last executing test programs: 8m32.277057264s ago: executing program 3 (id=891): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, 0x0, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_WIPHY_NAME={0x5, 0x2, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r1 = io_uring_setup$auto(0xfff, 0x0) msgctl$auto_IPC_RMID(0x9, 0x0, &(0x7f00000000c0)={{0x1, 0x0, 0xee00, 0x4, 0x6, 0x2, 0x1}, &(0x7f0000000040)=0x80, &(0x7f0000000080)=0xc0, 0x8000, 0x81, 0x9, 0x400, 0xc, 0x6, 0x4, 0x73f3, @inferred, @raw=0x5}) ioprio_get$auto(0x1ff, r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x28, 0x1, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), r3) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0xe0, r5, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x58}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x68}, @SEG6_ATTR_SECRET={0xbb, 0x4, "f86a3ba6f072e148c846f95ca5a94638b890d121afa4a1bbbee85970a9449cc80b420982c3ae9bf429e83a6c52b3258ad86eb9c90160e599d4795e55456ae79dd4bcad3260400c0a99dc4acb006a9ec890912dd605a0874ec062583db4f0df684a2aa4b59faa202b83db20effe7b9d8c2f1a4611c1d1fd08ea45405d30998e98b9d24749a8d33539e6f37b816b394301b8a78db1924bf9772be9515805eca611225e23927658458ffbe91d607cc0db533e26556a0223a1"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x4004) socket(0x2c, 0x80003, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x20) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x1, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xfffffffb]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/ifb1/queues/tx-0/byte_queue_limits/stall_max\x00', 0x1a1802, 0x0) 8m30.113869524s ago: executing program 3 (id=895): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x8b0000, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) bind$auto(r0, &(0x7f0000000180)=@isdn={0x22, 0xf, 0x8, 0x8, 0x5}, 0x6) r1 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r2, 0x301, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c859}, 0x0) fchmod$auto(r3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'ipvlan0\x00'}) bind$auto(r1, &(0x7f0000000000)=@l2={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4c3a, 0x1}, 0x65) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) ioctl$auto_RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000200)={0x0, 0xc, {0xfffffffc, 0x5, 0xa, 0x2, 0x5, 0xff, 0xfffffe93, 0x1, 0x7}}) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) r6 = socket(0x8, 0x800, 0x800003a) setsockopt$auto(r6, 0x29, 0x1d, 0x0, 0x1ff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8m28.672818236s ago: executing program 3 (id=900): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x20201, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) mmap$auto(0x8001, 0x3fffff, 0x8, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x8201, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x3a, 0x20005, 0x100004, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x12081, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141041, 0x0) write$auto(r1, &(0x7f0000001340)='\x04\"\x8e U\x00\x00\x00\xb8\n08\xc6\xb05>ha9\x89|e\x00\x00\x00\xa8%\xdc~kD\xa1\x1b\xc3\xe4\xc7\x89\x0e\xd4\x88\xac\x95\xacS\xe9$\xe7*\xcd\x8b\x9b\xd0o\xc7\xd8\xf7\x8a@%\x1d\xf8b\x14[H\xa2` \xb2\xef\xd7\xac\xfak\xb7\x02\x00}\xbcv\xfc\xe6\xbf\x14\x82jO\xde\xda\xda\x929\xd3\x04\xd0\xa2\xa0\xa6\xcb\x86\x15\xac\xcc\xf8\xa2\x01Z\x83`\xa1d\xedj8\x1e\xcc\x0fD\xa4\xe3\xa5\xba\xf9\xbe\x85\f\xbbrY\xb9\xc77\xd9d\xb5\x16\xc1\xe9\xe5\xc8X_\xefPG\x86=\x17>3\xb2\xdd\xbd\xa9\xe4R\x9c\xb0j[\"\f\xfb\tNz\xf4X]\xb90\x1c\xc3\x91jd\xe9\xb9\x87I\x19\xe4\x16\xa4\xad\xdcJ\xe4\x00\xd03/\x13,3\x87K\xd0J\xbb\xb9B\xff\xd9\xf1\xed\x04\xeb\x8d\x92\xa7-\x91\x8ai\xc6j\xeb\x90#1\x1d\xfd\xa3\xfeO\xcc\xe0\xe5\x1d\x8e\xedd\f,\t\xd8\x10Ho.z4\'\xe2\xad`\x94\xa6\xa2\xb2\xd6zMB\xf5\xcd\r7MO\x8f\xbc7%\xf1\xbbxB\xb4q\xa0\xe1-\x1c\xa2\xeb\xc0C\x04\x00\xfcG\xb6\x1e\x82\xaao\x1a\xa7\xbdw\x8b\xe6\bI\xfc\xa1\a\"\xe6\xc7z\xac\xe6\xce\xe34\x16\x9bdp\xb9\x02R\b\x83\x95\xde\x93\x12hP\xcbr6F\x84\xa7sf\xea\x8a\x1aee\xa4\xd0~\x00IC\xefT\xdc_G=]\xa3\xcb\xe0\x9f\n\xc5%\xe8PT\x87\xa4\xf3?0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) pidfd_open$auto(r3, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1279c2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x193480, 0x0) sendfile$auto(0x3, r5, 0x0, 0x100400000000006) preadv$auto(r4, &(0x7f00000000c0)={0x0, 0x4008000}, 0x1d4, 0x2000000000f, 0x200000001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 8m7.219371807s ago: executing program 32 (id=915): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xffffffffffffffff, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x24, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0x2, 0x4, 0x6, 0x7f, 0x0, 0x2, 0xa, 0x4, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x4, 0xfffffffc, [0x2, 0x0, 0x10000000000000, 0x4000401, 0x0, 0x7, 0x9, 0xffffffff80000000, 0x0, 0x42, 0xfffffffffffffffe, 0x3, 0x0, 0x80000000000000, 0x8, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x668, 0x0, 0x0, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x83, 0x400, 0x6, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, 0x2]}, 0x1fe, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd23, &(0x7f00000001c0)) r1 = pipe2$auto(0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/binderfs/binder1\x00', 0xa00, 0x0) ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$auto(0x4, 0x2020009, 0x3, 0x15, r1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x100000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) pidfd_open$auto(r3, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1279c2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x193480, 0x0) sendfile$auto(0x3, r5, 0x0, 0x100400000000006) preadv$auto(r4, &(0x7f00000000c0)={0x0, 0x4008000}, 0x1d4, 0x2000000000f, 0x200000001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 1m22.964464173s ago: executing program 0 (id=1825): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) sysfs$auto(0x2, 0x3b, 0x0) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/ap_power_level\x00', 0x0, 0x0) preadv$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x5, 0x37, 0x3) sendfile$auto(r0, r0, 0x0, 0x8) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fedbdf250a000000050012000500000008000b0007000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) 1m21.430976941s ago: executing program 0 (id=1821): fanotify_init$auto(0x6a1, 0x2000000000002) r0 = socket(0x26, 0x80805, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xc, 0xffff) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0xc0402, 0x0) unshare$auto(0x40000080) read$auto(0xffffffffffffffff, 0x0, 0x10001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup$auto(0xffff, &(0x7f0000000580)) mmap$auto(0x4, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x11, 0xffffffffffffffff, 0x6) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) madvise$auto(0x0, 0x8000000000000001, 0x15) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000010c0), r0) 1m19.562112035s ago: executing program 0 (id=1824): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket(0x23, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x1c, r2, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfd, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram12\x00', 0xa100, 0x0) setsockopt$auto_SO_DONTROUTE(r3, 0xff, 0x5, &(0x7f0000000300)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0xffffffff) recvmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000)="401b74ce4352ff99291303b63f9542fc7e0349eeaa504fed9ac3c58d5d0d9b5a0a185a7e711a048cfa7c4a01d2fffc493ec4dde809caa5296c5d617a0014e8f659d8778fae2a384ab8776224252a5fd029f6e569ad2244904ac4bd751dbbd9c8718eeadf95eb9c2f6587242f918fe0b0da16d19b6619de1848c87529", 0x7, &(0x7f0000000100)={&(0x7f0000000080)="cd2e1b909fc08d5e44bf38ed", 0x1}, 0x4d8, &(0x7f0000000180)="69f56afe5653d37acc622ed2f3beefdfeb9e67408457eb29197dd78ce1bf46630dd2", 0x4, 0x80}, 0x800}, 0xde4, 0x5, &(0x7f0000000200)={0x8, 0x400}) fcntl$auto(0xffffffffffffffff, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x44442, 0x155) fcntl$auto_F_GETLEASE(0xffffffffffffffff, 0x401, 0xf) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000240), 0x82400, 0x0) sendfile$auto(0x3, r3, 0x0, 0x100400000000006) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TASKSTATS_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000ada61df0bb044d5348000000000000230bb5f22fa1b0c755f8742a4c1a2846abaaf40d11446956ac3f11ea74b76231d461b9", @ANYRES16, @ANYBLOB="010a2bbd7000fbdbdf2501000000690004004e10534b535055415453906cad2336ca6b0067eaa130cc17538c661d08a669e61515af66d7fb7c18b3a59b"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 1m17.288207137s ago: executing program 0 (id=1834): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) open_tree$auto(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup\x00', 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto_GETALL(0x0, 0xe9b, 0xd, 0x9) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x147) open(&(0x7f0000000800)='./file0\x00', 0x22241, 0x154) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, 0x0, 0x40000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/mtu\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7) 1m16.841739112s ago: executing program 0 (id=1836): write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) (async) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000000)={"ce26ef41", 0x80, 0x2, 0x7, 0x0, 0x9, "6f976d9ca5ea227ca96ba9fea3beb9", "f5cab0d1", "f97aaa39", "000031a5", ["f10da4b79cfab022eb51965d", "837505b85cf48340aa68d60f", "d1071f04b42bc4805d1ec19d", "6b8fa72778a0218efd0453dc"]}) bpf$auto(0x0, &(0x7f0000000000)=@raw_tracepoint={0x1a, 0xffffffffffffffff, 0x0, 0x4}, 0x7f) (async) bpf$auto(0x0, &(0x7f0000000000)=@raw_tracepoint={0x1a, 0xffffffffffffffff, 0x0, 0x4}, 0x7f) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) ioctl$auto(0x3, 0x5309, 0x38) (async) ioctl$auto(0x3, 0x5309, 0x38) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0x3f8d4e65}) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x1, 0x4c) (async) madvise$auto(0x0, 0x1, 0x4c) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) close_range$auto(0x0, 0x5, 0x0) (async) close_range$auto(0x0, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd8\x00', 0x404, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyd3\x00', 0x0, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyd3\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x5b, 0x2, 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000240), r0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c004) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 1m16.514861532s ago: executing program 0 (id=1837): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r0, &(0x7f0000000400)={0x0, 0x4000000003d}, 0x6) mmap$auto(0x8, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf252e0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x1000060}, 0x400c080) getsockopt$auto(0x100000006, 0x0, 0x16, 0xfffffffffffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) timer_settime$auto(0x9, 0x3, 0x0, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa87060c94474b021, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r4, 0x400454ca, 0x38) shutdown$auto(r4, 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r5) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r6, 0x110, 0x2, 0x0, 0x1) 1m1.32740413s ago: executing program 33 (id=1837): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r0, &(0x7f0000000400)={0x0, 0x4000000003d}, 0x6) mmap$auto(0x8, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf252e0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x1000060}, 0x400c080) getsockopt$auto(0x100000006, 0x0, 0x16, 0xfffffffffffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) timer_settime$auto(0x9, 0x3, 0x0, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa87060c94474b021, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r4, 0x400454ca, 0x38) shutdown$auto(r4, 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r5) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r6, 0x110, 0x2, 0x0, 0x1) 9.401203569s ago: executing program 4 (id=1949): socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x10001) syncfs$auto(0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x300000, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x100000000008, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/pci/devices\x00', 0x50b402, 0x0) pread64$auto(r2, 0x0, 0x54c8, 0x9) r3 = socket(0xa, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd12\x00', 0x40c301, 0x0) r4 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) socketpair$auto(0x4004, 0x2, 0xfff, 0x0) ioctl$auto(r4, 0xc0105303, r4) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/035/001\x00', 0xa901, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r3, 0x1d, 0x0, 0x9) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xafefa9ff3f168676, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, &(0x7f0000000240)="8c4f") 8.865747088s ago: executing program 5 (id=1951): mmap$auto(0x7fffffffffffffff, 0x400104, 0xffffffffffffffff, 0x9b71, 0xffffffffffffffff, 0x8000000007fff) (async) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) (async) unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x525800, 0x0) mmap$auto(0x0, 0x2000a, 0xe1, 0x20eb1, 0xffffffffffffffff, 0x8000) (async) clock_adjtime$auto(0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x252f2b68fc574703, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1a1403, 0x0) (async) getpid() (async) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000280)={0x6, 0x9, 0x200, 0x1, 0xbfe9, 0xffffffffffffffff}) (async) lstat$auto(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0xfffffffffffffffb, 0x4, 0x400, 0xee00, 0xee01, 0x0, 0x5, 0x4, 0x0, 0xd, 0x3, 0x2, 0x7, 0x7f, 0x2, 0x4}) (async) r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto_split_huge_pages_fops_huge_memory(r1, &(0x7f00000000c0)='1', 0x1) (async) msgctl$auto_IPC_INFO(0x33, 0x3, 0x0) prctl$auto_PR_SET_MM_END_DATA(0x80000000, 0x4, 0x0, 0x0, 0x5) setresuid$auto(0x0, 0x0, 0x0) (async) ioprio_set$auto(0x2, 0x0, 0x4b34) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) setreuid$auto(0x3, 0x7) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0x0, 0x6], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x100, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.309946048s ago: executing program 4 (id=1953): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x8b0000, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) bind$auto(r0, &(0x7f0000000180)=@isdn={0x22, 0xf, 0x8, 0x8, 0x5}, 0x6) r1 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r2, 0x301, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c859}, 0x0) fchmod$auto(r3, 0x9) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'ipvlan0\x00'}) bind$auto(r1, &(0x7f0000000000)=@l2={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4c3a, 0x1}, 0x65) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) ioctl$auto_RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000200)={0x0, 0xc, {0xfffffffc, 0x5, 0xa, 0x2, 0x5, 0xff, 0xfffffe93, 0x1, 0x7}}) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) r5 = socket(0x8, 0x800, 0x800003a) setsockopt$auto(r5, 0x29, 0x1d, 0x0, 0x1ff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 6.808220522s ago: executing program 5 (id=1954): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) ioctl$auto_BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000280)={0xfc, 0x1fc, "cc532f50729024d8293e01cfcae369fc", 0x7, 0x7, 0x7000, 0x4, 0x2, 0x8, 0x3, "a626449105f3842f40d9d6ae7f57a4d2", "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"}) mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x940, 0x0) ioctl$auto_MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x121002, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdeb, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x1fb, 0x3fffff, 0x1000000000000007, 0x11, 0xffffffffffffffff, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x60402, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/vm/overcommit_ratio\x00', 0x2, 0x0) r3 = fanotify_init$auto(0x1f53, 0x2000000000002) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vivid.0/cec0/power/runtime_active_time\x00', 0x80240, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x80001, 0x0) writev$auto(r5, &(0x7f0000000340)={0x0, 0x2}, 0x7) r6 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r6, 0x0) read$auto_tracing_pipe_fops_trace(r3, &(0x7f0000001200)=""/4096, 0x1000) 6.560247608s ago: executing program 2 (id=1955): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x100000000000000) 6.503197652s ago: executing program 4 (id=1957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x103800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x0, 0x3}) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x51, 0x11, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fc4f50f78df281039dd157c877ac6e2fc7dbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437023f69a5777674284501bd4661e84d7eeab5f94717d98d0624"], 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) mlockall$auto(0x2) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r2, &(0x7f00000002c0)={{0x0, 0x200009, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c558c58a8438de946aa59caa813549", 0x3}, 0xfffffffffffffff7, 0x0, 0x6, 0x1}, 0x800}, 0x8, 0x103) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendmsg$auto_ILA_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf250300000008000400", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 6.394786064s ago: executing program 2 (id=1958): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80801, 0x0) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) keyctl$auto(0xf, 0xfffffbfffffffffe, 0x2, 0x32, 0x77c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r0, 0x0, 0x40002) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x8208ae63, 0x38) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000140), 0xa0100, 0x0) r2 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xbb, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x208008) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10402800}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="000426bd7000fedbdf25180000000800160009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8040441}, 0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bond0\x00'}) r4 = socket(0x10, 0x2, 0x4) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x80000e, 0x400008, 0x100000000, 0x9b75, 0x2, 0x8000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0042, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x101202, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) 5.52025937s ago: executing program 2 (id=1960): setitimer$auto(0x2, &(0x7f0000000040)={{0x20000, 0x5}, {0x6, 0x8}}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvmet-wq/affinity_scope\x00', 0x562, 0x0) write$auto(r0, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xe1\x903\x9e\xca\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81\xe4\xab\xc5\x8da\vr\xb91\xfe\x9a\xf0\x0f\x03\x12m/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\xf4\r\x19$\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbc\xb9\xd0\x1f\xd9\x8e`\xba\xd0\xa4\xf5\x00\x00\x00\x00\x00\x00\x00\x00', 0x98c5) setgroups$auto(0xc00000000, 0xfffffffffffffffc) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d6, 0xffffffffffffffff}, 0x92) mprotect$auto(0x6, 0x9, 0x4) mremap$auto(0x7fffffff, 0x1ffffffd, 0x4000000101, 0x3, 0x0) getdents64$auto(r0, 0x0, 0x18) r2 = socket(0xa, 0x1, 0x6) ioctl$auto(0x3, 0x8947, 0x38) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x87c8256655b23a9a}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x8841) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000001c0)="61a280226046bd2d42c1446da47d434bb2370ed4ea3455a7095ba3a3dbbbe561169b2c7505155296d3412daec0748c4142c37471fe5ebf71c18b4cbeb3b1d61ec734f1be12996a1a448de18bbcb640ed91afeb61e3a79a7c000fbbcf18d8592ce69ef42d403824f95191ce10691610e37c8b1c39139d433fe6a07a4072736f7da8d12933f851b8668bfe4c3fc5bbd8a9f5430d7fcb537acc00e9e3f24ae4bcfcdaf5498f6a3d928aeeef7f66b21400186b9a", 0xb2) mkdir$auto(&(0x7f0000000180)='}[,&*}/file0\x00', 0x6) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000300), r1) fanotify_init$auto(0x5, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) 5.492910728s ago: executing program 1 (id=1961): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xb, 0x800, 0x3a) (async) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="03000024", @ANYRESDEC=r1, @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) (async) read$auto(r1, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) (async) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) (async) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) (async) writev$auto(r2, &(0x7f0000000340)={0x0, 0x18}, 0x8) (async) ioctl$auto_UI_SET_FFBIT(r2, 0x4004556b, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000015c0)=""/4093, 0xffffffffffffffaa) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x2000000002, 0x3a) unshare$auto(0x40000080) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r4 = socket(0x4, 0x3, 0x3b) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x10800, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) (async) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x9) (async) unshare$auto(0x40000080) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), 0xffffffffffffffff) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) bind$auto(r0, &(0x7f0000000180)=@isdn={0x22, 0xf, 0x8, 0x8, 0x5}, 0x6) r1 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r2, 0x301, 0x70bd29, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c859}, 0x0) fchmod$auto(r3, 0x9) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'ipvlan0\x00'}) bind$auto(r1, &(0x7f0000000000)=@l2={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4c3a, 0x1}, 0x65) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) ioctl$auto_RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000200)={0x0, 0xc, {0xfffffffc, 0x5, 0xa, 0x2, 0x5, 0xff, 0xfffffe93, 0x1, 0x7}}) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) r5 = socket(0x8, 0x800, 0x800003a) setsockopt$auto(r5, 0x29, 0x1d, 0x0, 0x1ff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.342249619s ago: executing program 2 (id=1966): preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) (async) madvise$auto(0x110c230000, 0x8031ca, 0x9) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x5, 0x0) (async) socket(0x2, 0x5, 0x0) capset$auto(0x0, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) (async) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x1001ff000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/block/ram15/trace/end_lba\x00', 0x40802, 0x0) write$auto(r1, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\xf5\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\t\x00\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00\r\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/007/001\x00', 0x0, 0x0) socket(0x2c, 0x80003, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec3\x00', 0x400242, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) (async) read$auto(0xffffffffffffffff, 0x0, 0x20) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x20000000000000b2, 0xfb, 0x9489, 0x2, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x8000000009, 0x2, 0xffffffff]}, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0xc, 0x20000004, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x110c230000, 0x1fffffe, 0x9) (async) fstat$auto(0xffffffffffffffff, &(0x7f0000000340)={0xc6, 0x2, 0xdb906a1, 0x7, 0x0, 0x0, 0x0, 0x101, 0x2, 0x3, 0x100000000, 0x20000000000002, 0x5, 0x0, 0x200000000000100, 0x8, 0x4}) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) 3.276334846s ago: executing program 1 (id=1967): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x850) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/8/spurious\x00', 0x0, 0x0) io_uring_setup$auto(0x5, 0x0) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000180), 0x1) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r1, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/veth1_virt_wifi/addr_gen_mode\x00', 0x242e00, 0x0) sendfile$auto(r2, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x633, 0x2020009, 0x3, 0x200000000eb4, 0xfffffffffffffffa, 0x8001) sendfile$auto(r3, r3, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2.860154534s ago: executing program 2 (id=1968): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket(0x2, 0xa, 0xe57a) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd=r0, 0x2f, 0x1, 0x9, 0x81, @count=0x9, 0x0, 0x6, 0x8, 0x7, 0x1}, 0x6) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) bind$auto(r1, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x6) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/nr_hugepages\x00', 0x642, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) r3 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000500)="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", 0x3}, 0x7) bind$auto(r3, &(0x7f0000000040)=@nl=@unspec, 0x3) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0x65) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(0x0, 0x8000, 0x0, 0x6) r4 = fcntl$auto(0x3, 0x400, 0x1) link$auto(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)='./file2\x00') r5 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r5, 0x29, 0x1d, 0x0, 0x1ff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r5) msgctl$auto_IPC_INFO(0xffffffff, 0x3, &(0x7f00000002c0)={{0x4, 0x0, 0xee00, 0xc, 0x1, 0x4, 0xffff}, &(0x7f0000000240)=0x2, &(0x7f0000000280)=0x2, 0xd, 0xffffffffffffffff, 0x35, 0xf, 0x7, 0x3494, 0x0, 0x9, @raw=0xa6, @inferred=0xffffffffffffffff}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80400101}, 0xc, &(0x7f00000001c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="b4060000", @ANYRESHEX=0x0, @ANYBLOB="210028bd7000fedbdf25030000003400058008001e00", @ANYRESDEC=r5, @ANYRESOCT=r4, @ANYRES32=r6, @ANYRESHEX=r2, @ANYRES64=r4, @ANYBLOB="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", @ANYRESOCT=r2, @ANYBLOB='\x00'], 0x6b4}}, 0x4) prctl$auto(0x29, 0x3, r7, 0x0, 0x4) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) 2.671608333s ago: executing program 5 (id=1969): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80801, 0x0) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) keyctl$auto(0xf, 0xfffffbfffffffffe, 0x2, 0x32, 0x77c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r0, 0x0, 0x40002) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x8208ae63, 0x38) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000140), 0xa0100, 0x0) r2 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xbb, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x208008) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10402800}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="000426bd7000fedbdf25180000000800160009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8040441}, 0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bond0\x00'}) r4 = socket(0x10, 0x2, 0x4) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x80000e, 0x400008, 0x100000000, 0x9b75, 0x2, 0x8000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0042, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x101202, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) 2.555642139s ago: executing program 4 (id=1970): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3) open(&(0x7f0000000100)='./file0\x00', 0x161342, 0x13f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend\x00', 0x8102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, r0, 0x0) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = epoll_create$auto(0x7) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/010/001\x00', 0x12b901, 0x0) epoll_wait$auto(r2, 0x0, 0xe007, 0xe8a4e409) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 2.222956443s ago: executing program 5 (id=1971): mmap$auto(0x0, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) mmap$auto(0x0, 0x80000001, 0x4000000000df, 0xeb1, 0xd4, 0x2cfc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x3, 0x1f00) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:01.3/subsystem_vendor\x00', 0x10000, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) semtimedop$auto(0x3ff, &(0x7f0000001940)={0x24, 0x7, 0x4}, 0x7, &(0x7f0000001980)={0x8, 0x100000001}) readv$auto(r1, &(0x7f0000000380)={&(0x7f0000000300)="1996b91ca4c0c96b8bfd4c21e9424693c5fc3e1b94a0f301e891b7d3e510802be8f275e771cfec1bbddda0ef55af2889ed2b26ee41c839eb3b771adc414fcc127dbc04deb30e8534fac90a02847d447a5de6857730d293b71f6f735f9030f2e1149b61c699390e77b21eb2de3ab9e6c9", 0xffffffffffff112d}, 0x20000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) bind$auto(r0, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x2}}, 0x6) r1 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x8000000000007) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010329bd7000fbf1ffffffffffff050001004002000005000200000000000800020048535200"], 0x2c}, 0x1, 0x0, 0x0, 0x400c859}, 0x0) fchmod$auto(r2, 0x9) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'ipvlan0\x00'}) bind$auto(r1, &(0x7f0000000000)=@l2={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4c3a, 0x1}, 0x65) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x2a0403, 0x0) ioctl$auto_RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000200)={0x0, 0xc, {0xfffffffc, 0x5, 0xa, 0x2, 0x5, 0xff, 0xfffffe93, 0x1, 0x7}}) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) r5 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r5, 0x227, 0x1f, 0x0, 0x1fb) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x200000000) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 256.29236ms ago: executing program 1 (id=1974): setitimer$auto(0x2, &(0x7f0000000040)={{0x20000, 0x5}, {0x6, 0x8}}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvmet-wq/affinity_scope\x00', 0x562, 0x0) write$auto(r0, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xe1\x903\x9e\xca\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81\xe4\xab\xc5\x8da\vr\xb91\xfe\x9a\xf0\x0f\x03\x12m/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\xf4\r\x19$\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbc\xb9\xd0\x1f\xd9\x8e`\xba\xd0\xa4\xf5\x00\x00\x00\x00\x00\x00\x00\x00', 0x98c5) setgroups$auto(0xc00000000, 0xfffffffffffffffc) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d6, 0xffffffffffffffff}, 0x92) mprotect$auto(0x6, 0x9, 0x4) mremap$auto(0x7fffffff, 0x1ffffffd, 0x4000000101, 0x3, 0x0) getdents64$auto(r0, 0x0, 0x18) r2 = socket(0xa, 0x1, 0x6) ioctl$auto(0x3, 0x8947, 0x38) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x87c8256655b23a9a}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x8841) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000001c0)="61a280226046bd2d42c1446da47d434bb2370ed4ea3455a7095ba3a3dbbbe561169b2c7505155296d3412daec0748c4142c37471fe5ebf71c18b4cbeb3b1d61ec734f1be12996a1a448de18bbcb640ed91afeb61e3a79a7c000fbbcf18d8592ce69ef42d403824f95191ce10691610e37c8b1c39139d433fe6a07a4072736f7da8d12933f851b8668bfe4c3fc5bbd8a9f5430d7fcb537acc00e9e3f24ae4bcfcdaf5498f6a3d928aeeef7f66b21400186b9a", 0xb2) mkdir$auto(&(0x7f0000000180)='}[,&*}/file0\x00', 0x6) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000300), r1) fanotify_init$auto(0x5, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) 51.063298ms ago: executing program 5 (id=1975): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) 0s ago: executing program 4 (id=1976): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0x9, r1) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x40900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/002/001\x00', 0x40101, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x85) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000240)="f6e6812018deadf7e88f819e30236ce79200b01532f2ed0dff68130f", 0x1c) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/iosched/async_depth\x00', 0x2202, 0x0) write$auto(r4, &(0x7f00000001c0)='0p\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x2) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x1ff, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x84, 0x66) mremap$auto(0x53, 0x8, 0x140000, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) readv$auto(0x3, 0x0, 0x1) kernel console output (not intermixed with test programs): T7182] __x64_sys_recvfrom+0xe0/0x1c0 [ 197.887872][ T7182] ? do_syscall_64+0x90/0x840 [ 197.887914][ T7182] ? lockdep_hardirqs_on+0x78/0x100 [ 197.887957][ T7182] do_syscall_64+0x115/0x840 [ 197.887999][ T7182] ? clear_bhb_loop+0x40/0x90 [ 197.888042][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.888079][ T7182] RIP: 0033:0x7f37c315e6ce [ 197.888106][ T7182] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.888139][ T7182] RSP: 002b:00007f37c4016e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 197.888172][ T7182] RAX: ffffffffffffffda RBX: 00007f37c40186c0 RCX: 00007f37c315e6ce [ 197.888195][ T7182] RDX: 0000000000001000 RSI: 00007f37c4017000 RDI: 000000000000000b [ 197.888225][ T7182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.888246][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 197.888267][ T7182] R13: 00007f37c4016f58 R14: 00007f37c4017000 R15: 0000000000000000 [ 197.888311][ T7182] [ 205.412329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 207.492582][ T30] audit: type=1800 audit(4294967295.330:3): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.207" name="lu_gp_id" dev="configfs" ino=19902 res=0 errno=0 [ 207.980797][ T7372] FAULT_INJECTION: forcing a failure. [ 207.980797][ T7372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.085422][ T7372] CPU: 0 UID: 0 PID: 7372 Comm: syz.1.208 Not tainted syzkaller #0 PREEMPT(full) [ 208.085464][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 208.085483][ T7372] Call Trace: [ 208.085493][ T7372] [ 208.085505][ T7372] dump_stack_lvl+0x100/0x190 [ 208.085548][ T7372] should_fail_ex.cold+0x5/0xa [ 208.085585][ T7372] _copy_to_user+0x32/0xd0 [ 208.085641][ T7372] simple_read_from_buffer+0xcb/0x170 [ 208.085700][ T7372] proc_fail_nth_read+0x1af/0x230 [ 208.085747][ T7372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.085796][ T7372] ? rw_verify_area+0xce/0x6d0 [ 208.085843][ T7372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.085888][ T7372] vfs_read+0x1e4/0xb40 [ 208.085930][ T7372] ? __pfx_vfs_read+0x10/0x10 [ 208.085984][ T7372] ? __fget_files+0x215/0x3d0 [ 208.086022][ T7372] ? __fget_files+0x21f/0x3d0 [ 208.086065][ T7372] ksys_read+0x12a/0x250 [ 208.086096][ T7372] ? __pfx_ksys_read+0x10/0x10 [ 208.086139][ T7372] do_syscall_64+0x115/0x840 [ 208.086180][ T7372] ? clear_bhb_loop+0x40/0x90 [ 208.086222][ T7372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.086256][ T7372] RIP: 0033:0x7f3fd115e6ce [ 208.086284][ T7372] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.086315][ T7372] RSP: 002b:00007f3fcf3b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.086346][ T7372] RAX: ffffffffffffffda RBX: 00007f3fcf3b46c0 RCX: 00007f3fd115e6ce [ 208.086372][ T7372] RDX: 000000000000000f RSI: 00007f3fcf3b40a0 RDI: 0000000000000002 [ 208.086392][ T7372] RBP: 00007f3fcf3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 208.086412][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.086432][ T7372] R13: 00007f3fd14266c8 R14: 00007f3fd1426630 R15: 00007fff3aa6ea68 [ 208.086475][ T7372] [ 211.115823][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 211.530529][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 218.086830][ T7531] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 218.619582][ T7543] sd 0:0:1:0: PR command failed: 1026 [ 218.649254][ T7543] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 218.683203][ T7543] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 222.116028][ T7584] blktrace: Concurrent blktraces are not allowed on ram10 [ 222.225911][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 222.225937][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 222.238732][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 222.245282][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 222.550720][ T7592] zswap: compressor û not available [ 229.879422][ T7698] i2c i2c-0: new_device: Invalid device name [ 244.218061][ T7916] sd 0:0:1:0: PR command failed: 1026 [ 244.236969][ T7916] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 244.277016][ T7916] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 246.888516][ T7944] zswap: compressor û not available [ 249.071439][ T7998] Invalid ELF header magic: != ELF [ 249.565438][ T8004] random: crng reseeded on system resumption [ 255.273502][ T50] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 255.498248][ T1168] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.993861][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.004671][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.635511][ T50] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 257.922699][ T8113] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 257.984752][ T8113] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 258.054527][ T8113] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 258.109462][ T8113] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 258.170391][ T8113] page dumped because: unmovable page [ 258.196417][ T8113] page_owner info is not present (never set?) [ 259.180170][ T8119] i2c i2c-0: new_device: Invalid device name [ 262.577846][ T8182] netlink: 342 bytes leftover after parsing attributes in process `syz.0.324'. [ 262.605191][ T8182] netlink: 350 bytes leftover after parsing attributes in process `syz.0.324'. [ 264.363366][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 268.878791][ T8269] random: crng reseeded on system resumption [ 282.870514][ T8490] zswap: compressor 000 not available [ 286.697045][ T8539] FAULT_INJECTION: forcing a failure. [ 286.697045][ T8539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.739766][ T8539] CPU: 0 UID: 0 PID: 8539 Comm: syz.2.381 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.739820][ T8539] Tainted: [L]=SOFTLOCKUP [ 286.739831][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 286.739852][ T8539] Call Trace: [ 286.739868][ T8539] [ 286.739882][ T8539] dump_stack_lvl+0x100/0x190 [ 286.739928][ T8539] should_fail_ex.cold+0x5/0xa [ 286.739967][ T8539] _copy_from_iter+0x1f4/0x1690 [ 286.740030][ T8539] ? __pfx__copy_from_iter+0x10/0x10 [ 286.740083][ T8539] skb_copy_datagram_from_iter+0x11f/0x720 [ 286.740117][ T8539] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 286.740150][ T8539] unix_stream_sendmsg+0x536/0x1310 [ 286.740192][ T8539] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 286.740232][ T8539] ? apparmor_socket_sendmsg+0x15b/0x270 [ 286.740263][ T8539] sock_write_iter+0x53a/0x5b0 [ 286.740287][ T8539] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 286.740320][ T8539] ? __pfx_sock_write_iter+0x10/0x10 [ 286.740352][ T8539] ? bpf_lsm_file_permission+0x9/0x10 [ 286.740376][ T8539] ? security_file_permission+0x76/0x210 [ 286.740413][ T8539] ? rw_verify_area+0xce/0x6d0 [ 286.740453][ T8539] vfs_write+0x6ac/0x1050 [ 286.740483][ T8539] ? __pfx_sock_write_iter+0x10/0x10 [ 286.740510][ T8539] ? __pfx_vfs_write+0x10/0x10 [ 286.740576][ T8539] ? __x64_sys_futex+0x34f/0x4d0 [ 286.740614][ T8539] ? __x64_sys_futex+0x358/0x4d0 [ 286.740659][ T8539] ksys_write+0x1f8/0x250 [ 286.740682][ T8539] ? __pfx_ksys_write+0x10/0x10 [ 286.740714][ T8539] do_syscall_64+0x115/0x840 [ 286.740744][ T8539] ? clear_bhb_loop+0x40/0x90 [ 286.740774][ T8539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.740800][ T8539] RIP: 0033:0x7f37c319de99 [ 286.740821][ T8539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.740845][ T8539] RSP: 002b:00007f37c4018028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 286.740868][ T8539] RAX: ffffffffffffffda RBX: 00007f37c3426090 RCX: 00007f37c319de99 [ 286.740884][ T8539] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 286.740899][ T8539] RBP: 00007f37c3233eaf R08: 0000000000000000 R09: 0000000000000000 [ 286.740935][ T8539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.740959][ T8539] R13: 00007f37c3426128 R14: 00007f37c3426090 R15: 00007fff104a1ce8 [ 286.741004][ T8539] [ 290.974006][ T8607] FAULT_INJECTION: forcing a failure. [ 290.974006][ T8607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.002909][ T8607] CPU: 0 UID: 0 PID: 8607 Comm: syz.3.390 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.002964][ T8607] Tainted: [L]=SOFTLOCKUP [ 291.002977][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 291.002997][ T8607] Call Trace: [ 291.003007][ T8607] [ 291.003021][ T8607] dump_stack_lvl+0x100/0x190 [ 291.003066][ T8607] should_fail_ex.cold+0x5/0xa [ 291.003108][ T8607] _copy_from_iter+0x1f4/0x1690 [ 291.003183][ T8607] ? __pfx__copy_from_iter+0x10/0x10 [ 291.003260][ T8607] skb_copy_datagram_from_iter+0x11f/0x720 [ 291.003308][ T8607] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 291.003353][ T8607] unix_stream_sendmsg+0x536/0x1310 [ 291.003414][ T8607] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 291.003472][ T8607] ? apparmor_socket_sendmsg+0x15b/0x270 [ 291.003519][ T8607] sock_write_iter+0x53a/0x5b0 [ 291.003554][ T8607] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 291.003601][ T8607] ? __pfx_sock_write_iter+0x10/0x10 [ 291.003648][ T8607] ? bpf_lsm_file_permission+0x9/0x10 [ 291.003684][ T8607] ? security_file_permission+0x76/0x210 [ 291.003736][ T8607] ? rw_verify_area+0xce/0x6d0 [ 291.003797][ T8607] vfs_write+0x6ac/0x1050 [ 291.003831][ T8607] ? __pfx_sock_write_iter+0x10/0x10 [ 291.003871][ T8607] ? __pfx_vfs_write+0x10/0x10 [ 291.003921][ T8607] ? __x64_sys_futex+0x34f/0x4d0 [ 291.003960][ T8607] ? __x64_sys_futex+0x358/0x4d0 [ 291.004005][ T8607] ksys_write+0x1f8/0x250 [ 291.004038][ T8607] ? __pfx_ksys_write+0x10/0x10 [ 291.004083][ T8607] do_syscall_64+0x115/0x840 [ 291.004126][ T8607] ? clear_bhb_loop+0x40/0x90 [ 291.004176][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.004214][ T8607] RIP: 0033:0x7fdf0e39de99 [ 291.004242][ T8607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.004276][ T8607] RSP: 002b:00007fdf0f297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.004309][ T8607] RAX: ffffffffffffffda RBX: 00007fdf0e626090 RCX: 00007fdf0e39de99 [ 291.004331][ T8607] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 291.004352][ T8607] RBP: 00007fdf0e433eaf R08: 0000000000000000 R09: 0000000000000000 [ 291.004372][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.004393][ T8607] R13: 00007fdf0e626128 R14: 00007fdf0e626090 R15: 00007fff0e633108 [ 291.004436][ T8607] [ 291.979833][ T30] audit: type=1800 audit(4294967379.810:4): pid=8615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.392" name="members" dev="configfs" ino=30339 res=0 errno=0 [ 296.761552][ T8693] FAULT_INJECTION: forcing a failure. [ 296.761552][ T8693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.774901][ T8693] CPU: 0 UID: 0 PID: 8693 Comm: syz.3.400 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.774957][ T8693] Tainted: [L]=SOFTLOCKUP [ 296.774969][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 296.774989][ T8693] Call Trace: [ 296.775000][ T8693] [ 296.775013][ T8693] dump_stack_lvl+0x100/0x190 [ 296.775058][ T8693] should_fail_ex.cold+0x5/0xa [ 296.775107][ T8693] _copy_from_iter+0x1f4/0x1690 [ 296.775176][ T8693] ? __pfx__copy_from_iter+0x10/0x10 [ 296.775252][ T8693] skb_copy_datagram_from_iter+0x11f/0x720 [ 296.775298][ T8693] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 296.775342][ T8693] unix_stream_sendmsg+0x536/0x1310 [ 296.775403][ T8693] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 296.775462][ T8693] ? apparmor_socket_sendmsg+0x15b/0x270 [ 296.775507][ T8693] sock_write_iter+0x53a/0x5b0 [ 296.775541][ T8693] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 296.775588][ T8693] ? __pfx_sock_write_iter+0x10/0x10 [ 296.775635][ T8693] ? bpf_lsm_file_permission+0x9/0x10 [ 296.775670][ T8693] ? security_file_permission+0x76/0x210 [ 296.775722][ T8693] ? rw_verify_area+0xce/0x6d0 [ 296.775800][ T8693] vfs_write+0x6ac/0x1050 [ 296.775834][ T8693] ? __pfx_sock_write_iter+0x10/0x10 [ 296.775873][ T8693] ? __pfx_vfs_write+0x10/0x10 [ 296.775921][ T8693] ? __x64_sys_futex+0x34f/0x4d0 [ 296.775959][ T8693] ? __x64_sys_futex+0x358/0x4d0 [ 296.776004][ T8693] ksys_write+0x1f8/0x250 [ 296.776036][ T8693] ? __pfx_ksys_write+0x10/0x10 [ 296.776080][ T8693] do_syscall_64+0x115/0x840 [ 296.776133][ T8693] ? clear_bhb_loop+0x40/0x90 [ 296.776176][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.776214][ T8693] RIP: 0033:0x7fdf0e39de99 [ 296.776244][ T8693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.776278][ T8693] RSP: 002b:00007fdf0f297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.776313][ T8693] RAX: ffffffffffffffda RBX: 00007fdf0e626090 RCX: 00007fdf0e39de99 [ 296.776336][ T8693] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 296.776357][ T8693] RBP: 00007fdf0e433eaf R08: 0000000000000000 R09: 0000000000000000 [ 296.776377][ T8693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.776397][ T8693] R13: 00007fdf0e626128 R14: 00007fdf0e626090 R15: 00007fff0e633108 [ 296.776440][ T8693] [ 298.609245][ T30] audit: type=1800 audit(4294967386.440:5): pid=8728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.405" name="members" dev="configfs" ino=31857 res=0 errno=0 [ 298.863980][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 305.343151][ T8826] FAULT_INJECTION: forcing a failure. [ 305.343151][ T8826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.389752][ T8826] CPU: 0 UID: 0 PID: 8826 Comm: syz.2.418 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.389805][ T8826] Tainted: [L]=SOFTLOCKUP [ 305.389817][ T8826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 305.389835][ T8826] Call Trace: [ 305.389846][ T8826] [ 305.389859][ T8826] dump_stack_lvl+0x100/0x190 [ 305.389904][ T8826] should_fail_ex.cold+0x5/0xa [ 305.389942][ T8826] _copy_from_iter+0x1f4/0x1690 [ 305.390006][ T8826] ? __pfx__copy_from_iter+0x10/0x10 [ 305.390074][ T8826] skb_copy_datagram_from_iter+0x11f/0x720 [ 305.390119][ T8826] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 305.390161][ T8826] unix_stream_sendmsg+0x536/0x1310 [ 305.390217][ T8826] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 305.390273][ T8826] ? apparmor_socket_sendmsg+0x15b/0x270 [ 305.390317][ T8826] sock_write_iter+0x53a/0x5b0 [ 305.390350][ T8826] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 305.390407][ T8826] ? __pfx_sock_write_iter+0x10/0x10 [ 305.390453][ T8826] ? bpf_lsm_file_permission+0x9/0x10 [ 305.390485][ T8826] ? security_file_permission+0x76/0x210 [ 305.390536][ T8826] ? rw_verify_area+0xce/0x6d0 [ 305.390589][ T8826] vfs_write+0x6ac/0x1050 [ 305.390621][ T8826] ? __pfx_sock_write_iter+0x10/0x10 [ 305.390659][ T8826] ? __pfx_vfs_write+0x10/0x10 [ 305.390705][ T8826] ? __x64_sys_futex+0x34f/0x4d0 [ 305.390743][ T8826] ? __x64_sys_futex+0x358/0x4d0 [ 305.390787][ T8826] ksys_write+0x1f8/0x250 [ 305.390818][ T8826] ? __pfx_ksys_write+0x10/0x10 [ 305.390861][ T8826] do_syscall_64+0x115/0x840 [ 305.390905][ T8826] ? clear_bhb_loop+0x40/0x90 [ 305.390949][ T8826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.390984][ T8826] RIP: 0033:0x7f37c319de99 [ 305.391011][ T8826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.391044][ T8826] RSP: 002b:00007f37c4018028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.391076][ T8826] RAX: ffffffffffffffda RBX: 00007f37c3426090 RCX: 00007f37c319de99 [ 305.391099][ T8826] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 305.391124][ T8826] RBP: 00007f37c3233eaf R08: 0000000000000000 R09: 0000000000000000 [ 305.391144][ T8826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.391165][ T8826] R13: 00007f37c3426128 R14: 00007f37c3426090 R15: 00007fff104a1ce8 [ 305.391205][ T8826] [ 317.423658][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.431298][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.562209][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 338.891752][ T30] audit: type=1800 audit(4294967426.720:6): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.492" name="members" dev="configfs" ino=36808 res=0 errno=0 [ 339.006991][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 344.641591][ T30] audit: type=1800 audit(4294967432.480:7): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.505" name="members" dev="configfs" ino=38427 res=0 errno=0 [ 344.815510][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'. [ 346.854448][ T30] audit: type=1800 audit(4294967434.690:8): pid=9501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.518" name="members" dev="configfs" ino=37768 res=0 errno=0 [ 347.013580][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 349.825135][ T30] audit: type=1800 audit(4294967437.660:9): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.519" name="members" dev="configfs" ino=38844 res=0 errno=0 [ 349.964608][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.519'. [ 352.509737][ T30] audit: type=1800 audit(4294967440.340:10): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.524" name="members" dev="configfs" ino=39253 res=0 errno=0 [ 352.604054][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 371.526321][ T30] audit: type=1800 audit(4294967459.360:11): pid=9924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.565" name="members" dev="configfs" ino=41690 res=0 errno=0 [ 371.717861][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 373.240404][ T30] audit: type=1800 audit(4294967461.070:12): pid=9957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.568" name="members" dev="configfs" ino=42930 res=0 errno=0 [ 373.520670][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 374.841629][ T30] audit: type=1800 audit(4294967462.670:13): pid=9986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.574" name="members" dev="configfs" ino=41972 res=0 errno=0 [ 375.042181][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.574'. [ 375.246174][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 378.612704][ T30] audit: type=1800 audit(4294967466.440:14): pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.583" name="members" dev="configfs" ino=44484 res=0 errno=0 [ 378.789896][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 378.864309][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.871627][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.789305][ T30] audit: type=1800 audit(4294967470.620:15): pid=10125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.591" name="members" dev="configfs" ino=43659 res=0 errno=0 [ 382.978817][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 386.739444][ T30] audit: type=1800 audit(4294967474.570:16): pid=10186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.599" name="members" dev="configfs" ino=43870 res=0 errno=0 [ 386.845611][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'. [ 387.766303][T10201] zswap: compressor Zºu¾å~“ÍÎ^´§8·¯î”¯a®Þcu0ÙóÏ|” ,a’âú¢RrðqP“þø˜¸÷'¹À)Œ¤Þ±`Ù*ë]¿­T]èXãžé؃(Û‚ŽTN>Ñ_áËr$º“º¾¾ñzúÙ&[+x[DPx¥e?–ôm¢µ3QÂz not available [ 391.126571][T10269] ubi0: attaching mtd0 [ 391.224629][T10269] ubi0: scanning is finished [ 391.259375][T10269] ubi0: empty MTD device detected [ 391.739317][T10269] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 391.756598][T10269] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 391.771289][T10269] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 391.780738][T10269] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 391.789921][T10269] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 391.797225][T10269] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 391.809003][T10269] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1907037206 [ 391.822641][T10269] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 391.841944][T10272] ubi0: background thread "ubi_bgt0d" started, PID 10272 [ 391.879856][T10270] ubi0: detaching mtd0 [ 391.935959][T10270] ubi0: mtd0 is detached [ 393.270521][ T30] audit: type=1800 audit(4294967481.100:17): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.612" name="members" dev="configfs" ino=45521 res=0 errno=0 [ 393.447919][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 396.206222][ T1127] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.583731][ T1127] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.700545][ T1127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.858503][ T1127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.300609][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 397.310206][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 397.319849][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 397.333873][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 397.353960][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 398.347923][ T1127] bridge_slave_1: left allmulticast mode [ 398.363207][ T1127] bridge_slave_1: left promiscuous mode [ 398.394671][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.441809][ T1127] bridge_slave_0: left allmulticast mode [ 398.466408][ T1127] bridge_slave_0: left promiscuous mode [ 398.487713][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.961020][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.986399][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.998536][ T1127] bond0 (unregistering): Released all slaves [ 399.366175][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 399.421915][ T50] Bluetooth: hci0: command tx timeout [ 401.499027][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 401.511349][ T50] Bluetooth: hci0: command tx timeout [ 401.880414][T10331] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.887869][T10331] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.897362][T10331] bridge_slave_0: entered allmulticast mode [ 401.905822][T10331] bridge_slave_0: entered promiscuous mode [ 401.916792][T10331] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.924675][T10331] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.932488][T10331] bridge_slave_1: entered allmulticast mode [ 401.947544][T10331] bridge_slave_1: entered promiscuous mode [ 402.144415][T10331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.177008][T10331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.327767][T10331] team0: Port device team_slave_0 added [ 402.469426][T10331] team0: Port device team_slave_1 added [ 402.714122][T10331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.731447][T10331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.775518][T10331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.956668][T10331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.980468][T10331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.043056][T10331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.360554][ T1127] hsr_slave_0: left promiscuous mode [ 403.369836][ T1127] hsr_slave_1: left promiscuous mode [ 403.377610][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.385533][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.394311][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.402107][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.417152][ T1127] veth1_macvtap: left promiscuous mode [ 403.424184][ T1127] veth0_macvtap: left promiscuous mode [ 403.431434][ T1127] veth1_vlan: left promiscuous mode [ 403.437115][ T1127] veth0_vlan: left promiscuous mode [ 403.590989][ T50] Bluetooth: hci0: command tx timeout [ 403.661632][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 403.682173][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 403.811617][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 404.057276][T10331] hsr_slave_0: entered promiscuous mode [ 404.063935][T10331] hsr_slave_1: entered promiscuous mode [ 405.661436][ T50] Bluetooth: hci0: command tx timeout [ 406.619442][T10331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 406.638613][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.657284][T10331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 406.686802][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.708475][T10331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 406.742379][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.750590][T10331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 406.828139][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.135204][T10331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.270809][T10331] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.318060][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.325359][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.410094][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.417329][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.905201][T10331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.611858][T10331] veth0_vlan: entered promiscuous mode [ 414.724412][T10331] veth1_vlan: entered promiscuous mode [ 414.886483][T10331] veth0_macvtap: entered promiscuous mode [ 414.919665][T10331] veth1_macvtap: entered promiscuous mode [ 415.125807][T10331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.290005][T10331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.632450][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.642732][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.691212][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.901059][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.657874][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.691721][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.214699][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.238887][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.694878][ T30] audit: type=1800 audit(4294967507.530:18): pid=10742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.651" name="members" dev="configfs" ino=49444 res=0 errno=0 [ 419.879309][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 426.892331][ T30] audit: type=1800 audit(4294967514.730:19): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.666" name="members" dev="configfs" ino=50097 res=0 errno=0 [ 427.004332][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 429.036578][ T30] audit: type=1800 audit(4294967516.870:20): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.671" name="members" dev="configfs" ino=51295 res=0 errno=0 [ 429.237193][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 432.790022][T10964] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 434.165789][ T30] audit: type=1800 audit(4294967522.000:21): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.683" name="members" dev="configfs" ino=51657 res=0 errno=0 [ 434.337534][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 436.702042][T11032] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 438.370455][ T30] audit: type=1800 audit(4294967526.200:22): pid=11053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.693" name="members" dev="configfs" ino=52676 res=0 errno=0 [ 438.618077][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'. [ 440.172920][ T30] audit: type=1800 audit(4294967528.000:23): pid=11083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.697" name="members" dev="configfs" ino=52151 res=0 errno=0 [ 440.304394][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.310856][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.372238][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 442.236118][ T30] audit: type=1800 audit(4294967530.070:24): pid=11118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.701" name="members" dev="configfs" ino=53397 res=0 errno=0 [ 442.408652][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 447.278393][ T30] audit: type=1800 audit(4294967535.110:25): pid=11226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.710" name="members" dev="configfs" ino=53783 res=0 errno=0 [ 447.445335][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 452.795837][ T30] audit: type=1800 audit(4294967540.630:26): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.723" name="members" dev="configfs" ino=55011 res=0 errno=0 [ 452.904910][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 455.470261][T11372] blktrace: Concurrent blktraces are not allowed on ram10 [ 455.516596][T11372] blktrace: Concurrent blktraces are not allowed on ram10 [ 466.574622][T11526] syz.0.751 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 466.761219][T11526] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input5 [ 473.800234][ T30] audit: type=1800 audit(4294967561.630:27): pid=11653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.769" name="members" dev="configfs" ino=57749 res=0 errno=0 [ 474.004689][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 477.808675][ T30] audit: type=1800 audit(4294967565.640:28): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.778" name="members" dev="configfs" ino=58097 res=0 errno=0 [ 478.070286][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'. [ 479.756330][ T30] audit: type=1800 audit(4294967567.590:29): pid=11753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.784" name="members" dev="configfs" ino=58333 res=0 errno=0 [ 479.951758][T11757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.784'. [ 483.570975][T11825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.794'. [ 483.612024][T11822] could not allocate digest TFM handle [ 484.531158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 485.256387][ T30] audit: type=1800 audit(4294967573.090:30): pid=11855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.799" name="members" dev="configfs" ino=59810 res=0 errno=0 [ 485.379878][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 485.781823][ T30] audit: type=1800 audit(4294967573.610:31): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.798" name="version" dev="configfs" ino=60609 res=0 errno=0 [ 485.829005][T11864] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 486.467945][ T30] audit: type=1800 audit(4294967574.300:32): pid=11872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.800" name="members" dev="configfs" ino=59863 res=0 errno=0 [ 486.598320][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 491.337490][ T30] audit: type=1800 audit(4294967579.170:33): pid=11957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.811" name="members" dev="configfs" ino=61148 res=0 errno=0 [ 491.444029][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 495.814750][T12031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.822'. [ 496.933112][ T30] audit: type=1800 audit(4294967584.770:34): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.824" name="members" dev="configfs" ino=61732 res=0 errno=0 [ 497.139418][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.824'. [ 500.135971][T12096] could not allocate digest TFM handle [ 501.743245][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.752523][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.002869][ T30] audit: type=1800 audit(4294967596.840:35): pid=12251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.851" name="members" dev="configfs" ino=63698 res=0 errno=0 [ 509.159352][T12253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.851'. [ 524.301366][ T5630] Bluetooth: hci0: command 0x0406 tx timeout [ 525.206881][T12517] FAULT_INJECTION: forcing a failure. [ 525.206881][T12517] name failslab, interval 1, probability 0, space 0, times 0 [ 525.220583][T12517] CPU: 0 UID: 0 PID: 12517 Comm: syz.3.888 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.220637][T12517] Tainted: [L]=SOFTLOCKUP [ 525.220649][T12517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 525.220678][T12517] Call Trace: [ 525.220719][T12517] [ 525.220754][T12517] dump_stack_lvl+0x100/0x190 [ 525.220870][T12517] should_fail_ex.cold+0x5/0xa [ 525.220930][T12517] should_failslab+0xc2/0x120 [ 525.221015][T12517] __kmalloc_noprof+0xfc/0x820 [ 525.221069][T12517] ? constrain_params_by_rules+0x175/0xd20 [ 525.221199][T12517] constrain_params_by_rules+0x175/0xd20 [ 525.221236][T12517] ? mark_held_locks+0x40/0x70 [ 525.221315][T12517] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 525.221430][T12517] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 525.221469][T12517] ? kasan_save_track+0x14/0x30 [ 525.221511][T12517] ? __kasan_kmalloc+0xaa/0xb0 [ 525.221556][T12517] ? snd_pcm_oss_get_formats+0x7d/0x350 [ 525.221618][T12517] ? snd_pcm_oss_ioctl+0x1870/0x3790 [ 525.221654][T12517] ? __x64_sys_ioctl+0x18e/0x210 [ 525.221720][T12517] ? do_syscall_64+0x115/0x840 [ 525.221800][T12517] ? snd_interval_refine+0x2d0/0x580 [ 525.221855][T12517] snd_pcm_hw_refine+0x82a/0xb40 [ 525.221895][T12517] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 525.221943][T12517] ? kasan_save_track+0x14/0x30 [ 525.221985][T12517] ? __kasan_kmalloc+0xaa/0xb0 [ 525.222042][T12517] snd_pcm_hw_param_first+0x2b0/0x680 [ 525.222117][T12517] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 525.222159][T12517] ? lockdep_hardirqs_on+0x78/0x100 [ 525.222234][T12517] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 525.222272][T12517] ? snd_pcm_oss_change_params_locked+0xa60/0x39f0 [ 525.222312][T12517] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 525.222350][T12517] ? kfree+0x22b/0x6c0 [ 525.222389][T12517] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 525.222448][T12517] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 525.222486][T12517] ? __pfx___mutex_lock+0x10/0x10 [ 525.222528][T12517] ? find_held_lock+0x2b/0x80 [ 525.222571][T12517] ? tomoyo_path_number_perm+0x28f/0x580 [ 525.222725][T12517] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 525.222771][T12517] snd_pcm_oss_get_formats+0x7d/0x350 [ 525.222811][T12517] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 525.222865][T12517] snd_pcm_oss_ioctl+0x1870/0x3790 [ 525.222904][T12517] ? find_held_lock+0x2b/0x80 [ 525.222947][T12517] ? __fget_files+0x215/0x3d0 [ 525.222985][T12517] ? hook_file_ioctl_common+0x140/0x440 [ 525.223102][T12517] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 525.223145][T12517] ? __fget_files+0x21f/0x3d0 [ 525.223191][T12517] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 525.223238][T12517] __x64_sys_ioctl+0x18e/0x210 [ 525.223292][T12517] do_syscall_64+0x115/0x840 [ 525.223334][T12517] ? clear_bhb_loop+0x40/0x90 [ 525.223389][T12517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.223425][T12517] RIP: 0033:0x7fdf0e39de99 [ 525.223455][T12517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.223489][T12517] RSP: 002b:00007fdf0f2b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.223560][T12517] RAX: ffffffffffffffda RBX: 00007fdf0e625fa0 RCX: 00007fdf0e39de99 [ 525.223583][T12517] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000008 [ 525.223604][T12517] RBP: 00007fdf0e433eaf R08: 0000000000000000 R09: 0000000000000000 [ 525.223623][T12517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.223643][T12517] R13: 00007fdf0e626038 R14: 00007fdf0e625fa0 R15: 00007fff0e633108 [ 525.223684][T12517] [ 528.412060][ T30] audit: type=1800 audit(4294967616.250:36): pid=12563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.895" name="members" dev="configfs" ino=67074 res=0 errno=0 [ 528.619478][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'. [ 543.746870][ T30] audit: type=1800 audit(4294967631.580:37): pid=12760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.926" name="members" dev="configfs" ino=68186 res=0 errno=0 [ 543.988850][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 549.876840][ T30] audit: type=1800 audit(4294967637.710:38): pid=12850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.940" name="members" dev="configfs" ino=68563 res=0 errno=0 [ 550.122447][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 551.692751][T12868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 551.706962][T12868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 551.719162][T12868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 551.729781][T12868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 551.741657][T12868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 553.503390][ T30] audit: type=1800 audit(4294967641.330:39): pid=12896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.946" name="members" dev="configfs" ino=69723 res=0 errno=0 [ 553.660149][T12898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.946'. [ 553.821329][ T50] Bluetooth: hci4: command tx timeout [ 555.356014][ T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.826623][ T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.901260][ T50] Bluetooth: hci4: command tx timeout [ 556.396475][ T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.771003][ T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.077233][T12866] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.084704][T12866] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.092630][T12866] bridge_slave_0: entered allmulticast mode [ 557.101356][T12866] bridge_slave_0: entered promiscuous mode [ 557.179684][T12866] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.187042][T12866] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.194789][T12866] bridge_slave_1: entered allmulticast mode [ 557.204431][T12866] bridge_slave_1: entered promiscuous mode [ 557.346501][T12866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.365446][T12866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.498142][T12866] team0: Port device team_slave_0 added [ 557.507731][T12866] team0: Port device team_slave_1 added [ 557.622293][T12866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.630028][T12866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.658040][T12866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.790432][T12866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.827700][T12866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.861752][T12866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.919436][ T76] bridge_slave_1: left allmulticast mode [ 557.925952][ T76] bridge_slave_1: left promiscuous mode [ 557.937399][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.955194][ T76] bridge_slave_0: left allmulticast mode [ 557.961606][ T76] bridge_slave_0: left promiscuous mode [ 557.967507][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.981296][ T50] Bluetooth: hci4: command tx timeout [ 558.359420][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.408025][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.433877][ T76] bond0 (unregistering): Released all slaves [ 558.687652][T12866] hsr_slave_0: entered promiscuous mode [ 558.732671][T12866] hsr_slave_1: entered promiscuous mode [ 558.754963][T12866] debugfs: 'hsr0' already exists in 'hsr' [ 558.777575][T12866] Cannot create hsr debugfs directory [ 559.838050][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 560.061161][ T50] Bluetooth: hci4: command tx timeout [ 560.620807][T12997] zswap: compressor 000 not available [ 560.781910][T12866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 560.860918][T12866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 560.924215][T12866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 560.939678][T12866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 560.956525][T12866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 560.992172][T12866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.022155][T12866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 561.046745][T12866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 561.706169][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 563.184458][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.197080][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.217948][T12866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.348372][T12866] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.564670][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.571967][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.780373][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.787630][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.867472][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 564.453800][T13085] FAULT_INJECTION: forcing a failure. [ 564.453800][T13085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.496265][T13085] CPU: 0 UID: 0 PID: 13085 Comm: syz.2.964 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.496314][T13085] Tainted: [L]=SOFTLOCKUP [ 564.496325][T13085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 564.496343][T13085] Call Trace: [ 564.496353][T13085] [ 564.496365][T13085] dump_stack_lvl+0x100/0x190 [ 564.496410][T13085] should_fail_ex.cold+0x5/0xa [ 564.496447][T13085] _copy_to_user+0x32/0xd0 [ 564.496620][T13085] simple_read_from_buffer+0xcb/0x170 [ 564.496814][T13085] proc_fail_nth_read+0x1af/0x230 [ 564.496913][T13085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.496954][T13085] ? rw_verify_area+0xce/0x6d0 [ 564.497001][T13085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.497044][T13085] vfs_read+0x1e4/0xb40 [ 564.497078][T13085] ? __pfx_vfs_read+0x10/0x10 [ 564.497137][T13085] ? find_held_lock+0x2b/0x80 [ 564.497178][T13085] ? __might_fault+0xc5/0x140 [ 564.497211][T13085] ? __might_fault+0xc5/0x140 [ 564.497252][T13085] ksys_read+0x12a/0x250 [ 564.497284][T13085] ? __pfx_ksys_read+0x10/0x10 [ 564.497323][T13085] do_syscall_64+0x115/0x840 [ 564.497363][T13085] ? clear_bhb_loop+0x40/0x90 [ 564.497404][T13085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.497437][T13085] RIP: 0033:0x7f37c315e6ce [ 564.497463][T13085] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 564.497493][T13085] RSP: 002b:00007f37c3fb4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.497524][T13085] RAX: ffffffffffffffda RBX: 00007f37c3fb56c0 RCX: 00007f37c315e6ce [ 564.497545][T13085] RDX: 000000000000000f RSI: 00007f37c3fb50a0 RDI: 0000000000000001 [ 564.497565][T13085] RBP: 00007f37c3fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 564.497584][T13085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.497603][T13085] R13: 00007f37c34263f8 R14: 00007f37c3426360 R15: 00007fff104a1ce8 [ 564.497646][T13085] [ 565.903618][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 567.088927][ T76] hsr_slave_0: left promiscuous mode [ 567.107982][ T76] hsr_slave_1: left promiscuous mode [ 567.116045][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.127609][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.140443][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.149193][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.177497][ T76] veth1_macvtap: left promiscuous mode [ 567.189883][ T76] veth0_macvtap: left promiscuous mode [ 567.196577][ T76] veth1_vlan: left promiscuous mode [ 567.202401][ T76] veth0_vlan: left promiscuous mode [ 567.604485][ T76] team0 (unregistering): Port device team_slave_1 removed [ 567.637075][ T76] team0 (unregistering): Port device team_slave_0 removed [ 569.466301][T12866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.291024][T12866] veth0_vlan: entered promiscuous mode [ 570.316290][T12866] veth1_vlan: entered promiscuous mode [ 570.374505][T12866] veth0_macvtap: entered promiscuous mode [ 570.402112][T12866] veth1_macvtap: entered promiscuous mode [ 570.432217][T12866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.462460][T12866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.484700][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.504828][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.532651][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.576140][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.768030][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.790068][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.239700][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.251152][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.909201][T13563] FAULT_INJECTION: forcing a failure. [ 591.909201][T13563] name failslab, interval 1, probability 0, space 0, times 0 [ 591.959369][T13563] CPU: 1 UID: 0 PID: 13563 Comm: syz.4.1017 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.959420][T13563] Tainted: [L]=SOFTLOCKUP [ 591.959432][T13563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 591.959451][T13563] Call Trace: [ 591.959462][T13563] [ 591.959474][T13563] dump_stack_lvl+0x100/0x190 [ 591.959517][T13563] should_fail_ex.cold+0x5/0xa [ 591.959556][T13563] should_failslab+0xc2/0x120 [ 591.959604][T13563] __kmalloc_cache_noprof+0x91/0x6c0 [ 591.959640][T13563] ? lockdep_init_map_type+0x5c/0x250 [ 591.959672][T13563] ? rand_initialize_disk+0x4a/0xb2 [ 591.959722][T13563] rand_initialize_disk+0x4a/0xb2 [ 591.959766][T13563] __alloc_disk_node+0x322/0x6b0 [ 591.959905][T13563] __blk_mq_alloc_disk+0x89/0x120 [ 591.959973][T13563] loop_add+0x498/0xb60 [ 591.960078][T13563] ? __pfx_loop_add+0x10/0x10 [ 591.960139][T13563] ? find_held_lock+0x2b/0x80 [ 591.960178][T13563] ? __fget_files+0x215/0x3d0 [ 591.960213][T13563] loop_control_ioctl+0xae/0x620 [ 591.960255][T13563] ? __pfx_loop_control_ioctl+0x10/0x10 [ 591.960300][T13563] ? __pfx_loop_control_ioctl+0x10/0x10 [ 591.960344][T13563] __x64_sys_ioctl+0x18e/0x210 [ 591.960396][T13563] do_syscall_64+0x115/0x840 [ 591.960438][T13563] ? clear_bhb_loop+0x40/0x90 [ 591.960481][T13563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.960520][T13563] RIP: 0033:0x7fdaadb9de99 [ 591.960550][T13563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.960583][T13563] RSP: 002b:00007fdaaeb1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.960617][T13563] RAX: ffffffffffffffda RBX: 00007fdaade25fa0 RCX: 00007fdaadb9de99 [ 591.960639][T13563] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 591.960660][T13563] RBP: 00007fdaadc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 591.960681][T13563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.960701][T13563] R13: 00007fdaade26038 R14: 00007fdaade25fa0 R15: 00007ffd8c76d778 [ 591.960744][T13563] [ 592.559736][ T30] audit: type=1800 audit(4294967680.390:40): pid=13580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1019" name="members" dev="configfs" ino=76075 res=0 errno=0 [ 597.137555][ T30] audit: type=1800 audit(4294967684.970:41): pid=13645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1028" name="members" dev="configfs" ino=77106 res=0 errno=0 [ 604.007906][ T30] audit: type=1800 audit(4294967691.840:42): pid=13739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1039" name="members" dev="configfs" ino=77653 res=0 errno=0 [ 609.596903][ T30] audit: type=1800 audit(4294967697.430:43): pid=13838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1052" name="members" dev="configfs" ino=79142 res=0 errno=0 [ 614.967473][ T30] audit: type=1800 audit(4294967702.800:44): pid=13928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1066" name="members" dev="configfs" ino=78815 res=0 errno=0 [ 615.069155][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1066'. [ 615.904263][T13950] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 618.037806][ T30] audit: type=1800 audit(4294967705.870:45): pid=13983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1076" name="version" dev="configfs" ino=80115 res=0 errno=0 [ 618.545469][T13995] FAULT_INJECTION: forcing a failure. [ 618.545469][T13995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.567622][T13995] CPU: 0 UID: 0 PID: 13995 Comm: syz.4.1077 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.567675][T13995] Tainted: [L]=SOFTLOCKUP [ 618.567686][T13995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 618.567706][T13995] Call Trace: [ 618.567716][T13995] [ 618.567728][T13995] dump_stack_lvl+0x100/0x190 [ 618.567772][T13995] should_fail_ex.cold+0x5/0xa [ 618.567811][T13995] _copy_from_iter+0x1f4/0x1690 [ 618.567879][T13995] ? __pfx__copy_from_iter+0x10/0x10 [ 618.567953][T13995] skb_copy_datagram_from_iter+0x11f/0x720 [ 618.568102][T13995] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 618.568204][T13995] unix_stream_sendmsg+0x536/0x1310 [ 618.568338][T13995] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 618.568394][T13995] ? apparmor_socket_sendmsg+0x15b/0x270 [ 618.568466][T13995] sock_write_iter+0x53a/0x5b0 [ 618.568533][T13995] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 618.568586][T13995] ? __pfx_sock_write_iter+0x10/0x10 [ 618.568666][T13995] ? bpf_lsm_file_permission+0x9/0x10 [ 618.568716][T13995] ? security_file_permission+0x76/0x210 [ 618.568817][T13995] ? rw_verify_area+0xce/0x6d0 [ 618.568874][T13995] vfs_write+0x6ac/0x1050 [ 618.568908][T13995] ? __pfx_sock_write_iter+0x10/0x10 [ 618.568948][T13995] ? __pfx_vfs_write+0x10/0x10 [ 618.568997][T13995] ? __x64_sys_futex+0x34f/0x4d0 [ 618.569055][T13995] ? __x64_sys_futex+0x358/0x4d0 [ 618.569101][T13995] ksys_write+0x1f8/0x250 [ 618.569134][T13995] ? __pfx_ksys_write+0x10/0x10 [ 618.569179][T13995] do_syscall_64+0x115/0x840 [ 618.569224][T13995] ? clear_bhb_loop+0x40/0x90 [ 618.569268][T13995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.569306][T13995] RIP: 0033:0x7fdaadb9de99 [ 618.569335][T13995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.569367][T13995] RSP: 002b:00007fdaaeafc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 618.569402][T13995] RAX: ffffffffffffffda RBX: 00007fdaade26090 RCX: 00007fdaadb9de99 [ 618.569424][T13995] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 618.569444][T13995] RBP: 00007fdaadc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 618.569465][T13995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.569485][T13995] R13: 00007fdaade26128 R14: 00007fdaade26090 R15: 00007ffd8c76d778 [ 618.569536][T13995] [ 619.333026][ T30] audit: type=1800 audit(4294967707.160:46): pid=14009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1080" name="members" dev="configfs" ino=81039 res=0 errno=0 [ 619.464940][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1080'. [ 619.494659][T14008] FAULT_INJECTION: forcing a failure. [ 619.494659][T14008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.544790][T14008] CPU: 1 UID: 0 PID: 14008 Comm: syz.2.1079 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.544839][T14008] Tainted: [L]=SOFTLOCKUP [ 619.544850][T14008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 619.544868][T14008] Call Trace: [ 619.544878][T14008] [ 619.544890][T14008] dump_stack_lvl+0x100/0x190 [ 619.544933][T14008] should_fail_ex.cold+0x5/0xa [ 619.544970][T14008] _copy_from_iter+0x1f4/0x1690 [ 619.545031][T14008] ? __pfx__copy_from_iter+0x10/0x10 [ 619.545102][T14008] skb_copy_datagram_from_iter+0x11f/0x720 [ 619.545146][T14008] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 619.545191][T14008] unix_stream_sendmsg+0x536/0x1310 [ 619.545248][T14008] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 619.545302][T14008] ? apparmor_socket_sendmsg+0x15b/0x270 [ 619.545345][T14008] sock_write_iter+0x53a/0x5b0 [ 619.545384][T14008] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 619.545426][T14008] ? __pfx_sock_write_iter+0x10/0x10 [ 619.545468][T14008] ? bpf_lsm_file_permission+0x9/0x10 [ 619.545498][T14008] ? security_file_permission+0x76/0x210 [ 619.545544][T14008] ? rw_verify_area+0xce/0x6d0 [ 619.545596][T14008] vfs_write+0x6ac/0x1050 [ 619.545628][T14008] ? __pfx_sock_write_iter+0x10/0x10 [ 619.545665][T14008] ? __pfx_vfs_write+0x10/0x10 [ 619.545693][T14008] ? find_held_lock+0x2b/0x80 [ 619.545760][T14008] ksys_write+0x1f8/0x250 [ 619.545792][T14008] ? __pfx_ksys_write+0x10/0x10 [ 619.545836][T14008] do_syscall_64+0x115/0x840 [ 619.545878][T14008] ? clear_bhb_loop+0x40/0x90 [ 619.545921][T14008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.545955][T14008] RIP: 0033:0x7f37c319de99 [ 619.545981][T14008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.546010][T14008] RSP: 002b:00007f37c4018028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 619.546038][T14008] RAX: ffffffffffffffda RBX: 00007f37c3426090 RCX: 00007f37c319de99 [ 619.546059][T14008] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 619.546078][T14008] RBP: 00007f37c3233eaf R08: 0000000000000000 R09: 0000000000000000 [ 619.546096][T14008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.546114][T14008] R13: 00007f37c3426128 R14: 00007f37c3426090 R15: 00007fff104a1ce8 [ 619.546155][T14008] [ 619.546777][T14010] FAULT_INJECTION: forcing a failure. [ 619.546777][T14010] name failslab, interval 1, probability 0, space 0, times 0 [ 619.808347][T14010] CPU: 0 UID: 0 PID: 14010 Comm: syz.2.1079 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.808402][T14010] Tainted: [L]=SOFTLOCKUP [ 619.808414][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 619.808437][T14010] Call Trace: [ 619.808447][T14010] [ 619.808459][T14010] dump_stack_lvl+0x100/0x190 [ 619.808503][T14010] should_fail_ex.cold+0x5/0xa [ 619.808541][T14010] should_failslab+0xc2/0x120 [ 619.808589][T14010] __kvmalloc_node_noprof+0x116/0x970 [ 619.808637][T14010] ? seq_read_iter+0x819/0x1270 [ 619.808697][T14010] seq_read_iter+0x819/0x1270 [ 619.808753][T14010] ? aa_file_perm+0x7f3/0x14d0 [ 619.808816][T14010] seq_read+0x344/0x4d0 [ 619.808876][T14010] ? __pfx_seq_read+0x10/0x10 [ 619.808958][T14010] full_proxy_read+0x135/0x1a0 [ 619.809091][T14010] ? __pfx_full_proxy_read+0x10/0x10 [ 619.809132][T14010] vfs_read+0x1e4/0xb40 [ 619.809167][T14010] ? __pfx_vfs_read+0x10/0x10 [ 619.809221][T14010] ? do_sys_openat2+0x159/0x1e0 [ 619.809266][T14010] ? __pfx_do_sys_openat2+0x10/0x10 [ 619.809316][T14010] ? fdget+0x18b/0x210 [ 619.809359][T14010] ksys_read+0x12a/0x250 [ 619.809390][T14010] ? __pfx_ksys_read+0x10/0x10 [ 619.809434][T14010] do_syscall_64+0x115/0x840 [ 619.809475][T14010] ? clear_bhb_loop+0x40/0x90 [ 619.809517][T14010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.809552][T14010] RIP: 0033:0x7f37c319de99 [ 619.809579][T14010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.809610][T14010] RSP: 002b:00007f37c3ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 619.809641][T14010] RAX: ffffffffffffffda RBX: 00007f37c3426180 RCX: 00007f37c319de99 [ 619.809665][T14010] RDX: 00000000000000a9 RSI: 0000200000000100 RDI: 0000000000000002 [ 619.809684][T14010] RBP: 00007f37c3ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 619.809703][T14010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.809722][T14010] R13: 00007f37c3426218 R14: 00007f37c3426180 R15: 00007fff104a1ce8 [ 619.809762][T14010] [ 624.526953][ T30] audit: type=1800 audit(4294967712.360:47): pid=14087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1094" name="members" dev="configfs" ino=81403 res=0 errno=0 [ 624.625503][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.634447][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.636205][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 625.586336][ T30] audit: type=1800 audit(4294967713.420:48): pid=14114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1099" name="members" dev="configfs" ino=80778 res=0 errno=0 [ 632.449895][ T30] audit: type=1800 audit(4294967720.280:49): pid=14213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1110" name="members" dev="configfs" ino=82361 res=0 errno=0 [ 637.895671][ T30] audit: type=1800 audit(4294967725.730:50): pid=14285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1121" name="members" dev="configfs" ino=83271 res=0 errno=0 [ 638.033908][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'. [ 644.077075][ T30] audit: type=1800 audit(4294967731.910:51): pid=14393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1134" name="members" dev="configfs" ino=83804 res=0 errno=0 [ 644.183433][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1134'. [ 650.007166][ T30] audit: type=1800 audit(4294967737.840:52): pid=14494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1149" name="members" dev="configfs" ino=84926 res=0 errno=0 [ 650.173495][T14496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1149'. [ 652.155940][T14547] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 655.347171][ T30] audit: type=1800 audit(4294967743.180:53): pid=14589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1162" name="members" dev="configfs" ino=85852 res=0 errno=0 [ 655.421852][T14590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1162'. [ 660.122662][ T30] audit: type=1800 audit(4294967747.960:54): pid=14678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1175" name="members" dev="configfs" ino=86902 res=0 errno=0 [ 660.212380][T14681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'. [ 665.035605][ T30] audit: type=1800 audit(4294967752.870:55): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1186" name="members" dev="configfs" ino=87732 res=0 errno=0 [ 665.120255][T14763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1186'. [ 670.584267][ T30] audit: type=1800 audit(4294967758.420:56): pid=14856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1201" name="members" dev="configfs" ino=88847 res=0 errno=0 [ 676.084576][ T30] audit: type=1800 audit(4294967763.920:57): pid=14951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1214" name="members" dev="configfs" ino=89694 res=0 errno=0 [ 677.912499][T12868] Bluetooth: hci4: command 0x0406 tx timeout [ 681.698503][ T30] audit: type=1800 audit(4294967769.530:58): pid=15049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1227" name="members" dev="configfs" ino=90706 res=0 errno=0 [ 686.066084][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.074715][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.146390][ T30] audit: type=1800 audit(4294967774.980:59): pid=15145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1241" name="members" dev="configfs" ino=91660 res=0 errno=0 [ 687.294828][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 692.724454][ T30] audit: type=1800 audit(4294967780.560:60): pid=15248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1255" name="members" dev="configfs" ino=92712 res=0 errno=0 [ 692.914467][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 699.039004][ T30] audit: type=1800 audit(4294967786.870:61): pid=15353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1268" name="members" dev="configfs" ino=94234 res=0 errno=0 [ 699.168344][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1268'. [ 705.176000][ T30] audit: type=1800 audit(4294967793.010:62): pid=15471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1282" name="members" dev="configfs" ino=94723 res=0 errno=0 [ 711.708655][ T30] audit: type=1800 audit(4294967799.540:63): pid=15577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1295" name="members" dev="configfs" ino=95671 res=0 errno=0 [ 711.980659][T15578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'. [ 717.880560][ T30] audit: type=1800 audit(4294967805.710:64): pid=15681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1308" name="members" dev="configfs" ino=96801 res=0 errno=0 [ 718.129676][T15683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1308'. [ 718.290241][T15686] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.898494][T15686] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.287863][T15686] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.543676][T15686] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.790307][T15686] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.614164][T15755] FAULT_INJECTION: forcing a failure. [ 722.614164][T15755] name failslab, interval 1, probability 0, space 0, times 0 [ 722.630799][T15755] CPU: 1 UID: 0 PID: 15755 Comm: syz.2.1320 Tainted: G L syzkaller #0 PREEMPT(full) [ 722.630851][T15755] Tainted: [L]=SOFTLOCKUP [ 722.630862][T15755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 722.630882][T15755] Call Trace: [ 722.630893][T15755] [ 722.630905][T15755] dump_stack_lvl+0x100/0x190 [ 722.630950][T15755] should_fail_ex.cold+0x5/0xa [ 722.630993][T15755] should_failslab+0xc2/0x120 [ 722.631047][T15755] kmem_cache_alloc_noprof+0x91/0x6a0 [ 722.631090][T15755] ? mas_preallocate+0x1105/0x14a0 [ 722.631227][T15755] mas_preallocate+0x1105/0x14a0 [ 722.631286][T15755] ? __pfx_mas_preallocate+0x10/0x10 [ 722.631364][T15755] ? vm_area_alloc+0x1f/0x160 [ 722.631412][T15755] ? lockdep_init_map_type+0x5c/0x250 [ 722.631450][T15755] __mmap_region+0x1230/0x2db0 [ 722.631493][T15755] ? __pfx___mmap_region+0x10/0x10 [ 722.631526][T15755] ? __pfx___might_resched+0x10/0x10 [ 722.631580][T15755] ? find_held_lock+0x2b/0x80 [ 722.631620][T15755] ? process_measurement+0x4c8/0x2350 [ 722.631701][T15755] ? process_measurement+0x4c8/0x2350 [ 722.631741][T15755] ? down_write+0x146/0x1f0 [ 722.631798][T15755] ? process_measurement+0x1f4/0x2350 [ 722.631846][T15755] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 722.631913][T15755] ? __lock_acquire+0x49f/0x1a40 [ 722.631985][T15755] ? find_held_lock+0x2b/0x80 [ 722.632033][T15755] ? is_bpf_text_address+0x8a/0x1a0 [ 722.632162][T15755] mmap_region+0x35d/0x620 [ 722.632205][T15755] ? __pfx_mmap_region+0x10/0x10 [ 722.632246][T15755] ? cap_mmap_addr+0x4b/0x120 [ 722.632309][T15755] ? bpf_lsm_mmap_addr+0x9/0x30 [ 722.632340][T15755] ? security_mmap_addr+0x71/0x1e0 [ 722.632388][T15755] ? __get_unmapped_area+0x255/0x3e0 [ 722.632441][T15755] do_mmap+0xc63/0x12f0 [ 722.632495][T15755] ? __pfx_do_mmap+0x10/0x10 [ 722.632542][T15755] ? __pfx_down_write_killable+0x10/0x10 [ 722.632596][T15755] vm_mmap_pgoff+0x29e/0x470 [ 722.632651][T15755] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 722.632714][T15755] ? __fget_files+0x215/0x3d0 [ 722.632755][T15755] ? __fget_files+0x21f/0x3d0 [ 722.632793][T15755] ksys_mmap_pgoff+0x3cb/0x610 [ 722.632845][T15755] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 722.632888][T15755] ? fput+0x79/0x100 [ 722.632928][T15755] ? ksys_write+0x1ac/0x250 [ 722.632958][T15755] ? __pfx_ksys_write+0x10/0x10 [ 722.632994][T15755] __x64_sys_mmap+0x125/0x190 [ 722.633063][T15755] do_syscall_64+0x115/0x840 [ 722.633102][T15755] ? clear_bhb_loop+0x40/0x90 [ 722.633145][T15755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.633178][T15755] RIP: 0033:0x7f37c319de99 [ 722.633206][T15755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.633237][T15755] RSP: 002b:00007f37c4039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 722.633268][T15755] RAX: ffffffffffffffda RBX: 00007f37c3425fa0 RCX: 00007f37c319de99 [ 722.633289][T15755] RDX: 0000000000000002 RSI: 0000000000040009 RDI: 0000000000000000 [ 722.633308][T15755] RBP: 00007f37c4039090 R08: 0000000000000003 R09: 0000000000028000 [ 722.633327][T15755] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 722.633346][T15755] R13: 00007f37c3426038 R14: 00007f37c3425fa0 R15: 00007fff104a1ce8 [ 722.633390][T15755] [ 723.225624][ T30] audit: type=1800 audit(4294967811.060:65): pid=15770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1322" name="members" dev="configfs" ino=97229 res=0 errno=0 [ 729.384267][ T30] audit: type=1800 audit(4294967817.220:66): pid=15880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1336" name="members" dev="configfs" ino=98071 res=0 errno=0 [ 729.477093][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1336'. [ 734.578416][ T30] audit: type=1800 audit(4294967822.410:67): pid=15981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1349" name="members" dev="configfs" ino=99675 res=0 errno=0 [ 734.742028][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 739.483849][T16057] FAULT_INJECTION: forcing a failure. [ 739.483849][T16057] name failslab, interval 1, probability 0, space 0, times 0 [ 739.502023][T16057] CPU: 0 UID: 0 PID: 16057 Comm: syz.2.1359 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.502078][T16057] Tainted: [L]=SOFTLOCKUP [ 739.502090][T16057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 739.502108][T16057] Call Trace: [ 739.502119][T16057] [ 739.502132][T16057] dump_stack_lvl+0x100/0x190 [ 739.502175][T16057] should_fail_ex.cold+0x5/0xa [ 739.502212][T16057] should_failslab+0xc2/0x120 [ 739.502258][T16057] kmem_cache_alloc_noprof+0x91/0x6a0 [ 739.502302][T16057] ? mpol_new+0x11b/0x2d0 [ 739.502360][T16057] mpol_new+0x11b/0x2d0 [ 739.502404][T16057] do_mbind+0x210/0xfd0 [ 739.502449][T16057] ? __pfx_do_mbind+0x10/0x10 [ 739.502479][T16057] ? find_held_lock+0x2b/0x80 [ 739.502523][T16057] ? ksys_write+0x190/0x250 [ 739.502569][T16057] ? __pfx_get_nodes+0x10/0x10 [ 739.502613][T16057] ? __fget_files+0x21f/0x3d0 [ 739.502652][T16057] kernel_mbind+0x1b7/0x200 [ 739.502688][T16057] ? __pfx_kernel_mbind+0x10/0x10 [ 739.502734][T16057] do_syscall_64+0x115/0x840 [ 739.502774][T16057] ? clear_bhb_loop+0x40/0x90 [ 739.502814][T16057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.502847][T16057] RIP: 0033:0x7f37c319de99 [ 739.502873][T16057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.502904][T16057] RSP: 002b:00007f37c3fb5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 739.502932][T16057] RAX: ffffffffffffffda RBX: 00007f37c3426360 RCX: 00007f37c319de99 [ 739.502954][T16057] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 739.502972][T16057] RBP: 00007f37c3fb5090 R08: 0000000000000006 R09: 0000000000000002 [ 739.502992][T16057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.503011][T16057] R13: 00007f37c34263f8 R14: 00007f37c3426360 R15: 00007fff104a1ce8 [ 739.503054][T16057] [ 740.607882][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 745.853662][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'. [ 747.505272][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.511895][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.947232][T16245] vivid-007: ================= START STATUS ================= [ 749.957008][T16245] vivid-007: Generate PTS: true [ 749.964616][T16245] vivid-007: Generate SCR: true [ 749.980011][T16245] tpg source WxH: 320x240 (Y'CbCr) [ 749.985669][T16245] tpg field: 1 [ 749.990064][T16245] tpg crop: (0,0)/320x240 [ 749.995687][T16245] tpg compose: (0,0)/320x240 [ 750.002543][T16245] tpg colorspace: 8 [ 750.006455][T16245] tpg transfer function: 0/0 [ 750.017935][T16245] tpg Y'CbCr encoding: 0/0 [ 750.023018][T16245] tpg quantization: 0/0 [ 750.031400][T16245] tpg RGB range: 0/2 [ 750.039079][T16245] vivid-007: ================== END STATUS ================== [ 751.265299][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'. [ 756.450411][ T30] audit: type=1800 audit(4294967844.280:68): pid=16376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1400" name="members" dev="configfs" ino=103589 res=0 errno=0 [ 756.604104][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1400'. [ 761.739461][ T30] audit: type=1800 audit(4294967849.570:69): pid=16481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1413" name="members" dev="configfs" ino=103993 res=0 errno=0 [ 761.934897][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1413'. [ 768.069748][ T30] audit: type=1800 audit(4294967855.900:70): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1425" name="members" dev="configfs" ino=105208 res=0 errno=0 [ 768.328705][T16588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'. [ 773.799645][ T30] audit: type=1800 audit(4294967861.630:71): pid=16694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1438" name="members" dev="configfs" ino=106752 res=0 errno=0 [ 773.918650][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1438'. [ 779.544087][ T30] audit: type=1800 audit(4294967867.380:72): pid=16802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1453" name="members" dev="configfs" ino=107203 res=0 errno=0 [ 779.689644][T16806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1453'. [ 785.527608][ T30] audit: type=1800 audit(4294967873.360:73): pid=16904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1466" name="members" dev="configfs" ino=108718 res=0 errno=0 [ 785.646183][T16909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'. [ 791.059749][ T30] audit: type=1800 audit(4294967878.890:74): pid=17009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1479" name="members" dev="configfs" ino=109718 res=0 errno=0 [ 791.152610][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 795.861035][ T30] audit: type=1800 audit(4294967883.690:75): pid=17097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1490" name="members" dev="configfs" ino=109958 res=0 errno=0 [ 796.017805][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'. [ 801.784466][ T30] audit: type=1800 audit(4294967889.610:76): pid=17201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1501" name="members" dev="configfs" ino=111237 res=0 errno=0 [ 808.943883][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.950435][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.639420][ T30] audit: type=1800 audit(4294967897.470:77): pid=17330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1515" name="members" dev="configfs" ino=112694 res=0 errno=0 [ 811.533625][ T30] audit: type=1800 audit(4294967899.370:78): pid=17363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1521" name="members" dev="configfs" ino=112069 res=0 errno=0 [ 811.682210][T17365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'. [ 813.030185][ T30] audit: type=1800 audit(4294967900.860:79): pid=17388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1524" name="members" dev="configfs" ino=112964 res=0 errno=0 [ 813.180028][T17390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1524'. [ 824.453424][ T30] audit: type=1800 audit(4294967912.290:80): pid=17582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1547" name="members" dev="configfs" ino=114234 res=0 errno=0 [ 824.594812][T17585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'. [ 829.398781][ T30] audit: type=1800 audit(4294967917.220:81): pid=17650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1565" name="members" dev="configfs" ino=114470 res=0 errno=0 [ 829.875241][T17652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1565'. [ 833.740185][ T30] audit: type=1800 audit(4294967921.570:82): pid=17713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1564" name="members" dev="configfs" ino=115913 res=0 errno=0 [ 833.858727][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1564'. [ 843.117703][ T30] audit: type=1800 audit(4294967930.950:83): pid=17837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1590" name="members" dev="configfs" ino=116303 res=0 errno=0 [ 843.286946][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1590'. [ 866.547605][T18207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1630'. [ 870.383807][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.393998][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.869742][ T30] audit: type=1800 audit(4294967960.700:84): pid=18314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1643" name="members" dev="configfs" ino=121065 res=0 errno=0 [ 872.994070][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1643'. [ 878.469511][ T30] audit: type=1800 audit(4294967966.300:85): pid=18408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1656" name="members" dev="configfs" ino=122116 res=0 errno=0 [ 878.632929][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'. [ 881.186469][ T30] audit: type=1800 audit(4294967969.020:86): pid=18469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1662" name="members" dev="configfs" ino=122921 res=0 errno=0 [ 887.449282][ T30] audit: type=1800 audit(4294967975.280:87): pid=18561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1684" name="members" dev="configfs" ino=122743 res=0 errno=0 [ 887.676691][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'. [ 893.314823][ T30] audit: type=1800 audit(4294967981.150:88): pid=18651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1688" name="members" dev="configfs" ino=124109 res=0 errno=0 [ 893.463062][T18654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1688'. [ 895.165311][ T30] audit: type=1800 audit(4294967983.000:89): pid=18675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1690" name="members" dev="configfs" ino=123839 res=0 errno=0 [ 895.273772][T18677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1690'. [ 899.814897][ T30] audit: type=1800 audit(4294967987.650:90): pid=18756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1699" name="members" dev="configfs" ino=124548 res=0 errno=0 [ 899.980050][T18759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1699'. [ 900.778875][ T30] audit: type=1800 audit(4294967988.610:91): pid=18773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1703" name="members" dev="configfs" ino=125266 res=0 errno=0 [ 900.948835][T18776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1703'. [ 903.837151][ T30] audit: type=1800 audit(4294967991.670:92): pid=18823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1709" name="members" dev="configfs" ino=125528 res=0 errno=0 [ 903.990657][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 905.846818][ T30] audit: type=1800 audit(4294967993.680:93): pid=18853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1720" name="members" dev="configfs" ino=126080 res=0 errno=0 [ 906.078310][T18854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1720'. [ 906.559565][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1712'. [ 907.551839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 909.962951][ T30] audit: type=1800 audit(4294967997.800:94): pid=18909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1722" name="members" dev="configfs" ino=127114 res=0 errno=0 [ 910.111508][T18914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1722'. [ 912.779110][ T30] audit: type=1800 audit(4294968000.610:95): pid=18960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1727" name="members" dev="configfs" ino=127418 res=0 errno=0 [ 913.089559][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'. [ 914.142520][T18990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'. [ 915.990687][ T30] audit: type=1800 audit(4294968003.820:96): pid=19018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1735" name="members" dev="configfs" ino=126856 res=0 errno=0 [ 920.460712][ T30] audit: type=1800 audit(4294968008.290:97): pid=19089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1751" name="members" dev="configfs" ino=129129 res=0 errno=0 [ 920.570027][T19091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1751'. [ 925.904394][ T30] audit: type=1800 audit(4294968013.740:98): pid=19181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1755" name="members" dev="configfs" ino=129624 res=0 errno=0 [ 931.827636][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.835600][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.563156][ T30] audit: type=1800 audit(4294968023.400:99): pid=19336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1775" name="members" dev="configfs" ino=131248 res=0 errno=0 [ 937.573151][ T30] audit: type=1800 audit(4294968025.400:100): pid=19359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1778" name="members" dev="configfs" ino=131397 res=0 errno=0 [ 937.713284][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1778'. [ 939.470075][T19393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 941.182283][ T30] audit: type=1800 audit(4294968029.010:101): pid=19417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1786" name="members" dev="configfs" ino=130877 res=0 errno=0 [ 941.369920][T19419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'. [ 942.911349][ T30] audit: type=1800 audit(4294968030.740:102): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1789" name="members" dev="configfs" ino=132197 res=0 errno=0 [ 943.096952][T19449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1789'. [ 943.409184][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1791'. [ 944.882291][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1795'. [ 945.854276][ T30] audit: type=1800 audit(4294968033.690:103): pid=19507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1797" name="members" dev="configfs" ino=132502 res=0 errno=0 [ 946.029176][T19511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 951.532274][ T30] audit: type=1800 audit(4294968039.360:104): pid=19602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1810" name="members" dev="configfs" ino=134011 res=0 errno=0 [ 951.661306][T19606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 953.186374][ T30] audit: type=1800 audit(4294968041.020:105): pid=19615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1813" name="members" dev="configfs" ino=134090 res=0 errno=0 [ 955.510190][T19643] FAULT_INJECTION: forcing a failure. [ 955.510190][T19643] name failslab, interval 1, probability 0, space 0, times 0 [ 955.549145][T19643] CPU: 0 UID: 0 PID: 19643 Comm: syz.4.1816 Tainted: G L syzkaller #0 PREEMPT(full) [ 955.549196][T19643] Tainted: [L]=SOFTLOCKUP [ 955.549209][T19643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 955.549228][T19643] Call Trace: [ 955.549239][T19643] [ 955.549252][T19643] dump_stack_lvl+0x100/0x190 [ 955.549299][T19643] should_fail_ex.cold+0x5/0xa [ 955.549337][T19643] should_failslab+0xc2/0x120 [ 955.549387][T19643] kmem_cache_alloc_noprof+0x91/0x6a0 [ 955.549441][T19643] ? __pfx_map_id_range_down+0x10/0x10 [ 955.549519][T19643] ? security_inode_alloc+0x3b/0x2c0 [ 955.549568][T19643] security_inode_alloc+0x3b/0x2c0 [ 955.549609][T19643] inode_init_always_gfp+0xc77/0xfb0 [ 955.549649][T19643] alloc_inode+0x8e/0x250 [ 955.549693][T19643] sock_alloc+0x44/0x280 [ 955.549750][T19643] ? security_socket_create+0x7f/0x250 [ 955.549792][T19643] __sock_create+0xc2/0x860 [ 955.549834][T19643] __sys_socket+0x14d/0x260 [ 955.549928][T19643] ? fput+0x79/0x100 [ 955.549966][T19643] ? __pfx___sys_socket+0x10/0x10 [ 955.550001][T19643] ? ksys_write+0x1ac/0x250 [ 955.550032][T19643] ? __pfx_ksys_write+0x10/0x10 [ 955.550072][T19643] __x64_sys_socket+0x72/0xb0 [ 955.550107][T19643] ? lockdep_hardirqs_on+0x78/0x100 [ 955.550152][T19643] do_syscall_64+0x115/0x840 [ 955.550191][T19643] ? clear_bhb_loop+0x40/0x90 [ 955.550234][T19643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.550270][T19643] RIP: 0033:0x7fdaadb9de99 [ 955.550298][T19643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.550330][T19643] RSP: 002b:00007fdaaeafc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 955.550363][T19643] RAX: ffffffffffffffda RBX: 00007fdaade26090 RCX: 00007fdaadb9de99 [ 955.550386][T19643] RDX: 0000000000000008 RSI: 0000000000080000 RDI: 000000000000000a [ 955.550406][T19643] RBP: 00007fdaaeafc090 R08: 0000000000000000 R09: 0000000000000000 [ 955.550427][T19643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.550447][T19643] R13: 00007fdaade26128 R14: 00007fdaade26090 R15: 00007ffd8c76d778 [ 955.550490][T19643] [ 955.550585][T19643] socket: no more sockets [ 956.884944][ T30] audit: type=1800 audit(4294968044.720:106): pid=19674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1820" name="members" dev="configfs" ino=135361 res=0 errno=0 [ 957.081464][T19675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 957.432475][T19682] FAULT_INJECTION: forcing a failure. [ 957.432475][T19682] name failslab, interval 1, probability 0, space 0, times 0 [ 957.482081][T19682] CPU: 0 UID: 0 PID: 19682 Comm: syz.0.1821 Tainted: G L syzkaller #0 PREEMPT(full) [ 957.482136][T19682] Tainted: [L]=SOFTLOCKUP [ 957.482147][T19682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 957.482168][T19682] Call Trace: [ 957.482179][T19682] [ 957.482191][T19682] dump_stack_lvl+0x100/0x190 [ 957.482247][T19682] should_fail_ex.cold+0x5/0xa [ 957.482287][T19682] should_failslab+0xc2/0x120 [ 957.482337][T19682] kmem_cache_alloc_noprof+0x91/0x6a0 [ 957.482383][T19682] ? mas_preallocate+0x1105/0x14a0 [ 957.482446][T19682] mas_preallocate+0x1105/0x14a0 [ 957.482507][T19682] ? __pfx_mas_preallocate+0x10/0x10 [ 957.482573][T19682] ? anon_vma_name+0x5a/0x250 [ 957.482645][T19682] __split_vma+0x33d/0xda0 [ 957.482687][T19682] ? __pfx___split_vma+0x10/0x10 [ 957.482733][T19682] ? __pfx_mas_prev+0x10/0x10 [ 957.482793][T19682] vms_gather_munmap_vmas+0x3a5/0x1720 [ 957.482834][T19682] ? validate_mm+0x392/0x4e0 [ 957.482871][T19682] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 957.482910][T19682] ? __pfx_validate_mm+0x10/0x10 [ 957.482972][T19682] do_vmi_align_munmap+0x287/0x5f0 [ 957.483016][T19682] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 957.483059][T19682] ? cap_mmap_addr+0x4b/0x120 [ 957.483190][T19682] do_vmi_munmap+0x1f8/0x3e0 [ 957.483236][T19682] __vm_munmap+0x196/0x390 [ 957.483273][T19682] ? __pfx___vm_munmap+0x10/0x10 [ 957.483330][T19682] __x64_sys_munmap+0x59/0x80 [ 957.483379][T19682] do_syscall_64+0x115/0x840 [ 957.483415][T19682] ? clear_bhb_loop+0x40/0x90 [ 957.483449][T19682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.483478][T19682] RIP: 0033:0x7f86b2d9dcc7 [ 957.483503][T19682] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.483532][T19682] RSP: 002b:00007f86b3cbed18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 957.483561][T19682] RAX: ffffffffffffffda RBX: 00007f86ac000000 RCX: 00007f86b2d9dcc7 [ 957.483581][T19682] RDX: 0000000000000000 RSI: 0000000003e00000 RDI: 00007f86a8200000 [ 957.483609][T19682] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 957.483628][T19682] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 957.483646][T19682] R13: 0000000000001000 R14: 00007f86b0000000 R15: 0000000003e00000 [ 957.483684][T19682] [ 961.603217][T12868] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 961.616195][T12868] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 968.555109][T19856] FAULT_INJECTION: forcing a failure. [ 968.555109][T19856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.607394][T19856] CPU: 1 UID: 0 PID: 19856 Comm: syz.1.1847 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.607445][T19856] Tainted: [L]=SOFTLOCKUP [ 968.607457][T19856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 968.607476][T19856] Call Trace: [ 968.607487][T19856] [ 968.607499][T19856] dump_stack_lvl+0x100/0x190 [ 968.607543][T19856] should_fail_ex.cold+0x5/0xa [ 968.607580][T19856] _copy_to_user+0x32/0xd0 [ 968.607636][T19856] fs_name+0x25e/0x4a0 [ 968.607676][T19856] __x64_sys_sysfs+0xe6/0x120 [ 968.607717][T19856] do_syscall_64+0x115/0x840 [ 968.607757][T19856] ? clear_bhb_loop+0x40/0x90 [ 968.607807][T19856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.607841][T19856] RIP: 0033:0x7f3fd119de99 [ 968.607868][T19856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.607903][T19856] RSP: 002b:00007f3fcf3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 968.607933][T19856] RAX: ffffffffffffffda RBX: 00007f3fd1426450 RCX: 00007f3fd119de99 [ 968.607955][T19856] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000000000000002 [ 968.607974][T19856] RBP: 00007f3fcf3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 968.607993][T19856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.608013][T19856] R13: 00007f3fd14264e8 R14: 00007f3fd1426450 R15: 00007fff3aa6ea68 [ 968.608055][T19856] [ 970.510626][T19872] blktrace: Concurrent blktraces are not allowed on ram10 [ 970.674342][ T112] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.924090][ T112] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.086049][ T112] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.272487][ T112] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.285265][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 971.298486][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 971.308274][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 971.318685][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 971.328025][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 971.407805][T12868] Bluetooth: hci3: unexpected subevent 0x01 length: 3 < 18 [ 971.412403][T19884] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(538997619.538976288.542591008), cmd(2) [ 971.603599][ T112] bridge_slave_1: left allmulticast mode [ 971.620201][ T112] bridge_slave_1: left promiscuous mode [ 971.641338][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.696372][ T112] bridge_slave_0: left allmulticast mode [ 971.718510][ T112] bridge_slave_0: left promiscuous mode [ 971.734708][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.179831][ T112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.212654][ T112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.236661][ T112] bond0 (unregistering): Released all slaves [ 973.424146][T12868] Bluetooth: hci1: command tx timeout [ 973.931974][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 975.512974][T12868] Bluetooth: hci1: command tx timeout [ 976.048125][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 976.904486][T19885] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.933860][T19885] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.958333][T19885] bridge_slave_0: entered allmulticast mode [ 976.990865][T19885] bridge_slave_0: entered promiscuous mode [ 977.089814][T19885] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.122210][T19885] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.143231][T19885] bridge_slave_1: entered allmulticast mode [ 977.162821][T19885] bridge_slave_1: entered promiscuous mode [ 977.374821][T19885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.427053][T19885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.581747][T12868] Bluetooth: hci1: command tx timeout [ 977.620960][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 977.639348][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 977.647797][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 977.658189][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 977.667795][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 977.722642][T19885] team0: Port device team_slave_0 added [ 977.771385][T19885] team0: Port device team_slave_1 added [ 978.042991][T19885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.057774][T19885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.132644][T19885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.262084][T19885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.289995][T19885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.355108][T19885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.744854][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 978.786022][T19885] hsr_slave_0: entered promiscuous mode [ 978.802451][T19885] hsr_slave_1: entered promiscuous mode [ 978.813866][T19885] debugfs: 'hsr0' already exists in 'hsr' [ 978.819725][T19885] Cannot create hsr debugfs directory [ 979.661685][T12868] Bluetooth: hci1: command tx timeout [ 979.741048][T12868] Bluetooth: hci4: command tx timeout [ 979.897950][T20008] FAULT_INJECTION: forcing a failure. [ 979.897950][T20008] name failslab, interval 1, probability 0, space 0, times 0 [ 979.938751][T20008] CPU: 1 UID: 0 PID: 20008 Comm: syz.2.1864 Tainted: G L syzkaller #0 PREEMPT(full) [ 979.938792][T20008] Tainted: [L]=SOFTLOCKUP [ 979.938801][T20008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 979.938816][T20008] Call Trace: [ 979.938823][T20008] [ 979.938833][T20008] dump_stack_lvl+0x100/0x190 [ 979.938866][T20008] should_fail_ex.cold+0x5/0xa [ 979.938894][T20008] should_failslab+0xc2/0x120 [ 979.938930][T20008] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 979.938963][T20008] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 979.938991][T20008] ? __d_alloc+0x35/0xa50 [ 979.939023][T20008] __d_alloc+0x35/0xa50 [ 979.939053][T20008] d_alloc_pseudo+0x1c/0xc0 [ 979.939088][T20008] alloc_file_pseudo+0x118/0x290 [ 979.939123][T20008] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 979.939155][T20008] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 979.939203][T20008] create_pipe_files+0x360/0x970 [ 979.939237][T20008] do_pipe2+0xbd/0x1e0 [ 979.939263][T20008] ? __pfx_do_pipe2+0x10/0x10 [ 979.939289][T20008] ? xfd_validate_state+0x129/0x190 [ 979.939334][T20008] __x64_sys_pipe2+0x54/0x80 [ 979.939362][T20008] do_syscall_64+0x115/0x840 [ 979.939392][T20008] ? clear_bhb_loop+0x40/0x90 [ 979.939422][T20008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.939448][T20008] RIP: 0033:0x7f37c319de99 [ 979.939468][T20008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.939493][T20008] RSP: 002b:00007f37c4039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 979.939518][T20008] RAX: ffffffffffffffda RBX: 00007f37c3425fa0 RCX: 00007f37c319de99 [ 979.939535][T20008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 979.939549][T20008] RBP: 00007f37c3233eaf R08: 0000000000000000 R09: 0000000000000000 [ 979.939564][T20008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.939579][T20008] R13: 00007f37c3426038 R14: 00007f37c3425fa0 R15: 00007fff104a1ce8 [ 979.939610][T20008] [ 981.831010][T12868] Bluetooth: hci4: command tx timeout [ 982.628547][ T30] audit: type=1800 audit(4294967315.960:107): pid=20053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1867" name="members" dev="configfs" ino=136785 res=0 errno=0 [ 983.078422][T19885] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 983.102423][T19885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 983.227218][T19885] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 983.246419][T19885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 983.255508][T19969] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.263927][T19969] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.271941][T19969] bridge_slave_0: entered allmulticast mode [ 983.280481][T19969] bridge_slave_0: entered promiscuous mode [ 983.309579][T19969] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.319444][T19969] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.327353][T19969] bridge_slave_1: entered allmulticast mode [ 983.339226][T19969] bridge_slave_1: entered promiscuous mode [ 983.361680][T19885] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 983.391271][T19885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 983.409784][T19885] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 983.435121][T19885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 983.782893][T19969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.819040][T19969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.901555][T12868] Bluetooth: hci4: command tx timeout [ 984.018164][T19969] team0: Port device team_slave_0 added [ 984.085143][T19969] team0: Port device team_slave_1 added [ 984.420828][T19969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.437341][T19969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.479511][T19969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.554875][T19969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.571198][T19969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.598153][T19969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.263491][T19969] hsr_slave_0: entered promiscuous mode [ 985.273585][T19969] hsr_slave_1: entered promiscuous mode [ 985.280300][T19969] debugfs: 'hsr0' already exists in 'hsr' [ 985.293507][T19969] Cannot create hsr debugfs directory [ 985.851696][ T112] hsr_slave_0: left promiscuous mode [ 985.868132][ T112] hsr_slave_1: left promiscuous mode [ 985.878068][ T112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.892506][ T112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.934926][ T112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.942863][ T112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.980986][T12868] Bluetooth: hci4: command tx timeout [ 985.992373][ T112] veth1_macvtap: left promiscuous mode [ 985.997968][ T112] veth0_macvtap: left promiscuous mode [ 986.004606][ T112] veth1_vlan: left promiscuous mode [ 986.009973][ T112] veth0_vlan: left promiscuous mode [ 986.518965][ T112] team0 (unregistering): Port device team_slave_1 removed [ 986.549999][ T112] team0 (unregistering): Port device team_slave_0 removed [ 987.470389][T19885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.739045][T19885] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.815301][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.822636][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.857223][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.864470][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.019338][T19969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 988.040363][T19969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 988.208919][ T112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.283438][T19969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 988.315821][T19969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.342460][T19969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 988.375629][T19969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 988.390667][T19969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 988.442624][T19969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 988.564138][ T112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.801830][ T112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.176423][ T112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.585070][T19969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.439814][T19969] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.613653][ T112] bridge_slave_1: left allmulticast mode [ 990.632686][ T112] bridge_slave_1: left promiscuous mode [ 990.640486][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.657749][ T112] bridge_slave_0: left allmulticast mode [ 990.674252][ T112] bridge_slave_0: left promiscuous mode [ 990.689463][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.867394][ T112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.879132][ T112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.892603][ T112] bond0 (unregistering): Released all slaves [ 990.947918][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.955203][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.036459][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.043763][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.145526][T19885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.951637][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 993.029523][T19885] veth0_vlan: entered promiscuous mode [ 993.266100][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.276750][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.436883][T19885] veth1_vlan: entered promiscuous mode [ 993.799853][T19885] veth0_macvtap: entered promiscuous mode [ 993.890352][T19885] veth1_macvtap: entered promiscuous mode [ 993.999231][T19969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.131413][T19885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.205520][T19885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.290452][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.328492][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.344195][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.370264][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.496983][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.546659][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.683360][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 996.136711][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.161113][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.309525][T19969] veth0_vlan: entered promiscuous mode [ 996.358241][T19969] veth1_vlan: entered promiscuous mode [ 996.596415][T19969] veth0_macvtap: entered promiscuous mode [ 996.665734][T19969] veth1_macvtap: entered promiscuous mode [ 996.818300][T19969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.918536][T19969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.078351][ T1115] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.116499][ T1115] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.197586][ T1115] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.221467][ T1115] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.486856][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 997.997166][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.009189][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.573111][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.614268][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.956454][ T5290] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1000.637267][T20327] Process accounting resumed [ 1001.319794][ T112] hsr_slave_0: left promiscuous mode [ 1001.331608][ T112] hsr_slave_1: left promiscuous mode [ 1001.354246][ T112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.389298][ T112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.414765][ T112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.444269][ T112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.546203][ T112] veth1_macvtap: left promiscuous mode [ 1001.568191][ T112] veth0_macvtap: left promiscuous mode [ 1001.603393][ T112] veth1_vlan: left promiscuous mode [ 1001.628575][ T112] veth0_vlan: left promiscuous mode [ 1003.120148][ T112] team0 (unregistering): Port device team_slave_1 removed [ 1003.218862][ T112] team0 (unregistering): Port device team_slave_0 removed [ 1008.295793][T20461] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1008.314892][T20461] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1012.947444][T20519] hub 1-0:1.0: USB hub found [ 1012.970684][T20519] hub 1-0:1.0: 1 port detected [ 1014.828530][T20574] FAULT_INJECTION: forcing a failure. [ 1014.828530][T20574] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.918248][T20574] CPU: 0 UID: 0 PID: 20574 Comm: syz.2.1916 Tainted: G L syzkaller #0 PREEMPT(full) [ 1014.918300][T20574] Tainted: [L]=SOFTLOCKUP [ 1014.918311][T20574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1014.918332][T20574] Call Trace: [ 1014.918342][T20574] [ 1014.918354][T20574] dump_stack_lvl+0x100/0x190 [ 1014.918397][T20574] should_fail_ex.cold+0x5/0xa [ 1014.918435][T20574] should_failslab+0xc2/0x120 [ 1014.918482][T20574] __kmalloc_noprof+0xfc/0x820 [ 1014.918522][T20574] ? rcu_is_watching+0x12/0xc0 [ 1014.918603][T20574] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1014.918725][T20574] tomoyo_realpath_from_path+0xb6/0x690 [ 1014.918794][T20574] tomoyo_path_number_perm+0x23c/0x580 [ 1014.918837][T20574] ? tomoyo_path_number_perm+0x22e/0x580 [ 1014.918883][T20574] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1014.918967][T20574] ? find_held_lock+0x2b/0x80 [ 1014.919007][T20574] ? __fget_files+0x215/0x3d0 [ 1014.919035][T20574] ? hook_file_ioctl_common+0x140/0x440 [ 1014.919078][T20574] ? __fget_files+0x215/0x3d0 [ 1014.919115][T20574] ? __fget_files+0x21f/0x3d0 [ 1014.919153][T20574] security_file_ioctl+0xd3/0x230 [ 1014.919198][T20574] __x64_sys_ioctl+0xb7/0x210 [ 1014.919249][T20574] do_syscall_64+0x115/0x840 [ 1014.919289][T20574] ? clear_bhb_loop+0x40/0x90 [ 1014.919330][T20574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.919364][T20574] RIP: 0033:0x7f37c319de99 [ 1014.919390][T20574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.919420][T20574] RSP: 002b:00007f37c3ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1014.919452][T20574] RAX: ffffffffffffffda RBX: 00007f37c3426180 RCX: 00007f37c319de99 [ 1014.919474][T20574] RDX: 0000000000000008 RSI: 000000000000541b RDI: 0000000000000001 [ 1014.919493][T20574] RBP: 00007f37c3ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.919513][T20574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.919531][T20574] R13: 00007f37c3426218 R14: 00007f37c3426180 R15: 00007fff104a1ce8 [ 1014.919574][T20574] [ 1015.132821][T20574] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1020.010377][ T30] audit: type=1800 audit(4294967353.340:108): pid=20669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1928" name="members" dev="configfs" ino=142279 res=0 errno=0 [ 1023.919864][T20739] FAULT_INJECTION: forcing a failure. [ 1023.919864][T20739] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1023.959677][T20739] CPU: 0 UID: 0 PID: 20739 Comm: syz.2.1938 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.959717][T20739] Tainted: [L]=SOFTLOCKUP [ 1023.959726][T20739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1023.959742][T20739] Call Trace: [ 1023.959750][T20739] [ 1023.959760][T20739] dump_stack_lvl+0x100/0x190 [ 1023.959801][T20739] should_fail_ex.cold+0x5/0xa [ 1023.959828][T20739] ? prepare_alloc_pages+0x16d/0x5f0 [ 1023.959877][T20739] should_fail_alloc_page+0xeb/0x140 [ 1023.959920][T20739] prepare_alloc_pages+0x1f0/0x5f0 [ 1023.959966][T20739] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1023.959999][T20739] ? __kernel_text_address+0xd/0x30 [ 1023.960088][T20739] ? arch_stack_walk+0xa6/0xf0 [ 1023.960165][T20739] ? __lock_acquire+0x49f/0x1a40 [ 1023.960215][T20739] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1023.960249][T20739] ? __css_rstat_updated+0x1ce/0x5a0 [ 1023.960301][T20739] ? do_raw_spin_lock+0x128/0x260 [ 1023.960332][T20739] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1023.960367][T20739] ? find_held_lock+0x2b/0x80 [ 1023.960428][T20739] ? __lock_acquire+0x49f/0x1a40 [ 1023.960477][T20739] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1023.960524][T20739] ? policy_nodemask+0xed/0x4f0 [ 1023.960572][T20739] alloc_pages_mpol+0x1fb/0x540 [ 1023.960620][T20739] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1023.960677][T20739] folio_alloc_mpol_noprof+0x36/0x260 [ 1023.960733][T20739] shmem_alloc_folio+0x135/0x160 [ 1023.960779][T20739] shmem_alloc_and_add_folio+0x371/0xd40 [ 1023.960814][T20739] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1023.960849][T20739] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1023.960893][T20739] shmem_get_folio_gfp+0x6ad/0x1910 [ 1023.960930][T20739] ? filemap_map_pages+0x112d/0x1fe0 [ 1023.960959][T20739] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1023.960998][T20739] ? filemap_map_pages+0x1137/0x1fe0 [ 1023.961032][T20739] shmem_fault+0x1f9/0xa20 [ 1023.961065][T20739] ? __pfx_shmem_fault+0x10/0x10 [ 1023.961105][T20739] ? __pfx_filemap_map_pages+0x10/0x10 [ 1023.961136][T20739] ? find_held_lock+0x2b/0x80 [ 1023.961178][T20739] __do_fault+0x10b/0x440 [ 1023.961217][T20739] do_fault+0xa99/0x1750 [ 1023.961269][T20739] __handle_mm_fault+0x187d/0x2a00 [ 1023.961308][T20739] ? mt_find+0x45e/0x8e0 [ 1023.961354][T20739] ? __pfx___handle_mm_fault+0x10/0x10 [ 1023.961384][T20739] ? __pfx_mt_find+0x10/0x10 [ 1023.961460][T20739] ? find_vma+0xbf/0x140 [ 1023.961500][T20739] ? __pfx_find_vma+0x10/0x10 [ 1023.961546][T20739] handle_mm_fault+0x37b/0xa30 [ 1023.961588][T20739] do_user_addr_fault+0x74c/0x12f0 [ 1023.961663][T20739] exc_page_fault+0x6f/0xd0 [ 1023.961705][T20739] asm_exc_page_fault+0x26/0x30 [ 1023.961739][T20739] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1023.961851][T20739] Code: 9e 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 9e 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1023.961884][T20739] RSP: 0018:ffffc90003e87b30 EFLAGS: 00050206 [ 1023.961911][T20739] RAX: 0000000000000001 RBX: ffff88805f660000 RCX: 000000000000adef [ 1023.961931][T20739] RDX: 0000000000000001 RSI: 0000000000005000 RDI: ffff88805f665000 [ 1023.961952][T20739] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100becdfbd [ 1023.961973][T20739] R10: ffff88805f66fdee R11: 0000000000000000 R12: ffffc90003e87d80 [ 1023.961994][T20739] R13: 0000000000000000 R14: 000000000000fdef R15: 0000000000000000 [ 1023.962036][T20739] _copy_from_iter+0x355/0x1690 [ 1023.962099][T20739] ? rcu_is_watching+0x12/0xc0 [ 1023.962141][T20739] ? __pfx__copy_from_iter+0x10/0x10 [ 1023.962196][T20739] ? __kvmalloc_node_noprof+0x616/0x970 [ 1023.962244][T20739] ? ns_capable_noaudit+0xd5/0x100 [ 1023.962288][T20739] ? proc_sys_call_handler+0x2c7/0x5a0 [ 1023.962368][T20739] proc_sys_call_handler+0x3ed/0x5a0 [ 1023.962415][T20739] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1023.962463][T20739] vfs_write+0x6ac/0x1050 [ 1023.962498][T20739] ? __pfx_proc_sys_write+0x10/0x10 [ 1023.962535][T20739] ? __pfx_vfs_write+0x10/0x10 [ 1023.962593][T20739] ksys_write+0x12a/0x250 [ 1023.962626][T20739] ? __pfx_ksys_write+0x10/0x10 [ 1023.962670][T20739] do_syscall_64+0x115/0x840 [ 1023.962711][T20739] ? clear_bhb_loop+0x40/0x90 [ 1023.962754][T20739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.962789][T20739] RIP: 0033:0x7f37c319de99 [ 1023.962816][T20739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.962848][T20739] RSP: 002b:00007f37c4018028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1023.962877][T20739] RAX: ffffffffffffffda RBX: 00007f37c3426090 RCX: 00007f37c319de99 [ 1023.962900][T20739] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1023.962919][T20739] RBP: 00007f37c4018090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.962939][T20739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.962959][T20739] R13: 00007f37c3426128 R14: 00007f37c3426090 R15: 00007fff104a1ce8 [ 1023.963003][T20739] [ 1024.982560][ T30] audit: type=1800 audit(4294967358.320:109): pid=20756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1941" name="members" dev="configfs" ino=142853 res=0 errno=0 [ 1030.207250][ T30] audit: type=1800 audit(4294967363.540:110): pid=20842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1953" name="members" dev="configfs" ino=143964 res=0 errno=0 [ 1031.774532][T20832] Process accounting paused [ 1032.107397][T20868] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1032.205183][T20870] bridge0: port 3(ipvlan1) entered blocking state [ 1032.246310][T20870] bridge0: port 3(ipvlan1) entered disabled state [ 1032.271551][T20870] ipvlan1: entered allmulticast mode [ 1032.287076][T20870] veth0_vlan: entered allmulticast mode [ 1032.304787][T20870] FAULT_INJECTION: forcing a failure. [ 1032.304787][T20870] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.340055][T20870] CPU: 1 UID: 0 PID: 20870 Comm: syz.1.1959 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.340113][T20870] Tainted: [L]=SOFTLOCKUP [ 1032.340126][T20870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1032.340147][T20870] Call Trace: [ 1032.340158][T20870] [ 1032.340171][T20870] dump_stack_lvl+0x100/0x190 [ 1032.340220][T20870] should_fail_ex.cold+0x5/0xa [ 1032.340261][T20870] should_failslab+0xc2/0x120 [ 1032.340314][T20870] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1032.340370][T20870] ? __kernfs_new_node+0xd2/0xa10 [ 1032.340448][T20870] __kernfs_new_node+0xd2/0xa10 [ 1032.340490][T20870] ? __pfx___kernfs_new_node+0x10/0x10 [ 1032.340538][T20870] ? find_held_lock+0x2b/0x80 [ 1032.340584][T20870] ? kernfs_root+0xee/0x2a0 [ 1032.340636][T20870] ? kernfs_root+0xee/0x2a0 [ 1032.340698][T20870] kernfs_new_node+0x117/0x150 [ 1032.340741][T20870] __kernfs_create_file+0x53/0x350 [ 1032.340854][T20870] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1032.340914][T20870] sysfs_create_file_ns+0x145/0x1e0 [ 1032.340968][T20870] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1032.341020][T20870] ? kernfs_create_link+0x1bd/0x240 [ 1032.341066][T20870] ? kernfs_put+0x3f/0x60 [ 1032.341123][T20870] ? sysfs_do_create_link_sd+0xbb/0x140 [ 1032.341184][T20870] br_sysfs_addif+0xe4/0x210 [ 1032.341280][T20870] br_add_if+0x82c/0x1c80 [ 1032.341390][T20870] ? security_capable+0x80/0x260 [ 1032.341436][T20870] add_del_if+0x114/0x160 [ 1032.341494][T20870] br_dev_siocdevprivate+0x8b5/0x1660 [ 1032.341555][T20870] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 1032.341636][T20870] ? do_raw_spin_lock+0x128/0x260 [ 1032.341680][T20870] ? find_held_lock+0x2b/0x80 [ 1032.341724][T20870] ? debug_mutex_remove_waiter+0xa0/0x320 [ 1032.341767][T20870] ? debug_mutex_remove_waiter+0xa0/0x320 [ 1032.341827][T20870] ? netdev_name_node_lookup+0x107/0x150 [ 1032.341931][T20870] ? __mutex_lock+0x82c/0x1bd0 [ 1032.341982][T20870] dev_ifsioc+0xc2f/0x1f10 [ 1032.342072][T20870] ? __pfx_dev_ifsioc+0x10/0x10 [ 1032.342118][T20870] ? __pfx___mutex_lock+0x10/0x10 [ 1032.342179][T20870] ? dev_load+0x8e/0x240 [ 1032.342224][T20870] ? dev_load+0x8e/0x240 [ 1032.342281][T20870] dev_ioctl+0x70e/0x1070 [ 1032.342334][T20870] sock_ioctl+0x494/0x6b0 [ 1032.342383][T20870] ? __pfx_sock_ioctl+0x10/0x10 [ 1032.342421][T20870] ? hook_file_ioctl_common+0x140/0x440 [ 1032.342480][T20870] ? __fget_files+0x21f/0x3d0 [ 1032.342522][T20870] ? __pfx_sock_ioctl+0x10/0x10 [ 1032.342565][T20870] __x64_sys_ioctl+0x18e/0x210 [ 1032.342620][T20870] do_syscall_64+0x115/0x840 [ 1032.342662][T20870] ? clear_bhb_loop+0x40/0x90 [ 1032.342707][T20870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.342745][T20870] RIP: 0033:0x7f3fd119de99 [ 1032.342774][T20870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.342810][T20870] RSP: 002b:00007f3fd200b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1032.342846][T20870] RAX: ffffffffffffffda RBX: 00007f3fd1425fa0 RCX: 00007f3fd119de99 [ 1032.342869][T20870] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000006 [ 1032.342890][T20870] RBP: 00007f3fd1233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1032.342911][T20870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.342931][T20870] R13: 00007f3fd1426038 R14: 00007f3fd1425fa0 R15: 00007fff3aa6ea68 [ 1032.342978][T20870] [ 1032.712534][T20870] ipvlan1: left allmulticast mode [ 1032.722873][T20870] veth0_vlan: left allmulticast mode [ 1034.036580][ T30] audit: type=1800 audit(4294967367.360:111): pid=20912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1965" name="members" dev="configfs" ino=144497 res=0 errno=0 [ 1038.203702][ T30] audit: type=1800 audit(4294967371.530:112): pid=20975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1973" name="members" dev="configfs" ino=145695 res=0 errno=0 [ 1038.439869][T20977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1973'. [ 1038.517000][T20988] input: f¬ as /devices/virtual/input/input6 [ 1038.764866][T20999] BUG: unable to handle page fault for address: ffffc9001f0cbfe8 [ 1038.772664][T20999] #PF: supervisor write access in kernel mode [ 1038.778783][T20999] #PF: error_code(0x0002) - not-present page [ 1038.784822][T20999] PGD 13fe60067 P4D 13fe60067 PUD 1cafa067 PMD 37c3c067 PTE 0 [ 1038.792450][T20999] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 1038.797893][T20999] CPU: 1 UID: 0 PID: 20999 Comm: syz.5.1975 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.808905][T20999] Tainted: [L]=SOFTLOCKUP [ 1038.813275][T20999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1038.823386][T20999] RIP: 0010:write_comp_data+0x75/0x90 [ 1038.828840][T20999] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 42 [ 1038.848540][T20999] RSP: 0018:ffffc90003257e78 EFLAGS: 00050257 [ 1038.854675][T20999] RAX: ffffc9001f0cc000 RBX: 0000000000000000 RCX: ffffffff82458885 [ 1038.862704][T20999] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1038.870732][T20999] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1038.878752][T20999] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1038.886771][T20999] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1038.894785][T20999] FS: 00007f57b005a6c0(0000) GS:ffff888123ee3000(0000) knlGS:0000000000000000 [ 1038.903765][T20999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1038.910429][T20999] CR2: ffffc9001f0cbfe8 CR3: 0000000041df6000 CR4: 00000000003526f0 [ 1038.918441][T20999] Call Trace: [ 1038.921766][T20999] [ 1038.924777][T20999] rseq_register+0x115/0x350 [ 1038.929446][T20999] __x64_sys_rseq+0x1b8/0x2e0 [ 1038.934199][T20999] do_syscall_64+0x115/0x840 [ 1038.938844][T20999] ? clear_bhb_loop+0x40/0x90 [ 1038.943579][T20999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.949518][T20999] RIP: 0033:0x7f57af19de99 [ 1038.954006][T20999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.973658][T20999] RSP: 002b:00007f57b005a028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 1038.982118][T20999] RAX: ffffffffffffffda RBX: 00007f57af426450 RCX: 00007f57af19de99 [ 1038.990123][T20999] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 1038.998129][T20999] RBP: 00007f57af233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1039.006138][T20999] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 1039.014139][T20999] R13: 00007f57af4264e8 R14: 00007f57af426450 R15: 00007fff6cc8fca8 [ 1039.022158][T20999] [ 1039.025244][T20999] Modules linked in: [ 1039.029179][T20999] CR2: ffffc9001f0cbfe8 [ 1039.033395][T20999] ---[ end trace 0000000000000000 ]--- [ 1039.038894][T20999] RIP: 0010:write_comp_data+0x75/0x90 [ 1039.044339][T20999] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 42 [ 1039.063987][T20999] RSP: 0018:ffffc90003257e78 EFLAGS: 00050257 [ 1039.070180][T20999] RAX: ffffc9001f0cc000 RBX: 0000000000000000 RCX: ffffffff82458885 [ 1039.078182][T20999] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1039.086193][T20999] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1039.094237][T20999] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1039.102289][T20999] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1039.110298][T20999] FS: 00007f57b005a6c0(0000) GS:ffff888123ee3000(0000) knlGS:0000000000000000 [ 1039.119304][T20999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1039.125928][T20999] CR2: ffffc9001f0cbfe8 CR3: 0000000041df6000 CR4: 00000000003526f0 [ 1039.133975][T20999] Kernel panic - not syncing: Fatal exception [ 1039.140249][T20999] Kernel Offset: disabled [ 1039.144583][T20999] Rebooting in 86400 seconds..