last executing test programs: 13m20.644523435s ago: executing program 0 (id=1286): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x1ff, 0x7, 0xeb1, 0x404, 0x18008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r1, &(0x7f0000002300)='MAC802154_@WSIM\x00', 0xd) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.1/usb12/12-0:1.0/usb12-port3/power/pm_qos_no_power_off\x00', 0x331900, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x4, 0xfffeffffffffff49, 0x5, 0x100000000, 0x800000000004, 0x4, 0x8, 0x19, 0x0, 0xfffffffffffffffd, 0x2ddc, 0x8, 0xfffffffffffffffa, 0xa9, 0xfffffffffffff550, 0xffffffff]}, 0x0) r3 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r3, &(0x7f0000000180)=""/55, 0x37) r4 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000100), 0x3c401, 0x0) r5 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x7ef95cfe5b38f805, 0x0) close_range$auto(r4, r5, 0x2b7) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r1) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) write$auto(r6, 0x0, 0x40000001) ioctl$auto_SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) prctl$auto_SECCOMP_MODE_STRICT(0x2a, 0x1, 0x0, 0x9, 0xfffffffffffffcba) 13m17.55858616s ago: executing program 0 (id=1291): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x80015f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x6, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000680)="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", 0x658) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x80280, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x98c7) socket(0x2, 0x2, 0x0) unshare$auto(0x40000080) 13m14.776952807s ago: executing program 0 (id=1296): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x80015f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x6, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000680)="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", 0x658) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x80280, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x98c7) socket(0x2, 0x2, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) 13m11.1382615s ago: executing program 0 (id=1303): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f00000001c0)={0x0, 0xfff}, 0x3, &(0x7f0000000280)={&(0x7f0000000100)="6c4bc022f1a924305022a30137693a982a453ee9ff2946c55588f6e6", 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x101000, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0xfffffffd, 0x0) socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x4, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000100)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xae\xb5Ac\x92\x90\xa53\x80\xa8\x8fNfI\xd8#\xb7\xec\xcd\xb5\xed_y\xce_\xb6J\xfe\xdfu\xf8\xea\xad\xd3\xf3*&\x1a\xe9.\x15Q\x9e\x88\xf1\x10\xfay\xc6\x7fSIg4R\x88]@jx6*\f\xe6\xde\xce\xfa\x90\xc3b\x10e\xf8\x04\xce\x01}\xce\xd7\xfa\xc9\xa7\xe3l\xb3\xb0#\xa4\xa09)\x96\x84\x9dg9\n\xd7!\xea\xca\x97[\xe0 \xbe\x1d\xa1\xee\xbe\xd2\xce\x86^\xd3b`', 0x81) listen$auto(r3, 0x1f64b57d) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(r3, 0x5, 0x0, 0x0, 0x40) memfd_create$auto(0x0, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 13m8.377734002s ago: executing program 0 (id=1307): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r1 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/cec31\x00', 0x42, 0x0) poll$auto(&(0x7f0000000c00)={r2, 0x200, 0x9}, 0x1, 0x8) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = fcntl$getown(r0, 0x9) prctl$auto(0x3e, 0x1, r4, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) sendfile$auto(r5, r5, 0x0, 0x7fffe000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r1) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x76c, r6, 0x200, 0x9, 0x25dfdbfd, {}, [@HWSIM_ATTR_PMSR_RESULT={0x744, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x740, 0x5, 0x0, 0x1, [{0x518, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x102, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xffff0c36}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x2}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x91, 0x1, "33786f39502f7db8d26f02d629b078e50297e43a965b9935e8bd78f240c51254f50be25bbd8b84d78c31848817da9dd17128b54e0cf538e31611f93d95cd10f5b0dcef7cb6715f17f1cfe600f1d017a3409980293a3f73636301a46d1b25741e1018ae70101716f3ddf5ead101eeb0504791686b75c9afc3f0eeec6eb41530b79fe49bbc39e633c83a94d7f700"}, @NL80211_PMSR_PEER_ATTR_RESP={0x124, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x28}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x2b, 0x14, '/sys/kernel/tracing/per_cpu/cpu1/trace\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x79}]}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x8000000000000001}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x5, 0x14, '^'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0xf}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xd5d1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x70}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x9a}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x4c7d}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x7}]}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x5}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x2}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xd}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9c, 0x1, "71ed965d3c917ba5207dd7c5dde8b3797bc01ba30fab97f0c36a53570bb1eca0a902412c7fe3829378dc6243773492841d09f08881ffd5d912176438f3d1b17153cf3686cd4a0baa99d08e205825a7101ea4ae02f46817086ad047a28079854d5121e4e88785f0904c658d31a36014f1f20429cae9ab8648831b8804cda57cacc18f8f1d888921bf6678d2d4cb42737b867e6b05c10f1ce4"}, @NL80211_PMSR_PEER_ATTR_RESP={0x84, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xffffffffffffffc0}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x9}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1000}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x560}, @NL80211_PMSR_RESP_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x8, 0x14, '#):\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x30}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x95, 0x1, "76d872e410eb3f63262322f9a6e8c1f888f3e92425117a52787aea50fffa34e7fbbe9a075a2a2bf8ea74ac76ada802083ec0c36a5d86123a3b82b2c51f0a44f59d48bba09cc24315ddf5188b2fda32b7a8937fa0f59f86195c89b8b5d0a2aa1036967a20831fc1b0f59142754bcf32d885f511d257366b3f4421fd169b0c39c91ff679fc21b659c282643cd09d501fee8c"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x57, 0x1, "46974a15aa48c9676f55a872d3e37b89cae23083999d36419c8d7645f7f88187d22ace63aab2ad38f3ac807d8cf7ca8353ab4d47296421e18a6d49ec22c8b257b7bcb76a5127fd9db7dfb0b22d18f75a3fdf29"}]}, {0x220, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xfffc}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xffffffa1}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb6, 0x1, "438b01cf4c689c460dd69684dad881fa0ac00dd5ff3f4efcdc693d43e2fd7af20db2d790518bb5acba4b5a2761c814725bfd081903421d3cc9622f17fd73b6602247f5f90cd298009a0a4f8de27fb94e3159b9b1022551c43d5cb621d292d3595497eb6de3a72279dfbbcaa0691c5c1c56ae40bf276e531caf3d2323b96663f279570a419a285def0018787ebeeb962f33be594f7f655a0a7c121b2484d9d1a1d8ed316946805daaa8f6f469b2701f3511fd"}, @NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x5}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x8}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xeab6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa4, 0x1, "22ca9ad446eeecedbc86f65eda129e8ed22b81aee49485cee9cedf47b86c37afc7780026b2ba9f322b7c05aa508df1bd1db64ee17628044ba950d59cfea8e83470ed2aee818062ed8528bde634afe81630191e1e4deb7814f59f8ddcb3a049eff3c10c2d5049aeb1092cce7a95dc97145b56cb6aba5db5616e90c0736052b99f69e05ce9b169f9a456ae5294991b9b0cd7ab363aaf764c89d12d4f6196a766c9"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x71, 0x1, "82deaec6dbefc5ae133226fe8868f4610a6c9f088fbdb476831904041f4511eb5f59e9591515d89c23ea9382cc2c22773629468aad853213e94fe2b2783beae67d82ba645ac10f98d0780fd7be6157c5f2005a292db3ecf5eb2a486da28f6fa4ace1801674a80f89cf58d4e6bc"}]}, {0x4}]}]}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x5}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x7}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x76c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4000080) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x100000009, 0xa4000000000002) madvise$auto(0x0, 0x20499d, 0x9) 12m56.376653327s ago: executing program 0 (id=1322): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x80015f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x6, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000680)="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", 0x658) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x80280, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x2, 0x2, 0x0) unshare$auto(0x40000080) 12m55.89721578s ago: executing program 32 (id=1322): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x80015f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x6, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000680)="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", 0x658) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x80280, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x2, 0x2, 0x0) unshare$auto(0x40000080) 9.935827535s ago: executing program 1 (id=2771): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe$auto(0x0) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4048aecb, 0x0) 9.008655611s ago: executing program 1 (id=2774): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0xc0040, 0x0) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptysb\x00', 0x1, 0x0) ioctl$auto(r0, 0x540a, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0x40305839, 0x0) 8.902985013s ago: executing program 3 (id=2775): mmap$auto(0x0, 0x4, 0x3, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f00000000c0)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0x4500, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) r4 = clone3$auto(0x0, 0xa) capset$auto(&(0x7f0000000080)={0x2, r4}, &(0x7f0000000280)={0xe, 0x1000, 0x8}) mmap$auto(0x0, 0x20009, 0x1ff, 0xeb1, r2, 0xffffffff) read$auto(r3, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto(0x3, 0xae60, 0x38) socket(0x15, 0x5, 0x0) 8.128913242s ago: executing program 1 (id=2778): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x8}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x4, 0x9, 0xf}) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x8, r2, 0x0, 0x33}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003ef, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r4, &(0x7f00000004c0)="c9432739b55807", 0x7) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000300), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000001", @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/security/tomoyo/query\x00', 0x40401, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) 7.125628987s ago: executing program 3 (id=2780): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r0, 0x0, 0x80) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) mmap$auto(0x9, 0x400008, 0xdf, 0x9b72, r1, 0x2) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xca, 0x0, 0x2b) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/kernel/timer_migration\x00', 0x242, 0x0) semctl$auto_GETNCNT(0x2, 0x3, 0xe, 0x100000000008) sendfile$auto(r2, r1, 0x0, 0x7fffe000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xffffffffffffff72, 0x10000000000df, 0x800000eb4, r1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x77, 0x800, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="720100009f104042501c2b88f0903bfc74529fba64b3ac642b4349f616d1352f5dadce4e1647d14b5a2bd77402000000edd0e1b5", @ANYRESHEX=r1], 0x1ac}}, 0x40000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x98c7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x29, 0x2, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff}, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) 6.991720603s ago: executing program 4 (id=2781): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x8}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x4, 0x9, 0xf}) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x8, r2, 0x0, 0x33}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003ef, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r4, &(0x7f00000004c0)="c9432739b558", 0x6) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000300), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000001", @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/security/tomoyo/query\x00', 0x40401, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) 6.829725499s ago: executing program 2 (id=2782): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) mmap$auto(0x0, 0x2020009, 0x800002, 0xebd, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0xbb) mmap$auto(0x2000000002, 0x6, 0x2, 0x110, r1, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) setsockopt$auto(r1, 0x4, 0x7a9, &(0x7f0000000040)='}-+:/\x00', 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x7, 0x2000c, 0xdf, 0x20eb5, 0xff1, 0x8000) getpid() r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x800, 0x0) ioctl$auto_FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000340)="139e6019de5686") sendmsg$auto_NL80211_CMD_GET_SCAN(r3, 0x0, 0x20040800) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) socket(0xa, 0x1, 0xfffffeff) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x2, 0x2, 0x7fff7ffb, 0x81, 0x8, 0x9, 0x3]}, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 5.502421466s ago: executing program 3 (id=2783): close_range$auto(0x0, 0xffffffffffffffff, 0x2) r0 = fanotify_init$auto(0x1f53, 0x2000000000002) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/configuration\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)=@link_update={r1, @new_prog_fd=r0, 0x7, @old_prog_fd=r2}, 0x8) fanotify_mark$auto(r0, 0x47, 0xfffffffffff8ffff, r0, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) unlink$auto(&(0x7f00000001c0)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00') read$auto_deferred_devs_fops_(r0, &(0x7f00000007c0)=""/154, 0x9a) 5.17757786s ago: executing program 3 (id=2784): mmap$auto(0x0, 0x3, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x47ffe) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0xf000, 0x8000000000000001, 0x1fffff000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8001, r0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xffffffffffffffff, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0xffffffff, 0x200, 0x0, 0x84, 0x0, 0xfff, 0x0, 0x3, 0x2, [0x9a8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r2, 0x0, 0x3) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/general_profit\x00', 0xa800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/34, 0x22) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') 5.150872842s ago: executing program 1 (id=2785): r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) mmap$auto(0x8, 0x202000a, 0x8, 0x7335, r0, 0xfffffffffffffffe) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0xa, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="01002dbd7000f9dbdf2501000fff061902003f000000050d0700580000cb11eab900020000588787e50dcffc6a9f45ce0008000a000c00209df9c009630014001f00fe80000000006c5a10fac5c77bb21ccf0700000000aa14002000fc000000000000000000000000000001b38dfa22a70d2f795ed6ef314491a638bf508b74239e8e045ecaf188884e62c4515db68d7dd5e7eefcc94ee01dd22048f4a5f533da9cdcb72fafa716d38cc5471fb661e489e7013ebfce0013810eff757af806337073f3621b11bd8071342fe650384b38"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x2c62, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub4/sw_params\x00', 0x20000, 0x0) pread64$auto(r4, 0x0, 0x8, 0x8000) futex$auto(&(0x7f00000000c0)=0x2a08, 0xc, 0x1, 0x0, &(0x7f0000000180)=0x5, 0x2a08) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) 3.796290729s ago: executing program 1 (id=2786): socket(0x25, 0x1, 0x0) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0xee8c, 0x4) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) shutdown$auto(0xffffffffffffffff, 0x2) socket(0xa, 0x1, 0x100) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x6) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0xe8) 3.462872873s ago: executing program 4 (id=2787): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x9b, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x1, 0x106) getcwd$auto(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) r2 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x9) read$auto_rb_simple_fops_trace(r2, &(0x7f0000000000)=""/4096, 0x1000) getcwd$auto(0x0, 0xffffffffffffffff) inotify_add_watch$auto(0x4, 0x0, 0x9) ptrace$auto_PTRACE_GETREGS(0xc, 0x0, 0xfffffffffffffff8, 0x0) ptrace$auto(0xe, r0, 0x9, 0x9) ptrace$auto(0xf, r0, 0x1, 0x4053) 3.429434287s ago: executing program 2 (id=2788): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xf000, 0x8, 0x3, 0xeb1, r1, 0x100000000008000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty12\x00', 0x40000, 0x0) ioctl$auto(r3, 0x4b4b, r3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x6fffffe) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x2, 0x1400008, 0x5, 0x9b72, 0x2, 0x8000) r4 = socket(0x11, 0x3, 0x2) getsockopt$auto(r4, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) r5 = getegid() setregid$auto(r5, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/wireless\x00', 0x127880, 0x0) pread64$auto(r6, 0x0, 0x1ff, 0xf4) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x8090) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x1000000) prctl$auto(0x59616d61, 0x1, 0x0, 0x1, 0x0) 3.227337476s ago: executing program 3 (id=2789): r0 = prctl$auto_PR_SET_MM_ENV_END(0x8, 0xb, 0x0, 0x8, 0x80000001) ioctl$auto_NS_GET_MNTNS_ID(r0, 0x8008b705, &(0x7f0000000040)=0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) rt_sigaction$auto(0x5, &(0x7f0000000140)={&(0x7f0000000000)=0x0, 0x8, 0x0, {0x7e}}, 0x0, 0x8) r1 = gettid() sched_setaffinity$auto(0x0, 0x9899, &(0x7f00000000c0)=0xf19d) epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x10) madvise$auto(0x0, 0x3, 0x15) rt_sigqueueinfo$auto(r1, 0x1, 0x0) 3.025970665s ago: executing program 2 (id=2790): mmap$auto(0x0, 0x3, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x47ffe) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8001, r0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) futex$auto(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001700)={0x0, 0xffffff1d, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x48, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xffffffffffffffff, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0xffffffff, 0x200, 0x0, 0x84, 0x0, 0xfff, 0x0, 0x3, 0x2, [0x9a8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x10000000, 0x0, 0x1]}, 0x1fe, 0xd) 2.99671305s ago: executing program 3 (id=2791): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x4, 0x7fff, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000040)='\x00', 0xc721, 0x1) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x1002}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000340)="ff6ddea76ef225ab0000c5dc3f743c280934143dd0c1f82cbc979d146e801ed72cd6739379d9257f414b047b1540741c39de1e2bf8f660992c2e0885b1cf15a8de7ec0edc077dbe4b61b5e5e94ba727a92fe60ef8818aff8efba1195d7b0635e679958bc7604b18041513182e910f0520797800b1309634d12b8329b40050189697ec0e8bce99636c47d2f4fae91e5ae69bdf7e230b7799bc77ffecba93c9de3b6ed98e3ae0f6b7559f2ca501492c8a25fef", 0x7}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x80280, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) read$auto_clk_dump_fops_(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) 2.057372902s ago: executing program 4 (id=2792): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428d17000fcdbdf250200000008000900800000000e000500eecd71556377220471e700002a0005005416cf27fe10900ee223ed9f86da74b8a5140f6cc777764fb8f8c059d5a197525eeecd6721280000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400c994) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x7000000) mmap$auto(0x0, 0x40008, 0x8, 0x9b72, 0x7, 0x28000) r0 = socket(0x11, 0x2, 0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0x3, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) sysfs$auto(0x2, 0x100000000000033, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, r4) waitid$auto_P_ALL(0x0, 0x3, 0x0, 0x401, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000a40), r4) sendmsg$auto_OVS_FLOW_CMD_GET(r4, 0x0, 0x20000810) fsopen$auto(0x0, 0x1) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) 1.987258683s ago: executing program 2 (id=2793): mmap$auto(0x0, 0x4, 0x3, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, 0x0, 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f00000000c0)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0x4500, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) r4 = clone3$auto(0x0, 0xa) capset$auto(&(0x7f0000000080)={0x2, r4}, &(0x7f0000000280)={0xe, 0x1000, 0x8}) mmap$auto(0x0, 0x20009, 0x1ff, 0xeb1, r2, 0xffffffff) read$auto(r3, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto(0x3, 0xae60, 0x38) socket(0x15, 0x5, 0x0) 1.245735029s ago: executing program 4 (id=2794): mmap$auto(0x0, 0x3, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x47ffe) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, 0x8000, 0x2) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x161500, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x4080aea2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8001, r2) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xffffffffffffffff, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0xffffffff, 0x200, 0x0, 0x84, 0x0, 0xfff, 0x0, 0x3, 0x2, [0x9a8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r4, 0x0, 0x3) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) 742.151122ms ago: executing program 2 (id=2795): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428d17000fcdbdf250200000008000900800000000e000500eecd71556377220471e700002a0005005416cf27fe10900ee223ed9f86da74b8a5140f6cc777764fb8f8c059d5a197525eeecd6721280000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400c994) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x7000000) mmap$auto(0x0, 0x40008, 0x8, 0x9b72, 0x7, 0x28000) r0 = socket(0x11, 0x2, 0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0x3, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) sysfs$auto(0x2, 0x100000000000033, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, r4) waitid$auto_P_ALL(0x0, 0x3, 0x0, 0x401, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000a40), r4) sendmsg$auto_OVS_FLOW_CMD_GET(r4, 0x0, 0x20000810) fsopen$auto(0x0, 0x1) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) 323.836552ms ago: executing program 2 (id=2796): mmap$auto(0x0, 0x3, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x47ffe) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8001, r1) r3 = ioctl$auto_TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)=0x7fffffff) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000100)="1043466fa5726f06368c35d531f5715ce6653639b28223cee1d0d20fbb9cf953314481d749488e81d06ef92e1765c14d42e998d451b45065cd542d8bc0e1843d2d45904174deca1d5ca6", 0x5a7) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x8, 0x1ffffffffffd, 0xb4, 0xffffffffffffffff, 0x8, 0x10006, 0x80, 0x4, 0x0, 0xa, 0xffffffff, 0x200, 0x0, 0x84, 0x0, 0xfff, 0x0, 0x3, 0x2, [0x9a8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], "58074e21a020e349d6abaf71313cc15d6887e3c7384ba0751d76fa45086bbe5e4bb3642d1be4884f60791d7a331c299f8afa8d26a92fb082"}, 0x1fe, 0xd) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r4, 0x0, 0x3) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/general_profit\x00', 0xa800, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0x180, 0x0) pread64$auto(r5, 0x0, 0x100000001, 0x9) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='\'', 0x8001, 0x9}, 0x8}, 0x1, 0x9) 288.825077ms ago: executing program 1 (id=2797): mmap$auto(0x0, 0x20009, 0x8, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001a80)=ANY=[@ANYBLOB="2203a82dc28d24d37afb115be100007c8a53a4f433e252e1cc2a5b6d2e44b8404ef09038ebe91b04acca03a6073286a3cf048bbc0000006ed8faa7b2c9289c164125d7f752bc2f8911630c1b12e5ffcaa3913c0b2e64509e2b26ee74d50f72cd7177def1e3feaa998ec585ec8efe8bd3a39a9b9e5e67729c8532c225a596a36bc6493d0823ec113e3a5d984de294f0868d292de7557244b16ad165b7eae86628", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="51888423d067957104032b0282668d3f5e12296ee117372888746645dadbc8840a1a6b1220e4a74545496d3635a5eb19f54a2177a1341f0fd6f2d138b9bb8d835e1b7dbef93254a0544382a4a6ec4c8bfc6d587afec808f38076f746e7f7b83f88a21bd30bd6917481139c8215e0e2e3e853fc34f696db7998b868a1171a2f48f088f8ede100085e096aa022f85df2551c926cbf77d404fb38ccad652d9db3548f4dd78f05114289faae4a77866b0e451bf1f5ad9e145767a1"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250af0cb04926bc2e224533ddb4bba576dd83266e89b5a8261fcee"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x1000c011) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r0], 0x1ac}}, 0x4048815) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r1 = fcntl$auto_F_WRLCK(r0, 0x274b, 0x1) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="48120000", @ANYRES16, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="93ae44b4f000c89927e789c58c3bdf9a65b26e90a0f65b164b64741408bb4daeee66b07bddb27b055be7f2170c05776e9dec5bdd97d6e4ff54a5397e876e1823d11887ee16db0a010ba40597800b13dfa9716a67fcefbaf6e0502abe536cb0bd5217dd634e94afbaf1616af8c0da35172a655ed151c1c2d279415e386990c2fb0e66c958598b2af0f103cea7c0c8c770f9212e9fa830c815ffb4524dbab6b07481f2f4d3bf044c5b16961b7bd74fa1d90f4ef3078fdd6e9dbaf2fc7c66eeb322bddb5d06aa9d8a9a2bd691969f058dacd2df131d9ced06000d002d00000000"], 0x1248}, 0x1, 0x0, 0x0, 0x41}, 0x20004802) sendmmsg$auto(0x3, 0x0, 0x1000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r2, r3, 0x0, 0x3) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/nfsfs/volumes\x00', 0x42080, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x4}, 0xb, 0x7) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f0000003900)='\t', 0x1) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pci_hotplug/parameters/debug_acpi\x00', 0x3c1380, 0x0) sendfile$auto(0x1, r7, 0x0, 0x400007ffff000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) 253.518637ms ago: executing program 4 (id=2798): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) (async) set_mempolicy$auto(0x5, &(0x7f0000000080)=0x8, 0x355) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd4\x00', 0x40001, 0x0) 0s ago: executing program 4 (id=2799): mmap$auto(0x0, 0x3, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x47ffe) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="88d3e04e29855532ef09b6bf3482f08efb3a", 0x12) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000140)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8001, r2) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000400)={0x7, 0x9, 0x1, 0x800, 0xa2, 0x9, "e6aa1ab7b21c00afe41c6bf8e228d02ca50ed3deaef2d75d68f82c74a22fb5f452daf66a354445e01c5b199baefa2d0db25a128fc1e2a573d40c54263a67daea"}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xffffffffffffffff, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0xffffffff, 0x200, 0x0, 0x84, 0x0, 0xfff, 0x0, 0x3, 0x2, [0x9a8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) ioperm$auto(0x7, 0x6, 0x2) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r4 = getuid() msgctl$auto_IPC_RMID(0xffffffff, 0x0, &(0x7f0000000380)={{0x0, r4, 0xffffffffffffffff, 0x4, 0x200, 0x7e62, 0x5}, &(0x7f0000000040)=0xe9, &(0x7f0000000100), 0x4, 0xeb, 0x2, 0x8000000000008, 0x8009, 0xe, 0x9, 0x3, @raw=0x24002}) setresuid$auto(r4, r5, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r6, 0x0, 0x3) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/general_profit\x00', 0xa800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000000c0)=""/34, 0x22) kernel console output (not intermixed with test programs): 9/0x220 [ 1468.115592][T20474] ops_init+0x1e2/0x5f0 [ 1468.115652][T20474] setup_net+0x10f/0x380 [ 1468.115699][T20474] ? lockdep_init_map_type+0x5c/0x280 [ 1468.115747][T20474] ? __pfx_setup_net+0x10/0x10 [ 1468.115798][T20474] ? debug_mutex_init+0x37/0x70 [ 1468.115837][T20474] copy_net_ns+0x2a6/0x5f0 [ 1468.115895][T20474] create_new_namespaces+0x3ea/0xa90 [ 1468.115944][T20474] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1468.115988][T20474] ksys_unshare+0x45b/0xa40 [ 1468.116037][T20474] ? __pfx_ksys_unshare+0x10/0x10 [ 1468.116086][T20474] ? xfd_validate_state+0x61/0x180 [ 1468.116148][T20474] __x64_sys_unshare+0x31/0x40 [ 1468.116195][T20474] do_syscall_64+0xcd/0x490 [ 1468.116245][T20474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.116298][T20474] RIP: 0033:0x7f7cd878ebe9 [ 1468.116327][T20474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1468.116363][T20474] RSP: 002b:00007f7cd95c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1468.116397][T20474] RAX: ffffffffffffffda RBX: 00007f7cd89b6270 RCX: 00007f7cd878ebe9 [ 1468.116421][T20474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1468.116440][T20474] RBP: 00007f7cd8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1468.116461][T20474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1468.116482][T20474] R13: 00007f7cd89b6308 R14: 00007f7cd89b6270 R15: 00007ffdda61add8 [ 1468.116527][T20474] [ 1469.624984][T20503] random: crng reseeded on system resumption [ 1470.229546][ T30] audit: type=1800 audit(1756583819.750:224): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2466" name="members" dev="configfs" ino=76491 res=0 errno=0 [ 1470.500601][T20507] FAULT_INJECTION: forcing a failure. [ 1470.500601][T20507] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.537319][T20507] CPU: 1 UID: 0 PID: 20507 Comm: syz.2.2466 Tainted: G U syzkaller #0 PREEMPT(full) [ 1470.537360][T20507] Tainted: [U]=USER [ 1470.537368][T20507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1470.537383][T20507] Call Trace: [ 1470.537392][T20507] [ 1470.537401][T20507] dump_stack_lvl+0x16c/0x1f0 [ 1470.537439][T20507] should_fail_ex+0x512/0x640 [ 1470.537473][T20507] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1470.537505][T20507] should_failslab+0xc2/0x120 [ 1470.537538][T20507] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1470.537567][T20507] ? __proc_create+0xc3/0x8e0 [ 1470.537609][T20507] ? __proc_create+0x2ce/0x8e0 [ 1470.537650][T20507] __proc_create+0x2ce/0x8e0 [ 1470.537687][T20507] ? __pfx___proc_create+0x10/0x10 [ 1470.537728][T20507] ? _raw_write_unlock+0x28/0x50 [ 1470.537766][T20507] ? proc_register+0x314/0x5f0 [ 1470.537819][T20507] proc_create_reg+0x7d/0x180 [ 1470.537859][T20507] proc_create_net_data+0x8e/0x1c0 [ 1470.537898][T20507] ? __pfx_proc_create_net_data+0x10/0x10 [ 1470.537935][T20507] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1470.537978][T20507] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1470.538007][T20507] dev_proc_net_init+0xf9/0x220 [ 1470.538036][T20507] ops_init+0x1e2/0x5f0 [ 1470.538074][T20507] setup_net+0x10f/0x380 [ 1470.538106][T20507] ? lockdep_init_map_type+0x5c/0x280 [ 1470.538141][T20507] ? __pfx_setup_net+0x10/0x10 [ 1470.538177][T20507] ? debug_mutex_init+0x37/0x70 [ 1470.538204][T20507] copy_net_ns+0x2a6/0x5f0 [ 1470.538245][T20507] create_new_namespaces+0x3ea/0xa90 [ 1470.538280][T20507] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1470.538312][T20507] ksys_unshare+0x45b/0xa40 [ 1470.538347][T20507] ? __pfx_ksys_unshare+0x10/0x10 [ 1470.538382][T20507] ? xfd_validate_state+0x61/0x180 [ 1470.538427][T20507] __x64_sys_unshare+0x31/0x40 [ 1470.538460][T20507] do_syscall_64+0xcd/0x490 [ 1470.538496][T20507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.538521][T20507] RIP: 0033:0x7fedc218ebe9 [ 1470.538540][T20507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1470.538564][T20507] RSP: 002b:00007fedc2f2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1470.538593][T20507] RAX: ffffffffffffffda RBX: 00007fedc23b5fa0 RCX: 00007fedc218ebe9 [ 1470.538610][T20507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1470.538625][T20507] RBP: 00007fedc2211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1470.538641][T20507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1470.538655][T20507] R13: 00007fedc23b6038 R14: 00007fedc23b5fa0 R15: 00007ffc45fe65d8 [ 1470.538685][T20507] [ 1471.244269][ T30] audit: type=1800 audit(1756583820.756:225): pid=20520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2467" name="members" dev="configfs" ino=76499 res=0 errno=0 [ 1471.578236][ T30] audit: type=1800 audit(1756583821.097:226): pid=20525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2468" name="features" dev="configfs" ino=75753 res=0 errno=0 [ 1476.520922][ T30] audit: type=1800 audit(1756583826.063:227): pid=20580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2476" name="members" dev="configfs" ino=76865 res=0 errno=0 [ 1478.745003][ T30] audit: type=1800 audit(1756583828.285:228): pid=20607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2478" name="features" dev="configfs" ino=76695 res=0 errno=0 [ 1479.992744][T20618] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1480.828858][T20627] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1481.009117][T20630] random: crng reseeded on system resumption [ 1482.130538][T20647] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1482.840013][ T30] audit: type=1800 audit(1756583832.406:229): pid=20663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2489" name="members" dev="configfs" ino=77129 res=0 errno=0 [ 1483.160954][T20663] FAULT_INJECTION: forcing a failure. [ 1483.160954][T20663] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.174067][T20663] CPU: 1 UID: 0 PID: 20663 Comm: syz.2.2489 Tainted: G U syzkaller #0 PREEMPT(full) [ 1483.174120][T20663] Tainted: [U]=USER [ 1483.174132][T20663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1483.174154][T20663] Call Trace: [ 1483.174166][T20663] [ 1483.174179][T20663] dump_stack_lvl+0x16c/0x1f0 [ 1483.174231][T20663] should_fail_ex+0x512/0x640 [ 1483.174280][T20663] ? __kmalloc_noprof+0xbf/0x510 [ 1483.174326][T20663] ? __netlink_kernel_create+0x17f/0x750 [ 1483.174373][T20663] should_failslab+0xc2/0x120 [ 1483.174420][T20663] __kmalloc_noprof+0xd2/0x510 [ 1483.174464][T20663] ? __netlink_create+0x208/0x2c0 [ 1483.174507][T20663] __netlink_kernel_create+0x17f/0x750 [ 1483.174558][T20663] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1483.174606][T20663] ? find_held_lock+0x2b/0x80 [ 1483.174643][T20663] ? audit_net_init+0x190/0x440 [ 1483.174690][T20663] audit_net_init+0x1ae/0x440 [ 1483.174731][T20663] ? __pfx_audit_net_init+0x10/0x10 [ 1483.174775][T20663] ? __pfx_audit_receive+0x10/0x10 [ 1483.174860][T20663] ? __pfx_audit_multicast_bind+0x10/0x10 [ 1483.174909][T20663] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 1483.174960][T20663] ? __kmalloc_noprof+0x242/0x510 [ 1483.175011][T20663] ? __pfx_audit_net_init+0x10/0x10 [ 1483.175052][T20663] ops_init+0x1e2/0x5f0 [ 1483.175097][T20663] setup_net+0x10f/0x380 [ 1483.175129][T20663] ? lockdep_init_map_type+0x5c/0x280 [ 1483.175164][T20663] ? __pfx_setup_net+0x10/0x10 [ 1483.175200][T20663] ? debug_mutex_init+0x37/0x70 [ 1483.175227][T20663] copy_net_ns+0x2a6/0x5f0 [ 1483.175268][T20663] create_new_namespaces+0x3ea/0xa90 [ 1483.175303][T20663] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1483.175334][T20663] ksys_unshare+0x45b/0xa40 [ 1483.175368][T20663] ? __pfx_ksys_unshare+0x10/0x10 [ 1483.175403][T20663] ? xfd_validate_state+0x61/0x180 [ 1483.175449][T20663] __x64_sys_unshare+0x31/0x40 [ 1483.175482][T20663] do_syscall_64+0xcd/0x490 [ 1483.175518][T20663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.175543][T20663] RIP: 0033:0x7fedc218ebe9 [ 1483.175563][T20663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1483.175588][T20663] RSP: 002b:00007fedbffb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1483.175614][T20663] RAX: ffffffffffffffda RBX: 00007fedc23b6270 RCX: 00007fedc218ebe9 [ 1483.175633][T20663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1483.175655][T20663] RBP: 00007fedc2211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1483.175676][T20663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1483.175693][T20663] R13: 00007fedc23b6308 R14: 00007fedc23b6270 R15: 00007ffc45fe65d8 [ 1483.175724][T20663] [ 1483.455185][T20663] audit: cannot initialize netlink socket in namespace [ 1483.842320][T20668] FAULT_INJECTION: forcing a failure. [ 1483.842320][T20668] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.860385][T20668] CPU: 0 UID: 0 PID: 20668 Comm: syz.1.2490 Tainted: G U syzkaller #0 PREEMPT(full) [ 1483.860424][T20668] Tainted: [U]=USER [ 1483.860432][T20668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1483.860448][T20668] Call Trace: [ 1483.860456][T20668] [ 1483.860466][T20668] dump_stack_lvl+0x16c/0x1f0 [ 1483.860505][T20668] should_fail_ex+0x512/0x640 [ 1483.860540][T20668] ? __kmalloc_noprof+0xbf/0x510 [ 1483.860571][T20668] ? ops_init+0x77/0x5f0 [ 1483.860603][T20668] should_failslab+0xc2/0x120 [ 1483.860636][T20668] __kmalloc_noprof+0xd2/0x510 [ 1483.860663][T20668] ? lockdep_init_map_type+0x5c/0x280 [ 1483.860704][T20668] ops_init+0x77/0x5f0 [ 1483.860741][T20668] setup_net+0x10f/0x380 [ 1483.860773][T20668] ? lockdep_init_map_type+0x5c/0x280 [ 1483.860808][T20668] ? __pfx_setup_net+0x10/0x10 [ 1483.860844][T20668] ? debug_mutex_init+0x37/0x70 [ 1483.860871][T20668] copy_net_ns+0x2a6/0x5f0 [ 1483.860912][T20668] create_new_namespaces+0x3ea/0xa90 [ 1483.860947][T20668] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1483.860978][T20668] ksys_unshare+0x45b/0xa40 [ 1483.861027][T20668] ? __pfx_ksys_unshare+0x10/0x10 [ 1483.861062][T20668] ? xfd_validate_state+0x61/0x180 [ 1483.861108][T20668] __x64_sys_unshare+0x31/0x40 [ 1483.861141][T20668] do_syscall_64+0xcd/0x490 [ 1483.861178][T20668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.861202][T20668] RIP: 0033:0x7f7cd878ebe9 [ 1483.861222][T20668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1483.861246][T20668] RSP: 002b:00007f7cd9604038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1483.861269][T20668] RAX: ffffffffffffffda RBX: 00007f7cd89b6090 RCX: 00007f7cd878ebe9 [ 1483.861285][T20668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1483.861300][T20668] RBP: 00007f7cd8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1483.861315][T20668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1483.861329][T20668] R13: 00007f7cd89b6128 R14: 00007f7cd89b6090 R15: 00007ffdda61add8 [ 1483.861360][T20668] [ 1484.630925][T20680] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1485.647028][ T30] audit: type=1800 audit(1756583835.251:230): pid=20694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2495" name="features" dev="configfs" ino=78060 res=0 errno=0 [ 1486.074973][ T30] audit: type=1800 audit(1756583835.683:231): pid=20701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2496" name="members" dev="configfs" ino=78063 res=0 errno=0 [ 1486.203552][T20701] FAULT_INJECTION: forcing a failure. [ 1486.203552][T20701] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.262830][T20701] CPU: 1 UID: 0 PID: 20701 Comm: syz.4.2496 Tainted: G U syzkaller #0 PREEMPT(full) [ 1486.262882][T20701] Tainted: [U]=USER [ 1486.262895][T20701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1486.262915][T20701] Call Trace: [ 1486.262928][T20701] [ 1486.262940][T20701] dump_stack_lvl+0x16c/0x1f0 [ 1486.262991][T20701] should_fail_ex+0x512/0x640 [ 1486.263037][T20701] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1486.263083][T20701] should_failslab+0xc2/0x120 [ 1486.263128][T20701] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1486.263165][T20701] ? __proc_create+0xc3/0x8e0 [ 1486.263209][T20701] ? __proc_create+0x2ce/0x8e0 [ 1486.263264][T20701] __proc_create+0x2ce/0x8e0 [ 1486.263314][T20701] ? __pfx___proc_create+0x10/0x10 [ 1486.263371][T20701] ? _raw_write_unlock+0x28/0x50 [ 1486.263412][T20701] ? proc_register+0x314/0x5f0 [ 1486.263480][T20701] proc_create_reg+0x7d/0x180 [ 1486.263537][T20701] proc_create_seq_private+0x8e/0x180 [ 1486.263589][T20701] ? __pfx_proc_create_seq_private+0x10/0x10 [ 1486.263641][T20701] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1486.263705][T20701] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1486.263741][T20701] dev_proc_net_init+0xa8/0x220 [ 1486.263776][T20701] ops_init+0x1e2/0x5f0 [ 1486.263831][T20701] setup_net+0x10f/0x380 [ 1486.263878][T20701] ? lockdep_init_map_type+0x5c/0x280 [ 1486.263928][T20701] ? __pfx_setup_net+0x10/0x10 [ 1486.263980][T20701] ? debug_mutex_init+0x37/0x70 [ 1486.264019][T20701] copy_net_ns+0x2a6/0x5f0 [ 1486.264077][T20701] create_new_namespaces+0x3ea/0xa90 [ 1486.264127][T20701] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1486.264171][T20701] ksys_unshare+0x45b/0xa40 [ 1486.264219][T20701] ? __pfx_ksys_unshare+0x10/0x10 [ 1486.264269][T20701] ? xfd_validate_state+0x61/0x180 [ 1486.264331][T20701] __x64_sys_unshare+0x31/0x40 [ 1486.264380][T20701] do_syscall_64+0xcd/0x490 [ 1486.264429][T20701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.264466][T20701] RIP: 0033:0x7f646638ebe9 [ 1486.264495][T20701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1486.264530][T20701] RSP: 002b:00007f64645f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1486.264564][T20701] RAX: ffffffffffffffda RBX: 00007f64665b6090 RCX: 00007f646638ebe9 [ 1486.264586][T20701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1486.264607][T20701] RBP: 00007f6466411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1486.264628][T20701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1486.264648][T20701] R13: 00007f64665b6128 R14: 00007f64665b6090 R15: 00007fffcc670748 [ 1486.264691][T20701] [ 1486.749261][T20707] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1487.958128][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1487.964765][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.009275][ T30] audit: type=1800 audit(1756583837.593:232): pid=20729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2503" name="members" dev="configfs" ino=77382 res=0 errno=0 [ 1488.092762][T20730] FAULT_INJECTION: forcing a failure. [ 1488.092762][T20730] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.202219][T20730] CPU: 0 UID: 0 PID: 20730 Comm: syz.3.2504 Tainted: G U syzkaller #0 PREEMPT(full) [ 1488.202274][T20730] Tainted: [U]=USER [ 1488.202286][T20730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1488.202307][T20730] Call Trace: [ 1488.202319][T20730] [ 1488.202333][T20730] dump_stack_lvl+0x16c/0x1f0 [ 1488.202384][T20730] should_fail_ex+0x512/0x640 [ 1488.202436][T20730] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1488.202484][T20730] should_failslab+0xc2/0x120 [ 1488.202538][T20730] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1488.202578][T20730] ? __proc_create+0xc3/0x8e0 [ 1488.202625][T20730] ? __proc_create+0x2ce/0x8e0 [ 1488.202666][T20730] __proc_create+0x2ce/0x8e0 [ 1488.202704][T20730] ? __pfx___proc_create+0x10/0x10 [ 1488.202747][T20730] ? _raw_write_unlock+0x28/0x50 [ 1488.202782][T20730] proc_create_reg+0x7d/0x180 [ 1488.202822][T20730] proc_create_net_data+0x8e/0x1c0 [ 1488.202861][T20730] ? __pfx_proc_create_net_data+0x10/0x10 [ 1488.202901][T20730] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1488.202943][T20730] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1488.202974][T20730] wext_proc_init+0x53/0x70 [ 1488.203005][T20730] dev_proc_net_init+0x10b/0x220 [ 1488.203035][T20730] ops_init+0x1e2/0x5f0 [ 1488.203073][T20730] setup_net+0x10f/0x380 [ 1488.203106][T20730] ? lockdep_init_map_type+0x5c/0x280 [ 1488.203142][T20730] ? __pfx_setup_net+0x10/0x10 [ 1488.203179][T20730] ? debug_mutex_init+0x37/0x70 [ 1488.203207][T20730] copy_net_ns+0x2a6/0x5f0 [ 1488.203248][T20730] create_new_namespaces+0x3ea/0xa90 [ 1488.203284][T20730] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1488.203316][T20730] ksys_unshare+0x45b/0xa40 [ 1488.203351][T20730] ? __pfx_ksys_unshare+0x10/0x10 [ 1488.203386][T20730] ? xfd_validate_state+0x61/0x180 [ 1488.203432][T20730] __x64_sys_unshare+0x31/0x40 [ 1488.203465][T20730] do_syscall_64+0xcd/0x490 [ 1488.203501][T20730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.203532][T20730] RIP: 0033:0x7fbee978ebe9 [ 1488.203551][T20730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1488.203576][T20730] RSP: 002b:00007fbeea64d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1488.203599][T20730] RAX: ffffffffffffffda RBX: 00007fbee99b6090 RCX: 00007fbee978ebe9 [ 1488.203615][T20730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1488.203630][T20730] RBP: 00007fbee9811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1488.203645][T20730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.203660][T20730] R13: 00007fbee99b6128 R14: 00007fbee99b6090 R15: 00007ffd784f4d18 [ 1488.203690][T20730] [ 1489.904271][T20749] random: crng reseeded on system resumption [ 1490.033139][ T30] audit: type=1800 audit(1756583839.653:233): pid=20752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2508" name="members" dev="configfs" ino=78150 res=0 errno=0 [ 1493.114359][ T30] audit: type=1800 audit(1756583842.749:234): pid=20782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2511" name="members" dev="configfs" ino=77510 res=0 errno=0 [ 1493.286871][T20785] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 1494.464545][T20802] FAULT_INJECTION: forcing a failure. [ 1494.464545][T20802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1494.477947][T20802] CPU: 1 UID: 0 PID: 20802 Comm: syz.2.2514 Tainted: G U syzkaller #0 PREEMPT(full) [ 1494.477998][T20802] Tainted: [U]=USER [ 1494.478010][T20802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1494.478031][T20802] Call Trace: [ 1494.478042][T20802] [ 1494.478054][T20802] dump_stack_lvl+0x16c/0x1f0 [ 1494.478103][T20802] should_fail_ex+0x512/0x640 [ 1494.478155][T20802] _copy_to_iter+0x29f/0x1710 [ 1494.478190][T20802] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1494.478240][T20802] ? __pfx__copy_to_iter+0x10/0x10 [ 1494.478272][T20802] ? kernfs_seq_stop+0xcd/0x120 [ 1494.478309][T20802] ? kernfs_put_active+0x86/0xe0 [ 1494.478362][T20802] seq_read_iter+0xcf8/0x12c0 [ 1494.478413][T20802] kernfs_fop_read_iter+0x40f/0x5a0 [ 1494.478444][T20802] ? rw_verify_area+0xcf/0x6c0 [ 1494.478483][T20802] vfs_read+0x8bc/0xcf0 [ 1494.478526][T20802] ? __pfx___mutex_lock+0x10/0x10 [ 1494.478571][T20802] ? __pfx_vfs_read+0x10/0x10 [ 1494.478637][T20802] ksys_read+0x12a/0x250 [ 1494.478672][T20802] ? __pfx_ksys_read+0x10/0x10 [ 1494.478731][T20802] do_syscall_64+0xcd/0x490 [ 1494.478779][T20802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.478812][T20802] RIP: 0033:0x7fedc218ebe9 [ 1494.478838][T20802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1494.478871][T20802] RSP: 002b:00007fedc2f2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1494.478903][T20802] RAX: ffffffffffffffda RBX: 00007fedc23b5fa0 RCX: 00007fedc218ebe9 [ 1494.478925][T20802] RDX: 0000000000000069 RSI: 0000200000000040 RDI: 0000000000000003 [ 1494.478946][T20802] RBP: 00007fedc2f2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.478967][T20802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.478987][T20802] R13: 00007fedc23b6038 R14: 00007fedc23b5fa0 R15: 00007ffc45fe65d8 [ 1494.479031][T20802] [ 1494.966507][ T30] audit: type=1800 audit(1756583844.609:235): pid=20809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2515" name="members" dev="configfs" ino=77550 res=0 errno=0 [ 1495.204485][T20815] random: crng reseeded on system resumption [ 1496.240361][T20809] FAULT_INJECTION: forcing a failure. [ 1496.240361][T20809] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.260397][T20809] CPU: 1 UID: 0 PID: 20809 Comm: syz.3.2515 Tainted: G U syzkaller #0 PREEMPT(full) [ 1496.260454][T20809] Tainted: [U]=USER [ 1496.260468][T20809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1496.260489][T20809] Call Trace: [ 1496.260501][T20809] [ 1496.260515][T20809] dump_stack_lvl+0x16c/0x1f0 [ 1496.260580][T20809] should_fail_ex+0x512/0x640 [ 1496.260631][T20809] ? __kmalloc_noprof+0xbf/0x510 [ 1496.260676][T20809] ? lsm_blob_alloc+0x68/0x90 [ 1496.260705][T20809] should_failslab+0xc2/0x120 [ 1496.260752][T20809] __kmalloc_noprof+0xd2/0x510 [ 1496.260801][T20809] lsm_blob_alloc+0x68/0x90 [ 1496.260833][T20809] security_sk_alloc+0x30/0x270 [ 1496.260874][T20809] sk_prot_alloc+0x1c7/0x2a0 [ 1496.260933][T20809] sk_alloc+0x36/0xc20 [ 1496.260978][T20809] __netlink_create+0x5e/0x2c0 [ 1496.261022][T20809] __netlink_kernel_create+0xed/0x750 [ 1496.261074][T20809] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1496.261120][T20809] ? find_held_lock+0x2b/0x80 [ 1496.261156][T20809] ? audit_net_init+0x190/0x440 [ 1496.261203][T20809] audit_net_init+0x1ae/0x440 [ 1496.261245][T20809] ? __pfx_audit_net_init+0x10/0x10 [ 1496.261289][T20809] ? __pfx_audit_receive+0x10/0x10 [ 1496.261330][T20809] ? __pfx_audit_multicast_bind+0x10/0x10 [ 1496.261375][T20809] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 1496.261424][T20809] ? __kmalloc_noprof+0x242/0x510 [ 1496.261473][T20809] ? __pfx_audit_net_init+0x10/0x10 [ 1496.261513][T20809] ops_init+0x1e2/0x5f0 [ 1496.261584][T20809] setup_net+0x10f/0x380 [ 1496.261629][T20809] ? lockdep_init_map_type+0x5c/0x280 [ 1496.261679][T20809] ? __pfx_setup_net+0x10/0x10 [ 1496.261730][T20809] ? debug_mutex_init+0x37/0x70 [ 1496.261769][T20809] copy_net_ns+0x2a6/0x5f0 [ 1496.261827][T20809] create_new_namespaces+0x3ea/0xa90 [ 1496.261874][T20809] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1496.261930][T20809] ksys_unshare+0x45b/0xa40 [ 1496.261980][T20809] ? __pfx_ksys_unshare+0x10/0x10 [ 1496.262029][T20809] ? xfd_validate_state+0x61/0x180 [ 1496.262092][T20809] __x64_sys_unshare+0x31/0x40 [ 1496.262138][T20809] do_syscall_64+0xcd/0x490 [ 1496.262190][T20809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.262225][T20809] RIP: 0033:0x7fbee978ebe9 [ 1496.262253][T20809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1496.262287][T20809] RSP: 002b:00007fbeea60b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1496.262320][T20809] RAX: ffffffffffffffda RBX: 00007fbee99b6270 RCX: 00007fbee978ebe9 [ 1496.262343][T20809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1496.262364][T20809] RBP: 00007fbee9811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1496.262393][T20809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1496.262415][T20809] R13: 00007fbee99b6308 R14: 00007fbee99b6270 R15: 00007ffd784f4d18 [ 1496.262461][T20809] [ 1496.596360][T20809] audit: cannot initialize netlink socket in namespace [ 1497.343112][ T30] audit: type=1800 audit(1756583846.981:236): pid=20830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2519" name="members" dev="configfs" ino=77564 res=0 errno=0 [ 1497.686741][T20830] FAULT_INJECTION: forcing a failure. [ 1497.686741][T20830] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.760188][T20830] CPU: 0 UID: 0 PID: 20830 Comm: syz.2.2519 Tainted: G U syzkaller #0 PREEMPT(full) [ 1497.760233][T20830] Tainted: [U]=USER [ 1497.760241][T20830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1497.760256][T20830] Call Trace: [ 1497.760264][T20830] [ 1497.760274][T20830] dump_stack_lvl+0x16c/0x1f0 [ 1497.760311][T20830] should_fail_ex+0x512/0x640 [ 1497.760347][T20830] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1497.760381][T20830] should_failslab+0xc2/0x120 [ 1497.760414][T20830] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1497.760446][T20830] ? __proc_create+0xc3/0x8e0 [ 1497.760482][T20830] ? __proc_create+0x2ce/0x8e0 [ 1497.760522][T20830] __proc_create+0x2ce/0x8e0 [ 1497.760560][T20830] ? __pfx___proc_create+0x10/0x10 [ 1497.760601][T20830] ? _raw_write_unlock+0x28/0x50 [ 1497.760631][T20830] ? proc_register+0x314/0x5f0 [ 1497.760671][T20830] proc_create_reg+0x7d/0x180 [ 1497.760712][T20830] proc_create_net_data+0x8e/0x1c0 [ 1497.760751][T20830] ? __pfx_proc_create_net_data+0x10/0x10 [ 1497.760790][T20830] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1497.760834][T20830] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1497.760864][T20830] dev_proc_net_init+0xf9/0x220 [ 1497.760894][T20830] ops_init+0x1e2/0x5f0 [ 1497.760932][T20830] setup_net+0x10f/0x380 [ 1497.760965][T20830] ? lockdep_init_map_type+0x5c/0x280 [ 1497.761001][T20830] ? __pfx_setup_net+0x10/0x10 [ 1497.761038][T20830] ? debug_mutex_init+0x37/0x70 [ 1497.761065][T20830] copy_net_ns+0x2a6/0x5f0 [ 1497.761106][T20830] create_new_namespaces+0x3ea/0xa90 [ 1497.761148][T20830] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1497.761180][T20830] ksys_unshare+0x45b/0xa40 [ 1497.761216][T20830] ? __pfx_ksys_unshare+0x10/0x10 [ 1497.761251][T20830] ? xfd_validate_state+0x61/0x180 [ 1497.761296][T20830] __x64_sys_unshare+0x31/0x40 [ 1497.761329][T20830] do_syscall_64+0xcd/0x490 [ 1497.761365][T20830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.761391][T20830] RIP: 0033:0x7fedc218ebe9 [ 1497.761410][T20830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1497.761434][T20830] RSP: 002b:00007fedc03d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1497.761457][T20830] RAX: ffffffffffffffda RBX: 00007fedc23b6180 RCX: 00007fedc218ebe9 [ 1497.761473][T20830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1497.761488][T20830] RBP: 00007fedc2211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1497.761503][T20830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.761519][T20830] R13: 00007fedc23b6218 R14: 00007fedc23b6180 R15: 00007ffc45fe65d8 [ 1497.761549][T20830] [ 1498.391038][ T30] audit: type=1800 audit(1756583848.057:237): pid=20839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2521" name="members" dev="configfs" ino=77581 res=0 errno=0 [ 1499.656466][T20839] FAULT_INJECTION: forcing a failure. [ 1499.656466][T20839] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.669934][T20839] CPU: 1 UID: 0 PID: 20839 Comm: syz.3.2521 Tainted: G U syzkaller #0 PREEMPT(full) [ 1499.669991][T20839] Tainted: [U]=USER [ 1499.670004][T20839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1499.670025][T20839] Call Trace: [ 1499.670038][T20839] [ 1499.670052][T20839] dump_stack_lvl+0x16c/0x1f0 [ 1499.670113][T20839] should_fail_ex+0x512/0x640 [ 1499.670163][T20839] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1499.670205][T20839] should_failslab+0xc2/0x120 [ 1499.670253][T20839] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1499.670289][T20839] ? audit_net_init+0x190/0x440 [ 1499.670330][T20839] ? uevent_net_init+0xd3/0x350 [ 1499.670391][T20839] uevent_net_init+0xd3/0x350 [ 1499.670447][T20839] ? __pfx_uevent_net_init+0x10/0x10 [ 1499.670505][T20839] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1499.670573][T20839] ? __pfx_uevent_net_init+0x10/0x10 [ 1499.670627][T20839] ops_init+0x1e2/0x5f0 [ 1499.670682][T20839] setup_net+0x10f/0x380 [ 1499.670730][T20839] ? lockdep_init_map_type+0x5c/0x280 [ 1499.670780][T20839] ? __pfx_setup_net+0x10/0x10 [ 1499.670832][T20839] ? debug_mutex_init+0x37/0x70 [ 1499.670872][T20839] copy_net_ns+0x2a6/0x5f0 [ 1499.670932][T20839] create_new_namespaces+0x3ea/0xa90 [ 1499.670982][T20839] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1499.671029][T20839] ksys_unshare+0x45b/0xa40 [ 1499.671088][T20839] ? __pfx_ksys_unshare+0x10/0x10 [ 1499.671139][T20839] ? xfd_validate_state+0x61/0x180 [ 1499.671204][T20839] __x64_sys_unshare+0x31/0x40 [ 1499.671253][T20839] do_syscall_64+0xcd/0x490 [ 1499.671305][T20839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.671342][T20839] RIP: 0033:0x7fbee978ebe9 [ 1499.671371][T20839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1499.671406][T20839] RSP: 002b:00007fbeea60b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1499.671440][T20839] RAX: ffffffffffffffda RBX: 00007fbee99b6270 RCX: 00007fbee978ebe9 [ 1499.671464][T20839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1499.671487][T20839] RBP: 00007fbee9811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1499.671510][T20839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1499.671532][T20839] R13: 00007fbee99b6308 R14: 00007fbee99b6270 R15: 00007ffd784f4d18 [ 1499.671579][T20839] [ 1502.080174][ T30] audit: type=1800 audit(1756583851.756:238): pid=20885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2528" name="members" dev="configfs" ino=78352 res=0 errno=0 [ 1502.311742][T20880] FAULT_INJECTION: forcing a failure. [ 1502.311742][T20880] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.325692][T20880] CPU: 0 UID: 0 PID: 20880 Comm: syz.4.2528 Tainted: G U syzkaller #0 PREEMPT(full) [ 1502.325747][T20880] Tainted: [U]=USER [ 1502.325760][T20880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1502.325780][T20880] Call Trace: [ 1502.325792][T20880] [ 1502.325806][T20880] dump_stack_lvl+0x16c/0x1f0 [ 1502.325858][T20880] should_fail_ex+0x512/0x640 [ 1502.325916][T20880] ? __kmalloc_noprof+0xbf/0x510 [ 1502.325961][T20880] ? lsm_blob_alloc+0x68/0x90 [ 1502.325990][T20880] should_failslab+0xc2/0x120 [ 1502.326037][T20880] __kmalloc_noprof+0xd2/0x510 [ 1502.326088][T20880] lsm_blob_alloc+0x68/0x90 [ 1502.326121][T20880] security_sk_alloc+0x30/0x270 [ 1502.326162][T20880] sk_prot_alloc+0x1c7/0x2a0 [ 1502.326222][T20880] sk_alloc+0x36/0xc20 [ 1502.326272][T20880] __netlink_create+0x5e/0x2c0 [ 1502.326317][T20880] __netlink_kernel_create+0xed/0x750 [ 1502.326369][T20880] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1502.326416][T20880] ? find_held_lock+0x2b/0x80 [ 1502.326453][T20880] ? audit_net_init+0x190/0x440 [ 1502.326501][T20880] audit_net_init+0x1ae/0x440 [ 1502.326543][T20880] ? __pfx_audit_net_init+0x10/0x10 [ 1502.326587][T20880] ? __pfx_audit_receive+0x10/0x10 [ 1502.326634][T20880] ? __pfx_audit_multicast_bind+0x10/0x10 [ 1502.326682][T20880] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 1502.326731][T20880] ? __kmalloc_noprof+0x242/0x510 [ 1502.326780][T20880] ? __pfx_audit_net_init+0x10/0x10 [ 1502.326823][T20880] ops_init+0x1e2/0x5f0 [ 1502.326883][T20880] setup_net+0x10f/0x380 [ 1502.326929][T20880] ? lockdep_init_map_type+0x5c/0x280 [ 1502.326991][T20880] ? __pfx_setup_net+0x10/0x10 [ 1502.327044][T20880] ? debug_mutex_init+0x37/0x70 [ 1502.327084][T20880] copy_net_ns+0x2a6/0x5f0 [ 1502.327143][T20880] create_new_namespaces+0x3ea/0xa90 [ 1502.327195][T20880] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1502.327241][T20880] ksys_unshare+0x45b/0xa40 [ 1502.327296][T20880] ? __pfx_ksys_unshare+0x10/0x10 [ 1502.327347][T20880] ? xfd_validate_state+0x61/0x180 [ 1502.327413][T20880] __x64_sys_unshare+0x31/0x40 [ 1502.327462][T20880] do_syscall_64+0xcd/0x490 [ 1502.327514][T20880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.327551][T20880] RIP: 0033:0x7f646638ebe9 [ 1502.327578][T20880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1502.327614][T20880] RSP: 002b:00007f64645d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1502.327647][T20880] RAX: ffffffffffffffda RBX: 00007f64665b6180 RCX: 00007f646638ebe9 [ 1502.327670][T20880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1502.327691][T20880] RBP: 00007f6466411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1502.327713][T20880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1502.327734][T20880] R13: 00007f64665b6218 R14: 00007f64665b6180 R15: 00007fffcc670748 [ 1502.327778][T20880] [ 1502.752314][T20880] audit: cannot initialize netlink socket in namespace [ 1506.236003][T20915] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1506.282613][T20917] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 1507.951615][T20935] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1509.309577][T20953] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 1511.934821][T20988] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1513.679191][ T30] audit: type=1800 audit(1756583863.416:239): pid=21015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2547" name="members" dev="configfs" ino=78993 res=0 errno=0 [ 1515.520697][T21015] FAULT_INJECTION: forcing a failure. [ 1515.520697][T21015] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.535659][T21015] CPU: 0 UID: 0 PID: 21015 Comm: syz.3.2547 Tainted: G U syzkaller #0 PREEMPT(full) [ 1515.535717][T21015] Tainted: [U]=USER [ 1515.535731][T21015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1515.535753][T21015] Call Trace: [ 1515.535765][T21015] [ 1515.535779][T21015] dump_stack_lvl+0x16c/0x1f0 [ 1515.535833][T21015] should_fail_ex+0x512/0x640 [ 1515.535882][T21015] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1515.535932][T21015] should_failslab+0xc2/0x120 [ 1515.535979][T21015] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1515.536029][T21015] ? ksys_unshare+0x45b/0xa40 [ 1515.536077][T21015] ? __x64_sys_unshare+0x31/0x40 [ 1515.536126][T21015] ? sock_alloc_inode+0x25/0x1c0 [ 1515.536187][T21015] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1515.536239][T21015] sock_alloc_inode+0x25/0x1c0 [ 1515.536292][T21015] alloc_inode+0x64/0x240 [ 1515.536346][T21015] sock_alloc+0x40/0x280 [ 1515.536398][T21015] sock_create_lite+0x82/0x120 [ 1515.536454][T21015] __netlink_kernel_create+0xbd/0x750 [ 1515.536512][T21015] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1515.536560][T21015] ? find_held_lock+0x2b/0x80 [ 1515.536596][T21015] ? audit_net_init+0x190/0x440 [ 1515.536646][T21015] audit_net_init+0x1ae/0x440 [ 1515.536689][T21015] ? __pfx_audit_net_init+0x10/0x10 [ 1515.536733][T21015] ? __pfx_audit_receive+0x10/0x10 [ 1515.536778][T21015] ? __pfx_audit_multicast_bind+0x10/0x10 [ 1515.536826][T21015] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 1515.536875][T21015] ? __kmalloc_noprof+0x242/0x510 [ 1515.536925][T21015] ? __pfx_audit_net_init+0x10/0x10 [ 1515.536967][T21015] ops_init+0x1e2/0x5f0 [ 1515.537028][T21015] setup_net+0x10f/0x380 [ 1515.537075][T21015] ? lockdep_init_map_type+0x5c/0x280 [ 1515.537126][T21015] ? __pfx_setup_net+0x10/0x10 [ 1515.537179][T21015] ? debug_mutex_init+0x37/0x70 [ 1515.537219][T21015] copy_net_ns+0x2a6/0x5f0 [ 1515.537286][T21015] create_new_namespaces+0x3ea/0xa90 [ 1515.537338][T21015] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1515.537383][T21015] ksys_unshare+0x45b/0xa40 [ 1515.537434][T21015] ? __pfx_ksys_unshare+0x10/0x10 [ 1515.537484][T21015] ? xfd_validate_state+0x61/0x180 [ 1515.537550][T21015] __x64_sys_unshare+0x31/0x40 [ 1515.537599][T21015] do_syscall_64+0xcd/0x490 [ 1515.537651][T21015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.537687][T21015] RIP: 0033:0x7fbee978ebe9 [ 1515.537716][T21015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1515.537752][T21015] RSP: 002b:00007fbeea60b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1515.537785][T21015] RAX: ffffffffffffffda RBX: 00007fbee99b6270 RCX: 00007fbee978ebe9 [ 1515.537809][T21015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1515.537832][T21015] RBP: 00007fbee9811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1515.537870][T21015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1515.537892][T21015] R13: 00007fbee99b6308 R14: 00007fbee99b6270 R15: 00007ffd784f4d18 [ 1515.537938][T21015] [ 1515.539677][T21015] audit: cannot initialize netlink socket in namespace [ 1516.576563][T21036] __vm_enough_memory: pid: 21036, comm: syz.3.2553, bytes: 1099511689216 not enough memory for the allocation [ 1517.090600][T21051] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1518.039484][ T30] audit: type=1800 audit(1756583867.799:240): pid=21064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2561" name="members" dev="configfs" ino=79164 res=0 errno=0 [ 1518.351858][T21064] FAULT_INJECTION: forcing a failure. [ 1518.351858][T21064] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.372400][T21064] CPU: 1 UID: 0 PID: 21064 Comm: syz.2.2561 Tainted: G U syzkaller #0 PREEMPT(full) [ 1518.372453][T21064] Tainted: [U]=USER [ 1518.372464][T21064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1518.372485][T21064] Call Trace: [ 1518.372497][T21064] [ 1518.372509][T21064] dump_stack_lvl+0x16c/0x1f0 [ 1518.372561][T21064] should_fail_ex+0x512/0x640 [ 1518.372609][T21064] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1518.372657][T21064] should_failslab+0xc2/0x120 [ 1518.372705][T21064] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1518.372746][T21064] ? __proc_create+0xc3/0x8e0 [ 1518.372796][T21064] ? __proc_create+0x2ce/0x8e0 [ 1518.372854][T21064] __proc_create+0x2ce/0x8e0 [ 1518.372913][T21064] ? __pfx___proc_create+0x10/0x10 [ 1518.372983][T21064] ? _raw_write_unlock+0x28/0x50 [ 1518.373027][T21064] ? proc_register+0x314/0x5f0 [ 1518.373082][T21064] proc_create_reg+0x7d/0x180 [ 1518.373138][T21064] proc_create_net_data+0x8e/0x1c0 [ 1518.373194][T21064] ? __pfx_proc_create_net_data+0x10/0x10 [ 1518.373249][T21064] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1518.373311][T21064] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1518.373353][T21064] dev_proc_net_init+0xf9/0x220 [ 1518.373396][T21064] ops_init+0x1e2/0x5f0 [ 1518.373450][T21064] setup_net+0x10f/0x380 [ 1518.373496][T21064] ? lockdep_init_map_type+0x5c/0x280 [ 1518.373562][T21064] ? __pfx_setup_net+0x10/0x10 [ 1518.373616][T21064] ? debug_mutex_init+0x37/0x70 [ 1518.373662][T21064] copy_net_ns+0x2a6/0x5f0 [ 1518.373719][T21064] create_new_namespaces+0x3ea/0xa90 [ 1518.373771][T21064] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1518.373816][T21064] ksys_unshare+0x45b/0xa40 [ 1518.373867][T21064] ? __pfx_ksys_unshare+0x10/0x10 [ 1518.373923][T21064] ? xfd_validate_state+0x61/0x180 [ 1518.373996][T21064] __x64_sys_unshare+0x31/0x40 [ 1518.374043][T21064] do_syscall_64+0xcd/0x490 [ 1518.374094][T21064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.374131][T21064] RIP: 0033:0x7fedc218ebe9 [ 1518.374159][T21064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1518.374194][T21064] RSP: 002b:00007fedbffb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1518.374228][T21064] RAX: ffffffffffffffda RBX: 00007fedc23b6270 RCX: 00007fedc218ebe9 [ 1518.374251][T21064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1518.374274][T21064] RBP: 00007fedc2211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1518.374296][T21064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1518.374318][T21064] R13: 00007fedc23b6308 R14: 00007fedc23b6270 R15: 00007ffc45fe65d8 [ 1518.374365][T21064] [ 1519.479323][ T30] audit: type=1800 audit(1756583869.206:241): pid=21081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2563" name="members" dev="configfs" ino=78650 res=0 errno=0 [ 1519.859442][T21081] FAULT_INJECTION: forcing a failure. [ 1519.859442][T21081] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.872383][T21081] CPU: 0 UID: 0 PID: 21081 Comm: syz.4.2563 Tainted: G U syzkaller #0 PREEMPT(full) [ 1519.872438][T21081] Tainted: [U]=USER [ 1519.872451][T21081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1519.872472][T21081] Call Trace: [ 1519.872492][T21081] [ 1519.872506][T21081] dump_stack_lvl+0x16c/0x1f0 [ 1519.872558][T21081] should_fail_ex+0x512/0x640 [ 1519.872608][T21081] ? __kmalloc_noprof+0xbf/0x510 [ 1519.872652][T21081] ? __netlink_kernel_create+0x17f/0x750 [ 1519.872701][T21081] should_failslab+0xc2/0x120 [ 1519.872747][T21081] __kmalloc_noprof+0xd2/0x510 [ 1519.872793][T21081] ? __netlink_create+0x208/0x2c0 [ 1519.872836][T21081] __netlink_kernel_create+0x17f/0x750 [ 1519.872888][T21081] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1519.872935][T21081] ? find_held_lock+0x2b/0x80 [ 1519.872971][T21081] ? audit_net_init+0x190/0x440 [ 1519.873020][T21081] audit_net_init+0x1ae/0x440 [ 1519.873061][T21081] ? __pfx_audit_net_init+0x10/0x10 [ 1519.873104][T21081] ? __pfx_audit_receive+0x10/0x10 [ 1519.873151][T21081] ? __pfx_audit_multicast_bind+0x10/0x10 [ 1519.873199][T21081] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 1519.873249][T21081] ? __kmalloc_noprof+0x242/0x510 [ 1519.873299][T21081] ? __pfx_audit_net_init+0x10/0x10 [ 1519.873340][T21081] ops_init+0x1e2/0x5f0 [ 1519.873395][T21081] setup_net+0x10f/0x380 [ 1519.873442][T21081] ? lockdep_init_map_type+0x5c/0x280 [ 1519.873504][T21081] ? __pfx_setup_net+0x10/0x10 [ 1519.873558][T21081] ? debug_mutex_init+0x37/0x70 [ 1519.873599][T21081] copy_net_ns+0x2a6/0x5f0 [ 1519.873658][T21081] create_new_namespaces+0x3ea/0xa90 [ 1519.873710][T21081] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1519.873756][T21081] ksys_unshare+0x45b/0xa40 [ 1519.873806][T21081] ? __pfx_ksys_unshare+0x10/0x10 [ 1519.873855][T21081] ? xfd_validate_state+0x61/0x180 [ 1519.873920][T21081] __x64_sys_unshare+0x31/0x40 [ 1519.873969][T21081] do_syscall_64+0xcd/0x490 [ 1519.874021][T21081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.874056][T21081] RIP: 0033:0x7f646638ebe9 [ 1519.874084][T21081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1519.874119][T21081] RSP: 002b:00007f64641b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1519.874153][T21081] RAX: ffffffffffffffda RBX: 00007f64665b6270 RCX: 00007f646638ebe9 [ 1519.874176][T21081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1519.874198][T21081] RBP: 00007f6466411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1519.874220][T21081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1519.874242][T21081] R13: 00007f64665b6308 R14: 00007f64665b6270 R15: 00007fffcc670748 [ 1519.874287][T21081] [ 1519.874597][T21081] audit: cannot initialize netlink socket in namespace [ 1521.164559][T21083] FAULT_INJECTION: forcing a failure. [ 1521.164559][T21083] name failslab, interval 1, probability 0, space 0, times 0 [ 1521.216920][T21083] CPU: 1 UID: 0 PID: 21083 Comm: syz.2.2565 Tainted: G U syzkaller #0 PREEMPT(full) [ 1521.216973][T21083] Tainted: [U]=USER [ 1521.216985][T21083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1521.217005][T21083] Call Trace: [ 1521.217016][T21083] [ 1521.217031][T21083] dump_stack_lvl+0x16c/0x1f0 [ 1521.217084][T21083] should_fail_ex+0x512/0x640 [ 1521.217136][T21083] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1521.217199][T21083] should_failslab+0xc2/0x120 [ 1521.217247][T21083] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1521.217294][T21083] ? __proc_create+0xc3/0x8e0 [ 1521.217343][T21083] ? __proc_create+0x2ce/0x8e0 [ 1521.217409][T21083] __proc_create+0x2ce/0x8e0 [ 1521.217463][T21083] ? __pfx___proc_create+0x10/0x10 [ 1521.217525][T21083] ? _raw_write_unlock+0x28/0x50 [ 1521.217572][T21083] proc_create_reg+0x7d/0x180 [ 1521.217630][T21083] proc_create_net_data+0x8e/0x1c0 [ 1521.217684][T21083] ? __pfx_proc_create_net_data+0x10/0x10 [ 1521.217738][T21083] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1521.217800][T21083] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1521.217842][T21083] dev_proc_net_init+0x5a/0x220 [ 1521.217882][T21083] ops_init+0x1e2/0x5f0 [ 1521.217938][T21083] setup_net+0x10f/0x380 [ 1521.217984][T21083] ? lockdep_init_map_type+0x5c/0x280 [ 1521.218032][T21083] ? __pfx_setup_net+0x10/0x10 [ 1521.218082][T21083] ? debug_mutex_init+0x37/0x70 [ 1521.218124][T21083] copy_net_ns+0x2a6/0x5f0 [ 1521.218182][T21083] create_new_namespaces+0x3ea/0xa90 [ 1521.218234][T21083] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1521.218279][T21083] ksys_unshare+0x45b/0xa40 [ 1521.218329][T21083] ? __pfx_ksys_unshare+0x10/0x10 [ 1521.218376][T21083] ? ksys_write+0x1ac/0x250 [ 1521.218439][T21083] __x64_sys_unshare+0x31/0x40 [ 1521.218487][T21083] do_syscall_64+0xcd/0x490 [ 1521.218540][T21083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.218575][T21083] RIP: 0033:0x7fedc218ebe9 [ 1521.218602][T21083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1521.218638][T21083] RSP: 002b:00007fedc2f2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1521.218671][T21083] RAX: ffffffffffffffda RBX: 00007fedc23b5fa0 RCX: 00007fedc218ebe9 [ 1521.218695][T21083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1521.218717][T21083] RBP: 00007fedc2211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1521.218737][T21083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1521.218758][T21083] R13: 00007fedc23b6038 R14: 00007fedc23b5fa0 R15: 00007ffc45fe65d8 [ 1521.218802][T21083] [ 1521.808324][T17700] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1521.820575][T17700] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1521.828764][T17700] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1521.839774][T17700] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1521.858319][T17700] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1522.464165][ T30] audit: type=1800 audit(1756583872.252:242): pid=21100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2569" name="members" dev="configfs" ino=79346 res=0 errno=0 [ 1522.607011][T19045] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.800903][T19045] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.823116][T21098] FAULT_INJECTION: forcing a failure. [ 1522.823116][T21098] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.838737][T21098] CPU: 0 UID: 0 PID: 21098 Comm: syz.2.2569 Tainted: G U syzkaller #0 PREEMPT(full) [ 1522.838782][T21098] Tainted: [U]=USER [ 1522.838791][T21098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1522.838806][T21098] Call Trace: [ 1522.838815][T21098] [ 1522.838825][T21098] dump_stack_lvl+0x16c/0x1f0 [ 1522.838870][T21098] should_fail_ex+0x512/0x640 [ 1522.838918][T21098] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1522.838963][T21098] should_failslab+0xc2/0x120 [ 1522.838996][T21098] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1522.839031][T21098] ? sysctl_core_net_init+0x42/0x280 [ 1522.839062][T21098] kmemdup_noprof+0x29/0x60 [ 1522.839093][T21098] sysctl_core_net_init+0x42/0x280 [ 1522.839124][T21098] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 1522.839151][T21098] ops_init+0x1e2/0x5f0 [ 1522.839188][T21098] setup_net+0x10f/0x380 [ 1522.839220][T21098] ? lockdep_init_map_type+0x5c/0x280 [ 1522.839255][T21098] ? __pfx_setup_net+0x10/0x10 [ 1522.839291][T21098] ? debug_mutex_init+0x37/0x70 [ 1522.839318][T21098] copy_net_ns+0x2a6/0x5f0 [ 1522.839366][T21098] create_new_namespaces+0x3ea/0xa90 [ 1522.839402][T21098] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1522.839434][T21098] ksys_unshare+0x45b/0xa40 [ 1522.839469][T21098] ? __pfx_ksys_unshare+0x10/0x10 [ 1522.839504][T21098] ? xfd_validate_state+0x61/0x180 [ 1522.839550][T21098] __x64_sys_unshare+0x31/0x40 [ 1522.839582][T21098] do_syscall_64+0xcd/0x490 [ 1522.839619][T21098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.839644][T21098] RIP: 0033:0x7fedc218ebe9 [ 1522.839668][T21098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1522.839704][T21098] RSP: 002b:00007fedc2f2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1522.839736][T21098] RAX: ffffffffffffffda RBX: 00007fedc23b5fa0 RCX: 00007fedc218ebe9 [ 1522.839759][T21098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1522.839779][T21098] RBP: 00007fedc2211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1522.839799][T21098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1522.839820][T21098] R13: 00007fedc23b6038 R14: 00007fedc23b5fa0 R15: 00007ffc45fe65d8 [ 1522.839868][T21098] [ 1523.396536][T19045] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.593649][T19045] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.645270][T21089] chnl_net:caif_netlink_parms(): no params data found [ 1523.926438][T17700] Bluetooth: hci4: command tx timeout [ 1524.324650][T21089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.348558][T21089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.368708][T21089] bridge_slave_0: entered allmulticast mode [ 1524.401145][T21089] bridge_slave_0: entered promiscuous mode [ 1524.435025][T21089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.460498][T21089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.468442][T21089] bridge_slave_1: entered allmulticast mode [ 1524.476915][T21089] bridge_slave_1: entered promiscuous mode [ 1524.703230][T21089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.726789][T21089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.750894][T19045] bridge_slave_1: left allmulticast mode [ 1524.757057][T19045] bridge_slave_1: left promiscuous mode [ 1524.766762][T19045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.801584][T19045] bridge_slave_0: left allmulticast mode [ 1524.807750][T19045] bridge_slave_0: left promiscuous mode [ 1524.830240][T21125] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1524.845389][T19045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.002063][T17700] Bluetooth: hci4: command tx timeout [ 1526.069706][T21139] random: crng reseeded on system resumption [ 1526.298751][T19045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1526.319832][T19045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1526.341651][T19045] bond0 (unregistering): Released all slaves [ 1526.879409][T21089] team0: Port device team_slave_0 added [ 1526.980535][T19045] tipc: Left network mode [ 1526.993372][T21089] team0: Port device team_slave_1 added [ 1527.527719][ T30] audit: type=1800 audit(1756583877.328:243): pid=21148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2576" name="members" dev="configfs" ino=79543 res=0 errno=0 [ 1528.005885][T21148] FAULT_INJECTION: forcing a failure. [ 1528.005885][T21148] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.029954][T21148] CPU: 1 UID: 0 PID: 21148 Comm: syz.4.2576 Tainted: G U syzkaller #0 PREEMPT(full) [ 1528.030007][T21148] Tainted: [U]=USER [ 1528.030019][T21148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1528.030039][T21148] Call Trace: [ 1528.030048][T21148] [ 1528.030057][T21148] dump_stack_lvl+0x16c/0x1f0 [ 1528.030093][T21148] should_fail_ex+0x512/0x640 [ 1528.030129][T21148] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1528.030173][T21148] should_failslab+0xc2/0x120 [ 1528.030222][T21148] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1528.030252][T21148] ? __proc_create+0xc3/0x8e0 [ 1528.030287][T21148] ? __proc_create+0x2ce/0x8e0 [ 1528.030327][T21148] __proc_create+0x2ce/0x8e0 [ 1528.030363][T21148] ? __pfx___proc_create+0x10/0x10 [ 1528.030404][T21148] ? _raw_write_unlock+0x28/0x50 [ 1528.030434][T21148] ? proc_register+0x314/0x5f0 [ 1528.030473][T21148] proc_create_reg+0x7d/0x180 [ 1528.030521][T21148] proc_create_net_data+0x8e/0x1c0 [ 1528.030561][T21148] ? __pfx_proc_create_net_data+0x10/0x10 [ 1528.030599][T21148] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1528.030644][T21148] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1528.030673][T21148] dev_proc_net_init+0xf9/0x220 [ 1528.030701][T21148] ops_init+0x1e2/0x5f0 [ 1528.030739][T21148] setup_net+0x10f/0x380 [ 1528.030772][T21148] ? lockdep_init_map_type+0x5c/0x280 [ 1528.030807][T21148] ? __pfx_setup_net+0x10/0x10 [ 1528.030843][T21148] ? debug_mutex_init+0x37/0x70 [ 1528.030870][T21148] copy_net_ns+0x2a6/0x5f0 [ 1528.030911][T21148] create_new_namespaces+0x3ea/0xa90 [ 1528.030946][T21148] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1528.030977][T21148] ksys_unshare+0x45b/0xa40 [ 1528.031011][T21148] ? __pfx_ksys_unshare+0x10/0x10 [ 1528.031046][T21148] ? xfd_validate_state+0x61/0x180 [ 1528.031091][T21148] __x64_sys_unshare+0x31/0x40 [ 1528.031124][T21148] do_syscall_64+0xcd/0x490 [ 1528.031173][T21148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.031206][T21148] RIP: 0033:0x7f646638ebe9 [ 1528.031225][T21148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1528.031249][T21148] RSP: 002b:00007f64645d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1528.031272][T21148] RAX: ffffffffffffffda RBX: 00007f64665b6180 RCX: 00007f646638ebe9 [ 1528.031288][T21148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1528.031303][T21148] RBP: 00007f6466411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1528.031318][T21148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1528.031333][T21148] R13: 00007f64665b6218 R14: 00007f64665b6180 R15: 00007fffcc670748 [ 1528.031364][T21148] [ 1528.489923][T17700] Bluetooth: hci4: command tx timeout [ 1528.575137][T21089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.582220][T21089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.628335][T21089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.665180][T21089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.710043][T21089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.851031][T21089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.657910][T19045] hsr_slave_0: left promiscuous mode [ 1529.676595][T19045] hsr_slave_1: left promiscuous mode [ 1529.692315][T19045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1529.726105][T19045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.797702][T19045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.805152][T19045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.947089][T19045] veth1_macvtap: left promiscuous mode [ 1529.952751][T19045] veth0_macvtap: left promiscuous mode [ 1529.969663][T19045] veth1_vlan: left promiscuous mode [ 1529.979617][T19045] veth0_vlan: left promiscuous mode [ 1530.532113][T17700] Bluetooth: hci4: command tx timeout [ 1531.611530][T19045] team0 (unregistering): Port device team_slave_1 removed [ 1531.724660][T19045] team0 (unregistering): Port device team_slave_0 removed [ 1532.599190][T21089] hsr_slave_0: entered promiscuous mode [ 1532.606545][T21089] hsr_slave_1: entered promiscuous mode [ 1532.613617][T21089] debugfs: 'hsr0' already exists in 'hsr' [ 1532.619400][T21089] Cannot create hsr debugfs directory [ 1533.038676][T21199] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1534.335212][T21089] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1534.424203][T21089] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1534.583084][T21089] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1534.615132][T21089] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1535.031759][T21089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1535.163395][T21089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.170998][T21249] syz.4.2590 uses obsolete (PF_INET,SOCK_PACKET) [ 1535.216249][T19047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.223551][T19047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1535.310309][T19047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.317564][T19047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1536.914442][T21089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1536.922860][ T30] audit: type=1800 audit(1756583886.787:244): pid=21272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2591" name="features" dev="configfs" ino=80203 res=0 errno=0 [ 1537.589644][T21089] veth0_vlan: entered promiscuous mode [ 1537.658194][T21089] veth1_vlan: entered promiscuous mode [ 1537.891028][T21089] veth0_macvtap: entered promiscuous mode [ 1537.902251][T21089] veth1_macvtap: entered promiscuous mode [ 1537.932814][T21089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1538.365551][T21089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.417372][T19046] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.466631][T19046] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.559982][T19046] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.568883][T19046] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.657932][T21290] random: crng reseeded on system resumption [ 1538.968668][T21295] FAULT_INJECTION: forcing a failure. [ 1538.968668][T21295] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.289579][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.322415][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.403243][T21298] FAULT_INJECTION: forcing a failure. [ 1539.403243][T21298] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1539.439634][T19041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.466560][T21295] CPU: 1 UID: 0 PID: 21295 Comm: syz.4.2594 Tainted: G U syzkaller #0 PREEMPT(full) [ 1539.466612][T21295] Tainted: [U]=USER [ 1539.466623][T21295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1539.466641][T21295] Call Trace: [ 1539.466653][T21295] [ 1539.466666][T21295] dump_stack_lvl+0x16c/0x1f0 [ 1539.466714][T21295] should_fail_ex+0x512/0x640 [ 1539.466759][T21295] ? __kvmalloc_node_noprof+0x124/0x620 [ 1539.466801][T21295] should_failslab+0xc2/0x120 [ 1539.466845][T21295] __kvmalloc_node_noprof+0x137/0x620 [ 1539.466882][T21295] ? flush_all_cpus_locked+0x1e0/0x210 [ 1539.466931][T21295] ? io_alloc_cache_init+0x33/0x170 [ 1539.466988][T21295] ? io_alloc_cache_init+0x33/0x170 [ 1539.467035][T21295] io_alloc_cache_init+0x33/0x170 [ 1539.467088][T21295] io_rsrc_cache_init+0x40/0x50 [ 1539.467137][T21295] io_uring_setup+0x68b/0x2080 [ 1539.467185][T21295] ? __pfx_io_uring_setup+0x10/0x10 [ 1539.467226][T21295] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1539.467285][T21295] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1539.467337][T21295] ? __fget_files+0x20e/0x3c0 [ 1539.467386][T21295] ? ksys_write+0x1ac/0x250 [ 1539.467426][T21295] ? __pfx_ksys_write+0x10/0x10 [ 1539.467472][T21295] __x64_sys_io_uring_setup+0xc2/0x170 [ 1539.467528][T21295] do_syscall_64+0xcd/0x490 [ 1539.467578][T21295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.467612][T21295] RIP: 0033:0x7f646638ebe9 [ 1539.467636][T21295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1539.467669][T21295] RSP: 002b:00007f6467111038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1539.467700][T21295] RAX: ffffffffffffffda RBX: 00007f64665b5fa0 RCX: 00007f646638ebe9 [ 1539.467722][T21295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1539.467740][T21295] RBP: 00007f6467111090 R08: 0000000000000000 R09: 0000000000000000 [ 1539.467759][T21295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1539.467778][T21295] R13: 00007f64665b6038 R14: 00007f64665b5fa0 R15: 00007fffcc670748 [ 1539.467820][T21295] [ 1539.697662][T19041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.944774][T21298] CPU: 1 UID: 0 PID: 21298 Comm: syz.4.2594 Tainted: G U syzkaller #0 PREEMPT(full) [ 1539.944824][T21298] Tainted: [U]=USER [ 1539.944836][T21298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1539.944856][T21298] Call Trace: [ 1539.944867][T21298] [ 1539.944879][T21298] dump_stack_lvl+0x16c/0x1f0 [ 1539.944927][T21298] should_fail_ex+0x512/0x640 [ 1539.944979][T21298] get_futex_key+0x1d0/0x1560 [ 1539.945024][T21298] ? __pfx_get_futex_key+0x10/0x10 [ 1539.945063][T21298] ? __pfx___schedule+0x10/0x10 [ 1539.945099][T21298] ? do_raw_spin_unlock+0x172/0x230 [ 1539.945159][T21298] futex_wait_setup+0x9d/0x550 [ 1539.945230][T21298] __futex_wait+0x194/0x2f0 [ 1539.945282][T21298] ? __pfx___futex_wait+0x10/0x10 [ 1539.945338][T21298] ? __pfx_futex_wake_mark+0x10/0x10 [ 1539.945392][T21298] ? futex_private_hash_put+0x176/0x300 [ 1539.945436][T21298] ? futex_private_hash_put+0x18a/0x300 [ 1539.945479][T21298] futex_wait+0xe8/0x380 [ 1539.945528][T21298] ? __pfx_futex_wait+0x10/0x10 [ 1539.945586][T21298] ? kmem_cache_free+0x2d1/0x4d0 [ 1539.945623][T21298] ? fd_install+0x225/0x750 [ 1539.945654][T21298] ? putname+0x154/0x1a0 [ 1539.945707][T21298] do_futex+0x229/0x350 [ 1539.945750][T21298] ? __pfx_do_futex+0x10/0x10 [ 1539.945792][T21298] ? find_held_lock+0x2b/0x80 [ 1539.945825][T21298] ? handle_mm_fault+0x2ab/0xd10 [ 1539.945863][T21298] __x64_sys_futex+0x1e0/0x4c0 [ 1539.945910][T21298] ? __x64_sys_openat+0x174/0x210 [ 1539.945963][T21298] ? __pfx___x64_sys_futex+0x10/0x10 [ 1539.946007][T21298] ? xfd_validate_state+0x61/0x180 [ 1539.946075][T21298] do_syscall_64+0xcd/0x490 [ 1539.946123][T21298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.946159][T21298] RIP: 0033:0x7f646638ebe9 [ 1539.946186][T21298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1539.946225][T21298] RSP: 002b:00007f64645f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1539.946257][T21298] RAX: ffffffffffffffda RBX: 00007f64665b6098 RCX: 00007f646638ebe9 [ 1539.946278][T21298] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f64665b6098 [ 1539.946300][T21298] RBP: 00007f64665b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1539.946320][T21298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1539.946341][T21298] R13: 00007f64665b6128 R14: 00007fffcc670660 R15: 00007fffcc670748 [ 1539.946384][T21298] syzkaller syzkaller login: [ 1540.782034][ T30] audit: type=1800 audit(1756583890.667:245): pid=21313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2595" name="members" dev="configfs" ino=81219 res=0 errno=0 [ 1542.460041][T21334] openvswitch: netlink: Key type 211 is out of range max 32 [ 1546.131026][T21364] Bluetooth: hci3: command 0x0406 tx timeout [ 1547.027047][ T30] audit: type=1800 audit(1756583896.950:246): pid=21390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2604" name="features" dev="configfs" ino=80396 res=0 errno=0 [ 1547.062847][T21387] FAULT_INJECTION: forcing a failure. [ 1547.062847][T21387] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.075909][T21387] CPU: 0 UID: 0 PID: 21387 Comm: syz.3.2603 Tainted: G U syzkaller #0 PREEMPT(full) [ 1547.075958][T21387] Tainted: [U]=USER [ 1547.075966][T21387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1547.075981][T21387] Call Trace: [ 1547.075990][T21387] [ 1547.076001][T21387] dump_stack_lvl+0x16c/0x1f0 [ 1547.076038][T21387] should_fail_ex+0x512/0x640 [ 1547.076073][T21387] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1547.076110][T21387] should_failslab+0xc2/0x120 [ 1547.076157][T21387] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1547.076192][T21387] ? __proc_create+0xc3/0x8e0 [ 1547.076227][T21387] ? __proc_create+0x2ce/0x8e0 [ 1547.076266][T21387] __proc_create+0x2ce/0x8e0 [ 1547.076303][T21387] ? __pfx___proc_create+0x10/0x10 [ 1547.076352][T21387] ? _raw_write_unlock+0x28/0x50 [ 1547.076386][T21387] proc_create_reg+0x7d/0x180 [ 1547.076425][T21387] proc_create_net_data+0x8e/0x1c0 [ 1547.076464][T21387] ? __pfx_proc_create_net_data+0x10/0x10 [ 1547.076503][T21387] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1547.076545][T21387] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1547.076576][T21387] wext_proc_init+0x53/0x70 [ 1547.076607][T21387] dev_proc_net_init+0x10b/0x220 [ 1547.076636][T21387] ops_init+0x1e2/0x5f0 [ 1547.076674][T21387] setup_net+0x10f/0x380 [ 1547.076706][T21387] ? lockdep_init_map_type+0x5c/0x280 [ 1547.076741][T21387] ? __pfx_setup_net+0x10/0x10 [ 1547.076777][T21387] ? debug_mutex_init+0x37/0x70 [ 1547.076804][T21387] copy_net_ns+0x2a6/0x5f0 [ 1547.076845][T21387] create_new_namespaces+0x3ea/0xa90 [ 1547.076880][T21387] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1547.076911][T21387] ksys_unshare+0x45b/0xa40 [ 1547.076945][T21387] ? __pfx_ksys_unshare+0x10/0x10 [ 1547.076980][T21387] ? xfd_validate_state+0x61/0x180 [ 1547.077025][T21387] __x64_sys_unshare+0x31/0x40 [ 1547.077058][T21387] do_syscall_64+0xcd/0x490 [ 1547.077093][T21387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.077127][T21387] RIP: 0033:0x7f768358ebe9 [ 1547.077157][T21387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1547.077183][T21387] RSP: 002b:00007f76843ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1547.077206][T21387] RAX: ffffffffffffffda RBX: 00007f76837b6270 RCX: 00007f768358ebe9 [ 1547.077223][T21387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1547.077238][T21387] RBP: 00007f7683611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1547.077253][T21387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1547.077268][T21387] R13: 00007f76837b6308 R14: 00007f76837b6270 R15: 00007ffe6789e7f8 [ 1547.077303][T21387] [ 1548.245283][T21399] FAULT_INJECTION: forcing a failure. [ 1548.245283][T21399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1548.548013][T21399] CPU: 0 UID: 0 PID: 21399 Comm: syz.2.2605 Tainted: G U syzkaller #0 PREEMPT(full) [ 1548.548065][T21399] Tainted: [U]=USER [ 1548.548081][T21399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1548.548100][T21399] Call Trace: [ 1548.548111][T21399] [ 1548.548123][T21399] dump_stack_lvl+0x16c/0x1f0 [ 1548.548177][T21399] should_fail_ex+0x512/0x640 [ 1548.548228][T21399] _copy_to_user+0x32/0xd0 [ 1548.548263][T21399] simple_read_from_buffer+0xcb/0x170 [ 1548.548300][T21399] proc_fail_nth_read+0x197/0x240 [ 1548.548337][T21399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1548.548384][T21399] ? rw_verify_area+0xcf/0x6c0 [ 1548.548414][T21399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1548.548449][T21399] vfs_read+0x1e4/0xcf0 [ 1548.548486][T21399] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1548.548528][T21399] ? __pfx___mutex_lock+0x10/0x10 [ 1548.548573][T21399] ? __pfx_vfs_read+0x10/0x10 [ 1548.548615][T21399] ? __rcu_read_unlock+0x2bc/0x550 [ 1548.548662][T21399] ? __fget_files+0x20e/0x3c0 [ 1548.548695][T21399] ? rcu_watching_snap_stopped_since+0xf0/0x110 [ 1548.548744][T21399] ksys_read+0x12a/0x250 [ 1548.548781][T21399] ? __pfx_ksys_read+0x10/0x10 [ 1548.548832][T21399] do_syscall_64+0xcd/0x490 [ 1548.548882][T21399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.548915][T21399] RIP: 0033:0x7fedc218d5fc [ 1548.548940][T21399] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1548.548974][T21399] RSP: 002b:00007fedc0393030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1548.549004][T21399] RAX: ffffffffffffffda RBX: 00007fedc23b6360 RCX: 00007fedc218d5fc [ 1548.549026][T21399] RDX: 000000000000000f RSI: 00007fedc03930a0 RDI: 0000000000000005 [ 1548.549047][T21399] RBP: 00007fedc0393090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.549066][T21399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1548.549085][T21399] R13: 00007fedc23b63f8 R14: 00007fedc23b6360 R15: 00007ffc45fe65d8 [ 1548.549128][T21399] [ 1549.036623][ T5866] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1549.080575][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: syz-executor Tainted: G U syzkaller #0 PREEMPT(full) [ 1549.080625][ T5866] Tainted: [U]=USER [ 1549.080637][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1549.080657][ T5866] Call Trace: [ 1549.080669][ T5866] [ 1549.080682][ T5866] dump_stack_lvl+0x16c/0x1f0 [ 1549.080730][ T5866] dump_header+0x101/0x930 [ 1549.080777][ T5866] oom_kill_process+0x272/0xa40 [ 1549.080824][ T5866] out_of_memory+0x350/0x1700 [ 1549.080873][ T5866] ? __pfx_out_of_memory+0x10/0x10 [ 1549.080927][ T5866] mem_cgroup_out_of_memory+0x118/0x130 [ 1549.080980][ T5866] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1549.081040][ T5866] ? do_raw_spin_unlock+0x172/0x230 [ 1549.081099][ T5866] try_charge_memcg+0x72b/0xd50 [ 1549.081142][ T5866] ? __pfx_try_charge_memcg+0x10/0x10 [ 1549.081196][ T5866] ? find_held_lock+0x2b/0x80 [ 1549.081236][ T5866] charge_memcg+0x8a/0x230 [ 1549.081279][ T5866] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 1549.081333][ T5866] __read_swap_cache_async+0x43e/0x5a0 [ 1549.081386][ T5866] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1549.081423][ T5866] ? swp_swap_info+0x20/0x130 [ 1549.081473][ T5866] ? __pfx_swp_swap_info+0x10/0x10 [ 1549.081529][ T5866] swap_cluster_readahead+0x3eb/0x710 [ 1549.081575][ T5866] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1549.081636][ T5866] ? get_vma_policy+0x242/0x3c0 [ 1549.081687][ T5866] swapin_readahead+0x13a/0xd60 [ 1549.081735][ T5866] ? __pfx_swapin_readahead+0x10/0x10 [ 1549.081770][ T5866] ? __filemap_get_folio+0x32b/0xc30 [ 1549.081826][ T5866] ? swap_cache_get_folio+0x1df/0x450 [ 1549.081863][ T5866] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1549.081896][ T5866] ? __pfx_get_swap_device+0x10/0x10 [ 1549.081939][ T5866] ? do_swap_page+0x125/0x6490 [ 1549.081996][ T5866] do_swap_page+0x635/0x6490 [ 1549.082048][ T5866] ? __lock_acquire+0x62e/0x1ce0 [ 1549.082104][ T5866] ? __pfx_do_swap_page+0x10/0x10 [ 1549.082160][ T5866] ? __pfx_default_wake_function+0x10/0x10 [ 1549.082195][ T5866] ? __lock_acquire+0x62e/0x1ce0 [ 1549.082244][ T5866] ? rcu_is_watching+0x12/0xc0 [ 1549.082277][ T5866] ? ___pte_offset_map+0x2ad/0x4f0 [ 1549.082332][ T5866] __handle_mm_fault+0x1719/0x2a50 [ 1549.082387][ T5866] ? __pfx___handle_mm_fault+0x10/0x10 [ 1549.082429][ T5866] ? lock_vma_under_rcu+0x1eb/0x530 [ 1549.082477][ T5866] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1549.082510][ T5866] ? get_timespec64+0x136/0x1b0 [ 1549.082561][ T5866] handle_mm_fault+0x589/0xd10 [ 1549.082597][ T5866] ? __bpf_trace_exceptions+0x1/0x40 [ 1549.082652][ T5866] do_user_addr_fault+0x60c/0x1370 [ 1549.082709][ T5866] ? rcu_is_watching+0x12/0xc0 [ 1549.082748][ T5866] exc_page_fault+0x5c/0xb0 [ 1549.082792][ T5866] asm_exc_page_fault+0x26/0x30 [ 1549.082823][ T5866] RIP: 0033:0x7f7cd87c14a8 [ 1549.082849][ T5866] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 1549.082883][ T5866] RSP: 002b:00007ffdda61b0f0 EFLAGS: 00010293 [ 1549.082909][ T5866] RAX: 0000000000000000 RBX: 0000000000000af3 RCX: 00007f7cd87c14a5 [ 1549.082930][ T5866] RDX: 00007ffdda61b130 RSI: 0000000000000000 RDI: 0000000000000000 [ 1549.082952][ T5866] RBP: 00007ffdda61b19c R08: 0000000000000000 R09: 0000000000000000 [ 1549.082973][ T5866] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1549.082994][ T5866] R13: 00000000000927c0 R14: 000000000017b3b9 R15: 00007ffdda61b1f0 [ 1549.083038][ T5866] [ 1549.083349][ T5866] memory: usage 3072kB, limit 3072kB, failcnt 256400 [ 1549.100440][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1549.100555][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.599810][T21402] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1549.628736][ T5866] memory+swap: usage 3660kB, limit 9007199254740988kB, failcnt 0 [ 1549.662639][ T5866] kmem: usage 2160kB, limit 9007199254740988kB, failcnt 0 [ 1549.721183][ T5866] Memory cgroup stats for /syz1: [ 1549.721403][ T5866] cache 806912 [ 1549.772964][ T5866] rss 0 [ 1549.786009][ T5866] rss_huge 0 [ 1549.789295][ T5866] shmem 806912 [ 1549.815540][ T5866] mapped_file 0 [ 1549.864558][ T5866] dirty 0 [ 1549.867572][ T5866] writeback 0 [ 1549.870894][ T5866] workingset_refault_anon 32666 [ 1549.901118][ T5866] workingset_refault_file 51639 [ 1549.906218][ T5866] swap 602112 [ 1549.937862][ T5866] swapcached 126976 [ 1549.949425][ T5866] pgpgin 534697 [ 1549.965782][ T5866] pgpgout 538046 [ 1549.969371][ T5866] pgfault 1210163 [ 1549.974680][ T5866] pgmajfault 20082 [ 1549.978493][ T5866] inactive_anon 671744 [ 1550.001471][ T5866] active_anon 262144 [ 1550.012962][ T5866] inactive_file 0 [ 1550.099915][ T5866] active_file 0 [ 1550.125664][ T5866] unevictable 0 [ 1550.129198][ T5866] hierarchical_memory_limit 3145728 [ 1550.192009][ T5866] hierarchical_memsw_limit 9223372036854771712 [ 1550.222431][ T5866] total_cache 806912 [ 1550.226574][ T5866] total_rss 0 [ 1550.272541][ T5866] total_rss_huge 0 [ 1550.291545][ T5866] total_shmem 806912 [ 1550.295580][ T5866] total_mapped_file 0 [ 1550.335019][ T5866] total_dirty 0 [ 1550.338551][ T5866] total_writeback 0 [ 1550.386864][ T5866] total_workingset_refault_anon 32666 [ 1550.490042][ T5866] total_workingset_refault_file 51639 [ 1550.495603][ T5866] total_swap 602112 [ 1550.552197][ T5866] total_swapcached 126976 [ 1550.567668][ T5866] total_pgpgin 534697 [ 1550.577460][ T5866] total_pgpgout 538046 [ 1550.588032][ T5866] total_pgfault 1210163 [ 1550.596221][ T5866] total_pgmajfault 20082 [ 1550.694215][ T5866] total_inactive_anon 671744 [ 1550.737026][ T5866] total_active_anon 262144 [ 1550.741583][ T5866] total_inactive_file 0 [ 1550.745816][ T5866] total_active_file 0 [ 1550.760277][ T5866] total_unevictable 0 [ 1550.764324][ T5866] anon_cost 0 [ 1550.796447][ T5866] file_cost 0 [ 1550.799812][ T5866] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2601,pid=21365,uid=0 [ 1550.873291][ T5866] Memory cgroup out of memory: Killed process 21365 (syz.1.2601) total-vm:141276kB, anon-rss:1044kB, file-rss:27268kB, shmem-rss:128kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 1551.978872][T21444] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1553.069998][T21364] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1553.082470][T21364] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1553.096033][T21364] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1553.106563][T21364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1553.118209][T21364] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1554.641063][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.964649][T21488] ubi: mtd0 is already attached to ubi0 [ 1555.082332][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.214936][T17700] Bluetooth: hci1: command tx timeout [ 1555.473870][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.497631][T21496] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1555.587886][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.730043][T21457] chnl_net:caif_netlink_parms(): no params data found [ 1556.523308][ T30] audit: type=1800 audit(1756583906.489:247): pid=21515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2619" name="members" dev="configfs" ino=81674 res=0 errno=0 [ 1556.734995][T21457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.760481][T21457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.769699][T21519] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1556.771541][T21457] bridge_slave_0: entered allmulticast mode [ 1556.901212][T21457] bridge_slave_0: entered promiscuous mode [ 1556.912145][T21457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.921331][T21457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.937681][T21457] bridge_slave_1: entered allmulticast mode [ 1556.972410][T21457] bridge_slave_1: entered promiscuous mode [ 1557.276081][T17700] Bluetooth: hci1: command tx timeout [ 1557.329174][ T59] team0: left allmulticast mode [ 1557.339517][ T59] team_slave_0: left allmulticast mode [ 1557.365838][ T59] team_slave_1: left allmulticast mode [ 1557.371614][ T59] team0: left promiscuous mode [ 1557.376927][ T59] team_slave_0: left promiscuous mode [ 1557.389165][ T59] team_slave_1: left promiscuous mode [ 1557.395572][ T59] bridge0: port 3(team0) entered disabled state [ 1557.406376][ T59] bridge_slave_1: left allmulticast mode [ 1557.412211][ T59] bridge_slave_1: left promiscuous mode [ 1557.418994][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.456793][ T59] bridge_slave_0: left allmulticast mode [ 1557.463486][ T59] bridge_slave_0: left promiscuous mode [ 1557.496573][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.010106][T21532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2622'. [ 1559.352016][T17700] Bluetooth: hci1: command tx timeout [ 1559.361681][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1559.375405][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1559.391458][ T59] bond0 (unregistering): Released all slaves [ 1559.677622][T21457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.777930][T21536] random: crng reseeded on system resumption [ 1559.902806][T21457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.563654][T21457] team0: Port device team_slave_0 added [ 1560.896212][ T30] audit: type=1800 audit(1756583910.872:248): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2626" name="members" dev="configfs" ino=81771 res=0 errno=0 [ 1561.082105][T21457] team0: Port device team_slave_1 added [ 1561.411522][T17700] Bluetooth: hci1: command tx timeout [ 1561.614354][T21457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.647630][T21457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.754033][T21457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.792259][T21457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.800449][T21457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.827454][T21457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.851958][ T30] audit: type=1800 audit(1756583911.847:249): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2625" name="features" dev="configfs" ino=80826 res=0 errno=0 [ 1562.018783][T21568] random: crng reseeded on system resumption [ 1563.135212][T21457] hsr_slave_0: entered promiscuous mode [ 1563.141724][T21457] hsr_slave_1: entered promiscuous mode [ 1563.163940][T21457] debugfs: 'hsr0' already exists in 'hsr' [ 1563.169718][T21457] Cannot create hsr debugfs directory [ 1563.727426][ T30] audit: type=1800 audit(1756583913.727:250): pid=21583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2628" name="members" dev="configfs" ino=81927 res=0 errno=0 [ 1565.090027][ T59] hsr_slave_0: left promiscuous mode [ 1565.159559][ T59] hsr_slave_1: left promiscuous mode [ 1565.172604][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1565.180231][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1565.236888][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.244605][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.659424][ T59] veth1_macvtap: left promiscuous mode [ 1565.665351][ T59] veth1_vlan: left promiscuous mode [ 1565.699161][ T59] veth0_vlan: left promiscuous mode [ 1566.498392][T21607] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1568.070814][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1568.181445][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1569.550186][T21621] nbd: couldn't find device at index 137 [ 1570.816088][ T30] audit: type=1800 audit(1756583920.853:251): pid=21646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2634" name="features" dev="configfs" ino=82679 res=0 errno=0 [ 1571.048181][T21632] FAULT_INJECTION: forcing a failure. [ 1571.048181][T21632] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.105674][T21632] CPU: 1 UID: 0 PID: 21632 Comm: syz.2.2633 Tainted: G U syzkaller #0 PREEMPT(full) [ 1571.105731][T21632] Tainted: [U]=USER [ 1571.105743][T21632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1571.105765][T21632] Call Trace: [ 1571.105787][T21632] [ 1571.105802][T21632] dump_stack_lvl+0x16c/0x1f0 [ 1571.105855][T21632] should_fail_ex+0x512/0x640 [ 1571.105910][T21632] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1571.105959][T21632] should_failslab+0xc2/0x120 [ 1571.106012][T21632] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1571.106055][T21632] ? __proc_create+0xc3/0x8e0 [ 1571.106106][T21632] ? __proc_create+0x2ce/0x8e0 [ 1571.106163][T21632] __proc_create+0x2ce/0x8e0 [ 1571.106217][T21632] ? __pfx___proc_create+0x10/0x10 [ 1571.106275][T21632] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1571.106336][T21632] proc_create_reg+0x7d/0x180 [ 1571.106394][T21632] proc_create_net_data+0x8e/0x1c0 [ 1571.106450][T21632] ? __pfx_proc_create_net_data+0x10/0x10 [ 1571.106503][T21632] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1571.106568][T21632] ? __pfx_proto_init_net+0x10/0x10 [ 1571.106603][T21632] proto_init_net+0x53/0x70 [ 1571.106636][T21632] ops_init+0x1e2/0x5f0 [ 1571.106690][T21632] setup_net+0x10f/0x380 [ 1571.106736][T21632] ? lockdep_init_map_type+0x5c/0x280 [ 1571.106794][T21632] ? __pfx_setup_net+0x10/0x10 [ 1571.106848][T21632] ? debug_mutex_init+0x37/0x70 [ 1571.106889][T21632] copy_net_ns+0x2a6/0x5f0 [ 1571.106948][T21632] create_new_namespaces+0x3ea/0xa90 [ 1571.106999][T21632] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1571.107045][T21632] ksys_unshare+0x45b/0xa40 [ 1571.107096][T21632] ? __pfx_ksys_unshare+0x10/0x10 [ 1571.107146][T21632] ? xfd_validate_state+0x61/0x180 [ 1571.107212][T21632] __x64_sys_unshare+0x31/0x40 [ 1571.107260][T21632] do_syscall_64+0xcd/0x490 [ 1571.107318][T21632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.107354][T21632] RIP: 0033:0x7fedc218ebe9 [ 1571.107382][T21632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1571.107416][T21632] RSP: 002b:00007fedc03d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1571.107450][T21632] RAX: ffffffffffffffda RBX: 00007fedc23b6180 RCX: 00007fedc218ebe9 [ 1571.107474][T21632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1571.107496][T21632] RBP: 00007fedc2211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1571.107518][T21632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1571.107540][T21632] R13: 00007fedc23b6218 R14: 00007fedc23b6180 R15: 00007ffc45fe65d8 [ 1571.107585][T21632] [ 1571.900650][T21457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1571.950756][T21457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1571.964223][T21654] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1571.983060][T21457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1572.023777][T21457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1572.081808][T21663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.099161][T21663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.654136][ T30] audit: type=1800 audit(1756583922.703:252): pid=21672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2637" name="members" dev="configfs" ino=82876 res=0 errno=0 [ 1572.836903][T21457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.047659][T21457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.098951][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.106308][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1573.148579][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.156018][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1573.183742][T21678] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 5 [ 1573.233018][T21457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1573.245757][T21457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1573.462501][T21674] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input31 [ 1573.707039][T21688] random: crng reseeded on system resumption [ 1574.266099][T21457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.317853][ T30] audit: type=1800 audit(1756583924.362:253): pid=21705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2642" name="members" dev="configfs" ino=83529 res=0 errno=0 [ 1574.512762][T21457] veth0_vlan: entered promiscuous mode [ 1574.593809][T21457] veth1_vlan: entered promiscuous mode [ 1574.698859][T21702] FAULT_INJECTION: forcing a failure. [ 1574.698859][T21702] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.726698][T21702] CPU: 0 UID: 0 PID: 21702 Comm: syz.3.2642 Tainted: G U syzkaller #0 PREEMPT(full) [ 1574.726753][T21702] Tainted: [U]=USER [ 1574.726766][T21702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1574.726787][T21702] Call Trace: [ 1574.726798][T21702] [ 1574.726811][T21702] dump_stack_lvl+0x16c/0x1f0 [ 1574.726862][T21702] should_fail_ex+0x512/0x640 [ 1574.726919][T21702] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1574.726973][T21702] should_failslab+0xc2/0x120 [ 1574.727026][T21702] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1574.727073][T21702] ? sysctl_core_net_init+0x42/0x280 [ 1574.727117][T21702] kmemdup_noprof+0x29/0x60 [ 1574.727162][T21702] sysctl_core_net_init+0x42/0x280 [ 1574.727202][T21702] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 1574.727239][T21702] ops_init+0x1e2/0x5f0 [ 1574.727299][T21702] setup_net+0x10f/0x380 [ 1574.727345][T21702] ? lockdep_init_map_type+0x5c/0x280 [ 1574.727397][T21702] ? __pfx_setup_net+0x10/0x10 [ 1574.727450][T21702] ? debug_mutex_init+0x37/0x70 [ 1574.727488][T21702] copy_net_ns+0x2a6/0x5f0 [ 1574.727546][T21702] create_new_namespaces+0x3ea/0xa90 [ 1574.727596][T21702] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1574.727641][T21702] ksys_unshare+0x45b/0xa40 [ 1574.727688][T21702] ? __pfx_ksys_unshare+0x10/0x10 [ 1574.727737][T21702] ? xfd_validate_state+0x61/0x180 [ 1574.727809][T21702] __x64_sys_unshare+0x31/0x40 [ 1574.727855][T21702] do_syscall_64+0xcd/0x490 [ 1574.727906][T21702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.727941][T21702] RIP: 0033:0x7f768358ebe9 [ 1574.727967][T21702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1574.728002][T21702] RSP: 002b:00007f768442d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1574.728043][T21702] RAX: ffffffffffffffda RBX: 00007f76837b5fa0 RCX: 00007f768358ebe9 [ 1574.728066][T21702] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1574.728089][T21702] RBP: 00007f7683611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1574.728111][T21702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.728133][T21702] R13: 00007f76837b6038 R14: 00007f76837b5fa0 R15: 00007ffe6789e7f8 [ 1574.728176][T21702] [ 1574.955932][ C0] vkms_vblank_simulate: vblank timer overrun [ 1575.019896][T21457] veth0_macvtap: entered promiscuous mode [ 1575.030492][T21457] veth1_macvtap: entered promiscuous mode [ 1575.049695][T21457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.061256][T21457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1575.319951][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.403215][T19038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.485829][ T30] audit: type=1800 audit(1756583925.538:254): pid=21719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2643" name="members" dev="configfs" ino=84036 res=0 errno=0 [ 1575.552261][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1575.607413][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1575.630380][T19038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.651831][T19045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.811293][T19046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1575.906636][T19046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1579.202651][T21769] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1580.951686][T21794] random: crng reseeded on system resumption [ 1581.494077][ T30] audit: type=1800 audit(1756583931.589:255): pid=21803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2650" name="features" dev="configfs" ino=84356 res=0 errno=0 [ 1583.206110][ T30] audit: type=1800 audit(1756583933.308:256): pid=21836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2653" name="members" dev="configfs" ino=84382 res=0 errno=0 [ 1583.526342][T21844] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1588.134974][T21912] mmap: syz.4.2662 (21912) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1588.967785][T21925] random: crng reseeded on system resumption [ 1589.375341][T21930] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1590.413680][ T30] audit: type=1800 audit(1756583940.515:257): pid=21942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2667" name="features" dev="configfs" ino=84491 res=0 errno=0 [ 1591.912216][T21972] can: request_module (can-proto-0) failed. [ 1592.669844][T21980] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1593.939504][ T30] audit: type=1800 audit(1756583944.094:258): pid=21996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2674" name="members" dev="configfs" ino=85247 res=0 errno=0 [ 1595.980965][T17700] Bluetooth: hci3: Malformed HCI Event [ 1596.025348][T22021] FAULT_INJECTION: forcing a failure. [ 1596.025348][T22021] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.121032][T22021] CPU: 1 UID: 0 PID: 22021 Comm: syz.2.2678 Tainted: G U syzkaller #0 PREEMPT(full) [ 1596.121087][T22021] Tainted: [U]=USER [ 1596.121099][T22021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1596.121120][T22021] Call Trace: [ 1596.121133][T22021] [ 1596.121147][T22021] dump_stack_lvl+0x16c/0x1f0 [ 1596.121204][T22021] should_fail_ex+0x512/0x640 [ 1596.121252][T22021] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1596.121300][T22021] should_failslab+0xc2/0x120 [ 1596.121347][T22021] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1596.121391][T22021] ? alloc_inode+0xc3/0x240 [ 1596.121446][T22021] alloc_inode+0xc3/0x240 [ 1596.121496][T22021] path_from_stashed+0x25b/0x750 [ 1596.121549][T22021] open_namespace+0x8d/0x190 [ 1596.121633][T22021] ? __pfx_open_namespace+0x10/0x10 [ 1596.121676][T22021] ? bpf_lsm_capable+0x9/0x10 [ 1596.121716][T22021] open_related_ns+0x41/0x70 [ 1596.121753][T22021] __tun_chr_ioctl+0x1fd1/0x48b0 [ 1596.121786][T22021] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1596.121848][T22021] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1596.121887][T22021] ? hook_file_ioctl_common+0x145/0x410 [ 1596.121944][T22021] ? __fget_files+0x20e/0x3c0 [ 1596.121989][T22021] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1596.122026][T22021] __x64_sys_ioctl+0x18e/0x210 [ 1596.122084][T22021] do_syscall_64+0xcd/0x490 [ 1596.122136][T22021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.122172][T22021] RIP: 0033:0x7fedc218ebe9 [ 1596.122200][T22021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1596.122236][T22021] RSP: 002b:00007fedc2f2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1596.122270][T22021] RAX: ffffffffffffffda RBX: 00007fedc23b5fa0 RCX: 00007fedc218ebe9 [ 1596.122293][T22021] RDX: 0000000000005c8d RSI: 00000000000054e3 RDI: 00000000000000c8 [ 1596.122316][T22021] RBP: 00007fedc2211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1596.122339][T22021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1596.122360][T22021] R13: 00007fedc23b6038 R14: 00007fedc23b5fa0 R15: 00007ffc45fe65d8 [ 1596.122406][T22021] [ 1599.323022][T22052] random: crng reseeded on system resumption [ 1599.667672][T22048] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1600.979596][T22081] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2689'. [ 1601.045467][T22081] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2689'. [ 1601.109968][ T30] audit: type=1800 audit(1756583951.291:259): pid=22085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2687" name="members" dev="configfs" ino=84835 res=0 errno=0 [ 1601.236960][T22081] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2689'. [ 1603.422833][ T30] audit: type=1800 audit(1756583953.633:260): pid=22101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2691" name="members" dev="configfs" ino=85573 res=0 errno=0 [ 1603.867846][T22106] random: crng reseeded on system resumption [ 1605.206912][T22114] FAULT_INJECTION: forcing a failure. [ 1605.206912][T22114] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.242275][T22114] CPU: 1 UID: 0 PID: 22114 Comm: syz.4.2694 Tainted: G U syzkaller #0 PREEMPT(full) [ 1605.242330][T22114] Tainted: [U]=USER [ 1605.242343][T22114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1605.242364][T22114] Call Trace: [ 1605.242377][T22114] [ 1605.242392][T22114] dump_stack_lvl+0x16c/0x1f0 [ 1605.242451][T22114] should_fail_ex+0x512/0x640 [ 1605.242501][T22114] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1605.242549][T22114] should_failslab+0xc2/0x120 [ 1605.242597][T22114] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1605.242644][T22114] ? __proc_create+0xc3/0x8e0 [ 1605.242695][T22114] ? __proc_create+0x2ce/0x8e0 [ 1605.242761][T22114] __proc_create+0x2ce/0x8e0 [ 1605.242815][T22114] ? __pfx___proc_create+0x10/0x10 [ 1605.242873][T22114] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1605.242935][T22114] proc_create_reg+0x7d/0x180 [ 1605.242994][T22114] proc_create_net_data+0x8e/0x1c0 [ 1605.243050][T22114] ? __pfx_proc_create_net_data+0x10/0x10 [ 1605.243102][T22114] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1605.243166][T22114] ? __pfx_proto_init_net+0x10/0x10 [ 1605.243198][T22114] proto_init_net+0x53/0x70 [ 1605.243249][T22114] ops_init+0x1e2/0x5f0 [ 1605.243304][T22114] setup_net+0x10f/0x380 [ 1605.243350][T22114] ? lockdep_init_map_type+0x5c/0x280 [ 1605.243400][T22114] ? __pfx_setup_net+0x10/0x10 [ 1605.243453][T22114] ? debug_mutex_init+0x37/0x70 [ 1605.243495][T22114] copy_net_ns+0x2a6/0x5f0 [ 1605.243553][T22114] create_new_namespaces+0x3ea/0xa90 [ 1605.243605][T22114] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1605.243651][T22114] ksys_unshare+0x45b/0xa40 [ 1605.243702][T22114] ? __pfx_ksys_unshare+0x10/0x10 [ 1605.243761][T22114] ? xfd_validate_state+0x61/0x180 [ 1605.243827][T22114] __x64_sys_unshare+0x31/0x40 [ 1605.243876][T22114] do_syscall_64+0xcd/0x490 [ 1605.243928][T22114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.243964][T22114] RIP: 0033:0x7f646638ebe9 [ 1605.243992][T22114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1605.244027][T22114] RSP: 002b:00007f6467111038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1605.244061][T22114] RAX: ffffffffffffffda RBX: 00007f64665b5fa0 RCX: 00007f646638ebe9 [ 1605.244083][T22114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1605.244104][T22114] RBP: 00007f6466411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1605.244125][T22114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1605.244147][T22114] R13: 00007f64665b6038 R14: 00007f64665b5fa0 R15: 00007fffcc670748 [ 1605.244191][T22114] [ 1606.016961][T22126] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1606.156689][T22131] random: crng reseeded on system resumption [ 1607.327177][T22146] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1607.780250][ T30] audit: type=1800 audit(1756583957.996:261): pid=22163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2704" name="members" dev="configfs" ino=85651 res=0 errno=0 [ 1610.241967][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1610.249768][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.258955][T17700] Bluetooth: hci1: unexpected subevent 0x05 length: 123 > 12 [ 1612.279600][T17700] Bluetooth: hci1: command tx timeout [ 1613.659657][ T30] audit: type=1800 audit(1756583963.906:262): pid=22257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2716" name="members" dev="configfs" ino=85791 res=0 errno=0 [ 1616.800164][ T30] audit: type=1800 audit(1756583967.083:263): pid=22283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2720" name="members" dev="configfs" ino=86373 res=0 errno=0 [ 1617.076173][T22283] FAULT_INJECTION: forcing a failure. [ 1617.076173][T22283] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.089055][T22283] CPU: 0 UID: 0 PID: 22283 Comm: syz.1.2720 Tainted: G U syzkaller #0 PREEMPT(full) [ 1617.089099][T22283] Tainted: [U]=USER [ 1617.089108][T22283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1617.089123][T22283] Call Trace: [ 1617.089133][T22283] [ 1617.089143][T22283] dump_stack_lvl+0x16c/0x1f0 [ 1617.089181][T22283] should_fail_ex+0x512/0x640 [ 1617.089216][T22283] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1617.089254][T22283] should_failslab+0xc2/0x120 [ 1617.089287][T22283] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1617.089322][T22283] ? devinet_init_net+0x9c/0x910 [ 1617.089363][T22283] ? __pfx_devinet_init_net+0x10/0x10 [ 1617.089409][T22283] kmemdup_noprof+0x29/0x60 [ 1617.089440][T22283] devinet_init_net+0x9c/0x910 [ 1617.089481][T22283] ? __pfx_devinet_init_net+0x10/0x10 [ 1617.089519][T22283] ops_init+0x1e2/0x5f0 [ 1617.089563][T22283] setup_net+0x10f/0x380 [ 1617.089596][T22283] ? lockdep_init_map_type+0x5c/0x280 [ 1617.089631][T22283] ? __pfx_setup_net+0x10/0x10 [ 1617.089667][T22283] ? debug_mutex_init+0x37/0x70 [ 1617.089694][T22283] copy_net_ns+0x2a6/0x5f0 [ 1617.089736][T22283] create_new_namespaces+0x3ea/0xa90 [ 1617.089771][T22283] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1617.089806][T22283] ksys_unshare+0x45b/0xa40 [ 1617.089840][T22283] ? __pfx_ksys_unshare+0x10/0x10 [ 1617.089875][T22283] ? xfd_validate_state+0x61/0x180 [ 1617.089920][T22283] __x64_sys_unshare+0x31/0x40 [ 1617.089954][T22283] do_syscall_64+0xcd/0x490 [ 1617.089990][T22283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.090015][T22283] RIP: 0033:0x7f0dffb8ebe9 [ 1617.090034][T22283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1617.090057][T22283] RSP: 002b:00007f0dfddd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1617.090080][T22283] RAX: ffffffffffffffda RBX: 00007f0dffdb6180 RCX: 00007f0dffb8ebe9 [ 1617.090096][T22283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1617.090111][T22283] RBP: 00007f0dffc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1617.090126][T22283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.090141][T22283] R13: 00007f0dffdb6218 R14: 00007f0dffdb6180 R15: 00007ffc02b2fae8 [ 1617.090171][T22283] [ 1617.502207][ T30] audit: type=1800 audit(1756583967.615:264): pid=22291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2719" name="features" dev="configfs" ino=86376 res=0 errno=0 [ 1617.818956][T22293] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1618.550419][T22299] FAULT_INJECTION: forcing a failure. [ 1618.550419][T22299] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.563443][T22299] CPU: 0 UID: 0 PID: 22299 Comm: syz.1.2723 Tainted: G U syzkaller #0 PREEMPT(full) [ 1618.563488][T22299] Tainted: [U]=USER [ 1618.563497][T22299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1618.563512][T22299] Call Trace: [ 1618.563521][T22299] [ 1618.563531][T22299] dump_stack_lvl+0x16c/0x1f0 [ 1618.563569][T22299] should_fail_ex+0x512/0x640 [ 1618.563604][T22299] ? __kmalloc_noprof+0xbf/0x510 [ 1618.563636][T22299] ? __netlink_kernel_create+0x17f/0x750 [ 1618.563670][T22299] should_failslab+0xc2/0x120 [ 1618.563703][T22299] __kmalloc_noprof+0xd2/0x510 [ 1618.563739][T22299] __netlink_kernel_create+0x17f/0x750 [ 1618.563776][T22299] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1618.563821][T22299] uevent_net_init+0xf8/0x350 [ 1618.563861][T22299] ? __pfx_uevent_net_init+0x10/0x10 [ 1618.563924][T22299] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1618.563990][T22299] ? __pfx_uevent_net_init+0x10/0x10 [ 1618.564040][T22299] ops_init+0x1e2/0x5f0 [ 1618.564094][T22299] setup_net+0x10f/0x380 [ 1618.564128][T22299] ? lockdep_init_map_type+0x5c/0x280 [ 1618.564166][T22299] ? __pfx_setup_net+0x10/0x10 [ 1618.564202][T22299] ? debug_mutex_init+0x37/0x70 [ 1618.564229][T22299] copy_net_ns+0x2a6/0x5f0 [ 1618.564271][T22299] create_new_namespaces+0x3ea/0xa90 [ 1618.564306][T22299] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1618.564337][T22299] ksys_unshare+0x45b/0xa40 [ 1618.564372][T22299] ? __pfx_ksys_unshare+0x10/0x10 [ 1618.564407][T22299] ? xfd_validate_state+0x61/0x180 [ 1618.564452][T22299] __x64_sys_unshare+0x31/0x40 [ 1618.564485][T22299] do_syscall_64+0xcd/0x490 [ 1618.564521][T22299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.564546][T22299] RIP: 0033:0x7f0dffb8ebe9 [ 1618.564566][T22299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1618.564589][T22299] RSP: 002b:00007f0e00921038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1618.564612][T22299] RAX: ffffffffffffffda RBX: 00007f0dffdb5fa0 RCX: 00007f0dffb8ebe9 [ 1618.564628][T22299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1618.564643][T22299] RBP: 00007f0dffc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1618.564658][T22299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1618.564673][T22299] R13: 00007f0dffdb6038 R14: 00007f0dffdb5fa0 R15: 00007ffc02b2fae8 [ 1618.564703][T22299] [ 1618.850247][T22287] loop6: detected capacity change from 0 to 8 [ 1618.888931][T22299] kobject_uevent: unable to create netlink socket! [ 1623.030080][ T30] audit: type=1800 audit(1756583973.335:265): pid=22358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2731" name="members" dev="configfs" ino=87058 res=0 errno=0 [ 1623.502521][T22358] FAULT_INJECTION: forcing a failure. [ 1623.502521][T22358] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.515511][T22358] CPU: 1 UID: 0 PID: 22358 Comm: syz.1.2731 Tainted: G U syzkaller #0 PREEMPT(full) [ 1623.515564][T22358] Tainted: [U]=USER [ 1623.515576][T22358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1623.515607][T22358] Call Trace: [ 1623.515621][T22358] [ 1623.515636][T22358] dump_stack_lvl+0x16c/0x1f0 [ 1623.515687][T22358] should_fail_ex+0x512/0x640 [ 1623.515737][T22358] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1623.515778][T22358] should_failslab+0xc2/0x120 [ 1623.515826][T22358] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1623.515865][T22358] ? netdev_create_hash+0x3c/0xc0 [ 1623.515925][T22358] ? __pfx_netdev_init+0x10/0x10 [ 1623.515981][T22358] netdev_create_hash+0x3c/0xc0 [ 1623.516038][T22358] ? __pfx_netdev_init+0x10/0x10 [ 1623.516090][T22358] netdev_init+0x70/0x230 [ 1623.516144][T22358] ops_init+0x1e2/0x5f0 [ 1623.516198][T22358] setup_net+0x10f/0x380 [ 1623.516245][T22358] ? lockdep_init_map_type+0x5c/0x280 [ 1623.516296][T22358] ? __pfx_setup_net+0x10/0x10 [ 1623.516348][T22358] ? debug_mutex_init+0x37/0x70 [ 1623.516389][T22358] copy_net_ns+0x2a6/0x5f0 [ 1623.516447][T22358] create_new_namespaces+0x3ea/0xa90 [ 1623.516500][T22358] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1623.516546][T22358] ksys_unshare+0x45b/0xa40 [ 1623.516595][T22358] ? __pfx_ksys_unshare+0x10/0x10 [ 1623.516654][T22358] ? xfd_validate_state+0x61/0x180 [ 1623.516719][T22358] __x64_sys_unshare+0x31/0x40 [ 1623.516768][T22358] do_syscall_64+0xcd/0x490 [ 1623.516820][T22358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.516855][T22358] RIP: 0033:0x7f0dffb8ebe9 [ 1623.516884][T22358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1623.516919][T22358] RSP: 002b:00007f0dfd9b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1623.516953][T22358] RAX: ffffffffffffffda RBX: 00007f0dffdb6270 RCX: 00007f0dffb8ebe9 [ 1623.516977][T22358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1623.516999][T22358] RBP: 00007f0dffc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1623.517022][T22358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1623.517044][T22358] R13: 00007f0dffdb6308 R14: 00007f0dffdb6270 R15: 00007ffc02b2fae8 [ 1623.517089][T22358] [ 1625.568498][T22373] FAULT_INJECTION: forcing a failure. [ 1625.568498][T22373] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.657431][T22373] CPU: 0 UID: 0 PID: 22373 Comm: syz.1.2734 Tainted: G U syzkaller #0 PREEMPT(full) [ 1625.657486][T22373] Tainted: [U]=USER [ 1625.657497][T22373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1625.657517][T22373] Call Trace: [ 1625.657528][T22373] [ 1625.657541][T22373] dump_stack_lvl+0x16c/0x1f0 [ 1625.657592][T22373] should_fail_ex+0x512/0x640 [ 1625.657641][T22373] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1625.657688][T22373] should_failslab+0xc2/0x120 [ 1625.657734][T22373] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1625.657775][T22373] ? __proc_create+0xc3/0x8e0 [ 1625.657824][T22373] ? __proc_create+0x2ce/0x8e0 [ 1625.657879][T22373] __proc_create+0x2ce/0x8e0 [ 1625.657936][T22373] ? __pfx___proc_create+0x10/0x10 [ 1625.657996][T22373] ? _raw_write_unlock+0x28/0x50 [ 1625.658044][T22373] proc_create_reg+0x7d/0x180 [ 1625.658103][T22373] proc_create_net_data+0x8e/0x1c0 [ 1625.658157][T22373] ? __pfx_proc_create_net_data+0x10/0x10 [ 1625.658211][T22373] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1625.658272][T22373] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1625.658311][T22373] dev_proc_net_init+0x5a/0x220 [ 1625.658360][T22373] ops_init+0x1e2/0x5f0 [ 1625.658414][T22373] setup_net+0x10f/0x380 [ 1625.658460][T22373] ? lockdep_init_map_type+0x5c/0x280 [ 1625.658510][T22373] ? __pfx_setup_net+0x10/0x10 [ 1625.658561][T22373] ? debug_mutex_init+0x37/0x70 [ 1625.658599][T22373] copy_net_ns+0x2a6/0x5f0 [ 1625.658656][T22373] create_new_namespaces+0x3ea/0xa90 [ 1625.658706][T22373] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1625.658752][T22373] ksys_unshare+0x45b/0xa40 [ 1625.658800][T22373] ? __pfx_ksys_unshare+0x10/0x10 [ 1625.658850][T22373] ? xfd_validate_state+0x61/0x180 [ 1625.658914][T22373] __x64_sys_unshare+0x31/0x40 [ 1625.658961][T22373] do_syscall_64+0xcd/0x490 [ 1625.659012][T22373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.659048][T22373] RIP: 0033:0x7f0dffb8ebe9 [ 1625.659076][T22373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1625.659111][T22373] RSP: 002b:00007f0e00921038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1625.659145][T22373] RAX: ffffffffffffffda RBX: 00007f0dffdb5fa0 RCX: 00007f0dffb8ebe9 [ 1625.659170][T22373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1625.659192][T22373] RBP: 00007f0dffc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1625.659213][T22373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1625.659234][T22373] R13: 00007f0dffdb6038 R14: 00007f0dffdb5fa0 R15: 00007ffc02b2fae8 [ 1625.659277][T22373] [ 1626.023290][T22380] random: crng reseeded on system resumption [ 1626.850114][T22386] FAULT_INJECTION: forcing a failure. [ 1626.850114][T22386] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.945816][T22386] CPU: 1 UID: 0 PID: 22386 Comm: syz.4.2738 Tainted: G U syzkaller #0 PREEMPT(full) [ 1626.945856][T22386] Tainted: [U]=USER [ 1626.945864][T22386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1626.945878][T22386] Call Trace: [ 1626.945888][T22386] [ 1626.945905][T22386] dump_stack_lvl+0x16c/0x1f0 [ 1626.945942][T22386] should_fail_ex+0x512/0x640 [ 1626.945976][T22386] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1626.946006][T22386] should_failslab+0xc2/0x120 [ 1626.946038][T22386] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1626.946064][T22386] ? nexthop_net_init+0x73/0x140 [ 1626.946096][T22386] ? __pfx_nexthop_net_init+0x10/0x10 [ 1626.946130][T22386] nexthop_net_init+0x73/0x140 [ 1626.946160][T22386] ? tcf_net_init+0x55/0x150 [ 1626.946194][T22386] ops_init+0x1e2/0x5f0 [ 1626.946233][T22386] setup_net+0x10f/0x380 [ 1626.946266][T22386] ? lockdep_init_map_type+0x5c/0x280 [ 1626.946301][T22386] ? __pfx_setup_net+0x10/0x10 [ 1626.946337][T22386] ? debug_mutex_init+0x37/0x70 [ 1626.946365][T22386] copy_net_ns+0x2a6/0x5f0 [ 1626.946406][T22386] create_new_namespaces+0x3ea/0xa90 [ 1626.946441][T22386] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1626.946477][T22386] ksys_unshare+0x45b/0xa40 [ 1626.946512][T22386] ? __pfx_ksys_unshare+0x10/0x10 [ 1626.946548][T22386] ? xfd_validate_state+0x61/0x180 [ 1626.946596][T22386] __x64_sys_unshare+0x31/0x40 [ 1626.946631][T22386] do_syscall_64+0xcd/0x490 [ 1626.946667][T22386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.946692][T22386] RIP: 0033:0x7f646638ebe9 [ 1626.946711][T22386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1626.946736][T22386] RSP: 002b:00007f6467111038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1626.946760][T22386] RAX: ffffffffffffffda RBX: 00007f64665b5fa0 RCX: 00007f646638ebe9 [ 1626.946776][T22386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1626.946792][T22386] RBP: 00007f6466411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1626.946808][T22386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.946823][T22386] R13: 00007f64665b6038 R14: 00007f64665b5fa0 R15: 00007fffcc670748 [ 1626.946854][T22386] [ 1628.170073][T22415] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1631.551525][T22463] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1631.592600][ T30] audit: type=1800 audit(1756583981.950:266): pid=22464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2748" name="features" dev="configfs" ino=87137 res=0 errno=0 [ 1632.669509][T22469] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. syzkaller syzkaller login: [ 1635.267426][T22516] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1636.055157][ T30] audit: type=1800 audit(1756583986.433:267): pid=22532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2761" name="members" dev="configfs" ino=86985 res=0 errno=0 [ 1636.335847][T22543] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input32 [ 1636.360177][T22540] FAULT_INJECTION: forcing a failure. [ 1636.360177][T22540] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.419635][T22540] CPU: 0 UID: 0 PID: 22540 Comm: syz.3.2763 Tainted: G U syzkaller #0 PREEMPT(full) [ 1636.419672][T22540] Tainted: [U]=USER [ 1636.419681][T22540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1636.419695][T22540] Call Trace: [ 1636.419704][T22540] [ 1636.419714][T22540] dump_stack_lvl+0x16c/0x1f0 [ 1636.419750][T22540] should_fail_ex+0x512/0x640 [ 1636.419784][T22540] ? fs_reclaim_acquire+0xae/0x150 [ 1636.419829][T22540] ? tomoyo_encode2+0x100/0x3e0 [ 1636.419862][T22540] should_failslab+0xc2/0x120 [ 1636.419894][T22540] __kmalloc_noprof+0xd2/0x510 [ 1636.419929][T22540] tomoyo_encode2+0x100/0x3e0 [ 1636.419966][T22540] tomoyo_encode+0x29/0x50 [ 1636.419998][T22540] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1636.420050][T22540] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1636.420093][T22540] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1636.420154][T22540] ? find_held_lock+0x2b/0x80 [ 1636.420186][T22540] tomoyo_file_open+0x6b/0x90 [ 1636.420210][T22540] security_file_open+0x84/0x1e0 [ 1636.420244][T22540] do_dentry_open+0x596/0x1530 [ 1636.420282][T22540] vfs_open+0x82/0x3f0 [ 1636.420321][T22540] path_openat+0x1de4/0x2cb0 [ 1636.420360][T22540] ? __pfx_path_openat+0x10/0x10 [ 1636.420396][T22540] do_filp_open+0x20b/0x470 [ 1636.420425][T22540] ? __pfx_do_filp_open+0x10/0x10 [ 1636.420475][T22540] ? alloc_fd+0x471/0x7d0 [ 1636.420508][T22540] do_sys_openat2+0x11b/0x1d0 [ 1636.420545][T22540] ? __pfx_do_sys_openat2+0x10/0x10 [ 1636.420584][T22540] ? find_held_lock+0x2b/0x80 [ 1636.420614][T22540] __x64_sys_openat+0x174/0x210 [ 1636.420651][T22540] ? __pfx___x64_sys_openat+0x10/0x10 [ 1636.420687][T22540] ? ksys_write+0x1ac/0x250 [ 1636.420725][T22540] do_syscall_64+0xcd/0x490 [ 1636.420760][T22540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.420785][T22540] RIP: 0033:0x7f768358ebe9 [ 1636.420809][T22540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1636.420833][T22540] RSP: 002b:00007f768440c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1636.420856][T22540] RAX: ffffffffffffffda RBX: 00007f76837b6090 RCX: 00007f768358ebe9 [ 1636.420872][T22540] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1636.420888][T22540] RBP: 00007f768440c090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.420903][T22540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.420918][T22540] R13: 00007f76837b6128 R14: 00007f76837b6090 R15: 00007ffe6789e7f8 [ 1636.420948][T22540] [ 1636.420972][T22540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1637.149563][T22555] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1638.591357][T22577] random: crng reseeded on system resumption [ 1638.731916][T22587] bond0: option all_slaves_active: invalid value () [ 1640.687591][ T30] audit: type=1800 audit(1756583991.067:268): pid=22613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2776" name="members" dev="configfs" ino=88150 res=0 errno=0 [ 1641.326504][ T30] audit: type=1800 audit(1756583991.730:269): pid=22619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2775" name="features" dev="configfs" ino=87523 res=0 errno=0 [ 1641.924900][T22635] rnbd_client L213: map_device: Parameters missing [ 1642.586509][T17700] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 1644.508946][T22673] random: crng reseeded on system resumption [ 1645.890540][T22678] random: crng reseeded on system resumption [ 1646.614536][ T30] audit: type=1800 audit(1756583997.048:270): pid=22697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2791" name="members" dev="configfs" ino=88370 res=0 errno=0 [ 1646.829415][T22692] FAULT_INJECTION: forcing a failure. [ 1646.829415][T22692] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1646.877168][T22692] CPU: 0 UID: 0 PID: 22692 Comm: syz.2.2790 Tainted: G U syzkaller #0 PREEMPT(full) [ 1646.877221][T22692] Tainted: [U]=USER [ 1646.877235][T22692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1646.877256][T22692] Call Trace: [ 1646.877268][T22692] [ 1646.877281][T22692] dump_stack_lvl+0x16c/0x1f0 [ 1646.877330][T22692] should_fail_ex+0x512/0x640 [ 1646.877372][T22692] should_fail_alloc_page+0xe7/0x130 [ 1646.877409][T22692] prepare_alloc_pages+0x3c2/0x610 [ 1646.877447][T22692] ? rcu_is_watching+0x12/0xc0 [ 1646.877476][T22692] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1646.877506][T22692] ? css_rstat_updated+0x1c2/0x510 [ 1646.877534][T22692] ? __pfx_css_rstat_updated+0x10/0x10 [ 1646.877579][T22692] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1646.877621][T22692] ? __lock_acquire+0x62e/0x1ce0 [ 1646.877659][T22692] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1646.877699][T22692] ? policy_nodemask+0xea/0x4e0 [ 1646.877734][T22692] alloc_pages_mpol+0x1fb/0x550 [ 1646.877768][T22692] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1646.877804][T22692] ? __lock_acquire+0x62e/0x1ce0 [ 1646.877839][T22692] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1646.877880][T22692] vma_alloc_folio_noprof+0xed/0x1e0 [ 1646.877918][T22692] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1646.877966][T22692] do_pte_missing+0x2230/0x3ba0 [ 1646.877993][T22692] ? find_held_lock+0x2b/0x80 [ 1646.878034][T22692] __handle_mm_fault+0x152a/0x2a50 [ 1646.878081][T22692] ? __pfx___handle_mm_fault+0x10/0x10 [ 1646.878120][T22692] ? __pte_offset_map_lock+0x174/0x310 [ 1646.878171][T22692] ? find_held_lock+0x2b/0x80 [ 1646.878221][T22692] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1646.878287][T22692] handle_mm_fault+0x589/0xd10 [ 1646.878333][T22692] __get_user_pages+0x551/0x34a0 [ 1646.878402][T22692] ? __pfx___get_user_pages+0x10/0x10 [ 1646.878466][T22692] populate_vma_page_range+0x267/0x3f0 [ 1646.878525][T22692] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1646.878591][T22692] ? __pfx_find_vma_intersection+0x10/0x10 [ 1646.878646][T22692] ? do_mmap+0x69c/0x1210 [ 1646.878700][T22692] __mm_populate+0x1d8/0x380 [ 1646.878757][T22692] ? __pfx___mm_populate+0x10/0x10 [ 1646.878816][T22692] ? up_write+0x1b2/0x520 [ 1646.878872][T22692] vm_mmap_pgoff+0x37f/0x470 [ 1646.878928][T22692] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1646.879003][T22692] ? __x64_sys_futex+0x1e0/0x4c0 [ 1646.879048][T22692] ? __x64_sys_futex+0x1e9/0x4c0 [ 1646.879099][T22692] ksys_mmap_pgoff+0x7d/0x5c0 [ 1646.879147][T22692] ? xfd_validate_state+0x61/0x180 [ 1646.879197][T22692] ? __pfx___do_sys_close_range+0x10/0x10 [ 1646.879247][T22692] __x64_sys_mmap+0x125/0x190 [ 1646.879306][T22692] do_syscall_64+0xcd/0x490 [ 1646.879357][T22692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.879393][T22692] RIP: 0033:0x7fedc218ebe9 [ 1646.879422][T22692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1646.879457][T22692] RSP: 002b:00007fedc2f2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1646.879492][T22692] RAX: ffffffffffffffda RBX: 00007fedc23b5fa0 RCX: 00007fedc218ebe9 [ 1646.879516][T22692] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1646.879537][T22692] RBP: 00007fedc2211e19 R08: 0000000000000002 R09: 0000000000008000 [ 1646.879567][T22692] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1646.879589][T22692] R13: 00007fedc23b6038 R14: 00007fedc23b5fa0 R15: 00007ffc45fe65d8 [ 1646.879634][T22692] [ 1647.225900][ C0] vkms_vblank_simulate: vblank timer overrun syzkaller syzkaller login: [ 1647.900648][ T30] audit: type=1800 audit(1756583998.334:271): pid=22707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2793" name="features" dev="configfs" ino=87638 res=0 errno=0 [ 1647.938319][T21364] Bluetooth: hci4: command 0x0406 tx timeout [ 1649.372512][T22722] ================================================================== [ 1649.372538][T22722] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 1649.372593][T22722] Read of size 256 at addr ffff888077be4860 by task syz.1.2797/22722 [ 1649.372632][T22722] [ 1649.372652][T22722] CPU: 0 UID: 0 PID: 22722 Comm: syz.1.2797 Tainted: G U syzkaller #0 PREEMPT(full) [ 1649.372698][T22722] Tainted: [U]=USER [ 1649.372710][T22722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1649.372729][T22722] Call Trace: [ 1649.372741][T22722] [ 1649.372755][T22722] dump_stack_lvl+0x116/0x1f0 [ 1649.372804][T22722] print_report+0xcd/0x630 [ 1649.372846][T22722] ? __virt_addr_valid+0x81/0x610 [ 1649.372887][T22722] ? __phys_addr+0xe8/0x180 [ 1649.372930][T22722] ? fbcon_prepare_logo+0xa03/0xc70 [ 1649.372973][T22722] kasan_report+0xe0/0x110 [ 1649.373048][T22722] ? fbcon_prepare_logo+0xa03/0xc70 [ 1649.373099][T22722] kasan_check_range+0x100/0x1b0 [ 1649.373150][T22722] __asan_memcpy+0x23/0x60 [ 1649.373186][T22722] fbcon_prepare_logo+0xa03/0xc70 [ 1649.373239][T22722] fbcon_init+0xd77/0x1900 [ 1649.373301][T22722] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1649.373340][T22722] visual_init+0x320/0x620 [ 1649.373378][T22722] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1649.373430][T22722] store_bind+0x61d/0x760 [ 1649.373473][T22722] ? sysfs_file_kobj+0xe4/0x290 [ 1649.373508][T22722] ? __pfx_store_bind+0x10/0x10 [ 1649.373547][T22722] dev_attr_store+0x58/0x80 [ 1649.373597][T22722] ? __pfx_dev_attr_store+0x10/0x10 [ 1649.373652][T22722] sysfs_kf_write+0xf2/0x150 [ 1649.373688][T22722] kernfs_fop_write_iter+0x354/0x510 [ 1649.373718][T22722] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1649.373757][T22722] iter_file_splice_write+0xa24/0x12e0 [ 1649.373806][T22722] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1649.373845][T22722] ? __pfx_copy_splice_read+0x10/0x10 [ 1649.373890][T22722] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1649.373929][T22722] direct_splice_actor+0x18f/0x6c0 [ 1649.373966][T22722] splice_direct_to_actor+0x345/0xa30 [ 1649.374002][T22722] ? __pfx_direct_splice_actor+0x10/0x10 [ 1649.374040][T22722] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1649.374082][T22722] do_splice_direct+0x174/0x240 [ 1649.374117][T22722] ? __pfx_do_splice_direct+0x10/0x10 [ 1649.374152][T22722] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1649.374189][T22722] ? rw_verify_area+0xcf/0x6c0 [ 1649.374224][T22722] do_sendfile+0xb06/0xe50 [ 1649.374262][T22722] ? __pfx_do_sendfile+0x10/0x10 [ 1649.374309][T22722] ? __sys_sendmsg+0x18c/0x220 [ 1649.374355][T22722] ? __x64_sys_futex+0x1e0/0x4c0 [ 1649.374398][T22722] ? __x64_sys_futex+0x1e9/0x4c0 [ 1649.374446][T22722] __x64_sys_sendfile64+0x1d8/0x220 [ 1649.374494][T22722] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1649.374547][T22722] do_syscall_64+0xcd/0x490 [ 1649.374596][T22722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.374630][T22722] RIP: 0033:0x7f0dffb8ebe9 [ 1649.374655][T22722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1649.374690][T22722] RSP: 002b:00007f0e00921038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1649.374722][T22722] RAX: ffffffffffffffda RBX: 00007f0dffdb5fa0 RCX: 00007f0dffb8ebe9 [ 1649.374744][T22722] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1649.374765][T22722] RBP: 00007f0dffc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1649.374785][T22722] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1649.374805][T22722] R13: 00007f0dffdb6038 R14: 00007f0dffdb5fa0 R15: 00007ffc02b2fae8 [ 1649.374838][T22722] [ 1649.374849][T22722] [ 1649.374859][T22722] Allocated by task 1003: [ 1649.374875][T22722] kasan_save_stack+0x33/0x60 [ 1649.374914][T22722] kasan_save_track+0x14/0x30 [ 1649.374950][T22722] __kasan_kmalloc+0xaa/0xb0 [ 1649.374985][T22722] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 1649.375029][T22722] kmalloc_reserve+0xef/0x2c0 [ 1649.375081][T22722] __alloc_skb+0x166/0x380 [ 1649.375120][T22722] rtmsg_ifinfo_build_skb+0x81/0x280 [ 1649.375173][T22722] unregister_netdevice_many_notify+0x101b/0x24c0 [ 1649.375227][T22722] ops_undo_list+0x8fc/0xab0 [ 1649.375283][T22722] cleanup_net+0x408/0x890 [ 1649.375333][T22722] process_one_work+0x9cf/0x1b70 [ 1649.375386][T22722] worker_thread+0x6c8/0xf10 [ 1649.375412][T22722] kthread+0x3c5/0x780 [ 1649.375460][T22722] ret_from_fork+0x5d4/0x6f0 [ 1649.375511][T22722] ret_from_fork_asm+0x1a/0x30 [ 1649.375551][T22722] [ 1649.375560][T22722] Freed by task 1003: [ 1649.375576][T22722] kasan_save_stack+0x33/0x60 [ 1649.375614][T22722] kasan_save_track+0x14/0x30 [ 1649.375651][T22722] kasan_save_free_info+0x3b/0x60 [ 1649.375705][T22722] __kasan_slab_free+0x60/0x70 [ 1649.375745][T22722] kfree+0x2b4/0x4d0 [ 1649.375773][T22722] skb_free_head+0x114/0x210 [ 1649.375809][T22722] skb_release_data+0x795/0x9e0 [ 1649.375853][T22722] consume_skb+0xbf/0x100 [ 1649.375902][T22722] netlink_broadcast_filtered+0x3ee/0xf90 [ 1649.375948][T22722] nlmsg_notify+0x9e/0x220 [ 1649.375993][T22722] unregister_netdevice_many_notify+0x1476/0x24c0 [ 1649.376046][T22722] ops_undo_list+0x8fc/0xab0 [ 1649.376093][T22722] cleanup_net+0x408/0x890 [ 1649.376143][T22722] process_one_work+0x9cf/0x1b70 [ 1649.376195][T22722] worker_thread+0x6c8/0xf10 [ 1649.376221][T22722] kthread+0x3c5/0x780 [ 1649.376276][T22722] ret_from_fork+0x5d4/0x6f0 [ 1649.376327][T22722] ret_from_fork_asm+0x1a/0x30 [ 1649.376373][T22722] [ 1649.376382][T22722] The buggy address belongs to the object at ffff888077be4000 [ 1649.376382][T22722] which belongs to the cache kmalloc-2k of size 2048 [ 1649.376411][T22722] The buggy address is located 96 bytes to the right of [ 1649.376411][T22722] allocated 2048-byte region [ffff888077be4000, ffff888077be4800) [ 1649.376448][T22722] [ 1649.376457][T22722] The buggy address belongs to the physical page: [ 1649.376484][T22722] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77be0 [ 1649.376517][T22722] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1649.376546][T22722] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1649.376578][T22722] page_type: f5(slab) [ 1649.376613][T22722] raw: 00fff00000000040 ffff88801b842000 0000000000000000 dead000000000001 [ 1649.376646][T22722] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1649.376680][T22722] head: 00fff00000000040 ffff88801b842000 0000000000000000 dead000000000001 [ 1649.376712][T22722] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1649.376743][T22722] head: 00fff00000000003 ffffea0001def801 00000000ffffffff 00000000ffffffff [ 1649.376774][T22722] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1649.376794][T22722] page dumped because: kasan: bad access detected [ 1649.376810][T22722] page_owner tracks the page as allocated [ 1649.376822][T22722] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5872, tgid 5872 (syz-executor), ts 104218620634, free_ts 86019613488 [ 1649.376882][T22722] post_alloc_hook+0x1c0/0x230 [ 1649.376918][T22722] get_page_from_freelist+0x132b/0x38e0 [ 1649.376956][T22722] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1649.377005][T22722] alloc_pages_mpol+0x1fb/0x550 [ 1649.377048][T22722] new_slab+0x247/0x330 [ 1649.377077][T22722] ___slab_alloc+0xcf2/0x1740 [ 1649.377107][T22722] __slab_alloc.constprop.0+0x56/0xb0 [ 1649.377140][T22722] __kmalloc_noprof+0x2f2/0x510 [ 1649.377178][T22722] ops_init+0x77/0x5f0 [ 1649.377222][T22722] setup_net+0x10f/0x380 [ 1649.377274][T22722] copy_net_ns+0x2a6/0x5f0 [ 1649.377323][T22722] create_new_namespaces+0x3ea/0xa90 [ 1649.377361][T22722] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1649.377400][T22722] ksys_unshare+0x45b/0xa40 [ 1649.377445][T22722] __x64_sys_unshare+0x31/0x40 [ 1649.377491][T22722] do_syscall_64+0xcd/0x490 [ 1649.377538][T22722] page last free pid 5805 tgid 5805 stack trace: [ 1649.377557][T22722] __free_frozen_pages+0x7d5/0x10f0 [ 1649.377589][T22722] __put_partials+0x165/0x1c0 [ 1649.377621][T22722] qlist_free_all+0x4d/0x120 [ 1649.377654][T22722] kasan_quarantine_reduce+0x195/0x1e0 [ 1649.377692][T22722] __kasan_slab_alloc+0x69/0x90 [ 1649.377731][T22722] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1649.377771][T22722] ptlock_alloc+0x1f/0x70 [ 1649.377803][T22722] pte_alloc_one+0x82/0x3a0 [ 1649.377836][T22722] __pte_alloc+0x6d/0x3c0 [ 1649.377880][T22722] do_pte_missing+0x285a/0x3ba0 [ 1649.377912][T22722] __handle_mm_fault+0x152a/0x2a50 [ 1649.377945][T22722] handle_mm_fault+0x589/0xd10 [ 1649.377976][T22722] do_user_addr_fault+0x60c/0x1370 [ 1649.378030][T22722] exc_page_fault+0x5c/0xb0 [ 1649.378070][T22722] asm_exc_page_fault+0x26/0x30 [ 1649.378102][T22722] [ 1649.378111][T22722] Memory state around the buggy address: [ 1649.378129][T22722] ffff888077be4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1649.378154][T22722] ffff888077be4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1649.378180][T22722] >ffff888077be4800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1649.378200][T22722] ^ [ 1649.378220][T22722] ffff888077be4880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1649.378246][T22722] ffff888077be4900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1649.378274][T22722] ================================================================== [ 1649.425281][T22722] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1649.425316][T22722] CPU: 0 UID: 0 PID: 22722 Comm: syz.1.2797 Tainted: G U syzkaller #0 PREEMPT(full) [ 1649.425370][T22722] Tainted: [U]=USER [ 1649.425383][T22722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1649.425406][T22722] Call Trace: [ 1649.425417][T22722] [ 1649.425431][T22722] dump_stack_lvl+0x3d/0x1f0 [ 1649.425483][T22722] vpanic+0x6e8/0x7a0 [ 1649.425532][T22722] ? __pfx_vpanic+0x10/0x10 [ 1649.425587][T22722] ? fbcon_prepare_logo+0xa03/0xc70 [ 1649.425630][T22722] panic+0xca/0xd0 [ 1649.425677][T22722] ? __pfx_panic+0x10/0x10 [ 1649.425726][T22722] ? fbcon_prepare_logo+0xa03/0xc70 [ 1649.425771][T22722] ? preempt_schedule_common+0x44/0xc0 [ 1649.425815][T22722] ? preempt_schedule_thunk+0x16/0x30 [ 1649.425866][T22722] check_panic_on_warn+0xab/0xb0 [ 1649.425918][T22722] end_report+0x107/0x170 [ 1649.425962][T22722] kasan_report+0xee/0x110 [ 1649.426007][T22722] ? fbcon_prepare_logo+0xa03/0xc70 [ 1649.426057][T22722] kasan_check_range+0x100/0x1b0 [ 1649.426110][T22722] __asan_memcpy+0x23/0x60 [ 1649.426146][T22722] fbcon_prepare_logo+0xa03/0xc70 [ 1649.426201][T22722] fbcon_init+0xd77/0x1900 [ 1649.426246][T22722] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1649.426293][T22722] visual_init+0x320/0x620 [ 1649.426333][T22722] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1649.426385][T22722] store_bind+0x61d/0x760 [ 1649.426430][T22722] ? sysfs_file_kobj+0xe4/0x290 [ 1649.426469][T22722] ? __pfx_store_bind+0x10/0x10 [ 1649.426511][T22722] dev_attr_store+0x58/0x80 [ 1649.426562][T22722] ? __pfx_dev_attr_store+0x10/0x10 [ 1649.426614][T22722] sysfs_kf_write+0xf2/0x150 [ 1649.426654][T22722] kernfs_fop_write_iter+0x354/0x510 [ 1649.426687][T22722] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1649.426728][T22722] iter_file_splice_write+0xa24/0x12e0 [ 1649.426780][T22722] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1649.426823][T22722] ? __pfx_copy_splice_read+0x10/0x10 [ 1649.426869][T22722] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1649.426909][T22722] direct_splice_actor+0x18f/0x6c0 [ 1649.426948][T22722] splice_direct_to_actor+0x345/0xa30 [ 1649.426985][T22722] ? __pfx_direct_splice_actor+0x10/0x10 [ 1649.427026][T22722] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1649.427070][T22722] do_splice_direct+0x174/0x240 [ 1649.427106][T22722] ? __pfx_do_splice_direct+0x10/0x10 [ 1649.427143][T22722] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1649.427182][T22722] ? rw_verify_area+0xcf/0x6c0 [ 1649.427219][T22722] do_sendfile+0xb06/0xe50 [ 1649.427266][T22722] ? __pfx_do_sendfile+0x10/0x10 [ 1649.427304][T22722] ? __sys_sendmsg+0x18c/0x220 [ 1649.427354][T22722] ? __x64_sys_futex+0x1e0/0x4c0 [ 1649.427398][T22722] ? __x64_sys_futex+0x1e9/0x4c0 [ 1649.427445][T22722] __x64_sys_sendfile64+0x1d8/0x220 [ 1649.427494][T22722] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1649.427550][T22722] do_syscall_64+0xcd/0x490 [ 1649.427599][T22722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.427635][T22722] RIP: 0033:0x7f0dffb8ebe9 [ 1649.427662][T22722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1649.427698][T22722] RSP: 002b:00007f0e00921038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1649.427733][T22722] RAX: ffffffffffffffda RBX: 00007f0dffdb5fa0 RCX: 00007f0dffb8ebe9 [ 1649.427757][T22722] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1649.427779][T22722] RBP: 00007f0dffc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1649.427800][T22722] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1649.427821][T22722] R13: 00007f0dffdb6038 R14: 00007f0dffdb5fa0 R15: 00007ffc02b2fae8 [ 1649.427855][T22722] [ 1649.428124][T22722] Kernel Offset: disabled