last executing test programs: 25m46.53965346s ago: executing program 3 (id=609): mmap$auto(0x7ffffffd, 0x40000c, 0x11, 0x9b72, 0x2, 0x8000) r0 = socket(0x1d, 0x1, 0x7fff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) dup$auto(0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) writev$auto(r2, &(0x7f0000000040)={&(0x7f0000000040), 0x1000}, 0x7ff) socket(0x18, 0x5, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) msync$auto(0x1ffff000, 0x1800000000000fa, 0x400000004) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000000500)) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)=""/68, 0x44) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x6a, 0x2, 0x0, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) semctl$auto(0x8, 0x6, 0x9, 0xe4f) getpid() 25m45.262163537s ago: executing program 3 (id=611): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x10b, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, "c63d9865e4ee33c582314f86116d291a288cc43d9b762fb078e9b0945c103b165daee62c6c221b3f0e3e4918737b648462a3fa38d94b2994b91f03c4b8b8dafc2b35ea765de19b038450d2d5d24b08990459c6fe514ce57880ebdda2340e7374257cae9d5aaf9795d99afc775417d1e10d48c658935cb8ee7e672696188b6fed0e951db60e9914621238d47f1c67c3118dc8308a7a09ab9ba21a6cf5e84205b745b01e2827b7ef96971a6a163cf5e54b3be9f341a75ac2280025728a5fe2cd3cd5dd"}, 0xd8}, 0x1, 0x0, 0x0, 0x200440c0}, 0x20008008) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000500), r0) stat$auto(&(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580)={0x6, 0x2, 0x20000000000000, 0x0, 0x0, 0xee01, 0x0, 0x5, 0x5, 0x2, 0x81, 0x2, 0x401, 0x4000, 0x7, 0x6}) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8040) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r4 = socket(0x10, 0x2, 0xc) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r5, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000040)={r3, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r4, 0x113, 0x1, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) read$auto(r5, 0x0, 0xb4d3) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) write$auto(r6, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) 12m35.902274891s ago: executing program 4 (id=2792): write$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="911b12bd7000fedbd42508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20045800}, 0x20040000) msgctl$auto_MSG_INFO(0x92a8, 0xc, &(0x7f0000000280)={{0x1, 0x0, 0xffffffffffffffff, 0xc88b15ca, 0x2, 0x2, 0x6}, &(0x7f0000000200)=0x5, &(0x7f0000000240), 0x1, 0x6, 0x4, 0xfb, 0x1ff, 0x9802, 0x2, 0x200, @raw=0x80000001}) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="58130000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1358}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$auto_IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x4000}, 0x20008801) socket(0x2, 0x3, 0x6) mincore$auto(0x0, 0x10000, 0x0) setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r6, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r6, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd) ioctl$auto_EVIOCGRAB(r7, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r7, &(0x7f0000000380)='/dev/input/event1\x00{65\'A\xe8l|w\xd3\xbai\x9e\xfe\t\xfa\x7fc\xebD\t\xe8Js\xbf\xf9\xa6,@U\xc9O!\xba\x1c\xf7\xd9\xb8q\xa3p\xf7\x85\t\x16gC]\f\v\xa7I;5\x8b\xc9Z\x1f\x9a\xf2\xbf2G\x8e@l\x98k\xbc\\\xee\xc2U', 0x10001) mmap$auto(0x800000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) close_range$auto(0x2, 0x8, 0x0) 12m34.149221638s ago: executing program 4 (id=2796): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0xe, 0x8000000000df, 0x9b72, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r1, 0x110, 0x4, 0x0, 0x4) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) madvise$auto(0x192ad524, 0x8, 0x19) r2 = prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x202400c, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x0) getrandom$auto(0x0, 0x20000002, 0xe) (async) getrandom$auto(0x0, 0x20000002, 0xe) process_vm_writev$auto(0x0, &(0x7f0000002980)={0x0, 0x4}, 0x86, &(0x7f0000000100)={0x0, 0x7ffffffe}, 0x10000006, 0x0) (async) process_vm_writev$auto(0x0, &(0x7f0000002980)={0x0, 0x4}, 0x86, &(0x7f0000000100)={0x0, 0x7ffffffe}, 0x10000006, 0x0) listxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x3) kill$auto(0x0, 0x21) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000200)="20c8b3a4fb6bff059c95374dba0a152bbeeeffe5ee2adeb39acc5fa84ac509109eb06243e9d27cd8157f22e3d5089bddeddf34eb9c01d5738694b74981ba90c2b722a3e628acc07af34ecb", 0x5, &(0x7f0000000380)={&(0x7f0000000280)="26ffac49ee421a79c1069c8188b64084169914823858670fff721b5fa287837f795587af55f6b243affa06df58d6b3c72e6b338ecb5bc64016d0b7dd30f5046dcbd72bb9e69c90cffac4af9a7822e16bec5fa5e07f61ed1edbb65909f436d1f83af38cabeda4cf9e6451eecd9b34d00b971b23452bc62c6cb589a111ed439198575ead7a3d24622d0349d8372b5850d72d0a29aa8fa8850f6c49d78d8408eae9c6c3fadae632933181c236acd3dd180364d3", 0x3}, 0x7, &(0x7f00000003c0)="8e128042ff6d03a4fdc3c4194477c61e331dcc834a5350d74aa6544f5c", 0x8b1, 0x4c}, 0x5}, 0x7, 0x2) (async) sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000200)="20c8b3a4fb6bff059c95374dba0a152bbeeeffe5ee2adeb39acc5fa84ac509109eb06243e9d27cd8157f22e3d5089bddeddf34eb9c01d5738694b74981ba90c2b722a3e628acc07af34ecb", 0x5, &(0x7f0000000380)={&(0x7f0000000280)="26ffac49ee421a79c1069c8188b64084169914823858670fff721b5fa287837f795587af55f6b243affa06df58d6b3c72e6b338ecb5bc64016d0b7dd30f5046dcbd72bb9e69c90cffac4af9a7822e16bec5fa5e07f61ed1edbb65909f436d1f83af38cabeda4cf9e6451eecd9b34d00b971b23452bc62c6cb589a111ed439198575ead7a3d24622d0349d8372b5850d72d0a29aa8fa8850f6c49d78d8408eae9c6c3fadae632933181c236acd3dd180364d3", 0x3}, 0x7, &(0x7f00000003c0)="8e128042ff6d03a4fdc3c4194477c61e331dcc834a5350d74aa6544f5c", 0x8b1, 0x4c}, 0x5}, 0x7, 0x2) pread64$auto(r3, 0x0, 0x2, 0x7fff) madvise$auto(0x0, 0x200007, 0x8) (async) madvise$auto(0x0, 0x200007, 0x8) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) (async) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="ec62daf208af010400009852d43eb69253806c9d337367546b639ea022285f263e735d20030000006de8c87d6566c8be1c075014", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x7, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x7, 0x0) readv$auto(r4, &(0x7f0000000040)={0x0, 0x10000}, 0x6) (async) readv$auto(r4, &(0x7f0000000040)={0x0, 0x10000}, 0x6) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x80000000}, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0c/sub6/sw_params\x00', 0x101480, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0c/sub6/sw_params\x00', 0x101480, 0x0) 12m30.529878115s ago: executing program 4 (id=2802): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf2508000000c63d9865e4ee33c582314f86116d291a288cc43d9b762fb078e9b0945c103b165daee62c6c221b3f0e3e4918737b648462a3fa38d94b2994b91f03c4b8b8dafc2b35ea765de19b038450d2d5d24b08990459c6fe514ce57880ebdda2340e7374257cae9d5aaf9795d99afc775417d1e10d48c658935cb8ee7e672696188b6fed0e951db60e9914621238d47f1c67c3118dc8308a7a09ab9ba21a6cf5e84205b745b01e2827b7ef96971a6a163cf5e54b3be9f341a75ac2280025728a5fe2cd3cd5dd0000"], 0xd8}, 0x1, 0x0, 0x0, 0x200440c0}, 0x20008008) syz_genetlink_get_family_id$auto_nlbl_cipsov4(0x0, r0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={0x0, 0x1ffffffff}, 0x6, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000200), 0xc0802, 0x0) write$auto(r3, &(0x7f0000000240)='\'\b\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="e592abdf1023f85cd17801000600"], 0x1c}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) write$auto(0xffffffffffffffff, 0x0, 0x81) write$auto(r2, &(0x7f00000006c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbw\x8dSN\xb2#\xde\xf6\xfe\n_\x86\xccI{0 \xdb8Mh\x16 `\xc7\xe3\xf1\x9f-\xdd\x9a\xd2f\xca\xb3\x99\x81\xb0\xebt\xbc\xde\x0eH\x8db', 0x52) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x321, 0x4, 0x19) r5 = open(0x0, 0x424800, 0x74) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r8, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r7) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r6, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) fchdir$auto(r5) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, 0xffffffffffffffff, 0x8003) unshare$auto(0x40000080) 12m29.15698262s ago: executing program 4 (id=2805): mbind$auto(0x0, 0x7, 0x10000000000008, 0x0, 0x80000000, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='hfs\x00\x81\xe2\xde\xa8\xb7\xc4G[*}\xaa{\xf1\x86\xf7d@\xe8Y\xea\xb1H\x01\xff\"^\'6\xba\xa9s\x1d\xf4\xe1i\xc5\xb6_B\xa7KFS\xc1\xa7\x8e*h\xe3\x8b\x7f\xca\xfcNEi\x84?\x82\xff\xf2\xac\xd1\xee\xf4\x9a?\xac\x11\x88\aO\x84\xe6k\a\x9bY\xddx\xb8\xdf\vHv\xb5\f\xbc\b\xc0\xfa\xc0\xfe\xa6\xce\xbd\x03\x00\x93\xdc4\x97\xce\xd5&\x93\xae\x05q\xe9\xa8?\x00\xbdi\x88q\xd0w\xfd@\r\xce\xe4\xadrt`\xf8`b\xbf\xeci\x93a\xc6o\x9ej\xe4\xa3\x9d\xaa\xe1\xe1N\n\xbcq\n[\"5\xd4\xa6\x96#).\xbd\x8aD\x88>8J\v\xb5\x99H\xc5\a\xc9\xcf\xbc\x85\xbf\x85\x81\x0f\x7f8\x11\xdbK\xf3\xc2#\x18 \xdf\x05\xcd\xbb\xc03_\xb7Q@\xf2G', 0x7, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x220080, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r3, 0x4c82, 0x0) unshare$auto(0x40000080) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xebd, 0x401, 0x5) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) fchown$auto(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) recvmmsg$auto(0x3, 0x0, 0x86873cbd, 0xa, 0x0) 12m13.983761518s ago: executing program 33 (id=2805): mbind$auto(0x0, 0x7, 0x10000000000008, 0x0, 0x80000000, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='hfs\x00\x81\xe2\xde\xa8\xb7\xc4G[*}\xaa{\xf1\x86\xf7d@\xe8Y\xea\xb1H\x01\xff\"^\'6\xba\xa9s\x1d\xf4\xe1i\xc5\xb6_B\xa7KFS\xc1\xa7\x8e*h\xe3\x8b\x7f\xca\xfcNEi\x84?\x82\xff\xf2\xac\xd1\xee\xf4\x9a?\xac\x11\x88\aO\x84\xe6k\a\x9bY\xddx\xb8\xdf\vHv\xb5\f\xbc\b\xc0\xfa\xc0\xfe\xa6\xce\xbd\x03\x00\x93\xdc4\x97\xce\xd5&\x93\xae\x05q\xe9\xa8?\x00\xbdi\x88q\xd0w\xfd@\r\xce\xe4\xadrt`\xf8`b\xbf\xeci\x93a\xc6o\x9ej\xe4\xa3\x9d\xaa\xe1\xe1N\n\xbcq\n[\"5\xd4\xa6\x96#).\xbd\x8aD\x88>8J\v\xb5\x99H\xc5\a\xc9\xcf\xbc\x85\xbf\x85\x81\x0f\x7f8\x11\xdbK\xf3\xc2#\x18 \xdf\x05\xcd\xbb\xc03_\xb7Q@\xf2G', 0x7, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x220080, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r3, 0x4c82, 0x0) unshare$auto(0x40000080) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xebd, 0x401, 0x5) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) fchown$auto(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) recvmmsg$auto(0x3, 0x0, 0x86873cbd, 0xa, 0x0) 9m17.952028527s ago: executing program 5 (id=3352): write$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{@inferred=0xffffffffffffffff, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x1, 0x1, @raw=0x3, @integer64={0xea6, 0xec, 0x340}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DEST(r3, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="911b12bd7000fedbd42508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20045800}, 0x20040000) msgctl$auto_MSG_INFO(0x92a8, 0xc, &(0x7f0000000280)={{0x1, 0x0, 0xffffffffffffffff, 0xc88b15ca, 0x2, 0x2, 0x6}, &(0x7f0000000200)=0x5, 0x0, 0x1, 0x6, 0x4, 0xfb, 0x1ff, 0x9802, 0x2, 0x200, @raw=0x80000001, @inferred=r2}) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="58130000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1358}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$auto_IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x4000}, 0x20008801) socket(0x2, 0x3, 0x6) mincore$auto(0x0, 0x10000, 0x0) setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r7, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r7, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r8 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd) ioctl$auto_EVIOCGRAB(r8, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r8, &(0x7f0000000380)='/dev/input/event1\x00{65\'A\xe8l|w\xd3\xbai\x9e\xfe\t\xfa\x7fc\xebD\t\xe8Js\xbf\xf9\xa6,@U\xc9O!\xba\x1c\xf7\xd9\xb8q\xa3p\xf7\x85\t\x16gC]\f\v\xa7I;5\x8b\xc9Z\x1f\x9a\xf2\xbf2G\x8e@l\x98k\xbc\\\xee\xc2U', 0x10001) mmap$auto(0x800000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) close_range$auto(0x2, 0x8, 0x0) 9m17.112792418s ago: executing program 5 (id=3356): mmap$auto(0x1, 0x402000d, 0xdf, 0x200000000000eb1, 0x401, 0x7ffe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) capset$auto(0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r2 = fcntl$auto(r1, 0x402, 0x8000007fffffdf) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r3, 0x402, 0x2) r4 = socket(0x1d, 0x2, 0x7) dup2$auto(r4, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000003740)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r5, 0x80045105, 0x0) r6 = getsockopt$auto(r0, 0x84, 0x4, 0x0, 0x0) r7 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto(0x3, 0x0, 0x100082) r8 = socket(0xb, 0x3, 0x9) sendmmsg$auto(r8, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000080)="015bffd07e47ac651994420cbc1dfa2fdb55bb2a9110288f8fd8e40b035e806725383f9015178b3fdd5d0a7aebb17b9880daefe2f5903c5e3472", 0xf}, 0x7, 0x0, 0x5, 0x12}, 0x400}, 0x1, 0x101) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r9, 0x4b68, 0xffffffffffffffff) pidfd_getfd$auto(r8, r8, 0xb) r10 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r0) r11 = set_tid_address$auto(&(0x7f0000000140)=0x7) ioctl$auto_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000200)={"046a55cb51fbb7399c1ac50bad6a6cc37a8ede6783cc3e5c7f21b4d1bbe6bed8", 0x6, 0x6, 0x7fff, 0x101, 0x3, 0x0}) msgctl$auto_IPC_INFO(0x4, 0x3, &(0x7f0000000300)={{0x4, 0xee01, 0xee01, 0x6, 0x0, 0x3, 0xb}, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0xe, 0x8, 0xbf63, 0x5, 0x337, 0x8, 0x0, 0x3, 0x1cd0, @inferred=r12, @inferred=r12}) sendmsg$auto_IPVS_CMD_GET_CONFIG(r6, &(0x7f0000001a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000004c40)={0x1c48, r10, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x3b6, 0x1, 0x0, 0x1, [@typed={0x14, 0x102, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x90, 0x0, 0x0, @fd=r9}, @nested={0xf3, 0xa8, 0x0, 0x1, [@typed={0x8, 0xd7, 0x0, 0x0, @pid=r11}, @generic="20d5f452169c93586f9971ad45a3deed422013578811c2303e5bbce12c04e256ffe25f1c2f92398f0ea9920b5d9692b49999ee2d66b9b064a8e84291539871cac01325398f6a680500fee4b13f6125f522aa265985abe855c91c1d44c62de05223d98f1734cdc8d8ae30a76b8e9b10845af4eed1abdb76f0b3936a8769deb37465817a0e2baa93000fad3e9684177b3bfafdc21ec324a00600fa200b189d69ad05b4513f4299bb1c75142650f8f8134f56730545aa5979b09ef90d40b3af55f8ffab8c88efdd15be00"/211, @nested={0x4, 0x5}, @nested={0x4, 0x1c}, @typed={0x8, 0x61, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0x1d}]}, @nested={0x24, 0x5e, 0x0, 0x1, [@typed={0x4, 0x132}, @typed={0xc, 0x54, 0x0, 0x0, @u64=0x200}, @typed={0xf, 0x1, 0x0, 0x0, @str='/dev/tty12\x00'}]}, @generic="f2e287147ed9d65ba5839ed44d5b76b8d58ccf94a809da6da3e065b192a8e95d8f7819573339572f1e01b43ee1d14381ac0e05003fb00fdf6ca287c57c98d6d93b3ef508350e4d6b9f3fc45da1bcba3406ecf6", @nested={0x21b, 0x9f, 0x0, 0x1, [@generic="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", @generic="57113b55a861567fefdf0b500590b96e981f8dab9327044593b227d513371e70c26e6fafdcc4de4dda7c2f9dae3b083df261caa2b1a2d79ceb514536d6a4c09ada55c4abadc5f0a2d57405e4d8978d70bcf355789f6e9df6ff3e99b4bbc1743eb4d2d98a05273e1f5137ad6e1caaeb656c59219bb5dd17e35eabe6d880f810a599d88eb51b1951b28486f2b58900ff9a7108af12785be5bfd14e2266191d960301b87eb696d86f5d9d7eb428c437062be14d7be9aa29bcb7582516eb6d48bae26e4ae86f77531245e71383051e7c765917bf4dc628", @generic="4b7b47cb241aa39b5e6afff7d67bbfed25b27953d01c5688d459062e1d2a5a7402961ec47d8234854167250fe675427c4f086e9f5c6315d222b288f3", @typed={0xb, 0x82, 0x0, 0x0, @str='$/%\'\x14!\x00'}]}, @generic="0950c3cdb98a37a4ddf098dfd2f99f"]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@generic="f8b199bcb1eb995f0feb35824643b722", @nested={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0xea, 0x0, 0x0, @pid=r12}]}, @typed={0x8, 0xe4, 0x0, 0x0, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x183b, 0x3, 0x0, 0x1, [@nested={0x3c8, 0xc1, 0x0, 0x1, [@typed={0x88, 0x10e, 0x0, 0x0, @binary="91d92ac436c6090f292b76d6a3b06dd74142fde3b77d01df915878fcb84d850d17784983e181589611c52ecbcd316dd9b408cda77bc29d7a316accdc57d928b134f5a4ff671f4f9cadcc0f5caf46fe040cc2757dca5f45c1c67716b17f29d3ebbf2e76ecb95a0819ab90f7ea659fa4a31a66d162b6fb99e704afab399b48de780dc1b2a9"}, @nested={0x33b, 0xe1, 0x0, 0x1, [@nested={0x236, 0x16, 0x0, 0x1, [@typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x19, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0x66, 0x0, 0x0, @u64}, @generic="6dca71192465ba3882b9683f9517086c2149fcc93453efc26a1d700b29e0856cf6237702c945ca69e69fe7d7d7a9c335eef748912cd187cfc93799e0ea1c6379ecb3ba4c8e8e9e286064a2de1a0a767613f33878d0329848d6667788bea28257994c34d43c337c5cfc1c070e841c116cc126dbc9d33f7d70420add2d9243ae6f68725cbb46d5c0abb6f8604e6254936fc0c3f385c46d3c30dcc3811a4aa5a92ebd597de214ae9fed17805642a11e4d665a853b1834f9b22b250e29cbcc9802b9b187f63cc1fdb89f596a0e0273bb9598d289b3ca70879305fa91519efcf309c0c65d6924c762bd6d68c08ff99bb744cd3cb6", @generic="51296ca8291f1266217218f368e05b613fdcfbeeeafde9496ba17dd8accf19b30b11e28f762019a5179131bd0e4c4878899eadfd588ba42c8bd6859f6ed5360e12cbb281d086095ec838680ed0068cac63fca99d454f454564acb46916c16358ca3361c6", @typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@multicast2}, @generic="87a694e7506fdd5f407d6202c9426e1ce6e4546eb4cec2c9155ac16ee96e45d25d00d3b1ae289438c1aa3e0c71a42e0a0b1f0293fe679b1cf4472892eb5072d7224212720dfadee36d79e6e20a945b2dcff11a8bec262aad39299015793e458d4f9c2fedee28836cb311cd2a8eac9d4383766de292bae87c21084f20e3c0114024b32b1164a09caa3944a4fd6420a6d811a00f3b3682244cd8ab9df9c724f8f2b70560f5a195c881844453ace0fc05fe085756ac03db2a8b"]}, @typed={0x8, 0xf6, 0x0, 0x0, @u32=0x59f9}, @generic="e16464aa8939e7c9a2a3fade1636d7e24f8298fc47be29ca27527da90a417d87d05685cc5e56197fda2fe6c81202b61a2e5e89c1d5f40e9f9341b89b85aefbd5f7b2bec7d5dcd383b77f2c4794ab54bbcebb2b187704b1c05eebee40703d0e0af6e1bece11a280ec7bf6cc9b0fcc8e6faefe1c9d75deaf102dbff8c58398483e99cad01490527830a24d221586f0574ad6ff9fa8fd92ebd414f36454f7ae87972dcac2309d97ebdf0fcc13ff4f58543ce4c5cf362529a93f148d148d1ff0ed04a6ce75b60ece5903b626b8ac030ebd5867e3b15984e97fd113c3d1f37a4f1e01e0d02d8ea44e79097b8115aa989c5e681759c9689974fc"]}]}, @nested={0x2c0, 0x3d, 0x0, 0x1, [@nested={0x10e, 0x11d, 0x0, 0x1, [@typed={0x14, 0x146, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x99, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0x57}, @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@remote}, @generic="f217966e0de72660b695c90d0e21db03fdf8977cde270e73e94d9865e3ee4b96e59141047d19ac88d0f299db6b43674d775979735601", @typed={0xc, 0xac, 0x0, 0x0, @u64=0xcf68}, @typed={0x92, 0x23, 0x0, 0x0, @binary="ece4adcdf716c2014160e65a6a146252a31840b06e628b27aacfef7a5a156fe7e57b690f52af996f48b007eb94e17103e466874477be6b2eee950e11b53de7c498504c88ed99cfa422a4edba99b935004259466f0d8ee3400178c6dad3b774c3795c0a19af97255b2ab0cbed82fd64eba5408a4f418403d8dc556b4bae99a742715fbf50c1e3d38b25d1a13785c8"}]}, @typed={0x8, 0x13b, 0x0, 0x0, @uid=r13}, @generic="2ea5aa8b5381e3366766cb1babe01e5f63253bb7c8b64f088ba81e6ad13b4b1a43d1bc74e9fbda8547b5c72ad1620561bb409f67d942a655bc64941ddab378dd7980ef17bcaefcddf6ca80061019ff3e69db66a443d2a70cfd303cfb6fbcbbba458f1eb377d663acff5deea0421ceb483f9ff8923e6734c2e2ac222048e2e39b29680ac3dee8ca071a427510d8c671cc69b3f26a9332bcd1ca852270b18ea75f12f418afce54dc4e8f2434eae667e7b5c608fac9641d66f62fb9b6727f8c137d09625b00a26ec0166d7c315e800228", @nested={0xb4, 0x7f, 0x0, 0x1, [@generic="e5e28b14b90464ce195f94d365b20a5172107fee7e2fa94e6eeb6b7e45de6f95c373890a798aebd731320593480199060c7c06129f213f86f797e930aec0e03e71ac7a2684dcad9fa7a808c36c45158fdf3e708ea52bfd2f2b8164841df044b40f7f2ffd787e42e0c8bf9d11691fb738351a64e63f04a89ae6ab2857f366b166817a2951ed024bae554abd3bed6e342061f6003278b1be0c4986e718e9e72186f18ea5d8e20f431b362b21ce7c18ac64"]}, @generic="a80b3ba5c29ebe8f06ee6de2e0", @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}]}, @nested={0xc, 0x103, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @fd=r7}]}, @generic="eb7dc76ef2151d4e9987906aaee411a914449c2c06994da49f2d90", @nested={0x117f, 0x12f, 0x0, 0x1, [@generic="b9ae6bf6ede7832a69b0eec4da185e3eea6beb3c6ecf86feb41b293ec43b84a3deb06cfddeb6c4468c26ae822cbe0ad9f8c18ab151329926a0a3ee151a8d844709bcc643579f02651f331a89cc9e0493f0561e57f598eb70859cb86f7017", @nested={0x4, 0x80}, @generic="2cae11db566168306fa0dac3550ddaf3571334726ff4d163dc41e5e0b729ff74f80bb670e54321d79e59d751027af23e32c3a578ee4014a109a20a81254a991be18220ca5d36d1baf8292fbecc2a2be6b90d01641fb47e4de22d4a05c6e8ceb4bc6ba25d4d3d88daf84dfefb6d7980b50fbc9cef0d369150cb9d91946a7d2f195d3d7ee89718a24d57a091191f94ec1bb0c4322aec8bf5b00790f765a93b58c6f77acdb8791e22c9155b69bdebae4b56887699543dfb101aa7657e33e31226e7dfff1687a559d7454f7a323e346cbf48868d3ad0fb315da0dfc5c0931ce808f231775e79ef974f49f1b0b2aa92ace7d9f607e8d4c971152ce467a1ab8805682ac56960ff76545c691f3781e202c6dd51434b5c850c07e8f52c42bd6b3d18ab1ddd2bed66edf239454b61a525827939ce5baf1999af8b51938e0871c6dcf6bc9788a2a2f10efde57011c53fccbd1baa6bd6e3afd0ff9801722d9c2fa0eaf372e26be67df129c01b4169649fb23dc3ca28eb027dfabff664f5f8ee465f421bb459f6e80638e8486ed1a55129f429d6b3789ee0bc3cac8f5d22f7b22300180b31927d130f396f56908f836d3ad1d2c66288275b3b1e6b4518270085cc93fdbff4a88b018fdb5d5b15b6eb18604a7dfffda4ae4ef22ba5f3f35ed6b929174fdd8104e5b294d41da0d08a304d9824c1ead28dc033dcbc339d034536d933dc13429aabb40f6526be345c519ab3eda060a32ea6ee00ee03de26c15947d6fcc76f2874607d0255367dcd9299475fdbe40ce107c1386baf3570a9b97d9deb630a45b694c39afab3ac8a05a9a98826f4e24c79af2c08a043ee1558145873fc457a092b7bd61ae7bf053267c97012076085aec4e7c9f6a058ede5fb24f7824f4457db3c38c334a272623de0cd034fd04049da3559e61d9b60f579fdea7774afd34f3fc2f194fbbfab19727d49564c2770ef2a44f1eb9f7e772fededa472bdcd7200b9a07a1ef4cab8895cf31f1074fe80390c7e75046427f09d11efabe0537caccac8ad185be12d36894348414aff67d248ac3cf832c817dc815f1351d81b28b2415f19b1ca078eeb56db556718a19f961f8b5f9922224d64a221cf4f04b719e7d1b2868b0ea60488945db56c10d47a1430342f71fbeeb8d25167da6d725e07f3f7cd14d4383896e49fccbff2aa2d4f95f6b62c908bca82ce7c1e9f328e102ad27de7b4a37496689fba4271c23390f4df4741e67cbf22766dcb0d1a5df5b2d0739e9d59e2c5f4e40745e01f4070592875c7d0140a93724d3c22ee8f745c0bc0971c3f96cce288bf8d6ff35f6dfc3db47c916be92dc878aa8faab274f077f27cc85be39c275dd11d70a1f0082f0ed75c7fb0c484c9652171c4777fc1e818ffbb5dc254c0d86bec6b60d9e680c050327c71d5a17b26b73b9e69e219a16a39fd2368eb54ddce7545d7504cd7f0a2d44555f98508c2a2d82543ad569bf47c679e6d3394df7f072524b228c1fe37853a1c186465d0af2a395c98302d87501442cafd91630eb53356ad828cf0f138659ebff72cb4e29fa2956b1552173dcf042883612ca93951d8449a2fa88db07af1cc42feca3220165a9274846c7de003cb0a098cbc4e70b647fac177acea99a0b3a4558eb48080a41b1a30a41977ef999cdd5bbd32ba7e65d8a58e25fac6279838fd8200a3e395eec2d583ccada2c807b7e0f9832f86bce6c047b037b0c2117be4037e5301761fca661dfe2a0b559c1400b25d1bb45bedfc47fd0894d302584dc437e83f0438f8aea6f5074d60d9d6d0f8350005ccb09892102177e7b7dc6063f8b7606d13933046c96ef4bd073e3a7b625fa2b756b22682e096a3decc094abb05f0651ea73f1254836b4d144f3ab1a917d8b7c9e22c12e90a0c6692217475c99b14aa9d463d9f06e7fb6e8a03eb04421081c672398bce9369a923576b2e6ca5e8a5c81a80b708d374fb91fed2ca5c007ea9e62acf7db9ab240097fc18c9334d14a0841ebdf07de1b135b294c913c5061212ac4986819554dd54b01544e536e244ca2df0b3e9e70ef0a2275ca2186659274927557d8a973863583d2386f0148a3a47d5d8ca706c39a6e2bd1d03bddc6e7197d3f2f19ed0028f5a010570eb74dd845adad2e38470f790ba4b44b6c291cda9d0f87f5c43cec5912fb594bc533843cd36e97d963799c55b88cc07916a5051daeb3328c8f63057a39a8c645ef746698a39bc22681b37efe8020768554cca32d304abc3e1fc00eabf70d6adee36ba72fa4955289e83a739a046aad0753b16e002983713899a1b6e7c2dd3bfd7dbdba61755d7c0f8414d706c8eedd1ae0722e80c8713fbae5f3610f898adb9c0d001e13a9bc14a8f9f2ce3e58198c72aa01a4790df9e1681cba5b0385fb73e85bb4c2aa5d109d8fd692037ea4969032d81b53b0ac72b599aed3bc0528ad1d0e9529258266948f2889ea1f1cbd7ddaaa167f3e09544d491263b26b334685a69079c5e9013c72688727143eb1dc0ff1a7c608411bbdf170d8d61ea489d1edf450bde5ac9ca2cd09b62f232919a15fc6337845bf024c6b91803531e5a0d0bc07cc9a3e63554593e359ee8c19674a1c597b9fb0b471ce755717d55187eedf096db6aae998e6abc44affcd9aba7e0c7bd3787c507b2a7fb4e21d83716b75a182d62add69e0e9863064aa6bae0e4dd70eadafd11573e06b90d2d731ec32e06106cbadaf8c227d972a5bb3ac1b3ba7b45adfdf4717a19b9f264a477a28837f04c14ba3ca06ab65c3b7de45421d28daca6eabb2a89fd5dab6c444264cbfd8ae10ea0d43199269ee0d3e2ab10a2c0afbbe489a39b455311010d93176f414ac5f262d4f673d4b5088119629181a41dd8e9e6fc237dcca370a2bf10ac0908c6203fced54300b242c8dbe8d0cbf67470daeac47b825d71388113f2814d26fa2b95ead73883534b0f9637f99e8489708cc43dcb28c33aa61158cd284c2fd36feb50f176a736822ed890a1f6b939f6ed4da93838354d9dfb7c435f623ca1f3cb9f3dd6965b798bc008d4e89178e55972fd7240271fbfccfd2778f9cb8bcf41d611847f69d549d1447be178c3dc7549aa0eab300e78c206a52b962c843687b73bac732a52f39b34afe474630e1a03281edb297e9a1c89f552816c4e934e067e70904eba7f65c196053015b3822c3c83b23c6a18cedf4fdb53823325f4ce900b46b3b948699e4a749d278dadc25823b79c252f478b29ff968e1c46e71f30e45d27545537a02581decaf74842ab980e162a3fb069a9d102c5b6ed4d9006416bb83234c365bc9565d4f0ca5feb5be50aecc7ecf66dc781d9eb472ca4da0b8ac5bfb024c02c973530609836251ff3b0bfa1165a0910f0912396073f9370b803479be035eac8187e402bf8c5476f2ffd9f93255c3952d3f993fee6b02d9aa2aa7b3877cc0a7d00a3e862b3337cd238002ab8026d862545018f44dd8b97c8ce3459cb6128fb9cc7e9e3719f3495527134326163e28c3be88a7b603b618b70b130f33a3ed63642abfdca60946119d055def5c15f556ebfa55a62d3ed4436cfc1b09f5b46e0427a8589ba489e7a5ca6cbaf0952bf012efef56792bceeb6e0801166cfc540d4157c5b4666a0014478816403850630b401fc225b4f0adc27a2b486eefcd913b520be0a7e039ceb55ce2072b2510e78e2f0a7ee6031ab2702cb6c7f73544b368dde5842bdf5ada14fadbe3d9d0b69dc890da729bbb3fc0308d9e52fa0bac767379ad7e63491d6d9cf1b7c4183fabb0bba20af439adcb26379d939f17d2499bebb46118a574ddf0d7ce826392633ebc53c0ad6a5c4de8f740b00a41e67d499a4525efdcc7c83bd1c6e2d8e82072a47180a6134d11487dfede393f88e1227fd00a0b9239662153c690f4a1ce8978a6637b0165d616bcac7870c5ae55b241fcbd3e3d4d895ee2ca74fcebcfaab36f94969f21150f3488f5f7334a6e0dc536744fe332c81f2919b41a0631aef9b148eeea06a52b099e53bb8216e930bd06b82f5977f6f8062e3f2553af2da25e1c371af167dceef9d5959561f1f7bc3ee03be98c1322a594539d4ced2b5af8ec4a22bf07065d46a82415483cae736ccee22fb33be32c0aeccab997df34c4b857d3db6e50617a143a9e8f948c4265f21bdac3c2cf0ce1fdc44a96fcd7cc265351efb69eb85b4280e936343940bb257f4b1fee5e4108669a10bd52476c5992af455dd08ebf4ad634e8ef0128afdb0dee691c9a20b7c02d279b3123f7fa43552c2f62da54d5a39f28c1c2a60fbec97aaedc664cf0133422e17014acd7dfb03df93e586dd21385a091ad924320932e7978a2f05025a72658ed83ad6b92f93098618140fb4ca268b6e140b6df2d7a32bd3cc208e4fcdc4d7acfead6345cf193a3ee8e9c52ce24a053e14dac5b7df9971c19bd5801fb89058f8537857a2f8d17bc54772f8557d9af0311fc1d7f5c285b336c1f593676cc586e130b0e8e155c842689bd074282ce8bf2ee2091bb576a59601d2737a17ca9a27d6abc1ac85e49e9246d2d40fbab50fe0760e3d765497d0482ee4a973479f78640c6acc8811e4e4b9709492bd67c26d1d2d935cbed2287f9e7e5a940fa470238e84498220c6eb5a182c1f6a8c85aec59db216148fc4a3f97d6e44401ac76408a04a7ce46a096e78d5bde313fa50953e3d18d4dbdfd94188fba8fefbba1f81749757d6965de24f77607519925a4c1a65d39a60ecc1b5a7122602152a3c0cb46adfaf057621a95be7ee48bc63aaf4867edb340e69772bcddc741f990d099100c51fddd303066c06ae566c6cd2cfc989aaa1a9eb9b08b7162c785ba19ada3d54b1c67123b15c1995259fa2d1d5848208d617367a15eba002c35b4e39075369bfab573f91c6fc71f06880bce296e4292d47681674051b02a403195535d592a77ce7393abb471144264d7fd6f386d464b8054dcf8fac200cdbcb1b865fb68df025f42ecbfa3ef63cc675ca23fc984bf5ab87c4d22d327b698a12ba3ae9cca6b9757ce579f7bf845d41655eb38d3faa054d1831afdde027fe1420cfc96fe1f8de601ba8de23a900569fdbb3f0fddc04a6142ed8e6e6c6a9e8e0ff564707e33565c91d374d4d722c415adc65e9f843d08966ee5d6ccb2fd71d96f391db0e2033ac27c9adf2365836f426d1bc070520ea2aca5acf39b7f835109fee45e19c72d52a3bee397ae4c255374a1fb39070b04ea463e01fda7d91a333bcc1f96bc360255247df8316e3dd5bbbba3d014338fe3336b4c4ea6c1a567ddb0a62291c9262b59cb98640bc8ecca713d41fc860c82e2b10416c1859fb933cd4cada8340cc87ed40293ee77d7f778e76d41e34b657d3dfb9d8e42311d516f46de25d769c9776b01590d25d6f93d9b760071d588c0ff8875cc855f2f4b76d131b2d8994425c01874a7eb2259c7b66f20be3ce90645b2c49bb4c7d483b3be27c28d53e590d840d8174c9a2b32268068d9543f92b76b19368e32b66cf4d62dd36cf3ad84ba92a130a34920738d950353845956cb175ee0971c8ea65e181cd1532787d2279ba02c03f6b9f61b1a5cf14da8488ff645f73f7beef8f0f889967a577fd4a7122c9baadbd030f439025519e3bff1aab09b5ce6d55acd12214917f5b0828982e5d9b50419034fbd3a2be6f21c2848960cf96ef612c3e475b302b589683bd404c7b6afba26b80c107dd3c0a58acd2f9697d55165009f517417562926b17903a306c6dbdaa3d9f643024b4d7d187e5d5621958327ba0de5df8e8d275afdc5c6420738e62a1a00343018fae3bc8", @generic="ad6088c830653f4fcb81b4499c72ced7fe54f01be91c6eaf7a494279311f439da06156a6cf022cfb8d74e154e46f18a7fd331442584cdd6011e0c70ce63a7835988bd9e9d418574dc4b716ba78344d6565362057e7e8d2e49343052bcd6bd153301277960666539a77", @typed={0xad, 0x37, 0x0, 0x0, @binary="5c880dc75cd50b93e6d2daaf5b1a0c8b3724f16caf5b5428bbd2f2ac8618d602197d757e154aeab6502ffa543662bb3b6c5a8eca0d59b6a5326173cf426b09c48c682c80d514edadceceddf4ddec1b4947ce61e1e25bcdad8b6993f2d540b53ba250d59a575840ee26d2ce3b73a56cf1e1f1644f9c3f0a55ac9147ff7fabbbe8185a659db5779e1dc3b07c2d813bbc8eb2e16f5b5b8b41789c7c14eced2c0fb6718e7d3748002bd713"}]}, @nested={0x8, 0x58, 0x0, 0x1, [@nested={0x4, 0x22}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c48}, 0x1, 0x0, 0x0, 0x20000095}, 0x4000000) 9m16.360030629s ago: executing program 5 (id=3357): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x2, 0x0, 0x208) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x2400, 0x0) read$auto(r2, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r3) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r7, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r6, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) 9m16.015675758s ago: executing program 5 (id=3361): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, r0, 0x1, 0x5, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_INDOOR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x10) listmount$auto(0x0, 0x0, 0xf4240, 0x0) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_qrtr_tun_ops_tun(r1, &(0x7f0000000300)="01000000d80746ebe4fa29705e2e654014f2bc90628546cda7e9ce67b7d2ab52b096b449a312a437bac96a8cbd5f23dc7bf6f14d15f2f273c36ef21cef7aeb39937ef4ea2f4dd48bc81624c1ed60c83c39ba4d4ebee5b273c9888dbd978927b4b89795bcfc7ce379345bea07636878f456f4e82905ddfef781fbf9825f22c3d1af4a2295e2fad62ed1a9fa2db5eff40233560c88004511ae", 0x98) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000ac0)={0x6b4, r0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_MESH_ID={0xa, 0x18, "8765839be1d1"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x34}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "d366b7db35437c4dea30f43b"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x594, 0x6e, 0x0, 0x1, [@nested={0x8b, 0x19, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @pid}, @generic="f7b1840e10c37193057e77525de3f9ee243423a5a3239d46e4a7778f37773837bfa5e978c3c25f7bdd320deecd5cfa50088ab114ab2fb9047154a3339ddf60c125a3df53d0394875f6ce6dd05fa3d39e356b94000a8ffcb286df082954cc900f2b046574c181c70ebf2afac4aa68fdeba2d68045c51a12", @typed={0x8, 0xf6, 0x0, 0x0, @u32=0x5}]}, @nested={0x116, 0x25, 0x0, 0x1, [@typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@remote}, @generic="85f58c546fbbe9347ba3592fcfdb8d309a7fd803c613c6bd3fab8f90167b7e03990ff504d46bcebc5c22b2052345531a0400000000000000bad9df4c3ea2e82692723a7b78761772bd869c", @nested={0x4, 0x5f}, @generic="e2afcd6779b89d9f63b2ecd60d25efd1e9ca79912c9a7e9776e1eeab3ae0e60042a3ad1520949f3f6f508c29f4dd5ca612ce73eaa8356baf251c53d43e45dfcf0671f8a3812c8ad64f5f4f09a2d5cb7abfa16505aa9557957406333fe6070b27782550b3b961e736d7f07cfc09906e260ca22aa39aad3743", @generic="3c78c1722797b20255d296f37c20c1936ed1a83418d1abf888071530917573d373ea729d1951b38121cffba58307fa7b6bc4cb1092ff79"]}, @typed={0x8, 0xc0, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0xf4, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0xc, 0x59, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @uid}]}, @nested={0xd7, 0xd, 0x0, 0x1, [@generic="62c53941d704eae2b1797d70f53b87586aa0a3715a8ea1e919f492020537f738fbeab2697183619663154409dc5f2397f40287c9122347ede73e4cf763168e1a22a5d130461cd02863c532d21e2cb0cbf6a730344b4927b763a2791edc0de66440f0c927f073649d6c2663a4faa9e1407c89dae116662290b09f9890fc7a618c0324652ab731345db8d282b5c1c101efa751597a79923642c7afcb320210e555b91d65bf7e58efaeb8da7ec41f2121750dcae51ddda6428944b144d60e3cb044b7414306cad6bb5d558a2d05946b66a0aec092"]}, @nested={0x229, 0xeb, 0x0, 0x1, [@generic="64aba5ec5f90e9fac103ed631d74a6cfba6bd220c97def1dcf2840e7550d84b02bc984ba3d650276d02d1c32e1fbd5f4a6196af2d442c534645a1c644f24e545511f55063d628381a3724fa186119459ce70eeabc2475bb40515a75479360cafb8c55b62a8b955d10b7b25722bc791312ce24e8df651b0a826ee6fe4fb780fada2a46acf82e27331ec50c3ed96e31fc2f7d50604349967a038", @generic="030b34f2bc7bc05aa7f024c1fbcc7af314178a1b3f115bf287243a1213ad33b376533f6e4dcdac84342a73e86b64e20706ec9512868eeab624ca0e8aecb7ad885fbaaaac342f89c953b7205f3d9610b6ed", @generic="7561ddbee01d2c970e957e15e508669a0cd9eed4b0a172e9320f6fde0678cb8c37a994a9369a69cd1a3eadfa6c8f9b2d71c7f8d529ef75c4883a695c492c1cea554702da19d44cc2cbfb388feee942b58947b495383533056d6e75ab7aaecf4c5ebbdbb127c179c3c9e661d75268ad426e60151c82d09d3356f3b3bac0117367fd0ada0f35c8afcf1a6935fe2a576a6db95278d802292697e3ab6c53e2b05114fff8706bfb68c3ee56fbe5cede0a7561468966cbfd7de54214b7769aff377a858de3a294d7", @generic="3090822e392fec6f5777c2b0880044e6cb5f644249e69f8218f6abec8e15618a41f0ed6b2d85eeae7f5d1ac13734ee91b2576aa03733871645efebe468c0f8ce928b1879cc210e747ca7963a77b29fe259cf966dbc3761e0149e0f309c5f6ca4eb42f4c59824dd8b0a8f99426211182eed3c5f220836"]}, @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@loopback}, @generic="fdd5e8369df766e2de34655b58146066123bfd4dc97358afeeb4cbc6d774f0ec8b09519bd81f1d7a662578d7d30d2e255bf5b2b3f782626f6c46e4b5629e92f3ae4770ede010a6648d72c1a7a2a3950b33696604ccd04d8a5fd396d023d5dc09040e6448c8821808c44facf22f89eb1fb3c7412f5aa7cd4fc9c6b64cf60acf3d66ff825ecf2ae257714402c08ee7575d4fe58592eae47c5c3b10e6d54b48e1a34a88b018539d13ae3097409d07dcc7116b911ecd67825f15"]}, @NL80211_ATTR_PMKR0_NAME={0xcb, 0x102, "98433b45485b0d07f3af16801785094a6587d6303f241689b1d1c9c0c8398b54f43586f91d1324ce74406cf1b171de4a0068812e62f6ee82b56662a4f9f2b45fe2d5efe9c4222554921d37e9804a49ae94bd1ffbe0c245d2c015b1f89d9a5a826ccbd3cb8e7525cb9d7e46d2603719ba2441008a02c106d487e169bc205da6b217a386a17f197ef50047b281fd5b5062d60c793c2a1381b773b456be0344d6dcd2827b8ae029b454d192712a32fa126cbb7c8c1d05103557987a92063f9a5d5d0fdacd32255cf1"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0xef07}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x8805}, 0x8000) r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r3, &(0x7f00000018c0)={0x0, 0x1}, 0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x40100000001) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x181500, 0x0) sched_setattr$auto(r5, &(0x7f0000000340)={0x7, 0x6, 0xfffffffffffffff9, 0xfff, 0xa, 0x1f9, 0x6, 0x9, 0x4, 0x8001}, 0x7b) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20010, 0x7, 0xeb1, 0x404, 0x10008000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 9m14.657209669s ago: executing program 5 (id=3364): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.net/blkio.bfq.weight\x00', 0x8001, 0x0) write$auto(r0, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) 9m14.391274432s ago: executing program 5 (id=3366): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x2000007, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={"aa5d256c22d1e3b4be5d15a24ee599f9c7f4e7f65aac6300cac388ac1713a8df", 0x7, 0x9, 0x1, 0x0, 0x101, 0xffffffffffffffff}) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(r3, r4, 0x21, &(0x7f0000000400)={@siginfo_0_0={0xc4, 0xc, 0x80, @_sigsys={0x0, 0xffff, 0x7}}}) r5 = getsid$auto(0x0) r6 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000340)={@siginfo_0_0={0x10001, 0x47a, 0xb8f, @_sigsys={&(0x7f0000000300)="738c146a4c5eb89f3d4deaaeddddabcc3de2baf4e829ddd8b5b11996896f1e6123ca379de6cdc4ae785b8d8bae37e76ab51e", 0x7, 0x7}}}, 0x3, &(0x7f00000003c0)={{0xfffffffffffffffe, 0x7}, {0x6, 0x7}, 0xc000, 0x4, 0x200, 0x4, 0x3, 0x1, 0x6, 0x1, 0x7, 0x5, 0x4, 0xfffffffffffffff7, 0x0, 0x6}) r7 = gettid() syz_clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x7}, &(0x7f0000000100)=""/99, 0x63, &(0x7f00000001c0)=""/89, &(0x7f0000000480)=[r2, r4, 0x0, r5, 0x0, r6, r7], 0x7, {r0}}, 0x58) pread64$auto(r1, &(0x7f0000000000)='\xfd@]${@\x00', 0x3, 0x7) ioctl$auto(r1, 0xd00064c0, 0xc36) 8m58.796484929s ago: executing program 34 (id=3366): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x2000007, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={"aa5d256c22d1e3b4be5d15a24ee599f9c7f4e7f65aac6300cac388ac1713a8df", 0x7, 0x9, 0x1, 0x0, 0x101, 0xffffffffffffffff}) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(r3, r4, 0x21, &(0x7f0000000400)={@siginfo_0_0={0xc4, 0xc, 0x80, @_sigsys={0x0, 0xffff, 0x7}}}) r5 = getsid$auto(0x0) r6 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000340)={@siginfo_0_0={0x10001, 0x47a, 0xb8f, @_sigsys={&(0x7f0000000300)="738c146a4c5eb89f3d4deaaeddddabcc3de2baf4e829ddd8b5b11996896f1e6123ca379de6cdc4ae785b8d8bae37e76ab51e", 0x7, 0x7}}}, 0x3, &(0x7f00000003c0)={{0xfffffffffffffffe, 0x7}, {0x6, 0x7}, 0xc000, 0x4, 0x200, 0x4, 0x3, 0x1, 0x6, 0x1, 0x7, 0x5, 0x4, 0xfffffffffffffff7, 0x0, 0x6}) r7 = gettid() syz_clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x7}, &(0x7f0000000100)=""/99, 0x63, &(0x7f00000001c0)=""/89, &(0x7f0000000480)=[r2, r4, 0x0, r5, 0x0, r6, r7], 0x7, {r0}}, 0x58) pread64$auto(r1, &(0x7f0000000000)='\xfd@]${@\x00', 0x3, 0x7) ioctl$auto(r1, 0xd00064c0, 0xc36) 23.527288878s ago: executing program 6 (id=5317): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x10, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x941683, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x88841, 0x0) write$auto(r3, &(0x7f0000000080)='/\x00', 0x47) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_SG_SET_DEBUG(r2, 0x227e, 0x0) unshare$auto(0x40000080) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card2\x00', 0x40000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) unshare$auto(0x4000007e) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf252c0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="6e3e061809a06a523773213322297789e90a80b196cd77006c4d4cdc86a69f6961797f8841bd0a7d6e259f06125d73a230a83cbf7d992404ecd4942ed732668ac7accb095a8c2ae10319da01d822fabd31fdb7d3e39befbd2a9b44b6f16f8fc56c58451749665fa8ea36141152a4f31bc6a9621ef5d029471ffdf816b2c7a03c4218d57c2e8618f1b53fc04c8d97c898aa3b2e77191370956094b9d799809d9912105e523c4a9e85834c82c063"], 0x20}, 0x1, 0x1000000}, 0x400c080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 22.671002742s ago: executing program 0 (id=5320): mmap$auto(0x0, 0x1, 0x40000000008, 0x9b72, 0x2, 0x5) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x40400, 0x0) prctl$auto(0x0, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) r1 = socket(0x8, 0x8000d, 0x0) (async) connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r2, 0x0, 0x400100000001, 0x1ff) (async) readv$auto(0x3, 0x0, 0x4) (async) unshare$auto(0x40000080) r3 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) ptrace$auto(0xf106, 0x0, 0x8, 0x0) ptrace$auto(0x5, 0x0, 0x43, 0x8) (async) r4 = socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) getsockopt$auto(r4, 0x84, 0x6d, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mmap$auto(0x1fd, 0x6, 0xfd5, 0x1e, r1, 0x400000000000) (async) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x200042, 0x0) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) (async) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0xfffffffc) 21.496551738s ago: executing program 6 (id=5322): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) writev$auto(r0, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x180000, 0xdf, 0x9b72, 0x4, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) socket(0x2, 0x1, 0x0) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x8) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto(r2, 0x0, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000040)='\t', 0x1) r3 = socket(0x18, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) sendto$auto(r3, 0x0, 0xb, 0x2, &(0x7f0000000000), 0x7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/ib_srp/parameters/fast_io_fail_tmo\x00', 0x22000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/48, 0x30) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/hid\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x3fc, 0x4000000000000006) mmap$auto(0x0, 0x9ca, 0x3, 0x400eb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r6 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r6, 0x8000) 20.854174943s ago: executing program 0 (id=5323): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) ioctl$auto_EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x18b803, 0x0) r1 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) read$auto_tk_debug_sleep_time_fops_(r1, &(0x7f00000000c0)=""/124, 0x7c) ioctl$auto_IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) ioctl$auto_IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x1) close_range$auto(0x2, 0x8, 0x0) 20.615409698s ago: executing program 0 (id=5325): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_timeout\x00', 0x101042, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x2000, 0x0) ioctl$auto(r2, 0x64c9, r2) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x15, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x80600, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyv7\x00', 0x10000, 0x0) ioctl$auto_BLKIOMIN(r3, 0x1278, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80382, 0x0) write$auto(r3, 0x0, 0x800000000005) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) setgid$auto(0xee00) ioctl$auto_BLKDISCARD(r3, 0x1277, 0x0) 17.683214042s ago: executing program 6 (id=5332): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) close_range$auto(0x2, 0xa, 0xfffffffd) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) socket(0x22, 0x2, 0x4) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) connect$auto(r1, 0x0, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) ioctl$auto_UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000100)={0x8, 0x0, 0x695c831f}) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) get_robust_list$auto(0x1, 0x0, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r2, 0x40047459, 0x0) write$auto(0x3, 0x0, 0x29a) 17.407450446s ago: executing program 0 (id=5335): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xa9) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x10d803, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x61c3, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14010000", @ANYRES16, @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x30000854) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="1a00"], 0x1ac}}, 0x44800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0xc, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x4040}, 0x40090) socket(0x10, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8004, &(0x7f0000000180)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x6, 0x80) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000380)='/dev/binderfs/binder0\x00', 0x4800, 0x0) ioctl$auto(0x3, 0x8936, 0x38) write$auto(r1, &(0x7f0000000300)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/tty49\x00', 0x604f42, 0x0) r5 = socketpair$auto(0x1, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b67, r5) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f00000001c0)="c73e778ec47151b9fbb4053aecb77e45273d4a11623a51c3d7d12ea083f300000031") close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x5, 0x3) io_setup$auto(0xca, 0x0) 17.344990134s ago: executing program 6 (id=5336): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000036c0)='/proc/sys/net/ipv6/conf/xfrm0/stable_secret\x00', 0x2000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) bpf$auto(0x7, &(0x7f0000000100)=@bpf_attr_7={@prog_id=0x9, 0x10, 0x4, r1}, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80246f4d, r2) fgetxattr$auto(r0, &(0x7f0000000040)='\x00', &(0x7f0000000080)="6afeb21e9581ea07e013ded28393d3fe728f94af348acc502e2fcc642e3561692b3b296b1ee9472340e3dc5cb349c2ea9709a1026930b86079d713d572b44e09df2db15c45f46ed3607a3bc09a6c2a6b9f35e9fc17ee85a693c272e32b8f70c070fef390247faab4061de836c66aec069971187f4e5242531dc06aae", 0x400) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17.149579238s ago: executing program 6 (id=5338): mmap$auto(0x9, 0x20009, 0x10000000000df, 0x19, 0xffffffffffffffff, 0x9d8a) r0 = getpgrp(0xffffffffffffffff) r1 = prctl$auto(0x1000000003b, 0x1, r0, 0x800000000002, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r2, 0x3, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xa, 0x72, 0x8b72, 0x2, 0x8000) r3 = socket(0x2, 0x801, 0x106) listen$auto(r3, 0xf52b) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(r1, r2, 0x0) socketpair$auto(0x17fff, 0xe, 0x8000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptye3\x00', 0x2c0141, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r6, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_SET_COALESCE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="00010000", @ANYRES16=r6, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4004004}, 0x8801) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/xfrm_stat\x00', 0x40, 0x0) pread64$auto(r8, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r9, 0xffffffff5fdffe00, &(0x7f0000000400)=';') openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) 16.155650658s ago: executing program 6 (id=5341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$auto_PR_SCHED_CORE_CREATE(0x7044, 0x1, r2, 0xb9ae, 0xfff) prctl$auto(0x6, 0x0, r2, 0x80, 0x9) ioctl$auto_VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) read$auto(r3, 0x0, 0x80000003fe) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec2\x00', 0x300, 0x0) ioctl$auto_CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000040)={0x47, 0x3, 0x3, 0x7, 0x9, 0xbad, "a602b74c5dec1974911f8e4858670d12", 0x2, 0x0, 0x6, 0x2, 0x7, 0x0, 0x1}) 15.591721617s ago: executing program 0 (id=5342): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0xffffffffffffffff, 0x7ff, 0x6, 0xa, 0x1000009, 0xffffffffffffffff, 0x0, 0x3}, 0x40) r2 = socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8003, 0x0) setsockopt$auto(r2, 0x20000000, 0x7, 0x0, 0x6) r3 = ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000540)={0x2, &(0x7f0000000500)={0xa7, 0xf3, 0x1, @raw=0x2}}) mkdirat$auto(r0, &(0x7f0000000400)='./file0\x00', 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) pwritev$auto(r5, &(0x7f0000000180)={0x0, 0x5}, 0x3, 0x0, 0x5) r6 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4) sendmsg$auto_NET_SHAPER_CMD_GROUP(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf25040000000c0001800800017503cd3f0010000a800c0001", @ANYRES8, @ANYRES64=r4], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x14) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), r1) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="60020000", @ANYRES16=r7, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x32080, 0x0) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dmmidi2\x00', 0x80001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, &(0x7f0000000300)={[0x1ff, 0x5, 0xd, 0xfffffffffffff4d6, 0x948b, 0x3, 0x15f4da0e, 0x3, 0x0, 0x9, 0x80000001, 0x1000, 0x1, 0x9, 0x3, 0x1]}, 0x0) write$auto(r8, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x5014c0, 0x0) r9 = setfsuid$auto(0xee01) setresuid$auto(r9, r9, r9) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000440), 0x10a00, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r10 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram0\x00', 0x177602, 0x0) write$auto(r10, 0x0, 0xfffffdef) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x80, 0x4) symlinkat$auto(&(0x7f0000000040)='./file0\x00', r11, &(0x7f00000000c0)='./file1\x00') 14.892434483s ago: executing program 0 (id=5344): mmap$auto(0x0, 0x101, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x5}, 0xa) 4.890742937s ago: executing program 2 (id=5378): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000600060004000000060007000040000008000400000000000a0005000180c200000000000a000100aaaaaaaaaaaa00000a0001000000000000000000080004000100000008000200", @ANYRES32=0x0, @ANYBLOB="08c20200", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/oss/sndstat\x00', 0x40441, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video3\x00', 0x40080, 0x0) write$auto_sg_fops_sg(r0, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0x20) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) close_range$auto(0x0, r1, 0x4000000000002) socket(0x2, 0x801, 0x106) socketpair$auto(0x1a, 0x9, 0x8000000000000000, 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nbd14\x00', 0x80640, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0ro\x00', 0x40a00, 0x0) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r3, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) 4.282682227s ago: executing program 1 (id=5380): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) socket(0x2c, 0x3, 0x0) socket(0x2b, 0x1, 0xba6) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x80000, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x4) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="1100000007000000000000000000000001", 0x11) 3.860754878s ago: executing program 2 (id=5381): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) socket(0x2c, 0x3, 0x0) socket(0x2b, 0x1, 0xba6) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x80000, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x4) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="1100000007000000000000000000000001", 0x11) 3.257401901s ago: executing program 1 (id=5382): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r0, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x0, 0x711, 0x70b52c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) 3.128444566s ago: executing program 1 (id=5383): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) (async) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r0 = socket(0x1e, 0x4, 0x0) shutdown$auto(r0, 0xc3a) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x8de2, 0x2, 0x9) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto_HDIO_GETGEO(r2, 0x301, &(0x7f00000001c0)) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) rt_sigprocmask$auto(0x0, 0x0, 0x0, 0x8) (async) mmap$auto(0x0, 0x7, 0x4000000000df, 0x80000010, 0x401, 0x7ffd) (async) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xfffffff9, 0x10, 0x0) (async) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0x2, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x0, 0x2}) 2.947278769s ago: executing program 2 (id=5384): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000540)={0x0, 0x39, &(0x7f0000000500)={&(0x7f0000001b80)={0x14, r2, 0x701, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4c044}, 0x4044880) ioctl$auto_BCH_IOCTL_QUERY_UUID(0xffffffffffffffff, 0x8010bc01, 0x0) unshare$auto(0x40000080) fanotify_init$auto(0x8, 0x40000005) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20006, 0xdd, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x80000, 0x6f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) socket(0x15, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x2aa82, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f00000003c0)='./file0\x00', 0x8f4d, 0x9) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r6, 0x0, 0x80) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) 2.006045288s ago: executing program 1 (id=5385): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) (async) recvfrom$auto(0xffffffffffffffff, 0x0, 0x5, 0x1200, 0x0, 0xfffffffffffffffd) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r1, 0x311, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) r2 = socket(0x2b, 0x1, 0x0) r3 = socket(0x1d, 0x3, 0x1) bind$auto(r3, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) (async) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x42080, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x400008000) (async) r4 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r4, 0x0) (async) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80286f4e, r5) (async) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0x20d, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) shutdown$auto(0x200000003, 0x2) 1.916107745s ago: executing program 2 (id=5386): mmap$auto(0x0, 0x40007, 0xdf, 0x17, 0x7, 0x28000) mmap$auto(0x0, 0xe980, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0xe4) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r2, 0x0) mbind$auto(0x8000, 0x7f, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) getpid() sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES8=r4, @ANYRES16=r3, @ANYRES8=r4, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES8=r3], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x109041, 0x0) r6 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/state\x00', 0x2000, 0x0) lseek$auto(r6, 0x9, 0x0) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x102, 0x0) ioctl$auto(r7, 0x900064b7, r7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 1.868485054s ago: executing program 1 (id=5387): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000001c0)="c9e32b6b875df9acf14005f6754ddbb9269150a33c405f22d0b91c2ab8ac0b8fb823b41568eb59ae1bc4bb0bbe37831c86ca4af894bc4f07c95b89403603df8522a22a733e2a8f9f1e2771516690bb005f7ef8ca52c06f809bd122009b0920068edbb867e9490e189441e2a72b8047693dcd", 0x72) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x7, 0xfffffffffffffffd, 0x5, 0x3, 0x2000000000230006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x103, 0xfffffffffffffff7, 0x0, 0x0, 0x8000002}, 0x1fe, 0x81) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f0000000080), 0x7, 0xa505}, 0x800}, 0x7, 0x2ba2) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r3 = socket(0x2, 0x1, 0x106) getsockopt$auto(r3, 0x29, 0x4e, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x10002, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',)'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) socket(0x1d, 0x2, 0x7) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) sendmsg$auto_HWSIM_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x4048881) 961.726142ms ago: executing program 1 (id=5388): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x183a40, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x7f, 0xdf, 0x19, 0x2, 0x8000) socket(0xa, 0x3, 0x3a) ioctl$auto(0x3, 0x8936, 0x38) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b67, r2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0xfffffffd) r3 = socket(0x80000000000000a, 0x2, 0x0) socket(0x2d, 0x2, 0x0) io_setup$auto(0xca, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/machinecheck/machinecheck1/check_interval\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000005c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k@\xf4\xc4\xa0\xe3\x10\xef\xaa\xeeP\xa3\xe1\xee\xaf\x88\x99J\x11\x99\xa4\x91\xd6dh\xca`\xeeL\x00\xd7\x87+yd\xa4WO\xf6\fC\x96\x9e\xee1\xf0;', 0x81) unshare$auto(0x8000400) io_uring_setup$auto(0x2, &(0x7f0000000140)={0x0, 0xd61d, 0x7fff, 0xffffe000, 0x709, 0x8, r0, [0xaa, 0x3, 0x6], {0x8, 0x7ff, 0x5, 0x9, 0x2, 0x0, 0x0, 0x7ff}, {0x1000, 0x477, 0xe, 0x5, 0x6, 0x3, 0x80000000, 0x4, 0x8}}) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)="04adc501000000000000005f1e9700000000dcd6a66989d861ccca7c5e0304ed909d2bc75fe953b9b8444347263ee49c1928f0d0cca2db6e3e005cca026656145ad1d96a5d194e79075d6a30f618bcc016bc198062be95e52cccfa32d6e2771aa6dd653b37370bf4dcf121d59e48a709688232404c66678c74aed008920afcf6a57957b3ae24871b3167c040293f353060713d8b332530a29782e48fdff32bde2e6da8779a0ca51d02f2a4a15079a0895c4f98056deff5e1efabb24d73bfa2b3", 0x7fffffff) madvise$auto(0x1, 0xfffffffffffffffd, 0x2) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/pcm0p/oss\x00', 0x230200, 0x0) getsockopt$auto_SO_PEEK_OFF(0xffffffffffffffff, 0x8, 0x2a, 0x0, &(0x7f00000001c0)=0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/orangefs/stats/writes\x00', 0x101040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000300)=""/6, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r5) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESHEX, @ANYBLOB="383f15060553487c8344f3bb6207436050b65846047b87ad7a831cf9650d069f482c4ef959f28c27df3f1faa4bba3626b2"], 0x18}, 0x1, 0x0, 0x0, 0x10001}, 0x400c005) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x100000001) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x266, 0xb, 0x5, 0x8, 0xbff, 0x2a, 0x9, 0x7, 0x7fffffff}) 0s ago: executing program 2 (id=5391): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r0, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x0, 0x711, 0x70b52c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) kernel console output (not intermixed with test programs): ull) [ 1584.844977][T26804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1584.845006][T26804] Call Trace: [ 1584.845018][T26804] [ 1584.845031][T26804] dump_stack_lvl+0x16c/0x1f0 [ 1584.845085][T26804] should_fail_ex+0x512/0x640 [ 1584.845136][T26804] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1584.845185][T26804] should_failslab+0xc2/0x120 [ 1584.845217][T26804] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1584.845258][T26804] ? find_held_lock+0x2b/0x80 [ 1584.845301][T26804] ? mas_dup_build+0x6f9/0x1e80 [ 1584.845359][T26804] ? mas_dup_build+0x6f9/0x1e80 [ 1584.845403][T26804] mas_dup_build+0x6f9/0x1e80 [ 1584.845460][T26804] ? __lock_acquire+0xb8a/0x1c90 [ 1584.845502][T26804] __mt_dup+0xeb/0x1f0 [ 1584.845548][T26804] ? __pfx___mt_dup+0x10/0x10 [ 1584.845635][T26804] dup_mmap+0x36c/0x2280 [ 1584.845684][T26804] ? __pfx_dup_mmap+0x10/0x10 [ 1584.845745][T26804] copy_process+0x3f0c/0x76a0 [ 1584.845817][T26804] ? __pfx_copy_process+0x10/0x10 [ 1584.845868][T26804] ? futex_private_hash_put+0x176/0x300 [ 1584.845927][T26804] ? futex_private_hash_put+0x18a/0x300 [ 1584.845997][T26804] kernel_clone+0xfc/0x930 [ 1584.846047][T26804] ? __pfx_futex_wake+0x10/0x10 [ 1584.846086][T26804] ? __pfx_kernel_clone+0x10/0x10 [ 1584.846134][T26804] ? __pfx_vfs_writev+0x10/0x10 [ 1584.846202][T26804] __do_sys_clone+0xce/0x120 [ 1584.846235][T26804] ? __pfx___do_sys_clone+0x10/0x10 [ 1584.846283][T26804] ? xfd_validate_state+0x61/0x180 [ 1584.846318][T26804] ? __pfx_do_writev+0x10/0x10 [ 1584.846373][T26804] do_syscall_64+0xcd/0xfa0 [ 1584.846425][T26804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.846458][T26804] RIP: 0033:0x7f94a3d8eec9 [ 1584.846485][T26804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1584.846518][T26804] RSP: 002b:00007f94a4c42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1584.846549][T26804] RAX: ffffffffffffffda RBX: 00007f94a3fe6090 RCX: 00007f94a3d8eec9 [ 1584.846570][T26804] RDX: 0000000000000000 RSI: 0000000100000000 RDI: 0000000000000007 [ 1584.846590][T26804] RBP: 00007f94a3e11f91 R08: 0000000000000006 R09: 0000000000000000 [ 1584.846609][T26804] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1584.846627][T26804] R13: 00007f94a3fe6128 R14: 00007f94a3fe6090 R15: 00007ffdbc227008 [ 1584.846670][T26804] [ 1585.452885][T26815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 1585.465129][T26815] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4179'. [ 1585.855543][T26824] netlink: 29 bytes leftover after parsing attributes in process `syz.1.4181'. [ 1586.405594][T26840] FAULT_INJECTION: forcing a failure. [ 1586.405594][T26840] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.501157][T26840] CPU: 0 UID: 0 PID: 26840 Comm: syz.1.4185 Not tainted syzkaller #0 PREEMPT(full) [ 1586.501202][T26840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1586.501222][T26840] Call Trace: [ 1586.501233][T26840] [ 1586.501245][T26840] dump_stack_lvl+0x16c/0x1f0 [ 1586.501299][T26840] should_fail_ex+0x512/0x640 [ 1586.501350][T26840] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1586.501395][T26840] should_failslab+0xc2/0x120 [ 1586.501428][T26840] __kmalloc_cache_noprof+0x72/0x780 [ 1586.501469][T26840] ? io_uring_alloc_task_context+0x96/0x650 [ 1586.501514][T26840] ? io_uring_alloc_task_context+0x96/0x650 [ 1586.501553][T26840] io_uring_alloc_task_context+0x96/0x650 [ 1586.501596][T26840] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 1586.501648][T26840] __io_uring_add_tctx_node+0x2dd/0x500 [ 1586.501687][T26840] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1586.501737][T26840] ? __fget_files+0x20e/0x3c0 [ 1586.501786][T26840] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 1586.501830][T26840] __do_sys_io_uring_enter+0x1239/0x1630 [ 1586.501893][T26840] ? __fget_files+0x20e/0x3c0 [ 1586.501934][T26840] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1586.501986][T26840] ? fput+0x9b/0xd0 [ 1586.502017][T26840] ? ksys_write+0x1ac/0x250 [ 1586.502063][T26840] ? __pfx_ksys_write+0x10/0x10 [ 1586.502122][T26840] do_syscall_64+0xcd/0xfa0 [ 1586.502172][T26840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.502205][T26840] RIP: 0033:0x7f94a3d8eec9 [ 1586.502231][T26840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1586.502262][T26840] RSP: 002b:00007f94a4c21038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1586.502293][T26840] RAX: ffffffffffffffda RBX: 00007f94a3fe6180 RCX: 00007f94a3d8eec9 [ 1586.502315][T26840] RDX: 0000000080000001 RSI: 0000000000000a84 RDI: 0000000000000003 [ 1586.502336][T26840] RBP: 00007f94a4c21090 R08: 0000000000000000 R09: 0000000000000046 [ 1586.502356][T26840] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 1586.502376][T26840] R13: 00007f94a3fe6218 R14: 00007f94a3fe6180 R15: 00007ffdbc227008 [ 1586.502421][T26840] [ 1587.377270][T26855] bond0: invalid ARP target specified [ 1587.617781][T26861] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4192'. [ 1587.666509][T26861] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4192'. [ 1588.301919][T26874] netlink: 29 bytes leftover after parsing attributes in process `syz.1.4194'. [ 1588.608117][T26877] FAULT_INJECTION: forcing a failure. [ 1588.608117][T26877] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.648621][T26877] CPU: 0 UID: 0 PID: 26877 Comm: syz.2.4196 Not tainted syzkaller #0 PREEMPT(full) [ 1588.648667][T26877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1588.648688][T26877] Call Trace: [ 1588.648699][T26877] [ 1588.648711][T26877] dump_stack_lvl+0x16c/0x1f0 [ 1588.648769][T26877] should_fail_ex+0x512/0x640 [ 1588.648823][T26877] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1588.648879][T26877] should_failslab+0xc2/0x120 [ 1588.648914][T26877] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1588.648959][T26877] ? __dquot_initialize+0x299/0xd50 [ 1588.649014][T26877] ? __d_alloc+0x32/0xae0 [ 1588.649072][T26877] ? __d_alloc+0x32/0xae0 [ 1588.649117][T26877] __d_alloc+0x32/0xae0 [ 1588.649173][T26877] d_alloc_pseudo+0x1c/0xc0 [ 1588.649211][T26877] alloc_file_pseudo+0xcf/0x230 [ 1588.649251][T26877] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1588.649302][T26877] __shmem_file_setup+0x1a3/0x330 [ 1588.649347][T26877] shmem_zero_setup+0x93/0x1a0 [ 1588.649398][T26877] __mmap_region+0x2076/0x27a0 [ 1588.649451][T26877] ? __pfx___mmap_region+0x10/0x10 [ 1588.649492][T26877] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1588.649544][T26877] ? rcu_is_watching+0x12/0xc0 [ 1588.649601][T26877] ? finish_task_switch.isra.0+0x221/0xc10 [ 1588.649648][T26877] ? lockdep_hardirqs_on+0x7c/0x110 [ 1588.649699][T26877] ? finish_task_switch.isra.0+0x221/0xc10 [ 1588.649785][T26877] ? __pfx___schedule+0x10/0x10 [ 1588.649880][T26877] ? trace_cap_capable+0x18d/0x200 [ 1588.649930][T26877] mmap_region+0x1ab/0x3f0 [ 1588.649976][T26877] ? __get_unmapped_area+0x267/0x440 [ 1588.650014][T26877] do_mmap+0xa3e/0x1210 [ 1588.650053][T26877] ? __pfx_do_mmap+0x10/0x10 [ 1588.650087][T26877] ? __pfx_down_write_killable+0x10/0x10 [ 1588.650129][T26877] vm_mmap_pgoff+0x29e/0x470 [ 1588.650192][T26877] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1588.650258][T26877] ? __x64_sys_futex+0x1e0/0x4c0 [ 1588.650291][T26877] ? __x64_sys_futex+0x1e9/0x4c0 [ 1588.650333][T26877] ksys_mmap_pgoff+0x7d/0x5c0 [ 1588.650384][T26877] ? xfd_validate_state+0x61/0x180 [ 1588.650420][T26877] ? __pfx_ksys_write+0x10/0x10 [ 1588.650474][T26877] __x64_sys_mmap+0x125/0x190 [ 1588.650519][T26877] do_syscall_64+0xcd/0xfa0 [ 1588.650573][T26877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.650616][T26877] RIP: 0033:0x7f24b1d8eec9 [ 1588.650643][T26877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1588.650679][T26877] RSP: 002b:00007f24b2ceb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1588.650712][T26877] RAX: ffffffffffffffda RBX: 00007f24b1fe5fa0 RCX: 00007f24b1d8eec9 [ 1588.650735][T26877] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1588.650755][T26877] RBP: 00007f24b1e11f91 R08: 0000000000000401 R09: 0000000000008000 [ 1588.650775][T26877] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1588.650795][T26877] R13: 00007f24b1fe6038 R14: 00007f24b1fe5fa0 R15: 00007fffba3640f8 [ 1588.650839][T26877] [ 1589.821598][T26910] netlink: 29 bytes leftover after parsing attributes in process `syz.1.4206'. [ 1589.857236][T26907] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4202'. [ 1589.986053][T26907] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 1590.998967][ T30] audit: type=1804 audit(4294967535.820:33): pid=26920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4209" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1595.494225][T26994] netlink: 29 bytes leftover after parsing attributes in process `syz.0.4225'. [ 1595.618172][T26997] input: fÅ as /devices/virtual/input/input179 [ 1595.963326][ T30] audit: type=1804 audit(4294967540.750:34): pid=27003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4229" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1596.052407][ T30] audit: type=1804 audit(4294967540.750:35): pid=27003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4229" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1597.431058][T27026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4233'. [ 1598.217645][T27036] netlink: 29 bytes leftover after parsing attributes in process `syz.6.4236'. [ 1600.795548][T27066] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1600.850442][T27066] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1603.423242][T27095] netlink: 29 bytes leftover after parsing attributes in process `syz.6.4248'. [ 1605.557903][T22568] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 1611.072474][T27241] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input180 [ 1613.715464][T27295] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input181 [ 1614.002672][T27297] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input182 [ 1617.756404][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.762812][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.048925][T27365] mkiss: ax0: crc mode is auto. [ 1619.524170][T27398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4324'. [ 1619.538662][T27398] netlink: 13 bytes leftover after parsing attributes in process `syz.6.4324'. [ 1619.631320][ T30] audit: type=1804 audit(4294967564.450:36): pid=27401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4325" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1620.763267][T27428] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4330'. [ 1621.812788][T27446] MTRR 1 not used [ 1624.156339][T27482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4346'. [ 1624.166753][T27482] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4346'. [ 1624.717154][T27189] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 4 with max blocks 1 with error 117 [ 1624.806384][T27189] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1624.806384][T27189] [ 1625.756455][T27511] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4353'. [ 1628.284427][T27546] netlink: 29 bytes leftover after parsing attributes in process `syz.6.4364'. [ 1628.658559][T27552] netlink: 29 bytes leftover after parsing attributes in process `syz.6.4365'. [ 1630.636815][T27572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4370'. [ 1634.825411][T27636] netlink: 29 bytes leftover after parsing attributes in process `syz.6.4386'. [ 1635.799391][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4391'. [ 1635.842089][T27655] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4391'. [ 1638.386753][T27697] ima: policy update failed [ 1638.425285][ T30] audit: type=1802 audit(4294968610.230:37): pid=27697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4399" res=0 errno=0 [ 1640.489773][T27742] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1640.714000][T27749] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4410'. [ 1641.342900][T27759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4415'. [ 1641.411666][T27759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4415'. [ 1641.421913][T27759] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4415'. [ 1643.293341][T27801] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1644.046425][T27811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4429'. [ 1644.331943][T27822] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1644.590730][T27831] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input183 [ 1644.874759][T27839] netlink: 29 bytes leftover after parsing attributes in process `syz.6.4435'. [ 1645.035626][T27833] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input184 [ 1646.667402][T27864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4440'. [ 1646.694658][T27864] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4440'. [ 1646.962391][T27867] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4441'. [ 1648.574369][T27897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4448'. [ 1649.907417][T27910] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1353 with max blocks 11 with error 117 [ 1649.940775][T27910] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1649.940775][T27910] [ 1650.195085][T27916] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 8 with max blocks 28 with error 117 [ 1650.286917][T27916] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1650.286917][T27916] [ 1653.380340][T27969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4469'. [ 1653.410676][T22568] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1654.846628][T27987] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4475'. [ 1661.795917][T28119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1661.902048][T28119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1661.926057][T28119] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1661.968364][T28119] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1661.975116][T28119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1661.991479][T28119] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1663.346459][T14560] Bluetooth: hci2: command 0x0406 tx timeout [ 1663.890377][ T30] audit: type=1800 audit(4294968635.710:38): pid=28169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4520" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1663.912924][T14560] Bluetooth: hci0: command 0x0406 tx timeout [ 1663.986655][T14560] Bluetooth: hci3: command 0x0406 tx timeout [ 1663.993063][T14560] Bluetooth: hci4: command 0x0c1a tx timeout [ 1664.285044][T28184] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1664.405412][T28189] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1665.989523][T28179] Bluetooth: hci0: command 0x0406 tx timeout [ 1666.066885][T28179] Bluetooth: hci3: command 0x0406 tx timeout [ 1666.432281][T28187] kexec: Could not allocate control_code_buffer [ 1666.711508][T28229] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1673.189173][T28344] openvswitch: HfR: Dropping previously announced user features [ 1673.278229][T28343] netlink: set zone limit has 8 unknown bytes [ 1675.059012][T28387] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input185 [ 1675.822337][T28407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4577'. [ 1676.311676][T28418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4578'. [ 1676.960238][T28442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4584'. [ 1679.209033][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.215449][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1680.238991][T28506] hub 1-0:1.0: USB hub found [ 1680.244332][T28506] hub 1-0:1.0: 1 port detected [ 1680.727497][T28519] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1963494713.2771291752.295448638), cmd(3) [ 1680.919975][T28519] Invalid ELF header magic: != ELF [ 1680.954797][T28512] netlink: 146 bytes leftover after parsing attributes in process `syz.6.4600'. [ 1682.028889][T28545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4609'. [ 1682.867968][T28566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4613'. [ 1683.435404][T28575] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4615'. [ 1683.481287][T28575] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4615: iget: checksum invalid [ 1683.584412][T28575] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1683.599678][T28575] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4615: iget: checksum invalid [ 1683.611451][T28575] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1683.622336][T28575] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4615: iget: checksum invalid [ 1683.634670][T28575] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1683.645654][T28575] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4615: iget: checksum invalid [ 1683.657353][T28575] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1683.756164][T28575] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1683.768631][T28575] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1684.929682][T28611] random: crng reseeded on system resumption [ 1684.937885][T28597] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1684.950666][T28597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1687.293846][T22568] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 1687.988424][T28179] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1688.073848][T28664] FAULT_INJECTION: forcing a failure. [ 1688.073848][T28664] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.117564][T28664] CPU: 1 UID: 0 PID: 28664 Comm: syz.2.4634 Not tainted syzkaller #0 PREEMPT(full) [ 1688.117608][T28664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1688.117628][T28664] Call Trace: [ 1688.117640][T28664] [ 1688.117652][T28664] dump_stack_lvl+0x16c/0x1f0 [ 1688.117713][T28664] should_fail_ex+0x512/0x640 [ 1688.117765][T28664] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1688.117811][T28664] should_failslab+0xc2/0x120 [ 1688.117843][T28664] __kmalloc_cache_noprof+0x72/0x780 [ 1688.117885][T28664] ? kvm_init_irq_routing+0x43/0xf0 [ 1688.117931][T28664] ? kvm_init_irq_routing+0x43/0xf0 [ 1688.117968][T28664] kvm_init_irq_routing+0x43/0xf0 [ 1688.118025][T28664] kvm_dev_ioctl+0x7ca/0x1a80 [ 1688.118083][T28664] ? find_held_lock+0x2b/0x80 [ 1688.118129][T28664] ? hook_file_ioctl_common+0x145/0x410 [ 1688.118172][T28664] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1688.118227][T28664] ? __fget_files+0x20e/0x3c0 [ 1688.118278][T28664] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1688.118332][T28664] __x64_sys_ioctl+0x18e/0x210 [ 1688.118371][T28664] do_syscall_64+0xcd/0xfa0 [ 1688.118423][T28664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.118457][T28664] RIP: 0033:0x7f24b1d8eec9 [ 1688.118495][T28664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1688.118531][T28664] RSP: 002b:00007f24b2ceb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1688.118572][T28664] RAX: ffffffffffffffda RBX: 00007f24b1fe5fa0 RCX: 00007f24b1d8eec9 [ 1688.118595][T28664] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1688.118617][T28664] RBP: 00007f24b1e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1688.118639][T28664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1688.118661][T28664] R13: 00007f24b1fe6038 R14: 00007f24b1fe5fa0 R15: 00007fffba3640f8 [ 1688.118719][T28664] [ 1688.917223][T28676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4638'. [ 1691.746757][T28757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4654'. [ 1691.982647][ T30] audit: type=1800 audit(4294968663.800:39): pid=28763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4657" name="discovery_nqn" dev="configfs" ino=116523 res=0 errno=0 [ 1693.270314][T28797] random: crng reseeded on system resumption [ 1694.917083][T28830] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4672'. [ 1699.131797][T22568] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1699.143436][T22568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1699.152535][T22568] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1699.162513][T22568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1699.171991][T22568] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1700.681528][T28700] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.079759][T28700] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.260590][T28700] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.273777][T22568] Bluetooth: hci1: command tx timeout [ 1701.318294][T28899] chnl_net:caif_netlink_parms(): no params data found [ 1701.860975][T28899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.872378][T28899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.886468][T28899] bridge_slave_0: entered allmulticast mode [ 1701.894580][T28899] bridge_slave_0: entered promiscuous mode [ 1701.965602][T28899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.973761][T28899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.006806][T28899] bridge_slave_1: entered allmulticast mode [ 1702.018424][T28899] bridge_slave_1: entered promiscuous mode [ 1702.062296][T28700] bridge_slave_1: left allmulticast mode [ 1702.068381][T28700] bridge_slave_1: left promiscuous mode [ 1702.087624][T28700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.099106][T28700] bridge_slave_0: left allmulticast mode [ 1702.104822][T28700] bridge_slave_0: left promiscuous mode [ 1702.115474][T28700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.742461][T28700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.753559][T28700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.764612][T28700] bond0 (unregistering): Released all slaves [ 1702.867172][T28899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1702.878105][T28700] ovs_ÿþ: left promiscuous mode [ 1702.912240][T28899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.064258][T28899] team0: Port device team_slave_0 added [ 1703.090677][T28899] team0: Port device team_slave_1 added [ 1703.187018][T28899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1703.199274][T28899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1703.241197][T28899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1703.304142][T28899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.321141][T28899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1703.352602][T22568] Bluetooth: hci1: command tx timeout [ 1703.360926][T28899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.630916][T28899] hsr_slave_0: entered promiscuous mode [ 1703.659750][T28899] hsr_slave_1: entered promiscuous mode [ 1704.389158][T28989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4704'. [ 1704.509107][T28700] hsr_slave_0: left promiscuous mode [ 1704.515671][T28700] hsr_slave_1: left promiscuous mode [ 1704.523625][T28700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1704.532718][T28700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1704.541649][T28700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1704.549427][T28700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1704.572114][T28700] veth1_macvtap: left promiscuous mode [ 1704.580166][T28700] veth0_macvtap: left promiscuous mode [ 1705.042947][T28700] team0 (unregistering): Port device team_slave_1 removed [ 1705.128341][T28700] team0 (unregistering): Port device team_slave_0 removed [ 1705.430174][T22568] Bluetooth: hci1: command tx timeout [ 1706.698735][T28899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1706.746372][T28899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1706.773341][T28899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1706.804145][T28899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1706.908486][T29044] ptrace attach of "./syz-executor exec"[18909] was attempted by "âØ´±_suÙÄ¿9V‘W¥e\x1b«ë\x1bíê.ÞÀ‚ÕµØÀWŠ±=\x0bä:úvM-ð'—’‹½B9]ÃȪPà‘˜´§zW¶èm¥“Ô|ÉAÞû¦¿Y}M ÌÂèWqrÅ{7ýâmùÞÃM[\x0cmëá €dÃͬE„|ÕŸF-QàÉgN4s]×Qyì1àž»ÄÈüXA¼[r‚¹¹;Šã‹\x5cº\x09@NË4ö483®²¨¡mr–\x22é\x5c~‰ 7÷A:¢îÁ`Ò©Ê8qH&Ï'¿Ü{‚\x0b…Eí ¿€‘aúü*ßFÜ{Ú‡WióKÃ!òÓí½ÿ(ØíW[(åvA°´{µyÉ#W…É!ÑÉ_$„z¤{XžûÒ‚Q|œÒ©±ÃÞ®åG¢/Õìi_¯lÉ»:N6Ý\x0aò€ëpóH[bÌIEƒò)æ;çY‹·‹©³ çóC'¤:¿à|¡’wE]íüµBÐ\x1b’i,ƒãéegÆ9D]C\x0cß' ©Ìâ\x0dr´ªj,ŠÅ(×[´\x0cxb7 ë!UúX É\x22<ÇLjý¾²–óSÑQ M’ ¥6vZ}Ú„ô²W:1£ÿ}\x0aÊê$ü°pv2‹\x0a<[B4‚ª=äÝ·I¡# »¬V \x07UŽÌ¿™§>…®t°¬Ñ7?WŸ¿Tì ÀSKìëš]÷ˆÈC]¸ÔÅJ£û™¹%Wp›…ºkGØpàP]Òw¢ÖI[´™Õ·ú$Zÿ—\x0bÏ‹%ÌÀœ¢† ÑOøJÀr•gtw2Á0l¥ˆ¯ç:¤2Žú/ÊzIôeíâ93b\x5c®ío‰fu^f.id ˬ|ÂÚÞ¾ÔcWúJ¯Dã͈øáü̧Ñ(·Û½b|ô™'¯«@…Œ[ ì‡$I\x0a'>Ñ;硪E2×ZÄm³2Áti!,}»_¾χjà„ò«Ò*,\x0cPÕeý`ÛÌ\x0cç’x_¤5ù’½÷3¯@ed^“ݼÆÜcÙp£­±×eóŸäß5ª}{̘¹ìxC+é]ÔõSº˜bl¹”%xÅЭÜ.K‹¯™§«»øçD’µ’<²W ø.\x22ÛNvJ%Ñâ-¤ìm<æf…i›EeHMŸ$¤!߀.‚¨\x07€Ü€£´H¬±êŠ9ßjH-U8È+|¾¼†øï~. ° [ 1707.084997][T28899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1707.491774][T28899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1707.513806][T22568] Bluetooth: hci1: command tx timeout [ 1707.544560][T21635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.551815][T21635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1707.600824][T28695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.608071][T28695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1709.038695][T28899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1709.739157][T28899] veth0_vlan: entered promiscuous mode [ 1709.881180][T28899] veth1_vlan: entered promiscuous mode [ 1710.093523][T28899] veth0_macvtap: entered promiscuous mode [ 1710.153397][T28899] veth1_macvtap: entered promiscuous mode [ 1710.246061][T28899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1710.290204][T28899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1710.326531][T21633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.418215][T21633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.446295][T21633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.455099][T21633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.660139][T21633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1710.694256][T21633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1710.785076][T28700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1710.803680][T28700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.200531][T29234] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1717.084087][T29261] netlink: 'syz.0.4747': attribute type 10 has an invalid length. [ 1717.099124][T29261] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4747'. [ 1717.420383][T29258] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.785909][T29280] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input186 [ 1718.282175][T29288] syz.6.4754(29288): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1718.417265][T29296] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1718.602704][T29306] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input187 [ 1718.835122][T29311] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input188 [ 1719.424357][T29322] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4762'. [ 1720.438740][T29341] IPVS: length: 131 != 8 [ 1721.639232][T29363] FAULT_INJECTION: forcing a failure. [ 1721.639232][T29363] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1721.810416][T29363] CPU: 0 UID: 0 PID: 29363 Comm: syz.2.4772 Not tainted syzkaller #0 PREEMPT(full) [ 1721.810459][T29363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1721.810480][T29363] Call Trace: [ 1721.810491][T29363] [ 1721.810504][T29363] dump_stack_lvl+0x16c/0x1f0 [ 1721.810558][T29363] should_fail_ex+0x512/0x640 [ 1721.810618][T29363] get_futex_key+0x1d0/0x1560 [ 1721.810678][T29363] ? __pfx_get_futex_key+0x10/0x10 [ 1721.810716][T29363] ? futex_private_hash_put+0x176/0x300 [ 1721.810762][T29363] futex_wake+0xea/0x530 [ 1721.810788][T29363] ? futex_wait+0x120/0x380 [ 1721.810816][T29363] ? __pfx_futex_wait+0x10/0x10 [ 1721.810844][T29363] ? __pfx_futex_wake+0x10/0x10 [ 1721.810884][T29363] ? __lock_acquire+0x622/0x1c90 [ 1721.810914][T29363] do_futex+0x1e3/0x350 [ 1721.810938][T29363] ? __pfx_do_futex+0x10/0x10 [ 1721.810964][T29363] ? find_held_lock+0x2b/0x80 [ 1721.811000][T29363] __x64_sys_futex+0x1e0/0x4c0 [ 1721.811037][T29363] ? __fget_files+0x20e/0x3c0 [ 1721.811084][T29363] ? __pfx___x64_sys_futex+0x10/0x10 [ 1721.811126][T29363] ? fdget+0x187/0x210 [ 1721.811175][T29363] do_syscall_64+0xcd/0xfa0 [ 1721.811220][T29363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.811243][T29363] RIP: 0033:0x7f24b1d8eec9 [ 1721.811262][T29363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1721.811285][T29363] RSP: 002b:00007f24b2ceb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1721.811308][T29363] RAX: ffffffffffffffda RBX: 00007f24b1fe5fa8 RCX: 00007f24b1d8eec9 [ 1721.811324][T29363] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f24b1fe5fac [ 1721.811339][T29363] RBP: 00007f24b1fe5fa0 R08: 00007f24b2cec000 R09: 0000000000000000 [ 1721.811354][T29363] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1721.811369][T29363] R13: 00007f24b1fe6038 R14: 00007fffba364010 R15: 00007fffba3640f8 [ 1721.811399][T29363] [ 1722.104810][T29378] usbip-vudc usbip-vudc.0: gadget not bound [ 1723.256484][T29395] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4778'. [ 1724.965931][T29414] can: request_module (can-proto-0) failed. [ 1725.061576][T29425] zram0: detected capacity change from 0 to 8 [ 1729.697170][T29508] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 3, inode_bitmap = 140 [ 1730.590782][T29490] kexec: Could not allocate control_code_buffer [ 1730.634078][T28179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1730.656543][T28179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1730.665886][T28179] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1730.692066][T28179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1730.703151][T28179] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1731.248758][T29529] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 1731.937792][T29518] chnl_net:caif_netlink_parms(): no params data found [ 1732.320600][T29518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.330002][T29518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.358207][T29518] bridge_slave_0: entered allmulticast mode [ 1732.372800][T29518] bridge_slave_0: entered promiscuous mode [ 1732.391198][T29518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.421350][T29518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.429138][T29518] bridge_slave_1: entered allmulticast mode [ 1732.447345][T29518] bridge_slave_1: entered promiscuous mode [ 1732.571819][T29518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.601111][T29518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.715595][T29518] team0: Port device team_slave_0 added [ 1732.767954][T29518] team0: Port device team_slave_1 added [ 1732.786328][T28179] Bluetooth: hci2: command tx timeout [ 1733.050186][T29518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.066214][T29518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.149908][T29518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.206060][T29518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.226628][T29518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.265699][T29518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1733.800641][T29518] hsr_slave_0: entered promiscuous mode [ 1733.807351][T29518] hsr_slave_1: entered promiscuous mode [ 1733.833973][T29518] debugfs: 'hsr0' already exists in 'hsr' [ 1733.853588][T29518] Cannot create hsr debugfs directory [ 1734.872520][T28179] Bluetooth: hci2: command tx timeout [ 1736.599864][T29518] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.741934][T29518] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.897676][T29518] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.952539][T28179] Bluetooth: hci2: command tx timeout [ 1737.119113][T29518] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.379685][T29600] zswap: compressor not available [ 1737.554882][T29518] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1737.587043][T29518] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1737.623937][T29518] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1737.659013][T29608] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input189 [ 1737.775365][T29518] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1737.929152][T29612] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input190 [ 1738.225103][T29518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1738.349405][T29518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1738.427821][T16013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.434987][T16013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1738.776416][T16013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.783596][T16013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1739.056338][T28179] Bluetooth: hci2: command tx timeout [ 1739.147319][T29518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1739.235698][T29518] veth0_vlan: entered promiscuous mode [ 1739.265008][T29518] veth1_vlan: entered promiscuous mode [ 1739.499582][T29518] veth0_macvtap: entered promiscuous mode [ 1739.555680][T29518] veth1_macvtap: entered promiscuous mode [ 1739.646911][T29518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1739.665171][T29518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1739.682458][T27188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.728966][T27188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.790139][T27188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.821743][T27188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.916917][T29641] FAULT_INJECTION: forcing a failure. [ 1739.916917][T29641] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.966378][T29641] CPU: 1 UID: 0 PID: 29641 Comm: syz.0.4831 Not tainted syzkaller #0 PREEMPT(full) [ 1739.966424][T29641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1739.966445][T29641] Call Trace: [ 1739.966457][T29641] [ 1739.966470][T29641] dump_stack_lvl+0x16c/0x1f0 [ 1739.966526][T29641] should_fail_ex+0x512/0x640 [ 1739.966579][T29641] ? __kmalloc_noprof+0xca/0x880 [ 1739.966627][T29641] should_failslab+0xc2/0x120 [ 1739.966660][T29641] __kmalloc_noprof+0xdd/0x880 [ 1739.966703][T29641] ? cache_create_net+0x9d/0x220 [ 1739.966759][T29641] ? cache_create_net+0x9d/0x220 [ 1739.966806][T29641] cache_create_net+0x9d/0x220 [ 1739.966854][T29641] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1739.966905][T29641] gss_svc_init_net+0x69/0x660 [ 1739.966959][T29641] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 1739.966997][T29641] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1739.967047][T29641] ops_init+0x1e2/0x5f0 [ 1739.967105][T29641] setup_net+0x100/0x390 [ 1739.967165][T29641] ? __pfx_setup_net+0x10/0x10 [ 1739.967224][T29641] ? debug_mutex_init+0x37/0x70 [ 1739.967277][T29641] copy_net_ns+0x2f8/0x690 [ 1739.967317][T29641] create_new_namespaces+0x3ea/0xa90 [ 1739.967379][T29641] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1739.967440][T29641] ksys_unshare+0x45b/0xa40 [ 1739.967476][T29641] ? __pfx_ksys_unshare+0x10/0x10 [ 1739.967512][T29641] ? xfd_validate_state+0x61/0x180 [ 1739.967562][T29641] __x64_sys_unshare+0x31/0x40 [ 1739.967594][T29641] do_syscall_64+0xcd/0xfa0 [ 1739.967651][T29641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.967685][T29641] RIP: 0033:0x7fc6e998eec9 [ 1739.967712][T29641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1739.967746][T29641] RSP: 002b:00007fc6ea780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1739.967779][T29641] RAX: ffffffffffffffda RBX: 00007fc6e9be6090 RCX: 00007fc6e998eec9 [ 1739.967802][T29641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1739.967824][T29641] RBP: 00007fc6e9a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1739.967846][T29641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1739.967867][T29641] R13: 00007fc6e9be6128 R14: 00007fc6e9be6090 R15: 00007ffe629cead8 [ 1739.967913][T29641] [ 1740.278138][T16013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.286045][T16013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.385509][T21633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.453496][T21633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.631955][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.638817][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.835495][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4834'. [ 1740.878107][T29655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1740.981181][T29654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4806'. [ 1741.014321][T29654] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4806'. [ 1741.127855][T29655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.531639][ T30] audit: type=1806 audit(4294967306.370:40): res=-14 [ 1748.507456][T29778] warning: `syz.2.4858' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1748.510893][T29780] zram: Added device: zram1 [ 1749.912435][T29809] Unable to find swap-space signature [ 1752.238199][T29848] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4873: iget: checksum invalid [ 1752.289724][T29848] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1752.302009][T29848] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4873: iget: checksum invalid [ 1752.315615][T29848] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1752.327250][T29848] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4873: iget: checksum invalid [ 1752.347312][T29848] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1752.437249][T29848] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4873: iget: checksum invalid [ 1752.506069][T29848] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1752.559364][T29848] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1752.571945][T29848] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1753.363311][T29869] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1753.689167][T29880] nbd: must specify a size in bytes for the device [ 1755.869276][T29922] ptrace attach of "./syz-executor exec"[29923] was attempted by "./syz-executor exec"[29922] [ 1757.249968][T29939] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1757.286395][T29939] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1757.292629][T29939] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1757.356592][T29939] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1757.498706][T29939] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1757.559080][T29939] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1757.577337][T29939] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1757.610510][T29939] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1757.714890][T22568] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1757.730415][T22568] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1757.740860][T22568] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1757.754104][T22568] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1757.769658][T22568] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1758.500559][T22922] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.035223][T22922] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.193031][T22922] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.348638][T22568] Bluetooth: hci1: command 0x0c1a tx timeout [ 1759.348732][T28179] Bluetooth: hci3: command 0x0406 tx timeout [ 1759.586611][T28179] Bluetooth: hci2: command 0x0c1a tx timeout [ 1759.615549][T22922] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.831512][T28179] Bluetooth: hci0: command tx timeout [ 1759.954196][T29951] chnl_net:caif_netlink_parms(): no params data found [ 1760.248715][T29995] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input191 [ 1760.425655][T30000] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input192 [ 1760.628852][T29951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.636307][T29951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.643619][T29951] bridge_slave_0: entered allmulticast mode [ 1760.652248][T29951] bridge_slave_0: entered promiscuous mode [ 1760.700526][T30007] vivid-007: ================= START STATUS ================= [ 1760.712740][T30007] vivid-007: Generate PTS: true [ 1760.718418][T30007] vivid-007: Generate SCR: true [ 1760.732907][T29951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.737742][T30007] tpg source WxH: 320x240 (Y'CbCr) [ 1760.743603][T29951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.745324][T30007] tpg field: 1 [ 1760.756753][T29951] bridge_slave_1: entered allmulticast mode [ 1760.759687][T29951] bridge_slave_1: entered promiscuous mode [ 1760.768250][T30007] tpg crop: (0,0)/320x240 [ 1760.773308][T30007] tpg compose: (0,0)/320x240 [ 1760.780312][T30007] tpg colorspace: 8 [ 1760.784338][T30007] tpg transfer function: 0/0 [ 1760.790466][T30007] tpg Y'CbCr encoding: 0/0 [ 1760.795098][T30007] tpg quantization: 0/0 [ 1760.799619][T30007] tpg RGB range: 0/2 [ 1760.804799][T30007] vivid-007: ================== END STATUS ================== [ 1760.980741][T29951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1761.033840][T29951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1761.198127][T22922] bridge_slave_1: left allmulticast mode [ 1761.220124][T22922] bridge_slave_1: left promiscuous mode [ 1761.234324][T22922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.254032][T22922] bridge_slave_0: left allmulticast mode [ 1761.292382][T22922] bridge_slave_0: left promiscuous mode [ 1761.319952][T22922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.428538][T28179] Bluetooth: hci1: command 0x0c1a tx timeout [ 1761.667591][T28179] Bluetooth: hci2: command 0x0c1a tx timeout [ 1761.913109][T28179] Bluetooth: hci0: command tx timeout [ 1762.281722][T22922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1762.294667][T22922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1762.307902][T22922] bond0 (unregistering): Released all slaves [ 1762.412015][T22922] HfR: left promiscuous mode [ 1762.441612][T29951] team0: Port device team_slave_0 added [ 1762.472701][T29951] team0: Port device team_slave_1 added [ 1762.645217][T29951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1762.652563][T29951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1762.689093][T29951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1762.767212][T29951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1762.774233][T29951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1762.820488][T29951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1763.055254][T29951] hsr_slave_0: entered promiscuous mode [ 1763.068288][T29951] hsr_slave_1: entered promiscuous mode [ 1763.079171][T29951] debugfs: 'hsr0' already exists in 'hsr' [ 1763.095270][T29951] Cannot create hsr debugfs directory [ 1763.506259][T28179] Bluetooth: hci1: command 0x0c1a tx timeout [ 1763.623460][T22922] hsr_slave_0: left promiscuous mode [ 1763.639504][T22922] hsr_slave_1: left promiscuous mode [ 1763.645778][T22922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1763.668299][T22922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1763.735511][T22922] veth1_macvtap: left promiscuous mode [ 1763.749188][T28179] Bluetooth: hci2: command 0x0c1a tx timeout [ 1763.755405][T22922] veth0_macvtap: left promiscuous mode [ 1763.991834][T28179] Bluetooth: hci0: command tx timeout [ 1764.884442][T30099] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input193 [ 1765.172954][T22922] team0 (unregistering): Port device team_slave_0 removed [ 1765.230383][T30102] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input194 [ 1766.069248][T28179] Bluetooth: hci0: command tx timeout [ 1766.251981][T30090] erspan0: entered allmulticast mode [ 1767.130840][T28179] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1768.457128][T30137] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1768.614355][T29951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1768.693663][T29951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1768.763488][T29951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1768.829307][T30156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4931'. [ 1768.845450][T29951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1769.071586][T30156] macvtap0: entered promiscuous mode [ 1769.210617][T28179] Bluetooth: hci3: command 0x0406 tx timeout [ 1769.582041][T30176] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1769.702856][T29951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1769.730619][T29951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1769.787675][T21624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.794965][T21624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1769.848508][T16178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.855737][T16178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.472180][T30204] FAULT_INJECTION: forcing a failure. [ 1770.472180][T30204] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.489037][T29951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1770.523674][T30204] CPU: 0 UID: 0 PID: 30204 Comm: syz.1.4938 Not tainted syzkaller #0 PREEMPT(full) [ 1770.523707][T30204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1770.523722][T30204] Call Trace: [ 1770.523730][T30204] [ 1770.523740][T30204] dump_stack_lvl+0x16c/0x1f0 [ 1770.523789][T30204] should_fail_ex+0x512/0x640 [ 1770.523827][T30204] ? __kmalloc_noprof+0xca/0x880 [ 1770.523861][T30204] should_failslab+0xc2/0x120 [ 1770.523885][T30204] __kmalloc_noprof+0xdd/0x880 [ 1770.523913][T30204] ? string_escape_mem+0x6c8/0xde0 [ 1770.523940][T30204] ? kstrdup_quotable+0xc2/0x190 [ 1770.523972][T30204] ? kstrdup_quotable+0xc2/0x190 [ 1770.523997][T30204] kstrdup_quotable+0xc2/0x190 [ 1770.524027][T30204] ? __pfx_kstrdup_quotable+0x10/0x10 [ 1770.524056][T30204] ? get_cmdline+0x86/0x380 [ 1770.524083][T30204] kstrdup_quotable_cmdline+0x127/0x210 [ 1770.524115][T30204] __report_access+0x77/0x370 [ 1770.524148][T30204] ? _raw_spin_unlock_irq+0x23/0x50 [ 1770.524184][T30204] task_work_run+0x150/0x240 [ 1770.524215][T30204] ? __pfx_task_work_run+0x10/0x10 [ 1770.524253][T30204] exit_to_user_mode_loop+0xec/0x130 [ 1770.524283][T30204] do_syscall_64+0x426/0xfa0 [ 1770.524321][T30204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.524345][T30204] RIP: 0033:0x7f961678eec9 [ 1770.524364][T30204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1770.524388][T30204] RSP: 002b:00007f9617689038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1770.524411][T30204] RAX: ffffffffffffffff RBX: 00007f96169e6180 RCX: 00007f961678eec9 [ 1770.524427][T30204] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000004206 [ 1770.524441][T30204] RBP: 00007f9616811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1770.524456][T30204] R10: 0000000000200005 R11: 0000000000000246 R12: 0000000000000000 [ 1770.524471][T30204] R13: 00007f96169e6218 R14: 00007f96169e6180 R15: 00007ffe1ea03468 [ 1770.524503][T30204] [ 1770.524523][T30204] ptrace attach of "./syz-executor exec"[29518] was attempted by "(null)"[30204] [ 1770.796552][T29951] veth0_vlan: entered promiscuous mode [ 1770.863991][T29951] veth1_vlan: entered promiscuous mode [ 1771.130943][T29951] veth0_macvtap: entered promiscuous mode [ 1771.180526][T29951] veth1_macvtap: entered promiscuous mode [ 1771.272245][T29951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1771.322274][T29951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1771.409160][T15996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.426458][T15996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.511473][T15996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.533227][T30217] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input195 [ 1771.537937][T15996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.787728][T30219] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input196 [ 1772.020117][T22922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1772.074982][T22922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1772.181646][T15996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1772.213303][T15996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1772.793821][T30251] ubi31: attaching mtd0 [ 1772.830305][T30251] ubi31: scanning is finished [ 1772.848115][T30251] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 1772.901356][T30255] netlink: 'syz.6.4946': attribute type 11 has an invalid length. [ 1773.604678][T30251] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1774.076745][T30253] kexec: Could not allocate control_code_buffer [ 1774.176518][T30281] random: crng reseeded on system resumption [ 1774.219034][T30281] Restarting kernel threads ... [ 1774.245676][T30281] Done restarting kernel threads. [ 1774.273254][T30287] FAULT_INJECTION: forcing a failure. [ 1774.273254][T30287] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.296760][T30287] CPU: 1 UID: 0 PID: 30287 Comm: syz.1.4951 Not tainted syzkaller #0 PREEMPT(full) [ 1774.296806][T30287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1774.296827][T30287] Call Trace: [ 1774.296838][T30287] [ 1774.296851][T30287] dump_stack_lvl+0x16c/0x1f0 [ 1774.296907][T30287] should_fail_ex+0x512/0x640 [ 1774.296960][T30287] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1774.297018][T30287] should_failslab+0xc2/0x120 [ 1774.297052][T30287] __kvmalloc_node_noprof+0x141/0x9c0 [ 1774.297107][T30287] ? alloc_fdtable+0x17f/0x2d0 [ 1774.297157][T30287] ? alloc_fdtable+0x17f/0x2d0 [ 1774.297196][T30287] alloc_fdtable+0x17f/0x2d0 [ 1774.297239][T30287] dup_fd+0x83b/0xb90 [ 1774.297297][T30287] __do_sys_close_range+0x4ca/0x730 [ 1774.297349][T30287] ? __pfx___do_sys_close_range+0x10/0x10 [ 1774.297412][T30287] do_syscall_64+0xcd/0xfa0 [ 1774.297464][T30287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.297497][T30287] RIP: 0033:0x7f961678eec9 [ 1774.297523][T30287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1774.297556][T30287] RSP: 002b:00007f96176aa038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1774.297587][T30287] RAX: ffffffffffffffda RBX: 00007f96169e6090 RCX: 00007f961678eec9 [ 1774.297620][T30287] RDX: 0000000000000006 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 1774.297643][T30287] RBP: 00007f9616811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1774.297665][T30287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1774.297686][T30287] R13: 00007f96169e6128 R14: 00007f96169e6090 R15: 00007ffe1ea03468 [ 1774.297733][T30287] [ 1774.909010][T30299] netlink: 'syz.0.4954': attribute type 12 has an invalid length. [ 1774.993584][T30299] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 1775.623208][T30314] ACPI: button: Initial lid state set to 'ignore' [ 1777.637998][T30343] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4961'. [ 1779.130744][T30394] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1779.263788][T30399] netlink: 'syz.6.4974': attribute type 1 has an invalid length. [ 1779.284390][T30399] netlink: 33 bytes leftover after parsing attributes in process `syz.6.4974'. [ 1779.418075][T30408] netlink: 206 bytes leftover after parsing attributes in process `syz.1.4975'. [ 1779.697785][T30419] serio: Serial port pty6 [ 1780.600667][T30437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4979'. [ 1782.420572][T30476] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1782.430463][T30477] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input197 [ 1782.586361][T30476] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1782.985622][T30476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1782.992120][T30476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1783.003747][T30476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1783.034272][T30476] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1783.259523][T30476] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1783.719548][T30500] random: crng reseeded on system resumption [ 1783.828354][T30498] FAULT_INJECTION: forcing a failure. [ 1783.828354][T30498] name failslab, interval 1, probability 0, space 0, times 0 [ 1783.880070][T30498] CPU: 1 UID: 0 PID: 30498 Comm: syz.0.4988 Not tainted syzkaller #0 PREEMPT(full) [ 1783.880114][T30498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1783.880135][T30498] Call Trace: [ 1783.880147][T30498] [ 1783.880160][T30498] dump_stack_lvl+0x16c/0x1f0 [ 1783.880216][T30498] should_fail_ex+0x512/0x640 [ 1783.880269][T30498] ? fs_reclaim_acquire+0xae/0x150 [ 1783.880306][T30498] should_failslab+0xc2/0x120 [ 1783.880340][T30498] __kmalloc_noprof+0xdd/0x880 [ 1783.880382][T30498] ? kfree+0x252/0x6d0 [ 1783.880430][T30498] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1783.880489][T30498] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1783.880538][T30498] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1783.880597][T30498] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1783.880641][T30498] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1783.880727][T30498] ? do_raw_spin_lock+0x12c/0x2b0 [ 1783.880782][T30498] tomoyo_file_open+0x6b/0x90 [ 1783.880839][T30498] security_file_open+0x84/0x1e0 [ 1783.880884][T30498] do_dentry_open+0x596/0x1530 [ 1783.880948][T30498] vfs_open+0x82/0x3f0 [ 1783.880990][T30498] path_openat+0x1de4/0x2cb0 [ 1783.881054][T30498] ? __pfx_path_openat+0x10/0x10 [ 1783.881107][T30498] ? __lock_acquire+0xb8a/0x1c90 [ 1783.881145][T30498] do_filp_open+0x20b/0x470 [ 1783.881196][T30498] ? __pfx_do_filp_open+0x10/0x10 [ 1783.881274][T30498] ? alloc_fd+0x471/0x7d0 [ 1783.881331][T30498] do_sys_openat2+0x11b/0x1d0 [ 1783.881369][T30498] ? __pfx_do_sys_openat2+0x10/0x10 [ 1783.881433][T30498] __x64_sys_openat+0x174/0x210 [ 1783.881473][T30498] ? __pfx___x64_sys_openat+0x10/0x10 [ 1783.881543][T30498] do_syscall_64+0xcd/0xfa0 [ 1783.881595][T30498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1783.881628][T30498] RIP: 0033:0x7fc6e998eec9 [ 1783.881653][T30498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1783.881687][T30498] RSP: 002b:00007fc6ea7a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1783.881719][T30498] RAX: ffffffffffffffda RBX: 00007fc6e9be5fa0 RCX: 00007fc6e998eec9 [ 1783.881741][T30498] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 1783.881762][T30498] RBP: 00007fc6e9a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1783.881784][T30498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1783.881804][T30498] R13: 00007fc6e9be6038 R14: 00007fc6e9be5fa0 R15: 00007ffe629cead8 [ 1783.881850][T30498] [ 1783.882775][T30498] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1784.137709][T30505] netlink: 'syz.1.4990': attribute type 35 has an invalid length. [ 1784.466350][T28179] Bluetooth: hci3: command 0x0406 tx timeout [ 1784.969941][T30526] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input198 [ 1785.026582][T28179] Bluetooth: hci0: command 0x0c1a tx timeout [ 1785.032708][T28179] Bluetooth: hci2: command 0x0c1a tx timeout [ 1785.039005][T22568] Bluetooth: hci1: command 0x0c1a tx timeout [ 1785.172960][T30530] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input199 [ 1785.979224][T30542] FAULT_INJECTION: forcing a failure. [ 1785.979224][T30542] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1786.053340][T30542] CPU: 1 UID: 0 PID: 30542 Comm: syz.0.4996 Not tainted syzkaller #0 PREEMPT(full) [ 1786.053393][T30542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1786.053415][T30542] Call Trace: [ 1786.053426][T30542] [ 1786.053439][T30542] dump_stack_lvl+0x16c/0x1f0 [ 1786.053496][T30542] should_fail_ex+0x512/0x640 [ 1786.053555][T30542] get_futex_key+0x1d0/0x1560 [ 1786.053623][T30542] ? kasan_quarantine_put+0x10a/0x240 [ 1786.053672][T30542] ? __pfx_get_futex_key+0x10/0x10 [ 1786.053726][T30542] ? look_up_lock_class+0x6b/0x150 [ 1786.053774][T30542] ? register_lock_class+0x41/0x4c0 [ 1786.053807][T30542] ? tomoyo_check_open_permission+0x1d8/0x3c0 [ 1786.053852][T30542] futex_wake+0xea/0x530 [ 1786.053896][T30542] ? __pfx_futex_wake+0x10/0x10 [ 1786.053954][T30542] do_futex+0x1e3/0x350 [ 1786.053989][T30542] ? __pfx_do_futex+0x10/0x10 [ 1786.054023][T30542] ? _raw_spin_unlock+0x28/0x50 [ 1786.054064][T30542] ? do_fcntl+0x1eb/0x15a0 [ 1786.054098][T30542] __x64_sys_futex+0x1e0/0x4c0 [ 1786.054138][T30542] ? __pfx___x64_sys_futex+0x10/0x10 [ 1786.054174][T30542] ? tomoyo_file_fcntl+0xa5/0xc0 [ 1786.054237][T30542] do_syscall_64+0xcd/0xfa0 [ 1786.054289][T30542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.054321][T30542] RIP: 0033:0x7fc6e998eec9 [ 1786.054347][T30542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1786.054378][T30542] RSP: 002b:00007fc6ea7a10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1786.054416][T30542] RAX: ffffffffffffffda RBX: 00007fc6e9be5fa8 RCX: 00007fc6e998eec9 [ 1786.054438][T30542] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc6e9be5fac [ 1786.054459][T30542] RBP: 00007fc6e9be5fa0 R08: 00007fc6ea7a2000 R09: 0000000000000000 [ 1786.054480][T30542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1786.054500][T30542] R13: 00007fc6e9be6038 R14: 00007ffe629ce9f0 R15: 00007ffe629cead8 [ 1786.054545][T30542] [ 1786.546439][T28179] Bluetooth: hci3: command 0x0406 tx timeout [ 1787.112238][T28179] Bluetooth: hci0: command 0x0c1a tx timeout [ 1787.416438][T30571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5002'. [ 1789.218939][T28179] Bluetooth: hci0: command 0x0c1a tx timeout [ 1790.389644][ T30] audit: type=1804 audit(4294967354.230:41): pid=30634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5010" name="/newroot/sys/kernel/debug/tracing/trace_options" dev="tracefs" ino=12 res=1 errno=0 [ 1792.260858][T30673] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input200 [ 1792.351934][T30675] ptrace attach of "./syz-executor exec"[30676] was attempted by "./syz-executor exec"[30675] [ 1792.640332][T30677] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input201 [ 1792.753578][T21633] bridge_slave_1: left allmulticast mode [ 1792.796116][T21633] bridge_slave_1: left promiscuous mode [ 1792.822993][T21633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.884021][T21633] bridge_slave_0: left allmulticast mode [ 1792.986757][T21633] bridge_slave_0: left promiscuous mode [ 1793.036821][T21633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.921857][T30701] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5022'. [ 1794.745034][T21633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1794.775434][T21633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1794.793538][T21633] bond0 (unregistering): Released all slaves [ 1796.779640][T21633] veth1_macvtap: left promiscuous mode [ 1796.808455][T21633] veth0_macvtap: left promiscuous mode [ 1797.050313][T30731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5032'. [ 1797.457560][T30733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5031'. [ 1798.138362][T21633] team0 (unregistering): Port device team_slave_1 removed [ 1798.253173][T21633] team0 (unregistering): Port device team_slave_0 removed [ 1799.727995][T30767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5042'. [ 1800.313769][T30780] < [ 1801.542695][T30807] netlink: 280 bytes leftover after parsing attributes in process `syz.0.5049'. [ 1802.027761][T30815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5052'. [ 1802.071905][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1802.078557][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.226453][T30820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5054'. [ 1802.283629][T30820] netlink: 354 bytes leftover after parsing attributes in process `syz.0.5054'. [ 1802.517937][T30831] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input202 [ 1802.705211][T30833] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input203 [ 1803.405412][T30843] block nbd9: NBD_DISCONNECT [ 1803.845873][T30852] netlink: 93 bytes leftover after parsing attributes in process `syz.6.5059'. [ 1806.511288][T30885] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input204 [ 1806.757329][T30888] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input205 [ 1806.882508][T30884] zswap: compressor not available [ 1808.875240][T30928] netlink: 326 bytes leftover after parsing attributes in process `syz.1.5074'. [ 1808.903543][ T5843] Process accounting resumed [ 1811.458722][T30977] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1811.648762][T30981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5087'. [ 1811.658826][T30982] netlink: 556 bytes leftover after parsing attributes in process `syz.0.5088'. [ 1811.739334][T30981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1811.769170][T30981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1811.853253][T30981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1811.936283][T30981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1812.122032][T30994] snd_aloop snd_aloop.0: control 7:-2147483391:4:ª¸èßÿÿ:2 is already present [ 1812.733672][T31007] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input206 [ 1813.124126][T31011] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input207 [ 1817.546749][T31067] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input208 [ 1818.059480][T31068] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input209 [ 1818.492819][T31086] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5110'. [ 1818.611832][T31086] cougar: G6 mapped to space [ 1821.493108][T22922] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 4 with max blocks 3 with error 117 [ 1821.556536][T22922] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1821.556536][T22922] [ 1821.703520][T31140] ima: policy update failed [ 1821.708581][ T30] audit: type=1802 audit(4294967385.550:42): pid=31140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5122" res=0 errno=0 [ 1825.570307][T31214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5135'. [ 1825.728554][T31214] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input210 [ 1826.992618][T31232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5139'. [ 1829.556417][T31267] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input211 [ 1830.705103][T31271] delete_channel: no stack [ 1831.248291][T31281] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input212 [ 1831.552967][T31020] syz.6.5094 (31020) used greatest stack depth: 19896 bytes left [ 1831.764862][T31283] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input213 [ 1833.042250][T31307] random: crng reseeded on system resumption [ 1834.147715][T31327] futex_wake_op: syz.0.5156 tries to shift op by -2048; fix this program [ 1835.759384][T31359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5168'. [ 1836.525131][T31378] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000 [ 1836.550273][T31378] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1836.577991][T31378] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1836.595879][T31378] raw: ffff888078000000 0000000000000000 0000000500000003 0000000000000000 [ 1836.597631][T31370] FAULT_INJECTION: forcing a failure. [ 1836.597631][T31370] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.609204][T31378] page dumped because: unmovable page [ 1836.632732][T31370] CPU: 1 UID: 0 PID: 31370 Comm: syz.2.5170 Not tainted syzkaller #0 PREEMPT(full) [ 1836.632778][T31370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1836.632799][T31370] Call Trace: [ 1836.632809][T31370] [ 1836.632822][T31370] dump_stack_lvl+0x16c/0x1f0 [ 1836.632878][T31370] should_fail_ex+0x512/0x640 [ 1836.632929][T31370] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1836.632976][T31370] should_failslab+0xc2/0x120 [ 1836.633009][T31370] __kmalloc_cache_noprof+0x72/0x780 [ 1836.633053][T31370] ? kvm_dev_ioctl+0x1358/0x1a80 [ 1836.633110][T31370] ? kvm_dev_ioctl+0x1358/0x1a80 [ 1836.633159][T31370] kvm_dev_ioctl+0x1358/0x1a80 [ 1836.633229][T31370] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1836.633295][T31370] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1836.633348][T31370] __x64_sys_ioctl+0x18e/0x210 [ 1836.633390][T31370] do_syscall_64+0xcd/0xfa0 [ 1836.633441][T31370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.633473][T31370] RIP: 0033:0x7efdce98eec9 [ 1836.633500][T31370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1836.633533][T31370] RSP: 002b:00007efdcf839038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1836.633565][T31370] RAX: ffffffffffffffda RBX: 00007efdcebe6090 RCX: 00007efdce98eec9 [ 1836.633588][T31370] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000a [ 1836.633609][T31370] RBP: 00007efdcea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1836.633630][T31370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1836.633651][T31370] R13: 00007efdcebe6128 R14: 00007efdcebe6090 R15: 00007ffe39c4db88 [ 1836.633697][T31370] [ 1836.737388][T31378] page_owner tracks the page as allocated [ 1836.874755][T31378] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 29935, tgid 29935 (syz-executor), ts 1756561671099, free_ts 1754987612302 [ 1836.994631][T31378] post_alloc_hook+0x1c0/0x230 [ 1837.060921][T31378] get_page_from_freelist+0x10a3/0x3a30 [ 1837.104402][T31378] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1837.123084][T31378] alloc_pages_mpol+0x1fb/0x550 [ 1837.143148][T31378] alloc_pages_noprof+0x131/0x390 [ 1837.148772][T31378] __vmalloc_node_range_noprof+0x6f8/0x1480 [ 1837.155065][T31378] vmalloc_user_noprof+0x9e/0xe0 [ 1837.163780][T31378] kcov_ioctl+0x4c/0x730 [ 1837.168613][T31378] __x64_sys_ioctl+0x18e/0x210 [ 1837.173539][T31378] do_syscall_64+0xcd/0xfa0 [ 1837.181122][T31378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.190168][T31378] page last free pid 29887 tgid 29885 stack trace: [ 1837.197568][T31378] __free_frozen_pages+0x7df/0x1160 [ 1837.202982][T31378] kasan_depopulate_vmalloc_pte+0x5b/0x80 [ 1837.209404][T31378] __apply_to_page_range+0xac1/0x13f0 [ 1837.214989][T31378] kasan_release_vmalloc+0xd1/0xe0 [ 1837.223076][T31378] purge_vmap_node+0x1c4/0xa30 [ 1837.228414][T31378] __purge_vmap_area_lazy+0xa06/0xc60 [ 1837.235392][T31378] _vm_unmap_aliases+0x43b/0x670 [ 1837.241019][T31378] change_page_attr_set_clr+0x252/0x4a0 [ 1837.283340][T31378] set_memory_rox+0xbd/0x110 [ 1837.291683][T31378] machine_kexec_prepare+0xec6/0x1760 [ 1837.298684][T31378] do_kexec_load+0x65c/0x8a0 [ 1837.303378][T31378] __x64_sys_kexec_load+0x1bf/0x230 [ 1837.309324][T31378] do_syscall_64+0xcd/0xfa0 [ 1837.313925][T31378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.683918][T31397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5176'. [ 1838.516816][T31422] overlayfs: missing 'lowerdir' [ 1838.533413][T31179] syz.6.5123 (31179) used greatest stack depth: 19864 bytes left [ 1839.763743][T31440] Invalid ELF header magic: != ELF [ 1841.357927][T31448] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 25 with max blocks 31 with error 117 [ 1841.616870][T31448] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1841.616870][T31448] [ 1841.924115][T31464] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5196'. [ 1841.996871][T31466] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input214 [ 1842.103925][T31469] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input215 [ 1842.138825][T31468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5195'. [ 1842.201126][T31468] netlink: 'syz.0.5195': attribute type 2 has an invalid length. [ 1846.594078][T31553] blktrace: Concurrent blktraces are not allowed on sg0 [ 1848.041684][T31568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5220'. [ 1848.051274][T31568] netlink: 'syz.2.5220': attribute type 2 has an invalid length. [ 1850.023885][T31610] netlink: 'syz.2.5232': attribute type 11 has an invalid length. [ 1850.037441][T31610] netlink: 'syz.2.5232': attribute type 11 has an invalid length. [ 1850.060372][T31610] netlink: 'syz.2.5232': attribute type 11 has an invalid length. [ 1850.079980][T31610] netlink: 'syz.2.5232': attribute type 11 has an invalid length. [ 1852.414078][T31673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5250'. [ 1852.763382][T31683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5252'. [ 1852.792107][T31675] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 1853.022598][T31688] FAULT_INJECTION: forcing a failure. [ 1853.022598][T31688] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.104163][T31688] CPU: 1 UID: 0 PID: 31688 Comm: syz.0.5252 Not tainted syzkaller #0 PREEMPT(full) [ 1853.104204][T31688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1853.104221][T31688] Call Trace: [ 1853.104229][T31688] [ 1853.104240][T31688] dump_stack_lvl+0x16c/0x1f0 [ 1853.104283][T31688] should_fail_ex+0x512/0x640 [ 1853.104323][T31688] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1853.104367][T31688] should_failslab+0xc2/0x120 [ 1853.104391][T31688] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1853.104429][T31688] ? string+0x2c4/0x4f0 [ 1853.104463][T31688] ? kstrdup_const+0x63/0x80 [ 1853.104510][T31688] ? kstrdup+0x53/0x100 [ 1853.104542][T31688] kstrdup+0x53/0x100 [ 1853.104577][T31688] kstrdup_const+0x63/0x80 [ 1853.104610][T31688] __kernfs_new_node+0x9b/0x8e0 [ 1853.104654][T31688] ? __pfx___kernfs_new_node+0x10/0x10 [ 1853.104700][T31688] ? find_held_lock+0x2b/0x80 [ 1853.104736][T31688] ? kernfs_root+0xee/0x2a0 [ 1853.104764][T31688] kernfs_new_node+0x13c/0x1e0 [ 1853.104799][T31688] __kernfs_create_file+0x53/0x350 [ 1853.104835][T31688] cgroup_addrm_files+0x546/0xc20 [ 1853.104876][T31688] ? __xa_store+0x1dc/0x2e0 [ 1853.104898][T31688] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 1853.104928][T31688] ? __pfx___xa_store+0x10/0x10 [ 1853.104960][T31688] ? do_raw_spin_unlock+0x172/0x230 [ 1853.104996][T31688] css_populate_dir+0x169/0x580 [ 1853.105037][T31688] cgroup_apply_control_enable+0x3f3/0xbb0 [ 1853.105078][T31688] cgroup_mkdir+0x5e0/0x12e0 [ 1853.105113][T31688] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1853.105145][T31688] kernfs_iop_mkdir+0x111/0x190 [ 1853.105170][T31688] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1853.105206][T31688] vfs_mkdir+0x593/0x8c0 [ 1853.105239][T31688] do_mkdirat+0x304/0x3e0 [ 1853.105276][T31688] ? __pfx_do_mkdirat+0x10/0x10 [ 1853.105313][T31688] ? getname_flags.part.0+0x1c5/0x550 [ 1853.105343][T31688] __x64_sys_mkdir+0xef/0x140 [ 1853.105379][T31688] do_syscall_64+0xcd/0xfa0 [ 1853.105416][T31688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.105440][T31688] RIP: 0033:0x7fc6e998eec9 [ 1853.105466][T31688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1853.105489][T31688] RSP: 002b:00007fc6ea75f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1853.105513][T31688] RAX: ffffffffffffffda RBX: 00007fc6e9be6180 RCX: 00007fc6e998eec9 [ 1853.105529][T31688] RDX: 0000000000000000 RSI: 00000000000008cf RDI: 0000200000000000 [ 1853.105543][T31688] RBP: 00007fc6e9a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1853.105558][T31688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1853.105573][T31688] R13: 00007fc6e9be6218 R14: 00007fc6e9be6180 R15: 00007ffe629cead8 [ 1853.105605][T31688] [ 1853.440558][T31689] snd_aloop snd_aloop.0: control 7:-2147483391:4:ª¸èßÿÿ:2 is already present [ 1853.455278][T31688] cgroup: cgroup_addrm_files: failed to add limit_in_bytes, err=-12 [ 1853.603910][T31683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1853.611886][T31683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1855.562702][T31715] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 25 with max blocks 2 with error 117 [ 1855.626542][T31715] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1855.626542][T31715] [ 1855.668047][T31737] sd 0:0:1:0: PR command failed: 1026 [ 1855.673532][T31737] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1855.753684][T31737] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1856.639664][T31745] FAULT_INJECTION: forcing a failure. [ 1856.639664][T31745] name failslab, interval 1, probability 0, space 0, times 0 [ 1856.682936][T31745] CPU: 1 UID: 0 PID: 31745 Comm: syz.1.5268 Not tainted syzkaller #0 PREEMPT(full) [ 1856.682981][T31745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1856.683001][T31745] Call Trace: [ 1856.683012][T31745] [ 1856.683025][T31745] dump_stack_lvl+0x16c/0x1f0 [ 1856.683079][T31745] should_fail_ex+0x512/0x640 [ 1856.683131][T31745] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1856.683177][T31745] should_failslab+0xc2/0x120 [ 1856.683210][T31745] __kmalloc_cache_noprof+0x72/0x780 [ 1856.683250][T31745] ? lock_acquire+0x179/0x350 [ 1856.683283][T31745] ? open_substream+0xec/0x990 [ 1856.683336][T31745] ? open_substream+0xec/0x990 [ 1856.683379][T31745] open_substream+0xec/0x990 [ 1856.683424][T31745] ? lockdep_hardirqs_on+0x7c/0x110 [ 1856.683478][T31745] rawmidi_open_priv+0x543/0x6e0 [ 1856.683531][T31745] snd_rawmidi_open+0x4cb/0xbf0 [ 1856.683588][T31745] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1856.683636][T31745] ? __pfx_default_wake_function+0x10/0x10 [ 1856.683687][T31745] ? kobject_get_unless_zero+0x156/0x1e0 [ 1856.683745][T31745] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1856.683792][T31745] snd_open+0x22d/0x4c0 [ 1856.683839][T31745] ? __pfx_snd_open+0x10/0x10 [ 1856.683873][T31745] chrdev_open+0x234/0x6a0 [ 1856.683939][T31745] ? __pfx_apparmor_file_open+0x10/0x10 [ 1856.683974][T31745] ? __pfx_chrdev_open+0x10/0x10 [ 1856.684029][T31745] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1856.684089][T31745] do_dentry_open+0x982/0x1530 [ 1856.684140][T31745] ? __pfx_chrdev_open+0x10/0x10 [ 1856.684199][T31745] vfs_open+0x82/0x3f0 [ 1856.684238][T31745] path_openat+0x1de4/0x2cb0 [ 1856.684304][T31745] ? __pfx_path_openat+0x10/0x10 [ 1856.684352][T31745] ? __lock_acquire+0xb8a/0x1c90 [ 1856.684393][T31745] do_filp_open+0x20b/0x470 [ 1856.684442][T31745] ? __pfx_do_filp_open+0x10/0x10 [ 1856.684524][T31745] ? alloc_fd+0x471/0x7d0 [ 1856.684580][T31745] do_sys_openat2+0x11b/0x1d0 [ 1856.684618][T31745] ? __pfx_do_sys_openat2+0x10/0x10 [ 1856.684673][T31745] __x64_sys_openat+0x174/0x210 [ 1856.684713][T31745] ? __pfx___x64_sys_openat+0x10/0x10 [ 1856.684770][T31745] do_syscall_64+0xcd/0xfa0 [ 1856.684832][T31745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.684868][T31745] RIP: 0033:0x7f961678eec9 [ 1856.684896][T31745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1856.684929][T31745] RSP: 002b:00007f96176cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1856.684964][T31745] RAX: ffffffffffffffda RBX: 00007f96169e5fa0 RCX: 00007f961678eec9 [ 1856.684988][T31745] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1856.685011][T31745] RBP: 00007f9616811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1856.685032][T31745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1856.685053][T31745] R13: 00007f96169e6038 R14: 00007f96169e5fa0 R15: 00007ffe1ea03468 [ 1856.685096][T31745] [ 1857.147578][T31736] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1857.697773][T31762] FAULT_INJECTION: forcing a failure. [ 1857.697773][T31762] name failslab, interval 1, probability 0, space 0, times 0 [ 1857.713764][T31758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5272'. [ 1857.730003][T31762] CPU: 1 UID: 0 PID: 31762 Comm: syz.1.5273 Not tainted syzkaller #0 PREEMPT(full) [ 1857.730045][T31762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1857.730066][T31762] Call Trace: [ 1857.730077][T31762] [ 1857.730091][T31762] dump_stack_lvl+0x16c/0x1f0 [ 1857.730145][T31762] should_fail_ex+0x512/0x640 [ 1857.730196][T31762] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1857.730243][T31762] should_failslab+0xc2/0x120 [ 1857.730278][T31762] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1857.730323][T31762] ? acpi_ps_alloc_op+0xf4/0x360 [ 1857.730365][T31762] ? acpi_ps_alloc_op+0xf4/0x360 [ 1857.730396][T31762] acpi_ps_alloc_op+0xf4/0x360 [ 1857.730435][T31762] acpi_ps_create_scope_op+0x1a/0x70 [ 1857.730469][T31762] acpi_ps_execute_method+0x223/0xe90 [ 1857.730526][T31762] acpi_ns_evaluate+0x98c/0x16d0 [ 1857.730570][T31762] acpi_evaluate_object+0x4ca/0xdf0 [ 1857.730627][T31762] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1857.730680][T31762] ? __pfx___schedule+0x10/0x10 [ 1857.730731][T31762] acpi_evaluate_integer+0xdd/0x200 [ 1857.730782][T31762] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1857.730838][T31762] ? __pfx_status_show+0x10/0x10 [ 1857.730896][T31762] status_show+0xa0/0x120 [ 1857.730938][T31762] ? __pfx_status_show+0x10/0x10 [ 1857.731008][T31762] dev_attr_show+0x56/0xe0 [ 1857.731060][T31762] ? __pfx_dev_attr_show+0x10/0x10 [ 1857.731105][T31762] sysfs_kf_seq_show+0x216/0x3e0 [ 1857.731160][T31762] seq_read_iter+0x50e/0x12d0 [ 1857.731218][T31762] kernfs_fop_read_iter+0x46c/0x610 [ 1857.731263][T31762] ? rw_verify_area+0xcf/0x6c0 [ 1857.731310][T31762] vfs_read+0x8bf/0xcf0 [ 1857.731362][T31762] ? __pfx___mutex_lock+0x10/0x10 [ 1857.731415][T31762] ? __pfx_vfs_read+0x10/0x10 [ 1857.731490][T31762] ksys_read+0x12a/0x250 [ 1857.731537][T31762] ? __pfx_ksys_read+0x10/0x10 [ 1857.731596][T31762] do_syscall_64+0xcd/0xfa0 [ 1857.731649][T31762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1857.731683][T31762] RIP: 0033:0x7f961678eec9 [ 1857.731710][T31762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1857.731753][T31762] RSP: 002b:00007f96176aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1857.731785][T31762] RAX: ffffffffffffffda RBX: 00007f96169e6090 RCX: 00007f961678eec9 [ 1857.731808][T31762] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000009 [ 1857.731829][T31762] RBP: 00007f9616811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1857.731849][T31762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1857.731869][T31762] R13: 00007f96169e6128 R14: 00007f96169e6090 R15: 00007ffe1ea03468 [ 1857.731914][T31762] [ 1857.949752][T31758] netlink: 'syz.2.5272': attribute type 2 has an invalid length. [ 1858.344815][T31775] random: crng reseeded on system resumption [ 1859.912285][T31806] FAULT_INJECTION: forcing a failure. [ 1859.912285][T31806] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.927792][T31806] CPU: 1 UID: 0 PID: 31806 Comm: syz.2.5286 Not tainted syzkaller #0 PREEMPT(full) [ 1859.927840][T31806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1859.927861][T31806] Call Trace: [ 1859.927874][T31806] [ 1859.927888][T31806] dump_stack_lvl+0x16c/0x1f0 [ 1859.927945][T31806] should_fail_ex+0x512/0x640 [ 1859.927997][T31806] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1859.928046][T31806] should_failslab+0xc2/0x120 [ 1859.928079][T31806] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1859.928124][T31806] ? alloc_empty_file+0x55/0x1e0 [ 1859.928168][T31806] ? alloc_empty_file+0x55/0x1e0 [ 1859.928200][T31806] alloc_empty_file+0x55/0x1e0 [ 1859.928237][T31806] alloc_file_pseudo+0x13a/0x230 [ 1859.928277][T31806] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1859.928315][T31806] ? alloc_fd+0x471/0x7d0 [ 1859.928366][T31806] sock_alloc_file+0x50/0x210 [ 1859.928422][T31806] __sys_socket+0x1c0/0x260 [ 1859.928461][T31806] ? __pfx___sys_socket+0x10/0x10 [ 1859.928511][T31806] ? xfd_validate_state+0x61/0x180 [ 1859.928546][T31806] ? __pfx_ksys_write+0x10/0x10 [ 1859.928603][T31806] __x64_sys_socket+0x72/0xb0 [ 1859.928640][T31806] ? lockdep_hardirqs_on+0x7c/0x110 [ 1859.928690][T31806] do_syscall_64+0xcd/0xfa0 [ 1859.928743][T31806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.928783][T31806] RIP: 0033:0x7efdce98eec9 [ 1859.928810][T31806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1859.928846][T31806] RSP: 002b:00007efdcf85a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1859.928880][T31806] RAX: ffffffffffffffda RBX: 00007efdcebe5fa0 RCX: 00007efdce98eec9 [ 1859.928903][T31806] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000018 [ 1859.928924][T31806] RBP: 00007efdcea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1859.928945][T31806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1859.928965][T31806] R13: 00007efdcebe6038 R14: 00007efdcebe5fa0 R15: 00007ffe39c4db88 [ 1859.929010][T31806] [ 1860.136209][ C1] vkms_vblank_simulate: vblank timer overrun [ 1860.705026][T31822] FAULT_INJECTION: forcing a failure. [ 1860.705026][T31822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1860.746243][T31822] CPU: 0 UID: 0 PID: 31822 Comm: syz.0.5290 Not tainted syzkaller #0 PREEMPT(full) [ 1860.746288][T31822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1860.746309][T31822] Call Trace: [ 1860.746320][T31822] [ 1860.746334][T31822] dump_stack_lvl+0x16c/0x1f0 [ 1860.746386][T31822] should_fail_ex+0x512/0x640 [ 1860.746446][T31822] _copy_from_user+0x2e/0xd0 [ 1860.746481][T31822] copy_msghdr_from_user+0x98/0x160 [ 1860.746534][T31822] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1860.746606][T31822] ___sys_sendmsg+0xfe/0x1d0 [ 1860.746656][T31822] ? __pfx____sys_sendmsg+0x10/0x10 [ 1860.746710][T31822] ? __lock_acquire+0x622/0x1c90 [ 1860.746795][T31822] __sys_sendmsg+0x16d/0x220 [ 1860.746846][T31822] ? __pfx___sys_sendmsg+0x10/0x10 [ 1860.746925][T31822] do_syscall_64+0xcd/0xfa0 [ 1860.746977][T31822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.747009][T31822] RIP: 0033:0x7fc6e998eec9 [ 1860.747035][T31822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1860.747068][T31822] RSP: 002b:00007fc6ea780038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1860.747098][T31822] RAX: ffffffffffffffda RBX: 00007fc6e9be6090 RCX: 00007fc6e998eec9 [ 1860.747119][T31822] RDX: 000000000004c848 RSI: 0000200000006140 RDI: 0000000000000006 [ 1860.747138][T31822] RBP: 00007fc6ea780090 R08: 0000000000000000 R09: 0000000000000000 [ 1860.747157][T31822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1860.747175][T31822] R13: 00007fc6e9be6128 R14: 00007fc6e9be6090 R15: 00007ffe629cead8 [ 1860.747218][T31822] [ 1863.465372][T31862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5301'. [ 1863.512838][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1863.519264][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.672286][T31868] openvswitch: netlink: Message has 4 unknown bytes. [ 1863.779573][T31877] hub 3-0:1.0: USB hub found [ 1863.814897][T31877] hub 3-0:1.0: 1 port detected [ 1863.917957][T31877] usb usb3: authorized to connect [ 1865.439831][T31899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5313'. [ 1866.082762][T31915] FAULT_INJECTION: forcing a failure. [ 1866.082762][T31915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1866.196312][T31915] CPU: 1 UID: 0 PID: 31915 Comm: syz.2.5316 Not tainted syzkaller #0 PREEMPT(full) [ 1866.196354][T31915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1866.196374][T31915] Call Trace: [ 1866.196385][T31915] [ 1866.196399][T31915] dump_stack_lvl+0x16c/0x1f0 [ 1866.196452][T31915] should_fail_ex+0x512/0x640 [ 1866.196507][T31915] _copy_to_user+0x32/0xd0 [ 1866.196543][T31915] simple_read_from_buffer+0xcb/0x170 [ 1866.196588][T31915] proc_fail_nth_read+0x197/0x240 [ 1866.196636][T31915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1866.196687][T31915] ? rw_verify_area+0xcf/0x6c0 [ 1866.196728][T31915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1866.196772][T31915] vfs_read+0x1e4/0xcf0 [ 1866.196823][T31915] ? __pfx___mutex_lock+0x10/0x10 [ 1866.196884][T31915] ? __pfx_vfs_read+0x10/0x10 [ 1866.196940][T31915] ? __fget_files+0x20e/0x3c0 [ 1866.196995][T31915] ksys_read+0x12a/0x250 [ 1866.197037][T31915] ? __pfx_ksys_read+0x10/0x10 [ 1866.197093][T31915] do_syscall_64+0xcd/0xfa0 [ 1866.197146][T31915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.197179][T31915] RIP: 0033:0x7efdce98d8dc [ 1866.197205][T31915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1866.197238][T31915] RSP: 002b:00007efdcf85a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1866.197268][T31915] RAX: ffffffffffffffda RBX: 00007efdcebe5fa0 RCX: 00007efdce98d8dc [ 1866.197290][T31915] RDX: 000000000000000f RSI: 00007efdcf85a0a0 RDI: 0000000000000004 [ 1866.197315][T31915] RBP: 00007efdcf85a090 R08: 0000000000000000 R09: 0000000000000000 [ 1866.197336][T31915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1866.197355][T31915] R13: 00007efdcebe6038 R14: 00007efdcebe5fa0 R15: 00007ffe39c4db88 [ 1866.197401][T31915] [ 1870.157079][T31963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5329'. [ 1870.297890][T31965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5329'. [ 1872.360016][T31990] FAULT_INJECTION: forcing a failure. [ 1872.360016][T31990] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.435675][T31990] CPU: 1 UID: 0 PID: 31990 Comm: syz.1.5337 Not tainted syzkaller #0 PREEMPT(full) [ 1872.435718][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1872.435736][T31990] Call Trace: [ 1872.435747][T31990] [ 1872.435759][T31990] dump_stack_lvl+0x16c/0x1f0 [ 1872.435813][T31990] should_fail_ex+0x512/0x640 [ 1872.435864][T31990] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1872.435901][T31990] should_failslab+0xc2/0x120 [ 1872.435932][T31990] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1872.435975][T31990] ? skb_clone+0x190/0x3f0 [ 1872.436029][T31990] ? skb_clone+0x190/0x3f0 [ 1872.436074][T31990] skb_clone+0x190/0x3f0 [ 1872.436136][T31990] netlink_deliver_tap+0xabd/0xd30 [ 1872.436195][T31990] netlink_unicast+0x64c/0x870 [ 1872.436251][T31990] ? __pfx_netlink_unicast+0x10/0x10 [ 1872.436320][T31990] netlink_sendmsg+0x8c8/0xdd0 [ 1872.436377][T31990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1872.436441][T31990] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1872.436483][T31990] ____sys_sendmsg+0xa98/0xc70 [ 1872.436522][T31990] ? copy_msghdr_from_user+0x10a/0x160 [ 1872.436567][T31990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1872.436624][T31990] ___sys_sendmsg+0x134/0x1d0 [ 1872.436675][T31990] ? __pfx____sys_sendmsg+0x10/0x10 [ 1872.436719][T31990] ? __lock_acquire+0x622/0x1c90 [ 1872.436804][T31990] __sys_sendmsg+0x16d/0x220 [ 1872.436852][T31990] ? __pfx___sys_sendmsg+0x10/0x10 [ 1872.436928][T31990] do_syscall_64+0xcd/0xfa0 [ 1872.436976][T31990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.437007][T31990] RIP: 0033:0x7f961678eec9 [ 1872.437034][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1872.437065][T31990] RSP: 002b:00007f96176aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1872.437095][T31990] RAX: ffffffffffffffda RBX: 00007f96169e6090 RCX: 00007f961678eec9 [ 1872.437117][T31990] RDX: 000000000004c848 RSI: 0000200000006140 RDI: 0000000000000006 [ 1872.437137][T31990] RBP: 00007f96176aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1872.437158][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1872.437178][T31990] R13: 00007f96169e6128 R14: 00007f96169e6090 R15: 00007ffe1ea03468 [ 1872.437223][T31990] [ 1873.093501][T31996] netlink: 268 bytes leftover after parsing attributes in process `syz.6.5338'. [ 1873.151178][T31996] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.5338: iget: checksum invalid [ 1873.168528][T31996] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1873.180346][T31996] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.5338: iget: checksum invalid [ 1873.192156][T31996] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1873.203091][T31996] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.5338: iget: checksum invalid [ 1873.217804][T31996] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1873.228944][T31996] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.5338: iget: checksum invalid [ 1873.240988][T31996] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1873.250800][T31996] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1873.260847][T31996] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1876.887701][T32031] overlayfs: missing 'lowerdir' [ 1877.471760][T32045] FAULT_INJECTION: forcing a failure. [ 1877.471760][T32045] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.485018][T32045] CPU: 1 UID: 0 PID: 32045 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(full) [ 1877.485058][T32045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1877.485077][T32045] Call Trace: [ 1877.485089][T32045] [ 1877.485101][T32045] dump_stack_lvl+0x16c/0x1f0 [ 1877.485154][T32045] should_fail_ex+0x512/0x640 [ 1877.485204][T32045] ? __kmalloc_noprof+0xca/0x880 [ 1877.485247][T32045] should_failslab+0xc2/0x120 [ 1877.485280][T32045] __kmalloc_noprof+0xdd/0x880 [ 1877.485322][T32045] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1877.485372][T32045] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1877.485410][T32045] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1877.485460][T32045] genl_start+0x18f/0x980 [ 1877.485500][T32045] __netlink_dump_start+0x60e/0x990 [ 1877.485557][T32045] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1877.485598][T32045] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1877.485646][T32045] ? __pfx_genl_get_cmd+0x10/0x10 [ 1877.485676][T32045] ? __pfx_genl_start+0x10/0x10 [ 1877.485707][T32045] ? __pfx_genl_dumpit+0x10/0x10 [ 1877.485737][T32045] ? __pfx_genl_done+0x10/0x10 [ 1877.485778][T32045] ? __radix_tree_lookup+0x21f/0x2c0 [ 1877.485829][T32045] genl_rcv_msg+0x46e/0x800 [ 1877.485869][T32045] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1877.485906][T32045] ? __pfx_tipc_nl_node_dump_monitor_peer+0x10/0x10 [ 1877.485985][T32045] netlink_rcv_skb+0x158/0x420 [ 1877.486036][T32045] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1877.486075][T32045] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1877.486148][T32045] ? netlink_deliver_tap+0x1ae/0xd30 [ 1877.486203][T32045] genl_rcv+0x28/0x40 [ 1877.486231][T32045] netlink_unicast+0x5aa/0x870 [ 1877.486291][T32045] ? __pfx_netlink_unicast+0x10/0x10 [ 1877.486360][T32045] netlink_sendmsg+0x8c8/0xdd0 [ 1877.486419][T32045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1877.486476][T32045] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1877.486519][T32045] ____sys_sendmsg+0xa98/0xc70 [ 1877.486557][T32045] ? copy_msghdr_from_user+0x10a/0x160 [ 1877.486608][T32045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1877.486666][T32045] ___sys_sendmsg+0x134/0x1d0 [ 1877.486719][T32045] ? __pfx____sys_sendmsg+0x10/0x10 [ 1877.486766][T32045] ? __lock_acquire+0x622/0x1c90 [ 1877.486853][T32045] __sys_sendmsg+0x16d/0x220 [ 1877.486902][T32045] ? __pfx___sys_sendmsg+0x10/0x10 [ 1877.486989][T32045] do_syscall_64+0xcd/0xfa0 [ 1877.487040][T32045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.487074][T32045] RIP: 0033:0x7efdce98eec9 [ 1877.487099][T32045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1877.487131][T32045] RSP: 002b:00007efdcf839038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1877.487162][T32045] RAX: ffffffffffffffda RBX: 00007efdcebe6090 RCX: 00007efdce98eec9 [ 1877.487184][T32045] RDX: 000000000004c848 RSI: 0000200000006140 RDI: 0000000000000006 [ 1877.487204][T32045] RBP: 00007efdcf839090 R08: 0000000000000000 R09: 0000000000000000 [ 1877.487224][T32045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1877.487242][T32045] R13: 00007efdcebe6128 R14: 00007efdcebe6090 R15: 00007ffe39c4db88 [ 1877.487288][T32045] [ 1878.859405][T32061] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5353'. [ 1878.883162][T32061] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5353'. [ 1878.893928][T32061] netlink: 'syz.1.5353': attribute type 2 has an invalid length. [ 1878.907021][T32061] netlink: 'syz.1.5353': attribute type 3 has an invalid length. [ 1878.924988][T32061] netlink: 218 bytes leftover after parsing attributes in process `syz.1.5353'. [ 1878.947659][T32061] netlink: 'syz.1.5353': attribute type 2 has an invalid length. [ 1878.955467][T32061] netlink: 'syz.1.5353': attribute type 3 has an invalid length. [ 1878.965891][T32063] netlink: 'syz.1.5353': attribute type 2 has an invalid length. [ 1878.977804][T32063] netlink: 'syz.1.5353': attribute type 3 has an invalid length. [ 1878.985673][T32061] netlink: 218 bytes leftover after parsing attributes in process `syz.1.5353'. [ 1878.995249][T32063] netlink: 218 bytes leftover after parsing attributes in process `syz.1.5353'. [ 1878.996464][T21624] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 8 with max blocks 12 with error 117 [ 1879.022895][T21624] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1879.022895][T21624] [ 1880.449055][T32089] FAULT_INJECTION: forcing a failure. [ 1880.449055][T32089] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.483052][T32089] CPU: 0 UID: 0 PID: 32089 Comm: syz.2.5358 Not tainted syzkaller #0 PREEMPT(full) [ 1880.483093][T32089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1880.483112][T32089] Call Trace: [ 1880.483123][T32089] [ 1880.483135][T32089] dump_stack_lvl+0x16c/0x1f0 [ 1880.483187][T32089] should_fail_ex+0x512/0x640 [ 1880.483234][T32089] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1880.483277][T32089] should_failslab+0xc2/0x120 [ 1880.483310][T32089] __kmalloc_cache_noprof+0x72/0x780 [ 1880.483379][T32089] ? genl_start+0x1e8/0x980 [ 1880.483426][T32089] ? genl_start+0x1e8/0x980 [ 1880.483455][T32089] genl_start+0x1e8/0x980 [ 1880.483493][T32089] __netlink_dump_start+0x60e/0x990 [ 1880.483548][T32089] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1880.483588][T32089] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1880.483661][T32089] ? __pfx_genl_get_cmd+0x10/0x10 [ 1880.483702][T32089] ? __pfx_genl_start+0x10/0x10 [ 1880.483733][T32089] ? __pfx_genl_dumpit+0x10/0x10 [ 1880.483764][T32089] ? __pfx_genl_done+0x10/0x10 [ 1880.483803][T32089] ? __radix_tree_lookup+0x21f/0x2c0 [ 1880.483852][T32089] genl_rcv_msg+0x46e/0x800 [ 1880.483891][T32089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1880.483927][T32089] ? __pfx_tipc_nl_node_dump_monitor_peer+0x10/0x10 [ 1880.483993][T32089] netlink_rcv_skb+0x158/0x420 [ 1880.484044][T32089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1880.484080][T32089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1880.484149][T32089] ? netlink_deliver_tap+0x1ae/0xd30 [ 1880.484224][T32089] genl_rcv+0x28/0x40 [ 1880.484253][T32089] netlink_unicast+0x5aa/0x870 [ 1880.484313][T32089] ? __pfx_netlink_unicast+0x10/0x10 [ 1880.484379][T32089] netlink_sendmsg+0x8c8/0xdd0 [ 1880.484445][T32089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1880.484516][T32089] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1880.484557][T32089] ____sys_sendmsg+0xa98/0xc70 [ 1880.484596][T32089] ? copy_msghdr_from_user+0x10a/0x160 [ 1880.484645][T32089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1880.484701][T32089] ___sys_sendmsg+0x134/0x1d0 [ 1880.484752][T32089] ? __pfx____sys_sendmsg+0x10/0x10 [ 1880.484797][T32089] ? __lock_acquire+0x622/0x1c90 [ 1880.484882][T32089] __sys_sendmsg+0x16d/0x220 [ 1880.484931][T32089] ? __pfx___sys_sendmsg+0x10/0x10 [ 1880.485007][T32089] do_syscall_64+0xcd/0xfa0 [ 1880.485058][T32089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.485090][T32089] RIP: 0033:0x7efdce98eec9 [ 1880.485116][T32089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1880.485147][T32089] RSP: 002b:00007efdcf839038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1880.485178][T32089] RAX: ffffffffffffffda RBX: 00007efdcebe6090 RCX: 00007efdce98eec9 [ 1880.485200][T32089] RDX: 000000000004c848 RSI: 0000200000006140 RDI: 0000000000000006 [ 1880.485221][T32089] RBP: 00007efdcf839090 R08: 0000000000000000 R09: 0000000000000000 [ 1880.485241][T32089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1880.485261][T32089] R13: 00007efdcebe6128 R14: 00007efdcebe6090 R15: 00007ffe39c4db88 [ 1880.485306][T32089] [ 1881.596792][T32113] can: request_module (can-proto-5) failed. [ 1882.978255][T32132] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input216 [ 1884.511216][T32160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5376'. [ 1884.619683][T32162] FAULT_INJECTION: forcing a failure. [ 1884.619683][T32162] name failslab, interval 1, probability 0, space 0, times 0 [ 1884.632696][T32162] CPU: 1 UID: 0 PID: 32162 Comm: syz.1.5377 Not tainted syzkaller #0 PREEMPT(full) [ 1884.632742][T32162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1884.632763][T32162] Call Trace: [ 1884.632773][T32162] [ 1884.632786][T32162] dump_stack_lvl+0x16c/0x1f0 [ 1884.632842][T32162] should_fail_ex+0x512/0x640 [ 1884.632894][T32162] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1884.632954][T32162] should_failslab+0xc2/0x120 [ 1884.632988][T32162] __kmalloc_cache_noprof+0x72/0x780 [ 1884.633031][T32162] ? snd_midi_event_new+0x6f/0x210 [ 1884.633074][T32162] ? snd_midi_event_new+0x6f/0x210 [ 1884.633105][T32162] ? kasan_save_track+0x14/0x30 [ 1884.633154][T32162] snd_midi_event_new+0x6f/0x210 [ 1884.633190][T32162] snd_virmidi_output_open+0x106/0x670 [ 1884.633235][T32162] open_substream+0x480/0x990 [ 1884.633287][T32162] rawmidi_open_priv+0x543/0x6e0 [ 1884.633342][T32162] snd_rawmidi_open+0x4cb/0xbf0 [ 1884.633400][T32162] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1884.633451][T32162] ? __pfx_default_wake_function+0x10/0x10 [ 1884.633505][T32162] ? kobject_get_unless_zero+0x156/0x1e0 [ 1884.633564][T32162] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1884.633613][T32162] snd_open+0x22d/0x4c0 [ 1884.633651][T32162] ? __pfx_snd_open+0x10/0x10 [ 1884.633687][T32162] chrdev_open+0x234/0x6a0 [ 1884.633740][T32162] ? __pfx_apparmor_file_open+0x10/0x10 [ 1884.633776][T32162] ? __pfx_chrdev_open+0x10/0x10 [ 1884.633832][T32162] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1884.633890][T32162] do_dentry_open+0x982/0x1530 [ 1884.633948][T32162] ? __pfx_chrdev_open+0x10/0x10 [ 1884.634008][T32162] vfs_open+0x82/0x3f0 [ 1884.634050][T32162] path_openat+0x1de4/0x2cb0 [ 1884.634112][T32162] ? __pfx_path_openat+0x10/0x10 [ 1884.634163][T32162] ? __lock_acquire+0xb8a/0x1c90 [ 1884.634204][T32162] do_filp_open+0x20b/0x470 [ 1884.634254][T32162] ? __pfx_do_filp_open+0x10/0x10 [ 1884.634331][T32162] ? alloc_fd+0x471/0x7d0 [ 1884.634389][T32162] do_sys_openat2+0x11b/0x1d0 [ 1884.634427][T32162] ? __pfx_do_sys_openat2+0x10/0x10 [ 1884.634482][T32162] __x64_sys_openat+0x174/0x210 [ 1884.634536][T32162] ? __pfx___x64_sys_openat+0x10/0x10 [ 1884.634592][T32162] do_syscall_64+0xcd/0xfa0 [ 1884.634644][T32162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.634677][T32162] RIP: 0033:0x7f961678eec9 [ 1884.634704][T32162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1884.634738][T32162] RSP: 002b:00007f96176cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1884.634771][T32162] RAX: ffffffffffffffda RBX: 00007f96169e5fa0 RCX: 00007f961678eec9 [ 1884.634793][T32162] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1884.634813][T32162] RBP: 00007f9616811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1884.634833][T32162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1884.634852][T32162] R13: 00007f96169e6038 R14: 00007f96169e5fa0 R15: 00007ffe1ea03468 [ 1884.634897][T32162] [ 1884.791413][T32167] 0x000200000001-0xa29656a63616329 : "" [ 1884.955407][T32167] mtd: partition "" is out of reach -- disabled [ 1884.977445][T32167] ftl_cs: FTL header not found. [ 1886.972859][T32187] FAULT_INJECTION: forcing a failure. [ 1886.972859][T32187] name failslab, interval 1, probability 0, space 0, times 0 [ 1886.990163][T32187] CPU: 0 UID: 0 PID: 32187 Comm: syz.2.5384 Not tainted syzkaller #0 PREEMPT(full) [ 1886.990197][T32187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1886.990211][T32187] Call Trace: [ 1886.990219][T32187] [ 1886.990229][T32187] dump_stack_lvl+0x16c/0x1f0 [ 1886.990268][T32187] should_fail_ex+0x512/0x640 [ 1886.990306][T32187] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1886.990341][T32187] should_failslab+0xc2/0x120 [ 1886.990364][T32187] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1886.990398][T32187] ? __d_alloc+0x32/0xae0 [ 1886.990437][T32187] ? __d_alloc+0x32/0xae0 [ 1886.990468][T32187] ? is_bpf_text_address+0x8a/0x1a0 [ 1886.990493][T32187] __d_alloc+0x32/0xae0 [ 1886.990524][T32187] ? bpf_ksym_find+0x124/0x1c0 [ 1886.990561][T32187] d_alloc_parallel+0x111/0x1480 [ 1886.990587][T32187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.990613][T32187] ? unwind_get_return_address+0x59/0xa0 [ 1886.990647][T32187] ? arch_stack_walk+0xa6/0x100 [ 1886.990683][T32187] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1886.990719][T32187] ? lockdep_init_map_type+0x5c/0x280 [ 1886.990746][T32187] ? lockdep_init_map_type+0x5c/0x280 [ 1886.990776][T32187] __lookup_slow+0x193/0x460 [ 1886.990803][T32187] ? __pfx___lookup_slow+0x10/0x10 [ 1886.990833][T32187] ? folio_mapping+0x90/0x190 [ 1886.990876][T32187] ? folio_mapping+0x90/0x190 [ 1886.990911][T32187] ? d_lookup+0xe7/0x190 [ 1886.990941][T32187] lookup_noperm+0xe1/0x110 [ 1886.990988][T32187] simple_start_creating+0xd1/0x1b0 [ 1886.991022][T32187] debugfs_start_creating.part.0+0x82/0x190 [ 1886.991055][T32187] __debugfs_create_file+0xa7/0x6b0 [ 1886.991089][T32187] debugfs_create_file_full+0x41/0x60 [ 1886.991123][T32187] kvm_dev_ioctl+0x14ca/0x1a80 [ 1886.991170][T32187] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1886.991221][T32187] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1886.991260][T32187] __x64_sys_ioctl+0x18e/0x210 [ 1886.991289][T32187] do_syscall_64+0xcd/0xfa0 [ 1886.991328][T32187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.991352][T32187] RIP: 0033:0x7efdce98eec9 [ 1886.991372][T32187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1886.991396][T32187] RSP: 002b:00007efdcf85a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1886.991419][T32187] RAX: ffffffffffffffda RBX: 00007efdcebe5fa0 RCX: 00007efdce98eec9 [ 1886.991435][T32187] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000a [ 1886.991450][T32187] RBP: 00007efdcea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1886.991465][T32187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1886.991480][T32187] R13: 00007efdcebe6038 R14: 00007efdcebe5fa0 R15: 00007ffe39c4db88 [ 1886.991529][T32187] [ 1889.101149][T32219] bond0: option arp_interval: invalid value () [ 1889.111576][T32219] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1889.139167][T32216] FAULT_INJECTION: forcing a failure. [ 1889.139167][T32216] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.170968][T32216] CPU: 1 UID: 0 PID: 32216 Comm: syz.2.5390 Not tainted syzkaller #0 PREEMPT(full) [ 1889.171009][T32216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1889.171024][T32216] Call Trace: [ 1889.171032][T32216] [ 1889.171041][T32216] dump_stack_lvl+0x16c/0x1f0 [ 1889.171081][T32216] should_fail_ex+0x512/0x640 [ 1889.171118][T32216] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1889.171151][T32216] should_failslab+0xc2/0x120 [ 1889.171174][T32216] __kmalloc_cache_noprof+0x72/0x780 [ 1889.171204][T32216] ? do_raw_spin_lock+0x12c/0x2b0 [ 1889.171232][T32216] ? alloc_fdtable+0xbd/0x2d0 [ 1889.171266][T32216] ? alloc_fdtable+0xbd/0x2d0 [ 1889.171293][T32216] alloc_fdtable+0xbd/0x2d0 [ 1889.171324][T32216] dup_fd+0x83b/0xb90 [ 1889.171383][T32216] ksys_unshare+0x831/0xa40 [ 1889.171408][T32216] ? __pfx_ksys_unshare+0x10/0x10 [ 1889.171433][T32216] ? xfd_validate_state+0x61/0x180 [ 1889.171474][T32216] __x64_sys_unshare+0x31/0x40 [ 1889.171497][T32216] do_syscall_64+0xcd/0xfa0 [ 1889.171536][T32216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.171561][T32216] RIP: 0033:0x7efdce98eec9 [ 1889.171580][T32216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1889.171603][T32216] RSP: 002b:00007efdcf85a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1889.171639][T32216] RAX: ffffffffffffffda RBX: 00007efdcebe5fa0 RCX: 00007efdce98eec9 [ 1889.171654][T32216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1889.171668][T32216] RBP: 00007efdcea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1889.171683][T32216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1889.171696][T32216] R13: 00007efdcebe6038 R14: 00007efdcebe5fa0 R15: 00007ffe39c4db88 [ 1889.171726][T32216] [ 1889.460537][T22568] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1889.480302][T22568] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1889.489527][T22568] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1889.499020][T22568] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1889.506883][T22568] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1890.006663][T32220] chnl_net:caif_netlink_parms(): no params data found [ 1890.138571][T32235] FAULT_INJECTION: forcing a failure. [ 1890.138571][T32235] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.247338][T32235] CPU: 1 UID: 0 PID: 32235 Comm: syz.2.5394 Not tainted syzkaller #0 PREEMPT(full) [ 1890.247394][T32235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1890.247414][T32235] Call Trace: [ 1890.247426][T32235] [ 1890.247439][T32235] dump_stack_lvl+0x16c/0x1f0 [ 1890.247494][T32235] should_fail_ex+0x512/0x640 [ 1890.247547][T32235] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1890.247600][T32235] should_failslab+0xc2/0x120 [ 1890.247633][T32235] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1890.247679][T32235] ? d_lookup+0xe7/0x190 [ 1890.247714][T32235] ? alloc_inode+0x64/0x240 [ 1890.247755][T32235] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1890.247793][T32235] ? alloc_inode+0x64/0x240 [ 1890.247824][T32235] alloc_inode+0x64/0x240 [ 1890.247859][T32235] new_inode+0x22/0x1c0 [ 1890.247895][T32235] __debugfs_create_file+0x11c/0x6b0 [ 1890.247944][T32235] debugfs_create_file_full+0x41/0x60 [ 1890.247992][T32235] kvm_dev_ioctl+0x14ca/0x1a80 [ 1890.248059][T32235] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1890.248125][T32235] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1890.248180][T32235] __x64_sys_ioctl+0x18e/0x210 [ 1890.248222][T32235] do_syscall_64+0xcd/0xfa0 [ 1890.248276][T32235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.248310][T32235] RIP: 0033:0x7efdce98eec9 [ 1890.248335][T32235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1890.248374][T32235] RSP: 002b:00007efdcf818038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1890.248407][T32235] RAX: ffffffffffffffda RBX: 00007efdcebe6180 RCX: 00007efdce98eec9 [ 1890.248429][T32235] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000a [ 1890.248449][T32235] RBP: 00007efdcea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1890.248469][T32235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1890.248488][T32235] R13: 00007efdcebe6218 R14: 00007efdcebe6180 R15: 00007ffe39c4db88 [ 1890.248534][T32235] [ 1890.248546][T32235] debugfs: out of free dentries, can not create file 'mmu_pte_write' [ 1890.867986][T14560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1890.880492][T14560] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1890.891135][T28179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1890.902359][T28179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1890.903073][T32220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.910900][T28179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1890.952892][T32220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.968011][T32220] bridge_slave_0: entered allmulticast mode [ 1890.976638][T32220] bridge_slave_0: entered promiscuous mode [ 1890.988630][T32220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1890.996993][T32220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.004203][T32220] bridge_slave_1: entered allmulticast mode [ 1891.014857][T32220] bridge_slave_1: entered promiscuous mode [ 1891.028789][T32251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5395'. [ 1891.193298][T32220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1891.232351][T32220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1891.539638][T32220] team0: Port device team_slave_0 added [ 1891.567925][T32220] team0: Port device team_slave_1 added [ 1891.590480][T28179] Bluetooth: hci4: command tx timeout [ 1891.697217][T32220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1891.719020][T32220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1891.755821][T32220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1891.775475][T32220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1891.777043][T32261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5397'. [ 1891.786796][T32220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1891.821251][T32220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1892.018331][T32220] hsr_slave_0: entered promiscuous mode [ 1892.023838][T32220] hsr_slave_1: entered promiscuous mode [ 1892.024468][T32220] debugfs: 'hsr0' already exists in 'hsr' [ 1892.024683][T32220] Cannot create hsr debugfs directory [ 1892.459385][T32267] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input218 [ 1892.818924][T32246] chnl_net:caif_netlink_parms(): no params data found [ 1892.996512][T32246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.003847][T32246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.014167][T32246] bridge_slave_0: entered allmulticast mode [ 1893.022283][T32246] bridge_slave_0: entered promiscuous mode [ 1893.028996][T28179] Bluetooth: hci5: command tx timeout [ 1893.049875][T32246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.058040][T32246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.069843][T32246] bridge_slave_1: entered allmulticast mode [ 1893.077496][T32246] bridge_slave_1: entered promiscuous mode [ 1893.125162][T32246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1893.145859][T32246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1893.244636][T32246] team0: Port device team_slave_0 added [ 1893.262378][T32246] team0: Port device team_slave_1 added [ 1893.282275][T32220] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1893.305688][T32220] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1893.316605][T32220] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1893.327518][T32246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1893.334517][T32246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1893.360673][T32246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1893.372009][T32220] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1893.383549][T32246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1893.390673][T32246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1893.416963][T32246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1893.483583][T32246] hsr_slave_0: entered promiscuous mode [ 1893.490527][T32246] hsr_slave_1: entered promiscuous mode [ 1893.496990][T32246] debugfs: 'hsr0' already exists in 'hsr' [ 1893.502763][T32246] Cannot create hsr debugfs directory [ 1893.673241][T28179] Bluetooth: hci4: command tx timeout [ 1893.717783][T32220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1893.776425][T32246] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1893.793639][T32220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1893.800767][T32246] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1893.812157][T32246] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1893.824932][T32246] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1893.849647][T22922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.856846][T22922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1893.874831][T22922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.882071][T22922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1894.020572][T32246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1894.045990][T32246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1894.060971][T21633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1894.068177][T21633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1894.094963][T21624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1894.102228][T21624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1894.385695][T32220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1894.541937][T32246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1894.929531][T32220] veth0_vlan: entered promiscuous mode [ 1894.954533][T32220] veth1_vlan: entered promiscuous mode [ 1894.995079][T32220] veth0_macvtap: entered promiscuous mode [ 1895.007949][T32220] veth1_macvtap: entered promiscuous mode [ 1895.044216][T32220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1895.063264][T32220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1895.084277][T22922] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.095385][T22922] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.106911][T28179] Bluetooth: hci5: command tx timeout [ 1895.120500][T22922] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.138782][T22922] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.221236][T32246] veth0_vlan: entered promiscuous mode [ 1895.259728][T22922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.272370][T32246] veth1_vlan: entered promiscuous mode [ 1895.277735][T22922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.321202][T21624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.334955][T21624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.374369][T32246] veth0_macvtap: entered promiscuous mode [ 1895.390022][T32246] veth1_macvtap: entered promiscuous mode [ 1895.418417][T32246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1895.441425][T32246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1895.465867][T21624] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.488540][T21624] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.516022][T21624] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.526668][T21624] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.657388][T21624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.665262][T21624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.739677][T22923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.750295][T28179] Bluetooth: hci4: command tx timeout [ 1895.768705][T32311] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1895.772309][T22923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.819500][ T30] audit: type=1804 audit(4294967459.660:43): pid=32311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.5389" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=1073 res=1 errno=0 [ 1897.186441][T28179] Bluetooth: hci5: command tx timeout [ 1897.826978][T28179] Bluetooth: hci4: command tx timeout [ 1899.269276][T28179] Bluetooth: hci5: command tx timeout [ 1924.951968][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.958478][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.393418][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.401222][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2014.070894][T22568] Bluetooth: hci5: command 0x0406 tx timeout [ 2014.080560][T22568] Bluetooth: hci4: command 0x0406 tx timeout [ 2022.236350][ T31] INFO: task syz.0.5344:32027 blocked for more than 143 seconds. [ 2022.244459][ T31] Not tainted syzkaller #0 [ 2022.249947][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2022.259002][ T31] task:syz.0.5344 state:D stack:27736 pid:32027 tgid:32026 ppid:28899 task_flags:0x400140 flags:0x00080002 [ 2022.271370][ T31] Call Trace: [ 2022.274692][ T31] [ 2022.278549][ T31] __schedule+0x1190/0x5de0 [ 2022.283133][ T31] ? check_path.constprop.0+0x24/0x50 [ 2022.288640][ T31] ? __pfx___schedule+0x10/0x10 [ 2022.293551][ T31] ? find_held_lock+0x2b/0x80 [ 2022.298320][ T31] ? schedule+0x2d7/0x3a0 [ 2022.302759][ T31] ? expkey_flush+0x20/0x90 [ 2022.307375][ T31] schedule+0xe7/0x3a0 [ 2022.311547][ T31] schedule_preempt_disabled+0x13/0x30 [ 2022.317086][ T31] __mutex_lock+0x818/0x1060 [ 2022.321738][ T31] ? expkey_flush+0x20/0x90 [ 2022.326353][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2022.331437][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 2022.336730][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2022.341642][ T31] ? __pfx_cache_clean+0x10/0x10 [ 2022.346667][ T31] ? __pfx___might_resched+0x10/0x10 [ 2022.352014][ T31] ? __pfx_expkey_flush+0x10/0x10 [ 2022.357132][ T31] ? expkey_flush+0x20/0x90 [ 2022.361681][ T31] expkey_flush+0x20/0x90 [ 2022.366090][ T31] write_flush.constprop.0+0x2af/0x3d0 [ 2022.371593][ T31] ? __pfx_write_flush.constprop.0+0x10/0x10 [ 2022.377675][ T31] ? iovec_from_user+0xbb/0x140 [ 2022.382626][ T31] ? __pfx_write_flush_procfs+0x10/0x10 [ 2022.388284][ T31] proc_reg_write+0x240/0x330 [ 2022.393021][ T31] ? __pfx_proc_reg_write+0x10/0x10 [ 2022.398332][ T31] vfs_writev+0x5df/0xde0 [ 2022.402730][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 2022.407672][ T31] ? __mutex_lock+0x1c5/0x1060 [ 2022.412505][ T31] ? kmem_cache_free+0x2d4/0x6c0 [ 2022.417514][ T31] ? putname+0x154/0x1a0 [ 2022.421826][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2022.426955][ T31] ? __fget_files+0x20e/0x3c0 [ 2022.431699][ T31] ? do_writev+0x132/0x340 [ 2022.436200][ T31] do_writev+0x132/0x340 [ 2022.440491][ T31] ? __pfx_do_writev+0x10/0x10 [ 2022.445289][ T31] do_syscall_64+0xcd/0xfa0 [ 2022.449902][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2022.455835][ T31] RIP: 0033:0x7fc6e998eec9 [ 2022.460347][ T31] RSP: 002b:00007fc6ea7a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2022.468968][ T31] RAX: ffffffffffffffda RBX: 00007fc6e9be5fa0 RCX: 00007fc6e998eec9 [ 2022.477060][ T31] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000003 [ 2022.485071][ T31] RBP: 00007fc6e9a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2022.493118][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2022.501193][ T31] R13: 00007fc6e9be6038 R14: 00007fc6e9be5fa0 R15: 00007ffe629cead8 [ 2022.509281][ T31] [ 2022.512356][ T31] [ 2022.512356][ T31] Showing all locks held in the system: [ 2022.520157][ T31] 1 lock held by khungtaskd/31: [ 2022.525030][ T31] #0: ffffffff8e3c42e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 2022.534996][ T31] 1 lock held by klogd/5185: [ 2022.539654][ T31] #0: ffff8880b843a4d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 2022.549766][ T31] 2 locks held by syz.6.5341/32010: [ 2022.555011][ T31] #0: ffffffff901a2390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2022.563292][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 2022.573583][ T31] 3 locks held by syz.0.5344/32027: [ 2022.578850][ T31] #0: ffff888079d2a2b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 2022.588028][ T31] #1: ffff88803091a420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x132/0x340 [ 2022.597026][ T31] #2: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x20/0x90 [ 2022.605909][ T31] [ 2022.608388][ T31] ============================================= [ 2022.608388][ T31] [ 2022.616860][ T31] NMI backtrace for cpu 1 [ 2022.616878][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2022.616905][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2022.616920][ T31] Call Trace: [ 2022.616929][ T31] [ 2022.616938][ T31] dump_stack_lvl+0x116/0x1f0 [ 2022.616977][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2022.617004][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2022.617031][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2022.617061][ T31] watchdog+0xf3f/0x1170 [ 2022.617096][ T31] ? rcu_is_watching+0x12/0xc0 [ 2022.617130][ T31] ? __pfx_watchdog+0x10/0x10 [ 2022.617158][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2022.617195][ T31] ? __kthread_parkme+0x19e/0x250 [ 2022.617233][ T31] ? __pfx_watchdog+0x10/0x10 [ 2022.617262][ T31] kthread+0x3c5/0x780 [ 2022.617288][ T31] ? __pfx_kthread+0x10/0x10 [ 2022.617316][ T31] ? rcu_is_watching+0x12/0xc0 [ 2022.617348][ T31] ? __pfx_kthread+0x10/0x10 [ 2022.617374][ T31] ret_from_fork+0x675/0x7d0 [ 2022.617401][ T31] ? __pfx_kthread+0x10/0x10 [ 2022.617427][ T31] ret_from_fork_asm+0x1a/0x30 [ 2022.617466][ T31] [ 2022.617474][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2022.738619][ C0] NMI backtrace for cpu 0 [ 2022.738641][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2022.738672][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2022.738689][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x70 [ 2022.738731][ C0] Code: a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 7c 16 00 00 85 c0 74 2b 8b 82 58 16 00 00 <83> f8 02 75 20 48 8b 8a 60 16 00 00 8b 92 5c 16 00 00 48 8b 01 48 [ 2022.738758][ C0] RSP: 0018:ffffffff8e007cf8 EFLAGS: 00000046 [ 2022.738779][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81a9271d [ 2022.738797][ C0] RDX: ffffffff8e097a00 RSI: ffffffff81a92732 RDI: 0000000000000001 [ 2022.738814][ C0] RBP: ffffffff93a46c80 R08: 0000000000000001 R09: 0000000000000000 [ 2022.738831][ C0] R10: 0000000000000010 R11: 0000000000000001 R12: 0000000000000002 [ 2022.738847][ C0] R13: ffff8880b84285f8 R14: 0000000000000010 R15: ffff8880b8427d00 [ 2022.738865][ C0] FS: 0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 2022.738890][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2022.738908][ C0] CR2: 00005576ad85ca38 CR3: 00000000281aa000 CR4: 00000000003526f0 [ 2022.738935][ C0] Call Trace: [ 2022.738943][ C0] [ 2022.738952][ C0] hrtimer_start_range_ns+0x532/0xfd0 [ 2022.738994][ C0] ? hrtimer_try_to_cancel+0x3a/0x2f0 [ 2022.739027][ C0] ? hrtimer_forward+0x19e/0x260 [ 2022.739061][ C0] tick_nohz_restart_sched_tick+0x1c4/0x2f0 [ 2022.739106][ C0] tick_nohz_idle_exit+0x21f/0x2e0 [ 2022.739150][ C0] do_idle+0x29d/0x500 [ 2022.739187][ C0] ? __pfx_do_idle+0x10/0x10 [ 2022.739222][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 2022.739259][ C0] cpu_startup_entry+0x4f/0x60 [ 2022.739296][ C0] rest_init+0x16b/0x2b0 [ 2022.739325][ C0] ? acpi_subsystem_init+0x133/0x180 [ 2022.739357][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2022.739394][ C0] start_kernel+0x3f6/0x4e0 [ 2022.739427][ C0] x86_64_start_reservations+0x18/0x30 [ 2022.739462][ C0] x86_64_start_kernel+0x130/0x190 [ 2022.739496][ C0] common_startup_64+0x13e/0x148 [ 2022.739543][ C0] [ 2022.740277][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2022.955070][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2022.964633][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2022.974715][ T31] Call Trace: [ 2022.978021][ T31] [ 2022.980961][ T31] dump_stack_lvl+0x3d/0x1f0 [ 2022.985588][ T31] vpanic+0x640/0x6f0 [ 2022.989596][ T31] panic+0xca/0xd0 [ 2022.993339][ T31] ? __pfx_panic+0x10/0x10 [ 2022.997798][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2023.003244][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 2023.009454][ T31] ? watchdog+0xe48/0x1170 [ 2023.013895][ T31] ? watchdog+0xe3b/0x1170 [ 2023.018338][ T31] watchdog+0xe59/0x1170 [ 2023.022620][ T31] ? rcu_is_watching+0x12/0xc0 [ 2023.027407][ T31] ? __pfx_watchdog+0x10/0x10 [ 2023.032102][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2023.037324][ T31] ? __kthread_parkme+0x19e/0x250 [ 2023.042461][ T31] ? __pfx_watchdog+0x10/0x10 [ 2023.047171][ T31] kthread+0x3c5/0x780 [ 2023.051257][ T31] ? __pfx_kthread+0x10/0x10 [ 2023.055868][ T31] ? rcu_is_watching+0x12/0xc0 [ 2023.060650][ T31] ? __pfx_kthread+0x10/0x10 [ 2023.065253][ T31] ret_from_fork+0x675/0x7d0 [ 2023.069855][ T31] ? __pfx_kthread+0x10/0x10 [ 2023.074479][ T31] ret_from_fork_asm+0x1a/0x30 [ 2023.079296][ T31] [ 2023.082691][ T31] Kernel Offset: disabled [ 2023.087030][ T31] Rebooting in 86400 seconds..