last executing test programs: 2m58.955628432s ago: executing program 3 (id=999): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x3, 0x4) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r1 = signalfd$auto(r0, &(0x7f0000000040)={0x9}, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x2240, 0x154) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x101000, 0x0) lseek$auto(r1, 0x3be, 0xb) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x55) write$auto(0x3, 0x0, 0xfdef) 2m58.695561524s ago: executing program 3 (id=1000): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x100080, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r1, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000100)={r0, 0x0, 0x7, 0xf, 0x7fffffffffffffff, 0x80000001, [0xebf3, 0xa9, 0xeaa4, 0x8, 0x6, 0x7fffffff]}) socket(0x2, 0x1, 0x106) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x200, 0x0) gettid() readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2m56.586736015s ago: executing program 3 (id=1013): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd5/queue/iosched/front_merges\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket(0xa, 0x2, 0x73) socket(0x2a, 0x2, 0x5) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x0, 0x80802, 0x6) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000]}, 0x1fe, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) 2m54.534043536s ago: executing program 3 (id=1025): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x18b00, 0x0) sendmmsg$auto(r0, 0x0, 0x9, 0x2884) read$auto(r0, 0x0, 0x8) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r2, 0x5408, 0x0) (fail_nth: 1) 2m52.270734927s ago: executing program 3 (id=1038): write$auto(0x3, 0x0, 0x4fffffdf2) 2m52.138699679s ago: executing program 3 (id=1040): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x8004) (async) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x8004) getitimer$auto(0x0, 0x0) mmap$auto(0x0, 0x5fffff, 0xde, 0x90, r0, 0x300000000000) socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) (async) r1 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/001/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0x10, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0x10, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x1d20) timer_settime$auto(0x66c8ece6, 0x617e, &(0x7f0000000000)={{0x9, 0xc}, {0xa, 0x3ff}}, 0x0) lseek$auto(r2, 0x9, 0xff) ioctl$auto(0x3, 0x8108551b, 0x1) (async) ioctl$auto(0x3, 0x8108551b, 0x1) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x476, 0x0}) (async) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x476, 0x0}) close_range$auto(0x2, 0x8, 0x0) splice$auto(r1, &(0x7f0000001d00)=0x1, 0xffffffffffffffff, 0x0, 0x6, 0x2) (async) splice$auto(r1, &(0x7f0000001d00)=0x1, 0xffffffffffffffff, 0x0, 0x6, 0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioctl$auto_UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x4, 0x10000}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r3, r3, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0\x00', 0x68082, 0x0) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0\x00', 0x68082, 0x0) mmap$auto(0x0, 0x4020006, 0x7, 0xeb1, 0x401, 0x8000) getpgid$auto(0xffffffffffffffff) (async) getpgid$auto(0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vivid.0/video4linux/video63/dev\x00', 0x480e43, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vivid.0/video4linux/video63/dev\x00', 0x480e43, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr4\x00', 0xaefbdff8f34ecab7, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr4\x00', 0xaefbdff8f34ecab7, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x4000000000, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x48002) pipe2$auto(0x0, 0x4) 2m36.868786044s ago: executing program 32 (id=1040): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x8004) (async) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x8004) getitimer$auto(0x0, 0x0) mmap$auto(0x0, 0x5fffff, 0xde, 0x90, r0, 0x300000000000) socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) (async) r1 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/001/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0x10, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0x10, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x1d20) timer_settime$auto(0x66c8ece6, 0x617e, &(0x7f0000000000)={{0x9, 0xc}, {0xa, 0x3ff}}, 0x0) lseek$auto(r2, 0x9, 0xff) ioctl$auto(0x3, 0x8108551b, 0x1) (async) ioctl$auto(0x3, 0x8108551b, 0x1) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x476, 0x0}) (async) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x476, 0x0}) close_range$auto(0x2, 0x8, 0x0) splice$auto(r1, &(0x7f0000001d00)=0x1, 0xffffffffffffffff, 0x0, 0x6, 0x2) (async) splice$auto(r1, &(0x7f0000001d00)=0x1, 0xffffffffffffffff, 0x0, 0x6, 0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioctl$auto_UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x4, 0x10000}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r3, r3, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0\x00', 0x68082, 0x0) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0\x00', 0x68082, 0x0) mmap$auto(0x0, 0x4020006, 0x7, 0xeb1, 0x401, 0x8000) getpgid$auto(0xffffffffffffffff) (async) getpgid$auto(0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vivid.0/video4linux/video63/dev\x00', 0x480e43, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vivid.0/video4linux/video63/dev\x00', 0x480e43, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr4\x00', 0xaefbdff8f34ecab7, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr4\x00', 0xaefbdff8f34ecab7, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x4000000000, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x48002) pipe2$auto(0x0, 0x4) 5.716524385s ago: executing program 0 (id=1738): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) r4 = socket(0x1d, 0x2, 0x6) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r4, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r11, r10, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x118, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_RSS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x397d64b3}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x6}, @ETHTOOL_A_RSS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5fa3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x8000}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x3a}, @ETHTOOL_A_RSS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x422}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5a}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x118}}, 0x0) r12 = socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x894b, 0x38) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x1c}, 0x5, 0xffffffffffffffff, 0x7, 0x0) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r12, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x200}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 4.756563416s ago: executing program 0 (id=1743): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x7, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r2, 0x0, 0xffffff7f) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 4.019701422s ago: executing program 2 (id=1745): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf251a0000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = socket(0x2, 0x1, 0x100) execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=&(0x7f0000000140)='netdevsim0\x00', &(0x7f0000000200)=&(0x7f00000001c0)='ethtool\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8003) setrlimit$auto(0x1000000007, 0x0) socket(0x1d, 0x2, 0x7) io_submit$auto(0x7, 0x7, &(0x7f0000000040)=&(0x7f0000000000)={0x7, 0x839a, 0x0, 0x2, 0xe7, r3, 0x0, 0x3, 0x5}) init_module$auto(&(0x7f0000000ac0)="2b58db3e0d9bc92c9613445acd31272b66cafcee41e460f9c5f40a2992a0bbf6c298c5c783aaac809b7d89134bfe43a14a6bb79e0b35c2863f2ccb66ef1176893018b3f3d9bd017a55cdcea65498ce3dcae7cbfe7722b8c455178e885742787623ad973ddb73ca85a86467d9b0148b9817047a6f8503888728ada322c97a8a160b51af9b2813a9ce8cba41b4e126b7e983a259f8b489d530889b2503229d1230680cac422af49fc7ffdac99be2e691772fb38bd8f233570c5cdd54581264e6e2a3af0748215d2acff207d8d429640587c89ceae24c8fc08369114bc797c72beee49ef847f17d0b3e7809d8b3a6317693458b3d2cc53f80126bca8584cb5f828984d8ed251172b6ca3c422a8503956c789f380228a4eb6182d76a46960f9b7f426766f79275d4bea83be5535c6fdc6b4111019ed17db4da31d038aea281a92cdfcbbdc0d5edc2112441fe71a7c90cc8f492280361888a914f1e01c251c12bb9183edba84bd322dd9f98ffa2f34afa84e7c7d0f62bf42445a9947f8ef509d4be5859b2a20989160a189540f7db3d227b842a929b55e657a40c2894514fd5f7a26fc418f07b00f4be9ac45bae11a201d8307ac94df54b4d49f6ef7bd33e70e63806addbacfd086556917235fb3b488413a7c70a976bacb39a2f4f5c3e4f9bf9dc4efa657fb392f0d8d0ecef02a4e4928ff68eec4d6791e3594b1aa1526bea77c479232c7e479d203554f2e5360847a2bd93f6ea16099f66ae38d770a59baea8443f86a196bd40854219558d7c2c818feb1bf175301d9c39ed44201f65e9eff2993121c2ad544751e2124681c873c645aa46586f214cf94cc50f7350197d8f6b0df34d6d6711fd52b72862625c9083e8561fe33acaea2f341ca394a228349305f1467f8c9879d5a1a5e0271d93d9f44d7608c31150ad3f4b9c4a4560a7e6edb3abab9cdd857413e8d2fadaf73ba5e8a4356c578f17679db8b813b253e305541a78fcdd1107286815d2f15a57558453fc7e500a284a320090ed7f3f1558c5b5d39a1ef876a6bf7f568226ea9110207552e360f1545e333c6820606c11f32541f7c2f8033b2f785c31ab5825e33c34517ceff32cae04717af52d9132463e496c2d846042fd323866ca36a040af45cf00b4300cdb7083e24d0009ab2ba15513f3ac7ecfb9e9bc229ba778664df9d20c1b6585dfbd5fef7393c7634eddcb0693d348ce2f1e459433beb01702529ed61c13fce3ad2c50950cfd5fd48e92a9f96b2c022bbe85dbcc3fbfeedd5889e7fe9810ff4703471e5d162db0d27619d5c01483202c42c583e63d70516fde49b60770f2b5a73dd3a03f0effa537f0fc9c49fcd1a1bd734800dbea8a7a58511254462e00d8013fccd33cfb4daebf6671e94d5f591154d802ac31d3480ba982c036f195e73057c5b193cc8c172362abbb3be1e61718c2a779e1cf5e28fb02e5bb1a2295261a273cc250317ac5a5279bd4f921ad1a8a829cced8ac0cd6d1869fc72e8187cd7fd44b6bd968dfec00fa86fd7fffe0c9dd032b725b2316d325d1f69b2e4539a583a30dbc07514d05f4f392079f64bd83dfdfa80b3ba78d93c91c553413d44d3690dbc419354f349a6de9ee73f83985c5573b6a4ec20dd6923f782a1c0ed57afb171d1c33b6f86879ad32fd77eed1ee8aaa3169c5f572a56710c219f7e14987592d6785b1e7d0e08a3660e32f623497dc00a9f5ab3bb23c60b6cd9953582dcce527c1a1ad12ea0a1fa61eecf33b88d934f11e81cc654c129df28fe68404c341add01917ea525a711fe456eee3671cdf4993dbf3a33608df74e91e3ca2f6e1c98b4c84193790496c17e10eb5389f2076af9f16044ec9789a90979781f32a7d75a999da8dc4180aad9dc450c5b520f3375a689ecdc11199e7356e26e4170d9f7533ac3df47fd08f607ff4853d078e538731687ca648ec80ae7fb04d197544d4b53a73d20b5710ac2282c15b4e9c725d407bbbf11ec14b6eb5ffd10d2a9eb8c73939f66417dad2a55ad69beba4cc7122c82779e6d706f0d89410f1137ff74afaec531089eec9b568066ccb5e9fe5fe751ccf285c85cb461a8f91a239b381057f4793c0add5454147b09b354460424cc359cf10e5467c7a52aaf8fcfea7d4f2d499d97bf4669f2a7b7ac26f69a9bc44194661da12df9bd090cbc28fc29fa5ebd80f95f1d0af94e2450784acda1ad9ebf3b26b49bfcd19127bd3e76f3221097fcd214fb1dee2d78ac5c5494ffe086b4089d686fd72dc3af6ec52b9464611fca7b6da68b12d4f618d9eb00b981ae21ff8f4b68df553b7d54e2fb75b82da41582a247aa158a53ef779664653a64b221297f1ef3fbd0fa1e4031d83f30960237c1df92ac050065cf82a2b5ab5f9570aa99d9890163c21d672fee97880a79187d311abc84bca86a3df573ede8803841b1f5b087ecc32b8952a7042fcd0882093b3b94babacabec75bb1a7bb4fc7a90acabbb8b459ecf2afc985217daf01460606f17c7bf70ed2c19fd75e3cc572bfa7596a5e05f430ae5ba5b12cfe28a8589618a06cb7373c85fc4c66cb11a012272f102d983b40f3ee67cea471fa5bd52452e7206b8d8da2cea6ddf041d9a79055c265d915802136e33ab48249c62b8d836820d2e8136a7a0155c2e94670c370f352a781986ff6e44a5d086696d139a29d5bcd800c28002120e8b471fba46986a3713e078a1d319b75df3076f13f7ddeb283e4c900c9a88194ad4b9efb0ba4744cf16446f5454925f1dc86e911161c8dcdd6f184813cb3d5431a0a6015e686c05e599162799dc31c771cf8f5f05bd8ed61cf95ff31042f19e3e0fa5d792c4bd2cd7bd0510fac6669ec9aec129d07a850aa42f6472f4c53b02e605ce3dadee75dbb92cd292e0ee3957c43209d60af4bd6babf1c09192346fcdf9ae6fc4193cade9256e5f00229b9bd04e2b0be1fb42bc3ad5f4f782201775bd142bbe32f7bbdb02b3887b365f87e8bf7367e732af169777ad3018322b327e08d4d3d5c39e5fd22282f3c72674e210ba80b02dbe5f299bfaafda1550281bf03ff33ab3cb71f2bf7543afa8ccb32ec9c2df289dc3f3a1b6ca8c4092ae9af185f89a347dcd355c47dcf4937ed5679398fbf684cba64169018e56cbbdfa4abd06c0af7e560c421cfae2befd680dffa1c1900b06eed6b8b9ea46463ec43aa23b35d6066849f6a55963daf82f9150e250ff01402312c25a86ce1e5053daff3bba166dfac2d8ec838573dd154ecdfd030b025cd95803b7b52d9507638d3e7d5b2cb9c0faa48a47b493f84286ca4cc8105e672863231eb1c0eac5ce7cd927ababcf4788450a468695f8bc4de681af83c7bfe6a0b9ac7ed50ce7d03b6323a042f5d07415d871ddcbfe064191ed44d6f9916f3c63c230e5a4a629e45b840cf99399e8ab707e461dded9614c0eecb2b39905375ad6bbde81d3712f4504a4b6b561a58d5bb42fbf2dba5e6ca712f1e9d2ebb0ad5fb8a4e2591a2fee357e5f01c1000c0e33ad58241932b2797836b8cee444f9b901ac9135e8c41fdd46cf9f97fe2b8d01b3cf1b5326a91c5123225927b7660ebcf392c90ed85dee83458b1944bf9deb6b6a49d6fa12c37da2cb9d3494c32f53ce1a34366954ea4e4c62514d2e96e0c9406033fd8059612022337ba17ab4d75a8cf42b8f8a0490054369153be6be5d0a02fda63808fab1767e169c8b82e92271126d1037073316001b03617d4bf3a44802c2cca588e92cc382c38a6835b581312e273948e247e7bfbc72ec83aed5692e013c351132f5ffe1541209c9e30c1b2f35b8f99c8a271821969b2202e434d4b07bf46e027911788f4d31f88d1fec15e88e4dcf1b17f1dcd0f5e45443091cfe1d2eb5338b79a6f7790211b871262836e21dc8b35e86e3785c4d732811ce1f0c60e9f8f4e6440159b6de53897f4864b15957c392f8b916194bd21caf63ecd5515793b48dc647db0eba355f391f981a2631836760cea1a0542c7f312169f28e0eec5a8ec9b38c759607482f214eb53c95818ad16b3aeb56121b0a697ab966b456138f62fa93d980aae9691d6144cc36a0ae0a033dc94bcb5537449c67f0668125dd888068d310f4b79c74f919b04a49f7af4a5f9b24a83f9e59598a2617a6b310adeaee21ddd22afc7ab7fef8b6d076e5c79529a05830e4b5e9a6228fe2f18fb8eb76befe03e211bd11dde382a3b267fc93961bae1a804f1e605f88951c2e61e2e55da32540f9e2f0e31286d2981a03ad6d59927764711e4c215e5d95c46bbac21e8e8e47fa7b64bdd9a85c5fdac4672544bac0b3d368187388fbe3f73f35a9093fb40bf35225737586f2e50d9935d786feb64c59701f610afcf0b3bf3ae19826346431bf85e7d353cda5b5eaef4d3687c7ed061fff9b5095744d18cfb84ce0ca97355aedbf609573633e2cc3a170ccc21206212b086c366e2d2ff436a6036a220c1854da37db0e49f803e2d0fbb496d5f3f7bdb6d127fa4204ffc54647462b12380f7d5c1c7e095fc18cd52ca0cc7e0d9ca1157eabe1622f3fe4cc3ade752d81e8c43b62a853e15a330042ae11cc1301cb5887f50537f811d9143f60ce9756b0ff5563c03603ac12a123e9f0cad1af93100d96eb0888e0a2ac55fe0a806e8331afaa8ea4a95970ffa133672779d187e9f7d7872ad12194855375cb5f430f9818a03928c22de4e1a7c0baf471162c4a92978c83270a4301446a6b462917b534f4b4b3e9d7d21717db0c0ea825e562177b44fd189045696030a141cdc6b80f5a9671bfe2ed6400f50774c7d697171cfe39215bc852a6d67ae0467fee90af77c12356c794e873e37af0a48d6814cfc02a9ba67378227bd82f3bc829244bc289c2833082c0704346be018a332014fb83dcac9c097bb7487290246a2a078e925522919dff9ca9572c8c4c985c4511071516db8bec0204ad74a9199fd067331593f2f0894bc05a05f9ee9586d22defab178e06fa5ef1876876a2066c2b4a01977ee25d7dff2e74be32845b5aab4eb5daf6544ac7d94ae7d48d0f5aa5c4c34a19088a725fb6d58b0ce2dfa56337f86e11ab0b2baebbe742437c024106494f109f780e30ef3bb1c420ed34e456f13ddf431a63a14d472b4e49f06438396aa36d90a0243609d244120caa263ad9fda0a88b20349f513173b5557c747e0357bf16ccc1253dee2d4e1a771a4b00d22b8c88c686fdc0daa3200508d5ee76e0574ca2f567e75e00d733fe0a4f2bfde07e131498f9118a7136a1bf0b94dc324ea202d861dc4e74e2f7f73b18dde6f36397eda8ff5f183598be2aa4158d9ab97b8d93ec14713822f4dfc63ae0bbbda11c81a062e7ac69e6e846019181003cf2944c187536d629c71678bb0d0572d663934158ebcd158b7ffe937eda562062c33f27e52d2a07783c0f023bf23bb6e8435ae872d4172d0955cbe7abdac205f4b8baa398c705685b0b81117b1d46ef8fa465f03a1ae24f0b1f3d8626ba4c0190e03955fbbe4dc64c124bdcebd5a7b9ef056ca1911c3f18891c0d91fc1634a1307ab0a45ce4b72339d4d879f3a09a36233438f7c9d5421653bdc97255585e785fb56b1954a33dfa7ab273c47bf31c20b0fb84897d32050de32c5b196879676a7fcc3eae45cc23f38f824a532305c0009b50fa253919f55f166fcfaa499d1192be2c7252279c1fc1836ffc2ca79e888f7e3e47e3a163ad3f0dde966c01411210f685cb41cc63ecaa2f9968a8b644d84002c626b46014f91383c6d0923003809697408d9ad0eb41efa7297e9a3cd506e26cfa208538ec4240e303281207e867e4", 0x8, &(0x7f0000000240)='ethtool\x00') prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getsockopt$auto(r3, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) socket(0x1a, 0x4, 0x8000) getsockopt$auto_SO_ERROR(r3, 0x6, 0x4, 0x0, 0x0) 3.908684947s ago: executing program 1 (id=1747): openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x684, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x404, 0x8003) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x8, 0x9, 0x400005, 0x4001003, 0x8000007, 0x8001, 0x2, 0x80000000005, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x0, 0x200000, 0xd4a, 0x0, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x800, 0x0, 0x0, 0x80, 0x0, 0x7]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0xd5}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x400, 0x0, 0x2000000000, 0x9}, 0x2}, 0x9, 0x80) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x11, 0x80003, 0x300) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) open(0x0, 0x161342, 0x3e) socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) pkey_mprotect$auto(0x0, 0x7, 0x6, 0xfffffffb) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) 3.70919853s ago: executing program 0 (id=1748): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r0, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xb05c1, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0x2b, 0x1, 0x1) listen$auto(r2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4200, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1a1a, 0x2, 0x3, 0x95f4da0a, 0x7f, 0x20000003, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, 0x0) r5 = socket(0x2b, 0x1, 0xffffffff) setsockopt$auto(r5, 0x0, 0x1, 0x0, 0x1e) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r6 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f00000000c0), 0x109002, 0x0) pread64$auto(r6, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x9, 0x8) socket(0xa, 0x802, 0x3a) 3.386293273s ago: executing program 1 (id=1749): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) setsockopt$auto_SO_RXQ_OVFL(r2, 0x1, 0x28, 0x0, 0x7) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) 3.326475337s ago: executing program 2 (id=1750): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000002c0), 0x24000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x11, 0x1, 0x3) (async, rerun: 64) socket(0xa, 0x2, 0x88) (rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x46) (async) write$auto(0x3, 0x0, 0xffd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x1c, r2, 0x305, 0x70bd23, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x4000040) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) r5 = socket(0x2, 0x6, 0xffffffee) (async, rerun: 32) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (rerun: 32) setsockopt$auto(r5, 0x6, 0x8, 0x0, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0006, 0x17) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) write$auto(0x3, 0x0, 0xfdef) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x400053, 0x9) r6 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/stat\x00', 0x40440, 0x0) read$auto_proc_single_file_operations_base(r6, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) 3.211602659s ago: executing program 1 (id=1751): close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) r0 = socket(0x2, 0x80802, 0x0) clock_adjtime$auto(0x0, &(0x7f0000000240)={0xdbd, 0x0, 0x7, 0xfffffffffffffffe, 0x600, 0xf4, 0xb, 0x0, 0x100000000, 0x8, 0x3, {0x403, 0x2000d05}, 0xfffffffffffffff8, 0xa5, 0x9, 0xb87e, 0x0, 0xc7, 0x80, 0xb, 0x5, 0x5, 0xfffffffd}) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) unshare$auto(0xff) shmdt$auto(0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) mmap$auto(0x80000001, 0x4, 0x2, 0xfffffffffffffffe, r0, 0x8) r1 = open(0x0, 0x22240, 0x155) r2 = pipe$auto(0x0) read$auto(0x3, 0x0, 0x80) ioctl$auto_NS_GET_MNTNS_ID(r1, 0x8008b705, &(0x7f0000000040)) ioctl$auto(r2, 0x8904, 0x400000000000004) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000000), r2) socket(0x11, 0x3, 0x2) 2.953857815s ago: executing program 4 (id=1752): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/uapsd_max_sp_len\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r2 = socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf25100000000c00018008000100", @ANYRES32, @ANYBLOB="080006"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) r4 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r4], 0x1ac}}, 0x40000) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r2) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x38, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ACTIVE={0x4}, @BATADV_ATTR_TPMETER_RESULT={0x5, 0xa, 0xe7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/dfscache\x00', 0x40080, 0x0) 2.643431708s ago: executing program 4 (id=1753): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) fcntl$auto(0x8000000000000001, 0x5, 0x8) clock_nanosleep$auto(0x2, 0x3ff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xc) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0d, 0xe, 0x3, 0x4, 0x80000033, 0xfff, 0x6d3e, 0x9, 0x8, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x24000001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(r1, 0x0, 0xa, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = socket(0x2, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x0, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, r2, 0x300000000000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) setsockopt$auto(0xffffffffffffffff, 0x7, 0x3, &(0x7f0000000040)='/dev/ram7\x00', 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) 2.531794718s ago: executing program 0 (id=1754): mmap$auto(0x8, 0x200002, 0x4000000000e0, 0x17, 0xffffffffffffffff, 0x300000000000) r0 = bpf$auto(0x5, 0x0, 0x4a) mremap$auto(0x200, 0x2000007, 0x102, 0x4, 0x7f) mmap$auto(0xfffffffffdffffff, 0x9, 0xfffffffffffffff9, 0x80000010, 0x1272, 0x81) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/statistics/collisions\x00', 0x2100, 0x0) mmap$auto(0x3, 0x4, 0x4000000000db, 0x10, 0x401, 0xfffffffffffff67c) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/neigh/veth1_to_team/delay_first_probe_time\x00', 0x40b00, 0x0) read$auto(r2, 0x0, 0x8000000400) write$auto(0x3, 0x0, 0xfdef) close_range$auto(r2, r0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/62, 0x3e) socket(0x0, 0x800, 0x7) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x100) socket(0x2c, 0x3, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x462242, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1ceb6ff774d2c683444135c715757f1c559f9700", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf250200fd00080003", @ANYRESOCT=r1, @ANYBLOB="d3141e39e2685ca5222058aa5500607cd69a6fe6bc097615ac6426ae2d0105eacf961c8195b2bee7e2c583a55d18f4959b9599c9e5e0be5376f99a1bb20d23177e5231d2dc9e2b288ec21824045f68e5ae537633d7e8af8d779ec1ca2923c9489db16e5aa6ba210319868d9751819ab78e2639473cf1cfbdf8b29d653d805c1111348db222f56f780ec5987417aa48259d91cc26486437d569c5ceb8a08f15ddbc292b1e5714bdfa1ee3f8f37006cc5187880fc28cae775028df9a3c2bce67b11614045039660c7ca1e0b6a62802809f13ecb0694f565f8299756d1cf9ecdb03dc605d7c3c4e454860667943870ef12f1c7ddc9f08183fc130"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffffd, 0xffffffffffffffff, 0x800000000, 0x16, r4, 0x1000000095a) 2.233418513s ago: executing program 0 (id=1755): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x18b000, 0x0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2c, 0x1, 0x8000000) mmap$auto(0x0, 0x2020007, 0x3, 0xf8, 0xffffffffffffffff, 0x8001) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/dev_snmp6/virt_wifi0\x00', 0xc480, 0x0) r0 = socket(0x27, 0x4, 0x0) setsockopt$auto(r0, 0x29, 0x46, &(0x7f0000000000)='\x15!\xa8^J/\xddCx5!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x93\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\x00\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04n\r\x13\"\xcb`\xdbr\xb6\xc4.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5\x8e\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xdf\x8e\xff\x05\xd3JD\xe2&\x8f\xceG\x05YF\x85&\x9a\xe8A\xc5F\x18\xd13\x87m\xee\xddV\x16w?eh\xd2\xbfq\xdb\xee\x9b\xfe:R\xde\x12\x98\x8a\x1d\xc7B\xd0\x02l1`\x12l\xccL4\xe7A\xdd\xa3t\x85!\xee\x1cicV\xd4y\xd7\x9d\xcd4\xdb\xd8\x03\xcd\xfe\xdfzy\xfe]\xc5`c\x17\"\xc2\xf7\x95\xa5\xe2\xce\xd2\xe5', 0x18000112) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000b40), 0x20000, 0x0) r1 = socket(0x10, 0x2, 0x0) close_range$auto(0xffffffffffffffff, r1, 0xfbfffffe) io_uring_setup$auto(0x86, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r2, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2bb22bbd7000fcdbdf25050000001800038014000100fc02000000000000000000000000000008000100", @ANYBLOB="e996f00194ce529a379796c3f1ed911ed6ef11384407b4b4d7e012a2f17ada467537"], 0x34}, 0x1, 0x0, 0x0, 0x20000050}, 0x40090) 2.186656666s ago: executing program 1 (id=1756): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/msr/parameters/allow_writes\x00', 0x80302, 0x0) socket(0x33, 0x1, 0xfffff800) socketpair$auto(0xaf, 0x8, 0x3, 0x0) unshare$auto(0x40000080) unshare$auto(0x7fffffff) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x1, 0x16, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x54) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(0x0, 0x0) wait4$auto(0x0, 0x0, 0x8, 0x0) r1 = getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0xe) socket(0x1d, 0x2, 0x7) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0xfb3) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffb, 0x8000) fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x7f, &(0x7f0000000000)='\x19\x9f\x1e\x7f\x81FJ\xbb\xd7<5\x00\x00\x00\x00\x00', &(0x7f0000000080), 0x0) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x29, 0x17000000, 0x0, 0x3, 0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1, 0x9) write$auto(0x6, 0x0, 0x100000001) 2.133405022s ago: executing program 2 (id=1757): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0) mmap$auto(0x0, 0x20009, 0x100000000, 0x800013, r0, 0xfffffffffffff9e2) ioperm$auto(0x7, 0x5ad2, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="0100", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x3, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto(0x3, 0x0, 0x100082) io_uring_register$auto(r0, 0x0, &(0x7f0000000000), 0x4006) modify_ldt$auto(0x3, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40440, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r4) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/current_tracer\x00', 0x40002, 0x0) pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) mmap$auto(0x0, 0x2020008, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) sysfs$auto(0x2, 0x46, 0x0) r5 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, r5, 0x0) (fail_nth: 10) socket(0x29, 0xa, 0xa) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000180)={0x7, r1}) 1.873476234s ago: executing program 0 (id=1758): mmap$auto(0x0, 0xa020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) sendmsg$auto(r0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) remap_file_pages$auto(0x3, 0x1000, 0x0, 0x3, 0x4) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0xc0086202, r2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000e00)="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", 0xc83) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x48400, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa041, 0x0) 1.198603922s ago: executing program 1 (id=1759): mmap$auto(0x0, 0x400008, 0x10000, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0xe400, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) read$auto(0x3, 0x0, 0x30) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/ext4/sda1/mb_groups\x00', 0x40102, 0x0) pread64$auto(r1, &(0x7f00000000c0)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) 900.47172ms ago: executing program 4 (id=1760): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) setsockopt$auto_SO_RXQ_OVFL(r2, 0x1, 0x28, 0x0, 0x7) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) 778.445045ms ago: executing program 4 (id=1761): r0 = socket(0x3, 0x3, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x240eb1, r0, 0x300000000000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x0, 0x0, 0x50b301a, 0x2c, 0x2c, 0x4, 0x2}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x7ffffffd, 0x400008, 0xdb, 0x16, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r4 = socket(0x15, 0x5, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x82800, 0x0) getsockopt$auto(r4, 0x0, 0x5, 0xfffffffffffffffc, 0x0) read$auto_proc_single_file_operations_base(r2, &(0x7f0000000200)=""/154, 0x9a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r5, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) getrandom$auto(&(0x7f0000000080)='::G,\x00', 0x70ad, 0x200) syz_clone3(0x0, 0x0) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8003) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/power/pm_qos_no_power_off\x00', 0x20a42, 0x0) read$auto(r6, 0x0, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) 549.417293ms ago: executing program 2 (id=1762): mmap$auto(0xffffffffffffffff, 0x400048, 0xe3, 0x20009b76, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x2c, 0x3, 0x0) socket(0x1e, 0x1, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x8, 0xea85}, 0x20000100, 0x2000008) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2b, 0x1, 0x1) io_uring_setup$auto(0x6, 0x0) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) setsockopt$auto(r2, 0x8, 0x3b, 0x0, 0x4) listen$auto(r3, 0x31) socket(0x23, 0x5, 0x1000003) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) getdents64$auto(r0, &(0x7f0000000100)={0xf, 0x1, 0x1ce, 0x2, "c4b7dc50313a23c72854ee2b22e40c85e0f1b356fa9d6ba569253e071159eb7c11e904e1581d8177f192eb87a3579c9700d3"}, 0x7) socket(0x10, 0x2, 0xfffffffd) ioprio_set$auto(0x3, 0x0, 0x4b34) socket(0xa, 0x3, 0x80002) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x5, 0x1, 0x106) socket(0xa, 0x2, 0x0) 401.401937ms ago: executing program 4 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) msgctl$auto_IPC_SET(0x9, 0x1, &(0x7f0000000140)={{0x7, 0xee00, 0xee01, 0x9, 0x5, 0x2, 0x1}, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x9, 0xcb06, 0x9, 0x3, 0xd, 0x7, 0xff80, 0x8, 0x7f, @raw=0x8, @inferred=r2}) r4 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0x40400, 0x0) sendmsg$auto_TIPC_NL_BEARER_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005740)=ANY=[@ANYBLOB="b42c0000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0800c200", @ANYRES32, @ANYBLOB="000000dc07709848d9e39aea8997a3ef5753f8171035a2b7219e7fbc53aa16e52008e4b7005ca82b99d6ad1dd18bdafd27c03b14388d19e7880c9fb8ce170a11e82bdc819085582745b7a6f93fc086d540064e2d1caa53014d2eb72f755b2d45c63aa8052770ad92f320066caa5f85ab92104a8bb5b9eaafc7aad0650000a20008800c00db800800ed00", @ANYRES32=r4, @ANYBLOB="ce5b95e2257839e4b184ea97bdbc30ee4b38774e2d01bc2efcf767b21d416df357b7a3ede147b86994b8b56367b003128ce59bbe04c28bd082e096a4a695b615150db57c85cf9eee3b3fbac0823940f04a208d5c92a32c20d38954dc654d7251d04ffac2f0cb82a855c7ffbe4420e17748e0f9645b1909a8485bc94bf8e714005f800b006c0054495043763200000400f10000005f0008802400418008002200", @ANYRES32=r2, @ANYBLOB="0400bb800400408008006200", @ANYRES32=r0, @ANYBLOB="1a0007000c8060fe0fe92836a705a2672cdca18d84dc8c3b2312fc8d1da19657c668b8e42509359ee6dfffc624dceb89ce5efd5d3b36bda205ee162f5750d5f998e9cd3b35201dbeb749e93959994d5f9a5141dd774eaf08b38ee19ba54b52e730fcca2da516e94388201555fd084ea9f4282007c6cd5b5a635ec5b5f749af6497bb", @ANYRES32=r2, @ANYBLOB="08001d00ffffffff0b4b47d92e86b2da2e5f6e21b56cda0ee3376b08003700", @ANYRES32=r2, @ANYBLOB="0c0051000900000000000000080020005f8f2a6700"], 0x2cb4}, 0x1, 0x0, 0x0, 0x44}, 0x40044) r5 = socket(0x10, 0x2, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop9\x00', 0x2, 0x0) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_id=0x4, 0x5}, 0x3fc) unshare$auto(0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r6], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580), 0xfc2}, 0x2, &(0x7f00000001c0), 0x2000000000007, 0xa505}, 0x803}, 0x4, 0x8) pipe$auto(&(0x7f00000002c0)=r6) unshare$auto(0x7fffffffffffffff) 254.794328ms ago: executing program 2 (id=1764): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00', 0x0}) r1 = socket(0x1d, 0x6, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r2}, 0x18) sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fddbdf258e0000000500d50003000000380032800500010003000000050002000700000008000400", @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r0, @ANYBLOB="01000600000008000075", @ANYRES32=r2, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20080084}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r5 = socket(0xa, 0x801, 0x84) getsockopt$auto(r5, 0x84, 0x71, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r6) fsconfig$auto(r4, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf253a000000c000be00c58977fdd13b81e91d934b366689f984331627b572e3963e092d4e83b12662a70fd1ea555a828cc155899d88bb2ca0cc6ee3eb72bc82db70e65cf747b287128ac106176f23f510e21740e14d29b929e14a5b80a6b75625d616add13cf62755f47bfc8b9c55f01d437b33d03fec0dc6eaf60ebed3bf2903e7733eefc0f51cc65fb1b2bb80e5d851e34cbc97d463db587cc5761735820ad9d3beae523c344661698214900df0881e056dab3b7dd5406629a4ec385de70b4302e2399cc9060065000f000000"], 0xdc}, 0x1, 0x0, 0x0, 0x10100}, 0x40840) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, 0x0) ioctl$auto(r7, 0x4b49, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2100, 0x0) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 217.549418ms ago: executing program 1 (id=1765): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x6300) 27.925809ms ago: executing program 4 (id=1766): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x6) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) unshare$auto(0x40000080) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_matches\x00', 0x80, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/248, 0xf8) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg1\x00', 0x200000, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x0, 0x7352, 0x41, 0x200000000065f, 0x401ffde, 0x7fff, 0x3, 0x2, 0x9, 0x3eb, 0x5, 0x2, 0x3000, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x1ffb, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x9, 0xd) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x280c0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000000c0)=""/4087, 0xff7) r5 = socket(0xa, 0x3, 0x73) r6 = geteuid() setpriority$auto(0x9, r6, 0x8) msgctl$auto_MSG_INFO(0x4, 0xc, &(0x7f0000001100)={{0x3, 0x0, 0xee00, 0x7ff, 0x200, 0x8000, 0x2}, &(0x7f0000000080)=0x7, &(0x7f00000010c0)=0x1, 0x7, 0x0, 0xa1, 0xfffffffffffffffe, 0x1, 0xe, 0x3, 0x5, @raw=0x800}) setreuid$auto(r6, r7) r8 = socket(0x11, 0x3, 0x2) r9 = getsockopt$auto(r8, 0x107, 0xb, 0x0, 0x0) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000011c0), r9) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f00000019c0)={&(0x7f0000001180), 0xc, &(0x7f0000001980)={&(0x7f0000001200)={0x34, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x81ce}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x3}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xae5ac47}]}, 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x24000810) write$auto(0x4, 0x0, 0x100082) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001a00)=ANY=[@ANYRESHEX=r3, @ANYBLOB="3815e9325c3453f44ab58d4b6fdb10ed003d1e193f84e31f4c4adc0170ccc7771b3076bcb68d3031e08152ec81565b46decf6d1bdabdc6f0c28189fa9e5884ec932d4c389c33797fef7d6b", @ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r9, @ANYRESHEX=r2, @ANYRES16=r9, @ANYRESDEC=r10, @ANYBLOB="01c2d4aebbca536e00d264710b3c3412a7d87bae0e532adaeca83d800b699588f03763a2051526452ec67224cb4de733a91a20935198f7a2ab4c334b87722dbfaaa2c01737b119eca7580405c49798c339e2e42b99330ffe72c8372bb36a252bf269395f54b2879caa6efb4a1702c93ab52683d188d052328e3a96c589a9981bee2a455eb2f6096c880aebe96e61aa60f9d01c2160d837ffb2ce7f4299c2db580fa122ebd817294b707b8666fad606291880c7afdfb385f21c8deac21b34", @ANYRESOCT=r7, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x6fbaf1bb2ba24192) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r11 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r11, &(0x7f0000000200)={{0x0, 0x157b, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000003c0)="259aa4840a6bf1311aafae34e1596b4f2ab73828f0c0c7edf10fe3066a7805c03c8d7fcf88d839a0151fc8adaca1d3ff9104269c43699f9d5f8062f5e869588785c943ce9ef7dff1a8f072dda18e39ae57841cfb91370f3c8246f28399e5a5a2d14a337051f8c60d2a2b210e5333ec9a7bef7e0508faababddd062b9660266020f920f215c9a777bfb9c", 0x7, 0xa505}, 0x800}, 0x8, 0x4008) futex_wait$auto(&(0x7f0000000380)="c1317ceb776e8ed182c529eb351e6a931287ec9a080e9a97653ade7bc53b51f56026a7df90b2a47f22bd6537299db6f9df2be19f47d18896f381b65f839f4e119929f2dcc9f442b01e7b4cd2f2c21df3eb72600e6757f31fef358927620dc313bdca84038578ff00f7ef6205348b3576cdcacf9ab823d360ae862bddf80479f38924346ce2946680c089e3f17e5d6a19ec7288af4e9a57309d8fc3102a7a57b0fcc7aa3c81b61934c21036bb4de130e82df1aeeb9f41f0341d94cf57aea9ec28ad0c8b75d510600ad5911aad50a0ed91df847609fdd98c12a9eadd5112b5b2fa0cb37f09aab634b40e332b36e8ef089d8efeb0dfbee9c83834", 0x8, 0x8, 0x6, &(0x7f0000000480)={0xae4, 0x7}, 0x0) ioctl$auto(0x3, 0x40000000, 0x38) ioctl$auto_SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000240)="da7b9bb65b17226ea8ef161506d0ab3a34d219d7dcc3966fee849c4b4dbd84b6840611c0e78d8e399e89398ab9d6d52eb8aa84228051bc5841275f27ced0f8d99e1ca7c072559102cb068a3f58a5b93cddf24afa08fe953d32ad3135b5e10fa4702f1c5aab700a0ecfb2238946fb016b9fb635d8ad5967fa1d3858856ff37418a3") 0s ago: executing program 2 (id=1767): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x2802, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x2}, 0x400) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/pcm0c/sub0/status\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) fanotify_init$auto(0x602, 0x1) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3) close_range$auto(0x2, 0x8, 0x0) pread64$auto(r0, 0x0, 0x8, 0xffff) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   [ 386.464577][T11473] FAULT_INJECTION: forcing a failure. [ 386.464577][T11473] name failslab, interval 1, probability 0, space 0, times 0 [ 386.498930][T11473] CPU: 0 UID: 0 PID: 11473 Comm: syz.0.1366 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 386.498957][T11473] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 386.498963][T11473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.498971][T11473] Call Trace: [ 386.498976][T11473] [ 386.498982][T11473] dump_stack_lvl+0x16c/0x1f0 [ 386.499008][T11473] should_fail_ex+0x512/0x640 [ 386.499027][T11473] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 386.499049][T11473] should_failslab+0xc2/0x120 [ 386.499062][T11473] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 386.499088][T11473] ? __alloc_skb+0x2b2/0x380 [ 386.499110][T11473] __alloc_skb+0x2b2/0x380 [ 386.499129][T11473] ? __pfx___alloc_skb+0x10/0x10 [ 386.499150][T11473] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 386.499169][T11473] netlink_alloc_large_skb+0x69/0x130 [ 386.499186][T11473] netlink_sendmsg+0x6a1/0xdd0 [ 386.499204][T11473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.499226][T11473] ____sys_sendmsg+0xa98/0xc70 [ 386.499243][T11473] ? copy_msghdr_from_user+0x10a/0x160 [ 386.499263][T11473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.499287][T11473] ___sys_sendmsg+0x134/0x1d0 [ 386.499308][T11473] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.499327][T11473] ? __lock_acquire+0x622/0x1c90 [ 386.499367][T11473] __sys_sendmsg+0x16d/0x220 [ 386.499388][T11473] ? __pfx___sys_sendmsg+0x10/0x10 [ 386.499420][T11473] do_syscall_64+0xcd/0x490 [ 386.499434][T11473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.499448][T11473] RIP: 0033:0x7fbc5218e929 [ 386.499460][T11473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.499473][T11473] RSP: 002b:00007fbc52fcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.499487][T11473] RAX: ffffffffffffffda RBX: 00007fbc523b5fa0 RCX: 00007fbc5218e929 [ 386.499496][T11473] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000004 [ 386.499505][T11473] RBP: 00007fbc52fcb090 R08: 0000000000000000 R09: 0000000000000000 [ 386.499513][T11473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.499520][T11473] R13: 0000000000000000 R14: 00007fbc523b5fa0 R15: 00007ffcc6d9cda8 [ 386.499538][T11473] [ 387.449314][T11485] FAULT_INJECTION: forcing a failure. [ 387.449314][T11485] name failslab, interval 1, probability 0, space 0, times 0 [ 387.470238][T11482] ubi: mtd0 is already attached to ubi0 [ 387.489014][T11485] CPU: 0 UID: 0 PID: 11485 Comm: syz.2.1370 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 387.489043][T11485] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 387.489049][T11485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.489058][T11485] Call Trace: [ 387.489063][T11485] [ 387.489069][T11485] dump_stack_lvl+0x16c/0x1f0 [ 387.489094][T11485] should_fail_ex+0x512/0x640 [ 387.489114][T11485] ? __kmalloc_noprof+0xbf/0x510 [ 387.489134][T11485] ? lsm_blob_alloc+0x68/0x90 [ 387.489153][T11485] should_failslab+0xc2/0x120 [ 387.489166][T11485] __kmalloc_noprof+0xd2/0x510 [ 387.489189][T11485] lsm_blob_alloc+0x68/0x90 [ 387.489209][T11485] security_sk_alloc+0x30/0x270 [ 387.489225][T11485] sk_prot_alloc+0xfb/0x2a0 [ 387.489242][T11485] sk_alloc+0x36/0xc20 [ 387.489262][T11485] inet6_create+0x381/0x1300 [ 387.489278][T11485] ? inet6_create+0x7f/0x1300 [ 387.489293][T11485] __sock_create+0x338/0x8d0 [ 387.489312][T11485] __sys_socket+0x14d/0x260 [ 387.489329][T11485] ? __pfx___sys_socket+0x10/0x10 [ 387.489345][T11485] ? xfd_validate_state+0x61/0x180 [ 387.489367][T11485] __x64_sys_socket+0x72/0xb0 [ 387.489383][T11485] ? lockdep_hardirqs_on+0x7c/0x110 [ 387.489403][T11485] do_syscall_64+0xcd/0x490 [ 387.489417][T11485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.489431][T11485] RIP: 0033:0x7f4240d8e929 [ 387.489444][T11485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.489457][T11485] RSP: 002b:00007f4241cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 387.489471][T11485] RAX: ffffffffffffffda RBX: 00007f4240fb5fa0 RCX: 00007f4240d8e929 [ 387.489480][T11485] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 387.489488][T11485] RBP: 00007f4240e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 387.489497][T11485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.489505][T11485] R13: 0000000000000000 R14: 00007f4240fb5fa0 R15: 00007ffc3babd108 [ 387.489522][T11485] [ 388.560774][ T30] audit: type=1107 audit(4294967591.280:9): pid=11491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='2' [ 388.644050][ T30] audit: type=1107 audit(4294967591.300:10): pid=11491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='2' [ 389.430776][T11491] Process accounting resumed [ 389.591303][T11521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1379'. [ 390.146699][T11533] FAULT_INJECTION: forcing a failure. [ 390.146699][T11533] name failslab, interval 1, probability 0, space 0, times 0 [ 390.225544][T11533] CPU: 0 UID: 0 PID: 11533 Comm: syz.4.1383 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 390.225573][T11533] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 390.225580][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.225589][T11533] Call Trace: [ 390.225594][T11533] [ 390.225600][T11533] dump_stack_lvl+0x16c/0x1f0 [ 390.225626][T11533] should_fail_ex+0x512/0x640 [ 390.225646][T11533] ? fs_reclaim_acquire+0xae/0x150 [ 390.225664][T11533] should_failslab+0xc2/0x120 [ 390.225678][T11533] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 390.225698][T11533] ? security_inode_alloc+0x3b/0x2b0 [ 390.225717][T11533] security_inode_alloc+0x3b/0x2b0 [ 390.225732][T11533] inode_init_always_gfp+0xce4/0x1030 [ 390.225761][T11533] alloc_inode+0x86/0x240 [ 390.225776][T11533] sock_alloc+0x40/0x280 [ 390.225793][T11533] __sock_create+0xc1/0x8d0 [ 390.225815][T11533] __sys_socket+0x14d/0x260 [ 390.225833][T11533] ? __pfx___sys_socket+0x10/0x10 [ 390.225849][T11533] ? xfd_validate_state+0x61/0x180 [ 390.225871][T11533] __x64_sys_socket+0x72/0xb0 [ 390.225887][T11533] ? lockdep_hardirqs_on+0x7c/0x110 [ 390.225907][T11533] do_syscall_64+0xcd/0x490 [ 390.225921][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.225935][T11533] RIP: 0033:0x7fcc5018e929 [ 390.225947][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.225961][T11533] RSP: 002b:00007fcc50f71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 390.225974][T11533] RAX: ffffffffffffffda RBX: 00007fcc503b5fa0 RCX: 00007fcc5018e929 [ 390.225984][T11533] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 390.225992][T11533] RBP: 00007fcc50210b39 R08: 0000000000000000 R09: 0000000000000000 [ 390.226001][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.226009][T11533] R13: 0000000000000000 R14: 00007fcc503b5fa0 R15: 00007ffd3b862a38 [ 390.226026][T11533] [ 390.226048][T11533] socket: no more sockets [ 390.704034][T11541] ubi: mtd0 is already attached to ubi0 [ 391.205954][T11557] FAULT_INJECTION: forcing a failure. [ 391.205954][T11557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.326159][T11557] CPU: 0 UID: 0 PID: 11557 Comm: syz.0.1387 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 391.326187][T11557] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 391.326193][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.326201][T11557] Call Trace: [ 391.326206][T11557] [ 391.326213][T11557] dump_stack_lvl+0x16c/0x1f0 [ 391.326238][T11557] should_fail_ex+0x512/0x640 [ 391.326262][T11557] _copy_to_user+0x32/0xd0 [ 391.326284][T11557] simple_read_from_buffer+0xcb/0x170 [ 391.326304][T11557] proc_fail_nth_read+0x197/0x270 [ 391.326321][T11557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 391.326339][T11557] ? rw_verify_area+0xcf/0x680 [ 391.326356][T11557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 391.326372][T11557] vfs_read+0x1e4/0xc60 [ 391.326393][T11557] ? __pfx___mutex_lock+0x10/0x10 [ 391.326406][T11557] ? __pfx_vfs_read+0x10/0x10 [ 391.326429][T11557] ? __fget_files+0x20e/0x3c0 [ 391.326453][T11557] ksys_read+0x12a/0x250 [ 391.326470][T11557] ? __pfx_ksys_read+0x10/0x10 [ 391.326494][T11557] do_syscall_64+0xcd/0x490 [ 391.326508][T11557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.326523][T11557] RIP: 0033:0x7fbc5218d33c [ 391.326535][T11557] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 391.326548][T11557] RSP: 002b:00007fbc52f68030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 391.326562][T11557] RAX: ffffffffffffffda RBX: 00007fbc523b6240 RCX: 00007fbc5218d33c [ 391.326572][T11557] RDX: 000000000000000f RSI: 00007fbc52f680a0 RDI: 0000000000000004 [ 391.326580][T11557] RBP: 00007fbc52f68090 R08: 0000000000000000 R09: 0000000000000000 [ 391.326589][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.326597][T11557] R13: 0000000000000000 R14: 00007fbc523b6240 R15: 00007ffcc6d9cda8 [ 391.326616][T11557] [ 392.327283][T11569] zswap: compressor 000 not available [ 392.651057][T11586] FAULT_INJECTION: forcing a failure. [ 392.651057][T11586] name failslab, interval 1, probability 0, space 0, times 0 [ 392.711981][T11586] CPU: 0 UID: 0 PID: 11586 Comm: syz.2.1397 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 392.712010][T11586] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 392.712016][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.712024][T11586] Call Trace: [ 392.712030][T11586] [ 392.712036][T11586] dump_stack_lvl+0x16c/0x1f0 [ 392.712062][T11586] should_fail_ex+0x512/0x640 [ 392.712082][T11586] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 392.712105][T11586] should_failslab+0xc2/0x120 [ 392.712120][T11586] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 392.712140][T11586] ? sock_alloc_inode+0x25/0x1c0 [ 392.712158][T11586] ? __pfx_sock_alloc_inode+0x10/0x10 [ 392.712172][T11586] sock_alloc_inode+0x25/0x1c0 [ 392.712187][T11586] alloc_inode+0x64/0x240 [ 392.712201][T11586] sock_alloc+0x40/0x280 [ 392.712215][T11586] __sock_create+0xc1/0x8d0 [ 392.712235][T11586] __sys_socket+0x14d/0x260 [ 392.712252][T11586] ? __pfx___sys_socket+0x10/0x10 [ 392.712268][T11586] ? xfd_validate_state+0x61/0x180 [ 392.712290][T11586] __x64_sys_socket+0x72/0xb0 [ 392.712306][T11586] ? lockdep_hardirqs_on+0x7c/0x110 [ 392.712326][T11586] do_syscall_64+0xcd/0x490 [ 392.712339][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.712354][T11586] RIP: 0033:0x7f4240d8e929 [ 392.712366][T11586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.712379][T11586] RSP: 002b:00007f4241cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 392.712394][T11586] RAX: ffffffffffffffda RBX: 00007f4240fb5fa0 RCX: 00007f4240d8e929 [ 392.712403][T11586] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 392.712412][T11586] RBP: 00007f4240e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 392.712420][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.712429][T11586] R13: 0000000000000000 R14: 00007f4240fb5fa0 R15: 00007ffc3babd108 [ 392.712446][T11586] [ 392.712454][T11586] socket: no more sockets [ 393.267328][T11598] ubi: mtd0 is already attached to ubi0 [ 393.888618][T11616] netlink: 'syz.2.1405': attribute type 1 has an invalid length. [ 395.457762][T11646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1413'. [ 395.672752][T11653] netlink: 'syz.4.1416': attribute type 1 has an invalid length. [ 395.916676][T11654] ubi: mtd0 is already attached to ubi0 [ 398.027568][T11706] FAULT_INJECTION: forcing a failure. [ 398.027568][T11706] name failslab, interval 1, probability 0, space 0, times 0 [ 398.169985][T11706] CPU: 0 UID: 0 PID: 11706 Comm: syz.2.1429 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 398.170013][T11706] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 398.170019][T11706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.170027][T11706] Call Trace: [ 398.170032][T11706] [ 398.170039][T11706] dump_stack_lvl+0x16c/0x1f0 [ 398.170064][T11706] should_fail_ex+0x512/0x640 [ 398.170084][T11706] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 398.170106][T11706] should_failslab+0xc2/0x120 [ 398.170120][T11706] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 398.170140][T11706] ? __alloc_skb+0x2b2/0x380 [ 398.170163][T11706] __alloc_skb+0x2b2/0x380 [ 398.170182][T11706] ? __pfx___alloc_skb+0x10/0x10 [ 398.170203][T11706] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 398.170222][T11706] netlink_alloc_large_skb+0x69/0x130 [ 398.170239][T11706] netlink_sendmsg+0x6a1/0xdd0 [ 398.170257][T11706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.170280][T11706] ____sys_sendmsg+0xa98/0xc70 [ 398.170297][T11706] ? copy_msghdr_from_user+0x10a/0x160 [ 398.170320][T11706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.170345][T11706] ___sys_sendmsg+0x134/0x1d0 [ 398.170367][T11706] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.170385][T11706] ? __lock_acquire+0x622/0x1c90 [ 398.170427][T11706] __sys_sendmsg+0x16d/0x220 [ 398.170448][T11706] ? __pfx___sys_sendmsg+0x10/0x10 [ 398.170480][T11706] do_syscall_64+0xcd/0x490 [ 398.170495][T11706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.170510][T11706] RIP: 0033:0x7f4240d8e929 [ 398.170522][T11706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.170535][T11706] RSP: 002b:00007f4241cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.170550][T11706] RAX: ffffffffffffffda RBX: 00007f4240fb5fa0 RCX: 00007f4240d8e929 [ 398.170559][T11706] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000004 [ 398.170568][T11706] RBP: 00007f4241cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 398.170577][T11706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.170585][T11706] R13: 0000000000000000 R14: 00007f4240fb5fa0 R15: 00007ffc3babd108 [ 398.170603][T11706] [ 398.872356][T11714] ubi: mtd0 is already attached to ubi0 [ 399.928323][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 400.206058][T11736] zswap: compressor 000 not available [ 400.913903][T11756] Invalid ELF header magic: != ELF [ 401.683871][T11763] ubi: mtd0 is already attached to ubi0 [ 401.701212][T11773] FAULT_INJECTION: forcing a failure. [ 401.701212][T11773] name failslab, interval 1, probability 0, space 0, times 0 [ 401.761142][T11773] CPU: 0 UID: 0 PID: 11773 Comm: syz.0.1447 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 401.761169][T11773] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 401.761175][T11773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.761184][T11773] Call Trace: [ 401.761189][T11773] [ 401.761195][T11773] dump_stack_lvl+0x16c/0x1f0 [ 401.761221][T11773] should_fail_ex+0x512/0x640 [ 401.761241][T11773] ? fs_reclaim_acquire+0xae/0x150 [ 401.761259][T11773] ? tomoyo_encode2+0x100/0x3e0 [ 401.761277][T11773] should_failslab+0xc2/0x120 [ 401.761291][T11773] __kmalloc_noprof+0xd2/0x510 [ 401.761311][T11773] ? d_absolute_path+0x136/0x1a0 [ 401.761328][T11773] tomoyo_encode2+0x100/0x3e0 [ 401.761349][T11773] tomoyo_encode+0x29/0x50 [ 401.761366][T11773] tomoyo_realpath_from_path+0x18f/0x6e0 [ 401.761390][T11773] tomoyo_path_number_perm+0x245/0x580 [ 401.761406][T11773] ? tomoyo_path_number_perm+0x237/0x580 [ 401.761424][T11773] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 401.761441][T11773] ? find_held_lock+0x2b/0x80 [ 401.761472][T11773] ? find_held_lock+0x2b/0x80 [ 401.761485][T11773] ? hook_file_ioctl_common+0x145/0x410 [ 401.761504][T11773] ? __fget_files+0x20e/0x3c0 [ 401.761526][T11773] security_file_ioctl+0x9b/0x240 [ 401.761544][T11773] __x64_sys_ioctl+0xb7/0x210 [ 401.761562][T11773] do_syscall_64+0xcd/0x490 [ 401.761576][T11773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.761591][T11773] RIP: 0033:0x7fbc5218e929 [ 401.761603][T11773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.761616][T11773] RSP: 002b:00007fbc52fcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.761631][T11773] RAX: ffffffffffffffda RBX: 00007fbc523b5fa0 RCX: 00007fbc5218e929 [ 401.761652][T11773] RDX: 0000000000000000 RSI: 0000000040095505 RDI: 0000000000000003 [ 401.761661][T11773] RBP: 00007fbc52fcb090 R08: 0000000000000000 R09: 0000000000000000 [ 401.761669][T11773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.761678][T11773] R13: 0000000000000000 R14: 00007fbc523b5fa0 R15: 00007ffcc6d9cda8 [ 401.761696][T11773] [ 401.761711][T11773] ERROR: Out of memory at tomoyo_realpath_from_path. [ 404.190325][T11805] ubi: mtd0 is already attached to ubi0 [ 404.806444][T11816] netlink: 'syz.2.1461': attribute type 1 has an invalid length. [ 406.769675][T11854] ubi: mtd0 is already attached to ubi0 [ 406.797784][T11866] netlink: 'syz.4.1471': attribute type 1 has an invalid length. [ 407.619652][T11880] [U] [ 407.622457][T11880] [U] [ 407.625149][T11880] [U] [ 407.627822][T11880] [U] [ 407.754407][T11880] [U] [ 407.757126][T11880] [U] [ 407.759800][T11880] [U] [ 407.762478][T11880] [U] [ 407.854799][T11880] [U] [ 407.857514][T11880] [U] [ 407.860199][T11880] [U] [ 407.862875][T11880] [U] [ 408.000652][T11880] [U] [ 408.003370][T11880] [U] [ 408.006086][T11880] [U] [ 408.008764][T11880] [U] [ 408.027858][T11889] FAULT_INJECTION: forcing a failure. [ 408.027858][T11889] name failslab, interval 1, probability 0, space 0, times 0 [ 408.099876][T11889] CPU: 0 UID: 0 PID: 11889 Comm: syz.1.1477 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 408.099905][T11889] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 408.099911][T11889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.099921][T11889] Call Trace: [ 408.099926][T11889] [ 408.099933][T11889] dump_stack_lvl+0x16c/0x1f0 [ 408.099960][T11889] should_fail_ex+0x512/0x640 [ 408.099987][T11889] ? fs_reclaim_acquire+0xae/0x150 [ 408.100007][T11889] should_failslab+0xc2/0x120 [ 408.100022][T11889] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 408.100043][T11889] ? security_inode_alloc+0x3b/0x2b0 [ 408.100061][T11889] security_inode_alloc+0x3b/0x2b0 [ 408.100077][T11889] inode_init_always_gfp+0xce4/0x1030 [ 408.100100][T11889] alloc_inode+0x86/0x240 [ 408.100114][T11889] new_inode+0x22/0x1c0 [ 408.100130][T11889] __rpc_create_common+0x57/0x2f0 [ 408.100153][T11889] rpc_populate.constprop.0+0x153/0x5d0 [ 408.100178][T11889] rpc_fill_super+0x345/0x840 [ 408.100197][T11889] ? sget_fc+0x808/0xc20 [ 408.100218][T11889] ? __pfx_rpc_fill_super+0x10/0x10 [ 408.100237][T11889] get_tree_keyed+0x10b/0x1d0 [ 408.100256][T11889] vfs_get_tree+0x8b/0x340 [ 408.100272][T11889] vfs_cmd_create+0xd7/0x2a0 [ 408.100295][T11889] __do_sys_fsconfig+0x7b8/0xbe0 [ 408.100309][T11889] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 408.100333][T11889] do_syscall_64+0xcd/0x490 [ 408.100347][T11889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.100362][T11889] RIP: 0033:0x7f81f118e929 [ 408.100373][T11889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.100387][T11889] RSP: 002b:00007f81f202c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 408.100401][T11889] RAX: ffffffffffffffda RBX: 00007f81f13b5fa0 RCX: 00007f81f118e929 [ 408.100411][T11889] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 408.100419][T11889] RBP: 00007f81f1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 408.100427][T11889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.100435][T11889] R13: 0000000000000000 R14: 00007f81f13b5fa0 R15: 00007ffc4fb76618 [ 408.100454][T11889] [ 408.321590][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.359393][T11880] [U] [ 408.548692][T11899] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1479'. [ 408.622066][T11889] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry clntXX [ 408.645579][T11889] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory gssd [ 410.050140][T11926] MTRR 1 not used [ 410.057696][T11920] ubi: mtd0 is already attached to ubi0 [ 410.260765][T11932] netlink: 'syz.1.1488': attribute type 1 has an invalid length. [ 410.278748][T11934] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1487'. [ 410.741934][T11942] FAULT_INJECTION: forcing a failure. [ 410.741934][T11942] name failslab, interval 1, probability 0, space 0, times 0 [ 410.879526][T11942] CPU: 0 UID: 0 PID: 11942 Comm: syz.2.1491 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 410.879555][T11942] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 410.879561][T11942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 410.879570][T11942] Call Trace: [ 410.879576][T11942] [ 410.879583][T11942] dump_stack_lvl+0x16c/0x1f0 [ 410.879608][T11942] should_fail_ex+0x512/0x640 [ 410.879628][T11942] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 410.879652][T11942] should_failslab+0xc2/0x120 [ 410.879666][T11942] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 410.879685][T11942] ? __d_lookup+0x25c/0x4a0 [ 410.879711][T11942] ? __d_alloc+0x31/0xaa0 [ 410.879735][T11942] __d_alloc+0x31/0xaa0 [ 410.879759][T11942] d_alloc+0x4a/0x1e0 [ 410.879782][T11942] __rpc_lookup_create_exclusive+0x119/0x140 [ 410.879802][T11942] ? __pfx___rpc_lookup_create_exclusive+0x10/0x10 [ 410.879825][T11942] rpc_populate.constprop.0+0xbe/0x5d0 [ 410.879850][T11942] rpc_fill_super+0x485/0x840 [ 410.879869][T11942] ? sget_fc+0x808/0xc20 [ 410.879890][T11942] ? __pfx_rpc_fill_super+0x10/0x10 [ 410.879910][T11942] get_tree_keyed+0x10b/0x1d0 [ 410.879929][T11942] vfs_get_tree+0x8b/0x340 [ 410.879945][T11942] vfs_cmd_create+0xd7/0x2a0 [ 410.879967][T11942] __do_sys_fsconfig+0x7b8/0xbe0 [ 410.879982][T11942] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 410.880005][T11942] do_syscall_64+0xcd/0x490 [ 410.880020][T11942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.880035][T11942] RIP: 0033:0x7f4240d8e929 [ 410.880047][T11942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.880062][T11942] RSP: 002b:00007f4241cb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 410.880076][T11942] RAX: ffffffffffffffda RBX: 00007f4240fb5fa0 RCX: 00007f4240d8e929 [ 410.880085][T11942] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 410.880093][T11942] RBP: 00007f4240e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 410.880101][T11942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.880110][T11942] R13: 0000000000000000 R14: 00007f4240fb5fa0 R15: 00007ffc3babd108 [ 410.880130][T11942] [ 410.880140][T11942] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory clntXX [ 411.148698][T11926] kexec: Could not allocate control_code_buffer [ 411.394114][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 411.610268][T11963] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 412.244784][T11968] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 412.464494][T11969] ubi: mtd0 is already attached to ubi0 [ 412.771371][ T5842] Bluetooth: hci2: unexpected event 0x1d length: 10 > 5 [ 413.130157][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 413.581585][T12007] binder: 11992:12007 ioctl c018620c 0 returned -22 [ 413.865007][ T5842] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 416.056507][T12026] ubi: mtd0 is already attached to ubi0 [ 416.114869][T12039] random: crng reseeded on system resumption [ 416.774929][T12047] netlink: 226 bytes leftover after parsing attributes in process `syz.1.1520'. [ 416.855331][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'. [ 418.289705][T12070] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1525'. [ 419.602797][T12103] Process accounting paused [ 420.107833][T12123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1538'. [ 420.661423][T12132] FAULT_INJECTION: forcing a failure. [ 420.661423][T12132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.717186][T12132] CPU: 0 UID: 0 PID: 12132 Comm: syz.1.1542 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 420.717215][T12132] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 420.717221][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.717229][T12132] Call Trace: [ 420.717235][T12132] [ 420.717242][T12132] dump_stack_lvl+0x16c/0x1f0 [ 420.717268][T12132] should_fail_ex+0x512/0x640 [ 420.717291][T12132] should_fail_alloc_page+0xe7/0x130 [ 420.717307][T12132] prepare_alloc_pages+0x3c2/0x610 [ 420.717327][T12132] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 420.717350][T12132] ? stack_trace_save+0x8e/0xc0 [ 420.717366][T12132] ? __pfx_stack_trace_save+0x10/0x10 [ 420.717380][T12132] ? stack_depot_save_flags+0x28/0xa40 [ 420.717401][T12132] ? __kernel_text_address+0xd/0x40 [ 420.717424][T12132] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 420.717443][T12132] ? kasan_save_stack+0x42/0x60 [ 420.717461][T12132] ? kasan_save_track+0x14/0x30 [ 420.717479][T12132] ? snd_pcm_attach_substream+0x441/0xd60 [ 420.717497][T12132] ? snd_pcm_open_substream+0x8d/0x17f0 [ 420.717514][T12132] ? snd_pcm_oss_open+0x735/0x1400 [ 420.717529][T12132] ? soundcore_open+0x40c/0x580 [ 420.717548][T12132] ? chrdev_open+0x231/0x6a0 [ 420.717567][T12132] ? do_dentry_open+0x744/0x1c10 [ 420.717585][T12132] ? vfs_open+0x82/0x3f0 [ 420.717600][T12132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.717619][T12132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 420.717641][T12132] ? policy_nodemask+0xea/0x4e0 [ 420.717664][T12132] alloc_pages_mpol+0x1fb/0x550 [ 420.717678][T12132] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 420.717697][T12132] alloc_pages_noprof+0x131/0x390 [ 420.717711][T12132] alloc_pages_exact_noprof+0x37/0xe0 [ 420.717729][T12132] snd_pcm_attach_substream+0x468/0xd60 [ 420.717752][T12132] snd_pcm_open_substream+0x8d/0x17f0 [ 420.717772][T12132] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 420.717796][T12132] snd_pcm_oss_open+0x735/0x1400 [ 420.717818][T12132] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 420.717834][T12132] ? __lock_acquire+0xb8a/0x1c90 [ 420.717867][T12132] ? __pfx_default_wake_function+0x10/0x10 [ 420.717883][T12132] ? __lock_acquire+0xb8a/0x1c90 [ 420.717906][T12132] ? do_raw_spin_lock+0x12c/0x2b0 [ 420.717928][T12132] ? soundcore_open+0x35a/0x580 [ 420.717950][T12132] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 420.717966][T12132] soundcore_open+0x40c/0x580 [ 420.717989][T12132] ? __pfx_soundcore_open+0x10/0x10 [ 420.718009][T12132] chrdev_open+0x231/0x6a0 [ 420.718029][T12132] ? __pfx_apparmor_file_open+0x10/0x10 [ 420.718047][T12132] ? __pfx_chrdev_open+0x10/0x10 [ 420.718068][T12132] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 420.718090][T12132] do_dentry_open+0x744/0x1c10 [ 420.718110][T12132] ? __pfx_chrdev_open+0x10/0x10 [ 420.718135][T12132] vfs_open+0x82/0x3f0 [ 420.718152][T12132] path_openat+0x1de4/0x2cb0 [ 420.718177][T12132] ? __pfx_path_openat+0x10/0x10 [ 420.718197][T12132] ? __lock_acquire+0xb8a/0x1c90 [ 420.718216][T12132] do_filp_open+0x20b/0x470 [ 420.718236][T12132] ? __pfx_do_filp_open+0x10/0x10 [ 420.718268][T12132] ? alloc_fd+0x471/0x7d0 [ 420.718291][T12132] do_sys_openat2+0x11b/0x1d0 [ 420.718306][T12132] ? __pfx_do_sys_openat2+0x10/0x10 [ 420.718322][T12132] ? __sys_sendmsg+0x18c/0x220 [ 420.718348][T12132] __x64_sys_openat+0x174/0x210 [ 420.718364][T12132] ? __pfx___x64_sys_openat+0x10/0x10 [ 420.718387][T12132] do_syscall_64+0xcd/0x490 [ 420.718402][T12132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.718416][T12132] RIP: 0033:0x7f81f118e929 [ 420.718428][T12132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.718441][T12132] RSP: 002b:00007f81f202c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 420.718456][T12132] RAX: ffffffffffffffda RBX: 00007f81f13b5fa0 RCX: 00007f81f118e929 [ 420.718465][T12132] RDX: 0000000000121b42 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 420.718475][T12132] RBP: 00007f81f1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 420.718484][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.718492][T12132] R13: 0000000000000000 R14: 00007f81f13b5fa0 R15: 00007ffc4fb76618 [ 420.718511][T12132] [ 421.184908][T12132] kvm: kvm [12131]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001f) [ 422.918810][T12174] FAULT_INJECTION: forcing a failure. [ 422.918810][T12174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.011175][T12174] CPU: 0 UID: 0 PID: 12174 Comm: syz.0.1552 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 423.011227][T12174] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 423.011234][T12174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 423.011243][T12174] Call Trace: [ 423.011248][T12174] [ 423.011255][T12174] dump_stack_lvl+0x16c/0x1f0 [ 423.011283][T12174] should_fail_ex+0x512/0x640 [ 423.011312][T12174] _copy_from_user+0x2e/0xd0 [ 423.011335][T12174] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 423.011366][T12174] snd_rawmidi_write+0x26e/0xc10 [ 423.011389][T12174] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 423.011408][T12174] ? __pfx_default_wake_function+0x10/0x10 [ 423.011424][T12174] ? bpf_lsm_file_permission+0x9/0x10 [ 423.011439][T12174] ? security_file_permission+0x71/0x210 [ 423.011458][T12174] ? rw_verify_area+0xcf/0x680 [ 423.011476][T12174] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 423.011492][T12174] vfs_write+0x29d/0x1150 [ 423.011515][T12174] ? __pfx_vfs_write+0x10/0x10 [ 423.011532][T12174] ? find_held_lock+0x2b/0x80 [ 423.011546][T12174] ? __fget_files+0x204/0x3c0 [ 423.011566][T12174] ? __fget_files+0x20e/0x3c0 [ 423.011589][T12174] ksys_write+0x1f8/0x250 [ 423.011607][T12174] ? __pfx_ksys_write+0x10/0x10 [ 423.011631][T12174] do_syscall_64+0xcd/0x490 [ 423.011645][T12174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.011660][T12174] RIP: 0033:0x7fbc5218e929 [ 423.011673][T12174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.011687][T12174] RSP: 002b:00007fbc52faa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.011702][T12174] RAX: ffffffffffffffda RBX: 00007fbc523b6080 RCX: 00007fbc5218e929 [ 423.011713][T12174] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 000000000000000a [ 423.011722][T12174] RBP: 00007fbc52210b39 R08: 0000000000000000 R09: 0000000000000000 [ 423.011730][T12174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.011739][T12174] R13: 0000000000000000 R14: 00007fbc523b6080 R15: 00007ffcc6d9cda8 [ 423.011756][T12174] [ 423.222929][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.228547][T12194] FAULT_INJECTION: forcing a failure. [ 424.228547][T12194] name failslab, interval 1, probability 0, space 0, times 0 [ 424.440210][T12194] CPU: 0 UID: 0 PID: 12194 Comm: syz.2.1556 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 424.440239][T12194] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 424.440245][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.440254][T12194] Call Trace: [ 424.440259][T12194] [ 424.440265][T12194] dump_stack_lvl+0x16c/0x1f0 [ 424.440291][T12194] should_fail_ex+0x512/0x640 [ 424.440311][T12194] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 424.440333][T12194] should_failslab+0xc2/0x120 [ 424.440347][T12194] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 424.440367][T12194] ? security_file_alloc+0x34/0x2b0 [ 424.440388][T12194] security_file_alloc+0x34/0x2b0 [ 424.440405][T12194] init_file+0x93/0x4c0 [ 424.440426][T12194] alloc_empty_file+0x73/0x1e0 [ 424.440442][T12194] path_openat+0xda/0x2cb0 [ 424.440462][T12194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.440484][T12194] ? __pfx_path_openat+0x10/0x10 [ 424.440505][T12194] ? __lock_acquire+0xb8a/0x1c90 [ 424.440525][T12194] do_filp_open+0x20b/0x470 [ 424.440544][T12194] ? __pfx_do_filp_open+0x10/0x10 [ 424.440576][T12194] ? alloc_fd+0x471/0x7d0 [ 424.440599][T12194] do_sys_openat2+0x11b/0x1d0 [ 424.440614][T12194] ? __pfx_do_sys_openat2+0x10/0x10 [ 424.440635][T12194] __x64_sys_openat+0x174/0x210 [ 424.440651][T12194] ? __pfx___x64_sys_openat+0x10/0x10 [ 424.440674][T12194] do_syscall_64+0xcd/0x490 [ 424.440688][T12194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.440702][T12194] RIP: 0033:0x7f4240d8e929 [ 424.440715][T12194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.440728][T12194] RSP: 002b:00007f4241c96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 424.440742][T12194] RAX: ffffffffffffffda RBX: 00007f4240fb6080 RCX: 00007f4240d8e929 [ 424.440752][T12194] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 424.440761][T12194] RBP: 00007f4240e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 424.440769][T12194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.440778][T12194] R13: 0000000000000000 R14: 00007f4240fb6080 R15: 00007ffc3babd108 [ 424.440795][T12194] [ 424.662035][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.372010][T12218] program syz.0.1561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.549708][T12223] netlink: 'syz.2.1563': attribute type 1 has an invalid length. [ 426.959251][T12235] FAULT_INJECTION: forcing a failure. [ 426.959251][T12235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.176990][T12235] CPU: 0 UID: 0 PID: 12235 Comm: syz.1.1567 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 427.177017][T12235] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 427.177022][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 427.177031][T12235] Call Trace: [ 427.177036][T12235] [ 427.177042][T12235] dump_stack_lvl+0x16c/0x1f0 [ 427.177066][T12235] should_fail_ex+0x512/0x640 [ 427.177089][T12235] _copy_from_iter+0x29f/0x16f0 [ 427.177112][T12235] ? __alloc_skb+0x200/0x380 [ 427.177133][T12235] ? __pfx__copy_from_iter+0x10/0x10 [ 427.177154][T12235] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 427.177182][T12235] netlink_sendmsg+0x829/0xdd0 [ 427.177200][T12235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.177223][T12235] ____sys_sendmsg+0xa98/0xc70 [ 427.177240][T12235] ? copy_msghdr_from_user+0x10a/0x160 [ 427.177261][T12235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.177286][T12235] ___sys_sendmsg+0x134/0x1d0 [ 427.177307][T12235] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.177326][T12235] ? __lock_acquire+0x622/0x1c90 [ 427.177370][T12235] __sys_sendmsg+0x16d/0x220 [ 427.177391][T12235] ? __pfx___sys_sendmsg+0x10/0x10 [ 427.177424][T12235] do_syscall_64+0xcd/0x490 [ 427.177439][T12235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.177453][T12235] RIP: 0033:0x7f81f118e929 [ 427.177465][T12235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.177479][T12235] RSP: 002b:00007f81f200b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.177493][T12235] RAX: ffffffffffffffda RBX: 00007f81f13b6080 RCX: 00007f81f118e929 [ 427.177503][T12235] RDX: 0000000020000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 427.177512][T12235] RBP: 00007f81f200b090 R08: 0000000000000000 R09: 0000000000000000 [ 427.177521][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.177530][T12235] R13: 0000000000000001 R14: 00007f81f13b6080 R15: 00007ffc4fb76618 [ 427.177548][T12235] [ 427.384159][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.118235][T12249] ubi: mtd0 is already attached to ubi0 [ 428.186574][T12250] Unable to find swap-space signature [ 428.957553][T12254] FAULT_INJECTION: forcing a failure. [ 428.957553][T12254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.040669][T12254] CPU: 0 UID: 0 PID: 12254 Comm: syz.0.1571 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 429.040697][T12254] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 429.040703][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.040712][T12254] Call Trace: [ 429.040717][T12254] [ 429.040723][T12254] dump_stack_lvl+0x16c/0x1f0 [ 429.040748][T12254] should_fail_ex+0x512/0x640 [ 429.040771][T12254] _copy_from_user+0x2e/0xd0 [ 429.040794][T12254] kstrtouint_from_user+0xd6/0x1d0 [ 429.040811][T12254] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 429.040830][T12254] ? __lock_acquire+0xb8a/0x1c90 [ 429.040858][T12254] proc_fail_nth_write+0x83/0x250 [ 429.040876][T12254] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 429.040897][T12254] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 429.040911][T12254] vfs_write+0x29d/0x1150 [ 429.040934][T12254] ? __pfx___mutex_lock+0x10/0x10 [ 429.040947][T12254] ? __pfx_vfs_write+0x10/0x10 [ 429.040982][T12254] ? __fget_files+0x20e/0x3c0 [ 429.041006][T12254] ksys_write+0x12a/0x250 [ 429.041024][T12254] ? __pfx_ksys_write+0x10/0x10 [ 429.041048][T12254] do_syscall_64+0xcd/0x490 [ 429.041062][T12254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.041076][T12254] RIP: 0033:0x7fbc5218d3df [ 429.041089][T12254] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 429.041103][T12254] RSP: 002b:00007fbc52fcb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 429.041117][T12254] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbc5218d3df [ 429.041126][T12254] RDX: 0000000000000001 RSI: 00007fbc52fcb0a0 RDI: 0000000000000004 [ 429.041135][T12254] RBP: 00007fbc52fcb090 R08: 0000000000000000 R09: 0000000000000000 [ 429.041144][T12254] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 429.041152][T12254] R13: 0000000000000000 R14: 00007fbc523b5fa0 R15: 00007ffcc6d9cda8 [ 429.041171][T12254] [ 429.237608][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.683847][T12267] netlink: 'syz.2.1575': attribute type 1 has an invalid length. [ 430.303173][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 431.578540][T12298] netlink: 'syz.4.1585': attribute type 1 has an invalid length. [ 431.881406][T12304] usb usb28: usbfs: process 12304 (syz.1.1586) did not claim interface 0 before use [ 433.389794][T12343] FAULT_INJECTION: forcing a failure. [ 433.389794][T12343] name failslab, interval 1, probability 0, space 0, times 0 [ 433.477048][T12343] CPU: 0 UID: 0 PID: 12343 Comm: syz.1.1596 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 433.477077][T12343] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 433.477082][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.477091][T12343] Call Trace: [ 433.477096][T12343] [ 433.477102][T12343] dump_stack_lvl+0x16c/0x1f0 [ 433.477130][T12343] should_fail_ex+0x512/0x640 [ 433.477156][T12343] ? fs_reclaim_acquire+0xae/0x150 [ 433.477174][T12343] should_failslab+0xc2/0x120 [ 433.477188][T12343] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 433.477209][T12343] ? security_inode_alloc+0x3b/0x2b0 [ 433.477227][T12343] security_inode_alloc+0x3b/0x2b0 [ 433.477243][T12343] inode_init_always_gfp+0xce4/0x1030 [ 433.477266][T12343] alloc_inode+0x86/0x240 [ 433.477280][T12343] new_inode+0x22/0x1c0 [ 433.477296][T12343] proc_pid_make_inode+0x22/0x160 [ 433.477315][T12343] proc_pident_instantiate+0x85/0x320 [ 433.477336][T12343] proc_pident_lookup+0x21d/0x290 [ 433.477358][T12343] ? __pfx_proc_tgid_base_lookup+0x10/0x10 [ 433.477377][T12343] lookup_open.isra.0+0x4d7/0x1580 [ 433.477398][T12343] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 433.477426][T12343] ? mnt_get_write_access+0x20c/0x300 [ 433.477445][T12343] path_openat+0x893/0x2cb0 [ 433.477470][T12343] ? __pfx_path_openat+0x10/0x10 [ 433.477490][T12343] ? __lock_acquire+0xb8a/0x1c90 [ 433.477519][T12343] do_filp_open+0x20b/0x470 [ 433.477539][T12343] ? __pfx_do_filp_open+0x10/0x10 [ 433.477564][T12343] ? __pfx_kfree_link+0x10/0x10 [ 433.477586][T12343] ? alloc_fd+0x471/0x7d0 [ 433.477609][T12343] do_sys_openat2+0x11b/0x1d0 [ 433.477625][T12343] ? __pfx_do_sys_openat2+0x10/0x10 [ 433.477639][T12343] ? __pfx_from_kuid+0x10/0x10 [ 433.477666][T12343] __x64_sys_openat+0x174/0x210 [ 433.477682][T12343] ? __pfx___x64_sys_openat+0x10/0x10 [ 433.477697][T12343] ? ksys_write+0x1ac/0x250 [ 433.477722][T12343] do_syscall_64+0xcd/0x490 [ 433.477737][T12343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.477751][T12343] RIP: 0033:0x7f81f118e929 [ 433.477764][T12343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.477778][T12343] RSP: 002b:00007f81f202c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 433.477792][T12343] RAX: ffffffffffffffda RBX: 00007f81f13b5fa0 RCX: 00007f81f118e929 [ 433.477802][T12343] RDX: 0000000000100382 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 433.477811][T12343] RBP: 00007f81f202c090 R08: 0000000000000000 R09: 0000000000000000 [ 433.477820][T12343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.477828][T12343] R13: 0000000000000000 R14: 00007f81f13b5fa0 R15: 00007ffc4fb76618 [ 433.477846][T12343] [ 433.751553][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.054596][T12357] Invalid ELF header magic: != ELF [ 434.729809][T12375] netlink: 'syz.4.1606': attribute type 1 has an invalid length. [ 434.890790][ T5842] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 434.890814][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 434.909221][ T5842] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 434.909266][ T5842] Bluetooth: hci1: adv larger than maximum supported [ 434.918207][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 434.932192][ T5842] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 434.932212][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 434.948141][ T5842] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 434.948160][ T5842] Bluetooth: hci1: adv larger than maximum supported [ 434.955894][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 434.970950][ T5842] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 434.970970][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 434.990091][ T5842] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 434.990114][ T5842] Bluetooth: hci1: adv larger than maximum supported [ 434.998131][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.012304][ T5842] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 435.012326][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.031423][ T5842] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 435.031444][ T5842] Bluetooth: hci1: adv larger than maximum supported [ 435.038902][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.052895][ T5842] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 435.052916][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.070873][ T5842] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 435.070895][ T5842] Bluetooth: hci1: adv larger than maximum supported [ 435.078025][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.096231][ T5842] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 435.096254][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.111319][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.117419][ T5842] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 435.117439][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.138671][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.144994][ T5842] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 435.145013][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.163326][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.169465][ T5842] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 435.169485][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.184315][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.190898][ T5842] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 435.190916][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.205760][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.211756][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.223440][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.229794][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.237408][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.251033][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.258830][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.264839][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.272334][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.283421][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.291252][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.297722][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.305280][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.311251][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.319235][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.325469][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.332942][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.340061][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.347908][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.353963][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.361466][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.368343][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.375959][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.381897][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.389780][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.396108][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.409001][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.415026][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.422732][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.429061][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.438046][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.445173][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.452667][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.458782][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.466706][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.472701][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.482029][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.488021][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.496144][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.502096][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.510636][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.516817][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.532491][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.538536][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.546114][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.552046][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.559606][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.568109][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.575786][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.581717][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.589460][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.595795][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.604522][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.610502][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.623514][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.629478][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.638105][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.644456][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.651933][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.658205][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.672352][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.678397][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.688417][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.694614][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.702595][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.708615][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.716475][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.722423][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.733403][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.740040][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.753353][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.759693][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.767321][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.777678][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.785710][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.791674][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.799642][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.806339][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.814044][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.819972][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.827755][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.834163][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.842303][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.853032][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.860643][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.870391][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.878326][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.885150][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.892681][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.898746][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.907873][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.914706][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.922210][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.928987][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.936983][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.946653][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.954718][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.960688][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.971182][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.977229][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.984720][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 435.990657][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 435.998642][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 436.004627][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 436.012836][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 436.022724][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 436.030545][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 436.037091][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 436.045614][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 436.051552][ T5842] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 436.060774][ T5842] Bluetooth: hci1: Malformed LE Event: 0x0d [ 436.310805][T12399] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1610'. [ 436.748727][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'. [ 436.997804][T12413] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1614'. [ 437.041270][T12414] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1614'. [ 437.118826][T12413] netlink: 290 bytes leftover after parsing attributes in process `syz.2.1614'. [ 437.217896][T12414] netlink: 290 bytes leftover after parsing attributes in process `syz.2.1614'. [ 437.671804][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'. [ 437.748543][T12427] FAULT_INJECTION: forcing a failure. [ 437.748543][T12427] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 437.932760][T12427] CPU: 0 UID: 0 PID: 12427 Comm: syz.1.1619 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 437.932789][T12427] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 437.932795][T12427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.932804][T12427] Call Trace: [ 437.932809][T12427] [ 437.932816][T12427] dump_stack_lvl+0x16c/0x1f0 [ 437.932841][T12427] should_fail_ex+0x512/0x640 [ 437.932864][T12427] should_fail_alloc_page+0xe7/0x130 [ 437.932880][T12427] prepare_alloc_pages+0x3c2/0x610 [ 437.932900][T12427] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 437.932924][T12427] ? __lock_acquire+0xb8a/0x1c90 [ 437.932946][T12427] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 437.932969][T12427] ? __lock_acquire+0xb8a/0x1c90 [ 437.932994][T12427] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 437.933021][T12427] ? policy_nodemask+0xea/0x4e0 [ 437.933052][T12427] alloc_pages_mpol+0x1fb/0x550 [ 437.933073][T12427] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 437.933092][T12427] folio_alloc_mpol_noprof+0x36/0x2f0 [ 437.933110][T12427] vma_alloc_folio_noprof+0xed/0x1e0 [ 437.933125][T12427] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 437.933140][T12427] ? find_held_lock+0x2b/0x80 [ 437.933154][T12427] ? __handle_mm_fault+0x1092/0x5490 [ 437.933175][T12427] __handle_mm_fault+0x2f21/0x5490 [ 437.933200][T12427] ? __pfx___handle_mm_fault+0x10/0x10 [ 437.933218][T12427] ? lock_vma_under_rcu+0x47d/0x970 [ 437.933235][T12427] ? lock_vma_under_rcu+0x47d/0x970 [ 437.933267][T12427] handle_mm_fault+0x589/0xd10 [ 437.933285][T12427] ? __pkru_allows_pkey+0x41/0xb0 [ 437.933304][T12427] do_user_addr_fault+0x60c/0x1370 [ 437.933324][T12427] ? rcu_is_watching+0x12/0xc0 [ 437.933344][T12427] exc_page_fault+0x5c/0xb0 [ 437.933364][T12427] asm_exc_page_fault+0x26/0x30 [ 437.933378][T12427] RIP: 0033:0x7f81f113bf4b [ 437.933390][T12427] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 437.933404][T12427] RSP: 002b:00007f81f2029e10 EFLAGS: 00010246 [ 437.933416][T12427] RAX: 00007f81f202bf30 RBX: 00007f81f1384620 RCX: 0000000000000000 [ 437.933425][T12427] RDX: 00007f81f202bf78 RSI: 00007f81f11edbf8 RDI: 00007f81f2029e30 [ 437.933434][T12427] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 437.933443][T12427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.933451][T12427] R13: 0000000000000000 R14: 00007f81f13b5fa0 R15: 00007ffc4fb76618 [ 437.933469][T12427] [ 438.946975][T12450] can: request_module (can-proto-3) failed. [ 439.950787][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.957991][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.992928][T12475] netlink: 'syz.0.1629': attribute type 1 has an invalid length. [ 441.184102][T12499] FAULT_INJECTION: forcing a failure. [ 441.184102][T12499] name failslab, interval 1, probability 0, space 0, times 0 [ 441.388005][T12499] CPU: 0 UID: 0 PID: 12499 Comm: syz.1.1635 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 441.388035][T12499] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 441.388041][T12499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 441.388052][T12499] Call Trace: [ 441.388058][T12499] [ 441.388070][T12499] dump_stack_lvl+0x16c/0x1f0 [ 441.388097][T12499] should_fail_ex+0x512/0x640 [ 441.388117][T12499] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 441.388141][T12499] should_failslab+0xc2/0x120 [ 441.388155][T12499] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 441.388175][T12499] ? alloc_inode+0x64/0x240 [ 441.388189][T12499] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 441.388211][T12499] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 441.388227][T12499] alloc_inode+0x64/0x240 [ 441.388241][T12499] new_inode+0x22/0x1c0 [ 441.388257][T12499] __rpc_create_common+0x57/0x2f0 [ 441.388278][T12499] rpc_populate.constprop.0+0x20a/0x5d0 [ 441.388303][T12499] rpc_fill_super+0x485/0x840 [ 441.388322][T12499] ? sget_fc+0x808/0xc20 [ 441.388343][T12499] ? __pfx_rpc_fill_super+0x10/0x10 [ 441.388362][T12499] get_tree_keyed+0x10b/0x1d0 [ 441.388381][T12499] vfs_get_tree+0x8b/0x340 [ 441.388397][T12499] vfs_cmd_create+0xd7/0x2a0 [ 441.388419][T12499] __do_sys_fsconfig+0x7b8/0xbe0 [ 441.388434][T12499] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 441.388457][T12499] do_syscall_64+0xcd/0x490 [ 441.388472][T12499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.388492][T12499] RIP: 0033:0x7f81f118e929 [ 441.388505][T12499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.388519][T12499] RSP: 002b:00007f81f202c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 441.388534][T12499] RAX: ffffffffffffffda RBX: 00007f81f13b5fa0 RCX: 00007f81f118e929 [ 441.388544][T12499] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 441.388552][T12499] RBP: 00007f81f1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 441.388560][T12499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.388569][T12499] R13: 0000000000000000 R14: 00007f81f13b5fa0 R15: 00007ffc4fb76618 [ 441.388587][T12499] [ 441.388593][T12499] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry info [ 441.823380][ T30] audit: type=1800 audit(4294967644.500:11): pid=12512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1639" name="discovery_nqn" dev="configfs" ino=45723 res=0 errno=0 [ 442.555733][T12523] netlink: 'syz.0.1640': attribute type 1 has an invalid length. [ 443.505337][T12499] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory clntXX [ 445.723377][T12566] usb usb16: usbfs: process 12566 (syz.1.1645) did not claim interface 0 before use [ 445.756806][T12576] FAULT_INJECTION: forcing a failure. [ 445.756806][T12576] name failslab, interval 1, probability 0, space 0, times 0 [ 445.806201][T12576] CPU: 0 UID: 0 PID: 12576 Comm: syz.4.1653 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 445.806229][T12576] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 445.806236][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 445.806244][T12576] Call Trace: [ 445.806250][T12576] [ 445.806257][T12576] dump_stack_lvl+0x16c/0x1f0 [ 445.806284][T12576] should_fail_ex+0x512/0x640 [ 445.806310][T12576] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 445.806334][T12576] should_failslab+0xc2/0x120 [ 445.806349][T12576] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 445.806370][T12576] ? alloc_inode+0x64/0x240 [ 445.806385][T12576] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 445.806407][T12576] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 445.806424][T12576] alloc_inode+0x64/0x240 [ 445.806438][T12576] new_inode+0x22/0x1c0 [ 445.806454][T12576] __rpc_create_common+0x57/0x2f0 [ 445.806476][T12576] rpc_populate.constprop.0+0x153/0x5d0 [ 445.806501][T12576] rpc_fill_super+0x345/0x840 [ 445.806519][T12576] ? sget_fc+0x808/0xc20 [ 445.806540][T12576] ? __pfx_rpc_fill_super+0x10/0x10 [ 445.806558][T12576] get_tree_keyed+0x10b/0x1d0 [ 445.806578][T12576] vfs_get_tree+0x8b/0x340 [ 445.806593][T12576] vfs_cmd_create+0xd7/0x2a0 [ 445.806615][T12576] __do_sys_fsconfig+0x7b8/0xbe0 [ 445.806630][T12576] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 445.806653][T12576] do_syscall_64+0xcd/0x490 [ 445.806668][T12576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.806682][T12576] RIP: 0033:0x7fcc5018e929 [ 445.806695][T12576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.806709][T12576] RSP: 002b:00007fcc50f71038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 445.806723][T12576] RAX: ffffffffffffffda RBX: 00007fcc503b5fa0 RCX: 00007fcc5018e929 [ 445.806733][T12576] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 445.806741][T12576] RBP: 00007fcc50210b39 R08: 0000000000000000 R09: 0000000000000000 [ 445.806750][T12576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.806758][T12576] R13: 0000000000000000 R14: 00007fcc503b5fa0 R15: 00007ffd3b862a38 [ 445.806778][T12576] [ 445.806810][T12576] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry clntXX [ 447.179852][T12576] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory gssd [ 448.012332][T12599] zswap: compressor 000 not available [ 448.101917][T12605] netlink: 'syz.1.1657': attribute type 1 has an invalid length. [ 450.005954][T12644] FAULT_INJECTION: forcing a failure. [ 450.005954][T12644] name failslab, interval 1, probability 0, space 0, times 0 [ 450.066010][T12644] CPU: 0 UID: 0 PID: 12644 Comm: syz.2.1669 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 450.066038][T12644] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 450.066044][T12644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.066053][T12644] Call Trace: [ 450.066058][T12644] [ 450.066065][T12644] dump_stack_lvl+0x16c/0x1f0 [ 450.066091][T12644] should_fail_ex+0x512/0x640 [ 450.066110][T12644] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 450.066133][T12644] should_failslab+0xc2/0x120 [ 450.066148][T12644] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 450.066168][T12644] ? lockdep_init_map_type+0x5c/0x280 [ 450.066186][T12644] ? __d_alloc+0x31/0xaa0 [ 450.066212][T12644] __d_alloc+0x31/0xaa0 [ 450.066234][T12644] d_alloc_pseudo+0x1c/0xc0 [ 450.066249][T12644] alloc_file_pseudo+0xcf/0x230 [ 450.066265][T12644] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 450.066280][T12644] ? alloc_fd+0x471/0x7d0 [ 450.066300][T12644] sock_alloc_file+0x50/0x210 [ 450.066316][T12644] __sys_socket+0x1c0/0x260 [ 450.066331][T12644] ? fput+0x70/0xf0 [ 450.066343][T12644] ? __pfx___sys_socket+0x10/0x10 [ 450.066360][T12644] ? syscall_user_dispatch+0x78/0x140 [ 450.066384][T12644] __x64_sys_socket+0x72/0xb0 [ 450.066402][T12644] do_syscall_64+0xcd/0x490 [ 450.066416][T12644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.066431][T12644] RIP: 0033:0x7f4240d8e929 [ 450.066443][T12644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.066457][T12644] RSP: 002b:00007f4241cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 450.066471][T12644] RAX: ffffffffffffffda RBX: 00007f4240fb5fa0 RCX: 00007f4240d8e929 [ 450.066481][T12644] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 450.066489][T12644] RBP: 00007f4240e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 450.066498][T12644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.066506][T12644] R13: 0000000000000000 R14: 00007f4240fb5fa0 R15: 00007ffc3babd108 [ 450.066524][T12644] [ 450.892077][T12616] Process accounting resumed [ 451.574457][T12654] Invalid ELF header magic: != ELF [ 452.300177][T12665] zswap: compressor not available [ 452.729803][T12682] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1680'. [ 453.183484][T12693] netlink: 'syz.1.1683': attribute type 1 has an invalid length. [ 453.802628][T12707] FAULT_INJECTION: forcing a failure. [ 453.802628][T12707] name failslab, interval 1, probability 0, space 0, times 0 [ 454.006494][T12707] CPU: 0 UID: 0 PID: 12707 Comm: syz.1.1690 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 454.006523][T12707] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 454.006529][T12707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.006538][T12707] Call Trace: [ 454.006544][T12707] [ 454.006557][T12707] dump_stack_lvl+0x16c/0x1f0 [ 454.006584][T12707] should_fail_ex+0x512/0x640 [ 454.006604][T12707] ? __kvmalloc_node_noprof+0x124/0x620 [ 454.006635][T12707] should_failslab+0xc2/0x120 [ 454.006650][T12707] __kvmalloc_node_noprof+0x137/0x620 [ 454.006670][T12707] ? io_alloc_cache_init+0x33/0x170 [ 454.006694][T12707] ? io_alloc_cache_init+0x33/0x170 [ 454.006716][T12707] io_alloc_cache_init+0x33/0x170 [ 454.006740][T12707] io_uring_setup+0x63b/0x2080 [ 454.006761][T12707] ? __pfx_io_uring_setup+0x10/0x10 [ 454.006781][T12707] ? do_futex+0x122/0x350 [ 454.006798][T12707] ? __pfx_do_futex+0x10/0x10 [ 454.006813][T12707] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 454.006845][T12707] ? xfd_validate_state+0x61/0x180 [ 454.006861][T12707] ? __pfx_do_writev+0x10/0x10 [ 454.006883][T12707] __x64_sys_io_uring_setup+0xc2/0x170 [ 454.006902][T12707] do_syscall_64+0xcd/0x490 [ 454.006920][T12707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.006938][T12707] RIP: 0033:0x7f81f118e929 [ 454.006951][T12707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.006964][T12707] RSP: 002b:00007f81f202c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 454.006980][T12707] RAX: ffffffffffffffda RBX: 00007f81f13b5fa0 RCX: 00007f81f118e929 [ 454.006993][T12707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 454.007001][T12707] RBP: 00007f81f1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 454.007010][T12707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.007019][T12707] R13: 0000000000000000 R14: 00007f81f13b5fa0 R15: 00007ffc4fb76618 [ 454.007037][T12707] [ 454.214331][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.253028][T12707] ubi: mtd0 is already attached to ubi0 [ 454.664613][T12711] zswap: compressor not available [ 454.684651][T12722] Invalid ELF header magic: != ELF [ 454.851435][T12725] FAULT_INJECTION: forcing a failure. [ 454.851435][T12725] name failslab, interval 1, probability 0, space 0, times 0 [ 454.895373][T12725] CPU: 0 UID: 0 PID: 12725 Comm: syz.0.1695 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 454.895403][T12725] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 454.895410][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.895420][T12725] Call Trace: [ 454.895426][T12725] [ 454.895432][T12725] dump_stack_lvl+0x16c/0x1f0 [ 454.895466][T12725] should_fail_ex+0x512/0x640 [ 454.895487][T12725] ? fs_reclaim_acquire+0xae/0x150 [ 454.895507][T12725] should_failslab+0xc2/0x120 [ 454.895522][T12725] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 454.895545][T12725] ? security_inode_alloc+0x3b/0x2b0 [ 454.895564][T12725] security_inode_alloc+0x3b/0x2b0 [ 454.895581][T12725] inode_init_always_gfp+0xce4/0x1030 [ 454.895603][T12725] alloc_inode+0x86/0x240 [ 454.895618][T12725] new_inode+0x22/0x1c0 [ 454.895634][T12725] __rpc_create_common+0x57/0x2f0 [ 454.895657][T12725] rpc_populate.constprop.0+0x153/0x5d0 [ 454.895682][T12725] rpc_fill_super+0x345/0x840 [ 454.895701][T12725] ? sget_fc+0x808/0xc20 [ 454.895722][T12725] ? __pfx_rpc_fill_super+0x10/0x10 [ 454.895742][T12725] get_tree_keyed+0x10b/0x1d0 [ 454.895761][T12725] vfs_get_tree+0x8b/0x340 [ 454.895777][T12725] vfs_cmd_create+0xd7/0x2a0 [ 454.895800][T12725] __do_sys_fsconfig+0x7b8/0xbe0 [ 454.895815][T12725] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 454.895838][T12725] do_syscall_64+0xcd/0x490 [ 454.895853][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.895868][T12725] RIP: 0033:0x7fbc5218e929 [ 454.895880][T12725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.895896][T12725] RSP: 002b:00007fbc52fcb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 454.895910][T12725] RAX: ffffffffffffffda RBX: 00007fbc523b5fa0 RCX: 00007fbc5218e929 [ 454.895919][T12725] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 454.895927][T12725] RBP: 00007fbc52210b39 R08: 0000000000000000 R09: 0000000000000000 [ 454.895936][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.895944][T12725] R13: 0000000000000000 R14: 00007fbc523b5fa0 R15: 00007ffcc6d9cda8 [ 454.895963][T12725] [ 454.895983][T12725] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry clntXX [ 456.200257][T12725] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory gssd [ 456.667677][T12760] ubi: mtd0 is already attached to ubi0 [ 457.267969][T12767] zswap: compressor 000 not available [ 457.623015][T12781] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1706'. [ 458.070772][T12792] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 458.419243][T12795] FAULT_INJECTION: forcing a failure. [ 458.419243][T12795] name failslab, interval 1, probability 0, space 0, times 0 [ 458.522683][T12795] CPU: 0 UID: 0 PID: 12795 Comm: syz.4.1711 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 458.522713][T12795] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 458.522719][T12795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 458.522727][T12795] Call Trace: [ 458.522734][T12795] [ 458.522740][T12795] dump_stack_lvl+0x16c/0x1f0 [ 458.522766][T12795] should_fail_ex+0x512/0x640 [ 458.522786][T12795] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 458.522816][T12795] should_failslab+0xc2/0x120 [ 458.522831][T12795] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 458.522853][T12795] ? alloc_inode+0x64/0x240 [ 458.522867][T12795] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 458.522890][T12795] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 458.522907][T12795] alloc_inode+0x64/0x240 [ 458.522921][T12795] new_inode+0x22/0x1c0 [ 458.522937][T12795] __rpc_create_common+0x57/0x2f0 [ 458.522959][T12795] rpc_populate.constprop.0+0x20a/0x5d0 [ 458.522984][T12795] rpc_fill_super+0x485/0x840 [ 458.523003][T12795] ? sget_fc+0x808/0xc20 [ 458.523023][T12795] ? __pfx_rpc_fill_super+0x10/0x10 [ 458.523042][T12795] get_tree_keyed+0x10b/0x1d0 [ 458.523061][T12795] vfs_get_tree+0x8b/0x340 [ 458.523077][T12795] vfs_cmd_create+0xd7/0x2a0 [ 458.523099][T12795] __do_sys_fsconfig+0x7b8/0xbe0 [ 458.523114][T12795] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 458.523136][T12795] do_syscall_64+0xcd/0x490 [ 458.523151][T12795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.523171][T12795] RIP: 0033:0x7fcc5018e929 [ 458.523187][T12795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.523201][T12795] RSP: 002b:00007fcc50f71038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 458.523215][T12795] RAX: ffffffffffffffda RBX: 00007fcc503b5fa0 RCX: 00007fcc5018e929 [ 458.523225][T12795] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 458.523234][T12795] RBP: 00007fcc50210b39 R08: 0000000000000000 R09: 0000000000000000 [ 458.523243][T12795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.523251][T12795] R13: 0000000000000000 R14: 00007fcc503b5fa0 R15: 00007ffd3b862a38 [ 458.523271][T12795] [ 458.915928][T12802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1714'. [ 459.134084][T12806] Invalid ELF header magic: != ELF [ 459.458897][T12795] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry info [ 459.544176][T12795] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory clntXX [ 459.582893][T12813] ubi: mtd0 is already attached to ubi0 [ 460.447086][ T30] audit: type=1804 audit(4294967663.160:12): pid=12825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1719" name="/newroot/sys/kernel/tracing/tracing_on" dev="tracefs" ino=1254 res=1 errno=0 [ 461.293437][T12840] program syz.1.1723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.545757][T12840] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 462.539670][T12854] FAULT_INJECTION: forcing a failure. [ 462.539670][T12854] name failslab, interval 1, probability 0, space 0, times 0 [ 462.637058][T12854] CPU: 0 UID: 0 PID: 12854 Comm: syz.1.1727 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 462.637086][T12854] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 462.637092][T12854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.637100][T12854] Call Trace: [ 462.637106][T12854] [ 462.637112][T12854] dump_stack_lvl+0x16c/0x1f0 [ 462.637137][T12854] should_fail_ex+0x512/0x640 [ 462.637157][T12854] ? fs_reclaim_acquire+0xae/0x150 [ 462.637175][T12854] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 462.637194][T12854] should_failslab+0xc2/0x120 [ 462.637208][T12854] __kmalloc_noprof+0xd2/0x510 [ 462.637232][T12854] tomoyo_realpath_from_path+0xc2/0x6e0 [ 462.637252][T12854] ? tomoyo_profile+0x47/0x60 [ 462.637275][T12854] tomoyo_path_number_perm+0x245/0x580 [ 462.637290][T12854] ? tomoyo_path_number_perm+0x237/0x580 [ 462.637308][T12854] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 462.637325][T12854] ? find_held_lock+0x2b/0x80 [ 462.637356][T12854] ? find_held_lock+0x2b/0x80 [ 462.637369][T12854] ? hook_file_ioctl_common+0x145/0x410 [ 462.637388][T12854] ? __fget_files+0x20e/0x3c0 [ 462.637409][T12854] security_file_ioctl+0x9b/0x240 [ 462.637428][T12854] __x64_sys_ioctl+0xb7/0x210 [ 462.637446][T12854] do_syscall_64+0xcd/0x490 [ 462.637461][T12854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.637475][T12854] RIP: 0033:0x7f81f118e929 [ 462.637487][T12854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.637501][T12854] RSP: 002b:00007f81f202c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.637516][T12854] RAX: ffffffffffffffda RBX: 00007f81f13b5fa0 RCX: 00007f81f118e929 [ 462.637526][T12854] RDX: 00002000000000c0 RSI: 0000000040247007 RDI: 0000000000000003 [ 462.637535][T12854] RBP: 00007f81f202c090 R08: 0000000000000000 R09: 0000000000000000 [ 462.637543][T12854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.637551][T12854] R13: 0000000000000000 R14: 00007f81f13b5fa0 R15: 00007ffc4fb76618 [ 462.637569][T12854] [ 462.637576][T12854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 464.952043][T12882] FAULT_INJECTION: forcing a failure. [ 464.952043][T12882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.999701][T12883] random: crng reseeded on system resumption [ 465.017917][T12882] CPU: 0 UID: 0 PID: 12882 Comm: syz.2.1729 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 465.017944][T12882] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 465.017950][T12882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.017959][T12882] Call Trace: [ 465.017964][T12882] [ 465.017970][T12882] dump_stack_lvl+0x16c/0x1f0 [ 465.017995][T12882] should_fail_ex+0x512/0x640 [ 465.018018][T12882] _copy_from_user+0x2e/0xd0 [ 465.018040][T12882] kstrtouint_from_user+0xd6/0x1d0 [ 465.018056][T12882] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 465.018073][T12882] ? __lock_acquire+0xb8a/0x1c90 [ 465.018100][T12882] proc_fail_nth_write+0x83/0x250 [ 465.018117][T12882] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 465.018139][T12882] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 465.018154][T12882] vfs_write+0x29d/0x1150 [ 465.018176][T12882] ? __pfx___mutex_lock+0x10/0x10 [ 465.018188][T12882] ? __pfx_vfs_write+0x10/0x10 [ 465.018212][T12882] ? __fget_files+0x20e/0x3c0 [ 465.018236][T12882] ksys_write+0x12a/0x250 [ 465.018254][T12882] ? __pfx_ksys_write+0x10/0x10 [ 465.018278][T12882] do_syscall_64+0xcd/0x490 [ 465.018293][T12882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.018308][T12882] RIP: 0033:0x7f4240d8d3df [ 465.018320][T12882] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 465.018334][T12882] RSP: 002b:00007f4241cb7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 465.018348][T12882] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4240d8d3df [ 465.018357][T12882] RDX: 0000000000000001 RSI: 00007f4241cb70a0 RDI: 0000000000000004 [ 465.018366][T12882] RBP: 00007f4241cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 465.018375][T12882] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 465.018383][T12882] R13: 0000000000000000 R14: 00007f4240fb5fa0 R15: 00007ffc3babd108 [ 465.018402][T12882] [ 465.217895][ C0] vkms_vblank_simulate: vblank timer overrun [ 465.375609][T12889] FAULT_INJECTION: forcing a failure. [ 465.375609][T12889] name failslab, interval 1, probability 0, space 0, times 0 [ 465.388387][T12889] CPU: 0 UID: 0 PID: 12889 Comm: syz.1.1736 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 465.388413][T12889] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 465.388425][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.388433][T12889] Call Trace: [ 465.388439][T12889] [ 465.388445][T12889] dump_stack_lvl+0x16c/0x1f0 [ 465.388472][T12889] should_fail_ex+0x512/0x640 [ 465.388491][T12889] ? fs_reclaim_acquire+0xae/0x150 [ 465.388509][T12889] should_failslab+0xc2/0x120 [ 465.388523][T12889] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 465.388544][T12889] ? security_inode_alloc+0x3b/0x2b0 [ 465.388563][T12889] security_inode_alloc+0x3b/0x2b0 [ 465.388578][T12889] inode_init_always_gfp+0xce4/0x1030 [ 465.388600][T12889] alloc_inode+0x86/0x240 [ 465.388614][T12889] new_inode+0x22/0x1c0 [ 465.388630][T12889] __rpc_create_common+0x57/0x2f0 [ 465.388653][T12889] rpc_populate.constprop.0+0x153/0x5d0 [ 465.388678][T12889] rpc_fill_super+0x2bc/0x840 [ 465.388696][T12889] ? sget_fc+0x808/0xc20 [ 465.388714][T12889] ? __pfx_set_anon_super_fc+0x10/0x10 [ 465.388732][T12889] ? __pfx_rpc_fill_super+0x10/0x10 [ 465.388751][T12889] get_tree_keyed+0x10b/0x1d0 [ 465.388771][T12889] vfs_get_tree+0x8b/0x340 [ 465.388786][T12889] vfs_cmd_create+0xd7/0x2a0 [ 465.388808][T12889] __do_sys_fsconfig+0x7b8/0xbe0 [ 465.388823][T12889] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 465.388845][T12889] do_syscall_64+0xcd/0x490 [ 465.388860][T12889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.388874][T12889] RIP: 0033:0x7f81f118e929 [ 465.388887][T12889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.388901][T12889] RSP: 002b:00007f81f202c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 465.388914][T12889] RAX: ffffffffffffffda RBX: 00007f81f13b5fa0 RCX: 00007f81f118e929 [ 465.388924][T12889] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 465.388932][T12889] RBP: 00007f81f1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 465.388941][T12889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.388950][T12889] R13: 0000000000000000 R14: 00007f81f13b5fa0 R15: 00007ffc4fb76618 [ 465.388969][T12889] [ 465.388992][T12889] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry gssd [ 465.668230][T12879] zswap: compressor 000 not available [ 465.828316][T12887] ubi: mtd0 is already attached to ubi0 [ 466.194705][T12889] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 466.996778][T12925] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1742'. [ 467.707430][T12946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1747'. [ 467.796382][T12946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.841130][T12946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.905016][T12946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.915369][T12946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.246346][T12954] ubi: mtd0 is already attached to ubi0 [ 468.653693][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1752'. [ 469.389481][T12984] netlink: 'syz.0.1755': attribute type 1 has an invalid length. [ 469.682527][T12988] zswap: compressor not available [ 469.752283][T12995] FAULT_INJECTION: forcing a failure. [ 469.752283][T12995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.833882][T12995] CPU: 0 UID: 0 PID: 12995 Comm: syz.2.1757 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 469.833910][T12995] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 469.833916][T12995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.833924][T12995] Call Trace: [ 469.833929][T12995] [ 469.833936][T12995] dump_stack_lvl+0x16c/0x1f0 [ 469.833977][T12995] should_fail_ex+0x512/0x640 [ 469.834000][T12995] _copy_to_user+0x32/0xd0 [ 469.834023][T12995] simple_read_from_buffer+0xcb/0x170 [ 469.834043][T12995] proc_fail_nth_read+0x197/0x270 [ 469.834060][T12995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.834078][T12995] ? rw_verify_area+0xcf/0x680 [ 469.834098][T12995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.834120][T12995] vfs_read+0x1e4/0xc60 [ 469.834141][T12995] ? __pfx___mutex_lock+0x10/0x10 [ 469.834154][T12995] ? __pfx_vfs_read+0x10/0x10 [ 469.834177][T12995] ? __fget_files+0x20e/0x3c0 [ 469.834201][T12995] ksys_read+0x12a/0x250 [ 469.834222][T12995] ? __pfx_ksys_read+0x10/0x10 [ 469.834246][T12995] do_syscall_64+0xcd/0x490 [ 469.834260][T12995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.834275][T12995] RIP: 0033:0x7f4240d8d33c [ 469.834287][T12995] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 469.834301][T12995] RSP: 002b:00007f4241c96030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.834315][T12995] RAX: ffffffffffffffda RBX: 00007f4240fb6080 RCX: 00007f4240d8d33c [ 469.834324][T12995] RDX: 000000000000000f RSI: 00007f4241c960a0 RDI: 000000000000000c [ 469.834333][T12995] RBP: 00007f4241c96090 R08: 0000000000000000 R09: 0000000000000000 [ 469.834341][T12995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.834349][T12995] R13: 0000000000000000 R14: 00007f4240fb6080 R15: 00007ffc3babd108 [ 469.834367][T12995] [ 471.308674][T13022] netlink: 1194 bytes leftover after parsing attributes in process `syz.4.1763'. [ 471.652697][T13034] ================================================================== [ 471.660780][T13034] BUG: KASAN: wild-memory-access in get_futex_key+0x595/0x1540 [ 471.668320][T13034] Read of size 8 at addr 1fffffff8ada0568 by task syz.4.1766/13034 [ 471.676195][T13034] [ 471.678508][T13034] CPU: 0 UID: 0 PID: 13034 Comm: syz.4.1766 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 471.678533][T13034] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 471.678539][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.678549][T13034] Call Trace: [ 471.678555][T13034] [ 471.678562][T13034] dump_stack_lvl+0x116/0x1f0 [ 471.678587][T13034] kasan_report+0xe0/0x110 [ 471.678601][T13034] ? get_futex_key+0x595/0x1540 [ 471.678618][T13034] kasan_check_range+0x100/0x1b0 [ 471.678634][T13034] get_futex_key+0x595/0x1540 [ 471.678651][T13034] ? __pfx_get_futex_key+0x10/0x10 [ 471.678666][T13034] ? rcu_is_watching+0x12/0xc0 [ 471.678679][T13034] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 471.678698][T13034] ? lockdep_hardirqs_on+0x7c/0x110 [ 471.678719][T13034] futex_wait_setup+0x9d/0x550 [ 471.678740][T13034] __futex_wait+0x194/0x2f0 [ 471.678758][T13034] ? __pfx___futex_wait+0x10/0x10 [ 471.678778][T13034] ? __pfx_futex_wake_mark+0x10/0x10 [ 471.678832][T13034] ? do_futex+0x122/0x350 [ 471.678848][T13034] ? __pfx_do_futex+0x10/0x10 [ 471.678866][T13034] __x64_sys_futex_wait+0x374/0x470 [ 471.678885][T13034] ? __pfx___x64_sys_futex_wait+0x10/0x10 [ 471.678905][T13034] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 471.678928][T13034] do_syscall_64+0xcd/0x490 [ 471.678941][T13034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.678956][T13034] RIP: 0033:0x7fcc5018e929 [ 471.678968][T13034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.678983][T13034] RSP: 002b:00007fcc50f50038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c7 [ 471.678998][T13034] RAX: ffffffffffffffda RBX: 00007fcc503b6080 RCX: 00007fcc5018e929 [ 471.679009][T13034] RDX: 0000000000000008 RSI: 0000000000000008 RDI: 0000200000000380 [ 471.679018][T13034] RBP: 00007fcc50210b39 R08: 0000200000000480 R09: 0000000000000000 [ 471.679028][T13034] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 471.679037][T13034] R13: 0000000000000000 R14: 00007fcc503b6080 R15: 00007ffd3b862a38 [ 471.679051][T13034] [ 471.679056][T13034] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 472.894058][T13034] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 472.901275][T13034] CPU: 0 UID: 0 PID: 13034 Comm: syz.4.1766 Tainted: G S U 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 472.914891][T13034] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [ 472.920500][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.930541][T13034] Call Trace: [ 472.933805][T13034] [ 472.936724][T13034] dump_stack_lvl+0x3d/0x1f0 [ 472.941309][T13034] panic+0x71c/0x800 [ 472.945193][T13034] ? __pfx_panic+0x10/0x10 [ 472.949595][T13034] ? rcu_is_watching+0x12/0xc0 [ 472.954345][T13034] ? preempt_schedule_thunk+0x16/0x30 [ 472.959717][T13034] ? get_futex_key+0x595/0x1540 [ 472.964557][T13034] ? preempt_schedule_common+0x44/0xc0 [ 472.970012][T13034] ? get_futex_key+0x595/0x1540 [ 472.974850][T13034] check_panic_on_warn+0xab/0xb0 [ 472.979778][T13034] end_report+0x107/0x170 [ 472.984101][T13034] kasan_report+0xee/0x110 [ 472.988501][T13034] ? get_futex_key+0x595/0x1540 [ 472.993336][T13034] kasan_check_range+0x100/0x1b0 [ 472.998272][T13034] get_futex_key+0x595/0x1540 [ 473.002945][T13034] ? __pfx_get_futex_key+0x10/0x10 [ 473.008058][T13034] ? rcu_is_watching+0x12/0xc0 [ 473.012814][T13034] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 473.018617][T13034] ? lockdep_hardirqs_on+0x7c/0x110 [ 473.023809][T13034] futex_wait_setup+0x9d/0x550 [ 473.028572][T13034] __futex_wait+0x194/0x2f0 [ 473.033245][T13034] ? __pfx___futex_wait+0x10/0x10 [ 473.038262][T13034] ? __pfx_futex_wake_mark+0x10/0x10 [ 473.043538][T13034] ? do_futex+0x122/0x350 [ 473.047851][T13034] ? __pfx_do_futex+0x10/0x10 [ 473.052518][T13034] __x64_sys_futex_wait+0x374/0x470 [ 473.057710][T13034] ? __pfx___x64_sys_futex_wait+0x10/0x10 [ 473.063440][T13034] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 473.068639][T13034] do_syscall_64+0xcd/0x490 [ 473.073137][T13034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.079107][T13034] RIP: 0033:0x7fcc5018e929 [ 473.083510][T13034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.103110][T13034] RSP: 002b:00007fcc50f50038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c7 [ 473.111507][T13034] RAX: ffffffffffffffda RBX: 00007fcc503b6080 RCX: 00007fcc5018e929 [ 473.119467][T13034] RDX: 0000000000000008 RSI: 0000000000000008 RDI: 0000200000000380 [ 473.127423][T13034] RBP: 00007fcc50210b39 R08: 0000200000000480 R09: 0000000000000000 [ 473.135381][T13034] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 473.143337][T13034] R13: 0000000000000000 R14: 00007fcc503b6080 R15: 00007ffd3b862a38 [ 473.151318][T13034] [ 473.154381][T13034] Kernel Offset: disabled [ 473.158694][T13034] Rebooting in 86400 seconds..