last executing test programs: 23m0.796559844s ago: executing program 2 (id=1100): mmap$auto(0x0, 0x400008, 0x789, 0x9b72, 0x2, 0x7ffe) listmount$auto(0x0, 0x0, 0xf4240, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r0, &(0x7f00000018c0)={0x0, 0x1}, 0x9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x40100000001) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x181500, 0x0) pread64$auto(r2, 0x0, 0x1ff, 0x5) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = open(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2c00, 0xb5d1af1605322df2) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) 22m59.41045048s ago: executing program 2 (id=1108): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x8, 0x0, 0x3) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x800, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000300)={0x3, 0x0, 0x7fffffff, 0x55d, 0x12, 0xf2, 0x9, 0x0, 0x5, 0x0, 0xfffffffffffffffb, {0x95, 0xa7}, 0x9, 0x9, 0x1, 0x3, 0x0, 0x6, 0xce34, 0x6, 0x3, 0xfff, 0x3}) fanotify_init$auto(0x0, 0xfb) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x9, 0x0, 0x0) rt_sigaction$auto(0xe, &(0x7f0000000580)={&(0x7f00000004c0)=0x0, 0x100000001, 0x0, {0x7}}, 0x0, 0x8) timer_settime$auto(0x0, 0xd80, &(0x7f0000000040)={{0x40000000000026b, 0x4}, {0x0, 0x83}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_KEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250c00000008000c000500000011000a00f1c8a9713e45ec94b02c52a3e70000000600f7008008000005006000020000001400818005000100fa00000005000200070000008700fa00d3d678fc57f9893b64a0db6669310d2980b91382dbf8825bb319ddcbe37b86811c937f66346d3831bb14d18c27c9efc174513e4148211d39df9b8137406e0f051547819d0eef3c6eb66552e8bce7210561e572f96e43711a841b0f45591cac34b06a39ee69da8942ca95c6805829fb6dfd86d34faf1f294905591c8ec429cc01bf00740008000a010800000008000a010e000000"], 0xec}, 0x1, 0x0, 0x0, 0x40084}, 0x4000001) ioctl$auto_BLKBSZSET(r1, 0x40081271, &(0x7f00000002c0)=0x8) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000280)={0x9, 0x7, 0x3}) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=&(0x7f0000000300)='#\xdc\\\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x91,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/clk/clk_dump\x00', 0x103000, 0x0) setsockopt$auto_SO_TXREHASH(r3, 0x1, 0x4a, &(0x7f00000000c0)='/*&\x00', 0x5) ioctl$auto_FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000000)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 22m57.953172851s ago: executing program 2 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x8000000000) r1 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000180)=0x1) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="020026bd7000ff9a7d001c000000000014001f00fe8800000000000000000000000001010000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 22m57.498160982s ago: executing program 2 (id=1115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x20008810) 22m57.180425019s ago: executing program 2 (id=1116): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="1b8726bd7489fd417edddbdf250300000004000800fbff03800c00098008000180884773800b0001006a8771f1070000000000000086dd000004000280a75542120b5bf0ee"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x11}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0xb21, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x10}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40085}, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(0xffffffffffffffff, 0xc1004110, &(0x7f0000000100)={0x38a, [0xc, 0x4, 0x7d], [{0xbe1a, 0x400, 0x0, 0x0, 0x1}, {0x3ff, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x100, 0xffffffff, 0x1, 0x0, 0x1, 0x1}, {0x1, 0x8, 0x1, 0x0, 0x1}, {0x3ff, 0x3, 0x1, 0x1, 0x1}, {0x1b2, 0x2, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x71c8717a, 0x38c8, 0x1, 0x0, 0x1}, {0x4, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0x34, 0x7f, 0x0, 0x1}, {0x6, 0x4, 0x1}], 0x9, 0x2, 0xffffffc0, 0x8000, 0x8002, 0x7, 0x3, "f8b6e453edf593cff92867c194dfa7ea77769d6eb62b13f03f12710d432e0654ed23caa4249660993299d8d135b37176c1e0c560dad19a2c99017cde053077f3"}) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x13, &(0x7f00000001c0), 0x2) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) ioperm$auto(0x466, 0x7, 0xe7) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) 22m56.709056636s ago: executing program 2 (id=1119): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22b42, 0x0) r0 = socket(0x11, 0x3, 0x9) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20a04, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) setgid$auto(0x0) read$auto(r1, 0x0, 0x42) read$auto(r1, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x80000001, 0x80, 0xd7) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000240)="4c0c5800000000000000087337f9eca907a4bac083077e", 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0) 22m41.433295937s ago: executing program 32 (id=1119): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22b42, 0x0) r0 = socket(0x11, 0x3, 0x9) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20a04, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) setgid$auto(0x0) read$auto(r1, 0x0, 0x42) read$auto(r1, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x80000001, 0x80, 0xd7) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000240)="4c0c5800000000000000087337f9eca907a4bac083077e", 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0) 12m15.691540236s ago: executing program 1 (id=3437): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r0, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r3 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r3, 0x3, 0xc46c, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(r4, 0x3b84, 0x38) mmap$auto(0x7f, 0x1, 0x2, 0x40eb1, 0x602, 0x300000000003) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x7fffff, 0x400008, 0x7, 0x9b72, r4, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) 12m14.390887041s ago: executing program 1 (id=3441): mmap$auto(0x3, 0x2020009, 0x400000000003, 0x11, 0xfffffffffffffffa, 0x800000008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000039, 0x0) r0 = fsopen$auto(0x0, 0x1) listen$auto(r0, 0x40) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbdffd1393d63010e9a972fe370000000df2501000000060002eb1200000008000900080000000500f013e5c70000140020001677d52f3610ac72c8a8b76cc5953f92f5cb61a2c96f9a6d529e290fbf7a8283db6c6f350f44999fd903ab7f2ef88afe4fbb6ca245c2cb44be4a2ff009d7864f6ca7d352afdebf1a1cade7d0b0a8643099efb5b89cea697413078bcfc7210328edcfba4595980b74701a9639f3249f09ae420c792c1eda0c88c699bca61f6695b1f66b31ae"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0xa) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x80, 0x0) readv$auto(r4, &(0x7f0000000140)={0x0, 0x2}, 0x5) pread64$auto(r2, &(0x7f0000000180)='cifs\x00', 0xfffffffffffffff8, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r5 = socket(0x2, 0x3, 0xa) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x3, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x40000000, 0x4800c000}, 0x4) getsockopt$auto(r5, 0x0, 0x29, 0x0, 0x0) 12m13.076374951s ago: executing program 1 (id=3443): ioctl$auto(0xffffffffffffffff, 0x92106411, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x40000000000a5, 0x8000) socket(0x3, 0x80003, 0x300) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) r0 = open(0x0, 0x261c2, 0x84) (async) close_range$auto(0x2, 0x8000, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) io_uring_setup$auto(0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) (async) r4 = socketpair$auto(0x81, 0x0, 0x0, 0x0) (async) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) (async) socketpair$auto(0x20004, 0x7, 0x1, 0x0) (async) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) (async) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) (async) socket(0xa, 0x2, 0x88) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) write$auto(r6, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x920x0}) bpf$auto(0x9, &(0x7f00000000c0)=@bpf_attr_3={0x80, 0x10000, 0x6, 0x100000000, 0x6, 0x2, 0xd0f7, 0xff, 0x9, "784d086f032fe7208054ddf8a938345c", r8, 0x0, r5, 0xc, 0x42754c98, 0x7, 0x8001, 0x4, 0x1000, 0x7ff, @attach_prog_fd, 0x0, 0x9, 0x3, 0x4, 0x3, r7, r4}, 0xffffffff) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x7, 0x8}, 0x9) 12m11.292865639s ago: executing program 1 (id=3453): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x8, 0x0, 0x3) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x800, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000300)={0x3, 0x0, 0x7fffffff, 0x55d, 0x12, 0xf2, 0x9, 0x0, 0x5, 0x0, 0xfffffffffffffffb, {0x95, 0xa7}, 0x9, 0x9, 0x1, 0x3, 0x0, 0x6, 0xce34, 0x6, 0x3, 0xfff, 0x3}) fanotify_init$auto(0x0, 0xfb) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x9, 0x0, 0x0) rt_sigaction$auto(0xe, &(0x7f0000000580)={&(0x7f00000004c0)=0x0, 0x100000001, 0x0, {0x7}}, 0x0, 0x8) timer_settime$auto(0x0, 0xd80, &(0x7f0000000040)={{0x40000000000026b, 0x4}, {0x0, 0x83}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_KEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x40084}, 0x4000001) ioctl$auto_BLKBSZSET(r1, 0x40081271, &(0x7f00000002c0)=0x8) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=&(0x7f0000000300)='#\xdc\\\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x91,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/clk/clk_dump\x00', 0x103000, 0x0) setsockopt$auto_SO_TXREHASH(r3, 0x1, 0x4a, &(0x7f00000000c0)='/*&\x00', 0x5) ioctl$auto_FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000000)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 12m7.057279295s ago: executing program 1 (id=3465): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00', 0x0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r8) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x38, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x7, 0x3, "6e8880"}, @ETHTOOL_A_WOL_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x54}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x6, 0x3, "1448"}, @ETHTOOL_A_WOL_SOPASS={0x6, 0x3, "c892"}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r11 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd0/rqos/wbt/wb_background\x00', 0x40, 0x0) pread64$auto(r11, 0x0, 0x2, 0x9) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x4}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x3}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8, 0x2, r13}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 12m6.224943823s ago: executing program 1 (id=3468): sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x20000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x100000000, 0x202000a, 0x7, 0xf6, 0xfffffffffffffffa, 0x3) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x5948e1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) io_uring_setup$auto(0x59, 0x0) r1 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x890) read$auto(r1, 0x0, 0x5) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 11m51.159216025s ago: executing program 33 (id=3468): sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x20000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x100000000, 0x202000a, 0x7, 0xf6, 0xfffffffffffffffa, 0x3) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x5948e1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) io_uring_setup$auto(0x59, 0x0) r1 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x890) read$auto(r1, 0x0, 0x5) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 5m36.645349273s ago: executing program 5 (id=5001): openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x27fff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.throttle.read_bps_device\x00', 0x2002, 0x0) mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x80000, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x183d02, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) mmap$auto(0x80000000000000, 0x4, 0xffffffffffffffff, 0xebf, 0x401, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) unshare$auto(0x40000080) socket(0x10, 0x2, 0xc) r3 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0xffffffffffffffda, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x24008895) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000100}, 0x34004001) mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x4, 0x40004, 0x5, 0x80000200009b72, 0x1000, 0x5) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x20, 0xc, 0x4, 0x6, 0x101, 0x8000006, &(0x7f0000001180)}) socket$nl_generic(0x10, 0x3, 0x10) 5m34.9656909s ago: executing program 5 (id=5009): rseq$auto(&(0x7f0000000000)={0x2, 0x2, 0x7fff, 0x4, 0x3981, 0x6, "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"}, 0x1ff, 0x101, 0x8) rseq$auto(&(0x7f0000000140)={0x1ff, 0x1, 0xffffffffffffffa9, 0xfff, 0x6, 0x2, "786d95cd34cd80956bba1729f526d45604b6e512535d3aaaba156703db9ad8f4fd22d68ea5a64b914dc565b39a823a380a3424c71311b140c2de926239c310a3e258f1255ad7563dcb967addb078ca2be5b6a31ea60ec7634860a104b0d16f28f81f50943ccf0a4213c4e4a6f242ef24fa54a25814465dac08c39f10ec6901321268a1aa0ed1b2d0e24dd80e5cdc1491a3492d4ade571507141af72ea612a36b81807170a999d212c8f9cf5208db02008564863844089453d45348053daad5224181f04e23dce519a75f1114bacafd8b562e6ffb7e47348e3238df2e6be76c646c038e4b7908271bf5602f7ca28062c40e898c436070630beab9bd3772"}, 0x5, 0x9, 0xf8) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x0, 0xc00000072, 0xfffffffffffffff7, 0x1000000002, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) socket(0x28, 0x3, 0xbfffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1, 0x100000007, 0x800000000000000d, 0x8fd6, 0x19488, 0x3, 0x7, 0x7f, 0x2, 0xffffffffffffffff, 0xdfe, 0x8, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='\b\x1c\xc7\x00\x80\x00\x00\x00\x00\x00\x00\x00', 0x81) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) splice$auto(r0, &(0x7f0000000200)=0x2, 0xffffffffffffffff, &(0x7f0000000240)=0x9, 0x4dc0000000000000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f00000004c0)={{0x1, 0x0, 0x0, 0x6, 0x5c, 0x4, 0x5}, &(0x7f0000000440)=0xf8, &(0x7f0000000340)=0x6, 0x2, 0x4, 0xfffffffffffffff8, 0xd3, 0x5, 0xb, 0x101, 0x7, @inferred, @inferred=0xffffffffffffffff}) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="34ed35f1", @ANYRES16=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc014}, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000e00), 0x0) socket(0x8, 0x2, 0x1) mmap$auto(0x4, 0x7fffffff, 0x9, 0x56, r3, 0x1) 5m34.040274533s ago: executing program 5 (id=5015): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0x40001, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xfffffffe, 0x1, 0x8, 0x0) symlink$auto(0x0, &(0x7f0000000440)='./file0\x00') rename$auto(0x0, &(0x7f00000000c0)='./file0/../file0\x00') r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x403a, 0x2, 0x0, 0xfffffffffffff801, 0x6c) statmount$auto(0x0, 0x0, 0x1fb, 0x81) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x5, 0xefb, 0x8000000008011, 0x3, 0x2000000000) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000140), r1) ioctl$auto(0xffffffffffffffff, 0xab0a, 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, 0x0, 0x8044) pread64$auto(r1, 0x0, 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x10000, 0x6) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) writev$auto(0x3, 0x0, 0x8) ioctl$auto(r2, 0x4b68, 0xffffffffffffffff) semctl$auto_GETPID(0x67c1, 0x3, 0xb, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, 0x0) 5m33.935001014s ago: executing program 5 (id=5016): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) (async) mmap$auto(0x6, 0x400008, 0xffffffff7fffffff, 0x9a70, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) (async) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r4 = prctl$auto(0x3e, 0xffffffffffffff16, 0x0, 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd10/queue/iosched/read_expire\x00', 0x1c2b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) (async) select$auto(0x1, 0x0, 0x0, 0x0, 0x0) (async) ioctl$auto_BTRFS_IOC_SYNC(r4, 0x9408, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7fffffff, 0x1, 0x948b, 0x3, 0x1574da0a, 0x3, 0x3, 0x20, 0x8000001f, 0x9, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) ioctl$auto_USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000080)=0xb) (async) r6 = socket(0xa, 0x3, 0x87) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) (async) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x20000000000004, 0xffffffffffff768f, 0x4, 0x9b70, r6, 0x7ffa) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x0, 0xf663, 0x15) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m33.183990248s ago: executing program 5 (id=5018): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x83) (fail_nth: 2) 5m32.265087355s ago: executing program 5 (id=5021): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) (async) socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x40000000000, 0x2000000004, 0x400000007, 0x40eb5, 0x401, 0x300001000000) (async) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000c00)) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) (async) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) (async) ioctl$auto(0x3, 0x80004509, 0x10000000000402) (async) ioctl$auto(0x3, 0x800005411, 0x38) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 5m17.11940896s ago: executing program 34 (id=5021): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) (async) socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x40000000000, 0x2000000004, 0x400000007, 0x40eb5, 0x401, 0x300001000000) (async) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000c00)) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) (async) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) (async) ioctl$auto(0x3, 0x80004509, 0x10000000000402) (async) ioctl$auto(0x3, 0x800005411, 0x38) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 15.324956647s ago: executing program 0 (id=5910): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x9, 0x800000000df, 0x9b72, 0xea8a, 0x8000) mincore$auto(0x0, 0x8000000000005a, 0x0) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/devices\x00', 0x0, 0x0) preadv$auto(r0, &(0x7f0000009180)={&(0x7f0000008180), 0x7}, 0x26, 0x80, 0x5) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) capset$auto(0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129c00, 0x0) ioctl$auto(r2, 0xb21064a5, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x5}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) io_uring_setup$auto(0x7, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0) r5 = memfd_secret$auto(0x0) close_range$auto(0x2, 0x8, 0x0) fsetxattr$auto(r5, &(0x7f00000000c0)='/dev/snd/controlC0\x00', &(0x7f0000000280), 0x1, 0x3) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)="3e14", 0x2) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.643834207s ago: executing program 0 (id=5920): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000035, 0x0) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x20000, 0x0) pread64$auto(r0, &(0x7f0000000100)='\x04\xefrgc/\xd0\xe1\xf7$/tg/,s\b\x00\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97\t\x00\x00\x00\x00\x00\x00\x00', 0x100004001, 0x100) (async) r1 = fsopen$auto(0x0, 0x1) sysfs$auto(0x4, 0x7, 0x9) (async) fsconfig$auto(r1, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) 9.068921822s ago: executing program 0 (id=5923): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon13\x00', 0x440, 0x0) r1 = socket(0x29, 0x2, 0x0) get_mempolicy$auto(&(0x7f0000000280)=0x8, &(0x7f00000002c0)=0x9, 0x2, 0x81, 0x10000002) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7f, 0x2, 0x200000008000) mmap$auto(0x9c6, 0x8, 0x10001, 0xeb1, r1, 0x7f) mmap$auto(0x0, 0x14a7d9cfc00000, 0x4000000000dd, 0x55, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/arch_status\x00', 0x109480, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20010010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x24000000) open(&(0x7f0000000140)='./file0\x00', 0x12b400, 0x40) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') socket(0x23, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fallocate$auto(0x8000000000000003, 0x2, 0x6, 0xcbd5d) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2002) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r4, 0x0, 0x1f40) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r3, 0x0, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x40000080) 8.380085356s ago: executing program 4 (id=5925): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram11\x00', 0x4f4c3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x0) r0 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000000)=0x1) ioctl$auto_SG_GET_COMMAND_Q2(r0, 0x2270, &(0x7f0000000040)="3ad6eb40f3ca938a96f621d6e88784bbcc23dd95dbcf390646a183c95f4fb708490ac2ab90c80616c5aacfd9e5805971186909e09c8f94009553f75b79ddb1bd0fc02acde350425e9e00f7fefbc4cd") pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) 7.853683774s ago: executing program 6 (id=5926): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x10000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x3, 0x0) (async, rerun: 64) r2 = epoll_create$auto(0x4) (rerun: 64) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) (async, rerun: 32) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"/559], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES64=r4, @ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRES8=r4, @ANYRESDEC=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) (async) r5 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0xa0800, 0x0) r6 = bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)=@test={r5, 0x4, 0x4, 0x2, 0x5, 0x4, 0x2, 0x0, 0x9, 0x0, 0x9, 0x1, 0x8, 0x82, 0x5}, 0x9) ioctl$auto_FIOCLEX(r6, 0x5451, 0x101) r7 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x404041, 0x0) getsockopt$auto_SO_TIMESTAMPNS_NEW(r7, 0x4, 0x40, &(0x7f0000000100)='./cgroup.cpu/cgroup.clone_children\x00', &(0x7f0000000180)=0xff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0x9, 0x8, 0x10007, 0x80, 0x4, 0x2, 0xa, 0x22000, 0x200, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x121102, 0x0) (async) write$auto(r0, &(0x7f0000000480)='\xab:8K\xfd\xa8\'@\x9c/U\x8fx\xa1\xda\xe2V\xa9\x91\xb8\xcf\xdbc\x1e\x8a\xb2\xed\bu;K\xed\xb2?c\x92f\xa9/&elP\xbf\xb8!\x909\r.F\xb6\xebT\xfe\x9c.D]h\x9d\xc2w\xc9\x00\xe9O\xd3\x80;\x06\x00\xc5\xad\xedj\x8c\x02q\xd3B+\x1d\x1b\x1eg\xf7Q\xc3\x98\xd1\xd4\xdc\xaco`\x1c\xa3\xfbh\x86\x06\xfe\xeb\xaa\xd9\xcb7%\xf6?\"\x8d\xac4\xf4\x12\x1b\xf0\x99\xa7\x9d\x1a\xffui\x95\xf9w@w\xc5A@\xf8\x06\x15\x9f\xe0~<\x1cw\xf8\x8d\xf7/\xe0\x1b+\x06\x8a\xc9Y\xcb\xfc\xbel\xd0\xcc\x97\xf8\xaa\xe1Frl\x9dxJ\xb8\xe6\xb3j\b0zF54V\x1c', 0xfffffffffffffdfd) (async) r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r8, 0xffffffffffeffd0f, &(0x7f00000001c0)) (async) swapon$auto(&(0x7f0000000140)='./cgroup.cpu/cgroup.clone_children\x00', 0x2) (async) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/arp\x00', 0xc0a00, 0x0) pread64$auto(r9, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94p\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x10fd42, 0x9) (async) socket(0x2b, 0xa, 0x4) (async) r10 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000140), 0x480c01, 0x0) ioctl$auto_FIONREAD(r10, 0x541b, 0x2) socket(0x15, 0x2, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0xf, &(0x7f0000000100)={0x0, 0x80f84}, 0x0, 0x0, 0x7, 0xa503}, 0x2}, 0x6, 0x8) 7.471301449s ago: executing program 4 (id=5928): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(r2, 0x80000201, 0xffffffffffffffff) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x0, 0x0) ioctl$auto(r3, 0x5403, 0x3) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0380, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x595480, 0x0) unshare$auto(0x40000080) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D3\x00', 0x408000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x0, 0x0, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) 5.839452495s ago: executing program 6 (id=5931): r0 = openat$auto_clk_summary_fops_(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x7fff) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) timerfd_settime$auto(0xffffffffffffffff, 0x2, &(0x7f0000000040)={{0x0, 0x80000000}, {0x1200, 0x3}}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x38, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000005, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x5, 0x6, 0x2, 0x80, 0x4, 0xfffffffc, 0x7, 0x2000, 0x203, 0x838b, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff7cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}, 0x1fe, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_GETPDP(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040814) r5 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000140)=0x3) getpgid(r5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) r6 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r6, &(0x7f0000000180)=""/61, 0xfffffeeb) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/take_snapshot\x00', 0x82622, 0x0) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0x7, 0x14, 0xfffffffffffffffc, &(0x7f00000003c0)=0x2) r7 = socket(0x10, 0x2, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) statmount$auto(&(0x7f0000000080)={0x80000001, @raw=0xbc4, 0x80000000, 0xbe, 0x5}, 0x0, 0xf, 0x14) close_range$auto(0x2, 0x8, 0x0) 4.885141274s ago: executing program 3 (id=5935): r0 = socket(0x1e, 0x1, 0x0) seccomp$auto(0x3, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) fcntl$auto_F_SETLKW(0xffffffffffffffff, 0x7, 0xffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) sysfs$auto(0x2, 0x49, 0x0) fsopen$auto(0x0, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000080), r1) sendmsg$auto_NET_DM_CMD_STOP(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x1058, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0xa1}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0xa0}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x8}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x8}, @NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x9}, @NET_DM_ATTR_UNSPEC={0x1004, 0x0, "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"}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x4}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x2}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40800}, 0x8040) socket(0x18, 0xa, 0x1) socketpair$auto(0x1, 0x2, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x1f, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) getsockopt$auto(r0, 0x6, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) 4.832000664s ago: executing program 4 (id=5936): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x141a41, 0x0) socket(0x10, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x81e, 0x0, 0xfffffff1, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 4.569694625s ago: executing program 4 (id=5937): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/sg/version\x00', 0x0, 0x0) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x2c01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x40) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r3, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/012/001\x00', 0x2000, 0x0) (async) ioctl$auto_PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000000c0)={0x5, &(0x7f0000000080)={0x9, 0xc5, 0xf2, @inferred=r1}}) (async) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000300)=""/213, 0xd5) 4.534361642s ago: executing program 3 (id=5938): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0xf, 0x400000000000006, 0xeb1, 0xffffffffffffffff, 0x10000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_BLKTRACESTART2(0xffffffffffffffff, 0x1274, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x2120, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) 3.296689859s ago: executing program 0 (id=5939): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto(r0, 0x541b, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) 3.281313594s ago: executing program 6 (id=5940): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000006380), 0x1, 0x0) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) pidfd_send_signal$auto(r1, 0x0, 0x0, 0x4) (async) writev$auto(r0, &(0x7f0000007240)={0x0, 0x9dc}, 0x1ff) 3.194375973s ago: executing program 3 (id=5941): shmctl$auto_IPC_SET(0x0, 0x1, 0x0) 3.085550554s ago: executing program 3 (id=5942): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r1 = syz_clone(0x1100000, &(0x7f0000000040)="80c259518462d532dc0f490ec5299980208ec53989b0f1bb00a82757c163a88d43ae7b7f2ad6319e25866714eb59a3a93c10f8b7e35287ebeb81dac6118f3937c5376295b03c5b09088cc0c44c495cc97605e426730c4b9c134d2bc2eb93ce4171f983cdc2f0820529009460e165b9b8c24589d37f7fef984747a9f568e7b0093f57f8620d8a2ed6854d73c45560903d", 0x90, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="44221dd0752abe4b16ebd818b8d2c95a48a131029b05c8596b213dbaeb1ea7f9f9a53bc95fe7201f58901ec44a789e59723d1a20665da861b82877e785c94bd8b9622747a204d45a8917ab844e212872e143ed42") r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000240), r0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x2, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x44001) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r3, 0x402, 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r4, 0x402, 0x2) close_range$auto(0x2, 0x8, 0x0) prctl$auto_PR_SET_MM_ARG_END(0x3, 0x9, r1, 0x81, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(0x3, 0x400454da, r5) 2.769102124s ago: executing program 6 (id=5943): r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xe6b7, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) write$auto_tty_fops_tty_io(r3, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8d9a5b4cf165c931477ba53f3a80c522fc11555ea", 0x51) mmap$auto(0x0, 0x9, 0xffffffffffffffff, 0x3bb, r2, 0x308000000002) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x19, r1, 0x80000000007ffc) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x7, 0x8, 0x8, 0x17, r2, 0x5) r4 = socket(0x10, 0x3, 0x9) write$auto(r4, 0x0, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) mmap$auto(0x0, 0x2d, 0xdf, 0x10020eb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x10, 0x0, 0xffffffffffffffff, 0x2, 0x96) getpid() 2.768863004s ago: executing program 4 (id=5944): socket(0x2, 0x800, 0x9) mmap$auto(0x3, 0x2020009, 0x8, 0xe72, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) dup$auto(0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x1a1842, 0x0) write$auto(r0, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/wbt_lat_usec\x00', 0x2101, 0x0) write$auto(r4, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000280)=""/175, 0xaf) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/queues/tx-0/tx_maxrate\x00', 0x10b142, 0x0) read$auto(r5, &(0x7f0000000000)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/queues/tx-0/tx_maxrate\x00', 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.767175244s ago: executing program 3 (id=5945): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x82000, 0x0) (async) r2 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x420008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) getsockopt$auto_SO_RCVPRIORITY(r2, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) (async) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) (async) r4 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) socket(0x28, 0x1, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) (async) ioctl$auto(0x3, 0x541b, 0x10000000000402) prctl$auto(0x3e, 0x1, 0x0, 0x80000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x2, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x78, 0x6]}, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x401) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) sendmsg$auto_IPVS_CMD_FLUSH(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0x9, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="b2f4f900", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYBLOB="0c00290084660000000000008d1083b7312d58c5ebaf487bb998f3418a8151bb07f2443548e4f835120dabebd9cfacb4df6c09d5c51d5a796dcd884b3e930a755c3e6e9a8bf602ba954dddf50ba937da8e0eb88ee25349d036733e829ade17deaae15e1e9298ffa9cd09d12467d4b27c2248f3edabe64261dd558c1b9e518a", @ANYRESHEX=r1], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x28, 0x1, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) 2.546940101s ago: executing program 0 (id=5946): mmap$auto(0x0, 0xe983, 0xdf, 0xeb2, 0x401, 0x400000008004) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket(0x22, 0x2, 0x2) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, r2, 0x802, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x90, 0x2, 0x0, 0x1, [@generic="51db227611168678858659694d2e52dc35972b338360070f254d2cdb7bcf1941cad4cb6a540a917e9125084d060714fcdc2de3bef63fdae6adb916c155b3820b1e57bc22646d614ae10774ecae972f82a76807a4a30411bd6379b61f1afb66a59af0764d6c07a7fe1ef838f93522a95f0e71b65f80a97ddd727c10ec74456dc781652133", @typed={0x8, 0xa5, 0x0, 0x0, @pid}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xac}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x80044944, 0x0) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) 1.71642412s ago: executing program 4 (id=5947): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x101100, 0x0) pread64$auto(r1, 0x0, 0xeda5, 0xc86) setresuid$auto(0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4044808) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x802, 0x0) socket(0x11, 0x80003, 0x300) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000180)={0xfffffffffffffef9, 0x2, "00001db1c8310b602c4000"}, 0x4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) 1.63970872s ago: executing program 0 (id=5948): close_range$auto(0x2, 0x8, 0x0) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0x6, 0x2, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) ioctl$auto(0x3, 0x890d, 0x7f) futex$auto(0x0, 0x24, 0x8, 0x0, 0x0, 0x7ffffffd) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x4, 0xfffffffe) setsockopt$auto(r1, 0x6, 0x1f, 0x0, 0x3d) syz_genetlink_get_family_id$auto_tipcv2(0x0, r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040), 0x0) seccomp$auto(0x2, 0x10, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) socketcall$auto(0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpid() socket(0x18, 0x1, 0x2) mmap$auto(0x0, 0x20009, 0x470, 0xeb1, 0x401, 0x8000) connect$auto(r0, &(0x7f00000000c0)=@llc={0x1a, 0x100, 0x5, 0x4d, 0x8, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x2) socket(0x2, 0x5, 0x0) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), r0) fcntl$auto(r2, 0x6, 0xa553) 1.372950595s ago: executing program 3 (id=5949): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x10}, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001940), 0x80643, 0x0) ioctl$auto(r0, 0xc0046209, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) 251.668206ms ago: executing program 6 (id=5950): shmctl$auto_IPC_SET(0x0, 0x1, 0x0) 0s ago: executing program 6 (id=5951): r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) kernel console output (not intermixed with test programs): 15166 Comm: syz.4.5457 Tainted: G U syzkaller #0 PREEMPT(full) [ 1605.579688][T15166] Tainted: [U]=USER [ 1605.579693][T15166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1605.579702][T15166] Call Trace: [ 1605.579708][T15166] [ 1605.579715][T15166] dump_stack_lvl+0x16c/0x1f0 [ 1605.579741][T15166] should_fail_ex+0x512/0x640 [ 1605.579763][T15166] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1605.579784][T15166] should_failslab+0xc2/0x120 [ 1605.579803][T15166] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1605.579823][T15166] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1605.579845][T15166] kstrdup+0x53/0x100 [ 1605.579864][T15166] apply_subsystem_event_filter+0x47f/0x17e0 [ 1605.579888][T15166] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1605.579916][T15166] ? _copy_from_user+0x59/0xd0 [ 1605.579933][T15166] subsystem_filter_write+0x95/0x120 [ 1605.579953][T15166] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1605.579970][T15166] vfs_write+0x29d/0x11d0 [ 1605.579990][T15166] ? __pfx___mutex_lock+0x10/0x10 [ 1605.580012][T15166] ? __pfx_vfs_write+0x10/0x10 [ 1605.580033][T15166] ? __fget_files+0x20e/0x3c0 [ 1605.580055][T15166] ksys_write+0x12a/0x250 [ 1605.580072][T15166] ? __pfx_ksys_write+0x10/0x10 [ 1605.580094][T15166] do_syscall_64+0xcd/0x4c0 [ 1605.580116][T15166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.580131][T15166] RIP: 0033:0x7fd875d8eec9 [ 1605.580144][T15166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1605.580158][T15166] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1605.580173][T15166] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1605.580182][T15166] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 1605.580191][T15166] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1605.580199][T15166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1605.580208][T15166] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1605.580227][T15166] [ 1605.790410][ C0] vkms_vblank_simulate: vblank timer overrun [ 1606.061559][T15166] Process accounting resumed [ 1606.308308][T15168] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1607.670737][T11565] Bluetooth: hci2: command 0x0406 tx timeout [ 1608.099097][T15229] netlink: 'syz.0.5462': attribute type 11 has an invalid length. [ 1608.106944][T15229] netlink: 'syz.0.5462': attribute type 11 has an invalid length. [ 1608.310767][T15252] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5464'. [ 1608.429783][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5462'. [ 1608.771958][T15229] netlink: 67 bytes leftover after parsing attributes in process `syz.0.5462'. [ 1608.929762][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5462'. [ 1609.242606][T15229] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5462'. [ 1609.642501][T15270] FAULT_INJECTION: forcing a failure. [ 1609.642501][T15270] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.885382][T15270] CPU: 0 UID: 0 PID: 15270 Comm: syz.6.5467 Tainted: G U syzkaller #0 PREEMPT(full) [ 1609.885409][T15270] Tainted: [U]=USER [ 1609.885414][T15270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1609.885424][T15270] Call Trace: [ 1609.885430][T15270] [ 1609.885436][T15270] dump_stack_lvl+0x16c/0x1f0 [ 1609.885463][T15270] should_fail_ex+0x512/0x640 [ 1609.885486][T15270] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1609.885504][T15270] should_failslab+0xc2/0x120 [ 1609.885522][T15270] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1609.885538][T15270] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1609.885560][T15270] apply_subsystem_event_filter+0x460/0x17e0 [ 1609.885585][T15270] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1609.885607][T15270] ? _copy_from_user+0x59/0xd0 [ 1609.885625][T15270] subsystem_filter_write+0x95/0x120 [ 1609.885644][T15270] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1609.885661][T15270] vfs_write+0x29d/0x11d0 [ 1609.885681][T15270] ? __pfx___mutex_lock+0x10/0x10 [ 1609.885702][T15270] ? __pfx_vfs_write+0x10/0x10 [ 1609.885724][T15270] ? __fget_files+0x20e/0x3c0 [ 1609.885745][T15270] ksys_write+0x12a/0x250 [ 1609.885761][T15270] ? __pfx_ksys_write+0x10/0x10 [ 1609.885783][T15270] do_syscall_64+0xcd/0x4c0 [ 1609.885806][T15270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.885820][T15270] RIP: 0033:0x7f80ef78eec9 [ 1609.885833][T15270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1609.885847][T15270] RSP: 002b:00007f80f06a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1609.885862][T15270] RAX: ffffffffffffffda RBX: 00007f80ef9e5fa0 RCX: 00007f80ef78eec9 [ 1609.885872][T15270] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 1609.885880][T15270] RBP: 00007f80ef811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1609.885889][T15270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.885897][T15270] R13: 00007f80ef9e6038 R14: 00007f80ef9e5fa0 R15: 00007ffcf834b898 [ 1609.885916][T15270] [ 1611.372616][T15338] FAULT_INJECTION: forcing a failure. [ 1611.372616][T15338] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.500542][T15338] CPU: 0 UID: 0 PID: 15338 Comm: syz.3.5473 Tainted: G U syzkaller #0 PREEMPT(full) [ 1611.500565][T15338] Tainted: [U]=USER [ 1611.500570][T15338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1611.500580][T15338] Call Trace: [ 1611.500585][T15338] [ 1611.500591][T15338] dump_stack_lvl+0x16c/0x1f0 [ 1611.500616][T15338] should_fail_ex+0x512/0x640 [ 1611.500638][T15338] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1611.500658][T15338] should_failslab+0xc2/0x120 [ 1611.500677][T15338] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1611.500694][T15338] ? __d_alloc+0x32/0xae0 [ 1611.500714][T15338] __d_alloc+0x32/0xae0 [ 1611.500736][T15338] d_alloc_pseudo+0x1c/0xc0 [ 1611.500756][T15338] alloc_file_pseudo+0xcf/0x230 [ 1611.500779][T15338] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1611.500799][T15338] ? alloc_fd+0x471/0x7d0 [ 1611.500817][T15338] sock_alloc_file+0x50/0x210 [ 1611.500832][T15338] __sys_socket+0x1c0/0x260 [ 1611.500849][T15338] ? __pfx___sys_socket+0x10/0x10 [ 1611.500865][T15338] ? xfd_validate_state+0x61/0x180 [ 1611.500885][T15338] ? __pfx_ksys_write+0x10/0x10 [ 1611.500904][T15338] __x64_sys_socket+0x72/0xb0 [ 1611.500919][T15338] ? lockdep_hardirqs_on+0x7c/0x110 [ 1611.500940][T15338] do_syscall_64+0xcd/0x4c0 [ 1611.500961][T15338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.500975][T15338] RIP: 0033:0x7f021df8eec9 [ 1611.500994][T15338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1611.501007][T15338] RSP: 002b:00007f021ed66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1611.501022][T15338] RAX: ffffffffffffffda RBX: 00007f021e1e5fa0 RCX: 00007f021df8eec9 [ 1611.501031][T15338] RDX: 0000000000000073 RSI: 0000000000080002 RDI: 0000000000000002 [ 1611.501040][T15338] RBP: 00007f021e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1611.501048][T15338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1611.501056][T15338] R13: 00007f021e1e6038 R14: 00007f021e1e5fa0 R15: 00007ffd89a82188 [ 1611.501074][T15338] [ 1612.080131][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5474'. [ 1613.045260][T15399] FAULT_INJECTION: forcing a failure. [ 1613.045260][T15399] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.088274][T15399] CPU: 0 UID: 0 PID: 15399 Comm: syz.4.5476 Tainted: G U syzkaller #0 PREEMPT(full) [ 1613.088301][T15399] Tainted: [U]=USER [ 1613.088306][T15399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1613.088316][T15399] Call Trace: [ 1613.088322][T15399] [ 1613.088329][T15399] dump_stack_lvl+0x16c/0x1f0 [ 1613.088355][T15399] should_fail_ex+0x512/0x640 [ 1613.088377][T15399] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1613.088401][T15399] should_failslab+0xc2/0x120 [ 1613.088421][T15399] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1613.088440][T15399] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1613.088462][T15399] kstrdup+0x53/0x100 [ 1613.088480][T15399] apply_subsystem_event_filter+0x47f/0x17e0 [ 1613.088504][T15399] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1613.088527][T15399] ? _copy_from_user+0x59/0xd0 [ 1613.088544][T15399] subsystem_filter_write+0x95/0x120 [ 1613.088563][T15399] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1613.088581][T15399] vfs_write+0x29d/0x11d0 [ 1613.088600][T15399] ? __pfx___mutex_lock+0x10/0x10 [ 1613.088622][T15399] ? __pfx_vfs_write+0x10/0x10 [ 1613.088643][T15399] ? __fget_files+0x20e/0x3c0 [ 1613.088665][T15399] ksys_write+0x12a/0x250 [ 1613.088681][T15399] ? __pfx_ksys_write+0x10/0x10 [ 1613.088703][T15399] do_syscall_64+0xcd/0x4c0 [ 1613.088726][T15399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.088741][T15399] RIP: 0033:0x7fd875d8eec9 [ 1613.088753][T15399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1613.088768][T15399] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1613.088782][T15399] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1613.088792][T15399] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 1613.088800][T15399] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1613.088809][T15399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.088817][T15399] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1613.088847][T15399] [ 1613.940215][T15409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5477'. [ 1614.137977][T15413] FAULT_INJECTION: forcing a failure. [ 1614.137977][T15413] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.206938][T15413] CPU: 0 UID: 0 PID: 15413 Comm: syz.4.5479 Tainted: G U syzkaller #0 PREEMPT(full) [ 1614.206965][T15413] Tainted: [U]=USER [ 1614.206970][T15413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1614.206979][T15413] Call Trace: [ 1614.206985][T15413] [ 1614.206993][T15413] dump_stack_lvl+0x16c/0x1f0 [ 1614.207019][T15413] should_fail_ex+0x512/0x640 [ 1614.207042][T15413] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1614.207065][T15413] should_failslab+0xc2/0x120 [ 1614.207085][T15413] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1614.207105][T15413] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1614.207128][T15413] kstrdup+0x53/0x100 [ 1614.207146][T15413] apply_subsystem_event_filter+0x47f/0x17e0 [ 1614.207172][T15413] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1614.207195][T15413] ? _copy_from_user+0x59/0xd0 [ 1614.207212][T15413] subsystem_filter_write+0x95/0x120 [ 1614.207232][T15413] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1614.207249][T15413] vfs_write+0x29d/0x11d0 [ 1614.207272][T15413] ? __pfx___mutex_lock+0x10/0x10 [ 1614.207294][T15413] ? __pfx_vfs_write+0x10/0x10 [ 1614.207315][T15413] ? __fget_files+0x20e/0x3c0 [ 1614.207337][T15413] ksys_write+0x12a/0x250 [ 1614.207353][T15413] ? __pfx_ksys_write+0x10/0x10 [ 1614.207375][T15413] do_syscall_64+0xcd/0x4c0 [ 1614.207399][T15413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.207414][T15413] RIP: 0033:0x7fd875d8eec9 [ 1614.207426][T15413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1614.207441][T15413] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1614.207455][T15413] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1614.207465][T15413] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 1614.207473][T15413] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1614.207482][T15413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1614.207490][T15413] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1614.207509][T15413] [ 1614.929005][T15418] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1615.425371][T15434] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1616.170271][T15510] FAULT_INJECTION: forcing a failure. [ 1616.170271][T15510] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.236397][T15510] CPU: 0 UID: 0 PID: 15510 Comm: syz.3.5486 Tainted: G U syzkaller #0 PREEMPT(full) [ 1616.236425][T15510] Tainted: [U]=USER [ 1616.236430][T15510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1616.236440][T15510] Call Trace: [ 1616.236446][T15510] [ 1616.236453][T15510] dump_stack_lvl+0x16c/0x1f0 [ 1616.236481][T15510] should_fail_ex+0x512/0x640 [ 1616.236510][T15510] ? __kmalloc_noprof+0xbf/0x510 [ 1616.236530][T15510] ? iovec_from_user+0x108/0x140 [ 1616.236545][T15510] should_failslab+0xc2/0x120 [ 1616.236564][T15510] __kmalloc_noprof+0xd2/0x510 [ 1616.236585][T15510] iovec_from_user+0x108/0x140 [ 1616.236602][T15510] __import_iovec+0x88/0x650 [ 1616.236617][T15510] ? __might_fault+0xe3/0x190 [ 1616.236632][T15510] ? __might_fault+0x13b/0x190 [ 1616.236651][T15510] import_iovec+0x86/0xb0 [ 1616.236668][T15510] copy_msghdr_from_user+0xf9/0x160 [ 1616.236690][T15510] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1616.236713][T15510] ? find_held_lock+0x2b/0x80 [ 1616.236728][T15510] ? futex_unqueue+0x133/0x2c0 [ 1616.236748][T15510] ___sys_sendmsg+0xfe/0x1d0 [ 1616.236770][T15510] ? __pfx____sys_sendmsg+0x10/0x10 [ 1616.236799][T15510] ? find_held_lock+0x2b/0x80 [ 1616.236824][T15510] __sys_sendmmsg+0x200/0x420 [ 1616.236847][T15510] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1616.236873][T15510] ? __pfx_do_futex+0x10/0x10 [ 1616.236900][T15510] ? xfd_validate_state+0x61/0x180 [ 1616.236921][T15510] ? __pfx_ksys_write+0x10/0x10 [ 1616.236940][T15510] __x64_sys_sendmmsg+0x9c/0x100 [ 1616.236960][T15510] ? lockdep_hardirqs_on+0x7c/0x110 [ 1616.236980][T15510] do_syscall_64+0xcd/0x4c0 [ 1616.237002][T15510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.237017][T15510] RIP: 0033:0x7f021df8eec9 [ 1616.237030][T15510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1616.237044][T15510] RSP: 002b:00007f021ed66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1616.237059][T15510] RAX: ffffffffffffffda RBX: 00007f021e1e5fa0 RCX: 00007f021df8eec9 [ 1616.237069][T15510] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 1616.237078][T15510] RBP: 00007f021e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1616.237088][T15510] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 1616.237096][T15510] R13: 00007f021e1e6038 R14: 00007f021e1e5fa0 R15: 00007ffd89a82188 [ 1616.237115][T15510] [ 1617.121667][T15529] kvm: kvm [15528]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x9 [ 1618.726720][T15611] FAULT_INJECTION: forcing a failure. [ 1618.726720][T15611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1618.881597][T15611] CPU: 0 UID: 0 PID: 15611 Comm: syz.6.5501 Tainted: G U syzkaller #0 PREEMPT(full) [ 1618.881622][T15611] Tainted: [U]=USER [ 1618.881627][T15611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1618.881636][T15611] Call Trace: [ 1618.881641][T15611] [ 1618.881648][T15611] dump_stack_lvl+0x16c/0x1f0 [ 1618.881673][T15611] should_fail_ex+0x512/0x640 [ 1618.881698][T15611] _copy_from_user+0x2e/0xd0 [ 1618.881714][T15611] sctp_setsockopt+0x2045/0xb870 [ 1618.881729][T15611] ? ksys_write+0x190/0x250 [ 1618.881783][T15611] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1618.881800][T15611] ? find_held_lock+0x2b/0x80 [ 1618.881817][T15611] ? aa_sock_opt_perm+0xfd/0x1c0 [ 1618.881831][T15611] ? sock_common_setsockopt+0x2e/0xf0 [ 1618.881845][T15611] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1618.881862][T15611] do_sock_setsockopt+0xf0/0x1d0 [ 1618.881879][T15611] __sys_setsockopt+0x120/0x1a0 [ 1618.881902][T15611] __x64_sys_setsockopt+0xbd/0x160 [ 1618.881920][T15611] ? do_syscall_64+0x91/0x4c0 [ 1618.881943][T15611] ? lockdep_hardirqs_on+0x7c/0x110 [ 1618.881963][T15611] do_syscall_64+0xcd/0x4c0 [ 1618.881985][T15611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.881999][T15611] RIP: 0033:0x7f80ef78eec9 [ 1618.882011][T15611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1618.882025][T15611] RSP: 002b:00007f80f06a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1618.882040][T15611] RAX: ffffffffffffffda RBX: 00007f80ef9e5fa0 RCX: 00007f80ef78eec9 [ 1618.882049][T15611] RDX: 0000000000000023 RSI: 0000000000000084 RDI: 0000000000000003 [ 1618.882058][T15611] RBP: 00007f80f06a1090 R08: 000000000000808f R09: 0000000000000000 [ 1618.882066][T15611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1618.882074][T15611] R13: 00007f80ef9e6038 R14: 00007f80ef9e5fa0 R15: 00007ffcf834b898 [ 1618.882092][T15611] [ 1620.872968][T15644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1620.988920][T15646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5507'. [ 1624.839430][T10711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1624.848468][T10711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1624.858178][T10711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1624.868465][T10711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1624.877025][T10711] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1626.960731][T11565] Bluetooth: hci1: command tx timeout [ 1627.196477][T15927] FAULT_INJECTION: forcing a failure. [ 1627.196477][T15927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1627.239586][T15927] CPU: 0 UID: 0 PID: 15927 Comm: syz.4.5518 Tainted: G U syzkaller #0 PREEMPT(full) [ 1627.239613][T15927] Tainted: [U]=USER [ 1627.239618][T15927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1627.239628][T15927] Call Trace: [ 1627.239634][T15927] [ 1627.239641][T15927] dump_stack_lvl+0x16c/0x1f0 [ 1627.239669][T15927] should_fail_ex+0x512/0x640 [ 1627.239695][T15927] should_fail_alloc_page+0xe7/0x130 [ 1627.239716][T15927] prepare_alloc_pages+0x3c2/0x610 [ 1627.239741][T15927] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1627.239759][T15927] ? __pfx_stack_trace_save+0x10/0x10 [ 1627.239777][T15927] ? stack_depot_save_flags+0x29/0x9c0 [ 1627.239802][T15927] ? kasan_save_stack+0x42/0x60 [ 1627.239818][T15927] ? kasan_save_stack+0x33/0x60 [ 1627.239832][T15927] ? kasan_save_track+0x14/0x30 [ 1627.239847][T15927] ? __kasan_kmalloc+0xaa/0xb0 [ 1627.239862][T15927] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1627.239879][T15927] ? subsystem_filter_write+0x95/0x120 [ 1627.239897][T15927] ? ksys_write+0x12a/0x250 [ 1627.239913][T15927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.239938][T15927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1627.239960][T15927] ? policy_nodemask+0xea/0x4e0 [ 1627.239980][T15927] alloc_pages_mpol+0x1fb/0x550 [ 1627.239999][T15927] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1627.240023][T15927] ___kmalloc_large_node+0xed/0x160 [ 1627.240047][T15927] __kmalloc_large_noprof+0x1c/0x70 [ 1627.240069][T15927] append_filter_err+0x8f/0x5e0 [ 1627.240088][T15927] apply_subsystem_event_filter+0x75a/0x17e0 [ 1627.240112][T15927] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1627.240135][T15927] ? _copy_from_user+0x59/0xd0 [ 1627.240152][T15927] subsystem_filter_write+0x95/0x120 [ 1627.240171][T15927] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1627.240188][T15927] vfs_write+0x29d/0x11d0 [ 1627.240207][T15927] ? __pfx___mutex_lock+0x10/0x10 [ 1627.240228][T15927] ? __pfx_vfs_write+0x10/0x10 [ 1627.240273][T15927] ? __fget_files+0x20e/0x3c0 [ 1627.240296][T15927] ksys_write+0x12a/0x250 [ 1627.240313][T15927] ? __pfx_ksys_write+0x10/0x10 [ 1627.240335][T15927] do_syscall_64+0xcd/0x4c0 [ 1627.240357][T15927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.240372][T15927] RIP: 0033:0x7fd875d8eec9 [ 1627.240390][T15927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1627.240406][T15927] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1627.240421][T15927] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1627.240432][T15927] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 1627.240441][T15927] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1627.240451][T15927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1627.240459][T15927] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1627.240479][T15927] [ 1627.875809][T15737] chnl_net:caif_netlink_parms(): no params data found [ 1627.906954][T15929] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1628.293984][T15946] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5519'. [ 1629.011488][T15970] FAULT_INJECTION: forcing a failure. [ 1629.011488][T15970] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.029867][T11565] Bluetooth: hci1: command tx timeout [ 1629.059333][T15970] CPU: 0 UID: 0 PID: 15970 Comm: syz.4.5522 Tainted: G U syzkaller #0 PREEMPT(full) [ 1629.059358][T15970] Tainted: [U]=USER [ 1629.059363][T15970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1629.059372][T15970] Call Trace: [ 1629.059378][T15970] [ 1629.059385][T15970] dump_stack_lvl+0x16c/0x1f0 [ 1629.059411][T15970] should_fail_ex+0x512/0x640 [ 1629.059439][T15970] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1629.059459][T15970] should_failslab+0xc2/0x120 [ 1629.059481][T15970] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1629.059500][T15970] ? __pmd_alloc+0xbf/0x930 [ 1629.059524][T15970] __pmd_alloc+0xbf/0x930 [ 1629.059550][T15970] __handle_mm_fault+0xa06/0x2a50 [ 1629.059571][T15970] ? mt_find+0x3ef/0xa30 [ 1629.059588][T15970] ? __pfx___handle_mm_fault+0x10/0x10 [ 1629.059604][T15970] ? __pfx_mt_find+0x10/0x10 [ 1629.059630][T15970] ? find_vma+0xbf/0x140 [ 1629.059648][T15970] ? __pfx_find_vma+0x10/0x10 [ 1629.059668][T15970] handle_mm_fault+0x589/0xd10 [ 1629.059683][T15970] ? trace_raw_output_exceptions+0x131/0x150 [ 1629.059709][T15970] do_user_addr_fault+0x7a6/0x1370 [ 1629.059731][T15970] ? rcu_is_watching+0x12/0xc0 [ 1629.059749][T15970] exc_page_fault+0x5c/0xb0 [ 1629.059769][T15970] asm_exc_page_fault+0x26/0x30 [ 1629.059783][T15970] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1629.059801][T15970] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1629.059815][T15970] RSP: 0018:ffffc9000c0b7cf8 EFLAGS: 00050202 [ 1629.059828][T15970] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000808f [ 1629.059837][T15970] RDX: ffffed100a8eb011 RSI: 0000000000000000 RDI: ffff888054750000 [ 1629.059846][T15970] RBP: 000000000000808f R08: 0000000000000001 R09: ffffed100a8eb011 [ 1629.059854][T15970] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000000000 [ 1629.059862][T15970] R13: ffff888054750000 R14: 0000000000000000 R15: 000000000000808f [ 1629.059881][T15970] _copy_from_user+0x98/0xd0 [ 1629.059898][T15970] sctp_setsockopt+0x2045/0xb870 [ 1629.059913][T15970] ? ksys_write+0x190/0x250 [ 1629.059933][T15970] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1629.059946][T15970] ? find_held_lock+0x2b/0x80 [ 1629.059963][T15970] ? aa_sock_opt_perm+0xfd/0x1c0 [ 1629.059977][T15970] ? sock_common_setsockopt+0x2e/0xf0 [ 1629.059992][T15970] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1629.060008][T15970] do_sock_setsockopt+0xf0/0x1d0 [ 1629.060025][T15970] __sys_setsockopt+0x120/0x1a0 [ 1629.060064][T15970] __x64_sys_setsockopt+0xbd/0x160 [ 1629.060083][T15970] ? do_syscall_64+0x91/0x4c0 [ 1629.060103][T15970] ? lockdep_hardirqs_on+0x7c/0x110 [ 1629.060122][T15970] do_syscall_64+0xcd/0x4c0 [ 1629.060144][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.060161][T15970] RIP: 0033:0x7fd875d8eec9 [ 1629.060173][T15970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1629.060193][T15970] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1629.060206][T15970] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1629.060215][T15970] RDX: 0000000000000023 RSI: 0000000000000084 RDI: 0000000000000003 [ 1629.060223][T15970] RBP: 00007fd873ff6090 R08: 000000000000808f R09: 0000000000000000 [ 1629.060231][T15970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.060240][T15970] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1629.060258][T15970] [ 1630.648341][T10945] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.838708][T16001] FAULT_INJECTION: forcing a failure. [ 1630.838708][T16001] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.883106][T16001] CPU: 0 UID: 0 PID: 16001 Comm: syz.4.5528 Tainted: G U syzkaller #0 PREEMPT(full) [ 1630.883134][T16001] Tainted: [U]=USER [ 1630.883139][T16001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1630.883149][T16001] Call Trace: [ 1630.883156][T16001] [ 1630.883162][T16001] dump_stack_lvl+0x16c/0x1f0 [ 1630.883191][T16001] should_fail_ex+0x512/0x640 [ 1630.883214][T16001] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1630.883234][T16001] should_failslab+0xc2/0x120 [ 1630.883254][T16001] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1630.883270][T16001] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1630.883292][T16001] apply_subsystem_event_filter+0x460/0x17e0 [ 1630.883317][T16001] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1630.883339][T16001] ? _copy_from_user+0x59/0xd0 [ 1630.883357][T16001] subsystem_filter_write+0x95/0x120 [ 1630.883376][T16001] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1630.883393][T16001] vfs_write+0x29d/0x11d0 [ 1630.883413][T16001] ? __pfx___mutex_lock+0x10/0x10 [ 1630.883434][T16001] ? __pfx_vfs_write+0x10/0x10 [ 1630.883456][T16001] ? __fget_files+0x20e/0x3c0 [ 1630.883477][T16001] ksys_write+0x12a/0x250 [ 1630.883494][T16001] ? __pfx_ksys_write+0x10/0x10 [ 1630.883516][T16001] do_syscall_64+0xcd/0x4c0 [ 1630.883539][T16001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.883554][T16001] RIP: 0033:0x7fd875d8eec9 [ 1630.883566][T16001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1630.883580][T16001] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1630.883595][T16001] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1630.883604][T16001] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 1630.883613][T16001] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1630.883622][T16001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1630.883630][T16001] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1630.883650][T16001] [ 1631.093020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1631.417315][T11565] Bluetooth: hci1: command tx timeout [ 1631.911731][T10945] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.371794][T15737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.504005][T15737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.557958][T15737] bridge_slave_0: entered allmulticast mode [ 1632.629929][T15737] bridge_slave_0: entered promiscuous mode [ 1633.120590][T16064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5531'. [ 1633.338546][T10945] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.460316][T15737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.490142][T10711] Bluetooth: hci1: command tx timeout [ 1633.551313][T15737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.609869][T15737] bridge_slave_1: entered allmulticast mode [ 1633.676905][T15737] bridge_slave_1: entered promiscuous mode [ 1633.987240][T16081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5532'. [ 1634.339797][T10945] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.839988][T16121] FAULT_INJECTION: forcing a failure. [ 1634.839988][T16121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1634.869423][T16121] CPU: 0 UID: 0 PID: 16121 Comm: syz.4.5533 Tainted: G U syzkaller #0 PREEMPT(full) [ 1634.869448][T16121] Tainted: [U]=USER [ 1634.869453][T16121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1634.869462][T16121] Call Trace: [ 1634.869468][T16121] [ 1634.869474][T16121] dump_stack_lvl+0x16c/0x1f0 [ 1634.869499][T16121] should_fail_ex+0x512/0x640 [ 1634.869523][T16121] should_fail_alloc_page+0xe7/0x130 [ 1634.869544][T16121] prepare_alloc_pages+0x3c2/0x610 [ 1634.869568][T16121] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1634.869586][T16121] ? stack_trace_save+0x8e/0xc0 [ 1634.869603][T16121] ? __pfx_stack_trace_save+0x10/0x10 [ 1634.869617][T16121] ? rcu_is_watching+0x12/0xc0 [ 1634.869638][T16121] ? stack_depot_save_flags+0x29/0x9c0 [ 1634.869663][T16121] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1634.869679][T16121] ? __kasan_slab_alloc+0x89/0x90 [ 1634.869696][T16121] ? __pmd_alloc+0xbf/0x930 [ 1634.869715][T16121] ? handle_mm_fault+0x589/0xd10 [ 1634.869728][T16121] ? do_user_addr_fault+0x7a6/0x1370 [ 1634.869748][T16121] ? exc_page_fault+0x5c/0xb0 [ 1634.869767][T16121] ? asm_exc_page_fault+0x26/0x30 [ 1634.869780][T16121] ? rep_movs_alternative+0x4a/0x90 [ 1634.869795][T16121] ? _copy_from_user+0x98/0xd0 [ 1634.869808][T16121] ? sctp_setsockopt+0x2045/0xb870 [ 1634.869830][T16121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1634.869852][T16121] ? policy_nodemask+0xea/0x4e0 [ 1634.869872][T16121] alloc_pages_mpol+0x1fb/0x550 [ 1634.869891][T16121] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1634.869914][T16121] alloc_pages_noprof+0x131/0x390 [ 1634.869933][T16121] pte_alloc_one+0x1c/0x3a0 [ 1634.869948][T16121] do_pte_missing+0x1afc/0x3ba0 [ 1634.869963][T16121] ? do_raw_spin_unlock+0x172/0x230 [ 1634.869986][T16121] ? __pmd_alloc+0x3fb/0x930 [ 1634.870008][T16121] __handle_mm_fault+0x152a/0x2a50 [ 1634.870025][T16121] ? mt_find+0x3ef/0xa30 [ 1634.870039][T16121] ? __pfx___handle_mm_fault+0x10/0x10 [ 1634.870052][T16121] ? __pfx_mt_find+0x10/0x10 [ 1634.870075][T16121] ? find_vma+0xbf/0x140 [ 1634.870093][T16121] ? __pfx_find_vma+0x10/0x10 [ 1634.870112][T16121] handle_mm_fault+0x589/0xd10 [ 1634.870127][T16121] ? trace_raw_output_exceptions+0x131/0x150 [ 1634.870150][T16121] do_user_addr_fault+0x7a6/0x1370 [ 1634.870173][T16121] ? rcu_is_watching+0x12/0xc0 [ 1634.870189][T16121] exc_page_fault+0x5c/0xb0 [ 1634.870208][T16121] asm_exc_page_fault+0x26/0x30 [ 1634.870221][T16121] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1634.870238][T16121] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1634.870252][T16121] RSP: 0018:ffffc9000520fcf8 EFLAGS: 00050202 [ 1634.870264][T16121] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000808f [ 1634.870273][T16121] RDX: ffffed100a8eb011 RSI: 0000000000000000 RDI: ffff888054750000 [ 1634.870282][T16121] RBP: 000000000000808f R08: 0000000000000001 R09: ffffed100a8eb011 [ 1634.870290][T16121] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000000000 [ 1634.870298][T16121] R13: ffff888054750000 R14: 0000000000000000 R15: 000000000000808f [ 1634.870317][T16121] _copy_from_user+0x98/0xd0 [ 1634.870332][T16121] sctp_setsockopt+0x2045/0xb870 [ 1634.870347][T16121] ? ksys_write+0x190/0x250 [ 1634.870366][T16121] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1634.870380][T16121] ? find_held_lock+0x2b/0x80 [ 1634.870396][T16121] ? aa_sock_opt_perm+0xfd/0x1c0 [ 1634.870409][T16121] ? sock_common_setsockopt+0x2e/0xf0 [ 1634.870424][T16121] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1634.870441][T16121] do_sock_setsockopt+0xf0/0x1d0 [ 1634.870458][T16121] __sys_setsockopt+0x120/0x1a0 [ 1634.870481][T16121] __x64_sys_setsockopt+0xbd/0x160 [ 1634.870499][T16121] ? do_syscall_64+0x91/0x4c0 [ 1634.870519][T16121] ? lockdep_hardirqs_on+0x7c/0x110 [ 1634.870539][T16121] do_syscall_64+0xcd/0x4c0 [ 1634.870560][T16121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.870574][T16121] RIP: 0033:0x7fd875d8eec9 [ 1634.870586][T16121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.870599][T16121] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1634.870611][T16121] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1634.870620][T16121] RDX: 0000000000000023 RSI: 0000000000000084 RDI: 0000000000000003 [ 1634.870632][T16121] RBP: 00007fd873ff6090 R08: 000000000000808f R09: 0000000000000000 [ 1634.870640][T16121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1634.870648][T16121] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1634.870667][T16121] [ 1635.330051][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.382511][T16121] Process accounting paused [ 1636.448218][T15737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1636.554399][T15737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1637.006345][T15737] team0: Port device team_slave_0 added [ 1637.161518][T15737] team0: Port device team_slave_1 added [ 1637.669013][T16165] netlink: 'syz.0.5536': attribute type 11 has an invalid length. [ 1637.837334][T16165] netlink: 'syz.0.5536': attribute type 11 has an invalid length. [ 1637.957191][T15737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1638.055059][T16165] netlink: 'syz.0.5536': attribute type 11 has an invalid length. [ 1638.122402][T15737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1638.190987][T16165] netlink: 'syz.0.5536': attribute type 11 has an invalid length. [ 1638.413410][T15737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1638.506223][T15737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.590360][T15737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1638.818801][T15737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1638.843486][T16223] Invalid ELF header magic: != ELF [ 1639.103524][T10945] bridge_slave_1: left allmulticast mode [ 1639.156134][T10945] bridge_slave_1: left promiscuous mode [ 1639.212629][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.289409][T10945] bridge_slave_0: left allmulticast mode [ 1639.340859][T10945] bridge_slave_0: left promiscuous mode [ 1639.395382][T10945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.754499][T16279] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1641.841515][T10945] HSR: left promiscuous mode [ 1642.039644][T15737] hsr_slave_0: entered promiscuous mode [ 1642.136318][T15737] hsr_slave_1: entered promiscuous mode [ 1642.200829][T15737] debugfs: 'hsr0' already exists in 'hsr' [ 1642.273215][T15737] Cannot create hsr debugfs directory [ 1642.337043][T10945] HfR: left promiscuous mode [ 1646.361336][T16574] random: crng reseeded on system resumption [ 1647.088589][T10945] hsr_slave_0: left promiscuous mode [ 1647.153338][T10945] hsr_slave_1: left promiscuous mode [ 1647.218967][T10945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1647.310259][T10945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.386108][T10945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1647.474936][T10945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1647.760916][T10945] veth1_macvtap: left promiscuous mode [ 1647.812569][T10945] veth0_macvtap: left promiscuous mode [ 1647.819655][T10945] veth1_vlan: left promiscuous mode [ 1647.957301][T10945] veth0_vlan: left promiscuous mode [ 1648.668323][T16612] : Can't lookup blockdev [ 1648.790000][T16623] [U]  [ 1648.792799][T16623] [U] [ 1648.795492][T16623] [U] [ 1648.798164][T16623] [U] [ 1648.915509][T16623] [U] [ 1648.918226][T16623] [U] [ 1648.920940][T16623] [U] [ 1648.923609][T16623] [U] [ 1649.045929][T16623] [U] [ 1649.376479][T16629] FAULT_INJECTION: forcing a failure. [ 1649.376479][T16629] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.501075][T16629] CPU: 0 UID: 0 PID: 16629 Comm: syz.6.5561 Tainted: G U syzkaller #0 PREEMPT(full) [ 1649.501103][T16629] Tainted: [U]=USER [ 1649.501108][T16629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1649.501118][T16629] Call Trace: [ 1649.501125][T16629] [ 1649.501131][T16629] dump_stack_lvl+0x16c/0x1f0 [ 1649.501165][T16629] should_fail_ex+0x512/0x640 [ 1649.501188][T16629] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1649.501211][T16629] should_failslab+0xc2/0x120 [ 1649.501230][T16629] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1649.501250][T16629] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1649.501272][T16629] kstrdup+0x53/0x100 [ 1649.501291][T16629] apply_subsystem_event_filter+0x47f/0x17e0 [ 1649.501315][T16629] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1649.501338][T16629] ? _copy_from_user+0x59/0xd0 [ 1649.501356][T16629] subsystem_filter_write+0x95/0x120 [ 1649.501375][T16629] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1649.501392][T16629] vfs_write+0x29d/0x11d0 [ 1649.501411][T16629] ? __pfx___mutex_lock+0x10/0x10 [ 1649.501433][T16629] ? __pfx_vfs_write+0x10/0x10 [ 1649.501455][T16629] ? __fget_files+0x20e/0x3c0 [ 1649.501476][T16629] ksys_write+0x12a/0x250 [ 1649.501492][T16629] ? __pfx_ksys_write+0x10/0x10 [ 1649.501514][T16629] do_syscall_64+0xcd/0x4c0 [ 1649.501537][T16629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.501551][T16629] RIP: 0033:0x7f80ef78eec9 [ 1649.501564][T16629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1649.501578][T16629] RSP: 002b:00007f80f06a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1649.501593][T16629] RAX: ffffffffffffffda RBX: 00007f80ef9e5fa0 RCX: 00007f80ef78eec9 [ 1649.501602][T16629] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 1649.501611][T16629] RBP: 00007f80ef811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1649.501620][T16629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1649.501628][T16629] R13: 00007f80ef9e6038 R14: 00007f80ef9e5fa0 R15: 00007ffcf834b898 [ 1649.501648][T16629] [ 1650.047262][T16633] FAULT_INJECTION: forcing a failure. [ 1650.047262][T16633] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.191590][T16633] CPU: 0 UID: 0 PID: 16633 Comm: syz.6.5562 Tainted: G U syzkaller #0 PREEMPT(full) [ 1650.191616][T16633] Tainted: [U]=USER [ 1650.191621][T16633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1650.191629][T16633] Call Trace: [ 1650.191635][T16633] [ 1650.191641][T16633] dump_stack_lvl+0x16c/0x1f0 [ 1650.191666][T16633] should_fail_ex+0x512/0x640 [ 1650.191688][T16633] ? fs_reclaim_acquire+0xae/0x150 [ 1650.191710][T16633] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1650.191730][T16633] should_failslab+0xc2/0x120 [ 1650.191749][T16633] __kmalloc_noprof+0xd2/0x510 [ 1650.191770][T16633] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1650.191792][T16633] ? tomoyo_profile+0x47/0x60 [ 1650.191807][T16633] tomoyo_path_number_perm+0x245/0x580 [ 1650.191823][T16633] ? tomoyo_path_number_perm+0x237/0x580 [ 1650.191842][T16633] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1650.191859][T16633] ? find_held_lock+0x2b/0x80 [ 1650.191890][T16633] ? find_held_lock+0x2b/0x80 [ 1650.191903][T16633] ? hook_file_ioctl_common+0x145/0x410 [ 1650.191926][T16633] ? __fget_files+0x20e/0x3c0 [ 1650.191944][T16633] security_file_ioctl+0x9b/0x240 [ 1650.191963][T16633] __x64_sys_ioctl+0xb7/0x210 [ 1650.191986][T16633] do_syscall_64+0xcd/0x4c0 [ 1650.192009][T16633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.192023][T16633] RIP: 0033:0x7f80ef78eec9 [ 1650.192035][T16633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1650.192049][T16633] RSP: 002b:00007f80f06a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.192063][T16633] RAX: ffffffffffffffda RBX: 00007f80ef9e5fa0 RCX: 00007f80ef78eec9 [ 1650.192073][T16633] RDX: 0000000000000038 RSI: 000000004020aeb2 RDI: 0000000000000003 [ 1650.192088][T16633] RBP: 00007f80f06a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1650.192097][T16633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.192105][T16633] R13: 00007f80ef9e6038 R14: 00007f80ef9e5fa0 R15: 00007ffcf834b898 [ 1650.192124][T16633] [ 1650.192130][T16633] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1651.275044][T16643] random: crng reseeded on system resumption [ 1651.602661][T10945] team0 (unregistering): Port device team_slave_0 removed [ 1656.559679][T15737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1656.775130][T15737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1656.875848][T15737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1657.502788][T15737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1659.594677][T16762] netlink: 326 bytes leftover after parsing attributes in process `syz.4.5570'. [ 1659.684750][T16762] netlink: 326 bytes leftover after parsing attributes in process `syz.4.5570'. [ 1659.758801][T16762] netlink: 326 bytes leftover after parsing attributes in process `syz.4.5570'. [ 1659.989833][T16762] netlink: 326 bytes leftover after parsing attributes in process `syz.4.5570'. [ 1660.020534][T16762] netlink: 326 bytes leftover after parsing attributes in process `syz.4.5570'. [ 1660.103664][T15737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1660.474502][T15737] 8021q: adding VLAN 0 to HW filter on device team0 [ 1660.790018][T14402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.797168][T14402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1661.220751][T10945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.227920][T10945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1661.569594][T15737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1661.868911][T15737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1664.145832][T15737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.157848][T16826] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5582'. [ 1664.509530][T16833] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1664.573381][T15737] veth0_vlan: entered promiscuous mode [ 1664.823917][T15737] veth1_vlan: entered promiscuous mode [ 1664.933420][T16836] FAULT_INJECTION: forcing a failure. [ 1664.933420][T16836] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.985143][T16836] CPU: 0 UID: 0 PID: 16836 Comm: syz.4.5586 Tainted: G U syzkaller #0 PREEMPT(full) [ 1664.985168][T16836] Tainted: [U]=USER [ 1664.985173][T16836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1664.985181][T16836] Call Trace: [ 1664.985187][T16836] [ 1664.985193][T16836] dump_stack_lvl+0x16c/0x1f0 [ 1664.985218][T16836] should_fail_ex+0x512/0x640 [ 1664.985241][T16836] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1664.985260][T16836] should_failslab+0xc2/0x120 [ 1664.985279][T16836] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1664.985296][T16836] ? d_instantiate+0x77/0x90 [ 1664.985313][T16836] ? alloc_empty_file+0x55/0x1e0 [ 1664.985337][T16836] alloc_empty_file+0x55/0x1e0 [ 1664.985358][T16836] alloc_file_pseudo+0x13a/0x230 [ 1664.985379][T16836] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1664.985405][T16836] __shmem_file_setup+0x1a3/0x330 [ 1664.985422][T16836] shmem_zero_setup+0x93/0x1a0 [ 1664.985440][T16836] __mmap_region+0x2081/0x27b0 [ 1664.985460][T16836] ? __pfx___mmap_region+0x10/0x10 [ 1664.985482][T16836] ? find_held_lock+0x2b/0x80 [ 1664.985498][T16836] ? is_bpf_text_address+0x8a/0x1a0 [ 1664.985521][T16836] ? bpf_ksym_find+0x124/0x1c0 [ 1664.985535][T16836] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1664.985552][T16836] ? is_bpf_text_address+0x94/0x1a0 [ 1664.985598][T16836] ? trace_cap_capable+0x18d/0x200 [ 1664.985620][T16836] mmap_region+0x1ab/0x3f0 [ 1664.985637][T16836] ? __get_unmapped_area+0x267/0x440 [ 1664.985659][T16836] do_mmap+0xa3e/0x1210 [ 1664.985682][T16836] ? __pfx_do_mmap+0x10/0x10 [ 1664.985702][T16836] ? __pfx_down_write_killable+0x10/0x10 [ 1664.985720][T16836] vm_mmap_pgoff+0x29e/0x470 [ 1664.985743][T16836] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1664.985774][T16836] ksys_mmap_pgoff+0x7d/0x5c0 [ 1664.985793][T16836] ? xfd_validate_state+0x61/0x180 [ 1664.985816][T16836] __x64_sys_mmap+0x125/0x190 [ 1664.985840][T16836] do_syscall_64+0xcd/0x4c0 [ 1664.985863][T16836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.985878][T16836] RIP: 0033:0x7fd875d8eec9 [ 1664.985890][T16836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1664.985903][T16836] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1664.985917][T16836] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1664.985927][T16836] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1664.985935][T16836] RBP: 00007fd875e11f91 R08: fffffffffffffffa R09: 0000000000008000 [ 1664.985944][T16836] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1664.985953][T16836] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1664.985972][T16836] [ 1665.621401][T15737] veth0_macvtap: entered promiscuous mode [ 1665.651206][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1665.657588][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1665.712571][T15737] veth1_macvtap: entered promiscuous mode [ 1666.003164][T15737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1666.210849][T15737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1666.670125][ T9729] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.916196][T16861] Process accounting resumed [ 1667.055566][ T9729] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.233908][ T9729] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.597711][T16899] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5592'. [ 1667.935629][ T9729] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.994332][T13192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1670.121838][T13192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1670.546415][ T9720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1670.650413][ T9720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.941865][T17062] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1672.696756][T17071] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1673.823849][T17139] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1675.463284][T17145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.808036][ T30] audit: type=1800 audit(4294967567.770:72): pid=17179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5616" name="members" dev="configfs" ino=201165 res=0 errno=0 [ 1676.391126][T17145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.537056][T17145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.704856][T17145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.032194][T17207] FAULT_INJECTION: forcing a failure. [ 1677.032194][T17207] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.087544][T17250] FAULT_INJECTION: forcing a failure. [ 1677.087544][T17250] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.129539][T17250] CPU: 0 UID: 0 PID: 17250 Comm: syz.4.5620 Tainted: G U syzkaller #0 PREEMPT(full) [ 1677.129567][T17250] Tainted: [U]=USER [ 1677.129572][T17250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1677.129581][T17250] Call Trace: [ 1677.129587][T17250] [ 1677.129595][T17250] dump_stack_lvl+0x16c/0x1f0 [ 1677.129622][T17250] should_fail_ex+0x512/0x640 [ 1677.129645][T17250] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1677.129666][T17250] should_failslab+0xc2/0x120 [ 1677.129686][T17250] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1677.129703][T17250] ? security_file_alloc+0x34/0x2b0 [ 1677.129726][T17250] security_file_alloc+0x34/0x2b0 [ 1677.129746][T17250] init_file+0x93/0x4c0 [ 1677.129767][T17250] alloc_empty_file+0x73/0x1e0 [ 1677.129790][T17250] alloc_file_pseudo+0x13a/0x230 [ 1677.129811][T17250] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1677.129832][T17250] ? alloc_fd+0x471/0x7d0 [ 1677.129851][T17250] sock_alloc_file+0x50/0x210 [ 1677.129866][T17250] __sys_socket+0x1c0/0x260 [ 1677.129883][T17250] ? __pfx___sys_socket+0x10/0x10 [ 1677.129900][T17250] ? xfd_validate_state+0x61/0x180 [ 1677.129920][T17250] ? __pfx_do_writev+0x10/0x10 [ 1677.129939][T17250] __x64_sys_socket+0x72/0xb0 [ 1677.129955][T17250] ? lockdep_hardirqs_on+0x7c/0x110 [ 1677.129975][T17250] do_syscall_64+0xcd/0x4c0 [ 1677.129998][T17250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.130013][T17250] RIP: 0033:0x7fd875d8eec9 [ 1677.130026][T17250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1677.130040][T17250] RSP: 002b:00007fd873fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1677.130054][T17250] RAX: ffffffffffffffda RBX: 00007fd875fe6090 RCX: 00007fd875d8eec9 [ 1677.130064][T17250] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 1677.130072][T17250] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1677.130081][T17250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1677.130090][T17250] R13: 00007fd875fe6128 R14: 00007fd875fe6090 R15: 00007ffc899f8068 [ 1677.130109][T17250] [ 1677.347997][ C0] vkms_vblank_simulate: vblank timer overrun [ 1677.645696][T17207] CPU: 0 UID: 0 PID: 17207 Comm: syz.0.5618 Tainted: G U syzkaller #0 PREEMPT(full) [ 1677.645726][T17207] Tainted: [U]=USER [ 1677.645731][T17207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1677.645741][T17207] Call Trace: [ 1677.645747][T17207] [ 1677.645753][T17207] dump_stack_lvl+0x16c/0x1f0 [ 1677.645781][T17207] should_fail_ex+0x512/0x640 [ 1677.645805][T17207] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1677.645824][T17207] should_failslab+0xc2/0x120 [ 1677.645844][T17207] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1677.645861][T17207] ? apply_subsystem_event_filter+0x567/0x17e0 [ 1677.645884][T17207] apply_subsystem_event_filter+0x567/0x17e0 [ 1677.645909][T17207] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1677.645933][T17207] ? _copy_from_user+0x59/0xd0 [ 1677.645951][T17207] subsystem_filter_write+0x95/0x120 [ 1677.645972][T17207] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1677.645990][T17207] vfs_write+0x29d/0x11d0 [ 1677.646011][T17207] ? __pfx___mutex_lock+0x10/0x10 [ 1677.646034][T17207] ? __pfx_vfs_write+0x10/0x10 [ 1677.646057][T17207] ? __fget_files+0x20e/0x3c0 [ 1677.646080][T17207] ksys_write+0x12a/0x250 [ 1677.646097][T17207] ? __pfx_ksys_write+0x10/0x10 [ 1677.646121][T17207] do_syscall_64+0xcd/0x4c0 [ 1677.646145][T17207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.646162][T17207] RIP: 0033:0x7fe1ce98eec9 [ 1677.646176][T17207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1677.646191][T17207] RSP: 002b:00007fe1cf865038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1677.646207][T17207] RAX: ffffffffffffffda RBX: 00007fe1cebe5fa0 RCX: 00007fe1ce98eec9 [ 1677.646218][T17207] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 1677.646227][T17207] RBP: 00007fe1cea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1677.646237][T17207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1677.646246][T17207] R13: 00007fe1cebe6038 R14: 00007fe1cebe5fa0 R15: 00007ffdf25ee838 [ 1677.646266][T17207] [ 1677.849896][ C0] vkms_vblank_simulate: vblank timer overrun [ 1679.435703][T17287] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(781366480.3972487973.1231637318), cmd(6) [ 1680.092416][T17323] FAULT_INJECTION: forcing a failure. [ 1680.092416][T17323] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.124079][T17323] CPU: 0 UID: 0 PID: 17323 Comm: syz.4.5624 Tainted: G U syzkaller #0 PREEMPT(full) [ 1680.124106][T17323] Tainted: [U]=USER [ 1680.124111][T17323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1680.124121][T17323] Call Trace: [ 1680.124126][T17323] [ 1680.124133][T17323] dump_stack_lvl+0x16c/0x1f0 [ 1680.124160][T17323] should_fail_ex+0x512/0x640 [ 1680.124182][T17323] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1680.124199][T17323] should_failslab+0xc2/0x120 [ 1680.124218][T17323] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1680.124233][T17323] ? rcu_is_watching+0x12/0xc0 [ 1680.124247][T17323] ? call_usermodehelper_setup+0xaf/0x360 [ 1680.124262][T17323] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1680.124285][T17323] call_usermodehelper_setup+0xaf/0x360 [ 1680.124302][T17323] __request_module+0x3bd/0x690 [ 1680.124324][T17323] ? __pfx___request_module+0x10/0x10 [ 1680.124352][T17323] ? find_held_lock+0x2b/0x80 [ 1680.124372][T17323] netlink_create+0x226/0x620 [ 1680.124395][T17323] __sock_create+0x338/0x8d0 [ 1680.124415][T17323] __sys_socket+0x14d/0x260 [ 1680.124432][T17323] ? __pfx___sys_socket+0x10/0x10 [ 1680.124449][T17323] ? xfd_validate_state+0x61/0x180 [ 1680.124469][T17323] ? __pfx_ksys_write+0x10/0x10 [ 1680.124489][T17323] __x64_sys_socket+0x72/0xb0 [ 1680.124505][T17323] ? lockdep_hardirqs_on+0x7c/0x110 [ 1680.124525][T17323] do_syscall_64+0xcd/0x4c0 [ 1680.124548][T17323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.124562][T17323] RIP: 0033:0x7fd875d8eec9 [ 1680.124576][T17323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1680.124589][T17323] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1680.124604][T17323] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1680.124614][T17323] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010 [ 1680.124623][T17323] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1680.124632][T17323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1680.124640][T17323] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1680.124659][T17323] [ 1680.349396][ C0] vkms_vblank_simulate: vblank timer overrun [ 1680.682172][T17330] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input97 [ 1681.140166][T17350] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5631'. [ 1681.179667][T17350] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5631'. [ 1681.232402][T17358] netlink: 218 bytes leftover after parsing attributes in process `syz.4.5631'. [ 1681.268598][T17350] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5631'. [ 1681.487525][T17357] FAULT_INJECTION: forcing a failure. [ 1681.487525][T17357] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.745622][T17357] CPU: 0 UID: 0 PID: 17357 Comm: syz.6.5628 Tainted: G U syzkaller #0 PREEMPT(full) [ 1681.745648][T17357] Tainted: [U]=USER [ 1681.745653][T17357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1681.745663][T17357] Call Trace: [ 1681.745669][T17357] [ 1681.745675][T17357] dump_stack_lvl+0x16c/0x1f0 [ 1681.745702][T17357] should_fail_ex+0x512/0x640 [ 1681.745724][T17357] ? __kvmalloc_node_noprof+0x124/0x620 [ 1681.745743][T17357] should_failslab+0xc2/0x120 [ 1681.745763][T17357] __kvmalloc_node_noprof+0x137/0x620 [ 1681.745778][T17357] ? rcu_is_watching+0x12/0xc0 [ 1681.745794][T17357] ? kfree+0x24f/0x4d0 [ 1681.745806][T17357] ? snd_pcm_plugin_alloc+0x5f8/0x7f0 [ 1681.745822][T17357] ? mark_held_locks+0x49/0x80 [ 1681.745850][T17357] ? snd_pcm_plugin_alloc+0x5f8/0x7f0 [ 1681.745866][T17357] snd_pcm_plugin_alloc+0x5f8/0x7f0 [ 1681.745888][T17357] snd_pcm_plug_alloc+0x146/0x330 [ 1681.745908][T17357] snd_pcm_oss_change_params_locked+0x19b8/0x3a30 [ 1681.745936][T17357] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1681.745969][T17357] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1681.745989][T17357] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1681.746007][T17357] ? hook_file_ioctl_common+0x145/0x410 [ 1681.746027][T17357] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1681.746046][T17357] ? __fget_files+0x20e/0x3c0 [ 1681.746064][T17357] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1681.746083][T17357] __x64_sys_ioctl+0x18b/0x210 [ 1681.746106][T17357] do_syscall_64+0xcd/0x4c0 [ 1681.746129][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.746144][T17357] RIP: 0033:0x7f80ef78eec9 [ 1681.746156][T17357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1681.746170][T17357] RSP: 002b:00007f80f06a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1681.746184][T17357] RAX: ffffffffffffffda RBX: 00007f80ef9e5fa0 RCX: 00007f80ef78eec9 [ 1681.746193][T17357] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000006 [ 1681.746202][T17357] RBP: 00007f80ef811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1681.746211][T17357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1681.746219][T17357] R13: 00007f80ef9e6038 R14: 00007f80ef9e5fa0 R15: 00007ffcf834b898 [ 1681.746239][T17357] [ 1681.981176][ C0] vkms_vblank_simulate: vblank timer overrun [ 1686.146518][T17548] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5643'. [ 1686.186317][T17548] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5643'. [ 1686.206738][T17548] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5643'. [ 1686.232509][T17548] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5643'. [ 1686.252559][T17548] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5643'. [ 1686.426936][T17552] FAULT_INJECTION: forcing a failure. [ 1686.426936][T17552] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.461054][T17552] CPU: 0 UID: 0 PID: 17552 Comm: syz.3.5645 Tainted: G U syzkaller #0 PREEMPT(full) [ 1686.461082][T17552] Tainted: [U]=USER [ 1686.461087][T17552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1686.461097][T17552] Call Trace: [ 1686.461103][T17552] [ 1686.461113][T17552] dump_stack_lvl+0x16c/0x1f0 [ 1686.461140][T17552] should_fail_ex+0x512/0x640 [ 1686.461163][T17552] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1686.461182][T17552] should_failslab+0xc2/0x120 [ 1686.461202][T17552] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1686.461219][T17552] ? apply_subsystem_event_filter+0x567/0x17e0 [ 1686.461243][T17552] apply_subsystem_event_filter+0x567/0x17e0 [ 1686.461268][T17552] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1686.461292][T17552] ? _copy_from_user+0x59/0xd0 [ 1686.461310][T17552] subsystem_filter_write+0x95/0x120 [ 1686.461330][T17552] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1686.461348][T17552] vfs_write+0x29d/0x11d0 [ 1686.461369][T17552] ? __pfx___mutex_lock+0x10/0x10 [ 1686.461401][T17552] ? __pfx_vfs_write+0x10/0x10 [ 1686.461427][T17552] ? __fget_files+0x20e/0x3c0 [ 1686.461450][T17552] ksys_write+0x12a/0x250 [ 1686.461468][T17552] ? __pfx_ksys_write+0x10/0x10 [ 1686.461491][T17552] do_syscall_64+0xcd/0x4c0 [ 1686.461516][T17552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.461532][T17552] RIP: 0033:0x7fd746d8eec9 [ 1686.461546][T17552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1686.461561][T17552] RSP: 002b:00007fd747ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1686.461577][T17552] RAX: ffffffffffffffda RBX: 00007fd746fe5fa0 RCX: 00007fd746d8eec9 [ 1686.461587][T17552] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 1686.461596][T17552] RBP: 00007fd746e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1686.461605][T17552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1686.461614][T17552] R13: 00007fd746fe6038 R14: 00007fd746fe5fa0 R15: 00007fff0c6ca648 [ 1686.461633][T17552] [ 1686.684745][T17535] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1686.723552][T17535] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1686.735471][T17553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5644'. [ 1686.744837][T17555] netlink: 93 bytes leftover after parsing attributes in process `syz.0.5644'. [ 1686.769147][T17535] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1686.878797][T17555] netlink: 93 bytes leftover after parsing attributes in process `syz.0.5644'. [ 1686.888186][T17555] netlink: 93 bytes leftover after parsing attributes in process `syz.0.5644'. [ 1686.905821][T17555] netlink: 93 bytes leftover after parsing attributes in process `syz.0.5644'. [ 1687.913031][T17633] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1689.674739][T17701] FAULT_INJECTION: forcing a failure. [ 1689.674739][T17701] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.726356][T17701] CPU: 0 UID: 0 PID: 17701 Comm: syz.4.5658 Tainted: G U syzkaller #0 PREEMPT(full) [ 1689.726382][T17701] Tainted: [U]=USER [ 1689.726388][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1689.726397][T17701] Call Trace: [ 1689.726403][T17701] [ 1689.726410][T17701] dump_stack_lvl+0x16c/0x1f0 [ 1689.726437][T17701] should_fail_ex+0x512/0x640 [ 1689.726459][T17701] ? fs_reclaim_acquire+0xae/0x150 [ 1689.726483][T17701] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1689.726504][T17701] should_failslab+0xc2/0x120 [ 1689.726524][T17701] __kmalloc_noprof+0xd2/0x510 [ 1689.726546][T17701] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1689.726572][T17701] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1689.726590][T17701] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1689.726627][T17701] ? do_raw_spin_lock+0x12c/0x2b0 [ 1689.726653][T17701] tomoyo_file_open+0x6b/0x90 [ 1689.726668][T17701] security_file_open+0x84/0x1e0 [ 1689.726688][T17701] do_dentry_open+0x596/0x1530 [ 1689.726711][T17701] vfs_open+0x82/0x3f0 [ 1689.726734][T17701] path_openat+0x1de4/0x2cb0 [ 1689.726757][T17701] ? __pfx_path_openat+0x10/0x10 [ 1689.726779][T17701] do_filp_open+0x20b/0x470 [ 1689.726797][T17701] ? __pfx_do_filp_open+0x10/0x10 [ 1689.726827][T17701] ? alloc_fd+0x471/0x7d0 [ 1689.726848][T17701] do_sys_openat2+0x11b/0x1d0 [ 1689.726868][T17701] ? __pfx_do_sys_openat2+0x10/0x10 [ 1689.726896][T17701] __x64_sys_openat+0x174/0x210 [ 1689.726909][T17701] ? __pfx___x64_sys_openat+0x10/0x10 [ 1689.726930][T17701] do_syscall_64+0xcd/0x4c0 [ 1689.726952][T17701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.726967][T17701] RIP: 0033:0x7fd875d8eec9 [ 1689.726981][T17701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1689.727002][T17701] RSP: 002b:00007fd873fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1689.727018][T17701] RAX: ffffffffffffffda RBX: 00007fd875fe6090 RCX: 00007fd875d8eec9 [ 1689.727028][T17701] RDX: 0000000000000000 RSI: 0000200000005280 RDI: ffffffffffffff9c [ 1689.727038][T17701] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1689.727048][T17701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1689.727057][T17701] R13: 00007fd875fe6128 R14: 00007fd875fe6090 R15: 00007ffc899f8068 [ 1689.727076][T17701] [ 1689.727084][T17701] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1690.083835][T17691] can: request_module (can-proto-3) failed. [ 1690.364001][T17700] netlink: zone id is out of range [ 1690.414345][T17700] netlink: zone id is out of range [ 1690.430986][T17700] netlink: zone id is out of range [ 1690.456935][T17700] netlink: zone id is out of range [ 1690.492298][T17700] netlink: zone id is out of range [ 1690.532985][T17700] netlink: zone id is out of range [ 1690.570846][T17700] netlink: zone id is out of range [ 1690.575982][T17700] netlink: zone id is out of range [ 1690.636241][T17700] netlink: zone id is out of range [ 1690.661802][T17700] netlink: zone id is out of range [ 1692.188608][T17796] __nla_validate_parse: 10 callbacks suppressed [ 1692.188622][T17796] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5663'. [ 1692.241887][T17796] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5663'. [ 1692.292257][T17796] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5663'. [ 1692.339061][T17796] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5663'. [ 1692.384753][T17796] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5663'. [ 1696.518930][T17912] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5686'. [ 1696.539213][T17912] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5686'. [ 1696.567763][T17912] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5686'. [ 1696.604479][T17912] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5686'. [ 1696.645126][T17912] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5686'. [ 1696.872658][T17907] Process accounting paused [ 1697.115069][T17926] FAULT_INJECTION: forcing a failure. [ 1697.115069][T17926] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.165011][T17926] CPU: 0 UID: 0 PID: 17926 Comm: syz.3.5689 Tainted: G U syzkaller #0 PREEMPT(full) [ 1697.165041][T17926] Tainted: [U]=USER [ 1697.165046][T17926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1697.165055][T17926] Call Trace: [ 1697.165061][T17926] [ 1697.165067][T17926] dump_stack_lvl+0x16c/0x1f0 [ 1697.165094][T17926] should_fail_ex+0x512/0x640 [ 1697.165116][T17926] ? fs_reclaim_acquire+0xae/0x150 [ 1697.165140][T17926] should_failslab+0xc2/0x120 [ 1697.165159][T17926] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1697.165175][T17926] ? tomoyo_init_log+0x197/0x2140 [ 1697.165197][T17926] tomoyo_init_log+0x197/0x2140 [ 1697.165216][T17926] ? kasan_save_stack+0x33/0x60 [ 1697.165233][T17926] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1697.165267][T17926] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1697.165288][T17926] ? tomoyo_profile+0x47/0x60 [ 1697.165301][T17926] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 1697.165321][T17926] tomoyo_supervisor+0x302/0x13b0 [ 1697.165339][T17926] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1697.165352][T17926] ? __pfx_vsnprintf+0x10/0x10 [ 1697.165381][T17926] ? tomoyo_encode2+0x329/0x3e0 [ 1697.165403][T17926] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 1697.165426][T17926] tomoyo_path_number_perm+0x448/0x580 [ 1697.165445][T17926] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1697.165482][T17926] ? find_held_lock+0x2b/0x80 [ 1697.165496][T17926] ? hook_file_ioctl_common+0x145/0x410 [ 1697.165519][T17926] ? __fget_files+0x20e/0x3c0 [ 1697.165538][T17926] security_file_ioctl+0x9b/0x240 [ 1697.165557][T17926] __x64_sys_ioctl+0xb7/0x210 [ 1697.165580][T17926] do_syscall_64+0xcd/0x4c0 [ 1697.165602][T17926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.165617][T17926] RIP: 0033:0x7fd746d8eec9 [ 1697.165630][T17926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1697.165644][T17926] RSP: 002b:00007fd747c66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1697.165658][T17926] RAX: ffffffffffffffda RBX: 00007fd746fe6180 RCX: 00007fd746d8eec9 [ 1697.165667][T17926] RDX: 0000000000000006 RSI: 00000000000007a0 RDI: 000000000000000b [ 1697.165676][T17926] RBP: 00007fd746e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1697.165684][T17926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1697.165692][T17926] R13: 00007fd746fe6218 R14: 00007fd746fe6180 R15: 00007fff0c6ca648 [ 1697.165712][T17926] [ 1697.404331][ C0] vkms_vblank_simulate: vblank timer overrun [ 1697.982117][T17933] FAULT_INJECTION: forcing a failure. [ 1697.982117][T17933] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.073207][T17933] CPU: 0 UID: 0 PID: 17933 Comm: syz.4.5691 Tainted: G U syzkaller #0 PREEMPT(full) [ 1698.073234][T17933] Tainted: [U]=USER [ 1698.073240][T17933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1698.073249][T17933] Call Trace: [ 1698.073255][T17933] [ 1698.073262][T17933] dump_stack_lvl+0x16c/0x1f0 [ 1698.073288][T17933] should_fail_ex+0x512/0x640 [ 1698.073310][T17933] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1698.073331][T17933] should_failslab+0xc2/0x120 [ 1698.073351][T17933] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1698.073369][T17933] ? __d_alloc+0x32/0xae0 [ 1698.073391][T17933] __d_alloc+0x32/0xae0 [ 1698.073410][T17933] d_alloc_parallel+0x111/0x1480 [ 1698.073438][T17933] ? find_held_lock+0x2b/0x80 [ 1698.073454][T17933] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1698.073477][T17933] ? __d_lookup+0x266/0x4a0 [ 1698.073503][T17933] lookup_open.isra.0+0x665/0x1580 [ 1698.073522][T17933] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1698.073547][T17933] ? __pfx_down_write+0x10/0x10 [ 1698.073559][T17933] ? mnt_get_write_access+0x20c/0x300 [ 1698.073584][T17933] path_openat+0x893/0x2cb0 [ 1698.073607][T17933] ? __pfx_path_openat+0x10/0x10 [ 1698.073629][T17933] do_filp_open+0x20b/0x470 [ 1698.073646][T17933] ? __pfx_do_filp_open+0x10/0x10 [ 1698.073677][T17933] ? alloc_fd+0x471/0x7d0 [ 1698.073697][T17933] do_sys_openat2+0x11b/0x1d0 [ 1698.073719][T17933] ? __pfx_do_sys_openat2+0x10/0x10 [ 1698.073747][T17933] __x64_sys_openat+0x174/0x210 [ 1698.073760][T17933] ? __pfx___x64_sys_openat+0x10/0x10 [ 1698.073781][T17933] do_syscall_64+0xcd/0x4c0 [ 1698.073804][T17933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.073818][T17933] RIP: 0033:0x7fd875d8eec9 [ 1698.073831][T17933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1698.073845][T17933] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1698.073860][T17933] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1698.073870][T17933] RDX: 0000000000060442 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1698.073879][T17933] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1698.073887][T17933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1698.073895][T17933] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1698.073914][T17933] [ 1698.314145][ C0] vkms_vblank_simulate: vblank timer overrun [ 1699.318851][T17979] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5697'. [ 1699.379375][T17988] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5697'. [ 1699.477424][T17979] netlink: 218 bytes leftover after parsing attributes in process `syz.4.5697'. [ 1701.966877][T18077] CIFS mount error: No usable UNC path provided in device string! [ 1701.966877][T18077] [ 1702.007870][T18068] svc: failed to register nfsdv3 RPC service (errno 111). [ 1702.035508][T18077] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1702.063993][T18068] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1702.535556][T18091] vivid-007: ================= START STATUS ================= [ 1702.672396][T18091] vivid-007: Generate PTS: true [ 1702.786889][T18091] vivid-007: Generate SCR: true [ 1702.856000][T18098] netlink: 'syz.3.5715': attribute type 4 has an invalid length. [ 1703.064254][T18091] tpg source WxH: 320x240 (Y'CbCr) [ 1703.240744][T18091] tpg field: 1 [ 1703.335714][T18091] tpg crop: (0,0)/320x240 [ 1703.470645][T18091] tpg compose: (0,0)/320x240 [ 1703.569933][T18091] tpg colorspace: 8 [ 1703.682357][T18091] tpg transfer function: 0/0 [ 1703.883521][T18091] tpg Y'CbCr encoding: 0/0 [ 1703.985404][T18127] netlink: 186 bytes leftover after parsing attributes in process `syz.4.5721'. [ 1704.088591][T18091] tpg quantization: 0/0 [ 1704.315350][T18129] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1704.411401][T18091] tpg RGB range: 0/2 [ 1704.415316][T18091] vivid-007: ================== END STATUS ================== [ 1704.429046][T18133] FAULT_INJECTION: forcing a failure. [ 1704.429046][T18133] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.462034][T18133] CPU: 0 UID: 0 PID: 18133 Comm: syz.3.5723 Tainted: G U syzkaller #0 PREEMPT(full) [ 1704.462059][T18133] Tainted: [U]=USER [ 1704.462065][T18133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1704.462074][T18133] Call Trace: [ 1704.462080][T18133] [ 1704.462086][T18133] dump_stack_lvl+0x16c/0x1f0 [ 1704.462113][T18133] should_fail_ex+0x512/0x640 [ 1704.462136][T18133] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1704.462157][T18133] should_failslab+0xc2/0x120 [ 1704.462176][T18133] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1704.462193][T18133] ? __kernfs_new_node+0xd2/0x8e0 [ 1704.462214][T18133] __kernfs_new_node+0xd2/0x8e0 [ 1704.462234][T18133] ? __pfx___kernfs_new_node+0x10/0x10 [ 1704.462257][T18133] ? find_held_lock+0x2b/0x80 [ 1704.462272][T18133] ? kernfs_root+0xee/0x2a0 [ 1704.462294][T18133] kernfs_new_node+0x13c/0x1e0 [ 1704.462314][T18133] ? net_ns_get_ownership+0xf8/0x1b0 [ 1704.462337][T18133] kernfs_create_dir_ns+0x4c/0x1a0 [ 1704.462360][T18133] sysfs_create_dir_ns+0x13a/0x2b0 [ 1704.462377][T18133] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1704.462395][T18133] ? find_held_lock+0x2b/0x80 [ 1704.462411][T18133] ? net_namespace+0x12/0x50 [ 1704.462424][T18133] ? device_namespace+0x76/0xa0 [ 1704.462440][T18133] kobject_add_internal+0x2c4/0x9b0 [ 1704.462466][T18133] kobject_add+0x16e/0x240 [ 1704.462481][T18133] ? __pfx_kobject_add+0x10/0x10 [ 1704.462496][T18133] ? get_device_parent+0x1c5/0x4e0 [ 1704.462520][T18133] ? kobject_put+0xab/0x5a0 [ 1704.462539][T18133] device_add+0x288/0x1aa0 [ 1704.462555][T18133] ? __pfx_dev_set_name+0x10/0x10 [ 1704.462571][T18133] ? __pfx_device_add+0x10/0x10 [ 1704.462586][T18133] ? lockdep_init_map_type+0x5c/0x280 [ 1704.462605][T18133] ? __init_waitqueue_head+0xca/0x150 [ 1704.462631][T18133] netdev_register_kobject+0x1a9/0x3d0 [ 1704.462650][T18133] register_netdevice+0x13dc/0x2270 [ 1704.462668][T18133] ? __pfx_register_netdevice+0x10/0x10 [ 1704.462688][T18133] internal_dev_create+0x2d3/0x520 [ 1704.462705][T18133] ovs_vport_add+0x147/0x4d0 [ 1704.462727][T18133] new_vport+0x16/0x1d0 [ 1704.462746][T18133] ovs_dp_cmd_new+0x6ba/0xe60 [ 1704.462770][T18133] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1704.462793][T18133] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1704.462810][T18133] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1704.462830][T18133] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1704.462847][T18133] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1704.462869][T18133] ? bpf_lsm_capable+0x9/0x10 [ 1704.462883][T18133] ? security_capable+0x7e/0x260 [ 1704.462898][T18133] ? ns_capable+0xd7/0x110 [ 1704.462915][T18133] genl_rcv_msg+0x55c/0x800 [ 1704.462933][T18133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1704.462948][T18133] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1704.462974][T18133] netlink_rcv_skb+0x158/0x420 [ 1704.462996][T18133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1704.463012][T18133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1704.463041][T18133] ? netlink_deliver_tap+0x1ae/0xd30 [ 1704.463065][T18133] genl_rcv+0x28/0x40 [ 1704.463077][T18133] netlink_unicast+0x5a7/0x870 [ 1704.463102][T18133] ? __pfx_netlink_unicast+0x10/0x10 [ 1704.463123][T18133] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1704.463143][T18133] ? __lock_acquire+0xb97/0x1ce0 [ 1704.463166][T18133] netlink_sendmsg+0x8d1/0xdd0 [ 1704.463191][T18133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.463215][T18133] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1704.463234][T18133] ____sys_sendmsg+0xa98/0xc70 [ 1704.463251][T18133] ? copy_msghdr_from_user+0x10a/0x160 [ 1704.463272][T18133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1704.463292][T18133] ? __pfx_futex_wake_mark+0x10/0x10 [ 1704.463316][T18133] ___sys_sendmsg+0x134/0x1d0 [ 1704.463338][T18133] ? __pfx____sys_sendmsg+0x10/0x10 [ 1704.463383][T18133] __sys_sendmsg+0x16d/0x220 [ 1704.463404][T18133] ? __pfx___sys_sendmsg+0x10/0x10 [ 1704.463424][T18133] ? __x64_sys_futex+0x1e0/0x4c0 [ 1704.463454][T18133] do_syscall_64+0xcd/0x4c0 [ 1704.463485][T18133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.463501][T18133] RIP: 0033:0x7fd746d8eec9 [ 1704.463515][T18133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1704.463530][T18133] RSP: 002b:00007fd747c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.463545][T18133] RAX: ffffffffffffffda RBX: 00007fd746fe6090 RCX: 00007fd746d8eec9 [ 1704.463555][T18133] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 000000000000000b [ 1704.463564][T18133] RBP: 00007fd746e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1704.463573][T18133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1704.463582][T18133] R13: 00007fd746fe6128 R14: 00007fd746fe6090 R15: 00007fff0c6ca648 [ 1704.463602][T18133] [ 1704.463632][T18133] kobject: kobject_add_internal failed for HfR (error: -12 parent: net) [ 1705.416269][T18142] FAULT_INJECTION: forcing a failure. [ 1705.416269][T18142] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.454737][T18142] CPU: 0 UID: 0 PID: 18142 Comm: syz.4.5726 Tainted: G U syzkaller #0 PREEMPT(full) [ 1705.454764][T18142] Tainted: [U]=USER [ 1705.454769][T18142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1705.454778][T18142] Call Trace: [ 1705.454784][T18142] [ 1705.454790][T18142] dump_stack_lvl+0x16c/0x1f0 [ 1705.454821][T18142] should_fail_ex+0x512/0x640 [ 1705.454843][T18142] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1705.454866][T18142] should_failslab+0xc2/0x120 [ 1705.454885][T18142] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1705.454904][T18142] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1705.454926][T18142] kstrdup+0x53/0x100 [ 1705.454945][T18142] apply_subsystem_event_filter+0x47f/0x17e0 [ 1705.454969][T18142] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1705.454991][T18142] ? _copy_from_user+0x59/0xd0 [ 1705.455009][T18142] subsystem_filter_write+0x95/0x120 [ 1705.455028][T18142] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1705.455044][T18142] vfs_write+0x29d/0x11d0 [ 1705.455065][T18142] ? __pfx___mutex_lock+0x10/0x10 [ 1705.455086][T18142] ? __pfx_vfs_write+0x10/0x10 [ 1705.455108][T18142] ? __fget_files+0x20e/0x3c0 [ 1705.455129][T18142] ksys_write+0x12a/0x250 [ 1705.455145][T18142] ? __pfx_ksys_write+0x10/0x10 [ 1705.455167][T18142] do_syscall_64+0xcd/0x4c0 [ 1705.455190][T18142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.455205][T18142] RIP: 0033:0x7fd875d8eec9 [ 1705.455218][T18142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1705.455232][T18142] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1705.455246][T18142] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1705.455255][T18142] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 1705.455264][T18142] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1705.455273][T18142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1705.455282][T18142] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1705.455302][T18142] [ 1706.335067][T18153] FAULT_INJECTION: forcing a failure. [ 1706.335067][T18153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1706.377516][T18153] CPU: 0 UID: 0 PID: 18153 Comm: syz.3.5729 Tainted: G U syzkaller #0 PREEMPT(full) [ 1706.377542][T18153] Tainted: [U]=USER [ 1706.377549][T18153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1706.377558][T18153] Call Trace: [ 1706.377564][T18153] [ 1706.377570][T18153] dump_stack_lvl+0x16c/0x1f0 [ 1706.377596][T18153] should_fail_ex+0x512/0x640 [ 1706.377621][T18153] _copy_from_iter+0x29f/0x1720 [ 1706.377639][T18153] ? __alloc_skb+0x200/0x380 [ 1706.377659][T18153] ? __pfx__copy_from_iter+0x10/0x10 [ 1706.377675][T18153] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1706.377696][T18153] ? __lock_acquire+0xb97/0x1ce0 [ 1706.377719][T18153] netlink_sendmsg+0x829/0xdd0 [ 1706.377743][T18153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1706.377766][T18153] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1706.377785][T18153] ____sys_sendmsg+0xa98/0xc70 [ 1706.377807][T18153] ? copy_msghdr_from_user+0x10a/0x160 [ 1706.377827][T18153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1706.377851][T18153] ___sys_sendmsg+0x134/0x1d0 [ 1706.377872][T18153] ? __pfx____sys_sendmsg+0x10/0x10 [ 1706.377914][T18153] __sys_sendmsg+0x16d/0x220 [ 1706.377935][T18153] ? __pfx___sys_sendmsg+0x10/0x10 [ 1706.377966][T18153] do_syscall_64+0xcd/0x4c0 [ 1706.377988][T18153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.378003][T18153] RIP: 0033:0x7fd746d8eec9 [ 1706.378015][T18153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1706.378029][T18153] RSP: 002b:00007fd747ca8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1706.378042][T18153] RAX: ffffffffffffffda RBX: 00007fd746fe5fa0 RCX: 00007fd746d8eec9 [ 1706.378051][T18153] RDX: 0000000020040894 RSI: 0000200000000080 RDI: 0000000000000003 [ 1706.378060][T18153] RBP: 00007fd747ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.378068][T18153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.378076][T18153] R13: 00007fd746fe6038 R14: 00007fd746fe5fa0 R15: 00007fff0c6ca648 [ 1706.378094][T18153] [ 1706.997108][T18161] ima: policy update failed [ 1707.069306][ T30] audit: type=1802 audit(4294967599.132:73): pid=18161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.5733" res=0 errno=0 [ 1709.024497][T18221] FAULT_INJECTION: forcing a failure. [ 1709.024497][T18221] name failslab, interval 1, probability 0, space 0, times 0 [ 1709.054164][T18221] CPU: 0 UID: 0 PID: 18221 Comm: syz.3.5743 Tainted: G U syzkaller #0 PREEMPT(full) [ 1709.054189][T18221] Tainted: [U]=USER [ 1709.054194][T18221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1709.054203][T18221] Call Trace: [ 1709.054209][T18221] [ 1709.054215][T18221] dump_stack_lvl+0x16c/0x1f0 [ 1709.054241][T18221] should_fail_ex+0x512/0x640 [ 1709.054265][T18221] should_failslab+0xc2/0x120 [ 1709.054285][T18221] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1709.054303][T18221] ? skb_clone+0x190/0x3f0 [ 1709.054326][T18221] skb_clone+0x190/0x3f0 [ 1709.054347][T18221] netlink_deliver_tap+0xabd/0xd30 [ 1709.054372][T18221] netlink_unicast+0x64c/0x870 [ 1709.054395][T18221] ? __pfx_netlink_unicast+0x10/0x10 [ 1709.054416][T18221] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1709.054439][T18221] ? __lock_acquire+0xb97/0x1ce0 [ 1709.054463][T18221] netlink_sendmsg+0x8d1/0xdd0 [ 1709.054486][T18221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1709.054509][T18221] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1709.054528][T18221] ____sys_sendmsg+0xa98/0xc70 [ 1709.054545][T18221] ? copy_msghdr_from_user+0x10a/0x160 [ 1709.054565][T18221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1709.054589][T18221] ___sys_sendmsg+0x134/0x1d0 [ 1709.054611][T18221] ? __pfx____sys_sendmsg+0x10/0x10 [ 1709.054653][T18221] __sys_sendmsg+0x16d/0x220 [ 1709.054674][T18221] ? __pfx___sys_sendmsg+0x10/0x10 [ 1709.054706][T18221] do_syscall_64+0xcd/0x4c0 [ 1709.054728][T18221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.054743][T18221] RIP: 0033:0x7fd746d8eec9 [ 1709.054755][T18221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1709.054769][T18221] RSP: 002b:00007fd747ca8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1709.054783][T18221] RAX: ffffffffffffffda RBX: 00007fd746fe5fa0 RCX: 00007fd746d8eec9 [ 1709.054793][T18221] RDX: 0000000020040894 RSI: 0000200000000080 RDI: 0000000000000003 [ 1709.054801][T18221] RBP: 00007fd747ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 1709.054810][T18221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1709.054818][T18221] R13: 00007fd746fe6038 R14: 00007fd746fe5fa0 R15: 00007fff0c6ca648 [ 1709.054836][T18221] [ 1710.042356][T18227] type: 262144 invalid [ 1712.392245][T18255] device-mapper: ioctl: Invalid ioctl structure: name , dev 7f00010002 [ 1712.580696][T18252] FAULT_INJECTION: forcing a failure. [ 1712.580696][T18252] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.883810][T18252] CPU: 0 UID: 0 PID: 18252 Comm: syz.6.5748 Tainted: G U syzkaller #0 PREEMPT(full) [ 1712.883837][T18252] Tainted: [U]=USER [ 1712.883842][T18252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1712.883852][T18252] Call Trace: [ 1712.883857][T18252] [ 1712.883864][T18252] dump_stack_lvl+0x16c/0x1f0 [ 1712.883891][T18252] should_fail_ex+0x512/0x640 [ 1712.883913][T18252] ? fs_reclaim_acquire+0xae/0x150 [ 1712.883936][T18252] ? tomoyo_init_log+0x1385/0x2140 [ 1712.883955][T18252] should_failslab+0xc2/0x120 [ 1712.883975][T18252] __kmalloc_noprof+0xd2/0x510 [ 1712.883990][T18252] ? __pfx_from_kuid+0x10/0x10 [ 1712.884015][T18252] tomoyo_init_log+0x1385/0x2140 [ 1712.884045][T18252] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1712.884063][T18252] ? tomoyo_profile+0x47/0x60 [ 1712.884076][T18252] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 1712.884095][T18252] tomoyo_supervisor+0x302/0x13b0 [ 1712.884112][T18252] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1712.884124][T18252] ? __pfx_vsnprintf+0x10/0x10 [ 1712.884153][T18252] ? tomoyo_encode2+0x329/0x3e0 [ 1712.884174][T18252] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 1712.884197][T18252] tomoyo_path_number_perm+0x448/0x580 [ 1712.884216][T18252] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1712.884252][T18252] ? find_held_lock+0x2b/0x80 [ 1712.884274][T18252] ? hook_file_ioctl_common+0x145/0x410 [ 1712.884298][T18252] ? __fget_files+0x20e/0x3c0 [ 1712.884318][T18252] security_file_ioctl+0x9b/0x240 [ 1712.884339][T18252] __x64_sys_ioctl+0xb7/0x210 [ 1712.884368][T18252] do_syscall_64+0xcd/0x4c0 [ 1712.884390][T18252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.884405][T18252] RIP: 0033:0x7f80ef78eec9 [ 1712.884418][T18252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1712.884431][T18252] RSP: 002b:00007f80f065f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1712.884446][T18252] RAX: ffffffffffffffda RBX: 00007f80ef9e6180 RCX: 00007f80ef78eec9 [ 1712.884456][T18252] RDX: 0000000000000006 RSI: 00000000000007a0 RDI: 000000000000000b [ 1712.884464][T18252] RBP: 00007f80ef811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1712.884473][T18252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1712.884481][T18252] R13: 00007f80ef9e6218 R14: 00007f80ef9e6180 R15: 00007ffcf834b898 [ 1712.884501][T18252] [ 1714.982287][T18335] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 1714.982287][T18335] program syz.3.5761 not setting count and/or reply_len properly [ 1717.376723][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5773'. [ 1718.618211][T18514] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1718.719906][T18514] FAULT_INJECTION: forcing a failure. [ 1718.719906][T18514] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.753157][T18514] CPU: 0 UID: 0 PID: 18514 Comm: syz.4.5778 Tainted: G U syzkaller #0 PREEMPT(full) [ 1718.753183][T18514] Tainted: [U]=USER [ 1718.753188][T18514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1718.753198][T18514] Call Trace: [ 1718.753204][T18514] [ 1718.753210][T18514] dump_stack_lvl+0x16c/0x1f0 [ 1718.753237][T18514] should_fail_ex+0x512/0x640 [ 1718.753259][T18514] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1718.753282][T18514] should_failslab+0xc2/0x120 [ 1718.753301][T18514] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1718.753320][T18514] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1718.753342][T18514] kstrdup+0x53/0x100 [ 1718.753363][T18514] apply_subsystem_event_filter+0x47f/0x17e0 [ 1718.753388][T18514] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1718.753410][T18514] ? _copy_from_user+0x59/0xd0 [ 1718.753427][T18514] subsystem_filter_write+0x95/0x120 [ 1718.753447][T18514] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1718.753464][T18514] vfs_write+0x29d/0x11d0 [ 1718.753483][T18514] ? __pfx___mutex_lock+0x10/0x10 [ 1718.753505][T18514] ? __pfx_vfs_write+0x10/0x10 [ 1718.753527][T18514] ? __fget_files+0x20e/0x3c0 [ 1718.753556][T18514] ksys_write+0x12a/0x250 [ 1718.753572][T18514] ? __pfx_ksys_write+0x10/0x10 [ 1718.753594][T18514] do_syscall_64+0xcd/0x4c0 [ 1718.753617][T18514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.753632][T18514] RIP: 0033:0x7fd875d8eec9 [ 1718.753645][T18514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1718.753659][T18514] RSP: 002b:00007fd873fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1718.753673][T18514] RAX: ffffffffffffffda RBX: 00007fd875fe6090 RCX: 00007fd875d8eec9 [ 1718.753682][T18514] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 1718.753691][T18514] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1718.753700][T18514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1718.753708][T18514] R13: 00007fd875fe6128 R14: 00007fd875fe6090 R15: 00007ffc899f8068 [ 1718.753729][T18514] [ 1719.424442][T18535] FAULT_INJECTION: forcing a failure. [ 1719.424442][T18535] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.472200][T18535] CPU: 0 UID: 0 PID: 18535 Comm: syz.3.5779 Tainted: G U syzkaller #0 PREEMPT(full) [ 1719.472226][T18535] Tainted: [U]=USER [ 1719.472232][T18535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1719.472241][T18535] Call Trace: [ 1719.472247][T18535] [ 1719.472253][T18535] dump_stack_lvl+0x16c/0x1f0 [ 1719.472280][T18535] should_fail_ex+0x512/0x640 [ 1719.472303][T18535] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1719.472321][T18535] should_failslab+0xc2/0x120 [ 1719.472340][T18535] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1719.472356][T18535] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1719.472378][T18535] apply_subsystem_event_filter+0x460/0x17e0 [ 1719.472402][T18535] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1719.472424][T18535] ? _copy_from_user+0x59/0xd0 [ 1719.472442][T18535] subsystem_filter_write+0x95/0x120 [ 1719.472461][T18535] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1719.472478][T18535] vfs_write+0x29d/0x11d0 [ 1719.472497][T18535] ? __pfx___mutex_lock+0x10/0x10 [ 1719.472519][T18535] ? __pfx_vfs_write+0x10/0x10 [ 1719.472540][T18535] ? __fget_files+0x20e/0x3c0 [ 1719.472561][T18535] ksys_write+0x12a/0x250 [ 1719.472578][T18535] ? __pfx_ksys_write+0x10/0x10 [ 1719.472600][T18535] do_syscall_64+0xcd/0x4c0 [ 1719.472623][T18535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.472637][T18535] RIP: 0033:0x7fd746d8eec9 [ 1719.472650][T18535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1719.472665][T18535] RSP: 002b:00007fd747ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1719.472679][T18535] RAX: ffffffffffffffda RBX: 00007fd746fe5fa0 RCX: 00007fd746d8eec9 [ 1719.472689][T18535] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 1719.472697][T18535] RBP: 00007fd746e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1719.472707][T18535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1719.472716][T18535] R13: 00007fd746fe6038 R14: 00007fd746fe5fa0 R15: 00007fff0c6ca648 [ 1719.472736][T18535] [ 1721.567598][T18574] ubi0: attaching mtd0 [ 1721.587110][T18574] ubi0: scanning is finished [ 1721.600468][T18574] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1721.789544][T18574] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1721.978818][T18590] FAULT_INJECTION: forcing a failure. [ 1721.978818][T18590] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.028920][T18590] CPU: 0 UID: 0 PID: 18590 Comm: syz.4.5790 Tainted: G U syzkaller #0 PREEMPT(full) [ 1722.028949][T18590] Tainted: [U]=USER [ 1722.028954][T18590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1722.028964][T18590] Call Trace: [ 1722.028970][T18590] [ 1722.028976][T18590] dump_stack_lvl+0x16c/0x1f0 [ 1722.029002][T18590] should_fail_ex+0x512/0x640 [ 1722.029023][T18590] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1722.029041][T18590] should_failslab+0xc2/0x120 [ 1722.029060][T18590] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1722.029075][T18590] ? resv_map_alloc+0x46/0x400 [ 1722.029096][T18590] resv_map_alloc+0x46/0x400 [ 1722.029115][T18590] hugetlbfs_get_inode+0x33f/0x730 [ 1722.029134][T18590] hugetlb_file_setup+0x15b/0x620 [ 1722.029151][T18590] ksys_mmap_pgoff+0x189/0x5c0 [ 1722.029174][T18590] __x64_sys_mmap+0x125/0x190 [ 1722.029198][T18590] do_syscall_64+0xcd/0x4c0 [ 1722.029220][T18590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.029235][T18590] RIP: 0033:0x7fd875d8eec9 [ 1722.029247][T18590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1722.029261][T18590] RSP: 002b:00007fd873fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1722.029276][T18590] RAX: ffffffffffffffda RBX: 00007fd875fe6090 RCX: 00007fd875d8eec9 [ 1722.029286][T18590] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1722.029295][T18590] RBP: 00007fd875e11f91 R08: 0000000000000008 R09: 0000300000000000 [ 1722.029305][T18590] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1722.029313][T18590] R13: 00007fd875fe6128 R14: 00007fd875fe6090 R15: 00007ffc899f8068 [ 1722.029331][T18590] [ 1722.434983][T18600] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1724.873309][T18721] sctp: [Deprecated]: syz.4.5800 (pid 18721) Use of int in max_burst socket option. [ 1724.873309][T18721] Use struct sctp_assoc_value instead [ 1725.385961][T18736] bond0: option all_slaves_active: invalid value () [ 1725.427897][T18738] bond0: option all_slaves_active: invalid value () [ 1726.228597][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1726.234898][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1728.174074][T18795] Process accounting resumed [ 1728.536635][T18820] FAULT_INJECTION: forcing a failure. [ 1728.536635][T18820] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.603608][T18820] CPU: 0 UID: 0 PID: 18820 Comm: syz.3.5809 Tainted: G U syzkaller #0 PREEMPT(full) [ 1728.603633][T18820] Tainted: [U]=USER [ 1728.603639][T18820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1728.603649][T18820] Call Trace: [ 1728.603654][T18820] [ 1728.603660][T18820] dump_stack_lvl+0x16c/0x1f0 [ 1728.603686][T18820] should_fail_ex+0x512/0x640 [ 1728.603708][T18820] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1728.603728][T18820] should_failslab+0xc2/0x120 [ 1728.603747][T18820] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1728.603764][T18820] ? prepare_creds+0x2c/0x7d0 [ 1728.603787][T18820] prepare_creds+0x2c/0x7d0 [ 1728.603808][T18820] __sys_setresgid+0x4af/0x1150 [ 1728.603828][T18820] do_syscall_64+0xcd/0x4c0 [ 1728.603850][T18820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.603865][T18820] RIP: 0033:0x7fd746d8eec9 [ 1728.603877][T18820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1728.603894][T18820] RSP: 002b:00007fd747c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 1728.603908][T18820] RAX: ffffffffffffffda RBX: 00007fd746fe6090 RCX: 00007fd746d8eec9 [ 1728.603917][T18820] RDX: 000000000000ee00 RSI: 000000000000ee01 RDI: 000000000000ee00 [ 1728.603926][T18820] RBP: 00007fd746e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1728.603935][T18820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1728.603943][T18820] R13: 00007fd746fe6128 R14: 00007fd746fe6090 R15: 00007fff0c6ca648 [ 1728.603961][T18820] [ 1729.149817][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5811'. [ 1729.994449][T10711] Bluetooth: hci3: unexpected subevent 0x01 length: 120 > 18 [ 1731.439796][T18939] net_ratelimit: 1 callbacks suppressed [ 1731.439810][T18939] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 1731.502921][T18939] netlink: 93 bytes leftover after parsing attributes in process `syz.4.5820'. [ 1731.740999][T18953] netlink: 'syz.4.5823': attribute type 10 has an invalid length. [ 1731.769118][T18953] netlink: 230 bytes leftover after parsing attributes in process `syz.4.5823'. [ 1731.862544][T18953] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1732.313431][T18958] netlink: set zone limit has 8 unknown bytes [ 1732.362202][T18961] TCP: TCP_TX_DELAY enabled [ 1733.007558][T18976] FAULT_INJECTION: forcing a failure. [ 1733.007558][T18976] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.253570][T18976] CPU: 0 UID: 0 PID: 18976 Comm: syz.0.5824 Tainted: G U syzkaller #0 PREEMPT(full) [ 1733.253598][T18976] Tainted: [U]=USER [ 1733.253609][T18976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1733.253619][T18976] Call Trace: [ 1733.253625][T18976] [ 1733.253631][T18976] dump_stack_lvl+0x16c/0x1f0 [ 1733.253657][T18976] should_fail_ex+0x512/0x640 [ 1733.253679][T18976] ? __kmalloc_noprof+0xbf/0x510 [ 1733.253698][T18976] ? lsm_blob_alloc+0x68/0x90 [ 1733.253710][T18976] should_failslab+0xc2/0x120 [ 1733.253729][T18976] __kmalloc_noprof+0xd2/0x510 [ 1733.253750][T18976] lsm_blob_alloc+0x68/0x90 [ 1733.253763][T18976] security_prepare_creds+0x30/0x270 [ 1733.253784][T18976] prepare_creds+0x56f/0x7d0 [ 1733.253806][T18976] __sys_setresgid+0x4af/0x1150 [ 1733.253826][T18976] do_syscall_64+0xcd/0x4c0 [ 1733.253848][T18976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.253863][T18976] RIP: 0033:0x7fe1ce98eec9 [ 1733.253875][T18976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1733.253889][T18976] RSP: 002b:00007fe1cf844038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 1733.253904][T18976] RAX: ffffffffffffffda RBX: 00007fe1cebe6090 RCX: 00007fe1ce98eec9 [ 1733.253913][T18976] RDX: 000000000000ee00 RSI: 000000000000ee01 RDI: 000000000000ee00 [ 1733.253922][T18976] RBP: 00007fe1cea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1733.253931][T18976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1733.253939][T18976] R13: 00007fe1cebe6128 R14: 00007fe1cebe6090 R15: 00007ffdf25ee838 [ 1733.253957][T18976] [ 1735.819815][T19073] dlm: non-version read from control device 19 [ 1736.229488][T19091] FAULT_INJECTION: forcing a failure. [ 1736.229488][T19091] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1736.269268][T19091] CPU: 0 UID: 0 PID: 19091 Comm: syz.4.5837 Tainted: G U syzkaller #0 PREEMPT(full) [ 1736.269295][T19091] Tainted: [U]=USER [ 1736.269300][T19091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1736.269309][T19091] Call Trace: [ 1736.269316][T19091] [ 1736.269322][T19091] dump_stack_lvl+0x16c/0x1f0 [ 1736.269351][T19091] should_fail_ex+0x512/0x640 [ 1736.269377][T19091] should_fail_alloc_page+0xe7/0x130 [ 1736.269399][T19091] prepare_alloc_pages+0x3c2/0x610 [ 1736.269420][T19091] ? rcu_is_watching+0x12/0xc0 [ 1736.269438][T19091] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1736.269456][T19091] ? __lock_acquire+0xb97/0x1ce0 [ 1736.269482][T19091] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1736.269499][T19091] ? do_raw_spin_lock+0x12c/0x2b0 [ 1736.269520][T19091] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1736.269541][T19091] ? find_held_lock+0x2b/0x80 [ 1736.269560][T19091] ? __lock_acquire+0xb97/0x1ce0 [ 1736.269578][T19091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1736.269601][T19091] ? policy_nodemask+0xea/0x4e0 [ 1736.269621][T19091] alloc_pages_mpol+0x1fb/0x550 [ 1736.269641][T19091] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1736.269664][T19091] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1736.269686][T19091] shmem_alloc_folio+0x135/0x160 [ 1736.269701][T19091] shmem_alloc_and_add_folio+0x499/0xc20 [ 1736.269722][T19091] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1736.269741][T19091] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1736.269761][T19091] shmem_get_folio_gfp+0x67f/0x1600 [ 1736.269782][T19091] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1736.269808][T19091] ? filemap_map_pages+0xf58/0x1670 [ 1736.269831][T19091] shmem_fault+0x1fe/0xa30 [ 1736.269849][T19091] ? __pfx_shmem_fault+0x10/0x10 [ 1736.269870][T19091] ? __pfx_filemap_map_pages+0x10/0x10 [ 1736.269893][T19091] ? __pfx_filemap_map_pages+0x10/0x10 [ 1736.269909][T19091] __do_fault+0x10d/0x490 [ 1736.269929][T19091] ? __pfx_filemap_map_pages+0x10/0x10 [ 1736.269946][T19091] do_pte_missing+0xf50/0x3ba0 [ 1736.269961][T19091] ? find_held_lock+0x2b/0x80 [ 1736.269976][T19091] ? __handle_mm_fault+0x14fd/0x2a50 [ 1736.269993][T19091] __handle_mm_fault+0x152a/0x2a50 [ 1736.270011][T19091] ? mt_find+0x3ef/0xa30 [ 1736.270025][T19091] ? __pfx___handle_mm_fault+0x10/0x10 [ 1736.270039][T19091] ? __pfx_mt_find+0x10/0x10 [ 1736.270062][T19091] ? find_vma+0xbf/0x140 [ 1736.270080][T19091] ? __pfx_find_vma+0x10/0x10 [ 1736.270100][T19091] handle_mm_fault+0x589/0xd10 [ 1736.270116][T19091] ? trace_raw_output_exceptions+0x131/0x150 [ 1736.270142][T19091] do_user_addr_fault+0x7a6/0x1370 [ 1736.270165][T19091] ? rcu_is_watching+0x12/0xc0 [ 1736.270182][T19091] exc_page_fault+0x5c/0xb0 [ 1736.270212][T19091] asm_exc_page_fault+0x26/0x30 [ 1736.270227][T19091] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1736.270245][T19091] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1736.270259][T19091] RSP: 0018:ffffc9000ee47a48 EFLAGS: 00050206 [ 1736.270272][T19091] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 1736.270282][T19091] RDX: 0000000000000000 RSI: 0000000000055000 RDI: ffff888040841000 [ 1736.270291][T19091] RBP: 0000000000055000 R08: 0000000000000001 R09: ffffed10081083ff [ 1736.270299][T19091] R10: ffff888040841fff R11: 0000000000000000 R12: ffffc9000ee47da0 [ 1736.270308][T19091] R13: 0000000000056000 R14: ffff888040841000 R15: 00007ffffffff000 [ 1736.270329][T19091] _copy_from_iter+0x383/0x1720 [ 1736.270346][T19091] ? anon_pipe_write+0x6f1/0x1a90 [ 1736.270363][T19091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1736.270387][T19091] ? __pfx__copy_from_iter+0x10/0x10 [ 1736.270403][T19091] ? alloc_pages_mpol+0x25a/0x550 [ 1736.270422][T19091] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1736.270444][T19091] copy_page_from_iter+0xde/0x180 [ 1736.270462][T19091] anon_pipe_write+0xbe7/0x1a90 [ 1736.270487][T19091] ? __pfx_anon_pipe_write+0x10/0x10 [ 1736.270505][T19091] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1736.270523][T19091] ? bpf_lsm_file_permission+0x9/0x10 [ 1736.270543][T19091] ? security_file_permission+0x71/0x210 [ 1736.270563][T19091] ? rw_verify_area+0xcf/0x6c0 [ 1736.270580][T19091] vfs_write+0x7d3/0x11d0 [ 1736.270596][T19091] ? __pfx_anon_pipe_write+0x10/0x10 [ 1736.270616][T19091] ? __pfx_vfs_write+0x10/0x10 [ 1736.270631][T19091] ? find_held_lock+0x2b/0x80 [ 1736.270656][T19091] ksys_write+0x1f8/0x250 [ 1736.270673][T19091] ? __pfx_ksys_write+0x10/0x10 [ 1736.270695][T19091] do_syscall_64+0xcd/0x4c0 [ 1736.270717][T19091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.270731][T19091] RIP: 0033:0x7fd875d8eec9 [ 1736.270743][T19091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1736.270757][T19091] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1736.270770][T19091] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1736.270779][T19091] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1736.270788][T19091] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1736.270796][T19091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1736.270805][T19091] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1736.270824][T19091] [ 1737.877090][T19120] FAULT_INJECTION: forcing a failure. [ 1737.877090][T19120] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.890578][T19122] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1737.932177][T19120] CPU: 0 UID: 0 PID: 19120 Comm: syz.4.5843 Tainted: G U syzkaller #0 PREEMPT(full) [ 1737.932205][T19120] Tainted: [U]=USER [ 1737.932210][T19120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1737.932220][T19120] Call Trace: [ 1737.932226][T19120] [ 1737.932232][T19120] dump_stack_lvl+0x16c/0x1f0 [ 1737.932258][T19120] should_fail_ex+0x512/0x640 [ 1737.932285][T19120] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1737.932308][T19120] should_failslab+0xc2/0x120 [ 1737.932327][T19120] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1737.932347][T19120] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1737.932369][T19120] kstrdup+0x53/0x100 [ 1737.932388][T19120] apply_subsystem_event_filter+0x47f/0x17e0 [ 1737.932412][T19120] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1737.932435][T19120] ? _copy_from_user+0x59/0xd0 [ 1737.932452][T19120] subsystem_filter_write+0x95/0x120 [ 1737.932472][T19120] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1737.932489][T19120] vfs_write+0x29d/0x11d0 [ 1737.932509][T19120] ? __pfx___mutex_lock+0x10/0x10 [ 1737.932530][T19120] ? __pfx_vfs_write+0x10/0x10 [ 1737.932551][T19120] ? __fget_files+0x20e/0x3c0 [ 1737.932573][T19120] ksys_write+0x12a/0x250 [ 1737.932589][T19120] ? __pfx_ksys_write+0x10/0x10 [ 1737.932611][T19120] do_syscall_64+0xcd/0x4c0 [ 1737.932633][T19120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.932648][T19120] RIP: 0033:0x7fd875d8eec9 [ 1737.932661][T19120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1737.932674][T19120] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1737.932689][T19120] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1737.932700][T19120] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 1737.932708][T19120] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1737.932717][T19120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1737.932726][T19120] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1737.932745][T19120] [ 1739.534577][T19147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1739.541217][T19147] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1739.559274][T19147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1739.589994][T19147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1739.610463][T19147] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1739.659891][T19147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1739.681232][T19147] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1739.709628][T19147] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1740.336411][T19188] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1740.501768][T19196] netlink: 'syz.4.5853': attribute type 11 has an invalid length. [ 1740.525330][T19196] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5853'. [ 1740.859743][T18883] Bluetooth: hci0: command 0x0c1a tx timeout [ 1740.991661][T19209] random: crng reseeded on system resumption [ 1741.513264][T19205] zswap: compressor not available [ 1741.574431][T18883] Bluetooth: hci2: command 0x0406 tx timeout [ 1741.580488][T11565] Bluetooth: hci4: command 0x0406 tx timeout [ 1741.656782][T18883] Bluetooth: hci1: command 0x0c1a tx timeout [ 1741.662851][T18883] Bluetooth: hci3: command 0x0406 tx timeout [ 1741.972750][ T30] audit: type=1804 audit(4294968657.271:74): pid=19259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5858" name="/newroot/94/file0" dev="tmpfs" ino=514 res=1 errno=0 [ 1742.421532][T11455] usb usb38-port5: attempt power cycle [ 1743.117372][T11455] usb usb38-port5: unable to enumerate USB device [ 1743.286400][T19260] vhci_hcd: invalid port number 23 [ 1743.291552][T19260] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 1743.734259][T18883] Bluetooth: hci3: command 0x0406 tx timeout [ 1743.740300][T18883] Bluetooth: hci1: command 0x0c1a tx timeout [ 1744.442523][T19349] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 1744.442523][T19349] program syz.0.5866 not setting count and/or reply_len properly [ 1745.118294][T19358] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input98 [ 1745.794559][T18883] Bluetooth: hci1: command 0x0c1a tx timeout [ 1748.661099][T18883] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1748.667594][T11565] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1757.451397][T19349] netlink: 294 bytes leftover after parsing attributes in process `syz.0.5866'. [ 1758.808869][T19407] Process accounting paused [ 1759.012873][T19439] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 1759.012873][T19439] M' is too long [ 1759.054820][T19439] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 1759.054820][T19439] W ' is too long [ 1759.806550][T19482] random: crng reseeded on system resumption [ 1764.638985][T19510] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1765.270053][T19520] netlink: 'syz.6.5891': attribute type 1 has an invalid length. [ 1766.400139][T19546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5897'. [ 1766.557889][T19556] netlink: 93 bytes leftover after parsing attributes in process `syz.0.5897'. [ 1766.880090][T19565] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1767.358714][T19579] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5900'. [ 1768.543884][T19602] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1776.031887][T19608] netlink: 334 bytes leftover after parsing attributes in process `syz.4.5907'. [ 1781.537882][T19764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5918'. [ 1782.482998][T19813] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5919'. [ 1782.669232][T19817] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5919'. [ 1783.925090][T19848] FAULT_INJECTION: forcing a failure. [ 1783.925090][T19848] name failslab, interval 1, probability 0, space 0, times 0 [ 1783.955299][T19848] CPU: 0 UID: 0 PID: 19848 Comm: syz.4.5928 Tainted: G U syzkaller #0 PREEMPT(full) [ 1783.955326][T19848] Tainted: [U]=USER [ 1783.955332][T19848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1783.955342][T19848] Call Trace: [ 1783.955350][T19848] [ 1783.955358][T19848] dump_stack_lvl+0x16c/0x1f0 [ 1783.955388][T19848] should_fail_ex+0x512/0x640 [ 1783.955417][T19848] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1783.955435][T19848] should_failslab+0xc2/0x120 [ 1783.955454][T19848] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1783.955470][T19848] ? trace_pid_list_alloc+0x27c/0x3f0 [ 1783.955492][T19848] trace_pid_list_alloc+0x27c/0x3f0 [ 1783.955512][T19848] trace_pid_write+0x10c/0x4b0 [ 1783.955534][T19848] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1783.955562][T19848] ? __pfx_trace_pid_write+0x10/0x10 [ 1783.955581][T19848] ? __pfx___mutex_lock+0x10/0x10 [ 1783.955602][T19848] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1783.955642][T19848] ? update_last_data+0xb3/0x510 [ 1783.955668][T19848] event_pid_write.isra.0+0x3f7/0x7f0 [ 1783.955689][T19848] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1783.955714][T19848] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 1783.955733][T19848] vfs_writev+0x5df/0xde0 [ 1783.955754][T19848] ? __pfx_vfs_writev+0x10/0x10 [ 1783.955768][T19848] ? __mutex_lock+0x1c5/0x1060 [ 1783.955794][T19848] ? __pfx___mutex_lock+0x10/0x10 [ 1783.955822][T19848] ? __fget_files+0x20e/0x3c0 [ 1783.955843][T19848] ? do_writev+0x132/0x340 [ 1783.955856][T19848] do_writev+0x132/0x340 [ 1783.955871][T19848] ? __pfx_do_writev+0x10/0x10 [ 1783.955892][T19848] do_syscall_64+0xcd/0x4c0 [ 1783.955915][T19848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1783.955931][T19848] RIP: 0033:0x7fd875d8eec9 [ 1783.955943][T19848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1783.955958][T19848] RSP: 002b:00007fd873ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1783.955973][T19848] RAX: ffffffffffffffda RBX: 00007fd875fe5fa0 RCX: 00007fd875d8eec9 [ 1783.955983][T19848] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1783.955992][T19848] RBP: 00007fd875e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1783.956000][T19848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1783.956009][T19848] R13: 00007fd875fe6038 R14: 00007fd875fe5fa0 R15: 00007ffc899f8068 [ 1783.956028][T19848] [ 1784.275938][T19851] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 1786.966327][T19957] FAULT_INJECTION: forcing a failure. [ 1786.966327][T19957] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.014199][T19957] CPU: 0 UID: 0 PID: 19957 Comm: syz.3.5938 Tainted: G U syzkaller #0 PREEMPT(full) [ 1787.014231][T19957] Tainted: [U]=USER [ 1787.014237][T19957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1787.014247][T19957] Call Trace: [ 1787.014253][T19957] [ 1787.014260][T19957] dump_stack_lvl+0x16c/0x1f0 [ 1787.014288][T19957] should_fail_ex+0x512/0x640 [ 1787.014311][T19957] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1787.014334][T19957] should_failslab+0xc2/0x120 [ 1787.014354][T19957] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1787.014369][T19957] ? mpi_alloc+0x46/0x230 [ 1787.014389][T19957] mpi_alloc+0x46/0x230 [ 1787.014405][T19957] rsa_check_payload+0x3b/0xc0 [ 1787.014422][T19957] rsa_enc+0x198/0x3b0 [ 1787.014438][T19957] ? __pfx_rsa_enc+0x10/0x10 [ 1787.014453][T19957] ? __virt_addr_valid+0x81/0x610 [ 1787.014470][T19957] ? __phys_addr+0xe8/0x180 [ 1787.014486][T19957] ? sg_init_one+0xf5/0x1b0 [ 1787.014508][T19957] rsassa_pkcs1_verify+0x4ff/0xb60 [ 1787.014532][T19957] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 1787.014560][T19957] ? rsa_max_size+0xd/0x70 [ 1787.014573][T19957] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 1787.014593][T19957] public_key_verify_signature+0x672/0x970 [ 1787.014613][T19957] ? __pfx_public_key_verify_signature+0x10/0x10 [ 1787.014645][T19957] x509_check_for_self_signed+0x31a/0x500 [ 1787.014666][T19957] x509_cert_parse+0x5f8/0x900 [ 1787.014682][T19957] ? kasan_save_stack+0x42/0x60 [ 1787.014697][T19957] ? kasan_save_stack+0x33/0x60 [ 1787.014712][T19957] ? kasan_save_track+0x14/0x30 [ 1787.014729][T19957] pkcs7_extract_cert+0xa4/0x320 [ 1787.014750][T19957] asn1_ber_decoder+0xc5f/0x1df0 [ 1787.014774][T19957] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 1787.014802][T19957] pkcs7_parse_message+0x288/0x720 [ 1787.014824][T19957] verify_pkcs7_signature+0x30/0xa0 [ 1787.014846][T19957] valid_regdb+0x211/0x590 [ 1787.014867][T19957] ? __pfx___mutex_lock+0x10/0x10 [ 1787.014890][T19957] ? __pfx_valid_regdb+0x10/0x10 [ 1787.014915][T19957] reg_reload_regdb+0x11a/0x460 [ 1787.014930][T19957] ? __pfx_reg_reload_regdb+0x10/0x10 [ 1787.014945][T19957] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1787.014961][T19957] ? nl80211_pre_doit+0x1b0/0xb10 [ 1787.014981][T19957] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1787.014999][T19957] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1787.015013][T19957] ? rcu_is_watching+0x12/0xc0 [ 1787.015035][T19957] ? bpf_lsm_capable+0x9/0x10 [ 1787.015049][T19957] ? security_capable+0x7e/0x260 [ 1787.015075][T19957] genl_rcv_msg+0x55c/0x800 [ 1787.015093][T19957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1787.015109][T19957] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1787.015127][T19957] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1787.015150][T19957] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1787.015170][T19957] netlink_rcv_skb+0x158/0x420 [ 1787.015199][T19957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1787.015216][T19957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1787.015247][T19957] ? netlink_deliver_tap+0x1ae/0xd30 [ 1787.015271][T19957] genl_rcv+0x28/0x40 [ 1787.015283][T19957] netlink_unicast+0x5a7/0x870 [ 1787.015307][T19957] ? __pfx_netlink_unicast+0x10/0x10 [ 1787.015329][T19957] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1787.015349][T19957] ? __lock_acquire+0xb97/0x1ce0 [ 1787.015373][T19957] netlink_sendmsg+0x8d1/0xdd0 [ 1787.015397][T19957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1787.015420][T19957] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1787.015439][T19957] ____sys_sendmsg+0xa98/0xc70 [ 1787.015456][T19957] ? copy_msghdr_from_user+0x10a/0x160 [ 1787.015477][T19957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1787.015497][T19957] ? __pfx_futex_wake_mark+0x10/0x10 [ 1787.015521][T19957] ___sys_sendmsg+0x134/0x1d0 [ 1787.015543][T19957] ? __pfx____sys_sendmsg+0x10/0x10 [ 1787.015587][T19957] __sys_sendmsg+0x16d/0x220 [ 1787.015608][T19957] ? __pfx___sys_sendmsg+0x10/0x10 [ 1787.015628][T19957] ? __x64_sys_futex+0x1e0/0x4c0 [ 1787.015656][T19957] do_syscall_64+0xcd/0x4c0 [ 1787.015679][T19957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.015694][T19957] RIP: 0033:0x7fd746d8eec9 [ 1787.015708][T19957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1787.015722][T19957] RSP: 002b:00007fd747c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1787.015736][T19957] RAX: ffffffffffffffda RBX: 00007fd746fe6090 RCX: 00007fd746d8eec9 [ 1787.015747][T19957] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 1787.015756][T19957] RBP: 00007fd746e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1787.015765][T19957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1787.015774][T19957] R13: 00007fd746fe6128 R14: 00007fd746fe6090 R15: 00007fff0c6ca648 [ 1787.015793][T19957] [ 1788.097909][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1788.105282][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1789.587866][T19977] Process accounting resumed [ 1790.099040][T20026] random: crng reseeded on system resumption [ 1790.164775][T20026] FAULT_INJECTION: forcing a failure. [ 1790.164775][T20026] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.285861][T20026] CPU: 0 UID: 0 PID: 20026 Comm: syz.3.5949 Tainted: G U syzkaller #0 PREEMPT(full) [ 1790.285890][T20026] Tainted: [U]=USER [ 1790.285896][T20026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1790.285909][T20026] Call Trace: [ 1790.285917][T20026] [ 1790.285924][T20026] dump_stack_lvl+0x16c/0x1f0 [ 1790.285953][T20026] should_fail_ex+0x512/0x640 [ 1790.285979][T20026] should_failslab+0xc2/0x120 [ 1790.286001][T20026] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1790.286016][T20026] ? do_raw_spin_lock+0x12c/0x2b0 [ 1790.286041][T20026] ? find_held_lock+0x2b/0x80 [ 1790.286054][T20026] ? async_schedule_node_domain+0x54/0x120 [ 1790.286075][T20026] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1790.286100][T20026] async_schedule_node_domain+0x54/0x120 [ 1790.286120][T20026] dev_cache_fw_image+0x38e/0x490 [ 1790.286142][T20026] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1790.286166][T20026] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1790.286186][T20026] dpm_for_each_dev+0x5d/0xb0 [ 1790.286205][T20026] fw_pm_notify+0x81/0x150 [ 1790.286222][T20026] notifier_call_chain+0xb9/0x410 [ 1790.286240][T20026] ? __pfx_fw_pm_notify+0x10/0x10 [ 1790.286262][T20026] blocking_notifier_call_chain_robust+0xc8/0x160 [ 1790.286283][T20026] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 1790.286310][T20026] pm_notifier_call_chain_robust+0x27/0x60 [ 1790.286331][T20026] snapshot_open+0x218/0x2b0 [ 1790.286348][T20026] ? __pfx_snapshot_open+0x10/0x10 [ 1790.286366][T20026] misc_open+0x35a/0x420 [ 1790.286385][T20026] ? __pfx_misc_open+0x10/0x10 [ 1790.286401][T20026] chrdev_open+0x231/0x6a0 [ 1790.286420][T20026] ? __pfx_apparmor_file_open+0x10/0x10 [ 1790.286438][T20026] ? __pfx_chrdev_open+0x10/0x10 [ 1790.286458][T20026] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1790.286479][T20026] do_dentry_open+0x97f/0x1530 [ 1790.286498][T20026] ? __pfx_chrdev_open+0x10/0x10 [ 1790.286521][T20026] vfs_open+0x82/0x3f0 [ 1790.286550][T20026] path_openat+0x1de4/0x2cb0 [ 1790.286575][T20026] ? __pfx_path_openat+0x10/0x10 [ 1790.286599][T20026] do_filp_open+0x20b/0x470 [ 1790.286617][T20026] ? __pfx_do_filp_open+0x10/0x10 [ 1790.286650][T20026] ? alloc_fd+0x471/0x7d0 [ 1790.286684][T20026] do_sys_openat2+0x11b/0x1d0 [ 1790.286707][T20026] ? __pfx_do_sys_openat2+0x10/0x10 [ 1790.286739][T20026] __x64_sys_openat+0x174/0x210 [ 1790.286754][T20026] ? __pfx___x64_sys_openat+0x10/0x10 [ 1790.286778][T20026] do_syscall_64+0xcd/0x4c0 [ 1790.286802][T20026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.286818][T20026] RIP: 0033:0x7fd746d8eec9 [ 1790.286832][T20026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1790.286848][T20026] RSP: 002b:00007fd747ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1790.286864][T20026] RAX: ffffffffffffffda RBX: 00007fd746fe5fa0 RCX: 00007fd746d8eec9 [ 1790.286874][T20026] RDX: 0000000000080643 RSI: 0000200000001940 RDI: ffffffffffffff9c [ 1790.286885][T20026] RBP: 00007fd746e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1790.286895][T20026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1790.286906][T20026] R13: 00007fd746fe6038 R14: 00007fd746fe5fa0 R15: 00007fff0c6ca648 [ 1790.286930][T20026] [ 1791.528843][T20026] [ 1791.531388][T20026] ====================================================== [ 1791.541202][T20026] WARNING: possible circular locking dependency detected [ 1791.549398][T20026] syzkaller #0 Tainted: G U [ 1791.555750][T20026] ------------------------------------------------------ [ 1791.563131][T20026] syz.3.5949/20026 is trying to acquire lock: [ 1791.569567][T20026] ffff88807d585288 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7e0/0x23e0 [ 1791.581943][T20026] [ 1791.581943][T20026] but task is already holding lock: [ 1791.591031][T20026] ffffffff8f518668 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 1791.601686][T20026] [ 1791.601686][T20026] which lock already depends on the new lock. [ 1791.601686][T20026] [ 1791.615156][T20026] [ 1791.615156][T20026] the existing dependency chain (in reverse order) is: [ 1791.625583][T20026] [ 1791.625583][T20026] -> #4 (dpm_list_mtx){+.+.}-{4:4}: [ 1791.633435][T20026] __mutex_lock+0x193/0x1060 [ 1791.639020][T20026] device_pm_add+0x87/0x3e0 [ 1791.644111][T20026] device_add+0x9cd/0x1aa0 [ 1791.650443][T20026] device_create_groups_vargs+0x1f8/0x270 [ 1791.656713][T20026] device_create+0xed/0x130 [ 1791.661830][T20026] sound_insert_unit.constprop.0+0x58e/0x6d0 [ 1791.668967][T20026] register_sound_special_device+0x117/0x460 [ 1791.676371][T20026] snd_register_oss_device+0x2b0/0x5b0 [ 1791.682395][T20026] alsa_seq_oss_init+0x31/0x2e0 [ 1791.688083][T20026] do_one_initcall+0x120/0x6e0 [ 1791.693823][T20026] kernel_init_freeable+0x5c2/0x910 [ 1791.699580][T20026] kernel_init+0x1c/0x2b0 [ 1791.704606][T20026] ret_from_fork+0x56d/0x730 [ 1791.710823][T20026] ret_from_fork_asm+0x1a/0x30 [ 1791.717090][T20026] [ 1791.717090][T20026] -> #3 (sound_oss_mutex){+.+.}-{4:4}: [ 1791.725096][T20026] __mutex_lock+0x193/0x1060 [ 1791.730630][T20026] snd_lookup_oss_minor_data+0x41/0x1b0 [ 1791.736716][T20026] snd_pcm_oss_open+0x197/0x1400 [ 1791.742204][T20026] soundcore_open+0x40c/0x580 [ 1791.747597][T20026] chrdev_open+0x231/0x6a0 [ 1791.752816][T20026] do_dentry_open+0x97f/0x1530 [ 1791.758170][T20026] vfs_open+0x82/0x3f0 [ 1791.762777][T20026] path_openat+0x1de4/0x2cb0 [ 1791.770703][T20026] do_filp_open+0x20b/0x470 [ 1791.776100][T20026] file_open_name+0x2a3/0x450 [ 1791.784647][T20026] filp_open+0x4b/0x80 [ 1791.790526][T20026] target_core_item_dbroot_store+0x108/0x350 [ 1791.797928][T20026] configfs_write_iter+0x303/0x4e0 [ 1791.804320][T20026] vfs_write+0x7d3/0x11d0 [ 1791.809218][T20026] ksys_write+0x12a/0x250 [ 1791.814431][T20026] do_syscall_64+0xcd/0x4c0 [ 1791.819762][T20026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.827323][T20026] [ 1791.827323][T20026] -> #2 (target_devices_lock){+.+.}-{4:4}: [ 1791.835821][T20026] __mutex_lock+0x193/0x1060 [ 1791.841307][T20026] target_core_item_dbroot_store+0x21/0x350 [ 1791.848383][T20026] configfs_write_iter+0x303/0x4e0 [ 1791.854120][T20026] vfs_write+0x7d3/0x11d0 [ 1791.860304][T20026] ksys_write+0x12a/0x250 [ 1791.865875][T20026] do_syscall_64+0xcd/0x4c0 [ 1791.871258][T20026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.878186][T20026] [ 1791.878186][T20026] -> #1 (&p->frag_sem){.+.+}-{4:4}: [ 1791.886248][T20026] down_read+0x9b/0x480 [ 1791.893897][T20026] __configfs_open_file+0xe8/0x9c0 [ 1791.900358][T20026] do_dentry_open+0x97f/0x1530 [ 1791.907050][T20026] vfs_open+0x82/0x3f0 [ 1791.912270][T20026] dentry_open+0x71/0xd0 [ 1791.917974][T20026] ima_calc_file_hash+0x2b6/0x490 [ 1791.924652][T20026] ima_collect_measurement+0x899/0xa40 [ 1791.933380][T20026] process_measurement+0x11fa/0x23e0 [ 1791.940754][T20026] ima_file_check+0xc5/0x110 [ 1791.948780][T20026] security_file_post_open+0x8e/0x210 [ 1791.956521][T20026] path_openat+0x1404/0x2cb0 [ 1791.962043][T20026] do_filp_open+0x20b/0x470 [ 1791.968768][T20026] do_sys_openat2+0x11b/0x1d0 [ 1791.975166][T20026] __x64_sys_openat+0x174/0x210 [ 1791.981345][T20026] do_syscall_64+0xcd/0x4c0 [ 1791.987000][T20026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.994075][T20026] [ 1791.994075][T20026] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1792.003494][T20026] __lock_acquire+0x12a6/0x1ce0 [ 1792.010256][T20026] lock_acquire+0x179/0x350 [ 1792.015414][T20026] __mutex_lock+0x193/0x1060 [ 1792.020897][T20026] process_measurement+0x7e0/0x23e0 [ 1792.027278][T20026] ima_file_check+0xc5/0x110 [ 1792.033387][T20026] security_file_post_open+0x8e/0x210 [ 1792.041203][T20026] path_openat+0x1404/0x2cb0 [ 1792.047321][T20026] do_file_open_root+0x322/0x610 [ 1792.053826][T20026] file_open_root+0x2a7/0x450 [ 1792.059667][T20026] kernel_read_file_from_path_initns+0x189/0x260 [ 1792.066895][T20026] _request_firmware+0x744/0x1470 [ 1792.073115][T20026] __async_dev_cache_fw_image+0xb1/0x340 [ 1792.080233][T20026] async_schedule_node_domain+0xd4/0x120 [ 1792.086677][T20026] dev_cache_fw_image+0x38e/0x490 [ 1792.092264][T20026] dpm_for_each_dev+0x5d/0xb0 [ 1792.097461][T20026] fw_pm_notify+0x81/0x150 [ 1792.102834][T20026] notifier_call_chain+0xb9/0x410 [ 1792.108497][T20026] blocking_notifier_call_chain_robust+0xc8/0x160 [ 1792.115737][T20026] pm_notifier_call_chain_robust+0x27/0x60 [ 1792.122427][T20026] snapshot_open+0x218/0x2b0 [ 1792.127544][T20026] misc_open+0x35a/0x420 [ 1792.133012][T20026] chrdev_open+0x231/0x6a0 [ 1792.138605][T20026] do_dentry_open+0x97f/0x1530 [ 1792.144014][T20026] vfs_open+0x82/0x3f0 [ 1792.149010][T20026] path_openat+0x1de4/0x2cb0 [ 1792.154710][T20026] do_filp_open+0x20b/0x470 [ 1792.159946][T20026] do_sys_openat2+0x11b/0x1d0 [ 1792.165290][T20026] __x64_sys_openat+0x174/0x210 [ 1792.170768][T20026] do_syscall_64+0xcd/0x4c0 [ 1792.176163][T20026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.182644][T20026] [ 1792.182644][T20026] other info that might help us debug this: [ 1792.182644][T20026] [ 1792.193141][T20026] Chain exists of: [ 1792.193141][T20026] &ima_iint_mutex_key[depth] --> sound_oss_mutex --> dpm_list_mtx [ 1792.193141][T20026] [ 1792.207423][T20026] Possible unsafe locking scenario: [ 1792.207423][T20026] [ 1792.215572][T20026] CPU0 CPU1 [ 1792.221314][T20026] ---- ---- [ 1792.227382][T20026] lock(dpm_list_mtx); [ 1792.231551][T20026] lock(sound_oss_mutex); [ 1792.239136][T20026] lock(dpm_list_mtx); [ 1792.246196][T20026] lock(&ima_iint_mutex_key[depth]); [ 1792.251660][T20026] [ 1792.251660][T20026] *** DEADLOCK *** [ 1792.251660][T20026] [ 1792.260097][T20026] 5 locks held by syz.3.5949/20026: [ 1792.265665][T20026] #0: ffffffff8f3080e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1792.274491][T20026] #1: ffffffff8e484b88 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 1792.287832][T20026] #2: ffffffff8e4c4ff0 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 1792.300874][T20026] #3: ffffffff8f51dc68 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 1792.310730][T20026] #4: ffffffff8f518668 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 1792.322051][T20026] [ 1792.322051][T20026] stack backtrace: [ 1792.328565][T20026] CPU: 0 UID: 0 PID: 20026 Comm: syz.3.5949 Tainted: G U syzkaller #0 PREEMPT(full) [ 1792.328590][T20026] Tainted: [U]=USER [ 1792.328595][T20026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1792.328605][T20026] Call Trace: [ 1792.328614][T20026] [ 1792.328622][T20026] dump_stack_lvl+0x116/0x1f0 [ 1792.328651][T20026] print_circular_bug+0x275/0x350 [ 1792.328671][T20026] check_noncircular+0x14c/0x170 [ 1792.328690][T20026] __lock_acquire+0x12a6/0x1ce0 [ 1792.328750][T20026] lock_acquire+0x179/0x350 [ 1792.328768][T20026] ? process_measurement+0x7e0/0x23e0 [ 1792.328785][T20026] ? __pfx___might_resched+0x10/0x10 [ 1792.328802][T20026] ? process_measurement+0x7e0/0x23e0 [ 1792.328815][T20026] __mutex_lock+0x193/0x1060 [ 1792.328837][T20026] ? process_measurement+0x7e0/0x23e0 [ 1792.328854][T20026] ? __pfx___mutex_lock+0x10/0x10 [ 1792.328874][T20026] ? __pfx___might_resched+0x10/0x10 [ 1792.328889][T20026] ? find_held_lock+0x2b/0x80 [ 1792.328903][T20026] ? down_write+0x14d/0x200 [ 1792.328917][T20026] ? process_measurement+0x7e0/0x23e0 [ 1792.328931][T20026] process_measurement+0x7e0/0x23e0 [ 1792.328949][T20026] ? __pfx_process_measurement+0x10/0x10 [ 1792.328965][T20026] ? find_held_lock+0x2b/0x80 [ 1792.328978][T20026] ? fscrypt_file_open+0x47c/0x590 [ 1792.329003][T20026] ? __pfx___fsnotify_parent+0x10/0x10 [ 1792.329018][T20026] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1792.329035][T20026] ima_file_check+0xc5/0x110 [ 1792.329051][T20026] ? __pfx_ima_file_check+0x10/0x10 [ 1792.329065][T20026] ? vfs_open+0x2e3/0x3f0 [ 1792.329086][T20026] security_file_post_open+0x8e/0x210 [ 1792.329108][T20026] path_openat+0x1404/0x2cb0 [ 1792.329127][T20026] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1792.329149][T20026] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1792.329166][T20026] ? __pfx_path_openat+0x10/0x10 [ 1792.329182][T20026] ? __asan_memcpy+0x3c/0x60 [ 1792.329197][T20026] do_file_open_root+0x322/0x610 [ 1792.329215][T20026] ? __pfx_do_file_open_root+0x10/0x10 [ 1792.329239][T20026] ? vsnprintf+0x318/0x1160 [ 1792.329260][T20026] file_open_root+0x2a7/0x450 [ 1792.329278][T20026] ? __pfx_file_open_root+0x10/0x10 [ 1792.329294][T20026] ? find_held_lock+0x2b/0x80 [ 1792.329308][T20026] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 1792.329332][T20026] kernel_read_file_from_path_initns+0x189/0x260 [ 1792.329354][T20026] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 1792.329375][T20026] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1792.329395][T20026] ? _request_firmware+0x503/0x1470 [ 1792.329417][T20026] _request_firmware+0x744/0x1470 [ 1792.329439][T20026] ? __pfx__request_firmware+0x10/0x10 [ 1792.329461][T20026] ? dump_stack_lvl+0x1a3/0x1f0 [ 1792.329486][T20026] __async_dev_cache_fw_image+0xb1/0x340 [ 1792.329507][T20026] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1792.329527][T20026] ? mark_held_locks+0x49/0x80 [ 1792.329544][T20026] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1792.329564][T20026] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1792.329585][T20026] async_schedule_node_domain+0xd4/0x120 [ 1792.329604][T20026] dev_cache_fw_image+0x38e/0x490 [ 1792.329623][T20026] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1792.329642][T20026] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1792.329660][T20026] dpm_for_each_dev+0x5d/0xb0 [ 1792.329678][T20026] fw_pm_notify+0x81/0x150 [ 1792.329700][T20026] notifier_call_chain+0xb9/0x410 [ 1792.329718][T20026] ? __pfx_fw_pm_notify+0x10/0x10 [ 1792.329736][T20026] blocking_notifier_call_chain_robust+0xc8/0x160 [ 1792.329756][T20026] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 1792.329778][T20026] pm_notifier_call_chain_robust+0x27/0x60 [ 1792.329799][T20026] snapshot_open+0x218/0x2b0 [ 1792.329816][T20026] ? __pfx_snapshot_open+0x10/0x10 [ 1792.329833][T20026] misc_open+0x35a/0x420 [ 1792.329851][T20026] ? __pfx_misc_open+0x10/0x10 [ 1792.329867][T20026] chrdev_open+0x231/0x6a0 [ 1792.329885][T20026] ? __pfx_apparmor_file_open+0x10/0x10 [ 1792.329902][T20026] ? __pfx_chrdev_open+0x10/0x10 [ 1792.329920][T20026] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1792.329937][T20026] do_dentry_open+0x97f/0x1530 [ 1792.329954][T20026] ? __pfx_chrdev_open+0x10/0x10 [ 1792.329973][T20026] vfs_open+0x82/0x3f0 [ 1792.329994][T20026] path_openat+0x1de4/0x2cb0 [ 1792.330013][T20026] ? __pfx_path_openat+0x10/0x10 [ 1792.330031][T20026] do_filp_open+0x20b/0x470 [ 1792.330047][T20026] ? __pfx_do_filp_open+0x10/0x10 [ 1792.330069][T20026] ? alloc_fd+0x471/0x7d0 [ 1792.330086][T20026] do_sys_openat2+0x11b/0x1d0 [ 1792.330106][T20026] ? __pfx_do_sys_openat2+0x10/0x10 [ 1792.330130][T20026] __x64_sys_openat+0x174/0x210 [ 1792.330143][T20026] ? __pfx___x64_sys_openat+0x10/0x10 [ 1792.330159][T20026] do_syscall_64+0xcd/0x4c0 [ 1792.330181][T20026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.330197][T20026] RIP: 0033:0x7fd746d8eec9 [ 1792.330211][T20026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1792.330225][T20026] RSP: 002b:00007fd747ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1792.330241][T20026] RAX: ffffffffffffffda RBX: 00007fd746fe5fa0 RCX: 00007fd746d8eec9 [ 1792.330251][T20026] RDX: 0000000000080643 RSI: 0000200000001940 RDI: ffffffffffffff9c [ 1792.330260][T20026] RBP: 00007fd746e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1792.330270][T20026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1792.330278][T20026] R13: 00007fd746fe6038 R14: 00007fd746fe5fa0 R15: 00007fff0c6ca648 [ 1792.330292][T20026] [ 1796.260709][T20026] (NULL device *): loading /lib/firmware/regulatory.db failed with error -12 [ 1796.279011][T20026] (NULL device *): Direct firmware load for regulatory.db failed with error -12 [ 1796.303997][T20026] (NULL device *): Falling back to sysfs fallback for: regulatory.db