last executing test programs: 4m43.117902747s ago: executing program 1 (id=116): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/raw\x00', 0x200, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) r2 = open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) fanotify_mark$auto(0x0, 0x105, 0x8009, r2, 0x0) ioctl$auto_CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x100) (async) ioctl$auto_CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x100) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000000140)=0x40) (async) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000000140)=0x40) read$auto(r0, 0x0, 0x7f) getsockopt$auto(r0, 0x4, 0xea, &(0x7f0000000040)='/proc/thread-self/net/raw\x00', &(0x7f0000000080)=0x5) socket$nl_generic(0x10, 0x3, 0x10) 4m42.963869292s ago: executing program 1 (id=117): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) pread64$auto(r0, 0x0, 0xe, 0x100000000007) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) rename$auto(&(0x7f00000003c0)='./cgroup.net/\f\x00', &(0x7f0000000400)='./file0\x00') execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) mlock$auto(0xfbea, 0x10004) madvise$auto(0x8000, 0x87fff, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r3) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf250d0000000c00060001000000000000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = setfsuid$auto(0x0) setuid$auto(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r7, 0x1002, 0x0, 0x0, 0x0, 0x2) kcmp$auto(r7, 0x0, 0x7, 0xffffffffffffffff, r6) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000017c0), r3) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x280800, 0x0) sendmsg$auto_NFC_CMD_STOP_POLL(r2, &(0x7f0000001a80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="dfa6e3cc", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r7, @ANYRES16=r5], 0x228}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000000) r9 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) r10 = ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x2) ioctl$auto_BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000080)={"32776d7cd5cfd03530a2506dc0feadfb755880e78c1fd0967506834f28c45dfc", 0xfff9, 0x2, 0x3, 0x40000000800000, 0x0, r7}) ioctl$auto(r9, 0x64ca, 0x40) sendmsg$auto_TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000033c0)={0x12a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1e, 0x9, 0x0, 0x1, [@generic="eaa61756b993cdf96702005e659f5db1f46853fd98e362a0d1be"]}, @TIPC_NLA_NAME_TABLE={0x39, 0x8, 0x0, 0x1, [@generic="cf85eb3aae3b3f927019ad594b57fc0d54bf354d398acfe50e", @typed={0x4, 0x6d}, @typed={0x4, 0xb9}, @typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@mcast1}]}, @TIPC_NLA_MEDIA={0x1170, 0x5, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @u64=0x3}, @generic="584b2d5bfd8225258ff65e59dc33e2ab11aae1c8191483a25bdf761dd6e358d44192724eb9ac249419cd7eb86a693ff09c50e3cd8a51b132eb2dde5460307a8e28f65643de96149942b6abe97a3c333a2c3b66de980cca5fb1a28c7db9112fdc78723e848d4af4523a817461d66bc804f96dc4af289d6ac66cea3c62b5c4215d23b7ee331061e28a8a12d2d506a13520d5f7677c", @typed={0x7, 0x132, 0x0, 0x0, @str=']@\x00'}, @typed={0x8, 0xad, 0x0, 0x0, @fd=r3}, @nested={0x10bc, 0xe9, 0x0, 0x1, [@generic="b7e6e9c9a184941929a5172d15c0165e6b9fefdf655aa9862791227c2ffeec5d3a15abf9173380764e63d8493ac27c2941ef17b0fd3b1dfdbbb699c0e55b9fbd180b6ad1f0f99a8dd665c120028262bc85793642ad31eb289ac1b0e4b27832b36637c36b7f670397111a8f2e17e5234f777e9f875efe94fe7da45398ed0d5a96b0cdc63a4e81d3de6f69b514c78a6614967dd4af7dc68de1ec4750c1918015e6a2dd2650c0f0628c8df72dfb6dd35b087a01f54a63384cac945d786fc91fd510bea1045aa79ab93b39efae9544763e3fd47d72e861dab598d181f3b415cfe985f72ea76f285e3ca593e6fb630de6366ded9358a0945f1e5e02aabf06fdf958c8edac1d127230116ea2f767e5cf3bef68a3c5f7e79784f627448ed508c1527383efd512520e53e0beda67526d18d392c5933ab937c4bf179ab5635db7bdfbe7511b6f9f49a9e3881425f93c2fe698f36e6bc400cc3c45f451938a19f8ff0105c9fd0f52ff2384f4bc4cf1d02da16fefc95328fdfdf0468ee3028ca32d00eb0de5c227edebd285ee25af25896d584eacff3ddefa5a9299af2fdcf18fdaa3bee8bff0c9607fc128a856fb01caf31d70f632bc8536fa915363b045391bc1143b521373e340e6e6b41b1a37e60eaa5af7fe2971ee1c93829ef1fc1acf0447d7fa2228ba10b1ac149d409331dd4b5366b85c673e085d83e89a9cc033dddb4e9d8f5a9844595c5d990123ce869f148573e736bb7db2ce7a36291f447f03daf270e10dc46e44fb17bc8eec7381d6a0f90b47f4ca2a7b5d9425f1915db32a56971cf03d250fd980a6106503e4794291c431eaf91d0fb3d913c574e8c03f0aff602e5c74ab55548ea150d15e1ef7abb82eb9165f7168edeeb85acd0a1b4e6f6e002b8ecd2adefe22143171bddc46dad5def07d144ed4dad8eb27f082a9db49e66fc8f80cc40ba8b0ea542c2785959e12925c067a6d38260c0db0ac514217abe67d6b4f245d6a80f0b56294ea75cbd46833a7378bc992126b9fe47bb298be8a7efcb7b58eaff737286a14567d6066cfe4cbd13d0eb8a58ec02f73a17f2dda819fddd37b9efe4564581e734a272ab860d84921f898d5993aa3c095e6aeb82bfe0fdea548f8f45c820c7515ef6558342d991e68ae21e242e02c5df17127bdf4758bb6c9f5cdecf9d1eb85f361972444ae8d637e535e2ab8687914062fc3068f38498fbe8ab3e7c92dc64b44d7e38bb8a7f0cf9b1dc418714c3b252647f8a3adcdb379812c994f477b3ffd0b3a8be583a1dd86d3be5460649836e6d4480b723fa49293dad7ce30be732481ceb004a8a31878cd07bc6677890b75ed30497ebb10ae96129362d0787d8b252f92a5699e34e8d887ed5a197785687de1fcf077ed016f01691eb41d4df180fe3e24d2a062be48f7d64b64b4cb8ef292bb03c4865a52f6a9878ab9fdff82060d81581bf77a2ea575bc4ecaae5b847b5fe971d7fb6d63d322ed84740c0bb9da208a74b100e59e3aa96ad5a47269e379158f1306ec7f27397571188bd7dbf2f38d40fa3204589b40c9f16f265c0bf45654d3209022ca021ffc2bf3d8eba28315c512162afd4aa6a4bebc77f445319a97a7fd75631c638f929960b1a9e1335c6c64f8b312ba7a7a4dc6bfc176f7c4caa41065ee9c973e0fd939f97710e3633ae53f464cd82d85b4d168c37dd4f4dee39887e9f6b77043b3a278a6297c68bbcb17adc5be8f677666c9dd4f28f3d339666c437ffc9cc0b80da2e80416bb85f876a77caf53b9ccbec7d74ef1e73303f127c96b252ea77c7caba4b7c0cf5729c0743edce6e82b4a1bf86488068e052736268f13be2ea95e0f261423e00c722718db7531c17e5c4cc741cc06c9250f3e9e1d24790405274abf701c36611f635369a00be32ae59166524f0b0546af27437d69b22300e2795fdfda3b1e9c6d0e25a1704d75c81e47bada2adb681e238bae85dd27d55af9c4e22949b58264056fe9a2b3a60dbceddbbb509128b0020fd28b241489c9566adad0aff0060490b48e62f095b62a03c786c1dced9d3db74dd53b9cccb4f9457610debcbdfe60274d31bbbd0baae3ccc0da4228eba37214c3ee94d908073cd30cb733144319425e7cc2421bb4a5694fba88824359ea29bbc36a1bea90ac8e51f75e2b0b62596a28c9b563c2654c4b3ad5324f1f942371be7d35ceb2cbe92c0d2f66e65bc98f761c685e7ea5c14cbea563974792f7fe9c103b25e9ad8059562db1f6494d364336257e425d301f1c629ed7a689080768f381c5d42fe15c33c7e7ee6bebb948f8938f00ac27c68376347b1bdaf48e844ff76c671b69a91dd037e79f19b51eae4dc9ec933097675ffdb1490cf9aa8063f21f580877d9cc1bc83521c2d95be3890699c98de6ae7d18a1cac4886f336bf0b9f773b6119a5747ea8a4a94e950c3fbeac830903978bfb191c71070745b84607cbbd71b93625555b3a7582fdc3dd2bb840423bda522f1456cffefe6c732ad620ad904d573860dbfc40b58ec51c7921d92e4a0cca6ce56cfcff3db2924e4e0dccb1de8fcbd94475aed3542f2467602c20dca9b3be5f19ac979afea9c97dd4c24a7df9f0f3c97e41105cbbb42234f5535df03b3cbc01e6055fd08aae67eb4112484351d59813485f98a419145542335adbf29c2d8ef94a4203919af123986e31ed1ff229528e34d559735622579e91aa3a73003df8e33451e4e91b543ebe0f6eab516eefcd1ceb48cd902b77156b91a9d99543ebc5be17ad8fff21bb2292caaef8f4c48f1d16417303ba2ac3de74e0da60f566482dbb30ba4bcb2a8924ec47b9f6409ecbb3ebe55e687ecc0d5529da43ae3e0c047043515fc626f9434eb2dcefa6c8714f548ca367b0fc26acab67722b3669a8d9237641bc3eac8d2dead2eb42f5a4a317508439a0ac9156aec07e1a1df3df26b19b87b9ff13db9f61c356e61a634228e8acfbef9a2064cbca2d0ab206666055b6152574c8a7b558544c567a93f5e9bc61de7aaae0ce44e00091189176a8fadffd2bc449ad145c516c39474b8581f7da6f8a7a1608d4c464916f994507295ed678013cda599143d98f96d0ce0183fb86b29c93cb49f757b43ab8c39173a20da94315901eed0ef77da5efa5fc183901b1a13eb3d3dad9fe6e1869de375a3831e4df51898e78e64b7be863175d25d9e7cbd7feb84d0dbdca352c2476c73c868519c1c52a61e5398d1f8b97fd30197593be93820d150de3183326e8fcfb7d4943514fba4c6e2d845d34ad9fd2167dcabda509e2d8fab064d345dbc2f712a9ff78ada6aeec7f42cd1d985de478c411e9a150efe7b0ed1529996e9d359072ae6ab58df34acc10466a2f53383d47d0e2b3f6bdbcfe760171195d341d70b57843c23fe676dec3d7a7e00bf7824edf266e38877a9bc67049e870787b75c3a9736c623bbb98bea426bd93d37e3e0f345b8f75234fca418f8deaa65d080bc49c241c01cf3842b472991b1a81f61c1609d5e9c703e331666defb791280bd2e822f0c80ac53f409a7905d76c64ef91a0d810146a2a5b375d965ed7ec3c7dd37704b197a8da25b4cb331a31e6c92e73ea33e5728df574d6deb0732f85550424e739a709beb98f744199aa94fd14c365c9b39bf4621dd26e65fbbf71e7bf21032270bc87732105d2b51383467b8f6c7ab80aa118ea8e446192943ae7b1891aed87bebc624fe5a5c1333900a33c22ecbd5012801966dbf4e28fee33c13280cc0e9fbf73175c5cdfe1233032301d968b2ef06c087df8655746fb0874843936aab80058ed1a4d5f490613806f6dc41fea4eccb9b3d6be8b145884ae3e47126f9dab38c14ab1ffdad954ffc64825a00eb144523f302a05be2116bd6f6367500a828734b7808ed497011f05a00af413e294451a23a882cfe524c9cab071ea9bd0f65f2af5ef496340a26c7427eff02bb5cc04a4451645832f9cb248867d01899af3e7377ba7978027488a76fd9d822702faf3dae341d01b605abe38157474836b2d3d33f11dd42656ed23f7e464a5cd6397942a8fa6866f3f09048b02113100b0bb80f18f37379e0440099bf4796474d114b2dac7c822060e7927de4846e3cb7f59d5aa4b9fc95cb81baf2eee0bb82e673e5be0a63d3dd4f166b2ba2df0971363624e161305f7f6961c06237a5b3191c1948f20c47ac6bb9e4f20c6f095990732ad1fdf4f581e8c4c8e5f14a4e498667597dae319a3feb8ad87d7caf1375182e42c3209da82f259fc350fda95174363578cd1566b15b9165f32d78f4f988b6c9f6867ee8d900ace7b7de36de17e15be1a0f05838685546ca31af3ebf212964d23b180a0d8512814bb625134e19197838fb709e11d557eab6368bef856a52eba22d5d316cbab4c955aa0f5273dfce0e9730cde15541587fe819e3aba56cc50e23b370e98dc174f6094e3c447a53407fa2f2495b4d701b53d02db2eba1f240ec978f60bec81d186eb8582cac188dd33f89ed52389464001e73f2681aaee6ff3774f7a50cc9d3da06eeac42bd63d647c267fee2a58b72bf0863b07be9a6e521ccaacaf1c4ded36cabc616f7269c7a3d1cbe3effd326f58beea812f0e4d587627292274278a6630f05b889ebb180d3154f80e032c9e02587b67b14330084f19408a1e0f8d3a437563185f655657febd5c9b46de352192645e95d2c402919c3890754bb537c6de48753f45f80aba3427b294fe6813cfd0f266d635d22fb09858e1a21616fbc1719c3a15ac726e5f035ac9014e67e006cf5e7b31ca146bb5a91898b1efc237d3f49d78c8a0ee1262aa46e816ae4feb53bf21aa7efd473c4ac4b6cda2fe066c016c7e81ec759d521c57914b01b47cc0ef2e61ece74643cae035fd60af25dc1914a71a6658c4532e660f842d570ed394d07323acdf67ff5f2df77e753cd200dfb98ffec9f4c63493a313d2c6edef6f89d4161f4cc935993dcaa0bb6f4115c98a48d228b57706204dfc5910949e577e64ddb79415f1b24b48d9089454c86a5c193f940a4f1183b766aa5380bb021e9d3051a51a30f167802c56fd87b48f4866bd7489b0e09b1431e8a786349f061d16a8516accf122b72dc30be195ba96b12061fe52d35c531b45acb4c7ebbc493ee77d56e73aa2994873f1bde78ec75879a6467d96da1ce6afbd725d23bed6a2b0e555be59590a1bd394da147530840bc83ef0b3a4d73665d14e8c2dec6c4a5d6a07f77966eb19f5452495b8c1764b6dd797939c9a7b0747983b7b08dd26e6d3ac03e16d3a2f18f7f70f1d75225066688e1d7c70e7b28431b32c370461ff78945167c5b6bb452bcccff4fea2d7129c4fd3eb4c1ba59cfad25bf05ab697e4b40e263942d088d40fe4ad97db2c5c4c87e408a84af21b5802f0c5de11864d84bac4b694a4d06b84807a193241d50c605b57b12aeb1d986fd6a260e9e9e3facf43987f35a91cdd38ab61ba127f412dad6dc18a44910e825b1889b16235d03d468dc8a9ddbe7446de4b0d965b4dfbde1865da48cc11c0dc4a5301fe9ecbe06b442a1e26aed7e8d1e56fffbaa24f1e85b4341267f8ac23f6ce884013ee4f1e3c37c57263ebfed1a61bbd7c38010f2476de0e506455c97915a0f0b667b38399038a8799d5c79e52eb05acc16c03f1141165d8c695d3d7e60aa2f7c9e60971c7bc1a6714a869612ba282218188ff76fbbb3f9276aacd7932254d31a16a22014644121450cc94da7a7d9274311616d090b3f883e9da3f5df9eaff3cd447cbfddab089a386c7ad88be15b8276ae0250c08f4b2b18cd5864e34cf258956beace555a7d35", @generic="b0ef12cd5390c3baea49aaf6a106952098e7b4582bfa192081ec851c23bb54fef1258a2984ccac50a4b4e64821ef814b31d527e85efceb50cf5a17c892a7477891dc6db1d4bba821ae5c9782fd36284e4235199c2808421a359d55324ca4139005a16f0f7f13f6de6ea30a3f6de86a2d5da41a4f", @typed={0x8, 0x26, 0x0, 0x0, @ipv4=@loopback}, @generic="83a492a69617b27dad2f1401c35352d07fc5c8ede5114d2e80899abfb82213f04cedb5ec01df6f830163f43a92d15f2d8e802d0051d5357f58d0c7ea"]}]}, @TIPC_NLA_NET={0xc7, 0x7, 0x0, 0x1, [@generic="c8f8febf8502174f574ea1c7c811fbdc79acc3fedbbac881903e733e36531203b26f22194341e6070a9e9ea9", @generic="e087d5712f49b3cf989faf2594bbd5fbc78442322260356b49e27a7950c96653c8f63683692a4da175f55775d496d347b14d9a6446d8ae13da0a59912a8e69088c32f56c58cb99388e6ff0008f0f6d20211d7e0dbaf52a6b636b1bfac947c0ee088cbb842a82df0f09a35344aa6a0e47772b0e64485da0eec620971b2a1a3b7278731cf7854614a111feffff5140fc093ef660d6ff959a"]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x4}, 0x4811) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/card2\x00', 0x480542, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x840, 0x0) msgctl$auto_IPC_STAT(0x9, 0x2, &(0x7f0000000280)={{0x7000000, 0xee01, 0xee01, 0x2000092e, 0x7, 0x8, 0x10}, &(0x7f0000000200)=0x8, &(0x7f0000000240)=0x8, 0x3291, 0x1, 0x2, 0x10000000, 0x7, 0x10, 0x3, 0x205, @inferred, @inferred=0xffffffffffffffff}) mkdir$auto(&(0x7f0000000280)='./cgroup.net/\f\x00\x00\x00\x00', 0x0) 4m42.542728091s ago: executing program 1 (id=119): r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x0, 0x5, 0x8) setresgid$auto(0xa05, 0x4, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x164703, 0x0) access$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x3) preadv$auto(r0, &(0x7f0000000180)={0x0, 0x91d9}, 0xa, 0x6, 0x7ff) 4m42.281313409s ago: executing program 1 (id=120): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (async) r0 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x22800, 0x0) pread64$auto(r0, &(0x7f0000000080)=']$,]/\x00', 0x8, 0x9) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa1) 4m42.104000526s ago: executing program 1 (id=122): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) ioctl$auto(0x1, 0x5421, 0xa) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000440)='/proc/version\x00', 0x800, 0x0) unshare$auto(0x40000080) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000002c0)="80eee0881bbca94d9b789dc6102c6b1e0cb1d0ebb26ce284be190fe9cb2ef203712795b204bd18b7f58a24521ca179ae9506696a074c7be67fc6f5c9b1df84dd52e4ac5aa8eeaeedb799a3c9948f3331ea2e54b160626cb8ab65bcdb09971d41b671e8d6d61be2ba5d005e7b70e7069ffd6d935af46e5a3d8e7cebdecf6bcff97d3855b58cbef662a9c7d9c02fa6024efc8da7a28f8086088c563bcb9a5fe0d8beac188a8ebfab373efc1634ed0b83da1b9c4268a2bd42b3db450a9027982486fa7af5b52e6f6119dd81f1b311055e48d2f245d4cc1a036eef995eefd4f885920fddb462") r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000002480)='/dev/amidi2\x00', 0x20141, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000024c0)={0x1, 0xf, 0x1, 0x3, 0x2c01, "34ca74e98a8b28b0ea83636a87d9be641c7553f01f8630dcee799d12f7e3c85be0ae665c02bfdf8514615339e0b84db0b1ce9f6b6360aa0d759cdfa79caaf3fb", "9cf0e44dd5455d5aa7b320139f421f47ca9c3afd3cbcc8947ce5731c0b85e88a41ea99be0e037380d62da4783537c0b6a0ac79b66128e30f1d865970629cf0213a7a331b0b7b8d9a6a8c22f7e0315d33", "ee4ac7644478dd16c2ce5f27f778c651ce8a49982701b992ee9784aeac8981d4", 0x9, 0x20002, 0x3, "1924bb38d188b3ac2343881b244065bb03578ea94da9be48931053172768fc68b40c3f8acab3f56d6e8337b5fd2521416b1bd9349977dbc021df3958"}) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0x7fb, 0x80000011, 0x2, 0x208000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x8901, 0x0) r1 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r2 = socket(0x2, 0x1, 0x0) setsockopt$auto(r2, 0x6, 0x16, 0x0, 0x40) tkill$auto(0x1, 0x7) setns(r1, 0x60020000) 4m41.007115712s ago: executing program 1 (id=128): mmap$auto(0x0, 0x48, 0xdf, 0x9b72, 0xffffffffffffffff, 0xa) r0 = open_tree$auto(0xffffffffffffffff, 0x0, 0x1001) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) write$auto_nvmf_dev_fops_fabrics(r1, 0x0, 0x0) read$auto(r1, 0x0, 0x1f43) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40ebe, r0, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0xfbe8, 0x4) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x5) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x6e) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) readv$auto(r3, &(0x7f00000000c0)={&(0x7f0000000200)="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", 0x5}, 0x7) read$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4m40.637271992s ago: executing program 32 (id=128): mmap$auto(0x0, 0x48, 0xdf, 0x9b72, 0xffffffffffffffff, 0xa) r0 = open_tree$auto(0xffffffffffffffff, 0x0, 0x1001) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) write$auto_nvmf_dev_fops_fabrics(r1, 0x0, 0x0) read$auto(r1, 0x0, 0x1f43) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40ebe, r0, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0xfbe8, 0x4) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x5) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x6e) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) readv$auto(r3, &(0x7f00000000c0)={&(0x7f0000000200)="0800b8e7c69c10e0c15742274204589e770aa7bd9d154e2363b0a92cdbd7e1885256c7756ed772fccd69cc41139b9f49703273217b1e2a030229337f3a304580cdede355c5ece4a729acee9debbc3a43646fa0fad699a1d078e159824acc83f03942968a879c334f1c7d2614a17b53f2b83d8b019f910d0f126e640828b27bdf06a634f84df5eb051358cc117b776f471c8587d3c228884700f14079691331c943ca3e26f07a9fe6d9eac5b15dc63052e863a8cf18dba3b546029b758c27755aae73aaa046c6738eb7594b421601f8f61c44ee6779ca5569523a961be7aa8ac5c874ef241a2c887561c25757a01168ea66bd9ca834c0b5361307b27562f9c9dae8d459bf9fdbdb961640df900b05b5d828f135aa15fbc5120ced9055592a1555cb0bf17a94aa07", 0x5}, 0x7) read$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 6.614854881s ago: executing program 4 (id=1235): write$auto_evdev_fops_evdev(0xffffffffffffffff, &(0x7f0000000000)="1ed36b543d23380bb0b7cc21bf553d53137b046eff2c99fd8da515d558513172687f92cd32dcea65c669bde30a9e41e223f89f38abbc56045488516f2207da6bce0c3cef1d4e13e9eee1639b85d2d5b6aee8982fc21d33d4eb80ec1743a1f5b056cef2765d3d431052a68898e72b67448ddb305ecc5ef8", 0x77) r0 = accept$auto(0xffffffffffffffff, &(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x39}, &(0x7f00000000c0)=0x4) read$auto_evdev_fops_evdev(r0, &(0x7f0000000100)=""/22, 0x16) (async, rerun: 32) setsockopt$auto_SO_PRIORITY(r0, 0x6, 0xc, &(0x7f0000000140)='\x00', 0x92) (async, rerun: 32) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (async) ioctl$auto_FBIO_CURSOR(r0, 0xc0684608, &(0x7f0000000340)={0x81, 0x1, 0x0, &(0x7f00000001c0)='/sys/kernel/debug/dri/vkms/crtc-0/crc/data\x00', {0x1, 0x400}, {0x95f, 0x1da3, 0xb, 0x2, 0x0, 0x0, 0x9a, &(0x7f0000000200)='/sys/kernel/debug/dri/vkms/crtc-0/crc/data\x00', {0x7ff, 0x5, &(0x7f0000000240)=0x5, &(0x7f0000000280)=0x7, &(0x7f00000002c0)=0xff, &(0x7f0000000300)=0x997}}}) ioctl$auto_FBIO_CURSOR(r0, 0xc0684608, &(0x7f0000000540)={0x101, 0x1, 0xc04, &(0x7f00000003c0)=')-!~+&$]\x00', {0x8001, 0x7}, {0xfd2, 0x3, 0x2, 0x853d, 0x2, 0x81, 0x40, &(0x7f0000000400)='-\x00', {0x2, 0x50843553, &(0x7f0000000440)=0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x400, &(0x7f0000000500)=0x6}}}) (async, rerun: 32) getsockopt$auto_SO_RCVLOWAT(r0, 0x3, 0x12, &(0x7f00000005c0)='\x00', &(0x7f0000000600)=0x3) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000680), r0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x3}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004040}, 0x4000) (async) r2 = timerfd_create$auto(0x5, 0x4) setsockopt$auto_SO_BSDCOMPAT(r2, 0x9169, 0xe, &(0x7f0000000780)='\x00', 0x5) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000007c0)=""/99, 0x63) (async) ioctl$auto_SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000840)="c669e29c0027856bd758d9c2346c23cc4a82ac78") (async) mlockall$auto(0x1) (async) unshare$auto(0x6) (async, rerun: 32) getsockopt$auto_SO_KEEPALIVE(r2, 0x73a7, 0x9, &(0x7f0000000880)='nl802154\x00', &(0x7f00000008c0)=0x7) (rerun: 32) ioctl$auto_FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000900)="66a7c1dc4ea688baa9cf8fd66126d7c6898c2db85745234134f48f68fbd1874f22655cfa97fb18bb3893f5c57c99ff3ee48066fbc7d98505ab55807b3224d6c288fe678547912ea33a7b273cb622067d7c66fa21676c882b1c99a4e3649b080048080cf60b5a") (async) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000009c0), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r3, 0x204, 0x70bd2a, 0x25dfdbfc, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x1000}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xfffff450}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xd3f2}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vbi25\x00', 0x802, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = memfd_create$auto(&(0x7f0000000b00)='.:\x00', 0x3) setsockopt$auto_SO_PEEK_OFF(r2, 0xffffffff, 0x2a, &(0x7f0000000b40)='/sys/kernel/debug/dri/vkms/crtc-0/crc/data\x00', 0x7) (async, rerun: 32) fcntl$auto_F_GETOWNER_UIDS(r5, 0x11, 0x2) (async, rerun: 32) write$auto_console_fops_tty_io(r5, &(0x7f0000000b80)="2ef23acb46f15ce076b36fc943971c955929d9df02ba0716ab525db3f0c6b5c7d47cb4df4be407294790f036d0dbb6e35465cbc9e86b5d6c67de0bdd8288562ad0666fa843689a94f75c27cc721efa836f745d90c662a27cdd81f36c12f1096c7d243b9985529d40827238b2a6ab49f5d42498de1223520fee0d3894ac3ad92fed104778fca36a481d9a4bb63e6ca79ba5449c46501ca83592ccc204ad5d478d4cd0e82df80aa1aa63f2706ac6078d69734933ead036ce8b252ac00e84d011b7cee9aa5474d486942a87ecdcbd21cf99705ce345489d285a34e12a696781178245b050d7500dc7fce9f0a0b29c55e955e0533aae2a8cd2c01096dd015212144e55bcf210f38fec9268a65a272be8e056c030baae723e0813ac86b79c0ce3b97996417b704726fc47923fdbc982ec2c1c6f96590386d49eb1f9d766525da8a23f70821e220e0cad9160f64706ae0ad8798f2d6106a35b23d228ec22a365725dde04d570256a4c674dd25dfc2690e8b4916be5a9822ab4f6d7bba9aeeed4ad28c55cce46004a9a4e6ea992f19c2fb53b2138f90752d3616a62da9204aa5159786da6b011b3a82cb7494d22426891305a930bfb8e851e5f94dc44e60fd68a4651d5080b0960a38e3a1d76471a1307fd37b3ce224f41b08584a6e059c0bfd12a2a8a1952d38c0fa04291cd82eed37b52963dda006fda5fb679d33cf97f9de977055b8c2ac78f5908b6b766cf5df85d5a1e8238f513553c96c4c04133dcc4b0782e7c56ffa18f71309db9e7154c79c82b9b1367cd330b8dde28bddcc3c76a49f52f7f2f98540e7d6c220022d65d2fe4ff85af3df5ac2856051fbe248fe2eaa5a1bc066bcaf8a7f7ff3c9a8697b6663b8207b607deb472df7163129f3011edec46b0890e1fc4f56732dd3e67ace07fca8a917d2b28982e6ba706b64cb56f742586df0b88a7a14aba6df561bf015f76c84bdde8e10440d8164aa994cb418e545a9b9cd7b7479414d7bb9f174e7c99b681d43c25f9a1e91b83f59d292aafdbc74de12d24c3159b4be41acda1412b10ff2b78c5cfceb69824a8b7d5d55d90869b30c2dfe30dc22e68e40060ddc6ac6446a576e178a4c01498c52793dbe227dee1c86e11ec6ce34a8829c22bee482e1099e57f129fd83a45e92c998bd19b127fb3fbdfade1c4b7a5831955da11ae7d7564c0324b10d369467f9b502c3396ffd8b041f94edb6c30069fb8439787647eb70ed386f77d3726796ae6ff13e8203e34c24af4fc9ef7834efc99dcb9f5527bf993d91863201f67224ac906e4d615cefe3d276cca0100494ba63b193967ac93bb1d7efd006f39e9ad45a6dd401e4ee2a5c4e82629e2bd5229ab247d987bf1c8671f3d0e2c08bd61c9bfc8cd925bc1fc6b6d64aa9999f43fa133b6d16347bb1c4b0b7d8902661dcb676ead4e7da73445d66159a4e56b7fdf6941505f0123f7a0f818cc8b56ebde9c474cc879dca4c3d683ef8cf74be983ae20b72600440a23fd3ae6df0022df0fbb24fa0dae690b4708ede2c3100a2bf1acc7548a6e2b595389e5fb05911d87e13492043a9229170b2d1b5edbc58dd73a9af99f8851079303f3f8350b607c86d17f8543367c04d9bb4142678601034d7cd8b5eb9b83b9fbfe6db7fdede508636c2b8edcdac29996b81ae54288099792b87476a0b7eb0606ad73fde33cad1c08f6ac72a2ab5bd75df68f7e61be3a046c3a3191a445e277c6b50448e146efdc31c072c5091c879037ab03b55365ee973a27815630f1a60bf907a17c36f8f528c5c18c6e0ddbbc87b0fc2b9070925c958b0dbf1522dca3b03da993bc9eac378cc770c0b77f8cf9f3cc6586f452b368630d3273b01f0768902b215c8c05c3c91d458b6dcaa3acc32a6fb9ffc488c70c25e6f5ab070915da4fab375807195a89e0d8e18ad06f0c604389e9da2516bee5752a4a0f9d77059a6fefc36f73c1d5bc3e32974e32bfc71c2deabae1d5c1a41d4ce8691b08af05616a4c07ccdb28e798a0dc88c2c2e1842655540d7e20b3dd9ac6cc1b11afa731b5d448132e7ea674d4196bfcfef311f0e41f9d0585243edc8a898838fd4c2ae643e33cdbae9d51e7b6b83b92b39c77a458cb9804eac692d6428ed4b40f6f5ee5d57de2b2a5968f6cc80eb7a24acb1f37d67c21c706dea3a2c3f6280f0d33a92614233444b8490e6e92ccce75bb05bb001cc1fe1f4f58a4c4d6194a19996bdcfd2475e594cca63261e070206ffc3279ed99c351288dcaf1af5d6211842da08074100be58b050a4111ca7243b15d1ab457938283f10db960bd40f460b84bcc21cf0d833b29e1f2f1a114d053c6915b65f0e23f33c5465f00b820a6c2e1b70658c00c2650e7f4c8b4c1c7fd5ca48d16155d6f6db255f4ae9f38f1c492884f164c50b07fa9def3792645fa21a801ad16e93a5accdf752f8d5a6c02ab5405f69e7c63f8772291febb2f9f58105a08be4083a7ea1c9e7d1e162453ea033514489e37fb5d54c905bce7b477dea6faff43eb49217f6c35fd98e71f98045bc62b18ea820b3ddc2a95c5e91b50becbedd581afdf05fe721ac4c219074972fe060006604a9d77e2770267309e94a108dabcdea288638d5c20e84a200c21f81b98a1c52d231ff992cbf2a4c3c3e7d822249ef33a7c3dfcc007111c769c9ea6568002c67ff65707d02b16adac66984908642070cb581bc3dae8c21e34a55a042202c677b162cd800d6090524c22c9d566312fab5ab31cea7be050ac7c8fc1e6adf207ab962befad1ba50a5d0d092818caa61c59bf22ac943969830309370bba256cb79e241b83aa4a904fe9f06216ab3543a338b5659891e2310366bf604ceb407a76106d46e51137236b5847fdbdf4c68cf7d62a235e51b26147266fc54e3eabc10bafeb1dfff5c77f647b3f5cf3b26f58c51f29db672adbe2b0b904c5a6da4704eb22ac9622e83b4ec9611400be02ae90b99c7e04a36810e761c8f906e12275bdea2c3d875de0700fc67fd98cd52fb0bde26de564fa9c1a5ad1d1476686de003131d29d6191613004bf5a2ae42f6a75cb3b07827f121905ef7b6e51713db19322fe8c4cc87d90a96eb568519585cb2491fff8f09efc91d235ed5b44fb7f2be6eb5ed02ccfc327d007e55bee8e5a34295e4f2160eebe72300cb3c4bdca491d7983f1e87b8f3030cf624a76f5aa4cdc0eebfd130414fec3de10d7aee9a883bd6d16fba9917571bfe2ca26cc1b80274947e4088d25cbb652c48d1819f780ef82864fdb0e227ad3defa9054c14cb4bf70e6ac6e22982678ccd43daff2d5ac5f9f07754e639b8dd3de4c6ce06be8a31eb73450c22ca653803f87b96cdf8667eac237c2d958d47961f73216a4497c71e4881c7500d5765e07c9166da8ad9e729030f6dbd5cdeff0a2d6c6af20baec982452cbd6b3e1b1a260037cf4c7d86274572d7175d19c5220f7f5900857ab0de612458c5001a014b056d9b192b9d674728ea163c5562c1c10988e5cc5dab11f2bd4a25085de994c6acb832fe1235bf78c34b0b42c24cf17b8f68f9e47b95f2b5614528199f3bc4196530a1991807f1c4fae6eded463af76d1950b236f6223d0b27deaee9dc2555dad60eda03276a25bdd67d43c4f909eb91578d1f8cfea25222099ba28a3a99b31cf0f0d477e945df9586fe4dc9e4b933e1cd1c25c24269f55ec5795e2aaad03c8341eb61050d2a0cc358f5f31ab6030728b65b862f212b4dd445cb14e2f98037b33cb13597a3c130ecbaf90492825ecf37554ce497be9e70a91250089bbfbffa8561b7db97669248092726c56b7f95f77d48a9b514556dbd8207605be2b1150a0f58907ddf1d150b1ef088802767d3e287290c7e87711926249a23e5e46323c9016acb2e92e962217a609d4d381577bfbdecbfc88ee3b4e4026f7a97bf034a64e2ad1fc7e19b60bd06807a87480264085be27fc79cff9d114a11bd200decd544e7263684111cba71f50de64d54d6dee2520d530f5858d6530b51191328b70f18d7888a9ddab93a8f06c3d123d198c242a6100de6f92f4890845347dd0dab14fa83cdfafd233d20f48d8a9c5abdd543e793af40081361cee21f37fd644393886fc29de2a457b0b0a34cdc6e3002a3dbb7e4f11c5a4ad3b89c8ce3c963db84abd136b41290bf96dbf936a302c75d71f968d7c3568e99ae252c79e49a7bc19e39fb3f8131155be25dd43c3e2aec89783e6ca02edbb1d813b4ec2967725fe034cf39d2f3ca7349125af05f37a991a3414222c32ed736209e883ba3cf8d5ab8662091d5be148f14fc69ec39754691e4d8c86c746206104d5c4c4f1e3ae93f975213af0dc98d88f33a56e44a3437f98570aea64e601c02d1bc2ead2f3f22eeab3e7ba58f1a4041118e085f16566c6bd575a88a9830726f1970abffe04bebfab31d6cdba7d6c1a70f01111d9b7b41352348927213d47031f3557a3c2c5c298626e33b1ecd9279432f7d978cb89c8bb26d4d8f29c74fad6f92fa02e2acd87ee86a9c56e8b8d5c5844380b35e137b21834884b88dae42e9e4d3198c2aceaff13d723dbe8cbab3245b9bc3aae8756fd7b531d4a562a19b07603677203219f7430dd619bff19951646365a9449197227c14d23f03f69f2fe85231e782f412af403551534bc7948afa7e9cb2e69152da84f8ca4e6d9dda8f7338e482a9fbe399d1294309d2d7c504efd53d52676b4fa6bb10976b449ac81a38150a0c608b7e6e1a1c6cb939a011199eaeec33dd990dcc8c6b0422ee29924ee2df34d6721ace90fe1b6f2fea9b37b80853fa7a3db2705ac333fd2715c8ce27ae6e96ac226b2f58ab4f12088d89984a58914eadc77f4a12a98e6d05d58d2c2091c1abf5c0a2edc1afa4697c6656a241dd8818dd7909b67dfc50812cdf0d08c6ccceb39c2147a15b483f3e5d8f3c4ba9401d22041e19b56afabf02c615522c0abb37cd6aa5ca2072d42b48ca3467f0843f6f10f71a7d0e882755b1b1c1a4f2b5bbaf472e35d175508647998e103abaa1b097e91de0c9a725769db74acc139aeb09941cc1ef5085fd565696f449ad1f1b94cf2b3266d63a1e765a91817672f690b6b7e8e23e90d2c1f6ab555695279e829d8127550cbfc327ffcd5daedc0cdef84fbf4d746f81589b2744d134b4c3e7b6ddf7cbaeb2ab800522e2e4378c5efd3dd845b046c94bfd699a5a8600c613824ba091a8fd806c9f674220bfb0aedbe9a45d3a4d6d5af6ae7cf144bce8bb54a77c71b35fb454e6f94a2d852a1206fe9714b0e6f8c4cd69459268bf6dee0886e3da6ddbdfc4a9ccb2e2907b77d0dfa310cbeb33629c403a75eee121923de4e2e4a54deab554e75e56ac253168c7e40bb79df3d26923e9c7457d6091e2089a8a8ab849ff300a7c495ca6e3cedc421bce8da49683b17538af799852e8cb65c786c6bf469557c7aa54b06da2982b4c56eb48267bdb465b7470dd8d1c4c6451731fc45b042c613d83d5b35ed6c8da595d244776e4cf78aa592f6f035d411099767087c966dc722405c26bdd93e1833ec29f435affb28a759aa645512e75fcc70f4153dd1305a827b208f2b87a31b5da9b9e3dca50aaae09790edab973aed9f960cfe57853396e2b0668c33ad80567ab024da38a4ba699d1cf1387f7659ca504ad3eb69f78ab6126774db418d665d683b6c6ae82490477f22fd9155e31a274055a67ed795d29e13a0b8a4d1f6d5e2767cb01038676e9e085f7d52ff6509ebdcf2e864d95260cafe22d903541cde1bec115a3415786fd9b51421da494e6122c6b8e5767cdb1b897cf8efe0a744755bee", 0x1000) r6 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000001b80)='/sys/kernel/debug/fail_usercopy/probability\x00', 0x4042, 0x0) io_cancel$auto(0x8, &(0x7f0000001bc0)={0x9, 0x9, 0xc000000, 0x3, 0x51c, r4, 0x9, 0xfffffffffffffffc, 0x7ff, 0x0, 0xa2, r6}, &(0x7f0000001c00)={0x8, 0x5, 0x6, 0x9}) (async) read$auto_dvb_demux_fops_dmxdev(r0, &(0x7f0000001c40)=""/248, 0xf8) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/self/attr/smack/current\x00', 0x200000, 0x0) 6.336077335s ago: executing program 4 (id=1237): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace\x00', 0x80302, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/power/pm_trace\x00', 0x4) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x80000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/ports/0/ipsec\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffffd) unshare$auto(0x40000080) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x4100, 0x0) socket(0x10, 0x2, 0xc) getitimer$auto_ITIMER_VIRTUAL(0x1, 0x0) socket(0x10, 0x2, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x200, 0x4, 0x4, r1, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x800005, 0x20008, 0x87, 0x6}, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x182, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) read$auto(r4, 0x0, 0xcefbce6) r5 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r5, 0x29, 0x20, 0x0, 0x23) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) 5.699382868s ago: executing program 2 (id=1238): getegid() (async) getegid() mmap$auto(0x0, 0x2020009, 0x81, 0xeb3, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 5.184146595s ago: executing program 3 (id=1241): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x10000, 0x0, 0x0, 0x3}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) setresuid$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) unshare$auto(0x40000080) 4.997283285s ago: executing program 3 (id=1242): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace\x00', 0x80302, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/power/pm_trace\x00', 0x4) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/ports/0/ipsec\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffffd) unshare$auto(0x40000080) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x4100, 0x0) socket(0x10, 0x2, 0xc) getitimer$auto_ITIMER_VIRTUAL(0x1, 0x0) socket(0x10, 0x2, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x200, 0x4, 0x4, r1, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x800005, 0x20008, 0x87, 0x6}, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x182, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) read$auto(r4, 0x0, 0xcefbce6) r5 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r5, 0x29, 0x20, 0x0, 0x23) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) 4.673787023s ago: executing program 4 (id=1243): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000380), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="881200", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c00028008001000e600000008000a00c066ffff0500090001000000"], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x80f, 0xffffffffeffffff8, 0x7, 0xfffffffffffffffb, r1, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x38, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x18, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @typed={0x8, 0x23, 0x0, 0x0, @uid}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8880) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r6) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x83) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf257e0000004453db80fee263ed19b0db1025644a0635c6818df87d0808b402ed5292d7116fff02f95dc90c5918ebf875af499fdb3bd620e035b3d8ed6a37df6a49990920da5c"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) 4.408062697s ago: executing program 2 (id=1244): read$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000000)={0xe, 0xd, 0x0, 0x101, 0xffffffff, 0x2, "7c7a209959a3142fc8290f0f7e942f9a2d4c0ea8f1c4949bedb0b5fdd01a71da"}, 0x8000, 0x0, 0xfffffffb) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timer_gettime$auto(0x5, 0x0) 4.191529872s ago: executing program 0 (id=1246): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket(0xa, 0x801, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram3\x00', 0x602000, 0x0) ioctl$auto_HDIO_GETGEO(r1, 0x301, &(0x7f00000001c0)="c6cac9f6cbbf5dfbac962bd1") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x20b42, 0x0) r2 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x65, 0x1, 0x0, 0x800) bind$auto(0x3, &(0x7f0000000140)=@can, 0x6a) setsockopt$auto(r0, 0x10000000084, 0xb, 0x0, 0x9c) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.usage_all\x00', 0x101800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/27, 0x1b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf2501000000100022800c00010006000400000000000800ea0df04ea1823e550100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r6 = socket(0x10, 0x2, 0xc) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r7, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xc00}}, 0x14}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) r8 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)) r9 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x210000, 0x0) ioctl$auto_AUTOFS_IOC_CATATONIC(r8, 0x9362, 0x0) preadv$auto(r9, &(0x7f0000000140)={&(0x7f0000000040)="4801d09754a58fbb3b5c730346045a0100bc81a9ddf4e68b26c642316254b4b65b05e38c77ad7438cceff820bfcf1631fe50da0c90e8f35e037c8b00eb986b0212575eb177b242b953813fc70358fcb0252bff0082403a8cf71fd1a0b18043d44ff6ba1dd5bb288da4f2a312a55db90d2dbb6e0fc0304510a01fcac73fa0c70f877b0e3dbfc9dd2a304448c672f3ab33e20dc0b6a32139bad57167bc4823d22e01566e5555ba11e7e6ea89dfe6a3ac76aa31e77d9d8004ee2d559aff51efdd5e8a6ef14c12ff501975ea55d4925bcc92951dfb08cefe7cbf2587a26ce4d4c193a53808", 0x80000000}, 0x7, 0x2, 0x9) 4.109625306s ago: executing program 2 (id=1247): mmap$auto(0x1, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0xb) socket(0xa, 0xa, 0x3b) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) write$auto(0xffffffffffffffff, 0x0, 0x7) statmount$auto(0x0, &(0x7f00000003c0)={0x5, 0x1, 0x9, 0x7, 0x5, 0x2, 0x8, 0x7, 0x3, 0x9, 0x9, 0xffff, 0x4, 0x200000000001, 0xb4, 0xb, 0x9, 0x10007, 0xa, 0x10000000000, 0x0, 0xbc0, 0x22000, 0x203, 0x9, 0x84, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, [0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x7, 0x6, 0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x10000, 0x8000000000000001, 0x0, 0x4, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x8000200000000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8], "e2435fd7d2132cd0f03efeb46bd59e08a8d755408a6264c9c79942aac0d337c5f0d76bb6c15caa3bc1405364d7ab31b0d81e9c17bd8e000e78caf23060b4df8f3d9ddabf001cb4024ae53577765d4ed84445a7ebbf271240140abdbb00bbc32e08b6f98000"/112}, 0x81, 0x968c) (async) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1441, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd10, &(0x7f00000001c0)) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/serio/drivers/pulse8-cec/bind_mode\x00', 0x1eb842, 0x0) write$auto(r2, &(0x7f00000001c0)='\x00', 0xffffffff) (async, rerun: 64) mmap$auto(0x4000, 0x400008, 0x3, 0x9b72, 0x2, 0x7ffe) (rerun: 64) mmap$auto(0x6, 0x3, 0x10, 0x40eb3, r0, 0x300000000000) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r3, 0x0, 0x9) (async) close_range$auto(0x2, r3, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) (async) open(0x0, 0x7ffd, 0x12) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x14b402, 0x0) read$auto(r4, &(0x7f0000000240)='/proc/scsi/sg\x00\x00\x00\x00ices\x00\r\xe2\xc9\x04\x986\xbc\xb0FI\xb9-E\xe3\x87j\xdes1\xa7\xdf\xc4\b\xb3\xeelc\x7f\xfdg\x18*\a:_\xb0\x92\xacwH\x9c\x9dF\xb1\xc47\x85\xc7\x13\xe1\x19UR\x96\xd8\x86\xd3\xe4\xa9R\x1c\xeb\xc8\xe5X\xfcR\xc7\vdU\x8b\xaa^\xfd\x83#\xc1o\x04\xeca\xbf\x8bYz\xd9\r\xcbk\xfd\x9e\x97\xcbOf\x80', 0x100000001) prctl$auto(0x35, 0x1, 0x8, 0x0, 0x0) (async) prctl$auto(0x34, 0x1, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 32) read$auto(0x3, 0x0, 0x80) (rerun: 32) 4.002273382s ago: executing program 3 (id=1248): openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x442, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cec26\x00', 0x1a9602, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x7) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2710, 0xfffffffffffffffc, 0x0) ioctl$auto(r1, 0x6, 0xffffffffffffffff) mlockall$auto(0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) write$auto(r3, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81) mmap$auto(0xffffffffffff5c13, 0x0, 0x5, 0x18, r3, 0x8000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r4 = io_uring_setup$auto(0x52, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25150000000500120010000000080027000c000000380b2b80330b248004008080ba89ebda4be9067b59c90d50dab4ba175b1b13d15e19ee0f5bf6c6d2095efcc719c8e137b7ec6062c6c768e512acd0f1208ee2be2b891868abd1934bd95a54945e649a2afd1272f72e8fffb57e3ba1c8fb306ce2ba95180cf54dcca46ab950e626ff31022afd57f1306ee00962cb60c30a9946d642a00256ed0006ec8364307874f7c763c6e9af0222943721fb4fa5b1cecfe3a908b1fd515dad1e0ca0998fa55ca4bbf9412855250567f1b98186d8597ab6fb715cef224b510a7ccc4cae047b6d4ab94775e1158d87be4806455bbd76baaa3a656ed5f316b17a5a27a6ec9904006d80460a8e80b634a4b1ce57b5a586e945eb157cc566d02bed93630b901c93d3fde23606aa3e80e4d0644fef266741cf5f2879924594cd388ed548e2dea74f9d72af19edad4a810af64d79eaa131b2afaca3f428fd83499d9c7a99dfd9a24cbd9bf5b0f0446521fcf1f416f83791795dc86d63c7a05e38c547e208be35b17fb8aa1fa57ea4ac59aac09a5bfb9f08a6d02e58d5040324f4241a9eb63d5a1e48cff0ed3e97c4af9506ca950ce9d115d242277c614a27a77df014ced1df35f069b42113bc6bf5427f9c1ba6924ec8bafc11ba6d9303461e92e3c3e1b4d5b2954d259654ee2bab0385e3b106c4a93525200ce6e3f1e9f6d4b87b61583abced950ff97dade7ebde309c78d4f1ddbff5cb5c3fd141cbb4e56a97183f705019716cf6d6f300c9677b6f14b2b8d708b675b5c4f2357d9c22dd6bba1195ba295a5f713ac28f043cc671fc7b43fb9b40bf17766c79d698dd68d0e385e926971a18a3c3687c3c8202b806432be62b3030a2c9e31da55a6cd98165f7439f9a09508b8c4b9c5ea32aaf1f7c4246ea8700aaccaf476d9cd5e3b2340d17f13ba40c8fdaf4aa4c4b8763fd86d35bda9aab03e3a252d7e4aea01cdad1fad040b29a9e92ee1fd8c010c30b4cc69917cee531e42efa59c735fe8159a292f57fa7a4600e6833032846d87a515d9803770eb4db6712bce7b51fc2f0eff8a292023a8c7c1544c6e53012f9fe13aa8caf795caccfa4ff2321116a86938e2b782e7a57fe5cbff8df11b0bc86d691a7a8df0cc9486c4898e8bafd0b374798ecdba9af994890465f435d5e6408dd9ddd96df1673098864522e964b565d69882198a999ee41c980dafdf3538400c81ad57dc970a72b75d75850913452021a4dfe885342c4e5c33dbcd801b10866908de67b13c5dc4fb51dce74dae4c4c27413c00b50c8e18d1dcfe28974fee5df4cefd05f7e8e21e8881ef7300ca75af8ef7c8cfa0a1cf8771444e3bd449f957fa4500c1f371ccc31a7b196ca809935887d26d3ed24d2dc16c83aa263abd880df1d27d8463e4f29673fbb0a073caaf975314f5660bdf89c285291a46ddb2f8410b02e86bc522808052288fe16dbb7733976605ed2342c69717ba18334138bc68c994ffa20bbad1672a4ee0dc19a0ec177f36995edc671ef8d29211e4b7d0723a18c36c398df2e924a4f55ef95687e6a4aebcf86d36a9791d561c2203fc4a545d30a5173ffc84612c333a73fd0c84f92554294cfbbe86088e79bc6f1c9bc880b4502e4b47af767f47dbccbf4318ec6a33ee42cafc3e6ced6720adf772de614a754c7b0d93208cb0bdd285e8ff9ffe078bb782a57a14204784880a3379af47423967bf134933d350324a845e7aca06245efec7dd272177bbb663bf83c23161cf7d8b32d45502f6bbc6416720652aa197556c3cf5be55e2f8ace74ce95feb288f681d92ed529bb9892472c3633f744bfde252c8b00808d92daa2a3b4771eee9cc83745c326f8ea02119b55a99bddfc498948e53ce2efa0635276810d2211e9e0e63bc850029865d525cbf43cde05009dca149084d9569a1abb0e5f941bd5c67a77685e965b354dc744617960e642512f2cd86236c9a1938f4e799cc0e09beb23791f446e822b86518185d668e7e93daec7b1a9f53034aeabc7c7bf52deefbf5e2a90b085c41c0f528ff2cf81dbc1c28ed95ad75fd65c0e0d793d7111dce84883cbf60cd55e025b824d84e141d54da72111ea2fed1fd8f3c9cf47763ee47a7988d5021ac661641ee95ea9c9d57dd2f8e537f3cb71830a6c1608dadf6beb7339961811f8da34f8fb7b5190f9c146942fda73801812ed6bffa1a60c80e5fd6528e045b40fa78c10f37797d93f827539aa389d59c48254397ff7b72325465d18b04acac619d9d5f80d46b57d28a76fbe83203ecacb91328b145ebbe356178a1eb1c09101fe785c98aab93485ae7b4217412b7ea31fdd965eaaf78d3ab4eec8bc689062b738c002fd94f9cd18bbc5285c57854f9092e85d90ec205f43fcc9d27cd6041fb73ed3164e7f2cb3ea694b89a1879f8cbcdbffdab4b277d0fa3dba5061952d266b2f3821f79cd2b3bf107c6250e711c9ddba407c9ed323d2dfda23d5a4088f8199d1cbb311a1b051da8d792299f471f0ca7fd7925695acaf01e7ad022d96dfb30e66d551fb37522baf2ea71cc5a6416124ee2138c3f2fb5cca4b71eb9d3571deebc898b62406f416caa3fcd732f9661548d8b7ec74bc94d9dcc92b0048abc2b358c0007a905c9513affbd873a368e0b5872a2f4cdc4bb8602ad3ec77cba3e150c8993f5fc88ac7e6b2642f4660486d5823482aae8f90ee7913abdb064398cebe5946c2920d7d99935571f9b1eeb4529373538e699dda91425660a1010a4cf7e9a10713f57fa1d601467ec51ad5153bd94582320ff55380ca7efefacf62f822b948cb3b93f68978f248639c51ac97e3f56bcca9990839ee01df9773b22cf261310d4b3c6b03ef54a9a848c10d1252d0412a8f01ff61bd6978112d6b69e2f71e02a04f43f3a1a8259f7e83c26fc5bc703a8b6d3d325f08b08f9dc10b8f654871386ef94d2493463f7f3d0b20bf93be475b0ed9e870aaedd63b8d08877651bace68300e3a1b0a5d1a3da2b246fef82de3b57eca440ae7a7656ff31ae74cad3a80f1ae615f2747589d4859ec1981a6a5176168db86ab5f6930d4679762956e408d2268cad53aa10727c8b8952114b17c352782dc9afc120535bcb99bcf1161397f19ac4d288677e48f0e6bfdcf5f852a8bc1b432399f0ade5db9585e09e4cc96a63dd7bddecbbaae880678f94111108d76c5d825629a3eee16b2a6362c59ba3cf99a2e2bcfa62d010706bca5c0d009b141f1c3f6a9cc58234f97a5721a3ee31772877ffda5507f8e7053e15cb60df08184dbdd9f2af7a618781fdd39d32404f3e2dc6ac48f35ce31bc70a019235b7776114ef2ae75ebf7b7191e5a61e1c5c82340e12dd98cf9125a3fb1c8062a206ac2aa98e708a190b1b70d1c2450b47394d8e1f21c541b3f4139d2159e9a37acf2ee9ba5e0cf99221a43b46793cad7b7b71784032a0092abb25380fa77646f948ed456d6fa1fb749f736e10491e39569c073308ee782562a59a719e4b8910f737a41ee0644db9905d22f44bae257749b03667b535af492012ad1c50f1d88a46a2c3aeeca86026c6e5ca8289bb153ff85aade4bd00b9bb87017d7816c24a0e71b0d0dcf6dedbc956c81bf445d665da7cb1c009be2f8d7eb286e2e2595166b8df0541ff0b80ab20d9ba30058ef52dc2c1905133bcca7193320811e0bc083798b80bce7e84ea9135d976fbc339b0814cb4f4dd9a71f9a2f1a78da4c60c1671b6ef41798646a702fd9eeb67bd250df336f0c1889c54be82bfc4238d6568ca0e7bf7a3005126d605a867b47f2c96fd6a92a9cf463270a9e2df32c6959c2f272b48a6b76fe7393dc12713c99888e0d03ffdac04f5d3c87e5343bc1a6127484b6d7e18e97a329ae582b8c3dd1be170cff9fdebcadfb339c67a303e15d6f779da6fbd91b401ac8e32fe1a0f16b5aa52ca7801d12aaba5c57945b3d0e768370e031d268b101df06ceaca597ca754d933b08f3b248548d267cbb16430c5110cdaf5b36bc2cf6a7c24f143277f606cbe77ef320505986fa5dc876e87ec74a2c06d0e893ed3da67cd814f209b3720e98d1b2f6afd245bcb682167978b98b9976c2ef41"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a0003000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x3, 0x9}, 0x7}, 0x3, 0x0) socket(0x18, 0x805, 0x1) 3.650221634s ago: executing program 0 (id=1249): mmap$auto(0x2d8999b1, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xff, 0x0, 0x0, &(0x7f0000000180)={[0x5, 0x0, 0xd3e, 0xffffffffffffffff, 0x968c, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x4, 0x7, 0x8100, 0x9, 0xb, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe1, 0x0, 0x0, &(0x7f00000002c0)={[0x8001fb, 0x7, 0xd, 0x0, 0x3, 0x0, 0x15f4da06, 0x7, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x4) sysfs$auto(0x2, 0x4, 0x17de89a6) mmap$auto(0x0, 0x420009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$auto(r2, &(0x7f00000000c0)='](-(#\x00', 0x1) close_range$auto(r0, r3, 0x1) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(r5, 0xae41, 0xffffffffffffffff) 3.489431762s ago: executing program 4 (id=1250): r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) (async) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = dup$auto(r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r3) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r3, &(0x7f0000000c40)={0x0, 0xffffffffffffffe4, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010029bd6800fbdb5f2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r3) (async) mmap$auto(0xffffffff, 0x202000d, 0x8, 0xeb4, 0xfffffffffffffffa, 0x8000000000000003) (async) r5 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r5, 0xffffffffffffffff) (async) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x8001, 0x0) r6 = getpid() prlimit64$auto(r6, 0x4, &(0x7f0000000080)={0x6, 0x7fff}, &(0x7f0000000100)={0x0, 0x7ff}) read$auto(0x3, 0x0, 0xfffffdef) (async) r7 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async, rerun: 32) r8 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000002c0), r2) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r12, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) (async) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r8, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0xfffffff7}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x1000100}, @NCSI_ATTR_IFINDEX={0x8}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xf1}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r3) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x3b72, 0x0) (async, rerun: 64) r13 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) (rerun: 64) write$auto_kernfs_file_fops_kernfs_internal(r13, &(0x7f0000000040)="de91b83a075ce51fff544f85b0b6d328f3beb9b8634fd16bf2701cb13a2d93abd414c9a1586e4fbc7b163c42c4adfad8804de8783614b2dcf995a43c8cf63d102facaebb7019f67c4241ee77139ef43eace15fcb4ca071ad7ecd284cb135be34415cca234d6a11827f2178354be881a06111504ccdbebb0a", 0x78) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) (async) io_uring_register$auto_IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000180)="3636f18809db4abb2fa6af0ffa39c89810beab63414f88a0843e90f1d9f2a32dab781f0ebf9e04482fa44c2f65919dae05ec722ac52a6370ff0f3b2f790af485f8911c666f878dae41d80daa40e8ac082150d77cb9ede3070dd633cc0a41f1fc02dfea421740a6c698c1aedcf048540df705afae919f0177666bdeec431a930647de25e16e4e63555a43c274a94420bac3e10a841b0b47101b55f3618ff43114ef1c69e6cf1f50fddf43746b9af38f2dd0c401bef83ef9249a10", 0x2) 3.180191247s ago: executing program 4 (id=1251): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x4) writev$auto(0x3, 0x0, 0x8009) epoll_pwait2$auto(r0, &(0x7f0000000040)={0x3, 0x391a}, 0x7, &(0x7f0000000080)={0x5, 0xffffffffffff8000}, &(0x7f00000000c0)={0x1000}, 0x8) io_uring_setup$auto(0x6, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) 3.137375955s ago: executing program 2 (id=1252): syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20db8400", @ANYRES16=r2, @ANYBLOB="01032abd7000fcdbdf25010000000c000280080001800400ff80"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x408) (async, rerun: 64) getdents$auto(r3, &(0x7f00000003c0)={0x100, 0x8000000000000003, 0x4}, 0x62d4) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) (async) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) r4 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) io_uring_setup$auto(0x4000006, 0x0) (rerun: 32) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) shutdown$auto(r4, 0x0) (async) r5 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) read$auto_ctl_device_fops_user(r5, &(0x7f0000001c80)=""/12, 0xc) (async) msgget$auto(0x0, 0x5) (async) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) fsconfig$auto_SHMEM_HUGE_NEVER(r4, 0x3, &(0x7f0000000180)='^^:#\x00', &(0x7f0000000880)="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", 0x0) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) (async) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_setup$auto(0xffff, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 2.977002458s ago: executing program 2 (id=1253): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/gss_krb5_enctypes\x00', 0x1c9180, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_NOFCS(r1, 0x5, 0x2b, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x840, 0x40000a, 0xb6a, 0x9b7f, 0x2, 0x5) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x20000, 0x0) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(r2, 0x0, 0xfffffdef) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) read$auto_tracing_stats_fops_trace(r0, 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x8000, 0x0) 2.733224165s ago: executing program 3 (id=1254): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c80), r1) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto_proc_pid_attr_operations_base(r3, &(0x7f0000000ec0)='9', 0x1) getsockopt$auto_SO_PASSCRED(r3, 0x7, 0x10, &(0x7f0000000400)='batadv\x00', &(0x7f0000000d00)=0x1fe) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x3, 0x2000d, 0x7, 0x17, r3, 0x10008000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000cc0)='MAC802154_HWSIM\x00', 0x8) socket(0x1e, 0x1, 0x0) getpeername$auto(0x3, 0x0, 0x0) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) splice$auto(r5, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x9) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000c40), 0x20400, 0x0) write$auto(r1, 0x0, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/admmidi2\x00', 0x12002, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000280)={{0x7ffffffb, 0x0, 0x0, 0x9, 0xe, 0x1}, 0x542, 0x0, 0x1, 0x74e98a1f, @raw=0xb, @raw=0x9, 0x5, 0x0, &(0x7f0000000180)="7ffa0fd433c4266ca37470d237070a502393cb3bfabc5eda1736999d0b7b62462bf79e80237d9854818b56db62e4e7fe4ddd52e75539abfac37082e0a7088c382ffc3f68db4731b91cb490", &(0x7f0000000440)="2785b8777b82f3a8a825106d030d94da2561717bc96785525c069cd0bc13ca27d99068868c0b5fa87c50614eeba0a336d52d8ebf21672d7718f9704b903d731e055a0006c66b38991d26feba6311034760c7f390911f838b10d2f995c2861e6a752ed810896099053e25a901c94c0708b657461710e25513accea8a55f8cfc9a4548d9a8b66d98656e36f331e57d052f843d0ea71a10"}) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[], 0x730}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 2.610477915s ago: executing program 2 (id=1255): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x20000001) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) fcntl$auto(0xffffffffffffffff, 0x7, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) (async) ioperm$auto(0x6, 0x5ad6, 0x7) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x400202, 0x0) (async) mmap$auto(0xffffffff, 0x3, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x5, 0x0) (async) setsockopt$auto(0x4, 0x0, 0x485, 0xfffffffffffffffe, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000080)={0x10, 0x6, 0x8000000, 0x6, 0x9, 0x2, "df7f3b5f3ff166d99410f614d1a23da8d4d41aa25886c209281b4e4e6c7a698c2834b317b3cc771d3360a511f01b6df5f17e30ef003cc7f0b159b0e7078dc21c69abe70ae1d080e77fd10d23586178beec6f76d1de897a91ef030353af05b42b527ce2000000"}, 0x10008000, 0x0, 0x6) (async, rerun: 64) socket(0x10, 0x2, 0x0) (rerun: 64) process_mrelease$auto(0xffffffffffffffff, 0xa) (async) mmap$auto(0x1, 0xc0, 0xdf, 0x1000009b72, 0xffffffffffffffff, 0x8000) (async, rerun: 64) mincore$auto(0x1000, 0x8001, 0x0) (async, rerun: 64) fcntl$auto(0x8000000000000001, 0x7, 0x8) (async) madvise$auto(0x7, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) fcntl$auto(0x8000000000000001, 0x26, 0x8) sendmmsg$auto(r1, &(0x7f00000002c0)={{&(0x7f0000000180)="f3d56f749db40bdc40fb5b2ca81361333a1d76aec85ee7252e3f01986c5ab7a875bac4d945963ab54926228a93d30761035d5c0261dfd9fe1285f8c6ebf8d0071003bf658f1109c845993422c7e782463250be468697257a8b7cb19092683f950747ee26059f42f6d63f79fa4826c0bf4a180cbb7fa987b44b062e7a8dad4bd65b4d7869cce221131c15df9789faf44bc105035287286876f6949ccd9ef552fd95efc92f914b1b3db0f5132e093404c9139fc6c9ffc90cef7169", 0x5, &(0x7f0000000240)={&(0x7f0000000000)="e1039942396fa369c0522746b4896c7b40031bb02265b15fc23d05402a20947c3215a879", 0x1400000000000001}, 0x7fffffff, &(0x7f0000000300)="fa0e89cdc7d1cfed153706d32e55025e0bfcc2b373c3eac8c7cc2e1f75c01631dcd8d78bbd7d", 0xff, 0x1}, 0x2}, 0x9, 0x8009) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) (async) socket(0x29, 0x8, 0x7) 2.523078664s ago: executing program 0 (id=1256): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace\x00', 0x80302, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/power/pm_trace\x00', 0x4) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/ports/0/ipsec\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffffd) unshare$auto(0x40000080) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x4100, 0x0) socket(0x10, 0x2, 0xc) getitimer$auto_ITIMER_VIRTUAL(0x1, 0x0) socket(0x10, 0x2, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x200, 0x4, 0x4, r1, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x800005, 0x20008, 0x87, 0x6}, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x182, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) read$auto(r4, 0x0, 0xcefbce6) r5 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r5, 0x29, 0x20, 0x0, 0x23) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) 1.538679316s ago: executing program 0 (id=1257): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x10040, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x12002, 0x0) mmap$auto(0x8000000000008, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x0, 0x5, 0x7b, 0x10001}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) ioctl$auto_RTC_ALM_SET(r3, 0x40247007, &(0x7f00000001c0)={0x5, 0x8d, 0x8, 0x6, 0xb828, 0xffffffff, 0x7, 0x4, 0x3ff}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200), 0x0) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r5, 0x0, 0x1f40) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/122, 0x7a) 309.774225ms ago: executing program 0 (id=1258): write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x13) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf2502fffff70400080014000180100004"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf2502fffff70400080014000180100004"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) socket(0x2b, 0x1, 0x0) socket(0x23, 0x6, 0x7fb) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x7fff) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={r1, &(0x7f00000001c0)="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", 0x2, &(0x7f00000002c0)="52146540213a75d2044caab0173ed3a10c2dc4cb1fa823529116bd8a465f484d5a3e489b089ae6f3e706e54c8c5dd8d05c6221895818bd53820495acf7c63b56c6923383fb2c22e29258cc957796126ecda0be7767ce6849b00fd723c306809ab5680ea839ec219857a63980cbcebd210173dc8a373738b9c5a2b212f225098a4a052b4bb9096a97260b70ab6259136f72a7a5f561f2f54a76640a04584c72eb17d84a47ddaec3d0950f59ceabbf94fe157d44d22527a7ff98defe5feb6a641830ee16851511bebadfde2f845aeb5468952ffb708cb2c5ffa9e9a74a5f46600e6266b9af6edd", 0x4, &(0x7f00000003c0)="603e258d779a251065520e9447fa43b68412f43f3e2d2a1937b2e9b4d5ec3e7b61417a020087f5e6c28d1a0e78a7ffe89a5bef378318857f53dc1390f41824b8d05808fd3a9b1e6024fa128cad52a0ca62292950092494a809b2c108c2495362e71714495244c7b3dc61581e2c1af977917f18f653b57e3b81ee73aa260bc4ef7152c1e6d3f2ca1316f7c50f0e2c742641817e111a5733327554a487866f618efab6391211ef8098abc132c7c4e8b347", &(0x7f00000000c0)=0x2}) ioctl$auto_TUNSETVNETBE2(r2, 0x400454de, &(0x7f0000000480)=0x5) 258.862674ms ago: executing program 3 (id=1259): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x80000000, 0x1) read$auto_ctl_device_fops_user(r0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r2, &(0x7f0000000680)={0x0, 0x40200}, 0x3) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="350d27bd7000ffdbdf25090000000c00048008000600e0000002"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x8010) mmap$auto(0x6a, 0x0, 0x3, 0xeb3, r4, 0x10) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) arch_prctl$auto(0x1021, 0x3) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/net/ip_vs_conn\x00', 0x20440, 0x0) pread64$auto(r5, 0x0, 0xa0, 0xf86) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) r6 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen\x00', 0x0, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mtd/mtd0/ecc_failures\x00', 0x83e00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001c00)=""/4111, 0x100f) pread64$auto(r6, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) inotify_rm_watch$auto(r2, 0x8001) getpid() openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0x3, 0x0, 0xffd8) 101.275723ms ago: executing program 4 (id=1260): madvise$auto(0x0, 0x2000040080000003, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x29, 0x32, 0x0, 0x113) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd4/sched/read1_fifo_list\x00', 0x202181, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x42801, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000040)={0x1, '\x00 \x00', 0xc5, 0xffffffff, 0xeda, 0xbb1b, "011586f1c8b112f0059652a7b9638fe9"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7aa8f4c7) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) 42.799481ms ago: executing program 3 (id=1261): syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x2, 0x3, 0x100) pipe$auto(&(0x7f0000000000)=0xffffffffffffffff) ioctl$auto_BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) statmount$auto(0x0, 0x0, 0x81, 0xd) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000280)="13e321d145") sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x9) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000140)="65507307ff6587a725ca87720ef9769f20592e77", 0x14) mmap$auto(0x0, 0x428, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) r4 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x2, 0x8, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) ftruncate$auto(r4, 0x1) 0s ago: executing program 0 (id=1262): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/phys\x00', 0x400, 0x0) socket(0x1e, 0x1, 0x3) read$auto(r0, &(0x7f0000002440)='\x00', 0x9) ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = ioctl$auto_SIOCGIFHWADDR2(r2, 0x8927, &(0x7f0000003500)="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"/4206) mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x4, 0x2020009, 0xffffffffffffffff, 0xcb1, r1, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x0, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0) r4 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r4, 0x0, 0xe) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/tty36\x00', 0x80502, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r6) r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="90120000", @ANYRES16=r8, @ANYBLOB="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"], 0x1290}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r3) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00e500", @ANYRES16=r10, @ANYBLOB="000126bd7000ffdbdf257000000006006500ff000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$auto_WG_CMD_GET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES16=r7, @ANYRES16=r7, @ANYBLOB="030727bd7000ffdbdf2500000000"], 0x14}, 0x1, 0x0, 0x60000000, 0x2004c914}, 0x4) write$auto_tty_fops_tty_io(r5, &(0x7f0000000580)="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", 0xfdef) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) kernel console output (not intermixed with test programs): ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.324966][ T8807] RSP: 002b:00007fd52980e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 214.324985][ T8807] RAX: ffffffffffffffda RBX: 00007fd528bb6090 RCX: 00007fd52898ebe9 [ 214.324998][ T8807] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 214.325010][ T8807] RBP: 00007fd528a11e19 R08: 0000000000000602 R09: 0000300000000000 [ 214.325022][ T8807] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 214.325034][ T8807] R13: 00007fd528bb6128 R14: 00007fd528bb6090 R15: 00007ffe51a24418 [ 214.325052][ T8807] [ 214.517594][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.789132][ T8801] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 214.816715][ T8801] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 215.304455][ T8818] ptrace attach of "./syz-executor exec"[5856] was attempted by ""[8818] [ 215.336174][ T8819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.568'. [ 215.387469][ T8820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.569'. [ 215.601764][ T8819] team0: Port device team_slave_1 removed [ 216.406614][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.575'. [ 216.569018][ T8838] hub 8-0:1.0: USB hub found [ 216.596064][ T8838] hub 8-0:1.0: 1 port detected [ 217.505631][ T8871] FAULT_INJECTION: forcing a failure. [ 217.505631][ T8871] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.598147][ T8871] CPU: 1 UID: 0 PID: 8871 Comm: syz.4.580 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 217.598182][ T8871] Tainted: [U]=USER [ 217.598189][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.598201][ T8871] Call Trace: [ 217.598207][ T8871] [ 217.598214][ T8871] dump_stack_lvl+0x16c/0x1f0 [ 217.598244][ T8871] should_fail_ex+0x512/0x640 [ 217.598275][ T8871] should_fail_alloc_page+0xe7/0x130 [ 217.598304][ T8871] prepare_alloc_pages+0x3c2/0x610 [ 217.598335][ T8871] ? rcu_is_watching+0x12/0xc0 [ 217.598357][ T8871] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 217.598383][ T8871] ? rcu_is_watching+0x12/0xc0 [ 217.598403][ T8871] ? trace_mm_page_alloc+0x11f/0x1a0 [ 217.598434][ T8871] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 217.598458][ T8871] ? stack_trace_save+0x8e/0xc0 [ 217.598481][ T8871] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 217.598506][ T8871] ? rcu_is_watching+0x12/0xc0 [ 217.598529][ T8871] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 217.598553][ T8871] ? __get_vm_area_node+0x1ca/0x330 [ 217.598583][ T8871] ? __vmalloc_node_noprof+0xad/0xf0 [ 217.598600][ T8871] ? pcpu_mem_zalloc+0x54/0xb0 [ 217.598618][ T8871] ? pcpu_create_chunk+0x432/0x730 [ 217.598639][ T8871] ? pcpu_alloc_noprof+0x11e3/0x1470 [ 217.598660][ T8871] ? bpf_map_alloc_percpu+0x9a/0x4b0 [ 217.598686][ T8871] ? htab_map_alloc+0x10ca/0x1570 [ 217.598704][ T8871] ? map_create+0x592/0x1f80 [ 217.598734][ T8871] alloc_pages_bulk_noprof+0x71c/0x1410 [ 217.598758][ T8871] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.598790][ T8871] ? policy_nodemask+0xea/0x4e0 [ 217.598817][ T8871] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 217.598842][ T8871] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 217.598873][ T8871] kasan_populate_vmalloc+0xf1/0x1f0 [ 217.598897][ T8871] alloc_vmap_area+0x959/0x29c0 [ 217.598931][ T8871] ? __pfx_alloc_vmap_area+0x10/0x10 [ 217.598963][ T8871] __get_vm_area_node+0x1ca/0x330 [ 217.598996][ T8871] __vmalloc_node_range_noprof+0x271/0x14b0 [ 217.599015][ T8871] ? pcpu_mem_zalloc+0x54/0xb0 [ 217.599037][ T8871] ? pcpu_mem_zalloc+0x54/0xb0 [ 217.599059][ T8871] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.599082][ T8871] ? pcpu_mem_zalloc+0x54/0xb0 [ 217.599108][ T8871] __vmalloc_node_noprof+0xad/0xf0 [ 217.599126][ T8871] ? pcpu_mem_zalloc+0x54/0xb0 [ 217.599146][ T8871] pcpu_mem_zalloc+0x54/0xb0 [ 217.599165][ T8871] pcpu_create_chunk+0x432/0x730 [ 217.599186][ T8871] ? trace_irq_enable.constprop.0+0xc0/0x120 [ 217.599219][ T8871] pcpu_alloc_noprof+0x11e3/0x1470 [ 217.599247][ T8871] bpf_map_alloc_percpu+0x9a/0x4b0 [ 217.599275][ T8871] htab_map_alloc+0x10ca/0x1570 [ 217.599294][ T8871] ? ns_capable+0xd7/0x110 [ 217.599317][ T8871] map_create+0x592/0x1f80 [ 217.599348][ T8871] ? __pfx_map_create+0x10/0x10 [ 217.599374][ T8871] ? __might_fault+0x13b/0x190 [ 217.599396][ T8871] ? rcu_is_watching+0x12/0xc0 [ 217.599415][ T8871] ? __might_fault+0xe3/0x190 [ 217.599437][ T8871] ? lock_release+0x201/0x2f0 [ 217.599467][ T8871] __sys_bpf+0x44d2/0x4de0 [ 217.599498][ T8871] ? __pfx___sys_bpf+0x10/0x10 [ 217.599527][ T8871] ? rcu_is_watching+0x12/0xc0 [ 217.599546][ T8871] ? lock_release+0x201/0x2f0 [ 217.599574][ T8871] ? do_futex+0x122/0x350 [ 217.599599][ T8871] ? __pfx_do_futex+0x10/0x10 [ 217.599630][ T8871] ? xfd_validate_state+0x61/0x180 [ 217.599660][ T8871] ? __pfx_do_writev+0x10/0x10 [ 217.599683][ T8871] __x64_sys_bpf+0x78/0xc0 [ 217.599713][ T8871] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 217.599745][ T8871] do_syscall_64+0xcd/0x490 [ 217.599773][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.599793][ T8871] RIP: 0033:0x7f6c26d8ebe9 [ 217.599809][ T8871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.599829][ T8871] RSP: 002b:00007f6c27b31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.599847][ T8871] RAX: ffffffffffffffda RBX: 00007f6c26fb5fa0 RCX: 00007f6c26d8ebe9 [ 217.599861][ T8871] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 217.599873][ T8871] RBP: 00007f6c26e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 217.599885][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.599897][ T8871] R13: 00007f6c26fb6038 R14: 00007f6c26fb5fa0 R15: 00007fff44cad538 [ 217.599917][ T8871] [ 218.022484][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.059426][ T8933] netlink: 'syz.2.593': attribute type 11 has an invalid length. [ 221.211968][ T8961] Invalid ELF header magic: != ELF [ 222.938605][ T9005] futex_wake_op: syz.0.610 tries to shift op by -2048; fix this program [ 223.000589][ T9005] futex_wake_op: syz.0.610 tries to shift op by -2048; fix this program [ 223.229477][ T9007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.611'. [ 223.386597][ T9007] hub 8-0:1.0: USB hub found [ 223.411720][ T9007] hub 8-0:1.0: 1 port detected [ 228.021509][ T9064] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 228.670860][ T9077] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 229.081519][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.626'. [ 229.098990][ T9114] Invalid ELF header magic: != ELF [ 229.437799][ T9120] hub 8-0:1.0: USB hub found [ 229.570450][ T9120] hub 8-0:1.0: 1 port detected [ 232.056031][ T9126] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 232.741010][ T9174] binder: 9172:9174 ioctl 400c620e 0 returned -22 [ 233.157112][ T9176] phram: not enough arguments [ 233.175352][ T9176] phram: not enough arguments [ 233.298186][ T9145] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 233.349181][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.645'. [ 233.585684][ T9196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.647'. [ 234.880408][ T9221] binder: 9220:9221 ioctl 400c620e 0 returned -22 [ 234.971730][ T9194] kexec: Could not allocate control_code_buffer [ 235.545496][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.656'. [ 235.982364][ T9255] ACPI: Can not change Invalid GPE/Fixed Event status [ 237.352274][ T9261] kexec: Could not allocate control_code_buffer [ 237.736351][ T9285] block nbd0: Unsupported socket: shutdown callout must be supported. [ 238.088601][ T9306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.667'. [ 239.667589][ T9339] random: crng reseeded on system resumption [ 240.623263][ T9358] FAULT_INJECTION: forcing a failure. [ 240.623263][ T9358] name fail_futex, interval 1, probability 0, space 0, times 0 [ 240.790645][ T9361] vhci_hcd: invalid port number 23 [ 240.821435][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.674 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 240.821469][ T9358] Tainted: [U]=USER [ 240.821476][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.821488][ T9358] Call Trace: [ 240.821494][ T9358] [ 240.821501][ T9358] dump_stack_lvl+0x16c/0x1f0 [ 240.821531][ T9358] should_fail_ex+0x512/0x640 [ 240.821568][ T9358] get_futex_key+0x1d0/0x1560 [ 240.821594][ T9358] ? __pfx_get_futex_key+0x10/0x10 [ 240.821621][ T9358] futex_wake+0xea/0x530 [ 240.821650][ T9358] ? rcu_is_watching+0x12/0xc0 [ 240.821670][ T9358] ? __pfx_futex_wake+0x10/0x10 [ 240.821699][ T9358] ? kmem_cache_free+0x2d1/0x4d0 [ 240.821721][ T9358] ? putname+0x154/0x1a0 [ 240.821749][ T9358] do_futex+0x1e3/0x350 [ 240.821774][ T9358] ? __pfx_do_futex+0x10/0x10 [ 240.821802][ T9358] __x64_sys_futex+0x1e0/0x4c0 [ 240.821828][ T9358] ? __x64_sys_openat+0x174/0x210 [ 240.821859][ T9358] ? __pfx___x64_sys_futex+0x10/0x10 [ 240.821889][ T9358] do_syscall_64+0xcd/0x490 [ 240.821916][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.821936][ T9358] RIP: 0033:0x7fcde678ebe9 [ 240.821950][ T9358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.821970][ T9358] RSP: 002b:00007fcde76ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 240.821988][ T9358] RAX: ffffffffffffffda RBX: 00007fcde69b5fa8 RCX: 00007fcde678ebe9 [ 240.822001][ T9358] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcde69b5fac [ 240.822014][ T9358] RBP: 00007fcde69b5fa0 R08: 00007fcde76ad000 R09: 0000000000000000 [ 240.822026][ T9358] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 240.822037][ T9358] R13: 00007fcde69b6038 R14: 00007ffef46c2170 R15: 00007ffef46c2258 [ 240.822056][ T9358] [ 240.822329][ T9361] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 241.014536][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.337781][ T9369] sctp: [Deprecated]: syz.0.675 (pid 9369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.337781][ T9369] Use struct sctp_sack_info instead [ 241.539108][ T9319] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 242.215809][ T9392] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 243.138877][ T9407] Falling back ldisc for ttyS2. [ 243.234903][ T9409] FAULT_INJECTION: forcing a failure. [ 243.234903][ T9409] name failslab, interval 1, probability 0, space 0, times 0 [ 243.313378][ T9409] CPU: 1 UID: 0 PID: 9409 Comm: syz.4.681 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 243.313416][ T9409] Tainted: [U]=USER [ 243.313424][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.313440][ T9409] Call Trace: [ 243.313450][ T9409] [ 243.313458][ T9409] dump_stack_lvl+0x16c/0x1f0 [ 243.313491][ T9409] should_fail_ex+0x512/0x640 [ 243.313536][ T9409] should_failslab+0xc2/0x120 [ 243.313562][ T9409] __kmalloc_cache_noprof+0x6a/0x3e0 [ 243.313582][ T9409] ? binderfs_binder_device_create.isra.0+0x189/0xb10 [ 243.313609][ T9409] binderfs_binder_device_create.isra.0+0x189/0xb10 [ 243.313637][ T9409] binder_ctl_ioctl+0x186/0x1b0 [ 243.313659][ T9409] ? __pfx_binder_ctl_ioctl+0x10/0x10 [ 243.313681][ T9409] ? do_vfs_ioctl+0x128/0x14f0 [ 243.313720][ T9409] ? __fget_files+0x20e/0x3c0 [ 243.313742][ T9409] ? __pfx_binder_ctl_ioctl+0x10/0x10 [ 243.313765][ T9409] __x64_sys_ioctl+0x18e/0x210 [ 243.313796][ T9409] do_syscall_64+0xcd/0x490 [ 243.313822][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.313843][ T9409] RIP: 0033:0x7f6c26d8ebe9 [ 243.313856][ T9409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.313875][ T9409] RSP: 002b:00007f6c27b31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.313893][ T9409] RAX: ffffffffffffffda RBX: 00007f6c26fb5fa0 RCX: 00007f6c26d8ebe9 [ 243.313906][ T9409] RDX: 0000200000000240 RSI: 00000000c1086201 RDI: 0000000000000003 [ 243.313918][ T9409] RBP: 00007f6c27b31090 R08: 0000000000000000 R09: 0000000000000000 [ 243.313930][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.313941][ T9409] R13: 00007f6c26fb6038 R14: 00007f6c26fb5fa0 R15: 00007fff44cad538 [ 243.313959][ T9409] [ 243.790252][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 244.209563][ T9434] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 244.471185][ T9449] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 244.471346][ T9449] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 244.578626][ T9449] ima: policy update failed [ 244.686453][ T30] audit: type=1802 audit(1755355914.056:5): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.691" res=0 errno=0 [ 246.108881][ T9493] zswap: compressor not available [ 246.304753][ T9508] netlink: 'syz.3.699': attribute type 2 has an invalid length. [ 246.389021][ T9508] netlink: 'syz.3.699': attribute type 2 has an invalid length. [ 246.437664][ T9515] FAULT_INJECTION: forcing a failure. [ 246.437664][ T9515] name failslab, interval 1, probability 0, space 0, times 0 [ 246.493936][ T9515] CPU: 1 UID: 0 PID: 9515 Comm: syz.4.701 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 246.493973][ T9515] Tainted: [U]=USER [ 246.493980][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.493991][ T9515] Call Trace: [ 246.493997][ T9515] [ 246.494005][ T9515] dump_stack_lvl+0x16c/0x1f0 [ 246.494035][ T9515] should_fail_ex+0x512/0x640 [ 246.494066][ T9515] should_failslab+0xc2/0x120 [ 246.494093][ T9515] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 246.494120][ T9515] ? alloc_inode+0xc3/0x240 [ 246.494152][ T9515] alloc_inode+0xc3/0x240 [ 246.494187][ T9515] new_inode+0x22/0x1c0 [ 246.494214][ T9515] ? kasan_save_track+0x14/0x30 [ 246.494240][ T9515] binderfs_binder_device_create.isra.0+0x1a2/0xb10 [ 246.494272][ T9515] binder_ctl_ioctl+0x186/0x1b0 [ 246.494295][ T9515] ? __pfx_binder_ctl_ioctl+0x10/0x10 [ 246.494319][ T9515] ? do_vfs_ioctl+0x128/0x14f0 [ 246.494371][ T9515] ? __fget_files+0x20e/0x3c0 [ 246.494392][ T9515] ? __pfx_binder_ctl_ioctl+0x10/0x10 [ 246.494414][ T9515] __x64_sys_ioctl+0x18e/0x210 [ 246.494444][ T9515] do_syscall_64+0xcd/0x490 [ 246.494470][ T9515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.494489][ T9515] RIP: 0033:0x7f6c26d8ebe9 [ 246.494502][ T9515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.494520][ T9515] RSP: 002b:00007f6c27b31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.494538][ T9515] RAX: ffffffffffffffda RBX: 00007f6c26fb5fa0 RCX: 00007f6c26d8ebe9 [ 246.494550][ T9515] RDX: 0000200000000240 RSI: 00000000c1086201 RDI: 0000000000000003 [ 246.494562][ T9515] RBP: 00007f6c27b31090 R08: 0000000000000000 R09: 0000000000000000 [ 246.494573][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.494584][ T9515] R13: 00007f6c26fb6038 R14: 00007f6c26fb5fa0 R15: 00007fff44cad538 [ 246.494602][ T9515] [ 246.783379][ T9514] FAULT_INJECTION: forcing a failure. [ 246.783379][ T9514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.796503][ T9514] CPU: 1 UID: 0 PID: 9514 Comm: syz.2.700 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 246.796535][ T9514] Tainted: [U]=USER [ 246.796542][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.796554][ T9514] Call Trace: [ 246.796561][ T9514] [ 246.796567][ T9514] dump_stack_lvl+0x16c/0x1f0 [ 246.796595][ T9514] should_fail_ex+0x512/0x640 [ 246.796626][ T9514] _copy_from_user+0x2e/0xd0 [ 246.796659][ T9514] copy_msghdr_from_user+0x98/0x160 [ 246.796685][ T9514] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 246.796714][ T9514] ? futex_unqueue+0x133/0x2c0 [ 246.796738][ T9514] ? rcu_is_watching+0x12/0xc0 [ 246.796757][ T9514] ? lock_release+0x201/0x2f0 [ 246.796784][ T9514] ___sys_sendmsg+0xfe/0x1d0 [ 246.796810][ T9514] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.796836][ T9514] ? __pfx___futex_wait+0x10/0x10 [ 246.796870][ T9514] ? rcu_is_watching+0x12/0xc0 [ 246.796898][ T9514] __sys_sendmmsg+0x200/0x420 [ 246.796925][ T9514] ? __pfx___sys_sendmmsg+0x10/0x10 [ 246.796954][ T9514] ? __pfx_do_futex+0x10/0x10 [ 246.796985][ T9514] ? xfd_validate_state+0x61/0x180 [ 246.797017][ T9514] __x64_sys_sendmmsg+0x9c/0x100 [ 246.797043][ T9514] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 246.797075][ T9514] do_syscall_64+0xcd/0x490 [ 246.797102][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.797123][ T9514] RIP: 0033:0x7fcde678ebe9 [ 246.797145][ T9514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.797165][ T9514] RSP: 002b:00007fcde768b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 246.797183][ T9514] RAX: ffffffffffffffda RBX: 00007fcde69b6090 RCX: 00007fcde678ebe9 [ 246.797197][ T9514] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 246.797208][ T9514] RBP: 00007fcde6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 246.797220][ T9514] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.797232][ T9514] R13: 00007fcde69b6128 R14: 00007fcde69b6090 R15: 00007ffef46c2258 [ 246.797251][ T9514] [ 247.062960][ T6141] Bluetooth: hci4: unexpected event 0x1d length: 10 > 5 [ 248.190339][ T9560] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 248.479335][ T9573] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2457378032.1343497902.3359604762), cmd(5) [ 249.417335][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 251.259666][ T9650] FAULT_INJECTION: forcing a failure. [ 251.259666][ T9650] name failslab, interval 1, probability 0, space 0, times 0 [ 251.288910][ T9650] CPU: 1 UID: 0 PID: 9650 Comm: syz.0.721 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 251.288945][ T9650] Tainted: [U]=USER [ 251.288951][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.288964][ T9650] Call Trace: [ 251.288971][ T9650] [ 251.288977][ T9650] dump_stack_lvl+0x16c/0x1f0 [ 251.289007][ T9650] should_fail_ex+0x512/0x640 [ 251.289039][ T9650] should_failslab+0xc2/0x120 [ 251.289067][ T9650] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 251.289091][ T9650] ? lock_release+0x201/0x2f0 [ 251.289117][ T9650] ? __proc_create+0x2ce/0x8e0 [ 251.289148][ T9650] __proc_create+0x2ce/0x8e0 [ 251.289177][ T9650] ? __pfx___proc_create+0x10/0x10 [ 251.289205][ T9650] ? lock_release+0x201/0x2f0 [ 251.289231][ T9650] ? _raw_write_unlock+0x28/0x50 [ 251.289255][ T9650] ? proc_register+0x314/0x5f0 [ 251.289286][ T9650] proc_create_reg+0x7d/0x180 [ 251.289317][ T9650] proc_create_net_data+0x8e/0x1c0 [ 251.289348][ T9650] ? __pfx_proc_create_net_data+0x10/0x10 [ 251.289384][ T9650] ? lockdep_init_map_type+0x5c/0x280 [ 251.289412][ T9650] ? lockdep_init_map_type+0x5c/0x280 [ 251.289440][ T9650] ? __pfx_igmp_net_init+0x10/0x10 [ 251.289462][ T9650] igmp_net_init+0xab/0x1a0 [ 251.289483][ T9650] ops_init+0x1e2/0x5f0 [ 251.289511][ T9650] setup_net+0x10f/0x380 [ 251.289537][ T9650] ? lockdep_init_map_type+0x5c/0x280 [ 251.289564][ T9650] ? __pfx_setup_net+0x10/0x10 [ 251.289591][ T9650] ? debug_mutex_init+0x37/0x70 [ 251.289611][ T9650] copy_net_ns+0x2a6/0x5f0 [ 251.289642][ T9650] create_new_namespaces+0x3ea/0xa90 [ 251.289668][ T9650] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 251.289692][ T9650] ksys_unshare+0x45b/0xa40 [ 251.289719][ T9650] ? __pfx_ksys_unshare+0x10/0x10 [ 251.289747][ T9650] ? xfd_validate_state+0x61/0x180 [ 251.289780][ T9650] __x64_sys_unshare+0x31/0x40 [ 251.289808][ T9650] do_syscall_64+0xcd/0x490 [ 251.289859][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.289881][ T9650] RIP: 0033:0x7fa1e958ebe9 [ 251.289897][ T9650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.289918][ T9650] RSP: 002b:00007fa1ea352038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 251.289938][ T9650] RAX: ffffffffffffffda RBX: 00007fa1e97b6090 RCX: 00007fa1e958ebe9 [ 251.289952][ T9650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 251.289965][ T9650] RBP: 00007fa1e9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 251.289978][ T9650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.289990][ T9650] R13: 00007fa1e97b6128 R14: 00007fa1e97b6090 R15: 00007fffd85f26a8 [ 251.290010][ T9650] [ 252.093726][ T30] audit: type=1804 audit(1755355921.466:6): pid=9660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.724" name="/newroot/183/file0" dev="tmpfs" ino=974 res=1 errno=0 [ 252.574142][ T9671] FAULT_INJECTION: forcing a failure. [ 252.574142][ T9671] name failslab, interval 1, probability 0, space 0, times 0 [ 252.616162][ T9672] [ 252.645136][ T9671] CPU: 1 UID: 0 PID: 9671 Comm: syz.2.726 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 252.645173][ T9671] Tainted: [U]=USER [ 252.645179][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.645191][ T9671] Call Trace: [ 252.645197][ T9671] [ 252.645204][ T9671] dump_stack_lvl+0x16c/0x1f0 [ 252.645234][ T9671] should_fail_ex+0x512/0x640 [ 252.645265][ T9671] should_failslab+0xc2/0x120 [ 252.645292][ T9671] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 252.645319][ T9671] ? binderfs_binder_device_create.isra.0+0x322/0xb10 [ 252.645349][ T9671] kstrdup+0x53/0x100 [ 252.645373][ T9671] binderfs_binder_device_create.isra.0+0x322/0xb10 [ 252.645403][ T9671] binder_ctl_ioctl+0x186/0x1b0 [ 252.645426][ T9671] ? __pfx_binder_ctl_ioctl+0x10/0x10 [ 252.645449][ T9671] ? do_vfs_ioctl+0x128/0x14f0 [ 252.645489][ T9671] ? __fget_files+0x20e/0x3c0 [ 252.645512][ T9671] ? __pfx_binder_ctl_ioctl+0x10/0x10 [ 252.645536][ T9671] __x64_sys_ioctl+0x18e/0x210 [ 252.645567][ T9671] do_syscall_64+0xcd/0x490 [ 252.645594][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.645615][ T9671] RIP: 0033:0x7fcde678ebe9 [ 252.645629][ T9671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.645649][ T9671] RSP: 002b:00007fcde76ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.645669][ T9671] RAX: ffffffffffffffda RBX: 00007fcde69b5fa0 RCX: 00007fcde678ebe9 [ 252.645683][ T9671] RDX: 0000200000000240 RSI: 00000000c1086201 RDI: 0000000000000003 [ 252.645695][ T9671] RBP: 00007fcde76ac090 R08: 0000000000000000 R09: 0000000000000000 [ 252.645708][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.645720][ T9671] R13: 00007fcde69b6038 R14: 00007fcde69b5fa0 R15: 00007ffef46c2258 [ 252.645748][ T9671] [ 252.854579][ T9676] random: crng reseeded on system resumption [ 252.882708][ T9682] netlink: 'syz.2.730': attribute type 27 has an invalid length. [ 252.890542][ T9682] netlink: 334 bytes leftover after parsing attributes in process `syz.2.730'. [ 252.919805][ T9676] FAULT_INJECTION: forcing a failure. [ 252.919805][ T9676] name failslab, interval 1, probability 0, space 0, times 0 [ 252.932572][ T9676] CPU: 1 UID: 0 PID: 9676 Comm: syz.4.729 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 252.932610][ T9676] Tainted: [U]=USER [ 252.932618][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.932631][ T9676] Call Trace: [ 252.932638][ T9676] [ 252.932646][ T9676] dump_stack_lvl+0x16c/0x1f0 [ 252.932680][ T9676] should_fail_ex+0x512/0x640 [ 252.932727][ T9676] should_failslab+0xc2/0x120 [ 252.932759][ T9676] __kmalloc_cache_noprof+0x6a/0x3e0 [ 252.932784][ T9676] ? memory_bm_create+0x154/0x810 [ 252.932809][ T9676] memory_bm_create+0x154/0x810 [ 252.932837][ T9676] create_basic_memory_bitmaps+0x10b/0x320 [ 252.932865][ T9676] snapshot_open+0x235/0x2b0 [ 252.932892][ T9676] ? __pfx_snapshot_open+0x10/0x10 [ 252.932921][ T9676] misc_open+0x35a/0x420 [ 252.932945][ T9676] ? __pfx_misc_open+0x10/0x10 [ 252.932968][ T9676] chrdev_open+0x231/0x6a0 [ 252.933003][ T9676] ? __pfx_apparmor_file_open+0x10/0x10 [ 252.933029][ T9676] ? __pfx_chrdev_open+0x10/0x10 [ 252.933060][ T9676] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 252.933091][ T9676] do_dentry_open+0x97f/0x1530 [ 252.933120][ T9676] ? __pfx_chrdev_open+0x10/0x10 [ 252.933153][ T9676] vfs_open+0x82/0x3f0 [ 252.933189][ T9676] path_openat+0x1de4/0x2cb0 [ 252.933220][ T9676] ? __pfx_path_openat+0x10/0x10 [ 252.933250][ T9676] do_filp_open+0x20b/0x470 [ 252.933277][ T9676] ? __pfx_do_filp_open+0x10/0x10 [ 252.933314][ T9676] ? alloc_fd+0x471/0x7d0 [ 252.933341][ T9676] do_sys_openat2+0x11b/0x1d0 [ 252.933377][ T9676] ? __pfx_do_sys_openat2+0x10/0x10 [ 252.933418][ T9676] __x64_sys_openat+0x174/0x210 [ 252.933454][ T9676] ? __pfx___x64_sys_openat+0x10/0x10 [ 252.933508][ T9676] do_syscall_64+0xcd/0x490 [ 252.933536][ T9676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.933558][ T9676] RIP: 0033:0x7f6c26d8ebe9 [ 252.933574][ T9676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.933595][ T9676] RSP: 002b:00007f6c27b31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.933614][ T9676] RAX: ffffffffffffffda RBX: 00007f6c26fb5fa0 RCX: 00007f6c26d8ebe9 [ 252.933628][ T9676] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 252.933642][ T9676] RBP: 00007f6c26e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 252.933655][ T9676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.933667][ T9676] R13: 00007f6c26fb6038 R14: 00007f6c26fb5fa0 R15: 00007fff44cad538 [ 252.933687][ T9676] [ 253.364610][ T9693] i2c i2c-0: new_device: Missing parameters [ 253.735960][ T9719] FAULT_INJECTION: forcing a failure. [ 253.735960][ T9719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.787919][ T9719] CPU: 1 UID: 0 PID: 9719 Comm: syz.3.738 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 253.787969][ T9719] Tainted: [U]=USER [ 253.787977][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.787990][ T9719] Call Trace: [ 253.787996][ T9719] [ 253.788003][ T9719] dump_stack_lvl+0x16c/0x1f0 [ 253.788035][ T9719] should_fail_ex+0x512/0x640 [ 253.788068][ T9719] _copy_to_user+0x32/0xd0 [ 253.788088][ T9719] binderfs_binder_device_create.isra.0+0x510/0xb10 [ 253.788121][ T9719] binder_ctl_ioctl+0x186/0x1b0 [ 253.788145][ T9719] ? __pfx_binder_ctl_ioctl+0x10/0x10 [ 253.788169][ T9719] ? do_vfs_ioctl+0x128/0x14f0 [ 253.788213][ T9719] ? __fget_files+0x20e/0x3c0 [ 253.788237][ T9719] ? __pfx_binder_ctl_ioctl+0x10/0x10 [ 253.788263][ T9719] __x64_sys_ioctl+0x18e/0x210 [ 253.788297][ T9719] do_syscall_64+0xcd/0x490 [ 253.788327][ T9719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.788349][ T9719] RIP: 0033:0x7fd52898ebe9 [ 253.788364][ T9719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.788386][ T9719] RSP: 002b:00007fd52982f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.788406][ T9719] RAX: ffffffffffffffda RBX: 00007fd528bb5fa0 RCX: 00007fd52898ebe9 [ 253.788421][ T9719] RDX: 0000200000000240 RSI: 00000000c1086201 RDI: 0000000000000003 [ 253.788434][ T9719] RBP: 00007fd52982f090 R08: 0000000000000000 R09: 0000000000000000 [ 253.788448][ T9719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.788460][ T9719] R13: 00007fd528bb6038 R14: 00007fd528bb5fa0 R15: 00007ffe51a24418 [ 253.788481][ T9719] [ 255.412748][ T9749] nbd: socks must be embedded in a SOCK_ITEM attr [ 255.578501][ T9749] block nbd0: shutting down sockets [ 256.053155][ T9769] netlink: 'syz.0.747': attribute type 11 has an invalid length. [ 256.084962][ T9772] FAULT_INJECTION: forcing a failure. [ 256.084962][ T9772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.147310][ T9772] CPU: 1 UID: 0 PID: 9772 Comm: syz.3.748 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 256.147344][ T9772] Tainted: [U]=USER [ 256.147350][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.147361][ T9772] Call Trace: [ 256.147367][ T9772] [ 256.147374][ T9772] dump_stack_lvl+0x16c/0x1f0 [ 256.147403][ T9772] should_fail_ex+0x512/0x640 [ 256.147433][ T9772] _copy_to_user+0x32/0xd0 [ 256.147451][ T9772] simple_read_from_buffer+0xcb/0x170 [ 256.147471][ T9772] proc_fail_nth_read+0x197/0x240 [ 256.147491][ T9772] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.147522][ T9772] ? security_file_permission+0x71/0x210 [ 256.147549][ T9772] ? rw_verify_area+0xcf/0x6c0 [ 256.147568][ T9772] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.147587][ T9772] vfs_read+0x1e4/0xcf0 [ 256.147610][ T9772] ? __pfx___mutex_lock+0x10/0x10 [ 256.147636][ T9772] ? __pfx_vfs_read+0x10/0x10 [ 256.147656][ T9772] ? __fget_files+0x204/0x3c0 [ 256.147676][ T9772] ? rcu_is_watching+0x12/0xc0 [ 256.147698][ T9772] ? __fget_files+0x20e/0x3c0 [ 256.147721][ T9772] ksys_read+0x12a/0x250 [ 256.147742][ T9772] ? __pfx_ksys_read+0x10/0x10 [ 256.147764][ T9772] ? fput+0x9b/0xd0 [ 256.147791][ T9772] do_syscall_64+0xcd/0x490 [ 256.147836][ T9772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.147857][ T9772] RIP: 0033:0x7fd52898d5fc [ 256.147872][ T9772] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 256.147892][ T9772] RSP: 002b:00007fd52982f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.147911][ T9772] RAX: ffffffffffffffda RBX: 00007fd528bb5fa0 RCX: 00007fd52898d5fc [ 256.147925][ T9772] RDX: 000000000000000f RSI: 00007fd52982f0a0 RDI: 0000000000000004 [ 256.147938][ T9772] RBP: 00007fd52982f090 R08: 0000000000000000 R09: 0000000000000000 [ 256.147968][ T9772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.147981][ T9772] R13: 00007fd528bb6038 R14: 00007fd528bb5fa0 R15: 00007ffe51a24418 [ 256.148002][ T9772] [ 256.906546][ T6141] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 257.213682][ T9810] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 258.328041][ T9834] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078004dd0 pfn:0x78004 [ 258.355852][ T9839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.762'. [ 258.459043][ T9839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.511416][ T9834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 258.555555][ T9839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.589718][ T9834] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 258.687189][ T9834] raw: ffff888078004dd0 0000000000000000 00000001ffffffff 0000000000000000 [ 258.816317][ T9834] page dumped because: unmovable page [ 258.915641][ T9834] page_owner tracks the page as allocated [ 258.972892][ T9834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 2, tgid 2 (kthreadd), ts 77290767512, free_ts 77290290350 [ 259.101502][ T9852] FAULT_INJECTION: forcing a failure. [ 259.101502][ T9852] name failslab, interval 1, probability 0, space 0, times 0 [ 259.144138][ T9852] CPU: 1 UID: 0 PID: 9852 Comm: syz.0.763 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 259.144178][ T9852] Tainted: [U]=USER [ 259.144185][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.144199][ T9852] Call Trace: [ 259.144207][ T9852] [ 259.144215][ T9852] dump_stack_lvl+0x16c/0x1f0 [ 259.144247][ T9852] should_fail_ex+0x512/0x640 [ 259.144281][ T9852] ? __register_sysctl_table+0xea2/0x1900 [ 259.144315][ T9852] should_failslab+0xc2/0x120 [ 259.144345][ T9852] __kmalloc_noprof+0xd2/0x510 [ 259.144370][ T9852] ? lock_release+0x201/0x2f0 [ 259.144401][ T9852] __register_sysctl_table+0xea2/0x1900 [ 259.144438][ T9852] ? __pfx___register_sysctl_table+0x10/0x10 [ 259.144471][ T9852] ? is_module_address+0x69/0xf0 [ 259.144502][ T9852] ? register_net_sysctl_sz+0x228/0x3e0 [ 259.144537][ T9852] __devinet_sysctl_register+0x1b9/0x360 [ 259.144574][ T9852] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 259.144610][ T9852] ? devinet_init_net+0xeb/0x910 [ 259.144642][ T9852] ? __asan_memcpy+0x3c/0x60 [ 259.144671][ T9852] devinet_init_net+0x315/0x910 [ 259.144706][ T9852] ? __pfx_devinet_init_net+0x10/0x10 [ 259.144740][ T9852] ops_init+0x1e2/0x5f0 [ 259.144771][ T9852] setup_net+0x10f/0x380 [ 259.144800][ T9852] ? lockdep_init_map_type+0x5c/0x280 [ 259.144831][ T9852] ? __pfx_setup_net+0x10/0x10 [ 259.144861][ T9852] ? debug_mutex_init+0x37/0x70 [ 259.144884][ T9852] copy_net_ns+0x2a6/0x5f0 [ 259.144917][ T9852] create_new_namespaces+0x3ea/0xa90 [ 259.144946][ T9852] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 259.144973][ T9852] ksys_unshare+0x45b/0xa40 [ 259.145003][ T9852] ? __pfx_ksys_unshare+0x10/0x10 [ 259.145034][ T9852] ? xfd_validate_state+0x61/0x180 [ 259.145071][ T9852] __x64_sys_unshare+0x31/0x40 [ 259.145100][ T9852] do_syscall_64+0xcd/0x490 [ 259.145131][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.145159][ T9852] RIP: 0033:0x7fa1e958ebe9 [ 259.145176][ T9852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.145198][ T9852] RSP: 002b:00007fa1ea373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 259.145220][ T9852] RAX: ffffffffffffffda RBX: 00007fa1e97b5fa0 RCX: 00007fa1e958ebe9 [ 259.145236][ T9852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 259.145249][ T9852] RBP: 00007fa1e9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 259.145263][ T9852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.145277][ T9852] R13: 00007fa1e97b6038 R14: 00007fa1e97b5fa0 R15: 00007fffd85f26a8 [ 259.145299][ T9852] [ 259.149196][ T9852] sysctl could not get directory: /net/ipv4 -12 [ 259.478799][ T9834] post_alloc_hook+0x1c0/0x230 [ 259.498844][ T9834] get_page_from_freelist+0x132b/0x38e0 [ 259.514136][ T9834] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 259.520826][ T9834] __alloc_pages_noprof+0xb/0x1b0 [ 259.527081][ T9834] __vmalloc_node_range_noprof+0x64d/0x14b0 [ 259.538038][ T9834] __vmalloc_node_noprof+0xad/0xf0 [ 259.547966][ T9834] copy_process+0x2c70/0x7690 [ 259.560834][ T9834] kernel_clone+0xfc/0x930 [ 259.569024][ T9834] kernel_thread+0xd4/0x120 [ 259.577954][ T9834] kthreadd+0x503/0x800 [ 259.588007][ T9834] ret_from_fork+0x5d4/0x6f0 [ 259.598097][ T9834] ret_from_fork_asm+0x1a/0x30 [ 259.606402][ T9834] page last free pid 2 tgid 2 stack trace: [ 259.612539][ T9834] __free_frozen_pages+0x7d5/0x10f0 [ 259.618931][ T9834] kasan_populate_vmalloc+0x18c/0x1f0 [ 259.624416][ T9834] alloc_vmap_area+0x959/0x29c0 [ 259.629483][ T9834] __get_vm_area_node+0x1ca/0x330 [ 259.634640][ T9834] __vmalloc_node_range_noprof+0x271/0x14b0 [ 259.640742][ T9834] __vmalloc_node_noprof+0xad/0xf0 [ 259.646096][ T9834] copy_process+0x2c70/0x7690 [ 259.650828][ T9834] kernel_clone+0xfc/0x930 [ 259.655435][ T9834] kernel_thread+0xd4/0x120 [ 259.669174][ T9834] kthreadd+0x503/0x800 [ 259.673569][ T9834] ret_from_fork+0x5d4/0x6f0 [ 259.678217][ T9834] ret_from_fork_asm+0x1a/0x30 [ 260.764794][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.772727][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.630335][ T9892] NFSD: Unable to initialize client recovery tracking! (-110) [ 262.639641][ T9892] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 262.683880][ T9892] NFSD: starting 90-second grace period (net f0000792) [ 263.679136][ T9936] mkiss: ax0: crc mode is auto. [ 265.711720][ T9991] nbd: socks must be embedded in a SOCK_ITEM attr [ 265.711832][ T9991] block nbd0: shutting down sockets [ 268.043564][T10060] nbd: socks must be embedded in a SOCK_ITEM attr [ 268.054243][T10055] zswap: compressor not available [ 268.090623][T10060] block nbd0: shutting down sockets [ 268.393902][T10075] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input14 [ 270.026859][T10125] netlink: 21 bytes leftover after parsing attributes in process `syz.4.821'. [ 270.110176][T10124] FAULT_INJECTION: forcing a failure. [ 270.110176][T10124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 270.335285][T10124] CPU: 1 UID: 0 PID: 10124 Comm: syz.3.822 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 270.335324][T10124] Tainted: [U]=USER [ 270.335332][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.335345][T10124] Call Trace: [ 270.335353][T10124] [ 270.335361][T10124] dump_stack_lvl+0x16c/0x1f0 [ 270.335394][T10124] should_fail_ex+0x512/0x640 [ 270.335428][T10124] should_fail_alloc_page+0xe7/0x130 [ 270.335462][T10124] prepare_alloc_pages+0x3c2/0x610 [ 270.335497][T10124] ? rcu_is_watching+0x12/0xc0 [ 270.335521][T10124] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 270.335551][T10124] ? rcu_is_watching+0x12/0xc0 [ 270.335574][T10124] ? trace_mm_page_alloc+0x11f/0x1a0 [ 270.335609][T10124] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 270.335637][T10124] ? stack_trace_save+0x8e/0xc0 [ 270.335669][T10124] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 270.335699][T10124] ? rcu_is_watching+0x12/0xc0 [ 270.335724][T10124] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 270.335751][T10124] ? __get_vm_area_node+0x1ca/0x330 [ 270.335785][T10124] ? __vmalloc_node_noprof+0xad/0xf0 [ 270.335805][T10124] ? pcpu_mem_zalloc+0x54/0xb0 [ 270.335826][T10124] ? pcpu_create_chunk+0x432/0x730 [ 270.335849][T10124] ? pcpu_alloc_noprof+0x11e3/0x1470 [ 270.335873][T10124] ? bpf_map_alloc_percpu+0x9a/0x4b0 [ 270.335902][T10124] ? htab_map_alloc+0x10ca/0x1570 [ 270.335921][T10124] ? map_create+0x592/0x1f80 [ 270.335956][T10124] alloc_pages_bulk_noprof+0x71c/0x1410 [ 270.335984][T10124] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.336031][T10124] ? policy_nodemask+0xea/0x4e0 [ 270.336061][T10124] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 270.336098][T10124] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 270.336130][T10124] kasan_populate_vmalloc+0xf1/0x1f0 [ 270.336154][T10124] alloc_vmap_area+0x959/0x29c0 [ 270.336189][T10124] ? __pfx_alloc_vmap_area+0x10/0x10 [ 270.336221][T10124] __get_vm_area_node+0x1ca/0x330 [ 270.336255][T10124] __vmalloc_node_range_noprof+0x271/0x14b0 [ 270.336275][T10124] ? pcpu_mem_zalloc+0x54/0xb0 [ 270.336297][T10124] ? pcpu_mem_zalloc+0x54/0xb0 [ 270.336318][T10124] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 270.336342][T10124] ? pcpu_mem_zalloc+0x54/0xb0 [ 270.336361][T10124] __vmalloc_node_noprof+0xad/0xf0 [ 270.336379][T10124] ? pcpu_mem_zalloc+0x54/0xb0 [ 270.336398][T10124] pcpu_mem_zalloc+0x54/0xb0 [ 270.336417][T10124] pcpu_create_chunk+0x432/0x730 [ 270.336438][T10124] ? trace_irq_enable.constprop.0+0xc0/0x120 [ 270.336471][T10124] pcpu_alloc_noprof+0x11e3/0x1470 [ 270.336499][T10124] bpf_map_alloc_percpu+0x9a/0x4b0 [ 270.336527][T10124] htab_map_alloc+0x10ca/0x1570 [ 270.336547][T10124] ? ns_capable+0xd7/0x110 [ 270.336569][T10124] map_create+0x592/0x1f80 [ 270.336598][T10124] ? rcu_is_watching+0x12/0xc0 [ 270.336620][T10124] ? __pfx_map_create+0x10/0x10 [ 270.336646][T10124] ? __might_fault+0x13b/0x190 [ 270.336673][T10124] ? rcu_is_watching+0x12/0xc0 [ 270.336691][T10124] ? __might_fault+0xe3/0x190 [ 270.336713][T10124] ? lock_release+0x201/0x2f0 [ 270.336742][T10124] __sys_bpf+0x44d2/0x4de0 [ 270.336771][T10124] ? __pfx_futex_wake+0x10/0x10 [ 270.336804][T10124] ? __pfx___sys_bpf+0x10/0x10 [ 270.336833][T10124] ? rcu_is_watching+0x12/0xc0 [ 270.336852][T10124] ? lock_release+0x201/0x2f0 [ 270.336880][T10124] ? do_futex+0x122/0x350 [ 270.336904][T10124] ? __pfx_do_futex+0x10/0x10 [ 270.336934][T10124] ? xfd_validate_state+0x61/0x180 [ 270.336963][T10124] ? __pfx_do_writev+0x10/0x10 [ 270.336986][T10124] __x64_sys_bpf+0x78/0xc0 [ 270.337016][T10124] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 270.337047][T10124] do_syscall_64+0xcd/0x490 [ 270.337073][T10124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.337112][T10124] RIP: 0033:0x7fd52898ebe9 [ 270.337128][T10124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.337150][T10124] RSP: 002b:00007fd52982f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.337170][T10124] RAX: ffffffffffffffda RBX: 00007fd528bb5fa0 RCX: 00007fd52898ebe9 [ 270.337185][T10124] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 270.337199][T10124] RBP: 00007fd528a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 270.337213][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.337226][T10124] R13: 00007fd528bb6038 R14: 00007fd528bb5fa0 R15: 00007ffe51a24418 [ 270.337248][T10124] [ 270.772520][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.577487][T10131] vivid-003: ================= START STATUS ================= [ 272.605588][T10131] vivid-003: Radio HW Seek Mode: Bounded [ 272.646549][T10131] vivid-003: Radio Programmable HW Seek: false [ 272.782004][T10131] vivid-003: RDS Rx I/O Mode: Block I/O [ 272.787678][T10131] vivid-003: Generate RBDS Instead of RDS: false [ 273.060165][T10131] vivid-003: RDS Reception: true [ 273.197537][T10131] vivid-003: RDS Program Type: 0 inactive [ 273.424144][T10131] vivid-003: RDS PS Name: inactive [ 273.511206][T10131] vivid-003: RDS Radio Text: inactive [ 273.624028][T10131] vivid-003: RDS Traffic Announcement: false inactive [ 273.720001][T10131] vivid-003: RDS Traffic Program: false inactive [ 273.839380][T10131] vivid-003: RDS Music: false inactive [ 273.863407][T10131] vivid-003: ================== END STATUS ================== [ 276.319555][T10210] netlink: 268 bytes leftover after parsing attributes in process `syz.3.840'. [ 282.396774][T10318] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input15 [ 282.612372][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.863'. [ 282.641541][T10324] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 282.710681][T10322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.748472][T10322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.813332][T10322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.834063][T10322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.909635][T10325] FAULT_INJECTION: forcing a failure. [ 282.909635][T10325] name failslab, interval 1, probability 0, space 0, times 0 [ 282.998046][T10325] CPU: 1 UID: 0 PID: 10325 Comm: syz.4.863 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 282.998080][T10325] Tainted: [U]=USER [ 282.998087][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.998099][T10325] Call Trace: [ 282.998104][T10325] [ 282.998111][T10325] dump_stack_lvl+0x16c/0x1f0 [ 282.998140][T10325] should_fail_ex+0x512/0x640 [ 282.998170][T10325] should_failslab+0xc2/0x120 [ 282.998197][T10325] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 282.998224][T10325] ? sysctl_route_net_init+0x42/0x2c0 [ 282.998254][T10325] ? register_net_sysctl_sz+0x228/0x3e0 [ 282.998283][T10325] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 282.998313][T10325] kmemdup_noprof+0x29/0x60 [ 282.998337][T10325] sysctl_route_net_init+0x42/0x2c0 [ 282.998367][T10325] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 282.998397][T10325] ops_init+0x1e2/0x5f0 [ 282.998427][T10325] setup_net+0x10f/0x380 [ 282.998452][T10325] ? lockdep_init_map_type+0x5c/0x280 [ 282.998481][T10325] ? __pfx_setup_net+0x10/0x10 [ 282.998508][T10325] ? debug_mutex_init+0x37/0x70 [ 282.998528][T10325] copy_net_ns+0x2a6/0x5f0 [ 282.998558][T10325] create_new_namespaces+0x3ea/0xa90 [ 282.998583][T10325] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 282.998606][T10325] ksys_unshare+0x45b/0xa40 [ 282.998633][T10325] ? __pfx_ksys_unshare+0x10/0x10 [ 282.998660][T10325] ? xfd_validate_state+0x61/0x180 [ 282.998699][T10325] __x64_sys_unshare+0x31/0x40 [ 282.998727][T10325] do_syscall_64+0xcd/0x490 [ 282.998754][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.998774][T10325] RIP: 0033:0x7f6c26d8ebe9 [ 282.998789][T10325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.998809][T10325] RSP: 002b:00007f6c24ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 282.998827][T10325] RAX: ffffffffffffffda RBX: 00007f6c26fb6180 RCX: 00007f6c26d8ebe9 [ 282.998869][T10325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 282.998881][T10325] RBP: 00007f6c26e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 282.998893][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.998905][T10325] R13: 00007f6c26fb6218 R14: 00007f6c26fb6180 R15: 00007fff44cad538 [ 282.998924][T10325] [ 283.929954][ T30] audit: type=1326 audit(1755355953.235:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.868" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd52898ebe9 code=0x0 [ 283.985636][T10344] input: f as /devices/virtual/input/input16 [ 285.767700][T10379] FAULT_INJECTION: forcing a failure. [ 285.767700][T10379] name failslab, interval 1, probability 0, space 0, times 0 [ 285.872848][T10379] CPU: 1 UID: 0 PID: 10379 Comm: syz.3.876 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 285.872888][T10379] Tainted: [U]=USER [ 285.872896][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.872910][T10379] Call Trace: [ 285.872917][T10379] [ 285.872925][T10379] dump_stack_lvl+0x16c/0x1f0 [ 285.872958][T10379] should_fail_ex+0x512/0x640 [ 285.872993][T10379] ? sk_prot_alloc+0x1a8/0x2a0 [ 285.873029][T10379] should_failslab+0xc2/0x120 [ 285.873062][T10379] __kmalloc_noprof+0xd2/0x510 [ 285.873093][T10379] sk_prot_alloc+0x1a8/0x2a0 [ 285.873130][T10379] sk_alloc+0x36/0xc20 [ 285.873157][T10379] __netlink_create+0x5e/0x2c0 [ 285.873181][T10379] ? __wake_up+0x3f/0x60 [ 285.873207][T10379] netlink_create+0x39e/0x620 [ 285.873235][T10379] ? __pfx_genl_bind+0x10/0x10 [ 285.873268][T10379] ? __pfx_genl_unbind+0x10/0x10 [ 285.873301][T10379] ? __pfx_genl_release+0x10/0x10 [ 285.873338][T10379] __sock_create+0x335/0x8d0 [ 285.873362][T10379] __sys_socket+0x14d/0x260 [ 285.873384][T10379] ? __pfx___sys_socket+0x10/0x10 [ 285.873406][T10379] ? xfd_validate_state+0x61/0x180 [ 285.873445][T10379] __x64_sys_socket+0x72/0xb0 [ 285.873481][T10379] do_syscall_64+0xcd/0x490 [ 285.873525][T10379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.873548][T10379] RIP: 0033:0x7fd52898ebe9 [ 285.873564][T10379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.873587][T10379] RSP: 002b:00007fd52982f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 285.873608][T10379] RAX: ffffffffffffffda RBX: 00007fd528bb5fa0 RCX: 00007fd52898ebe9 [ 285.873623][T10379] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 285.873636][T10379] RBP: 00007fd528a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 285.873650][T10379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.873663][T10379] R13: 00007fd528bb6038 R14: 00007fd528bb5fa0 R15: 00007ffe51a24418 [ 285.873684][T10379] [ 286.691251][T10389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.878'. [ 286.730409][T10389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.756451][T10389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.852944][T10389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.932459][T10389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.470593][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.882'. [ 288.742995][T10436] futex_wake_op: syz.3.888 tries to shift op by -2048; fix this program [ 288.871616][T10436] futex_wake_op: syz.3.888 tries to shift op by -2048; fix this program [ 289.520072][T10442] FAULT_INJECTION: forcing a failure. [ 289.520072][T10442] name fail_futex, interval 1, probability 0, space 0, times 0 [ 289.583145][T10442] CPU: 1 UID: 0 PID: 10442 Comm: syz.2.890 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 289.583184][T10442] Tainted: [U]=USER [ 289.583191][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.583204][T10442] Call Trace: [ 289.583211][T10442] [ 289.583219][T10442] dump_stack_lvl+0x16c/0x1f0 [ 289.583262][T10442] should_fail_ex+0x512/0x640 [ 289.583295][T10442] get_futex_key+0x1d0/0x1560 [ 289.583325][T10442] ? __pfx_get_futex_key+0x10/0x10 [ 289.583351][T10442] ? __mutex_trylock_common+0xe9/0x250 [ 289.583384][T10442] ? __pfx___mutex_trylock_common+0x10/0x10 [ 289.583418][T10442] futex_wake+0xea/0x530 [ 289.583465][T10442] ? __pfx_futex_wake+0x10/0x10 [ 289.583512][T10442] ? __mutex_unlock_slowpath+0x163/0x800 [ 289.583541][T10442] do_futex+0x1e3/0x350 [ 289.583566][T10442] ? __pfx_do_futex+0x10/0x10 [ 289.583591][T10442] ? lock_release+0x201/0x2f0 [ 289.583619][T10442] mm_release+0x24e/0x300 [ 289.583641][T10442] do_exit+0x68e/0x2bf0 [ 289.583672][T10442] ? __pfx_do_exit+0x10/0x10 [ 289.583699][T10442] ? do_raw_spin_lock+0x12c/0x2b0 [ 289.583730][T10442] ? get_signal+0x8f5/0x26d0 [ 289.583752][T10442] ? rcu_is_watching+0x12/0xc0 [ 289.583773][T10442] do_group_exit+0xd3/0x2a0 [ 289.583803][T10442] get_signal+0x2673/0x26d0 [ 289.583826][T10442] ? rcu_is_watching+0x12/0xc0 [ 289.583848][T10442] ? __pfx_get_signal+0x10/0x10 [ 289.583870][T10442] ? do_futex+0x122/0x350 [ 289.583894][T10442] ? __pfx_do_futex+0x10/0x10 [ 289.583920][T10442] arch_do_signal_or_restart+0x8f/0x790 [ 289.583947][T10442] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 289.583977][T10442] ? xfd_validate_state+0x61/0x180 [ 289.584006][T10442] ? __pfx_do_writev+0x10/0x10 [ 289.584031][T10442] exit_to_user_mode_loop+0x84/0x110 [ 289.584061][T10442] do_syscall_64+0x3f6/0x490 [ 289.584088][T10442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.584109][T10442] RIP: 0033:0x7fcde678ebe9 [ 289.584123][T10442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.584143][T10442] RSP: 002b:00007fcde766a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 289.584161][T10442] RAX: fffffffffffffe00 RBX: 00007fcde69b6188 RCX: 00007fcde678ebe9 [ 289.584175][T10442] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcde69b6188 [ 289.584187][T10442] RBP: 00007fcde69b6180 R08: 0000000000000000 R09: 0000000000000000 [ 289.584199][T10442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.584211][T10442] R13: 00007fcde69b6218 R14: 00007ffef46c2170 R15: 00007ffef46c2258 [ 289.584230][T10442] [ 289.849720][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.493527][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 291.276146][T10497] dyndbg: expected <4096 bytes into control [ 291.423212][T10498] bond0: option primary_reselect: invalid value () [ 291.564226][T10508] FAULT_INJECTION: forcing a failure. [ 291.564226][T10508] name failslab, interval 1, probability 0, space 0, times 0 [ 291.769438][T10508] CPU: 1 UID: 0 PID: 10508 Comm: syz.0.906 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 291.769476][T10508] Tainted: [U]=USER [ 291.769482][T10508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.769495][T10508] Call Trace: [ 291.769501][T10508] [ 291.769509][T10508] dump_stack_lvl+0x16c/0x1f0 [ 291.769539][T10508] should_fail_ex+0x512/0x640 [ 291.769571][T10508] should_failslab+0xc2/0x120 [ 291.769600][T10508] __kmalloc_cache_noprof+0x6a/0x3e0 [ 291.769622][T10508] ? lock_release+0x201/0x2f0 [ 291.769648][T10508] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0x3e6/0x580 [ 291.769684][T10508] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0xa4/0x580 [ 291.769721][T10508] snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0xa4/0x580 [ 291.769759][T10508] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 291.769792][T10508] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 291.769827][T10508] ? snd_mixer_oss_ioctl1+0x742/0x1e40 [ 291.769859][T10508] snd_mixer_oss_ioctl1+0x18f1/0x1e40 [ 291.769888][T10508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.769921][T10508] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 291.769958][T10508] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 291.769987][T10508] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 291.770024][T10508] ? rcu_is_watching+0x12/0xc0 [ 291.770046][T10508] ? __fget_files+0x204/0x3c0 [ 291.770067][T10508] ? hook_file_ioctl_common+0x145/0x410 [ 291.770117][T10508] ? __fget_files+0x20e/0x3c0 [ 291.770141][T10508] snd_mixer_oss_ioctl+0x3e/0x50 [ 291.770189][T10508] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 291.770222][T10508] __x64_sys_ioctl+0x18e/0x210 [ 291.770259][T10508] do_syscall_64+0xcd/0x490 [ 291.770289][T10508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.770312][T10508] RIP: 0033:0x7fa1e958ebe9 [ 291.770328][T10508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.770350][T10508] RSP: 002b:00007fa1ea352038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.770371][T10508] RAX: ffffffffffffffda RBX: 00007fa1e97b6090 RCX: 00007fa1e958ebe9 [ 291.770386][T10508] RDX: 00002000000012c0 RSI: 0000000080044dff RDI: 0000000000000007 [ 291.770400][T10508] RBP: 00007fa1e9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 291.770414][T10508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.770427][T10508] R13: 00007fa1e97b6128 R14: 00007fa1e97b6090 R15: 00007fffd85f26a8 [ 291.770448][T10508] [ 292.017212][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.363594][T10504] FAULT_INJECTION: forcing a failure. [ 292.363594][T10504] name failslab, interval 1, probability 0, space 0, times 0 [ 292.418226][T10509] tipc: Started in network mode [ 292.425569][T10509] tipc: Node identity ee00, cluster identity 4711 [ 292.432434][T10504] CPU: 1 UID: 0 PID: 10504 Comm: syz.0.906 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 292.432472][T10504] Tainted: [U]=USER [ 292.432479][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.432493][T10504] Call Trace: [ 292.432500][T10504] [ 292.432508][T10504] dump_stack_lvl+0x16c/0x1f0 [ 292.432540][T10504] should_fail_ex+0x512/0x640 [ 292.432576][T10504] should_failslab+0xc2/0x120 [ 292.432609][T10504] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 292.432637][T10504] ? alloc_empty_file+0x55/0x1e0 [ 292.432674][T10504] alloc_empty_file+0x55/0x1e0 [ 292.432710][T10504] path_openat+0xda/0x2cb0 [ 292.432735][T10504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.432765][T10504] ? __pfx_path_openat+0x10/0x10 [ 292.432795][T10504] do_filp_open+0x20b/0x470 [ 292.432823][T10504] ? __pfx_do_filp_open+0x10/0x10 [ 292.432860][T10504] ? alloc_fd+0x471/0x7d0 [ 292.432888][T10504] do_sys_openat2+0x11b/0x1d0 [ 292.432925][T10504] ? __pfx_do_sys_openat2+0x10/0x10 [ 292.432967][T10504] __x64_sys_openat+0x174/0x210 [ 292.433005][T10504] ? __pfx___x64_sys_openat+0x10/0x10 [ 292.433048][T10504] do_syscall_64+0xcd/0x490 [ 292.433080][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.433103][T10504] RIP: 0033:0x7fa1e958ebe9 [ 292.433120][T10504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.433153][T10504] RSP: 002b:00007fa1ea373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 292.433175][T10504] RAX: ffffffffffffffda RBX: 00007fa1e97b5fa0 RCX: 00007fa1e958ebe9 [ 292.433190][T10504] RDX: 000000000000a001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 292.433205][T10504] RBP: 00007fa1e9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 292.433219][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.433233][T10504] R13: 00007fa1e97b6038 R14: 00007fa1e97b5fa0 R15: 00007fffd85f26a8 [ 292.433255][T10504] [ 292.433291][T10509] tipc: Node number set to 60928 [ 292.832423][T10503] delete_channel: no stack [ 293.028451][ T6141] Bluetooth: hci2: Malformed LE Event: 0x1d [ 293.036588][T10539] syz.2.913 (10539): /proc/10538/oom_adj is deprecated, please use /proc/10538/oom_score_adj instead. [ 293.832198][T10559] FAULT_INJECTION: forcing a failure. [ 293.832198][T10559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.994635][T10559] CPU: 1 UID: 0 PID: 10559 Comm: syz.4.919 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 293.994668][T10559] Tainted: [U]=USER [ 293.994675][T10559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.994686][T10559] Call Trace: [ 293.994691][T10559] [ 293.994698][T10559] dump_stack_lvl+0x16c/0x1f0 [ 293.994726][T10559] should_fail_ex+0x512/0x640 [ 293.994755][T10559] _copy_to_user+0x32/0xd0 [ 293.994773][T10559] simple_read_from_buffer+0xcb/0x170 [ 293.994792][T10559] proc_fail_nth_read+0x197/0x240 [ 293.994813][T10559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.994832][T10559] ? security_file_permission+0x71/0x210 [ 293.994860][T10559] ? rw_verify_area+0xcf/0x6c0 [ 293.994879][T10559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.994899][T10559] vfs_read+0x1e4/0xcf0 [ 293.994921][T10559] ? __pfx___mutex_lock+0x10/0x10 [ 293.994954][T10559] ? __pfx_vfs_read+0x10/0x10 [ 293.994974][T10559] ? __fget_files+0x204/0x3c0 [ 293.994994][T10559] ? rcu_is_watching+0x12/0xc0 [ 293.995016][T10559] ? __fget_files+0x20e/0x3c0 [ 293.995040][T10559] ksys_read+0x12a/0x250 [ 293.995061][T10559] ? __pfx_ksys_read+0x10/0x10 [ 293.995085][T10559] do_syscall_64+0xcd/0x490 [ 293.995112][T10559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.995131][T10559] RIP: 0033:0x7f6c26d8d5fc [ 293.995149][T10559] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 293.995168][T10559] RSP: 002b:00007f6c27b10030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 293.995186][T10559] RAX: ffffffffffffffda RBX: 00007f6c26fb6090 RCX: 00007f6c26d8d5fc [ 293.995199][T10559] RDX: 000000000000000f RSI: 00007f6c27b100a0 RDI: 000000000000000a [ 293.995211][T10559] RBP: 00007f6c27b10090 R08: 0000000000000000 R09: 0000000000000000 [ 293.995223][T10559] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 293.995234][T10559] R13: 00007f6c26fb6128 R14: 00007f6c26fb6090 R15: 00007fff44cad538 [ 293.995253][T10559] [ 294.201707][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.805840][T10596] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 295.930169][T10622] FAULT_INJECTION: forcing a failure. [ 295.930169][T10622] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.930206][T10622] CPU: 1 UID: 0 PID: 10622 Comm: syz.4.931 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 295.930239][T10622] Tainted: [U]=USER [ 295.930246][T10622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.930259][T10622] Call Trace: [ 295.930265][T10622] [ 295.930272][T10622] dump_stack_lvl+0x16c/0x1f0 [ 295.930302][T10622] should_fail_ex+0x512/0x640 [ 295.930335][T10622] should_fail_alloc_page+0xe7/0x130 [ 295.930366][T10622] prepare_alloc_pages+0x3c2/0x610 [ 295.930400][T10622] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 295.930432][T10622] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 295.930467][T10622] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.930500][T10622] ? policy_nodemask+0xea/0x4e0 [ 295.930528][T10622] alloc_pages_mpol+0x1fb/0x550 [ 295.930556][T10622] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 295.930588][T10622] folio_alloc_mpol_noprof+0x36/0x2f0 [ 295.930621][T10622] shmem_alloc_folio+0x135/0x160 [ 295.930655][T10622] shmem_alloc_and_add_folio+0x499/0xc20 [ 295.930681][T10622] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 295.930706][T10622] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 295.930733][T10622] shmem_get_folio_gfp+0x67f/0x1600 [ 295.930759][T10622] ? rcu_is_watching+0x12/0xc0 [ 295.930780][T10622] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 295.930806][T10622] ? filemap_map_pages+0xf58/0x1670 [ 295.930839][T10622] shmem_fault+0x1fe/0xa30 [ 295.930863][T10622] ? __pfx_shmem_fault+0x10/0x10 [ 295.930886][T10622] ? __kernel_text_address+0xd/0x40 [ 295.930907][T10622] ? __pfx_filemap_map_pages+0x10/0x10 [ 295.930932][T10622] ? rcu_is_watching+0x12/0xc0 [ 295.930955][T10622] ? __pfx_filemap_map_pages+0x10/0x10 [ 295.930980][T10622] __do_fault+0x10d/0x490 [ 295.931006][T10622] ? __pfx_filemap_map_pages+0x10/0x10 [ 295.931031][T10622] do_pte_missing+0xf50/0x3ba0 [ 295.931063][T10622] ? __handle_mm_fault+0x14fd/0x2a50 [ 295.931082][T10622] ? rcu_is_watching+0x12/0xc0 [ 295.931102][T10622] ? lock_release+0x201/0x2f0 [ 295.931129][T10622] __handle_mm_fault+0x152a/0x2a50 [ 295.931151][T10622] ? mt_find+0x3ef/0xa30 [ 295.931178][T10622] ? __pfx___handle_mm_fault+0x10/0x10 [ 295.931198][T10622] ? __pfx_mt_find+0x10/0x10 [ 295.931224][T10622] ? prep_compound_page+0x265/0x4e0 [ 295.931251][T10622] ? find_vma+0xbf/0x140 [ 295.931277][T10622] ? __pfx_find_vma+0x10/0x10 [ 295.931305][T10622] handle_mm_fault+0x589/0xd10 [ 295.931325][T10622] ? __bpf_trace_exceptions+0x1/0x40 [ 295.931356][T10622] do_user_addr_fault+0x7a6/0x1370 [ 295.931390][T10622] ? rcu_is_watching+0x12/0xc0 [ 295.931411][T10622] exc_page_fault+0x5c/0xb0 [ 295.931434][T10622] asm_exc_page_fault+0x26/0x30 [ 295.931454][T10622] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 295.931474][T10622] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 295.931495][T10622] RSP: 0018:ffffc900030a7428 EFLAGS: 00050206 [ 295.931511][T10622] RAX: 0000000000000001 RBX: 0000000000008000 RCX: 0000000000007000 [ 295.931524][T10622] RDX: 0000000000000000 RSI: 0000000000001000 RDI: ffff888055a39000 [ 295.931537][T10622] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100ab47fff [ 295.931549][T10622] R10: ffff888055a3ffff R11: 0000000000000000 R12: ffffc900030a7c58 [ 295.931562][T10622] R13: 0000000000008000 R14: ffff888055a38000 R15: 00007ffffffff000 [ 295.931581][T10622] _copy_from_iter+0x383/0x16f0 [ 295.931614][T10622] ? policy_nodemask+0xea/0x4e0 [ 295.931641][T10622] ? __pfx__copy_from_iter+0x10/0x10 [ 295.931672][T10622] ? alloc_pages_mpol+0x25a/0x550 [ 295.931698][T10622] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 295.931728][T10622] ip_generic_getfrag+0xf7/0x270 [ 295.931756][T10622] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 295.931784][T10622] ? sk_page_frag_refill+0x6c/0x300 [ 295.931806][T10622] __ip_append_data+0x13fa/0x41c0 [ 295.931842][T10622] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 295.931872][T10622] ? ip_dst_mtu_maybe_forward.constprop.0+0x314/0x6e0 [ 295.931907][T10622] ? __pfx___ip_append_data+0x10/0x10 [ 295.931937][T10622] ip_make_skb+0x27f/0x300 [ 295.931967][T10622] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 295.931994][T10622] ? __pfx_ip_make_skb+0x10/0x10 [ 295.932025][T10622] ? lock_release+0x201/0x2f0 [ 295.932053][T10622] ? udp_sendmsg+0x17d7/0x2870 [ 295.932079][T10622] udp_sendmsg+0x17d7/0x2870 [ 295.932108][T10622] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 295.932136][T10622] ? __pfx_udp_sendmsg+0x10/0x10 [ 295.932169][T10622] ? rcu_is_watching+0x12/0xc0 [ 295.932197][T10622] ? __pfx_udp_sendmsg+0x10/0x10 [ 295.932224][T10622] inet_sendmsg+0x105/0x140 [ 295.932243][T10622] sock_write_iter+0x4aa/0x5b0 [ 295.932294][T10622] ? __pfx_sock_write_iter+0x10/0x10 [ 295.932335][T10622] ? bpf_lsm_file_permission+0x9/0x10 [ 295.932370][T10622] ? security_file_permission+0x71/0x210 [ 295.932403][T10622] ? rw_verify_area+0xcf/0x6c0 [ 295.932426][T10622] vfs_write+0x7d0/0x11d0 [ 295.932452][T10622] ? __pfx_sock_write_iter+0x10/0x10 [ 295.932491][T10622] ? __pfx_vfs_write+0x10/0x10 [ 295.932518][T10622] ? lock_release+0x201/0x2f0 [ 295.932555][T10622] ksys_write+0x1f8/0x250 [ 295.932581][T10622] ? __pfx_ksys_write+0x10/0x10 [ 295.932612][T10622] do_syscall_64+0xcd/0x490 [ 295.932644][T10622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.932667][T10622] RIP: 0033:0x7f6c26d8ebe9 [ 295.932683][T10622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.932706][T10622] RSP: 002b:00007f6c27b10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.932726][T10622] RAX: ffffffffffffffda RBX: 00007f6c26fb6090 RCX: 00007f6c26d8ebe9 [ 295.932742][T10622] RDX: 000000000000fdf3 RSI: 0000000000000000 RDI: 0000000000000003 [ 295.932756][T10622] RBP: 00007f6c26e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 295.932770][T10622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.932784][T10622] R13: 00007f6c26fb6128 R14: 00007f6c26fb6090 R15: 00007fff44cad538 [ 295.932806][T10622] [ 301.044882][T10708] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 301.906966][T10727] ptrace attach of "./syz-executor exec"[5855] was attempted by ""[10727] [ 301.970466][T10725] FAULT_INJECTION: forcing a failure. [ 301.970466][T10725] name fail_futex, interval 1, probability 0, space 0, times 0 [ 302.013091][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.951'. [ 302.030870][T10725] CPU: 1 UID: 0 PID: 10725 Comm: syz.0.950 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 302.030908][T10725] Tainted: [U]=USER [ 302.030915][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.030928][T10725] Call Trace: [ 302.030935][T10725] [ 302.030942][T10725] dump_stack_lvl+0x16c/0x1f0 [ 302.030974][T10725] should_fail_ex+0x512/0x640 [ 302.031007][T10725] get_futex_key+0x1d0/0x1560 [ 302.031034][T10725] ? kvm_sched_clock_read+0x11/0x20 [ 302.031060][T10725] ? __pfx_get_futex_key+0x10/0x10 [ 302.031084][T10725] ? sched_clock_cpu+0x6c/0x530 [ 302.031111][T10725] ? __pick_eevdf+0x30a/0x670 [ 302.031139][T10725] futex_wait_setup+0x9d/0x550 [ 302.031175][T10725] __futex_wait+0x194/0x2f0 [ 302.031208][T10725] ? __pfx___futex_wait+0x10/0x10 [ 302.031241][T10725] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 302.031277][T10725] ? __pfx_futex_wake_mark+0x10/0x10 [ 302.031312][T10725] ? lock_release+0x201/0x2f0 [ 302.031343][T10725] ? futex_private_hash_put+0x11c/0x300 [ 302.031388][T10725] futex_wait+0xe8/0x380 [ 302.031436][T10725] ? __pfx_futex_wait+0x10/0x10 [ 302.031474][T10725] ? task_mm_cid_work+0x704/0x900 [ 302.031495][T10725] ? rcu_is_watching+0x12/0xc0 [ 302.031530][T10725] ? lock_release+0x201/0x2f0 [ 302.031561][T10725] do_futex+0x229/0x350 [ 302.031587][T10725] ? __pfx_do_futex+0x10/0x10 [ 302.031617][T10725] __x64_sys_futex+0x1e0/0x4c0 [ 302.031645][T10725] ? __pfx___x64_sys_open_tree_attr+0x10/0x10 [ 302.031677][T10725] ? __pfx___x64_sys_futex+0x10/0x10 [ 302.031705][T10725] ? xfd_validate_state+0x61/0x180 [ 302.031737][T10725] ? up_write+0x1b2/0x520 [ 302.031770][T10725] do_syscall_64+0xcd/0x490 [ 302.031801][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.031823][T10725] RIP: 0033:0x7fa1e958ebe9 [ 302.031840][T10725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.031861][T10725] RSP: 002b:00007fa1ea3520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 302.031882][T10725] RAX: ffffffffffffffda RBX: 00007fa1e97b6098 RCX: 00007fa1e958ebe9 [ 302.031896][T10725] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa1e97b6098 [ 302.031910][T10725] RBP: 00007fa1e97b6090 R08: 0000000000000000 R09: 0000000000000000 [ 302.031923][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.031936][T10725] R13: 00007fa1e97b6128 R14: 00007fffd85f25c0 R15: 00007fffd85f26a8 [ 302.031956][T10725] [ 302.286250][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.281541][T10744] netlink: 'syz.0.956': attribute type 2 has an invalid length. [ 303.322064][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 304.120746][T10773] nbd: socks must be embedded in a SOCK_ITEM attr [ 304.182480][T10773] block nbd0: shutting down sockets [ 304.873010][T10782] FAULT_INJECTION: forcing a failure. [ 304.873010][T10782] name failslab, interval 1, probability 0, space 0, times 0 [ 304.914538][T10789] FAULT_INJECTION: forcing a failure. [ 304.914538][T10789] name fail_futex, interval 1, probability 0, space 0, times 0 [ 304.942722][T10782] CPU: 1 UID: 0 PID: 10782 Comm: syz.0.970 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 304.942765][T10782] Tainted: [U]=USER [ 304.942773][T10782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.942787][T10782] Call Trace: [ 304.942794][T10782] [ 304.942802][T10782] dump_stack_lvl+0x16c/0x1f0 [ 304.942841][T10782] should_fail_ex+0x512/0x640 [ 304.942883][T10782] should_failslab+0xc2/0x120 [ 304.942914][T10782] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 304.942945][T10782] ? lock_release+0x201/0x2f0 [ 304.942976][T10782] ? proc_alloc_inode+0x25/0x200 [ 304.943007][T10782] ? __pfx_proc_alloc_inode+0x10/0x10 [ 304.943037][T10782] proc_alloc_inode+0x25/0x200 [ 304.943067][T10782] alloc_inode+0x61/0x240 [ 304.943101][T10782] new_inode+0x22/0x1c0 [ 304.943135][T10782] proc_pid_make_inode+0x22/0x160 [ 304.943165][T10782] proc_pident_instantiate+0x85/0x310 [ 304.943196][T10782] proc_pident_lookup+0x1f5/0x270 [ 304.943241][T10782] __lookup_slow+0x251/0x460 [ 304.943279][T10782] ? __pfx___lookup_slow+0x10/0x10 [ 304.943324][T10782] ? lookup_fast+0x156/0x610 [ 304.943348][T10782] walk_component+0x353/0x5b0 [ 304.943372][T10782] link_path_walk+0x627/0xe20 [ 304.943400][T10782] path_openat+0x1b0/0x2cb0 [ 304.943425][T10782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.943454][T10782] ? __pfx_path_openat+0x10/0x10 [ 304.943484][T10782] do_filp_open+0x20b/0x470 [ 304.943523][T10782] ? __pfx_do_filp_open+0x10/0x10 [ 304.943555][T10782] ? __pfx_kfree_link+0x10/0x10 [ 304.943594][T10782] ? alloc_fd+0x471/0x7d0 [ 304.943621][T10782] do_sys_openat2+0x11b/0x1d0 [ 304.943657][T10782] ? __pfx_do_sys_openat2+0x10/0x10 [ 304.943693][T10782] ? __pfx___might_resched+0x10/0x10 [ 304.943720][T10782] __x64_sys_openat+0x174/0x210 [ 304.943757][T10782] ? __pfx___x64_sys_openat+0x10/0x10 [ 304.943799][T10782] do_syscall_64+0xcd/0x490 [ 304.943830][T10782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.943853][T10782] RIP: 0033:0x7fa1e958ebe9 [ 304.943870][T10782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.943893][T10782] RSP: 002b:00007fa1ea373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 304.943915][T10782] RAX: ffffffffffffffda RBX: 00007fa1e97b5fa0 RCX: 00007fa1e958ebe9 [ 304.943930][T10782] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 304.943945][T10782] RBP: 00007fa1e9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 304.943959][T10782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.943973][T10782] R13: 00007fa1e97b6038 R14: 00007fa1e97b5fa0 R15: 00007fffd85f26a8 [ 304.943994][T10782] [ 305.280508][T10789] CPU: 1 UID: 0 PID: 10789 Comm: syz.2.963 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 305.280544][T10789] Tainted: [U]=USER [ 305.280551][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.280563][T10789] Call Trace: [ 305.280570][T10789] [ 305.280577][T10789] dump_stack_lvl+0x16c/0x1f0 [ 305.280607][T10789] should_fail_ex+0x512/0x640 [ 305.280638][T10789] get_futex_key+0x1d0/0x1560 [ 305.280664][T10789] ? kvm_sched_clock_read+0x11/0x20 [ 305.280688][T10789] ? __pfx_get_futex_key+0x10/0x10 [ 305.280711][T10789] ? sched_clock_cpu+0x6c/0x530 [ 305.280737][T10789] ? __pick_eevdf+0x30a/0x670 [ 305.280763][T10789] futex_wait_setup+0x9d/0x550 [ 305.280798][T10789] __futex_wait+0x194/0x2f0 [ 305.280829][T10789] ? __pfx___futex_wait+0x10/0x10 [ 305.280860][T10789] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 305.280894][T10789] ? __pfx_futex_wake_mark+0x10/0x10 [ 305.280927][T10789] ? lock_release+0x201/0x2f0 [ 305.280955][T10789] ? futex_private_hash_put+0x11c/0x300 [ 305.280980][T10789] futex_wait+0xe8/0x380 [ 305.281010][T10789] ? __pfx_futex_wait+0x10/0x10 [ 305.281043][T10789] ? task_mm_cid_work+0x704/0x900 [ 305.281061][T10789] ? rcu_is_watching+0x12/0xc0 [ 305.281081][T10789] ? lock_release+0x201/0x2f0 [ 305.281110][T10789] do_futex+0x229/0x350 [ 305.281136][T10789] ? __pfx_do_futex+0x10/0x10 [ 305.281165][T10789] __x64_sys_futex+0x1e0/0x4c0 [ 305.281191][T10789] ? __pfx___x64_sys_open_tree_attr+0x10/0x10 [ 305.281234][T10789] ? __pfx___x64_sys_futex+0x10/0x10 [ 305.281261][T10789] ? xfd_validate_state+0x61/0x180 [ 305.281292][T10789] ? up_write+0x1b2/0x520 [ 305.281325][T10789] do_syscall_64+0xcd/0x490 [ 305.281354][T10789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.281376][T10789] RIP: 0033:0x7fcde678ebe9 [ 305.281392][T10789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.281413][T10789] RSP: 002b:00007fcde768b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 305.281456][T10789] RAX: ffffffffffffffda RBX: 00007fcde69b6098 RCX: 00007fcde678ebe9 [ 305.281471][T10789] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcde69b6098 [ 305.281484][T10789] RBP: 00007fcde69b6090 R08: 0000000000000000 R09: 0000000000000000 [ 305.281510][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.281522][T10789] R13: 00007fcde69b6128 R14: 00007ffef46c2170 R15: 00007ffef46c2258 [ 305.281541][T10789] [ 306.198540][T10802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.967'. [ 306.228288][T10802] bridge_slave_1: left allmulticast mode [ 306.255192][T10802] bridge_slave_1: left promiscuous mode [ 306.278374][T10802] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.466851][T10802] bridge_slave_0: left allmulticast mode [ 306.479559][T10802] bridge_slave_0: left promiscuous mode [ 306.496344][T10808] can: request_module (can-proto-3) failed. [ 306.510439][T10802] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.765964][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.968'. [ 306.797005][T10818] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 306.848162][T10818] CPU: 1 UID: 0 PID: 10818 Comm: syz.2.968 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 306.848205][T10818] Tainted: [U]=USER [ 306.848212][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.848226][T10818] Call Trace: [ 306.848233][T10818] [ 306.848240][T10818] dump_stack_lvl+0x16c/0x1f0 [ 306.848272][T10818] sysfs_warn_dup+0x7f/0xa0 [ 306.848298][T10818] sysfs_do_create_link_sd+0x124/0x140 [ 306.848327][T10818] sysfs_create_link+0x61/0xc0 [ 306.848352][T10818] device_add+0x62c/0x1aa0 [ 306.848373][T10818] ? __pfx_device_add+0x10/0x10 [ 306.848391][T10818] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.848425][T10818] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 306.848453][T10818] wiphy_register+0x1df4/0x29f0 [ 306.848482][T10818] ? netdev_run_todo+0x864/0x1320 [ 306.848513][T10818] ? __dev_printk+0x190/0x270 [ 306.848541][T10818] ? __pfx_wiphy_register+0x10/0x10 [ 306.848574][T10818] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 306.848605][T10818] ieee80211_register_hw+0x24a9/0x4060 [ 306.848640][T10818] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 306.848673][T10818] ? net_generic+0xea/0x2a0 [ 306.848703][T10818] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.848735][T10818] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 306.848763][T10818] ? __hrtimer_setup+0x176/0x280 [ 306.848797][T10818] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 306.848826][T10818] ? trace_kmalloc+0x2b/0xd0 [ 306.848856][T10818] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 306.848885][T10818] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 306.848906][T10818] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 306.848927][T10818] ? __asan_memcpy+0x3c/0x60 [ 306.848950][T10818] hwsim_new_radio_nl+0xb51/0x12c0 [ 306.848971][T10818] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 306.848996][T10818] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 306.849033][T10818] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 306.849088][T10818] genl_family_rcv_msg_doit+0x209/0x2f0 [ 306.849123][T10818] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 306.849179][T10818] ? bpf_lsm_capable+0x9/0x10 [ 306.849217][T10818] ? security_capable+0x7e/0x260 [ 306.849240][T10818] ? ns_capable+0xd7/0x110 [ 306.849265][T10818] genl_rcv_msg+0x55c/0x800 [ 306.849300][T10818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.849335][T10818] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 306.849361][T10818] netlink_rcv_skb+0x158/0x420 [ 306.849392][T10818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.849427][T10818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.849463][T10818] ? netlink_deliver_tap+0x1ae/0xd30 [ 306.849494][T10818] genl_rcv+0x28/0x40 [ 306.849525][T10818] netlink_unicast+0x5a7/0x870 [ 306.849557][T10818] ? __pfx_netlink_unicast+0x10/0x10 [ 306.849587][T10818] ? __pfx___might_resched+0x10/0x10 [ 306.849614][T10818] netlink_sendmsg+0x8d1/0xdd0 [ 306.849646][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.849678][T10818] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 306.849704][T10818] ____sys_sendmsg+0xa95/0xc70 [ 306.849741][T10818] ? copy_msghdr_from_user+0x10a/0x160 [ 306.849769][T10818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.849829][T10818] ? __pfx_futex_wake_mark+0x10/0x10 [ 306.849866][T10818] ___sys_sendmsg+0x134/0x1d0 [ 306.849896][T10818] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.849926][T10818] ? futex_private_hash_put+0x11c/0x300 [ 306.849958][T10818] ? rcu_is_watching+0x12/0xc0 [ 306.849993][T10818] __sys_sendmsg+0x16d/0x220 [ 306.850023][T10818] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.850052][T10818] ? __x64_sys_futex+0x1e0/0x4c0 [ 306.850089][T10818] do_syscall_64+0xcd/0x490 [ 306.850122][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.850146][T10818] RIP: 0033:0x7fcde678ebe9 [ 306.850165][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.850195][T10818] RSP: 002b:00007fcde76ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.850219][T10818] RAX: ffffffffffffffda RBX: 00007fcde69b5fa0 RCX: 00007fcde678ebe9 [ 306.850247][T10818] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 306.850261][T10818] RBP: 00007fcde6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 306.850275][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.850289][T10818] R13: 00007fcde69b6038 R14: 00007fcde69b5fa0 R15: 00007ffef46c2258 [ 306.850312][T10818] [ 307.872978][T10825] nbd: socks must be embedded in a SOCK_ITEM attr [ 307.911791][T10825] block nbd0: shutting down sockets [ 308.648220][T10846] Console: switching to colour VGA+ 80x25 [ 310.012555][T10879] binder: 10866:10879 ioctl c018620c 0 returned -1 [ 311.298195][T10907] program syz.0.986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.561786][T10922] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 312.337580][T10924] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 312.775892][T10947] FAULT_INJECTION: forcing a failure. [ 312.775892][T10947] name failslab, interval 1, probability 0, space 0, times 0 [ 312.917467][T10947] CPU: 1 UID: 0 PID: 10947 Comm: syz.4.994 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 312.917503][T10947] Tainted: [U]=USER [ 312.917510][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.917522][T10947] Call Trace: [ 312.917529][T10947] [ 312.917536][T10947] dump_stack_lvl+0x16c/0x1f0 [ 312.917566][T10947] should_fail_ex+0x512/0x640 [ 312.917598][T10947] should_failslab+0xc2/0x120 [ 312.917625][T10947] __kmalloc_cache_noprof+0x6a/0x3e0 [ 312.917645][T10947] ? snd_pcm_hw_param_first+0x30d/0x6f0 [ 312.917689][T10947] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 312.917723][T10947] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 312.917759][T10947] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 312.917795][T10947] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 312.917829][T10947] ? __asan_memset+0x23/0x50 [ 312.917847][T10947] ? calc_src_frames.isra.0+0x187/0x1d0 [ 312.917871][T10947] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 312.917911][T10947] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 312.917955][T10947] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 312.917991][T10947] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 312.918011][T10947] ? __fget_files+0x204/0x3c0 [ 312.918031][T10947] ? hook_file_ioctl_common+0x145/0x410 [ 312.918058][T10947] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 312.918078][T10947] ? __fget_files+0x20e/0x3c0 [ 312.918101][T10947] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 312.918121][T10947] __x64_sys_ioctl+0x18e/0x210 [ 312.918153][T10947] do_syscall_64+0xcd/0x490 [ 312.918180][T10947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.918200][T10947] RIP: 0033:0x7f6c26d8ebe9 [ 312.918215][T10947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.918236][T10947] RSP: 002b:00007f6c27b10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.918254][T10947] RAX: ffffffffffffffda RBX: 00007f6c26fb6090 RCX: 00007f6c26d8ebe9 [ 312.918267][T10947] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000009 [ 312.918279][T10947] RBP: 00007f6c26e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 312.918291][T10947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.918303][T10947] R13: 00007f6c26fb6128 R14: 00007f6c26fb6090 R15: 00007fff44cad538 [ 312.918322][T10947] [ 313.577281][T10964] netlink: 48 bytes leftover after parsing attributes in process `syz.2.996'. [ 314.692511][T10986] FAULT_INJECTION: forcing a failure. [ 314.692511][T10986] name fail_futex, interval 1, probability 0, space 0, times 0 [ 314.829202][T10986] CPU: 1 UID: 0 PID: 10986 Comm: syz.4.1001 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 314.829239][T10986] Tainted: [U]=USER [ 314.829246][T10986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.829258][T10986] Call Trace: [ 314.829264][T10986] [ 314.829271][T10986] dump_stack_lvl+0x16c/0x1f0 [ 314.829300][T10986] should_fail_ex+0x512/0x640 [ 314.829334][T10986] get_futex_key+0x1d0/0x1560 [ 314.829359][T10986] ? __set_cpus_allowed_ptr_locked+0x396/0x750 [ 314.829393][T10986] ? __pfx_get_futex_key+0x10/0x10 [ 314.829417][T10986] ? __set_cpus_allowed_ptr+0x179/0x230 [ 314.829449][T10986] ? __pfx___set_cpus_allowed_ptr+0x10/0x10 [ 314.829483][T10986] futex_wait_setup+0x9d/0x550 [ 314.829536][T10986] __futex_wait+0x194/0x2f0 [ 314.829579][T10986] ? __pfx___futex_wait+0x10/0x10 [ 314.829610][T10986] ? btf_put+0x10/0xf0 [ 314.829641][T10986] ? bpf_token_put+0xe/0x170 [ 314.829663][T10986] ? __pfx_futex_wake_mark+0x10/0x10 [ 314.829697][T10986] ? lock_release+0x201/0x2f0 [ 314.829726][T10986] ? futex_private_hash_put+0x11c/0x300 [ 314.829764][T10986] futex_wait+0xe8/0x380 [ 314.829793][T10986] ? __pfx_futex_wait+0x10/0x10 [ 314.829829][T10986] do_futex+0x229/0x350 [ 314.829853][T10986] ? __pfx_do_futex+0x10/0x10 [ 314.829881][T10986] __x64_sys_futex+0x1e0/0x4c0 [ 314.829906][T10986] ? __pfx___x64_sys_open_tree_attr+0x10/0x10 [ 314.829935][T10986] ? __pfx___mm_populate+0x10/0x10 [ 314.829966][T10986] ? __pfx___x64_sys_futex+0x10/0x10 [ 314.829992][T10986] ? xfd_validate_state+0x61/0x180 [ 314.830020][T10986] ? up_write+0x1b2/0x520 [ 314.830052][T10986] do_syscall_64+0xcd/0x490 [ 314.830078][T10986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.830098][T10986] RIP: 0033:0x7f6c26d8ebe9 [ 314.830113][T10986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.830132][T10986] RSP: 002b:00007f6c27b100e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 314.830151][T10986] RAX: ffffffffffffffda RBX: 00007f6c26fb6098 RCX: 00007f6c26d8ebe9 [ 314.830164][T10986] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6c26fb6098 [ 314.830177][T10986] RBP: 00007f6c26fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.830189][T10986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.830201][T10986] R13: 00007f6c26fb6128 R14: 00007fff44cad450 R15: 00007fff44cad538 [ 314.830220][T10986] [ 315.221354][T11003] random: crng reseeded on system resumption [ 315.233127][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.241876][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.338161][T10994] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 316.186534][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 318.916288][T11095] program syz.4.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.571437][T11113] tipc: Started in network mode [ 319.585972][T11113] tipc: Node identity ee00, cluster identity 4711 [ 319.618302][T11113] tipc: Node number set to 60928 [ 319.687415][T11111] Process accounting resumed [ 322.205548][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.212235][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.304157][T11159] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 322.363211][T11159] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 324.836367][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 325.101357][T11239] nbd: socks must be embedded in a SOCK_ITEM attr [ 325.138151][T11239] block nbd0: shutting down sockets [ 325.680821][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1043'. [ 325.742307][T11258] HfR: entered promiscuous mode [ 325.770868][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 325.896900][T11258] ovs_: entered promiscuous mode [ 326.250620][T11268] nbd: socks must be embedded in a SOCK_ITEM attr [ 326.301101][T11268] block nbd0: shutting down sockets [ 326.815390][T11286] ubi0: attaching mtd0 [ 326.862576][T11286] ubi0: scanning is finished [ 326.928983][T11286] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 327.259395][T11286] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 329.200957][T11349] ======================================================= [ 329.200957][T11349] WARNING: The mand mount option has been deprecated and [ 329.200957][T11349] and is ignored by this kernel. Remove the mand [ 329.200957][T11349] option from the mount to silence this warning. [ 329.200957][T11349] ======================================================= [ 330.689074][T11367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1066'. [ 331.745574][T11401] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078001dc0 pfn:0x78001 [ 331.903310][T11401] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 331.930126][T11401] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 332.029777][T11401] raw: ffff888078001dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 332.102694][T11401] page dumped because: unmovable page [ 332.152142][T11401] page_owner tracks the page as allocated [ 332.209278][T11401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 10642, tgid 10640 (syz.4.935), ts 298489389294, free_ts 295740862992 [ 332.359686][T11401] post_alloc_hook+0x1c0/0x230 [ 332.412069][T11401] get_page_from_freelist+0x132b/0x38e0 [ 332.453027][T11401] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 332.485274][T11401] alloc_pages_mpol+0x1fb/0x550 [ 332.530640][T11401] alloc_pages_noprof+0x131/0x390 [ 332.574980][T11401] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 332.609582][T11401] __vmalloc_node_noprof+0xad/0xf0 [ 332.632865][T11401] pcpu_mem_zalloc+0x54/0xb0 [ 332.656045][T11401] pcpu_create_chunk+0x432/0x730 [ 332.679697][T11401] pcpu_alloc_noprof+0x11e3/0x1470 [ 332.702470][T11401] bpf_map_alloc_percpu+0x9a/0x4b0 [ 332.728467][T11401] htab_map_alloc+0x10ca/0x1570 [ 332.748791][T11401] map_create+0x592/0x1f80 [ 332.770523][T11401] __sys_bpf+0x44d2/0x4de0 [ 332.794393][T11401] __x64_sys_bpf+0x78/0xc0 [ 332.815263][T11401] do_syscall_64+0xcd/0x490 [ 332.837496][T11401] page last free pid 6569 tgid 6569 stack trace: [ 332.868914][T11401] __free_frozen_pages+0x7d5/0x10f0 [ 332.894679][T11401] tlb_remove_table_rcu+0x116/0x1a0 [ 332.924129][T11401] rcu_core+0x799/0x1530 [ 332.944334][T11401] handle_softirqs+0x219/0x8e0 [ 332.964709][T11401] __irq_exit_rcu+0x109/0x170 [ 332.989948][T11401] irq_exit_rcu+0x9/0x30 [ 333.015293][T11401] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 333.040495][T11401] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.110479][T11413] nbd: socks must be embedded in a SOCK_ITEM attr [ 333.150356][T11413] block nbd0: shutting down sockets [ 334.540035][T11460] random: crng reseeded on system resumption [ 335.303552][T11483] nbd: socks must be embedded in a SOCK_ITEM attr [ 335.371721][T11483] block nbd0: shutting down sockets [ 336.562518][T11515] nbd: socks must be embedded in a SOCK_ITEM attr [ 336.578864][T11522] FAULT_INJECTION: forcing a failure. [ 336.578864][T11522] name failslab, interval 1, probability 0, space 0, times 0 [ 336.620473][T11515] block nbd0: shutting down sockets [ 336.635485][T11522] CPU: 1 UID: 0 PID: 11522 Comm: syz.0.1096 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 336.635520][T11522] Tainted: [U]=USER [ 336.635526][T11522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.635538][T11522] Call Trace: [ 336.635544][T11522] [ 336.635551][T11522] dump_stack_lvl+0x16c/0x1f0 [ 336.635580][T11522] should_fail_ex+0x512/0x640 [ 336.635610][T11522] should_failslab+0xc2/0x120 [ 336.635638][T11522] __kmalloc_cache_noprof+0x6a/0x3e0 [ 336.635659][T11522] ? lockdep_init_map_type+0x5c/0x280 [ 336.635686][T11522] ? snd_seq_prioq_new+0x3f/0x110 [ 336.635712][T11522] snd_seq_prioq_new+0x3f/0x110 [ 336.635735][T11522] snd_seq_queue_alloc+0x153/0x5a0 [ 336.635758][T11522] snd_seq_ioctl_create_queue+0xa9/0x380 [ 336.635787][T11522] snd_seq_kernel_client_ctl+0x10a/0x1c0 [ 336.635822][T11522] alloc_seq_queue+0xda/0x180 [ 336.635852][T11522] ? __pfx_alloc_seq_queue+0x10/0x10 [ 336.635888][T11522] ? snd_seq_oss_open+0x2d7/0xa20 [ 336.635917][T11522] ? rcu_is_watching+0x12/0xc0 [ 336.635937][T11522] ? rcu_is_watching+0x12/0xc0 [ 336.635958][T11522] snd_seq_oss_open+0x38c/0xa20 [ 336.635991][T11522] odev_open+0x6f/0x90 [ 336.636017][T11522] ? __pfx_odev_open+0x10/0x10 [ 336.636045][T11522] soundcore_open+0x409/0x580 [ 336.636079][T11522] ? __pfx_soundcore_open+0x10/0x10 [ 336.636106][T11522] chrdev_open+0x231/0x6a0 [ 336.636133][T11522] ? __pfx_apparmor_file_open+0x10/0x10 [ 336.636155][T11522] ? __pfx_chrdev_open+0x10/0x10 [ 336.636182][T11522] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 336.636207][T11522] do_dentry_open+0x97f/0x1530 [ 336.636231][T11522] ? __pfx_chrdev_open+0x10/0x10 [ 336.636259][T11522] vfs_open+0x82/0x3f0 [ 336.636289][T11522] path_openat+0x1de4/0x2cb0 [ 336.636316][T11522] ? __pfx_path_openat+0x10/0x10 [ 336.636342][T11522] do_filp_open+0x20b/0x470 [ 336.636365][T11522] ? __pfx_do_filp_open+0x10/0x10 [ 336.636396][T11522] ? alloc_fd+0x471/0x7d0 [ 336.636420][T11522] do_sys_openat2+0x11b/0x1d0 [ 336.636450][T11522] ? __pfx_do_sys_openat2+0x10/0x10 [ 336.636486][T11522] __x64_sys_openat+0x174/0x210 [ 336.636517][T11522] ? __pfx___x64_sys_openat+0x10/0x10 [ 336.636554][T11522] do_syscall_64+0xcd/0x490 [ 336.636582][T11522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.636602][T11522] RIP: 0033:0x7fa1e958ebe9 [ 336.636618][T11522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.636638][T11522] RSP: 002b:00007fa1ea373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 336.636656][T11522] RAX: ffffffffffffffda RBX: 00007fa1e97b5fa0 RCX: 00007fa1e958ebe9 [ 336.636670][T11522] RDX: 0000000000143900 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 336.636683][T11522] RBP: 00007fa1e9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 336.636695][T11522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.636707][T11522] R13: 00007fa1e97b6038 R14: 00007fa1e97b5fa0 R15: 00007fffd85f26a8 [ 336.636726][T11522] [ 338.761734][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'. [ 338.828989][T11568] nbd: socks must be embedded in a SOCK_ITEM attr [ 338.980545][T11568] block nbd0: shutting down sockets [ 338.997621][T11578] __vm_enough_memory: pid: 11578, comm: syz.4.1105, bytes: 4398046511104 not enough memory for the allocation [ 340.878654][T11625] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 341.315724][T11636] FAULT_INJECTION: forcing a failure. [ 341.315724][T11636] name failslab, interval 1, probability 0, space 0, times 0 [ 341.400196][T11636] CPU: 1 UID: 0 PID: 11636 Comm: syz.4.1115 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 341.400236][T11636] Tainted: [U]=USER [ 341.400243][T11636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.400256][T11636] Call Trace: [ 341.400262][T11636] [ 341.400270][T11636] dump_stack_lvl+0x16c/0x1f0 [ 341.400302][T11636] should_fail_ex+0x512/0x640 [ 341.400334][T11636] ? constrain_params_by_rules+0x175/0xca0 [ 341.400372][T11636] should_failslab+0xc2/0x120 [ 341.400401][T11636] __kmalloc_noprof+0xd2/0x510 [ 341.400425][T11636] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 341.400460][T11636] ? constrain_params_by_rules+0xa09/0xca0 [ 341.400498][T11636] constrain_params_by_rules+0x175/0xca0 [ 341.400538][T11636] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 341.400576][T11636] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 341.400619][T11636] ? snd_interval_refine+0x2fa/0x580 [ 341.400646][T11636] snd_pcm_hw_refine+0x7de/0xad0 [ 341.400667][T11636] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 341.400704][T11636] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 341.400741][T11636] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 341.400787][T11636] snd_pcm_hw_param_first+0x334/0x6f0 [ 341.400823][T11636] snd_pcm_hw_params+0x5eb/0x1ba0 [ 341.400849][T11636] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 341.400873][T11636] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 341.400911][T11636] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 341.400947][T11636] ? __asan_memset+0x23/0x50 [ 341.400968][T11636] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 341.400993][T11636] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 341.401034][T11636] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 341.401080][T11636] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 341.401119][T11636] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 341.401139][T11636] ? __fget_files+0x204/0x3c0 [ 341.401161][T11636] ? hook_file_ioctl_common+0x145/0x410 [ 341.401190][T11636] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 341.401211][T11636] ? __fget_files+0x20e/0x3c0 [ 341.401235][T11636] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 341.401256][T11636] __x64_sys_ioctl+0x18e/0x210 [ 341.401289][T11636] do_syscall_64+0xcd/0x490 [ 341.401318][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.401339][T11636] RIP: 0033:0x7f6c26d8ebe9 [ 341.401355][T11636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.401376][T11636] RSP: 002b:00007f6c27b31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.401396][T11636] RAX: ffffffffffffffda RBX: 00007f6c26fb5fa0 RCX: 00007f6c26d8ebe9 [ 341.401410][T11636] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000a [ 341.401423][T11636] RBP: 00007f6c26e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 341.401436][T11636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.401448][T11636] R13: 00007f6c26fb6038 R14: 00007f6c26fb5fa0 R15: 00007fff44cad538 [ 341.401469][T11636] [ 342.071413][T11637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1112'. [ 343.300890][T11646] dyndbg: expected <4096 bytes into control [ 343.397913][T11673] random: crng reseeded on system resumption [ 343.801711][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.871411][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.906000][T11703] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 345.101406][T11708] netlink: 98 bytes leftover after parsing attributes in process `syz.4.1130'. [ 345.109859][T11707] netlink: 98 bytes leftover after parsing attributes in process `syz.4.1130'. [ 345.177876][T11708] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1130'. [ 346.096079][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1135'. [ 347.130486][T11753] nbd: socks must be embedded in a SOCK_ITEM attr [ 347.178917][T11753] block nbd0: shutting down sockets [ 348.553452][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 349.328164][T11793] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 351.002542][T11806] Process accounting paused [ 351.571592][ T30] audit: type=1800 audit(1755374363.951:8): pid=11818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1153" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 352.116618][ T30] audit: type=1800 audit(1755374364.491:9): pid=11802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1151" name="dbroot" dev="configfs" ino=39633 res=0 errno=0 [ 353.660402][T11831] FAULT_INJECTION: forcing a failure. [ 353.660402][T11831] name failslab, interval 1, probability 0, space 0, times 0 [ 353.829359][T11831] CPU: 1 UID: 0 PID: 11831 Comm: syz.4.1155 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 353.829396][T11831] Tainted: [U]=USER [ 353.829403][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.829415][T11831] Call Trace: [ 353.829420][T11831] [ 353.829428][T11831] dump_stack_lvl+0x16c/0x1f0 [ 353.829457][T11831] should_fail_ex+0x512/0x640 [ 353.829488][T11831] should_failslab+0xc2/0x120 [ 353.829515][T11831] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 353.829541][T11831] ? shmem_alloc_inode+0x25/0x50 [ 353.829571][T11831] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 353.829599][T11831] shmem_alloc_inode+0x25/0x50 [ 353.829626][T11831] alloc_inode+0x61/0x240 [ 353.829655][T11831] new_inode+0x22/0x1c0 [ 353.829682][T11831] ? trace_cap_capable+0x18d/0x200 [ 353.829704][T11831] shmem_get_inode+0x19a/0xfb0 [ 353.829735][T11831] ? __vm_enough_memory+0x184/0x3f0 [ 353.829765][T11831] __shmem_file_setup+0x279/0x330 [ 353.829785][T11831] shmem_zero_setup+0x93/0x1a0 [ 353.829810][T11831] __mmap_region+0x2081/0x27b0 [ 353.829835][T11831] ? __pfx___mmap_region+0x10/0x10 [ 353.829858][T11831] ? rcu_is_watching+0x12/0xc0 [ 353.829881][T11831] ? rcu_is_watching+0x12/0xc0 [ 353.829900][T11831] ? trace_sched_exit_tp+0xd1/0x120 [ 353.829938][T11831] ? __schedule+0x11a3/0x5de0 [ 353.829959][T11831] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 353.829985][T11831] ? trace_pelt_se_tp+0xf1/0x160 [ 353.830019][T11831] ? __pfx___schedule+0x10/0x10 [ 353.830039][T11831] ? futex_private_hash_put+0x112/0x300 [ 353.830062][T11831] ? rcu_is_watching+0x12/0xc0 [ 353.830094][T11831] ? trace_cap_capable+0x18d/0x200 [ 353.830114][T11831] ? cap_capable+0xb3/0x250 [ 353.830135][T11831] mmap_region+0x1ab/0x3f0 [ 353.830158][T11831] ? __get_unmapped_area+0x267/0x440 [ 353.830191][T11831] do_mmap+0xa3e/0x1210 [ 353.830221][T11831] ? __pfx_do_mmap+0x10/0x10 [ 353.830248][T11831] ? __pfx_down_write_killable+0x10/0x10 [ 353.830277][T11831] ? ksys_write+0x190/0x250 [ 353.830301][T11831] vm_mmap_pgoff+0x29e/0x470 [ 353.830330][T11831] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 353.830360][T11831] ? __x64_sys_futex+0x1e0/0x4c0 [ 353.830384][T11831] ? __x64_sys_futex+0x1e9/0x4c0 [ 353.830410][T11831] ksys_mmap_pgoff+0x7d/0x5c0 [ 353.830437][T11831] ? xfd_validate_state+0x61/0x180 [ 353.830468][T11831] __x64_sys_mmap+0x125/0x190 [ 353.830500][T11831] do_syscall_64+0xcd/0x490 [ 353.830526][T11831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.830546][T11831] RIP: 0033:0x7f6c26d8ebe9 [ 353.830561][T11831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.830580][T11831] RSP: 002b:00007f6c27b31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 353.830599][T11831] RAX: ffffffffffffffda RBX: 00007f6c26fb5fa0 RCX: 00007f6c26d8ebe9 [ 353.830612][T11831] RDX: 00000000000000e2 RSI: 0000000000020009 RDI: 0000000000000000 [ 353.830624][T11831] RBP: 00007f6c26e11e19 R08: 0000000000000405 R09: 0000000000008000 [ 353.830637][T11831] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 353.830648][T11831] R13: 00007f6c26fb6038 R14: 00007f6c26fb5fa0 R15: 00007fff44cad538 [ 353.830667][T11831] [ 354.326068][T11837] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1157'. [ 354.335098][T11837] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1157'. [ 354.346036][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'. [ 354.614678][T11849] random: crng reseeded on system resumption [ 355.982729][T11869] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 357.380682][T11884] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 357.474412][T11884] Invalid ELF header magic: != ELF [ 357.743819][T11884] could not allocate digest TFM handle [ 358.326042][T11898] nbd: socks must be embedded in a SOCK_ITEM attr [ 358.396501][T11898] block nbd0: shutting down sockets [ 358.452352][T11902] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1171'. [ 358.950436][T11911] FAULT_INJECTION: forcing a failure. [ 358.950436][T11911] name failslab, interval 1, probability 0, space 0, times 0 [ 359.060998][T11918] svc: failed to register nfsdv3 RPC service (errno 111). [ 359.101094][T11911] CPU: 1 UID: 0 PID: 11911 Comm: syz.4.1173 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 359.101128][T11911] Tainted: [U]=USER [ 359.101135][T11911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.101147][T11911] Call Trace: [ 359.101153][T11911] [ 359.101160][T11911] dump_stack_lvl+0x16c/0x1f0 [ 359.101188][T11911] should_fail_ex+0x512/0x640 [ 359.101219][T11911] should_failslab+0xc2/0x120 [ 359.101246][T11911] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 359.101270][T11911] ? lock_release+0x201/0x2f0 [ 359.101295][T11911] ? __proc_create+0x2ce/0x8e0 [ 359.101330][T11911] __proc_create+0x2ce/0x8e0 [ 359.101359][T11911] ? __pfx___proc_create+0x10/0x10 [ 359.101389][T11911] ? __pfx___netlink_kernel_create+0x10/0x10 [ 359.101419][T11911] proc_create_reg+0x7d/0x180 [ 359.101450][T11911] proc_create_net_data+0x8e/0x1c0 [ 359.101481][T11911] ? __pfx_proc_create_net_data+0x10/0x10 [ 359.101511][T11911] ? __pfx_uevent_net_rcv+0x10/0x10 [ 359.101542][T11911] ? __pfx_genl_release+0x10/0x10 [ 359.101579][T11911] ? __pfx_proto_init_net+0x10/0x10 [ 359.101612][T11911] proto_init_net+0x53/0x70 [ 359.101629][T11911] ops_init+0x1e2/0x5f0 [ 359.101657][T11911] setup_net+0x10f/0x380 [ 359.101682][T11911] ? lockdep_init_map_type+0x5c/0x280 [ 359.101709][T11911] ? __pfx_setup_net+0x10/0x10 [ 359.101736][T11911] ? debug_mutex_init+0x37/0x70 [ 359.101756][T11911] copy_net_ns+0x2a6/0x5f0 [ 359.101786][T11911] create_new_namespaces+0x3ea/0xa90 [ 359.101811][T11911] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 359.101835][T11911] ksys_unshare+0x45b/0xa40 [ 359.101862][T11911] ? __pfx_ksys_unshare+0x10/0x10 [ 359.101889][T11911] ? xfd_validate_state+0x61/0x180 [ 359.101921][T11911] __x64_sys_unshare+0x31/0x40 [ 359.101948][T11911] do_syscall_64+0xcd/0x490 [ 359.101974][T11911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.101994][T11911] RIP: 0033:0x7f6c26d8ebe9 [ 359.102009][T11911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.102028][T11911] RSP: 002b:00007f6c27b31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 359.102047][T11911] RAX: ffffffffffffffda RBX: 00007f6c26fb5fa0 RCX: 00007f6c26d8ebe9 [ 359.102060][T11911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 359.102072][T11911] RBP: 00007f6c26e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 359.102084][T11911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.102096][T11911] R13: 00007f6c26fb6038 R14: 00007f6c26fb5fa0 R15: 00007fff44cad538 [ 359.102115][T11911] [ 359.412857][T11918] svc: failed to register nfsaclv3 RPC service (errno 111). [ 360.753957][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 363.234297][T11966] nbd: socks must be embedded in a SOCK_ITEM attr [ 363.423976][T11966] block nbd0: shutting down sockets [ 365.724453][ T30] audit: type=1800 audit(1755374378.101:10): pid=12013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1193" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 366.058035][T12000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.074610][T12000] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 366.225349][T12000] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 366.250455][T12000] CPU0 is offline. [ 367.480257][ T6141] Bluetooth: hci1: command 0x0c1a tx timeout [ 368.120392][ T6141] Bluetooth: hci2: command 0x0c1a tx timeout [ 368.281456][ T6141] Bluetooth: hci4: command 0x0c1a tx timeout [ 368.977646][T12028] : Can't lookup blockdev [ 369.707628][ T6141] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 369.844078][T12049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1199'. [ 369.984413][T12056] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input22 [ 370.127244][T12034] ima: policy update failed [ 370.135782][ T30] audit: type=1802 audit(1755374382.511:11): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1196" res=0 errno=0 [ 370.347977][T12063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1202'. [ 370.371298][T12065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 370.377226][T12065] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 370.468743][T12065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.513975][T12065] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 370.592503][T12065] CPU0 is offline. [ 371.641671][T12077] ima: policy update failed [ 371.659308][ T30] audit: type=1802 audit(1755374384.031:12): pid=12077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1206" res=0 errno=0 [ 371.914518][T12106] netlink: zone id is out of range [ 371.959691][T12106] netlink: zone id is out of range [ 371.965572][T12100] nbd: socks must be embedded in a SOCK_ITEM attr [ 371.979474][T12106] netlink: zone id is out of range [ 371.998784][T12106] netlink: zone id is out of range [ 372.020969][T12106] netlink: zone id is out of range [ 372.046488][T12106] netlink: zone id is out of range [ 372.068743][T12100] block nbd0: shutting down sockets [ 372.082228][T12106] netlink: zone id is out of range [ 372.106346][T12106] netlink: zone id is out of range [ 372.125268][T12106] netlink: zone id is out of range [ 372.140918][T12106] netlink: zone id is out of range [ 372.440722][ T6188] Bluetooth: hci1: command 0x0c1a tx timeout [ 372.520300][ T6188] Bluetooth: hci4: command 0x0c1a tx timeout [ 372.526558][ T6141] Bluetooth: hci2: command 0x0c1a tx timeout [ 372.537916][T12120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1212'. [ 372.582185][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 372.653622][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 374.051793][T12135] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 374.523478][ T6141] Bluetooth: hci1: command 0x0c1a tx timeout [ 374.719143][ T30] audit: type=1800 audit(1755374387.091:13): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1223" name="members" dev="configfs" ino=41297 res=0 errno=0 [ 374.937825][T12179] FAULT_INJECTION: forcing a failure. [ 374.937825][T12179] name failslab, interval 1, probability 0, space 0, times 0 [ 375.001960][T12179] CPU: 1 UID: 0 PID: 12179 Comm: syz.2.1224 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 375.001993][T12179] Tainted: [U]=USER [ 375.001999][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.002010][T12179] Call Trace: [ 375.002016][T12179] [ 375.002023][T12179] dump_stack_lvl+0x16c/0x1f0 [ 375.002051][T12179] should_fail_ex+0x512/0x640 [ 375.002081][T12179] should_failslab+0xc2/0x120 [ 375.002109][T12179] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 375.002132][T12179] ? __pfx___might_resched+0x10/0x10 [ 375.002152][T12179] ? fasync_helper+0x3d/0xd0 [ 375.002181][T12179] ? sock_fasync+0x81/0x140 [ 375.002212][T12179] fasync_helper+0x3d/0xd0 [ 375.002241][T12179] sock_fasync+0x92/0x140 [ 375.002271][T12179] ? __pfx_sock_fasync+0x10/0x10 [ 375.002299][T12179] do_fcntl+0xa3a/0x15a0 [ 375.002345][T12179] ? __pfx_do_fcntl+0x10/0x10 [ 375.002379][T12179] ? tomoyo_file_fcntl+0xa5/0xc0 [ 375.002401][T12179] __x64_sys_fcntl+0x163/0x200 [ 375.002434][T12179] do_syscall_64+0xcd/0x490 [ 375.002464][T12179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.002487][T12179] RIP: 0033:0x7fcde678ebe9 [ 375.002510][T12179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.002534][T12179] RSP: 002b:00007fcde76ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 375.002556][T12179] RAX: ffffffffffffffda RBX: 00007fcde69b5fa0 RCX: 00007fcde678ebe9 [ 375.002571][T12179] RDX: 000000000000a553 RSI: 0000000000000004 RDI: 0000000000000003 [ 375.002584][T12179] RBP: 00007fcde6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 375.002599][T12179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.002612][T12179] R13: 00007fcde69b6038 R14: 00007fcde69b5fa0 R15: 00007ffef46c2258 [ 375.002634][T12179] [ 375.194985][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.580603][T12193] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1226'. [ 375.813777][T12208] program syz.0.1227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.243483][T12231] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 377.243483][T12231] The task syz.3.1231 (12231) triggered the difference, watch for misbehavior. [ 378.516594][T12239] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input24 [ 378.606740][T12257] FAULT_INJECTION: forcing a failure. [ 378.606740][T12257] name failslab, interval 1, probability 0, space 0, times 0 [ 378.701605][T12257] CPU: 1 UID: 0 PID: 12257 Comm: syz.4.1237 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 378.701640][T12257] Tainted: [U]=USER [ 378.701646][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.701658][T12257] Call Trace: [ 378.701665][T12257] [ 378.701672][T12257] dump_stack_lvl+0x16c/0x1f0 [ 378.701700][T12257] should_fail_ex+0x512/0x640 [ 378.701733][T12257] ? constrain_params_by_rules+0x175/0xca0 [ 378.701767][T12257] should_failslab+0xc2/0x120 [ 378.701794][T12257] __kmalloc_noprof+0xd2/0x510 [ 378.701816][T12257] ? unwind_get_return_address+0x59/0xa0 [ 378.701840][T12257] constrain_params_by_rules+0x175/0xca0 [ 378.701876][T12257] ? stack_trace_save+0x8e/0xc0 [ 378.701900][T12257] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 378.701934][T12257] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 378.701968][T12257] ? snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 378.702004][T12257] ? __kasan_kmalloc+0xaa/0xb0 [ 378.702025][T12257] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 378.702059][T12257] ? snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 378.702093][T12257] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 378.702132][T12257] ? snd_interval_refine+0x2fa/0x580 [ 378.702158][T12257] snd_pcm_hw_refine+0x7de/0xad0 [ 378.702178][T12257] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 378.702216][T12257] ? _snd_pcm_hw_param_min+0x259/0x630 [ 378.702257][T12257] snd_pcm_hw_param_near.constprop.0+0x58a/0x8e0 [ 378.702293][T12257] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 378.702350][T12257] ? __asan_memset+0x23/0x50 [ 378.702371][T12257] ? calc_src_frames.isra.0+0x187/0x1d0 [ 378.702397][T12257] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 378.702443][T12257] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 378.702494][T12257] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 378.702536][T12257] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 378.702558][T12257] ? __fget_files+0x204/0x3c0 [ 378.702582][T12257] ? hook_file_ioctl_common+0x145/0x410 [ 378.702613][T12257] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 378.702637][T12257] ? __fget_files+0x20e/0x3c0 [ 378.702666][T12257] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 378.702690][T12257] __x64_sys_ioctl+0x18e/0x210 [ 378.702727][T12257] do_syscall_64+0xcd/0x490 [ 378.702759][T12257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.702782][T12257] RIP: 0033:0x7f6c26d8ebe9 [ 378.702799][T12257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.702821][T12257] RSP: 002b:00007f6c27b10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.702844][T12257] RAX: ffffffffffffffda RBX: 00007f6c26fb6090 RCX: 00007f6c26d8ebe9 [ 378.702859][T12257] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000009 [ 378.702873][T12257] RBP: 00007f6c26e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 378.702887][T12257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.702901][T12257] R13: 00007f6c26fb6128 R14: 00007f6c26fb6090 R15: 00007fff44cad538 [ 378.702923][T12257] [ 380.290787][T12282] nbd: socks must be embedded in a SOCK_ITEM attr [ 380.323845][T12282] block nbd0: shutting down sockets [ 380.507429][T12291] netlink: 'syz.0.1245': attribute type 4 has an invalid length. [ 380.773978][T12301] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 381.007278][T12307] program syz.3.1248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.069730][T12307] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 381.821364][T12310] Process accounting resumed [ 381.935778][ T6141] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 382.391321][T12357] FAULT_INJECTION: forcing a failure. [ 382.391321][T12357] name failslab, interval 1, probability 0, space 0, times 0 [ 382.428666][T12357] CPU: 1 UID: 0 PID: 12357 Comm: syz.0.1256 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 382.428702][T12357] Tainted: [U]=USER [ 382.428708][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.428720][T12357] Call Trace: [ 382.428726][T12357] [ 382.428733][T12357] dump_stack_lvl+0x16c/0x1f0 [ 382.428762][T12357] should_fail_ex+0x512/0x640 [ 382.428793][T12357] ? constrain_params_by_rules+0x175/0xca0 [ 382.428828][T12357] should_failslab+0xc2/0x120 [ 382.428855][T12357] __kmalloc_noprof+0xd2/0x510 [ 382.428878][T12357] ? unwind_get_return_address+0x59/0xa0 [ 382.428902][T12357] constrain_params_by_rules+0x175/0xca0 [ 382.428942][T12357] ? stack_trace_save+0x8e/0xc0 [ 382.428966][T12357] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 382.429009][T12357] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 382.429044][T12357] ? snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 382.429081][T12357] ? __kasan_kmalloc+0xaa/0xb0 [ 382.429102][T12357] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 382.429135][T12357] ? snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 382.429169][T12357] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 382.429207][T12357] ? snd_interval_refine+0x2fa/0x580 [ 382.429234][T12357] snd_pcm_hw_refine+0x7de/0xad0 [ 382.429253][T12357] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 382.429291][T12357] ? _snd_pcm_hw_param_min+0x259/0x630 [ 382.429324][T12357] snd_pcm_hw_param_near.constprop.0+0x58a/0x8e0 [ 382.429359][T12357] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 382.429394][T12357] ? __asan_memset+0x23/0x50 [ 382.429412][T12357] ? calc_src_frames.isra.0+0x187/0x1d0 [ 382.429435][T12357] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 382.429474][T12357] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 382.429518][T12357] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 382.429554][T12357] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 382.429573][T12357] ? __fget_files+0x204/0x3c0 [ 382.429594][T12357] ? hook_file_ioctl_common+0x145/0x410 [ 382.429621][T12357] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 382.429641][T12357] ? __fget_files+0x20e/0x3c0 [ 382.429663][T12357] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 382.429683][T12357] __x64_sys_ioctl+0x18e/0x210 [ 382.429715][T12357] do_syscall_64+0xcd/0x490 [ 382.429743][T12357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.429763][T12357] RIP: 0033:0x7fa1e958ebe9 [ 382.429777][T12357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.429797][T12357] RSP: 002b:00007fa1ea352038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.429816][T12357] RAX: ffffffffffffffda RBX: 00007fa1e97b6090 RCX: 00007fa1e958ebe9 [ 382.429829][T12357] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000a [ 382.429841][T12357] RBP: 00007fa1e9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 382.429852][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.429864][T12357] R13: 00007fa1e97b6128 R14: 00007fa1e97b6090 R15: 00007fffd85f26a8 [ 382.429883][T12357] [ 383.296263][T12365] FAULT_INJECTION: forcing a failure. [ 383.296263][T12365] name failslab, interval 1, probability 0, space 0, times 0 [ 383.351945][T12365] CPU: 1 UID: 0 PID: 12365 Comm: syz.0.1257 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 383.351979][T12365] Tainted: [U]=USER [ 383.351985][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.351997][T12365] Call Trace: [ 383.352003][T12365] [ 383.352011][T12365] dump_stack_lvl+0x16c/0x1f0 [ 383.352040][T12365] should_fail_ex+0x512/0x640 [ 383.352071][T12365] should_failslab+0xc2/0x120 [ 383.352099][T12365] __kmalloc_cache_noprof+0x6a/0x3e0 [ 383.352119][T12365] ? lock_acquire+0x2cd/0x350 [ 383.352146][T12365] ? acpi_evaluate_object+0xd8/0xa90 [ 383.352170][T12365] acpi_evaluate_object+0xd8/0xa90 [ 383.352192][T12365] ? __kasan_kmalloc+0xaa/0xb0 [ 383.352214][T12365] ? __kvmalloc_node_noprof+0x27b/0x620 [ 383.352235][T12365] ? seq_read_iter+0x826/0x12c0 [ 383.352253][T12365] ? kernfs_fop_read_iter+0x40f/0x5a0 [ 383.352271][T12365] ? do_syscall_64+0xcd/0x490 [ 383.352297][T12365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.352337][T12365] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 383.352365][T12365] ? __mutex_trylock_common+0xe9/0x250 [ 383.352400][T12365] acpi_evaluate_integer+0xdd/0x200 [ 383.352423][T12365] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 383.352454][T12365] ? __pfx_status_show+0x10/0x10 [ 383.352486][T12365] status_show+0xa0/0x120 [ 383.352513][T12365] ? __pfx_status_show+0x10/0x10 [ 383.352540][T12365] ? rcu_is_watching+0x12/0xc0 [ 383.352563][T12365] ? lock_release+0x201/0x2f0 [ 383.352594][T12365] dev_attr_show+0x53/0xe0 [ 383.352630][T12365] ? __pfx_dev_attr_show+0x10/0x10 [ 383.352665][T12365] sysfs_kf_seq_show+0x216/0x3e0 [ 383.352693][T12365] seq_read_iter+0x506/0x12c0 [ 383.352715][T12365] ? __mutex_trylock_common+0xe9/0x250 [ 383.352751][T12365] kernfs_fop_read_iter+0x40f/0x5a0 [ 383.352772][T12365] ? rw_verify_area+0xcf/0x6c0 [ 383.352795][T12365] vfs_read+0x8bf/0xcf0 [ 383.352822][T12365] ? __pfx___mutex_lock+0x10/0x10 [ 383.352852][T12365] ? __pfx_vfs_read+0x10/0x10 [ 383.352886][T12365] ksys_read+0x12a/0x250 [ 383.352912][T12365] ? __pfx_ksys_read+0x10/0x10 [ 383.352949][T12365] do_syscall_64+0xcd/0x490 [ 383.352980][T12365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.353003][T12365] RIP: 0033:0x7fa1e958ebe9 [ 383.353020][T12365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.353043][T12365] RSP: 002b:00007fa1ea373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.353064][T12365] RAX: ffffffffffffffda RBX: 00007fa1e97b5fa0 RCX: 00007fa1e958ebe9 [ 383.353080][T12365] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 383.353095][T12365] RBP: 00007fa1e9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 383.353109][T12365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.353123][T12365] R13: 00007fa1e97b6038 R14: 00007fa1e97b5fa0 R15: 00007fffd85f26a8 [ 383.353145][T12365] [ 384.129551][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.137123][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.588566][ T6141] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 384.821872][T12377] ================================================================== [ 384.829955][T12377] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340 [ 384.837863][T12377] Read of size 8 at addr ffff888034e54800 by task syz.0.1262/12377 [ 384.845768][T12377] [ 384.848132][T12377] CPU: 1 UID: 0 PID: 12377 Comm: syz.0.1262 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 384.848167][T12377] Tainted: [U]=USER [ 384.848174][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.848187][T12377] Call Trace: [ 384.848195][T12377] [ 384.848203][T12377] dump_stack_lvl+0x116/0x1f0 [ 384.848233][T12377] print_report+0xcd/0x630 [ 384.848262][T12377] ? __virt_addr_valid+0x81/0x610 [ 384.848288][T12377] ? __phys_addr+0xe8/0x180 [ 384.848315][T12377] ? force_devcd_write+0x312/0x340 [ 384.848344][T12377] kasan_report+0xe0/0x110 [ 384.848372][T12377] ? force_devcd_write+0x312/0x340 [ 384.848404][T12377] force_devcd_write+0x312/0x340 [ 384.848433][T12377] ? __pfx_force_devcd_write+0x10/0x10 [ 384.848463][T12377] ? __debugfs_file_get+0x1fe/0x840 [ 384.848496][T12377] ? __pfx___debugfs_file_get+0x10/0x10 [ 384.848550][T12377] ? rcu_is_watching+0x12/0xc0 [ 384.848576][T12377] full_proxy_write+0x12e/0x1a0 [ 384.848612][T12377] ? __pfx_full_proxy_write+0x10/0x10 [ 384.848648][T12377] vfs_write+0x29d/0x11d0 [ 384.848676][T12377] ? __pfx___mutex_lock+0x10/0x10 [ 384.848707][T12377] ? __pfx_vfs_write+0x10/0x10 [ 384.848733][T12377] ? __fget_files+0x204/0x3c0 [ 384.848757][T12377] ? rcu_is_watching+0x12/0xc0 [ 384.848782][T12377] ? __fget_files+0x20e/0x3c0 [ 384.848810][T12377] ksys_write+0x12a/0x250 [ 384.848848][T12377] ? __pfx_ksys_write+0x10/0x10 [ 384.848880][T12377] do_syscall_64+0xcd/0x490 [ 384.848931][T12377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.848955][T12377] RIP: 0033:0x7fa1e958ebe9 [ 384.848973][T12377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.848997][T12377] RSP: 002b:00007fa1ea373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.849018][T12377] RAX: ffffffffffffffda RBX: 00007fa1e97b5fa0 RCX: 00007fa1e958ebe9 [ 384.849034][T12377] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000006 [ 384.849048][T12377] RBP: 00007fa1e9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 384.849064][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.849078][T12377] R13: 00007fa1e97b6038 R14: 00007fa1e97b5fa0 R15: 00007fffd85f26a8 [ 384.849100][T12377] [ 384.849109][T12377] [ 385.076706][T12377] Allocated by task 6185: [ 385.081022][T12377] kasan_save_stack+0x33/0x60 [ 385.085696][T12377] kasan_save_track+0x14/0x30 [ 385.090365][T12377] __kasan_kmalloc+0xaa/0xb0 [ 385.094964][T12377] __kmalloc_noprof+0x223/0x510 [ 385.099896][T12377] ieee802_11_parse_elems_full+0x1db/0x3780 [ 385.105867][T12377] ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 385.111938][T12377] ieee80211_iface_work+0xe2e/0x1360 [ 385.117210][T12377] cfg80211_wiphy_work+0x2c4/0x580 [ 385.122335][T12377] process_one_work+0x9cc/0x1b70 [ 385.127294][T12377] worker_thread+0x6c8/0xf10 [ 385.131880][T12377] kthread+0x3c2/0x780 [ 385.135953][T12377] ret_from_fork+0x5d4/0x6f0 [ 385.140563][T12377] ret_from_fork_asm+0x1a/0x30 [ 385.145328][T12377] [ 385.147644][T12377] Freed by task 6185: [ 385.151614][T12377] kasan_save_stack+0x33/0x60 [ 385.156291][T12377] kasan_save_track+0x14/0x30 [ 385.160967][T12377] kasan_save_free_info+0x3b/0x60 [ 385.166005][T12377] __kasan_slab_free+0x60/0x70 [ 385.170864][T12377] kfree+0x2b4/0x4d0 [ 385.174793][T12377] ieee80211_ibss_rx_queued_mgmt+0x1a92/0x2fd0 [ 385.180975][T12377] ieee80211_iface_work+0xe2e/0x1360 [ 385.186259][T12377] cfg80211_wiphy_work+0x2c4/0x580 [ 385.191373][T12377] process_one_work+0x9cc/0x1b70 [ 385.196322][T12377] worker_thread+0x6c8/0xf10 [ 385.200908][T12377] kthread+0x3c2/0x780 [ 385.204990][T12377] ret_from_fork+0x5d4/0x6f0 [ 385.209620][T12377] ret_from_fork_asm+0x1a/0x30 [ 385.214479][T12377] [ 385.216798][T12377] The buggy address belongs to the object at ffff888034e54800 [ 385.216798][T12377] which belongs to the cache kmalloc-1k of size 1024 [ 385.230856][T12377] The buggy address is located 0 bytes inside of [ 385.230856][T12377] freed 1024-byte region [ffff888034e54800, ffff888034e54c00) [ 385.244565][T12377] [ 385.246886][T12377] The buggy address belongs to the physical page: [ 385.253397][T12377] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34e50 [ 385.262168][T12377] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 385.270658][T12377] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 385.278191][T12377] page_type: f5(slab) [ 385.282164][T12377] raw: 00fff00000000040 ffff88801b841dc0 dead000000000100 dead000000000122 [ 385.290739][T12377] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 385.299312][T12377] head: 00fff00000000040 ffff88801b841dc0 dead000000000100 dead000000000122 [ 385.307971][T12377] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 385.316644][T12377] head: 00fff00000000003 ffffea0000d39401 00000000ffffffff 00000000ffffffff [ 385.325399][T12377] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 385.334056][T12377] page dumped because: kasan: bad access detected [ 385.340540][T12377] page_owner tracks the page as allocated [ 385.346240][T12377] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 31024480044, free_ts 0 [ 385.365942][T12377] post_alloc_hook+0x1c0/0x230 [ 385.370700][T12377] get_page_from_freelist+0x132b/0x38e0 [ 385.376241][T12377] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 385.382147][T12377] alloc_pages_mpol+0x1fb/0x550 [ 385.387009][T12377] new_slab+0x247/0x330 [ 385.391186][T12377] ___slab_alloc+0xcf2/0x1740 [ 385.395867][T12377] __slab_alloc.constprop.0+0x56/0xb0 [ 385.401258][T12377] __kmalloc_cache_noprof+0xfb/0x3e0 [ 385.406546][T12377] alloc_workspace+0x1a8/0x340 [ 385.411311][T12377] btrfs_init_workspace_manager+0x123/0x4c0 [ 385.417207][T12377] btrfs_init_compress+0x6b/0x1b0 [ 385.422240][T12377] init_btrfs_fs+0x50/0x360 [ 385.426752][T12377] do_one_initcall+0x120/0x6e0 [ 385.431528][T12377] kernel_init_freeable+0x5c2/0x910 [ 385.436723][T12377] kernel_init+0x1c/0x2b0 [ 385.441063][T12377] ret_from_fork+0x5d4/0x6f0 [ 385.445673][T12377] page_owner free stack trace missing [ 385.451022][T12377] [ 385.453338][T12377] Memory state around the buggy address: [ 385.458961][T12377] ffff888034e54700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 385.467009][T12377] ffff888034e54780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 385.475062][T12377] >ffff888034e54800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 385.483111][T12377] ^ [ 385.487172][T12377] ffff888034e54880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 385.495223][T12377] ffff888034e54900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 385.503276][T12377] ================================================================== [ 385.740045][ T30] audit: type=1800 audit(1755374398.061:14): pid=12379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1260" name="dbroot" dev="configfs" ino=42422 res=0 errno=0 [ 385.809380][T12378] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 386.268050][T12377] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 386.284280][T12377] CPU: 1 UID: 0 PID: 12377 Comm: syz.0.1262 Tainted: G U 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 386.297918][T12377] Tainted: [U]=USER [ 386.301708][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.311841][T12377] Call Trace: [ 386.315110][T12377] [ 386.318032][T12377] dump_stack_lvl+0x3d/0x1f0 [ 386.322631][T12377] vpanic+0x6e8/0x7a0 [ 386.326630][T12377] ? __pfx_vpanic+0x10/0x10 [ 386.331166][T12377] ? __pfx_vprintk_emit+0x10/0x10 [ 386.336188][T12377] ? force_devcd_write+0x312/0x340 [ 386.341300][T12377] panic+0xca/0xd0 [ 386.345031][T12377] ? __pfx_panic+0x10/0x10 [ 386.349449][T12377] ? force_devcd_write+0x312/0x340 [ 386.354557][T12377] ? preempt_schedule_common+0x44/0xc0 [ 386.360011][T12377] ? preempt_schedule_thunk+0x16/0x30 [ 386.365387][T12377] check_panic_on_warn+0xab/0xb0 [ 386.370334][T12377] end_report+0x107/0x170 [ 386.374684][T12377] kasan_report+0xee/0x110 [ 386.379116][T12377] ? force_devcd_write+0x312/0x340 [ 386.384263][T12377] force_devcd_write+0x312/0x340 [ 386.389206][T12377] ? __pfx_force_devcd_write+0x10/0x10 [ 386.394664][T12377] ? __debugfs_file_get+0x1fe/0x840 [ 386.399870][T12377] ? __pfx___debugfs_file_get+0x10/0x10 [ 386.405421][T12377] ? rcu_is_watching+0x12/0xc0 [ 386.410180][T12377] full_proxy_write+0x12e/0x1a0 [ 386.415033][T12377] ? __pfx_full_proxy_write+0x10/0x10 [ 386.420409][T12377] vfs_write+0x29d/0x11d0 [ 386.424739][T12377] ? __pfx___mutex_lock+0x10/0x10 [ 386.429773][T12377] ? __pfx_vfs_write+0x10/0x10 [ 386.434531][T12377] ? __fget_files+0x204/0x3c0 [ 386.439199][T12377] ? rcu_is_watching+0x12/0xc0 [ 386.443958][T12377] ? __fget_files+0x20e/0x3c0 [ 386.448637][T12377] ksys_write+0x12a/0x250 [ 386.452966][T12377] ? __pfx_ksys_write+0x10/0x10 [ 386.457828][T12377] do_syscall_64+0xcd/0x490 [ 386.462353][T12377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.468251][T12377] RIP: 0033:0x7fa1e958ebe9 [ 386.472658][T12377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.492268][T12377] RSP: 002b:00007fa1ea373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 386.500698][T12377] RAX: ffffffffffffffda RBX: 00007fa1e97b5fa0 RCX: 00007fa1e958ebe9 [ 386.508685][T12377] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000006 [ 386.516649][T12377] RBP: 00007fa1e9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 386.524629][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.532598][T12377] R13: 00007fa1e97b6038 R14: 00007fa1e97b5fa0 R15: 00007fffd85f26a8 [ 386.540575][T12377] [ 386.543655][T12377] Kernel Offset: disabled [ 386.547974][T12377] Rebooting in 86400 seconds..