1637.558361][T29912] FAULT_INJECTION: forcing a failure. [ 1637.558361][T29912] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.651205][T29912] CPU: 0 UID: 0 PID: 29912 Comm: syz.4.5328 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1637.651246][T29912] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1637.651255][T29912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1637.651269][T29912] Call Trace: [ 1637.651277][T29912] [ 1637.651287][T29912] dump_stack_lvl+0x100/0x190 [ 1637.651328][T29912] should_fail_ex.cold+0x5/0xa [ 1637.651355][T29912] should_failslab+0xc2/0x120 [ 1637.651378][T29912] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1637.651414][T29912] ? __alloc_skb+0x140/0x710 [ 1637.651443][T29912] __alloc_skb+0x140/0x710 [ 1637.651465][T29912] ? __alloc_skb+0x5b7/0x710 [ 1637.651487][T29912] ? __pfx___alloc_skb+0x10/0x10 [ 1637.651512][T29912] ? find_held_lock+0x2b/0x80 [ 1637.651533][T29912] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1637.651574][T29912] alloc_skb_with_frags+0xe0/0x810 [ 1637.651604][T29912] ? __folio_batch_add_and_move+0x464/0xc60 [ 1637.651645][T29912] sock_alloc_send_pskb+0x801/0x980 [ 1637.651692][T29912] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1637.651737][T29912] ? lock_acquire+0x1cf/0x380 [ 1637.651770][T29912] ? __lock_acquire+0x4a5/0x2630 [ 1637.651804][T29912] __ip_append_data+0x2291/0x46d0 [ 1637.651837][T29912] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1637.651864][T29912] ? ip_dst_mtu_maybe_forward.constprop.0+0x3df/0x750 [ 1637.651906][T29912] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 1637.651941][T29912] ? __pfx___ip_append_data+0x10/0x10 [ 1637.651968][T29912] ? __sock_tx_timestamp+0xb2/0xd0 [ 1637.652000][T29912] ip_make_skb+0x28b/0x310 [ 1637.652042][T29912] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1637.652069][T29912] ? __pfx_ip_make_skb+0x10/0x10 [ 1637.652109][T29912] ? udp_sendmsg+0x17b6/0x2890 [ 1637.652132][T29912] udp_sendmsg+0x17b6/0x2890 [ 1637.652160][T29912] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1637.652188][T29912] ? __pfx_udp_sendmsg+0x10/0x10 [ 1637.652210][T29912] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1637.652277][T29912] ? __import_iovec+0x1d2/0x640 [ 1637.652313][T29912] ? __pfx_udp_sendmsg+0x10/0x10 [ 1637.652338][T29912] inet_sendmsg+0x105/0x140 [ 1637.652369][T29912] ____sys_sendmsg+0x9ad/0xc30 [ 1637.652401][T29912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1637.652435][T29912] ? __pfx__kstrtoull+0x10/0x10 [ 1637.652464][T29912] ___sys_sendmsg+0x190/0x1e0 [ 1637.652497][T29912] ? __pfx____sys_sendmsg+0x10/0x10 [ 1637.652539][T29912] ? find_held_lock+0x2b/0x80 [ 1637.652574][T29912] __sys_sendmmsg+0x205/0x430 [ 1637.652601][T29912] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1637.652633][T29912] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1637.652669][T29912] ? fput+0x79/0x100 [ 1637.652691][T29912] ? ksys_write+0x1ac/0x250 [ 1637.652726][T29912] ? __pfx_ksys_write+0x10/0x10 [ 1637.652763][T29912] __x64_sys_sendmmsg+0x9c/0x100 [ 1637.652786][T29912] ? lockdep_hardirqs_on+0x78/0x100 [ 1637.652810][T29912] do_syscall_64+0x106/0xf80 [ 1637.652832][T29912] ? clear_bhb_loop+0x40/0x90 [ 1637.652858][T29912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.652880][T29912] RIP: 0033:0x7f1b2f59c629 [ 1637.652898][T29912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.652919][T29912] RSP: 002b:00007f1b30423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1637.652940][T29912] RAX: ffffffffffffffda RBX: 00007f1b2f815fa0 RCX: 00007f1b2f59c629 [ 1637.652954][T29912] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 1637.652967][T29912] RBP: 00007f1b30423090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.652981][T29912] R10: 0000000007400000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.652994][T29912] R13: 00007f1b2f816038 R14: 00007f1b2f815fa0 R15: 00007ffff19af538 [ 1637.653022][T29912] [ 1639.357904][T29925] futex_wake_op: syz.0.5329 tries to shift op by -2048; fix this program [ 1644.143776][T30004] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1644.366765][T29273] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1648.076306][T30066] FAULT_INJECTION: forcing a failure. [ 1648.076306][T30066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1648.157876][T30066] CPU: 0 UID: 0 PID: 30066 Comm: syz.3.5361 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1648.157915][T30066] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1648.157924][T30066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1648.157938][T30066] Call Trace: [ 1648.157946][T30066] [ 1648.157955][T30066] dump_stack_lvl+0x100/0x190 [ 1648.157994][T30066] should_fail_ex.cold+0x5/0xa [ 1648.158020][T30066] _copy_from_iter+0x1f4/0x1690 [ 1648.158062][T30066] ? __pfx__copy_from_iter+0x10/0x10 [ 1648.158103][T30066] ? __pfx___might_resched+0x10/0x10 [ 1648.158142][T30066] file_tty_write.isra.0+0x45b/0x890 [ 1648.158177][T30066] vfs_write+0x6ac/0x1070 [ 1648.158213][T30066] ? __pfx_tty_write+0x10/0x10 [ 1648.158244][T30066] ? __pfx_vfs_write+0x10/0x10 [ 1648.158277][T30066] ? find_held_lock+0x2b/0x80 [ 1648.158315][T30066] ksys_write+0x12a/0x250 [ 1648.158349][T30066] ? __pfx_ksys_write+0x10/0x10 [ 1648.158392][T30066] do_syscall_64+0x106/0xf80 [ 1648.158417][T30066] ? clear_bhb_loop+0x40/0x90 [ 1648.158444][T30066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.158468][T30066] RIP: 0033:0x7f8d8c99c629 [ 1648.158487][T30066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.158509][T30066] RSP: 002b:00007f8d8d83d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1648.158531][T30066] RAX: ffffffffffffffda RBX: 00007f8d8cc15fa0 RCX: 00007f8d8c99c629 [ 1648.158547][T30066] RDX: 0000000000007fff RSI: 0000200000000000 RDI: 0000000000000003 [ 1648.158561][T30066] RBP: 00007f8d8d83d090 R08: 0000000000000000 R09: 0000000000000000 [ 1648.158576][T30066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1648.158590][T30066] R13: 00007f8d8cc16038 R14: 00007f8d8cc15fa0 R15: 00007ffd1811a5f8 [ 1648.158620][T30066] [ 1649.365909][T30082] futex_wake_op: syz.3.5366 tries to shift op by -2048; fix this program [ 1650.765759][T29273] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1663.085595][T29273] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1665.133050][T30338] FAULT_INJECTION: forcing a failure. [ 1665.133050][T30338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.228553][T30338] CPU: 0 UID: 0 PID: 30338 Comm: syz.0.5432 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1665.228605][T30338] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1665.228614][T30338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1665.228628][T30338] Call Trace: [ 1665.228636][T30338] [ 1665.228645][T30338] dump_stack_lvl+0x100/0x190 [ 1665.228682][T30338] should_fail_ex.cold+0x5/0xa [ 1665.228714][T30338] _copy_from_user+0x2e/0xd0 [ 1665.228750][T30338] copy_msghdr_from_user+0x9f/0x4f0 [ 1665.228786][T30338] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1665.228824][T30338] ? rcu_is_watching+0x12/0xc0 [ 1665.228877][T30338] ? ___sys_sendmsg+0x19d/0x1e0 [ 1665.228924][T30338] ? kfree+0x2ec/0x6b0 [ 1665.228956][T30338] ___sys_sendmsg+0x106/0x1e0 [ 1665.228990][T30338] ? __pfx____sys_sendmsg+0x10/0x10 [ 1665.229048][T30338] ? __pfx___might_resched+0x10/0x10 [ 1665.229086][T30338] __sys_sendmmsg+0x205/0x430 [ 1665.229115][T30338] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1665.229149][T30338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1665.229188][T30338] ? fput+0x79/0x100 [ 1665.229212][T30338] ? ksys_write+0x1ac/0x250 [ 1665.229245][T30338] ? __pfx_ksys_write+0x10/0x10 [ 1665.229284][T30338] __x64_sys_sendmmsg+0x9c/0x100 [ 1665.229309][T30338] ? lockdep_hardirqs_on+0x78/0x100 [ 1665.229334][T30338] do_syscall_64+0x106/0xf80 [ 1665.229358][T30338] ? clear_bhb_loop+0x40/0x90 [ 1665.229386][T30338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.229409][T30338] RIP: 0033:0x7fb24439c629 [ 1665.229428][T30338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1665.229449][T30338] RSP: 002b:00007fb2452aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1665.229472][T30338] RAX: ffffffffffffffda RBX: 00007fb244615fa0 RCX: 00007fb24439c629 [ 1665.229487][T30338] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 1665.229501][T30338] RBP: 00007fb2452aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1665.229515][T30338] R10: 0000000007400000 R11: 0000000000000246 R12: 0000000000000001 [ 1665.229536][T30338] R13: 00007fb244616038 R14: 00007fb244615fa0 R15: 00007ffd2a0ea8b8 [ 1665.229566][T30338] [ 1666.123423][T30355] FAULT_INJECTION: forcing a failure. [ 1666.123423][T30355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1666.182374][T30355] CPU: 0 UID: 0 PID: 30355 Comm: syz.6.5436 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1666.182415][T30355] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1666.182425][T30355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1666.182439][T30355] Call Trace: [ 1666.182448][T30355] [ 1666.182457][T30355] dump_stack_lvl+0x100/0x190 [ 1666.182503][T30355] should_fail_ex.cold+0x5/0xa [ 1666.182531][T30355] _copy_from_iter+0x1f4/0x1690 [ 1666.182574][T30355] ? __pfx__copy_from_iter+0x10/0x10 [ 1666.182616][T30355] ? __pfx___might_resched+0x10/0x10 [ 1666.182656][T30355] file_tty_write.isra.0+0x45b/0x890 [ 1666.182693][T30355] vfs_write+0x6ac/0x1070 [ 1666.182729][T30355] ? __pfx_tty_write+0x10/0x10 [ 1666.182757][T30355] ? __pfx_vfs_write+0x10/0x10 [ 1666.182795][T30355] ? find_held_lock+0x2b/0x80 [ 1666.182835][T30355] ksys_write+0x12a/0x250 [ 1666.182869][T30355] ? __pfx_ksys_write+0x10/0x10 [ 1666.182917][T30355] do_syscall_64+0x106/0xf80 [ 1666.182943][T30355] ? clear_bhb_loop+0x40/0x90 [ 1666.182973][T30355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.182997][T30355] RIP: 0033:0x7f018bb9c629 [ 1666.183015][T30355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1666.183038][T30355] RSP: 002b:00007f018ca94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1666.183060][T30355] RAX: ffffffffffffffda RBX: 00007f018be15fa0 RCX: 00007f018bb9c629 [ 1666.183077][T30355] RDX: 0000000000007fff RSI: 0000200000000000 RDI: 0000000000000003 [ 1666.183092][T30355] RBP: 00007f018ca94090 R08: 0000000000000000 R09: 0000000000000000 [ 1666.183106][T30355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1666.183121][T30355] R13: 00007f018be16038 R14: 00007f018be15fa0 R15: 00007ffd02fe3b68 [ 1666.183151][T30355] [ 1668.058600][T30390] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 1668.058927][T30390] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 1668.203955][T30390] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 1668.386419][T30389] ima: policy update failed [ 1668.438651][ T30] audit: type=1802 audit(4294967840.040:25): pid=30389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.5444" res=0 errno=0 [ 1669.131604][T30409] Invalid ELF header magic: != ELF [ 1669.184695][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.193095][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.230442][T30440] FAULT_INJECTION: forcing a failure. [ 1670.230442][T30440] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.281787][T30439] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1670.326385][T30439] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1670.367788][T30439] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1670.390115][T30440] CPU: 0 UID: 0 PID: 30440 Comm: syz.4.5458 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1670.390155][T30440] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1670.390164][T30440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1670.390179][T30440] Call Trace: [ 1670.390187][T30440] [ 1670.390197][T30440] dump_stack_lvl+0x100/0x190 [ 1670.390258][T30440] should_fail_ex.cold+0x5/0xa [ 1670.390284][T30440] ? tomoyo_encode2+0xfb/0x3c0 [ 1670.390306][T30440] should_failslab+0xc2/0x120 [ 1670.390328][T30440] __kmalloc_noprof+0xe0/0x850 [ 1670.390360][T30440] ? rcu_is_watching+0x12/0xc0 [ 1670.390399][T30440] tomoyo_encode2+0xfb/0x3c0 [ 1670.390426][T30440] tomoyo_encode+0x29/0x50 [ 1670.390448][T30440] tomoyo_realpath_from_path+0x18c/0x690 [ 1670.390478][T30440] tomoyo_path_number_perm+0x23c/0x580 [ 1670.390511][T30440] ? tomoyo_path_number_perm+0x22e/0x580 [ 1670.390547][T30440] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1670.390609][T30440] ? find_held_lock+0x2b/0x80 [ 1670.390630][T30440] ? __fget_files+0x215/0x3d0 [ 1670.390664][T30440] ? hook_file_ioctl_common+0x146/0x410 [ 1670.390705][T30440] ? __fget_files+0x21f/0x3d0 [ 1670.390744][T30440] security_file_ioctl+0xd3/0x230 [ 1670.390780][T30440] __x64_sys_ioctl+0xb7/0x210 [ 1670.390813][T30440] do_syscall_64+0x106/0xf80 [ 1670.390838][T30440] ? clear_bhb_loop+0x40/0x90 [ 1670.390867][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.390891][T30440] RIP: 0033:0x7f1b2f59c629 [ 1670.390909][T30440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.390931][T30440] RSP: 002b:00007f1b30402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1670.390953][T30440] RAX: ffffffffffffffda RBX: 00007f1b2f816090 RCX: 00007f1b2f59c629 [ 1670.390969][T30440] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000004 [ 1670.390983][T30440] RBP: 00007f1b30402090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.390997][T30440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.391011][T30440] R13: 00007f1b2f816128 R14: 00007f1b2f816090 R15: 00007ffff19af538 [ 1670.391040][T30440] [ 1670.391058][T30440] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1670.692110][T30439] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1670.705859][T30439] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1670.725787][T30439] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1670.745887][T30439] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1670.766340][T30439] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1670.783864][T30439] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1670.814817][T30439] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1673.116072][T30479] [U] ^\ [ 1673.331452][T30477] FAULT_INJECTION: forcing a failure. [ 1673.331452][T30477] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.415089][T30477] CPU: 0 UID: 0 PID: 30477 Comm: syz.6.5469 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1673.415129][T30477] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1673.415139][T30477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1673.415153][T30477] Call Trace: [ 1673.415160][T30477] [ 1673.415169][T30477] dump_stack_lvl+0x100/0x190 [ 1673.415207][T30477] should_fail_ex.cold+0x5/0xa [ 1673.415233][T30477] should_failslab+0xc2/0x120 [ 1673.415255][T30477] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1673.415282][T30477] ? proc_self_get_link+0x189/0x1f0 [ 1673.415317][T30477] proc_self_get_link+0x189/0x1f0 [ 1673.415347][T30477] pick_link+0xac2/0x13c0 [ 1673.415383][T30477] ? __pfx_proc_self_get_link+0x10/0x10 [ 1673.415416][T30477] step_into_slowpath+0x9ba/0xf90 [ 1673.415457][T30477] ? __pfx_step_into_slowpath+0x10/0x10 [ 1673.415493][T30477] ? lookup_fast+0x2da/0x600 [ 1673.415521][T30477] ? inode_permission+0x374/0x620 [ 1673.415551][T30477] link_path_walk+0xf28/0x1cc0 [ 1673.415592][T30477] path_openat+0x1be/0x31a0 [ 1673.415611][T30477] ? kasan_save_stack+0x3f/0x50 [ 1673.415643][T30477] ? kasan_save_stack+0x30/0x50 [ 1673.415674][T30477] ? kasan_save_track+0x14/0x30 [ 1673.415706][T30477] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1673.415744][T30477] ? __pfx_path_openat+0x10/0x10 [ 1673.415775][T30477] do_file_open+0x20e/0x430 [ 1673.415797][T30477] ? __pfx_do_file_open+0x10/0x10 [ 1673.415837][T30477] ? alloc_fd+0x476/0x790 [ 1673.415875][T30477] ? do_getname+0x191/0x390 [ 1673.415903][T30477] do_sys_openat2+0x10d/0x1e0 [ 1673.415930][T30477] ? __pfx_do_sys_openat2+0x10/0x10 [ 1673.415968][T30477] __x64_sys_openat+0x12d/0x210 [ 1673.415996][T30477] ? __pfx___x64_sys_openat+0x10/0x10 [ 1673.416043][T30477] do_syscall_64+0x106/0xf80 [ 1673.416068][T30477] ? clear_bhb_loop+0x40/0x90 [ 1673.416099][T30477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.416123][T30477] RIP: 0033:0x7f018bb9c629 [ 1673.416159][T30477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.416184][T30477] RSP: 002b:00007f018ca73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1673.416207][T30477] RAX: ffffffffffffffda RBX: 00007f018be16090 RCX: 00007f018bb9c629 [ 1673.416223][T30477] RDX: 0000000000000201 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1673.416239][T30477] RBP: 00007f018bc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1673.416254][T30477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1673.416269][T30477] R13: 00007f018be16128 R14: 00007f018be16090 R15: 00007ffd02fe3b68 [ 1673.416300][T30477] [ 1675.298631][T30516] FAULT_INJECTION: forcing a failure. [ 1675.298631][T30516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1675.395698][T30516] CPU: 0 UID: 0 PID: 30516 Comm: syz.0.5480 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1675.395736][T30516] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1675.395744][T30516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1675.395757][T30516] Call Trace: [ 1675.395765][T30516] [ 1675.395773][T30516] dump_stack_lvl+0x100/0x190 [ 1675.395808][T30516] should_fail_ex.cold+0x5/0xa [ 1675.395833][T30516] _copy_to_user+0x32/0xd0 [ 1675.395868][T30516] simple_read_from_buffer+0xcb/0x170 [ 1675.395901][T30516] proc_fail_nth_read+0x1af/0x230 [ 1675.395926][T30516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1675.395951][T30516] ? rw_verify_area+0xce/0x6d0 [ 1675.395979][T30516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1675.396003][T30516] vfs_read+0x1e4/0xb30 [ 1675.396037][T30516] ? __pfx_vfs_read+0x10/0x10 [ 1675.396067][T30516] ? __fget_files+0x215/0x3d0 [ 1675.396106][T30516] ? __fget_files+0x21f/0x3d0 [ 1675.396152][T30516] ksys_read+0x12a/0x250 [ 1675.396184][T30516] ? __pfx_ksys_read+0x10/0x10 [ 1675.396224][T30516] do_syscall_64+0x106/0xf80 [ 1675.396247][T30516] ? clear_bhb_loop+0x40/0x90 [ 1675.396274][T30516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.396296][T30516] RIP: 0033:0x7fb24435cece [ 1675.396314][T30516] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1675.396338][T30516] RSP: 002b:00007fb2452a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1675.396360][T30516] RAX: ffffffffffffffda RBX: 00007fb2452aa6c0 RCX: 00007fb24435cece [ 1675.396375][T30516] RDX: 000000000000000f RSI: 00007fb2452aa0a0 RDI: 0000000000000006 [ 1675.396390][T30516] RBP: 00007fb2452aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.396403][T30516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.396416][T30516] R13: 00007fb244616038 R14: 00007fb244615fa0 R15: 00007ffd2a0ea8b8 [ 1675.396443][T30516] [ 1675.929468][T30524] Setting dangerous option i915.mitigations - tainting kernel [ 1675.962013][T30524] FAULT_INJECTION: forcing a failure. [ 1675.962013][T30524] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.997731][T30524] CPU: 0 UID: 0 PID: 30524 Comm: syz.0.5482 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1675.997772][T30524] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1675.997797][T30524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1675.997812][T30524] Call Trace: [ 1675.997825][T30524] [ 1675.997835][T30524] dump_stack_lvl+0x100/0x190 [ 1675.997875][T30524] should_fail_ex.cold+0x5/0xa [ 1675.997904][T30524] should_failslab+0xc2/0x120 [ 1675.997927][T30524] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1675.997962][T30524] ? __d_alloc+0x34/0xa80 [ 1675.997993][T30524] __d_alloc+0x34/0xa80 [ 1675.998019][T30524] d_alloc_pseudo+0x1c/0xc0 [ 1675.998052][T30524] alloc_file_pseudo+0xcf/0x230 [ 1675.998082][T30524] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1675.998119][T30524] __shmem_file_setup+0x221/0x490 [ 1675.998151][T30524] ? __pfx___shmem_file_setup+0x10/0x10 [ 1675.998186][T30524] ? vm_area_alloc+0x1f/0x160 [ 1675.998219][T30524] shmem_zero_setup+0x96/0x1b0 [ 1675.998255][T30524] __mmap_region+0x2198/0x29e0 [ 1675.998292][T30524] ? __pfx___mmap_region+0x10/0x10 [ 1675.998371][T30524] ? lockdep_hardirqs_on+0x78/0x100 [ 1675.998397][T30524] ? finish_task_switch.isra.0+0x205/0xb80 [ 1675.998423][T30524] ? rcu_is_watching+0x12/0xc0 [ 1675.998492][T30524] ? rcu_is_watching+0x12/0xc0 [ 1675.998527][T30524] ? cap_capable+0x107/0x460 [ 1675.998561][T30524] mmap_region+0x180/0x3e0 [ 1675.998599][T30524] do_mmap+0xc63/0x12f0 [ 1675.998628][T30524] ? __pfx_do_mmap+0x10/0x10 [ 1675.998651][T30524] ? __pfx_down_write_killable+0x10/0x10 [ 1675.998688][T30524] vm_mmap_pgoff+0x29e/0x470 [ 1675.998716][T30524] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1675.998743][T30524] ? do_futex+0x192/0x350 [ 1675.998773][T30524] ? __pfx_do_futex+0x10/0x10 [ 1675.998808][T30524] ksys_mmap_pgoff+0xe1/0x650 [ 1675.998836][T30524] ? __x64_sys_futex+0x34f/0x4d0 [ 1675.998865][T30524] ? __x64_sys_futex+0x358/0x4d0 [ 1675.998897][T30524] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1675.998921][T30524] ? xfd_validate_state+0x129/0x190 [ 1675.998961][T30524] __x64_sys_mmap+0x125/0x190 [ 1675.998999][T30524] do_syscall_64+0x106/0xf80 [ 1675.999024][T30524] ? clear_bhb_loop+0x40/0x90 [ 1675.999053][T30524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.999077][T30524] RIP: 0033:0x7fb24439c629 [ 1675.999097][T30524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.999122][T30524] RSP: 002b:00007fb2452aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1675.999144][T30524] RAX: ffffffffffffffda RBX: 00007fb244615fa0 RCX: 00007fb24439c629 [ 1675.999161][T30524] RDX: 00000000000000db RSI: 0000000004020009 RDI: 0000000000000000 [ 1675.999176][T30524] RBP: 00007fb244432b39 R08: 0000000000000401 R09: 0000000000008000 [ 1675.999192][T30524] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1675.999206][T30524] R13: 00007fb244616038 R14: 00007fb244615fa0 R15: 00007ffd2a0ea8b8 [ 1675.999237][T30524] [ 1681.049016][T30596] blktrace: Concurrent blktraces are not allowed on loop2 [ 1681.070533][T30599] FAULT_INJECTION: forcing a failure. [ 1681.070533][T30599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1681.166684][T30599] CPU: 0 UID: 0 PID: 30599 Comm: syz.3.5498 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1681.166724][T30599] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1681.166733][T30599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1681.166748][T30599] Call Trace: [ 1681.166755][T30599] [ 1681.166765][T30599] dump_stack_lvl+0x100/0x190 [ 1681.166805][T30599] should_fail_ex.cold+0x5/0xa [ 1681.166833][T30599] _copy_from_iter+0x1f4/0x1690 [ 1681.166875][T30599] ? __asan_memset+0x23/0x50 [ 1681.166907][T30599] ? __pfx__copy_from_iter+0x10/0x10 [ 1681.166943][T30599] ? __pfx___alloc_skb+0x10/0x10 [ 1681.166968][T30599] ? __pfx___might_resched+0x10/0x10 [ 1681.167003][T30599] ? __lock_acquire+0x4a5/0x2630 [ 1681.167040][T30599] netlink_sendmsg+0x808/0xda0 [ 1681.167074][T30599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1681.167102][T30599] ? __import_iovec+0x1d2/0x640 [ 1681.167143][T30599] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1681.167179][T30599] ____sys_sendmsg+0xa54/0xc30 [ 1681.167215][T30599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1681.167261][T30599] ___sys_sendmsg+0x190/0x1e0 [ 1681.167298][T30599] ? __pfx____sys_sendmsg+0x10/0x10 [ 1681.167366][T30599] __sys_sendmsg+0x170/0x220 [ 1681.167393][T30599] ? __pfx___sys_sendmsg+0x10/0x10 [ 1681.167438][T30599] do_syscall_64+0x106/0xf80 [ 1681.167464][T30599] ? clear_bhb_loop+0x40/0x90 [ 1681.167494][T30599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.167519][T30599] RIP: 0033:0x7f8d8c99c629 [ 1681.167538][T30599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1681.167569][T30599] RSP: 002b:00007f8d8d83d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1681.167592][T30599] RAX: ffffffffffffffda RBX: 00007f8d8cc15fa0 RCX: 00007f8d8c99c629 [ 1681.167609][T30599] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1681.167624][T30599] RBP: 00007f8d8d83d090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.167639][T30599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1681.167654][T30599] R13: 00007f8d8cc16038 R14: 00007f8d8cc15fa0 R15: 00007ffd1811a5f8 [ 1681.167683][T30599] [ 1681.749864][T29273] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1681.810751][T30600] FAULT_INJECTION: forcing a failure. [ 1681.810751][T30600] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.867673][T30600] CPU: 0 UID: 0 PID: 30600 Comm: syz.0.5497 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1681.867716][T30600] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1681.867726][T30600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1681.867740][T30600] Call Trace: [ 1681.867749][T30600] [ 1681.867758][T30600] dump_stack_lvl+0x100/0x190 [ 1681.867799][T30600] should_fail_ex.cold+0x5/0xa [ 1681.867828][T30600] should_failslab+0xc2/0x120 [ 1681.867853][T30600] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1681.867884][T30600] ? proc_self_get_link+0x189/0x1f0 [ 1681.867923][T30600] proc_self_get_link+0x189/0x1f0 [ 1681.867957][T30600] pick_link+0xac2/0x13c0 [ 1681.867989][T30600] ? __pfx_proc_self_get_link+0x10/0x10 [ 1681.868027][T30600] step_into_slowpath+0x9ba/0xf90 [ 1681.868067][T30600] ? __pfx_step_into_slowpath+0x10/0x10 [ 1681.868107][T30600] ? lookup_fast+0x2da/0x600 [ 1681.868138][T30600] ? inode_permission+0x374/0x620 [ 1681.868172][T30600] link_path_walk+0xf28/0x1cc0 [ 1681.868217][T30600] path_openat+0x1be/0x31a0 [ 1681.868238][T30600] ? kasan_save_stack+0x3f/0x50 [ 1681.868273][T30600] ? kasan_save_stack+0x30/0x50 [ 1681.868307][T30600] ? kasan_save_track+0x14/0x30 [ 1681.868343][T30600] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1681.868386][T30600] ? __pfx_path_openat+0x10/0x10 [ 1681.868420][T30600] do_file_open+0x20e/0x430 [ 1681.868467][T30600] ? __pfx_do_file_open+0x10/0x10 [ 1681.868514][T30600] ? alloc_fd+0x476/0x790 [ 1681.868556][T30600] ? do_getname+0x191/0x390 [ 1681.868586][T30600] do_sys_openat2+0x10d/0x1e0 [ 1681.868616][T30600] ? __pfx_do_sys_openat2+0x10/0x10 [ 1681.868656][T30600] __x64_sys_openat+0x12d/0x210 [ 1681.868686][T30600] ? __pfx___x64_sys_openat+0x10/0x10 [ 1681.868727][T30600] do_syscall_64+0x106/0xf80 [ 1681.868753][T30600] ? clear_bhb_loop+0x40/0x90 [ 1681.868783][T30600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.868807][T30600] RIP: 0033:0x7fb24439c629 [ 1681.868827][T30600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1681.868851][T30600] RSP: 002b:00007fb245268028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1681.868874][T30600] RAX: ffffffffffffffda RBX: 00007fb244616180 RCX: 00007fb24439c629 [ 1681.868890][T30600] RDX: 0000000000000201 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1681.868906][T30600] RBP: 00007fb244432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1681.868921][T30600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1681.868935][T30600] R13: 00007fb244616218 R14: 00007fb244616180 R15: 00007ffd2a0ea8b8 [ 1681.868966][T30600] [ 1682.534510][T30608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5500'. [ 1682.562081][T30608] bridge_slave_1: left allmulticast mode [ 1682.569682][T30608] bridge_slave_1: left promiscuous mode [ 1682.584305][T30608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.598081][T30608] bridge_slave_0: left allmulticast mode [ 1682.612321][T30608] bridge_slave_0: left promiscuous mode [ 1682.652593][T30608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.883971][T30627] FAULT_INJECTION: forcing a failure. [ 1683.883971][T30627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1683.964582][T30627] CPU: 0 UID: 0 PID: 30627 Comm: syz.4.5505 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1683.964639][T30627] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1683.964648][T30627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1683.964662][T30627] Call Trace: [ 1683.964669][T30627] [ 1683.964678][T30627] dump_stack_lvl+0x100/0x190 [ 1683.964716][T30627] should_fail_ex.cold+0x5/0xa [ 1683.964743][T30627] _copy_from_iter+0x1f4/0x1690 [ 1683.964785][T30627] ? __pfx__copy_from_iter+0x10/0x10 [ 1683.964825][T30627] ? __pfx___might_resched+0x10/0x10 [ 1683.964864][T30627] file_tty_write.isra.0+0x45b/0x890 [ 1683.964899][T30627] vfs_write+0x6ac/0x1070 [ 1683.964934][T30627] ? __pfx_tty_write+0x10/0x10 [ 1683.964962][T30627] ? __pfx_vfs_write+0x10/0x10 [ 1683.964994][T30627] ? find_held_lock+0x2b/0x80 [ 1683.965032][T30627] ksys_write+0x12a/0x250 [ 1683.965065][T30627] ? __pfx_ksys_write+0x10/0x10 [ 1683.965107][T30627] do_syscall_64+0x106/0xf80 [ 1683.965132][T30627] ? clear_bhb_loop+0x40/0x90 [ 1683.965160][T30627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.965183][T30627] RIP: 0033:0x7f1b2f59c629 [ 1683.965202][T30627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1683.965225][T30627] RSP: 002b:00007f1b30423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1683.965247][T30627] RAX: ffffffffffffffda RBX: 00007f1b2f815fa0 RCX: 00007f1b2f59c629 [ 1683.965264][T30627] RDX: 0000000000007fff RSI: 0000200000000000 RDI: 0000000000000003 [ 1683.965278][T30627] RBP: 00007f1b30423090 R08: 0000000000000000 R09: 0000000000000000 [ 1683.965293][T30627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1683.965307][T30627] R13: 00007f1b2f816038 R14: 00007f1b2f815fa0 R15: 00007ffff19af538 [ 1683.965337][T30627] [ 1685.745695][T30643] ================================================================== [ 1685.745716][T30643] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1685.745758][T30643] Read of size 256 at addr ffff888026953f60 by task syz.4.5510/30643 [ 1685.745778][T30643] [ 1685.745795][T30643] CPU: 0 UID: 0 PID: 30643 Comm: syz.4.5510 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1685.745829][T30643] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1685.745838][T30643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1685.745852][T30643] Call Trace: [ 1685.745860][T30643] [ 1685.745869][T30643] dump_stack_lvl+0x100/0x190 [ 1685.745902][T30643] print_report+0x156/0x4c9 [ 1685.745934][T30643] ? __virt_addr_valid+0x81/0x620 [ 1685.745963][T30643] ? __phys_addr+0xe8/0x180 [ 1685.745991][T30643] ? fbcon_prepare_logo+0x94e/0xc60 [ 1685.746039][T30643] kasan_report+0xdf/0x1e0 [ 1685.746061][T30643] ? fbcon_prepare_logo+0x94e/0xc60 [ 1685.746096][T30643] kasan_check_range+0x10f/0x1e0 [ 1685.746140][T30643] __asan_memcpy+0x23/0x60 [ 1685.746177][T30643] fbcon_prepare_logo+0x94e/0xc60 [ 1685.746217][T30643] fbcon_init+0x10a0/0x1820 [ 1685.746254][T30643] visual_init+0x320/0x620 [ 1685.746290][T30643] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1685.746319][T30643] store_bind+0x609/0x730 [ 1685.746346][T30643] ? __pfx_store_bind+0x10/0x10 [ 1685.746369][T30643] dev_attr_store+0x58/0x80 [ 1685.746403][T30643] ? __pfx_dev_attr_store+0x10/0x10 [ 1685.746437][T30643] sysfs_kf_write+0xf2/0x150 [ 1685.746464][T30643] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1685.746486][T30643] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1685.746513][T30643] iter_file_splice_write+0x830/0x10a0 [ 1685.746559][T30643] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1685.746599][T30643] ? __pfx_copy_splice_read+0x10/0x10 [ 1685.746648][T30643] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1685.746687][T30643] direct_splice_actor+0x192/0x6c0 [ 1685.746724][T30643] splice_direct_to_actor+0x345/0xa30 [ 1685.746762][T30643] ? __pfx_direct_splice_actor+0x10/0x10 [ 1685.746801][T30643] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1685.746843][T30643] do_splice_direct+0x174/0x240 [ 1685.746880][T30643] ? __pfx_do_splice_direct+0x10/0x10 [ 1685.746917][T30643] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1685.746955][T30643] ? rw_verify_area+0xce/0x6d0 [ 1685.746987][T30643] do_sendfile+0xadc/0xe20 [ 1685.747022][T30643] ? __pfx_do_sendfile+0x10/0x10 [ 1685.747057][T30643] ? __x64_sys_futex+0x34f/0x4d0 [ 1685.747087][T30643] ? __x64_sys_futex+0x358/0x4d0 [ 1685.747118][T30643] __x64_sys_sendfile64+0x1d8/0x220 [ 1685.747142][T30643] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1685.747177][T30643] do_syscall_64+0x106/0xf80 [ 1685.747202][T30643] ? clear_bhb_loop+0x40/0x90 [ 1685.747229][T30643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.747253][T30643] RIP: 0033:0x7f1b2f59c629 [ 1685.747271][T30643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1685.747294][T30643] RSP: 002b:00007f1b30423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1685.747317][T30643] RAX: ffffffffffffffda RBX: 00007f1b2f815fa0 RCX: 00007f1b2f59c629 [ 1685.747333][T30643] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000007 [ 1685.747348][T30643] RBP: 00007f1b2f632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1685.747362][T30643] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1685.747377][T30643] R13: 00007f1b2f816038 R14: 00007f1b2f815fa0 R15: 00007ffff19af538 [ 1685.747400][T30643] [ 1685.747408][T30643] [ 1685.747413][T30643] Allocated by task 30407: [ 1685.747429][T30643] kasan_save_stack+0x30/0x50 [ 1685.747462][T30643] kasan_save_track+0x14/0x30 [ 1685.747494][T30643] __kasan_kmalloc+0xaa/0xb0 [ 1685.747524][T30643] __kmalloc_noprof+0x301/0x850 [ 1685.747555][T30643] ops_init+0x77/0x5f0 [ 1685.747579][T30643] setup_net+0x118/0x3a0 [ 1685.747602][T30643] copy_net_ns+0x46f/0x7c0 [ 1685.747629][T30643] create_new_namespaces+0x3ea/0xac0 [ 1685.747651][T30643] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1685.747674][T30643] ksys_unshare+0x455/0xab0 [ 1685.747700][T30643] __x64_sys_unshare+0x31/0x40 [ 1685.747726][T30643] do_syscall_64+0x106/0xf80 [ 1685.747749][T30643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.747772][T30643] [ 1685.747777][T30643] Freed by task 25236: [ 1685.747788][T30643] kasan_save_stack+0x30/0x50 [ 1685.747820][T30643] kasan_save_track+0x14/0x30 [ 1685.747863][T30643] kasan_save_free_info+0x3b/0x70 [ 1685.747888][T30643] __kasan_slab_free+0x5f/0x80 [ 1685.747920][T30643] kfree+0x1f6/0x6b0 [ 1685.747944][T30643] ops_undo_list+0x4c2/0xab0 [ 1685.747968][T30643] cleanup_net+0x499/0x920 [ 1685.747993][T30643] process_one_work+0x9d7/0x1920 [ 1685.748023][T30643] worker_thread+0x5da/0xe40 [ 1685.748052][T30643] kthread+0x370/0x450 [ 1685.748078][T30643] ret_from_fork+0x754/0xd80 [ 1685.748109][T30643] ret_from_fork_asm+0x1a/0x30 [ 1685.748131][T30643] [ 1685.748136][T30643] The buggy address belongs to the object at ffff888026953000 [ 1685.748136][T30643] which belongs to the cache kmalloc-2k of size 2048 [ 1685.748205][T30643] The buggy address is located 1888 bytes to the right of [ 1685.748205][T30643] allocated 2048-byte region [ffff888026953000, ffff888026953800) [ 1685.748229][T30643] [ 1685.748235][T30643] The buggy address belongs to the physical page: [ 1685.748247][T30643] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026956000 pfn:0x26950 [ 1685.748271][T30643] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1685.748290][T30643] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1685.748312][T30643] page_type: f5(slab) [ 1685.748332][T30643] raw: 00fff00000000240 ffff88813fe3c000 ffff88813fe36948 ffffea0001f80010 [ 1685.748357][T30643] raw: ffff888026956000 0000000000080007 00000000f5000000 0000000000000000 [ 1685.748379][T30643] head: 00fff00000000240 ffff88813fe3c000 ffff88813fe36948 ffffea0001f80010 [ 1685.748400][T30643] head: ffff888026956000 0000000000080007 00000000f5000000 0000000000000000 [ 1685.748421][T30643] head: 00fff00000000003 ffffea00009a5401 00000000ffffffff 00000000ffffffff [ 1685.748441][T30643] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1685.748455][T30643] page dumped because: kasan: bad access detected [ 1685.748475][T30643] page_owner tracks the page as allocated [ 1685.748483][T30643] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 24, tgid 24 (kworker/1:0), ts 94023884065, free_ts 93922419587 [ 1685.748523][T30643] post_alloc_hook+0x153/0x170 [ 1685.748549][T30643] get_page_from_freelist+0x111d/0x3140 [ 1685.748578][T30643] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1685.748609][T30643] new_slab+0xa6/0x6d0 [ 1685.748632][T30643] refill_objects+0x26b/0x400 [ 1685.748658][T30643] __pcs_replace_empty_main+0x19f/0x600 [ 1685.748688][T30643] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 1685.748721][T30643] kmalloc_reserve+0xe8/0x350 [ 1685.748750][T30643] __alloc_skb+0x185/0x710 [ 1685.748770][T30643] mld_newpack.isra.0+0x18e/0xa20 [ 1685.748821][T30643] add_grhead+0x299/0x340 [ 1685.748852][T30643] add_grec+0x1380/0x1920 [ 1685.748884][T30643] mld_ifc_work+0x3c5/0xc10 [ 1685.748916][T30643] process_one_work+0x9d7/0x1920 [ 1685.748947][T30643] worker_thread+0x5da/0xe40 [ 1685.748977][T30643] kthread+0x370/0x450 [ 1685.749004][T30643] page last free pid 5822 tgid 5822 stack trace: [ 1685.749017][T30643] __free_frozen_pages+0x7e1/0x10d0 [ 1685.749042][T30643] qlist_free_all+0x47/0xe0 [ 1685.749071][T30643] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1685.749102][T30643] __kasan_slab_alloc+0x69/0x90 [ 1685.749135][T30643] __kmalloc_noprof+0x2b9/0x850 [ 1685.749170][T30643] tomoyo_supervisor+0x65d/0x1340 [ 1685.749196][T30643] tomoyo_mount_acl+0x580/0x8b0 [ 1685.749231][T30643] tomoyo_mount_permission+0x214/0x460 [ 1685.749267][T30643] security_sb_mount+0xdd/0x270 [ 1685.749295][T30643] path_mount+0x158/0x23d0 [ 1685.749316][T30643] __x64_sys_mount+0x293/0x310 [ 1685.749339][T30643] do_syscall_64+0x106/0xf80 [ 1685.749361][T30643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.749384][T30643] [ 1685.749390][T30643] Memory state around the buggy address: [ 1685.749401][T30643] ffff888026953e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1685.749418][T30643] ffff888026953e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1685.749435][T30643] >ffff888026953f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1685.749448][T30643] ^ [ 1685.749461][T30643] ffff888026953f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1685.749478][T30643] ffff888026954000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1685.749491][T30643] ================================================================== [ 1685.905985][T30643] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1685.906011][T30643] CPU: 0 UID: 0 PID: 30643 Comm: syz.4.5510 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1685.906063][T30643] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1685.906091][T30643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1685.906106][T30643] Call Trace: [ 1685.906114][T30643] [ 1685.906123][T30643] dump_stack_lvl+0x100/0x190 [ 1685.906161][T30643] vpanic+0x552/0x970 [ 1685.906188][T30643] ? __pfx_vpanic+0x10/0x10 [ 1685.906215][T30643] ? fbcon_prepare_logo+0x94e/0xc60 [ 1685.906249][T30643] panic+0xd1/0xe0 [ 1685.906270][T30643] ? __pfx_panic+0x10/0x10 [ 1685.906293][T30643] ? fbcon_prepare_logo+0x94e/0xc60 [ 1685.906326][T30643] ? preempt_schedule_common+0x42/0xc0 [ 1685.906353][T30643] ? check_panic_on_warn+0x1f/0x90 [ 1685.906388][T30643] check_panic_on_warn.cold+0x19/0x34 [ 1685.906413][T30643] end_report.part.0+0x3a/0x90 [ 1685.906449][T30643] kasan_report.cold+0xe/0x18 [ 1685.906483][T30643] ? fbcon_prepare_logo+0x94e/0xc60 [ 1685.906521][T30643] kasan_check_range+0x10f/0x1e0 [ 1685.906548][T30643] __asan_memcpy+0x23/0x60 [ 1685.906579][T30643] fbcon_prepare_logo+0x94e/0xc60 [ 1685.906621][T30643] fbcon_init+0x10a0/0x1820 [ 1685.906658][T30643] visual_init+0x320/0x620 [ 1685.906696][T30643] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1685.906726][T30643] store_bind+0x609/0x730 [ 1685.906753][T30643] ? __pfx_store_bind+0x10/0x10 [ 1685.906776][T30643] dev_attr_store+0x58/0x80 [ 1685.906816][T30643] ? __pfx_dev_attr_store+0x10/0x10 [ 1685.906851][T30643] sysfs_kf_write+0xf2/0x150 [ 1685.906878][T30643] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1685.906900][T30643] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1685.906927][T30643] iter_file_splice_write+0x830/0x10a0 [ 1685.906972][T30643] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1685.907013][T30643] ? __pfx_copy_splice_read+0x10/0x10 [ 1685.907056][T30643] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1685.907094][T30643] direct_splice_actor+0x192/0x6c0 [ 1685.907131][T30643] splice_direct_to_actor+0x345/0xa30 [ 1685.907169][T30643] ? __pfx_direct_splice_actor+0x10/0x10 [ 1685.907213][T30643] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1685.907255][T30643] do_splice_direct+0x174/0x240 [ 1685.907292][T30643] ? __pfx_do_splice_direct+0x10/0x10 [ 1685.907329][T30643] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1685.907367][T30643] ? rw_verify_area+0xce/0x6d0 [ 1685.907400][T30643] do_sendfile+0xadc/0xe20 [ 1685.907436][T30643] ? __pfx_do_sendfile+0x10/0x10 [ 1685.907471][T30643] ? __x64_sys_futex+0x34f/0x4d0 [ 1685.907501][T30643] ? __x64_sys_futex+0x358/0x4d0 [ 1685.907532][T30643] __x64_sys_sendfile64+0x1d8/0x220 [ 1685.907557][T30643] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1685.907587][T30643] do_syscall_64+0x106/0xf80 [ 1685.907611][T30643] ? clear_bhb_loop+0x40/0x90 [ 1685.907638][T30643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.907662][T30643] RIP: 0033:0x7f1b2f59c629 [ 1685.907681][T30643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1685.907705][T30643] RSP: 002b:00007f1b30423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1685.907728][T30643] RAX: ffffffffffffffda RBX: 00007f1b2f815fa0 RCX: 00007f1b2f59c629 [ 1685.907745][T30643] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000007 [ 1685.907760][T30643] RBP: 00007f1b2f632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1685.907776][T30643] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1685.907791][T30643] R13: 00007f1b2f816038 R14: 00007f1b2f815fa0 R15: 00007ffff19af538 [ 1685.907815][T30643] [ 1685.907882][T30643] Kernel Offset: disabled