last executing test programs: 10m50.23120809s ago: executing program 0 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r0) epoll_pwait$auto(0xffffffffffffffff, 0x0, 0xe7d, 0xfffffeff, 0x0, 0x8) (async) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0450cbf19ae63496552e58d50056a6155cfa220eda4830ffaaf3b037887c9ef9c9cc20150a9f0453b90cfcfacd9622f405c76224c1d074ceb43ba55f0a4c", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf25030000000600010034000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) 10m49.971346502s ago: executing program 0 (id=428): mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) (async) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0xe8903, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async, rerun: 32) sysfs$auto(0x2, 0x23, 0x0) (async, rerun: 32) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x3) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) (async) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2fa81507ca870d066e25696b0b2ac35abb53a8fc6e9df9fdbbc11fe705ab85e88111e5684e28f8599bc486b93eea020ee76a340a548c82e805e2d182d741e51d53c799f7bb722a591e8ac4c48f3317ac8926b8b"}) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/251, 0xfb) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x6, 0x80002, 0x73) (async, rerun: 64) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.0/usb1/bcdDevice\x00', 0x40000, 0x0) (rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000940)=""/4096, 0x1000) (async) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) r5 = socket(0xa, 0x1, 0x84) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(0xffffffffffffffff, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) (async) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000004c0)="e3188176b96f56170e647ad5b75e3e9d5b25824af2509ae55ed5ee191ee9257ac48ac1e8c7ca249fdb72092d4d6cb4b85c6e5e63af6e6386605a2acad0c973ffc78036fb03e7317159be64a299df97910013248ab5d114aa9179182bc486b00af747556837f9ef96271ce9d8c9987a0c8f56514da06c89df72", 0x79) (async) bind$auto(r5, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) epoll_ctl$auto_EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x4, 0x3}) write$auto(0x3, 0x0, 0xfdef) 10m48.595374139s ago: executing program 0 (id=431): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000001b00)=ANY=[@ANYBLOB="b4180000", @ANYRES16=r2, @ANYBLOB="000427bd7000fbdbdf250100000058000180490021006dad872cc87245af407e186ad776f2c8d7ac600bc92e9e35c7af7740051e57f26303fc68316df4839303842116b8e588a633f43a36dcca14628090fac16d14cbae4b95f73800000008007780040004805c0201805802418004004f800400cb800dfc5276f83d3e5a4049066bf8e3f20c8c65c4bdbc1e500bf1772e7f3652e2cd8ebd1e3b5050d7d1d846d4dbd4268fb1062ad55c53ac9ab72d31a7b38557d299bbf3792cdc88d07c6ef0907e1dd34b7e5ecf9f6b0e39a4e4bb1e0120faa7cd590fcb54e1ff57e176e4ffec9340e7b87fb71fadfb845a6c1b9a3734a4e61f0c326f9bebd9588073b79a0d6498a3d8b1c3b1c7d81ff0da758800bb021f8192e405951ce22d300fbe08f88a7c81f6254f09729ca6049eab20ebb1f99593749551144099ef4178eca749eb05088bf03657f508370f8e11a6feeb72543564a34666eaf884c808983dff91deaebdc324ed47f8a28503e6b92a23255c212715ab5c8cb791def906a9cc5ffe01da468e611f55857c6bf64898914624d8a7c1a14d194f865d6905121c8f2bcc98fc4c5c41c5d8d4d6061c135d791ba9e9043880774b08000400", @ANYRES32=r0, @ANYBLOB="0400e880040036800c0068000700000000000000f48a05baa2660b7a3ad053d0641a67767df47461f400a98e01a8c3549f9ce072b08ad50a1540c7e31b900acda52184d5472d3b42356ff9b9bc19d36595d2bef96aff6e912602c66e1141650d7782cd027bc96a6ea197adf3a09bafdf5deeff186fbb30b4490a08a12f6cfa00e63b71b1c7191089fd141b876b0950762c0c95a530fed23251c7a90e5db1870eaa1aad655a02bb2027a0d5c0b18ba5aaa7513ec497b34d2417dd40c354995f0396bad3205e6e9f875491c5a221da40a282028ca01b1ddcfa8f9686bf3cab0ebdd6d2b3b4ff1e3e161a6463dad10d61c2ab184fea0447d12f73d59f4856b674c3b0f604000f80cd010180ff0026800400be800c008300090000000000000004007f80420054002f7379732f646576696365732f4c4e58535953544d3a30302f4c4e5853594255533a30302f504e50304130333a30302f6465766963653a30382f616472000000080039003d1828c0642ddc9bc4245af14019da57604b06026b9f3f023ff30cd81d49c8730e803c9874d958fa9127db5674042c343b4b0847223de896f8a445c68b7bb5d615527674bf15347133c7de2b9d9f55", @ANYRES32=r0, @ANYBLOB="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"], 0x18b4}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) open(&(0x7f0000000800)='./file1\x00', 0x163ac1, 0x82) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) (async) write$auto(r5, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 10m46.971396242s ago: executing program 0 (id=434): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) setresgid$auto(0xffffffffffffffff, 0x28000000000000, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) ioctl$auto(r0, 0x542e, r0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf2503aaa8c46f07029ba44c000000080003800400118012000100898771f1c19f17790485a17df321"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) ioctl$auto(r3, 0x4b4e, r3) 10m46.373403011s ago: executing program 0 (id=438): close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x1d, 0x2, 0x2) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x7, &(0x7f0000000280)={@siginfo_0_0={0x42f3, 0xfff, 0x6, @_sigsys={&(0x7f00000000c0)="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", 0x2, 0xf5ec}}}, 0x4a) connect$auto(0x3, 0x0, 0x55) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto(0x3, 0x0, 0x10) write$auto(0x3, 0x0, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x1d48, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x86, 0xfffffeff]) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r2, 0x0, 0x800) 10m45.311353883s ago: executing program 0 (id=443): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x483, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x4, 0x0, 0x29, 0x0, 0x0, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f3, 0x24) 10m44.77810169s ago: executing program 32 (id=443): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x483, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x4, 0x0, 0x29, 0x0, 0x0, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f3, 0x24) 8m6.185881375s ago: executing program 3 (id=936): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x805, 0x10) utime$auto(0x0, 0xfffffffffffffffc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0x0, 0x9, 0x5, 0x8, 0xe7}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfffffffffffffff8, 0x0, 0x800009, 0x9, 0x4, 0x8, 0xf, @inferred, @raw=0x8}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r2 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(r2, 0x10000000084, 0x23, 0x0, 0x8) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setreuid$auto(r1, r1) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r4, 0x540a, 0x0) 8m3.85415222s ago: executing program 3 (id=939): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) set_mempolicy$auto(0x4006, &(0x7f0000000000)=0xa, 0x7) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), 0xffffffffffffffff) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x4, r1, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r4) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 8m2.429027492s ago: executing program 3 (id=944): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x88240, 0x40, 0xe}, 0x18) fremovexattr$auto(r0, &(0x7f0000000000)='system.posix_acl_access\x00') r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/oom_adj\x00', 0x8402, 0x0) read$auto(r1, 0x0, 0x3cde) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa2bff8ce806cae22}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x3}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x8004) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000001400)='ns/mnt\x00') 8m1.613094816s ago: executing program 3 (id=948): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) (async) r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000000c0), 0x109040, 0x0) lseek$auto(r0, 0xc5, 0x1) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) eventfd$auto(0x2) (async) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise$auto(0x7da0a3c7, 0x4, 0x208) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r4 = socket(0xa, 0x801, 0x84) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r4, 0x1, 0x3f, 0x0, 0xb) r5 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ptrace$auto(0x4206, r5, 0x0, 0x200005) (async, rerun: 32) waitid$auto_P_ALL(0x0, 0x5, 0x0, 0x8, 0x0) (rerun: 32) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xf2, 0x0, 0x0, @uid}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6) rmdir$auto(&(0x7f0000001040)='}[,&*}\x00') 8m0.603024464s ago: executing program 3 (id=951): sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x20000881) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) (async, rerun: 64) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event0\x00', 0x40000, 0x0) readv$auto(r2, &(0x7f00000002c0)={0x0, 0x371}, 0x7) (async, rerun: 32) ioctl$auto_EVIOCREVOKE(r2, 0x40044591, 0x0) (async, rerun: 32) close_range$auto(0x2, 0xa, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/cgroup\x00') (async) socket(0x1e, 0x1, 0x0) (async, rerun: 32) listen$auto(0x3, 0x81) (async, rerun: 32) accept$auto(0x3, 0x0, 0x0) (async) kill$auto(r3, 0x11) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000002440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) 7m59.886983964s ago: executing program 3 (id=953): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) mmap$auto(0x0, 0x40000020009, 0x4000000000df, 0xeb1, 0xa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x100, 0x1c37d, 0x9}, 0x1, 0x0, 0x0, 0x623d) mmap$auto(0x7, 0x4020009, 0xf, 0x1010, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x540981, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) process_vm_writev$auto(0x0, 0x0, 0x200000000017, 0x0, 0x7, 0x0) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, 0x0, 0x8, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) syncfs$auto(r0) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x5, 0x7) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) msgctl$auto_IPC_INFO(0x6, 0x3, &(0x7f0000000200)={{0x6, 0x0, 0xee01, 0x9, 0xffffff81, 0x6, 0x5}, &(0x7f0000000140)=0x7, &(0x7f00000001c0)=0x9, 0xc, 0xc, 0x8, 0x1, 0x800, 0xf4d1, 0x6, 0xcc, @inferred, @raw=0x57}) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x4a9782, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyqe\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) read$auto_posix_clock_file_operations_posix_clock(r1, &(0x7f0000000180)=""/232, 0xe8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) 7m59.376794126s ago: executing program 33 (id=953): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) mmap$auto(0x0, 0x40000020009, 0x4000000000df, 0xeb1, 0xa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x100, 0x1c37d, 0x9}, 0x1, 0x0, 0x0, 0x623d) mmap$auto(0x7, 0x4020009, 0xf, 0x1010, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x540981, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) process_vm_writev$auto(0x0, 0x0, 0x200000000017, 0x0, 0x7, 0x0) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, 0x0, 0x8, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) syncfs$auto(r0) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x5, 0x7) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) msgctl$auto_IPC_INFO(0x6, 0x3, &(0x7f0000000200)={{0x6, 0x0, 0xee01, 0x9, 0xffffff81, 0x6, 0x5}, &(0x7f0000000140)=0x7, &(0x7f00000001c0)=0x9, 0xc, 0xc, 0x8, 0x1, 0x800, 0xf4d1, 0x6, 0xcc, @inferred, @raw=0x57}) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x4a9782, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyqe\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) read$auto_posix_clock_file_operations_posix_clock(r1, &(0x7f0000000180)=""/232, 0xe8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) 5m53.901760227s ago: executing program 1 (id=1298): r0 = socket(0x1e, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0ro\x00', 0x10400, 0x0) close_range$auto(r2, 0xfffffffffffff000, 0x6) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x3, 0x3, 0x6, 0x15, r2, 0x1) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x400008, 0xdf, 0x9b71, r2, 0x7fff) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCSCLOCKID(r5, 0x400445a0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400040, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000640)="018fac297e857e25b7371f9d3e9a350e7ac811c087f2794823b838385544315f18c78aee068e8971ca6feb7f5f21444f160ffbc6db39677d21dec99144eadfc787b697614aa78b2a09a39bcb0208ff082e47645c25907bbc783bdd342c0650e39eca7a57213fceadff804bb496b0e41c2e02a57a5ef51c54f23bf5287e1db445733328b476535b7090cb672953e1120510e1a584e9fcfc1c4808ac9cede07dd7e98c09a3995a9da60b347a878e0f225d96e77240f4a7fa722cbb4c8227aff94545ceeb882986e65511321297dbb4499c00000000000019c766a6278ff3c4630cc2a2ec836612116b9e025e852d42e7584d4a0f60125302c5c74ea60ed92538424e4622d1250cc2ce405778e9957a7cb1b94ff1f3e3817ae961cc6df39e5fd5f0f3728179ba600fc6fecf9f8d2a0b1a8f11eec6bdd4b76bc2a9016c4aa19e0050504a34252502d6d09ceadd2153c18f3b4641fec28a498a5e89a03a111cd6b127481c7de2e3cdd0b24dfdae8716990506ab3f120cdbb47350a2079a81f79cd1765cdd52bbeb74f1d2412174a9760c9781cec2b69b458f73ccae98b745dfaa4264f3701df6f9f67efb7dca62f60aab39b339eeae128beb47e77e61cbb0f19a30ca4c3855a1", 0x8) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r6 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim7/take_snapshot\x00', 0xa200, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)=@bpf_attr_4={0x7fa, r6, 0x80, r5}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) mmap$auto(0x0, 0x4, 0x7f, 0x40eb1, 0xffffffffffffffff, 0x3000001ffffd) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r7, 0x545c, 0x0) ioctl$auto_MEMGETREGIONCOUNT(r4, 0x80044d07, 0x0) ioctl$auto_TIOCVHANGUP2(r7, 0x5437, 0x0) 5m51.880503531s ago: executing program 1 (id=1312): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/sessionid\x00', 0x80, 0x0) close_range$auto(r0, r1, 0x3) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) socket(0xa, 0x2, 0x4) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sysfs$auto(0x2, 0xd, 0x0) fsopen$auto(0x0, 0x1) socket(0x2, 0x3, 0xa) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40383d0c, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, 0x38) setsockopt$auto(0x1, 0x1, 0x43, &(0x7f0000000000)='\x00', 0xbb) readv$auto(0x3, 0x0, 0x1) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x2, 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r8, r7, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r5, 0xe600}, 0xf) capset$auto(0x0, 0x0) 5m50.473214387s ago: executing program 1 (id=1307): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) (async, rerun: 64) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x80000001) close_range$auto(0x2, 0xa, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) io_uring_setup$auto(0x6, 0x0) (async) open(0x0, 0x22240, 0x155) (async) r2 = io_uring_setup$auto(0x6, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) bind$auto(r3, &(0x7f0000000080)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x68) listen$auto(0x3, 0x81) (async) accept$auto(0x3, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb5, r2, 0x300000000000) (rerun: 32) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/pagemap\x00', 0x181002, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x0, 0x0, 0x100004, 0x2e, 0xfffffffffffffffe, 0x3, 0x6, 0xc00, 0x2c, 0x2c, 0xc, 0x200000001}) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x282401, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) 5m49.271473806s ago: executing program 1 (id=1315): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(0x0, 0x7f, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0x2, 0x3, 0x9) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3) 5m48.248506745s ago: executing program 1 (id=1318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7008fcdbdf250600000024000180190002002f6465762f6370755f646d615f6c6174656e63790000000004000100"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/010/001\x00', 0x280200, 0x0) 5m48.054134035s ago: executing program 1 (id=1321): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) madvise$auto(0x5, 0x2, 0x9) (async, rerun: 64) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r0, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) io_setup$auto(0x7ffe, 0x0) 5m32.758475116s ago: executing program 34 (id=1321): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) madvise$auto(0x5, 0x2, 0x9) (async, rerun: 64) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r0, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) io_setup$auto(0x7ffe, 0x0) 4m9.913635117s ago: executing program 6 (id=1650): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x103800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)=0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0xa0, 0x2000400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/bInterfaceNumber\x00', 0x0, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/bInterfaceNumber\x00', 0x0, 0x0) sendfile$auto(r1, r1, 0x0, 0x4000000000001) (async) sendfile$auto(r1, r1, 0x0, 0x4000000000001) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x24, 0x0, 0x83) socket(0x2c, 0x3, 0x0) (async) r2 = socket(0x2c, 0x3, 0x0) getsockopt$auto_SO_DEBUG(r2, 0x4, 0x1, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x779a80, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x779a80, 0x0) mlockall$auto(0x7) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) (async) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/modalias\x00', 0x20000, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/modalias\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) (async) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) 4m9.32711891s ago: executing program 6 (id=1653): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x48000, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000001200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x19U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x81\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xecWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xfbJ7\xd1\xdc\xe1\x80yi\xef\x91M\xfbB\x97\x80\x9a\xbep\x86\x93\xcc4\xe5\xba\x015I\x1d\r\xdf\xc1Q\x8eM\xa6\t$\xb7ZR\xdcs\x94\xccn\x05\xb8\x06', 0x500000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x8000000000000000, 0xffffffffffff0005, 0xc) madvise$auto(0x4000000000004, 0x10000000004, 0x8004) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise$auto(0xb, 0x7fffffff, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0xffffffff80000000, 0x0, 0x7, 0x9) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0xc) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mkdir$auto(&(0x7f0000001300)='}[,&*}/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc001) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x2, 0xbb3a, 0x401, 0xa000000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x140201, 0x0) mmap$auto(0x6, 0x3, 0x40200e0, 0x17, 0xffffffffffffffff, 0x40000000002) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0x2, 0x8010) readv$auto(r1, &(0x7f0000000100)={0x0, 0x1000}, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 4m8.047957633s ago: executing program 6 (id=1658): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7b52, 0x34, 0x400000000065f, 0x1ffde, 0x2d4a8168, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0x9, 0x4, 0x1, 0x1f, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffc, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x1000000000000000, 0xffffffffffffffff, 0x0, 0x5, 0x251, 0x3, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0xfffffffffffff7cc, 0x4, 0x400000000000002, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0xc, 0x2000]}, 0x1fe, 0x8) (async) personality$auto(0xfffff032) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac49268d89c5c00", "0000ef001000ebffffff00"]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x7) (rerun: 32) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x8) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) (async, rerun: 64) socket(0x1d, 0x80008, 0x7fff) (async, rerun: 64) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={0x0, 0x1000}, 0x3) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async, rerun: 64) mmap$auto(0x0, 0x40006, 0xe2, 0x20009b72, 0x7, 0x28000) (async) connect$auto(0x3, 0x0, 0x55) (async) r4 = socket(0x18, 0x5, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty42\x00', 0x10f880, 0x0) ioctl$auto_TCFLSH2(r5, 0x5403, 0x0) (async) connect$auto(r4, 0x0, 0x3a) (async, rerun: 32) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r4, 0x0, 0x30004850) (async, rerun: 32) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) 4m6.815507243s ago: executing program 6 (id=1664): clock_nanosleep$auto(0x7, 0x98, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x5607, 0xffffffffffffffff) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13002ebd70005641e3a81394531d08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket(0x18, 0x2, 0x0) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9, 0x101) ioctl$auto_VFIO_IOMMU_MAP_DMA(r4, 0x3b71, 0x0) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x800, 0x45e) (async) r5 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x40102, 0x1a00) read$auto(r5, 0x0, 0x0) 4m4.153418354s ago: executing program 6 (id=1679): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x28, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x3, 0x1) unshare$auto(0x40000080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r4 = setfsuid$auto(0xee00) setreuid$auto(r4, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_vlan\x00', 0x0}) pread64$auto(0xffffffffffffffff, &(0x7f0000001580)='{*/\x00', 0x1000, 0x8) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c130000", @ANYRES16=0x0, @ANYRES16=r6, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="8c4d3bb1140749673f0e43a49d0e4cf4302d4fc7c08699c18e0add4a127faf6b0e49b9d2e3b8350f98d9fd817275afe338f4293ae9f773cc78da4a2bfc88a06e2142273cfab0b169afeffe4fd85f31c019231564a6b9c6b35dc3ca6ce4e7b54826258a0207e0903bc5b0499e28b792e84b4c19fcbed9a06a95d24f24a323b47891ebee9763ed38134af0552839de2b130ebb0356279590cc8400bbac0ba34df1cb94923fe2c1950011800400ea800400d980040033802f9610cd994717387db6cb1eca37d94136a5d04391b7f248bffc038303bd7f74a945b3ca9c9af02f0fd4728eeeb2a73ca9d3a3e0bc8a7b497a2528493ab0dcd8f96ad5d372431f0be4e9aa9361de2bf224f45ab081d76d442ea420bfc00f6033df4b575acc9c60d19ab03da9d0a64c9c561b323e8161da8519f034bdaac70a936104003400000000301002801f00bb802ac6e38b7af4a031d75c120400f38008001600", @ANYRES32=r4, @ANYRES64=r1, @ANYRES32=r5, @ANYBLOB="04000300640001800800040000040000140002007465616d5f736c6176655f3000000000080004000a000000080003008103000008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468305f746f5f68737200000000080004002700000008000400090000000800040003000000"], 0x131c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0) sendfile$auto(r7, r7, 0x0, 0x2) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/snd/midiC2D0\x00', 0xd8401, 0x0) r9 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r8, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r10, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) socket(0x2, 0x1, 0x106) socketpair$auto(0x1, 0x2, 0x7, 0x0) 4m3.016049982s ago: executing program 6 (id=1688): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0xf, 0xc, 0x40000000004cbd5d) seccomp$auto(0x1, 0x0, &(0x7f0000000100)="740fb5dc698e7ba7e41f") fallocate$auto(r0, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e29b11e2c41b25e95a0d677941ec8136ec921976149c1d14b") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000001240)={0x2000000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x27}, &(0x7f0000000140)=""/173, 0xad, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x5c}, 0x58) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x80) readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10) move_pages$auto(0x1, 0x80000000000003fb, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r3) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0x0) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x420009, 0x20000000000000df, 0x15, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) read$auto(0x4, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m48.023589597s ago: executing program 35 (id=1688): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0xf, 0xc, 0x40000000004cbd5d) seccomp$auto(0x1, 0x0, &(0x7f0000000100)="740fb5dc698e7ba7e41f") fallocate$auto(r0, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e29b11e2c41b25e95a0d677941ec8136ec921976149c1d14b") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000001240)={0x2000000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x27}, &(0x7f0000000140)=""/173, 0xad, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x5c}, 0x58) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x80) readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10) move_pages$auto(0x1, 0x80000000000003fb, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r3) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0x0) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x420009, 0x20000000000000df, 0x15, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) read$auto(0x4, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range$auto(0x2, 0x8, 0x0) 19.278556725s ago: executing program 4 (id=2520): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0xfffffffffffff000, 0xfff, 0x9, 0xcf1, 0x100000003, 0x8000000000000001, 0x0, 0x2f, 0x4002, 0x8000000000000002, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) msgctl$auto_MSG_INFO(0x10, 0xc, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r3) sendmsg$auto_HWSIM_CMD_REGISTER(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x5, 0x12, r0, 0x100008000) 18.977246679s ago: executing program 4 (id=2524): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={0x0, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x2400c0d0) setreuid$auto(0x81, 0xadaa) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) ioctl$auto(r1, 0x4b3a, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x801, 0x100) mmap$auto(0x0, 0x400, 0xdb, 0xeb1, 0x1272, 0x2) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000000)=@generic={0x1e, "fd7bca7aea22beab3c94bab3772b"}, 0x6a) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x207fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) setsockopt$auto(r2, 0x6, 0x2, 0x0, 0xfb3) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) 17.914950697s ago: executing program 4 (id=2528): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r1, r0, 0x0, 0x10000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/power/level\x00', 0x129882, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) r3 = socketpair$auto(0x22, 0x3, 0x8000000000000000, 0x0) shmctl$auto_IPC_INFO(0x28, 0x3, 0x0) read$auto_proc_auxv_operations_base(r3, 0x0, 0x0) ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f00000000c0)={0x7bfa, 0xffff, 0x8000000000000001, 0xc63, 0x3, 0xffffffffffffffff}) shmctl$auto_IPC_SET(0xff, 0x1, &(0x7f0000000380)={{0x2, 0xee00, 0xee01, 0x0, 0x9, 0x9, 0x9}, 0xb20, 0xfffffffffffffffe, 0x7f, 0xfffffffffffffffd, @raw=0x7, @inferred=r4, 0xfc, 0x0, &(0x7f0000000840), &(0x7f0000000800)="81726da2c24df37e85f1ad146d92ae0e24799cc6ebc5cd4119eeef3b8d91d2a35959582bb9abf959be670d19201ad75f3b07515669fa6b6b54b6ef26fb665bd22e83240da65aab1d2fdad7a39316bd1bed4c0fdc03bfa44e3b9020f9c28c60818ca3b4a1da119f887ff13c81a617aa9c27643331696d6c5372b069482cc33bbdccb2195f094b3fa085766916b61ec3d6e9b97f79e72e7d704458dffd081bff42438deea3ce1951adefdbdf139b1d10ff7ef55ddef2ae86fc24f778b4e65f7a3109f3f373a086d802bd228ef22e1bad5ce4b303d8f31e01"}) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x400000000000003, 0x81, 0x53, 0x110, 0xfffffffffffffffa, 0x9) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000300)={{@raw=0x6, 0x0, 0x8001, 0x2, "da14cf93e7670976d4df4660872c34e34ab92824711bacf3578dcec408cf5180d03a4d126edb3169db6d48ac"}, 0x1, @iec958={"28f6a86309b1e098a7dfa272f95c4c28615313f81f02a4eb", "77a2e9b1b0224a8ef0ac25ff0db0b6ec20c55cccbf4e9b253241777363b62fbe19f64f49f5ed0205399a691cb53e4086d6ec9dcbc5173fee439c2db7f3d5f2d4dd2a267a11e3c0cc771cdddef6bdb02a85cf5ea2ecc26fa3fe291d1e45404619547117c0d45a0de14bc3b9c22d705152efa9d2cfb220c6210dd7606723fb4d6d8ea3e197b19203c65d90e3c761870cbd392bea", 0x0, "e8134be5"}, "a8949c7d9c57acd66da4c5f111166031ad47ebfed172b36a28d7b0204e3a90e9a6c41064df45da18212d9c4e61a29b8146bd0c0284d89751eb5c58cb32c2abf739599063c9a0820f08f1c1b3645f00006dcd033a712822785eeb6a2c41b6d7c00f5e965c1d0000000000000000000000000400"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe0201, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) fcntl$auto_F_ADD_SEALS(0xffffffffffffffff, 0x409, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000680)='\xa1\x00\x16\x12\xf8\x98\xcf\x9b\x87\xf6I}T\x99\xb4\xd8S]\xbb\f\xdaY\xac\xf1\xa2\x98c\x1ds3\xfe@\v\xc2\x90X\x81\xa3r\xfdH\xb2\x0f\x01v2\x13Lo$\xb4d\xf1\'\xa0^\xa9[\x1b\xba\xe6\xd3zkL\xa8s\x8ccT=\xac\'\x93 %\xd4l\xfcfQ=\x10z%\x16\b\xd3\xa9\x11~\x11\x19c\x1e\xde\x0f\x9deB\xb3\xb2\xed0\xab', 0x4) sendfile$auto(r6, r6, 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x21, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="14"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendfile$auto(r3, r2, 0x0, 0x1000) socket(0xa, 0x2, 0x0) 16.836704858s ago: executing program 4 (id=2532): r0 = socket(0x2, 0x1, 0x106) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_LOOP_CTL_ADD(r1, 0x4c80, 0xfffffffffffffffd) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) setsockopt$auto(r0, 0x6, 0x1, &(0x7f0000000040)='l2tp\x00', 0x7) 6.780405811s ago: executing program 5 (id=2571): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim2/sriov_numvfs\x00', 0x2062, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@batch={0xbc, 0x7, 0x8000000000000000, 0x8, 0x9, r0, 0x6, 0x8}, 0x200) (async) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r3 = syz_clone(0x1044a00, &(0x7f0000000200)="590d2924833322ee04802c2094b1ce0725edb7adce93245a9d9506cc0f", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="603f218ebefb9a4fa44d506197ad65b830982e37912d265931") (rerun: 32) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000440}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x378, r2, 0x220, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x339, 0x2e, 0x0, 0x1, [@generic="e72a94c4b73cf365651903075c5b46e18943a53f", @typed={0x8, 0x9a, 0x0, 0x0, @pid=r3}, @generic="1d21d3199ae65a939c2449524ac00125bc58fc5873291176441d637e69508d7cd1354d1e0cc667d545965bef686d64d9f010ff9fa49523d1b924307c084dddb1662be29245e5f101d8676ad5c59e1f180a2a417a20", @nested={0x18, 0x110, 0x0, 0x1, [@typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @nested={0x29c, 0xe3, 0x0, 0x1, [@nested={0x4, 0x2d}, @generic="cd4f7462091f07c2ff795178f15d129820c0ed43bc415d7f6d26422a3eab1d17303b08010b80ea792b69a397949ea0c62edf7c1bfa96c634070fc20dbf93f8053e771a03c6ee080334d6f71abea596b241a426a0bdb66ec70c029c8f494ad0c04c0041f14431272197ddf791e41dcc0b18d3fba1af25", @typed={0x4, 0x65}, @generic="aa01a0ab2f8b9613cdf961e74ddc3d5e8b4beb6ff66dc2dfca9336a8e9d8842072229a4642c9f147f374cb24193dfaff833718de", @generic="960e48d3e957c99c08438e414a56d99f3ee7dae2b6685d6c1a2e226d58663eccfd5423949f1776124652d545", @generic="c963b834f7a18eac8b47de7842e0aeabe117dbd2a6ce7dc7c9646976ace9b8a2a746f220be24d3677e49a9ff22e838ddcb3f96cbb1e9c0502255616f550468d07a7a58d1514e4b19ec3eb273968cb54cd95b8e381b0d8d00063223ccd285b8f8bd57709de6cd28c3ffcf412093670c01e93a5a6a7e988c05d6b9762467497e198df01098c998acd5ef67992bb984773e5c8c60c314672a29c119498445510c4d53d4c9edce1d9931ca9f8db72bc52e62ae85184e25817cfeaa44847803993e8a911d7d609903b72ef1e56094b05941dd18969544d663d27ff62a98b26ea90bd3055e", @generic="1809b31eba2916a8dc30b06c3c63302c2c77698328732b7be08178b5101ab8a2fdf0a5f3e37c9ff452452ab70ef914235f0ef2857b58de18e776d17c9a3c0c4eaf1b5a792f8f4b08f1cea9a47fad5cf683c2f2808973ea79421547856a5d7c313b543d33402dda2011ab7c0594ebe1d1fd1f2c88b3a613a9c7cd5198f6b52c3337648c6f1f38ce8443db494a3424bf1149d747cac1cfba720c586913825a1b57c154cd6356269d6692872a36a4204ca1cba42cbf689203ce511816df22bb3f3f3062c0eff52158465210a04558134108d2e48739ced464af"]}, @typed={0xe, 0xf, 0x0, 0x0, @str='\x87}^}%}#\\^\x00'}]}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x7}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xc0}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4d}]}, 0x378}, 0x1, 0x0, 0x0, 0x44000}, 0x20048005) (async) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async, rerun: 64) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) 6.464832622s ago: executing program 5 (id=2574): mmap$auto(0x0, 0x40000f, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x3) socket(0x25, 0x6, 0x80000000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x80000000, 0x3000}, 0x4) 5.092873512s ago: executing program 5 (id=2578): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x40000000001, 0x0, 0x10000000000000}, 0xfffffffd}, 0x100003, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) sendfile$auto(r0, r0, 0x0, 0x3) lseek$auto(0x3, 0x8000000000000000, 0x1) getpid() process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1000}, 0x1, &(0x7f0000000280)={&(0x7f00000004c0)="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", 0x10f7fffffe}, 0x6, 0x6) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$auto(0x409, 0x5, 0xffffffff, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000040), 0x3000, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x541c, r4) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 4.799531502s ago: executing program 7 (id=2579): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x3, 0x2) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x2840, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000001100)=""/4096, 0x1000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0x10ba02, 0x0) getsockopt$auto_SO_TXTIME(r2, 0x8007, 0x3d, &(0x7f0000000000)='\xc5', &(0x7f0000000080)=0x3) getpid() sendfile$auto(r3, 0x3, 0x0, 0x400000000006) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xffffffff00000000, &(0x7f0000000080)) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101200, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c00, 0x0) 3.393788937s ago: executing program 7 (id=2581): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x4e, 0x0, 0x0) 3.237402138s ago: executing program 7 (id=2582): unshare$auto(0x8000000) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000340)={0x2, 0xd, 0x4, 0x9, 0x6, 0x76d, &(0x7f00000001c0)="c2293f0743425a891e258dbff7def68f73bd351deaa788943eb39eff43cd6b8f23b17489c55c1f4b56c086110ec7b4913990e30fd1a60aac20ec44851ccd25091287a1599bd4c248d3677d2e99df2e503116660a931ec4bda959b4562e3b3c48888e237ac481f293328c18f71e033af2361691f0569830c83b6e103a7f6d33f9a12ac1ffcba42cf49d07aef7a37cc4be94bc466da0156b69ebf2549b4d6fc752e0e2923a8fe4224e7346138a45f079a879"}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="69e5b2f8ece581cf41db934d76a227cd9c6f76fcbb908f04641e25184448804d97b0681517559713459104d86fb64b93d24c294c327989704c58d4329b23e6297a5e3c07a4ab6a01209506030c04f8db7e0d1f4bd30ddfd5b2e51b7d9232c5bad8c5d1e5a7e56a6b8da53626e46e957d7a78c79a0652e398216494a0ce648da0aa234e73f2834ccbce9c528235745dda5ce664290fca9a2d78431209f88d1ff2f6b4d620", @ANYRES32, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x800) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event0\x00', 0x42442, 0x0) msync$auto(0x1ffff000, 0x400, 0x1) ioctl$auto(0xffffffffffffffff, 0x5418, 0x38) unshare$auto(0x8000400) r1 = socket(0xa, 0x3, 0x3a) ioctl$auto(r1, 0x8936, 0x1) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x7, 0xffffffffffffffff, 0x0) mmap$auto(0x3, 0x3, 0x1000009, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) socket(0xd, 0x3, 0x303) r4 = socket(0x10, 0x2, 0x4) r5 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x5, 0x0, 0x0, 0x9}, 0x80}, 0x3, 0x0) r6 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_DEL_KEY(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="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"], 0x414}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) ioctl$auto(r3, 0xc1205531, r6) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000001f40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f00)={&(0x7f0000005780)=ANY=[@ANYBLOB="6c1c0000", @ANYRES16=r2, @ANYBLOB="00022bbd7000fcdbdf25020000000400060005000900010000006b09078008008e00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"], 0x1c6c}, 0x1, 0x0, 0x0, 0x2}, 0x40080d5) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000002c0)={0x800, "17623092446ad02d424f845886b040e2c867b33e60bac8c2a73bc8c716f1b80f"}) 3.083206419s ago: executing program 2 (id=2583): mmap$auto(0x3f, 0x6, 0x3, 0xeb1, 0xffffffffffffffff, 0x3) (async) socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async, rerun: 64) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptycb\x00', 0x80902, 0x0) (rerun: 64) r1 = ioctl$auto_TIOCGPTPEER(r0, 0x5441, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8) (async) connect$auto(0x3, &(0x7f0000000100)=@sco, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) sendmsg$auto_ILA_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) io_uring_register$auto_IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000140)="953bf0f310f2138fcdc2d88bac8a576a9c8da8794d71f8b44ff3415382642f9e2b3208e2a4565ab17418e0b21e35ca196377774334630d65f52506bdd9930e169fbc6e92a792bc7189a6a41059596982342a1dfcd76d05dcdd1d223e99c46506dd15f0ee9fbc0afcc83bb4a70c641d9c94390d6607d4dad17cccd2c41cf5ccbd138b14975668", 0x2b) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) 2.875914539s ago: executing program 7 (id=2584): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000500), 0xffffffffffffffff) open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r3, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)=ANY=[@ANYBLOB="ffe70000", @ANYRES16=r4, @ANYBLOB="2f032abd7000ffdbdf251200f000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) shmctl$auto_IPC_RMID(0xa, 0x0, &(0x7f0000000200)={{0x9, 0xffffffffffffffff, 0xee01, 0x4, 0x100, 0xb1fffffd}, 0x400, 0x400000006, 0x8, 0x0, @inferred, @raw=0x7, 0x2, 0x0, &(0x7f0000000540)="19c3b829e71f4b4088493f392082a22870971f0a6107a7a2bac7aa4a2307871211d729673290d92d4dc6cb4e8f3dc05610b1d7f8ecb09146bded6242685bbb2208133f1eee407cc1caedcbf9d3b9cf073be2e4adffd1e720d238f387fa431c6c5866af5935e869857d0c18be984d97fc5b5b135cc5a4e79e979488e956bcabe41981d0f39c42633024fd53f8a4cb8a5b15e19e4b6896ddbca6bf6a85bf75807268765275f93625635db6e13918c908b925f34d77fc8b2cf3411b5eb531fb2a6d267153e90168076f90a22ca54a13f47add32bd1d6c996483f5a941d7ba98ab5c", &(0x7f0000000740)="2e55e9ee5f293332e76b54634eea61dc2187145174aefcc713bfe59fa80a1971082349a14a5764ebef929a0070d08b7fc4764d868c484d3b33cf35999dddba58bc3c912d44653ee2a07d6fb5fce6cf876f8c881161ee593715c3446b2754c9472c0d80ae944cf2cb1cdbfbe3e96a113bb70487a1ffc871b90a5f449cb57223f4567195f4908eaeae629e8565823508cc0ef60f13baf5feddc5c36dec32c6dff8616368b87c38e2a6cdb93c7bb9a02f07b8d0e7f910f690c00c74996b44f3aebdb75315bf48bb924dbf2f"}) syz_clone3(&(0x7f0000000940)={0x80000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x4}, &(0x7f0000000840)=""/229, 0xe5, &(0x7f0000000440)=""/181, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8, {r2}}, 0x58) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r5 = socket(0x2, 0x1, 0x0) getsockopt$auto_SO_BSDCOMPAT(r5, 0x0, 0xe, 0x0, &(0x7f0000000140)=0x2) sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="bc070000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf2501000000080004000101000004000600140002800c00ca00000000000000000004001880080008007f000000b90002800800e500", @ANYRES32=r1, @ANYBLOB="aed195661f2deeca73add4204b929e1dd5423a1b5984cb7477b7182ade76b6f1669c142b730adc6444c0c23e5302ffbd05cb3f1a9664c7f45e0032f5eb8a4eb317916f083b83bbc33247316d36e7392658ae379603e2e278e561e139c80cfb55c3cb5c42a760e2fb678cbfc86d78e66b12bab3d560d6ccbc14fde6f14939e827f270499fcd26ee8f52ba21bc3ad89d745ffcfa7fc6553058308a71f854489801670400a60008007d00", @ANYRES32=r0, @ANYBLOB="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"], 0x7bc}, 0x1, 0x0, 0x0, 0x4800}, 0x811) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1, 0x948d, 0x1ff, 0x15f4da07, 0x3, 0x8003, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) 2.467553026s ago: executing program 4 (id=2539): r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fcntl$auto_F_UNLCK(r0, 0x5, 0x2) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x24c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x88b}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xf}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_SEC_DEVKEY={0x200, 0x2f, 0x0, 0x1, [@nested={0x1a8, 0x14e, 0x0, 0x1, [@generic="de4ed268617be85aae3a47757b95f114da0cf29fcb00837fb92f5885f940c410f613cb2e4011ae67c0b47a5b274160613fa9d946d7fb400acaad9632fa5532a24eb8312a91c3d8c3a95146d794b80c1f79ae02c0a4fd72aafee12158ac46c816d5f3a298400a04d88902b7d79d6b7b0c7c23442ddfcd1924af2c75463e96d2b41117f2373778927c6a65285e5e144a2d1be876c6f05ffbe9fb0b4b996036afff7474136a750a7d78b913ce23fe4e6953c206956e58cff98690711baecfe3b2953cdaa416e2f762eca66e113f0aa36dc330fc97888c1af05c6e15549a5924130178a7af6e964747e2a2439dea502d27c72aa5272b648843ef68", @nested={0x4, 0x1f}, @nested={0x4, 0x111}, @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0x5c}, @typed={0x4, 0xf}, @nested={0x4, 0x51}, @generic="3d648419310f16f81371a226230f6e815f6154a061f1394067e7cde5d8b993778d467f54b4c5aeb58875b58bc9e40069f5604ef1060419fb98303f68f6611b0d7d707afb68653dfea2a7c15b6089e70d6be7d5f3d07c3d1dc23cc36eee84e2d7feb06d3ddc23a511533368b8caf3d5fef261e68494de977e9f996c4fc5fe8640347d15"]}, @nested={0xc, 0x54, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @fd}]}, @typed={0x34, 0xf9, 0x0, 0x0, @binary="4325f0136cfec591ab13e04dc18a12b43c6df81ddaaf4c63d1bad64f419a6c95df5dfe75b658286717ed8b64de8e34b2"}, @typed={0x14, 0x71, 0x0, 0x0, @ipv6=@local}]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x7}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x4f}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x91}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x10001}]}, 0x24c}}, 0x28008000) r2 = socket(0x10, 0x2, 0x6) (async) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) 1.952508846s ago: executing program 2 (id=2585): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000001040), 0x1e9440, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hid/drivers/zeroplus/uevent\x00', 0x121681, 0x0) mmap$auto(0x0, 0x7, 0xde, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x73) socket(0x23, 0x2, 0x0) sendto$auto(0x4, 0x0, 0x8000, 0x0, &(0x7f0000000100)=@in={0x23}, 0x80) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)='-', 0x1) 1.94700251s ago: executing program 5 (id=2586): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x0) socket(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x198, r2, 0xb7cae36638d7c7b3, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_S1G_CAPABILITY={0xed, 0x128, "3b42781117a26d31e1440ec3f24f980050d47c9e4f1fee3a78774c7c6432c54429dbf655fe633cf1ff9ae5a110accdc0a4b9958e5f265f93f1c712dd356c550a39d2f446f9f42594a33c69c42f07e95b7b27db27b5f22dea93b4a47e3e85bc2508c3f67a31127cd7f277013b5cb190a40b70a2ba1c579e2b05897e3a542c6c24d469b4e1d3dca459029ebde8494bdacd0be4cbbf85f3ac874ea8a7351cf0d0125b77440f9be04390b0ca1788056b293eefa150b61e4b60303fe7cdb76d124643eba2e514a07bd65b6982b2735f4fe4cc46b9418c701a043b01d24b9f04175b496f696c8a48c3ca761d"}, @NL80211_ATTR_AUTH_DATA={0x80, 0x9c, "ec24c61315a02bb9451ebb5b1c0c30e92cb93dbb68ef36ac944febf87557daa7badfe2a0ccb3d1d7a9aba50a55498fd02c6b83d47aae137c6ae99b566c8e7bdddaae8cc644acf55d2668f29536866c4bb9be43b495363772d424fc710522f9d15c18311533edb8ae147db687b5478bc263d35f3c0d984f7e78124d09"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, "afa8a72ce0a2267253125fc0d5a3"}]}, 0x198}, 0x1, 0x0, 0x0, 0x9e138d1e0d8bff59}, 0x4008010) socket(0x28, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyd2\x00', 0x181000, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x84602, 0x3f) 1.201111984s ago: executing program 2 (id=2587): setregid$auto(0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x5, 0xeb4, 0xffffffffffffffff, 0x8000) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0xd) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x1, 0x0, 0x100) 898.581141ms ago: executing program 5 (id=2588): syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x4084) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x40000) getsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x3, 0x40, 0x0, 0x0) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="a9e127bd7000ffdbdf2501000000050006000700000008000300010001000700040015399e000500050003"], 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x8810) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv$auto(0x3, 0x0, 0x3) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)=@link_update={r4, @new_map_fd=r4, 0x3, @old_prog_fd=r4}, 0x7f) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x100000000000002, 0xec, 0x4, 0x80000020281, 0x8, 0x2, 0xfffffffffffffff8, 0x2}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) newfstatat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x7af9facf, 0x1, 0x7ff, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x401, 0x6, 0x1, 0x4, 0x2, 0x7, 0xff}, 0x5) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) close_range$auto(0x2, r6, 0x0) r7 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy18/hwsim/ps\x00', 0x14000, 0x0) ioctl$auto(r6, 0x0, r7) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r8, 0x4, 0x7) r9 = getpid() process_vm_readv$auto(r9, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) shmctl$auto_SHM_STAT_ANY(0x6, 0xf, &(0x7f0000000500)={{0x1, r5, 0x0, 0x0, 0x9, 0x7}, 0x23c2, 0x0, 0x2, 0xc00000000000, @inferred=r8, @inferred=r9, 0x1, 0x0, &(0x7f0000000380)="b9bf707850e46547ec04dfb01d50a47065f85b76bd2c37c8c11a3e76180f6135dcca59794102a5088ec019825b5b21fec419d9180943ed9aecc4508921ba7c75deed92de2387c4c6dc3c91f1c03e9a0ea6aad9c6141db51f8015eb739d9f1ca4d0827ea91fbfa541e6f99a0068d554a484cf9243c2349b5f5e5a4e277fed4d26c154117ce2ce4a79c03f15a772e60fa10b0f5348d08a7a0d689f42a72f01a65cd30e76333f628069eeda23f8365d8f0d76585c209f29e49688d1c6a28ca0ed974a2cc90bdf083ad3cbb49b9afb7f23d0821b6f014dacd69938", &(0x7f0000000480)="2c44da1a003cf3096281bc383ad20ae2cbe3151e6f45ac16923622623b486bdf0aedc22dc6341affe660303961f3b6c252b5af4cda46dbe3debffb5e4756f3f3dc8dc9963540acb2f0c25a0ff8d279a28bd47260234425f2c72599d7052f740b150865d215fb901c1ff75be158e223c626"}) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) 897.231954ms ago: executing program 2 (id=2589): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x4d, 0x0, 0x0) 728.227849ms ago: executing program 2 (id=2590): io_uring_register$auto_IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)="1722b4d048a0255989cac4d042f1433dbc6a6793bea8b09be86314b0df1a196ec27ed23a1c8041be268407f5ade77d59b053880628af3c20", 0x80000001) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0xc0000080, 0x2000400, 0xfffffffffffffffd}]}) 619.517556ms ago: executing program 7 (id=2591): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) r2 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/dormant_links\x00', 0x802, 0x0) read$auto(r2, &(0x7f0000000040)=' ', 0x8) read$auto(r2, 0x0, 0xa8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x73) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 401.149295ms ago: executing program 7 (id=2592): r0 = open(&(0x7f0000000000)='./file0\x00', 0x668342, 0x100) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000040)={"8d6a6db7f707a2a4440130a84c3b55bc1c845590eb6def5a875a023737ba1c81", 0x7f, 0x254a, 0x6, 0xfffffffffff00000, 0x4, 0x0}) r2 = fcntl$auto(r0, 0x401, r1) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0x18, r2, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceProtocol\x00', 0x12bc00, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x8, 0x81) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0x18, 0x2, 0x0) r8 = socket(0x10, 0x2, 0x4) bind$auto(r8, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xe) bind$auto(0x3, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0x68) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) waitid$auto_P_ALL(0x0, 0xffffffff, &(0x7f0000000180)={@_si_pad}, 0x2, &(0x7f0000000240)={{0x101, 0x3}, {0x3, 0x3}, 0x200, 0x1ff000000000, 0xc6, 0x5, 0x7d, 0x8000000000000000, 0x5, 0x1, 0x3, 0x7fff, 0x9a, 0xb41, 0xffffffff, 0x157ccd9}) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) 313.921229ms ago: executing program 2 (id=2593): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) (async) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r1, 0x0, 0x98c7) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) (async) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/5/node\x00', 0x602200, 0x0) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/5/node\x00', 0x602200, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) (async) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x106) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') ioctl$auto_BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) timerfd_create$auto(0x7, 0x0) timerfd_gettime$auto(0x4, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0x14, 0x404, 0x10008000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000001bc0)="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", 0x930) (async) write$auto_console_fops_tty_io(r2, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb133", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) 255.434404ms ago: executing program 4 (id=2594): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) socket(0x15, 0x5, 0x1) socket(0xa, 0x1, 0x84) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto(0x6, 0x0, 0x100000001) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) read$auto_clear_warn_once_fops_(r1, &(0x7f0000000300)=""/169, 0xa9) mmap$auto(0x108000001, 0x5, 0x7fffffffffffffff, 0x7f, 0xffffffffffffffff, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r2 = socket(0x29, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$auto(r2, 0x8b0f, 0x24) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20005, 0x4000000400df, 0xeb1, 0x401, 0x8004) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x24008890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 5 (id=2595): mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xca600, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x3, 0x10001, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca002, 0x0) sendfile$auto(r2, r2, 0x0, 0x7ffff000) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) readv$auto(r3, &(0x7f0000000140)={0x0, 0x8}, 0x200000000080003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r4 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/error_log\x00', 0x44100, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bpf$auto(0x10, &(0x7f0000000180)=@link_create={@prog_fd=r4, @target_ifindex=r5, 0x8001, 0xd61, @perf_event={0xb0}}, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/dev_snmp6/vlan1\x00', 0x109040, 0x0) ioctl$auto_FS_IOC_RESVSP(r6, 0x40305828, 0x4) kernel console output (not intermixed with test programs): 0000000 [ 235.288216][ T8520] R13: 00007f74e05e6128 R14: 00007f74e05e6090 R15: 00007ffc05c2b758 [ 235.288239][ T8520] [ 235.553667][ T8495] netlink: 334 bytes leftover after parsing attributes in process `syz.1.510'. [ 236.140863][ T8532] FAULT_INJECTION: forcing a failure. [ 236.140863][ T8532] name failslab, interval 1, probability 0, space 0, times 0 [ 236.381634][ T8532] CPU: 1 UID: 0 PID: 8532 Comm: syz.2.517 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.381671][ T8532] Tainted: [L]=SOFTLOCKUP [ 236.381678][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.381689][ T8532] Call Trace: [ 236.381697][ T8532] [ 236.381705][ T8532] dump_stack_lvl+0x16c/0x1f0 [ 236.381737][ T8532] should_fail_ex+0x512/0x640 [ 236.381758][ T8532] ? __kmalloc_noprof+0xca/0x910 [ 236.381781][ T8532] should_failslab+0xc2/0x120 [ 236.381809][ T8532] __kmalloc_noprof+0xeb/0x910 [ 236.381829][ T8532] ? lockdep_init_map_type+0x5c/0x270 [ 236.381847][ T8532] ? ops_init+0x77/0x5f0 [ 236.381875][ T8532] ? ops_init+0x77/0x5f0 [ 236.381897][ T8532] ops_init+0x77/0x5f0 [ 236.381923][ T8532] setup_net+0x11d/0x3a0 [ 236.381948][ T8532] ? __pfx_setup_net+0x10/0x10 [ 236.381971][ T8532] ? lockdep_init_map_type+0x5c/0x270 [ 236.381990][ T8532] ? mutex_init_lockep+0x110/0x150 [ 236.382012][ T8532] copy_net_ns+0x351/0x7c0 [ 236.382041][ T8532] create_new_namespaces+0x3ea/0xab0 [ 236.382071][ T8532] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 236.382098][ T8532] ksys_unshare+0x45b/0xa40 [ 236.382128][ T8532] ? __pfx_ksys_unshare+0x10/0x10 [ 236.382163][ T8532] ? xfd_validate_state+0x61/0x180 [ 236.382187][ T8532] __x64_sys_unshare+0x31/0x40 [ 236.382203][ T8532] do_syscall_64+0xcd/0xf80 [ 236.382232][ T8532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.382250][ T8532] RIP: 0033:0x7feaf618f7c9 [ 236.382266][ T8532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.382284][ T8532] RSP: 002b:00007feaf6ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 236.382302][ T8532] RAX: ffffffffffffffda RBX: 00007feaf63e5fa0 RCX: 00007feaf618f7c9 [ 236.382314][ T8532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 236.382325][ T8532] RBP: 00007feaf6213f91 R08: 0000000000000000 R09: 0000000000000000 [ 236.382336][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.382347][ T8532] R13: 00007feaf63e6038 R14: 00007feaf63e5fa0 R15: 00007fff1724dc18 [ 236.382371][ T8532] [ 236.679475][ T8545] binder: 8533:8545 ioctl c018620c 0 returned -22 [ 237.099181][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 237.549953][ T30] audit: type=1800 audit(1765858853.888:17): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.525" name="dbroot" dev="configfs" ino=23023 res=0 errno=0 [ 238.195929][ T8588] zswap: compressor 000 not available [ 238.409033][ T8603] FAULT_INJECTION: forcing a failure. [ 238.409033][ T8603] name failslab, interval 1, probability 0, space 0, times 0 [ 238.489005][ T8603] CPU: 1 UID: 7 PID: 8603 Comm: syz.4.528 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.489037][ T8603] Tainted: [L]=SOFTLOCKUP [ 238.489044][ T8603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.489054][ T8603] Call Trace: [ 238.489061][ T8603] [ 238.489069][ T8603] dump_stack_lvl+0x16c/0x1f0 [ 238.489102][ T8603] should_fail_ex+0x512/0x640 [ 238.489122][ T8603] ? __kmalloc_noprof+0xca/0x910 [ 238.489145][ T8603] should_failslab+0xc2/0x120 [ 238.489174][ T8603] __kmalloc_noprof+0xeb/0x910 [ 238.489194][ T8603] ? lsm_blob_alloc+0x68/0x90 [ 238.489225][ T8603] ? lsm_blob_alloc+0x68/0x90 [ 238.489250][ T8603] ? __raw_spin_lock_init+0x3a/0x110 [ 238.489270][ T8603] lsm_blob_alloc+0x68/0x90 [ 238.489296][ T8603] security_sb_alloc+0x27/0x230 [ 238.489314][ T8603] alloc_super+0x24c/0xd00 [ 238.489337][ T8603] ? sget_fc+0xd3/0xc20 [ 238.489374][ T8603] sget_fc+0x116/0xc20 [ 238.489398][ T8603] ? __pfx_set_anon_super_fc+0x10/0x10 [ 238.489422][ T8603] ? __pfx_mqueue_fill_super+0x10/0x10 [ 238.489450][ T8603] get_tree_nodev+0x28/0x190 [ 238.489476][ T8603] mqueue_get_tree+0xf1/0x130 [ 238.489504][ T8603] vfs_get_tree+0x8e/0x330 [ 238.489525][ T8603] fc_mount_longterm+0x1a/0x270 [ 238.489550][ T8603] mq_init_ns+0x482/0x810 [ 238.489569][ T8603] copy_ipcs+0x3db/0x7d0 [ 238.489590][ T8603] create_new_namespaces+0x20a/0xab0 [ 238.489615][ T8603] ? security_capable+0x7e/0x260 [ 238.489646][ T8603] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 238.489673][ T8603] ksys_unshare+0x45b/0xa40 [ 238.489702][ T8603] ? __pfx_ksys_unshare+0x10/0x10 [ 238.489732][ T8603] ? xfd_validate_state+0x61/0x180 [ 238.489755][ T8603] __x64_sys_unshare+0x31/0x40 [ 238.489771][ T8603] do_syscall_64+0xcd/0xf80 [ 238.489799][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.489818][ T8603] RIP: 0033:0x7f5c12d8f7c9 [ 238.489833][ T8603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.489851][ T8603] RSP: 002b:00007f5c13c12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 238.489869][ T8603] RAX: ffffffffffffffda RBX: 00007f5c12fe5fa0 RCX: 00007f5c12d8f7c9 [ 238.489881][ T8603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 238.489892][ T8603] RBP: 00007f5c12e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 238.489909][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.489920][ T8603] R13: 00007f5c12fe6038 R14: 00007f5c12fe5fa0 R15: 00007ffd9da751c8 [ 238.489943][ T8603] [ 240.724618][ T8605] FAULT_INJECTION: forcing a failure. [ 240.724618][ T8605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.121537][ T8605] CPU: 1 UID: 0 PID: 8605 Comm: syz.4.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.121568][ T8605] Tainted: [L]=SOFTLOCKUP [ 241.121574][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.121585][ T8605] Call Trace: [ 241.121590][ T8605] [ 241.121598][ T8605] dump_stack_lvl+0x16c/0x1f0 [ 241.121630][ T8605] should_fail_ex+0x512/0x640 [ 241.121653][ T8605] _copy_from_user+0x2e/0xd0 [ 241.121673][ T8605] __x64_sys_rt_sigprocmask+0x174/0x290 [ 241.121698][ T8605] ? __pfx___x64_sys_rt_sigprocmask+0x10/0x10 [ 241.121729][ T8605] do_syscall_64+0xcd/0xf80 [ 241.121757][ T8605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.121776][ T8605] RIP: 0033:0x7f5c12d46c3d [ 241.121791][ T8605] Code: 27 00 4c 8d 7c 24 58 c6 44 24 56 00 41 ba 08 00 00 00 31 ff c6 44 24 57 00 4c 89 fa b8 0e 00 00 00 48 8d 35 1d a1 0e 00 0f 05 <49> 8b 44 24 28 48 85 c0 0f 84 65 02 00 00 80 b8 90 00 00 00 00 0f [ 241.121809][ T8605] RSP: 002b:00007ffd9da75170 EFLAGS: 00000246 ORIG_RAX: 000000000000000e [ 241.121826][ T8605] RAX: ffffffffffffffda RBX: 00007f5c13b6d6c0 RCX: 00007f5c12d46c3d [ 241.121838][ T8605] RDX: 00007ffd9da751c8 RSI: 00007f5c12e30d58 RDI: 0000000000000000 [ 241.121848][ T8605] RBP: 0000000000000000 R08: 00000000000201c0 R09: 0000000000000000 [ 241.121859][ T8605] R10: 0000000000000008 R11: 0000000000000246 R12: 00007ffd9da752c0 [ 241.121870][ T8605] R13: 00007f5c13b4d000 R14: 00007f5c13b6d6c0 R15: 00007ffd9da751c8 [ 241.121892][ T8605] [ 241.787140][ T8656] futex_wake_op: syz.2.536 tries to shift op by -2048; fix this program [ 241.789055][ T8656] futex_wake_op: syz.2.536 tries to shift op by -2048; fix this program [ 241.826887][ T8656] ubi1: attaching mtd0 [ 241.847296][ T8656] ubi1: scanning is finished [ 241.847341][ T8656] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 242.061071][ T8656] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 242.583582][ T5840] Bluetooth: hci1: unexpected event 0x13 length: 440 > 260 [ 244.826807][ T8724] mkiss: ax0: crc mode is auto. [ 245.841433][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 247.289496][ T8773] hub 1-0:1.0: USB hub found [ 247.396309][ T8773] hub 1-0:1.0: 1 port detected [ 248.920685][ T8796] FAULT_INJECTION: forcing a failure. [ 248.920685][ T8796] name failslab, interval 1, probability 0, space 0, times 0 [ 249.090806][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.2.562 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.090837][ T8796] Tainted: [L]=SOFTLOCKUP [ 249.090844][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.090854][ T8796] Call Trace: [ 249.090860][ T8796] [ 249.090867][ T8796] dump_stack_lvl+0x16c/0x1f0 [ 249.090898][ T8796] should_fail_ex+0x512/0x640 [ 249.090918][ T8796] ? __kmalloc_cache_noprof+0x5f/0x800 [ 249.090942][ T8796] should_failslab+0xc2/0x120 [ 249.090969][ T8796] __kmalloc_cache_noprof+0x80/0x800 [ 249.090989][ T8796] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 249.091014][ T8796] ? sctp_endpoint_new+0xfc/0xb20 [ 249.091045][ T8796] ? sctp_endpoint_new+0xfc/0xb20 [ 249.091071][ T8796] sctp_endpoint_new+0xfc/0xb20 [ 249.091101][ T8796] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 249.091130][ T8796] ? lockdep_init_map_type+0x5c/0x270 [ 249.091150][ T8796] ? lockdep_init_map_type+0x5c/0x270 [ 249.091171][ T8796] sctp_init_sock+0xe2b/0x1310 [ 249.091197][ T8796] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 249.091225][ T8796] sctp_v6_init_sock+0x16/0x70 [ 249.091250][ T8796] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 249.091277][ T8796] inet6_create+0xb30/0x12b0 [ 249.091306][ T8796] ? inet6_create+0x7f/0x12b0 [ 249.091334][ T8796] __sock_create+0x339/0x8a0 [ 249.091368][ T8796] __sys_socket+0x14d/0x260 [ 249.091384][ T8796] ? fput+0x70/0xf0 [ 249.091401][ T8796] ? __pfx___sys_socket+0x10/0x10 [ 249.091424][ T8796] ? xfd_validate_state+0x61/0x180 [ 249.091440][ T8796] ? __pfx_ksys_write+0x10/0x10 [ 249.091470][ T8796] __x64_sys_socket+0x72/0xb0 [ 249.091485][ T8796] ? lockdep_hardirqs_on+0x7c/0x110 [ 249.091512][ T8796] do_syscall_64+0xcd/0xf80 [ 249.091540][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.091559][ T8796] RIP: 0033:0x7feaf618f7c9 [ 249.091573][ T8796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.091591][ T8796] RSP: 002b:00007feaf6ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 249.091609][ T8796] RAX: ffffffffffffffda RBX: 00007feaf63e5fa0 RCX: 00007feaf618f7c9 [ 249.091621][ T8796] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 249.091631][ T8796] RBP: 00007feaf6213f91 R08: 0000000000000000 R09: 0000000000000000 [ 249.091642][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.091652][ T8796] R13: 00007feaf63e6038 R14: 00007feaf63e5fa0 R15: 00007fff1724dc18 [ 249.091674][ T8796] [ 250.315307][ T8809] netlink: 342 bytes leftover after parsing attributes in process `syz.4.565'. [ 250.374488][ T8809] IPv6: Can't replace route, no match found [ 252.327034][ T30] audit: type=1800 audit(1765858868.735:18): pid=8851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.574" name="dbroot" dev="configfs" ino=24637 res=0 errno=0 [ 254.477743][ T8882] FAULT_INJECTION: forcing a failure. [ 254.477743][ T8882] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 254.604499][ T8882] CPU: 1 UID: 0 PID: 8882 Comm: syz.4.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.604531][ T8882] Tainted: [L]=SOFTLOCKUP [ 254.604538][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.604548][ T8882] Call Trace: [ 254.604555][ T8882] [ 254.604562][ T8882] dump_stack_lvl+0x16c/0x1f0 [ 254.604595][ T8882] should_fail_ex+0x512/0x640 [ 254.604620][ T8882] should_fail_alloc_page+0xe7/0x130 [ 254.604650][ T8882] prepare_alloc_pages+0x401/0x670 [ 254.604679][ T8882] ? rcu_is_watching+0x12/0xc0 [ 254.604707][ T8882] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 254.604735][ T8882] ? mas_next_slot+0x12d3/0x1cb0 [ 254.604769][ T8882] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 254.604795][ T8882] ? mas_find+0x156/0x6d0 [ 254.604815][ T8882] ? __lock_acquire+0x436/0x2890 [ 254.604834][ T8882] ? __lock_acquire+0x436/0x2890 [ 254.604850][ T8882] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.604879][ T8882] ? policy_nodemask+0xea/0x4e0 [ 254.604908][ T8882] alloc_pages_mpol+0x1fb/0x550 [ 254.604936][ T8882] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 254.604970][ T8882] folio_alloc_mpol_noprof+0x36/0x2f0 [ 254.604990][ T8882] vma_alloc_folio_noprof+0xed/0x1e0 [ 254.605009][ T8882] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 254.605034][ T8882] do_anonymous_page+0xc81/0x2190 [ 254.605061][ T8882] __handle_mm_fault+0x1ecf/0x2bb0 [ 254.605086][ T8882] ? __pfx___handle_mm_fault+0x10/0x10 [ 254.605107][ T8882] ? __pte_offset_map_lock+0x174/0x310 [ 254.605133][ T8882] ? find_held_lock+0x2b/0x80 [ 254.605162][ T8882] ? follow_page_pte+0x5cf/0x1390 [ 254.605194][ T8882] handle_mm_fault+0x3fe/0xad0 [ 254.605216][ T8882] __get_user_pages+0x54e/0x3590 [ 254.605252][ T8882] ? __pfx___get_user_pages+0x10/0x10 [ 254.605295][ T8882] populate_vma_page_range+0x267/0x3f0 [ 254.605327][ T8882] ? __pfx_populate_vma_page_range+0x10/0x10 [ 254.605361][ T8882] ? __pfx_find_vma_intersection+0x10/0x10 [ 254.605389][ T8882] ? do_mmap+0x69c/0x1210 [ 254.605417][ T8882] __mm_populate+0x1d8/0x380 [ 254.605447][ T8882] ? __pfx___mm_populate+0x10/0x10 [ 254.605482][ T8882] ? up_write+0x282/0x4e0 [ 254.605505][ T8882] vm_mmap_pgoff+0x37f/0x470 [ 254.605533][ T8882] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 254.605564][ T8882] ? __x64_sys_futex+0x1e0/0x4c0 [ 254.605584][ T8882] ? __x64_sys_futex+0x1e9/0x4c0 [ 254.605608][ T8882] ksys_mmap_pgoff+0x7d/0x5c0 [ 254.605634][ T8882] ? xfd_validate_state+0x61/0x180 [ 254.605651][ T8882] ? __pfx_do_writev+0x10/0x10 [ 254.605678][ T8882] __x64_sys_mmap+0x125/0x190 [ 254.605699][ T8882] do_syscall_64+0xcd/0xf80 [ 254.605727][ T8882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.605746][ T8882] RIP: 0033:0x7f5c12d8f7c9 [ 254.605763][ T8882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.605781][ T8882] RSP: 002b:00007f5c13c12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 254.605800][ T8882] RAX: ffffffffffffffda RBX: 00007f5c12fe5fa0 RCX: 00007f5c12d8f7c9 [ 254.605812][ T8882] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 254.605822][ T8882] RBP: 00007f5c12e13f91 R08: 0000000000000007 R09: 0000000000028000 [ 254.605833][ T8882] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 254.605844][ T8882] R13: 00007f5c12fe6038 R14: 00007f5c12fe5fa0 R15: 00007ffd9da751c8 [ 254.605867][ T8882] [ 257.500856][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 258.778510][ T8955] dyndbg: expected <4096 bytes into control [ 259.808490][ T8984] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 260.187148][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.604'. [ 260.354583][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.361134][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.383480][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.449321][ T8994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.524933][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.582145][ T8994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.124548][ T8999] Process accounting resumed [ 261.943922][ T9012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.608'. [ 262.193070][ T9027] usb usb36: usbfs: process 9027 (syz.1.610) did not claim interface 0 before use [ 264.112242][ T9056] netlink: 330 bytes leftover after parsing attributes in process `syz.4.614'. [ 266.675511][ T9094] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[9094] [ 268.320826][ T9132] FAULT_INJECTION: forcing a failure. [ 268.320826][ T9132] name failslab, interval 1, probability 0, space 0, times 0 [ 268.417891][ T9132] CPU: 1 UID: 0 PID: 9132 Comm: syz.4.632 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.417925][ T9132] Tainted: [L]=SOFTLOCKUP [ 268.417932][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.417945][ T9132] Call Trace: [ 268.417954][ T9132] [ 268.417964][ T9132] dump_stack_lvl+0x16c/0x1f0 [ 268.417998][ T9132] should_fail_ex+0x512/0x640 [ 268.418019][ T9132] ? kmem_cache_alloc_noprof+0x62/0x770 [ 268.418045][ T9132] should_failslab+0xc2/0x120 [ 268.418073][ T9132] kmem_cache_alloc_noprof+0x83/0x770 [ 268.418095][ T9132] ? __pmd_alloc+0xbf/0x9c0 [ 268.418126][ T9132] ? __pmd_alloc+0xbf/0x9c0 [ 268.418153][ T9132] __pmd_alloc+0xbf/0x9c0 [ 268.418179][ T9132] ? __pud_alloc+0x57a/0x760 [ 268.418215][ T9132] walk_to_pmd+0x3a6/0x4c0 [ 268.418248][ T9132] __get_locked_pte+0x25/0xc0 [ 268.418283][ T9132] map_ldt_struct+0x3b0/0xa60 [ 268.418313][ T9132] ? __pfx_map_ldt_struct+0x10/0x10 [ 268.418347][ T9132] ? alloc_pages_noprof+0x23c/0x390 [ 268.418379][ T9132] write_ldt+0x8fa/0xd20 [ 268.418404][ T9132] ? __pfx_write_ldt+0x10/0x10 [ 268.418426][ T9132] ? fput+0x70/0xf0 [ 268.418446][ T9132] ? __pfx_ksys_write+0x10/0x10 [ 268.418479][ T9132] __x64_sys_modify_ldt+0xb1/0x170 [ 268.418504][ T9132] do_syscall_64+0xcd/0xf80 [ 268.418534][ T9132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.418552][ T9132] RIP: 0033:0x7f5c12d8f7c9 [ 268.418568][ T9132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.418586][ T9132] RSP: 002b:00007f5c13bf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 268.418606][ T9132] RAX: ffffffffffffffda RBX: 00007f5c12fe6090 RCX: 00007f5c12d8f7c9 [ 268.418618][ T9132] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 268.418631][ T9132] RBP: 00007f5c12e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.418642][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.418655][ T9132] R13: 00007f5c12fe6128 R14: 00007f5c12fe6090 R15: 00007ffd9da751c8 [ 268.418681][ T9132] [ 269.414984][ T9144] FAULT_INJECTION: forcing a failure. [ 269.414984][ T9144] name failslab, interval 1, probability 0, space 0, times 0 [ 269.463842][ T9144] CPU: 1 UID: 0 PID: 9144 Comm: syz.3.643 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.463875][ T9144] Tainted: [L]=SOFTLOCKUP [ 269.463882][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 269.463893][ T9144] Call Trace: [ 269.463899][ T9144] [ 269.463906][ T9144] dump_stack_lvl+0x16c/0x1f0 [ 269.463940][ T9144] should_fail_ex+0x512/0x640 [ 269.463960][ T9144] ? __kmalloc_cache_noprof+0x5f/0x800 [ 269.463985][ T9144] should_failslab+0xc2/0x120 [ 269.464013][ T9144] __kmalloc_cache_noprof+0x80/0x800 [ 269.464034][ T9144] ? o2hb_debug_open+0x140/0x780 [ 269.464058][ T9144] ? o2hb_debug_open+0x140/0x780 [ 269.464078][ T9144] o2hb_debug_open+0x140/0x780 [ 269.464097][ T9144] ? lockdep_init_map_type+0x5c/0x270 [ 269.464117][ T9144] ? mutex_init_lockep+0x110/0x150 [ 269.464136][ T9144] ? __pfx_o2hb_debug_open+0x10/0x10 [ 269.464154][ T9144] ? __debugfs_file_get+0x1fe/0x840 [ 269.464180][ T9144] ? __pfx_apparmor_file_open+0x10/0x10 [ 269.464202][ T9144] ? __pfx_o2hb_debug_open+0x10/0x10 [ 269.464221][ T9144] full_proxy_open_regular+0x1b9/0x350 [ 269.464249][ T9144] do_dentry_open+0x748/0x1590 [ 269.464276][ T9144] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 269.464309][ T9144] vfs_open+0x82/0x3f0 [ 269.464341][ T9144] path_openat+0x2078/0x3140 [ 269.464376][ T9144] ? __pfx_path_openat+0x10/0x10 [ 269.464411][ T9144] do_filp_open+0x20b/0x470 [ 269.464439][ T9144] ? __pfx_do_filp_open+0x10/0x10 [ 269.464482][ T9144] ? alloc_fd+0x471/0x7d0 [ 269.464515][ T9144] do_sys_openat2+0x121/0x290 [ 269.464535][ T9144] ? __pfx_do_sys_openat2+0x10/0x10 [ 269.464565][ T9144] __x64_sys_openat+0x174/0x210 [ 269.464586][ T9144] ? __pfx___x64_sys_openat+0x10/0x10 [ 269.464616][ T9144] do_syscall_64+0xcd/0xf80 [ 269.464644][ T9144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.464663][ T9144] RIP: 0033:0x7f74e038f7c9 [ 269.464678][ T9144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.464697][ T9144] RSP: 002b:00007f74e11f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 269.464715][ T9144] RAX: ffffffffffffffda RBX: 00007f74e05e5fa0 RCX: 00007f74e038f7c9 [ 269.464727][ T9144] RDX: 0000000000044000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 269.464739][ T9144] RBP: 00007f74e0413f91 R08: 0000000000000000 R09: 0000000000000000 [ 269.464749][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.464760][ T9144] R13: 00007f74e05e6038 R14: 00007f74e05e5fa0 R15: 00007ffc05c2b758 [ 269.464782][ T9144] [ 269.862820][ T30] audit: type=1800 audit(1765860934.360:19): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="dbroot" dev="configfs" ino=26171 res=0 errno=0 [ 271.161254][ T9165] vhci_hcd vhci_hcd.2: invalid port number 16 [ 271.200232][ T9165] vhci_hcd vhci_hcd.2: invalid port number 16 [ 271.816674][ T9181] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 271.949538][ T9180] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 272.175723][ T9189] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 1040 [ 276.266494][ T9264] netlink: 206 bytes leftover after parsing attributes in process `syz.2.660'. [ 277.593288][ T9286] random: crng reseeded on system resumption [ 277.662699][ T9232] FAULT_INJECTION: forcing a failure. [ 277.662699][ T9232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.784375][ T9232] CPU: 1 UID: 0 PID: 9232 Comm: syz.1.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.784408][ T9232] Tainted: [L]=SOFTLOCKUP [ 277.784415][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.784426][ T9232] Call Trace: [ 277.784432][ T9232] [ 277.784439][ T9232] dump_stack_lvl+0x16c/0x1f0 [ 277.784471][ T9232] should_fail_ex+0x512/0x640 [ 277.784494][ T9232] _copy_from_user+0x2e/0xd0 [ 277.784514][ T9232] get_timespec64+0x8b/0x1b0 [ 277.784533][ T9232] ? __pfx_get_timespec64+0x10/0x10 [ 277.784550][ T9232] ? ktime_get+0x200/0x310 [ 277.784571][ T9232] __x64_sys_futex+0x288/0x4c0 [ 277.784595][ T9232] ? __pfx___x64_sys_futex+0x10/0x10 [ 277.784616][ T9232] ? xfd_validate_state+0x61/0x180 [ 277.784640][ T9232] do_syscall_64+0xcd/0xf80 [ 277.784668][ T9232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.784687][ T9232] RIP: 0033:0x7f3b7a98f7c9 [ 277.784703][ T9232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.784720][ T9232] RSP: 002b:00007ffdfdeeb2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 277.784738][ T9232] RAX: ffffffffffffffda RBX: 0000000000043fb3 RCX: 00007f3b7a98f7c9 [ 277.784750][ T9232] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3b7abe609c [ 277.784760][ T9232] RBP: 0000000000000032 R08: 00007f3b7b852000 R09: 00000018fdeeb5cf [ 277.784771][ T9232] R10: 00007ffdfdeeb3d0 R11: 0000000000000246 R12: 00007f3b7abe609c [ 277.784782][ T9232] R13: 00007ffdfdeeb3d0 R14: 0000000000043fe5 R15: 00007ffdfdeeb3f0 [ 277.784803][ T9232] [ 279.294451][ T30] audit: type=1800 audit(1765860943.849:20): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.666" name="dbroot" dev="configfs" ino=27070 res=0 errno=0 [ 280.729845][ T9316] bond0: invalid ARP target specified [ 280.785885][ T9318] FAULT_INJECTION: forcing a failure. [ 280.785885][ T9318] name failslab, interval 1, probability 0, space 0, times 0 [ 280.839381][ T9318] CPU: 1 UID: 0 PID: 9318 Comm: syz.4.671 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.839414][ T9318] Tainted: [L]=SOFTLOCKUP [ 280.839420][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.839430][ T9318] Call Trace: [ 280.839436][ T9318] [ 280.839443][ T9318] dump_stack_lvl+0x16c/0x1f0 [ 280.839476][ T9318] should_fail_ex+0x512/0x640 [ 280.839496][ T9318] ? kmem_cache_alloc_noprof+0x62/0x770 [ 280.839528][ T9318] should_failslab+0xc2/0x120 [ 280.839556][ T9318] kmem_cache_alloc_noprof+0x83/0x770 [ 280.839578][ T9318] ? security_file_alloc+0x34/0x2b0 [ 280.839604][ T9318] ? security_file_alloc+0x34/0x2b0 [ 280.839625][ T9318] security_file_alloc+0x34/0x2b0 [ 280.839649][ T9318] init_file+0x93/0x4c0 [ 280.839667][ T9318] alloc_empty_file+0x73/0x1e0 [ 280.839687][ T9318] path_openat+0xde/0x3140 [ 280.839720][ T9318] ? __pfx_path_openat+0x10/0x10 [ 280.839755][ T9318] do_filp_open+0x20b/0x470 [ 280.839783][ T9318] ? __pfx_do_filp_open+0x10/0x10 [ 280.839824][ T9318] ? alloc_fd+0x471/0x7d0 [ 280.839857][ T9318] do_sys_openat2+0x121/0x290 [ 280.839877][ T9318] ? __pfx_do_sys_openat2+0x10/0x10 [ 280.839904][ T9318] __x64_sys_openat+0x174/0x210 [ 280.839925][ T9318] ? __pfx___x64_sys_openat+0x10/0x10 [ 280.839954][ T9318] do_syscall_64+0xcd/0xf80 [ 280.839982][ T9318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.840002][ T9318] RIP: 0033:0x7f5c12d8f7c9 [ 280.840017][ T9318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.840035][ T9318] RSP: 002b:00007f5c13c12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 280.840053][ T9318] RAX: ffffffffffffffda RBX: 00007f5c12fe5fa0 RCX: 00007f5c12d8f7c9 [ 280.840064][ T9318] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 280.840075][ T9318] RBP: 00007f5c12e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 280.840086][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.840096][ T9318] R13: 00007f5c12fe6038 R14: 00007f5c12fe5fa0 R15: 00007ffd9da751c8 [ 280.840119][ T9318] [ 280.842060][ T9319] zswap: compressor ó'ŽC5laD=%€«1Q,I|¸$âê¹[ͪÖ¶f<‡âúyÜÂ6ËÎjšØãf¶ ñ@àhÎë‘U@ƒˆ`sÌÖ¡’6ÈcÜTw Ó'ǯh }Ó2·7ûkæÍð*î¢R‹Ê[eû¨D™W†!¨Ÿ<+ƒ¿Ò!7ÉIÅâV9?+˜¡«í¢¼ not available [ 281.715961][ T9334] zswap: compressor ó'ŽC5laD=%€«1Q,I|¸$âê¹[ͪÖ¶f<‡âúyÜÂ6ËÎjšØãf¶ ñ@àhÎë‘U@ƒˆ`sÌÖ¡’6ÈcÜTw Ó'ǯh }Ó2·7ûkæÍð*î¢R‹Ê[eû¨D™W†!¨Ÿ<+ƒ¿Ò!7ÉIÅâV9?+˜¡«í¢¼ not available [ 284.907516][ T9375] random: crng reseeded on system resumption [ 285.395121][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.684'. [ 285.587728][ T9382] ipvlan0: entered promiscuous mode [ 285.617460][ T9382] ipvlan0: entered allmulticast mode [ 285.683741][ T9382] veth0_vlan: entered allmulticast mode [ 288.138743][ T30] audit: type=1800 audit(1765860952.735:21): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.691" name="dbroot" dev="configfs" ino=27703 res=0 errno=0 [ 289.453890][ T30] audit: type=1800 audit(1765860954.061:22): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.697" name="lu_gp_id" dev="configfs" ino=27836 res=0 errno=0 [ 289.494978][ T9425] ALUA LU Group already has a valid ID, ignoring request [ 290.853188][ T9450] XFS: Clearing xfsstats [ 290.986336][ T30] audit: type=1800 audit(1765860955.599:23): pid=9452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.702" name="dbroot" dev="configfs" ino=28176 res=0 errno=0 [ 291.121248][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 291.191476][ T9455] netlink: 25 bytes leftover after parsing attributes in process `syz.4.700'. [ 291.597733][ T9453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 291.628009][ T9453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.651720][ T9453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.677914][ T9453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.699725][ T9453] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 291.720687][ T9453] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 291.742699][ T9453] CPU0 is offline. [ 291.848069][ T9449] Process accounting paused [ 291.991768][ T9462] FAULT_INJECTION: forcing a failure. [ 291.991768][ T9462] name fail_futex, interval 1, probability 0, space 0, times 0 [ 292.071136][ T9462] CPU: 1 UID: 0 PID: 9462 Comm: syz.4.704 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.071167][ T9462] Tainted: [L]=SOFTLOCKUP [ 292.071173][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.071183][ T9462] Call Trace: [ 292.071189][ T9462] [ 292.071196][ T9462] dump_stack_lvl+0x16c/0x1f0 [ 292.071236][ T9462] should_fail_ex+0x512/0x640 [ 292.071260][ T9462] get_futex_key+0x1d0/0x15f0 [ 292.071283][ T9462] ? __pfx_get_futex_key+0x10/0x10 [ 292.071309][ T9462] futex_wake+0xea/0x530 [ 292.071332][ T9462] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.071361][ T9462] ? __pfx_futex_wake+0x10/0x10 [ 292.071383][ T9462] ? kmem_cache_free+0x2d8/0x770 [ 292.071406][ T9462] ? getname_flags.part.0+0x24c/0x550 [ 292.071430][ T9462] ? getname_flags.part.0+0x24c/0x550 [ 292.071449][ T9462] ? getname_flags.part.0+0x1c5/0x550 [ 292.071470][ T9462] do_futex+0x1e3/0x350 [ 292.071491][ T9462] ? __pfx_do_futex+0x10/0x10 [ 292.071518][ T9462] __x64_sys_futex+0x1e0/0x4c0 [ 292.071540][ T9462] ? __x64_sys_openat+0x174/0x210 [ 292.071561][ T9462] ? __pfx___x64_sys_futex+0x10/0x10 [ 292.071590][ T9462] do_syscall_64+0xcd/0xf80 [ 292.071618][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.071637][ T9462] RIP: 0033:0x7f5c12d8f7c9 [ 292.071652][ T9462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.071670][ T9462] RSP: 002b:00007f5c13c120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 292.071687][ T9462] RAX: ffffffffffffffda RBX: 00007f5c12fe5fa8 RCX: 00007f5c12d8f7c9 [ 292.071699][ T9462] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5c12fe5fac [ 292.071710][ T9462] RBP: 00007f5c12fe5fa0 R08: 00007f5c13c13000 R09: 0000000000000000 [ 292.071721][ T9462] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 292.071732][ T9462] R13: 00007f5c12fe6038 R14: 00007ffd9da750e0 R15: 00007ffd9da751c8 [ 292.071754][ T9462] [ 293.143860][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 293.454299][ T9482] FAULT_INJECTION: forcing a failure. [ 293.454299][ T9482] name failslab, interval 1, probability 0, space 0, times 0 [ 293.533861][ T9482] CPU: 1 UID: 0 PID: 9482 Comm: syz.4.709 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.533893][ T9482] Tainted: [L]=SOFTLOCKUP [ 293.533899][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.533910][ T9482] Call Trace: [ 293.533916][ T9482] [ 293.533924][ T9482] dump_stack_lvl+0x16c/0x1f0 [ 293.533956][ T9482] should_fail_ex+0x512/0x640 [ 293.533975][ T9482] ? __kmalloc_noprof+0xca/0x910 [ 293.533998][ T9482] should_failslab+0xc2/0x120 [ 293.534026][ T9482] __kmalloc_noprof+0xeb/0x910 [ 293.534044][ T9482] ? __kernel_text_address+0xd/0x40 [ 293.534065][ T9482] ? unwind_get_return_address+0x59/0xa0 [ 293.534089][ T9482] ? constrain_params_by_rules+0x175/0xca0 [ 293.534123][ T9482] ? constrain_params_by_rules+0x175/0xca0 [ 293.534151][ T9482] constrain_params_by_rules+0x175/0xca0 [ 293.534184][ T9482] ? stack_trace_save+0x8e/0xc0 [ 293.534225][ T9482] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 293.534261][ T9482] ? __kasan_kmalloc+0xaa/0xb0 [ 293.534284][ T9482] ? snd_pcm_oss_change_params_locked+0x86d/0x3ab0 [ 293.534315][ T9482] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 293.534344][ T9482] ? snd_pcm_oss_sync+0x32e/0x840 [ 293.534369][ T9482] ? snd_interval_refine+0x2fa/0x580 [ 293.534397][ T9482] snd_pcm_hw_refine+0x7de/0xad0 [ 293.534430][ T9482] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 293.534469][ T9482] ? snd_interval_refine+0x2fa/0x580 [ 293.534496][ T9482] snd_pcm_oss_change_params_locked+0x220c/0x3ab0 [ 293.534537][ T9482] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 293.534571][ T9482] ? __pfx___mutex_lock+0x10/0x10 [ 293.534611][ T9482] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 293.534643][ T9482] snd_pcm_oss_sync+0x32e/0x840 [ 293.534660][ T9482] ? kmem_cache_free+0x171/0x770 [ 293.534685][ T9482] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 293.534702][ T9482] snd_pcm_oss_release+0x28b/0x310 [ 293.534721][ T9482] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 293.534738][ T9482] __fput+0x402/0xb70 [ 293.534761][ T9482] task_work_run+0x150/0x240 [ 293.534781][ T9482] ? __pfx_task_work_run+0x10/0x10 [ 293.534800][ T9482] ? __do_sys_close_range+0x278/0x730 [ 293.534834][ T9482] exit_to_user_mode_loop+0xfb/0x540 [ 293.534859][ T9482] do_syscall_64+0x4ee/0xf80 [ 293.534892][ T9482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.534911][ T9482] RIP: 0033:0x7f5c12d8f7c9 [ 293.534927][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.534946][ T9482] RSP: 002b:00007f5c13c12038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 293.534964][ T9482] RAX: 0000000000000000 RBX: 00007f5c12fe5fa0 RCX: 00007f5c12d8f7c9 [ 293.534976][ T9482] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 293.534986][ T9482] RBP: 00007f5c12e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 293.534997][ T9482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.535008][ T9482] R13: 00007f5c12fe6038 R14: 00007f5c12fe5fa0 R15: 00007ffd9da751c8 [ 293.535031][ T9482] [ 294.320306][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 294.338757][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.344999][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 294.827427][ T9493] zswap: compressor not available [ 294.913697][ T9504] futex_wake_op: syz.2.714 tries to shift op by -2048; fix this program [ 294.975822][ T9504] futex_wake_op: syz.2.714 tries to shift op by -2048; fix this program [ 296.410857][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.472904][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 299.401872][ T30] audit: type=1326 audit(1765860964.063:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.4.727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c12d8f7c9 code=0x0 [ 300.902893][ T9579] FAULT_INJECTION: forcing a failure. [ 300.902893][ T9579] name failslab, interval 1, probability 0, space 0, times 0 [ 300.928901][ T9560] zswap: compressor not available [ 300.985229][ T9579] CPU: 1 UID: 0 PID: 9579 Comm: syz.2.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.985271][ T9579] Tainted: [L]=SOFTLOCKUP [ 300.985277][ T9579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.985289][ T9579] Call Trace: [ 300.985295][ T9579] [ 300.985302][ T9579] dump_stack_lvl+0x16c/0x1f0 [ 300.985334][ T9579] should_fail_ex+0x512/0x640 [ 300.985354][ T9579] ? __kmalloc_cache_noprof+0x5f/0x800 [ 300.985378][ T9579] should_failslab+0xc2/0x120 [ 300.985407][ T9579] __kmalloc_cache_noprof+0x80/0x800 [ 300.985427][ T9579] ? rfkill_fop_open+0x1b6/0x750 [ 300.985453][ T9579] ? rfkill_fop_open+0x1b6/0x750 [ 300.985476][ T9579] rfkill_fop_open+0x1b6/0x750 [ 300.985501][ T9579] ? __pfx_rfkill_fop_open+0x10/0x10 [ 300.985525][ T9579] misc_open+0x26d/0x450 [ 300.985546][ T9579] ? __pfx_misc_open+0x10/0x10 [ 300.985566][ T9579] chrdev_open+0x234/0x6a0 [ 300.985594][ T9579] ? __pfx_apparmor_file_open+0x10/0x10 [ 300.985613][ T9579] ? __pfx_chrdev_open+0x10/0x10 [ 300.985642][ T9579] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 300.985676][ T9579] do_dentry_open+0x748/0x1590 [ 300.985701][ T9579] ? __pfx_chrdev_open+0x10/0x10 [ 300.985735][ T9579] vfs_open+0x82/0x3f0 [ 300.985756][ T9579] path_openat+0x2078/0x3140 [ 300.985790][ T9579] ? __pfx_path_openat+0x10/0x10 [ 300.985826][ T9579] do_filp_open+0x20b/0x470 [ 300.985854][ T9579] ? __pfx_do_filp_open+0x10/0x10 [ 300.985897][ T9579] ? alloc_fd+0x471/0x7d0 [ 300.985930][ T9579] do_sys_openat2+0x121/0x290 [ 300.985949][ T9579] ? __pfx_do_sys_openat2+0x10/0x10 [ 300.985978][ T9579] __x64_sys_openat+0x174/0x210 [ 300.985999][ T9579] ? __pfx___x64_sys_openat+0x10/0x10 [ 300.986028][ T9579] do_syscall_64+0xcd/0xf80 [ 300.986057][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.986075][ T9579] RIP: 0033:0x7feaf618f7c9 [ 300.986091][ T9579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.986109][ T9579] RSP: 002b:00007feaf6ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 300.986127][ T9579] RAX: ffffffffffffffda RBX: 00007feaf63e5fa0 RCX: 00007feaf618f7c9 [ 300.986139][ T9579] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 300.986151][ T9579] RBP: 00007feaf6213f91 R08: 0000000000000000 R09: 0000000000000000 [ 300.986161][ T9579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.986172][ T9579] R13: 00007feaf63e6038 R14: 00007feaf63e5fa0 R15: 00007fff1724dc18 [ 300.986195][ T9579] [ 301.716008][ T9585] random: crng reseeded on system resumption [ 302.175771][ T9594] netlink: 'syz.4.735': attribute type 4 has an invalid length. [ 302.202664][ T9594] netlink: 314 bytes leftover after parsing attributes in process `syz.4.735'. [ 303.047852][ T9603] netlink: 342 bytes leftover after parsing attributes in process `syz.3.737'. [ 304.083542][ T9617] zswap: compressor not available [ 305.410210][ T30] audit: type=1800 audit(1765860970.094:25): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.742" name="dbroot" dev="configfs" ino=29452 res=0 errno=0 [ 305.667762][ T9633] netlink: 114 bytes leftover after parsing attributes in process `syz.3.742'. [ 306.150106][ T9637] usb usb37: usbfs: process 9637 (syz.3.743) did not claim interface 0 before use [ 306.655725][ T9644] netlink: 186 bytes leftover after parsing attributes in process `syz.3.745'. [ 307.023230][ T9651] random: crng reseeded on system resumption [ 307.153246][ T30] audit: type=1800 audit(1765860971.854:26): pid=9654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.747" name="dbroot" dev="configfs" ino=29614 res=0 errno=0 [ 307.281461][ T9658] FAULT_INJECTION: forcing a failure. [ 307.281461][ T9658] name failslab, interval 1, probability 0, space 0, times 0 [ 307.421507][ T9658] CPU: 1 UID: 0 PID: 9658 Comm: syz.2.747 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.421538][ T9658] Tainted: [L]=SOFTLOCKUP [ 307.421544][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.421555][ T9658] Call Trace: [ 307.421561][ T9658] [ 307.421568][ T9658] dump_stack_lvl+0x16c/0x1f0 [ 307.421600][ T9658] should_fail_ex+0x512/0x640 [ 307.421624][ T9658] should_failslab+0xc2/0x120 [ 307.421653][ T9658] __kmalloc_noprof+0xeb/0x910 [ 307.421672][ T9658] ? __lock_acquire+0x436/0x2890 [ 307.421690][ T9658] ? ___neigh_create+0x14ec/0x2920 [ 307.421724][ T9658] ? ___neigh_create+0x14ec/0x2920 [ 307.421751][ T9658] ___neigh_create+0x14ec/0x2920 [ 307.421785][ T9658] ? find_held_lock+0x2b/0x80 [ 307.421809][ T9658] ? ipv6_chk_mcast_addr+0x331/0x9a0 [ 307.421838][ T9658] ? __pfx____neigh_create+0x10/0x10 [ 307.421872][ T9658] ip6_finish_output2+0x11aa/0x1cf0 [ 307.421893][ T9658] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 307.421930][ T9658] __ip6_finish_output+0x3cd/0x1010 [ 307.421952][ T9658] ip6_output+0x253/0x710 [ 307.421974][ T9658] ip6_mr_output+0x233/0x11b0 [ 307.421999][ T9658] ? __pfx_nf_nat_ipv6_local_fn+0x10/0x10 [ 307.422020][ T9658] ? nf_nat_ipv6_local_fn+0x38a/0x530 [ 307.422042][ T9658] ? __pfx_ip6_mr_output+0x10/0x10 [ 307.422065][ T9658] ? __ip6_local_out+0x45b/0xa80 [ 307.422089][ T9658] ? nf_hook_slow+0x132/0x200 [ 307.422115][ T9658] ? __ip6_local_out+0x2f1/0xa80 [ 307.422144][ T9658] ? __pfx_dst_output+0x10/0x10 [ 307.422180][ T9658] ? ip6_local_out+0x2a9/0x4d0 [ 307.422202][ T9658] ip6_local_out+0x2a9/0x4d0 [ 307.422229][ T9658] ip6_send_skb+0x112/0x460 [ 307.422250][ T9658] ip6_push_pending_frames+0xdd/0x100 [ 307.422272][ T9658] rawv6_sendmsg+0x307e/0x4860 [ 307.422299][ T9658] ? aa_label_sk_perm+0x194/0x5f0 [ 307.422325][ T9658] ? aa_profile_af_perm+0x2d0/0x390 [ 307.422349][ T9658] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 307.422410][ T9658] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 307.422440][ T9658] ? inet_sendmsg+0x11c/0x140 [ 307.422459][ T9658] inet_sendmsg+0x11c/0x140 [ 307.422480][ T9658] ____sys_sendmsg+0x973/0xc30 [ 307.422510][ T9658] ? copy_msghdr_from_user+0x10a/0x160 [ 307.422532][ T9658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.422565][ T9658] ? __pfx__kstrtoull+0x10/0x10 [ 307.422594][ T9658] ___sys_sendmsg+0x134/0x1d0 [ 307.422618][ T9658] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.422652][ T9658] ? find_held_lock+0x2b/0x80 [ 307.422690][ T9658] __sys_sendmmsg+0x200/0x420 [ 307.422716][ T9658] ? __pfx___sys_sendmmsg+0x10/0x10 [ 307.422747][ T9658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 307.422785][ T9658] ? fput+0x70/0xf0 [ 307.422803][ T9658] ? ksys_write+0x1ac/0x250 [ 307.422828][ T9658] ? __pfx_ksys_write+0x10/0x10 [ 307.422857][ T9658] __x64_sys_sendmmsg+0x9c/0x100 [ 307.422880][ T9658] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.422906][ T9658] do_syscall_64+0xcd/0xf80 [ 307.422935][ T9658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.422954][ T9658] RIP: 0033:0x7feaf618f7c9 [ 307.422969][ T9658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.422987][ T9658] RSP: 002b:00007feaf6fd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 307.423005][ T9658] RAX: ffffffffffffffda RBX: 00007feaf63e6090 RCX: 00007feaf618f7c9 [ 307.423016][ T9658] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000003 [ 307.423027][ T9658] RBP: 00007feaf6fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 307.423037][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.423048][ T9658] R13: 00007feaf63e6128 R14: 00007feaf63e6090 R15: 00007fff1724dc18 [ 307.423071][ T9658] [ 310.125502][ T9695] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 310.361670][ T9704] __vm_enough_memory: pid: 9704, comm: syz.4.757, bytes: 4398046511104 not enough memory for the allocation [ 311.046299][ T9711] futex_wake_op: syz.4.759 tries to shift op by -2048; fix this program [ 311.114071][ T9711] futex_wake_op: syz.4.759 tries to shift op by -2048; fix this program [ 311.164263][ T9712] 0x000000000001-0x000000020000 : "" [ 311.360651][ T9712] ftl_cs: FTL header corrupt! [ 311.661187][ T9717] Invalid ELF header magic: != ELF [ 313.703118][ T9738] zswap: compressor not available [ 314.350107][ T30] audit: type=1804 audit(1765860979.081:27): pid=9750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.765" name="/newroot/sys/kernel/tracing/trace_marker_raw" dev="tracefs" ino=1089 res=1 errno=0 [ 314.615314][ T30] audit: type=1800 audit(1765860979.352:28): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.766" name="members" dev="configfs" ino=30282 res=0 errno=0 [ 315.149453][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 315.737661][ T9785] random: crng reseeded on system resumption [ 315.831497][ T30] audit: type=1800 audit(1765860980.559:29): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.771" name="dbroot" dev="configfs" ino=30379 res=0 errno=0 [ 317.996449][ T30] audit: type=1800 audit(1765860982.750:30): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.777" name="dbroot" dev="configfs" ino=30509 res=0 errno=0 [ 319.405632][ T30] audit: type=1800 audit(1765860984.167:31): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.782" name="dbroot" dev="configfs" ino=30662 res=0 errno=0 [ 319.737067][ T9847] random: crng reseeded on system resumption [ 320.340864][ T9855] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 320.450911][ T9855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 320.554065][ T9855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 320.651685][ T9855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 320.739457][ T9855] CPU0 is offline. [ 321.157959][ T9867] sock: sock_timestamping_bind_phc: sock not bind to device [ 321.340003][ T30] audit: type=1800 audit(1765860986.107:32): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.788" name="dbroot" dev="configfs" ino=30772 res=0 errno=0 [ 321.476595][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.483173][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.076632][ T30] audit: type=1800 audit(1765860986.851:33): pid=9887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.793" name="dbroot" dev="configfs" ino=30911 res=0 errno=0 [ 322.349755][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 322.411721][ T7848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.507611][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 322.671537][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 322.679363][ T5828] Bluetooth: hci2: unexpected event 0x0f length: 440 > 4 [ 322.680270][ T5828] Bluetooth: hci2: unexpected event for opcode 0x0010 [ 322.695787][ T9898] random: crng reseeded on system resumption [ 322.775270][ T7848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.074965][ T7848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.235875][ T9910] ovs_: entered promiscuous mode [ 323.351926][ T7848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.619536][ T30] audit: type=1800 audit(1765860988.389:34): pid=9920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.802" name="dbroot" dev="configfs" ino=31017 res=0 errno=0 [ 323.999854][ T7848] bridge_slave_0: left allmulticast mode [ 324.005541][ T7848] bridge_slave_0: left promiscuous mode [ 324.039399][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.223745][ T30] audit: type=1800 audit(1765860989.012:35): pid=9930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.803" name="dbroot" dev="configfs" ino=31259 res=0 errno=0 [ 324.766108][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.776087][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.784232][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.794178][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.801642][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.807850][ T7848] bond0 (unregistering): (slave ›): Releasing backup interface [ 325.860255][ T7848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.898842][ T7848] bond0 (unregistering): Released all slaves [ 326.050440][ T9972] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 326.076886][ T9972] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.110632][ T9972] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 326.137972][ T9972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 326.155043][ T9972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 326.189431][ T9972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 326.221873][ T9972] CPU0 is offline. [ 326.440534][ T7848] hsr_slave_0: left promiscuous mode [ 326.464337][ T7848] hsr_slave_1: left promiscuous mode [ 326.530543][ T7848] veth1_macvtap: left promiscuous mode [ 759.737769][T17160] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 762.838891][T17219] ubi0: attaching mtd0 [ 762.865662][T17219] ubi0: scanning is finished [ 762.870309][T17219] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 763.106665][T17219] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 763.632771][T17236] FAULT_INJECTION: forcing a failure. [ 763.632771][T17236] name fail_futex, interval 1, probability 0, space 0, times 0 [ 763.714853][T17236] CPU: 1 UID: 0 PID: 17236 Comm: syz.7.2252 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.714885][T17236] Tainted: [L]=SOFTLOCKUP [ 763.714893][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 763.714903][T17236] Call Trace: [ 763.714910][T17236] [ 763.714917][T17236] dump_stack_lvl+0x16c/0x1f0 [ 763.714949][T17236] should_fail_ex+0x512/0x640 [ 763.714972][T17236] get_futex_key+0x1085/0x15f0 [ 763.714996][T17236] ? __pfx_get_futex_key+0x10/0x10 [ 763.715022][T17236] futex_wake+0xea/0x530 [ 763.715057][T17236] ? __pfx_futex_wake+0x10/0x10 [ 763.715091][T17236] do_futex+0x1e3/0x350 [ 763.715120][T17236] ? __pfx_do_futex+0x10/0x10 [ 763.715139][T17236] ? __might_fault+0xe3/0x190 [ 763.715167][T17236] mm_release+0x24e/0x300 [ 763.715193][T17236] do_exit+0x69e/0x2bd0 [ 763.715215][T17236] ? __pfx_do_exit+0x10/0x10 [ 763.715232][T17236] ? do_raw_spin_lock+0x12c/0x2b0 [ 763.715253][T17236] ? find_held_lock+0x2b/0x80 [ 763.715280][T17236] do_group_exit+0xd3/0x2a0 [ 763.715300][T17236] get_signal+0x2671/0x26d0 [ 763.715329][T17236] ? putname+0xf5/0x1a0 [ 763.715347][T17236] ? __pfx_get_signal+0x10/0x10 [ 763.715374][T17236] ? do_futex+0x122/0x350 [ 763.715396][T17236] arch_do_signal_or_restart+0x8f/0x7a0 [ 763.715424][T17236] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 763.715455][T17236] ? fput+0x70/0xf0 [ 763.715472][T17236] ? __pfx___x64_sys_futex+0x10/0x10 [ 763.715498][T17236] exit_to_user_mode_loop+0x8c/0x540 [ 763.715523][T17236] do_syscall_64+0x4ee/0xf80 [ 763.715552][T17236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.715570][T17236] RIP: 0033:0x7ff0b338f7c9 [ 763.715586][T17236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.715604][T17236] RSP: 002b:00007ff0b42a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 763.715622][T17236] RAX: fffffffffffffe00 RBX: 00007ff0b35e6098 RCX: 00007ff0b338f7c9 [ 763.715635][T17236] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff0b35e6098 [ 763.715646][T17236] RBP: 00007ff0b35e6090 R08: 0000000000000000 R09: 0000000000000000 [ 763.715657][T17236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.715668][T17236] R13: 00007ff0b35e6128 R14: 00007ffe400a9fa0 R15: 00007ffe400aa088 [ 763.715691][T17236] [ 765.446144][T17243] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2255'. [ 765.561217][T17243] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2255'. [ 767.010246][T17271] FAULT_INJECTION: forcing a failure. [ 767.010246][T17271] name failslab, interval 1, probability 0, space 0, times 0 [ 767.089937][T17271] CPU: 1 UID: 0 PID: 17271 Comm: syz.7.2261 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.089971][T17271] Tainted: [L]=SOFTLOCKUP [ 767.089979][T17271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 767.089990][T17271] Call Trace: [ 767.089997][T17271] [ 767.090004][T17271] dump_stack_lvl+0x16c/0x1f0 [ 767.090038][T17271] should_fail_ex+0x512/0x640 [ 767.090059][T17271] ? kmem_cache_alloc_noprof+0x62/0x770 [ 767.090085][T17271] should_failslab+0xc2/0x120 [ 767.090151][T17271] kmem_cache_alloc_noprof+0x83/0x770 [ 767.090174][T17271] ? __proc_create+0x2c8/0x8d0 [ 767.090204][T17271] ? __proc_create+0x2c8/0x8d0 [ 767.090227][T17271] __proc_create+0x2c8/0x8d0 [ 767.090252][T17271] ? __pfx___proc_create+0x10/0x10 [ 767.090279][T17271] ? _raw_write_unlock+0x28/0x50 [ 767.090305][T17271] ? proc_register+0x559/0x8b0 [ 767.090332][T17271] proc_create_reg+0x7d/0x180 [ 767.090359][T17271] proc_create_data+0x86/0x110 [ 767.090385][T17271] ? __pfx_proc_create_data+0x10/0x10 [ 767.090413][T17271] ? cache_register_net+0x137/0x5e0 [ 767.090446][T17271] cache_register_net+0x25a/0x5e0 [ 767.090477][T17271] gss_svc_init_net+0x151/0x660 [ 767.090502][T17271] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 767.090532][T17271] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 767.090558][T17271] ops_init+0x1e2/0x5f0 [ 767.090586][T17271] setup_net+0x11d/0x3a0 [ 767.090611][T17271] ? __pfx_setup_net+0x10/0x10 [ 767.090634][T17271] ? lockdep_init_map_type+0x5c/0x270 [ 767.090654][T17271] ? mutex_init_lockep+0x110/0x150 [ 767.090676][T17271] copy_net_ns+0x351/0x7c0 [ 767.090705][T17271] create_new_namespaces+0x3ea/0xab0 [ 767.090736][T17271] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 767.090764][T17271] ksys_unshare+0x45b/0xa40 [ 767.090795][T17271] ? __pfx_ksys_unshare+0x10/0x10 [ 767.090827][T17271] ? do_user_addr_fault+0x843/0x1370 [ 767.090853][T17271] __x64_sys_unshare+0x31/0x40 [ 767.090870][T17271] do_syscall_64+0xcd/0xf80 [ 767.090899][T17271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.090918][T17271] RIP: 0033:0x7ff0b338f7c9 [ 767.090935][T17271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.090957][T17271] RSP: 002b:00007ff0b42c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 767.090979][T17271] RAX: ffffffffffffffda RBX: 00007ff0b35e5fa0 RCX: 00007ff0b338f7c9 [ 767.090993][T17271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 767.091005][T17271] RBP: 00007ff0b3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 767.091017][T17271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.091029][T17271] R13: 00007ff0b35e6038 R14: 00007ff0b35e5fa0 R15: 00007ffe400aa088 [ 767.091053][T17271] [ 768.385937][T17302] nbd: must specify an index to disconnect [ 768.580843][T17304] ptrace attach of "./syz-executor exec"[10768] was attempted by ""[17304] [ 770.299086][T17335] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 770.944003][T17343] netlink: 'syz.4.2277': attribute type 10 has an invalid length. [ 770.980030][T17343] netlink: 230 bytes leftover after parsing attributes in process `syz.4.2277'. [ 771.302677][T17357] zswap: compressor not available [ 771.419742][T17367] FAULT_INJECTION: forcing a failure. [ 771.419742][T17367] name failslab, interval 1, probability 0, space 0, times 0 [ 771.557327][T17367] CPU: 1 UID: 0 PID: 17367 Comm: syz.5.2281 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.557361][T17367] Tainted: [L]=SOFTLOCKUP [ 771.557368][T17367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 771.557379][T17367] Call Trace: [ 771.557386][T17367] [ 771.557395][T17367] dump_stack_lvl+0x16c/0x1f0 [ 771.557428][T17367] should_fail_ex+0x512/0x640 [ 771.557449][T17367] ? __kmalloc_cache_noprof+0x5f/0x800 [ 771.557481][T17367] should_failslab+0xc2/0x120 [ 771.557510][T17367] __kmalloc_cache_noprof+0x80/0x800 [ 771.557532][T17367] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 771.557565][T17367] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 771.557593][T17367] drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 771.557626][T17367] drm_atomic_get_connector_state+0x3f8/0x900 [ 771.557652][T17367] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 771.557675][T17367] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 771.557697][T17367] ? modeset_lock+0x114/0x6d0 [ 771.557719][T17367] __drm_atomic_helper_set_config+0x5ef/0xea0 [ 771.557742][T17367] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 771.557767][T17367] ? drm_client_rotation+0x4da/0x6a0 [ 771.557793][T17367] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 771.557824][T17367] ? __mutex_lock+0x27b/0x1ca0 [ 771.557853][T17367] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 771.557877][T17367] ? trace_contention_end+0xdd/0x110 [ 771.557919][T17367] drm_client_modeset_commit_locked+0x14d/0x580 [ 771.557947][T17367] drm_client_modeset_commit+0x4f/0x80 [ 771.557978][T17367] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 771.558015][T17367] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 771.558041][T17367] drm_fbdev_client_restore+0x1b/0x30 [ 771.558072][T17367] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 771.558102][T17367] drm_client_dev_restore+0x200/0x2a0 [ 771.558130][T17367] drm_release+0x2c6/0x360 [ 771.558153][T17367] ? __pfx_drm_release+0x10/0x10 [ 771.558173][T17367] __fput+0x402/0xb70 [ 771.558197][T17367] task_work_run+0x150/0x240 [ 771.558219][T17367] ? __pfx_task_work_run+0x10/0x10 [ 771.558237][T17367] ? __do_sys_close_range+0x278/0x730 [ 771.558273][T17367] exit_to_user_mode_loop+0xfb/0x540 [ 771.558299][T17367] do_syscall_64+0x4ee/0xf80 [ 771.558329][T17367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.558348][T17367] RIP: 0033:0x7f24c838f7c9 [ 771.558364][T17367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.558383][T17367] RSP: 002b:00007f24c92ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 771.558402][T17367] RAX: 0000000000000000 RBX: 00007f24c85e5fa0 RCX: 00007f24c838f7c9 [ 771.558414][T17367] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 771.558425][T17367] RBP: 00007f24c8413f91 R08: 0000000000000000 R09: 0000000000000000 [ 771.558437][T17367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.558447][T17367] R13: 00007f24c85e6038 R14: 00007f24c85e5fa0 R15: 00007fffec935ac8 [ 771.558472][T17367] [ 772.195305][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2281'. [ 773.783650][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2289'. [ 774.696246][T17410] FAULT_INJECTION: forcing a failure. [ 774.696246][T17410] name fail_futex, interval 1, probability 0, space 0, times 0 [ 775.098032][T17410] CPU: 1 UID: 0 PID: 17410 Comm: syz.4.2293 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.098064][T17410] Tainted: [L]=SOFTLOCKUP [ 775.098071][T17410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 775.098082][T17410] Call Trace: [ 775.098089][T17410] [ 775.098096][T17410] dump_stack_lvl+0x16c/0x1f0 [ 775.098128][T17410] should_fail_ex+0x512/0x640 [ 775.098152][T17410] get_futex_key+0x1d0/0x15f0 [ 775.098174][T17410] ? stack_depot_save_flags+0x29/0x9b0 [ 775.098195][T17410] ? __pfx_get_futex_key+0x10/0x10 [ 775.098215][T17410] ? kasan_save_stack+0x42/0x60 [ 775.098240][T17410] ? kasan_save_stack+0x33/0x60 [ 775.098263][T17410] ? kasan_save_track+0x14/0x30 [ 775.098286][T17410] ? __kasan_slab_alloc+0x89/0x90 [ 775.098310][T17410] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 775.098335][T17410] futex_wait_setup+0x9d/0x570 [ 775.098367][T17410] __futex_wait+0x193/0x2f0 [ 775.098393][T17410] ? __pfx___futex_wait+0x10/0x10 [ 775.098422][T17410] ? __pfx_futex_wake_mark+0x10/0x10 [ 775.098450][T17410] ? futex_hash+0x2c5/0x380 [ 775.098471][T17410] ? futex_private_hash_put+0x160/0x1b0 [ 775.098492][T17410] futex_wait+0xe8/0x380 [ 775.098517][T17410] ? __pfx_futex_wait+0x10/0x10 [ 775.098547][T17410] ? percpu_counter_add_batch+0xca/0x200 [ 775.098564][T17410] ? errseq_sample+0x53/0x70 [ 775.098583][T17410] ? file_init_path+0x4fe/0x760 [ 775.098606][T17410] do_futex+0x229/0x350 [ 775.098627][T17410] ? __pfx_do_futex+0x10/0x10 [ 775.098648][T17410] ? fd_install+0x223/0x570 [ 775.098678][T17410] __x64_sys_futex+0x1e0/0x4c0 [ 775.098701][T17410] ? __sys_socket+0xac/0x260 [ 775.098719][T17410] ? __pfx___x64_sys_futex+0x10/0x10 [ 775.098741][T17410] ? xfd_validate_state+0x61/0x180 [ 775.098765][T17410] do_syscall_64+0xcd/0xf80 [ 775.098794][T17410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.098813][T17410] RIP: 0033:0x7f5c12d8f7c9 [ 775.098829][T17410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.098848][T17410] RSP: 002b:00007f5c13bd00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 775.098866][T17410] RAX: ffffffffffffffda RBX: 00007f5c12fe6188 RCX: 00007f5c12d8f7c9 [ 775.098878][T17410] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5c12fe6188 [ 775.098889][T17410] RBP: 00007f5c12fe6180 R08: 0000000000000000 R09: 0000000000000000 [ 775.098901][T17410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.098912][T17410] R13: 00007f5c12fe6218 R14: 00007ffd9da750e0 R15: 00007ffd9da751c8 [ 775.098934][T17410] [ 775.900641][T17416] ubi0: attaching mtd0 [ 775.931399][T17416] ubi0: scanning is finished [ 775.957437][T17416] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 776.214240][T17416] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 776.638421][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2298'. [ 776.658402][T17430] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2299'. [ 776.946254][T17444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 776.977409][T17444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 776.994828][T17445] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 777.031528][T17444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 777.143077][T17444] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 777.222862][T17444] CPU0 is offline. [ 777.661104][ T30] audit: type=1800 audit(4294967326.213:64): pid=17452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2304" name="dbroot" dev="configfs" ino=74996 res=0 errno=0 [ 778.021677][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2309'. [ 778.080271][T17478] netlink: 25 bytes leftover after parsing attributes in process `syz.7.2309'. [ 778.109268][T17463] usb usb37: usbfs: process 17463 (syz.5.2306) did not claim interface 0 before use [ 779.006176][T15599] Bluetooth: hci2: command 0x0c1a tx timeout [ 779.012234][T15551] Bluetooth: hci1: command 0x041b tx timeout [ 779.088494][T15599] Bluetooth: hci3: command 0x0c1a tx timeout [ 779.165167][T15599] Bluetooth: hci0: command 0x0c1a tx timeout [ 779.337676][T17508] FAULT_INJECTION: forcing a failure. [ 779.337676][T17508] name fail_futex, interval 1, probability 0, space 0, times 0 [ 779.426334][T17508] CPU: 1 UID: 0 PID: 17508 Comm: syz.5.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.426366][T17508] Tainted: [L]=SOFTLOCKUP [ 779.426373][T17508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.426384][T17508] Call Trace: [ 779.426391][T17508] [ 779.426398][T17508] dump_stack_lvl+0x16c/0x1f0 [ 779.426430][T17508] should_fail_ex+0x512/0x640 [ 779.426454][T17508] get_futex_key+0x1085/0x15f0 [ 779.426478][T17508] ? __pfx_get_futex_key+0x10/0x10 [ 779.426504][T17508] futex_wake+0xea/0x530 [ 779.426532][T17508] ? __pfx_futex_wake+0x10/0x10 [ 779.426565][T17508] do_futex+0x1e3/0x350 [ 779.426587][T17508] ? __pfx_do_futex+0x10/0x10 [ 779.426606][T17508] ? __might_fault+0xe3/0x190 [ 779.426633][T17508] mm_release+0x24e/0x300 [ 779.426659][T17508] do_exit+0x69e/0x2bd0 [ 779.426680][T17508] ? __pfx_do_exit+0x10/0x10 [ 779.426698][T17508] ? do_raw_spin_lock+0x12c/0x2b0 [ 779.426718][T17508] ? find_held_lock+0x2b/0x80 [ 779.426745][T17508] do_group_exit+0xd3/0x2a0 [ 779.426765][T17508] get_signal+0x2671/0x26d0 [ 779.426798][T17508] ? __pfx_get_signal+0x10/0x10 [ 779.426825][T17508] ? do_futex+0x122/0x350 [ 779.426848][T17508] arch_do_signal_or_restart+0x8f/0x7a0 [ 779.426876][T17508] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 779.426907][T17508] ? __x64_sys_openat+0x174/0x210 [ 779.426929][T17508] ? __pfx___x64_sys_futex+0x10/0x10 [ 779.426954][T17508] exit_to_user_mode_loop+0x8c/0x540 [ 779.426980][T17508] do_syscall_64+0x4ee/0xf80 [ 779.427009][T17508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.427028][T17508] RIP: 0033:0x7f24c838f7c9 [ 779.427044][T17508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.427062][T17508] RSP: 002b:00007f24c92ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 779.427080][T17508] RAX: fffffffffffffe00 RBX: 00007f24c85e5fa8 RCX: 00007f24c838f7c9 [ 779.427092][T17508] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f24c85e5fa8 [ 779.427103][T17508] RBP: 00007f24c85e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 779.427114][T17508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.427125][T17508] R13: 00007f24c85e6038 R14: 00007fffec9359e0 R15: 00007fffec935ac8 [ 779.427147][T17508] [ 779.991119][ T30] audit: type=1326 audit(4294967328.313:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17514 comm="syz.7.2318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0b338f7c9 code=0x0 [ 780.819094][T17536] FAULT_INJECTION: forcing a failure. [ 780.819094][T17536] name failslab, interval 1, probability 0, space 0, times 0 [ 780.879760][T17536] CPU: 1 UID: 0 PID: 17536 Comm: syz.2.2321 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.879796][T17536] Tainted: [L]=SOFTLOCKUP [ 780.879803][T17536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 780.879815][T17536] Call Trace: [ 780.879823][T17536] [ 780.879831][T17536] dump_stack_lvl+0x16c/0x1f0 [ 780.879867][T17536] should_fail_ex+0x512/0x640 [ 780.879887][T17536] ? __kmalloc_cache_noprof+0x5f/0x800 [ 780.879911][T17536] should_failslab+0xc2/0x120 [ 780.879939][T17536] __kmalloc_cache_noprof+0x80/0x800 [ 780.879960][T17536] ? lockdep_init_map_type+0x5c/0x270 [ 780.879988][T17536] ? userio_char_open+0xdb/0x220 [ 780.880020][T17536] ? __pfx_userio_char_open+0x10/0x10 [ 780.880049][T17536] ? userio_char_open+0xdb/0x220 [ 780.880078][T17536] userio_char_open+0xdb/0x220 [ 780.880107][T17536] ? __pfx_userio_char_open+0x10/0x10 [ 780.880137][T17536] misc_open+0x26d/0x450 [ 780.880160][T17536] ? __pfx_misc_open+0x10/0x10 [ 780.880181][T17536] chrdev_open+0x234/0x6a0 [ 780.880212][T17536] ? __pfx_apparmor_file_open+0x10/0x10 [ 780.880231][T17536] ? __pfx_chrdev_open+0x10/0x10 [ 780.880260][T17536] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 780.880294][T17536] do_dentry_open+0x748/0x1590 [ 780.880321][T17536] ? __pfx_chrdev_open+0x10/0x10 [ 780.880354][T17536] vfs_open+0x82/0x3f0 [ 780.880376][T17536] path_openat+0x2078/0x3140 [ 780.880411][T17536] ? __pfx_path_openat+0x10/0x10 [ 780.880446][T17536] do_filp_open+0x20b/0x470 [ 780.880474][T17536] ? __pfx_do_filp_open+0x10/0x10 [ 780.880517][T17536] ? alloc_fd+0x471/0x7d0 [ 780.880550][T17536] do_sys_openat2+0x121/0x290 [ 780.880571][T17536] ? __pfx_do_sys_openat2+0x10/0x10 [ 780.880600][T17536] __x64_sys_openat+0x174/0x210 [ 780.880621][T17536] ? __pfx___x64_sys_openat+0x10/0x10 [ 780.880651][T17536] do_syscall_64+0xcd/0xf80 [ 780.880680][T17536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.880699][T17536] RIP: 0033:0x7f75f0f8f7c9 [ 780.880715][T17536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.880735][T17536] RSP: 002b:00007f75f1d78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 780.880754][T17536] RAX: ffffffffffffffda RBX: 00007f75f11e5fa0 RCX: 00007f75f0f8f7c9 [ 780.880766][T17536] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 780.880778][T17536] RBP: 00007f75f1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 780.880789][T17536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.880800][T17536] R13: 00007f75f11e6038 R14: 00007f75f11e5fa0 R15: 00007ffe91db4598 [ 780.880823][T17536] [ 784.309196][T17610] FAULT_INJECTION: forcing a failure. [ 784.309196][T17610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 784.441978][T17610] CPU: 1 UID: 0 PID: 17610 Comm: syz.2.2337 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.442024][T17610] Tainted: [L]=SOFTLOCKUP [ 784.442031][T17610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 784.442043][T17610] Call Trace: [ 784.442050][T17610] [ 784.442058][T17610] dump_stack_lvl+0x16c/0x1f0 [ 784.442092][T17610] should_fail_ex+0x512/0x640 [ 784.442117][T17610] should_fail_alloc_page+0xe7/0x130 [ 784.442148][T17610] prepare_alloc_pages+0x401/0x670 [ 784.442178][T17610] ? rcu_is_watching+0x12/0xc0 [ 784.442207][T17610] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 784.442232][T17610] ? __pfx_stack_trace_save+0x10/0x10 [ 784.442265][T17610] ? __lock_acquire+0x436/0x2890 [ 784.442282][T17610] ? __lock_acquire+0x436/0x2890 [ 784.442301][T17610] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 784.442323][T17610] ? relay_open+0x653/0xad0 [ 784.442354][T17610] ? rcu_read_unlock+0x17/0x60 [ 784.442370][T17610] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 784.442401][T17610] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 784.442430][T17610] ? policy_nodemask+0xea/0x4e0 [ 784.442460][T17610] alloc_pages_mpol+0x1fb/0x550 [ 784.442489][T17610] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 784.442515][T17610] ? trace_kmalloc+0x2b/0xb0 [ 784.442542][T17610] ? trace_kmalloc+0x2b/0xb0 [ 784.442567][T17610] ? __kmalloc_noprof.cold+0x5d/0x62 [ 784.442594][T17610] ? relay_open_buf.part.0+0x194/0xc40 [ 784.442621][T17610] alloc_pages_noprof+0x131/0x390 [ 784.442649][T17610] relay_open_buf.part.0+0x262/0xc40 [ 784.442680][T17610] relay_open+0x653/0xad0 [ 784.442704][T17610] ? debugfs_create_file_full+0x41/0x60 [ 784.442738][T17610] blk_trace_setup_prepare+0x38e/0x700 [ 784.442763][T17610] blk_trace_setup+0x1c5/0x3b0 [ 784.442788][T17610] ? __pfx_blk_trace_setup+0x10/0x10 [ 784.442810][T17610] ? vsnprintf+0x331/0x11e0 [ 784.442839][T17610] ? __pfx_vsnprintf+0x10/0x10 [ 784.442875][T17610] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 784.442905][T17610] ? do_vfs_ioctl+0x128/0x14f0 [ 784.442936][T17610] blk_trace_ioctl+0x2ce/0x300 [ 784.442960][T17610] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 784.442987][T17610] ? find_held_lock+0x2b/0x80 [ 784.443010][T17610] ? hook_file_ioctl_common+0x144/0x410 [ 784.443043][T17610] blkdev_ioctl+0x1fa/0x6e0 [ 784.443067][T17610] ? __pfx_blkdev_ioctl+0x10/0x10 [ 784.443093][T17610] ? __pfx_blkdev_ioctl+0x10/0x10 [ 784.443117][T17610] __x64_sys_ioctl+0x18e/0x210 [ 784.443142][T17610] do_syscall_64+0xcd/0xf80 [ 784.443172][T17610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.443190][T17610] RIP: 0033:0x7f75f0f8f7c9 [ 784.443207][T17610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.443226][T17610] RSP: 002b:00007f75f1d57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.443245][T17610] RAX: ffffffffffffffda RBX: 00007f75f11e6090 RCX: 00007f75f0f8f7c9 [ 784.443257][T17610] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 000000000000000a [ 784.443269][T17610] RBP: 00007f75f1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 784.443280][T17610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.443291][T17610] R13: 00007f75f11e6128 R14: 00007f75f11e6090 R15: 00007ffe91db4598 [ 784.443315][T17610] [ 785.407713][T17620] sd 0:0:1:0: PR command failed: 1026 [ 785.418347][T17620] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 785.428410][T17620] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 785.939330][T17633] lo: entered allmulticast mode [ 786.001144][T17633] lo: left allmulticast mode [ 786.924561][T17655] FAULT_INJECTION: forcing a failure. [ 786.924561][T17655] name failslab, interval 1, probability 0, space 0, times 0 [ 786.968043][T17655] CPU: 1 UID: 0 PID: 17655 Comm: syz.2.2349 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.968078][T17655] Tainted: [L]=SOFTLOCKUP [ 786.968085][T17655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.968098][T17655] Call Trace: [ 786.968104][T17655] [ 786.968112][T17655] dump_stack_lvl+0x16c/0x1f0 [ 786.968145][T17655] should_fail_ex+0x512/0x640 [ 786.968167][T17655] ? __kmalloc_cache_noprof+0x5f/0x800 [ 786.968191][T17655] should_failslab+0xc2/0x120 [ 786.968220][T17655] __kmalloc_cache_noprof+0x80/0x800 [ 786.968253][T17655] ? lockdep_init_map_type+0x5c/0x270 [ 786.968273][T17655] ? userio_char_open+0xdb/0x220 [ 786.968307][T17655] ? __pfx_userio_char_open+0x10/0x10 [ 786.968336][T17655] ? userio_char_open+0xdb/0x220 [ 786.968366][T17655] userio_char_open+0xdb/0x220 [ 786.968396][T17655] ? __pfx_userio_char_open+0x10/0x10 [ 786.968425][T17655] misc_open+0x26d/0x450 [ 786.968447][T17655] ? __pfx_misc_open+0x10/0x10 [ 786.968468][T17655] chrdev_open+0x234/0x6a0 [ 786.968497][T17655] ? __pfx_apparmor_file_open+0x10/0x10 [ 786.968516][T17655] ? __pfx_chrdev_open+0x10/0x10 [ 786.968546][T17655] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 786.968580][T17655] do_dentry_open+0x748/0x1590 [ 786.968607][T17655] ? __pfx_chrdev_open+0x10/0x10 [ 786.968641][T17655] vfs_open+0x82/0x3f0 [ 786.968663][T17655] path_openat+0x2078/0x3140 [ 786.968698][T17655] ? __pfx_path_openat+0x10/0x10 [ 786.968736][T17655] do_filp_open+0x20b/0x470 [ 786.968765][T17655] ? __pfx_do_filp_open+0x10/0x10 [ 786.968810][T17655] ? alloc_fd+0x471/0x7d0 [ 786.968844][T17655] do_sys_openat2+0x121/0x290 [ 786.968865][T17655] ? __pfx_do_sys_openat2+0x10/0x10 [ 786.968894][T17655] __x64_sys_openat+0x174/0x210 [ 786.968916][T17655] ? __pfx___x64_sys_openat+0x10/0x10 [ 786.968946][T17655] do_syscall_64+0xcd/0xf80 [ 786.968976][T17655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.968995][T17655] RIP: 0033:0x7f75f0f8f7c9 [ 786.969027][T17655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.969047][T17655] RSP: 002b:00007f75f1d78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 786.969066][T17655] RAX: ffffffffffffffda RBX: 00007f75f11e5fa0 RCX: 00007f75f0f8f7c9 [ 786.969078][T17655] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 786.969090][T17655] RBP: 00007f75f1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 786.969102][T17655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.969114][T17655] R13: 00007f75f11e6038 R14: 00007f75f11e5fa0 R15: 00007ffe91db4598 [ 786.969139][T17655] [ 788.301669][T17655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2349'. [ 788.509968][T17692] FAULT_INJECTION: forcing a failure. [ 788.509968][T17692] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 788.542203][T17692] CPU: 1 UID: 0 PID: 17692 Comm: syz.2.2356 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.542236][T17692] Tainted: [L]=SOFTLOCKUP [ 788.542244][T17692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 788.542256][T17692] Call Trace: [ 788.542263][T17692] [ 788.542271][T17692] dump_stack_lvl+0x16c/0x1f0 [ 788.542308][T17692] should_fail_ex+0x512/0x640 [ 788.542332][T17692] should_fail_alloc_page+0xe7/0x130 [ 788.542364][T17692] prepare_alloc_pages+0x401/0x670 [ 788.542396][T17692] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 788.542426][T17692] ? __lock_acquire+0x436/0x2890 [ 788.542444][T17692] ? kimage_alloc_pages+0x2bc/0x350 [ 788.542476][T17692] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 788.542502][T17692] ? lock_acquire+0x179/0x330 [ 788.542523][T17692] ? find_next_iomem_res+0x3fb/0x4b0 [ 788.542554][T17692] ? do_raw_read_unlock+0x44/0xe0 [ 788.542575][T17692] ? _raw_read_unlock+0x28/0x50 [ 788.542600][T17692] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 788.542630][T17692] ? policy_nodemask+0xea/0x4e0 [ 788.542659][T17692] alloc_pages_mpol+0x1fb/0x550 [ 788.542688][T17692] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 788.542722][T17692] alloc_pages_noprof+0x131/0x390 [ 788.542751][T17692] get_zeroed_page_noprof+0x18/0xb0 [ 788.542779][T17692] machine_kexec_prepare+0xf4a/0x1720 [ 788.542815][T17692] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 788.542846][T17692] ? __pfx_alloc_pgt_page+0x10/0x10 [ 788.542877][T17692] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 788.542913][T17692] do_kexec_load+0x61d/0x860 [ 788.542941][T17692] ? __pfx_do_kexec_load+0x10/0x10 [ 788.542960][T17692] ? _copy_from_user+0x59/0xd0 [ 788.542982][T17692] __x64_sys_kexec_load+0x1bf/0x230 [ 788.543002][T17692] do_syscall_64+0xcd/0xf80 [ 788.543031][T17692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.543051][T17692] RIP: 0033:0x7f75f0f8f7c9 [ 788.543068][T17692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.543087][T17692] RSP: 002b:00007f75f1d78038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 788.543106][T17692] RAX: ffffffffffffffda RBX: 00007f75f11e5fa0 RCX: 00007f75f0f8f7c9 [ 788.543119][T17692] RDX: 0000200000000080 RSI: 0000000000000002 RDI: 00000000000000ff [ 788.543130][T17692] RBP: 00007f75f1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 788.543142][T17692] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 788.543153][T17692] R13: 00007f75f11e6038 R14: 00007f75f11e5fa0 R15: 00007ffe91db4598 [ 788.543176][T17692] [ 789.509787][T17705] bond0: invalid ARP target specified [ 791.919022][T17753] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 792.605223][T17765] netlink: zone id is out of range [ 792.653729][T17765] netlink: zone id is out of range [ 792.669896][T17765] netlink: zone id is out of range [ 792.694920][T17765] netlink: zone id is out of range [ 792.710251][T17765] netlink: zone id is out of range [ 792.735372][T17765] netlink: zone id is out of range [ 792.764057][T17765] netlink: zone id is out of range [ 792.788992][T17765] netlink: zone id is out of range [ 792.805445][T17765] netlink: zone id is out of range [ 792.811876][T17734] Process accounting resumed [ 792.839432][T17765] netlink: zone id is out of range [ 793.489159][T17775] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 794.377695][T17785] bcache: register_bcache() error : failed to open device [ 797.372367][T17795] FAULT_INJECTION: forcing a failure. [ 797.372367][T17795] name fail_futex, interval 1, probability 0, space 0, times 0 [ 797.449351][T17795] CPU: 1 UID: 0 PID: 17795 Comm: syz.2.2379 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.449385][T17795] Tainted: [L]=SOFTLOCKUP [ 797.449392][T17795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 797.449404][T17795] Call Trace: [ 797.449411][T17795] [ 797.449419][T17795] dump_stack_lvl+0x16c/0x1f0 [ 797.449452][T17795] should_fail_ex+0x512/0x640 [ 797.449476][T17795] get_futex_key+0x1d0/0x15f0 [ 797.449499][T17795] ? __pfx_get_futex_key+0x10/0x10 [ 797.449527][T17795] futex_wake+0xea/0x530 [ 797.449551][T17795] ? lockdep_init_map_type+0x5c/0x270 [ 797.449573][T17795] ? __pfx_futex_wake+0x10/0x10 [ 797.449608][T17795] ? percpu_counter_add_batch+0xca/0x200 [ 797.449627][T17795] ? errseq_sample+0x53/0x70 [ 797.449655][T17795] ? file_init_path+0x4fe/0x760 [ 797.449678][T17795] do_futex+0x1e3/0x350 [ 797.449700][T17795] ? __pfx_do_futex+0x10/0x10 [ 797.449722][T17795] ? fd_install+0x223/0x570 [ 797.449752][T17795] __x64_sys_futex+0x1e0/0x4c0 [ 797.449776][T17795] ? __sys_socket+0xac/0x260 [ 797.449801][T17795] ? __pfx___x64_sys_futex+0x10/0x10 [ 797.449823][T17795] ? xfd_validate_state+0x61/0x180 [ 797.449840][T17795] ? __pfx_do_writev+0x10/0x10 [ 797.449872][T17795] do_syscall_64+0xcd/0xf80 [ 797.449902][T17795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.449928][T17795] RIP: 0033:0x7f75f0f8f7c9 [ 797.449944][T17795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.449963][T17795] RSP: 002b:00007f75f1d780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 797.449982][T17795] RAX: ffffffffffffffda RBX: 00007f75f11e5fa8 RCX: 00007f75f0f8f7c9 [ 797.449995][T17795] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f75f11e5fac [ 797.450007][T17795] RBP: 00007f75f11e5fa0 R08: 00007f75f1d79000 R09: 0000000000000000 [ 797.450019][T17795] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 797.450030][T17795] R13: 00007f75f11e6038 R14: 00007ffe91db44b0 R15: 00007ffe91db4598 [ 797.450053][T17795] [ 798.745297][T17776] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 798.777042][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2382'. [ 804.210925][T17856] FAULT_INJECTION: forcing a failure. [ 804.210925][T17856] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 804.306059][T17856] CPU: 1 UID: 0 PID: 17856 Comm: syz.4.2391 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.306093][T17856] Tainted: [L]=SOFTLOCKUP [ 804.306100][T17856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 804.306112][T17856] Call Trace: [ 804.306118][T17856] [ 804.306126][T17856] dump_stack_lvl+0x16c/0x1f0 [ 804.306160][T17856] should_fail_ex+0x512/0x640 [ 804.306184][T17856] should_fail_alloc_page+0xe7/0x130 [ 804.306215][T17856] prepare_alloc_pages+0x401/0x670 [ 804.306244][T17856] ? rcu_is_watching+0x12/0xc0 [ 804.306274][T17856] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 804.306302][T17856] ? __pfx_stack_trace_save+0x10/0x10 [ 804.306334][T17856] ? __lock_acquire+0x436/0x2890 [ 804.306353][T17856] ? __lock_acquire+0x436/0x2890 [ 804.306372][T17856] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 804.306394][T17856] ? relay_open+0x653/0xad0 [ 804.306425][T17856] ? rcu_read_unlock+0x17/0x60 [ 804.306441][T17856] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 804.306474][T17856] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 804.306504][T17856] ? policy_nodemask+0xea/0x4e0 [ 804.306533][T17856] alloc_pages_mpol+0x1fb/0x550 [ 804.306562][T17856] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 804.306589][T17856] ? trace_kmalloc+0x2b/0xb0 [ 804.306616][T17856] ? trace_kmalloc+0x2b/0xb0 [ 804.306641][T17856] ? __kmalloc_noprof.cold+0x5d/0x62 [ 804.306668][T17856] ? relay_open_buf.part.0+0x194/0xc40 [ 804.306695][T17856] alloc_pages_noprof+0x131/0x390 [ 804.306724][T17856] relay_open_buf.part.0+0x262/0xc40 [ 804.306761][T17856] relay_open+0x653/0xad0 [ 804.306785][T17856] ? debugfs_create_file_full+0x41/0x60 [ 804.306818][T17856] blk_trace_setup_prepare+0x38e/0x700 [ 804.306844][T17856] blk_trace_setup+0x1c5/0x3b0 [ 804.306869][T17856] ? __pfx_blk_trace_setup+0x10/0x10 [ 804.306891][T17856] ? vsnprintf+0x331/0x11e0 [ 804.306928][T17856] ? __pfx_vsnprintf+0x10/0x10 [ 804.306965][T17856] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 804.306994][T17856] ? do_vfs_ioctl+0x128/0x14f0 [ 804.307020][T17856] blk_trace_ioctl+0x2ce/0x300 [ 804.307044][T17856] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 804.307072][T17856] ? find_held_lock+0x2b/0x80 [ 804.307096][T17856] ? hook_file_ioctl_common+0x144/0x410 [ 804.307121][T17856] blkdev_ioctl+0x1fa/0x6e0 [ 804.307144][T17856] ? __pfx_blkdev_ioctl+0x10/0x10 [ 804.307169][T17856] ? __pfx_blkdev_ioctl+0x10/0x10 [ 804.307192][T17856] __x64_sys_ioctl+0x18e/0x210 [ 804.307216][T17856] do_syscall_64+0xcd/0xf80 [ 804.307245][T17856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.307264][T17856] RIP: 0033:0x7f5c12d8f7c9 [ 804.307280][T17856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.307299][T17856] RSP: 002b:00007f5c13bf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 804.307317][T17856] RAX: ffffffffffffffda RBX: 00007f5c12fe6090 RCX: 00007f5c12d8f7c9 [ 804.307329][T17856] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 000000000000000a [ 804.307341][T17856] RBP: 00007f5c12e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 804.307352][T17856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.307362][T17856] R13: 00007f5c12fe6128 R14: 00007f5c12fe6090 R15: 00007ffd9da751c8 [ 804.307386][T17856] [ 805.551565][T17868] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 805.582656][T17870] Invalid ELF header magic: != ELF [ 807.681623][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2399'. [ 807.702451][T17898] Invalid ELF header magic: != ELF [ 807.718258][T17897] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2399'. [ 808.372941][ T30] audit: type=1804 audit(4294967357.067:66): pid=17902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2401" name="/newroot/403/file0" dev="tmpfs" ino=2130 res=1 errno=0 [ 808.578333][T17912] syz.2.2403(17912): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 808.722975][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2404'. [ 809.463473][T17934] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2407'. [ 810.053074][T17940] bond0: no command found in slaves file - use +ifname or -ifname [ 810.551331][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.562669][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.909566][T17939] KVM: debugfs: duplicate directory 17939-8 [ 810.980765][T17939] KVM: debugfs: duplicate directory 17939-10 [ 811.019189][T17939] KVM: debugfs: duplicate directory 17939-11 [ 811.063153][T17939] KVM: debugfs: duplicate directory 17939-12 [ 811.105781][T17939] KVM: debugfs: duplicate directory 17939-13 [ 811.112548][T17939] KVM: debugfs: duplicate directory 17939-14 [ 811.167433][T17939] KVM: debugfs: duplicate directory 17939-15 [ 811.198677][T17939] KVM: debugfs: duplicate directory 17939-16 [ 811.339417][T17957] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2412'. [ 814.543201][T18025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2423'. [ 814.806045][T18031] netlink: 'syz.2.2425': attribute type 5 has an invalid length. [ 814.855896][T18031] netlink: 4158 bytes leftover after parsing attributes in process `syz.2.2425'. [ 815.322154][T18045] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2428'. [ 815.374339][T18045] ipvlan1: entered allmulticast mode [ 815.398947][T18045] veth0_vlan: entered allmulticast mode [ 816.578170][T18060] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2431'. [ 817.287805][T18097] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 819.444332][T18129] zswap: compressor 000 not available [ 819.603392][ T30] audit: type=1800 audit(4294967368.350:67): pid=18135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2445" name="lu_gp_id" dev="configfs" ino=79920 res=0 errno=0 [ 819.708223][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'. [ 819.718173][ T30] audit: type=1800 audit(4294967368.400:68): pid=18135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2445" name="version" dev="configfs" ino=79927 res=0 errno=0 [ 820.537319][T18162] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2452'. [ 820.640945][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2456'. [ 821.908547][T18204] kAFS: Invalid Command on /proc/fs/afs/cells file [ 822.422073][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 822.791230][T18234] futex_wake_op: syz.5.2468 tries to shift op by -2048; fix this program [ 823.122852][T18216] Process accounting paused [ 823.494787][T15599] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 823.518709][T15599] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 823.527366][T15599] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 823.944283][T18244] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 823.968292][T18244] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 823.991428][T18244] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 824.015580][T18244] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 824.042965][T18244] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 824.062504][T18244] CPU0 is offline. [ 825.269677][T15599] Bluetooth: hci2: command 0x0c1a tx timeout [ 825.588635][T18309] netlink: 'syz.5.2485': attribute type 4 has an invalid length. [ 825.727832][T18309] netlink: 314 bytes leftover after parsing attributes in process `syz.5.2485'. [ 825.985581][T15599] Bluetooth: hci1: command 0x041b tx timeout [ 826.076819][T15551] Bluetooth: hci3: command 0x0c1a tx timeout [ 826.082919][T15599] Bluetooth: hci0: command 0x0c1a tx timeout [ 827.063525][ T30] audit: type=1326 audit(4294967375.855:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18327 comm="syz.5.2490" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24c838f7c9 code=0x0 [ 827.683657][T18340] hub 8-0:1.0: USB hub found [ 827.728825][T18340] hub 8-0:1.0: 1 port detected [ 828.058201][T15599] Bluetooth: hci1: command 0x041b tx timeout [ 828.430348][T18351] bond0: no command found in slaves file - use +ifname or -ifname [ 829.895489][ T30] audit: type=1800 audit(4294967378.689:70): pid=18385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2503" name="lu_gp_id" dev="configfs" ino=81377 res=0 errno=0 [ 830.177564][T18388] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2504'. [ 831.858252][T18431] binder: 18429:18431 ioctl c0306201 0 returned -14 [ 832.074758][T18432] FAULT_INJECTION: forcing a failure. [ 832.074758][T18432] name failslab, interval 1, probability 0, space 0, times 0 [ 832.192093][T18432] CPU: 1 UID: 0 PID: 18432 Comm: syz.4.2515 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.192126][T18432] Tainted: [L]=SOFTLOCKUP [ 832.192133][T18432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.192144][T18432] Call Trace: [ 832.192150][T18432] [ 832.192158][T18432] dump_stack_lvl+0x16c/0x1f0 [ 832.192190][T18432] should_fail_ex+0x512/0x640 [ 832.192211][T18432] ? __kmalloc_noprof+0xca/0x910 [ 832.192233][T18432] should_failslab+0xc2/0x120 [ 832.192262][T18432] __kmalloc_noprof+0xeb/0x910 [ 832.192282][T18432] ? cache_create_net+0x9d/0x220 [ 832.192313][T18432] ? cache_create_net+0x9d/0x220 [ 832.192338][T18432] cache_create_net+0x9d/0x220 [ 832.192366][T18432] nfsd_export_init+0x11f/0x250 [ 832.192396][T18432] ? __pfx_nfsd_net_init+0x10/0x10 [ 832.192424][T18432] nfsd_net_init+0x33/0x3d0 [ 832.192452][T18432] ? __pfx_nfsd_net_init+0x10/0x10 [ 832.192480][T18432] ops_init+0x1e2/0x5f0 [ 832.192508][T18432] setup_net+0x11d/0x3a0 [ 832.192533][T18432] ? __pfx_setup_net+0x10/0x10 [ 832.192556][T18432] ? lockdep_init_map_type+0x5c/0x270 [ 832.192576][T18432] ? mutex_init_lockep+0x110/0x150 [ 832.192598][T18432] copy_net_ns+0x351/0x7c0 [ 832.192627][T18432] create_new_namespaces+0x3ea/0xab0 [ 832.192658][T18432] copy_namespaces+0x468/0x570 [ 832.192684][T18432] copy_process+0x2a70/0x7430 [ 832.192722][T18432] ? __pfx_copy_process+0x10/0x10 [ 832.192749][T18432] ? find_held_lock+0x2b/0x80 [ 832.192776][T18432] ? futex_private_hash_put+0x160/0x1b0 [ 832.192800][T18432] kernel_clone+0xfc/0x910 [ 832.192836][T18432] ? __pfx_kernel_clone+0x10/0x10 [ 832.192876][T18432] __do_sys_clone+0xce/0x120 [ 832.192903][T18432] ? __pfx___do_sys_clone+0x10/0x10 [ 832.192930][T18432] ? rcu_is_watching+0x12/0xc0 [ 832.192965][T18432] ? xfd_validate_state+0x61/0x180 [ 832.192989][T18432] do_syscall_64+0xcd/0xf80 [ 832.193018][T18432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.193037][T18432] RIP: 0033:0x7f5c12d8f7c9 [ 832.193053][T18432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.193071][T18432] RSP: 002b:00007f5c13bcffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 832.193089][T18432] RAX: ffffffffffffffda RBX: 00007f5c12fe6180 RCX: 00007f5c12d8f7c9 [ 832.193102][T18432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 832.193113][T18432] RBP: 00007f5c12e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 832.193128][T18432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 832.193139][T18432] R13: 00007f5c12fe6218 R14: 00007f5c12fe6180 R15: 00007ffd9da751c8 [ 832.193163][T18432] [ 833.653796][T18457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.821250][T18462] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2522'. [ 833.850306][T18460] netlink: 178 bytes leftover after parsing attributes in process `syz.2.2521'. [ 833.860642][T18462] bridge_slave_1: left allmulticast mode [ 833.866331][T18462] bridge_slave_1: left promiscuous mode [ 833.937277][T18462] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.005543][T18481] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2522'. [ 834.083693][T18462] bridge_slave_0: left allmulticast mode [ 834.129139][T18462] bridge_slave_0: left promiscuous mode [ 834.162553][T18462] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.387043][T18484] overlayfs: missing 'lowerdir' [ 835.101376][T18502] hub 1-0:1.0: USB hub found [ 835.119636][T18502] hub 1-0:1.0: 1 port detected [ 835.169282][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2528'. [ 835.222544][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2528'. [ 835.759435][T18512] netlink: 346 bytes leftover after parsing attributes in process `syz.5.2530'. [ 836.207397][T18523] FAULT_INJECTION: forcing a failure. [ 836.207397][T18523] name failslab, interval 1, probability 0, space 0, times 0 [ 836.280872][T18523] CPU: 1 UID: 0 PID: 18523 Comm: syz.4.2532 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.280907][T18523] Tainted: [L]=SOFTLOCKUP [ 836.280914][T18523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 836.280925][T18523] Call Trace: [ 836.280931][T18523] [ 836.280940][T18523] dump_stack_lvl+0x16c/0x1f0 [ 836.280972][T18523] should_fail_ex+0x512/0x640 [ 836.281000][T18523] ? __kmalloc_node_noprof+0xcd/0x930 [ 836.281028][T18523] should_failslab+0xc2/0x120 [ 836.281058][T18523] __kmalloc_node_noprof+0xee/0x930 [ 836.281086][T18523] ? lockdep_init_map_type+0x5c/0x270 [ 836.281106][T18523] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 836.281135][T18523] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 836.281159][T18523] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 836.281184][T18523] ? __pfx_idr_alloc+0x10/0x10 [ 836.281216][T18523] loop_add+0x3b2/0xb70 [ 836.281246][T18523] ? __pfx_loop_add+0x10/0x10 [ 836.281289][T18523] ? find_held_lock+0x2b/0x80 [ 836.281316][T18523] loop_control_ioctl+0x13e/0x630 [ 836.281346][T18523] ? __pfx_loop_control_ioctl+0x10/0x10 [ 836.281378][T18523] ? __pfx_loop_control_ioctl+0x10/0x10 [ 836.281409][T18523] __x64_sys_ioctl+0x18e/0x210 [ 836.281433][T18523] do_syscall_64+0xcd/0xf80 [ 836.281462][T18523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.281481][T18523] RIP: 0033:0x7f5c12d8f7c9 [ 836.281497][T18523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.281516][T18523] RSP: 002b:00007f5c13c12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.281535][T18523] RAX: ffffffffffffffda RBX: 00007f5c12fe5fa0 RCX: 00007f5c12d8f7c9 [ 836.281547][T18523] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000004 [ 836.281559][T18523] RBP: 00007f5c12e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 836.281570][T18523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.281585][T18523] R13: 00007f5c12fe6038 R14: 00007f5c12fe5fa0 R15: 00007ffd9da751c8 [ 836.281609][T18523] [ 837.133643][T18534] tipc: Started in network mode [ 837.138630][T18534] tipc: Node identity ffffffff, cluster identity 4711 [ 837.168612][T18534] tipc: Node number set to 4294967295 [ 837.552733][T18548] Unable to find swap-space signature [ 837.991102][T18552] zswap: compressor not available [ 838.164485][T15551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 838.179829][T15551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 838.190603][T15551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 838.204961][T15551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 838.214579][T15551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 839.039927][T15467] bridge_slave_1: left allmulticast mode [ 839.075074][T15467] bridge_slave_1: left promiscuous mode [ 839.080874][T15467] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.119961][T15467] bridge_slave_0: left allmulticast mode [ 839.128705][T15467] bridge_slave_0: left promiscuous mode [ 839.168455][T15467] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.917015][T15467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.923473][T15467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.935306][T15467] bond0 (unregistering): Released all slaves [ 840.014899][T15467] ovs_: left promiscuous mode [ 840.238105][T15551] Bluetooth: hci4: command tx timeout [ 840.514493][T18574] chnl_net:caif_netlink_parms(): no params data found [ 840.531158][T18609] futex_wake_op: syz.7.2549 tries to shift op by -2048; fix this program [ 840.860128][T18615] loop6: detected capacity change from 0 to 8192 [ 841.208541][T18574] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.208928][T18574] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.209077][T18574] bridge_slave_0: entered allmulticast mode [ 841.221277][T18574] bridge_slave_0: entered promiscuous mode [ 841.224240][T18574] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.224308][T18574] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.224415][T18574] bridge_slave_1: entered allmulticast mode [ 841.225702][T18574] bridge_slave_1: entered promiscuous mode [ 841.347432][T18574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.359698][T18574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.438624][T15467] hsr_slave_0: left promiscuous mode [ 841.439098][T15467] hsr_slave_1: left promiscuous mode [ 841.467718][T15467] veth1_macvtap: left promiscuous mode [ 841.467797][T15467] veth0_macvtap: left promiscuous mode [ 841.472821][T15467] veth1_vlan: left promiscuous mode [ 841.472920][T15467] veth0_vlan: left promiscuous mode [ 842.095144][T18630] FAULT_INJECTION: forcing a failure. [ 842.095144][T18630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.208818][T18630] CPU: 1 UID: 0 PID: 18630 Comm: syz.2.2554 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.208851][T18630] Tainted: [L]=SOFTLOCKUP [ 842.208858][T18630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 842.208869][T18630] Call Trace: [ 842.208876][T18630] [ 842.208883][T18630] dump_stack_lvl+0x16c/0x1f0 [ 842.208915][T18630] should_fail_ex+0x512/0x640 [ 842.208939][T18630] _copy_to_user+0x32/0xd0 [ 842.208961][T18630] simple_read_from_buffer+0xcb/0x170 [ 842.208989][T18630] proc_fail_nth_read+0x197/0x240 [ 842.209020][T18630] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 842.209052][T18630] ? rw_verify_area+0xcf/0x6c0 [ 842.209075][T18630] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 842.209105][T18630] vfs_read+0x1e4/0xcf0 [ 842.209132][T18630] ? __pfx___mutex_lock+0x10/0x10 [ 842.209163][T18630] ? __pfx_vfs_read+0x10/0x10 [ 842.209202][T18630] ? __fget_files+0x20e/0x3c0 [ 842.209235][T18630] ksys_read+0x12a/0x250 [ 842.209260][T18630] ? __pfx_ksys_read+0x10/0x10 [ 842.209292][T18630] do_syscall_64+0xcd/0xf80 [ 842.209321][T18630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.209340][T18630] RIP: 0033:0x7f75f0f8e1dc [ 842.209355][T18630] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 842.209374][T18630] RSP: 002b:00007f75f1d78030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 842.209392][T18630] RAX: ffffffffffffffda RBX: 00007f75f11e5fa0 RCX: 00007f75f0f8e1dc [ 842.209404][T18630] RDX: 000000000000000f RSI: 00007f75f1d780a0 RDI: 0000000000000004 [ 842.209415][T18630] RBP: 00007f75f1d78090 R08: 0000000000000000 R09: 0000000000000000 [ 842.209426][T18630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.209436][T18630] R13: 00007f75f11e6038 R14: 00007f75f11e5fa0 R15: 00007ffe91db4598 [ 842.209459][T18630] [ 842.720367][T18626] zswap: compressor not available [ 842.783005][T15551] Bluetooth: hci4: command tx timeout [ 843.044070][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.054994][T18654] sctp: [Deprecated]: syz.5.2559 (pid 18654) Use of int in maxseg socket option. [ 843.054994][T18654] Use struct sctp_assoc_value instead [ 843.072264][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.083045][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.094049][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.118357][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.128405][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.140780][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.174474][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.203479][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.231513][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.251843][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.268635][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.290839][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.307926][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.328063][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.352100][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.375148][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.394054][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.414282][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.434802][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.462927][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.484125][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.500739][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.521460][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.539023][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.563204][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.590797][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.607969][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.628922][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.645957][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.674126][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.694358][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.723958][T18653] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700010007 [ 843.942205][T18661] FAULT_INJECTION: forcing a failure. [ 843.942205][T18661] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 843.983457][T18661] CPU: 1 UID: 0 PID: 18661 Comm: syz.5.2562 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.983491][T18661] Tainted: [L]=SOFTLOCKUP [ 843.983509][T18661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 843.983521][T18661] Call Trace: [ 843.983528][T18661] [ 843.983545][T18661] dump_stack_lvl+0x16c/0x1f0 [ 843.983590][T18661] should_fail_ex+0x512/0x640 [ 843.983615][T18661] should_fail_alloc_page+0xe7/0x130 [ 843.983646][T18661] prepare_alloc_pages+0x401/0x670 [ 843.983680][T18661] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 843.983707][T18661] ? stack_trace_save+0x8e/0xc0 [ 843.983737][T18661] ? __pfx_stack_trace_save+0x10/0x10 [ 843.983767][T18661] ? stack_depot_save_flags+0x29/0x9b0 [ 843.983788][T18661] ? __pfx_stack_trace_save+0x10/0x10 [ 843.983821][T18661] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 843.983843][T18661] ? kasan_save_stack+0x33/0x60 [ 843.983871][T18661] ? __kasan_kmalloc+0xaa/0xb0 [ 843.983895][T18661] ? do_sys_poll+0x24a/0xdf0 [ 843.983918][T18661] ? __x64_sys_poll+0x1a6/0x450 [ 843.983942][T18661] ? do_syscall_64+0xcd/0xf80 [ 843.983967][T18661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.983991][T18661] ? __lock_acquire+0x436/0x2890 [ 843.984011][T18661] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 843.984041][T18661] ? policy_nodemask+0xea/0x4e0 [ 843.984071][T18661] alloc_pages_mpol+0x1fb/0x550 [ 843.984100][T18661] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 843.984141][T18661] alloc_pages_noprof+0x131/0x390 [ 843.984170][T18661] get_free_pages_noprof+0x10/0xb0 [ 843.984196][T18661] __pollwait+0x295/0x460 [ 843.984223][T18661] pipe_poll+0x23c/0x660 [ 843.984249][T18661] ? __pfx___pollwait+0x10/0x10 [ 843.984274][T18661] ? __pfx_pipe_poll+0x10/0x10 [ 843.984300][T18661] do_sys_poll+0x55c/0xdf0 [ 843.984332][T18661] ? __pfx_do_sys_poll+0x10/0x10 [ 843.984375][T18661] ? __futex_wait+0x24b/0x2f0 [ 843.984402][T18661] ? __pfx___pollwait+0x10/0x10 [ 843.984428][T18661] ? __pfx_pollwake+0x10/0x10 [ 843.984454][T18661] ? __pfx_pollwake+0x10/0x10 [ 843.984479][T18661] ? __pfx_pollwake+0x10/0x10 [ 843.984504][T18661] ? __pfx_pollwake+0x10/0x10 [ 843.984530][T18661] ? __pfx_pollwake+0x10/0x10 [ 843.984555][T18661] ? __pfx_pollwake+0x10/0x10 [ 843.984581][T18661] ? __pfx_pollwake+0x10/0x10 [ 843.984606][T18661] ? __pfx_pollwake+0x10/0x10 [ 843.984632][T18661] ? __pfx_pollwake+0x10/0x10 [ 843.984656][T18661] ? __pfx_timespec64_add_safe+0x10/0x10 [ 843.984677][T18661] ? ktime_get_ts64+0x2d2/0x400 [ 843.984696][T18661] ? read_tsc+0x9/0x20 [ 843.984721][T18661] ? ktime_get_ts64+0x256/0x400 [ 843.984744][T18661] __x64_sys_poll+0x1a6/0x450 [ 843.984770][T18661] ? __pfx___x64_sys_poll+0x10/0x10 [ 843.984802][T18661] do_syscall_64+0xcd/0xf80 [ 843.984831][T18661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.984849][T18661] RIP: 0033:0x7f24c838f7c9 [ 843.984868][T18661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.984887][T18661] RSP: 002b:00007f24c92ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 843.984907][T18661] RAX: ffffffffffffffda RBX: 00007f24c85e6090 RCX: 00007f24c838f7c9 [ 843.984920][T18661] RDX: 00000000000ffffc RSI: 0000000000000040 RDI: 00002000000002c0 [ 843.984931][T18661] RBP: 00007f24c8413f91 R08: 0000000000000000 R09: 0000000000000000 [ 843.984943][T18661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.984954][T18661] R13: 00007f24c85e6128 R14: 00007f24c85e6090 R15: 00007fffec935ac8 [ 843.984977][T18661] [ 844.533209][T18671] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2567'. [ 844.543183][T18671] unsupported nla_type 65535 [ 844.675925][T18675] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 844.751177][T18676] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 844.880478][T15551] Bluetooth: hci4: command tx timeout [ 845.327820][T18574] team0: Port device team_slave_0 added [ 845.427341][T18574] team0: Port device team_slave_1 added [ 845.547798][T18574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.562594][T18574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.590338][T18574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.708973][T18574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.730699][T18574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.775562][T18574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.912902][T18574] hsr_slave_0: entered promiscuous mode [ 845.942185][T18574] hsr_slave_1: entered promiscuous mode [ 845.971637][T18574] debugfs: 'hsr0' already exists in 'hsr' [ 845.977418][T18574] Cannot create hsr debugfs directory [ 846.003530][T18684] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 846.402914][T18692] FAULT_INJECTION: forcing a failure. [ 846.402914][T18692] name fail_futex, interval 1, probability 0, space 0, times 0 [ 846.479986][T18699] FAULT_INJECTION: forcing a failure. [ 846.479986][T18699] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 846.497796][T18692] CPU: 1 UID: 0 PID: 18692 Comm: syz.2.2572 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.497827][T18692] Tainted: [L]=SOFTLOCKUP [ 846.497834][T18692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 846.497849][T18692] Call Trace: [ 846.497855][T18692] [ 846.497863][T18692] dump_stack_lvl+0x16c/0x1f0 [ 846.497895][T18692] should_fail_ex+0x512/0x640 [ 846.497919][T18692] get_futex_key+0x293/0x15f0 [ 846.497942][T18692] ? __pfx_get_futex_key+0x10/0x10 [ 846.497969][T18692] futex_wake+0xea/0x530 [ 846.497996][T18692] ? __pfx_futex_wake+0x10/0x10 [ 846.498029][T18692] do_futex+0x1e3/0x350 [ 846.498051][T18692] ? __pfx_do_futex+0x10/0x10 [ 846.498070][T18692] ? __might_fault+0xe3/0x190 [ 846.498105][T18692] mm_release+0x24e/0x300 [ 846.498131][T18692] do_exit+0x69e/0x2bd0 [ 846.498152][T18692] ? __pfx_do_exit+0x10/0x10 [ 846.498170][T18692] ? do_raw_spin_lock+0x12c/0x2b0 [ 846.498191][T18692] ? find_held_lock+0x2b/0x80 [ 846.498218][T18692] do_group_exit+0xd3/0x2a0 [ 846.498237][T18692] get_signal+0x2671/0x26d0 [ 846.498270][T18692] ? __pfx_get_signal+0x10/0x10 [ 846.498298][T18692] ? do_futex+0x122/0x350 [ 846.498320][T18692] arch_do_signal_or_restart+0x8f/0x7a0 [ 846.498349][T18692] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 846.498379][T18692] ? __sys_socket+0xac/0x260 [ 846.498398][T18692] ? __pfx___x64_sys_futex+0x10/0x10 [ 846.498429][T18692] exit_to_user_mode_loop+0x8c/0x540 [ 846.498455][T18692] do_syscall_64+0x4ee/0xf80 [ 846.498484][T18692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.498503][T18692] RIP: 0033:0x7f75f0f8f7c9 [ 846.498519][T18692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.498537][T18692] RSP: 002b:00007f75f1d780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 846.498555][T18692] RAX: fffffffffffffe00 RBX: 00007f75f11e5fa8 RCX: 00007f75f0f8f7c9 [ 846.498568][T18692] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f75f11e5fa8 [ 846.498579][T18692] RBP: 00007f75f11e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 846.498590][T18692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.498601][T18692] R13: 00007f75f11e6038 R14: 00007ffe91db44b0 R15: 00007ffe91db4598 [ 846.498624][T18692] [ 846.818145][T18574] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 846.861657][T18699] CPU: 1 UID: 0 PID: 18699 Comm: syz.5.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.861691][T18699] Tainted: [L]=SOFTLOCKUP [ 846.861698][T18699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 846.861710][T18699] Call Trace: [ 846.861717][T18699] [ 846.861725][T18699] dump_stack_lvl+0x16c/0x1f0 [ 846.861757][T18699] should_fail_ex+0x512/0x640 [ 846.861781][T18699] should_fail_alloc_page+0xe7/0x130 [ 846.861830][T18699] prepare_alloc_pages+0x401/0x670 [ 846.861864][T18699] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 846.861890][T18699] ? __pfx___might_resched+0x10/0x10 [ 846.861921][T18699] ? should_fail_alloc_page+0xee/0x130 [ 846.861952][T18699] ? rcu_is_watching+0x12/0xc0 [ 846.861980][T18699] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 846.862005][T18699] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 846.862036][T18699] ? __pfx___might_resched+0x10/0x10 [ 846.862063][T18699] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 846.862086][T18699] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 846.862115][T18699] ? policy_nodemask+0xea/0x4e0 [ 846.862145][T18699] alloc_pages_mpol+0x1fb/0x550 [ 846.862173][T18699] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 846.862202][T18699] ? kernel_text_address+0x8d/0x100 [ 846.862223][T18699] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 846.862253][T18699] ? __pfx_alloc_pgt_page+0x10/0x10 [ 846.862281][T18699] alloc_pages_noprof+0x131/0x390 [ 846.862317][T18699] kimage_alloc_pages+0x74/0x350 [ 846.862347][T18699] ? __pfx_alloc_pgt_page+0x10/0x10 [ 846.862375][T18699] kimage_alloc_control_pages+0x153/0xa00 [ 846.862409][T18699] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 846.862438][T18699] ? alloc_pages_noprof+0x23c/0x390 [ 846.862466][T18699] ? kimage_free_page_list+0x1a/0x230 [ 846.862494][T18699] ? kimage_alloc_pages+0x2bc/0x350 [ 846.862525][T18699] ? __pfx_alloc_pgt_page+0x10/0x10 [ 846.862553][T18699] alloc_pgt_page+0x17/0xb0 [ 846.862581][T18699] ident_p4d_init+0x15b/0x330 [ 846.862603][T18699] kernel_ident_mapping_init+0x334/0x4d0 [ 846.862628][T18699] machine_kexec_prepare+0x409/0x1720 [ 846.862662][T18699] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 846.862694][T18699] ? __pfx_alloc_pgt_page+0x10/0x10 [ 846.862725][T18699] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 846.862760][T18699] do_kexec_load+0x61d/0x860 [ 846.862779][T18699] ? __pfx_do_kexec_load+0x10/0x10 [ 846.862799][T18699] ? _copy_from_user+0x59/0xd0 [ 846.862827][T18699] __x64_sys_kexec_load+0x1bf/0x230 [ 846.862847][T18699] do_syscall_64+0xcd/0xf80 [ 846.862877][T18699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.862897][T18699] RIP: 0033:0x7f24c838f7c9 [ 846.862913][T18699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.862933][T18699] RSP: 002b:00007f24c92ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 846.862952][T18699] RAX: ffffffffffffffda RBX: 00007f24c85e5fa0 RCX: 00007f24c838f7c9 [ 846.862965][T18699] RDX: 0000200000000080 RSI: 0000000000000002 RDI: 00000000000000ff [ 846.862976][T18699] RBP: 00007f24c8413f91 R08: 0000000000000000 R09: 0000000000000000 [ 846.862987][T18699] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 846.862999][T18699] R13: 00007f24c85e6038 R14: 00007f24c85e5fa0 R15: 00007fffec935ac8 [ 846.863022][T18699] [ 847.233930][T15551] Bluetooth: hci4: command tx timeout [ 847.580276][T18574] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 847.612246][T18574] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 847.664140][T18574] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 848.019824][T18719] zswap: compressor not available [ 848.132273][T18574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.187950][T18574] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.204206][T15488] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.204339][T15488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.209334][T15488] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.209409][T15488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.257494][T18728] FAULT_INJECTION: forcing a failure. [ 848.257494][T18728] name failslab, interval 1, probability 0, space 0, times 0 [ 848.257584][T18728] CPU: 1 UID: 0 PID: 18728 Comm: syz.7.2579 Tainted: G L syzkaller #0 PREEMPT(full) [ 848.257612][T18728] Tainted: [L]=SOFTLOCKUP [ 848.257618][T18728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 848.257631][T18728] Call Trace: [ 848.257637][T18728] [ 848.257645][T18728] dump_stack_lvl+0x16c/0x1f0 [ 848.257677][T18728] should_fail_ex+0x512/0x640 [ 848.257702][T18728] should_failslab+0xc2/0x120 [ 848.257731][T18728] __kmalloc_cache_noprof+0x80/0x800 [ 848.257753][T18728] ? sctp_add_bind_addr+0xae/0x3f0 [ 848.257788][T18728] ? sctp_add_bind_addr+0xae/0x3f0 [ 848.257811][T18728] sctp_add_bind_addr+0xae/0x3f0 [ 848.257837][T18728] sctp_copy_local_addr_list+0x349/0x550 [ 848.257868][T18728] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 848.257896][T18728] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 848.257928][T18728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 848.257960][T18728] sctp_bind_addr_copy+0xe0/0x530 [ 848.257990][T18728] sctp_sf_do_unexpected_init.isra.0+0x90c/0x16f0 [ 848.258024][T18728] ? __pfx_sctp_sf_do_unexpected_init.isra.0+0x10/0x10 [ 848.258052][T18728] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 848.258081][T18728] ? __pfx_sctp_cname+0x10/0x10 [ 848.258104][T18728] sctp_do_sm+0x181/0x5e00 [ 848.258129][T18728] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 848.258151][T18728] ? __pfx_sctp_do_sm+0x10/0x10 [ 848.258197][T18728] ? ktime_get+0x200/0x310 [ 848.258214][T18728] ? lockdep_hardirqs_on+0x7c/0x110 [ 848.258245][T18728] sctp_assoc_bh_rcv+0x392/0x6f0 [ 848.258282][T18728] sctp_inq_push+0x1db/0x270 [ 848.258301][T18728] sctp_backlog_rcv+0x169/0x590 [ 848.258325][T18728] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 848.258347][T18728] __release_sock+0x3a9/0x450 [ 848.258371][T18728] ? lockdep_hardirqs_on+0x7c/0x110 [ 848.258402][T18728] release_sock+0x5a/0x220 [ 848.258426][T18728] sctp_wait_for_connect+0x1c3/0x5e0 [ 848.258458][T18728] ? __pfx_sctp_wait_for_connect+0x10/0x10 [ 848.258488][T18728] ? __pfx_autoremove_wake_function+0x10/0x10 [ 848.258521][T18728] ? sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 848.258545][T18728] __sctp_connect+0x9e8/0xc80 [ 848.258567][T18728] ? do_raw_spin_lock+0x12c/0x2b0 [ 848.258590][T18728] ? __pfx___sctp_connect+0x10/0x10 [ 848.258612][T18728] ? __pfx_sctp_inet_connect+0x10/0x10 [ 848.258633][T18728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 848.258668][T18728] ? __pfx_sctp_inet_connect+0x10/0x10 [ 848.258686][T18728] sctp_inet_connect+0x15f/0x230 [ 848.258708][T18728] __sys_connect_file+0x141/0x1a0 [ 848.258738][T18728] __sys_connect+0x13b/0x160 [ 848.258761][T18728] ? __pfx___sys_connect+0x10/0x10 [ 848.258796][T18728] ? xfd_validate_state+0x61/0x180 [ 848.258814][T18728] ? __pfx_do_writev+0x10/0x10 [ 848.258845][T18728] __x64_sys_connect+0x72/0xb0 [ 848.258864][T18728] ? lockdep_hardirqs_on+0x7c/0x110 [ 848.258891][T18728] do_syscall_64+0xcd/0xf80 [ 848.258920][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.258941][T18728] RIP: 0033:0x7ff0b338f7c9 [ 848.258958][T18728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.258977][T18728] RSP: 002b:00007ff0b42a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 848.258996][T18728] RAX: ffffffffffffffda RBX: 00007ff0b35e6090 RCX: 00007ff0b338f7c9 [ 848.259008][T18728] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 848.259019][T18728] RBP: 00007ff0b3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 848.259030][T18728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.259041][T18728] R13: 00007ff0b35e6128 R14: 00007ff0b35e6090 R15: 00007ffe400aa088 [ 848.259066][T18728] [ 848.943615][T18574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.747257][T18574] veth0_vlan: entered promiscuous mode [ 849.783752][T18574] veth1_vlan: entered promiscuous mode [ 849.865614][T18574] veth0_macvtap: entered promiscuous mode [ 849.879868][T18574] veth1_macvtap: entered promiscuous mode [ 849.923098][T18574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.941092][T18574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.967719][T15484] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.971213][T15484] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.971254][T15484] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.971284][T15484] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.121341][T17656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.125083][T17656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.208535][T15488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.208560][T15488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.943967][T18770] FAULT_INJECTION: forcing a failure. [ 850.943967][T18770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.017321][T18770] CPU: 1 UID: 0 PID: 18770 Comm: syz.2.2585 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.017354][T18770] Tainted: [L]=SOFTLOCKUP [ 851.017361][T18770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 851.017372][T18770] Call Trace: [ 851.017379][T18770] [ 851.017387][T18770] dump_stack_lvl+0x16c/0x1f0 [ 851.017419][T18770] should_fail_ex+0x512/0x640 [ 851.017444][T18770] _copy_to_user+0x32/0xd0 [ 851.017465][T18770] rng_dev_read+0x1ea/0x810 [ 851.017501][T18770] ? __pfx_virtio_read+0x10/0x10 [ 851.017519][T18770] ? __pfx_rng_dev_read+0x10/0x10 [ 851.017551][T18770] ? bpf_lsm_file_permission+0x9/0x10 [ 851.017573][T18770] ? security_file_permission+0x71/0x210 [ 851.017598][T18770] ? rw_verify_area+0xcf/0x6c0 [ 851.017621][T18770] ? __pfx_rng_dev_read+0x10/0x10 [ 851.017651][T18770] vfs_read+0x1e4/0xcf0 [ 851.017680][T18770] ? __pfx_vfs_read+0x10/0x10 [ 851.017704][T18770] ? find_held_lock+0x2b/0x80 [ 851.017730][T18770] ? __fget_files+0x204/0x3c0 [ 851.017759][T18770] ? __fget_files+0x20e/0x3c0 [ 851.017790][T18770] ksys_read+0x12a/0x250 [ 851.017816][T18770] ? __pfx_ksys_read+0x10/0x10 [ 851.017848][T18770] do_syscall_64+0xcd/0xf80 [ 851.017877][T18770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.017897][T18770] RIP: 0033:0x7f75f0f8f7c9 [ 851.017913][T18770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.017933][T18770] RSP: 002b:00007f75f1d78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 851.017951][T18770] RAX: ffffffffffffffda RBX: 00007f75f11e5fa0 RCX: 00007f75f0f8f7c9 [ 851.017964][T18770] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 0000000000000005 [ 851.017975][T18770] RBP: 00007f75f1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 851.017986][T18770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.017997][T18770] R13: 00007f75f11e6038 R14: 00007f75f11e5fa0 R15: 00007ffe91db4598 [ 851.018021][T18770] [ 851.232384][T18770] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 852.590060][T18795] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 852.923342][T18802] ================================================================== [ 852.923356][T18802] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 852.923390][T18802] Write of size 8 at addr ffffc90003cc9960 by task syz.2.2593/18802 [ 852.923406][T18802] [ 852.923418][T18802] CPU: 1 UID: 0 PID: 18802 Comm: syz.2.2593 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.923444][T18802] Tainted: [L]=SOFTLOCKUP [ 852.923450][T18802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.923462][T18802] Call Trace: [ 852.923469][T18802] [ 852.923476][T18802] dump_stack_lvl+0x116/0x1f0 [ 852.923505][T18802] print_report+0xcd/0x630 [ 852.923532][T18802] ? __virt_addr_valid+0x81/0x610 [ 852.923562][T18802] ? sys_imageblit+0x1a6f/0x1e60 [ 852.923588][T18802] kasan_report+0xe0/0x110 [ 852.923615][T18802] ? sys_imageblit+0x1a6f/0x1e60 [ 852.923642][T18802] sys_imageblit+0x1a6f/0x1e60 [ 852.923671][T18802] ? __pfx_sys_imageblit+0x10/0x10 [ 852.923697][T18802] ? find_held_lock+0x2b/0x80 [ 852.923721][T18802] ? up+0xcb/0x140 [ 852.923749][T18802] ? do_raw_spin_unlock+0x172/0x230 [ 852.923771][T18802] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 852.923798][T18802] ? prb_read_valid+0x78/0xa0 [ 852.923818][T18802] ? __pfx_prb_read_valid+0x10/0x10 [ 852.923839][T18802] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 852.923868][T18802] soft_cursor+0x524/0xa10 [ 852.923891][T18802] ? fb_get_color_depth+0x120/0x250 [ 852.923911][T18802] bit_cursor+0xe8c/0x17e0 [ 852.923934][T18802] ? __pfx_bit_cursor+0x10/0x10 [ 852.923955][T18802] ? __lock_acquire+0x436/0x2890 [ 852.923974][T18802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 852.924003][T18802] ? get_color+0x1da/0x450 [ 852.924019][T18802] ? __pfx_bit_cursor+0x10/0x10 [ 852.924039][T18802] fbcon_cursor+0x437/0x5d0 [ 852.924057][T18802] ? add_softcursor+0x51/0x290 [ 852.924086][T18802] set_cursor+0x1db/0x250 [ 852.924108][T18802] con_write+0x89/0xb0 [ 852.924134][T18802] n_tty_write+0x434/0x1280 [ 852.924155][T18802] ? __pfx_n_tty_write+0x10/0x10 [ 852.924173][T18802] ? __pfx_woken_wake_function+0x10/0x10 [ 852.924196][T18802] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 852.924223][T18802] ? __pfx_n_tty_write+0x10/0x10 [ 852.924241][T18802] file_tty_write.constprop.0+0x503/0x9b0 [ 852.924269][T18802] redirected_tty_write+0xd4/0x120 [ 852.924295][T18802] vfs_write+0x7d3/0x11d0 [ 852.924320][T18802] ? __pfx_redirected_tty_write+0x10/0x10 [ 852.924347][T18802] ? __pfx_vfs_write+0x10/0x10 [ 852.924372][T18802] ? find_held_lock+0x2b/0x80 [ 852.924399][T18802] ksys_write+0x12a/0x250 [ 852.924424][T18802] ? __pfx_ksys_write+0x10/0x10 [ 852.924449][T18802] ? syscall_user_dispatch+0x78/0x140 [ 852.924475][T18802] do_syscall_64+0xcd/0xf80 [ 852.924502][T18802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.924521][T18802] RIP: 0033:0x7f75f0f8f7c9 [ 852.924537][T18802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.924555][T18802] RSP: 002b:00007f75ef1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 852.924574][T18802] RAX: ffffffffffffffda RBX: 00007f75f11e6270 RCX: 00007f75f0f8f7c9 [ 852.924587][T18802] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000006 [ 852.924598][T18802] RBP: 00007f75f1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 852.924609][T18802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.924621][T18802] R13: 00007f75f11e6308 R14: 00007f75f11e6270 R15: 00007ffe91db4598 [ 852.924637][T18802] [ 852.924644][T18802] [ 852.924649][T18802] The buggy address belongs to a vmalloc virtual mapping [ 852.924663][T18802] Memory state around the buggy address: [ 852.924674][T18802] ffffc90003cc9800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 852.924688][T18802] ffffc90003cc9880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 852.924701][T18802] >ffffc90003cc9900: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 852.924711][T18802] ^ [ 852.924722][T18802] ffffc90003cc9980: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 852.924735][T18802] ffffc90003cc9a00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 852.924746][T18802] ================================================================== [ 852.924757][T18802] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 852.924771][T18802] CPU: 1 UID: 0 PID: 18802 Comm: syz.2.2593 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.924797][T18802] Tainted: [L]=SOFTLOCKUP [ 852.924804][T18802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.924816][T18802] Call Trace: [ 852.924821][T18802] [ 852.924828][T18802] dump_stack_lvl+0x3d/0x1f0 [ 852.924854][T18802] vpanic+0x640/0x6f0 [ 852.924873][T18802] panic+0xca/0xd0 [ 852.924890][T18802] ? __pfx_panic+0x10/0x10 [ 852.924911][T18802] ? check_panic_on_warn+0x1f/0xb0 [ 852.924931][T18802] check_panic_on_warn+0xab/0xb0 [ 852.924950][T18802] end_report+0x107/0x160 [ 852.924976][T18802] kasan_report+0xee/0x110 [ 852.925003][T18802] ? sys_imageblit+0x1a6f/0x1e60 [ 852.925032][T18802] sys_imageblit+0x1a6f/0x1e60 [ 852.925065][T18802] ? __pfx_sys_imageblit+0x10/0x10 [ 852.925092][T18802] ? find_held_lock+0x2b/0x80 [ 852.925115][T18802] ? up+0xcb/0x140 [ 852.925142][T18802] ? do_raw_spin_unlock+0x172/0x230 [ 852.925164][T18802] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 852.925190][T18802] ? prb_read_valid+0x78/0xa0 [ 852.925209][T18802] ? __pfx_prb_read_valid+0x10/0x10 [ 852.925230][T18802] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 852.925259][T18802] soft_cursor+0x524/0xa10 [ 852.925281][T18802] ? fb_get_color_depth+0x120/0x250 [ 852.925301][T18802] bit_cursor+0xe8c/0x17e0 [ 852.925324][T18802] ? __pfx_bit_cursor+0x10/0x10 [ 852.925345][T18802] ? __lock_acquire+0x436/0x2890 [ 852.925363][T18802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 852.925391][T18802] ? get_color+0x1da/0x450 [ 852.925407][T18802] ? __pfx_bit_cursor+0x10/0x10 [ 852.925427][T18802] fbcon_cursor+0x437/0x5d0 [ 852.925445][T18802] ? add_softcursor+0x51/0x290 [ 852.925467][T18802] set_cursor+0x1db/0x250 [ 852.925488][T18802] con_write+0x89/0xb0 [ 852.925513][T18802] n_tty_write+0x434/0x1280 [ 852.925534][T18802] ? __pfx_n_tty_write+0x10/0x10 [ 852.925552][T18802] ? __pfx_woken_wake_function+0x10/0x10 [ 852.925574][T18802] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 852.925601][T18802] ? __pfx_n_tty_write+0x10/0x10 [ 852.925619][T18802] file_tty_write.constprop.0+0x503/0x9b0 [ 852.925666][T18802] redirected_tty_write+0xd4/0x120 [ 852.925692][T18802] vfs_write+0x7d3/0x11d0 [ 852.925717][T18802] ? __pfx_redirected_tty_write+0x10/0x10 [ 852.925745][T18802] ? __pfx_vfs_write+0x10/0x10 [ 852.925769][T18802] ? find_held_lock+0x2b/0x80 [ 852.925797][T18802] ksys_write+0x12a/0x250 [ 852.925822][T18802] ? __pfx_ksys_write+0x10/0x10 [ 852.925847][T18802] ? syscall_user_dispatch+0x78/0x140 [ 852.925873][T18802] do_syscall_64+0xcd/0xf80 [ 852.925900][T18802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.925918][T18802] RIP: 0033:0x7f75f0f8f7c9 [ 852.925931][T18802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.925950][T18802] RSP: 002b:00007f75ef1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 852.925966][T18802] RAX: ffffffffffffffda RBX: 00007f75f11e6270 RCX: 00007f75f0f8f7c9 [ 852.925979][T18802] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000006 [ 852.925991][T18802] RBP: 00007f75f1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 852.926012][T18802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.926024][T18802] R13: 00007f75f11e6308 R14: 00007f75f11e6270 R15: 00007ffe91db4598 [ 852.926041][T18802] [ 852.926111][T18802] Kernel Offset: disabled [ 852.926118][T18802] Mem-Info: [ 852.926125][T18802] active_anon:3525 inactive_anon:18946 isolated_anon:0 [ 852.926125][T18802] active_file:20897 inactive_file:38104 isolated_file:0 [ 852.926125][T18802] unevictable:768 dirty:266 writeback:0 [ 852.926125][T18802] slab_reclaimable:12448 slab_unreclaimable:96621 [ 852.926125][T18802] mapped:27279 shmem:12098 pagetables:1567 [ 852.926125][T18802] sec_pagetables:0 bounce:0 [ 852.926125][T18802] kernel_misc_reclaimable:0 [ 852.926125][T18802] free:1304527 free_pcp:11308 free_cma:0 [ 852.926172][T18802] Node 0 active_anon:14100kB inactive_anon:75784kB active_file:83584kB inactive_file:152288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109116kB dirty:1060kB writeback:0kB shmem:46860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:12288kB kernel_stack:12672kB pagetables:6124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 852.926227][T18802] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 852.926271][T18802] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 852.926322][T18802] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 852.926353][T18802] Node 0 DMA32 free:1302016kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14100kB inactive_anon:75784kB active_file:83584kB inactive_file:152288kB unevictable:1536kB writepending:1060kB zspages:200kB present:3129332kB managed:2541032kB mlocked:0kB bounce:0kB free_pcp:35536kB local_pcp:35536kB free_cma:0kB [ 852.926409][T18802] lowmem_reserve[]: 0 0 1 1 1 [ 852.926437][T18802] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 852.926488][T18802] lowmem_reserve[]: 0 0 0 0 0 [ 852.926517][T18802] Node 1 Normal free:3900732kB boost:0kB min:55548kB low:69432kB high:83316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:128kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9692kB local_pcp:9692kB free_cma:0kB [ 852.926570][T18802] lowmem_reserve[]: 0 0 0 0 0 [ 852.926598][T18802] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 852.926696][T18802] Node 0 DMA32: 4810*4kB (UM) 3983*8kB (UME) 3530*16kB (UME) 2404*32kB (UME) 1471*64kB (UME) 781*128kB (UME) 663*256kB (UM) 400*512kB (UM) 234*1024kB (UM) 13*2048kB (UM) 69*4096kB (M) = 1302016kB [ 852.926838][T18802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 852.926922][T18802] Node 1 Normal: 219*4kB (UE) 58*8kB (UE) 34*16kB (UME) 239*32kB (UME) 124*64kB (UME) 32*128kB (UME) 21*256kB (UME) 14*512kB (UME) 6*1024kB (UM) 5*2048kB (UME) 940*4096kB (M) = 3900732kB [ 852.927057][T18802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 852.927078][T18802] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 852.927093][T18802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 852.927107][T18802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 852.927121][T18802] 71126 total pagecache pages [ 852.927128][T18802] 31 pages in swap cache [ 852.927135][T18802] Free swap = 124808kB [ 852.927141][T18802] Total swap = 124996kB [ 852.927149][T18802] 2097051 pages RAM [ 852.927155][T18802] 0 pages HighMem/MovableOnly [ 852.927161][T18802] 429767 pages reserved [ 852.927167][T18802] 0 pages cma reserved [ 852.927174][T18802] [ 852.927174][T18802] Showing all locks held in the system: [ 852.927208][T18802] 2 locks held by acpid/5184: [ 852.927218][T18802] #0: ffff88803e029160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_close_device+0x21/0xd0 [ 852.927270][T18802] #1: ffff888143ace2c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x46/0x2a0 [ 852.927332][T18802] 4 locks held by kworker/u10:13/15962: [ 852.927343][T18802] #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 852.927388][T18802] #1: ffffc90005027c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 852.927431][T18802] #2: ffffffff9012e6d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 852.927481][T18802] #3: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 852.927527][T18802] 1 lock held by udevd/16027: [ 852.927539][T18802] 2 locks held by getty/17726: [ 852.927549][T18802] #0: ffff88814e6500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 852.927593][T18802] #1: ffffc9000497f2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 852.927635][T18802] 1 lock held by syz-executor/18574: [ 852.927647][T18802] 2 locks held by syz.7.2592/18793: [ 852.927657][T18802] 1 lock held by syz.7.2592/18801: [ 852.927668][T18802] 6 locks held by syz.2.2593/18795: [ 852.927679][T18802] 1 lock held by syz.2.2593/18798: [ 852.927689][T18802] #0: ffff888082f4b978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 852.927740][T18802] 2 locks held by syz.2.2593/18800: [ 852.927751][T18802] #0: ffffffff9012e6d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 852.927800][T18802] #1: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 852.927849][T18802] 5 locks held by syz.2.2593/18802: [ 852.927860][T18802] #0: ffff88805d1b80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 852.927904][T18802] #1: ffff88805d1b8130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write.constprop.0+0x283/0x9b0 [ 852.927953][T18802] #2: ffff88805d1b82e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1d0/0x1280 [ 852.927994][T18802] #3: ffffc90003032380 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0x5aa/0x1280 [ 852.928034][T18802] #4: ffffffff8e3b6e60 (console_lock){+.+.}-{0:0}, at: con_write+0x81/0xb0 [ 852.928112][T18802] [ 852.928117][T18802] ============================================= [ 852.928117][T18802] [ 852.928124][T18802] NMI backtrace for cpu 1 [ 852.928135][T18802] CPU: 1 UID: 0 PID: 18802 Comm: syz.2.2593 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.928160][T18802] Tainted: [L]=SOFTLOCKUP [ 852.928167][T18802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.928177][T18802] Call Trace: [ 852.928183][T18802] [ 852.928189][T18802] dump_stack_lvl+0x3d/0x1f0 [ 852.928218][T18802] nmi_cpu_backtrace+0x27b/0x390 [ 852.928238][T18802] ? lock_release+0x201/0x2d0 [ 852.928254][T18802] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 852.928272][T18802] ? sys_imageblit+0x1a6f/0x1e60 [ 852.928297][T18802] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 852.928319][T18802] sys_info+0x133/0x180 [ 852.928335][T18802] vpanic+0x234/0x6f0 [ 852.928352][T18802] panic+0xca/0xd0 [ 852.928369][T18802] ? __pfx_panic+0x10/0x10 [ 852.928389][T18802] ? check_panic_on_warn+0x1f/0xb0 [ 852.928409][T18802] check_panic_on_warn+0xab/0xb0 [ 852.928428][T18802] end_report+0x107/0x160 [ 852.928453][T18802] kasan_report+0xee/0x110 [ 852.928480][T18802] ? sys_imageblit+0x1a6f/0x1e60 [ 852.928507][T18802] sys_imageblit+0x1a6f/0x1e60 [ 852.928536][T18802] ? __pfx_sys_imageblit+0x10/0x10 [ 852.928562][T18802] ? find_held_lock+0x2b/0x80 [ 852.928585][T18802] ? up+0xcb/0x140 [ 852.928611][T18802] ? do_raw_spin_unlock+0x172/0x230 [ 852.928633][T18802] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 852.928659][T18802] ? prb_read_valid+0x78/0xa0 [ 852.928677][T18802] ? __pfx_prb_read_valid+0x10/0x10 [ 852.928698][T18802] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 852.928726][T18802] soft_cursor+0x524/0xa10 [ 852.928754][T18802] ? fb_get_color_depth+0x120/0x250 [ 852.928773][T18802] bit_cursor+0xe8c/0x17e0 [ 852.928796][T18802] ? __pfx_bit_cursor+0x10/0x10 [ 852.928816][T18802] ? __lock_acquire+0x436/0x2890 [ 852.928835][T18802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 852.928862][T18802] ? get_color+0x1da/0x450 [ 852.928878][T18802] ? __pfx_bit_cursor+0x10/0x10 [ 852.928903][T18802] fbcon_cursor+0x437/0x5d0 [ 852.928921][T18802] ? add_softcursor+0x51/0x290 [ 852.928947][T18802] set_cursor+0x1db/0x250 [ 852.928973][T18802] con_write+0x89/0xb0 [ 852.928998][T18802] n_tty_write+0x434/0x1280 [ 852.929019][T18802] ? __pfx_n_tty_write+0x10/0x10 [ 852.929036][T18802] ? __pfx_woken_wake_function+0x10/0x10 [ 852.929064][T18802] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 852.929091][T18802] ? __pfx_n_tty_write+0x10/0x10 [ 852.929108][T18802] file_tty_write.constprop.0+0x503/0x9b0 [ 852.929136][T18802] redirected_tty_write+0xd4/0x120 [ 852.929162][T18802] vfs_write+0x7d3/0x11d0 [ 852.929187][T18802] ? __pfx_redirected_tty_write+0x10/0x10 [ 852.929213][T18802] ? __pfx_vfs_write+0x10/0x10 [ 852.929238][T18802] ? find_held_lock+0x2b/0x80 [ 852.929265][T18802] ksys_write+0x12a/0x250 [ 852.929290][T18802] ? __pfx_ksys_write+0x10/0x10 [ 852.929315][T18802] ? syscall_user_dispatch+0x78/0x140 [ 852.929340][T18802] do_syscall_64+0xcd/0xf80 [ 852.929367][T18802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.929385][T18802] RIP: 0033:0x7f75f0f8f7c9 [ 852.929398][T18802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.929416][T18802] RSP: 002b:00007f75ef1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 852.929438][T18802] RAX: ffffffffffffffda RBX: 00007f75f11e6270 RCX: 00007f75f0f8f7c9 [ 852.929450][T18802] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000006 [ 852.929461][T18802] RBP: 00007f75f1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 852.929473][T18802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.929484][T18802] R13: 00007f75f11e6308 R14: 00007f75f11e6270 R15: 00007ffe91db4598 [ 852.929500][T18802]