last executing test programs: 8m59.936614058s ago: executing program 1 (id=2745): r0 = socket(0x2b, 0x1, 0x0) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x6, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, 0x0, 0x5) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xfffffff9, 0x10, 0x0) r2 = gettid() rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) rt_sigtimedwait$auto(&(0x7f0000000100)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) kill$auto(r2, 0x14) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x80800, 0x0) bpf$auto(0x0, &(0x7f0000000440)=@bpf_attr_5={@target_ifindex, r3, 0x0, 0x5, r0, @relative_id=0x7, 0x7}, 0x6f4) write$auto(r3, &(0x7f0000000000)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x272) mmap$auto(0x83ac, 0x7, 0x0, 0x12, r3, 0x8001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd12\x00', 0xe200, 0x0) unshare$auto(0x40000080) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) ioctl$auto_IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f00000001c0)={0x6, 0x1, 0x6}) r6 = pidfd_open$auto(0x1, 0x0) setns(r6, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x4, 0x3fffff, 0x11, 0x11, r1, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x2c200, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x12081, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8m57.196625034s ago: executing program 1 (id=2752): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2a, 0x2, 0x1) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x84, 0xf3, 0xb0}}) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x4ad00, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r2, 0xc10c5541, r1) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r4, 0x0, 0x28, 0x0, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/tcp6\x00', 0x20100, 0x0) pread64$auto(r6, 0x0, 0x8, 0x8000) ioctl$sock_SIOCGIFINDEX(r5, 0x80108907, 0x0) write$auto_console_fops_tty_io(r3, 0x0, 0x0) mmap$auto(0x2, 0x400008, 0xdf, 0x9b7f, 0x2, 0x7ffd) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r7, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_BLKRRPART(r7, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) ioctl$auto_BLKRRPART(r7, 0x125f, 0x0) ioctl$auto_PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000040)=0x1) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x81) 8m56.103064976s ago: executing program 1 (id=2755): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r1, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r1, 0x9205, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) 8m54.341793375s ago: executing program 1 (id=2760): mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) creat$auto(&(0x7f00000001c0)='./file0\x00', 0xfffd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getsockopt$auto_SO_TXREHASH(r0, 0x54, 0x4a, &(0x7f0000000000)='}\x00', &(0x7f0000000040)=0x6) geteuid() mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sysfs$auto(0x2, 0xffff, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) ioctl$auto_FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000080)={{0x4000000, 0x0, @identifier="cc7c7123170a78e401d42e4b048d0235"}, 0x3ff, 0xfffffff8, '\x00', "c65e4238034c0449b26b50be1da1dd685b1612f47259985fd84d1c4a6fe0a7bf20195e3e50c1ca05f0138354baea61540df19af018cff678e3896b6cff020d5382874a953ebcf2dc74abf901959db2d5456f68c69e61939f0e15f08b53fc67d2efb75a80568df9967518b3495463c8666417a4b656bf3f7f5d38f716caf66b2a5eb2d92b366b4a"}) 8m52.049211523s ago: executing program 1 (id=2765): r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x401, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x840) sendfile$auto(r0, r0, 0x0, 0x10000800000003) connect$auto(r0, &(0x7f0000000040)=@phonet={0x23, 0x2a, 0x8, 0x4}, 0x0) 8m51.135102106s ago: executing program 1 (id=2767): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) ptrace$auto(0x10, r0, 0x4, 0x100000000) r1 = prctl$auto(0x8, 0x1, r0, 0x4, 0xabd7) readv$auto(r1, 0x0, 0xaa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) fcntl$auto(0x3, 0x4, 0xa553) r2 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines\x00', 0x4000, 0x0) io_uring_register$auto_IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)="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", 0xec) write$auto(0x3, 0x0, 0xfdef) socket(0x12, 0x1, 0x9) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r3, 0x0, 0xad2, 0x4000fd) 8m36.055349653s ago: executing program 32 (id=2767): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) ptrace$auto(0x10, r0, 0x4, 0x100000000) r1 = prctl$auto(0x8, 0x1, r0, 0x4, 0xabd7) readv$auto(r1, 0x0, 0xaa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) fcntl$auto(0x3, 0x4, 0xa553) r2 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines\x00', 0x4000, 0x0) io_uring_register$auto_IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)="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", 0xec) write$auto(0x3, 0x0, 0xfdef) socket(0x12, 0x1, 0x9) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r3, 0x0, 0xad2, 0x4000fd) 5m21.043789145s ago: executing program 4 (id=3183): mmap$auto(0x7fffffffffffffff, 0x400104, 0xffffffffffffffff, 0x9b71, 0xffffffffffffffff, 0x8000000007fff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:03.0/enable\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x5) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x810005, 0xffb, 0x8000001008011, r1, 0x40000000008001) r2 = open$dir(0x0, 0x10000, 0x6) r3 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) msgget$auto(0xc, 0x77d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000300)="276ebd6cbb1ac5364623272e23af2b50f2ebad835c9d7840f79ffa7504d577141a2c16c434925b3c00c8067f716ba2efac5afb4b91cfd18d70395257e05f5cc55b521c692e181ada3cd0ec7302f3056482f4d2b83137e26d61afb328d630eae031149e93129e9a2eae3bd896b0ecab0e3977252f1b7ec1c5dff9a156892c2f8678d15ea110ef4170893623e36fe44e1a8b134a0dec152e282b86f13962d639bd3649cd05a67c52b32dbb8fdd244cd0d783372ebdd79f83a87059240565ed14277260319a6730e35bd2db9ffee60a", 0x12, 0x0, 0x9, 0x0, 0x3, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000040)=0xffffffff) sendto$auto(0x3, 0x0, 0x1, 0x101, 0x0, 0x1c) ioctl$auto(r2, 0x541b, 0x38) syslog$auto(0x3, &(0x7f0000000400)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87\xa1\xea\xbb\xfb\x0e\x84HH\xdes~\xd3>O\xc4\v\x9b\xb7\xf2=\x95\xe3;,\x99\xca\xaa\xa0\xa2\xa9\xae\xc5\xean\x90\xbf\xe7Ha\xc4J\x184!h\xb2\x060\x1d\x8e\x9f\x13\xd9F#<\xc6\xad7\x8f^Z\xc4Q*\x93\xc4\xd8\xb1\"\xe1D(\xcf}\x9fNv\x9f,\xba\xa2\x86\xa1\x8df#%\x1c=\x99\xdc7\x80K\xa3}W\x17\x8be\x9e4t\x99dF\x96w\xe7\x8c\xfc\xba\x7fa\x04\xd1\xac\xe2\xa1\x96\xc2mz`\xcb\xcc\xff\x19O@E|\f^\xb12 =\xfd\x9a\bS\x87S\xf6\xda\xee\xd4\xf6\x1f\xa4\n\x90\xea>\xd5UK\"\xab\xce\x19@\\?{\x98\xe3j\xdd\xda\x8b\x13\xb5N\x13I\xc7\nO\x18\x7f\x8dI\xd5F\xe3\xf3\xd8\xe3\x9a^\xcb\xcb-\x06\xa8', 0x5) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') getdents$auto(r4, 0x0, 0xa2b0) msync$auto(0x0, 0x2000000005, 0x6) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sysfs$auto(0x2, 0x8, 0x0) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/dev_snmp6/virt_wifi0\x00', 0x103200, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) 5m19.994760056s ago: executing program 4 (id=3186): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r1, &(0x7f00000001c0)={&(0x7f0000000240), 0xe001}, 0x2000000003, 0xe, 0x3) unshare$auto(0x40000080) r2 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x200880, 0x0) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f00000003c0)={@raw, "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"}) unshare$auto(0x40000080) pwritev2$auto(r0, &(0x7f00000002c0)={&(0x7f0000000240)="8f40dda9f58b08f147e4f058f8a98c17e96ac55422d149466107664c81ad9ec808b9a9b9bc291c0b8de420d24a6a720f0e604706bde0bb62101158d27b0b85ff0ec225841c9329289a55b76208ecdadfcde666a1fb740bac4f690dde6394e49624dfb4", 0x5}, 0x8, 0x4, 0x3, 0x400) r3 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r3, 0x209, 0xa, r3, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) r5 = fcntl$auto_F_GETOWN(r4, 0x9, 0x0) msgctl$auto_IPC_INFO(0x3, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee00, 0xfff, 0xc, 0x40, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x7f, 0x7ff, 0x3ff, 0x1, 0xa, 0xf9eb, 0x4, 0x3, 0x7, @inferred=0xffffffffffffffff, @inferred=r5}) unshare$auto(0x7fffffff) setfsuid$auto(0xee00) setfsuid$auto(0xee01) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_MPATH(r7, &(0x7f00000014c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)={0xfffffffffffffccb, r6, 0x4, 0xf0bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x63}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008041}, 0x20000000) sendmsg$auto_NL80211_CMD_SET_CQM(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000373fba550ca6e2dc9ac57f8003710ac48e5f6ed4ec291174ac829b911428585e19f4413880b1f475acbde6c4c960015e65b2", @ANYRES16=r6, @ANYBLOB="810125bd709f746f8dff12f4860004000e00"], 0x18}, 0x1, 0x0, 0x0, 0x4c815}, 0x8800) r8 = setfsgid$auto(0xee01) setresgid$auto(r8, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r8, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5m17.03004314s ago: executing program 4 (id=3192): r0 = clone$auto(0x5, 0xffffffff, 0x0, 0x0, 0x4) tgkill$auto_SIGCONT(0x0, r0, 0x12) (fail_nth: 1) 5m16.555282946s ago: executing program 4 (id=3193): r0 = clone$auto(0x5, 0xffffffff, 0x0, 0x0, 0x4) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram3\x00', 0x0, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x142, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0) ioctl$auto(r2, 0x3b8e, r1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) ioctl$auto_IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000040)={0x6e2c, 0x8, 0x9}) clone$auto(0xf, 0x401, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x531f6d82, 0x10001) tgkill$auto_SIGCONT(0x0, r0, 0x12) 5m16.487113559s ago: executing program 4 (id=3194): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xffffffff, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') pselect6$auto(0x6, &(0x7f0000000000)={[0x0, 0x4c5e, 0x1000000, 0x80000001, 0xcdb, 0xe114, 0x4, 0x1, 0x4, 0x0, 0xffffffff, 0x7, 0x6, 0x9, 0x7, 0x8000]}, &(0x7f0000000140)={[0x7b, 0x7, 0x3, 0x6, 0x3fe, 0x2, 0x0, 0x2, 0x4, 0x7, 0xffff, 0xfffffffffffffff7, 0x7f, 0x400, 0x9, 0x200]}, &(0x7f00000001c0)={[0x3, 0x2, 0x34, 0x1, 0x100000000, 0x8000, 0x101, 0x3, 0x5, 0x1, 0x7, 0x0, 0x6, 0xd3d, 0x7, 0x4]}, &(0x7f0000000240)={0x4, 0x100000001}, &(0x7f0000000280)="5f63b02da995ea2218325b0ad7d3064d0cea74ca91b425c12aaed1cb74b019247e1929fc29e16132c0d742b24c76097d6f1310d7783eab57caf3cbe6b0d62efcab4d6a5a7ab5cbf2faa81011197557a0092e2ca8d3de232ae01fe716739b3d4227ce3795e923498506957ac832fa089b0ea1faed3f65982cc6794c6ced") r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={r0, @new_prog_fd, 0x2c}, 0x92) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, 0xfffffffffffffffe, 0x6, 0x10006, 0x1000, 0x2a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4891c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0ro\x00', 0x80000, 0x0) ioctl$auto_MEMGETBADBLOCK(r2, 0x40084d0b, &(0x7f0000000040)=0xffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, 0x0, 0xfded, 0x3) clock_nanosleep$auto(0x4, 0x201, 0x0, 0x0) unshare$auto(0x40000080) 5m15.897205164s ago: executing program 4 (id=3196): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) capset$auto(&(0x7f0000000180)={0xd, r1}, &(0x7f0000000240)={0x1, 0xc9f, 0x6}) fcntl$auto(r0, 0xb, r2) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x107300, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xb9, 0x2000044f, 0xa, 0xfffffffb, 0x1007181, 0x8a0b, 0x5, 0xb9, 0x247, 0xd281, 0x29, 0x4, 0x1ffffffffffe, 0x1, 0xf7fffffffffffff5, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x6, 0x8401, 0x22405, 0x9, 0x0, 0x84, 0xfffffffffffffff9, 0xfffffffd, 0x714, 0x0, 0x1ff, [0x70e2, 0x0, 0x3, 0xb7, 0x0, 0x10000000, 0x8, 0x200, 0xb, 0x100000, 0x10004, 0x15b, 0x7, 0x1fc, 0x5, 0x10000000000002, 0x100000000000000, 0x4, 0x146, 0x0, 0x3a, 0x6, 0xfffffffffffffffd, 0x6312, 0x0, 0x400000000, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0x12, 0x0, 0x1, 0x0, 0x80, 0x6, 0xfffffffffffffffd]}, 0x8, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/binderfs/binder1\x00', 0x101003, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 5m15.389112198s ago: executing program 33 (id=3196): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) capset$auto(&(0x7f0000000180)={0xd, r1}, &(0x7f0000000240)={0x1, 0xc9f, 0x6}) fcntl$auto(r0, 0xb, r2) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x107300, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xb9, 0x2000044f, 0xa, 0xfffffffb, 0x1007181, 0x8a0b, 0x5, 0xb9, 0x247, 0xd281, 0x29, 0x4, 0x1ffffffffffe, 0x1, 0xf7fffffffffffff5, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x6, 0x8401, 0x22405, 0x9, 0x0, 0x84, 0xfffffffffffffff9, 0xfffffffd, 0x714, 0x0, 0x1ff, [0x70e2, 0x0, 0x3, 0xb7, 0x0, 0x10000000, 0x8, 0x200, 0xb, 0x100000, 0x10004, 0x15b, 0x7, 0x1fc, 0x5, 0x10000000000002, 0x100000000000000, 0x4, 0x146, 0x0, 0x3a, 0x6, 0xfffffffffffffffd, 0x6312, 0x0, 0x400000000, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0x12, 0x0, 0x1, 0x0, 0x80, 0x6, 0xfffffffffffffffd]}, 0x8, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/binderfs/binder1\x00', 0x101003, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 10.331841244s ago: executing program 2 (id=3933): r0 = socket(0x29, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000080), 0x34000}, 0x1, &(0x7f00000000c0), 0x3, 0xab}, 0x80670}, 0x3f7ffffe, 0xd9) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1500, 0x0) r3 = socket(0xa, 0x5, 0x0) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, 0x0) mmap$auto(0x0, 0x810004, 0xfffffffffffffffc, 0x8000000008011, 0x3, 0x81000000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) unshare$auto(0x40000080) r1 = socketcall$auto(0x6, 0x0) ioctl$auto_SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000200)="83379146499950925b8529b8c1c95b91768c49c1c6e0d60392dae5b2a80bc1aa0a0b2e02c6fd1b8cf8d57d7198c1c1f475ce6b2942c31fb2d2ece96550bcad64c7a3") mmap$auto(0x1, 0x400005, 0xdf, 0x9b7a, 0x2, 0x8001) io_uring_setup$auto(0x2, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) mmap$auto(0x0, 0x4022009, 0x4020000df, 0xeb0, 0x401, 0x7) close_range$auto(r2, r1, 0x8001) sysfs$auto(0x2, 0x49, 0x6) fsopen$auto(0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.1/usb11/11-0:1.0/usb11-port8/location\x00', 0x208082, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r3 = socket(0x2, 0x801, 0x106) getsockopt$auto(r3, 0x0, 0x1, 0x0, 0x0) socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0xfffffffb, 0x8, 0x0, 0x7) r4 = socket(0x11, 0xa, 0x9) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) arch_prctl$auto(0x1021, 0x3) setsockopt$auto(r4, 0x6, 0x1cc0284f, 0x0, 0x8001) socket(0x2, 0xa, 0xa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/flush\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') 7.773865623s ago: executing program 0 (id=3938): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x406, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_getsetattr$auto(0x3, 0x0, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) shmctl$auto(0xffff, 0x4, &(0x7f0000000640)={{0xfffffff0, 0x0, 0x0, 0x80000001, 0x6, 0xa9, 0x8}, 0xb, 0x0, 0x9, 0x101, @raw, @inferred, 0x401, 0x0, &(0x7f0000000500)="b1a9e2f594ba827b09ba5f13966229906729f3e1404bf7cb462a386e515772aa1755fa41c07a2698b8166a93e4b46e3d96830c9954dd6d174a815393c1ffe893a52432e5a90fb2d2907d51d80715817fc1f1a4d444daa057ad9504a2622f2e9b6f218bc40dae062725b41434d564b37fb1c3839ef7419d85e5a91290472b3a8038", &(0x7f00000005c0)="aa78f21904a383c4d5ca55381163f9c4f4c73c615dcb95af36e03cf2778fe119eec472a3a43d777077524923306e9d28a7114fd3a72c6af450e9fc624aad26d7a57f80f94781"}) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3ffffe, 0x7, 0x11, 0xdd, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8}]}, 0x1c}}, 0x20000004) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/geneve1/ignore_routes_with_linkdown\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fffe000) sendmsg$auto_CGROUPSTATS_CMD_GET(r2, 0x0, 0x40010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x20, r3, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x68842e0ac16e58f8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xc, r6, 0x9, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 7.267507162s ago: executing program 5 (id=3940): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) setfsuid$auto(0xee00) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x7) bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0xffffffffffff7fff, 0x5, 0x1fe, 0x2, 0x1, 0x884, 0x4007, "0108a5172d53c213b43038e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x89, 0x9, 0xffff, 0x3ff, 0x7, @attach_btf_obj_fd, 0x440, 0xa, 0x7, 0x1ff, 0x9}, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) close_range$auto(0x2, 0x8, 0x0) setfsuid$auto(0xee01) r3 = setfsgid$auto(0xee01) setresgid$auto(r3, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\\\x00', 0x2) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x402) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 7.209597242s ago: executing program 2 (id=3942): pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) setreuid$auto(0x15, 0x5) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0x101, 0x5, 0x0, 0x0, 0x0, 0x200000fa9b, 0xfffffffffffffff9, 0x7ffffffffffffffe, 0x4, 0x3, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r2, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES8, @ANYBLOB="0043a80d116186fef0f0ba8ab50623ae4adc1386a271ac00000a00010040000000000000000a00000000080004001000001508000300050000bce66ab50b666f0a98e25b1e0a000100aaaaaaaaaabb00095fceaeec6fcf14d48c5881516d448c9e724392bd4858b0b7ed52a1144d42435867edb199a86d4284090739a983d0d8084d09ac4b9dd46c5d0982fefaf759c24678836c5b150cb887aeda2bab75b77d6eeebdf1786896d6eb15b94befbeced66071a571b9d7bcd586eb0b128f62ee539c429ac96ae60d0f5af58db881dd1a808d6a93238ad1bd49611e1f402d00e6bc0c0098133e", @ANYRES8=r1], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x20000845) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x28, 0x1, 0x0) sendmsg$auto_NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) 7.060421859s ago: executing program 3 (id=3943): socket(0xa, 0x5, 0x84) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x400008, 0xd, 0x13, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(r0, 0xa, 0x100a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x68182, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) socket(0xa, 0x1, 0x85) r3 = socket(0x3, 0x2, 0x5) setsockopt$auto(r3, 0x29, 0x36, &(0x7f00000001c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x8, 0xff) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.426382465s ago: executing program 0 (id=3944): lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x11, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0xe0100, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/usb/usbmon/25t\x00', 0xa00, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0xffff) mmap$auto(0x7fffffffffffffff, 0x200004, 0x4000000000e3, 0x210, r0, 0x4000000001) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r2, 0xc0045520, r1) getsockopt$auto_SO_MEMINFO(r0, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(r1, 0x8, 0xffff172b) r3 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r3, 0x0, 0x3b8b, 0xa) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) close_range$auto(0x2, 0x8, 0x0) kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0xffffffffffffffff) openat$auto_ep0_operations_inode(0xffffffffffffff9c, 0x0, 0x4c4040, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) 5.330451696s ago: executing program 0 (id=3945): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) setgroups$auto(0xc00000000, 0xfffffffffffffffc) bpf$auto(0x16, &(0x7f0000000580)=@info={r0, 0xc16, 0x3}, 0x92) mprotect$auto(0x1110c230000, 0xa588, 0x578fcfe9) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) open(&(0x7f0000000100)='.\x00', 0x60840, 0x408) r2 = socket(0x2c, 0x4, 0x3) ioctl$auto(0x3, 0x894b, 0x38) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) r3 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x0, 0x0) connect$auto(r3, 0x0, 0x54) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x87c8256655b23a9a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='z\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x8841) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyzf\x00', 0x101e81, 0x0) ioctl$auto(r4, 0x5410, r3) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000001c0)="61a280226046bd2d42c1446da47d434bb2370ed4ea3455a7095ba3a3dbbbe561169b2c7505155296d3412daec0748c4142c37471fe5ebf71c18b4cbeb3b1d61ec734f1be12996a1a448de18bbcb640ed91afeb61e3a79a7c000fbbcf18d8592ce69ef42d403824f95191ce10691610e37c8b1c39139d433fe6a07a4072736f7da8d12933f851b8668bfe4c3fc5bbd8a9f5430d7fcb537acc00e9e3f24ae4bcfcdaf5498f6a3d928aeeef7f66b21400186b9a3f89a7ef8e0e1d3852ce3335f958af008910bf0de56d60d3f8ad1e694dcb44f6aa2b49a8337babe88034752259b08302c50ee5a894c78bc8cd245d", 0xed) mkdir$auto(&(0x7f0000000400)='}[,&*}\x00', 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r5 = memfd_create$auto(&(0x7f00000007c0)='/sys/kesnel/debug/x\x01\x00\x00\x00\x00\x00\x00\x00pqrams/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xfc\x9cs\x1e\xb0I\xecF(\x03\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xb3\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4\xc8\x97\x00\x00B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLntz\xd78\bN\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85\xdfR\x17\xfa\x1bw&\x88\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97]M)\x8faJ1\x87zF\xc1*t\x03!\x83\xbe=\xf9\x12p\x81\x06\xecy\'\xe1-\x15\x85\x85\x9e\x89\xf6\xa7\x7f<\xa0j\xbc\x9d\x97\x01f\xa8e\x94d\x8cW\xad\xd3\x993\x93\xbbY\xaf\x03\x94\xb8\xdfB\xea\x18\x9d\xff=\x16\xc9),\x8a\xd9\x11\x867aG&\xa5\xf1\x8f\x01{#\x7f\x00\x00\x00\x00\x00\x00\x00M\x7fG\x11\xac\xca\xa9\xf7\xecT;\x00\n\xbe+pl\x91H\x92\xed6\x8dAO\x9fI\x95(d~\xb8\xa5\x02\xcc\xe6\xf4Vn\x06\x19k\x06\xcc\x9bu\xc4\xe2`\xcd\x94\xabN\xc7o5h\xe6\xa7V\x8b\'\xc1\xc5\xab/muc\xac\x87,@\vU\x92k\x89>\xda\x1f\x10O\x81\xc5\x04\xce\xfd\xc4\xec3\xd3\x94\x98\x87B)j\xf3\xf5\xe9\x98\xbb\xcc0\x94\x1b\x19$}\x10\x17\x8a\xb7H\x9a\f\x99\x8a\x17\x00\x00\xdfX\x0f\x1d\xe0T\x8aD\x1am8\xdf\xa1\x8e\xd2\x11R\xdb\xe6\xa8o\x01m\xdb\xc1\xc8\xaaH\xa4\x1c\xa5w[Q2\x8e\xc1\xa5\xd4\x87/=e$MI!\x06un\x83\xfchX\xb5W}<\xc9i\xc57\x10\x86+\xbf\x06\xd4\xa4\xacb\x10', 0x1) read$auto_proc_timers_operations_base(r5, &(0x7f0000000340)=""/170, 0xaa) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x1, 0xa}, 0x28, 0x108) lsm_list_modules$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x5, 0x5, 0xffffffff, 0x4, 0x53, 0x2, 0xffffffffffffffff, [0x40009574, 0x3, 0x1], {0x9, 0x2, 0x7, 0x1000004, 0x7f, 0x8000001, 0x5536, 0x400, 0x100}, {0x3, 0x23, 0x5, 0x6, 0x404, 0x80000000, 0x5, 0x27, 0x42}}) 5.00210299s ago: executing program 5 (id=3946): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) setfsuid$auto(0xee00) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0xffffffffffff7fff, 0x5, 0x1fe, 0x2, 0x1, 0x884, 0x4007, "0108a5172d53c213b43038e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x89, 0x9, 0xffff, 0x3ff, 0x7, @attach_btf_obj_fd, 0x440, 0xa, 0x7, 0x1ff, 0x9}, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) close_range$auto(0x2, 0x8, 0x0) setfsuid$auto(0xee01) r3 = setfsgid$auto(0xee01) setresgid$auto(r3, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\\\x00', 0x2) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x402) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.931261056s ago: executing program 3 (id=3947): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = epoll_create$auto(0x8800001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) write$auto(r2, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) epoll_ctl$auto(r1, 0x1, r0, 0x0) 4.891155089s ago: executing program 2 (id=3948): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x1, 0x12db) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) setfsuid$auto(0xee00) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x0) memfd_create$auto(&(0x7f00000000c0)='IPVS\x00\x84\x94\xbf\x7f\xe0(\xc7^M\xbe\x92\x98?I\xa5\x95V\xf2{\xd6\xc1\xc4.\xc3ja\xe8\xa1o\xb5-Z\x9dc\x152\xaew`0M\x1b3\r\x8afQ\xc2\x82W?r$\xf0\xce\x7f\x15\xa1\x13\xb2\x84\x04\xad<\x91\x85\xb22G\xf6\x8b\xba<\xe9&\x17%\x1a\xa5c\xe8\x06\xd4ok\x8a\xb2\xbaz\xf1\v\xf4\xaa\xda\x91\xfb\xea\x17~C\xb3\xc4S\xce\x83\x13\xd9\xbd{d\xfdB]\xb0R\x05b\x1b\xa5\xb8\x85\xa9\xbc5-9\x94\xa4QG\x06Z3#\x1cK\xbe\x16\xebaE~\x00\x00\x00\x00\x00', 0xa) fchmod$auto(0x0, 0x4) bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0xffffffffffff7fff, 0x5, 0x1fe, 0x2, 0x1, 0x884, 0x4007, "0108a5172d53c213b43038e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x89, 0x9, 0xffff, 0x3ff, 0x7, @attach_btf_obj_fd, 0x440, 0xa, 0x7, 0x1ff, 0x9}, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) close_range$auto(0x2, 0x8, 0x0) setfsuid$auto(0xee01) r4 = setfsgid$auto(r2) setresgid$auto(r4, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/snd_usb_audio/parameters/quirk_flags\x00', 0x121102, 0x0) write$auto(r5, &(0x7f0000000040)='\\\x00', 0x2) keyctl$auto(0x1f, 0x1, 0x6, r4, 0x3ff) 4.223287481s ago: executing program 3 (id=3949): close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) (async, rerun: 32) r0 = socket(0x2b, 0x1, 0x0) (rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) (async) recvmmsg$auto(r0, 0x0, 0x10000, 0x10000, 0x0) (async) mmap$auto(0xfffffffffffffffc, 0x80000001, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') (async) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x64c6, 0x1e2) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/name\x00', 0xac00, 0x0) ioctl$auto(0x4000000000000c8, 0x400454c8, 0x6f) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0xa5c, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x1487}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x881) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x180, 0x0) read$auto_event_trigger_fops_trace(r2, &(0x7f0000000140)=""/196, 0xc4) fcntl$auto_F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0xc) 2.807358217s ago: executing program 3 (id=3950): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') pselect6$auto(0x6, &(0x7f0000000000)={[0x0, 0x4c5e, 0x0, 0x80000001, 0xcdb, 0xe114, 0x4, 0x1, 0x4, 0x0, 0xffffffff, 0x7, 0x6, 0x9, 0x7, 0x8000]}, &(0x7f0000000140)={[0x7b, 0x7, 0x3, 0x6, 0x3fe, 0x2, 0x0, 0x2, 0x6, 0x7, 0xffff, 0xfffffffffffffff7, 0x7f, 0x400, 0x9, 0x200]}, &(0x7f00000001c0)={[0x3, 0x2, 0x34, 0x1, 0x100000000, 0x8000, 0x101, 0x3, 0x5, 0x1, 0x7, 0x0, 0x6, 0xd3d, 0x7, 0x4]}, &(0x7f0000000240)={0x4, 0x100000001}, &(0x7f0000000280)="5f63b02da995ea2218325b0ad7d3064d0cea74ca91b425c12aaed1cb74b019247e1929fc29e16132c0d742b24c76097d6f1310d7783eab57caf3cbe6b0d62efcab4d6a5a7ab5cbf2faa81011197557a0092e2ca8d3de232ae01fe716739b3d4227ce3795e923498506957ac832fa089b0ea1faed3f65982cc6794c6ced") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000300)=0x6) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={r1, @new_prog_fd, 0x2c, @old_map_fd=r2}, 0x4092) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), r0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x40400, 0xd8) fchmod$auto(r3, 0x9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) r4 = clone$auto(0x5, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x100000000) r5 = syz_clone(0x700, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r6) sendmsg$auto_TASKSTATS_CMD_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010a27bd7000fddbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="0500020a", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20000840) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000004740), r8) sendmsg$auto_TIPC_NL_NET_GET(r8, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006880)={&(0x7f0000004780)={0x14, r9, 0x711, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40014) access$auto(0x0, 0x3) sysfs$auto(0x2, 0x3b, 0x0) 2.579204717s ago: executing program 0 (id=3951): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000240)={0x14, r2, 0x9d0da3446261172d, 0x270bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x2400f081}, 0x20008080) mmap$auto(0x0, 0x9, 0xff8, 0x12, r0, 0x0) 2.344441498s ago: executing program 0 (id=3952): mmap$auto(0x40000000000, 0x5, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffd) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r0, &(0x7f0000000240)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x6, 0x1}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x529003, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc000) sendfile$auto(0xffffffffffffffff, r0, 0x0, 0x400000000006) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103041, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc?\x91QU\x9dI\xda\x1b\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,\x14\n\x1c!o\x9e\xb0\xadT\xfbR\xa1Y\x94\x9b\x86\xc3\xdcf\t\x9f}V[8\x04\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xed\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98j\xe3}\x10\xab\x04_\xcdd\x17\xe4\xcbA\xa5[\b\xb8T\x02tcfD\x91\xcaG\xdaag\xc9\x80\f\xc6P\xa4\xfb:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0]V\x11\xcb\xdd\x81\xbe\xdeL~\xa2(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x920x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x20, r6, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_MPATH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x68842e0ac16e58f8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xc, r9, 0x9, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2.225088746s ago: executing program 5 (id=3954): mmap$auto(0x40000000000, 0x5, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffd) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r0, &(0x7f0000000240)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x6, 0x1}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x529003, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc000) sendfile$auto(0xffffffffffffffff, r0, 0x0, 0x400000000006) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103041, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc?\x91QU\x9dI\xda\x1b\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,\x14\n\x1c!o\x9e\xb0\xadT\xfbR\xa1Y\x94\x9b\x86\xc3\xdcf\t\x9f}V[8\x04\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xed\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98j\xe3}\x10\xab\x04_\xcdd\x17\xe4\xcbA\xa5[\b\xb8T\x02tcfD\x91\xcaG\xdaag\xc9\x80\f\xc6P\xa4\xfb:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0]V\x11\xcb\xdd\x81\xbe\xdeL~\xa2(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x92f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) setfsuid$auto(0xee00) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x7) bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0xffffffffffff7fff, 0x5, 0x1fe, 0x2, 0x1, 0x884, 0x4007, "0108a5172d53c213b43038e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x89, 0x9, 0xffff, 0x3ff, 0x7, @attach_btf_obj_fd, 0x440, 0xa, 0x7, 0x1ff, 0x9}, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) close_range$auto(0x2, 0x8, 0x0) setfsuid$auto(0xee01) r3 = setfsgid$auto(0xee01) setresgid$auto(r3, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\\\x00', 0x2) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x402) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 396.92815ms ago: executing program 0 (id=3956): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) capset$auto(&(0x7f0000000180)={0xd, r1}, &(0x7f0000000240)={0x1, 0xc9f, 0x6}) fcntl$auto(r0, 0xb, r2) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x107300, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x101000, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/binderfs/binder1\x00', 0x101003, 0x0) ioctl$auto_BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000001f40)) sysfs$auto(0x2, 0x3b, 0x0) 329.982768ms ago: executing program 5 (id=3957): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = epoll_create$auto(0x8800001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) write$auto(r2, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) epoll_ctl$auto(r1, 0x1, r0, 0x0) 311.212489ms ago: executing program 2 (id=3958): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x8001) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) bind$auto(r0, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0xfffffffd, 0x4}}, 0x6) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x52ac2, 0x0) unshare$auto(0xfffffffffffffffc) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, r0, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x101, 0x0) (async) openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x101, 0x0) r1 = socket(0x2d, 0x4, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r1) bind$auto(0xffffffffffffffff, 0x0, 0xe) bind$auto(0xffffffffffffffff, 0x0, 0x65) (async) bind$auto(0xffffffffffffffff, 0x0, 0x65) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0xa000, 0x0) (async) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0xa000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3, 0x0) (async) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xa, 0x400005, 0x5, 0x10, 0xffffffffffffffff, 0x8003) read$auto(r1, 0x0, 0x1) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0xfffffffc) (async) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0xfffffffc) open(&(0x7f0000000200)='./file0\x00', 0x60240, 0x2b) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40a01, 0x14) (async) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40a01, 0x14) r3 = socket(0x1d, 0x2, 0xfffffffe) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) (async) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) getsockopt$auto(r3, 0x88, 0x69, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) (async) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x3) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 211.586454ms ago: executing program 5 (id=3959): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) r1 = setfsuid$auto(0xee00) r2 = setfsgid$auto(0xee01) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x1, r1, r2, 0xfffffc01, 0x100, 0x5, 0x1}, &(0x7f0000000040)=0xd3, &(0x7f0000000080)=0x5, 0x8002, 0x8000000000000000, 0x72, 0x4, 0x5, 0x3, 0x5, 0x7, @raw=0x7, @raw=0xe}) setresgid$auto(r3, r3, r3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x8, 0x2000000000002) bpf$auto(0x8, &(0x7f0000000080)=@bpf_attr_4={0x2e, 0xffffffffffffffff, 0x80000000}, 0x6) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) mmap$auto(0x6, 0x20009, 0xdf, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8000) r4 = socketcall$auto(0xffe, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x7, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0xffffffffffff9b0f, 0x40) pipe2$auto(0x0, 0x80) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4020ae76, r4) unshare$auto(0x40000080) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/pagemap\x00', 0x800, 0x0) write$auto(r6, &(0x7f0000000000)='3\b\x00\xff\xff\xdd\x00\bH\x12-|3X\v(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xce\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\x00', 0x1) 0s ago: executing program 3 (id=3960): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) kernel console output (not intermixed with test programs): Port device team_slave_0 removed [ 1387.325974][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1388.033157][T26545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.081355][T26546] Bluetooth: hci1: command tx timeout [ 1388.090024][T26545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.124776][T26545] bridge_slave_0: entered allmulticast mode [ 1388.165191][T26545] bridge_slave_0: entered promiscuous mode [ 1388.209407][T26545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.253952][T26545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.295105][T26545] bridge_slave_1: entered allmulticast mode [ 1388.327093][T26545] bridge_slave_1: entered promiscuous mode [ 1388.528224][T26545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.604862][T26545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.139801][T26545] team0: Port device team_slave_0 added [ 1389.377673][T26545] team0: Port device team_slave_1 added [ 1389.465960][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1390.011037][T26545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.028519][T26545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.090622][T26545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.161363][T26546] Bluetooth: hci1: command tx timeout [ 1390.201607][T26545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.229669][T26545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.307400][T26545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.759162][T26545] hsr_slave_0: entered promiscuous mode [ 1390.792463][T26545] hsr_slave_1: entered promiscuous mode [ 1390.822781][T26545] debugfs: 'hsr0' already exists in 'hsr' [ 1390.856077][T26545] Cannot create hsr debugfs directory [ 1391.884642][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1392.711727][T26704] HfR: entered promiscuous mode [ 1396.288049][T26545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1396.328820][T26545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1396.379627][T26545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1396.434558][T26545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1396.474147][T26545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1396.538244][T26545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1396.575178][T26545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1396.646233][T26545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1399.148607][T26545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.991562][T26545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.287595][T19146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.295342][T19146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.577454][T19137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.584921][T19137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.721235][T26545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.385111][T26545] veth0_vlan: entered promiscuous mode [ 1406.505283][T26545] veth1_vlan: entered promiscuous mode [ 1407.611801][T26545] veth0_macvtap: entered promiscuous mode [ 1407.680196][T26545] veth1_macvtap: entered promiscuous mode [ 1407.780398][T26545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1407.826289][T26545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1407.890888][T19144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.934063][T19144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.977011][T19144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.025208][T19144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.593350][T26992] openvswitch: HfR: Dropping previously announced user features [ 1408.732412][T19144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.769851][T19144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.374230][T19150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.401545][T19150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.627705][T27018] FAULT_INJECTION: forcing a failure. [ 1410.627705][T27018] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.702733][T27018] CPU: 0 UID: 0 PID: 27018 Comm: syz.2.2990 Tainted: G U syzkaller #0 PREEMPT(full) [ 1410.702760][T27018] Tainted: [U]=USER [ 1410.702766][T27018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1410.702775][T27018] Call Trace: [ 1410.702781][T27018] [ 1410.702788][T27018] dump_stack_lvl+0x100/0x190 [ 1410.702814][T27018] should_fail_ex.cold+0x5/0xa [ 1410.702833][T27018] should_failslab+0xc2/0x120 [ 1410.702857][T27018] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1410.702879][T27018] ? fib_rules_register+0x30/0x500 [ 1410.702987][T27018] kmemdup_noprof+0x29/0x60 [ 1410.703006][T27018] fib_rules_register+0x30/0x500 [ 1410.703022][T27018] ? fib_net_init+0x1a4/0x440 [ 1410.703045][T27018] fib4_rules_init+0x1f/0x1c0 [ 1410.703099][T27018] fib_net_init+0x1dc/0x440 [ 1410.703119][T27018] ? is_module_address+0x69/0xf0 [ 1410.703143][T27018] ? __pfx_fib_net_init+0x10/0x10 [ 1410.703166][T27018] ? timer_init_key+0x150/0x310 [ 1410.703191][T27018] ? devinet_init_net+0x56c/0x8d0 [ 1410.703212][T27018] ? __pfx_fib_net_init+0x10/0x10 [ 1410.703228][T27018] ops_init+0x1e2/0x5f0 [ 1410.703265][T27018] setup_net+0x118/0x3a0 [ 1410.703288][T27018] ? __pfx_setup_net+0x10/0x10 [ 1410.703311][T27018] ? mutex_init_lockdep+0xf1/0x120 [ 1410.703335][T27018] copy_net_ns+0x46f/0x7c0 [ 1410.703354][T27018] create_new_namespaces+0x3ea/0xac0 [ 1410.703375][T27018] unshare_nsproxy_namespaces+0xf2/0x220 [ 1410.703397][T27018] ksys_unshare+0x438/0xab0 [ 1410.703420][T27018] ? __pfx_ksys_unshare+0x10/0x10 [ 1410.703446][T27018] __x64_sys_unshare+0x31/0x40 [ 1410.703465][T27018] do_syscall_64+0x115/0x840 [ 1410.703487][T27018] ? clear_bhb_loop+0x40/0x90 [ 1410.703506][T27018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.703522][T27018] RIP: 0033:0x7f58bf19e019 [ 1410.703538][T27018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.703552][T27018] RSP: 002b:00007f58bffb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1410.703568][T27018] RAX: ffffffffffffffda RBX: 00007f58bf425fa0 RCX: 00007f58bf19e019 [ 1410.703579][T27018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1410.703588][T27018] RBP: 00007f58bf23500c R08: 0000000000000000 R09: 0000000000000000 [ 1410.703598][T27018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1410.703608][T27018] R13: 00007f58bf426038 R14: 00007f58bf425fa0 R15: 00007ffc037745b8 [ 1410.703631][T27018] [ 1411.764708][T27034] net_ratelimit: 48 callbacks suppressed [ 1411.764723][T27034] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1415.445108][T12588] Bluetooth: hci2: command 0x0406 tx timeout [ 1418.128396][T27144] binder: 27126:27144 ioctl 400c620e 200000001f40 returned -22 [ 1419.942989][T27164] HfR: entered promiscuous mode [ 1420.159121][T27157] hub 1-0:1.0: USB hub found [ 1420.223615][T27157] hub 1-0:1.0: 1 port detected [ 1421.940278][T26546] Bluetooth: hci2: unexpected event 0x16 length: 124 > 6 [ 1423.604654][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.623778][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.630410][T27236] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1430.800919][T12588] Bluetooth: hci0: command 0x0406 tx timeout [ 1433.223366][T27380] netlink: 'syz.3.3045': attribute type 3 has an invalid length. [ 1434.660213][T27406] binder: 27397:27406 ioctl 400c620e 200000001f40 returned -22 [ 1436.299435][T27431] netlink: 'syz.0.3055': attribute type 3 has an invalid length. [ 1436.889826][T27451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3059'. [ 1437.458327][T27451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.564144][T27451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.614218][T27452] ptp ptp0: only physical clock in use now [ 1437.687138][T27449] hub 1-0:1.0: USB hub found [ 1437.731072][T27449] hub 1-0:1.0: 1 port detected [ 1439.388228][T27510] binder: 27491:27510 ioctl 400c620e 200000001f40 returned -22 [ 1439.593667][T27511] FAULT_INJECTION: forcing a failure. [ 1439.593667][T27511] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1439.679741][T27511] CPU: 0 UID: 0 PID: 27511 Comm: syz.3.3063 Tainted: G U syzkaller #0 PREEMPT(full) [ 1439.679768][T27511] Tainted: [U]=USER [ 1439.679773][T27511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1439.679782][T27511] Call Trace: [ 1439.679787][T27511] [ 1439.679793][T27511] dump_stack_lvl+0x100/0x190 [ 1439.679816][T27511] should_fail_ex.cold+0x5/0xa [ 1439.679833][T27511] get_futex_key+0x1d2/0x14f0 [ 1439.679851][T27511] ? __pfx_get_futex_key+0x10/0x10 [ 1439.679866][T27511] ? lock_acquire+0x1b9/0x370 [ 1439.679894][T27511] futex_wake+0xf4/0x5e0 [ 1439.679915][T27511] ? __pfx_futex_wake+0x10/0x10 [ 1439.679934][T27511] ? find_held_lock+0x2b/0x80 [ 1439.679952][T27511] ? exit_mm_release+0x19/0x30 [ 1439.679975][T27511] do_futex+0x2b2/0x440 [ 1439.679991][T27511] ? __pfx_do_futex+0x10/0x10 [ 1439.680006][T27511] ? __might_fault+0xc5/0x140 [ 1439.680026][T27511] mm_release+0x24a/0x2f0 [ 1439.680042][T27511] do_exit+0x707/0x2ae0 [ 1439.680061][T27511] ? core_sys_select+0x358/0xbb0 [ 1439.680087][T27511] ? __pfx_do_exit+0x10/0x10 [ 1439.680106][T27511] ? do_raw_spin_lock+0x128/0x260 [ 1439.680122][T27511] ? find_held_lock+0x2b/0x80 [ 1439.680139][T27511] ? get_signal+0x7e0/0x21e0 [ 1439.680157][T27511] do_group_exit+0xd5/0x2a0 [ 1439.680179][T27511] get_signal+0x1ec7/0x21e0 [ 1439.680202][T27511] ? __pfx_get_signal+0x10/0x10 [ 1439.680223][T27511] arch_do_signal_or_restart+0x91/0x7a0 [ 1439.680241][T27511] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1439.680276][T27511] exit_to_user_mode_loop+0x139/0x6f0 [ 1439.680292][T27511] ? rcu_is_watching+0x12/0xc0 [ 1439.680314][T27511] do_syscall_64+0x652/0x840 [ 1439.680341][T27511] ? clear_bhb_loop+0x40/0x90 [ 1439.680360][T27511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.680375][T27511] RIP: 0033:0x7feab5b9e019 [ 1439.680389][T27511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.680403][T27511] RSP: 002b:00007feab6a3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1439.680418][T27511] RAX: fffffffffffffdfe RBX: 00007feab5e26450 RCX: 00007feab5b9e019 [ 1439.680427][T27511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1439.680436][T27511] RBP: 00007feab5c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1439.680445][T27511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1439.680453][T27511] R13: 00007feab5e264e8 R14: 00007feab5e26450 R15: 00007ffc19991038 [ 1439.680472][T27511] [ 1441.497038][T27543] netlink: 'syz.2.3067': attribute type 3 has an invalid length. [ 1442.228552][T27549] FAULT_INJECTION: forcing a failure. [ 1442.228552][T27549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1442.302595][T27549] CPU: 0 UID: 0 PID: 27549 Comm: syz.4.3070 Tainted: G U syzkaller #0 PREEMPT(full) [ 1442.302621][T27549] Tainted: [U]=USER [ 1442.302627][T27549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1442.302636][T27549] Call Trace: [ 1442.302641][T27549] [ 1442.302648][T27549] dump_stack_lvl+0x100/0x190 [ 1442.302671][T27549] should_fail_ex.cold+0x5/0xa [ 1442.302685][T27549] ? prepare_alloc_pages+0x16d/0x5f0 [ 1442.302709][T27549] should_fail_alloc_page+0xeb/0x140 [ 1442.302732][T27549] prepare_alloc_pages+0x1f0/0x5f0 [ 1442.302757][T27549] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1442.302776][T27549] ? __lock_acquire+0x49f/0x1a40 [ 1442.302800][T27549] ? do_raw_spin_unlock+0x145/0x1e0 [ 1442.302817][T27549] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1442.302839][T27549] ? rcu_is_watching+0x12/0xc0 [ 1442.302860][T27549] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1442.302878][T27549] ? __lock_acquire+0x49f/0x1a40 [ 1442.302906][T27549] ? lock_acquire+0x1b9/0x370 [ 1442.302928][T27549] ? find_held_lock+0x2b/0x80 [ 1442.302956][T27549] ? ktime_get+0x9f/0x320 [ 1442.302981][T27549] ? ktime_get+0x1a4/0x320 [ 1442.303011][T27549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1442.303035][T27549] ? policy_nodemask+0xed/0x4f0 [ 1442.303058][T27549] alloc_pages_mpol+0x1fb/0x540 [ 1442.303080][T27549] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1442.303099][T27549] ? find_held_lock+0x2b/0x80 [ 1442.303116][T27549] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 1442.303135][T27549] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 1442.303155][T27549] ? find_held_lock+0x2b/0x80 [ 1442.303174][T27549] folio_alloc_mpol_noprof+0x36/0x260 [ 1442.303200][T27549] vma_alloc_folio_noprof+0xed/0x1d0 [ 1442.303224][T27549] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1442.303246][T27549] ? rcu_read_unlock+0x2d/0xb0 [ 1442.303262][T27549] ? rcu_read_unlock+0x2d/0xb0 [ 1442.303281][T27549] do_wp_page+0x1ee1/0x4350 [ 1442.303308][T27549] ? __pfx_do_wp_page+0x10/0x10 [ 1442.303331][T27549] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1442.303352][T27549] __handle_mm_fault+0x1ab6/0x2a00 [ 1442.303373][T27549] ? mt_find+0x45e/0x8e0 [ 1442.303402][T27549] ? __pfx___handle_mm_fault+0x10/0x10 [ 1442.303417][T27549] ? __pfx_mt_find+0x10/0x10 [ 1442.303449][T27549] ? find_vma+0xbf/0x140 [ 1442.303468][T27549] ? __pfx_find_vma+0x10/0x10 [ 1442.303489][T27549] handle_mm_fault+0x37b/0xa30 [ 1442.303508][T27549] do_user_addr_fault+0x74c/0x12f0 [ 1442.303535][T27549] exc_page_fault+0x6f/0xd0 [ 1442.303556][T27549] asm_exc_page_fault+0x26/0x30 [ 1442.303572][T27549] RIP: 0033:0x7f5b2e99e02b [ 1442.303586][T27549] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 1442.303604][T27549] RSP: 002b:00007ffcc083b0b8 EFLAGS: 00010213 [ 1442.303617][T27549] RAX: 000000000000006e RBX: 0000000000160003 RCX: ffffffffffffffe8 [ 1442.303628][T27549] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5b2ec2627c [ 1442.303638][T27549] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 1442.303647][T27549] R10: 00007ffcc083b1c0 R11: 0000000000000246 R12: 00007ffcc083b1e0 [ 1442.303657][T27549] R13: 00007f5b2ec2627c R14: 0000000000160035 R15: 00007ffcc083b1c0 [ 1442.303677][T27549] [ 1442.308607][T27549] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1444.999098][T27603] binder: 27591:27603 ioctl 400c620e 200000001f40 returned -22 [ 1449.559371][T27667] FAULT_INJECTION: forcing a failure. [ 1449.559371][T27667] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.619720][T27667] CPU: 0 UID: 0 PID: 27667 Comm: syz.3.3087 Tainted: G U syzkaller #0 PREEMPT(full) [ 1449.619748][T27667] Tainted: [U]=USER [ 1449.619754][T27667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1449.619763][T27667] Call Trace: [ 1449.619769][T27667] [ 1449.619777][T27667] dump_stack_lvl+0x100/0x190 [ 1449.619801][T27667] should_fail_ex.cold+0x5/0xa [ 1449.619819][T27667] should_failslab+0xc2/0x120 [ 1449.619842][T27667] __kmalloc_cache_noprof+0x91/0x6c0 [ 1449.619860][T27667] ? proc_thread_self_get_link+0x1a6/0x210 [ 1449.619888][T27667] proc_thread_self_get_link+0x1a6/0x210 [ 1449.619913][T27667] pick_link+0xac2/0x13c0 [ 1449.619935][T27667] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1449.619961][T27667] step_into_slowpath+0x9ba/0xf90 [ 1449.619988][T27667] ? __pfx_step_into_slowpath+0x10/0x10 [ 1449.620013][T27667] ? lookup_fast+0x2da/0x600 [ 1449.620033][T27667] ? inode_permission+0x374/0x620 [ 1449.620055][T27667] link_path_walk+0xf28/0x1cc0 [ 1449.620085][T27667] path_openat+0x1c9/0x4280 [ 1449.620099][T27667] ? __kasan_slab_alloc+0x89/0x90 [ 1449.620119][T27667] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1449.620137][T27667] ? do_getname+0x35/0x390 [ 1449.620155][T27667] ? __x64_sys_openat+0x12d/0x210 [ 1449.620181][T27667] ? __pfx_path_openat+0x10/0x10 [ 1449.620202][T27667] do_file_open+0x20e/0x430 [ 1449.620223][T27667] ? __pfx_do_file_open+0x10/0x10 [ 1449.620253][T27667] ? alloc_fd+0x471/0x7a0 [ 1449.620270][T27667] ? do_getname+0x191/0x390 [ 1449.620291][T27667] do_sys_openat2+0x10f/0x1e0 [ 1449.620311][T27667] ? __pfx_do_sys_openat2+0x10/0x10 [ 1449.620332][T27667] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1449.620360][T27667] __x64_sys_openat+0x12d/0x210 [ 1449.620381][T27667] ? __pfx___x64_sys_openat+0x10/0x10 [ 1449.620418][T27667] do_syscall_64+0x115/0x840 [ 1449.620439][T27667] ? clear_bhb_loop+0x40/0x90 [ 1449.620459][T27667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.620476][T27667] RIP: 0033:0x7feab5b9e019 [ 1449.620490][T27667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1449.620505][T27667] RSP: 002b:00007feab6ae1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1449.620522][T27667] RAX: ffffffffffffffda RBX: 00007feab5e25fa0 RCX: 00007feab5b9e019 [ 1449.620532][T27667] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1449.620542][T27667] RBP: 00007feab5c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1449.620551][T27667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1449.620561][T27667] R13: 00007feab5e26038 R14: 00007feab5e25fa0 R15: 00007ffc19991038 [ 1449.620581][T27667] [ 1456.210162][T26546] Bluetooth: hci4: unexpected subevent 0x01 length: 3 < 18 [ 1457.640722][T27783] netlink: 'syz.2.3107': attribute type 3 has an invalid length. [ 1458.446291][T27801] binder: 27788:27801 ioctl 400c620e 200000001f40 returned -22 [ 1465.038232][T27926] HfR: entered promiscuous mode [ 1465.598539][T27936] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1468.777733][T27990] i2c i2c-0: new_device: Missing parameters [ 1472.951967][T28046] FAULT_INJECTION: forcing a failure. [ 1472.951967][T28046] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1473.067448][T28046] CPU: 0 UID: 0 PID: 28046 Comm: syz.3.3149 Tainted: G U syzkaller #0 PREEMPT(full) [ 1473.067475][T28046] Tainted: [U]=USER [ 1473.067480][T28046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1473.067491][T28046] Call Trace: [ 1473.067497][T28046] [ 1473.067504][T28046] dump_stack_lvl+0x100/0x190 [ 1473.067528][T28046] should_fail_ex.cold+0x5/0xa [ 1473.067547][T28046] get_futex_key+0x1d2/0x14f0 [ 1473.067569][T28046] ? __pfx_get_futex_key+0x10/0x10 [ 1473.067585][T28046] ? find_held_lock+0x2b/0x80 [ 1473.067607][T28046] ? __free_object+0x2a8/0x3f0 [ 1473.067634][T28046] futex_wake+0xf4/0x5e0 [ 1473.067652][T28046] ? debug_object_free+0x295/0x550 [ 1473.067677][T28046] ? __pfx_futex_wake+0x10/0x10 [ 1473.067698][T28046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1473.067721][T28046] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1473.067741][T28046] do_futex+0x2b2/0x440 [ 1473.067758][T28046] ? __pfx_do_futex+0x10/0x10 [ 1473.067780][T28046] __x64_sys_futex+0x34f/0x4d0 [ 1473.067799][T28046] ? __pfx___x64_sys_futex+0x10/0x10 [ 1473.067815][T28046] ? __x64_sys_nanosleep+0x21d/0x2a0 [ 1473.067835][T28046] ? __pfx___x64_sys_nanosleep+0x10/0x10 [ 1473.067861][T28046] do_syscall_64+0x115/0x840 [ 1473.067881][T28046] ? clear_bhb_loop+0x40/0x90 [ 1473.067899][T28046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.067915][T28046] RIP: 0033:0x7feab5b9e019 [ 1473.067929][T28046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1473.067944][T28046] RSP: 002b:00007feab6ae10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1473.067959][T28046] RAX: ffffffffffffffda RBX: 00007feab5e25fa8 RCX: 00007feab5b9e019 [ 1473.067970][T28046] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feab5e25fac [ 1473.067979][T28046] RBP: 00007feab5e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1473.067988][T28046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1473.067997][T28046] R13: 00007feab5e26038 R14: 00007ffc19990f50 R15: 00007ffc19991038 [ 1473.068018][T28046] [ 1474.743905][T28082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1474.809133][T28079] openvswitch: HfR: Dropping previously announced user features [ 1478.816312][T28147] openvswitch: HfR: Dropping previously announced user features [ 1479.870162][T28177] binder: 28164:28177 ioctl 400c620e 200000001f40 returned -22 [ 1485.044364][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.056403][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.523335][T28284] futex_wake_op: syz.3.3187 tries to shift op by -2048; fix this program [ 1487.803982][T26546] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1488.210801][T28295] FAULT_INJECTION: forcing a failure. [ 1488.210801][T28295] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.376076][T28295] CPU: 0 UID: 0 PID: 28295 Comm: syz.2.3189 Tainted: G U syzkaller #0 PREEMPT(full) [ 1488.376105][T28295] Tainted: [U]=USER [ 1488.376111][T28295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1488.376121][T28295] Call Trace: [ 1488.376127][T28295] [ 1488.376134][T28295] dump_stack_lvl+0x100/0x190 [ 1488.376157][T28295] should_fail_ex.cold+0x5/0xa [ 1488.376177][T28295] should_failslab+0xc2/0x120 [ 1488.376199][T28295] __kmalloc_noprof+0xfc/0x820 [ 1488.376220][T28295] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 1488.376241][T28295] apply_wqattrs_prepare+0xfe/0xbb0 [ 1488.376256][T28295] ? __alloc_workqueue+0xafd/0x1940 [ 1488.376280][T28295] apply_workqueue_attrs_locked+0x64/0xe0 [ 1488.376297][T28295] __alloc_workqueue+0xf55/0x1940 [ 1488.376321][T28295] alloc_workqueue_noprof+0xc7/0x130 [ 1488.376340][T28295] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1488.376363][T28295] ? lockdep_init_map_type+0x5c/0x250 [ 1488.376379][T28295] ? lockdep_init_map_type+0x5c/0x250 [ 1488.376397][T28295] __rds_conn_create+0x1234/0x25a0 [ 1488.376544][T28295] ? __pfx___rds_conn_create+0x10/0x10 [ 1488.376566][T28295] ? __kasan_kmalloc+0xaa/0xb0 [ 1488.376587][T28295] ? lockdep_init_map_type+0x5c/0x250 [ 1488.376605][T28295] rds_conn_create_outgoing+0x44/0x60 [ 1488.376631][T28295] rds_sendmsg+0x10da/0x34a0 [ 1488.376666][T28295] ? __pfx_rds_sendmsg+0x10/0x10 [ 1488.376684][T28295] ? __pfx_aa_sk_perm+0x10/0x10 [ 1488.376707][T28295] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1488.376747][T28295] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1488.376764][T28295] ____sys_sendmsg+0xa4d/0xbe0 [ 1488.376779][T28295] ? __pfx_rds_sendmsg+0x10/0x10 [ 1488.376797][T28295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1488.376823][T28295] ___sys_sendmsg+0x190/0x1e0 [ 1488.376842][T28295] ? __pfx____sys_sendmsg+0x10/0x10 [ 1488.376859][T28295] ? __lock_acquire+0x49f/0x1a40 [ 1488.376905][T28295] __sys_sendmsg+0x160/0x210 [ 1488.376927][T28295] ? __pfx___sys_sendmsg+0x10/0x10 [ 1488.376959][T28295] do_syscall_64+0x115/0x840 [ 1488.376979][T28295] ? clear_bhb_loop+0x40/0x90 [ 1488.376998][T28295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.377014][T28295] RIP: 0033:0x7f58bf19e019 [ 1488.377029][T28295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.377044][T28295] RSP: 002b:00007f58bcfd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1488.377059][T28295] RAX: ffffffffffffffda RBX: 00007f58bf426270 RCX: 00007f58bf19e019 [ 1488.377071][T28295] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 1488.377081][T28295] RBP: 00007f58bf23500c R08: 0000000000000000 R09: 0000000000000000 [ 1488.377091][T28295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.377101][T28295] R13: 00007f58bf426308 R14: 00007f58bf426270 R15: 00007ffc037745b8 [ 1488.377121][T28295] [ 1489.192133][T28316] FAULT_INJECTION: forcing a failure. [ 1489.192133][T28316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1489.286438][T28316] CPU: 0 UID: 0 PID: 28316 Comm: syz.4.3192 Tainted: G U syzkaller #0 PREEMPT(full) [ 1489.286465][T28316] Tainted: [U]=USER [ 1489.286470][T28316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1489.286480][T28316] Call Trace: [ 1489.286485][T28316] [ 1489.286492][T28316] dump_stack_lvl+0x100/0x190 [ 1489.286514][T28316] should_fail_ex.cold+0x5/0xa [ 1489.286533][T28316] _copy_to_user+0x32/0xd0 [ 1489.286560][T28316] simple_read_from_buffer+0xcb/0x170 [ 1489.286586][T28316] proc_fail_nth_read+0x1af/0x230 [ 1489.286609][T28316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1489.286631][T28316] ? rw_verify_area+0xce/0x6d0 [ 1489.286653][T28316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1489.286673][T28316] vfs_read+0x1e4/0xb40 [ 1489.286690][T28316] ? __pfx_vfs_read+0x10/0x10 [ 1489.286703][T28316] ? __fget_files+0x215/0x3d0 [ 1489.286722][T28316] ? __fget_files+0x21f/0x3d0 [ 1489.286742][T28316] ksys_read+0x12a/0x250 [ 1489.286755][T28316] ? __pfx_ksys_read+0x10/0x10 [ 1489.286775][T28316] do_syscall_64+0x115/0x840 [ 1489.286796][T28316] ? clear_bhb_loop+0x40/0x90 [ 1489.286833][T28316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.286849][T28316] RIP: 0033:0x7f5b2e95e84e [ 1489.286863][T28316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1489.286878][T28316] RSP: 002b:00007f5b2f90efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1489.286893][T28316] RAX: ffffffffffffffda RBX: 00007f5b2f90f6c0 RCX: 00007f5b2e95e84e [ 1489.286904][T28316] RDX: 000000000000000f RSI: 00007f5b2f90f0a0 RDI: 0000000000000003 [ 1489.286913][T28316] RBP: 00007f5b2f90f090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.286923][T28316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.286932][T28316] R13: 00007f5b2ec26038 R14: 00007f5b2ec25fa0 R15: 00007ffcc083af58 [ 1489.286952][T28316] [ 1490.722656][T19144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.001408][T12588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1491.019245][T12588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1491.029919][T12588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1491.045053][T12588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1491.053911][T12588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1491.214307][T19144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.562918][T19144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.748875][T28346] openvswitch: HfR: Dropping previously announced user features [ 1491.899479][T19144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.827440][T19144] bridge_slave_1: left allmulticast mode [ 1492.851894][T19144] bridge_slave_1: left promiscuous mode [ 1492.876831][T19144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.913163][T19144] bridge_slave_0: left allmulticast mode [ 1492.935052][T19144] bridge_slave_0: left promiscuous mode [ 1492.953596][T19144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.121966][T12588] Bluetooth: hci2: command tx timeout [ 1493.411827][T19144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.448174][T19144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.474277][T28385] usbip-vudc usbip-vudc.0: gadget not bound [ 1493.497102][T19144] bond0 (unregistering): Released all slaves [ 1493.650566][T19144] HfR: left promiscuous mode [ 1494.074148][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1494.438960][T19144] hsr_slave_0: left promiscuous mode [ 1494.468948][T19144] hsr_slave_1: left promiscuous mode [ 1494.496953][T19144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1494.532519][T19144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1494.543342][T28398] nbd: socks must be embedded in a SOCK_ITEM attr [ 1494.566613][T19144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1494.608280][T28398] block nbd0: shutting down sockets [ 1494.614224][T19144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1494.682258][T19144] veth1_macvtap: left promiscuous mode [ 1494.709798][T19144] veth0_macvtap: left promiscuous mode [ 1494.727700][T19144] veth1_vlan: left promiscuous mode [ 1494.762477][T19144] veth0_vlan: left promiscuous mode [ 1495.201558][T12588] Bluetooth: hci2: command tx timeout [ 1495.783574][T19144] team0 (unregistering): Port device team_slave_1 removed [ 1495.849689][T19144] team0 (unregistering): Port device team_slave_0 removed [ 1496.258467][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1496.287257][T28337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.320834][T28337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.331725][T28337] bridge_slave_0: entered allmulticast mode [ 1496.359546][T28337] bridge_slave_0: entered promiscuous mode [ 1496.405321][T28337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.435172][T28337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.453263][T28337] bridge_slave_1: entered allmulticast mode [ 1496.484442][T28337] bridge_slave_1: entered promiscuous mode [ 1496.707493][T28337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.788923][T28337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.947511][T28337] team0: Port device team_slave_0 added [ 1496.990098][T28337] team0: Port device team_slave_1 added [ 1497.281500][T12588] Bluetooth: hci2: command tx timeout [ 1497.385493][T19144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.416871][T28437] random: crng reseeded on system resumption [ 1497.754630][T28453] raw_sendmsg: syz.0.3209 forgot to set AF_INET. Fix it! [ 1497.778355][T26546] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1497.803767][T26546] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1497.814108][T26546] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1497.827551][T26546] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1497.838425][T26546] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1498.044057][T28337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.084401][T28337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.222282][T28337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.355171][T28337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.370882][T28337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.409774][T28337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.440405][T19144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.474497][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1498.577454][T19144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.716196][T19144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.856184][T28337] hsr_slave_0: entered promiscuous mode [ 1498.865308][T28337] hsr_slave_1: entered promiscuous mode [ 1498.872780][T28337] debugfs: 'hsr0' already exists in 'hsr' [ 1498.878748][T28337] Cannot create hsr debugfs directory [ 1499.103456][T28472] openvswitch: HfR: Dropping previously announced user features [ 1499.361746][T26546] Bluetooth: hci2: command tx timeout [ 1499.921246][T26546] Bluetooth: hci3: command tx timeout [ 1500.094329][T19144] bridge_slave_1: left allmulticast mode [ 1500.128002][T19144] bridge_slave_1: left promiscuous mode [ 1500.159122][T19144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.201413][T19144] bridge_slave_0: left allmulticast mode [ 1500.229742][T19144] bridge_slave_0: left promiscuous mode [ 1500.262095][T19144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.946597][T19144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.985409][T19144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.006868][T19144] bond0 (unregistering): Released all slaves [ 1501.105905][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1501.143963][T19144] HfR: left promiscuous mode [ 1502.000697][T26546] Bluetooth: hci3: command tx timeout [ 1502.323829][T19144] hsr_slave_0: left promiscuous mode [ 1502.345688][T19144] hsr_slave_1: left promiscuous mode [ 1502.368626][T19144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1502.397859][T19144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.429404][T19144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1502.442078][T19144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.470452][T19144] veth1_macvtap: left promiscuous mode [ 1502.483747][T19144] veth0_macvtap: left promiscuous mode [ 1502.497659][T19144] veth1_vlan: left promiscuous mode [ 1502.516837][T19144] veth0_vlan: left promiscuous mode [ 1503.096989][T19144] team0 (unregistering): Port device team_slave_1 removed [ 1503.136848][T19144] team0 (unregistering): Port device team_slave_0 removed [ 1503.433573][T28451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.454150][T28451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.470708][T28451] bridge_slave_0: entered allmulticast mode [ 1503.484971][T28451] bridge_slave_0: entered promiscuous mode [ 1503.502883][T28451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.520962][T28451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.538515][T28451] bridge_slave_1: entered allmulticast mode [ 1503.549477][T28451] bridge_slave_1: entered promiscuous mode [ 1503.568414][ T5290] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1503.808741][T28451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.837743][T28451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.889274][T28337] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1503.931373][T28337] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1503.963376][T28337] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1503.983551][T28337] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1504.085702][T26546] Bluetooth: hci3: command tx timeout [ 1504.098611][T28337] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1504.144252][T28337] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1504.154892][T28337] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1504.177850][T28337] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1504.195116][T28451] team0: Port device team_slave_0 added [ 1504.254693][T28451] team0: Port device team_slave_1 added [ 1504.387150][T28451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.410963][T28451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.493204][T28451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.555212][T28451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.600382][T28451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.710240][T28451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.062905][T28451] hsr_slave_0: entered promiscuous mode [ 1505.104226][T28451] hsr_slave_1: entered promiscuous mode [ 1505.139423][T28451] debugfs: 'hsr0' already exists in 'hsr' [ 1505.170212][T28451] Cannot create hsr debugfs directory [ 1505.670015][ T5290] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1505.980686][T26546] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1506.103869][T28337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.161259][T28574] Bluetooth: hci3: command tx timeout [ 1506.202656][T28337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.277635][T14338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.284830][T14338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.364504][T14338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.371682][T14338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1507.600746][T28574] Bluetooth: hci1: command 0x0406 tx timeout [ 1508.083314][T12588] Bluetooth: hci0: command 0x0406 tx timeout [ 1510.160830][T26546] Bluetooth: hci0: command 0x0406 tx timeout [ 1510.497656][T28451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1510.552699][T28451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1510.928685][T28451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1510.956361][T28451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1511.088657][T28451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1511.108031][T28451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1511.130234][T28451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1511.153460][T28451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1511.523644][T28337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.189207][T28451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1512.992008][T28451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1513.034721][T14337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.041943][T14337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1513.176773][T14338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.183993][T14338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1513.218252][T28337] veth0_vlan: entered promiscuous mode [ 1513.328988][T28337] veth1_vlan: entered promiscuous mode [ 1513.518879][T28337] veth0_macvtap: entered promiscuous mode [ 1513.582267][T28337] veth1_macvtap: entered promiscuous mode [ 1513.694810][T28337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1513.754599][T28337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1513.991125][T19150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.101554][T19146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.420665][T19146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.044563][T19146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.077645][T19146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.272286][T14327] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.368819][T28451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.407910][T14327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.438798][T14327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.649563][T28451] veth0_vlan: entered promiscuous mode [ 1515.726145][T28451] veth1_vlan: entered promiscuous mode [ 1516.017192][T28752] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 1516.787999][T28451] veth0_macvtap: entered promiscuous mode [ 1516.947341][T28451] veth1_macvtap: entered promiscuous mode [ 1517.085020][T28451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1517.147085][T28451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1517.221820][T14338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.304096][T14338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.432444][T14327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.871709][T14327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.882801][T19150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.919659][T14327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.340583][T14327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.360133][T14327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.503346][T28881] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1523.342275][T28892] openvswitch: HfR: Dropping previously announced user features [ 1525.814149][T28919] nbd: socks must be embedded in a SOCK_ITEM attr [ 1527.270162][T28969] zswap: compressor not available [ 1527.646415][T28980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3254'. [ 1527.783596][T28983] netlink: 'syz.5.3255': attribute type 3 has an invalid length. [ 1532.642161][T29054] netlink: 'syz.3.3265': attribute type 3 has an invalid length. [ 1533.772327][T29083] FAULT_INJECTION: forcing a failure. [ 1533.772327][T29083] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.786668][T29092] i2c i2c-0: new_device: Missing parameters [ 1533.836186][T29083] CPU: 0 UID: 0 PID: 29083 Comm: syz.5.3268 Tainted: G U syzkaller #0 PREEMPT(full) [ 1533.836214][T29083] Tainted: [U]=USER [ 1533.836220][T29083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1533.836229][T29083] Call Trace: [ 1533.836235][T29083] [ 1533.836242][T29083] dump_stack_lvl+0x100/0x190 [ 1533.836269][T29083] should_fail_ex.cold+0x5/0xa [ 1533.836288][T29083] should_failslab+0xc2/0x120 [ 1533.836312][T29083] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1533.836332][T29083] ? __pfx_map_id_range_down+0x10/0x10 [ 1533.836355][T29083] ? security_inode_alloc+0x3b/0x2c0 [ 1533.836380][T29083] security_inode_alloc+0x3b/0x2c0 [ 1533.836400][T29083] inode_init_always_gfp+0xc77/0xfb0 [ 1533.836425][T29083] alloc_inode+0x8e/0x250 [ 1533.836446][T29083] path_from_stashed+0x25b/0x750 [ 1533.836468][T29083] open_namespace+0x93/0x1c0 [ 1533.836567][T29083] ? __pfx_open_namespace+0x10/0x10 [ 1533.836584][T29083] ? apparmor_capable+0x1d7/0x4d0 [ 1533.836610][T29083] open_related_ns+0x41/0x70 [ 1533.836626][T29083] __tun_chr_ioctl+0x2e55/0x47c0 [ 1533.836685][T29083] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1533.836711][T29083] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1533.836731][T29083] ? hook_file_ioctl_common+0x140/0x440 [ 1533.836757][T29083] ? __fget_files+0x21f/0x3d0 [ 1533.836774][T29083] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1533.836793][T29083] __x64_sys_ioctl+0x18e/0x210 [ 1533.836816][T29083] do_syscall_64+0x115/0x840 [ 1533.836840][T29083] ? clear_bhb_loop+0x40/0x90 [ 1533.836860][T29083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.836876][T29083] RIP: 0033:0x7f102359e019 [ 1533.836891][T29083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1533.836907][T29083] RSP: 002b:00007f1020bf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1533.836922][T29083] RAX: ffffffffffffffda RBX: 00007f1023826450 RCX: 00007f102359e019 [ 1533.836932][T29083] RDX: 0000000000000073 RSI: 00000000000054e3 RDI: 00000000000000c8 [ 1533.836942][T29083] RBP: 00007f102363500c R08: 0000000000000000 R09: 0000000000000000 [ 1533.836954][T29083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1533.836964][T29083] R13: 00007f10238264e8 R14: 00007f1023826450 R15: 00007ffe16f57848 [ 1533.836991][T29083] [ 1538.313976][T12588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1538.337197][T12588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1538.348528][T12588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1538.358977][T12588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1538.370916][T12588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1538.430871][T14337] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.770246][T14337] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.989112][T14337] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.260677][T14337] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.110441][T14337] bridge_slave_1: left allmulticast mode [ 1540.122729][T14337] bridge_slave_1: left promiscuous mode [ 1540.138566][T14337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.159768][T14337] bridge_slave_0: left allmulticast mode [ 1540.170889][T14337] bridge_slave_0: left promiscuous mode [ 1540.191889][T14337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.351529][T29194] i2c i2c-0: new_device: Missing parameters [ 1540.491575][T12588] Bluetooth: hci3: command tx timeout [ 1540.661532][T14337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1540.685571][T14337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1540.724499][T14337] bond0 (unregistering): Released all slaves [ 1541.052222][ T5290] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1541.334020][T14337] hsr_slave_0: left promiscuous mode [ 1541.343175][T14337] hsr_slave_1: left promiscuous mode [ 1541.350945][T14337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.359436][T14337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.372849][T14337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.381037][T14337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.397387][T14337] veth1_macvtap: left promiscuous mode [ 1541.403104][T14337] veth0_macvtap: left promiscuous mode [ 1541.411357][T14337] veth1_vlan: left promiscuous mode [ 1541.417380][T14337] veth0_vlan: left promiscuous mode [ 1541.645253][T14337] team0 (unregistering): Port device team_slave_1 removed [ 1541.660934][T14337] team0 (unregistering): Port device team_slave_0 removed [ 1542.420993][T29155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.454635][T29155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.502341][T29155] bridge_slave_0: entered allmulticast mode [ 1542.548954][T29155] bridge_slave_0: entered promiscuous mode [ 1542.567523][T12588] Bluetooth: hci3: command tx timeout [ 1542.637046][T29155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.678760][T29155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.730800][T29155] bridge_slave_1: entered allmulticast mode [ 1542.772972][T29155] bridge_slave_1: entered promiscuous mode [ 1543.005020][T29155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.314062][T29155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.602552][ T5290] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1543.649402][T29155] team0: Port device team_slave_0 added [ 1543.736193][T29155] team0: Port device team_slave_1 added [ 1544.045263][T29155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.072777][T29155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1544.172233][T29155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1544.206959][T29155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1544.226222][T29155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1544.285416][T29155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.626110][T29155] hsr_slave_0: entered promiscuous mode [ 1544.649034][T12588] Bluetooth: hci3: command tx timeout [ 1544.673276][T29155] hsr_slave_1: entered promiscuous mode [ 1544.716055][T29155] debugfs: 'hsr0' already exists in 'hsr' [ 1544.754472][T29155] Cannot create hsr debugfs directory [ 1545.306428][ T5290] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1546.492290][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.504211][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.729718][T12588] Bluetooth: hci3: command tx timeout [ 1548.623615][T29353] i2c i2c-0: new_device: Missing parameters [ 1549.922895][T29155] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1549.950909][T29155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1550.007944][T29155] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1550.054366][T29155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1550.090437][T29155] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1550.124743][T29155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1550.169723][T29155] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1550.207294][T29155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1551.466800][T29412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3303'. [ 1552.265691][T29155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.339366][T29155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.387800][T14338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.395142][T14338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.498923][T19146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.506407][T19146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1557.021632][T29155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1557.240820][T29155] veth0_vlan: entered promiscuous mode [ 1557.376692][T29155] veth1_vlan: entered promiscuous mode [ 1558.044906][T29155] veth0_macvtap: entered promiscuous mode [ 1558.472904][T29155] veth1_macvtap: entered promiscuous mode [ 1558.709186][T29155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1558.852604][T29155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1559.137036][T19150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.452175][T29535] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1559.503860][T29535] binder: 29525:29535 ioctl 400c620e 200000001f40 returned -22 [ 1559.515707][T14337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.715341][T14337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.754037][T14337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.377293][T14337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.436364][T14338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.459510][T19144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.495771][T19144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.080000][T29546] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1561.803620][T29578] i2c i2c-0: new_device: Missing parameters [ 1561.812693][T29577] sd 0:0:1:0: PR command failed: 1026 [ 1561.819747][T29577] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1561.835898][T29577] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1562.944070][T29587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3326'. [ 1565.674673][T29645] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1568.962578][T29707] netlink: 'syz.5.3346': attribute type 3 has an invalid length. [ 1571.741116][T29753] netlink: 'syz.3.3356': attribute type 3 has an invalid length. [ 1572.206287][T29770] i2c i2c-0: new_device: Missing parameters [ 1573.639308][ T30] audit: type=1807 audit(4294970081.659:190): UNKNOWN=nl80211 res=0 [ 1573.652366][T29783] ima: policy update failed [ 1573.676017][ T30] audit: type=1802 audit(4294970081.659:191): pid=29783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.3362" res=0 errno=0 [ 1573.755043][ T30] audit: type=1802 audit(4294970081.689:192): pid=29783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3362" res=0 errno=0 [ 1574.242498][T29796] netlink: 'syz.0.3366': attribute type 3 has an invalid length. [ 1577.121390][T25464] Process accounting resumed [ 1578.917740][T29855] FAULT_INJECTION: forcing a failure. [ 1578.917740][T29855] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.123412][T29855] CPU: 0 UID: 0 PID: 29855 Comm: syz.5.3374 Tainted: G U syzkaller #0 PREEMPT(full) [ 1579.123439][T29855] Tainted: [U]=USER [ 1579.123445][T29855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1579.123455][T29855] Call Trace: [ 1579.123461][T29855] [ 1579.123467][T29855] dump_stack_lvl+0x100/0x190 [ 1579.123490][T29855] should_fail_ex.cold+0x5/0xa [ 1579.123509][T29855] should_failslab+0xc2/0x120 [ 1579.123531][T29855] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1579.123554][T29855] ? __d_alloc+0x35/0xa50 [ 1579.123575][T29855] __d_alloc+0x35/0xa50 [ 1579.123594][T29855] d_alloc+0x4a/0x1e0 [ 1579.123612][T29855] lookup_one_qstr_excl+0x171/0x250 [ 1579.123634][T29855] start_dirop+0x59/0xb0 [ 1579.123658][T29855] simple_start_creating+0xf9/0x110 [ 1579.123674][T29855] ? __pfx_simple_start_creating+0x10/0x10 [ 1579.123694][T29855] nfsd_mkdir+0xf6/0x460 [ 1579.123834][T29855] nfsd_fill_super+0x3f9/0x560 [ 1579.123858][T29855] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1579.123881][T29855] get_tree_keyed+0x10e/0x1d0 [ 1579.123905][T29855] vfs_get_tree+0x92/0x320 [ 1579.123934][T29855] path_mount+0x7d0/0x23d0 [ 1579.123958][T29855] ? __pfx_path_mount+0x10/0x10 [ 1579.123975][T29855] ? lockdep_hardirqs_on+0x78/0x100 [ 1579.123998][T29855] ? putname+0xb1/0x110 [ 1579.124013][T29855] ? kmem_cache_free+0x127/0x6b0 [ 1579.124037][T29855] ? __x64_sys_mount+0x293/0x310 [ 1579.124055][T29855] __x64_sys_mount+0x293/0x310 [ 1579.124074][T29855] ? __pfx___x64_sys_mount+0x10/0x10 [ 1579.124099][T29855] do_syscall_64+0x115/0x840 [ 1579.124118][T29855] ? clear_bhb_loop+0x40/0x90 [ 1579.124137][T29855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.124153][T29855] RIP: 0033:0x7f102359e019 [ 1579.124167][T29855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1579.124183][T29855] RSP: 002b:00007f10243b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1579.124198][T29855] RAX: ffffffffffffffda RBX: 00007f1023826270 RCX: 00007f102359e019 [ 1579.124209][T29855] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1579.124219][T29855] RBP: 00007f102363500c R08: 0000000000000000 R09: 0000000000000000 [ 1579.124229][T29855] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1579.124239][T29855] R13: 00007f1023826308 R14: 00007f1023826270 R15: 00007ffe16f57848 [ 1579.124260][T29855] [ 1581.635288][T29890] FAULT_INJECTION: forcing a failure. [ 1581.635288][T29890] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.676658][T29890] CPU: 0 UID: 0 PID: 29890 Comm: syz.2.3381 Tainted: G U syzkaller #0 PREEMPT(full) [ 1581.676686][T29890] Tainted: [U]=USER [ 1581.676692][T29890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1581.676702][T29890] Call Trace: [ 1581.676709][T29890] [ 1581.676715][T29890] dump_stack_lvl+0x100/0x190 [ 1581.676739][T29890] should_fail_ex.cold+0x5/0xa [ 1581.676758][T29890] should_failslab+0xc2/0x120 [ 1581.676781][T29890] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1581.676806][T29890] ? ep_ptable_queue_proc+0x5b/0x280 [ 1581.676898][T29890] ep_ptable_queue_proc+0x5b/0x280 [ 1581.676916][T29890] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1581.676932][T29890] snd_seq_pool_poll_wait+0x5b/0x160 [ 1581.676985][T29890] snd_seq_kernel_client_write_poll+0xa5/0x110 [ 1581.677012][T29890] snd_seq_oss_poll+0x17d/0x1d0 [ 1581.677032][T29890] ? __pfx_odev_poll+0x10/0x10 [ 1581.677054][T29890] odev_poll+0x4a/0x90 [ 1581.677069][T29890] ep_item_poll+0x141/0x1f0 [ 1581.677086][T29890] do_epoll_ctl_file+0x1e6e/0x36e0 [ 1581.677111][T29890] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1581.677131][T29890] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1581.677147][T29890] ? __fget_files+0x215/0x3d0 [ 1581.677165][T29890] ? __fget_files+0x21f/0x3d0 [ 1581.677194][T29890] ? do_epoll_ctl+0xfd/0x1a0 [ 1581.677211][T29890] do_epoll_ctl+0xfd/0x1a0 [ 1581.677229][T29890] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1581.677253][T29890] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1581.677273][T29890] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1581.677297][T29890] do_syscall_64+0x115/0x840 [ 1581.677317][T29890] ? clear_bhb_loop+0x40/0x90 [ 1581.677336][T29890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.677353][T29890] RIP: 0033:0x7f58bf19e019 [ 1581.677368][T29890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.677382][T29890] RSP: 002b:00007f58bffb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1581.677397][T29890] RAX: ffffffffffffffda RBX: 00007f58bf425fa0 RCX: 00007f58bf19e019 [ 1581.677408][T29890] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 1581.677417][T29890] RBP: 00007f58bf23500c R08: 0000000000000000 R09: 0000000000000000 [ 1581.677427][T29890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1581.677437][T29890] R13: 00007f58bf426038 R14: 00007f58bf425fa0 R15: 00007ffc037745b8 [ 1581.677458][T29890] [ 1586.174527][T29971] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3392'. [ 1586.215706][T29971] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3392'. [ 1587.257053][T29999] i2c i2c-0: new_device: Missing parameters [ 1588.686107][T30009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3398'. [ 1593.394770][T30108] netlink: zone id is out of range [ 1593.407935][T30108] netlink: zone id is out of range [ 1596.971837][T30157] binder: 30150:30157 ioctl 400c620e 200000001f40 returned -22 [ 1597.761582][T30178] FAULT_INJECTION: forcing a failure. [ 1597.761582][T30178] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.821814][T30178] CPU: 0 UID: 0 PID: 30178 Comm: syz.2.3422 Tainted: G U syzkaller #0 PREEMPT(full) [ 1597.821841][T30178] Tainted: [U]=USER [ 1597.821847][T30178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1597.821857][T30178] Call Trace: [ 1597.821862][T30178] [ 1597.821869][T30178] dump_stack_lvl+0x100/0x190 [ 1597.821893][T30178] should_fail_ex.cold+0x5/0xa [ 1597.821912][T30178] should_failslab+0xc2/0x120 [ 1597.821934][T30178] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1597.821955][T30178] ? anon_vma_clone+0x2ba/0xcd0 [ 1597.821982][T30178] anon_vma_clone+0x2ba/0xcd0 [ 1597.822011][T30178] __split_vma+0x51f/0xda0 [ 1597.822029][T30178] ? __pfx___split_vma+0x10/0x10 [ 1597.822043][T30178] ? vma_link+0x5ee/0x8d0 [ 1597.822068][T30178] vms_gather_munmap_vmas+0x1d2/0x1720 [ 1597.822089][T30178] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1597.822106][T30178] ? alloc_new_pud+0x217/0x320 [ 1597.822121][T30178] ? get_old_pud+0xd8/0x360 [ 1597.822137][T30178] ? move_page_tables+0x11c/0x4610 [ 1597.822157][T30178] ? __pfx_copy_vma+0x10/0x10 [ 1597.822181][T30178] do_vmi_align_munmap+0x287/0x5f0 [ 1597.822200][T30178] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1597.822243][T30178] do_vmi_munmap+0x1f8/0x3e0 [ 1597.822262][T30178] move_vma+0xe5b/0x1920 [ 1597.822282][T30178] ? __pfx_move_vma+0x10/0x10 [ 1597.822301][T30178] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1597.822329][T30178] ? vrm_set_new_addr+0x204/0x290 [ 1597.822347][T30178] mremap_to+0x234/0x4c0 [ 1597.822363][T30178] ? mas_walk+0x6ef/0x9b0 [ 1597.822383][T30178] ? __pfx_mremap_to+0x10/0x10 [ 1597.822398][T30178] ? check_prep_vma+0x912/0xe60 [ 1597.822419][T30178] __do_sys_mremap+0x88c/0x1850 [ 1597.822442][T30178] ? __pfx___do_sys_mremap+0x10/0x10 [ 1597.822458][T30178] ? ksys_write+0x190/0x250 [ 1597.822477][T30178] ? __pfx_do_futex+0x10/0x10 [ 1597.822500][T30178] ? __x64_sys_futex+0x34f/0x4d0 [ 1597.822528][T30178] do_syscall_64+0x115/0x840 [ 1597.822547][T30178] ? clear_bhb_loop+0x40/0x90 [ 1597.822565][T30178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.822581][T30178] RIP: 0033:0x7f58bf19e019 [ 1597.822595][T30178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.822610][T30178] RSP: 002b:00007f58bff93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1597.822625][T30178] RAX: ffffffffffffffda RBX: 00007f58bf426090 RCX: 00007f58bf19e019 [ 1597.822639][T30178] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 1597.822649][T30178] RBP: 00007f58bf23500c R08: 0000000103000000 R09: 0000000000000000 [ 1597.822666][T30178] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1597.822676][T30178] R13: 00007f58bf426128 R14: 00007f58bf426090 R15: 00007ffc037745b8 [ 1597.822697][T30178] [ 1599.626527][T30202] usbip-vudc usbip-vudc.0: gadget not bound [ 1601.359230][T30218] netlink: 'syz.2.3428': attribute type 3 has an invalid length. [ 1602.018975][T30230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3431'. [ 1602.506869][T30244] zswap: compressor FÛâ(_ not available [ 1603.174678][T30252] can: request_module (can-proto-0) failed. [ 1605.550822][T30291] futex_wake_op: syz.3.3440 tries to shift op by -2048; fix this program [ 1605.592250][T30291] futex_wake_op: syz.3.3440 tries to shift op by -2048; fix this program [ 1607.952519][T30340] binder: 30324:30340 ioctl 400c620e 200000001f40 returned -22 [ 1607.966732][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.975527][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.338747][T30367] nfsd: Unknown parameter 'batadv' [ 1614.784388][T30418] binder: 30412:30418 ioctl 400c620e 200000001f40 returned -22 [ 1615.168125][T26546] Bluetooth: hci2: command 0x0406 tx timeout [ 1624.242288][T30541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3484'. [ 1635.933855][T30712] binder: 30701:30712 ioctl 400c620e 200000001f40 returned -22 [ 1641.940364][T30808] netlink: zone id is out of range [ 1641.979334][T30808] netlink: zone id is out of range [ 1642.040380][T30808] netlink: zone id is out of range [ 1642.075245][T30808] netlink: zone id is out of range [ 1642.096888][T30808] netlink: zone id is out of range [ 1642.124089][T30808] netlink: zone id is out of range [ 1642.149663][T30808] netlink: zone id is out of range [ 1642.167474][T30808] netlink: zone id is out of range [ 1642.186447][T30808] netlink: zone id is out of range [ 1642.214506][T30808] netlink: zone id is out of range [ 1647.621784][T30896] binder: 30880:30896 ioctl 400c620e 200000001f40 returned -22 [ 1649.499846][T30928] FAULT_INJECTION: forcing a failure. [ 1649.499846][T30928] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.608260][T30928] CPU: 0 UID: 0 PID: 30928 Comm: syz.5.3542 Tainted: G U syzkaller #0 PREEMPT(full) [ 1649.608288][T30928] Tainted: [U]=USER [ 1649.608293][T30928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1649.608304][T30928] Call Trace: [ 1649.608310][T30928] [ 1649.608317][T30928] dump_stack_lvl+0x100/0x190 [ 1649.608343][T30928] should_fail_ex.cold+0x5/0xa [ 1649.608363][T30928] should_failslab+0xc2/0x120 [ 1649.608386][T30928] __kmalloc_noprof+0xfc/0x820 [ 1649.608404][T30928] ? rcu_is_watching+0x12/0xc0 [ 1649.608425][T30928] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1649.608454][T30928] tomoyo_realpath_from_path+0xb6/0x690 [ 1649.608481][T30928] tomoyo_check_open_permission+0x2af/0x3c0 [ 1649.608504][T30928] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1649.608537][T30928] ? hook_file_open+0x24f/0x8f0 [ 1649.608574][T30928] ? path_get+0x61/0x80 [ 1649.608596][T30928] tomoyo_file_open+0x6b/0x90 [ 1649.608613][T30928] security_file_open+0xb5/0x1e0 [ 1649.608636][T30928] do_dentry_open+0x588/0x14d0 [ 1649.608657][T30928] vfs_open+0x82/0x3f0 [ 1649.608679][T30928] path_openat+0x2873/0x4280 [ 1649.608703][T30928] ? __pfx_path_openat+0x10/0x10 [ 1649.608724][T30928] do_file_open+0x20e/0x430 [ 1649.608741][T30928] ? __pfx_do_file_open+0x10/0x10 [ 1649.608771][T30928] ? alloc_fd+0x471/0x7a0 [ 1649.608788][T30928] ? do_getname+0x191/0x390 [ 1649.608808][T30928] do_sys_openat2+0x10f/0x1e0 [ 1649.608828][T30928] ? __pfx_do_sys_openat2+0x10/0x10 [ 1649.608849][T30928] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1649.608879][T30928] __x64_sys_openat+0x12d/0x210 [ 1649.608899][T30928] ? __pfx___x64_sys_openat+0x10/0x10 [ 1649.608927][T30928] do_syscall_64+0x115/0x840 [ 1649.608947][T30928] ? clear_bhb_loop+0x40/0x90 [ 1649.608967][T30928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.608982][T30928] RIP: 0033:0x7f102359e019 [ 1649.608997][T30928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.609012][T30928] RSP: 002b:00007f10243f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1649.609028][T30928] RAX: ffffffffffffffda RBX: 00007f1023826090 RCX: 00007f102359e019 [ 1649.609038][T30928] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1649.609048][T30928] RBP: 00007f102363500c R08: 0000000000000000 R09: 0000000000000000 [ 1649.609057][T30928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1649.609066][T30928] R13: 00007f1023826128 R14: 00007f1023826090 R15: 00007ffe16f57848 [ 1649.609087][T30928] [ 1649.609607][T30928] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1653.226570][T30973] binder: 30963:30973 ioctl 400c620e 200000001f40 returned -22 [ 1654.559200][ T30] audit: type=1800 audit(4294970162.538:193): pid=30991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3553" name="discovery_nqn" dev="configfs" ino=257662 res=0 errno=0 [ 1657.182201][T31036] netlink: 'syz.5.3561': attribute type 3 has an invalid length. [ 1657.409311][T31045] FAULT_INJECTION: forcing a failure. [ 1657.409311][T31045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1657.477340][T31045] CPU: 0 UID: 0 PID: 31045 Comm: syz.2.3563 Tainted: G U syzkaller #0 PREEMPT(full) [ 1657.477369][T31045] Tainted: [U]=USER [ 1657.477375][T31045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1657.477385][T31045] Call Trace: [ 1657.477391][T31045] [ 1657.477398][T31045] dump_stack_lvl+0x100/0x190 [ 1657.477421][T31045] should_fail_ex.cold+0x5/0xa [ 1657.477438][T31045] ? prepare_alloc_pages+0x16d/0x5f0 [ 1657.477462][T31045] should_fail_alloc_page+0xeb/0x140 [ 1657.477485][T31045] prepare_alloc_pages+0x1f0/0x5f0 [ 1657.477512][T31045] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1657.477537][T31045] ? stack_trace_save+0x8e/0xc0 [ 1657.477564][T31045] ? __pfx_stack_trace_save+0x10/0x10 [ 1657.477585][T31045] ? stack_depot_save_flags+0x27/0x9d0 [ 1657.477614][T31045] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1657.477633][T31045] ? kasan_save_stack+0x30/0x50 [ 1657.477651][T31045] ? __kasan_kmalloc+0xaa/0xb0 [ 1657.477669][T31045] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1657.477684][T31045] ? mon_bin_open+0x1a8/0x470 [ 1657.477840][T31045] ? chrdev_open+0x234/0x6a0 [ 1657.477855][T31045] ? do_dentry_open+0x6ab/0x14d0 [ 1657.477871][T31045] ? vfs_open+0x82/0x3f0 [ 1657.477888][T31045] ? path_openat+0x2873/0x4280 [ 1657.477904][T31045] ? do_file_open+0x20e/0x430 [ 1657.477918][T31045] ? do_sys_openat2+0x10f/0x1e0 [ 1657.477936][T31045] ? __x64_sys_openat+0x12d/0x210 [ 1657.477955][T31045] ? do_syscall_64+0x115/0x840 [ 1657.477975][T31045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.478001][T31045] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1657.478026][T31045] ? policy_nodemask+0xed/0x4f0 [ 1657.478049][T31045] alloc_pages_mpol+0x1fb/0x540 [ 1657.478072][T31045] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1657.478095][T31045] ? kasan_save_track+0x14/0x30 [ 1657.478116][T31045] alloc_pages_noprof+0x1a/0x160 [ 1657.478131][T31045] get_zeroed_page_noprof+0x18/0xb0 [ 1657.478152][T31045] mon_alloc_buff+0xce/0x1b0 [ 1657.478171][T31045] mon_bin_open+0x207/0x470 [ 1657.478188][T31045] ? __pfx_mon_bin_open+0x10/0x10 [ 1657.478212][T31045] chrdev_open+0x234/0x6a0 [ 1657.478228][T31045] ? __pfx_apparmor_file_open+0x10/0x10 [ 1657.478248][T31045] ? __pfx_chrdev_open+0x10/0x10 [ 1657.478265][T31045] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1657.478324][T31045] do_dentry_open+0x6ab/0x14d0 [ 1657.478340][T31045] ? __pfx_chrdev_open+0x10/0x10 [ 1657.478361][T31045] vfs_open+0x82/0x3f0 [ 1657.478384][T31045] path_openat+0x2873/0x4280 [ 1657.478409][T31045] ? __pfx_path_openat+0x10/0x10 [ 1657.478430][T31045] do_file_open+0x20e/0x430 [ 1657.478448][T31045] ? __pfx_do_file_open+0x10/0x10 [ 1657.478477][T31045] ? alloc_fd+0x471/0x7a0 [ 1657.478495][T31045] ? do_getname+0x191/0x390 [ 1657.478516][T31045] do_sys_openat2+0x10f/0x1e0 [ 1657.478536][T31045] ? __pfx_do_sys_openat2+0x10/0x10 [ 1657.478563][T31045] __x64_sys_openat+0x12d/0x210 [ 1657.478584][T31045] ? __pfx___x64_sys_openat+0x10/0x10 [ 1657.478611][T31045] do_syscall_64+0x115/0x840 [ 1657.478630][T31045] ? clear_bhb_loop+0x40/0x90 [ 1657.478648][T31045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.478664][T31045] RIP: 0033:0x7f58bf19e019 [ 1657.478680][T31045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.478695][T31045] RSP: 002b:00007f58bff93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1657.478711][T31045] RAX: ffffffffffffffda RBX: 00007f58bf426090 RCX: 00007f58bf19e019 [ 1657.478723][T31045] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1657.478733][T31045] RBP: 00007f58bf23500c R08: 0000000000000000 R09: 0000000000000000 [ 1657.478742][T31045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1657.478752][T31045] R13: 00007f58bf426128 R14: 00007f58bf426090 R15: 00007ffc037745b8 [ 1657.478772][T31045] [ 1658.546089][T31050] binder: 31048:31050 ioctl 400c620e 200000001f40 returned -22 [ 1659.929053][T31088] i2c i2c-0: new_device: Missing parameters [ 1661.270923][T12588] Bluetooth: hci3: command 0x0406 tx timeout [ 1662.559359][T31125] netlink: 326 bytes leftover after parsing attributes in process `syz.0.3575'. [ 1668.100205][T31208] i2c i2c-0: new_device: Missing parameters [ 1668.360625][T31198] NFSD: Failed to start, no listeners configured. [ 1668.996879][T31203] NFSD: Failed to start, no listeners configured. [ 1669.435808][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.442323][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.754853][T31232] zswap: compressor not available [ 1672.806751][T31291] i2c i2c-0: new_device: Missing parameters [ 1672.975797][T31295] binder: 31282:31295 ioctl 400c620e 200000001f40 returned -22 [ 1679.629506][T31393] netlink: 'syz.0.3617': attribute type 3 has an invalid length. [ 1680.553276][T31406] bond0: Unable to set down delay as MII monitoring is disabled [ 1682.549238][T31448] i2c i2c-0: new_device: Missing parameters [ 1683.794220][T31453] netlink: 'syz.0.3627': attribute type 3 has an invalid length. [ 1687.638289][T31521] i2c i2c-0: new_device: Missing parameters [ 1688.050048][T31529] netlink: 'syz.3.3640': attribute type 3 has an invalid length. [ 1689.231116][T31554] FAULT_INJECTION: forcing a failure. [ 1689.231116][T31554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1689.268528][T31554] CPU: 0 UID: 0 PID: 31554 Comm: syz.2.3643 Tainted: G U syzkaller #0 PREEMPT(full) [ 1689.268556][T31554] Tainted: [U]=USER [ 1689.268561][T31554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1689.268572][T31554] Call Trace: [ 1689.268577][T31554] [ 1689.268584][T31554] dump_stack_lvl+0x100/0x190 [ 1689.268608][T31554] should_fail_ex.cold+0x5/0xa [ 1689.268626][T31554] _copy_to_user+0x32/0xd0 [ 1689.268654][T31554] simple_read_from_buffer+0xcb/0x170 [ 1689.268681][T31554] proc_fail_nth_read+0x1af/0x230 [ 1689.268704][T31554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1689.268732][T31554] ? rw_verify_area+0xce/0x6d0 [ 1689.268755][T31554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1689.268775][T31554] vfs_read+0x1e4/0xb40 [ 1689.268793][T31554] ? __pfx_vfs_read+0x10/0x10 [ 1689.268806][T31554] ? __fget_files+0x215/0x3d0 [ 1689.268825][T31554] ? __fget_files+0x21f/0x3d0 [ 1689.268845][T31554] ksys_read+0x12a/0x250 [ 1689.268859][T31554] ? __pfx_ksys_read+0x10/0x10 [ 1689.268878][T31554] do_syscall_64+0x115/0x840 [ 1689.268899][T31554] ? clear_bhb_loop+0x40/0x90 [ 1689.268922][T31554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.268938][T31554] RIP: 0033:0x7f58bf15e84e [ 1689.268953][T31554] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1689.268968][T31554] RSP: 002b:00007f58bd3b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1689.268983][T31554] RAX: ffffffffffffffda RBX: 00007f58bd3b46c0 RCX: 00007f58bf15e84e [ 1689.268993][T31554] RDX: 000000000000000f RSI: 00007f58bd3b40a0 RDI: 0000000000000005 [ 1689.269003][T31554] RBP: 00007f58bd3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.269012][T31554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.269021][T31554] R13: 00007f58bf4263f8 R14: 00007f58bf426360 R15: 00007ffc037745b8 [ 1689.269041][T31554] [ 1690.928388][T31585] FAULT_INJECTION: forcing a failure. [ 1690.928388][T31585] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.975826][T31585] CPU: 0 UID: 0 PID: 31585 Comm: syz.3.3650 Tainted: G U syzkaller #0 PREEMPT(full) [ 1690.975853][T31585] Tainted: [U]=USER [ 1690.975859][T31585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1690.975869][T31585] Call Trace: [ 1690.975875][T31585] [ 1690.975881][T31585] dump_stack_lvl+0x100/0x190 [ 1690.975905][T31585] should_fail_ex.cold+0x5/0xa [ 1690.975925][T31585] should_failslab+0xc2/0x120 [ 1690.975948][T31585] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1690.975967][T31585] ? mas_data_end+0x17b/0x2a0 [ 1690.975987][T31585] ? vm_area_dup+0x27/0x8e0 [ 1690.976006][T31585] vm_area_dup+0x27/0x8e0 [ 1690.976022][T31585] __split_vma+0x18c/0xda0 [ 1690.976041][T31585] ? __pfx___split_vma+0x10/0x10 [ 1690.976065][T31585] ? __pfx_mas_prev+0x10/0x10 [ 1690.976093][T31585] vms_gather_munmap_vmas+0x3a5/0x1720 [ 1690.976111][T31585] ? validate_mm+0x392/0x4e0 [ 1690.976127][T31585] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1690.976144][T31585] ? __pfx_validate_mm+0x10/0x10 [ 1690.976173][T31585] do_vmi_align_munmap+0x287/0x5f0 [ 1690.976192][T31585] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1690.976209][T31585] ? cap_mmap_addr+0x4b/0x120 [ 1690.976250][T31585] do_vmi_munmap+0x1f8/0x3e0 [ 1690.976270][T31585] __vm_munmap+0x196/0x390 [ 1690.976289][T31585] ? __pfx___vm_munmap+0x10/0x10 [ 1690.976319][T31585] __x64_sys_munmap+0x59/0x80 [ 1690.976342][T31585] do_syscall_64+0x115/0x840 [ 1690.976362][T31585] ? clear_bhb_loop+0x40/0x90 [ 1690.976381][T31585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.976397][T31585] RIP: 0033:0x7f87a3f9de47 [ 1690.976411][T31585] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.976426][T31585] RSP: 002b:00007f87a4e18d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1690.976442][T31585] RAX: ffffffffffffffda RBX: 00007f879c000000 RCX: 00007f87a3f9de47 [ 1690.976452][T31585] RDX: 0000000000000000 RSI: 0000000002000000 RDI: 00007f879a000000 [ 1690.976461][T31585] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1690.976471][T31585] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 1690.976481][T31585] R13: 0000000000001000 R14: 00007f87a0000000 R15: 0000000002000000 [ 1690.976502][T31585] [ 1691.828255][T31605] netlink: 'syz.3.3651': attribute type 1 has an invalid length. [ 1699.113044][T31715] binder: 31703:31715 ioctl 400c620e 200000001f40 returned -22 [ 1701.007546][T31743] FAULT_INJECTION: forcing a failure. [ 1701.007546][T31743] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1701.062322][T31743] CPU: 0 UID: 0 PID: 31743 Comm: syz.5.3670 Tainted: G U syzkaller #0 PREEMPT(full) [ 1701.062349][T31743] Tainted: [U]=USER [ 1701.062355][T31743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1701.062364][T31743] Call Trace: [ 1701.062369][T31743] [ 1701.062376][T31743] dump_stack_lvl+0x100/0x190 [ 1701.062399][T31743] should_fail_ex.cold+0x5/0xa [ 1701.062417][T31743] get_futex_key+0x1d2/0x14f0 [ 1701.062435][T31743] ? __pfx_get_futex_key+0x10/0x10 [ 1701.062450][T31743] ? lock_acquire+0x1b9/0x370 [ 1701.062478][T31743] futex_wake+0xf4/0x5e0 [ 1701.062500][T31743] ? __pfx_futex_wake+0x10/0x10 [ 1701.062519][T31743] ? find_held_lock+0x2b/0x80 [ 1701.062538][T31743] ? exit_mm_release+0x19/0x30 [ 1701.062568][T31743] do_futex+0x2b2/0x440 [ 1701.062586][T31743] ? __pfx_do_futex+0x10/0x10 [ 1701.062601][T31743] ? __might_fault+0xc5/0x140 [ 1701.062623][T31743] mm_release+0x24a/0x2f0 [ 1701.062639][T31743] do_exit+0x707/0x2ae0 [ 1701.062663][T31743] ? __pfx_do_exit+0x10/0x10 [ 1701.062683][T31743] ? do_raw_spin_lock+0x128/0x260 [ 1701.062699][T31743] ? find_held_lock+0x2b/0x80 [ 1701.062718][T31743] ? get_signal+0x7e0/0x21e0 [ 1701.062737][T31743] do_group_exit+0xd5/0x2a0 [ 1701.062760][T31743] get_signal+0x1ec7/0x21e0 [ 1701.062783][T31743] ? __pfx_get_signal+0x10/0x10 [ 1701.062801][T31743] ? do_futex+0x190/0x440 [ 1701.062819][T31743] arch_do_signal_or_restart+0x91/0x7a0 [ 1701.062835][T31743] ? do_epoll_ctl+0x12e/0x1a0 [ 1701.062854][T31743] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1701.062890][T31743] exit_to_user_mode_loop+0x139/0x6f0 [ 1701.062906][T31743] ? rcu_is_watching+0x12/0xc0 [ 1701.062925][T31743] do_syscall_64+0x652/0x840 [ 1701.062947][T31743] ? clear_bhb_loop+0x40/0x90 [ 1701.062966][T31743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.062981][T31743] RIP: 0033:0x7f102359e019 [ 1701.062995][T31743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.063009][T31743] RSP: 002b:00007f10244140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1701.063025][T31743] RAX: fffffffffffffe00 RBX: 00007f1023825fa8 RCX: 00007f102359e019 [ 1701.063035][T31743] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1023825fa8 [ 1701.063044][T31743] RBP: 00007f1023825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1701.063054][T31743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1701.063063][T31743] R13: 00007f1023826038 R14: 00007ffe16f57760 R15: 00007ffe16f57848 [ 1701.063082][T31743] [ 1703.946886][ T30] audit: type=1800 audit(4294970211.894:194): pid=31794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3678" name="dbroot" dev="configfs" ino=265623 res=0 errno=0 [ 1704.205561][T31801] FAULT_INJECTION: forcing a failure. [ 1704.205561][T31801] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1704.270194][T31801] CPU: 0 UID: 0 PID: 31801 Comm: syz.3.3680 Tainted: G U syzkaller #0 PREEMPT(full) [ 1704.270227][T31801] Tainted: [U]=USER [ 1704.270232][T31801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1704.270242][T31801] Call Trace: [ 1704.270247][T31801] [ 1704.270255][T31801] dump_stack_lvl+0x100/0x190 [ 1704.270278][T31801] should_fail_ex.cold+0x5/0xa [ 1704.270296][T31801] get_futex_key+0x1d2/0x14f0 [ 1704.270314][T31801] ? __pfx_get_futex_key+0x10/0x10 [ 1704.270330][T31801] ? lock_acquire+0x1b9/0x370 [ 1704.270357][T31801] futex_wake+0xf4/0x5e0 [ 1704.270379][T31801] ? __pfx_futex_wake+0x10/0x10 [ 1704.270398][T31801] ? find_held_lock+0x2b/0x80 [ 1704.270417][T31801] ? exit_mm_release+0x19/0x30 [ 1704.270440][T31801] do_futex+0x2b2/0x440 [ 1704.270457][T31801] ? __pfx_do_futex+0x10/0x10 [ 1704.270472][T31801] ? __might_fault+0xc5/0x140 [ 1704.270493][T31801] mm_release+0x24a/0x2f0 [ 1704.270510][T31801] do_exit+0x707/0x2ae0 [ 1704.270533][T31801] ? __pfx_do_exit+0x10/0x10 [ 1704.270553][T31801] ? do_raw_spin_lock+0x128/0x260 [ 1704.270569][T31801] ? find_held_lock+0x2b/0x80 [ 1704.270587][T31801] ? get_signal+0x7e0/0x21e0 [ 1704.270606][T31801] do_group_exit+0xd5/0x2a0 [ 1704.270633][T31801] get_signal+0x1ec7/0x21e0 [ 1704.270657][T31801] ? __pfx_get_signal+0x10/0x10 [ 1704.270675][T31801] ? do_futex+0x190/0x440 [ 1704.270692][T31801] arch_do_signal_or_restart+0x91/0x7a0 [ 1704.270710][T31801] ? do_epoll_ctl+0x12e/0x1a0 [ 1704.270729][T31801] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1704.270764][T31801] exit_to_user_mode_loop+0x139/0x6f0 [ 1704.270779][T31801] ? rcu_is_watching+0x12/0xc0 [ 1704.270799][T31801] do_syscall_64+0x652/0x840 [ 1704.270820][T31801] ? clear_bhb_loop+0x40/0x90 [ 1704.270838][T31801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.270854][T31801] RIP: 0033:0x7f87a3f9e019 [ 1704.270867][T31801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.270882][T31801] RSP: 002b:00007f87a4e1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1704.270897][T31801] RAX: fffffffffffffe00 RBX: 00007f87a4225fa8 RCX: 00007f87a3f9e019 [ 1704.270908][T31801] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87a4225fa8 [ 1704.270917][T31801] RBP: 00007f87a4225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1704.270926][T31801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1704.270936][T31801] R13: 00007f87a4226038 R14: 00007ffe2524d540 R15: 00007ffe2524d628 [ 1704.270955][T31801] [ 1708.343513][T31873] FAULT_INJECTION: forcing a failure. [ 1708.343513][T31873] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1708.388805][T31873] CPU: 0 UID: 0 PID: 31873 Comm: syz.3.3691 Tainted: G U syzkaller #0 PREEMPT(full) [ 1708.388831][T31873] Tainted: [U]=USER [ 1708.388837][T31873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1708.388846][T31873] Call Trace: [ 1708.388852][T31873] [ 1708.388858][T31873] dump_stack_lvl+0x100/0x190 [ 1708.388880][T31873] should_fail_ex.cold+0x5/0xa [ 1708.388898][T31873] get_futex_key+0x1d2/0x14f0 [ 1708.388920][T31873] ? __pfx_get_futex_key+0x10/0x10 [ 1708.388936][T31873] ? lock_acquire+0x1b9/0x370 [ 1708.388964][T31873] futex_wake+0xf4/0x5e0 [ 1708.388985][T31873] ? __pfx_futex_wake+0x10/0x10 [ 1708.389004][T31873] ? find_held_lock+0x2b/0x80 [ 1708.389023][T31873] ? exit_mm_release+0x19/0x30 [ 1708.389046][T31873] do_futex+0x2b2/0x440 [ 1708.389063][T31873] ? __pfx_do_futex+0x10/0x10 [ 1708.389078][T31873] ? __might_fault+0xc5/0x140 [ 1708.389099][T31873] mm_release+0x24a/0x2f0 [ 1708.389115][T31873] do_exit+0x707/0x2ae0 [ 1708.389139][T31873] ? __pfx_do_exit+0x10/0x10 [ 1708.389159][T31873] ? do_raw_spin_lock+0x128/0x260 [ 1708.389175][T31873] ? find_held_lock+0x2b/0x80 [ 1708.389192][T31873] ? get_signal+0x7e0/0x21e0 [ 1708.389211][T31873] do_group_exit+0xd5/0x2a0 [ 1708.389233][T31873] get_signal+0x1ec7/0x21e0 [ 1708.389256][T31873] ? __pfx_get_signal+0x10/0x10 [ 1708.389274][T31873] ? do_futex+0x190/0x440 [ 1708.389292][T31873] arch_do_signal_or_restart+0x91/0x7a0 [ 1708.389308][T31873] ? do_epoll_ctl+0x12e/0x1a0 [ 1708.389326][T31873] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1708.389362][T31873] exit_to_user_mode_loop+0x139/0x6f0 [ 1708.389377][T31873] ? rcu_is_watching+0x12/0xc0 [ 1708.389397][T31873] do_syscall_64+0x652/0x840 [ 1708.389418][T31873] ? clear_bhb_loop+0x40/0x90 [ 1708.389437][T31873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.389452][T31873] RIP: 0033:0x7f87a3f9e019 [ 1708.389465][T31873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.389480][T31873] RSP: 002b:00007f87a4e1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1708.389498][T31873] RAX: fffffffffffffe00 RBX: 00007f87a4225fa8 RCX: 00007f87a3f9e019 [ 1708.389508][T31873] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87a4225fa8 [ 1708.389517][T31873] RBP: 00007f87a4225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1708.389527][T31873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1708.389536][T31873] R13: 00007f87a4226038 R14: 00007ffe2524d540 R15: 00007ffe2524d628 [ 1708.389556][T31873] [ 1708.999978][T31891] netlink: 'syz.5.3696': attribute type 3 has an invalid length. [ 1710.833686][T31921] usbip-vudc usbip-vudc.0: gadget not bound [ 1711.438261][T31938] i2c i2c-0: new_device: Missing parameters [ 1712.683293][T31940] FAULT_INJECTION: forcing a failure. [ 1712.683293][T31940] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1712.749017][T31940] CPU: 0 UID: 0 PID: 31940 Comm: syz.3.3702 Tainted: G U syzkaller #0 PREEMPT(full) [ 1712.749043][T31940] Tainted: [U]=USER [ 1712.749048][T31940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1712.749058][T31940] Call Trace: [ 1712.749064][T31940] [ 1712.749070][T31940] dump_stack_lvl+0x100/0x190 [ 1712.749093][T31940] should_fail_ex.cold+0x5/0xa [ 1712.749111][T31940] get_futex_key+0x1d2/0x14f0 [ 1712.749129][T31940] ? __pfx_get_futex_key+0x10/0x10 [ 1712.749145][T31940] ? lock_acquire+0x1b9/0x370 [ 1712.749172][T31940] futex_wake+0xf4/0x5e0 [ 1712.749194][T31940] ? __pfx_futex_wake+0x10/0x10 [ 1712.749213][T31940] ? find_held_lock+0x2b/0x80 [ 1712.749232][T31940] ? exit_mm_release+0x19/0x30 [ 1712.749255][T31940] do_futex+0x2b2/0x440 [ 1712.749272][T31940] ? __pfx_do_futex+0x10/0x10 [ 1712.749288][T31940] ? __might_fault+0xc5/0x140 [ 1712.749309][T31940] mm_release+0x24a/0x2f0 [ 1712.749326][T31940] do_exit+0x707/0x2ae0 [ 1712.749349][T31940] ? __pfx_do_exit+0x10/0x10 [ 1712.749369][T31940] ? do_raw_spin_lock+0x128/0x260 [ 1712.749397][T31940] ? find_held_lock+0x2b/0x80 [ 1712.749415][T31940] ? get_signal+0x7e0/0x21e0 [ 1712.749433][T31940] do_group_exit+0xd5/0x2a0 [ 1712.749456][T31940] get_signal+0x1ec7/0x21e0 [ 1712.749479][T31940] ? __pfx_get_signal+0x10/0x10 [ 1712.749497][T31940] ? do_futex+0x190/0x440 [ 1712.749515][T31940] arch_do_signal_or_restart+0x91/0x7a0 [ 1712.749531][T31940] ? do_epoll_ctl+0x12e/0x1a0 [ 1712.749550][T31940] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1712.749586][T31940] exit_to_user_mode_loop+0x139/0x6f0 [ 1712.749601][T31940] ? rcu_is_watching+0x12/0xc0 [ 1712.749621][T31940] do_syscall_64+0x652/0x840 [ 1712.749642][T31940] ? clear_bhb_loop+0x40/0x90 [ 1712.749661][T31940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.749677][T31940] RIP: 0033:0x7f87a3f9e019 [ 1712.749690][T31940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.749704][T31940] RSP: 002b:00007f87a4e1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1712.749720][T31940] RAX: fffffffffffffe00 RBX: 00007f87a4225fa8 RCX: 00007f87a3f9e019 [ 1712.749730][T31940] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87a4225fa8 [ 1712.749739][T31940] RBP: 00007f87a4225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1712.749749][T31940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1712.749758][T31940] R13: 00007f87a4226038 R14: 00007ffe2524d540 R15: 00007ffe2524d628 [ 1712.749777][T31940] [ 1713.821616][T31953] i2c i2c-0: new_device: Missing parameters [ 1715.030288][T31989] netlink: 'syz.5.3710': attribute type 3 has an invalid length. [ 1718.659302][T32054] netlink: 'syz.0.3720': attribute type 3 has an invalid length. [ 1723.492274][T32130] netlink: 'syz.0.3731': attribute type 3 has an invalid length. [ 1724.293872][T32155] net_ratelimit: 432 callbacks suppressed [ 1724.293891][T32155] netlink: zone id is out of range [ 1724.363442][T32155] netlink: zone id is out of range [ 1724.396680][T32155] netlink: zone id is out of range [ 1724.481274][T32155] netlink: zone id is out of range [ 1724.538869][T32155] netlink: zone id is out of range [ 1724.578148][T32155] netlink: zone id is out of range [ 1724.641246][T32155] netlink: zone id is out of range [ 1724.706448][T32155] netlink: zone id is out of range [ 1724.729943][T32155] netlink: zone id is out of range [ 1724.771750][T32155] netlink: zone id is out of range [ 1725.975125][T32174] FAULT_INJECTION: forcing a failure. [ 1725.975125][T32174] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1726.033019][T32174] CPU: 0 UID: 0 PID: 32174 Comm: syz.2.3739 Tainted: G U syzkaller #0 PREEMPT(full) [ 1726.033047][T32174] Tainted: [U]=USER [ 1726.033053][T32174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1726.033063][T32174] Call Trace: [ 1726.033069][T32174] [ 1726.033076][T32174] dump_stack_lvl+0x100/0x190 [ 1726.033100][T32174] should_fail_ex.cold+0x5/0xa [ 1726.033116][T32174] ? __sys_bpf+0x20a/0x4e80 [ 1726.033136][T32174] get_futex_key+0x1d2/0x14f0 [ 1726.033154][T32174] ? __pfx_get_futex_key+0x10/0x10 [ 1726.033168][T32174] ? __pfx___sys_bpf+0x10/0x10 [ 1726.033183][T32174] ? __pfx_futex_hash+0x10/0x10 [ 1726.033198][T32174] ? get_pid_task+0xfc/0x250 [ 1726.033217][T32174] ? get_pid_task+0xfc/0x250 [ 1726.033239][T32174] futex_wake+0xf4/0x5e0 [ 1726.033257][T32174] ? futex_wait+0x11e/0x370 [ 1726.033277][T32174] ? find_held_lock+0x2b/0x80 [ 1726.033295][T32174] ? __pfx_futex_wake+0x10/0x10 [ 1726.033317][T32174] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1726.033336][T32174] ? vfs_write+0x15d/0x1050 [ 1726.033353][T32174] do_futex+0x2b2/0x440 [ 1726.033370][T32174] ? __pfx_do_futex+0x10/0x10 [ 1726.033392][T32174] __x64_sys_futex+0x34f/0x4d0 [ 1726.033411][T32174] ? __pfx___x64_sys_futex+0x10/0x10 [ 1726.033435][T32174] do_syscall_64+0x115/0x840 [ 1726.033456][T32174] ? clear_bhb_loop+0x40/0x90 [ 1726.033475][T32174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.033490][T32174] RIP: 0033:0x7f58bf19e019 [ 1726.033505][T32174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1726.033519][T32174] RSP: 002b:00007f58bffb40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1726.033535][T32174] RAX: ffffffffffffffda RBX: 00007f58bf425fa8 RCX: 00007f58bf19e019 [ 1726.033545][T32174] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f58bf425fac [ 1726.033555][T32174] RBP: 00007f58bf425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1726.033564][T32174] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1726.033573][T32174] R13: 00007f58bf426038 R14: 00007ffc037744d0 R15: 00007ffc037745b8 [ 1726.033593][T32174] [ 1726.778328][T32184] FAULT_INJECTION: forcing a failure. [ 1726.778328][T32184] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.794834][T32184] CPU: 0 UID: 0 PID: 32184 Comm: syz.2.3741 Tainted: G U syzkaller #0 PREEMPT(full) [ 1726.794862][T32184] Tainted: [U]=USER [ 1726.794868][T32184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1726.794879][T32184] Call Trace: [ 1726.794886][T32184] [ 1726.794892][T32184] dump_stack_lvl+0x100/0x190 [ 1726.794924][T32184] should_fail_ex.cold+0x5/0xa [ 1726.794943][T32184] should_failslab+0xc2/0x120 [ 1726.794966][T32184] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1726.794986][T32184] ? anon_vma_clone+0x2ba/0xcd0 [ 1726.795014][T32184] anon_vma_clone+0x2ba/0xcd0 [ 1726.795043][T32184] __split_vma+0x51f/0xda0 [ 1726.795061][T32184] ? __pfx___split_vma+0x10/0x10 [ 1726.795075][T32184] ? vma_link+0x5ee/0x8d0 [ 1726.795100][T32184] vms_gather_munmap_vmas+0x1d2/0x1720 [ 1726.795120][T32184] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1726.795137][T32184] ? alloc_new_pud+0x217/0x320 [ 1726.795152][T32184] ? get_old_pud+0xd8/0x360 [ 1726.795168][T32184] ? move_page_tables+0x11c/0x4610 [ 1726.795186][T32184] ? __pfx_copy_vma+0x10/0x10 [ 1726.795210][T32184] do_vmi_align_munmap+0x287/0x5f0 [ 1726.795229][T32184] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1726.795272][T32184] do_vmi_munmap+0x1f8/0x3e0 [ 1726.795291][T32184] move_vma+0xe5b/0x1920 [ 1726.795311][T32184] ? __pfx_move_vma+0x10/0x10 [ 1726.795329][T32184] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1726.795358][T32184] ? vrm_set_new_addr+0x204/0x290 [ 1726.795376][T32184] mremap_to+0x234/0x4c0 [ 1726.795392][T32184] ? mas_walk+0x6ef/0x9b0 [ 1726.795412][T32184] ? __pfx_mremap_to+0x10/0x10 [ 1726.795427][T32184] ? check_prep_vma+0x912/0xe60 [ 1726.795447][T32184] __do_sys_mremap+0x88c/0x1850 [ 1726.795471][T32184] ? __pfx___do_sys_mremap+0x10/0x10 [ 1726.795486][T32184] ? ksys_write+0x190/0x250 [ 1726.795508][T32184] ? __pfx_do_futex+0x10/0x10 [ 1726.795531][T32184] ? __x64_sys_futex+0x34f/0x4d0 [ 1726.795559][T32184] do_syscall_64+0x115/0x840 [ 1726.795579][T32184] ? clear_bhb_loop+0x40/0x90 [ 1726.795598][T32184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.795614][T32184] RIP: 0033:0x7f58bf19e019 [ 1726.795628][T32184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1726.795643][T32184] RSP: 002b:00007f58bd3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1726.795659][T32184] RAX: ffffffffffffffda RBX: 00007f58bf426180 RCX: 00007f58bf19e019 [ 1726.795669][T32184] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 1726.795679][T32184] RBP: 00007f58bf23500c R08: 0000000105000000 R09: 0000000000000000 [ 1726.795689][T32184] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1726.795698][T32184] R13: 00007f58bf426218 R14: 00007f58bf426180 R15: 00007ffc037745b8 [ 1726.795718][T32184] [ 1727.603185][T32193] nvme_fcloop: unknown parameter or missing value 'Ù' [ 1729.906018][T32230] FAULT_INJECTION: forcing a failure. [ 1729.906018][T32230] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.950482][T32230] CPU: 0 UID: 0 PID: 32230 Comm: syz.2.3752 Tainted: G U syzkaller #0 PREEMPT(full) [ 1729.950509][T32230] Tainted: [U]=USER [ 1729.950515][T32230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1729.950525][T32230] Call Trace: [ 1729.950531][T32230] [ 1729.950538][T32230] dump_stack_lvl+0x100/0x190 [ 1729.950569][T32230] should_fail_ex.cold+0x5/0xa [ 1729.950589][T32230] should_failslab+0xc2/0x120 [ 1729.950612][T32230] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1729.950635][T32230] ? sock_alloc_inode+0x26/0x2c0 [ 1729.950652][T32230] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1729.950668][T32230] sock_alloc_inode+0x26/0x2c0 [ 1729.950683][T32230] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1729.950697][T32230] alloc_inode+0x68/0x250 [ 1729.950720][T32230] sock_alloc+0x44/0x280 [ 1729.950742][T32230] ? security_socket_create+0x7f/0x250 [ 1729.950762][T32230] sock_create_lite+0x82/0x120 [ 1729.950787][T32230] __netlink_kernel_create+0xbd/0x750 [ 1729.950807][T32230] ? __kvmalloc_node_noprof+0x36d/0x970 [ 1729.950827][T32230] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1729.950851][T32230] fib_net_init+0x2ab/0x440 [ 1729.950868][T32230] ? is_module_address+0x69/0xf0 [ 1729.950884][T32230] ? __pfx_fib_net_init+0x10/0x10 [ 1729.950902][T32230] ? timer_init_key+0x150/0x310 [ 1729.950923][T32230] ? __pfx_nl_fib_input+0x10/0x10 [ 1729.950943][T32230] ? devinet_init_net+0x56c/0x8d0 [ 1729.950965][T32230] ? __pfx_fib_net_init+0x10/0x10 [ 1729.950982][T32230] ops_init+0x1e2/0x5f0 [ 1729.951006][T32230] setup_net+0x118/0x3a0 [ 1729.951029][T32230] ? __pfx_setup_net+0x10/0x10 [ 1729.951051][T32230] ? mutex_init_lockdep+0xf1/0x120 [ 1729.951071][T32230] copy_net_ns+0x46f/0x7c0 [ 1729.951087][T32230] create_new_namespaces+0x3ea/0xac0 [ 1729.951108][T32230] unshare_nsproxy_namespaces+0xf2/0x220 [ 1729.951127][T32230] ksys_unshare+0x438/0xab0 [ 1729.951148][T32230] ? __pfx_ksys_unshare+0x10/0x10 [ 1729.951175][T32230] __x64_sys_unshare+0x31/0x40 [ 1729.951194][T32230] do_syscall_64+0x115/0x840 [ 1729.951214][T32230] ? clear_bhb_loop+0x40/0x90 [ 1729.951232][T32230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.951248][T32230] RIP: 0033:0x7f58bf19e019 [ 1729.951264][T32230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.951279][T32230] RSP: 002b:00007f58bffb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1729.951295][T32230] RAX: ffffffffffffffda RBX: 00007f58bf425fa0 RCX: 00007f58bf19e019 [ 1729.951306][T32230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1729.951316][T32230] RBP: 00007f58bf23500c R08: 0000000000000000 R09: 0000000000000000 [ 1729.951326][T32230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1729.951336][T32230] R13: 00007f58bf426038 R14: 00007f58bf425fa0 R15: 00007ffc037745b8 [ 1729.951357][T32230] [ 1730.929332][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.949316][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.678609][T32272] binder: 32266:32272 unknown command 1936094318 [ 1731.764876][T32272] binder: 32266:32272 ioctl c0306201 0 returned -22 [ 1731.848341][T32270] NFSD: Failed to start, no listeners configured. [ 1732.619924][T32280] binder: 32275:32280 ioctl 400c620e 200000001f40 returned -22 [ 1733.946280][T32303] i2c i2c-0: new_device: Missing parameters [ 1734.005176][T32304] i2c i2c-0: new_device: Missing parameters [ 1736.141541][T32331] nfsd: Unknown parameter 'batadv' [ 1738.245336][T32363] FAULT_INJECTION: forcing a failure. [ 1738.245336][T32363] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1738.330810][T32363] CPU: 0 UID: 0 PID: 32363 Comm: syz.2.3774 Tainted: G U syzkaller #0 PREEMPT(full) [ 1738.330839][T32363] Tainted: [U]=USER [ 1738.330845][T32363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1738.330858][T32363] Call Trace: [ 1738.330864][T32363] [ 1738.330870][T32363] dump_stack_lvl+0x100/0x190 [ 1738.330895][T32363] should_fail_ex.cold+0x5/0xa [ 1738.330919][T32363] ? search_extable+0x82/0xb0 [ 1738.331019][T32363] get_futex_key+0x1d2/0x14f0 [ 1738.331038][T32363] ? __pfx_get_futex_key+0x10/0x10 [ 1738.331055][T32363] ? __pfx___up_read+0x10/0x10 [ 1738.331076][T32363] futex_wait_setup+0x91/0x540 [ 1738.331101][T32363] __futex_wait+0x19f/0x300 [ 1738.331123][T32363] ? __pfx___futex_wait+0x10/0x10 [ 1738.331143][T32363] ? futex_hash+0x311/0x400 [ 1738.331160][T32363] ? __pfx_futex_wake_mark+0x10/0x10 [ 1738.331182][T32363] ? __pfx_futex_hash+0x10/0x10 [ 1738.331198][T32363] ? _copy_from_user+0x59/0xd0 [ 1738.331225][T32363] futex_wait+0xe6/0x370 [ 1738.331245][T32363] ? __pfx_futex_wait+0x10/0x10 [ 1738.331270][T32363] ? vfs_write+0x15d/0x1050 [ 1738.331288][T32363] do_futex+0x265/0x440 [ 1738.331307][T32363] ? __pfx_do_futex+0x10/0x10 [ 1738.331328][T32363] __x64_sys_futex+0x34f/0x4d0 [ 1738.331346][T32363] ? fput+0x79/0x100 [ 1738.331363][T32363] ? __pfx___x64_sys_futex+0x10/0x10 [ 1738.331380][T32363] ? ksys_write+0x1ac/0x250 [ 1738.331394][T32363] ? __pfx_ksys_write+0x10/0x10 [ 1738.331413][T32363] do_syscall_64+0x115/0x840 [ 1738.331433][T32363] ? clear_bhb_loop+0x40/0x90 [ 1738.331452][T32363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.331468][T32363] RIP: 0033:0x7f58bf19e019 [ 1738.331482][T32363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1738.331497][T32363] RSP: 002b:00007f58bff930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1738.331512][T32363] RAX: ffffffffffffffda RBX: 00007f58bf426098 RCX: 00007f58bf19e019 [ 1738.331523][T32363] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f58bf426098 [ 1738.331532][T32363] RBP: 00007f58bf426090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.331541][T32363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1738.331551][T32363] R13: 00007f58bf426128 R14: 00007ffc037744d0 R15: 00007ffc037745b8 [ 1738.331571][T32363] [ 1739.123942][ T30] audit: type=1804 audit(4294970247.046:195): pid=32362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3771" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1739.244685][T32365] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3773'. [ 1739.575466][T32388] i2c i2c-0: new_device: Missing parameters [ 1744.899779][T32466] i2c i2c-0: new_device: Missing parameters [ 1747.973886][T32500] IPVS: length: 8 != 632 [ 1747.999499][T32500] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3795'. [ 1748.057065][T32505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3794'. [ 1748.185933][T32505] team0: Port device team_slave_1 removed [ 1751.146021][T32539] FAULT_INJECTION: forcing a failure. [ 1751.146021][T32539] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1751.200070][T32539] CPU: 0 UID: 0 PID: 32539 Comm: syz.3.3803 Tainted: G U syzkaller #0 PREEMPT(full) [ 1751.200097][T32539] Tainted: [U]=USER [ 1751.200102][T32539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1751.200112][T32539] Call Trace: [ 1751.200118][T32539] [ 1751.200124][T32539] dump_stack_lvl+0x100/0x190 [ 1751.200150][T32539] should_fail_ex.cold+0x5/0xa [ 1751.200169][T32539] get_futex_key+0x1d2/0x14f0 [ 1751.200188][T32539] ? __pfx_get_futex_key+0x10/0x10 [ 1751.200204][T32539] ? lock_acquire+0x1b9/0x370 [ 1751.200233][T32539] futex_wake+0xf4/0x5e0 [ 1751.200254][T32539] ? __pfx_futex_wake+0x10/0x10 [ 1751.200274][T32539] ? find_held_lock+0x2b/0x80 [ 1751.200293][T32539] ? exit_mm_release+0x19/0x30 [ 1751.200316][T32539] do_futex+0x2b2/0x440 [ 1751.200334][T32539] ? __pfx_do_futex+0x10/0x10 [ 1751.200349][T32539] ? __might_fault+0xc5/0x140 [ 1751.200370][T32539] mm_release+0x24a/0x2f0 [ 1751.200387][T32539] do_exit+0x707/0x2ae0 [ 1751.200410][T32539] ? __pfx_do_exit+0x10/0x10 [ 1751.200430][T32539] ? do_raw_spin_lock+0x128/0x260 [ 1751.200446][T32539] ? find_held_lock+0x2b/0x80 [ 1751.200463][T32539] ? get_signal+0x7e0/0x21e0 [ 1751.200483][T32539] do_group_exit+0xd5/0x2a0 [ 1751.200505][T32539] get_signal+0x1ec7/0x21e0 [ 1751.200528][T32539] ? __pfx_get_signal+0x10/0x10 [ 1751.200546][T32539] ? do_futex+0x190/0x440 [ 1751.200564][T32539] arch_do_signal_or_restart+0x91/0x7a0 [ 1751.200582][T32539] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1751.200617][T32539] exit_to_user_mode_loop+0x139/0x6f0 [ 1751.200641][T32539] ? rcu_is_watching+0x12/0xc0 [ 1751.200660][T32539] do_syscall_64+0x652/0x840 [ 1751.200683][T32539] ? clear_bhb_loop+0x40/0x90 [ 1751.200701][T32539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.200717][T32539] RIP: 0033:0x7f87a3f9e019 [ 1751.200732][T32539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1751.200747][T32539] RSP: 002b:00007f87a4e1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1751.200762][T32539] RAX: fffffffffffffe00 RBX: 00007f87a4225fa8 RCX: 00007f87a3f9e019 [ 1751.200772][T32539] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87a4225fa8 [ 1751.200782][T32539] RBP: 00007f87a4225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.200791][T32539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1751.200800][T32539] R13: 00007f87a4226038 R14: 00007ffe2524d540 R15: 00007ffe2524d628 [ 1751.200819][T32539] [ 1752.006747][T32558] FAULT_INJECTION: forcing a failure. [ 1752.006747][T32558] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.071571][T32558] CPU: 0 UID: 0 PID: 32558 Comm: syz.3.3807 Tainted: G U syzkaller #0 PREEMPT(full) [ 1752.071615][T32558] Tainted: [U]=USER [ 1752.071621][T32558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1752.071631][T32558] Call Trace: [ 1752.071637][T32558] [ 1752.071644][T32558] dump_stack_lvl+0x100/0x190 [ 1752.071666][T32558] should_fail_ex.cold+0x5/0xa [ 1752.071685][T32558] should_failslab+0xc2/0x120 [ 1752.071709][T32558] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1752.071730][T32558] ? __d_alloc+0x35/0xa50 [ 1752.071751][T32558] __d_alloc+0x35/0xa50 [ 1752.071770][T32558] d_alloc+0x4a/0x1e0 [ 1752.071788][T32558] lookup_one_qstr_excl+0x171/0x250 [ 1752.071810][T32558] start_dirop+0x59/0xb0 [ 1752.071833][T32558] simple_start_creating+0xf9/0x110 [ 1752.071849][T32558] ? __pfx_simple_start_creating+0x10/0x10 [ 1752.071865][T32558] ? mntput+0x70/0xa0 [ 1752.071890][T32558] ? simple_pin_fs+0xa3/0x190 [ 1752.071914][T32558] debugfs_start_creating.part.0+0x82/0x170 [ 1752.072003][T32558] __debugfs_create_file+0xb3/0x4f0 [ 1752.072034][T32558] debugfs_create_file_full+0x41/0x60 [ 1752.072060][T32558] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1752.072079][T32558] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1752.072109][T32558] ? kasan_save_track+0x14/0x30 [ 1752.072127][T32558] ? __kasan_kmalloc+0xaa/0xb0 [ 1752.072146][T32558] ? lockdep_init_map_type+0x5c/0x250 [ 1752.072165][T32558] preinit_net.part.0+0x43b/0x920 [ 1752.072193][T32558] copy_net_ns+0x339/0x7c0 [ 1752.072210][T32558] create_new_namespaces+0x3ea/0xac0 [ 1752.072231][T32558] unshare_nsproxy_namespaces+0xf2/0x220 [ 1752.072250][T32558] ksys_unshare+0x438/0xab0 [ 1752.072271][T32558] ? __pfx_ksys_unshare+0x10/0x10 [ 1752.072298][T32558] __x64_sys_unshare+0x31/0x40 [ 1752.072317][T32558] do_syscall_64+0x115/0x840 [ 1752.072337][T32558] ? clear_bhb_loop+0x40/0x90 [ 1752.072364][T32558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.072381][T32558] RIP: 0033:0x7f87a3f9e019 [ 1752.072395][T32558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1752.072411][T32558] RSP: 002b:00007f87a4e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1752.072426][T32558] RAX: ffffffffffffffda RBX: 00007f87a4225fa0 RCX: 00007f87a3f9e019 [ 1752.072438][T32558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1752.072448][T32558] RBP: 00007f87a403500c R08: 0000000000000000 R09: 0000000000000000 [ 1752.072458][T32558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1752.072467][T32558] R13: 00007f87a4226038 R14: 00007f87a4225fa0 R15: 00007ffe2524d628 [ 1752.072488][T32558] [ 1754.099825][T32575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3810'. [ 1755.036794][T32599] FAULT_INJECTION: forcing a failure. [ 1755.036794][T32599] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1755.084900][T32599] CPU: 0 UID: 0 PID: 32599 Comm: syz.2.3816 Tainted: G U syzkaller #0 PREEMPT(full) [ 1755.084927][T32599] Tainted: [U]=USER [ 1755.084932][T32599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1755.084941][T32599] Call Trace: [ 1755.084947][T32599] [ 1755.084953][T32599] dump_stack_lvl+0x100/0x190 [ 1755.084975][T32599] should_fail_ex.cold+0x5/0xa [ 1755.084993][T32599] get_futex_key+0x295/0x14f0 [ 1755.085011][T32599] ? __pfx_get_futex_key+0x10/0x10 [ 1755.085027][T32599] ? lock_acquire+0x1b9/0x370 [ 1755.085055][T32599] futex_wake+0xf4/0x5e0 [ 1755.085076][T32599] ? __pfx_futex_wake+0x10/0x10 [ 1755.085096][T32599] ? find_held_lock+0x2b/0x80 [ 1755.085114][T32599] ? exit_mm_release+0x19/0x30 [ 1755.085138][T32599] do_futex+0x2b2/0x440 [ 1755.085160][T32599] ? __pfx_do_futex+0x10/0x10 [ 1755.085176][T32599] ? __might_fault+0xc5/0x140 [ 1755.085197][T32599] mm_release+0x24a/0x2f0 [ 1755.085214][T32599] do_exit+0x707/0x2ae0 [ 1755.085246][T32599] ? __pfx_do_exit+0x10/0x10 [ 1755.085266][T32599] ? do_raw_spin_lock+0x128/0x260 [ 1755.085282][T32599] ? find_held_lock+0x2b/0x80 [ 1755.085300][T32599] ? get_signal+0x7e0/0x21e0 [ 1755.085319][T32599] do_group_exit+0xd5/0x2a0 [ 1755.085342][T32599] get_signal+0x1ec7/0x21e0 [ 1755.085365][T32599] ? __pfx_get_signal+0x10/0x10 [ 1755.085383][T32599] ? do_futex+0x190/0x440 [ 1755.085401][T32599] arch_do_signal_or_restart+0x91/0x7a0 [ 1755.085418][T32599] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1755.085454][T32599] exit_to_user_mode_loop+0x139/0x6f0 [ 1755.085470][T32599] ? rcu_is_watching+0x12/0xc0 [ 1755.085490][T32599] do_syscall_64+0x652/0x840 [ 1755.085510][T32599] ? clear_bhb_loop+0x40/0x90 [ 1755.085529][T32599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.085545][T32599] RIP: 0033:0x7f58bf19e019 [ 1755.085559][T32599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1755.085574][T32599] RSP: 002b:00007f58bffb40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1755.085589][T32599] RAX: fffffffffffffe00 RBX: 00007f58bf425fa8 RCX: 00007f58bf19e019 [ 1755.085599][T32599] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f58bf425fa8 [ 1755.085609][T32599] RBP: 00007f58bf425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1755.085618][T32599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1755.085627][T32599] R13: 00007f58bf426038 R14: 00007ffc037744d0 R15: 00007ffc037745b8 [ 1755.085646][T32599] [ 1756.698965][T32616] FAULT_INJECTION: forcing a failure. [ 1756.698965][T32616] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.760519][T32616] CPU: 0 UID: 0 PID: 32616 Comm: syz.3.3818 Tainted: G U syzkaller #0 PREEMPT(full) [ 1756.760545][T32616] Tainted: [U]=USER [ 1756.760551][T32616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1756.760561][T32616] Call Trace: [ 1756.760568][T32616] [ 1756.760574][T32616] dump_stack_lvl+0x100/0x190 [ 1756.760599][T32616] should_fail_ex.cold+0x5/0xa [ 1756.760619][T32616] should_failslab+0xc2/0x120 [ 1756.760642][T32616] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1756.760664][T32616] ? anon_vma_clone+0x2ba/0xcd0 [ 1756.760692][T32616] anon_vma_clone+0x2ba/0xcd0 [ 1756.760721][T32616] __split_vma+0x51f/0xda0 [ 1756.760740][T32616] ? __pfx___split_vma+0x10/0x10 [ 1756.760754][T32616] ? vma_link+0x5ee/0x8d0 [ 1756.760779][T32616] vms_gather_munmap_vmas+0x1d2/0x1720 [ 1756.760800][T32616] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1756.760817][T32616] ? alloc_new_pud+0x217/0x320 [ 1756.760832][T32616] ? get_old_pud+0xd8/0x360 [ 1756.760848][T32616] ? move_page_tables+0x11c/0x4610 [ 1756.760866][T32616] ? __pfx_copy_vma+0x10/0x10 [ 1756.760896][T32616] do_vmi_align_munmap+0x287/0x5f0 [ 1756.760917][T32616] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1756.760962][T32616] do_vmi_munmap+0x1f8/0x3e0 [ 1756.760982][T32616] move_vma+0xe5b/0x1920 [ 1756.761004][T32616] ? __pfx_move_vma+0x10/0x10 [ 1756.761023][T32616] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1756.761052][T32616] ? vrm_set_new_addr+0x204/0x290 [ 1756.761070][T32616] mremap_to+0x234/0x4c0 [ 1756.761086][T32616] ? mas_walk+0x6ef/0x9b0 [ 1756.761106][T32616] ? __pfx_mremap_to+0x10/0x10 [ 1756.761122][T32616] ? check_prep_vma+0x912/0xe60 [ 1756.761142][T32616] __do_sys_mremap+0x88c/0x1850 [ 1756.761165][T32616] ? __pfx___do_sys_mremap+0x10/0x10 [ 1756.761181][T32616] ? ksys_write+0x190/0x250 [ 1756.761201][T32616] ? __pfx_do_futex+0x10/0x10 [ 1756.761224][T32616] ? __x64_sys_futex+0x34f/0x4d0 [ 1756.761252][T32616] do_syscall_64+0x115/0x840 [ 1756.761272][T32616] ? clear_bhb_loop+0x40/0x90 [ 1756.761291][T32616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.761307][T32616] RIP: 0033:0x7f87a3f9e019 [ 1756.761321][T32616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1756.761337][T32616] RSP: 002b:00007f87a4df9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1756.761353][T32616] RAX: ffffffffffffffda RBX: 00007f87a4226090 RCX: 00007f87a3f9e019 [ 1756.761363][T32616] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 1756.761373][T32616] RBP: 00007f87a403500c R08: 0000000100000000 R09: 0000000000000000 [ 1756.761383][T32616] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1756.761393][T32616] R13: 00007f87a4226128 R14: 00007f87a4226090 R15: 00007ffe2524d628 [ 1756.761414][T32616] [ 1757.538119][T32632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3821'. [ 1758.344209][T32649] FAULT_INJECTION: forcing a failure. [ 1758.344209][T32649] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1758.390081][T32649] CPU: 0 UID: 0 PID: 32649 Comm: syz.2.3825 Tainted: G U syzkaller #0 PREEMPT(full) [ 1758.390107][T32649] Tainted: [U]=USER [ 1758.390113][T32649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1758.390122][T32649] Call Trace: [ 1758.390127][T32649] [ 1758.390134][T32649] dump_stack_lvl+0x100/0x190 [ 1758.390157][T32649] should_fail_ex.cold+0x5/0xa [ 1758.390175][T32649] get_futex_key+0x1d2/0x14f0 [ 1758.390193][T32649] ? __pfx_get_futex_key+0x10/0x10 [ 1758.390208][T32649] ? lock_acquire+0x1b9/0x370 [ 1758.390236][T32649] futex_wake+0xf4/0x5e0 [ 1758.390258][T32649] ? __pfx_futex_wake+0x10/0x10 [ 1758.390277][T32649] ? find_held_lock+0x2b/0x80 [ 1758.390296][T32649] ? exit_mm_release+0x19/0x30 [ 1758.390318][T32649] do_futex+0x2b2/0x440 [ 1758.390336][T32649] ? __pfx_do_futex+0x10/0x10 [ 1758.390351][T32649] ? __might_fault+0xc5/0x140 [ 1758.390372][T32649] mm_release+0x24a/0x2f0 [ 1758.390388][T32649] do_exit+0x707/0x2ae0 [ 1758.390412][T32649] ? __pfx_do_exit+0x10/0x10 [ 1758.390432][T32649] ? do_raw_spin_lock+0x128/0x260 [ 1758.390447][T32649] ? find_held_lock+0x2b/0x80 [ 1758.390466][T32649] ? get_signal+0x7e0/0x21e0 [ 1758.390485][T32649] do_group_exit+0xd5/0x2a0 [ 1758.390507][T32649] get_signal+0x1ec7/0x21e0 [ 1758.390531][T32649] ? __pfx_get_signal+0x10/0x10 [ 1758.390549][T32649] ? do_futex+0x190/0x440 [ 1758.390567][T32649] arch_do_signal_or_restart+0x91/0x7a0 [ 1758.390584][T32649] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1758.390622][T32649] exit_to_user_mode_loop+0x139/0x6f0 [ 1758.390638][T32649] ? rcu_is_watching+0x12/0xc0 [ 1758.390658][T32649] do_syscall_64+0x652/0x840 [ 1758.390678][T32649] ? clear_bhb_loop+0x40/0x90 [ 1758.390698][T32649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.390713][T32649] RIP: 0033:0x7f58bf19e019 [ 1758.390727][T32649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.390769][T32649] RSP: 002b:00007f58bffb40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1758.390784][T32649] RAX: fffffffffffffe00 RBX: 00007f58bf425fa8 RCX: 00007f58bf19e019 [ 1758.390795][T32649] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f58bf425fa8 [ 1758.390804][T32649] RBP: 00007f58bf425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.390814][T32649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1758.390823][T32649] R13: 00007f58bf426038 R14: 00007ffc037744d0 R15: 00007ffc037745b8 [ 1758.390842][T32649] [ 1761.941031][T32717] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 1765.867053][ T329] FAULT_INJECTION: forcing a failure. [ 1765.867053][ T329] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.989559][ T329] CPU: 0 UID: 0 PID: 329 Comm: syz.3.3850 Tainted: G U syzkaller #0 PREEMPT(full) [ 1765.989588][ T329] Tainted: [U]=USER [ 1765.989594][ T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1765.989604][ T329] Call Trace: [ 1765.989610][ T329] [ 1765.989616][ T329] dump_stack_lvl+0x100/0x190 [ 1765.989640][ T329] should_fail_ex.cold+0x5/0xa [ 1765.989662][ T329] should_failslab+0xc2/0x120 [ 1765.989684][ T329] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1765.989706][ T329] ? __pfx_map_id_range_down+0x10/0x10 [ 1765.989728][ T329] ? security_inode_alloc+0x3b/0x2c0 [ 1765.989752][ T329] security_inode_alloc+0x3b/0x2c0 [ 1765.989772][ T329] inode_init_always_gfp+0xc77/0xfb0 [ 1765.989791][ T329] alloc_inode+0x8e/0x250 [ 1765.989811][ T329] sock_alloc+0x44/0x280 [ 1765.989835][ T329] ? security_socket_create+0x7f/0x250 [ 1765.989854][ T329] __sock_create+0xc2/0x860 [ 1765.989875][ T329] smc_create_clcsk+0x37/0xd0 [ 1765.989980][ T329] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 1765.990060][ T329] inet6_create+0xb1a/0x12b0 [ 1765.990083][ T329] ? inet6_create+0x7f/0x12b0 [ 1765.990102][ T329] __sock_create+0x339/0x860 [ 1765.990122][ T329] __sys_socket+0x14d/0x260 [ 1765.990140][ T329] ? __pfx___sys_socket+0x10/0x10 [ 1765.990170][ T329] __x64_sys_socket+0x72/0xb0 [ 1765.990187][ T329] ? lockdep_hardirqs_on+0x78/0x100 [ 1765.990208][ T329] do_syscall_64+0x115/0x840 [ 1765.990228][ T329] ? clear_bhb_loop+0x40/0x90 [ 1765.990247][ T329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.990263][ T329] RIP: 0033:0x7f87a3f9e019 [ 1765.990277][ T329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.990292][ T329] RSP: 002b:00007f87a4df9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1765.990308][ T329] RAX: ffffffffffffffda RBX: 00007f87a4226090 RCX: 00007f87a3f9e019 [ 1765.990319][ T329] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 1765.990329][ T329] RBP: 00007f87a403500c R08: 0000000000000000 R09: 0000000000000000 [ 1765.990339][ T329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1765.990348][ T329] R13: 00007f87a4226128 R14: 00007f87a4226090 R15: 00007ffe2524d628 [ 1765.990368][ T329] [ 1766.274699][ T329] net_ratelimit: 48 callbacks suppressed [ 1766.274727][ T329] socket: no more sockets [ 1774.101425][ T459] binder: 452:459 ioctl 400c620e 200000001f40 returned -22 [ 1780.188377][ T579] netlink: 'syz.2.3889': attribute type 3 has an invalid length. [ 1784.573888][ T654] netlink: 'syz.5.3901': attribute type 3 has an invalid length. [ 1787.311491][ T719] program syz.2.3909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1788.932257][ T743] netlink: 'syz.3.3915': attribute type 3 has an invalid length. [ 1789.204073][ T754] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3916'. [ 1789.270390][ T737] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3913'. [ 1792.375644][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.382130][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.212143][ T827] FAULT_INJECTION: forcing a failure. [ 1793.212143][ T827] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.514816][ T827] CPU: 0 UID: 0 PID: 827 Comm: syz.2.3927 Tainted: G U syzkaller #0 PREEMPT(full) [ 1793.514844][ T827] Tainted: [U]=USER [ 1793.514849][ T827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1793.514860][ T827] Call Trace: [ 1793.514866][ T827] [ 1793.514872][ T827] dump_stack_lvl+0x100/0x190 [ 1793.514895][ T827] should_fail_ex.cold+0x5/0xa [ 1793.514914][ T827] should_failslab+0xc2/0x120 [ 1793.514937][ T827] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1793.514957][ T827] ? ep_ptable_queue_proc+0x5b/0x280 [ 1793.514978][ T827] ep_ptable_queue_proc+0x5b/0x280 [ 1793.514995][ T827] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1793.515010][ T827] snd_seq_pool_poll_wait+0x5b/0x160 [ 1793.515031][ T827] snd_seq_kernel_client_write_poll+0xa5/0x110 [ 1793.515057][ T827] snd_seq_oss_poll+0x17d/0x1d0 [ 1793.515077][ T827] ? __pfx_odev_poll+0x10/0x10 [ 1793.515102][ T827] odev_poll+0x4a/0x90 [ 1793.515117][ T827] ep_item_poll+0x141/0x1f0 [ 1793.515134][ T827] do_epoll_ctl_file+0x1e6e/0x36e0 [ 1793.515159][ T827] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1793.515179][ T827] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1793.515196][ T827] ? __fget_files+0x215/0x3d0 [ 1793.515213][ T827] ? __fget_files+0x21f/0x3d0 [ 1793.515232][ T827] ? do_epoll_ctl+0xfd/0x1a0 [ 1793.515268][ T827] do_epoll_ctl+0xfd/0x1a0 [ 1793.515288][ T827] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1793.515312][ T827] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1793.515332][ T827] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1793.515356][ T827] do_syscall_64+0x115/0x840 [ 1793.515377][ T827] ? clear_bhb_loop+0x40/0x90 [ 1793.515396][ T827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.515413][ T827] RIP: 0033:0x7f58bf19e019 [ 1793.515427][ T827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.515448][ T827] RSP: 002b:00007f58bffb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1793.515470][ T827] RAX: ffffffffffffffda RBX: 00007f58bf425fa0 RCX: 00007f58bf19e019 [ 1793.515481][ T827] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1793.515491][ T827] RBP: 00007f58bf23500c R08: 0000000000000000 R09: 0000000000000000 [ 1793.515500][ T827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1793.515510][ T827] R13: 00007f58bf426038 R14: 00007f58bf425fa0 R15: 00007ffc037745b8 [ 1793.515531][ T827] [ 1801.244705][ T961] FAULT_INJECTION: forcing a failure. [ 1801.244705][ T961] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1801.294851][ T961] CPU: 0 UID: 0 PID: 961 Comm: syz.3.3947 Tainted: G U syzkaller #0 PREEMPT(full) [ 1801.294876][ T961] Tainted: [U]=USER [ 1801.294882][ T961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1801.294891][ T961] Call Trace: [ 1801.294897][ T961] [ 1801.294904][ T961] dump_stack_lvl+0x100/0x190 [ 1801.294926][ T961] should_fail_ex.cold+0x5/0xa [ 1801.294944][ T961] get_futex_key+0x1d2/0x14f0 [ 1801.294963][ T961] ? __pfx_get_futex_key+0x10/0x10 [ 1801.294978][ T961] ? lock_acquire+0x1b9/0x370 [ 1801.295006][ T961] futex_wake+0xf4/0x5e0 [ 1801.295028][ T961] ? __pfx_futex_wake+0x10/0x10 [ 1801.295047][ T961] ? find_held_lock+0x2b/0x80 [ 1801.295066][ T961] ? exit_mm_release+0x19/0x30 [ 1801.295088][ T961] do_futex+0x2b2/0x440 [ 1801.295106][ T961] ? __pfx_do_futex+0x10/0x10 [ 1801.295121][ T961] ? __might_fault+0xc5/0x140 [ 1801.295142][ T961] mm_release+0x24a/0x2f0 [ 1801.295159][ T961] do_exit+0x707/0x2ae0 [ 1801.295182][ T961] ? __pfx_do_exit+0x10/0x10 [ 1801.295203][ T961] ? do_raw_spin_lock+0x128/0x260 [ 1801.295219][ T961] ? find_held_lock+0x2b/0x80 [ 1801.295237][ T961] ? get_signal+0x7e0/0x21e0 [ 1801.295255][ T961] do_group_exit+0xd5/0x2a0 [ 1801.295278][ T961] get_signal+0x1ec7/0x21e0 [ 1801.295302][ T961] ? __pfx_get_signal+0x10/0x10 [ 1801.295320][ T961] ? do_futex+0x190/0x440 [ 1801.295338][ T961] arch_do_signal_or_restart+0x91/0x7a0 [ 1801.295353][ T961] ? do_epoll_ctl+0x12e/0x1a0 [ 1801.295372][ T961] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1801.295408][ T961] exit_to_user_mode_loop+0x139/0x6f0 [ 1801.295424][ T961] ? rcu_is_watching+0x12/0xc0 [ 1801.295444][ T961] do_syscall_64+0x652/0x840 [ 1801.295468][ T961] ? clear_bhb_loop+0x40/0x90 [ 1801.295486][ T961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.295502][ T961] RIP: 0033:0x7f87a3f9e019 [ 1801.295516][ T961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.295531][ T961] RSP: 002b:00007f87a4e1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1801.295547][ T961] RAX: fffffffffffffe00 RBX: 00007f87a4225fa8 RCX: 00007f87a3f9e019 [ 1801.295557][ T961] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87a4225fa8 [ 1801.295567][ T961] RBP: 00007f87a4225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1801.295576][ T961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1801.295585][ T961] R13: 00007f87a4226038 R14: 00007ffe2524d540 R15: 00007ffe2524d628 [ 1801.295604][ T961] [ 1803.010361][ T976] Process accounting resumed [ 1806.574718][ T1076] BUG: unable to handle page fault for address: ffffc9001a09bfe8 [ 1806.582470][ T1076] #PF: supervisor write access in kernel mode [ 1806.588548][ T1076] #PF: error_code(0x0002) - not-present page [ 1806.594514][ T1076] PGD 13fe40067 P4D 13fe40067 PUD 1cae7067 PMD 574e6067 PTE 0 [ 1806.602020][ T1076] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 1806.607420][ T1076] CPU: 0 UID: 0 PID: 1076 Comm: syz.3.3960 Tainted: G U syzkaller #0 PREEMPT(full) [ 1806.618266][ T1076] Tainted: [U]=USER [ 1806.622243][ T1076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1806.632398][ T1076] RIP: 0010:write_comp_data+0x75/0x90 [ 1806.637868][ T1076] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 1806.657575][ T1076] RSP: 0018:ffffc90003457e78 EFLAGS: 00050257 [ 1806.663849][ T1076] RAX: ffffc9001a09c000 RBX: 0000000000000000 RCX: ffffffff82458af5 [ 1806.671830][ T1076] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1806.679824][ T1076] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1806.687953][ T1076] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1806.696121][ T1076] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1806.704093][ T1076] FS: 00007f87a15f06c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 1806.713024][ T1076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1806.719604][ T1076] CR2: ffffc9001a09bfe8 CR3: 0000000022f50000 CR4: 00000000003526f0 [ 1806.727589][ T1076] Call Trace: [ 1806.730868][ T1076] [ 1806.733795][ T1076] rseq_register+0x115/0x350 [ 1806.738392][ T1076] __x64_sys_rseq+0x1b8/0x2e0 [ 1806.743067][ T1076] do_syscall_64+0x115/0x840 [ 1806.747651][ T1076] ? clear_bhb_loop+0x40/0x90 [ 1806.752342][ T1076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.758232][ T1076] RIP: 0033:0x7f87a3f9e019 [ 1806.762659][ T1076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1806.782266][ T1076] RSP: 002b:00007f87a15f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 1806.790668][ T1076] RAX: ffffffffffffffda RBX: 00007f87a4226450 RCX: 00007f87a3f9e019 [ 1806.798631][ T1076] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 1806.806596][ T1076] RBP: 00007f87a403500c R08: 0000000000000000 R09: 0000000000000000 [ 1806.814557][ T1076] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 1806.822518][ T1076] R13: 00007f87a42264e8 R14: 00007f87a4226450 R15: 00007ffe2524d628 [ 1806.830499][ T1076] [ 1806.833507][ T1076] Modules linked in: [ 1806.837392][ T1076] CR2: ffffc9001a09bfe8 [ 1806.841564][ T1076] ---[ end trace 0000000000000000 ]--- [ 1806.847014][ T1076] RIP: 0010:write_comp_data+0x75/0x90 [ 1806.852472][ T1076] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 1806.872172][ T1076] RSP: 0018:ffffc90003457e78 EFLAGS: 00050257 [ 1806.878239][ T1076] RAX: ffffc9001a09c000 RBX: 0000000000000000 RCX: ffffffff82458af5 [ 1806.886212][ T1076] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1806.894184][ T1076] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1806.902161][ T1076] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1806.910153][ T1076] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1806.918203][ T1076] FS: 00007f87a15f06c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 1806.928527][ T1076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1806.935294][ T1076] CR2: ffffc9001a09bfe8 CR3: 0000000022f50000 CR4: 00000000003526f0 [ 1806.943305][ T1076] Kernel panic - not syncing: Fatal exception [ 1806.949418][ T1076] Kernel Offset: disabled [ 1806.953754][ T1076] Rebooting in 86400 seconds..