last executing test programs: 12m47.003102567s ago: executing program 0 (id=263): read$auto(0xffffffffffffffff, 0x0, 0x401) socket(0x1d, 0xa, 0x80004) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0xff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x460643, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x60a301, 0x0) timer_create$auto(0xffffffff, 0x0, &(0x7f0000001980)=0x80000000) socket(0xa, 0x3, 0x3a) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x1) 12m46.020387992s ago: executing program 0 (id=268): r0 = socket(0x1a, 0x1, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r0, 0x7ffe) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x301, 0x70bd29, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44010) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) unshare$auto(0x40000080) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4010ae68, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 12m44.542960159s ago: executing program 0 (id=273): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r0, 0xab0a, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) rt_sigtimedwait$auto(&(0x7f0000000040)={0x4}, &(0x7f0000000180)={@_si_pad}, &(0x7f0000000240)={0x3, 0x2}, 0x8) sysinfo$auto(&(0x7f0000000100)={0x4, [0x3, 0xe, 0x100], 0x200, 0xa4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x0, 0x80000000000003, 0x7, 0x219}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) execveat$auto(r2, 0x0, &(0x7f00000000c0)=&(0x7f0000000340)='/sys/kerneh/deync\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdc\xb3\"\xd4=e\x13\xb2T\xd9\xf4\xc2\\vxI\xf0\x06W\x96\xc1\xf1\xb8$\xb8(\xe2\x13\xde9d\x8c\xf8\"y\xce\xf0t\x98\x1d2w#\xa7\x0f\xf0\xce\x9akS\x0f]\xf7\xbdT\xe8J\x1b\x18\x03-6\x11\x16\xc14sz\xbcR\"\x83\x1eOcM%\x85\x1c@2\x81\xe2\xd3\xe6\x0e\x82\xbd\xa4\xc1\x92\xb0\x16\x11\x90@\xf2\xa8Q<\x10\x99\xfcTb\xf5\x01\x8c\xad\x85\x9b\xf1z\xa2\xa5OM\xca`#\xa6!\xb7\x12\xbd\x05f\b^\xff\x8e+\x84\x8c\xd9\xd8\x9eF;\xe2\x92\xfac\x04\x11K\x86s6eP\x03^\xd4\xc9\x11\xc29\xc5\x86F\xc9l-\x87\vV\x85\xac\xc1,\xff1[\x8fR\r\xe3\xee\x1e\x88\x1b\x00\xf0^\x91\xf8qYQ/\xb4\x06\x06\x18f', 0x0, 0x7cc9) mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x4000000000808000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = socket(0x2, 0x801, 0x106) getsockopt$auto(r4, 0x6, 0x21, 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0xe8) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r5, 0x28000) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) 12m43.17864333s ago: executing program 0 (id=277): socket(0x21, 0x80003, 0xf) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x44040}, 0x8040) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x41, 0x0) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) write$auto(r0, 0x0, 0x2fb) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 12m42.115659232s ago: executing program 0 (id=282): r0 = socket(0x1a, 0x1, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r0, 0x7ffe) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(r1, &(0x7f0000000000)="82444873bbf91b96ffdfb35f308f22427e58e70a70d1bf6cedd0ea970f74046974e61bea1ff9c74955b022620639802510daa8ab26696992e019051015a4553e9e1c52cf2c48395b665407fd380523c56f94a191faa6fe62f0b701348995fa783e7d9f1a5e185850794b167dc153e760433cd4014eb9e2072333c882f6a50b4c3fd1726d513115f4cae12f3c", 0x2b, 0x1, &(0x7f00000001c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x1c00000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x301, 0x70bd29, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44010) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) unshare$auto(0x40000080) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4010ae68, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 12m41.47646533s ago: executing program 0 (id=286): read$auto(0xffffffffffffffff, 0x0, 0x401) socket(0x18, 0xa, 0x4) mmap$auto(0x0, 0x40000000000004, 0x4, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f42) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd13/poll_stat\x00', 0x1, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x460f, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x61a381, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x5, 0x10002020007, 0xfffffffffffffffb, 0x16, r4, 0x4) prctl$auto(0x4, 0x5, 0x2009, 0x7, 0x1) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/numa_maps\x00', 0x60200, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r5, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) 12m26.178921622s ago: executing program 32 (id=286): read$auto(0xffffffffffffffff, 0x0, 0x401) socket(0x18, 0xa, 0x4) mmap$auto(0x0, 0x40000000000004, 0x4, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f42) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd13/poll_stat\x00', 0x1, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x460f, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x61a381, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x5, 0x10002020007, 0xfffffffffffffffb, 0x16, r4, 0x4) prctl$auto(0x4, 0x5, 0x2009, 0x7, 0x1) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/numa_maps\x00', 0x60200, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r5, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) 2m32.961248916s ago: executing program 3 (id=2522): mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) sendfile$auto(0x1, r0, 0x0, 0x7ffff000) (async) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) write$auto(0x3, 0x0, 0xfffffdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) (async) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r1, &(0x7f0000000080)=""/78, 0x4e) read$auto_full_fops_mem(r1, &(0x7f0000000000)=""/12, 0xc) (async) shutdown$auto(0x200000003, 0x2) (async) ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f00000004c0)={@config_section=&(0x7f0000000440)={"00b4c63748a1d903ae89c8bdc28973abfa4bdcf07b3f056578ce3ee7195255a6227262d4f902a270e9d355a5a61075e9d44f0325278ed00ed2cd58cf9ad83a2e", @params=&(0x7f0000000300)={"91f702fbce88e7d8663258a6235f153e24a3878eb6a17ac4ae86b7fc6938d0ca500d8d4bef284fa454994e67d4fc569aa24f0d9e4b93c447d1172e76f3dcef42", "dee7ebc6c09670d8349f2620de46715712a350408aba5ac5d1b27669834bc2ec63a1a4811d83123bfd7c80e4c98baf57404332f1547afad44b9920d2ff1f2b64", @next=&(0x7f0000000240)={"173a449fc731a638daf8303415aa38d038be041c696d48b13f143f26a79e713df9f84a119ea7376ead12439fe9bbbb1c869da04caeba6cdc4cb81a8f6b62f11b", "0d4fb79ecffc7756ce40716707002436d7bae497b4717899c7a5d0160f2ce622414941209f2681157b38213e1b46d78213ae3992cb4b3b739d1339ac612c23f8", @next=&(0x7f0000000180)={"727c6b38e9967671a9e95ed8d6c8cc3d305cf4cd405f0b607c75d5cc9a5899278f81a38672ff26355fc5f3f2e510ad164f00", "006d67d9e96723126a1f08bb1d66a04d1c73fa9c193a6bb6cd29d085663d6d4a3d4ded65f2cbddaa5d0e1dc4b80d59cb3e02a5c9192be568af3860d68bf622ae", @next, 0x1}, 0x2}, 0x2}, @padding3}}) socketpair$auto(0x4, 0x0, 0xffffffff, &(0x7f0000000500)=0x8) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9) fcntl$auto(0x3, 0x4, 0xa553) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) socket(0x27, 0x6, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) vmsplice$auto(0x2, &(0x7f00000000c0)={&(0x7f0000000340), 0x7ff}, 0x8000000000000001, 0x0) (async) r2 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) read$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000040)=""/1, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2m32.732454343s ago: executing program 3 (id=2524): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x60) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x87, 0x6, "551e7285968d8e86bd4794a0e875ee9f7b35db28d0a7e72b7a19039c336389cb57a05ba0582cc612c6c0be4beb4cc54d8337d40c93638ba34c4a0435c32a206e808194584d8c359d418662d18943a5e3c6234e712a096205457b56f0a1e5d4d19835696295a54f38117d9d751e23b5fb61daa5a6b2c75148106dc167a20061e3fe55cc53ffadf62b0945da4b27515a0102a8d2d002a842362b4744b8972a5e11e8a6aab89c7b85947f3901d696d459641aa7e6b89b73387ec5fa2d2af6c992213d82c5774c4bcd4187585bcf652af094e988e75002e01f607abf5e25ae0f5548fd13175b681fc059c1f9160aef893bae78cf6cf62c30fa3f0c5c60cbe383a9c0cc1289519b0c7cff81cc3b4fec739fad19c662b0f98d607b61d825d10e2dd3b27b0f7a6b1adc5a452f344c39da5f086ea7c5d99674ca69c4f5635776e67c151bad72f906cd65231da3a55d6056e23b00686723714fabd752f3e2c86dafdee9d379230c0abeabfde9cf88cae099f3ccc76ea7e64a3734ced5ffe749a8012db53ad4d6a5e347bdd83bb409c1bdb762f4aba145df74833d73ccd583797d4fb4ed3e0c7c29d502aacaef02e114d9e60ca6b0bcb28f825f5d49e94ccd2f830933c39a3ba3782505453e3de872ad8da84a6a22aaa62970428bb9a95d1817dbeeded1c53c5d508dea6cc53d80153b05f954c263278bb9c8bc02f3b1805dd9299dc8b97ebff0165d615ba7bf5ce8c490f4dd273642a18267b0a61a594cb1d608f3dffb292991ea32bb647a6f9b951f283e118dc73b45843b5aa883410e402e3bec9ba889ec237462042cedaed761cca0c3b7058d3ffc276c9a75e18b79804f4e21650d911edbedb9fedd31959a8783b1e39d7d6408554bddb2a5d67703d225fe4422bf2367ca483e77fe479495be3235f4c77b3872a9e33946d2602486b83e84e7d8d1742d369e2d00b9dbb552385502c0f597b3615bed54de65af106b58d2b6bebbdd3fe625152527af965b67e9424da7be2e2574e1492aed568d4faaa9da508e0a2e687876fa291e38b7c3ef38643e2c49e0d46d0f2d53352da2f184c4ced2305865ab0ad1435644419773ea82336ffdf62dd325a6a8b2d199d96dba8a13bb5a86ff65b80818ceb37ee8a2b2a8813b33e474e5b110e1ed13dbc4f52efabbce38935a8ada53a0ed5a1a01453a254a1dc528492159591aa192ff6cfa0b372caf236c78d1a0c94dc37916746358b4cf3cc1c0132657818ce6465e58936dbf5991dfb74ff97382c066ba0ceb06ac4f0c005e4c9166e94161bc08e1c23df7ed3419b10ae229aa6bafb19e6af003c9e319956723d839dc50a7edd8d80bce971ba504e0aac811d76e65acffdc4f7e9836396ba98b824be6cc704c59f5849642b191437a5cf902fc1ac491e8c59241586c6791b282b5cfae57eb7e6792048c4769b5b3f21987ec5097e530fd001da5d2999db4ded708225e9a53a2b48d2be3401a063da3c19168769eccaef710d7c2e06818bb05c4a9aa0ce2785a5a6d2846bac9836f1905a9b042029dcc59d918450b6affb522fbf78116941c5cef4ecb82a2134ee8e67ea6091170b67bfc3abec9e2cfc8208d4ba3bb732230fe6a9470c1152ebdc31bbce93cb742b4484bc1cef4298ce897a36c7e8b3ef8bd1b0e3d4dfa46da8bf89b06d67d8a5da465e8f68f999ec38ef8d1b7972125d2d8492680f6698419313afb74b5f715c90aa5ca0a6ea5561acd89a25d0fd066234b1752d6535251be347d8e69afea8a1a5475e6860af5956babe0530b6349e918fa97f14e6a83f7e2054c85ec37424757c49c6b76a889cde8473eebc495ac1088fda54f5c70bb17ef4873bf7b524ae892cd8267adfcd1e7054ac0c8b904855f816cbab8a6c5332d2221060b97931130187e1f07b0b9fad917c06f56d3f9fbca9d0ad93c300d88a6025359eb609e86c2b604d6834cde1351ccb0ba238715d6a77953f58b23a78db05bc38cf1e47d5336226a966af0a88fa19b4d992fc82310b7fceee45a202bfdf759dedee618361082881f91f85020e5282fd6a4ff376455f09bd1ca73b165498937eb7396525f9be44e1d5455f2fb0e9b0d79a2b05104239ddb65afabac40f2568353278905243edcffa25dbe93c91fd0982c77eb13c90cde8107888e9891ed1f3fd75b91f275544db3fb132c587243bdd433ad395ec44311df726aa04c20709aa456adebeba0e42ba8be3710f9e8f307febbb8bf1971d6e02b435ec6e209f6d3e3200f51b17e97c7b8eed34b6b297b03db790c857329989e778133d2f9ca40e62aafa5a053d416a09d36a78e1b0716aa049da6fc9fedc96a02d10a13260d6f7cc86a7c681b97ec9987e16bb190e75137bc3e3ce64b51a599f1ebed0683f55240e49eeb6588a13b55c266ee997d1b237f0deefa3bd5670293249c6e79decfc6ee39a08d1ffb71231ed36b9aea01fd0804fc591b7100e6cf5cf97ddb1871afe44a534f2eeafb12d217c6684d474f19bf7d957b11429843723823da2e555a9a9f9d5af6d1ddd40a59a67c459581604f280f4412b0a4b8736bbdd1cd2d4d27cd273ad39d3d52036832e968f93ff343a92f4001c8a2c43ec1f3377c67f3b49f6297de1e2dc5a10abafbf034a029e5d1d89e627fc3741ab5fa68afc24fdf22b6ef215e0927fff8bdb671ef6314ecaa7a8397292e699b693600e49f9e428604fed71f05f2775c224eead65c378539b80ff7f475c68933366da1f76e0542991277c4147358c34ad37a5d81bd1810f39ebf7ece6a0054f4bf5f846bd95f9ba31ea606c226d267d95ad95c29b897fb1fba58f121939ff3c41535d119"}, 0x9, 0x3, 0xff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) 2m21.540293733s ago: executing program 3 (id=2536): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@llc={0x1a, 0xb7, 0x7, 0x1, 0xcd, 0x5, @random="000000000018"}, 0x4) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r1, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) sendmmsg$auto(0x3, &(0x7f0000000200)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x4, 0x9}, 0x100007}, 0x3, 0x0) 2m20.645227186s ago: executing program 3 (id=2539): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cpu/1/msr\x00', 0x20000, 0x0) write$auto_msr_fops_msr(r1, &(0x7f00000000c0)="65d40e2267719f98228a349024a0938513d07c99527df2fc47182402b346d4895616712a84a6bc262de6d8009231af81e81f74d9d75107e7b8765c065270231c44e25701932bc83828c3becc22330724135d68cb57c6fefe190f501cf9bf5cac5c8e4ae98bdb3f3121158cddc02b5b9d2aa13539725302fa61811fc275e3da35f36a5086af46585467bd0e3b60a8ae0f3f07ee2d95d07dd345b30e626845a4d39970cde8fa83f207098945c78126f040e0cb38ff24fdcc4212", 0xb9) pread64$auto(r0, 0x0, 0x8, 0x8) 2m20.30695838s ago: executing program 3 (id=2542): mmap$auto(0x0, 0x40007, 0x1000000005, 0x9b72, 0x2, 0x8000) (async) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) (async) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async) socket(0x23, 0xa, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7}, 0x3) (async) unshare$auto(0x40000080) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x28800, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x40200, 0x0) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) (async) mmap$auto_snd_pcm_oss_f_reg_pcm_oss(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r2, 0x7c) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) (async) removexattr$auto(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)='/dev/mtdblock0\x00') 2m19.02859542s ago: executing program 3 (id=2545): socket(0x5, 0x6, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) setuid$auto(0xe) utimensat$auto(0x2, &(0x7f0000000100)='\x00', 0x0, 0x1000) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r0) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010038bd7000fddb010500000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x6, 0xffff, 0x6, 0x8032d4, 0x10000, 0x7fffffff) open(0x0, 0x64842, 0x0) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x40054) socket$nl_generic(0x10, 0x3, 0x10) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc0c00, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/binderfs/binder1\x00', 0x149883, 0x0) dup$auto(r3) mmap$auto(0x7, 0x400000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x40d00, 0x0) unshare$auto(0x40000080) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(r4, &(0x7f0000000300)='*#!\x00', 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) 2m3.448021185s ago: executing program 33 (id=2545): socket(0x5, 0x6, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) setuid$auto(0xe) utimensat$auto(0x2, &(0x7f0000000100)='\x00', 0x0, 0x1000) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r0) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010038bd7000fddb010500000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x6, 0xffff, 0x6, 0x8032d4, 0x10000, 0x7fffffff) open(0x0, 0x64842, 0x0) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x40054) socket$nl_generic(0x10, 0x3, 0x10) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc0c00, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/binderfs/binder1\x00', 0x149883, 0x0) dup$auto(r3) mmap$auto(0x7, 0x400000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x40d00, 0x0) unshare$auto(0x40000080) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(r4, &(0x7f0000000300)='*#!\x00', 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) 8.370858761s ago: executing program 1 (id=2893): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2640, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/teql0/statistics/rx_dropped\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x1) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy6/aql_enable\x00', 0x2481, 0x0) setsockopt$auto(r2, 0x2, 0x5, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0xffff) pwrite64$auto(r5, 0x0, 0x3, 0x4200000000000005) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) 8.267572524s ago: executing program 4 (id=2894): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) 7.830114568s ago: executing program 4 (id=2897): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r1 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r1, &(0x7f00000000c0)='\xcf\x8d\xb6\xaa\x80\xd5\xb4_:A\xacz\xdc\xa0\x1d', 0x2, 0x6, &(0x7f0000000240)={0x2000000000000003, 0x101}) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x111000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000380)={{&(0x7f00000001c0)="a36d3fa58cc14c483eaeefbda25ed11e6584b0e06b6f7d2a0920bb3dac705aa384572b6a4be4e53907a7b258", 0x7fff, 0x0, 0x9, 0x0, 0x2, 0x9}, 0x2}, 0xfffffffd, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='\x1cs\x10l', 0x3, &(0x7f0000000440)="14ec9878b142b489d7159feaf609080000ad57087aa89e1e441703ca3f36fc9d90a6245a07632c929be61e93a50c9950cf7c5815ae13de4e734fb529a5ab821ad200c7bdd69c73578220fb2372ba54705200"/95) write$auto_proc_pid_attr_operations_base(r2, &(0x7f0000000280)="e6eec9f1147ef5a4e8", 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44884) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) 7.759809844s ago: executing program 1 (id=2898): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) ioctl$auto_SCSI_IOCTL_GET_IDLUN2(r1, 0x5382, &(0x7f0000000040)="6c4877612bd3bc9940701165e1a9cd3fd03f7e9c21a9673d4b99842e917ffc75f3d5859939f517c9e72825025f42f163a00ecf1a71da3c79a40ebb9cb3775123cf5f7d7f1958c44e5132fa3e9b570407e3f83517e61554e8e92b3ca99ef790") (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r2 = socket(0xa, 0x801, 0x84) (async, rerun: 64) socket(0x2, 0x3, 0x1) setsockopt$auto(0x3, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) (async, rerun: 32) lseek$auto(0x3, 0x8, 0x3) (async, rerun: 32) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) mount$auto(0x0, &(0x7f0000000100), 0x0, 0x2000000000100000, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/power/level\x00', 0x129882, 0x0) sendfile$auto(r4, r4, 0x0, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) setreuid$auto(0x15, 0x0) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x8, 0x8) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) (async) r5 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x0, 0x0, 0x0, 0xfffffff000000000, 0x720c) (async) r6 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_BTRFS_IOC_SEND_32(r5, 0x40449426, &(0x7f00000001c0)={@inferred=r6, 0x9, 0x4, 0x4, 0x0, 0x7, "5394ae7fba4a75a8c2545d201998e8ff92fb98fdb84bfba64065bd35"}) read$auto_tracing_thresh_fops_trace(r3, &(0x7f0000000440)=""/4096, 0x1000) (async) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf251400000008000500030000000c0001000000000062b3476386fd6dbdcab6fb477536bff0aeb94a988c41e4938c60128172353e3199040000005659d3944c5324ddba8d52bb9f5132e48251619121c2cf3882d736dfbbd1c942f93765d4b6a2db82b79661ad69b5cf55725f36fec9b9de3c154ea4ccfe0a072b1414fb21a15ebccbb834b93e888c97636d8af0576e914c11b182bfae6e98dea5d403ebfa3acb0c173f8037ac6044", @ANYRES32=0x0, @ANYBLOB="08001500d5000000"], 0x30}, 0x1, 0x0, 0x0, 0xc854}, 0x0) (async) ioctl$auto_LOOP_CTL_ADD(r0, 0x4c80, 0xfffffffffffffffd) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) (async) ioctl$auto(0x3, 0x40045613, 0x38) 6.692599051s ago: executing program 1 (id=2899): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/veth1_to_hsr/accept_local\x00', 0x2002, 0x0) sendfile$auto(r1, r1, 0x0, 0x80000000003) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0xa, 0xaf, 0x3, 0x17, r1, 0x80000004) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x105000, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0x9, 0x8000, 0xe238, 0x602, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3, 0x1, 0x0, 0x40001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r5 = gettid() process_vm_writev$auto(r5, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pts/ptmx\x00', 0x40001, 0x0) 6.028535026s ago: executing program 5 (id=2901): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/erasesize\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x4cb) ioctl$auto(0x3, 0x4008ae48, r1) 5.43843258s ago: executing program 4 (id=2902): mmap$auto(0x0, 0x428, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) r0 = io_uring_setup$auto(0x7, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r0, 0x40046104, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181902, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0x2, 0x3, 0x4) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) r1 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', 0x0, 0x0, 0x1001) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) write$auto(0x3, 0x0, 0xffeb) (fail_nth: 1) mbind$auto(0x5, 0x111f, 0x28, &(0x7f0000000180)=0x13fffffff, 0xfffffffffffffffc, 0x3f) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000180), 0x1) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 5.3474667s ago: executing program 1 (id=2903): r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x8) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000000), r0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 5.011272954s ago: executing program 5 (id=2904): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vivid.0/cec27/power/runtime_active_time\x00', 0x80, 0x0) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) pwritev$auto(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x2}, 0x3, 0x11, 0x3) r2 = socket(0x2c, 0x6, 0x3b) pread64$auto(r2, &(0x7f0000000040)='\xf4/%-\x00', 0x7fffffffffffffff, 0xad) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5a) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) statmount$auto(&(0x7f00000002c0)={0x1, @raw=0x8, 0x3ff, 0x40, 0x4}, &(0x7f0000000300)={0x2, 0x9, 0xc0000000, 0x2, 0x3, 0x8, 0x3, 0x8, 0xb4d5, 0x7fff, 0x5, 0x4, 0x4bcb, 0x61d5, 0x5, 0x7fff, 0x8, 0x2, 0xc55a, 0xf1, 0x4, 0x1ff, 0x5, 0x80000001, 0xab1d, 0x8, 0x6, 0x1, 0x2, 0x200, 0x18, [0xa5, 0x4b, 0x6, 0x5, 0x8, 0x272bda09, 0xe87, 0x7, 0x0, 0xfffffffffffffff9, 0x100000000, 0x3, 0x92, 0x3, 0x4, 0xfffffffffffffffb, 0xff, 0x2, 0x9, 0x8, 0x9, 0x12a0, 0x7ff, 0x4, 0x7fffffffffffffff, 0xfffffffffffffff0, 0x5, 0x0, 0x0, 0xf, 0x2fdc, 0x1, 0xa, 0x8, 0x6, 0x7, 0x1ff, 0x5e43, 0x80000000, 0x1fe, 0x401, 0x7fffffffffffffff, 0x7be9ca16], "a82ec8274b069a1d"}, 0x401, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x2, 0x400008, 0x80, 0x9b70, r3, 0x8000) listmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000024, 0x0, 0x2}, 0x0, 0xf4240, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x9, 0x0, 0x20008004) setsockopt$auto_SO_RCVTIMEO_NEW(r3, 0x1, 0x42, &(0x7f0000000540)='\xf4/%-\x00', 0x3) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000140), r3) sendmsg$auto_IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r5, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xec}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0xf9}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xf}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xf8}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x20054051) epoll_create$auto(0xdb5) close_range$auto(r3, r3, 0xfffffff9) 4.511991226s ago: executing program 2 (id=2905): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) 4.332603315s ago: executing program 4 (id=2906): mmap$auto(0xffffffffffffffff, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0x8]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptye9\x00', 0x109000, 0x0) read$auto(0x3, 0x0, 0x1f40) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyd0\x00', 0x22302, 0x0) close_range$auto(0xffffffffffffffff, r1, 0x3) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x9040, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f00000000c0)={[0x8001ff, 0x7, 0xbb, 0x8fd6, 0x1, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x1, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x80280, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/xfs/stats/stats\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) 4.19347156s ago: executing program 2 (id=2907): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r1 = socket(0x1f, 0x4, 0x9331) madvise$auto(0x0, 0x9000000000000000, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000580)='//\xf2\x00\\\x051\x8a\xdc\xf47\xda\x1d\al\x1d\x8ei\xc2\xa2\x8e.S?\x00u\xdc\"nN!\xf1\x10\xcf\x00\xd0\xce\xa62\x87\x7f\xc2\xff\xd1\x9c\xf7v\xed\x99`\xc8d\xd2\x89\x96\xf5yr\xe3\xac(\x9e\x1e\xb5\x1f\x93\xdb\xdc\xd4\xe9r5%\xcb+\x1f/\xbe\x1d\xb9\x99\xa3B\xed\x88h\x86\xc8.\x9f^\vm\x98\x15\x8f\xd9\x94\x103\x9f\xa2\xbdh\xa6$\xe9\xfa\xc2Z\xd12q\x90\xd3\x0e\x1ej\xc9\x847\v\xf6\xb6\xfc\x7f\x88\x8b\xf2\x00a&\xff\x7f\xca\xaf\xf7\xb3\xce\x8b^-\xf7i\xa7RHTL\xcd\xb9]xz\x82\t\x00\x00\x00\xe2>\xc2\xf3\xd2D\xd2\x95\xd2\xd2\x8a$G}\xb2\xda\xaff%\xe4\x0e1\n\x9f\x83q8\xc65\xb4\x0e\xafU\xd6o\xdc\v5\xf1\x02\x10\x11\xfcaR\xb3D\xca&\x16\xc4\xf1\xf6pd+qu\"\xe7a\x95\x9f\xd4\xe3#:7-\x16n\x9f', 0x3) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) ioperm$auto(0x7, 0x6, 0x2) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r2) write$auto(r2, &(0x7f0000000180)='\x8d\x1a\x00@\xdf\x00\x00\x00io1\x00VI\xa3\xaa\xb1;\x9d(\x01\x80WFG\xbf\xb3\x0e\x8f%Y$\xf8\x96[J\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xb7\xf1:\xaf\x8a\xebfob\xf9\xc8\x065\xef\xc1(z\x8e\xbb\x84\x8d(\xed\xf5j\xf4>\xf2\xf1\x85d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xeb\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\x1f\xa7\xf9\xff\xff\xff\xff\xff\xff\xff\x9d\x8b\xa4U\x953.T\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfa\a\x00\x00\x00\x00\x00\x00\x00\xae\xcd\x8b\x15)\xff\f\x97&\x95p\"\x1dHi\xd9\xc0\t\xe3h', 0xb) rseq$auto(&(0x7f0000001b00)={0x9, 0xb, 0x1, 0x5, 0x2000004, 0x1, "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"}, 0x3, 0x80000000, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getsockopt$auto(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x16, r3, 0x0) socket(0x0, 0xa, 0x84) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000680)={0x5, 0x9, 0x1, 0x92e, {0x7f, 0x1, 0x7, 0xd, 0x7, 0x7fff, 0x8000000000000000, 0x0, 0x1, 0x7d3, 0x5, 0x0, 0xfffffffffffffffb, 0xff, 0x7fc}}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0xa, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0x4788, r6, 0x2f}, 0x22) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 4.131417451s ago: executing program 5 (id=2908): openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/dormant_links\x00', 0x80a03, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000280), 0xa883, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/pid_for_children\x00') ioctl$auto(0x3, 0x40103e05, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x0, 0x1, 0x0, 0xe52, 0x0) write$auto(r2, &(0x7f0000000100)='\"\x1c6\x80p\xf9\xdc\xb09\xbb0\x1f\xa5S;', 0x100000a3d8) getpid() rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x8, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r4, 0x0, 0x0, 0x9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x210880, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_NS_GET_TGID_IN_PIDNS(r3, 0x8004b709, &(0x7f00000000c0)=0x1) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004881}, 0x800) shmctl$auto(0x0, 0xc, &(0x7f0000000180)={{0x7, 0x0, 0xee01, 0x4, 0xa, 0x104, 0xfff9}, 0x0, 0x80d, 0x3fc, 0x6, @raw=0x9, @inferred, 0x4, 0x0, 0x0, 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7fff, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x40007}, 0x3, 0x0) 3.234242293s ago: executing program 1 (id=2909): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000280)=0xc9e, 0x400, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0xffe, 0x8001, 0x0) r1 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x9, 0x0, 0x20008004) getsockopt$auto(r1, 0x11c, 0x4, 0x0, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) flistxattr$auto(r0, 0x0, 0x9) mlock$auto(0x81, 0xffff) 3.079047687s ago: executing program 5 (id=2910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000004ec0), 0xffffffffffffffff) r2 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$auto(r2, &(0x7f0000000180)='1l80211\x00', 0x1) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) r3 = socket(0x2, 0x1, 0x100) r4 = getsockopt$auto(r3, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r6, @ANYBLOB="11002d", @ANYRES16=r0, @ANYRES16=r5, @ANYRESDEC=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) msync$auto(0x400, 0x2, 0xb7) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x9, &(0x7f0000000040), 0x1, 0x9}, 0xfffffffc}, 0x2, 0x6586, 0x0) getsockopt$auto_SO_ERROR(r3, 0x6, 0x4, 0x0, 0x0) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f80)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r1, @ANYRESHEX=r4], 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x840) getgroups$auto(0xeda, 0x0) 3.019847163s ago: executing program 1 (id=2911): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r1 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r1, &(0x7f00000000c0)='\xcf\x8d\xb6\xaa\x80\xd5\xb4_:A\xacz\xdc\xa0\x1d', 0x2, 0x6, &(0x7f0000000240)={0x2000000000000003, 0x101}) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x111000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000380)={{&(0x7f00000001c0)="a36d3fa58cc14c483eaeefbda25ed11e6584b0e06b6f7d2a0920bb3dac705aa384572b6a4be4e53907a7b258", 0x7fff, 0x0, 0x9, 0x0, 0x2, 0x9}, 0x2}, 0xfffffffd, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='\x1cs\x10l', 0x3, &(0x7f0000000440)="14ec9878b142b489d7159feaf609080000ad57087aa89e1e441703ca3f36fc9d90a6245a07632c929be61e93a50c9950cf7c5815ae13de4e734fb529a5ab821ad200c7bdd69c73578220fb2372ba54705200"/95) write$auto_proc_pid_attr_operations_base(r2, &(0x7f0000000280)="e6eec9f1147ef5a4e8", 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44884) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) 2.967511048s ago: executing program 4 (id=2912): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket(0x1a, 0x5, 0xfffffffd) r3 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0x100000000000009, 0xdf, 0x10010, 0x401, 0x8000) mmap$auto(0xfffffffffffffffe, 0x4020009, 0x2, 0x14, r3, 0x8002) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd37, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES16=r5, @ANYBLOB="0b1726bd7000fddbdf25150000008d5a63d0c9fd42c3c268b489e2c72d5d0dc9feff8084fa1002142992c4f7e53169fcb16c1d0ee689eb000000404b02903985afd504600d7fe540469f2819093f"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000840) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x8000000000001ff, 0x20000000007, 0x41, 0xbc3, 0xfff, 0x3, 0x512, 0xb, 0x3, 0x20000000003, 0x0, 0x2, 0x6acb, 0xce61, 0xfd, 0xffffffff]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(r4, 0x0, 0x8000) close_range$auto(0x2, r3, 0x0) unshare$auto(0x40000080) madvise$auto(0x110c234000, 0x1, 0x9) unshare$auto(0x40000080) pwrite64$auto(r0, &(0x7f0000000000)=')\x00', 0x0, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/ext4/sda1/fc_info\x00', 0x58b842, 0x0) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101002, 0x0) 2.856361623s ago: executing program 2 (id=2913): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) (async) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) read$auto(r0, 0x0, 0x42) (async) read$auto(r0, 0x0, 0x42) mmap$auto(0x8000003ff, 0x4, 0x4000000000df, 0x96, r0, 0x300000000000) (async) mmap$auto(0x8000003ff, 0x4, 0x4000000000df, 0x96, r0, 0x300000000000) socket(0x2b, 0x5, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x20008, 0x7fff, 0xffffffffffffffff) r1 = fsopen$auto(0x0, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) (async) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/nr13/queues/rx-0/rps_cpus\x00', 0x0, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/nr13/queues/rx-0/rps_cpus\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe4) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x11, 0x1, '\xc2\x00\x00\x00\x00\x00\x00\x00\n9\xac\xce\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x80) sendmmsg$auto(r1, 0x0, 0x801, 0x7002000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) (async) sendfile$auto(0x1, 0x3, 0x0, 0xc01) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) (async) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x2, 0xc, 0x0, 0x7fb, 0x0}) mmap$auto(0x7, 0x38, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x200) quotactl_fd$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) setpgid$auto(0x0, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x400) ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) 2.852776613s ago: executing program 5 (id=2914): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/virt_wifi0/dad_transmits\x00', 0x2002, 0x0) sendfile$auto(r1, r1, 0x0, 0x80000000003) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0xa, 0xaf, 0x3, 0x17, r1, 0x80000004) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x105000, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0x9, 0x8000, 0xe238, 0x602, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) rseq$auto(0x0, 0xfffffffe, 0x3, 0xff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) clone$auto(0x100000001, 0x4, 0x0, 0x0, 0x200) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x1, 0x40009, 0xdf, 0xcbd, r3, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000002c0)=""/190, 0xfffffe39) socket$nl_generic(0x10, 0x3, 0x10) 2.10856438s ago: executing program 2 (id=2915): socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x8, 0x806, 0x13, 0x46) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptywb\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r0, 0x80045438, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) r1 = socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x13, r1) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000280)="978693dc87b1c1fd2f1eb908a830a927544df29604e114be47d79b044b1020", 0x1f) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)={0x3c, r5, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 1.151560219s ago: executing program 2 (id=2916): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) 897.548359ms ago: executing program 2 (id=2917): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x7) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r7, 0xab04, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8c020000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf251d0000004301188014002100fc0200000000000000000000000000003600bd0068f76224d76fcedd858a40d2e4daac3a906310b4882866e15a38c714c9301ed5c7bc670cf749f0cdf4d958ac4a46c983cc4f0000018afb34431813703fe999e41360aa2f78624f27b11e5a80a7355d38b6a4c7eca4adda34ea7b2c60ffec2b34de68f8ff238429af8ce6285ab588c4cbe1d1b9824702b1b3566b51eb0437240289d7fdcbf3ef53cadf457e49070342cb80a88f3f14dca7b272e3137c4e10ce76365024e974704d9a5595511d1f39495f2163c2230d709bd2265fdf2d1186082017d28e03ab27269c84a9209ad6f713d57101963260539b122401c9b87400fb6d4b3bc1372583932e221d8f717a5356013ff43bd8a3750baecad4d4d3deafe0a6cf783bfeaedc61d5f02142c3cd9d90bd596f2170c6488482f92288f2c3490acdd285c57f422cb30008000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="00000005043891ec44d3d7"], 0x28c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) dup$auto(r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) 329.935672ms ago: executing program 5 (id=2918): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYRES32, @ANYBLOB="0c00290084660000000000008d1083b7312d58c5ebaf487bb998f3418a8151bb07f2443548e4f835120dabebd9cfacb4df6c09d5c51d5a796dcd884b3e930a755c3e6e9a8bf602ba954dddf50ba937da8e0eb88ee25349d036733e829ade17deaae15e1e9298ffa9cd09d12467d4b27c2248f3edabe64261dd558c1b9e518a124437c3303efdaea14284ea051911d982703916a3f34e0c89480014f473c0ff7dc811d675c55aafeab4d5d79dd93004732cfecf02265e2993274e159f1788f1f775bbefa7dc340bd198fa7cfeb7b5eee7dae5e118a7f160e9e3f016e93bc1cf8d297c2528030dee4f73abb51c22b64bbc744da934cb7396ef4d43cef20800a100", @ANYRES32, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x7) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r7, 0xab04, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8c020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="00000005043891ec44d3d7"], 0x28c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) dup$auto(r0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0xa, 0x0) 0s ago: executing program 4 (id=2919): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000140)) kernel console output (not intermixed with test programs): 0] type 2 family 0 port 6081 - 0 [ 721.792976][T17540] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.957560][T17540] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.057885][T17540] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.196025][T17540] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 722.248073][T17540] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 722.291314][T17609] HfR: entered promiscuous mode [ 722.297536][T17540] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 722.322006][T17540] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 722.691122][T17540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.717044][T17540] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.735364][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.742508][ T9688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.781844][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.788995][ T9688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.454921][T17540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.526805][T17203] Bluetooth: hci1: command tx timeout [ 724.002021][T17654] futex_atomic_op_inuser: 56 callbacks suppressed [ 724.002052][T17654] futex_wake_op: syz.4.2382 tries to shift op by -9; fix this program [ 724.120190][T17540] veth0_vlan: entered promiscuous mode [ 724.417541][T17540] veth1_vlan: entered promiscuous mode [ 724.633985][T17540] veth0_macvtap: entered promiscuous mode [ 724.672076][T17540] veth1_macvtap: entered promiscuous mode [ 724.856875][T17662] random: crng reseeded on system resumption [ 724.880863][T17540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.965246][T17540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.999967][ T9702] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.079085][ T9699] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.166789][ T9699] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.215073][ T9699] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.613673][T17203] Bluetooth: hci1: command tx timeout [ 725.625469][T10958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.677237][T10958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.867744][ T9708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.905770][ T9708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.143233][T17681] FAULT_INJECTION: forcing a failure. [ 727.143233][T17681] name failslab, interval 1, probability 0, space 0, times 0 [ 727.200876][T17681] CPU: 1 UID: 0 PID: 17681 Comm: syz.3.2387 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 727.200919][T17681] Tainted: [U]=USER [ 727.200928][T17681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 727.200942][T17681] Call Trace: [ 727.200951][T17681] [ 727.200960][T17681] dump_stack_lvl+0x16c/0x1f0 [ 727.200995][T17681] should_fail_ex+0x512/0x640 [ 727.201039][T17681] should_failslab+0xc2/0x120 [ 727.201072][T17681] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 727.201103][T17681] ? copy_process+0x400f/0x7690 [ 727.201136][T17681] copy_process+0x400f/0x7690 [ 727.201166][T17681] ? lock_release+0x201/0x2f0 [ 727.201203][T17681] ? __pfx_copy_process+0x10/0x10 [ 727.201233][T17681] ? lock_release+0x201/0x2f0 [ 727.201266][T17681] ? _copy_from_user+0x59/0xd0 [ 727.201307][T17681] kernel_clone+0xfc/0x930 [ 727.201338][T17681] ? __pfx_kernel_clone+0x10/0x10 [ 727.201368][T17681] ? futex_private_hash_put+0x11c/0x300 [ 727.201399][T17681] ? __pfx_futex_wait+0x10/0x10 [ 727.201439][T17681] __do_sys_clone3+0x212/0x290 [ 727.201470][T17681] ? __pfx___do_sys_clone3+0x10/0x10 [ 727.201520][T17681] do_syscall_64+0xcd/0x490 [ 727.201553][T17681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.201578][T17681] RIP: 0033:0x7f86b7f8ebe9 [ 727.201595][T17681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.201619][T17681] RSP: 002b:00007f86b8d27f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 727.201642][T17681] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f86b7f8ebe9 [ 727.201658][T17681] RDX: 00007f86b8d27f20 RSI: 0000000000000058 RDI: 00007f86b8d27f20 [ 727.201673][T17681] RBP: 00007f86b8011e19 R08: 0000000000000000 R09: 0000000000000058 [ 727.201688][T17681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.201703][T17681] R13: 00007f86b81b6038 R14: 00007f86b81b5fa0 R15: 00007ffda5de3bf8 [ 727.201725][T17681] [ 727.635753][ T30] audit: type=1800 audit(4294967694.050:30): pid=17681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2387" name="discovery_nqn" dev="configfs" ino=74883 res=0 errno=0 [ 728.018330][T17685] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 728.853644][T17707] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2393'. [ 729.289815][T17718] FAULT_INJECTION: forcing a failure. [ 729.289815][T17718] name failslab, interval 1, probability 0, space 0, times 0 [ 729.300694][T17701] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 729.372557][T17718] CPU: 0 UID: 0 PID: 17718 Comm: syz.1.2394 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 729.372618][T17718] Tainted: [U]=USER [ 729.372631][T17718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 729.372651][T17718] Call Trace: [ 729.372663][T17718] [ 729.372675][T17718] dump_stack_lvl+0x16c/0x1f0 [ 729.372748][T17718] should_fail_ex+0x512/0x640 [ 729.372799][T17718] should_failslab+0xc2/0x120 [ 729.372847][T17718] __kmalloc_cache_noprof+0x6a/0x3e0 [ 729.372882][T17718] ? __pfx___might_resched+0x10/0x10 [ 729.372918][T17718] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 729.372955][T17718] ? rcu_is_watching+0x12/0xc0 [ 729.372992][T17718] __hw_addr_add_ex+0x3c9/0x7c0 [ 729.373026][T17718] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 729.373057][T17718] ? __mutex_unlock_slowpath+0x141/0x800 [ 729.373107][T17718] ? __pfx_do_setup+0x10/0x10 [ 729.373152][T17718] dev_addr_init+0x161/0x250 [ 729.373187][T17718] ? __pfx_dev_addr_init+0x10/0x10 [ 729.373230][T17718] alloc_netdev_mqs+0x35e/0x1530 [ 729.373278][T17718] internal_dev_create+0x8a/0x520 [ 729.373326][T17718] ovs_vport_add+0x147/0x4d0 [ 729.373372][T17718] new_vport+0x16/0x1d0 [ 729.373405][T17718] ovs_dp_cmd_new+0x6ba/0xe60 [ 729.373447][T17718] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 729.373489][T17718] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 729.373545][T17718] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 729.373612][T17718] genl_family_rcv_msg_doit+0x206/0x2f0 [ 729.373665][T17718] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 729.373726][T17718] ? bpf_lsm_capable+0x9/0x10 [ 729.373758][T17718] ? security_capable+0x7e/0x260 [ 729.373791][T17718] ? ns_capable+0xd7/0x110 [ 729.373827][T17718] genl_rcv_msg+0x55c/0x800 [ 729.373880][T17718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 729.373932][T17718] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 729.373986][T17718] netlink_rcv_skb+0x155/0x420 [ 729.374031][T17718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 729.374084][T17718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 729.374138][T17718] ? netlink_deliver_tap+0x1ae/0xd30 [ 729.374181][T17718] genl_rcv+0x28/0x40 [ 729.374228][T17718] netlink_unicast+0x5aa/0x870 [ 729.374275][T17718] ? __pfx_netlink_unicast+0x10/0x10 [ 729.374320][T17718] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 729.374371][T17718] netlink_sendmsg+0x8d1/0xdd0 [ 729.374420][T17718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.374467][T17718] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 729.374506][T17718] ____sys_sendmsg+0xa95/0xc70 [ 729.374560][T17718] ? copy_msghdr_from_user+0x10a/0x160 [ 729.374603][T17718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.374661][T17718] ? __pfx_futex_wake_mark+0x10/0x10 [ 729.374715][T17718] ___sys_sendmsg+0x134/0x1d0 [ 729.374759][T17718] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.374803][T17718] ? futex_private_hash_put+0x11c/0x300 [ 729.374850][T17718] ? rcu_is_watching+0x12/0xc0 [ 729.374898][T17718] __sys_sendmsg+0x16d/0x220 [ 729.374952][T17718] ? __pfx___sys_sendmsg+0x10/0x10 [ 729.374997][T17718] ? __x64_sys_futex+0x1e0/0x4c0 [ 729.375053][T17718] do_syscall_64+0xcd/0x490 [ 729.375100][T17718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.375135][T17718] RIP: 0033:0x7f905e98ebe9 [ 729.375162][T17718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.375195][T17718] RSP: 002b:00007f905f857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.375228][T17718] RAX: ffffffffffffffda RBX: 00007f905ebb5fa0 RCX: 00007f905e98ebe9 [ 729.375250][T17718] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 729.375271][T17718] RBP: 00007f905ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 729.375292][T17718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.375312][T17718] R13: 00007f905ebb6038 R14: 00007f905ebb5fa0 R15: 00007fff5573cfe8 [ 729.375345][T17718] [ 730.408253][T17738] FAULT_INJECTION: forcing a failure. [ 730.408253][T17738] name failslab, interval 1, probability 0, space 0, times 0 [ 730.482986][T17738] CPU: 0 UID: 0 PID: 17738 Comm: syz.1.2396 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 730.483043][T17738] Tainted: [U]=USER [ 730.483055][T17738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 730.483074][T17738] Call Trace: [ 730.483085][T17738] [ 730.483098][T17738] dump_stack_lvl+0x16c/0x1f0 [ 730.483147][T17738] should_fail_ex+0x512/0x640 [ 730.483195][T17738] should_failslab+0xc2/0x120 [ 730.483251][T17738] __kmalloc_cache_noprof+0x6a/0x3e0 [ 730.483285][T17738] ? do_epoll_create+0x62/0x480 [ 730.483322][T17738] do_epoll_create+0x62/0x480 [ 730.483354][T17738] __x64_sys_epoll_create+0x45/0x70 [ 730.483389][T17738] do_syscall_64+0xcd/0x490 [ 730.483432][T17738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.483466][T17738] RIP: 0033:0x7f905e98ebe9 [ 730.483492][T17738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.483525][T17738] RSP: 002b:00007f905f836038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 730.483556][T17738] RAX: ffffffffffffffda RBX: 00007f905ebb6090 RCX: 00007f905e98ebe9 [ 730.483577][T17738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 730.483596][T17738] RBP: 00007f905ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 730.483615][T17738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.483653][T17738] R13: 00007f905ebb6128 R14: 00007f905ebb6090 R15: 00007fff5573cfe8 [ 730.483687][T17738] [ 730.916764][T17728] FAULT_INJECTION: forcing a failure. [ 730.916764][T17728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 730.971013][T17728] CPU: 1 UID: 0 PID: 17728 Comm: syz.2.2395 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 730.971075][T17728] Tainted: [U]=USER [ 730.971087][T17728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 730.971108][T17728] Call Trace: [ 730.971119][T17728] [ 730.971131][T17728] dump_stack_lvl+0x16c/0x1f0 [ 730.971178][T17728] should_fail_ex+0x512/0x640 [ 730.971228][T17728] should_fail_alloc_page+0xe7/0x130 [ 730.971275][T17728] prepare_alloc_pages+0x3c2/0x610 [ 730.971327][T17728] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 730.971370][T17728] ? __pfx_stack_trace_save+0x10/0x10 [ 730.971410][T17728] ? stack_depot_save_flags+0x29/0x9c0 [ 730.971463][T17728] ? kasan_save_stack+0x42/0x60 [ 730.971500][T17728] ? kasan_save_stack+0x33/0x60 [ 730.971537][T17728] ? kasan_save_track+0x14/0x30 [ 730.971574][T17728] ? __kasan_kmalloc+0xaa/0xb0 [ 730.971612][T17728] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 730.971654][T17728] ? subsystem_filter_write+0x95/0x120 [ 730.971697][T17728] ? ksys_write+0x12a/0x250 [ 730.971734][T17728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.971779][T17728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 730.971832][T17728] ? policy_nodemask+0xea/0x4e0 [ 730.971877][T17728] alloc_pages_mpol+0x1fb/0x550 [ 730.971922][T17728] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 730.971972][T17728] ___kmalloc_large_node+0xed/0x160 [ 730.972034][T17728] __kmalloc_large_noprof+0x1c/0x70 [ 730.972089][T17728] append_filter_err+0x8f/0x5e0 [ 730.972131][T17728] apply_subsystem_event_filter+0x75a/0x17e0 [ 730.972181][T17728] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 730.972229][T17728] ? _copy_from_user+0x59/0xd0 [ 730.972287][T17728] subsystem_filter_write+0x95/0x120 [ 730.972330][T17728] ? __pfx_subsystem_filter_write+0x10/0x10 [ 730.972373][T17728] vfs_write+0x29d/0x11d0 [ 730.972413][T17728] ? __pfx___mutex_lock+0x10/0x10 [ 730.972459][T17728] ? __pfx_vfs_write+0x10/0x10 [ 730.972496][T17728] ? __fget_files+0x204/0x3c0 [ 730.972531][T17728] ? rcu_is_watching+0x12/0xc0 [ 730.972589][T17728] ? __fget_files+0x20e/0x3c0 [ 730.972630][T17728] ksys_write+0x12a/0x250 [ 730.972668][T17728] ? __pfx_ksys_write+0x10/0x10 [ 730.972714][T17728] do_syscall_64+0xcd/0x490 [ 730.972760][T17728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.972795][T17728] RIP: 0033:0x7f5b8398ebe9 [ 730.972821][T17728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.972856][T17728] RSP: 002b:00007f5b848a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 730.972889][T17728] RAX: ffffffffffffffda RBX: 00007f5b83bb6090 RCX: 00007f5b8398ebe9 [ 730.972913][T17728] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 730.972932][T17728] RBP: 00007f5b83a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 730.972952][T17728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.972972][T17728] R13: 00007f5b83bb6128 R14: 00007f5b83bb6090 R15: 00007ffdb0c4cf88 [ 730.973004][T17728] [ 732.786595][T17758] FAULT_INJECTION: forcing a failure. [ 732.786595][T17758] name failslab, interval 1, probability 0, space 0, times 0 [ 732.836206][T17758] CPU: 1 UID: 0 PID: 17758 Comm: syz.4.2400 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 732.836261][T17758] Tainted: [U]=USER [ 732.836273][T17758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 732.836292][T17758] Call Trace: [ 732.836303][T17758] [ 732.836315][T17758] dump_stack_lvl+0x16c/0x1f0 [ 732.836360][T17758] should_fail_ex+0x512/0x640 [ 732.836408][T17758] should_failslab+0xc2/0x120 [ 732.836452][T17758] __kmalloc_cache_noprof+0x6a/0x3e0 [ 732.836486][T17758] ? snd_timer_instance_new+0x47/0x2e0 [ 732.836534][T17758] snd_timer_instance_new+0x47/0x2e0 [ 732.836582][T17758] snd_seq_timer_open+0x1cc/0x600 [ 732.836624][T17758] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 732.836666][T17758] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 732.836717][T17758] ? snd_seq_timer_defaults+0x46a/0x580 [ 732.836757][T17758] ? rcu_is_watching+0x12/0xc0 [ 732.836792][T17758] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 732.836852][T17758] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 732.836894][T17758] queue_use+0xe3/0x250 [ 732.836923][T17758] snd_seq_queue_alloc+0x2e5/0x5a0 [ 732.836960][T17758] snd_seq_ioctl_create_queue+0xa9/0x380 [ 732.837005][T17758] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 732.837056][T17758] alloc_seq_queue+0xda/0x180 [ 732.837103][T17758] ? __pfx_alloc_seq_queue+0x10/0x10 [ 732.837160][T17758] ? snd_seq_oss_open+0x2d7/0xa20 [ 732.837208][T17758] ? rcu_is_watching+0x12/0xc0 [ 732.837240][T17758] ? rcu_is_watching+0x12/0xc0 [ 732.837274][T17758] snd_seq_oss_open+0x38c/0xa20 [ 732.837325][T17758] odev_open+0x6f/0x90 [ 732.837368][T17758] ? __pfx_odev_open+0x10/0x10 [ 732.837412][T17758] soundcore_open+0x409/0x580 [ 732.837456][T17758] ? __pfx_soundcore_open+0x10/0x10 [ 732.837498][T17758] chrdev_open+0x231/0x6a0 [ 732.837539][T17758] ? __pfx_apparmor_file_open+0x10/0x10 [ 732.837575][T17758] ? __pfx_chrdev_open+0x10/0x10 [ 732.837619][T17758] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 732.837660][T17758] do_dentry_open+0x97f/0x1530 [ 732.837700][T17758] ? __pfx_chrdev_open+0x10/0x10 [ 732.837747][T17758] vfs_open+0x82/0x3f0 [ 732.837814][T17758] path_openat+0x1de4/0x2cb0 [ 732.837867][T17758] ? __pfx_path_openat+0x10/0x10 [ 732.837911][T17758] do_filp_open+0x20b/0x470 [ 732.837951][T17758] ? __pfx_do_filp_open+0x10/0x10 [ 732.838005][T17758] ? alloc_fd+0x471/0x7d0 [ 732.838046][T17758] do_sys_openat2+0x11b/0x1d0 [ 732.838097][T17758] ? __pfx_do_sys_openat2+0x10/0x10 [ 732.838157][T17758] __x64_sys_openat+0x174/0x210 [ 732.838210][T17758] ? __pfx___x64_sys_openat+0x10/0x10 [ 732.838271][T17758] do_syscall_64+0xcd/0x490 [ 732.838316][T17758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.838352][T17758] RIP: 0033:0x7ff3af98ebe9 [ 732.838378][T17758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.838413][T17758] RSP: 002b:00007ff3adbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 732.838445][T17758] RAX: ffffffffffffffda RBX: 00007ff3afbb5fa0 RCX: 00007ff3af98ebe9 [ 732.838469][T17758] RDX: 0000000000000042 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 732.838491][T17758] RBP: 00007ff3afa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 732.838513][T17758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.838533][T17758] R13: 00007ff3afbb6038 R14: 00007ff3afbb5fa0 R15: 00007fff96756188 [ 732.838565][T17758] [ 734.975630][T17794] random: crng reseeded on system resumption [ 736.816809][T17809] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 736.858160][T17814] FAULT_INJECTION: forcing a failure. [ 736.858160][T17814] name failslab, interval 1, probability 0, space 0, times 0 [ 736.880539][T17814] CPU: 1 UID: 0 PID: 17814 Comm: syz.3.2412 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 736.880604][T17814] Tainted: [U]=USER [ 736.880617][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 736.880638][T17814] Call Trace: [ 736.880649][T17814] [ 736.880662][T17814] dump_stack_lvl+0x16c/0x1f0 [ 736.880710][T17814] should_fail_ex+0x512/0x640 [ 736.880761][T17814] should_failslab+0xc2/0x120 [ 736.880807][T17814] __kmalloc_cache_noprof+0x6a/0x3e0 [ 736.880844][T17814] ? do_epoll_create+0x62/0x480 [ 736.880881][T17814] do_epoll_create+0x62/0x480 [ 736.880915][T17814] __x64_sys_epoll_create+0x45/0x70 [ 736.880950][T17814] do_syscall_64+0xcd/0x490 [ 736.880992][T17814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.881018][T17814] RIP: 0033:0x7f86b7f8ebe9 [ 736.881036][T17814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.881059][T17814] RSP: 002b:00007f86b61f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 736.881082][T17814] RAX: ffffffffffffffda RBX: 00007f86b81b6090 RCX: 00007f86b7f8ebe9 [ 736.881099][T17814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 736.881113][T17814] RBP: 00007f86b8011e19 R08: 0000000000000000 R09: 0000000000000000 [ 736.881128][T17814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.881143][T17814] R13: 00007f86b81b6128 R14: 00007f86b81b6090 R15: 00007ffda5de3bf8 [ 736.881166][T17814] [ 738.417004][T17846] FAULT_INJECTION: forcing a failure. [ 738.417004][T17846] name failslab, interval 1, probability 0, space 0, times 0 [ 738.470416][T17846] CPU: 1 UID: 0 PID: 17846 Comm: syz.2.2417 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 738.470473][T17846] Tainted: [U]=USER [ 738.470485][T17846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 738.470505][T17846] Call Trace: [ 738.470515][T17846] [ 738.470528][T17846] dump_stack_lvl+0x16c/0x1f0 [ 738.470574][T17846] should_fail_ex+0x512/0x640 [ 738.470622][T17846] should_failslab+0xc2/0x120 [ 738.470670][T17846] __kmalloc_cache_noprof+0x6a/0x3e0 [ 738.470703][T17846] ? single_open+0x4d/0x1f0 [ 738.470753][T17846] ? __pfx_show_smaps_rollup+0x10/0x10 [ 738.470791][T17846] single_open+0x4d/0x1f0 [ 738.470837][T17846] smaps_rollup_open+0x6f/0x170 [ 738.470872][T17846] do_dentry_open+0x97f/0x1530 [ 738.470911][T17846] ? __pfx_smaps_rollup_open+0x10/0x10 [ 738.470949][T17846] vfs_open+0x82/0x3f0 [ 738.470997][T17846] path_openat+0x1de4/0x2cb0 [ 738.471040][T17846] ? __pfx_path_openat+0x10/0x10 [ 738.471082][T17846] do_filp_open+0x20b/0x470 [ 738.471118][T17846] ? __pfx_do_filp_open+0x10/0x10 [ 738.471191][T17846] ? __pfx_kfree_link+0x10/0x10 [ 738.471245][T17846] ? alloc_fd+0x471/0x7d0 [ 738.471283][T17846] do_sys_openat2+0x11b/0x1d0 [ 738.471332][T17846] ? __pfx_do_sys_openat2+0x10/0x10 [ 738.471390][T17846] __x64_sys_openat+0x174/0x210 [ 738.471440][T17846] ? __pfx___x64_sys_openat+0x10/0x10 [ 738.471498][T17846] do_syscall_64+0xcd/0x490 [ 738.471542][T17846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.471574][T17846] RIP: 0033:0x7f5b8398ebe9 [ 738.471598][T17846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.471630][T17846] RSP: 002b:00007f5b848c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 738.471661][T17846] RAX: ffffffffffffffda RBX: 00007f5b83bb5fa0 RCX: 00007f5b8398ebe9 [ 738.471682][T17846] RDX: 00000000001a3000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 738.471704][T17846] RBP: 00007f5b83a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 738.471723][T17846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.471743][T17846] R13: 00007f5b83bb6038 R14: 00007f5b83bb5fa0 R15: 00007ffdb0c4cf88 [ 738.471775][T17846] [ 738.832277][T17850] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 738.845559][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 740.150133][T17861] random: crng reseeded on system resumption [ 741.698242][T17884] random: crng reseeded on system resumption [ 742.312566][T17901] FAULT_INJECTION: forcing a failure. [ 742.312566][T17901] name failslab, interval 1, probability 0, space 0, times 0 [ 742.325346][T17901] CPU: 1 UID: 0 PID: 17901 Comm: syz.1.2430 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 742.325388][T17901] Tainted: [U]=USER [ 742.325396][T17901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 742.325411][T17901] Call Trace: [ 742.325418][T17901] [ 742.325427][T17901] dump_stack_lvl+0x16c/0x1f0 [ 742.325462][T17901] should_fail_ex+0x512/0x640 [ 742.325499][T17901] should_failslab+0xc2/0x120 [ 742.325532][T17901] __kmalloc_cache_noprof+0x6a/0x3e0 [ 742.325557][T17901] ? __pfx___might_resched+0x10/0x10 [ 742.325581][T17901] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 742.325603][T17901] ? rcu_is_watching+0x12/0xc0 [ 742.325629][T17901] __hw_addr_add_ex+0x3c9/0x7c0 [ 742.325658][T17901] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 742.325689][T17901] ? __mutex_unlock_slowpath+0x141/0x800 [ 742.325738][T17901] ? __pfx_do_setup+0x10/0x10 [ 742.325781][T17901] dev_addr_init+0x161/0x250 [ 742.325815][T17901] ? __pfx_dev_addr_init+0x10/0x10 [ 742.325865][T17901] alloc_netdev_mqs+0x35e/0x1530 [ 742.325915][T17901] internal_dev_create+0x8a/0x520 [ 742.325961][T17901] ovs_vport_add+0x147/0x4d0 [ 742.326004][T17901] new_vport+0x16/0x1d0 [ 742.326038][T17901] ovs_dp_cmd_new+0x6ba/0xe60 [ 742.326080][T17901] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 742.326123][T17901] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 742.326179][T17901] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 742.326239][T17901] genl_family_rcv_msg_doit+0x206/0x2f0 [ 742.326293][T17901] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 742.326351][T17901] ? bpf_lsm_capable+0x9/0x10 [ 742.326383][T17901] ? security_capable+0x7e/0x260 [ 742.326416][T17901] ? ns_capable+0xd7/0x110 [ 742.326452][T17901] genl_rcv_msg+0x55c/0x800 [ 742.326503][T17901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.326554][T17901] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 742.326598][T17901] netlink_rcv_skb+0x155/0x420 [ 742.326643][T17901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.326694][T17901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 742.326747][T17901] ? netlink_deliver_tap+0x1ae/0xd30 [ 742.326792][T17901] genl_rcv+0x28/0x40 [ 742.326838][T17901] netlink_unicast+0x5aa/0x870 [ 742.326896][T17901] ? __pfx_netlink_unicast+0x10/0x10 [ 742.326941][T17901] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 742.326992][T17901] netlink_sendmsg+0x8d1/0xdd0 [ 742.327040][T17901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.327090][T17901] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 742.327127][T17901] ____sys_sendmsg+0xa95/0xc70 [ 742.327178][T17901] ? copy_msghdr_from_user+0x10a/0x160 [ 742.327222][T17901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 742.327272][T17901] ? preempt_schedule_thunk+0x16/0x30 [ 742.327323][T17901] ? try_to_wake_up+0xa67/0x1870 [ 742.327358][T17901] ___sys_sendmsg+0x134/0x1d0 [ 742.327402][T17901] ? __pfx____sys_sendmsg+0x10/0x10 [ 742.327445][T17901] ? futex_private_hash_put+0x11c/0x300 [ 742.327492][T17901] ? rcu_is_watching+0x12/0xc0 [ 742.327540][T17901] __sys_sendmsg+0x16d/0x220 [ 742.327582][T17901] ? __pfx___sys_sendmsg+0x10/0x10 [ 742.327625][T17901] ? __x64_sys_futex+0x1e0/0x4c0 [ 742.327680][T17901] do_syscall_64+0xcd/0x490 [ 742.327726][T17901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.327760][T17901] RIP: 0033:0x7f905e98ebe9 [ 742.327786][T17901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.327820][T17901] RSP: 002b:00007f905f857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.327852][T17901] RAX: ffffffffffffffda RBX: 00007f905ebb5fa0 RCX: 00007f905e98ebe9 [ 742.327883][T17901] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 742.327905][T17901] RBP: 00007f905ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 742.327926][T17901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.327947][T17901] R13: 00007f905ebb6038 R14: 00007f905ebb5fa0 R15: 00007fff5573cfe8 [ 742.327978][T17901] [ 744.801973][T17933] ICMPv6: process `syz.3.2437' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 744.881582][T17934] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 745.314108][T17923] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 746.061619][ T30] audit: type=1326 audit(4294968735.479:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17960 comm="syz.4.2442" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3af98ebe9 code=0x0 [ 746.154640][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2443'. [ 746.485959][T17969] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2445'. [ 747.547251][T17980] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 747.553752][T17980] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 747.580292][T17980] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 747.588913][T17980] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 747.616408][T17980] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 747.644988][T17980] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 747.667832][T17980] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 747.705162][T17980] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 747.715888][T17980] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 747.728010][T17980] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 747.746236][T17980] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 748.003885][T17997] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 748.405012][T18007] FAULT_INJECTION: forcing a failure. [ 748.405012][T18007] name failslab, interval 1, probability 0, space 0, times 0 [ 748.418639][T18007] CPU: 0 UID: 0 PID: 18007 Comm: syz.4.2454 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 748.418678][T18007] Tainted: [U]=USER [ 748.418686][T18007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 748.418700][T18007] Call Trace: [ 748.418708][T18007] [ 748.418716][T18007] dump_stack_lvl+0x16c/0x1f0 [ 748.418749][T18007] should_fail_ex+0x512/0x640 [ 748.418785][T18007] should_failslab+0xc2/0x120 [ 748.418816][T18007] __kmalloc_cache_noprof+0x6a/0x3e0 [ 748.418840][T18007] ? do_epoll_create+0x62/0x480 [ 748.418866][T18007] do_epoll_create+0x62/0x480 [ 748.418889][T18007] __x64_sys_epoll_create+0x45/0x70 [ 748.418915][T18007] do_syscall_64+0xcd/0x490 [ 748.418952][T18007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.418976][T18007] RIP: 0033:0x7ff3af98ebe9 [ 748.419012][T18007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.419037][T18007] RSP: 002b:00007ff3adbd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 748.419060][T18007] RAX: ffffffffffffffda RBX: 00007ff3afbb6090 RCX: 00007ff3af98ebe9 [ 748.419076][T18007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 748.419090][T18007] RBP: 00007ff3afa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 748.419105][T18007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.419119][T18007] R13: 00007ff3afbb6128 R14: 00007ff3afbb6090 R15: 00007fff96756188 [ 748.419142][T18007] [ 748.500352][T18009] bridge0: port 3(team0) entered blocking state [ 748.608097][T18009] bridge0: port 3(team0) entered disabled state [ 748.614925][T18009] team0: entered allmulticast mode [ 748.627078][T18009] team_slave_0: entered allmulticast mode [ 748.634983][T18009] team_slave_1: entered allmulticast mode [ 748.646213][T18009] team0: entered promiscuous mode [ 748.648125][T18011] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 748.656566][T18009] team_slave_0: entered promiscuous mode [ 748.685475][T18009] team_slave_1: entered promiscuous mode [ 748.732935][T18009] bridge0: port 3(team0) entered blocking state [ 748.739358][T18009] bridge0: port 3(team0) entered forwarding state [ 749.354051][T18027] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 749.608199][T18023] Bluetooth: hci5: command 0x0c1a tx timeout [ 749.615911][T18023] Bluetooth: hci4: command 0x040f tx timeout [ 749.622137][T17821] Bluetooth: hci3: command 0x0c1a tx timeout [ 749.687981][T18023] Bluetooth: hci2: command 0x0c1a tx timeout [ 749.768879][T18023] Bluetooth: hci1: command 0x0c1a tx timeout [ 750.622000][T18069] Setting dangerous option i915.mitigations - tainting kernel [ 751.688767][T18023] Bluetooth: hci5: command 0x0c1a tx timeout [ 751.769220][T18023] Bluetooth: hci2: command 0x0c1a tx timeout [ 751.848731][T18023] Bluetooth: hci1: command 0x0c1a tx timeout [ 751.870651][T18087] ubi0: attaching mtd0 [ 751.885926][T18087] ubi0: scanning is finished [ 751.949429][T18087] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 752.149798][T18087] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 752.243121][T18093] ubi0: attaching mtd0 [ 752.249749][T18093] ubi0: scanning is finished [ 752.279084][T18093] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 752.516407][T18093] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 753.771988][T18023] Bluetooth: hci5: command 0x0c1a tx timeout [ 753.851050][T18023] Bluetooth: hci2: command 0x0c1a tx timeout [ 753.930075][T18023] Bluetooth: hci1: command 0x0c1a tx timeout [ 754.984297][T18141] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 755.237091][T18146] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 756.096049][T18165] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 756.684357][T18177] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 756.888324][T18186] FAULT_INJECTION: forcing a failure. [ 756.888324][T18186] name failslab, interval 1, probability 0, space 0, times 0 [ 756.933413][T18186] CPU: 1 UID: 0 PID: 18186 Comm: syz.2.2496 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 756.933455][T18186] Tainted: [U]=USER [ 756.933463][T18186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 756.933478][T18186] Call Trace: [ 756.933486][T18186] [ 756.933494][T18186] dump_stack_lvl+0x16c/0x1f0 [ 756.933530][T18186] should_fail_ex+0x512/0x640 [ 756.933567][T18186] should_failslab+0xc2/0x120 [ 756.933601][T18186] __kmalloc_cache_noprof+0x6a/0x3e0 [ 756.933626][T18186] ? do_epoll_create+0x62/0x480 [ 756.933662][T18186] do_epoll_create+0x62/0x480 [ 756.933695][T18186] __x64_sys_epoll_create+0x45/0x70 [ 756.933731][T18186] do_syscall_64+0xcd/0x490 [ 756.933769][T18186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.933794][T18186] RIP: 0033:0x7f5b8398ebe9 [ 756.933812][T18186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.933836][T18186] RSP: 002b:00007f5b848a2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 756.933868][T18186] RAX: ffffffffffffffda RBX: 00007f5b83bb6090 RCX: 00007f5b8398ebe9 [ 756.933885][T18186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 756.933899][T18186] RBP: 00007f5b83a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 756.933915][T18186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.933930][T18186] R13: 00007f5b83bb6128 R14: 00007f5b83bb6090 R15: 00007ffdb0c4cf88 [ 756.933953][T18186] [ 757.121748][T18163] ima: policy update failed [ 757.127376][ T30] audit: type=1802 audit(4294968746.544:32): pid=18163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2491" res=0 errno=0 [ 757.274511][T18190] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 757.697743][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.704255][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.849729][T18199] FAULT_INJECTION: forcing a failure. [ 757.849729][T18199] name failslab, interval 1, probability 0, space 0, times 0 [ 757.921717][T18199] CPU: 1 UID: 0 PID: 18199 Comm: syz.1.2499 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 757.921776][T18199] Tainted: [U]=USER [ 757.921788][T18199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 757.921809][T18199] Call Trace: [ 757.921837][T18199] [ 757.921851][T18199] dump_stack_lvl+0x16c/0x1f0 [ 757.921900][T18199] should_fail_ex+0x512/0x640 [ 757.921956][T18199] should_failslab+0xc2/0x120 [ 757.922002][T18199] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 757.922043][T18199] ? sock_alloc_inode+0x25/0x1c0 [ 757.922098][T18199] ? __pfx_sock_alloc_inode+0x10/0x10 [ 757.922145][T18199] sock_alloc_inode+0x25/0x1c0 [ 757.922192][T18199] alloc_inode+0x61/0x240 [ 757.922239][T18199] sock_alloc+0x40/0x280 [ 757.922278][T18199] __sock_create+0xc1/0x8d0 [ 757.922306][T18199] __sys_socket+0x14d/0x260 [ 757.922333][T18199] ? __pfx___sys_socket+0x10/0x10 [ 757.922361][T18199] ? xfd_validate_state+0x61/0x180 [ 757.922406][T18199] __x64_sys_socket+0x72/0xb0 [ 757.922433][T18199] do_syscall_64+0xcd/0x490 [ 757.922471][T18199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.922500][T18199] RIP: 0033:0x7f905e98ebe9 [ 757.922521][T18199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.922550][T18199] RSP: 002b:00007f905f857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 757.922578][T18199] RAX: ffffffffffffffda RBX: 00007f905ebb5fa0 RCX: 00007f905e98ebe9 [ 757.922598][T18199] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 757.922615][T18199] RBP: 00007f905ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 757.922633][T18199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.922650][T18199] R13: 00007f905ebb6038 R14: 00007f905ebb5fa0 R15: 00007fff5573cfe8 [ 757.922677][T18199] [ 758.115489][T18199] socket: no more sockets [ 758.887047][T18215] FAULT_INJECTION: forcing a failure. [ 758.887047][T18215] name failslab, interval 1, probability 0, space 0, times 0 [ 758.920315][T18215] CPU: 0 UID: 0 PID: 18215 Comm: syz.1.2501 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 758.920359][T18215] Tainted: [U]=USER [ 758.920367][T18215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 758.920382][T18215] Call Trace: [ 758.920390][T18215] [ 758.920399][T18215] dump_stack_lvl+0x16c/0x1f0 [ 758.920432][T18215] should_fail_ex+0x512/0x640 [ 758.920472][T18215] should_failslab+0xc2/0x120 [ 758.920505][T18215] __kvmalloc_node_noprof+0x137/0x620 [ 758.920532][T18215] ? alloc_netdev_mqs+0xf76/0x1530 [ 758.920566][T18215] ? alloc_netdev_mqs+0xf76/0x1530 [ 758.920596][T18215] alloc_netdev_mqs+0xf76/0x1530 [ 758.920630][T18215] internal_dev_create+0x8a/0x520 [ 758.920665][T18215] ovs_vport_add+0x147/0x4d0 [ 758.920702][T18215] new_vport+0x16/0x1d0 [ 758.920726][T18215] ovs_dp_cmd_new+0x6ba/0xe60 [ 758.920756][T18215] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 758.920787][T18215] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 758.920828][T18215] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 758.920870][T18215] genl_family_rcv_msg_doit+0x206/0x2f0 [ 758.920909][T18215] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 758.920951][T18215] ? bpf_lsm_capable+0x9/0x10 [ 758.920973][T18215] ? security_capable+0x7e/0x260 [ 758.920997][T18215] ? ns_capable+0xd7/0x110 [ 758.921022][T18215] genl_rcv_msg+0x55c/0x800 [ 758.921060][T18215] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.921096][T18215] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 758.921127][T18215] netlink_rcv_skb+0x155/0x420 [ 758.921159][T18215] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.921195][T18215] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.921233][T18215] ? netlink_deliver_tap+0x1ae/0xd30 [ 758.921265][T18215] genl_rcv+0x28/0x40 [ 758.921297][T18215] netlink_unicast+0x5aa/0x870 [ 758.921330][T18215] ? __pfx_netlink_unicast+0x10/0x10 [ 758.921362][T18215] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 758.921398][T18215] netlink_sendmsg+0x8d1/0xdd0 [ 758.921432][T18215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.921468][T18215] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 758.921495][T18215] ____sys_sendmsg+0xa95/0xc70 [ 758.921533][T18215] ? copy_msghdr_from_user+0x10a/0x160 [ 758.921564][T18215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 758.921605][T18215] ? __pfx_futex_wake_mark+0x10/0x10 [ 758.921642][T18215] ___sys_sendmsg+0x134/0x1d0 [ 758.921673][T18215] ? __pfx____sys_sendmsg+0x10/0x10 [ 758.921709][T18215] ? futex_private_hash_put+0x11c/0x300 [ 758.921741][T18215] ? rcu_is_watching+0x12/0xc0 [ 758.921775][T18215] __sys_sendmsg+0x16d/0x220 [ 758.921805][T18215] ? __pfx___sys_sendmsg+0x10/0x10 [ 758.921835][T18215] ? __x64_sys_futex+0x1e0/0x4c0 [ 758.921874][T18215] do_syscall_64+0xcd/0x490 [ 758.921906][T18215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.921931][T18215] RIP: 0033:0x7f905e98ebe9 [ 758.921949][T18215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.921972][T18215] RSP: 002b:00007f905f857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.921995][T18215] RAX: ffffffffffffffda RBX: 00007f905ebb5fa0 RCX: 00007f905e98ebe9 [ 758.922012][T18215] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000006 [ 758.922027][T18215] RBP: 00007f905ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 758.922042][T18215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.922057][T18215] R13: 00007f905ebb6038 R14: 00007f905ebb5fa0 R15: 00007fff5573cfe8 [ 758.922080][T18215] [ 759.778427][T18221] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 760.137796][T18232] syz.3.2506: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 760.213047][T18232] CPU: 1 UID: 0 PID: 18232 Comm: syz.3.2506 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 760.213104][T18232] Tainted: [U]=USER [ 760.213116][T18232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 760.213137][T18232] Call Trace: [ 760.213147][T18232] [ 760.213160][T18232] dump_stack_lvl+0x16c/0x1f0 [ 760.213206][T18232] warn_alloc+0x248/0x3a0 [ 760.213245][T18232] ? __pfx_warn_alloc+0x10/0x10 [ 760.213294][T18232] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 760.213342][T18232] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 760.213375][T18232] ? __pfx___might_resched+0x10/0x10 [ 760.213409][T18232] ? rcu_is_watching+0x12/0xc0 [ 760.213442][T18232] ? trace_contention_end+0xdd/0x130 [ 760.213486][T18232] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 760.213533][T18232] ? tomoyo_path_number_perm+0x295/0x580 [ 760.213573][T18232] ? rcu_is_watching+0x12/0xc0 [ 760.213607][T18232] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 760.213650][T18232] ? __pfx___mutex_lock+0x10/0x10 [ 760.213696][T18232] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 760.213740][T18232] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 760.213805][T18232] __vmalloc_node_noprof+0xad/0xf0 [ 760.213836][T18232] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 760.213887][T18232] dvb_dvr_do_ioctl+0x15d/0x290 [ 760.213939][T18232] dvb_usercopy+0x167/0x340 [ 760.213985][T18232] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 760.214036][T18232] ? __pfx_dvb_usercopy+0x10/0x10 [ 760.214092][T18232] ? __fget_files+0x20e/0x3c0 [ 760.214131][T18232] dvb_dvr_ioctl+0x29/0x40 [ 760.214178][T18232] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 760.214226][T18232] __x64_sys_ioctl+0x18e/0x210 [ 760.214279][T18232] do_syscall_64+0xcd/0x490 [ 760.214324][T18232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.214358][T18232] RIP: 0033:0x7f86b7f8ebe9 [ 760.214385][T18232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.214418][T18232] RSP: 002b:00007f86b8d28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.214450][T18232] RAX: ffffffffffffffda RBX: 00007f86b81b5fa0 RCX: 00007f86b7f8ebe9 [ 760.214473][T18232] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 760.214495][T18232] RBP: 00007f86b8011e19 R08: 0000000000000000 R09: 0000000000000000 [ 760.214516][T18232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.214537][T18232] R13: 00007f86b81b6038 R14: 00007f86b81b5fa0 R15: 00007ffda5de3bf8 [ 760.214571][T18232] [ 760.214595][T18232] Mem-Info: [ 760.582358][T18232] active_anon:15939 inactive_anon:17673 isolated_anon:0 [ 760.582358][T18232] active_file:17655 inactive_file:43476 isolated_file:0 [ 760.582358][T18232] unevictable:768 dirty:399 writeback:0 [ 760.582358][T18232] slab_reclaimable:13991 slab_unreclaimable:108692 [ 760.582358][T18232] mapped:40880 shmem:12794 pagetables:1457 [ 760.582358][T18232] sec_pagetables:0 bounce:0 [ 760.582358][T18232] kernel_misc_reclaimable:0 [ 760.582358][T18232] free:1252862 free_pcp:16296 free_cma:0 [ 760.713362][T18232] Node 0 active_anon:63756kB inactive_anon:70192kB active_file:68476kB inactive_file:171884kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161600kB dirty:1592kB writeback:0kB shmem:49640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15308kB pagetables:5684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 760.747553][T18232] Node 1 active_anon:0kB inactive_anon:0kB active_file:2544kB inactive_file:1620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1520kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 760.778391][T18232] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.818765][T18232] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 760.947835][T18232] Node 0 DMA32 free:1127800kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63708kB inactive_anon:66292kB active_file:68896kB inactive_file:170144kB unevictable:1536kB writepending:1592kB present:3129332kB managed:2539608kB mlocked:0kB bounce:0kB free_pcp:31720kB local_pcp:16004kB free_cma:0kB [ 761.082394][T18232] lowmem_reserve[]: 0 0 1 1 1 [ 761.098634][T18232] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:980kB inactive_file:340kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 761.204177][T18232] lowmem_reserve[]: 0 0 0 0 0 [ 761.209069][T18232] Node 1 Normal free:3868268kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4032kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:38336kB local_pcp:26792kB free_cma:0kB [ 761.332273][T18232] lowmem_reserve[]: 0 0 0 0 0 [ 761.338053][T18232] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 761.352693][T18232] Node 0 DMA32: 570*4kB (U) 186*8kB (UME) 53*16kB (UE) 281*32kB (UM) 549*64kB (UME) 357*128kB (UME) 270*256kB (UM) 117*512kB (UM) 61*1024kB (UM) 11*2048kB (UME) 200*4096kB (UM) = 1127656kB [ 761.376389][T18232] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 761.425496][T18232] Node 1 Normal: 7*4kB (UME) 50*8kB (U) 32*16kB (U) 204*32kB (UME) 99*64kB (UME) 27*128kB (UME) 9*256kB (UME) 5*512kB (U) 2*1024kB (U) 3*2048kB (UM) 937*4096kB (M) = 3868268kB [ 761.453530][T18232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 761.465016][T18232] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 761.476533][T18232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 761.488911][T18232] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 761.498471][T18232] 73595 total pagecache pages [ 761.518588][T18232] 57 pages in swap cache [ 761.522869][T18232] Free swap = 124624kB [ 761.540403][T18232] Total swap = 124996kB [ 761.593588][T18232] 2097051 pages RAM [ 761.597566][T18232] 0 pages HighMem/MovableOnly [ 761.602277][T18232] 430187 pages reserved [ 761.655786][T18232] 0 pages cma reserved [ 762.660747][T18266] FAULT_INJECTION: forcing a failure. [ 762.660747][T18266] name failslab, interval 1, probability 0, space 0, times 0 [ 762.735020][T18266] CPU: 1 UID: 0 PID: 18266 Comm: syz.4.2512 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 762.735078][T18266] Tainted: [U]=USER [ 762.735089][T18266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 762.735110][T18266] Call Trace: [ 762.735121][T18266] [ 762.735134][T18266] dump_stack_lvl+0x16c/0x1f0 [ 762.735187][T18266] should_fail_ex+0x512/0x640 [ 762.735236][T18266] should_failslab+0xc2/0x120 [ 762.735279][T18266] __kmalloc_cache_noprof+0x6a/0x3e0 [ 762.735313][T18266] ? alloc_netdev_mqs+0xec4/0x1530 [ 762.735358][T18266] alloc_netdev_mqs+0xec4/0x1530 [ 762.735402][T18266] internal_dev_create+0x8a/0x520 [ 762.735450][T18266] ovs_vport_add+0x147/0x4d0 [ 762.735493][T18266] new_vport+0x16/0x1d0 [ 762.735525][T18266] ovs_dp_cmd_new+0x6ba/0xe60 [ 762.735565][T18266] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 762.735605][T18266] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 762.735659][T18266] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 762.735716][T18266] genl_family_rcv_msg_doit+0x206/0x2f0 [ 762.735767][T18266] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 762.735825][T18266] ? bpf_lsm_capable+0x9/0x10 [ 762.735855][T18266] ? security_capable+0x7e/0x260 [ 762.735887][T18266] ? ns_capable+0xd7/0x110 [ 762.735920][T18266] genl_rcv_msg+0x55c/0x800 [ 762.735970][T18266] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.736020][T18266] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 762.736062][T18266] netlink_rcv_skb+0x155/0x420 [ 762.736106][T18266] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.736155][T18266] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 762.736216][T18266] ? netlink_deliver_tap+0x1ae/0xd30 [ 762.736259][T18266] genl_rcv+0x28/0x40 [ 762.736301][T18266] netlink_unicast+0x5aa/0x870 [ 762.736347][T18266] ? __pfx_netlink_unicast+0x10/0x10 [ 762.736409][T18266] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 762.736460][T18266] netlink_sendmsg+0x8d1/0xdd0 [ 762.736506][T18266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.736551][T18266] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 762.736589][T18266] ____sys_sendmsg+0xa95/0xc70 [ 762.736628][T18266] ? copy_msghdr_from_user+0x10a/0x160 [ 762.736659][T18266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 762.736700][T18266] ? __pfx_futex_wake_mark+0x10/0x10 [ 762.736738][T18266] ___sys_sendmsg+0x134/0x1d0 [ 762.736769][T18266] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.736799][T18266] ? futex_private_hash_put+0x11c/0x300 [ 762.736832][T18266] ? rcu_is_watching+0x12/0xc0 [ 762.736865][T18266] __sys_sendmsg+0x16d/0x220 [ 762.736895][T18266] ? __pfx___sys_sendmsg+0x10/0x10 [ 762.736925][T18266] ? __x64_sys_futex+0x1e0/0x4c0 [ 762.736964][T18266] do_syscall_64+0xcd/0x490 [ 762.736996][T18266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.737020][T18266] RIP: 0033:0x7ff3af98ebe9 [ 762.737039][T18266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.737063][T18266] RSP: 002b:00007ff3adbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.737086][T18266] RAX: ffffffffffffffda RBX: 00007ff3afbb5fa0 RCX: 00007ff3af98ebe9 [ 762.737103][T18266] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000006 [ 762.737118][T18266] RBP: 00007ff3afa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 762.737132][T18266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.737146][T18266] R13: 00007ff3afbb6038 R14: 00007ff3afbb5fa0 R15: 00007fff96756188 [ 762.737175][T18266] [ 763.667307][T18291] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 763.684932][T18284] svc: failed to register nfsdv3 RPC service (errno 111). [ 763.709845][T18284] svc: failed to register nfsaclv3 RPC service (errno 111). [ 765.143860][T18317] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 765.322186][T18331] random: crng reseeded on system resumption [ 765.358048][ T9721] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:35: iget: bad extra_isize 40246 (inode size 256) [ 765.391383][T10960] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:42: iget: bad extra_isize 40246 (inode size 256) [ 765.405716][ T9721] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 765.441912][T10960] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db.p7s failed with error -117 [ 765.455673][ T9721] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:35: iget: bad extra_isize 40246 (inode size 256) [ 765.482325][T10960] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:42: iget: bad extra_isize 40246 (inode size 256) [ 765.500049][ T9721] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -117 [ 765.595949][ T9721] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:35: iget: bad extra_isize 40246 (inode size 256) [ 765.612346][T10960] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -117 [ 765.636456][T10960] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:42: iget: bad extra_isize 40246 (inode size 256) [ 765.654182][ T9721] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 765.683308][T10960] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db.p7s failed with error -117 [ 765.704293][ T9721] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:35: iget: bad extra_isize 40246 (inode size 256) [ 765.734584][T10960] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:42: iget: bad extra_isize 40246 (inode size 256) [ 765.750459][ T9721] (NULL device *): loading /lib/firmware/regulatory.db failed with error -117 [ 765.762433][ T9721] (NULL device *): Direct firmware load for regulatory.db failed with error -117 [ 765.773957][T10960] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -117 [ 765.785451][ T9721] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 765.795302][T10960] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -117 [ 765.809341][T10960] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 767.076603][T18357] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 768.343788][T18370] Process accounting resumed [ 776.510388][T18391] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 776.926479][T18393] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 778.027063][T18431] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 778.442210][T18418] FAULT_INJECTION: forcing a failure. [ 778.442210][T18418] name failslab, interval 1, probability 0, space 0, times 0 [ 778.455165][T18418] CPU: 1 UID: 0 PID: 18418 Comm: syz.1.2541 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 778.455207][T18418] Tainted: [U]=USER [ 778.455215][T18418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 778.455230][T18418] Call Trace: [ 778.455238][T18418] [ 778.455246][T18418] dump_stack_lvl+0x16c/0x1f0 [ 778.455281][T18418] should_fail_ex+0x512/0x640 [ 778.455318][T18418] ? acpi_ns_get_normalized_pathname+0x75/0xd0 [ 778.455357][T18418] should_failslab+0xc2/0x120 [ 778.455390][T18418] __kmalloc_noprof+0xd2/0x510 [ 778.455421][T18418] acpi_ns_get_normalized_pathname+0x75/0xd0 [ 778.455461][T18418] acpi_ex_start_trace_method+0x30/0x480 [ 778.455486][T18418] acpi_ds_begin_method_execution+0x3c/0x980 [ 778.455514][T18418] ? acpi_tb_check_dsdt_header+0x187/0x3e0 [ 778.455542][T18418] acpi_ps_execute_method+0x94/0xb30 [ 778.455577][T18418] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 778.455616][T18418] acpi_ns_evaluate+0x76c/0xca0 [ 778.455652][T18418] ? kasan_save_track+0x14/0x30 [ 778.455681][T18418] acpi_evaluate_object+0x1fa/0xa90 [ 778.455708][T18418] ? __kvmalloc_node_noprof+0x27b/0x620 [ 778.455734][T18418] ? seq_read_iter+0x826/0x12c0 [ 778.455756][T18418] ? kernfs_fop_read_iter+0x40f/0x5a0 [ 778.455779][T18418] ? do_syscall_64+0xcd/0x490 [ 778.455809][T18418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.455835][T18418] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 778.455872][T18418] ? __mutex_trylock_common+0xe9/0x250 [ 778.455908][T18418] acpi_evaluate_integer+0xdd/0x200 [ 778.455932][T18418] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 778.455961][T18418] ? __pfx_status_show+0x10/0x10 [ 778.455990][T18418] status_show+0xa0/0x120 [ 778.456018][T18418] ? __pfx_status_show+0x10/0x10 [ 778.456046][T18418] ? rcu_is_watching+0x12/0xc0 [ 778.456070][T18418] ? lock_release+0x201/0x2f0 [ 778.456108][T18418] dev_attr_show+0x53/0xe0 [ 778.456145][T18418] ? __pfx_dev_attr_show+0x10/0x10 [ 778.456180][T18418] sysfs_kf_seq_show+0x216/0x3e0 [ 778.456209][T18418] seq_read_iter+0x506/0x12c0 [ 778.456232][T18418] ? __mutex_trylock_common+0xe9/0x250 [ 778.456268][T18418] kernfs_fop_read_iter+0x40f/0x5a0 [ 778.456290][T18418] ? rw_verify_area+0xcf/0x6c0 [ 778.456315][T18418] vfs_read+0x8bf/0xcf0 [ 778.456342][T18418] ? __pfx___mutex_lock+0x10/0x10 [ 778.456374][T18418] ? __pfx_vfs_read+0x10/0x10 [ 778.456409][T18418] ksys_read+0x12a/0x250 [ 778.456435][T18418] ? __pfx_ksys_read+0x10/0x10 [ 778.456465][T18418] do_syscall_64+0xcd/0x490 [ 778.456497][T18418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.456521][T18418] RIP: 0033:0x7f905e98ebe9 [ 778.456540][T18418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.456565][T18418] RSP: 002b:00007f905f857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 778.456587][T18418] RAX: ffffffffffffffda RBX: 00007f905ebb5fa0 RCX: 00007f905e98ebe9 [ 778.456603][T18418] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000006 [ 778.456618][T18418] RBP: 00007f905ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 778.456633][T18418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.456648][T18418] R13: 00007f905ebb6038 R14: 00007f905ebb5fa0 R15: 00007fff5573cfe8 [ 778.456671][T18418] [ 778.458052][T18418] ACPI Error: Could not allocate 15 bytes (20250404/nsnames-308) [ 779.117290][T18417] ptrace attach of "./syz-executor exec"[7963] was attempted by "./syz-executor exec"[18417] [ 779.117301][T18433] ptrace attach of "./syz-executor exec"[7963] was attempted by "./syz-executor exec"[18433] [ 779.295284][T18418] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [49] [ 780.744491][T18469] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 781.002761][T18460] kexec: Could not allocate control_code_buffer [ 781.744357][ T30] audit: type=1800 audit(4294968771.111:33): pid=18476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=79888 res=0 errno=0 [ 783.678161][T18514] FAULT_INJECTION: forcing a failure. [ 783.678161][T18514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 783.725146][T18511] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 783.745175][T18514] CPU: 1 UID: 0 PID: 18514 Comm: syz.2.2559 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 783.745230][T18514] Tainted: [U]=USER [ 783.745242][T18514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 783.745262][T18514] Call Trace: [ 783.745272][T18514] [ 783.745285][T18514] dump_stack_lvl+0x16c/0x1f0 [ 783.745331][T18514] should_fail_ex+0x512/0x640 [ 783.745380][T18514] should_fail_alloc_page+0xe7/0x130 [ 783.745427][T18514] prepare_alloc_pages+0x3c2/0x610 [ 783.745489][T18514] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 783.745530][T18514] ? stack_trace_save+0x8e/0xc0 [ 783.745567][T18514] ? __pfx_stack_trace_save+0x10/0x10 [ 783.745603][T18514] ? rcu_is_watching+0x12/0xc0 [ 783.745636][T18514] ? stack_depot_save_flags+0x29/0x9c0 [ 783.745689][T18514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 783.745728][T18514] ? __kasan_slab_alloc+0x89/0x90 [ 783.745767][T18514] ? __pmd_alloc+0xbf/0x930 [ 783.745812][T18514] ? handle_mm_fault+0x589/0xd10 [ 783.745843][T18514] ? do_user_addr_fault+0x7a6/0x1370 [ 783.745892][T18514] ? exc_page_fault+0x5c/0xb0 [ 783.745926][T18514] ? asm_exc_page_fault+0x26/0x30 [ 783.745957][T18514] ? __get_user_nocheck_1+0x6/0x20 [ 783.745988][T18514] ? syscall_user_dispatch+0x78/0x140 [ 783.746039][T18514] ? syscall_trace_enter+0x5e/0x240 [ 783.746097][T18514] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 783.746147][T18514] ? policy_nodemask+0xea/0x4e0 [ 783.746190][T18514] alloc_pages_mpol+0x1fb/0x550 [ 783.746233][T18514] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 783.746282][T18514] alloc_pages_noprof+0x131/0x390 [ 783.746323][T18514] pte_alloc_one+0x1c/0x3a0 [ 783.746358][T18514] do_pte_missing+0x1afc/0x3ba0 [ 783.746392][T18514] ? do_raw_spin_unlock+0x172/0x230 [ 783.746444][T18514] ? __pmd_alloc+0x3fb/0x930 [ 783.746499][T18514] __handle_mm_fault+0x152a/0x2a50 [ 783.746532][T18514] ? mt_find+0x3ef/0xa30 [ 783.746576][T18514] ? __pfx___handle_mm_fault+0x10/0x10 [ 783.746606][T18514] ? __pfx_mt_find+0x10/0x10 [ 783.746661][T18514] ? find_vma+0xbf/0x140 [ 783.746701][T18514] ? __pfx_find_vma+0x10/0x10 [ 783.746744][T18514] handle_mm_fault+0x589/0xd10 [ 783.746777][T18514] ? __bpf_trace_exceptions+0x1/0x40 [ 783.746827][T18514] do_user_addr_fault+0x7a6/0x1370 [ 783.746881][T18514] ? rcu_is_watching+0x12/0xc0 [ 783.746915][T18514] exc_page_fault+0x5c/0xb0 [ 783.746952][T18514] asm_exc_page_fault+0x26/0x30 [ 783.746983][T18514] RIP: 0010:__get_user_nocheck_1+0x6/0x20 [ 783.747018][T18514] Code: c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb 0f ae e8 <0f> b6 10 31 c0 0f 01 ca c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 783.747051][T18514] RSP: 0018:ffffc900033c7ea8 EFLAGS: 00050202 [ 783.747078][T18514] RAX: 000000000000002a RBX: 0000000000000020 RCX: ffffffff812c3bee [ 783.747098][T18514] RDX: ffff88802d6f9e00 RSI: ffffffff812c3c56 RDI: ffffc900033c7f58 [ 783.747120][T18514] RBP: ffff88802d6f9e00 R08: 0000000000000005 R09: 0000000000000000 [ 783.747142][T18514] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000029 [ 783.747163][T18514] R13: ffffc900033c7f58 R14: 0000000000000000 R15: 0000000000000000 [ 783.747186][T18514] ? arch_syscall_is_vdso_sigreturn+0x4e/0x230 [ 783.747231][T18514] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 783.747278][T18514] syscall_user_dispatch+0x78/0x140 [ 783.747333][T18514] syscall_trace_enter+0x5e/0x240 [ 783.747384][T18514] do_syscall_64+0x347/0x490 [ 783.747426][T18514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.747470][T18514] RIP: 0033:0x7f5b8398ebe9 [ 783.747492][T18514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.747523][T18514] RSP: 002b:00007f5b848c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 783.747552][T18514] RAX: ffffffffffffffda RBX: 00007f5b83bb5fa0 RCX: 00007f5b8398ebe9 [ 783.747574][T18514] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 783.747594][T18514] RBP: 00007f5b83a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 783.747615][T18514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.747634][T18514] R13: 00007f5b83bb6038 R14: 00007f5b83bb5fa0 R15: 00007ffdb0c4cf88 [ 783.747666][T18514] [ 784.676041][T18520] FAULT_INJECTION: forcing a failure. [ 784.676041][T18520] name failslab, interval 1, probability 0, space 0, times 0 [ 784.757698][T18520] CPU: 0 UID: 0 PID: 18520 Comm: syz.1.2560 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 784.757740][T18520] Tainted: [U]=USER [ 784.757749][T18520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 784.757764][T18520] Call Trace: [ 784.757772][T18520] [ 784.757782][T18520] dump_stack_lvl+0x16c/0x1f0 [ 784.757816][T18520] should_fail_ex+0x512/0x640 [ 784.757854][T18520] should_failslab+0xc2/0x120 [ 784.757887][T18520] __kmalloc_cache_noprof+0x6a/0x3e0 [ 784.757912][T18520] ? lockdep_init_map_type+0x5c/0x280 [ 784.757946][T18520] ? register_netdevice+0x4eb/0x2270 [ 784.757983][T18520] register_netdevice+0x4eb/0x2270 [ 784.758020][T18520] ? __pfx_register_netdevice+0x10/0x10 [ 784.758055][T18520] ? alloc_netdev_mqs+0xe08/0x1530 [ 784.758089][T18520] internal_dev_create+0x2d3/0x520 [ 784.758125][T18520] ovs_vport_add+0x147/0x4d0 [ 784.758157][T18520] new_vport+0x16/0x1d0 [ 784.758181][T18520] ovs_dp_cmd_new+0x6ba/0xe60 [ 784.758211][T18520] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 784.758241][T18520] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 784.758282][T18520] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 784.758325][T18520] genl_family_rcv_msg_doit+0x206/0x2f0 [ 784.758379][T18520] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 784.758421][T18520] ? bpf_lsm_capable+0x9/0x10 [ 784.758444][T18520] ? security_capable+0x7e/0x260 [ 784.758468][T18520] ? ns_capable+0xd7/0x110 [ 784.758494][T18520] genl_rcv_msg+0x55c/0x800 [ 784.758532][T18520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 784.758569][T18520] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 784.758601][T18520] netlink_rcv_skb+0x155/0x420 [ 784.758633][T18520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 784.758670][T18520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 784.758708][T18520] ? netlink_deliver_tap+0x1ae/0xd30 [ 784.758745][T18520] genl_rcv+0x28/0x40 [ 784.758778][T18520] netlink_unicast+0x5aa/0x870 [ 784.758812][T18520] ? __pfx_netlink_unicast+0x10/0x10 [ 784.758844][T18520] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 784.758881][T18520] netlink_sendmsg+0x8d1/0xdd0 [ 784.758915][T18520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.758950][T18520] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 784.758982][T18520] ____sys_sendmsg+0xa95/0xc70 [ 784.759021][T18520] ? copy_msghdr_from_user+0x10a/0x160 [ 784.759051][T18520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 784.759089][T18520] ? preempt_schedule_thunk+0x16/0x30 [ 784.759126][T18520] ? try_to_wake_up+0xa67/0x1870 [ 784.759151][T18520] ___sys_sendmsg+0x134/0x1d0 [ 784.759182][T18520] ? __pfx____sys_sendmsg+0x10/0x10 [ 784.759213][T18520] ? futex_private_hash_put+0x11c/0x300 [ 784.759246][T18520] ? rcu_is_watching+0x12/0xc0 [ 784.759280][T18520] __sys_sendmsg+0x16d/0x220 [ 784.759310][T18520] ? __pfx___sys_sendmsg+0x10/0x10 [ 784.759341][T18520] ? __x64_sys_futex+0x1e0/0x4c0 [ 784.759385][T18520] do_syscall_64+0xcd/0x490 [ 784.759418][T18520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.759443][T18520] RIP: 0033:0x7f905e98ebe9 [ 784.759461][T18520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.759486][T18520] RSP: 002b:00007f905f857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.759509][T18520] RAX: ffffffffffffffda RBX: 00007f905ebb5fa0 RCX: 00007f905e98ebe9 [ 784.759525][T18520] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 784.759541][T18520] RBP: 00007f905ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 784.759555][T18520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.759569][T18520] R13: 00007f905ebb6038 R14: 00007f905ebb5fa0 R15: 00007fff5573cfe8 [ 784.759592][T18520] [ 785.998846][T18528] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 786.266140][ T9689] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 936 with max blocks 3 with error 117 [ 786.280325][ T9689] EXT4-fs (sda1): This should not happen!! Data will be lost [ 786.280325][ T9689] [ 787.486598][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'. [ 788.272048][T18523] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 788.848530][T18556] program syz.1.2568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 788.867753][T18558] FAULT_INJECTION: forcing a failure. [ 788.867753][T18558] name failslab, interval 1, probability 0, space 0, times 0 [ 788.960451][T18558] CPU: 0 UID: 0 PID: 18558 Comm: syz.4.2569 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 788.960510][T18558] Tainted: [U]=USER [ 788.960523][T18558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 788.960543][T18558] Call Trace: [ 788.960555][T18558] [ 788.960568][T18558] dump_stack_lvl+0x16c/0x1f0 [ 788.960610][T18558] should_fail_ex+0x512/0x640 [ 788.960648][T18558] should_failslab+0xc2/0x120 [ 788.960681][T18558] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 788.960711][T18558] ? security_file_alloc+0x34/0x2b0 [ 788.960747][T18558] security_file_alloc+0x34/0x2b0 [ 788.960781][T18558] init_file+0x93/0x4c0 [ 788.960816][T18558] alloc_empty_file+0x73/0x1e0 [ 788.960853][T18558] alloc_file_pseudo+0x13a/0x230 [ 788.960891][T18558] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 788.960929][T18558] ? _raw_spin_unlock+0x28/0x50 [ 788.960955][T18558] ? alloc_fd+0x471/0x7d0 [ 788.960981][T18558] __anon_inode_getfile+0xe8/0x280 [ 788.961010][T18558] ? __init_waitqueue_head+0xca/0x150 [ 788.961051][T18558] do_epoll_create+0x324/0x480 [ 788.961078][T18558] __x64_sys_epoll_create+0x45/0x70 [ 788.961106][T18558] do_syscall_64+0xcd/0x490 [ 788.961138][T18558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.961162][T18558] RIP: 0033:0x7ff3af98ebe9 [ 788.961181][T18558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.961206][T18558] RSP: 002b:00007ff3adbd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 788.961228][T18558] RAX: ffffffffffffffda RBX: 00007ff3afbb6090 RCX: 00007ff3af98ebe9 [ 788.961245][T18558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 788.961260][T18558] RBP: 00007ff3afa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 788.961275][T18558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.961290][T18558] R13: 00007ff3afbb6128 R14: 00007ff3afbb6090 R15: 00007fff96756188 [ 788.961313][T18558] [ 789.441820][T18566] block nbd8: shutting down sockets [ 790.678294][T18582] [U]  [ 790.681130][T18582] [U] [ 790.683855][T18582] [U] [ 790.686561][T18582] [U] [ 790.738304][T18584] [U] [ 791.439526][T18594] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 791.495448][T18594] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input53 [ 794.021726][T18622] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 794.204635][T18623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2580'. [ 794.250575][T18623] ipvlan0: entered allmulticast mode [ 794.256008][T18623] veth0_vlan: entered allmulticast mode [ 795.230641][T18631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 795.239344][T18631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 795.247451][T18631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 795.259430][T18631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 795.267155][T18631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 795.632571][T18637] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 795.763326][T18628] FAULT_INJECTION: forcing a failure. [ 795.763326][T18628] name failslab, interval 1, probability 0, space 0, times 0 [ 795.878086][T18628] CPU: 0 UID: 0 PID: 18628 Comm: syz.4.2582 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 795.878142][T18628] Tainted: [U]=USER [ 795.878153][T18628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 795.878173][T18628] Call Trace: [ 795.878184][T18628] [ 795.878196][T18628] dump_stack_lvl+0x16c/0x1f0 [ 795.878242][T18628] should_fail_ex+0x512/0x640 [ 795.878291][T18628] should_failslab+0xc2/0x120 [ 795.878334][T18628] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 795.878374][T18628] ? prepare_creds+0x2c/0x7d0 [ 795.878423][T18628] prepare_creds+0x2c/0x7d0 [ 795.878470][T18628] __sys_setresgid+0x4af/0x1150 [ 795.878509][T18628] do_syscall_64+0xcd/0x490 [ 795.878551][T18628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.878584][T18628] RIP: 0033:0x7ff3af98ebe9 [ 795.878608][T18628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.878649][T18628] RSP: 002b:00007ff3adbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 795.878679][T18628] RAX: ffffffffffffffda RBX: 00007ff3afbb6090 RCX: 00007ff3af98ebe9 [ 795.878701][T18628] RDX: 000000000000ee00 RSI: 000000000000ee01 RDI: 000000000000ee00 [ 795.878720][T18628] RBP: 00007ff3afa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 795.878739][T18628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.878758][T18628] R13: 00007ff3afbb6128 R14: 00007ff3afbb6090 R15: 00007fff96756188 [ 795.878789][T18628] [ 796.365314][T18627] chnl_net:caif_netlink_parms(): no params data found [ 796.825017][T18656] FAULT_INJECTION: forcing a failure. [ 796.825017][T18656] name failslab, interval 1, probability 0, space 0, times 0 [ 796.838234][T18656] CPU: 0 UID: 0 PID: 18656 Comm: syz.4.2588 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 796.838295][T18656] Tainted: [U]=USER [ 796.838309][T18656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 796.838330][T18656] Call Trace: [ 796.838342][T18656] [ 796.838354][T18656] dump_stack_lvl+0x16c/0x1f0 [ 796.838403][T18656] should_fail_ex+0x512/0x640 [ 796.838454][T18656] should_failslab+0xc2/0x120 [ 796.838499][T18656] __kmalloc_cache_noprof+0x6a/0x3e0 [ 796.838535][T18656] ? do_epoll_create+0x62/0x480 [ 796.838572][T18656] do_epoll_create+0x62/0x480 [ 796.838615][T18656] __x64_sys_epoll_create+0x45/0x70 [ 796.838652][T18656] do_syscall_64+0xcd/0x490 [ 796.838698][T18656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.838733][T18656] RIP: 0033:0x7ff3af98ebe9 [ 796.838758][T18656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.838791][T18656] RSP: 002b:00007ff3adbf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 796.838824][T18656] RAX: ffffffffffffffda RBX: 00007ff3afbb5fa0 RCX: 00007ff3af98ebe9 [ 796.838847][T18656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 796.838867][T18656] RBP: 00007ff3afa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 796.838888][T18656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.838908][T18656] R13: 00007ff3afbb6038 R14: 00007ff3afbb5fa0 R15: 00007fff96756188 [ 796.838941][T18656] [ 797.041660][T18631] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 797.242624][T18627] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.281462][T18627] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.311738][T18210] Bluetooth: hci6: command tx timeout [ 797.327712][T18627] bridge_slave_0: entered allmulticast mode [ 797.599471][T18627] bridge_slave_0: entered promiscuous mode [ 797.616256][T18671] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2591'. [ 797.633601][T18627] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.641360][T18627] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.650430][T18627] bridge_slave_1: entered allmulticast mode [ 797.657997][T18627] bridge_slave_1: entered promiscuous mode [ 797.738880][T18627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.770937][T18627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.023470][T18627] team0: Port device team_slave_0 added [ 798.034366][T18627] team0: Port device team_slave_1 added [ 798.470732][T18627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.504229][T18627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.755316][T18627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.041854][T18627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.059556][T18627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.092554][T18627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.102295][T18210] Bluetooth: hci2: command 0x0c1a tx timeout [ 799.363010][T18627] hsr_slave_0: entered promiscuous mode [ 799.388528][T18627] hsr_slave_1: entered promiscuous mode [ 799.394349][T18210] Bluetooth: hci6: command tx timeout [ 799.404073][T18627] debugfs: 'hsr0' already exists in 'hsr' [ 799.427375][T18627] Cannot create hsr debugfs directory [ 800.604314][T18627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 800.638793][T18627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 800.704924][T18627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 800.789683][T18627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 800.791718][T18678] Process accounting paused [ 800.959754][T18724] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 800.966228][T18724] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 801.238590][T18627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.298059][T18627] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.411265][T10960] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.418451][T10960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.475390][T18210] Bluetooth: hci6: command tx timeout [ 801.494924][T10960] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.502102][T10960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.098170][T18627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.060759][T18627] veth0_vlan: entered promiscuous mode [ 803.116589][T18627] veth1_vlan: entered promiscuous mode [ 803.307961][T18627] veth0_macvtap: entered promiscuous mode [ 803.441380][T18627] veth1_macvtap: entered promiscuous mode [ 803.499909][T18627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.554694][T18210] Bluetooth: hci6: command tx timeout [ 803.572233][T18627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.618265][ T9709] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.635555][ T9709] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.724073][ T9709] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.757844][ T9709] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.171778][T10960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.249372][T10960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.365690][T10960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.418484][T10960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.506594][T18802] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 807.005120][T18823] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 807.319278][T18823] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2618'. [ 807.369993][T18823] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2618: iget: bad extra_isize 40246 (inode size 256) [ 807.434651][T18823] faux_driver regulatory: loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 807.451798][T18823] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2618: iget: bad extra_isize 40246 (inode size 256) [ 807.474990][T18823] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -117 [ 807.547097][T18823] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2618: iget: bad extra_isize 40246 (inode size 256) [ 807.586745][T18823] faux_driver regulatory: loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 807.652349][T18823] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2618: iget: bad extra_isize 40246 (inode size 256) [ 807.736808][T18823] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -117 [ 807.746841][T18823] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -117 [ 807.765239][T18823] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 807.963924][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'. [ 808.194993][T18840] FAULT_INJECTION: forcing a failure. [ 808.194993][T18840] name failslab, interval 1, probability 0, space 0, times 0 [ 808.252725][T18840] CPU: 0 UID: 0 PID: 18840 Comm: syz.4.2621 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 808.252767][T18840] Tainted: [U]=USER [ 808.252775][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 808.252791][T18840] Call Trace: [ 808.252799][T18840] [ 808.252807][T18840] dump_stack_lvl+0x16c/0x1f0 [ 808.252843][T18840] should_fail_ex+0x512/0x640 [ 808.252880][T18840] ? __register_sysctl_table+0xb3/0x1900 [ 808.252917][T18840] should_failslab+0xc2/0x120 [ 808.252949][T18840] __kmalloc_noprof+0xd2/0x510 [ 808.252986][T18840] __register_sysctl_table+0xb3/0x1900 [ 808.253031][T18840] ? rcu_is_watching+0x12/0xc0 [ 808.253057][T18840] ? lock_release+0x201/0x2f0 [ 808.253090][T18840] ? __pfx___register_sysctl_table+0x10/0x10 [ 808.253127][T18840] ? is_module_address+0x69/0xf0 [ 808.253161][T18840] ? register_net_sysctl_sz+0x228/0x3e0 [ 808.253197][T18840] ? __asan_memcpy+0x3c/0x60 [ 808.253221][T18840] sysctl_route_net_init+0x15e/0x2c0 [ 808.253259][T18840] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 808.253295][T18840] ops_init+0x1df/0x5f0 [ 808.253328][T18840] setup_net+0x10f/0x380 [ 808.253360][T18840] ? lockdep_init_map_type+0x5c/0x280 [ 808.253394][T18840] ? __pfx_setup_net+0x10/0x10 [ 808.253427][T18840] ? debug_mutex_init+0x37/0x70 [ 808.253451][T18840] copy_net_ns+0x2a6/0x5f0 [ 808.253496][T18840] create_new_namespaces+0x3ea/0xa90 [ 808.253528][T18840] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 808.253558][T18840] ksys_unshare+0x45b/0xa40 [ 808.253591][T18840] ? __pfx_ksys_unshare+0x10/0x10 [ 808.253625][T18840] ? xfd_validate_state+0x61/0x180 [ 808.253665][T18840] __x64_sys_unshare+0x31/0x40 [ 808.253698][T18840] do_syscall_64+0xcd/0x490 [ 808.253731][T18840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.253756][T18840] RIP: 0033:0x7ff3af98ebe9 [ 808.253774][T18840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.253798][T18840] RSP: 002b:00007ff3adbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 808.253821][T18840] RAX: ffffffffffffffda RBX: 00007ff3afbb6090 RCX: 00007ff3af98ebe9 [ 808.253837][T18840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 808.253853][T18840] RBP: 00007ff3afa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 808.253868][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.253883][T18840] R13: 00007ff3afbb6128 R14: 00007ff3afbb6090 R15: 00007fff96756188 [ 808.253906][T18840] [ 809.776332][T18868] blktrace: Concurrent blktraces are not allowed on ram7 [ 811.142859][T18882] svc: failed to register nfsdv3 RPC service (errno 111). [ 811.179683][T18882] svc: failed to register nfsaclv3 RPC service (errno 111). [ 811.732103][T18889] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 813.861339][T18920] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 815.035343][T18945] random: crng reseeded on system resumption [ 815.094713][ T9709] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:26: iget: bad extra_isize 40246 (inode size 256) [ 815.180937][ T9709] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db.p7s failed with error -117 [ 815.195844][ T8539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: bad extra_isize 40246 (inode size 256) [ 815.264387][ T8539] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 815.279732][ T9709] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:26: iget: bad extra_isize 40246 (inode size 256) [ 815.381508][ T8539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: bad extra_isize 40246 (inode size 256) [ 815.395689][ T9709] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -117 [ 815.410060][ T9709] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:26: iget: bad extra_isize 40246 (inode size 256) [ 815.423599][ T8539] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -117 [ 815.436948][ T8539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: bad extra_isize 40246 (inode size 256) [ 815.450468][ T9709] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db.p7s failed with error -117 [ 815.466206][ T8539] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 815.479159][ T9709] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:26: iget: bad extra_isize 40246 (inode size 256) [ 815.533200][ T8539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: bad extra_isize 40246 (inode size 256) [ 815.546802][ T9709] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -117 [ 815.582329][ T9709] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -117 [ 815.615900][ T8539] (NULL device *): loading /lib/firmware/regulatory.db failed with error -117 [ 815.633388][ T9709] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 815.645469][ T8539] (NULL device *): Direct firmware load for regulatory.db failed with error -117 [ 815.663313][ T8539] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 818.911459][T19007] HfR: entered promiscuous mode [ 819.009957][T19011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2658'. [ 819.175336][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.181715][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.680168][T19017] vivid-003: ================= START STATUS ================= [ 819.692211][T19017] vivid-003: Radio HW Seek Mode: Bounded [ 819.732654][T19017] vivid-003: Radio Programmable HW Seek: false [ 819.762681][T19017] vivid-003: RDS Rx I/O Mode: Block I/O [ 819.779982][T19017] vivid-003: Generate RBDS Instead of RDS: false [ 819.800276][T19017] vivid-003: RDS Reception: true [ 819.841340][T19017] vivid-003: RDS Program Type: 0 inactive [ 819.861103][T19017] vivid-003: RDS PS Name: inactive [ 819.879959][T19021] HfR: entered promiscuous mode [ 819.892759][T19017] vivid-003: RDS Radio Text: inactive [ 819.898299][T19017] vivid-003: RDS Traffic Announcement: false inactive [ 819.905885][T19017] vivid-003: RDS Traffic Program: false inactive [ 819.912409][T19017] vivid-003: RDS Music: false inactive [ 819.918074][T19017] vivid-003: ================== END STATUS ================== [ 819.948741][T19021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2661'. [ 819.986625][T19021] HfR: left promiscuous mode [ 820.068187][T19021] HfR: entered promiscuous mode [ 821.648297][T19036] openvswitch: HfR: Dropping previously announced user features [ 826.817994][T19083] FAULT_INJECTION: forcing a failure. [ 826.817994][T19083] name failslab, interval 1, probability 0, space 0, times 0 [ 826.896254][T19083] CPU: 1 UID: 0 PID: 19083 Comm: syz.2.2678 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 826.896307][T19083] Tainted: [U]=USER [ 826.896317][T19083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 826.896335][T19083] Call Trace: [ 826.896345][T19083] [ 826.896356][T19083] dump_stack_lvl+0x16c/0x1f0 [ 826.896397][T19083] should_fail_ex+0x512/0x640 [ 826.896441][T19083] should_failslab+0xc2/0x120 [ 826.896480][T19083] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 826.896516][T19083] ? alloc_inode+0xc3/0x240 [ 826.896559][T19083] alloc_inode+0xc3/0x240 [ 826.896598][T19083] alloc_anon_inode+0x28/0x3e0 [ 826.896629][T19083] ? lock_release+0x201/0x2f0 [ 826.896665][T19083] anon_inode_make_secure_inode+0x31/0x140 [ 826.896702][T19083] __anon_inode_getfile+0x1cf/0x280 [ 826.896734][T19083] ? _copy_to_user+0x48/0xd0 [ 826.896758][T19083] io_uring_setup+0x154d/0x2080 [ 826.896796][T19083] ? __pfx_io_uring_setup+0x10/0x10 [ 826.896835][T19083] ? __pfx___might_resched+0x10/0x10 [ 826.896871][T19083] ? xfd_validate_state+0x61/0x180 [ 826.896918][T19083] __x64_sys_io_uring_setup+0xc2/0x170 [ 826.896955][T19083] do_syscall_64+0xcd/0x490 [ 826.896992][T19083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.897021][T19083] RIP: 0033:0x7f5b8398ebe9 [ 826.897042][T19083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.897070][T19083] RSP: 002b:00007f5b848c3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 826.897097][T19083] RAX: ffffffffffffffda RBX: 00007f5b83bb5fa0 RCX: 00007f5b8398ebe9 [ 826.897124][T19083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 826.897141][T19083] RBP: 00007f5b83a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 826.897159][T19083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.897176][T19083] R13: 00007f5b83bb6038 R14: 00007f5b83bb5fa0 R15: 00007ffdb0c4cf88 [ 826.897203][T19083] [ 827.494532][T19095] FAULT_INJECTION: forcing a failure. [ 827.494532][T19095] name failslab, interval 1, probability 0, space 0, times 0 [ 827.509635][T19095] CPU: 0 UID: 0 PID: 19095 Comm: syz.5.2680 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 827.509686][T19095] Tainted: [U]=USER [ 827.509695][T19095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.509709][T19095] Call Trace: [ 827.509717][T19095] [ 827.509726][T19095] dump_stack_lvl+0x16c/0x1f0 [ 827.509761][T19095] should_fail_ex+0x512/0x640 [ 827.509798][T19095] should_failslab+0xc2/0x120 [ 827.509832][T19095] __kmalloc_node_noprof+0xd8/0x500 [ 827.509868][T19095] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 827.509900][T19095] ? alloc_slab_obj_exts+0x41/0xa0 [ 827.509926][T19095] alloc_slab_obj_exts+0x41/0xa0 [ 827.509949][T19095] new_slab+0x27d/0x330 [ 827.509972][T19095] ___slab_alloc+0xcf2/0x1740 [ 827.509995][T19095] ? kvm_ioapic_init+0x4f/0x590 [ 827.510026][T19095] ? rcu_is_watching+0x12/0xc0 [ 827.510052][T19095] ? kvm_ioapic_init+0x4f/0x590 [ 827.510087][T19095] ? __slab_alloc.constprop.0+0x56/0xb0 [ 827.510111][T19095] __slab_alloc.constprop.0+0x56/0xb0 [ 827.510137][T19095] __kmalloc_cache_noprof+0xfb/0x3e0 [ 827.510161][T19095] ? kvm_ioapic_init+0x4f/0x590 [ 827.510238][T19095] kvm_ioapic_init+0x4f/0x590 [ 827.510267][T19095] kvm_arch_vm_ioctl+0x8c6/0x1860 [ 827.510301][T19095] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 827.510333][T19095] ? lock_release+0x201/0x2f0 [ 827.510366][T19095] ? ima_match_policy+0x803/0x22e0 [ 827.510415][T19095] ? rcu_is_watching+0x12/0xc0 [ 827.510440][T19095] ? unwind_next_frame+0x3f4/0x20a0 [ 827.510464][T19095] ? rcu_is_watching+0x12/0xc0 [ 827.510489][T19095] ? rcu_is_watching+0x12/0xc0 [ 827.510513][T19095] ? unwind_next_frame+0x3f4/0x20a0 [ 827.510537][T19095] ? rcu_is_watching+0x12/0xc0 [ 827.510570][T19095] ? rcu_is_watching+0x12/0xc0 [ 827.510594][T19095] ? unwind_next_frame+0x3f4/0x20a0 [ 827.510623][T19095] ? rcu_is_watching+0x12/0xc0 [ 827.510651][T19095] ? lock_release+0x201/0x2f0 [ 827.510680][T19095] ? bpf_ksym_find+0x124/0x1c0 [ 827.510712][T19095] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 827.510745][T19095] ? is_bpf_text_address+0x94/0x1a0 [ 827.510775][T19095] ? kernel_text_address+0x8d/0x100 [ 827.510799][T19095] ? __kernel_text_address+0xd/0x40 [ 827.510821][T19095] ? unwind_get_return_address+0x59/0xa0 [ 827.510846][T19095] ? arch_stack_walk+0xa6/0x100 [ 827.510877][T19095] ? stack_trace_save+0x8e/0xc0 [ 827.510903][T19095] ? __pfx_stack_trace_save+0x10/0x10 [ 827.510930][T19095] ? kasan_save_stack+0x42/0x60 [ 827.510958][T19095] ? stack_depot_save_flags+0x29/0x9c0 [ 827.510993][T19095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 827.511032][T19095] ? kasan_save_stack+0x42/0x60 [ 827.511064][T19095] ? kasan_save_stack+0x33/0x60 [ 827.511091][T19095] ? kasan_save_track+0x14/0x30 [ 827.511124][T19095] ? kasan_save_free_info+0x3b/0x60 [ 827.511163][T19095] ? __kasan_slab_free+0x60/0x70 [ 827.511192][T19095] ? kfree+0x2b4/0x4d0 [ 827.511214][T19095] kvm_vm_ioctl+0x1a91/0x4000 [ 827.511244][T19095] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 827.511274][T19095] ? rcu_is_watching+0x12/0xc0 [ 827.511297][T19095] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 827.511363][T19095] ? tomoyo_path_number_perm+0x295/0x580 [ 827.511394][T19095] ? rcu_is_watching+0x12/0xc0 [ 827.511418][T19095] ? lock_release+0x201/0x2f0 [ 827.511451][T19095] ? tomoyo_path_number_perm+0x18d/0x580 [ 827.511481][T19095] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 827.511516][T19095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 827.511561][T19095] ? do_vfs_ioctl+0x128/0x14f0 [ 827.511600][T19095] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 827.511640][T19095] ? rcu_is_watching+0x12/0xc0 [ 827.511669][T19095] ? __fget_files+0x204/0x3c0 [ 827.511693][T19095] ? hook_file_ioctl_common+0x145/0x410 [ 827.511728][T19095] ? __fget_files+0x20e/0x3c0 [ 827.511756][T19095] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 827.511781][T19095] __x64_sys_ioctl+0x18e/0x210 [ 827.511819][T19095] do_syscall_64+0xcd/0x490 [ 827.511852][T19095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.511878][T19095] RIP: 0033:0x7f2e5938ebe9 [ 827.511897][T19095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.511922][T19095] RSP: 002b:00007f2e5a243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 827.511944][T19095] RAX: ffffffffffffffda RBX: 00007f2e595b5fa0 RCX: 00007f2e5938ebe9 [ 827.511961][T19095] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 827.511977][T19095] RBP: 00007f2e59411e19 R08: 0000000000000000 R09: 0000000000000000 [ 827.511991][T19095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.512005][T19095] R13: 00007f2e595b6038 R14: 00007f2e595b5fa0 R15: 00007ffced08aa38 [ 827.512028][T19095] [ 827.975407][ C0] vkms_vblank_simulate: vblank timer overrun [ 829.148622][T19117] random: crng reseeded on system resumption [ 829.187777][ T8539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: bad extra_isize 40246 (inode size 256) [ 829.228257][ T9703] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: bad extra_isize 40246 (inode size 256) [ 829.247571][ T8539] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 829.277741][ T9703] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db.p7s failed with error -117 [ 829.323888][ T8539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: bad extra_isize 40246 (inode size 256) [ 829.379854][ T8539] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -117 [ 829.390282][ T9703] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: bad extra_isize 40246 (inode size 256) [ 829.520755][ T9703] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -117 [ 829.532010][ T8539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: bad extra_isize 40246 (inode size 256) [ 829.592122][ T8539] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 829.606581][ T9703] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: bad extra_isize 40246 (inode size 256) [ 829.652895][ T9703] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db.p7s failed with error -117 [ 829.669826][ T8539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: bad extra_isize 40246 (inode size 256) [ 829.749351][T19122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2686'. [ 829.797989][T19122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.850402][ T8539] (NULL device *): loading /lib/firmware/regulatory.db failed with error -117 [ 829.859707][ T9703] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: bad extra_isize 40246 (inode size 256) [ 829.878090][T19124] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 829.886365][ T8539] (NULL device *): Direct firmware load for regulatory.db failed with error -117 [ 829.907106][ T9703] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -117 [ 829.938101][ T8539] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 829.949583][ T9703] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -117 [ 829.975105][ T9703] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 830.040157][T19122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.597287][T19132] __vm_enough_memory: pid: 19132, comm: syz.1.2688, bytes: 4398046511104 not enough memory for the allocation [ 832.431397][T19129] Process accounting resumed [ 833.063960][T19161] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 834.997059][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2697'. [ 836.425994][T19182] bond0: option all_slaves_active: invalid value () [ 841.313390][T19221] zswap: compressor not available [ 843.620481][T19256] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 844.013228][T19267] dyndbg: bad flag-op /, at start of /proc/self/ [ 844.036876][T19267] dyndbg: flags parse failed [ 846.940099][T19314] random: crng reseeded on system resumption [ 846.946995][ T9703] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: bad extra_isize 40246 (inode size 256) [ 846.984014][ T9711] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:27: iget: bad extra_isize 40246 (inode size 256) [ 846.997867][ T9703] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 847.018694][ T9711] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db.p7s failed with error -117 [ 847.036309][ T9703] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: bad extra_isize 40246 (inode size 256) [ 847.056857][ T9711] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:27: iget: bad extra_isize 40246 (inode size 256) [ 847.076449][ T9703] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -117 [ 847.091256][ T9703] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: bad extra_isize 40246 (inode size 256) [ 847.104904][ T9711] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -117 [ 847.186529][ T9703] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 847.218782][ T9711] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:27: iget: bad extra_isize 40246 (inode size 256) [ 847.331125][ T9703] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: bad extra_isize 40246 (inode size 256) [ 847.344712][ T9711] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db.p7s failed with error -117 [ 847.376697][ T9703] (NULL device *): loading /lib/firmware/regulatory.db failed with error -117 [ 847.385767][ T9711] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:27: iget: bad extra_isize 40246 (inode size 256) [ 847.402845][ T9703] (NULL device *): Direct firmware load for regulatory.db failed with error -117 [ 847.413221][ T9711] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -117 [ 847.425935][ T9703] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 847.435913][ T9711] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -117 [ 847.448950][ T9711] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 848.709968][T19339] netlink: 206 bytes leftover after parsing attributes in process `syz.1.2733'. [ 857.561548][T19343] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 857.561948][T19344] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 859.950218][T19442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2754'. [ 861.226353][T19460] random: crng reseeded on system resumption [ 861.247634][T10960] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:42: iget: bad extra_isize 40246 (inode size 256) [ 861.273573][T19465] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 861.308041][T19465] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 861.326018][T19462] futex_wake_op: syz.2.2762 tries to shift op by -2048; fix this program [ 861.359170][T19462] futex_wake_op: syz.2.2762 tries to shift op by -2048; fix this program [ 861.383939][T10963] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:45: iget: bad extra_isize 40246 (inode size 256) [ 861.397811][T10960] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 861.435004][T10963] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db.p7s failed with error -117 [ 861.457051][T10960] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:42: iget: bad extra_isize 40246 (inode size 256) [ 861.477093][T10963] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:45: iget: bad extra_isize 40246 (inode size 256) [ 861.493715][T10960] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -117 [ 861.509861][T10963] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -117 [ 861.520856][T10960] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:42: iget: bad extra_isize 40246 (inode size 256) [ 861.720995][T10963] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:45: iget: bad extra_isize 40246 (inode size 256) [ 861.735350][T10960] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 861.923773][T10963] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db.p7s failed with error -117 [ 861.957396][T10960] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:42: iget: bad extra_isize 40246 (inode size 256) [ 862.051306][T10960] (NULL device *): loading /lib/firmware/regulatory.db failed with error -117 [ 862.073892][T10963] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:45: iget: bad extra_isize 40246 (inode size 256) [ 862.094932][T10960] (NULL device *): Direct firmware load for regulatory.db failed with error -117 [ 862.124327][T10963] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -117 [ 862.147113][T10960] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 862.157979][T10963] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -117 [ 862.174790][T10963] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 862.451617][T19479] bridge0: port 3(hsr_slave_0) entered blocking state [ 862.485239][T19479] bridge0: port 3(hsr_slave_0) entered disabled state [ 862.502001][T19479] hsr_slave_0: entered allmulticast mode [ 862.511324][T19479] hsr_slave_0: left allmulticast mode [ 862.537216][T19479] Process accounting paused [ 864.886548][T19494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2769'. [ 864.896183][T19494] bridge_slave_1: left allmulticast mode [ 864.902053][T19494] bridge_slave_1: left promiscuous mode [ 864.908270][T19494] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.917711][T19494] bridge_slave_0: left allmulticast mode [ 864.942667][T19494] bridge_slave_0: left promiscuous mode [ 864.951526][T19494] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.955510][T19543] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2778'. [ 872.949390][T19562] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 874.490019][T19571] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2781'. [ 874.553146][T19571] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2781'. [ 875.734133][T19589] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 879.371138][T19648] vhci_hcd: invalid port number 16 [ 879.399770][T19648] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 880.482356][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.489029][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 885.646301][T19700] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2809'. [ 886.771842][T19741] FAULT_INJECTION: forcing a failure. [ 886.771842][T19741] name failslab, interval 1, probability 0, space 0, times 0 [ 886.798128][T19741] CPU: 1 UID: 0 PID: 19741 Comm: syz.2.2820 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 886.798194][T19741] Tainted: [U]=USER [ 886.798210][T19741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 886.798233][T19741] Call Trace: [ 886.798247][T19741] [ 886.798262][T19741] dump_stack_lvl+0x16c/0x1f0 [ 886.798324][T19741] should_fail_ex+0x512/0x640 [ 886.798378][T19741] should_failslab+0xc2/0x120 [ 886.798426][T19741] __kmalloc_cache_noprof+0x6a/0x3e0 [ 886.798463][T19741] ? do_epoll_create+0x62/0x480 [ 886.798501][T19741] do_epoll_create+0x62/0x480 [ 886.798538][T19741] __x64_sys_epoll_create+0x45/0x70 [ 886.798578][T19741] do_syscall_64+0xcd/0x490 [ 886.798625][T19741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.798662][T19741] RIP: 0033:0x7f5b8398ebe9 [ 886.798690][T19741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.798726][T19741] RSP: 002b:00007f5b848a2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 886.798760][T19741] RAX: ffffffffffffffda RBX: 00007f5b83bb6090 RCX: 00007f5b8398ebe9 [ 886.798785][T19741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 886.798807][T19741] RBP: 00007f5b83a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 886.798828][T19741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.798852][T19741] R13: 00007f5b83bb6128 R14: 00007f5b83bb6090 R15: 00007ffdb0c4cf88 [ 886.798889][T19741] [ 887.812324][T19763] FAULT_INJECTION: forcing a failure. [ 887.812324][T19763] name failslab, interval 1, probability 0, space 0, times 0 [ 887.868575][T19763] CPU: 0 UID: 0 PID: 19763 Comm: syz.2.2825 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 887.868641][T19763] Tainted: [U]=USER [ 887.868654][T19763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 887.868675][T19763] Call Trace: [ 887.868686][T19763] [ 887.868699][T19763] dump_stack_lvl+0x16c/0x1f0 [ 887.868747][T19763] should_fail_ex+0x512/0x640 [ 887.868799][T19763] should_failslab+0xc2/0x120 [ 887.868845][T19763] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 887.868888][T19763] ? sock_alloc_inode+0x25/0x1c0 [ 887.868950][T19763] ? __pfx_sock_alloc_inode+0x10/0x10 [ 887.869001][T19763] sock_alloc_inode+0x25/0x1c0 [ 887.869056][T19763] alloc_inode+0x61/0x240 [ 887.869104][T19763] sock_alloc+0x40/0x280 [ 887.869152][T19763] __sock_create+0xc1/0x8d0 [ 887.869187][T19763] __sys_socket+0x14d/0x260 [ 887.869219][T19763] ? __pfx___sys_socket+0x10/0x10 [ 887.869250][T19763] ? xfd_validate_state+0x61/0x180 [ 887.869313][T19763] __x64_sys_socket+0x72/0xb0 [ 887.869345][T19763] do_syscall_64+0xcd/0x490 [ 887.869389][T19763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.869422][T19763] RIP: 0033:0x7f5b8398ebe9 [ 887.869447][T19763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.869479][T19763] RSP: 002b:00007f5b848c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 887.869509][T19763] RAX: ffffffffffffffda RBX: 00007f5b83bb5fa0 RCX: 00007f5b8398ebe9 [ 887.869531][T19763] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 887.869549][T19763] RBP: 00007f5b83a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 887.869569][T19763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.869588][T19763] R13: 00007f5b83bb6038 R14: 00007f5b83bb5fa0 R15: 00007ffdb0c4cf88 [ 887.869618][T19763] [ 887.870824][T19763] socket: no more sockets [ 890.196943][T19802] FAULT_INJECTION: forcing a failure. [ 890.196943][T19802] name failslab, interval 1, probability 0, space 0, times 0 [ 890.275686][T19802] CPU: 1 UID: 0 PID: 19802 Comm: syz.4.2831 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 890.275748][T19802] Tainted: [U]=USER [ 890.275761][T19802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 890.275782][T19802] Call Trace: [ 890.275793][T19802] [ 890.275806][T19802] dump_stack_lvl+0x16c/0x1f0 [ 890.275856][T19802] should_fail_ex+0x512/0x640 [ 890.275909][T19802] should_failslab+0xc2/0x120 [ 890.275954][T19802] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 890.276006][T19802] ? __d_alloc+0x32/0xae0 [ 890.276054][T19802] __d_alloc+0x32/0xae0 [ 890.276096][T19802] d_alloc_pseudo+0x1c/0xc0 [ 890.276147][T19802] alloc_file_pseudo+0xcf/0x230 [ 890.276199][T19802] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 890.276251][T19802] ? _raw_spin_unlock+0x28/0x50 [ 890.276287][T19802] ? alloc_fd+0x471/0x7d0 [ 890.276323][T19802] __anon_inode_getfile+0xe8/0x280 [ 890.276364][T19802] ? __init_waitqueue_head+0xca/0x150 [ 890.276418][T19802] do_epoll_create+0x324/0x480 [ 890.276453][T19802] __x64_sys_epoll_create+0x45/0x70 [ 890.276489][T19802] do_syscall_64+0xcd/0x490 [ 890.276534][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.276568][T19802] RIP: 0033:0x7ff3af98ebe9 [ 890.276594][T19802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.276628][T19802] RSP: 002b:00007ff3adbd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 890.276662][T19802] RAX: ffffffffffffffda RBX: 00007ff3afbb6090 RCX: 00007ff3af98ebe9 [ 890.276685][T19802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 890.276706][T19802] RBP: 00007ff3afa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 890.276726][T19802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.276747][T19802] R13: 00007ff3afbb6128 R14: 00007ff3afbb6090 R15: 00007fff96756188 [ 890.276780][T19802] [ 890.802301][T19805] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 890.809186][ T30] audit: type=1800 audit(4294970928.338:34): pid=19808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2834" name="dbroot" dev="configfs" ino=85929 res=0 errno=0 [ 892.947620][T19843] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 925 with max blocks 14 with error 117 [ 893.073037][T19843] EXT4-fs (sda1): This should not happen!! Data will be lost [ 893.073037][T19843] [ 893.398166][T19847] Invalid ELF header magic: != ELF [ 893.464307][T19840] Process accounting resumed [ 894.340891][T19861] random: crng reseeded on system resumption [ 894.382946][ T9704] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:22: iget: bad extra_isize 40246 (inode size 256) [ 894.504424][ T8539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: bad extra_isize 40246 (inode size 256) [ 894.533232][ T9704] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 894.556698][ T8539] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db.p7s failed with error -117 [ 894.574141][ T9704] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:22: iget: bad extra_isize 40246 (inode size 256) [ 894.649301][ T8539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: bad extra_isize 40246 (inode size 256) [ 894.670261][ T9704] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -117 [ 894.775186][ T8539] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -117 [ 894.794672][ T9704] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:22: iget: bad extra_isize 40246 (inode size 256) [ 894.873639][ T8539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: bad extra_isize 40246 (inode size 256) [ 894.887179][ T9704] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db failed with error -117 [ 894.953336][ T8539] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00211-g90d970cade8e/regulatory.db.p7s failed with error -117 [ 894.969483][ T9704] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:22: iget: bad extra_isize 40246 (inode size 256) [ 894.987771][ T8539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: bad extra_isize 40246 (inode size 256) [ 895.003807][ T9704] (NULL device *): loading /lib/firmware/regulatory.db failed with error -117 [ 895.013456][ T9704] (NULL device *): Direct firmware load for regulatory.db failed with error -117 [ 895.032142][ T8539] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -117 [ 895.054294][ T9704] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 895.066005][ T8539] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -117 [ 895.160065][ T8539] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 896.022505][T19872] FAULT_INJECTION: forcing a failure. [ 896.022505][T19872] name failslab, interval 1, probability 0, space 0, times 0 [ 896.073642][T19872] CPU: 0 UID: 0 PID: 19872 Comm: syz.5.2844 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 896.073698][T19872] Tainted: [U]=USER [ 896.073709][T19872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 896.073728][T19872] Call Trace: [ 896.073740][T19872] [ 896.073753][T19872] dump_stack_lvl+0x16c/0x1f0 [ 896.073800][T19872] should_fail_ex+0x512/0x640 [ 896.073851][T19872] should_failslab+0xc2/0x120 [ 896.073897][T19872] __kmalloc_cache_noprof+0x6a/0x3e0 [ 896.073932][T19872] ? do_epoll_create+0x62/0x480 [ 896.073970][T19872] do_epoll_create+0x62/0x480 [ 896.074002][T19872] __x64_sys_epoll_create+0x45/0x70 [ 896.074039][T19872] do_syscall_64+0xcd/0x490 [ 896.074084][T19872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.074115][T19872] RIP: 0033:0x7f2e5938ebe9 [ 896.074139][T19872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.074172][T19872] RSP: 002b:00007f2e5a222038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 896.074203][T19872] RAX: ffffffffffffffda RBX: 00007f2e595b6090 RCX: 00007f2e5938ebe9 [ 896.074239][T19872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 896.074258][T19872] RBP: 00007f2e59411e19 R08: 0000000000000000 R09: 0000000000000000 [ 896.074279][T19872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.074300][T19872] R13: 00007f2e595b6128 R14: 00007f2e595b6090 R15: 00007ffced08aa38 [ 896.074337][T19872] [ 896.880490][T19882] netlink: 'syz.5.2847': attribute type 2 has an invalid length. [ 897.364390][T19893] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 902.105220][T19943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2862'. [ 905.333155][T19904] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 908.122773][T20027] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 912.078605][T20097] FAULT_INJECTION: forcing a failure. [ 912.078605][T20097] name failslab, interval 1, probability 0, space 0, times 0 [ 912.129924][T20097] CPU: 0 UID: 0 PID: 20097 Comm: syz.2.2900 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 912.129982][T20097] Tainted: [U]=USER [ 912.129994][T20097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 912.130014][T20097] Call Trace: [ 912.130025][T20097] [ 912.130038][T20097] dump_stack_lvl+0x16c/0x1f0 [ 912.130088][T20097] should_fail_ex+0x512/0x640 [ 912.130142][T20097] should_failslab+0xc2/0x120 [ 912.130187][T20097] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 912.130225][T20097] ? is_bpf_text_address+0x94/0x1a0 [ 912.130267][T20097] ? vm_area_dup+0x27/0x8d0 [ 912.130302][T20097] vm_area_dup+0x27/0x8d0 [ 912.130335][T20097] __split_vma+0x18e/0x1070 [ 912.130372][T20097] ? __pfx___split_vma+0x10/0x10 [ 912.130414][T20097] ? __pfx_mas_prev+0x10/0x10 [ 912.130460][T20097] vms_gather_munmap_vmas+0x3b1/0x1340 [ 912.130501][T20097] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 912.130542][T20097] ? mas_walk+0x6f5/0x980 [ 912.130581][T20097] __mmap_region+0x436/0x27b0 [ 912.130618][T20097] ? rcu_is_watching+0x12/0xc0 [ 912.130651][T20097] ? __pfx___mmap_region+0x10/0x10 [ 912.130687][T20097] ? rcu_is_watching+0x12/0xc0 [ 912.130723][T20097] ? rcu_is_watching+0x12/0xc0 [ 912.130754][T20097] ? trace_sched_exit_tp+0xd1/0x120 [ 912.130804][T20097] ? __schedule+0x11a3/0x5de0 [ 912.130838][T20097] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 912.130879][T20097] ? kernel_text_address+0x20/0x100 [ 912.130929][T20097] ? __pfx___schedule+0x10/0x10 [ 912.130969][T20097] ? futex_private_hash_put+0x112/0x300 [ 912.131005][T20097] ? rcu_is_watching+0x12/0xc0 [ 912.131056][T20097] ? trace_cap_capable+0x18d/0x200 [ 912.131092][T20097] ? cap_capable+0xb3/0x250 [ 912.131126][T20097] mmap_region+0x1ab/0x3f0 [ 912.131164][T20097] ? __get_unmapped_area+0x267/0x440 [ 912.131213][T20097] do_mmap+0xa3e/0x1210 [ 912.131259][T20097] ? __pfx_do_mmap+0x10/0x10 [ 912.131304][T20097] ? __pfx_down_write_killable+0x10/0x10 [ 912.131350][T20097] ? kmem_cache_free+0x2d1/0x4d0 [ 912.131388][T20097] vm_mmap_pgoff+0x29e/0x470 [ 912.131436][T20097] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 912.131485][T20097] ? __x64_sys_futex+0x1e0/0x4c0 [ 912.131525][T20097] ? __x64_sys_futex+0x1e9/0x4c0 [ 912.131568][T20097] ksys_mmap_pgoff+0x7d/0x5c0 [ 912.131611][T20097] ? xfd_validate_state+0x61/0x180 [ 912.131660][T20097] __x64_sys_mmap+0x125/0x190 [ 912.131712][T20097] do_syscall_64+0xcd/0x490 [ 912.131755][T20097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.131787][T20097] RIP: 0033:0x7f5b8398ebe9 [ 912.131812][T20097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.131844][T20097] RSP: 002b:00007f5b848a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 912.131874][T20097] RAX: ffffffffffffffda RBX: 00007f5b83bb6090 RCX: 00007f5b8398ebe9 [ 912.131895][T20097] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 912.132051][T20097] RBP: 00007f5b83a11e19 R08: 0000000000000401 R09: 0000040000008000 [ 912.132077][T20097] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 912.132098][T20097] R13: 00007f5b83bb6128 R14: 00007f5b83bb6090 R15: 00007ffdb0c4cf88 [ 912.132131][T20097] [ 912.891245][T20109] FAULT_INJECTION: forcing a failure. [ 912.891245][T20109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 912.980430][T20109] CPU: 0 UID: 0 PID: 20109 Comm: syz.4.2902 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 912.980483][T20109] Tainted: [U]=USER [ 912.980494][T20109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 912.980511][T20109] Call Trace: [ 912.980521][T20109] [ 912.980533][T20109] dump_stack_lvl+0x16c/0x1f0 [ 912.980576][T20109] should_fail_ex+0x512/0x640 [ 912.980626][T20109] _copy_to_user+0x32/0xd0 [ 912.980656][T20109] simple_read_from_buffer+0xcb/0x170 [ 912.980690][T20109] proc_fail_nth_read+0x197/0x240 [ 912.980723][T20109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 912.980756][T20109] ? security_file_permission+0x71/0x210 [ 912.980801][T20109] ? rw_verify_area+0xcf/0x6c0 [ 912.980833][T20109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 912.980867][T20109] vfs_read+0x1e4/0xcf0 [ 912.980913][T20109] ? __pfx___mutex_lock+0x10/0x10 [ 912.980956][T20109] ? __pfx_vfs_read+0x10/0x10 [ 912.980991][T20109] ? __fget_files+0x204/0x3c0 [ 912.981022][T20109] ? rcu_is_watching+0x12/0xc0 [ 912.981060][T20109] ? __fget_files+0x20e/0x3c0 [ 912.981101][T20109] ksys_read+0x12a/0x250 [ 912.981136][T20109] ? __pfx_ksys_read+0x10/0x10 [ 912.981178][T20109] do_syscall_64+0xcd/0x490 [ 912.981222][T20109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.981256][T20109] RIP: 0033:0x7ff3af98d5fc [ 912.981280][T20109] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 912.981311][T20109] RSP: 002b:00007ff3adbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 912.981341][T20109] RAX: ffffffffffffffda RBX: 00007ff3afbb5fa0 RCX: 00007ff3af98d5fc [ 912.981362][T20109] RDX: 000000000000000f RSI: 00007ff3adbf60a0 RDI: 000000000000000a [ 912.981381][T20109] RBP: 00007ff3adbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 912.981399][T20109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.981418][T20109] R13: 00007ff3afbb6038 R14: 00007ff3afbb5fa0 R15: 00007fff96756188 [ 912.981448][T20109] [ 913.945295][ T30] audit: type=1800 audit(4294970951.617:35): pid=20123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2906" name="members" dev="configfs" ino=87997 res=0 errno=0 [ 915.174755][T20148] ICMPv6: process `syz.4.2912' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 915.419666][T20152] Invalid ELF header magic: != ELF [ 915.458528][T20156] Invalid ELF header magic: != ELF [ 915.775604][T20152] Â: entered promiscuous mode [ 916.013452][T20167] sp0: Synchronizing with TNC [ 916.082077][T20168] kAFS: Invalid Command on /proc/fs/afs/cells file [ 916.128667][T20168] openvswitch: netlink: IP tunnel dst address not specified [ 918.020155][T20181] block nbd8: shutting down sockets [ 918.033513][T18210] ================================================================== [ 918.041800][T18210] BUG: KASAN: slab-use-after-free in recv_work+0x694/0xa80 [ 918.049983][T18210] Write of size 4 at addr ffff8880354b6678 by task kworker/u11:31/18210 [ 918.059334][T18210] [ 918.062071][T18210] CPU: 0 UID: 0 PID: 18210 Comm: kworker/u11:31 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 918.062119][T18210] Tainted: [U]=USER [ 918.062128][T18210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 918.062154][T18210] Workqueue: nbd8-recv recv_work [ 918.062199][T18210] Call Trace: [ 918.062212][T18210] [ 918.062225][T18210] dump_stack_lvl+0x116/0x1f0 [ 918.062262][T18210] print_report+0xcd/0x630 [ 918.062301][T18210] ? __virt_addr_valid+0x81/0x610 [ 918.062337][T18210] ? __phys_addr+0xe8/0x180 [ 918.062370][T18210] ? recv_work+0x694/0xa80 [ 918.062406][T18210] kasan_report+0xe0/0x110 [ 918.062440][T18210] ? recv_work+0x694/0xa80 [ 918.062482][T18210] kasan_check_range+0x100/0x1b0 [ 918.062523][T18210] recv_work+0x694/0xa80 [ 918.062587][T18210] ? debug_object_deactivate+0x1ec/0x3a0 [ 918.062741][T18210] ? __pfx_recv_work+0x10/0x10 [ 918.062778][T18210] ? debug_object_deactivate+0x1ec/0x3a0 [ 918.062804][T18210] ? __pfx_debug_object_deactivate+0x10/0x10 [ 918.062832][T18210] ? rcu_is_watching+0x12/0xc0 [ 918.062857][T18210] ? lock_acquire+0x2cd/0x350 [ 918.062889][T18210] ? rcu_is_watching+0x12/0xc0 [ 918.062913][T18210] process_one_work+0x9cc/0x1b70 [ 918.062957][T18210] ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10 [ 918.063000][T18210] ? __pfx_process_one_work+0x10/0x10 [ 918.063041][T18210] ? assign_work+0x1a0/0x250 [ 918.063077][T18210] worker_thread+0x6c8/0xf10 [ 918.063101][T18210] ? __kthread_parkme+0x19e/0x250 [ 918.063131][T18210] ? __pfx_worker_thread+0x10/0x10 [ 918.063169][T18210] kthread+0x3c2/0x780 [ 918.063203][T18210] ? __pfx_kthread+0x10/0x10 [ 918.063236][T18210] ? ret_from_fork+0x25/0x6f0 [ 918.063275][T18210] ? rcu_is_watching+0x12/0xc0 [ 918.063298][T18210] ? rcu_is_watching+0x12/0xc0 [ 918.063321][T18210] ? __pfx_kthread+0x10/0x10 [ 918.063354][T18210] ret_from_fork+0x5d4/0x6f0 [ 918.063388][T18210] ? __pfx_kthread+0x10/0x10 [ 918.063422][T18210] ret_from_fork_asm+0x1a/0x30 [ 918.063462][T18210] [ 918.063471][T18210] [ 918.286080][T18210] Allocated by task 19740: [ 918.291519][T18210] kasan_save_stack+0x33/0x60 [ 918.296264][T18210] kasan_save_track+0x14/0x30 [ 918.301081][T18210] __kasan_kmalloc+0xaa/0xb0 [ 918.307115][T18210] nbd_alloc_and_init_config+0x97/0x2a0 [ 918.312838][T18210] nbd_genl_connect+0x490/0x1c60 [ 918.317922][T18210] genl_family_rcv_msg_doit+0x206/0x2f0 [ 918.323959][T18210] genl_rcv_msg+0x55c/0x800 [ 918.328870][T18210] netlink_rcv_skb+0x155/0x420 [ 918.334654][T18210] genl_rcv+0x28/0x40 [ 918.339090][T18210] netlink_unicast+0x5aa/0x870 [ 918.343914][T18210] netlink_sendmsg+0x8d1/0xdd0 [ 918.348813][T18210] ____sys_sendmsg+0xa95/0xc70 [ 918.353728][T18210] ___sys_sendmsg+0x134/0x1d0 [ 918.358434][T18210] __sys_sendmsg+0x16d/0x220 [ 918.363235][T18210] do_syscall_64+0xcd/0x490 [ 918.367816][T18210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.373935][T18210] [ 918.376301][T18210] Freed by task 18210: [ 918.380412][T18210] kasan_save_stack+0x33/0x60 [ 918.385145][T18210] kasan_save_track+0x14/0x30 [ 918.389858][T18210] kasan_save_free_info+0x3b/0x60 [ 918.394937][T18210] __kasan_slab_free+0x60/0x70 [ 918.399751][T18210] kfree+0x2b4/0x4d0 [ 918.403866][T18210] nbd_config_put+0x3c1/0x750 [ 918.408590][T18210] recv_work+0x681/0xa80 [ 918.412965][T18210] process_one_work+0x9cc/0x1b70 [ 918.418223][T18210] worker_thread+0x6c8/0xf10 [ 918.422842][T18210] kthread+0x3c2/0x780 [ 918.427027][T18210] ret_from_fork+0x5d4/0x6f0 [ 918.431689][T18210] ret_from_fork_asm+0x1a/0x30 [ 918.436480][T18210] [ 918.438842][T18210] The buggy address belongs to the object at ffff8880354b6600 [ 918.438842][T18210] which belongs to the cache kmalloc-256 of size 256 [ 918.454565][T18210] The buggy address is located 120 bytes inside of [ 918.454565][T18210] freed 256-byte region [ffff8880354b6600, ffff8880354b6700) [ 918.469013][T18210] [ 918.471388][T18210] The buggy address belongs to the physical page: [ 918.478101][T18210] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x354b6 [ 918.486981][T18210] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 918.496619][T18210] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 918.505989][T18210] page_type: f5(slab) [ 918.511352][T18210] raw: 00fff00000000040 ffff88801b841b40 ffffea00008dd180 dead000000000003 [ 918.523048][T18210] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 918.532824][T18210] head: 00fff00000000040 ffff88801b841b40 ffffea00008dd180 dead000000000003 [ 918.544550][T18210] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 918.555823][T18210] head: 00fff00000000001 ffffea0000d52d81 00000000ffffffff 00000000ffffffff [ 918.566467][T18210] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 918.576566][T18210] page dumped because: kasan: bad access detected [ 918.584899][T18210] page_owner tracks the page as allocated [ 918.590826][T18210] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17202, tgid 17202 (syz-executor), ts 702918999258, free_ts 702902697976 [ 918.614786][T18210] post_alloc_hook+0x1c0/0x230 [ 918.619946][T18210] get_page_from_freelist+0x132b/0x38e0 [ 918.625798][T18210] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 918.632259][T18210] alloc_pages_mpol+0x1fb/0x550 [ 918.637497][T18210] new_slab+0x247/0x330 [ 918.641787][T18210] ___slab_alloc+0xcf2/0x1740 [ 918.647203][T18210] __slab_alloc.constprop.0+0x56/0xb0 [ 918.652881][T18210] __kmalloc_noprof+0x2f2/0x510 [ 918.658033][T18210] fib_create_info+0x53f/0x46b0 [ 918.665050][T18210] fib_table_insert+0x177/0x1c40 [ 918.671546][T18210] fib_magic+0x4d4/0x5c0 [ 918.676842][T18210] fib_add_ifaddr+0x4d2/0x580 [ 918.683578][T18210] fib_netdev_event+0x38a/0x710 [ 918.689577][T18210] notifier_call_chain+0xbc/0x410 [ 918.695021][T18210] call_netdevice_notifiers_info+0xbe/0x140 [ 918.701641][T18210] __dev_notify_flags+0x12c/0x2e0 [ 918.709384][T18210] page last free pid 17202 tgid 17202 stack trace: [ 918.716617][T18210] __free_frozen_pages+0x7d5/0x10f0 [ 918.723627][T18210] __put_partials+0x165/0x1c0 [ 918.729523][T18210] qlist_free_all+0x4d/0x120 [ 918.734430][T18210] kasan_quarantine_reduce+0x195/0x1e0 [ 918.740765][T18210] __kasan_slab_alloc+0x69/0x90 [ 918.746418][T18210] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 918.752791][T18210] netdevice_event+0x365/0x9d0 [ 918.757696][T18210] notifier_call_chain+0xbc/0x410 [ 918.763580][T18210] call_netdevice_notifiers_info+0xbe/0x140 [ 918.769788][T18210] __dev_notify_flags+0x12c/0x2e0 [ 918.774894][T18210] netif_change_flags+0x108/0x160 [ 918.779974][T18210] do_setlink.constprop.0+0xb53/0x4380 [ 918.785782][T18210] rtnl_newlink+0x1446/0x2000 [ 918.790706][T18210] rtnetlink_rcv_msg+0x95b/0xe90 [ 918.796318][T18210] netlink_rcv_skb+0x155/0x420 [ 918.801168][T18210] netlink_unicast+0x5aa/0x870 [ 918.806070][T18210] [ 918.808410][T18210] Memory state around the buggy address: [ 918.814064][T18210] ffff8880354b6500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 918.822913][T18210] ffff8880354b6580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 918.831259][T18210] >ffff8880354b6600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 918.839967][T18210] ^ [ 918.848419][T18210] ffff8880354b6680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 918.856753][T18210] ffff8880354b6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 918.865289][T18210] ================================================================== [ 918.891115][T20169] Bluetooth: hci6: command 0x0406 tx timeout [ 918.910018][T18210] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 918.918036][T18210] CPU: 0 UID: 0 PID: 18210 Comm: kworker/u11:31 Tainted: G U 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 918.933041][T18210] Tainted: [U]=USER [ 918.937390][T18210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 918.947740][T18210] Workqueue: nbd8-recv recv_work [ 918.953856][T18210] Call Trace: [ 918.957594][T18210] [ 918.961572][T18210] dump_stack_lvl+0x3d/0x1f0 [ 918.967895][T18210] vpanic+0x6e8/0x7a0 [ 918.973218][T18210] ? __pfx_vpanic+0x10/0x10 [ 918.979136][T18210] ? __pfx_vprintk_emit+0x10/0x10 [ 918.986715][T18210] ? recv_work+0x694/0xa80 [ 918.994920][T18210] panic+0xca/0xd0 [ 918.999479][T18210] ? __pfx_panic+0x10/0x10 [ 919.006063][T18210] ? recv_work+0x694/0xa80 [ 919.011327][T18210] ? preempt_schedule_common+0x44/0xc0 [ 919.018782][T18210] ? preempt_schedule_thunk+0x16/0x30 [ 919.026463][T18210] ? check_panic_on_warn+0x1f/0xb0 [ 919.031961][T18210] check_panic_on_warn+0xab/0xb0 [ 919.037678][T18210] end_report+0x107/0x170 [ 919.043101][T18210] kasan_report+0xee/0x110 [ 919.048481][T18210] ? recv_work+0x694/0xa80 [ 919.054060][T18210] kasan_check_range+0x100/0x1b0 [ 919.059878][T18210] recv_work+0x694/0xa80 [ 919.064285][T18210] ? debug_object_deactivate+0x1ec/0x3a0 [ 919.070158][T18210] ? __pfx_recv_work+0x10/0x10 [ 919.075557][T18210] ? debug_object_deactivate+0x1ec/0x3a0 [ 919.082474][T18210] ? __pfx_debug_object_deactivate+0x10/0x10 [ 919.089017][T18210] ? rcu_is_watching+0x12/0xc0 [ 919.094721][T18210] ? lock_acquire+0x2cd/0x350 [ 919.100057][T18210] ? rcu_is_watching+0x12/0xc0 [ 919.105463][T18210] process_one_work+0x9cc/0x1b70 [ 919.111232][T18210] ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10 [ 919.118064][T18210] ? __pfx_process_one_work+0x10/0x10 [ 919.124284][T18210] ? assign_work+0x1a0/0x250 [ 919.129126][T18210] worker_thread+0x6c8/0xf10 [ 919.134292][T18210] ? __kthread_parkme+0x19e/0x250 [ 919.139673][T18210] ? __pfx_worker_thread+0x10/0x10 [ 919.145700][T18210] kthread+0x3c2/0x780 [ 919.150025][T18210] ? __pfx_kthread+0x10/0x10 [ 919.155907][T18210] ? ret_from_fork+0x25/0x6f0 [ 919.162622][T18210] ? rcu_is_watching+0x12/0xc0 [ 919.169417][T18210] ? rcu_is_watching+0x12/0xc0 [ 919.174989][T18210] ? __pfx_kthread+0x10/0x10 [ 919.179813][T18210] ret_from_fork+0x5d4/0x6f0 [ 919.184682][T18210] ? __pfx_kthread+0x10/0x10 [ 919.189806][T18210] ret_from_fork_asm+0x1a/0x30 [ 919.194908][T18210] [ 919.198593][T18210] Kernel Offset: disabled [ 919.203470][T18210] Rebooting in 86400 seconds..