last executing test programs: 13.658963455s ago: executing program 2 (id=1802): mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x90001, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r3) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0x23, 0x3, 0x8, 0x2006, 0x7fa, 0x7fb, &(0x7f0000000280)}) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r1) r5 = getpid() process_vm_readv$auto(r5, &(0x7f00000001c0)={0x0, 0x100ffc}, 0x3, &(0x7f0000000180)={&(0x7f0000000080), 0x1ffffffff}, 0x9, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, 0x0, 0x40015) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) io_uring_setup$auto(0x59, 0x0) sysfs$auto(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto(0x3, 0x40085400, 0x5) 11.460418853s ago: executing program 2 (id=1807): open(0x0, 0x0, 0x57e) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(r0, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x2000, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000100)="c80d1b5d399b3948", 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = pidfd_open$auto(0x1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(r3, 0x0, 0xffffffffffffffff, 0x0, 0x104) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/16s\x00', 0x48002, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/ip6tnl0/operstate\x00', 0xe80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001280)=""/4124, 0x101c) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 9.999470385s ago: executing program 3 (id=1811): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="17000000", @ANYBLOB='x\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) open(0x0, 0x0, 0x57e) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b73, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(r0, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 9.477916022s ago: executing program 1 (id=1812): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xa, 0x0) r1 = fsopen$auto(0x0, 0x1) r2 = semctl$auto_GETPID(0x8, 0x9, 0xb, 0x2) migrate_pages$auto(r2, 0x5, &(0x7f0000000080)=0x3, &(0x7f00000003c0)=0xd) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioperm$auto(0x7, 0x6, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x40000, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_READ_32(r3, 0x80789440, &(0x7f0000000340)={0xffff, 0xa3, 0xc, 0xfd, 0x9, 0x2, 0x0, 0x6, 0x4, "6add0aa0c1d052d8ea18c6686bfd86a1df648713a9bddbafb04c4c22b7d026e9aa4ad1ff12f4308ba39c497bf92e67c8b1cdd5eec95f46b4f7d8e771d73a4142"}) request_key$auto(0x0, 0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x440, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x33, r4, 0xa1) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.552068537s ago: executing program 2 (id=1813): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xa, 0x0) r1 = fsopen$auto(0x0, 0x1) r2 = semctl$auto_GETPID(0x8, 0x9, 0xb, 0x2) migrate_pages$auto(r2, 0x5, &(0x7f0000000080)=0x3, &(0x7f00000003c0)=0xd) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioperm$auto(0x7, 0x6, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x40000, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_READ_32(r3, 0x80789440, &(0x7f0000000340)={0xffff, 0xa3, 0xc, 0xfd, 0x9, 0x2, 0x0, 0x6, 0x4, "6add0aa0c1d052d8ea18c6686bfd86a1df648713a9bddbafb04c4c22b7d026e9aa4ad1ff12f4308ba39c497bf92e67c8b1cdd5eec95f46b4f7d8e771d73a4142"}) request_key$auto(0x0, 0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x440, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x33, r4, 0xa1) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.102522292s ago: executing program 0 (id=1814): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x940, 0x0) ioctl$auto_MEMGETBADBLOCK(r0, 0x40084d0b, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, 0x0, 0xfded, 0x403) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x72001, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x101, 0x1, 0x4, 0x8b, 0x5, 0x800000001007181, 0x2, 0x1, 0x7, 0x0, 0xa9, 0x26, 0x4, 0x200000000001, 0x384, 0x5, 0x8, 0x0, 0x30, 0xfffffffffffffffe, 0x864, 0xe, 0x10021ffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [0x4000000, 0x5, 0x0, 0x0, 0x2fc4, 0x0, 0x8000000000000, 0x0, 0x4, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc00, 0x3, 0x8, 0x2000000000000000, 0x0, 0x20000, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x100000004, 0x0, 0x1951, 0x0, 0x2, 0x0, 0xb5e5, 0x400000000000000, 0x0, 0x200000000003]}, 0x9, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd02, 0x0) mq_timedsend$auto(r1, &(0x7f0000000200)='(\x00\x00\x00\x00[\x00k\x95\x964\'.h\xdb\x05\x85T0t\xc3\x92c\xf4\xf3]\xa1\x9a\xd3.c\xd4\x03\x9c\xa0n0\x91\x17\xec$', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x13c) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(r3, r3, 0x0, 0x400000000005) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), r1) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020029bd70002f8458943b564cca14002000fe8800000000000000000000000000010600030007000000080011000000c0000c00160001000000000000000c000f000500000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x2004c010}, 0x44040804) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 7.472537139s ago: executing program 3 (id=1815): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x86b8, 0xffffffffffffffff, 0x40000008000) mmap$auto(0x0, 0x202000b, 0x3, 0x200000eb1, 0xfffffffffffffffa, 0xe) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x7f, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x20, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1fe, 0x81) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x9a28) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x105840, 0x0) ioctl$auto_BLKRRPART(r2, 0x125f, 0x1f000000) flock$auto(r1, 0xa) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r5 = memfd_create$auto(0x0, 0x6) r6 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv$auto(r6, &(0x7f0000009180)={0x0, 0x7}, 0xfc, 0x800000000080, 0x5) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x11) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r7, 0x0) linkat$auto(r5, 0x0, r4, &(0x7f0000000140)='./file0\x00', 0xd) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0x5, 0x0) 7.439769173s ago: executing program 1 (id=1816): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/039/001\x00', 0xa901, 0x0) 7.33527635s ago: executing program 1 (id=1817): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x4, 0x8) mmap$auto(0x0, 0x10000008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x12, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000200), 0x400080, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/afs/servers\x00', 0x400, 0x0) setsockopt$auto_SO_RCVPRIORITY(r0, 0x0, 0x52, &(0x7f0000000280)='./{\x00', 0x1ff) pread64$auto(r1, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\xe3A{\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8', 0x1ff, 0x5) modify_ldt$auto(0x1, 0x0, 0x2000009) modify_ldt$auto(0x1, 0x0, 0x10) readv$auto(0x3, &(0x7f0000001100)={0x0, 0x400000000000fffe}, 0x1) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000240)=@hci={0x1f, 0x1, 0x2}, 0x10000d) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x2, 0x80002, 0x73) 6.67048935s ago: executing program 1 (id=1818): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) mmap$auto(0x0, 0x4000000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mprotect$auto(0x1000, 0x200000, 0x4) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x6, 0xfffffffffffffff8, 0x0, 0x0, 0xfffffffffffeffff) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) ioctl$auto(r1, 0x0, r1) sysfs$auto(0x2, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8\x11\x06\b\x00\x00\x00\x04!\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/cec1/power/control\x00', 0x42802, 0x0) write$auto(r0, 0x0, 0x86) close_range$auto(0x2, r1, 0xffffffff) settimeofday$auto(&(0x7f0000000040)={0x9, 0x5}, &(0x7f00000001c0)={0x200, 0x3}) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b8063981, 0xfff6) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=' \\', 0x2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x800, 0x6) statfs$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x5, 0x1, 0xb, 0x7fffffffffffffff, 0x10, 0x4, 0x10001, {[0x9, 0xfffff002]}, 0x800, 0x440000000, 0xffffffffffffff27, [0x8, 0x7, 0x59e3, 0x1]}) mlockall$auto(0x800000000000005) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) 5.666019105s ago: executing program 1 (id=1819): r0 = socket(0xa, 0x801, 0x84) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x181d00, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram3\x00', 0x149c02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/xfs/stats/stats\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001180)=""/187, 0xbb) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) bind$auto(0xffffffffffffffff, 0x0, 0x6b) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto_SEM_INFO(0x4, 0x87fff, 0x13, 0x2) setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop7/trace/act_mask\x00', 0x402, 0x0) write$auto(r3, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8\xe4\x145\x90e\xd3\xe0);\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x1e\xe1\xdb\x03\x19\xba\xda\x19\xbbW\xc6\x8c\xd54\x0eJ\xcdpq\xedv\x93\x89\r\xb5\xe06:\x85\xc0\x982]dyf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x7) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x40, 0x0) setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x5, 0x29, &(0x7f00000001c0)='){\x00', 0x8) 5.652543089s ago: executing program 2 (id=1820): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmmsg$auto(r0, 0x0, 0x3, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x10002, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8006) statmount$auto(0x0, 0x0, 0x800, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x200, 0x4, 0x7, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff}, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r7) r8 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), r7) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r6, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r8, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x808}, 0x20004000) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)={0x1a4, r8, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x186, 0x3, 0x0, 0x1, [@generic="a355ef8626387914843f863ad7e47416ae34e8d4aabb89de4ceb4ae303e9c4f5e2b2fcbfcf8b83cd0ba6166600de6963b81eb6c46cf6efa9f9d6b2d24ff8a44a3d5847ecc78ee3d3a5b590fd937371bd97705fb32b5671b38c56dd9ca71d534d5e232eceb314fd2060cecd8abd6f537703b21e91a18b1172f02371246420769ff7", @typed={0xc, 0x47, 0x0, 0x0, @u64=0xf6ce}, @generic="5885557fe9939e96a285ce2a01475f8c208152b50f52ddcfbc7cc019e576457e58f245fbe5da918a433414d6134000f7858173ad70284a2bb58fa51832f9427bdedf70771e4fc27f761be92e0c52c77b61d1614ec0b826ce5423632d31ad6be6d11ad71595111617b1ac5a1aa322c98c84325e05205cd3202f1c91c16f1736aa967dd2c520e383c62d824181b96c18febea9bec514be9f47b160e7f076abefadff07", @generic="e5fba45ccd0dcde4687d03b92bb012e2f53b97c3b86a83c995ccbf26c08bfff2a560f61855f7de03b97ada3d15aa4b7db8f90703a5b2e2b9defba098649d1f", @typed={0x14, 0xd4, 0x0, 0x0, @ipv6=@loopback}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x8}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) sendmsg$auto_L2TP_CMD_NOOP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x66871c73e4a73b9}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0xfffffff9}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x840) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x80000000001) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r9) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x14, r10, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) read$auto(r9, &(0x7f0000000080)='\x00', 0xff09) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x20000000) madvise$auto(0x7, 0x7, 0x6) 5.600332295s ago: executing program 0 (id=1821): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2b, 0x1, 0x0) r0 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, 0x0, 0x210) r1 = eventfd2$auto(0xf1, 0x1) readv$auto(0x3, &(0x7f0000000600)={&(0x7f0000000540), 0xc}, 0x1da) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_NAPI_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="c1ad9ea3dcbd29021a9af94e167eee2b832f1f30592cda8408d6d6730941c1c55eaaa6024362104c8ec2e12f7f6d7efcac0e8996a26d75118cb855a0e879acc9c7bc2b8721a61a9c70a459dfec1d", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000004) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x6c}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40c0) r4 = set_tid_address$auto(&(0x7f00000002c0)=0x7fff) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000640)={0x390, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1bd, 0x2, 0x0, 0x1, [@generic="1977b4aa38e6da12c75581bc844f7c5ee693b64bcf88e5f28aeb071432d432e95c09eab95d898144de4f4ef32bec47b98d78757a4eb9194c7b179fccc4c2a0df564ee33acd908fafd04cd857f8c9141c22fff2aa9fba5ce33e65ffbf3fec8ef85a2ccae026168329377fd303faf38271195b9a4a2d37e14abd6933e5eaeb65ecfa59de09ad0936fabe168cc9f108571f9adfdbec6d90f49af0d75c1f9e47d7aebe549e5a274c0e73dd26a5860b1e77f5028555a1747a29ca1ffd0c55fbc7a0cd33c80d1357d9046767879086cf2e67dc37cfc507b57c2fe93a090dc23dc3abf9f83ee20feaae7d71a073ef4f95af0516dffe0836978e1eb4", @generic="9961f63bd79bf21a2195aa8b7eb892f57639a7f9c32e6079fdfb862382e522d0e97384fc0c117db1444984cec20a5de6587be68e1f5a0a5789fd8773a7b65584dd380b4a14085ff3500aa2fdf47860767aa5160a87d8a90a37d9b464b093bffc2761d0c066025be2939d66e7af10f5e8fe4f7300f82cd4ae0c5badf95c28eaf9d2fdf5bfd3c726d12de56d8018f76dc669c816f13bf87885f071ab13bd7bc0b30cdfec8dfd4ff992497354d44694f0a852", @typed={0x8, 0x146, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x15a, 0x0, 0x0, @fd=r0}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xa0, 0x3, 0x0, 0x1, [@typed={0x9a, 0x1a, 0x0, 0x0, @binary="3d6ea84742af5014afb1352f71dc350a4b379751517459a7fb2017ee13c2aa9a90f5edaf49c28171d21b755ab2ba1ab9fd105d916a008051939ca683d19d0eab081c51b6c63b452fd04a00c131cf00052c499e185dea1798067e6e3c0e98c0003b810f23fe8c54431eb3c72c06157b8077de2fa6fab9a6b11b8259729a17091ad3825d5d02168d0c96dcf2d7ab76dd24be44af4c4b3c"}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x98, 0x2, 0x0, 0x1, [@nested={0x8, 0x136, 0x0, 0x1, [@nested={0x4, 0xc3}]}, @nested={0x8a, 0x12e, 0x0, 0x1, [@typed={0xc, 0x13f, 0x0, 0x0, @u64=0x3ff}, @generic="5b818a8598b6aeb1231f40df6811895f5501b95149611b4bcded92475be41b19d211c8689cc297e3efee6bd766481eb4b464abcd9750c48fd87c552d7d3130d1eb05ca1a5e87b181ff877e76a4487ac9f7d1247f0eca37ed0205b063c07c577ca80a55cf4c10", @typed={0x14, 0xf5, 0x0, 0x0, @ipv6=@local}]}]}, @IPVS_CMD_ATTR_SERVICE={0x61, 0x1, 0x0, 0x1, [@generic="390a770cac4392fc27cf040ff9a734443d84788a4fc94136ac4fd6ffee0573ea40", @generic, @nested={0x39, 0x11d, 0x0, 0x1, [@nested={0x4, 0x1b}, @generic="300959b7ac3e8dabc2e4f3325ca610dea036f1cef1", @nested={0x4, 0x11f}, @typed={0x14, 0xb4, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x30}]}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) socket(0xa, 0x1, 0x84) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0xea383, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000240), r1) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0x5457, 0x0) 5.384636079s ago: executing program 0 (id=1822): mmap$auto(0x4, 0x20009, 0x5, 0x13, 0xffffffffffffffff, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x13, 0xeb1, 0xffffffffffffffff, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d") mmap$auto(0x10000, 0x5, 0xdf, 0x9b72, 0x2, 0x8000008001) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) execve$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x286380, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = gettid() process_vm_writev$auto(r1, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f00000002c0)=""/162, 0xa2) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000240)={{&(0x7f0000000380)="c90f35e32220317adf3441c77fe4cc61a672b36e42ed46f5c8e603f5bf5d87bb48f67938889c8efdec6d3a9ab86cc174cf1320b3ee8e10462a0aa33385be26acc427bee92addf068e5f998b7989e436e44608f902fb6e7ff4117f12bb5f59d140b42f88612bfe2027c4a3002acc267e6cd0a0d7796e2c871a2f3e9481b3e74bf913dbabf72d53885878419291657d33f2d4dabad272ba32a735402487446ed5e9d4e49999c3c36c805668acd4c0a48ce0629c67373870d295695105bf1fb1bcbfee7979b0a402466e6e29a7ff0d9ae0aed18d241c198788cf03446", 0x8, &(0x7f0000000200)={&(0x7f00000012c0)="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", 0x7f}, 0xb24, &(0x7f0000002300)="f6fc78c43bc34e3983a53e23f66a0c4ffdfb281df3b0ad047be98c896ca9eb2effa62466d990c7495906d4a9c0286de2ccb9d30892df6021299f77064bc95cedcd4b98d11c2c55f66f4056011d9047432a51fdf7515404b0d6ffe68aaf9bb3aa0b01b57c6c6883de157d39e71da7d3b69a33ad1490ead8cd4cb59490ef82ea9c1823bc75bb58299500"/147, 0xa2a4}, 0x1}, 0x0, 0x6) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf2503000000040008000c0001800800100004"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) 4.917167999s ago: executing program 3 (id=1823): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29c, 0x100, 0x7f, 0x101, 0x6, 0x7f}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x18bc00, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/pagemap\x00', 0x200, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/set_event_pid\x00', 0x20082, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r1, 0x8, 0xff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) bpf$auto(0x4, &(0x7f0000000340)=@link_create={@map_fd=r2, @target_fd=r0, 0xc56, 0xf, @perf_event={0x6}}, 0xb) 4.59970318s ago: executing program 3 (id=1824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x2, 0x801, 0x100) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socketcall$auto(0x5, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_CREATE_VM(r5, 0xae80, 0x0) r8 = ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) r9 = socket(0x11, 0x3, 0x6) writev$auto(r4, &(0x7f00000004c0)={&(0x7f0000000400)="5c59f932f5ce84f9bd061356e023cd2fb2ad3eb1e82448c374f3c76daf86734633a3e34d7b0f4c1fae9d0165211c842e161c69883fee3f50ebf8b1fddeadea49711e038e41092e2ac4ba341a1a8a4d144c355e1e3f82de4bb527eac366c0d0acaa85d9cb77cff0e5194190e187c49711d809fc7b207e4a9f6131fe1c4d2d323a8a3e85255c184a0a73b8259634b6a84314e1d5822416e0df6d43cefc9985ff54217261d56e21", 0x5c7e}, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r10) sendmsg$auto_HWSIM_CMD_REGISTER(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="783d55a206aa4ec105b775ece7ad667a762de72e72daa5d24b7fa5f9196625ee8f6be3a99912dde844371f3e8f019c0141a4be92a2774ae30396c4c0b3c4f256e60bf730320ff5f5363654429713596f5ca0164c1d19619f567508ace2d01db98154358b56b6551ff8bfc32d93295118bee64e84ace7141af62d4700c817af927e2ae58505395a4fabdf445edbe98cf635ef2c82885fdc0e3761d8f528515b46e77c2b5ab38b3329139ffee4bc7eb6", @ANYRESDEC=r8, @ANYBLOB="010028bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r9, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) r11 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r6) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6a2e2372135ba03642a08c6e124b205b60465f55f934b0d459767ff7b3a8dea9946997ffc1075b314ae5d25acb5adab5d88c83218636d640f3eca2952640eb3eaa5a40af9b06474fcf9bee896f4a4540e3f5c7e75ca340423f55afa2295bc79f3571500f56bfd0dee1eae8a04f896da91787184865644eac74c0d7ee66b65eee07584b6c2ded8798d0e2316c8cbfb8800d85e7dd0925a34da63eda0ef12a0491587e9c508350b4dec26a02d5d44cf2fd291a69f35c8d02b7a4b1b26a5abc39c599edd3d5f74d74899700666cd8f4c64e8fc028b5e680516fd0189c443c1322aba94aa303537a2d733da812b1", @ANYRES16=r11, @ANYBLOB="04002bbd7000fddbdf2503000000080011000a0000000500150001000000"], 0x24}, 0x1, 0x0, 0x0, 0x44040881}, 0x20000010) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_TIMESTAMPING_OLD(r2, 0x6, 0x25, &(0x7f0000000140)='\x00', 0x3ff) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@typed={0x7, 0x1, 0x0, 0x0, @str='}}\x00'}]}]}, 0x20}}, 0x2400c894) 4.182043884s ago: executing program 3 (id=1825): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xa, 0x0) r1 = fsopen$auto(0x0, 0x1) r2 = semctl$auto_GETPID(0x8, 0x9, 0xb, 0x2) migrate_pages$auto(r2, 0x5, &(0x7f0000000080)=0x3, &(0x7f00000003c0)=0xd) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioperm$auto(0x7, 0x6, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x40000, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_READ_32(r3, 0x80789440, &(0x7f0000000340)={0xffff, 0xa3, 0xc, 0xfd, 0x9, 0x2, 0x0, 0x6, 0x4, "6add0aa0c1d052d8ea18c6686bfd86a1df648713a9bddbafb04c4c22b7d026e9aa4ad1ff12f4308ba39c497bf92e67c8b1cdd5eec95f46b4f7d8e771d73a4142"}) request_key$auto(0x0, 0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x440, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x33, r4, 0xa1) request_key$auto(&(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000300)='/dev/snd/midiC2D0\x00', 0x100) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.299526958s ago: executing program 0 (id=1826): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x9eff, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0xc000) 2.788975153s ago: executing program 0 (id=1827): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x179700, 0x0) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000300)={0x7f, 0x3b, 0x9, 0x1e4, 0x5, 0x8001, 0x7d6, 0x4, 0x1, 0xbfae, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2}) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f0000000040)=0xffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram3\x00', 0x44000, 0x0) ioctl$auto_BLKBSZSET(r2, 0x40081271, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x1, 0x106) setsockopt$auto(0xffffffffffffffff, 0x0, 0x4000060, 0x0, 0x6f7270c4) sysfs$auto(0x2, 0x3b, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2.666794845s ago: executing program 2 (id=1828): writev$auto(0xffffffffffffffff, 0x0, 0x3) r0 = socket(0x2, 0x4, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000002c803826c774726e034fd20f11ea3337668811661650dec3e2f03027d5f7d867e391970003b78a4720b9c0157c77016ab8714b07f4"], 0x198}, 0x1, 0x0, 0x0, 0x8010}, 0x4000840) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$auto(0x3, &(0x7f0000000040)=@isdn={0x22, 0x10, 0x2, 0x4, 0xe}, 0x6a) sendto$auto(r1, 0x0, 0x6f9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000300)={0x0, 0x7}, 0x90000000000003) mmap$auto(0x1000, 0x400008, 0x36, 0x9b72, 0x2, 0x80000000) getrusage$auto_RUSAGE_SELF(0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), r0) sendmsg$auto_SMC_NETLINK_GET_LGR_SMCR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xd4, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, "72eb20d2e498ad9d4733fb43ac544ca0399a62f8aeac53ba33135464a923e0832ecf7def876fad9fdc9d94bc49cd756502a9db685bc2628ed0887eb4d69977971d053e2d2e6f03d27b8070f0c4fcac951483edd94333c3e92d2776bf6da3683e0ca562a770dbec5fe6f16291567ff6b0707cba760b83f511341fabc5834667f09151c1d077b8f30170dcdce0bc1f747284f52fb8611d9f4137d6f27df286cb62ad71814cdefe11b383d7124a544cc76053de74ef2c1e419a48aacd8bff26"}, 0xd4}, 0x1, 0x0, 0x0, 0x9a93e295f964a58c}, 0x24040854) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x5, 0x0) pidfd_open$auto(0x1, 0x0) flistxattr$auto(0x3, 0x0, 0x3) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, 0x0, 0xfded, 0x3) mmap$auto(0x0, 0x20009, 0xa, 0x800000eb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x7fff) 551.826363ms ago: executing program 1 (id=1829): unshare$auto(0x40000080) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x807ff0000000000, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x40000000f42c, 0x80202) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x4000000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) semctl$auto_SETALL(0x0, 0xc, 0x11, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x22, 0x2, 0x9) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) 418.726471ms ago: executing program 3 (id=1830): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) r2 = fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f0000000240)=0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) 289.079ms ago: executing program 0 (id=1831): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x181100, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x100000, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node1/compact\x00', 0x42481, 0x0) ioctl$auto(r0, 0x1, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x89f0, r1) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, r3, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D2\x00', 0x0, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0xf, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x244201, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x12081, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141041, 0x0) write$auto(r7, &(0x7f0000001340)='\x04\"\x8e U\x00\x00\x00\xb8\n08\xc6\xb05>ha9\x89|e\x00\x00\x00\xa8%\xdc~kD\xa1\x1b\xc3\xe4\xc7\x89\x0e\xd4\x88\xac\x95\xacS\xe9$\xe7*\xcd\x8b\x9b\xd0o\xc7\xd8\xf7\x8a@%\x1d\xf8b\x14[H\xa2` \xb2\xef\xd7\xac\xfak\xb7\x02\x00}\xbcv\xfc\xe6\xbf\x14\x82jO\xde\xda\xda\x929\xd3\x04\xd0\xa2\xa0\xa6\xcb\x86\x15\xac\xcc\xf8\xa2\x01Z\x83`\xa1d\xedj8\x1e\xcc\x0fD\xa4\xe3\xa5\xba\xf9\xbe\x85\f\xbbrY\xb9\xc77\xd9d\xb5\x16\xc1\xe9\xe5\xc8X_\xefPG\x86=\x17>3\xb2\xdd\xbd\xa9\xe4R\x9c\xb0j[\"\f\xfb\tNz\xf4X]\xb90\x1c\xc3\x91jd\xe9\xb9\x87I\x19\xe4\x16\xa4\xad\xdcJ\xe4\x00\xd03/\x13,3\x87K\xd0J\xbb\xb9B\xff\xd9\xf1\xed\x04\xeb\x8d\x92\xa7-\x91\x8ai\xc6j\xeb\x90#1\x1d\xfd\xa3\xfeO\xcc\xe0\xe5\x1d\x8e\xedd\f,\t\xd8\x10Ho.z4\'\xe2\xad`\x94\xa6\xa2\xb2\xd6zMB\xf5\xcd\r7MO\x8f\xbc7%\xf1\xbbxB\xb4q\xa0\xe1-\x1c\xa2\xeb\xc0C\x04\x00\xfcG\xb6\x1e\x82\xaao\x1a\xa7\xbdw\x8b\xe6\bI\xfc\xa1\a\"\xe6\xc7z\xac\xe6\xce\xe34\x16\x9bdp\xb9\x02R\b\x83\x95\xde\x93\x12hP\xcbr6F\x84\xa7sf\xea\x8a\x1aee\xa4\xd0~\x00IC\xefT\xdc_G=]\xa3\xcb\xe0\x9f\n\xc5%\xe8PT\x87\xa4\xf3?f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) swapon$auto(&(0x7f0000000080)='[##\\}[\x00', 0x3) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) kernel console output (not intermixed with test programs): tman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.506058][T13028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.779292][ T4942] Bluetooth: hci1: command tx timeout [ 529.804908][T13028] hsr_slave_0: entered promiscuous mode [ 529.821502][T13028] hsr_slave_1: entered promiscuous mode [ 529.840365][T13028] debugfs: 'hsr0' already exists in 'hsr' [ 529.863764][T13028] Cannot create hsr debugfs directory [ 530.311277][T12973] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 530.356011][T12973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.394732][T12973] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 530.446614][T12973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.490664][T12973] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 530.530692][T12973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.621564][T12973] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 530.654229][T12973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.742341][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 532.336355][T12973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.142812][T12973] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.171980][T13028] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 533.191951][T13028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.416286][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.423439][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.456418][T13028] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 533.479915][T13028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.556547][T13028] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 533.583761][T13028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.612965][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.620108][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.653967][T13028] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 533.694765][T13028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.384087][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.465008][T13290] vhci_hcd vhci_hcd.2: invalid port number 253 [ 534.546612][T13290] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 534.623527][T13028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.732652][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.889616][T12974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 534.904468][T12974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 534.913913][T12974] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 534.924055][T12974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 534.931757][T12974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 535.116377][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.403220][T13028] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.555065][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.658085][ T7162] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.665234][ T7162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.764632][ T7162] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.771770][ T7162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.936261][T12973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.320440][ T36] team0: left allmulticast mode [ 536.343124][ T36] team_slave_0: left allmulticast mode [ 536.343165][ T36] team_slave_1: left allmulticast mode [ 536.351232][ T36] team0: left promiscuous mode [ 536.351248][ T36] team_slave_0: left promiscuous mode [ 536.351371][ T36] team_slave_1: left promiscuous mode [ 536.351642][ T36] bridge0: port 3(team0) entered disabled state [ 536.370952][ T36] bridge_slave_1: left allmulticast mode [ 536.370970][ T36] bridge_slave_1: left promiscuous mode [ 536.371106][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.374129][ T36] bridge_slave_0: left allmulticast mode [ 536.374146][ T36] bridge_slave_0: left promiscuous mode [ 536.374261][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.743089][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.765723][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.783064][ T36] bond0 (unregistering): Released all slaves [ 536.895476][ T36] : left promiscuous mode [ 536.978204][ T4942] Bluetooth: hci2: command tx timeout [ 537.081741][T12973] veth0_vlan: entered promiscuous mode [ 537.200261][T12973] veth1_vlan: entered promiscuous mode [ 537.264028][ T36] hsr_slave_0: left promiscuous mode [ 537.287128][ T36] hsr_slave_1: left promiscuous mode [ 537.306831][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.335566][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.376777][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.400990][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.424065][ T36] veth1_macvtap: left promiscuous mode [ 537.440698][ T36] veth1_vlan: left promiscuous mode [ 537.451455][ T36] veth0_vlan: left promiscuous mode [ 537.760040][ T36] team0 (unregistering): Port device team_slave_1 removed [ 537.793798][ T36] team0 (unregistering): Port device team_slave_0 removed [ 538.234832][T12973] veth0_macvtap: entered promiscuous mode [ 538.301684][T12973] veth1_macvtap: entered promiscuous mode [ 538.427048][T12973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.585894][T12973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.715865][T13028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.060078][ T4942] Bluetooth: hci2: command tx timeout [ 539.507446][T13301] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.524130][T13301] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.540017][T13301] bridge_slave_0: entered allmulticast mode [ 539.557269][T13301] bridge_slave_0: entered promiscuous mode [ 539.732795][T13301] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.752229][T13301] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.768716][T13301] bridge_slave_1: entered allmulticast mode [ 539.785769][T13301] bridge_slave_1: entered promiscuous mode [ 539.935793][T13301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.978262][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.988928][T13301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.014844][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.056215][T13028] veth0_vlan: entered promiscuous mode [ 540.169594][T13301] team0: Port device team_slave_0 added [ 540.192283][T13028] veth1_vlan: entered promiscuous mode [ 540.200275][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.219748][ T1151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.233401][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.249612][T13301] team0: Port device team_slave_1 added [ 540.274085][ T1151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.378570][T13301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.416850][T13301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.479761][T13301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.559958][T13301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.590934][T13301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.652086][T13301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.822050][T13442] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 540.946258][T13028] veth0_macvtap: entered promiscuous mode [ 541.122765][T13301] hsr_slave_0: entered promiscuous mode [ 541.129469][T13301] hsr_slave_1: entered promiscuous mode [ 541.135561][T13301] debugfs: 'hsr0' already exists in 'hsr' [ 541.142557][ T4942] Bluetooth: hci2: command tx timeout [ 541.150763][T13301] Cannot create hsr debugfs directory [ 541.273592][T13028] veth1_macvtap: entered promiscuous mode [ 541.338089][ T136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.443950][ T1151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.477504][T13028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.523980][T13028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.648459][ T784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.718220][ T784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.000104][ T136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.742106][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.767160][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.864473][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 543.219063][ T4942] Bluetooth: hci2: command tx timeout [ 543.253297][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.282219][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.318391][ T1151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.107048][T13301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 545.142880][T13301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.184131][T13301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 545.241206][T13301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.376959][T13301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 545.423224][T13301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.453715][T13301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 545.499832][T13301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.696476][T13301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.736691][T13577] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1060'. [ 547.865684][T13301] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.114113][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.121271][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.485464][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.492614][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.386515][T13301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.389544][T13301] veth0_vlan: entered promiscuous mode [ 552.575077][T13301] veth1_vlan: entered promiscuous mode [ 553.177089][T13301] veth0_macvtap: entered promiscuous mode [ 553.444300][T13663] vhci_hcd vhci_hcd.2: invalid port number 253 [ 553.473921][T13663] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 553.725896][T13301] veth1_macvtap: entered promiscuous mode [ 554.273536][T13301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.365501][T13301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.792159][ T784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.008597][ T136] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.108047][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.384594][ T784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.422190][ T784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.550965][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.856635][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.897117][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.591224][T13702] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(2) [ 559.707663][T13734] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1080'. [ 561.374024][T13749] block loop4: the capability attribute has been deprecated. [ 561.751029][T13758] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 562.900889][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.907250][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.337232][T13778] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 563.469946][T13778] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(2) [ 564.494634][T13793] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1089'. [ 565.160948][T13810] vhci_hcd vhci_hcd.2: invalid port number 253 [ 565.176817][T13810] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 567.716092][T13859] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(524287.0.2227999297), cmd(2) [ 568.575190][T13867] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1100'. [ 571.149164][T13918] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 572.632285][T13935] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(524190.0.2171975123), cmd(2) [ 573.253492][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.481028][T12974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 573.493026][T12974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 573.504392][T12974] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 573.514563][T12974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 573.522042][T12974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 573.764654][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.056154][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.223633][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.695643][T13952] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1112'. [ 574.917301][ T1102] bridge_slave_1: left allmulticast mode [ 574.951731][ T1102] bridge_slave_1: left promiscuous mode [ 574.986631][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.032371][ T1102] bridge_slave_0: left allmulticast mode [ 575.065353][ T1102] bridge_slave_0: left promiscuous mode [ 575.100489][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.618337][ T4942] Bluetooth: hci2: command tx timeout [ 576.842090][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.893605][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.930838][ T1102] bond0 (unregistering): Released all slaves [ 577.508374][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 577.698027][ T4942] Bluetooth: hci2: command tx timeout [ 577.957070][ T1102] hsr_slave_0: left promiscuous mode [ 577.971805][ T1102] hsr_slave_1: left promiscuous mode [ 577.984980][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.002064][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.018443][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.034502][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.062030][ T1102] veth1_macvtap: left promiscuous mode [ 578.073898][ T1102] veth0_macvtap: left promiscuous mode [ 578.088304][ T1102] veth1_vlan: left promiscuous mode [ 578.100847][ T1102] veth0_vlan: left promiscuous mode [ 578.540110][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 578.585549][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 579.780445][ T4942] Bluetooth: hci2: command tx timeout [ 581.858619][ T4942] Bluetooth: hci2: command tx timeout [ 581.912438][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 582.222550][T13941] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.245367][T13941] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.271262][T13941] bridge_slave_0: entered allmulticast mode [ 582.297659][T13941] bridge_slave_0: entered promiscuous mode [ 582.569240][T13941] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.603906][T13941] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.640908][T13941] bridge_slave_1: entered allmulticast mode [ 582.671986][T13941] bridge_slave_1: entered promiscuous mode [ 583.185444][T13941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.243207][T13941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.928935][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 584.009160][T13941] team0: Port device team_slave_0 added [ 584.052613][T13941] team0: Port device team_slave_1 added [ 584.462484][T13941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.493634][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.586975][T13941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.701460][T13941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.728919][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.839552][T13941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.004364][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1120'. [ 585.454471][T13941] hsr_slave_0: entered promiscuous mode [ 585.483332][T13941] hsr_slave_1: entered promiscuous mode [ 585.511617][T13941] debugfs: 'hsr0' already exists in 'hsr' [ 585.530456][T13941] Cannot create hsr debugfs directory [ 585.564861][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 587.770902][ T4942] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 588.371143][ T136] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.310991][T14158] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1129'. [ 589.359643][T13941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 589.401583][T13941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 589.441090][T13941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 589.494371][T13941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.714403][T13941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 589.780006][T13941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 589.816884][T13941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 589.875936][T13941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 591.055289][ T136] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.261060][T13941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.389028][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.505358][T13941] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.619036][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.704987][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.712176][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.804051][T12974] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 591.822516][T12974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 591.831653][T12974] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 591.843511][T12974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 591.852862][T12974] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 591.934826][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.941965][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.092829][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.318017][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.395108][ T136] bridge_slave_1: left allmulticast mode [ 593.433738][ T136] bridge_slave_1: left promiscuous mode [ 593.476017][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.533929][ T136] bridge_slave_0: left allmulticast mode [ 593.561751][ T136] bridge_slave_0: left promiscuous mode [ 593.576956][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.754759][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.770083][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.783465][ T136] bond0 (unregistering): Released all slaves [ 593.939674][T12974] Bluetooth: hci3: command tx timeout [ 594.474135][ T136] hsr_slave_0: left promiscuous mode [ 594.513830][ T136] hsr_slave_1: left promiscuous mode [ 594.534473][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.557143][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.585503][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.617263][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.663314][ T136] veth1_macvtap: left promiscuous mode [ 594.686102][ T136] veth0_macvtap: left promiscuous mode [ 594.705658][ T136] veth1_vlan: left promiscuous mode [ 594.726520][ T136] veth0_vlan: left promiscuous mode [ 595.348563][ T136] team0 (unregistering): Port device team_slave_1 removed [ 595.401387][ T136] team0 (unregistering): Port device team_slave_0 removed [ 596.018171][T12974] Bluetooth: hci3: command tx timeout [ 596.521968][T13941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.022230][T14217] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.053121][T14217] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.081174][T14217] bridge_slave_0: entered allmulticast mode [ 597.105106][T14217] bridge_slave_0: entered promiscuous mode [ 597.262404][T14217] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.284813][T14217] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.307993][T14217] bridge_slave_1: entered allmulticast mode [ 597.329983][T14217] bridge_slave_1: entered promiscuous mode [ 597.419576][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 597.650724][T14217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.767075][T14217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.810472][T13941] veth0_vlan: entered promiscuous mode [ 598.067538][T14217] team0: Port device team_slave_0 added [ 598.098553][T12974] Bluetooth: hci3: command tx timeout [ 598.142402][T14217] team0: Port device team_slave_1 added [ 598.165759][T13941] veth1_vlan: entered promiscuous mode [ 598.294229][T14217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.337264][T14217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.435914][T14217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.479740][T14217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.496858][T14217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.566749][T14217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.703936][T14368] vhci_hcd vhci_hcd.2: invalid port number 253 [ 598.723557][T13941] veth0_macvtap: entered promiscuous mode [ 598.741642][T14368] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 598.811398][T13941] veth1_macvtap: entered promiscuous mode [ 598.822885][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 598.963739][T14217] hsr_slave_0: entered promiscuous mode [ 598.978552][T14217] hsr_slave_1: entered promiscuous mode [ 598.984726][T14217] debugfs: 'hsr0' already exists in 'hsr' [ 598.991084][T14217] Cannot create hsr debugfs directory [ 599.113154][T13941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.333649][T13941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.679398][ T1151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.838752][ T1102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.939787][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.041251][ T136] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.179122][T12974] Bluetooth: hci3: command tx timeout [ 600.637056][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 600.696104][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.740043][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.091423][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.126953][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.361731][T14441] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 603.255180][T14217] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 603.297035][T14217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 603.382738][T14463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'. [ 603.467284][T14217] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 603.492403][T14217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 603.634418][T14217] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 603.665153][T14217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 603.847591][T14217] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 603.887728][T14217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.242340][T14217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.395797][T14217] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.625781][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.632945][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.897327][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.904481][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.964750][T14552] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 608.157046][T14217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.572040][T14570] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1155'. [ 608.650876][T14217] veth0_vlan: entered promiscuous mode [ 609.203004][T14217] veth1_vlan: entered promiscuous mode [ 609.221166][T14587] vhci_hcd vhci_hcd.2: invalid port number 253 [ 609.256329][T14587] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 610.032629][T14217] veth0_macvtap: entered promiscuous mode [ 610.082507][T14217] veth1_macvtap: entered promiscuous mode [ 610.159160][T14217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.237434][T14217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.339296][ T1151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.518807][ T1151] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.650979][ T1102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.426722][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.460414][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.834598][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.855271][ T1102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.871512][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.903727][ T136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.293153][T14621] warning: `syz.3.1161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 612.388501][T14621] FAULT_INJECTION: forcing a failure. [ 612.388501][T14621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.437198][T14621] CPU: 0 UID: 0 PID: 14621 Comm: syz.3.1161 Not tainted syzkaller #0 PREEMPT(full) [ 612.437220][T14621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.437230][T14621] Call Trace: [ 612.437236][T14621] [ 612.437241][T14621] dump_stack_lvl+0x100/0x190 [ 612.437267][T14621] should_fail_ex.cold+0x5/0xa [ 612.437285][T14621] _copy_to_user+0x32/0xd0 [ 612.437312][T14621] simple_read_from_buffer+0xcb/0x170 [ 612.437339][T14621] proc_fail_nth_read+0x1af/0x230 [ 612.437361][T14621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 612.437382][T14621] ? rw_verify_area+0xce/0x6d0 [ 612.437404][T14621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 612.437423][T14621] vfs_read+0x1e4/0xb40 [ 612.437439][T14621] ? __pfx_vfs_read+0x10/0x10 [ 612.437453][T14621] ? __fget_files+0x215/0x3d0 [ 612.437470][T14621] ? __fget_files+0x21f/0x3d0 [ 612.437489][T14621] ksys_read+0x12a/0x250 [ 612.437502][T14621] ? __pfx_ksys_read+0x10/0x10 [ 612.437521][T14621] do_syscall_64+0x115/0x840 [ 612.437542][T14621] ? clear_bhb_loop+0x40/0x90 [ 612.437561][T14621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.437576][T14621] RIP: 0033:0x7fa95355e84e [ 612.437589][T14621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 612.437604][T14621] RSP: 002b:00007fa9517d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 612.437619][T14621] RAX: ffffffffffffffda RBX: 00007fa9517d56c0 RCX: 00007fa95355e84e [ 612.437629][T14621] RDX: 000000000000000f RSI: 00007fa9517d50a0 RDI: 0000000000000006 [ 612.437638][T14621] RBP: 00007fa9517d5090 R08: 0000000000000000 R09: 0000000000000000 [ 612.437646][T14621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.437655][T14621] R13: 00007fa953826128 R14: 00007fa953826090 R15: 00007fff4d0e3998 [ 612.437676][T14621] [ 613.172126][T14641] FAULT_INJECTION: forcing a failure. [ 613.172126][T14641] name failslab, interval 1, probability 0, space 0, times 0 [ 613.357566][T14641] CPU: 0 UID: 0 PID: 14641 Comm: syz.1.1164 Not tainted syzkaller #0 PREEMPT(full) [ 613.357589][T14641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.357598][T14641] Call Trace: [ 613.357604][T14641] [ 613.357610][T14641] dump_stack_lvl+0x100/0x190 [ 613.357634][T14641] should_fail_ex.cold+0x5/0xa [ 613.357652][T14641] should_failslab+0xc2/0x120 [ 613.357675][T14641] __kmalloc_cache_noprof+0x91/0x6c0 [ 613.357693][T14641] ? snd_seq_oss_open+0x54/0xa10 [ 613.357821][T14641] snd_seq_oss_open+0x54/0xa10 [ 613.357849][T14641] odev_open+0x6f/0x90 [ 613.357870][T14641] ? __pfx_odev_open+0x10/0x10 [ 613.357890][T14641] soundcore_open+0x2e3/0x5a0 [ 613.357940][T14641] ? __pfx_soundcore_open+0x10/0x10 [ 613.357968][T14641] chrdev_open+0x234/0x6a0 [ 613.357985][T14641] ? __pfx_apparmor_file_open+0x10/0x10 [ 613.358004][T14641] ? __pfx_chrdev_open+0x10/0x10 [ 613.358021][T14641] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 613.358068][T14641] do_dentry_open+0x6ab/0x14d0 [ 613.358084][T14641] ? __pfx_chrdev_open+0x10/0x10 [ 613.358104][T14641] vfs_open+0x82/0x3f0 [ 613.358126][T14641] path_openat+0x2873/0x4280 [ 613.358151][T14641] ? __pfx_path_openat+0x10/0x10 [ 613.358172][T14641] do_file_open+0x20e/0x430 [ 613.358188][T14641] ? __pfx_do_file_open+0x10/0x10 [ 613.358217][T14641] ? alloc_fd+0x471/0x7a0 [ 613.358234][T14641] ? do_getname+0x191/0x390 [ 613.358254][T14641] do_sys_openat2+0x10f/0x1e0 [ 613.358273][T14641] ? __pfx_do_sys_openat2+0x10/0x10 [ 613.358294][T14641] ? fdget+0x18b/0x210 [ 613.358311][T14641] __x64_sys_openat+0x12d/0x210 [ 613.358331][T14641] ? __pfx___x64_sys_openat+0x10/0x10 [ 613.358358][T14641] do_syscall_64+0x115/0x840 [ 613.358377][T14641] ? clear_bhb_loop+0x40/0x90 [ 613.358395][T14641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.358411][T14641] RIP: 0033:0x7fefb419e019 [ 613.358424][T14641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.358440][T14641] RSP: 002b:00007fefb50bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 613.358455][T14641] RAX: ffffffffffffffda RBX: 00007fefb4426180 RCX: 00007fefb419e019 [ 613.358465][T14641] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 613.358475][T14641] RBP: 00007fefb423500c R08: 0000000000000000 R09: 0000000000000000 [ 613.358485][T14641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.358494][T14641] R13: 00007fefb4426218 R14: 00007fefb4426180 R15: 00007ffcddf83888 [ 613.358514][T14641] [ 613.981273][T14660] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 614.047101][T14664] futex_wake_op: syz.1.1164 tries to shift op by -2048; fix this program [ 614.079654][T14656] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1168'. [ 616.343307][T14699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.304975][T12974] Bluetooth: hci0: unknown advertising packet type: 0xea [ 622.231933][T14794] vhci_hcd vhci_hcd.2: invalid port number 253 [ 622.278368][T14794] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 624.342141][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.348945][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.026661][T14923] vhci_hcd vhci_hcd.2: invalid port number 253 [ 630.052690][T14923] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 631.375738][T14933] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1207'. [ 631.655041][T14948] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 631.734982][T14948] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(524287.0.0), cmd(2) [ 634.234067][T14995] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 637.253505][T15043] vhci_hcd vhci_hcd.2: invalid port number 253 [ 637.269345][T15043] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 639.098398][T15071] vhci_hcd vhci_hcd.2: invalid port number 253 [ 639.125082][T15071] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 642.458517][T15119] vhci_hcd vhci_hcd.2: invalid port number 253 [ 642.481883][T15119] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 643.500631][T15133] random: crng reseeded on system resumption [ 643.999949][T15142] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1238'. [ 645.621080][T15154] bridge0: port 3(team0) entered blocking state [ 645.656204][T15154] bridge0: port 3(team0) entered disabled state [ 645.679166][T15154] team0: entered allmulticast mode [ 645.690794][T15154] team_slave_0: entered allmulticast mode [ 645.702668][T15154] team_slave_1: entered allmulticast mode [ 645.712202][T15154] team0: entered promiscuous mode [ 645.722099][T15154] team_slave_0: entered promiscuous mode [ 645.738029][T15154] team_slave_1: entered promiscuous mode [ 645.748344][T15154] bridge0: port 3(team0) entered blocking state [ 645.754672][T15154] bridge0: port 3(team0) entered forwarding state [ 645.926598][T15167] vhci_hcd vhci_hcd.2: invalid port number 253 [ 645.963780][T15167] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 646.900585][ T4942] Bluetooth: hci1: command 0x0406 tx timeout [ 648.219505][T15215] vhci_hcd vhci_hcd.2: invalid port number 253 [ 648.238171][T15215] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 650.509291][T15244] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1252'. [ 653.353764][T15287] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1258'. [ 653.913194][T15312] vhci_hcd vhci_hcd.2: invalid port number 253 [ 653.939662][T15312] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 657.795346][T15359] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2759.0.2190235046), cmd(2) [ 659.452645][T15387] FAULT_INJECTION: forcing a failure. [ 659.452645][T15387] name failslab, interval 1, probability 0, space 0, times 0 [ 659.524791][T15387] CPU: 0 UID: 0 PID: 15387 Comm: syz.0.1275 Not tainted syzkaller #0 PREEMPT(full) [ 659.524814][T15387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 659.524823][T15387] Call Trace: [ 659.524829][T15387] [ 659.524834][T15387] dump_stack_lvl+0x100/0x190 [ 659.524857][T15387] should_fail_ex.cold+0x5/0xa [ 659.524874][T15387] should_failslab+0xc2/0x120 [ 659.524895][T15387] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 659.524921][T15387] ? __alloc_skb+0x140/0x710 [ 659.524944][T15387] __alloc_skb+0x140/0x710 [ 659.524963][T15387] ? __pfx___alloc_skb+0x10/0x10 [ 659.524987][T15387] tcp_stream_alloc_skb+0x34/0x660 [ 659.525105][T15387] tcp_connect+0xf22/0x5510 [ 659.525159][T15387] ? find_held_lock+0x2b/0x80 [ 659.525181][T15387] ? __pfx_tcp_connect+0x10/0x10 [ 659.525203][T15387] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 659.525264][T15387] tcp_v4_connect+0x1607/0x1b40 [ 659.525290][T15387] ? __pfx_tcp_v4_connect+0x10/0x10 [ 659.525311][T15387] ? __lock_acquire+0x49f/0x1a40 [ 659.525337][T15387] __inet_stream_connect+0x208/0xfa0 [ 659.525383][T15387] ? __pfx___inet_stream_connect+0x10/0x10 [ 659.525402][T15387] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 659.525421][T15387] ? __pfx_inet_stream_connect+0x10/0x10 [ 659.525446][T15387] ? __local_bh_enable_ip+0x9e/0x120 [ 659.525466][T15387] ? __pfx_inet_stream_connect+0x10/0x10 [ 659.525485][T15387] inet_stream_connect+0x57/0xa0 [ 659.525505][T15387] __sys_connect_file+0x141/0x1a0 [ 659.525525][T15387] __sys_connect+0x141/0x170 [ 659.525543][T15387] ? __pfx___sys_connect+0x10/0x10 [ 659.525573][T15387] __x64_sys_connect+0x72/0xb0 [ 659.525589][T15387] ? lockdep_hardirqs_on+0x78/0x100 [ 659.525609][T15387] do_syscall_64+0x115/0x840 [ 659.525627][T15387] ? clear_bhb_loop+0x40/0x90 [ 659.525645][T15387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.525661][T15387] RIP: 0033:0x7fa256d9e019 [ 659.525674][T15387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.525688][T15387] RSP: 002b:00007fa257b80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 659.525703][T15387] RAX: ffffffffffffffda RBX: 00007fa257025fa0 RCX: 00007fa256d9e019 [ 659.525713][T15387] RDX: 0000000000000051 RSI: 0000200000000080 RDI: 0000000000000003 [ 659.525722][T15387] RBP: 00007fa256e3500c R08: 0000000000000000 R09: 0000000000000000 [ 659.525731][T15387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.525740][T15387] R13: 00007fa257026038 R14: 00007fa257025fa0 R15: 00007ffe17c31078 [ 659.525760][T15387] [ 660.228641][T15420] vhci_hcd vhci_hcd.2: invalid port number 253 [ 660.296676][T15420] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 660.422302][T15424] netlink: 29 bytes leftover after parsing attributes in process `syz.0.1280'. [ 662.572282][T15472] FAULT_INJECTION: forcing a failure. [ 662.572282][T15472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.616236][T15472] CPU: 0 UID: 0 PID: 15472 Comm: syz.0.1287 Not tainted syzkaller #0 PREEMPT(full) [ 662.616257][T15472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 662.616267][T15472] Call Trace: [ 662.616272][T15472] [ 662.616278][T15472] dump_stack_lvl+0x100/0x190 [ 662.616299][T15472] should_fail_ex.cold+0x5/0xa [ 662.616316][T15472] _copy_to_user+0x32/0xd0 [ 662.616340][T15472] keyctl_capabilities+0x5a/0x160 [ 662.616361][T15472] __do_sys_keyctl+0x427/0x5a0 [ 662.616379][T15472] do_syscall_64+0x115/0x840 [ 662.616398][T15472] ? clear_bhb_loop+0x40/0x90 [ 662.616416][T15472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.616431][T15472] RIP: 0033:0x7fa256d9e019 [ 662.616445][T15472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.616459][T15472] RSP: 002b:00007fa254f93028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 662.616474][T15472] RAX: ffffffffffffffda RBX: 00007fa257026360 RCX: 00007fa256d9e019 [ 662.616484][T15472] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 662.616492][T15472] RBP: 00007fa254f93090 R08: 00000000000003ff R09: 0000000000000000 [ 662.616501][T15472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.616510][T15472] R13: 00007fa2570263f8 R14: 00007fa257026360 R15: 00007ffe17c31078 [ 662.616529][T15472] [ 664.543701][ T1102] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.968701][ T1102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.009217][ T4942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 665.022614][ T4942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 665.033058][ T4942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 665.040715][ T4942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 665.049169][ T4942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 665.341689][ T1102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.690980][ T1102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.953578][ T1102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.785778][T15531] vhci_hcd vhci_hcd.2: invalid port number 253 [ 666.815768][T15531] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 667.140374][ T4942] Bluetooth: hci3: command tx timeout [ 667.540733][ T1102] bridge_slave_1: left allmulticast mode [ 667.552646][ T1102] bridge_slave_1: left promiscuous mode [ 667.569075][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.590698][ T1102] bridge_slave_0: left allmulticast mode [ 667.605428][ T1102] bridge_slave_0: left promiscuous mode [ 667.623980][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.856209][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.872846][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.882827][ T1102] bond0 (unregistering): Released all slaves [ 668.016511][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 668.750294][ T1102] hsr_slave_0: left promiscuous mode [ 668.786443][ T1102] hsr_slave_1: left promiscuous mode [ 668.817648][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.863205][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.902607][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.921623][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.967406][ T1102] veth1_macvtap: left promiscuous mode [ 668.990401][ T1102] veth0_macvtap: left promiscuous mode [ 669.009992][ T1102] veth1_vlan: left promiscuous mode [ 669.043921][ T1102] veth0_vlan: left promiscuous mode [ 669.218478][ T4942] Bluetooth: hci3: command tx timeout [ 669.584123][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 669.620505][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 669.856281][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 670.560672][T15502] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.587473][T15502] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.615674][T15502] bridge_slave_0: entered allmulticast mode [ 670.641691][T15502] bridge_slave_0: entered promiscuous mode [ 670.957913][T15502] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.989241][T15502] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.023105][T15502] bridge_slave_1: entered allmulticast mode [ 671.052094][T15502] bridge_slave_1: entered promiscuous mode [ 671.286651][T15502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.300138][ T4942] Bluetooth: hci3: command tx timeout [ 671.329280][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 671.494778][T15502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.685938][T15502] team0: Port device team_slave_0 added [ 671.917219][T15502] team0: Port device team_slave_1 added [ 672.405063][T15502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.432448][T15502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.522221][T15502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.752650][T15502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.777984][T15502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.847467][T15502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.065001][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 673.131879][T15641] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1303'. [ 673.331518][T15502] hsr_slave_0: entered promiscuous mode [ 673.362587][T15502] hsr_slave_1: entered promiscuous mode [ 673.378749][ T4942] Bluetooth: hci3: command tx timeout [ 673.391180][T15502] debugfs: 'hsr0' already exists in 'hsr' [ 673.407616][T15502] Cannot create hsr debugfs directory [ 677.092104][T15502] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 677.132782][T15502] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 677.162947][T15502] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 677.208065][T15502] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 677.277039][T15502] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 677.336633][T15502] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 677.370487][T15502] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 677.426230][T15502] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 679.743109][T15502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.856939][T15502] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.941473][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.948624][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.040761][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.047912][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.737603][T15784] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 680.783734][T15784] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 680.876710][T15784] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 680.919566][T15784] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 680.988463][T15784] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 681.026507][T15784] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 681.112043][T15784] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 681.170771][T15784] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 681.210234][T15784] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 681.270921][T15784] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 682.103344][ T4942] Bluetooth: hci0: command 0x0406 tx timeout [ 682.479693][ T30] audit: type=1800 audit(4294967389.570:5): pid=15861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1321" name="members" dev="configfs" ino=112430 res=0 errno=0 [ 682.640633][T15502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.898473][ T4942] Bluetooth: hci1: command 0x0406 tx timeout [ 683.058152][ T4942] Bluetooth: hci2: command 0x0c1a tx timeout [ 683.219094][ T4942] Bluetooth: hci3: command 0x0c1a tx timeout [ 683.909259][T15502] veth0_vlan: entered promiscuous mode [ 684.056151][T15502] veth1_vlan: entered promiscuous mode [ 684.105999][T15900] vhci_hcd vhci_hcd.2: invalid port number 253 [ 684.129472][T15900] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 684.181067][ T4942] Bluetooth: hci0: command 0x0406 tx timeout [ 684.980081][ T4942] Bluetooth: hci1: command 0x0406 tx timeout [ 685.144755][ T4942] Bluetooth: hci2: command 0x0c1a tx timeout [ 685.298049][ T4942] Bluetooth: hci3: command 0x0c1a tx timeout [ 685.779710][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.800356][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.070541][T15502] veth0_macvtap: entered promiscuous mode [ 686.563425][T15502] veth1_macvtap: entered promiscuous mode [ 687.045466][T15502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.218474][ T4942] Bluetooth: hci2: command 0x0c1a tx timeout [ 687.255384][T15502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.378621][ T4942] Bluetooth: hci3: command 0x0c1a tx timeout [ 687.657874][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.897848][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.258039][ T1151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.633692][ T1102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.689570][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.714960][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.961593][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.003344][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.287013][T15995] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 692.322202][T15995] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 698.742391][T16074] FAULT_INJECTION: forcing a failure. [ 698.742391][T16074] name failslab, interval 1, probability 0, space 0, times 0 [ 698.786755][T16074] CPU: 0 UID: 0 PID: 16074 Comm: syz.0.1352 Not tainted syzkaller #0 PREEMPT(full) [ 698.786777][T16074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.786787][T16074] Call Trace: [ 698.786792][T16074] [ 698.786798][T16074] dump_stack_lvl+0x100/0x190 [ 698.786820][T16074] should_fail_ex.cold+0x5/0xa [ 698.786838][T16074] should_failslab+0xc2/0x120 [ 698.786859][T16074] kmem_cache_alloc_noprof+0x91/0x6a0 [ 698.786877][T16074] ? mas_prev+0x9b/0xf0 [ 698.786899][T16074] ? vm_area_alloc+0x1f/0x160 [ 698.786918][T16074] vm_area_alloc+0x1f/0x160 [ 698.786932][T16074] __mmap_region+0x1033/0x2db0 [ 698.786952][T16074] ? __pfx___mmap_region+0x10/0x10 [ 698.786966][T16074] ? __pfx___might_resched+0x10/0x10 [ 698.787016][T16074] ? find_held_lock+0x2b/0x80 [ 698.787035][T16074] ? process_measurement+0x4c8/0x2350 [ 698.787054][T16074] ? process_measurement+0x4c8/0x2350 [ 698.787071][T16074] ? down_write+0x146/0x1f0 [ 698.787097][T16074] ? process_measurement+0x1f4/0x2350 [ 698.787118][T16074] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 698.787147][T16074] ? __lock_acquire+0x49f/0x1a40 [ 698.787179][T16074] ? find_held_lock+0x2b/0x80 [ 698.787196][T16074] ? is_bpf_text_address+0x8a/0x1a0 [ 698.787254][T16074] mmap_region+0x527/0x620 [ 698.787273][T16074] ? __pfx_mmap_region+0x10/0x10 [ 698.787290][T16074] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 698.787312][T16074] ? cap_mmap_addr+0x4b/0x120 [ 698.787326][T16074] ? bpf_lsm_mmap_addr+0x9/0x30 [ 698.787344][T16074] ? security_mmap_addr+0x71/0x1e0 [ 698.787365][T16074] ? __get_unmapped_area+0x255/0x3e0 [ 698.787387][T16074] do_mmap+0xc63/0x12f0 [ 698.787411][T16074] ? __pfx_do_mmap+0x10/0x10 [ 698.787431][T16074] ? __pfx_down_write_killable+0x10/0x10 [ 698.787456][T16074] vm_mmap_pgoff+0x29e/0x470 [ 698.787482][T16074] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 698.787501][T16074] ? __fget_files+0x215/0x3d0 [ 698.787519][T16074] ? __fget_files+0x21f/0x3d0 [ 698.787536][T16074] ksys_mmap_pgoff+0x3cb/0x610 [ 698.787567][T16074] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 698.787586][T16074] ? fput+0x79/0x100 [ 698.787602][T16074] ? ksys_write+0x1ac/0x250 [ 698.787616][T16074] ? __pfx_ksys_write+0x10/0x10 [ 698.787631][T16074] __x64_sys_mmap+0x125/0x190 [ 698.787658][T16074] do_syscall_64+0x115/0x840 [ 698.787675][T16074] ? clear_bhb_loop+0x40/0x90 [ 698.787694][T16074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.787709][T16074] RIP: 0033:0x7fa256d9e019 [ 698.787722][T16074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.787737][T16074] RSP: 002b:00007fa254ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 698.787752][T16074] RAX: ffffffffffffffda RBX: 00007fa257026090 RCX: 00007fa256d9e019 [ 698.787762][T16074] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000006000 [ 698.787771][T16074] RBP: 00007fa254ff6090 R08: 0000000000000003 R09: 0000000000008000 [ 698.787780][T16074] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 698.787788][T16074] R13: 00007fa257026128 R14: 00007fa257026090 R15: 00007ffe17c31078 [ 698.787808][T16074] [ 700.333811][T16084] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1353'. [ 700.506310][T16084] bridge0: port 3(team0) entered disabled state [ 707.510366][ T30] audit: type=1800 audit(4294967414.610:6): pid=16194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1373" name="members" dev="configfs" ino=115829 res=0 errno=0 [ 710.981773][T16253] FAULT_INJECTION: forcing a failure. [ 710.981773][T16253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.079243][T16255] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 711.148267][T16253] CPU: 0 UID: 0 PID: 16253 Comm: syz.1.1381 Not tainted syzkaller #0 PREEMPT(full) [ 711.148289][T16253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 711.148299][T16253] Call Trace: [ 711.148304][T16253] [ 711.148310][T16253] dump_stack_lvl+0x100/0x190 [ 711.148332][T16253] should_fail_ex.cold+0x5/0xa [ 711.148349][T16253] _copy_to_user+0x32/0xd0 [ 711.148380][T16253] simple_read_from_buffer+0xcb/0x170 [ 711.148406][T16253] proc_fail_nth_read+0x1af/0x230 [ 711.148427][T16253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 711.148448][T16253] ? rw_verify_area+0xce/0x6d0 [ 711.148469][T16253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 711.148488][T16253] vfs_read+0x1e4/0xb40 [ 711.148505][T16253] ? __pfx_vfs_read+0x10/0x10 [ 711.148518][T16253] ? __fget_files+0x215/0x3d0 [ 711.148536][T16253] ? __fget_files+0x21f/0x3d0 [ 711.148554][T16253] ksys_read+0x12a/0x250 [ 711.148568][T16253] ? __pfx_ksys_read+0x10/0x10 [ 711.148580][T16253] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 711.148603][T16253] ? syscall_user_dispatch+0x76/0x130 [ 711.148623][T16253] do_syscall_64+0x115/0x840 [ 711.148642][T16253] ? clear_bhb_loop+0x40/0x90 [ 711.148660][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.148675][T16253] RIP: 0033:0x7fefb415e84e [ 711.148688][T16253] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 711.148702][T16253] RSP: 002b:00007fefb505bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 711.148717][T16253] RAX: ffffffffffffffda RBX: 00007fefb505c6c0 RCX: 00007fefb415e84e [ 711.148727][T16253] RDX: 000000000000000f RSI: 00007fefb505c0a0 RDI: 0000000000000004 [ 711.148736][T16253] RBP: 00007fefb505c090 R08: 0000000000000000 R09: 0000000000000000 [ 711.148745][T16253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.148754][T16253] R13: 00007fefb44264e8 R14: 00007fefb4426450 R15: 00007ffcddf83888 [ 711.148773][T16253] [ 712.500953][ T30] audit: type=1800 audit(4294967419.590:7): pid=16267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1383" name="members" dev="configfs" ino=116599 res=0 errno=0 [ 712.631563][T16270] FAULT_INJECTION: forcing a failure. [ 712.631563][T16270] name failslab, interval 1, probability 0, space 0, times 0 [ 712.676863][T16270] CPU: 0 UID: 0 PID: 16270 Comm: syz.3.1384 Not tainted syzkaller #0 PREEMPT(full) [ 712.676887][T16270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 712.676896][T16270] Call Trace: [ 712.676902][T16270] [ 712.676909][T16270] dump_stack_lvl+0x100/0x190 [ 712.676932][T16270] should_fail_ex.cold+0x5/0xa [ 712.676950][T16270] should_failslab+0xc2/0x120 [ 712.676972][T16270] __kmalloc_cache_noprof+0x91/0x6c0 [ 712.676990][T16270] ? resv_map_alloc+0x7e/0x400 [ 712.677012][T16270] resv_map_alloc+0x7e/0x400 [ 712.677033][T16270] hugetlbfs_get_inode+0x385/0x700 [ 712.677166][T16270] hugetlb_file_setup+0x15b/0x5b0 [ 712.677195][T16270] ksys_mmap_pgoff+0x242/0x610 [ 712.677219][T16270] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 712.677240][T16270] ? xfd_validate_state+0x129/0x190 [ 712.677261][T16270] __x64_sys_mmap+0x125/0x190 [ 712.677282][T16270] do_syscall_64+0x115/0x840 [ 712.677301][T16270] ? clear_bhb_loop+0x40/0x90 [ 712.677320][T16270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.677336][T16270] RIP: 0033:0x7fa95359e019 [ 712.677349][T16270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.677364][T16270] RSP: 002b:00007fa9517f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 712.677378][T16270] RAX: ffffffffffffffda RBX: 00007fa953825fa0 RCX: 00007fa95359e019 [ 712.677389][T16270] RDX: 0000000000000002 RSI: 0000000000004005 RDI: 0000000000000000 [ 712.677398][T16270] RBP: 00007fa95363500c R08: 0000000000000401 R09: 0000300000000000 [ 712.677408][T16270] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 712.677417][T16270] R13: 00007fa953826038 R14: 00007fa953825fa0 R15: 00007fff4d0e3998 [ 712.677437][T16270] [ 713.305615][T16284] vhci_hcd vhci_hcd.2: invalid port number 253 [ 713.331934][T16284] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 714.461645][T16294] ACPI: button: Initial lid state set to 'ignore' [ 715.481464][T16293] kexec: Could not allocate control_code_buffer [ 716.339811][T16346] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 717.991818][T16372] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 718.006624][T16376] MTRR 1 not used [ 720.520016][T16419] random: crng reseeded on system resumption [ 723.865284][T16457] FAULT_INJECTION: forcing a failure. [ 723.865284][T16457] name failslab, interval 1, probability 0, space 0, times 0 [ 723.920907][T16457] CPU: 0 UID: 0 PID: 16457 Comm: syz.1.1412 Not tainted syzkaller #0 PREEMPT(full) [ 723.920929][T16457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 723.920938][T16457] Call Trace: [ 723.920944][T16457] [ 723.920950][T16457] dump_stack_lvl+0x100/0x190 [ 723.920974][T16457] should_fail_ex.cold+0x5/0xa [ 723.920992][T16457] should_failslab+0xc2/0x120 [ 723.921015][T16457] kmem_cache_alloc_noprof+0x91/0x6a0 [ 723.921035][T16457] ? do_getname+0x35/0x390 [ 723.921057][T16457] do_getname+0x35/0x390 [ 723.921077][T16457] do_sys_openat2+0xc7/0x1e0 [ 723.921097][T16457] ? __pfx_do_sys_openat2+0x10/0x10 [ 723.921123][T16457] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 723.921146][T16457] ? __fget_files+0x21f/0x3d0 [ 723.921163][T16457] __x64_sys_openat+0x12d/0x210 [ 723.921183][T16457] ? __pfx___x64_sys_openat+0x10/0x10 [ 723.921202][T16457] ? ksys_write+0x1ac/0x250 [ 723.921222][T16457] do_syscall_64+0x115/0x840 [ 723.921240][T16457] ? clear_bhb_loop+0x40/0x90 [ 723.921259][T16457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.921278][T16457] RIP: 0033:0x7fefb419e019 [ 723.921291][T16457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.921306][T16457] RSP: 002b:00007fefb5101028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 723.921321][T16457] RAX: ffffffffffffffda RBX: 00007fefb4425fa0 RCX: 00007fefb419e019 [ 723.921330][T16457] RDX: 000000000000a901 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 723.921340][T16457] RBP: 00007fefb5101090 R08: 0000000000000000 R09: 0000000000000000 [ 723.921348][T16457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.921357][T16457] R13: 00007fefb4426038 R14: 00007fefb4425fa0 R15: 00007ffcddf83888 [ 723.921376][T16457] [ 725.908414][T16483] vhci_hcd vhci_hcd.2: invalid port number 253 [ 725.945337][T16483] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 732.520627][T16598] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 732.545444][ T30] audit: type=1807 audit(4294969487.746:8): UNKNOWN=nl80211 res=0 [ 732.576994][ T30] audit: type=1802 audit(4294969487.777:9): pid=16597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1432" res=0 errno=0 [ 732.611961][T16597] ima: policy update failed [ 732.650817][ T30] audit: type=1802 audit(4294969487.837:10): pid=16597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1432" res=0 errno=0 [ 736.711857][T16682] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 737.894875][T16685] blktrace: Concurrent blktraces are not allowed on nbd5 [ 743.906119][ T30] audit: type=1326 audit(4294969499.166:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16818 comm="syz.3.1470" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa95359e019 code=0x0 [ 744.768947][T16847] FAULT_INJECTION: forcing a failure. [ 744.768947][T16847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.862646][T16847] CPU: 0 UID: 0 PID: 16847 Comm: syz.3.1474 Not tainted syzkaller #0 PREEMPT(full) [ 744.862681][T16847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 744.862698][T16847] Call Trace: [ 744.862708][T16847] [ 744.862718][T16847] dump_stack_lvl+0x100/0x190 [ 744.862744][T16847] should_fail_ex.cold+0x5/0xa [ 744.862761][T16847] _copy_to_user+0x32/0xd0 [ 744.862787][T16847] simple_read_from_buffer+0xcb/0x170 [ 744.862813][T16847] proc_fail_nth_read+0x1af/0x230 [ 744.862835][T16847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.862856][T16847] ? rw_verify_area+0xce/0x6d0 [ 744.862878][T16847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.862897][T16847] vfs_read+0x1e4/0xb40 [ 744.862913][T16847] ? __pfx_vfs_read+0x10/0x10 [ 744.862926][T16847] ? __fget_files+0x215/0x3d0 [ 744.862944][T16847] ? __fget_files+0x21f/0x3d0 [ 744.862963][T16847] ksys_read+0x12a/0x250 [ 744.862976][T16847] ? __pfx_ksys_read+0x10/0x10 [ 744.862995][T16847] do_syscall_64+0x115/0x840 [ 744.863020][T16847] ? clear_bhb_loop+0x40/0x90 [ 744.863039][T16847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.863055][T16847] RIP: 0033:0x7fa95355e84e [ 744.863068][T16847] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 744.863082][T16847] RSP: 002b:00007fa951771fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 744.863096][T16847] RAX: ffffffffffffffda RBX: 00007fa9517726c0 RCX: 00007fa95355e84e [ 744.863106][T16847] RDX: 000000000000000f RSI: 00007fa9517720a0 RDI: 0000000000000004 [ 744.863115][T16847] RBP: 00007fa951772090 R08: 0000000000000000 R09: 0000000000000000 [ 744.863123][T16847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.863139][T16847] R13: 00007fa9538263f8 R14: 00007fa953826360 R15: 00007fff4d0e3998 [ 744.863159][T16847] [ 745.329628][T16855] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1475'. [ 746.943424][T16879] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 747.044362][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.052495][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.304932][T16923] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 749.467388][T16924] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 749.906068][T16928] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1487'. [ 750.774741][ T30] audit: type=1800 audit(4294969506.071:12): pid=16942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1489" name="members" dev="configfs" ino=123630 res=0 errno=0 [ 753.477823][T16987] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 755.922188][T17009] random: crng reseeded on system resumption [ 757.256477][T17024] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1500'. [ 758.223371][T17049] FAULT_INJECTION: forcing a failure. [ 758.223371][T17049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.299138][T17049] CPU: 0 UID: 0 PID: 17049 Comm: syz.3.1504 Not tainted syzkaller #0 PREEMPT(full) [ 758.299159][T17049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 758.299169][T17049] Call Trace: [ 758.299174][T17049] [ 758.299180][T17049] dump_stack_lvl+0x100/0x190 [ 758.299203][T17049] should_fail_ex.cold+0x5/0xa [ 758.299220][T17049] _copy_to_user+0x32/0xd0 [ 758.299245][T17049] simple_read_from_buffer+0xcb/0x170 [ 758.299271][T17049] proc_fail_nth_read+0x1af/0x230 [ 758.299292][T17049] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 758.299314][T17049] ? rw_verify_area+0xce/0x6d0 [ 758.299335][T17049] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 758.299354][T17049] vfs_read+0x1e4/0xb40 [ 758.299370][T17049] ? __pfx_vfs_read+0x10/0x10 [ 758.299384][T17049] ? __fget_files+0x215/0x3d0 [ 758.299401][T17049] ? __fget_files+0x21f/0x3d0 [ 758.299420][T17049] ksys_read+0x12a/0x250 [ 758.299433][T17049] ? __pfx_ksys_read+0x10/0x10 [ 758.299452][T17049] do_syscall_64+0x115/0x840 [ 758.299471][T17049] ? clear_bhb_loop+0x40/0x90 [ 758.299489][T17049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.299504][T17049] RIP: 0033:0x7fa95355e84e [ 758.299517][T17049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 758.299532][T17049] RSP: 002b:00007fa951771fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 758.299547][T17049] RAX: ffffffffffffffda RBX: 00007fa9517726c0 RCX: 00007fa95355e84e [ 758.299557][T17049] RDX: 000000000000000f RSI: 00007fa9517720a0 RDI: 0000000000000007 [ 758.299566][T17049] RBP: 00007fa951772090 R08: 0000000000000000 R09: 0000000000000000 [ 758.299575][T17049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.299583][T17049] R13: 00007fa9538263f8 R14: 00007fa953826360 R15: 00007fff4d0e3998 [ 758.299603][T17049] [ 759.882921][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1508'. [ 759.925291][T17072] netlink: 'syz.2.1508': attribute type 2 has an invalid length. [ 761.435915][T17105] FAULT_INJECTION: forcing a failure. [ 761.435915][T17105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 761.537984][T17105] CPU: 0 UID: 0 PID: 17105 Comm: syz.3.1512 Not tainted syzkaller #0 PREEMPT(full) [ 761.538007][T17105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 761.538016][T17105] Call Trace: [ 761.538021][T17105] [ 761.538027][T17105] dump_stack_lvl+0x100/0x190 [ 761.538053][T17105] should_fail_ex.cold+0x5/0xa [ 761.538070][T17105] ? prepare_alloc_pages+0x16d/0x5f0 [ 761.538093][T17105] should_fail_alloc_page+0xeb/0x140 [ 761.538116][T17105] prepare_alloc_pages+0x1f0/0x5f0 [ 761.538140][T17105] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 761.538158][T17105] ? lapic_next_event+0x10/0x20 [ 761.538203][T17105] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 761.538221][T17105] ? __pfx_clockevents_program_event+0x10/0x10 [ 761.538242][T17105] ? timerqueue_linked_add+0x260/0x430 [ 761.538268][T17105] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 761.538285][T17105] ? tick_program_event+0xb0/0x140 [ 761.538312][T17105] ? __lock_acquire+0x49f/0x1a40 [ 761.538335][T17105] ? __lock_acquire+0x49f/0x1a40 [ 761.538362][T17105] ? lock_acquire+0x1b9/0x370 [ 761.538384][T17105] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 761.538413][T17105] ? policy_nodemask+0xed/0x4f0 [ 761.538436][T17105] alloc_pages_mpol+0x1fb/0x540 [ 761.538458][T17105] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 761.538484][T17105] folio_alloc_mpol_noprof+0x36/0x260 [ 761.538509][T17105] vma_alloc_folio_noprof+0xed/0x1d0 [ 761.538557][T17105] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 761.538586][T17105] do_anonymous_page+0xb2b/0x2080 [ 761.538602][T17105] ? rcu_read_unlock+0x2d/0xb0 [ 761.538623][T17105] __handle_mm_fault+0x1d2c/0x2a00 [ 761.538641][T17105] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 761.538659][T17105] ? __pfx___handle_mm_fault+0x10/0x10 [ 761.538675][T17105] ? pte_offset_map_lock+0x174/0x320 [ 761.538696][T17105] ? find_held_lock+0x2b/0x80 [ 761.538719][T17105] ? follow_page_pte+0x4d0/0x13f0 [ 761.538745][T17105] handle_mm_fault+0x37b/0xa30 [ 761.538763][T17105] __get_user_pages+0x1178/0x32a0 [ 761.538791][T17105] ? __pfx___get_user_pages+0x10/0x10 [ 761.538817][T17105] populate_vma_page_range+0x267/0x3f0 [ 761.538840][T17105] ? __pfx_populate_vma_page_range+0x10/0x10 [ 761.538861][T17105] ? __pfx_find_vma_intersection+0x10/0x10 [ 761.538882][T17105] ? do_mmap+0x93f/0x12f0 [ 761.538904][T17105] __mm_populate+0x107/0x3a0 [ 761.538930][T17105] ? __pfx___mm_populate+0x10/0x10 [ 761.538953][T17105] ? up_write+0x2e5/0x5c0 [ 761.538970][T17105] vm_mmap_pgoff+0x37f/0x470 [ 761.538993][T17105] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 761.539016][T17105] ? __pfx_do_futex+0x10/0x10 [ 761.539035][T17105] ksys_mmap_pgoff+0xe4/0x610 [ 761.539056][T17105] ? __x64_sys_futex+0x358/0x4d0 [ 761.539072][T17105] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 761.539092][T17105] ? xfd_validate_state+0x129/0x190 [ 761.539113][T17105] __x64_sys_mmap+0x125/0x190 [ 761.539134][T17105] do_syscall_64+0x115/0x840 [ 761.539152][T17105] ? clear_bhb_loop+0x40/0x90 [ 761.539170][T17105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.539185][T17105] RIP: 0033:0x7fa95359e019 [ 761.539198][T17105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.539213][T17105] RSP: 002b:00007fa9517f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 761.539228][T17105] RAX: ffffffffffffffda RBX: 00007fa953825fa0 RCX: 00007fa95359e019 [ 761.539238][T17105] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 761.539247][T17105] RBP: 00007fa95363500c R08: 0000000000000002 R09: 0000000000008000 [ 761.539256][T17105] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 761.539264][T17105] R13: 00007fa953826038 R14: 00007fa953825fa0 R15: 00007fff4d0e3998 [ 761.539284][T17105] [ 766.241387][T17172] FAULT_INJECTION: forcing a failure. [ 766.241387][T17172] name failslab, interval 1, probability 0, space 0, times 0 [ 766.424851][T17172] CPU: 0 UID: 0 PID: 17172 Comm: syz.1.1524 Not tainted syzkaller #0 PREEMPT(full) [ 766.424874][T17172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 766.424884][T17172] Call Trace: [ 766.424889][T17172] [ 766.424895][T17172] dump_stack_lvl+0x100/0x190 [ 766.424920][T17172] should_fail_ex.cold+0x5/0xa [ 766.424938][T17172] should_failslab+0xc2/0x120 [ 766.424959][T17172] kmem_cache_alloc_noprof+0x91/0x6a0 [ 766.424981][T17172] ? ep_ptable_queue_proc+0x5b/0x280 [ 766.425068][T17172] ep_ptable_queue_proc+0x5b/0x280 [ 766.425086][T17172] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 766.425102][T17172] snd_seq_pool_poll_wait+0x5b/0x160 [ 766.425122][T17172] snd_seq_kernel_client_write_poll+0xa5/0x110 [ 766.425178][T17172] snd_seq_oss_poll+0x17d/0x1d0 [ 766.425195][T17172] ? __pfx_odev_poll+0x10/0x10 [ 766.425217][T17172] odev_poll+0x4a/0x90 [ 766.425238][T17172] ep_item_poll+0x141/0x1f0 [ 766.425256][T17172] do_epoll_ctl_file+0x1e6e/0x36e0 [ 766.425280][T17172] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 766.425299][T17172] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 766.425315][T17172] ? __fget_files+0x215/0x3d0 [ 766.425332][T17172] ? __fget_files+0x21f/0x3d0 [ 766.425350][T17172] ? do_epoll_ctl+0xfd/0x1a0 [ 766.425366][T17172] do_epoll_ctl+0xfd/0x1a0 [ 766.425384][T17172] ? __pfx_do_epoll_ctl+0x10/0x10 [ 766.425406][T17172] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 766.425424][T17172] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 766.425457][T17172] do_syscall_64+0x115/0x840 [ 766.425477][T17172] ? clear_bhb_loop+0x40/0x90 [ 766.425496][T17172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.425511][T17172] RIP: 0033:0x7fefb419e019 [ 766.425526][T17172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.425541][T17172] RSP: 002b:00007fefb5101028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 766.425557][T17172] RAX: ffffffffffffffda RBX: 00007fefb4425fa0 RCX: 00007fefb419e019 [ 766.425567][T17172] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 766.425577][T17172] RBP: 00007fefb423500c R08: 0000000000000000 R09: 0000000000000000 [ 766.425586][T17172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.425594][T17172] R13: 00007fefb4426038 R14: 00007fefb4425fa0 R15: 00007ffcddf83888 [ 766.425614][T17172] [ 769.811960][T17244] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 770.540059][T17249] FAULT_INJECTION: forcing a failure. [ 770.540059][T17249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.585610][T17249] CPU: 0 UID: 0 PID: 17249 Comm: syz.3.1536 Not tainted syzkaller #0 PREEMPT(full) [ 770.585632][T17249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 770.585642][T17249] Call Trace: [ 770.585647][T17249] [ 770.585652][T17249] dump_stack_lvl+0x100/0x190 [ 770.585674][T17249] should_fail_ex.cold+0x5/0xa [ 770.585691][T17249] _copy_from_iter+0x1f4/0x1690 [ 770.585777][T17249] ? __asan_memset+0x23/0x50 [ 770.585797][T17249] ? __pfx__copy_from_iter+0x10/0x10 [ 770.585819][T17249] ? __pfx___alloc_skb+0x10/0x10 [ 770.585847][T17249] netlink_sendmsg+0x808/0xda0 [ 770.585903][T17249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.585922][T17249] ? apparmor_socket_sendmsg+0x15b/0x270 [ 770.585942][T17249] ____sys_sendmsg+0xa4d/0xbe0 [ 770.585956][T17249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.585974][T17249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.585997][T17249] ___sys_sendmsg+0x190/0x1e0 [ 770.586014][T17249] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.586028][T17249] ? __lock_acquire+0x49f/0x1a40 [ 770.586052][T17249] ? get_pid_task+0x106/0x250 [ 770.586090][T17249] __sys_sendmsg+0x160/0x210 [ 770.586111][T17249] ? __pfx___sys_sendmsg+0x10/0x10 [ 770.586141][T17249] do_syscall_64+0x115/0x840 [ 770.586159][T17249] ? clear_bhb_loop+0x40/0x90 [ 770.586177][T17249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.586193][T17249] RIP: 0033:0x7fa95359e019 [ 770.586206][T17249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.586220][T17249] RSP: 002b:00007fa9517f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.586235][T17249] RAX: ffffffffffffffda RBX: 00007fa953825fa0 RCX: 00007fa95359e019 [ 770.586245][T17249] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 770.586254][T17249] RBP: 00007fa9517f6090 R08: 0000000000000000 R09: 0000000000000000 [ 770.586263][T17249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.586271][T17249] R13: 00007fa953826038 R14: 00007fa953825fa0 R15: 00007fff4d0e3998 [ 770.586290][T17249] [ 772.705996][T17290] FAULT_INJECTION: forcing a failure. [ 772.705996][T17290] name failslab, interval 1, probability 0, space 0, times 0 [ 772.750261][T17290] CPU: 0 UID: 0 PID: 17290 Comm: syz.1.1542 Not tainted syzkaller #0 PREEMPT(full) [ 772.750291][T17290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 772.750301][T17290] Call Trace: [ 772.750307][T17290] [ 772.750313][T17290] dump_stack_lvl+0x100/0x190 [ 772.750336][T17290] should_fail_ex.cold+0x5/0xa [ 772.750354][T17290] should_failslab+0xc2/0x120 [ 772.750376][T17290] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 772.750396][T17290] ? alloc_inode+0x183/0x250 [ 772.750419][T17290] alloc_inode+0x183/0x250 [ 772.750438][T17290] alloc_anon_inode+0x2a/0x3e0 [ 772.750519][T17290] anon_inode_make_secure_inode+0x2f/0x140 [ 772.750542][T17290] __anon_inode_getfile+0x1cf/0x280 [ 772.750566][T17290] new_userfaultfd+0x255/0x400 [ 772.750589][T17290] __x64_sys_userfaultfd+0x4b/0xb0 [ 772.750605][T17290] do_syscall_64+0x115/0x840 [ 772.750624][T17290] ? clear_bhb_loop+0x40/0x90 [ 772.750642][T17290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.750657][T17290] RIP: 0033:0x7fefb419e019 [ 772.750672][T17290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.750687][T17290] RSP: 002b:00007fefb507d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 772.750701][T17290] RAX: ffffffffffffffda RBX: 00007fefb4426360 RCX: 00007fefb419e019 [ 772.750711][T17290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 772.750720][T17290] RBP: 00007fefb423500c R08: 0000000000000000 R09: 0000000000000000 [ 772.750729][T17290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.750737][T17290] R13: 00007fefb44263f8 R14: 00007fefb4426360 R15: 00007ffcddf83888 [ 772.750757][T17290] [ 774.287700][ T30] audit: type=1800 audit(4294969529.704:13): pid=17304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1545" name="members" dev="configfs" ino=127434 res=0 errno=0 [ 775.015214][T17319] FAULT_INJECTION: forcing a failure. [ 775.015214][T17319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.164957][T17319] CPU: 0 UID: 0 PID: 17319 Comm: syz.1.1547 Not tainted syzkaller #0 PREEMPT(full) [ 775.164979][T17319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.164988][T17319] Call Trace: [ 775.164994][T17319] [ 775.165000][T17319] dump_stack_lvl+0x100/0x190 [ 775.165023][T17319] should_fail_ex.cold+0x5/0xa [ 775.165040][T17319] _copy_from_user+0x2e/0xd0 [ 775.165064][T17319] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 775.165163][T17319] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 775.165182][T17319] ? tcp_setsockopt+0xae/0x100 [ 775.165209][T17319] smc_setsockopt+0x299/0xa40 [ 775.165223][T17319] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 775.165250][T17319] ? __pfx_smc_setsockopt+0x10/0x10 [ 775.165266][T17319] ? aa_sock_opt_perm+0xfe/0x1b0 [ 775.165283][T17319] ? __pfx_smc_setsockopt+0x10/0x10 [ 775.165299][T17319] do_sock_setsockopt+0xf3/0x1d0 [ 775.165324][T17319] __sys_setsockopt+0x119/0x190 [ 775.165347][T17319] __x64_sys_setsockopt+0xbd/0x160 [ 775.165365][T17319] ? do_syscall_64+0x90/0x840 [ 775.165383][T17319] ? lockdep_hardirqs_on+0x78/0x100 [ 775.165401][T17319] do_syscall_64+0x115/0x840 [ 775.165419][T17319] ? clear_bhb_loop+0x40/0x90 [ 775.165437][T17319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.165453][T17319] RIP: 0033:0x7fefb419e019 [ 775.165466][T17319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.165480][T17319] RSP: 002b:00007fefb507d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 775.165494][T17319] RAX: ffffffffffffffda RBX: 00007fefb4426360 RCX: 00007fefb419e019 [ 775.165504][T17319] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000004 [ 775.165513][T17319] RBP: 00007fefb507d090 R08: 0000000000010000 R09: 0000000000000000 [ 775.165522][T17319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.165531][T17319] R13: 00007fefb44263f8 R14: 00007fefb4426360 R15: 00007ffcddf83888 [ 775.165550][T17319] [ 776.558263][T17342] FAULT_INJECTION: forcing a failure. [ 776.558263][T17342] name failslab, interval 1, probability 0, space 0, times 0 [ 776.604731][T17342] CPU: 0 UID: 0 PID: 17342 Comm: syz.0.1553 Not tainted syzkaller #0 PREEMPT(full) [ 776.604754][T17342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 776.604763][T17342] Call Trace: [ 776.604769][T17342] [ 776.604775][T17342] dump_stack_lvl+0x100/0x190 [ 776.604797][T17342] should_fail_ex.cold+0x5/0xa [ 776.604815][T17342] should_failslab+0xc2/0x120 [ 776.604836][T17342] __kmalloc_noprof+0xfc/0x820 [ 776.604856][T17342] ? ima_alloc_init_template+0xb6/0x6d0 [ 776.604880][T17342] ima_alloc_init_template+0xb6/0x6d0 [ 776.604905][T17342] ima_store_measurement+0x1e3/0x5b0 [ 776.604929][T17342] ? __pfx_ima_store_measurement+0x10/0x10 [ 776.604959][T17342] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 776.604979][T17342] process_measurement+0x19cc/0x2350 [ 776.605005][T17342] ? __pfx_process_measurement+0x10/0x10 [ 776.605022][T17342] ? mark_held_locks+0x40/0x70 [ 776.605046][T17342] ? lockdep_hardirqs_on+0x78/0x100 [ 776.605064][T17342] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 776.605082][T17342] ? find_held_lock+0x2b/0x80 [ 776.605099][T17342] ? __tracing_open+0x7a6/0xa80 [ 776.605115][T17342] ? __tracing_open+0x7a6/0xa80 [ 776.605147][T17342] ? __tracing_open+0x3f/0xa80 [ 776.605168][T17342] ima_file_check+0xcc/0x120 [ 776.605186][T17342] ? __pfx_ima_file_check+0x10/0x10 [ 776.605209][T17342] security_file_post_open+0xc4/0x210 [ 776.605231][T17342] path_openat+0x985/0x4280 [ 776.605255][T17342] ? __pfx_path_openat+0x10/0x10 [ 776.605276][T17342] do_file_open+0x20e/0x430 [ 776.605293][T17342] ? __pfx_do_file_open+0x10/0x10 [ 776.605322][T17342] ? alloc_fd+0x471/0x7a0 [ 776.605339][T17342] ? do_getname+0x191/0x390 [ 776.605359][T17342] do_sys_openat2+0x10f/0x1e0 [ 776.605379][T17342] ? __pfx_do_sys_openat2+0x10/0x10 [ 776.605400][T17342] ? __fget_files+0x21f/0x3d0 [ 776.605418][T17342] __x64_sys_openat+0x12d/0x210 [ 776.605438][T17342] ? __pfx___x64_sys_openat+0x10/0x10 [ 776.605465][T17342] do_syscall_64+0x115/0x840 [ 776.605484][T17342] ? clear_bhb_loop+0x40/0x90 [ 776.605503][T17342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.605518][T17342] RIP: 0033:0x7fa256d9e019 [ 776.605532][T17342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.605546][T17342] RSP: 002b:00007fa257b80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 776.605562][T17342] RAX: ffffffffffffffda RBX: 00007fa257025fa0 RCX: 00007fa256d9e019 [ 776.605572][T17342] RDX: 000000003892977e RSI: 0000200000000100 RDI: ffffffffffffff9c [ 776.605582][T17342] RBP: 00007fa256e3500c R08: 0000000000000000 R09: 0000000000000000 [ 776.605591][T17342] R10: 00000000000000eb R11: 0000000000000246 R12: 0000000000000000 [ 776.605600][T17342] R13: 00007fa257026038 R14: 00007fa257025fa0 R15: 00007ffe17c31078 [ 776.605627][T17342] [ 776.939158][ T30] audit: type=1804 audit(4294969532.036:14): pid=17342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.1553" name="/newroot/sys/kernel/tracing/per_cpu/cpu1/trace" dev="tracefs" ino=1689 res=0 errno=0 [ 777.061647][T17350] FAULT_INJECTION: forcing a failure. [ 777.061647][T17350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.074784][T17350] CPU: 0 UID: 0 PID: 17350 Comm: syz.1.1552 Not tainted syzkaller #0 PREEMPT(full) [ 777.074805][T17350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 777.074814][T17350] Call Trace: [ 777.074820][T17350] [ 777.074826][T17350] dump_stack_lvl+0x100/0x190 [ 777.074847][T17350] should_fail_ex.cold+0x5/0xa [ 777.074865][T17350] _copy_to_user+0x32/0xd0 [ 777.074895][T17350] simple_read_from_buffer+0xcb/0x170 [ 777.074924][T17350] proc_fail_nth_read+0x1af/0x230 [ 777.074945][T17350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 777.074966][T17350] ? rw_verify_area+0xce/0x6d0 [ 777.074988][T17350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 777.075007][T17350] vfs_read+0x1e4/0xb40 [ 777.075023][T17350] ? __pfx_vfs_read+0x10/0x10 [ 777.075037][T17350] ? __fget_files+0x215/0x3d0 [ 777.075055][T17350] ? __fget_files+0x21f/0x3d0 [ 777.075073][T17350] ksys_read+0x12a/0x250 [ 777.075087][T17350] ? __pfx_ksys_read+0x10/0x10 [ 777.075106][T17350] do_syscall_64+0x115/0x840 [ 777.075125][T17350] ? clear_bhb_loop+0x40/0x90 [ 777.075143][T17350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.075159][T17350] RIP: 0033:0x7fefb415e84e [ 777.075171][T17350] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 777.075185][T17350] RSP: 002b:00007fefb505bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 777.075201][T17350] RAX: ffffffffffffffda RBX: 00007fefb505c6c0 RCX: 00007fefb415e84e [ 777.075211][T17350] RDX: 000000000000000f RSI: 00007fefb505c0a0 RDI: 0000000000000004 [ 777.075220][T17350] RBP: 00007fefb505c090 R08: 0000000000000000 R09: 0000000000000000 [ 777.075229][T17350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.075238][T17350] R13: 00007fefb44264e8 R14: 00007fefb4426450 R15: 00007ffcddf83888 [ 777.075257][T17350] [ 779.613057][T17384] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1558'. [ 781.482060][T17412] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1562'. [ 783.948279][ T4942] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 784.988535][ T7162] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.208878][T17464] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1571'. [ 785.666007][T17489] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 787.216538][T17495] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1574'. [ 787.309298][T17501] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[13028] was attempted by ""[17501] [ 789.610519][T17542] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1585'. [ 789.941755][T17557] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 791.215070][T17573] ubi0: attaching mtd0 [ 791.432082][T17573] ubi0: scanning is finished [ 791.518637][T17573] ubi0: empty MTD device detected [ 792.527307][T17573] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 792.590152][T17573] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 792.669300][T17573] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 792.759869][T17573] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 792.867569][T17573] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 792.962068][T17573] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 793.068534][T17573] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 612614733 [ 793.154719][T17573] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 793.232457][T17599] ubi0: background thread "ubi_bgt0d" started, PID 17599 [ 793.257157][T17578] ubi0: detaching mtd0 [ 793.383135][T17578] ubi0: mtd0 is detached [ 796.573927][ T30] audit: type=1800 audit(4294969552.099:15): pid=17642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1598" name="members" dev="configfs" ino=130656 res=0 errno=0 [ 796.732957][ T30] audit: type=1800 audit(4294969552.260:16): pid=17645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1599" name="members" dev="configfs" ino=130676 res=0 errno=0 [ 797.188950][T17648] FAULT_INJECTION: forcing a failure. [ 797.188950][T17648] name failslab, interval 1, probability 0, space 0, times 0 [ 797.243206][T17648] CPU: 0 UID: 0 PID: 17648 Comm: syz.2.1600 Not tainted syzkaller #0 PREEMPT(full) [ 797.243229][T17648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 797.243238][T17648] Call Trace: [ 797.243244][T17648] [ 797.243250][T17648] dump_stack_lvl+0x100/0x190 [ 797.243272][T17648] should_fail_ex.cold+0x5/0xa [ 797.243291][T17648] should_failslab+0xc2/0x120 [ 797.243313][T17648] __kmalloc_cache_noprof+0x91/0x6c0 [ 797.243330][T17648] ? ima_d_path+0xc9/0x260 [ 797.243353][T17648] ima_d_path+0xc9/0x260 [ 797.243371][T17648] ? __pfx_ima_d_path+0x10/0x10 [ 797.243394][T17648] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 797.243414][T17648] process_measurement+0x1b25/0x2350 [ 797.243439][T17648] ? __pfx_process_measurement+0x10/0x10 [ 797.243457][T17648] ? mark_held_locks+0x40/0x70 [ 797.243480][T17648] ? lockdep_hardirqs_on+0x78/0x100 [ 797.243499][T17648] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 797.243516][T17648] ? find_held_lock+0x2b/0x80 [ 797.243534][T17648] ? __tracing_open+0x7a6/0xa80 [ 797.243550][T17648] ? __tracing_open+0x7a6/0xa80 [ 797.243583][T17648] ? __tracing_open+0x3f/0xa80 [ 797.243604][T17648] ima_file_check+0xcc/0x120 [ 797.243623][T17648] ? __pfx_ima_file_check+0x10/0x10 [ 797.243645][T17648] security_file_post_open+0xc4/0x210 [ 797.243666][T17648] path_openat+0x985/0x4280 [ 797.243690][T17648] ? __pfx_path_openat+0x10/0x10 [ 797.243711][T17648] do_file_open+0x20e/0x430 [ 797.243728][T17648] ? __pfx_do_file_open+0x10/0x10 [ 797.243756][T17648] ? alloc_fd+0x471/0x7a0 [ 797.243773][T17648] ? do_getname+0x191/0x390 [ 797.243793][T17648] do_sys_openat2+0x10f/0x1e0 [ 797.243816][T17648] ? __pfx_do_sys_openat2+0x10/0x10 [ 797.243837][T17648] ? __fget_files+0x21f/0x3d0 [ 797.243855][T17648] __x64_sys_openat+0x12d/0x210 [ 797.243875][T17648] ? __pfx___x64_sys_openat+0x10/0x10 [ 797.243916][T17648] do_syscall_64+0x115/0x840 [ 797.243935][T17648] ? clear_bhb_loop+0x40/0x90 [ 797.243958][T17648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.243974][T17648] RIP: 0033:0x7f15c359e019 [ 797.243989][T17648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.244003][T17648] RSP: 002b:00007f15c4502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 797.244019][T17648] RAX: ffffffffffffffda RBX: 00007f15c3825fa0 RCX: 00007f15c359e019 [ 797.244028][T17648] RDX: 000000003892977e RSI: 0000200000000100 RDI: ffffffffffffff9c [ 797.244038][T17648] RBP: 00007f15c363500c R08: 0000000000000000 R09: 0000000000000000 [ 797.244048][T17648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.244057][T17648] R13: 00007f15c3826038 R14: 00007f15c3825fa0 R15: 00007ffcb1f32328 [ 797.244078][T17648] [ 799.662405][T17689] FAULT_INJECTION: forcing a failure. [ 799.662405][T17689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.785446][T17689] CPU: 0 UID: 0 PID: 17689 Comm: syz.3.1608 Not tainted syzkaller #0 PREEMPT(full) [ 799.785470][T17689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 799.785479][T17689] Call Trace: [ 799.785485][T17689] [ 799.785491][T17689] dump_stack_lvl+0x100/0x190 [ 799.785513][T17689] should_fail_ex.cold+0x5/0xa [ 799.785530][T17689] _copy_from_user+0x2e/0xd0 [ 799.785554][T17689] copy_msghdr_from_user+0x9f/0x4c0 [ 799.785571][T17689] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 799.785591][T17689] ? rcu_is_watching+0x12/0xc0 [ 799.785610][T17689] ? ___sys_sendmsg+0x19d/0x1e0 [ 799.785630][T17689] ? kfree+0x1e5/0x6c0 [ 799.785647][T17689] ___sys_sendmsg+0x106/0x1e0 [ 799.785664][T17689] ? __pfx____sys_sendmsg+0x10/0x10 [ 799.785696][T17689] ? __pfx___might_resched+0x10/0x10 [ 799.785723][T17689] __sys_sendmmsg+0x20c/0x440 [ 799.785746][T17689] ? __pfx___sys_sendmmsg+0x10/0x10 [ 799.785765][T17689] ? ksys_write+0x190/0x250 [ 799.785793][T17689] ? fput+0x79/0x100 [ 799.785810][T17689] ? ksys_write+0x1ac/0x250 [ 799.785823][T17689] ? __pfx_ksys_write+0x10/0x10 [ 799.785840][T17689] __x64_sys_sendmmsg+0x9c/0x100 [ 799.785860][T17689] ? lockdep_hardirqs_on+0x78/0x100 [ 799.785879][T17689] do_syscall_64+0x115/0x840 [ 799.785897][T17689] ? clear_bhb_loop+0x40/0x90 [ 799.785915][T17689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.785930][T17689] RIP: 0033:0x7fa95359e019 [ 799.785944][T17689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.785957][T17689] RSP: 002b:00007fa9517d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 799.785973][T17689] RAX: ffffffffffffffda RBX: 00007fa953826090 RCX: 00007fa95359e019 [ 799.785983][T17689] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 799.785992][T17689] RBP: 00007fa9517d5090 R08: 0000000000000000 R09: 0000000000000000 [ 799.786000][T17689] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000002 [ 799.786009][T17689] R13: 00007fa953826128 R14: 00007fa953826090 R15: 00007fff4d0e3998 [ 799.786028][T17689] [ 800.546903][T17702] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 801.422337][T17707] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1607'. [ 804.167095][T17765] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 805.676378][ T4942] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4 [ 805.676408][ T4942] Bluetooth: hci0: unexpected event for opcode 0x647c [ 808.169347][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.178379][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.248935][ T30] audit: type=1800 audit(4294969566.856:17): pid=17912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1643" name="members" dev="configfs" ino=133126 res=0 errno=0 [ 811.541087][T17927] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1641'. [ 811.625042][T17928] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 816.181965][T17999] bridge0: port 3(team0) entered blocking state [ 816.216166][T17999] bridge0: port 3(team0) entered disabled state [ 816.261008][T17999] team0: entered allmulticast mode [ 816.284288][T17999] team_slave_0: entered allmulticast mode [ 816.314119][T17999] team_slave_1: entered allmulticast mode [ 816.346400][T17999] team0: entered promiscuous mode [ 816.385363][T17999] team_slave_0: entered promiscuous mode [ 816.425970][T17999] team_slave_1: entered promiscuous mode [ 816.477061][T18016] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 816.490505][T17999] bridge0: port 3(team0) entered blocking state [ 816.496862][T17999] bridge0: port 3(team0) entered forwarding state [ 820.367748][T18081] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1668'. [ 823.139632][T18127] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 825.303289][T18148] FAULT_INJECTION: forcing a failure. [ 825.303289][T18148] name failslab, interval 1, probability 0, space 0, times 0 [ 825.361929][T18148] CPU: 0 UID: 0 PID: 18148 Comm: syz.2.1680 Not tainted syzkaller #0 PREEMPT(full) [ 825.361952][T18148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 825.361961][T18148] Call Trace: [ 825.361966][T18148] [ 825.361972][T18148] dump_stack_lvl+0x100/0x190 [ 825.361994][T18148] should_fail_ex.cold+0x5/0xa [ 825.362011][T18148] should_failslab+0xc2/0x120 [ 825.362033][T18148] __kmalloc_cache_noprof+0x91/0x6c0 [ 825.362049][T18148] ? sctp_association_new+0xbb/0x2990 [ 825.362151][T18148] sctp_association_new+0xbb/0x2990 [ 825.362168][T18148] ? sctp_v4_scope+0x183/0x1a0 [ 825.362210][T18148] sctp_connect_new_asoc+0x1a8/0x770 [ 825.362249][T18148] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 825.362273][T18148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 825.362297][T18148] sctp_sendmsg+0x1743/0x22e0 [ 825.362315][T18148] ? __pfx___might_resched+0x10/0x10 [ 825.362339][T18148] ? __pfx_sctp_sendmsg+0x10/0x10 [ 825.362359][T18148] ? aa_sk_perm+0x309/0xaa0 [ 825.362388][T18148] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 825.362410][T18148] ? __pfx_sctp_sendmsg+0x10/0x10 [ 825.362427][T18148] inet_sendmsg+0x11c/0x140 [ 825.362476][T18148] ____sys_sendmsg+0x9c9/0xbe0 [ 825.362490][T18148] ? __pfx_inet_sendmsg+0x10/0x10 [ 825.362514][T18148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.362532][T18148] ? __pfx__kstrtoull+0x10/0x10 [ 825.362552][T18148] ___sys_sendmsg+0x190/0x1e0 [ 825.362570][T18148] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.362594][T18148] ? find_held_lock+0x2b/0x80 [ 825.362625][T18148] __sys_sendmmsg+0x20c/0x440 [ 825.362647][T18148] ? __pfx___sys_sendmmsg+0x10/0x10 [ 825.362667][T18148] ? ksys_write+0x190/0x250 [ 825.362695][T18148] ? fput+0x79/0x100 [ 825.362712][T18148] ? ksys_write+0x1ac/0x250 [ 825.362725][T18148] ? __pfx_ksys_write+0x10/0x10 [ 825.362742][T18148] __x64_sys_sendmmsg+0x9c/0x100 [ 825.362762][T18148] ? lockdep_hardirqs_on+0x78/0x100 [ 825.362780][T18148] do_syscall_64+0x115/0x840 [ 825.362798][T18148] ? clear_bhb_loop+0x40/0x90 [ 825.362816][T18148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.362831][T18148] RIP: 0033:0x7f15c359e019 [ 825.362845][T18148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.362859][T18148] RSP: 002b:00007f15c4502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 825.362874][T18148] RAX: ffffffffffffffda RBX: 00007f15c3825fa0 RCX: 00007f15c359e019 [ 825.362884][T18148] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000004 [ 825.362893][T18148] RBP: 00007f15c4502090 R08: 0000000000000000 R09: 0000000000000000 [ 825.362902][T18148] R10: 0000000000001311 R11: 0000000000000246 R12: 0000000000000001 [ 825.362911][T18148] R13: 00007f15c3826038 R14: 00007f15c3825fa0 R15: 00007ffcb1f32328 [ 825.362931][T18148] [ 825.887321][T18164] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190687222), cmd(2) [ 825.933078][T18162] FAULT_INJECTION: forcing a failure. [ 825.933078][T18162] name failslab, interval 1, probability 0, space 0, times 0 [ 825.984338][T18162] CPU: 0 UID: 0 PID: 18162 Comm: syz.2.1683 Not tainted syzkaller #0 PREEMPT(full) [ 825.984360][T18162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 825.984369][T18162] Call Trace: [ 825.984374][T18162] [ 825.984380][T18162] dump_stack_lvl+0x100/0x190 [ 825.984402][T18162] should_fail_ex.cold+0x5/0xa [ 825.984420][T18162] should_failslab+0xc2/0x120 [ 825.984441][T18162] kmem_cache_alloc_noprof+0x91/0x6a0 [ 825.984461][T18162] ? vm_area_dup+0x27/0x8e0 [ 825.984478][T18162] vm_area_dup+0x27/0x8e0 [ 825.984493][T18162] __split_vma+0x18c/0xda0 [ 825.984511][T18162] ? __pfx___split_vma+0x10/0x10 [ 825.984536][T18162] vma_modify+0x1cf4/0x25c0 [ 825.984558][T18162] ? __pfx_vma_modify+0x10/0x10 [ 825.984585][T18162] vma_modify_flags+0x257/0x3d0 [ 825.984601][T18162] ? __pfx_vma_modify_flags+0x10/0x10 [ 825.984630][T18162] ? rcu_is_watching+0x12/0xc0 [ 825.984648][T18162] ? percpu_counter_add_batch+0xb9/0x230 [ 825.984677][T18162] mprotect_fixup+0x27a/0xe30 [ 825.984697][T18162] ? __pfx_mprotect_fixup+0x10/0x10 [ 825.984723][T18162] ? __pfx_mas_prev+0x10/0x10 [ 825.984750][T18162] do_mprotect_pkey+0xa4b/0xef0 [ 825.984770][T18162] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 825.984785][T18162] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 825.984826][T18162] ? ktime_get+0x22c/0x320 [ 825.984863][T18162] __x64_sys_mprotect+0x78/0xc0 [ 825.984877][T18162] ? lockdep_hardirqs_on+0x78/0x100 [ 825.984895][T18162] do_syscall_64+0x115/0x840 [ 825.984917][T18162] ? clear_bhb_loop+0x40/0x90 [ 825.984936][T18162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.984951][T18162] RIP: 0033:0x7f15c359de17 [ 825.984964][T18162] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.984978][T18162] RSP: 002b:00007ffcb1f322c8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 825.984993][T18162] RAX: ffffffffffffffda RBX: 00007f15c44e16c0 RCX: 00007f15c359de17 [ 825.985003][T18162] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f15c44c2000 [ 825.985012][T18162] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 825.985021][T18162] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcb1f32420 [ 825.985030][T18162] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 825.985049][T18162] [ 841.095249][ T30] audit: type=1800 audit(4294969596.851:18): pid=18379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1715" name="members" dev="configfs" ino=137887 res=0 errno=0 [ 842.965654][T18416] nbd: must specify an index to disconnect [ 843.439589][ T30] audit: type=1800 audit(4294987943.211:19): pid=18429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1725" name="members" dev="configfs" ino=138216 res=0 errno=0 [ 844.264448][T18452] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2074.0.2190687222), cmd(2) [ 846.119875][T18472] FAULT_INJECTION: forcing a failure. [ 846.119875][T18472] name fail_futex, interval 1, probability 0, space 0, times 0 [ 846.185607][T18472] CPU: 0 UID: 0 PID: 18472 Comm: syz.2.1733 Not tainted syzkaller #0 PREEMPT(full) [ 846.185629][T18472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 846.185638][T18472] Call Trace: [ 846.185643][T18472] [ 846.185649][T18472] dump_stack_lvl+0x100/0x190 [ 846.185673][T18472] should_fail_ex.cold+0x5/0xa [ 846.185691][T18472] get_futex_key+0x1d2/0x14f0 [ 846.185709][T18472] ? __pfx_get_futex_key+0x10/0x10 [ 846.185724][T18472] ? lock_acquire+0x1b9/0x370 [ 846.185752][T18472] futex_wake+0xf4/0x5e0 [ 846.185773][T18472] ? __pfx_futex_wake+0x10/0x10 [ 846.185792][T18472] ? find_held_lock+0x2b/0x80 [ 846.185810][T18472] ? exit_mm_release+0x19/0x30 [ 846.185833][T18472] do_futex+0x2b2/0x440 [ 846.185850][T18472] ? __pfx_do_futex+0x10/0x10 [ 846.185865][T18472] ? __might_fault+0xc5/0x140 [ 846.185886][T18472] mm_release+0x24a/0x2f0 [ 846.185902][T18472] do_exit+0x707/0x2ae0 [ 846.185925][T18472] ? __pfx_do_exit+0x10/0x10 [ 846.185945][T18472] ? do_raw_spin_lock+0x128/0x260 [ 846.185960][T18472] ? find_held_lock+0x2b/0x80 [ 846.185980][T18472] ? get_signal+0x7e0/0x21e0 [ 846.186005][T18472] do_group_exit+0xd5/0x2a0 [ 846.186032][T18472] get_signal+0x1ec7/0x21e0 [ 846.186054][T18472] ? __pfx_get_signal+0x10/0x10 [ 846.186072][T18472] ? do_futex+0x190/0x440 [ 846.186089][T18472] arch_do_signal_or_restart+0x91/0x7a0 [ 846.186116][T18472] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 846.186150][T18472] exit_to_user_mode_loop+0x139/0x6f0 [ 846.186165][T18472] ? rcu_is_watching+0x12/0xc0 [ 846.186187][T18472] do_syscall_64+0x652/0x840 [ 846.186208][T18472] ? clear_bhb_loop+0x40/0x90 [ 846.186227][T18472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.186242][T18472] RIP: 0033:0x7f15c359e019 [ 846.186255][T18472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.186270][T18472] RSP: 002b:00007f15c45020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 846.186290][T18472] RAX: fffffffffffffe00 RBX: 00007f15c3825fa8 RCX: 00007f15c359e019 [ 846.186300][T18472] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f15c3825fa8 [ 846.186309][T18472] RBP: 00007f15c3825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 846.186319][T18472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.186328][T18472] R13: 00007f15c3826038 R14: 00007ffcb1f32240 R15: 00007ffcb1f32328 [ 846.186347][T18472] [ 848.115073][T18499] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1738'. [ 851.555835][T18562] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 852.236098][T18573] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1749'. [ 852.582450][T18584] FAULT_INJECTION: forcing a failure. [ 852.582450][T18584] name failslab, interval 1, probability 0, space 0, times 0 [ 852.659149][T18584] CPU: 0 UID: 0 PID: 18584 Comm: syz.3.1750 Not tainted syzkaller #0 PREEMPT(full) [ 852.659173][T18584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 852.659182][T18584] Call Trace: [ 852.659188][T18584] [ 852.659194][T18584] dump_stack_lvl+0x100/0x190 [ 852.659217][T18584] should_fail_ex.cold+0x5/0xa [ 852.659236][T18584] should_failslab+0xc2/0x120 [ 852.659258][T18584] __kmalloc_noprof+0xfc/0x820 [ 852.659277][T18584] ? ima_alloc_init_template+0xb6/0x6d0 [ 852.659303][T18584] ima_alloc_init_template+0xb6/0x6d0 [ 852.659326][T18584] ima_store_measurement+0x1e3/0x5b0 [ 852.659348][T18584] ? __pfx_ima_store_measurement+0x10/0x10 [ 852.659375][T18584] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 852.659395][T18584] process_measurement+0x19cc/0x2350 [ 852.659420][T18584] ? __pfx_process_measurement+0x10/0x10 [ 852.659437][T18584] ? mark_held_locks+0x40/0x70 [ 852.659461][T18584] ? lockdep_hardirqs_on+0x78/0x100 [ 852.659480][T18584] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 852.659498][T18584] ? find_held_lock+0x2b/0x80 [ 852.659516][T18584] ? __tracing_open+0x7a6/0xa80 [ 852.659532][T18584] ? __tracing_open+0x7a6/0xa80 [ 852.659564][T18584] ? __tracing_open+0x3f/0xa80 [ 852.659594][T18584] ima_file_check+0xcc/0x120 [ 852.659613][T18584] ? __pfx_ima_file_check+0x10/0x10 [ 852.659637][T18584] security_file_post_open+0xc4/0x210 [ 852.659660][T18584] path_openat+0x985/0x4280 [ 852.659685][T18584] ? __pfx_path_openat+0x10/0x10 [ 852.659707][T18584] do_file_open+0x20e/0x430 [ 852.659723][T18584] ? __pfx_do_file_open+0x10/0x10 [ 852.659753][T18584] ? alloc_fd+0x471/0x7a0 [ 852.659769][T18584] ? do_getname+0x191/0x390 [ 852.659789][T18584] do_sys_openat2+0x10f/0x1e0 [ 852.659809][T18584] ? __pfx_do_sys_openat2+0x10/0x10 [ 852.659830][T18584] ? __fget_files+0x21f/0x3d0 [ 852.659848][T18584] __x64_sys_openat+0x12d/0x210 [ 852.659868][T18584] ? __pfx___x64_sys_openat+0x10/0x10 [ 852.659895][T18584] do_syscall_64+0x115/0x840 [ 852.659913][T18584] ? clear_bhb_loop+0x40/0x90 [ 852.659931][T18584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.659946][T18584] RIP: 0033:0x7fa95359e019 [ 852.659959][T18584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.659976][T18584] RSP: 002b:00007fa9517b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 852.659991][T18584] RAX: ffffffffffffffda RBX: 00007fa953826180 RCX: 00007fa95359e019 [ 852.660001][T18584] RDX: 000000003892977e RSI: 0000200000000100 RDI: ffffffffffffff9c [ 852.660011][T18584] RBP: 00007fa95363500c R08: 0000000000000000 R09: 0000000000000000 [ 852.660020][T18584] R10: 00000000000000eb R11: 0000000000000246 R12: 0000000000000000 [ 852.660029][T18584] R13: 00007fa953826218 R14: 00007fa953826180 R15: 00007fff4d0e3998 [ 852.660050][T18584] [ 853.229693][ T30] audit: type=1804 audit(4294987952.810:20): pid=18584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.1750" name="/newroot/sys/kernel/tracing/per_cpu/cpu1/trace" dev="tracefs" ino=1689 res=0 errno=0 [ 854.899282][T18614] FAULT_INJECTION: forcing a failure. [ 854.899282][T18614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.989762][T18614] CPU: 0 UID: 0 PID: 18614 Comm: syz.0.1756 Not tainted syzkaller #0 PREEMPT(full) [ 854.989784][T18614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 854.989793][T18614] Call Trace: [ 854.989798][T18614] [ 854.989804][T18614] dump_stack_lvl+0x100/0x190 [ 854.989827][T18614] should_fail_ex.cold+0x5/0xa [ 854.989843][T18614] _copy_to_user+0x32/0xd0 [ 854.989869][T18614] simple_read_from_buffer+0xcb/0x170 [ 854.989895][T18614] proc_fail_nth_read+0x1af/0x230 [ 854.989925][T18614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 854.989946][T18614] ? rw_verify_area+0xce/0x6d0 [ 854.989968][T18614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 854.989987][T18614] vfs_read+0x1e4/0xb40 [ 854.990004][T18614] ? __pfx_vfs_read+0x10/0x10 [ 854.990016][T18614] ? __fget_files+0x215/0x3d0 [ 854.990035][T18614] ? __fget_files+0x21f/0x3d0 [ 854.990054][T18614] ksys_read+0x12a/0x250 [ 854.990067][T18614] ? __pfx_ksys_read+0x10/0x10 [ 854.990086][T18614] do_syscall_64+0x115/0x840 [ 854.990104][T18614] ? clear_bhb_loop+0x40/0x90 [ 854.990123][T18614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.990138][T18614] RIP: 0033:0x7fa256d5e84e [ 854.990150][T18614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 854.990165][T18614] RSP: 002b:00007fa257b7ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 854.990179][T18614] RAX: ffffffffffffffda RBX: 00007fa257b806c0 RCX: 00007fa256d5e84e [ 854.990189][T18614] RDX: 000000000000000f RSI: 00007fa257b800a0 RDI: 0000000000000005 [ 854.990198][T18614] RBP: 00007fa257b80090 R08: 0000000000000000 R09: 0000000000000000 [ 854.990207][T18614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.990216][T18614] R13: 00007fa257026038 R14: 00007fa257025fa0 R15: 00007ffe17c31078 [ 854.990241][T18614] [ 858.819165][ T4942] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 858.829638][ T4942] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 869.290104][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.302465][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.872988][T18879] FAULT_INJECTION: forcing a failure. [ 870.872988][T18879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.927687][T18879] CPU: 0 UID: 0 PID: 18879 Comm: syz.3.1792 Not tainted syzkaller #0 PREEMPT(full) [ 870.927709][T18879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 870.927718][T18879] Call Trace: [ 870.927723][T18879] [ 870.927729][T18879] dump_stack_lvl+0x100/0x190 [ 870.927751][T18879] should_fail_ex.cold+0x5/0xa [ 870.927769][T18879] _copy_from_user+0x2e/0xd0 [ 870.927793][T18879] kstrtouint_from_user+0xd6/0x1d0 [ 870.927810][T18879] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 870.927830][T18879] ? __lock_acquire+0x49f/0x1a40 [ 870.927861][T18879] proc_fail_nth_write+0x83/0x220 [ 870.927883][T18879] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 870.927911][T18879] vfs_write+0x2aa/0x1050 [ 870.927926][T18879] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 870.927948][T18879] ? __pfx_vfs_write+0x10/0x10 [ 870.927961][T18879] ? __fget_files+0x215/0x3d0 [ 870.927979][T18879] ? __fget_files+0x21f/0x3d0 [ 870.927998][T18879] ksys_write+0x12a/0x250 [ 870.928012][T18879] ? __pfx_ksys_write+0x10/0x10 [ 870.928031][T18879] do_syscall_64+0x115/0x840 [ 870.928050][T18879] ? clear_bhb_loop+0x40/0x90 [ 870.928068][T18879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.928083][T18879] RIP: 0033:0x7fa95355e84e [ 870.928096][T18879] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 870.928110][T18879] RSP: 002b:00007fa9517f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 870.928125][T18879] RAX: ffffffffffffffda RBX: 00007fa9517f66c0 RCX: 00007fa95355e84e [ 870.928135][T18879] RDX: 0000000000000001 RSI: 00007fa9517f60a0 RDI: 0000000000000008 [ 870.928144][T18879] RBP: 00007fa9517f6090 R08: 0000000000000000 R09: 0000000000000000 [ 870.928153][T18879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.928161][T18879] R13: 00007fa953826038 R14: 00007fa953825fa0 R15: 00007fff4d0e3998 [ 870.928181][T18879] [ 874.507114][T18919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1799'. [ 875.848178][T18951] zswap: compressor 000 not available [ 877.105697][T18974] FAULT_INJECTION: forcing a failure. [ 877.105697][T18974] name failslab, interval 1, probability 0, space 0, times 0 [ 877.140875][T18974] CPU: 0 UID: 0 PID: 18974 Comm: syz.1.1808 Not tainted syzkaller #0 PREEMPT(full) [ 877.140897][T18974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 877.140908][T18974] Call Trace: [ 877.140913][T18974] [ 877.140919][T18974] dump_stack_lvl+0x100/0x190 [ 877.140942][T18974] should_fail_ex.cold+0x5/0xa [ 877.140960][T18974] should_failslab+0xc2/0x120 [ 877.140982][T18974] kmem_cache_alloc_noprof+0x91/0x6a0 [ 877.141000][T18974] ? d_instantiate+0x8a/0xb0 [ 877.141016][T18974] ? d_instantiate+0x8a/0xb0 [ 877.141033][T18974] ? alloc_empty_file+0x5b/0x1c0 [ 877.141103][T18974] alloc_empty_file+0x5b/0x1c0 [ 877.141123][T18974] alloc_file_pseudo+0x183/0x290 [ 877.141144][T18974] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 877.141164][T18974] ? alloc_fd+0x471/0x7a0 [ 877.141182][T18974] sock_alloc_file+0x50/0x210 [ 877.141206][T18974] __sys_socket+0x1c0/0x260 [ 877.141223][T18974] ? __pfx___sys_socket+0x10/0x10 [ 877.141245][T18974] __x64_sys_socket+0x72/0xb0 [ 877.141260][T18974] ? lockdep_hardirqs_on+0x78/0x100 [ 877.141279][T18974] do_syscall_64+0x115/0x840 [ 877.141297][T18974] ? clear_bhb_loop+0x40/0x90 [ 877.141315][T18974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.141331][T18974] RIP: 0033:0x7fefb419e019 [ 877.141344][T18974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.141358][T18974] RSP: 002b:00007fefb5101028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 877.141373][T18974] RAX: ffffffffffffffda RBX: 00007fefb4425fa0 RCX: 00007fefb419e019 [ 877.141383][T18974] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 877.141391][T18974] RBP: 00007fefb423500c R08: 0000000000000000 R09: 0000000000000000 [ 877.141400][T18974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.141409][T18974] R13: 00007fefb4426038 R14: 00007fefb4425fa0 R15: 00007ffcddf83888 [ 877.141429][T18974] [ 881.307699][T19023] FAULT_INJECTION: forcing a failure. [ 881.307699][T19023] name failslab, interval 1, probability 0, space 0, times 0 [ 881.355689][T19023] CPU: 0 UID: 0 PID: 19023 Comm: syz.3.1815 Not tainted syzkaller #0 PREEMPT(full) [ 881.355713][T19023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 881.355723][T19023] Call Trace: [ 881.355728][T19023] [ 881.355735][T19023] dump_stack_lvl+0x100/0x190 [ 881.355757][T19023] should_fail_ex.cold+0x5/0xa [ 881.355775][T19023] should_failslab+0xc2/0x120 [ 881.355798][T19023] kmem_cache_alloc_noprof+0x91/0x6a0 [ 881.355816][T19023] ? d_instantiate+0x8a/0xb0 [ 881.355834][T19023] ? d_instantiate+0x8a/0xb0 [ 881.355851][T19023] ? alloc_empty_file_noaccount+0x2b/0xd0 [ 881.355874][T19023] alloc_empty_file_noaccount+0x2b/0xd0 [ 881.355898][T19023] alloc_file_pseudo_noaccount+0x183/0x290 [ 881.355919][T19023] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 881.355941][T19023] ? iput+0x3a/0x40 [ 881.355961][T19023] bdev_file_open_by_dev+0x13a/0x210 [ 881.355987][T19023] disk_scan_partitions+0x1ef/0x320 [ 881.356006][T19023] blkdev_common_ioctl+0x12a1/0x2b80 [ 881.356024][T19023] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 881.356038][T19023] ? __pfx_futex_wait+0x10/0x10 [ 881.356062][T19023] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 881.356085][T19023] ? do_vfs_ioctl+0x226/0x13e0 [ 881.356110][T19023] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 881.356136][T19023] ? find_held_lock+0x2b/0x80 [ 881.356154][T19023] ? __fget_files+0x215/0x3d0 [ 881.356178][T19023] blkdev_ioctl+0x43b/0x6f0 [ 881.356193][T19023] ? __pfx_blkdev_ioctl+0x10/0x10 [ 881.356211][T19023] ? __pfx_blkdev_ioctl+0x10/0x10 [ 881.356227][T19023] __x64_sys_ioctl+0x18e/0x210 [ 881.356251][T19023] do_syscall_64+0x115/0x840 [ 881.356269][T19023] ? clear_bhb_loop+0x40/0x90 [ 881.356287][T19023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.356303][T19023] RIP: 0033:0x7fa95359e019 [ 881.356317][T19023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.356332][T19023] RSP: 002b:00007fa9517d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 881.356347][T19023] RAX: ffffffffffffffda RBX: 00007fa953826090 RCX: 00007fa95359e019 [ 881.356358][T19023] RDX: 000000001f000000 RSI: 000000000000125f RDI: 0000000000000005 [ 881.356367][T19023] RBP: 00007fa95363500c R08: 0000000000000000 R09: 0000000000000000 [ 881.356376][T19023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.356385][T19023] R13: 00007fa953826128 R14: 00007fa953826090 R15: 00007fff4d0e3998 [ 881.356405][T19023] [ 882.831344][T19042] ubi0: attaching mtd0 [ 882.851830][T19042] ubi0: scanning is finished [ 883.133720][T19042] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 883.188832][T19042] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 883.225718][ T30] audit: type=1804 audit(4294987983.218:21): pid=19020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1815" name="/newroot/180/file0" dev="tmpfs" ino=936 res=1 errno=0 [ 883.316796][T19042] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 883.477941][T19042] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 883.603065][ T30] audit: type=1800 audit(4294987983.590:22): pid=19066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1823" name="members" dev="configfs" ino=144325 res=0 errno=0 [ 883.648981][T19065] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 883.693524][T19042] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 883.820382][T19042] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 883.987757][T19042] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 612614733 [ 884.141084][T19042] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 884.286865][T19055] ubi0: background thread "ubi_bgt0d" started, PID 19055 [ 884.296455][T19050] ubi0: detaching mtd0 [ 884.421187][T19050] ubi0: mtd0 is detached [ 885.997444][T19095] FAULT_INJECTION: forcing a failure. [ 885.997444][T19095] name failslab, interval 1, probability 0, space 0, times 0 [ 886.165678][T19095] CPU: 0 UID: 0 PID: 19095 Comm: syz.2.1828 Not tainted syzkaller #0 PREEMPT(full) [ 886.165703][T19095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 886.165712][T19095] Call Trace: [ 886.165718][T19095] [ 886.165724][T19095] dump_stack_lvl+0x100/0x190 [ 886.165747][T19095] should_fail_ex.cold+0x5/0xa [ 886.165765][T19095] should_failslab+0xc2/0x120 [ 886.165787][T19095] kmem_cache_alloc_noprof+0x91/0x6a0 [ 886.165807][T19095] ? __anon_vma_prepare+0x344/0x5e0 [ 886.165825][T19095] __anon_vma_prepare+0x344/0x5e0 [ 886.165842][T19095] __vmf_anon_prepare+0x11f/0x250 [ 886.165865][T19095] do_anonymous_page+0x51b/0x2080 [ 886.165880][T19095] ? rcu_read_unlock+0x2d/0xb0 [ 886.165900][T19095] __handle_mm_fault+0x1d2c/0x2a00 [ 886.165917][T19095] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 886.165937][T19095] ? __pfx___handle_mm_fault+0x10/0x10 [ 886.165954][T19095] ? pte_offset_map_lock+0x174/0x320 [ 886.165974][T19095] ? find_held_lock+0x2b/0x80 [ 886.165998][T19095] ? follow_page_pte+0x4d0/0x13f0 [ 886.166025][T19095] handle_mm_fault+0x37b/0xa30 [ 886.166044][T19095] __get_user_pages+0x1178/0x32a0 [ 886.166072][T19095] ? __pfx___get_user_pages+0x10/0x10 [ 886.166098][T19095] populate_vma_page_range+0x267/0x3f0 [ 886.166122][T19095] ? __pfx_populate_vma_page_range+0x10/0x10 [ 886.166152][T19095] ? __pfx_find_vma_intersection+0x10/0x10 [ 886.166174][T19095] ? do_mmap+0x93f/0x12f0 [ 886.166197][T19095] __mm_populate+0x107/0x3a0 [ 886.166221][T19095] ? __pfx___mm_populate+0x10/0x10 [ 886.166245][T19095] ? up_write+0x2e5/0x5c0 [ 886.166262][T19095] vm_mmap_pgoff+0x37f/0x470 [ 886.166285][T19095] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 886.166309][T19095] ? __pfx_do_futex+0x10/0x10 [ 886.166325][T19095] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 886.166348][T19095] ksys_mmap_pgoff+0xe4/0x610 [ 886.166369][T19095] ? __x64_sys_futex+0x358/0x4d0 [ 886.166386][T19095] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 886.166406][T19095] ? xfd_validate_state+0x129/0x190 [ 886.166428][T19095] __x64_sys_mmap+0x125/0x190 [ 886.166448][T19095] do_syscall_64+0x115/0x840 [ 886.166467][T19095] ? clear_bhb_loop+0x40/0x90 [ 886.166485][T19095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.166500][T19095] RIP: 0033:0x7f15c359e019 [ 886.166515][T19095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.166529][T19095] RSP: 002b:00007f15c44e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 886.166546][T19095] RAX: ffffffffffffffda RBX: 00007f15c3826090 RCX: 00007f15c359e019 [ 886.166556][T19095] RDX: 0000000000000036 RSI: 0000000000400008 RDI: 0000000000001000 [ 886.166566][T19095] RBP: 00007f15c363500c R08: 0000000000000002 R09: 0000000080000000 [ 886.166576][T19095] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 886.166585][T19095] R13: 00007f15c3826128 R14: 00007f15c3826090 R15: 00007ffcb1f32328 [ 886.166611][T19095] [ 888.548271][T19114] BUG: unable to handle page fault for address: ffffc90013ccbfe8 [ 888.556004][T19114] #PF: supervisor write access in kernel mode [ 888.562053][T19114] #PF: error_code(0x0002) - not-present page [ 888.568017][T19114] PGD 13fe60067 P4D 13fe60067 PUD 1cafa067 PMD 61350067 PTE 0 [ 888.575509][T19114] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 888.580899][T19114] CPU: 0 UID: 0 PID: 19114 Comm: syz.3.1830 Not tainted syzkaller #0 PREEMPT(full) [ 888.590267][T19114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 888.600835][T19114] RIP: 0010:write_comp_data+0x75/0x90 [ 888.606210][T19114] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 888.625899][T19114] RSP: 0018:ffffc90005a57e78 EFLAGS: 00050257 [ 888.631961][T19114] RAX: ffffc90013ccc000 RBX: 0000000000000000 RCX: ffffffff824589a5 [ 888.639921][T19114] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 888.647883][T19114] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 888.655847][T19114] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 888.663810][T19114] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 888.671796][T19114] FS: 00007fa950b4b6c0(0000) GS:ffff888123de1000(0000) knlGS:0000000000000000 [ 888.680726][T19114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 888.687303][T19114] CR2: ffffc90013ccbfe8 CR3: 000000005848c000 CR4: 00000000003526f0 [ 888.695269][T19114] Call Trace: [ 888.698538][T19114] [ 888.701455][T19114] rseq_register+0x115/0x350 [ 888.706053][T19114] __x64_sys_rseq+0x1b8/0x2e0 [ 888.710726][T19114] do_syscall_64+0x115/0x840 [ 888.715307][T19114] ? clear_bhb_loop+0x40/0x90 [ 888.719973][T19114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.725886][T19114] RIP: 0033:0x7fa95359e019 [ 888.730320][T19114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.749913][T19114] RSP: 002b:00007fa950b4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 888.758335][T19114] RAX: ffffffffffffffda RBX: 00007fa953826450 RCX: 00007fa95359e019 [ 888.766293][T19114] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 888.774275][T19114] RBP: 00007fa95363500c R08: 0000000000000000 R09: 0000000000000000 [ 888.782230][T19114] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 888.790187][T19114] R13: 00007fa9538264e8 R14: 00007fa953826450 R15: 00007fff4d0e3998 [ 888.798149][T19114] [ 888.801173][T19114] Modules linked in: [ 888.805086][T19114] CR2: ffffc90013ccbfe8 [ 888.809239][T19114] ---[ end trace 0000000000000000 ]--- [ 888.814685][T19114] RIP: 0010:write_comp_data+0x75/0x90 [ 888.820056][T19114] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 888.839653][T19114] RSP: 0018:ffffc90005a57e78 EFLAGS: 00050257 [ 888.845725][T19114] RAX: ffffc90013ccc000 RBX: 0000000000000000 RCX: ffffffff824589a5 [ 888.853687][T19114] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 888.861652][T19114] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 888.869613][T19114] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 888.877573][T19114] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 888.885531][T19114] FS: 00007fa950b4b6c0(0000) GS:ffff888123de1000(0000) knlGS:0000000000000000 [ 888.894450][T19114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 888.901023][T19114] CR2: ffffc90013ccbfe8 CR3: 000000005848c000 CR4: 00000000003526f0 [ 888.909009][T19114] Kernel panic - not syncing: Fatal exception [ 888.915108][T19114] Kernel Offset: disabled [ 888.919418][T19114] Rebooting in 86400 seconds..