last executing test programs: 6m29.484237952s ago: executing program 2 (id=68): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x120001, 0x0, 0x1, 0x1) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20008, 0x4000000000df, 0x10017, r1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) bpf$auto(0x0, 0x0, 0x4f4) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r4, r5, 0x0, 0x3) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptywd\x00', 0xfa7100, 0x0) r8 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240), 0x1a5202, 0x0) ioctl$auto(r7, 0x4b71, r8) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x412080, 0x0) 6m27.380770835s ago: executing program 2 (id=76): r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/dri/vkms/name\x00', 0x80ab01, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) getsockopt$auto(r1, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) fspick$auto(0xffffffffffffffff, 0x0, 0x4c61) lseek$auto(r0, 0x9, 0x0) 6m26.391489782s ago: executing program 2 (id=80): openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x6) getsockopt$auto(r0, 0x40000000029, 0x50, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x1ff80000000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty24\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) unshare$auto(0x40000080) fcntl$auto(0x3, 0x4, 0xa553) 6m24.139925988s ago: executing program 2 (id=89): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x90a00, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000000)='}&\x00', 0x8, 0xa5, 0x0) (async) ioctl$auto_FS_IOC_ENABLE_VERITY2(0xffffffffffffffff, 0x40806685, &(0x7f0000000380)={0x3, 0xfff, 0xff, 0x6, 0x4, 0x4, 0x0, 0x1}) (async, rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b00)=""/250, 0xfa) (async, rerun: 32) write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, 0x0, 0xffffff4b) (async) ioctl$auto_TUNDETACHFILTER(r0, 0x401054d6, &(0x7f0000000080)={0x9, &(0x7f0000000040)={0xd4, 0xa5, 0xf3, @inferred=0xffffffffffffffff}}) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) write$auto(0x4, 0x0, 0x100082) (async) recvfrom$auto(0x3, 0x0, 0x8000000012, 0x100, 0x0, 0xfffffffffffffffd) ioctl$auto_USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f00000000c0)=0x7) (async) shutdown$auto(0x200000003, 0x2) (async) socket(0x18, 0x5, 0x2) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x81, 0x401bf, 0x7352, 0x2e, 0x944a, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x100000006, 0x4, 0x400000000000b4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x8, 0x200000, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1b0]}, 0x1ff, 0xd) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) (async, rerun: 64) r2 = socket(0x10, 0x2, 0x0) (rerun: 64) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 6m23.626159375s ago: executing program 2 (id=93): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) io_uring_setup$auto(0x6, 0x0) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000000c0)=@iter_create={0xffffffffffffffff, 0xfffffbff}, 0x7) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r1, 0x5408, 0x0) 6m23.128208234s ago: executing program 2 (id=95): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x23, 0x5, 0x0) socket(0x23, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write$auto(0x3, 0x0, 0x100082) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x3, 0x0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) write$auto(0x3, 0x0, 0xfdef) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) r3 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r3, 0x2, &(0x7f00000000c0), 0x1) 6m7.842200346s ago: executing program 32 (id=95): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x23, 0x5, 0x0) socket(0x23, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write$auto(0x3, 0x0, 0x100082) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x3, 0x0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) write$auto(0x3, 0x0, 0xfdef) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) r3 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r3, 0x2, &(0x7f00000000c0), 0x1) 3m51.143884689s ago: executing program 1 (id=783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="10002d8008"], 0x2c}}, 0x4000000) 3m50.413468906s ago: executing program 1 (id=786): r0 = socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x890b, 0xffffffffffffffff) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000002940), 0x0) 3m49.91859113s ago: executing program 1 (id=789): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0001, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) ioctl$auto_EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000600)={0xffffffffffffffff, 0x200, 0x90, 0x9f, 0x8d, 0x4}) fsconfig$auto(r0, 0x21, &(0x7f0000000400)='/dev/vhost-net\x00', 0x0, r1) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0x80502, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000340)="2a3f9218659200008a677517d554c80b25c30000000000c40071dde0152c549d44cf790bd304059e64ec347e9b173c52324e7de19a503727fe47d78e0bc2c5590e61b5d86887240d03bca3460f12f2107274ade4e6e53a728e346cef781b623364989314a43e5fd9e20e24417d6b21117b3308557a7b2aa2cb541dea5cb3b6a521b869ac5ff14cb52c4487dd3a3f4a81ff5957aa1109af5a3a1ce466381cc21fea0c67d8a165f29a6b9537b178bfdd013443481ba707ba4632e0478b951e619775f83f13", 0xc4) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x18b800, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0x7) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x0, 0x7a, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0xffffffffffffffc0, 0x800000000000006}) socket(0x2, 0x80805, 0x0) r3 = eventfd$auto(0x7) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) execve$auto(0x0, 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x511b03, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, 0x0, 0x2, 0x0) waitid$auto_P_ALL(0x0, 0x1, 0x0, 0x5, 0x0) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000240)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x180b008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x41001) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x8, 0xffff) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop1\x00', 0x4e00, 0x0) sendfile$auto(0x1, r6, 0x0, 0x1f) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$auto(0x1d, 0x0, 0x0, 0x0, 0x6) 3m49.706793027s ago: executing program 1 (id=792): madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x0, 0x1, 0x0, 0x7, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a400, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r0, 0x0, 0x4800) sendmsg$auto_TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x40044) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) sendfile$auto(r2, r2, 0x0, 0x4f64a1d2) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) lchown$auto(0x0, 0xee01, 0xee00) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) poll$auto(&(0x7f0000000480)={0xffffffffffffffff, 0xffff, 0x29}, 0x3, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cpu.weight\x00', 0x128082, 0x0) 3m49.292379246s ago: executing program 1 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="10002d8008"], 0x2c}}, 0x4000000) 3m49.108938505s ago: executing program 1 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01001cbd7000fddbdf25020000000800010002000000ef738bf90e5ed6c2302e4a8e9855f41444c8912293bda9e0cbea2cceb1c71b"], 0x1c}}, 0x4000) io_uring_register$auto(0xffffffffffffffff, 0x18, 0x0, 0x9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m34.032450618s ago: executing program 33 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01001cbd7000fddbdf25020000000800010002000000ef738bf90e5ed6c2302e4a8e9855f41444c8912293bda9e0cbea2cceb1c71b"], 0x1c}}, 0x4000) io_uring_register$auto(0xffffffffffffffff, 0x18, 0x0, 0x9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m30.658223972s ago: executing program 3 (id=1076): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x2}, 0x1000002bf) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x3) ioctl$auto(0x3, 0x80084d17, r0) 2m30.507825566s ago: executing program 3 (id=1078): mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x8, 0x0, 0x1, [@generic="8592a023"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r2 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x4a9c933c, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x200000000006, 0x8) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) madvise$auto(0x0, 0x2003f0, 0x15) 2m29.293720287s ago: executing program 3 (id=1081): mmap$auto(0xfffffffffffffffd, 0x10, 0x1000000000000007, 0x400000000ebd, 0x0, 0x5) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/manager\x00', 0x141603, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r2, 0x3, &(0x7f0000001640)='+\x00', &(0x7f0000001680)="df", 0x0) close_range$auto(r2, r0, 0x0) 2m29.222355453s ago: executing program 3 (id=1082): mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x8, 0x0, 0x1, [@generic="8592a023"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r2 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x4a9c933c, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) madvise$auto(0x0, 0x2003f0, 0x15) 2m28.145195495s ago: executing program 3 (id=1083): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_ECHOREQ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYRESOCT=r1, @ANYRESDEC, @ANYBLOB="030225bd7027ffdbdf2503000000080001000100000008000200cd0d0000", @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x4000b, 0xe2, 0x9b72, 0x7, 0x28000) (rerun: 64) socket(0xa, 0x3, 0x3a) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 64) socket(0x18, 0xa, 0x1) (async, rerun: 64) socket(0xa, 0x2, 0x0) (rerun: 64) connect$auto(0x3, &(0x7f0000000000)=@rc={0x1f, @none, 0x3}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) (async) ioctl$auto_NS_GET_TGID_IN_PIDNS(r4, 0x8004b709, &(0x7f0000000140)=0x7) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/carrier\x00', 0x8182, 0x0) write$auto_fops_init_pkru_pkeys(r7, &(0x7f0000000440)='\v', 0x1) (async) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) (async, rerun: 64) r8 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000007c0), r4) (rerun: 64) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="02002cbd7000fddbdf25130000000500280000000000080014000500000084001e006ee04804b243e9617cd91ec65523556c668fcf4efa25e78c4de682365d4cd3cfdf1370b60e5449e3e11780d97d2ad0d02772a60436a7b16ca2ff4305fd0ab969551beaa7de33a70459242262c952b5bbf803a7bf2ad80b643aef82600c1761d46d9580dcb4686ffaf9e6aa632d29cdc078f0cdb1bd1ce3dfc0055902f4e9d9fd1f00160045f7eab0785a8435b9b15ac3ab5db12ad61e6a4666670fbd38531600"], 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 32) r9 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000140)=0x8) (async, rerun: 32) r10 = getpid() (async) r11 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000180)=0x4) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="70040000", @ANYRES16=r6, @ANYBLOB="000229bd7000ffdbdf25040000006d030780732810532511465bd988f471af7435a48dae2e0bb49b9fac174a4d2ec3da83e20786c5c114c23f53a5cb7587932e300504fad2963e634f2777088ac2792f1f012aa3ffb0867a0e45af07cbd3d011778c8af41f4bed39c13ddbe8111c00a4800400318014001900fe8000000000000000000000000000bb08002c00", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="7ed47bc67c8661c6ad7a805802bb765775fe1d2d7ba1ef2fe6af4e4ba93798aff772a05d64c3a0d8b2e746d0472c980ae9abe689d4d34347444e02ad2f1df3fb80c6a80309801444b12081bca1f066bcca9cb5400f6d900b8d5ed31094250582a05a8e8ba829b93626b2b03e3bfdeff642a7999f6dbb048f233d377d63277e4c5707b39320af2f041a283afacea5000000c00007800800ca00", @ANYRES32=r11, @ANYBLOB="df712aa8b0110c98cb0d019d73816f1cbf131847a0770a43b41aa81806b9fa5718661736c5c78484fcbdfc586147363867f841f6f4227251c76759cb8ffed5f7847808af28734d392e0ec0fa762de4e2f0b1b2ae3caa9cf75fbdb3f220ea21cb9e3e681ab2601de7643a39c421ecdfbbb9551195bc15b5ac3bd9572e6a8eae8607465ca027d4e13f3186205d642bd11c921dc78a919708d1b27fb7ca7dab14126b6f53ed2e0c9f45d7009eca0ece9735886ca90a2a0004004eb0efd3f6a41f38c832893c0920a77017c5d4dc5692d725f864bae09f4457960f3bbc8aaa570000"], 0x470}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/arp_interval\x00', 0x20b42, 0x0) 2m27.00500704s ago: executing program 3 (id=1089): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyb2/dev\x00', 0xa001, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x4, 0x3, 0x4, 0x9b72, r1, 0x200000000000) timer_create$auto(0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000f9dbdf2501040000060003000300000006001c0004001060050000000000000000000000000000000014002000ff010000000000000000000000000001"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/cpu/cpu0/cache/index1/number_of_sets\x00', 0x503e62, 0x0) write$auto(r4, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) setrlimit$auto(0x5, &(0x7f0000000040)={0x200000005, 0x6}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffffffdffe00, &(0x7f0000000140)=';') r6 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400005, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) mprotect$auto(0x0, 0x4, 0x6) ioctl$auto(0x3, 0xc0086202, r6) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) read$auto(0x3, 0x0, 0x7fffffff) setsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)='%&+#*%-\xfc\x00', 0x9) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, r6, 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 2m13.114517356s ago: executing program 4 (id=1132): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'rose0\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'geneve0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe0, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r3}, @NET_SHAPER_A_HANDLE={0x1c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x8}, @NET_SHAPER_A_HANDLE_ID={0x8}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x7fffffff}]}, @NET_SHAPER_A_HANDLE={0x2c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x322}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x2}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x40}]}, @NET_SHAPER_A_HANDLE={0x3c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x80000000}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x40}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x8001}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x8}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x80}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3ff}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x4}]}, @NET_SHAPER_A_HANDLE={0x24, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x3}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xffffffcb}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x943a}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_HANDLE={0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x14000840}, 0x4) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) (async) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000024c0)="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", 0xfff) (async, rerun: 64) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (rerun: 64) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x4001, 0x7, 0x5, 0x100717e, 0x3, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x1, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffff4f3, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd) (async) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) write$auto_proc_clear_refs_operations_internal(r0, &(0x7f0000000000)="73d6cc4fdf406742386dd72ff1428a506f5cd946a3", 0x15) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffff7effffd01, &(0x7f00000001c0)) 2m12.112070753s ago: executing program 4 (id=1135): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) sendmsg$auto_TIPC_NL_MON_SET(r0, 0x0, 0x8054) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r2 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff5f5ffffff00"}, 0x55) getsockopt$auto_SO_INCOMING_NAPI_ID(r2, 0x101, 0x38, &(0x7f0000000780)='nl80211\x00]\x14\xf8\x10\xfb\xca\xa3\x90h\x1c\xe9T\x17Gtn\xba\xa2\t\xa4\x9b9\xdac\xd3h\x04\xc2\xcfH\x9c\xd0\xdb\xc9\xa1\xa1\x04{\x06\xf0~ \x857S\xcaZ\xa5@\x9b\xef\x004\xe5T\x9d\x1b\xc4V\x88\xc6\x80\xf6\xd1/\xd0\xba\xf1\x9b0\xc7\x83\xb9\x04v\xf2b\xddf\x10\xb0N:%\xcbYZ\x13\xacx65\xb6\xe4`\xa11\x96\xa5\x85\x9a\x10(\xa7#\xcb\x91^\x10\x88d\xc8\x18\x97\x9f\xe2[c\xd3n\xa4=\xff\xa7_\x8d>\'.\x1eW\x85\xe5\xa3\x9ekz\xb3\x87#=\xbcF\x939\xfa\xda\xfc.\xa2\x03\x89\a\xd0}(\xa3\x19\x13w[vC]e\x88\xf7VaB\xc8%\x80\xed\'\xfd}[\b\xabx\xb8cS\x99G\xc6\x83\x9a\xa1U\x8d\x1d.4\xd9\x1cb=\x8a\xc5%\xf1\xf1\xd6)^\xcdz\xdfN\x19@UK\x9b#\xc7\x8f\x9e\x92F\x928)\x1d\x14hMr\xdb\"2\x92\x9fv\x82Uw\xce9\x95d\x16\x8f\xacq*Z\xa1\xc2%\v\xd1\xfb\xd2\xfc\xdc\x7f\xdc\r\\\n\xcai\x91\x93\r\x05\x15\xb8L\xd9\xbcj\x8d\xbbV\xa8\xf22|\xcc(1\xd9\x86GO\x87K!+fG\xf2In\xf6\xee;\x9fD%\xac\bZ\xde\xd78\xc7bx\xb9\xd3\xc8\x8b\xc0\xe80\x01\x14\x83G\x95\x95\xf9\r\x9f\x9f\x06\xe3)\xfe\xb5H\v\xb6\xccO\x146\xae\x1c\x93/\x9a\xd0m+\xea`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd1\xb2N\xc4*\x8b\xc8\xc5\xbd\x87\x9f=\xb03<\x1d\xf14\xf3,x\x056\xb7\xea\x06\xd8\f\x81\xc4\xac\x8b\x97\xb1\v\xc6\x12\xa3\xfa\xe3?@c\xef\xb2?\xf9\x8f\t-\x13\xa0i\xe9FN\xac\x15\x83\xb2H\x8f\xdd\x03\xfa\x90K\xbbX\xd9\x1d\xa8q\x9a\xcd\xf2\xa7R\xd1;Gic\xca\x17p\x8d`\xa0\xe2\xef\xc1$T\f\xca\xc0\xce\x02\'\'\xcdB\x1f\xb6CAi\xe5\xc6\x06&g\xa4\x832\xa7\xda\x7f,\xde\"\xfd\xd8\xf7\x8aa\xbe\x1d\xce}\xb4~\xb3-Q\xa8\xf2yH\xf4\x80\xe9\xfe\xa1k\x93\x01\xe5\xba(\x96K\xc1=d3\xe00u\"`]\xb3\x11a\x1cSn\xe7\x87\x84\x93\xe4\x90]\x86\x10\xe5\xacK\x99\xc1$\x91\x05\x00\x00\x00O\x01xc\xa8\x9a\x1bK\x00\x00\xf6\xa2\x8a\x7f4\f[BLH$6\xfb,\xd8\xd3\xd0\x8b\xb3yA.\xb4\xbc\td\x9d\\\xd0\xff\xd2Y\xc4\x9fT\xb2\xd5\r\xf1#\xd5\xf2\x9cU\xd1:+\xb63\xae\xc1\xf7\xe1\xd4\x879?\xdd\xd6\xd4\xa3\xc7\xd8 S\xfc:\xe1{\x16\\h\x9d\xbc#KEC\x1a\xf9KH`\x82e:_\x9b\xf1\xc1\x8e\xf0\xc46\x98\xd6u\x90\x18\x8f\xe8\xc3%\x8e9\xab\x7f\x0e\n\xb2\xa4\xef\x90\xb16\x04\xbc\xc9\xdc\xad,\xcc\xad}DY\x1d\x1fv\x90\x97u\xa1\xfb\x13\xa93\xb6XJ\x84\xe3\xc1)\x98\xae5q\xa5L\x87\x1aq\x1d0\xf1\xcb\xe5\xf4F!*\xf9\xb3,w\"\xf2\xd0\xd1Vj\xd0\x06\xcc\xbc\xee0\x98.\xd9dC\x8e9\xfdM\\\xc5&\\\x9b\x81\x88t\xa4\x9f\xd1P\xd2e\x9c\xf9\xd2\xaf\x00\x00\x00\x00\x00\x00\x00 \x00'/478, 0x8000000000b) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) fchown$auto(0xffffffffffffffff, 0xff, 0x5) fcntl$auto(0xffffffffffffffff, 0x4, 0xfffffffffffffff9) socket(0xa, 0x5, 0x84) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000180)={{0x3, 0x0, @descriptor="5a9bfa7be934770b"}, '\x00', 0x8, 0x4, 0xb}) r2 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000a02c3a5b4f22837dfc2e8c0c5385a342d33ac3accd15666664810e605f4b6bbe249789c031887089641eaeaced4cc3c716ed686ab0e9e4dfd190a2122d567ff86f7a129761ff30169d086972a7cf651776e9751ef137bf2760015f5f565c8160d510830d9f8305051b5c17b0e760e30b0d8fdfc615e60c858ff1ccca0330a72f71e121b7cc42bf5adea32f06ce5045ec06dabd88c2d36d9f0b8f6698dc5db25480ee6bdbb628bef5f446", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0) ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x8300, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0x7}, 0x3) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x40000, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0x1ff, 0xeb1, 0x8000000000000024, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) unshare$auto(0x40000080) getsockopt$auto(r2, 0x83, 0x3, 0x0, &(0x7f0000000140)=0xfffffff9) mmap$auto(0x8000000000000001, 0x100, 0xe2, 0xeb1, 0x401, 0x8000) 2m5.718008506s ago: executing program 4 (id=1152): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) write$auto(0x3, 0x0, 0x100082) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/anycast6\x00', 0x101000, 0x0) pread64$auto(r1, &(0x7f0000000040)='veth1\x00', 0x200000000004, 0x4) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)="000004") gettid() 1m50.621246916s ago: executing program 35 (id=1152): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) write$auto(0x3, 0x0, 0x100082) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/anycast6\x00', 0x101000, 0x0) pread64$auto(r1, &(0x7f0000000040)='veth1\x00', 0x200000000004, 0x4) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)="000004") gettid() 14.946581675s ago: executing program 7 (id=1428): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/loginuid\x00', 0x862c0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity_list\x00', 0x129542, 0x0) setresuid$auto(0x2, 0x7, 0x8080) ioprio_get$auto(0x3, 0x2) read$auto(0x3, 0x0, 0xf34) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01212bbd0004004ec6c2eda957415453e00000"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) write$auto(0x3, 0x0, 0x7) 14.659916555s ago: executing program 7 (id=1429): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x7d1881, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x10005, 0x1, 0x3c, r0, 0x8000) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x808, r1, [0x80000], {0x9, 0x6, 0xf, 0x29f, 0x110, 0x7, 0x101, 0x4000006, 0x1ffc}, {0x401, 0x1, 0x52, 0x5, 0x1, 0x0, 0x9, 0x8, 0x1}}) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pivot_root$auto(0x0, 0x0) open(0x0, 0x103803, 0x92) mmap$auto(0x800000000000006, 0x20009, 0xe0, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xc0401, 0x0) write$auto_proc_timens_offsets_operations_base(r2, &(0x7f0000000300)="38675fd347658c23ffecd0d8bc1d982487a3ad5094ae47160fda3b2630d3370ca8b975057089c083c9bd2814031c19ae951929c98655d8f55cbc42208ee9cb966bf6eb2e555b9301df7e72e7d7f53dbef536f56921ce229e1c5344e237d9b7f62a6b66e774fffd83a8e0711677f72efdaa79cc9854619d920d7454de5411cc09e0af56d8d004f5031b601d8c3159ca47129002f5afde5d3f116c5d58712583b7077b170a11", 0xa5) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/pci/drivers/vmwgfx/new_id\x00', 0xa001, 0x0) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000140), 0x1ca180, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 11.147266028s ago: executing program 7 (id=1438): r0 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x151803, 0x0) r1 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/etherd/interfaces\x00', 0x1, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) writev$auto(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x1}, 0x4) read$auto_stats_fops_(r0, &(0x7f0000000040)=""/46, 0x2e) 10.799809578s ago: executing program 7 (id=1440): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x1800) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101901, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video34\x00', 0x40861, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x240, 0x13) statx$auto(r2, &(0x7f0000004b00)='\x00', 0xbf02, 0x3, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) 6.995624353s ago: executing program 0 (id=1448): mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x8, 0x0, 0x1, [@generic="8592a023"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r1 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x4a9c933c, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x200000000006, 0x8) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) madvise$auto(0x0, 0x2003f0, 0x15) 5.7932918s ago: executing program 0 (id=1450): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x66) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff59, &(0x7f0000000340)={0x0}}, 0x801) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) clone$auto(0x4, 0x9, 0x0, &(0x7f0000000100)=0xa00000, 0x4) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) open(&(0x7f0000000180)='./file0\x00', 0x42, 0x147) select$auto(0x109, 0x0, 0x0, &(0x7f00000002c0)={[0x4, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r4, 0x0, 0x24000000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/257, 0x101) mmap$auto(0x0, 0x2020009, 0x400000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x310, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x1000000, 0x9, 0xff6, 0x8000000008013, r3, 0x7fffff0000000000) madvise$auto(0x0, 0x400053, 0x9) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) 5.71323064s ago: executing program 5 (id=1451): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto_tun_fops_tun(0xffffffffffffffff, &(0x7f0000000040), 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdb\xfd=x\x13\x01V\xd4\xee\xc2\xdd\xa7\v$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z\b\x00\x00\x00\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\x93\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00', 0x1) listen$auto(0x3, 0x81) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x2, 0x38) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x103b, 0x1, 0x4, 0x8000000000000001, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0x100082) 4.756048787s ago: executing program 6 (id=1452): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r1) readv$auto(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x4}, 0x7) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x80001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x0, 0x5c5, 0x0, 0x4, 0x0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) madvise$auto(0xffffefffffffdf7c, 0x6cb6, 0x1) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f00000003c0)={0x383a01180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x6, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffc]}, 0x0) write$auto(r0, &(0x7f0000000400)='/de/a\x95dio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x20000004, &(0x7f0000000100)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(r4, 0x8, 0x5) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x200, 0x2020009, 0x80000002, 0x40000000000eb0, r2, 0xee1) 4.693411445s ago: executing program 0 (id=1453): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x309403, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x2, 0xfffffffffffffffe) r1 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r1, 0x0, 0x17) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x5, 0x4000000000000014, 0x3) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) acct$auto(&(0x7f0000002380)='/sys/kernel/debug/dri/vkms/crtc-0/crc/data\x00') ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) 4.583629796s ago: executing program 5 (id=1454): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity_list\x00', 0x129542, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0xffff, @broadcast}, 0x54) socket(0x10, 0x3, 0x2) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x0, 0x9) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) setpriority$auto(0x7, 0x8, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x18, 0x80000, 0x1) io_uring_setup$auto(0xe3, 0x0) 3.946427598s ago: executing program 5 (id=1455): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ppoll$auto(&(0x7f0000000000)={r0, 0xf25f}, 0x5, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex_wake$auto(0x0, 0x7, 0x0, 0x82) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) 3.77306153s ago: executing program 6 (id=1456): ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000000)={0xffffffffffffffff}) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000040)="62020a994154456e121f42344c8b51b5a68d9c6f76c8ff484b7a50d293c6c9b56d08582cbd4602874e9ed53f0fa8206c1d2cde631429320ac7bd17ca2596fcd9be891b96945eda84a631e8a6958aec9e25c7d831d268f8d0e96e68", 0x5b) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x476000, 0x104) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x8002, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev3\x00', 0x121181, 0x0) sendfile$auto(0xffffffffffffffff, r3, &(0x7f0000000180)=0xc, 0xc) r4 = prctl$auto_PR_SET_VMA_ANON_NAME(0xe, 0x0, 0xffffffffffffffff, 0x1, 0x3) ioctl$auto_VHOST_SET_VRING_NUM2(r4, 0x4008af10, &(0x7f00000001c0)={0x3, 0xffffffff}) r5 = getpid() r6 = prctl$auto(0x80000001, 0xfff, r5, 0xfffffffffffffffb, 0x0) ioctl$auto_VHOST_SET_LOG_BASE2(r1, 0x4008af04, &(0x7f0000000200)=0x9) r7 = ioctl$auto_TUNSETVNETBE2(r4, 0x400454de, &(0x7f0000000240)=0x8952) fcntl$auto_F_CREATED_QUERY(r6, 0x404, 0x1) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000002c0), r0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x780, r8, 0xd9101373db45b273, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x76a, 0x3, 0x0, 0x1, [@typed={0x4, 0x10d}, @nested={0xf5, 0x8c, 0x0, 0x1, [@nested={0x4, 0x9b}, @generic="680f9b7dc715a60f9f3f06d1a0283a2602a0f4f19810e58bdc32c9f2bc5973a2e31965d458a62f9167eba461d4a6da53fa1c1df9ffa494e8534ea8e7d61a8cd75284a6421e85941b1627153d32d2114434063538555e95c58d3d1e75085d137cffcadffc2a8c45e84e909f5bc4aca378ab2bfed4b953c92f46f15a5d89fcd40db2f06100ea57ae1dd986ca872698f17e20a6e76683e80020a8b37bf39dd2a06eaa158f454345e1157c377657d0fb320dd885c9417ee201391727231d977a831a2e30d2354f73f3cd4089827a01738307c99dab5b2f7af65b8bb538f790f52eba79", @typed={0x8, 0x83, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x11c}]}, @typed={0x4, 0x54}, @nested={0x10a, 0x5c, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x140}, @generic="5b26e7e280e1aba8f9aa91d32feb35b4b693b4fa36e378f529920b79dbbcb9075fd0c41c8c4791b828", @generic="23613feb1d0da737e40ee2a44e7cdb30b566298ea8b78740d3ae0e38cc89001fb8dd4e25eb1a8a3e17a7598ce15a5f4aa8036244ac42501877d82eea00a36b791811008b9c0ad946c37ee70868004864c278dfae23d130a405a1a33d8bfc34aad1417192056db8560ceb52017053d6c436b60a8fa19bc65e718cc30e1e6c3784deef5e074ef37a1b0c1932a624ac396b9b3e559ceadc88e4a7339a8652217e288658828cd16e1fdd17de796dd74981c8", @typed={0x8, 0x119, 0x0, 0x0, @u32=0x7}, @generic="dfc9b5ade4dfb4dfc845a88eb56d4badaf650f23926c2d861dac288dbc"]}, @nested={0x166, 0x1d, 0x0, 0x1, [@nested={0x4, 0xb}, @typed={0xcb, 0x14f, 0x0, 0x0, @binary="e05f9a545d37c7c7f19782c48979111fae9c287c1fc72f2baea42372c09d318cd0ed142b553eca3375a4818c842978e537a837174cee7535a807327f1eee1bffc7f65b965dc30617cb81b74ae411d0d1110e7f18dd7dcef53d67dacbd5f22a239c0fa0302de826da8cd40696ed140bb199b62bc53e1c30b6443022c0b3de9d538b285e5ce3722cf8f3010c04874f856f996182900232c6cc5fb55e3811f60b95f1182aeb787b9ccf59f57f5654b499a9f3e91e95c17ba6ef71a4e60988580ec81adb6806f16a71"}, @nested={0x4, 0xb2}, @typed={0x8, 0xf5, 0x0, 0x0, @pid=r5}, @generic="904e7b1f959d90965a4b438e1ab1c511d5f5eb32597774b14371cd776aaaa87e95195e2d468ea8849d4adcd7f02fac8a3ef484a22a93f64e364d34302591c3e7ee94839b1cc3186e50cfc0d44ee95b06a490b6413abd2ce06e8cb00d768180af83c4eb877dbfe01b533eed4e857497c8efe2f635011f7708f51d61bd2bf9a926f3ce045a7ea9"]}, @generic="f97226f945b254bcd82f96efb05e855220769001ed3484055f21ed6c03008d46e31597710b130c90245a5fb55ce06a986a330f31222d3ee634c73b39f7b9cd280477d0792a36f0e85a21510000d4719731cf7cb4a85bf09929f4d4278c682c1510d6a8494ead1537", @nested={0x1f0, 0xd2, 0x0, 0x1, [@generic="be951fdbe24c56f00df1a519a9812e94d80ce9d007f004bd6dad39c5b06664338e83e3cadecb4280a868c0e771fc51e6e5aca1457b0d0f4355697cfebc9f35d83b40ac4031518fa31ae1a27bbb4ed2b951a31271702d1717523cca82a4dc67e7cbcde1df4211f859ac60d99b58a84e2c1e63d415", @typed={0x16, 0x13e, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @generic="21cd1431723d29ec56a74d49658fa18b0a799f789b14ed322ce7cb7ad1377e34be663e26c7aa73c7551e97336c5273215ee8e4c8995e504cfbe1192955f71e60f56b6e3575bde7", @generic="770bed03301157634bda27e7b54edf04a580c12404f30bba082bc5138dc7e714add6680fcf367d80fd85e84b9e4108c9a955523565bc3e3b0147047c6e814bb6291dcd30d1ede1480837dc1e954551878958633d84a09af8a68b43fa405755d5d8758d6c23ec945d5b106eb251e2c1c1a5", @generic="f4a0b577a45e7ed7a8f7f32fb9c0860eba997ad8159903d087d1fe584a9f1e31070e", @generic="9d80589c55a178bcc1b81339b986aa9c1e2e50050250ccc238c2015c4918ca3c8b927f8c54c3d7a523cf5696033d6f036266a262bab03d96e2cd00ac65a479ca6f386f63d78d338c5b3113723b619ed5cbd6d420f44804a15c1ef4d032017a3b22b5e8e3c5e4c3d0fc1f8bf83ed8fe608c97", @typed={0x4, 0x35}, @typed={0x8, 0x10d, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="2fb4d979d5bd62e35abf1cf498e1b19de7a1917cd9575bb46599291b40c20404230c16cbb1c0484c97a6f29af87b", @nested={0x16a, 0x6e, 0x0, 0x1, [@nested={0x4, 0xe1}, @generic="0b0f53b212f1973f7aeb1f9a3955006bb1c5d89c695b118a87cabbb3ac52b565d765337025210ccb2a5bab6331bf008930fba08c97df7c3a2e125d069f4c57e93678647e3d0e6c8c6e33b9894e1fc22cfe18516301a725a75851a6dd21f1347401e1a8543d2dc37df6b695f1dc4bcabe59006d3a73246a950dffae662f7c6e2167687572d96415d24230", @nested={0x4, 0x27}, @nested={0x4, 0xaf}, @nested={0x4, 0x80}, @nested={0x4, 0x36}, @generic="22331124df8821ef1b6e34ce8eced908b31e5b647b2a95f3a32bb48043502b8a290e9f980348120888c65a8bc6bdfd75f567a9ba530211bb4b73e54d3fa361fac6be8e8aa2132481e1e643355d1498bf41d10fdbc5caf23460618817cf2fd341c1ef9b08baa1b695cf93096e573d5992bea6da48f1a43cef30c871f4c6bc0472b69ea6a48814d661a5890caf8473d9953f810f58820d188ed3548673ddc4e331cdb190324512f2e5bf9e5f1e9a21febdf1547664f2f08dbea100d95c4beb71ef9436ee8e32ed427a"]}]}]}, 0x780}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r9 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000b40), r6) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001180)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10504208}, 0xc, &(0x7f0000001140)={&(0x7f0000000b80)={0x5b8, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0xfc, 0x3, 0x0, 0x1, [@nested={0x8, 0xa3, 0x0, 0x1, [@nested={0x4, 0x10f}]}, @generic="e281c99ecc6177d6c18efafc26633c54b22682fe1dbc54003f8f9f44c7f1c344e3d7eb236b23728c83aa4c1d90ec2a476f0780589954c3aafe55086feeaf7914099ab857fcedb379d2b45c1f54950bafa3c8462fc2597c05d1800d1927e18567770b1d3ece5067eae632b1c3b7be5c08bb2f25a9c879a501c91a57c8f2f21126fb681615cc9af867ad8ebb1d3e1aa75160f067d9278f32cd4bc31a04b4481f68863baeeb13c75612810e5bc220229ade82233b68dbb62cb76760efd15fc695daf845946ebbb3c3482a4c0ca94208d6f8536b24215a1efa2784a13b8ff639bf13c61bd2d279f8eb4307705573fce95753"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x1c, 0x3, 0x0, 0x1, [@typed={0x15, 0xb4, 0x0, 0x0, @str='/dev/v4l-subdev3\x00'}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x9c, 0x2, 0x0, 0x1, [@generic="f1092f76a273a29e1c92c0ff739cb64aafea1794970ae280ff8ab23b18b97c6a2492e7f2a644883303764d79c20b90ccbc55a55647b60e2c05f64e01fe7dfe0166c3ba6195c654acfbb31dbb7b3e1ce5d8dd003ad8410db7600570946957cb9c724179896a9d36a7de5f00beec70a587e947924ac8ca5ff889b7676e53edf36d5747f8bb6305ecb76d88cc6b419cf0c2651cc2c72757d5d4"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x10001}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x6c, 0x3, 0x0, 0x1, [@typed={0x6, 0xc2, 0x0, 0x0, @str='-\x00'}, @nested={0x5e, 0x87, 0x0, 0x1, [@typed={0x8, 0xf9, 0x0, 0x0, @pid=r5}, @generic="dc1f3021b08d3543fbe1a03d5b3772ca7826aadac455e89952db5814d50cfd30461fb23d0aa661596dd6c0181e204509d98da5b5a5a402b5f98c26b907a5b6ded8733652f79c0b73c914b61a4258e3dc588a"]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x274, 0x3, 0x0, 0x1, [@nested={0x267, 0xc7, 0x0, 0x1, [@typed={0x8, 0xb2, 0x0, 0x0, @ipv4=@multicast1}, @generic="1e4bc81595913dcc16e2fe403c8e8b688fb67ec2c594a8e66be039333dcd4d7522ca4982724b6f1af1a57933bd9237d2e051230c2b195242fbdd45f771d06ca0a50e6a7580e41350", @generic="b2ce77cb1f1b038b5694af710a5c72038a5d6f459e6489ed3020af3ebb0958b800dec73de89f4deb72ff30f6ab021fe0a084859b5a3cf9831efb594fe03634cda16c4de93a8cd7a8e67f55672a745690674f8937c8e42e0ea9f74fdd45ce8d994845b9467924022d9184cb3c6ded02a5e5481802ebf5c7288a8460486c51b31b957cadf91027d653aa21e18c46f16eceacf566beb7de46430da15e49c8394f5574d8fd321bceae00ef6e901a1384173c74c889468ad4855216", @nested={0x4, 0x2f}, @generic="b10cc7893247877c00fa93d846710c671a68b9da7f10120bfdc72cda815680789818c3447ddc3cd6464bd07b73a064d7d6a0240ba81753a9be97a78c3824199c592c25f1bf01f9292ae1f48b0f84828020741fbfeb7b0d7d9eeb8cf4faa6ec7cc389ab1c", @typed={0x76, 0xc8, 0x0, 0x0, @binary="56b559c6ec23640249189b04897253c7c5c5ee5f974a114653f795c9c322bd0489f0518509a5c0061d2d9935e3cf81e7c4e7d30180a771460f0f59cbfe33ea9b1d5c5dbe1576945b9b740585393ee6a278ca1a2cd5db60fbd977171ec6d3f8917d23dbc6883bde23119fef5d839c02b2bfe6"}, @nested={0x4, 0x25}, @typed={0x8, 0x2a, 0x0, 0x0, @u32=0x9}, @generic="353509bcfade76c2de1e51aa0ff0d8c6cf2ee9265fef374c8b7551e5d67cd083fc3362ec6b957f71d52d84fb020826277d900180d80aeb89359e8f390aae4d6e1e9308de316b9672f904814365656ec2b72e8b17db286b1d8216781439fee339b468d2e6eeb7d2285a41", @nested={0x4, 0x59}]}, @typed={0x8, 0x144, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x4}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0xf8, 0x2, 0x0, 0x1, [@typed={0x8, 0xf5, 0x0, 0x0, @uid=0xee00}, @nested={0xe5, 0x14f, 0x0, 0x1, [@nested={0x4, 0x32}, @nested={0x4, 0x79}, @nested={0x4, 0x64}, @generic="b478ef79944c8031c168ded0461e9ea2daa93fe87ea80ace9b3b8be001e87b4d00891292815ae0672035cacb7da25b701673f26fd7", @nested={0x4, 0x117}, @generic="2cb2492c2f2b198a72e146fb9b3cc009586f074952aa02f894b898a48597157eb4127c2963bf5dc46233d1b459af3ea311c1ee1ae5f4722df7f5ffb50818d5bc4364f423e02ea2b8beb8c57adde4b5e3aca9b0c2e961d0898a7ad3c8818db6efff1c366553de28ba6e888a6cd9ddd9efccc2918bc7708f572c05d46c12c1d3f390d59217635f35b09f707c0592a11e959c86b068fdf795801197d707"]}, @typed={0x4, 0x23}]}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) readv$auto(r3, &(0x7f0000001240)={&(0x7f00000011c0)="4eaed24916334518946a5e77b764aeb133743d1b6943272bf9f9a156954316c2050e4bd168fc58313a61a0a6de9e34e82e92b942d0bff5a43d6281e33a99ec341dfab04e4bdfef129bf34bb25b3dfc36ef418755d4b7fcb117bc0f46e4fe296190fd23", 0x5}, 0x5) ioctl$auto_SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000001280)="39fc26de2515f84f2147b8b6d9f95cff26b4f11bb2e6736427b9da2eacc4f287f8071a7c54a18c7840249dab6f6f022b97d80291689d44744be8d143d4f02cdf520e5a91ec473a2cf176a74da65162426e64074362f3497347f0def67820c43c92779d411d7200855d96d9134fc7ef8ccc536e77d15a0b015543b2ad14d78d7bebe76945557ffc6a526cd98bc68796c8458ce0c2d922c375ee572a537c22083a1f17ab9b288162bf9f547c25eea0cab78687ae62ce497f53bb9030df4b4721f0f7afdd56b77368afcc939bbba2") close_range$auto(r1, r4, 0x1) setsockopt$auto_SO_TIMESTAMPING_NEW(r6, 0x5e, 0x41, &(0x7f0000001380)='/dev/v4l-subdev3\x00', 0x7) read$auto_proc_sys_file_operations_proc_sysctl(r4, &(0x7f00000013c0)=""/68, 0x44) mmap$auto(0x7ff, 0x6, 0xb0, 0x80000011, r4, 0x101) r10 = fcntl$auto_F_GETOWN(r7, 0x9, 0x0) ptrace$auto_ARCH_SHSTK_STATUS(0x2a, r10, 0x6, 0x5005) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001440)={'batadv_slave_1\x00', 0x0}) connect$auto(r6, &(0x7f0000001480)=@can={0x1d, r11}, 0x1) getsockopt$auto_SO_RESERVE_MEM(r2, 0x6, 0x49, &(0x7f00000014c0)='\x00', &(0x7f0000001500)=0x3) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000001540)='/proc/thread-self/pagemap\x00', 0x200, 0x0) fchown$auto(r1, 0x0, 0x0) 3.573176844s ago: executing program 6 (id=1457): mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x8, 0x0, 0x1, [@generic="8592a023"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r2 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x200000000006, 0x8) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) madvise$auto(0x0, 0x2003f0, 0x15) 3.416408426s ago: executing program 0 (id=1458): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x7d1881, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x10005, 0x1, 0x3c, r0, 0x8000) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x808, r1, [0x80000], {0x9, 0x6, 0xf, 0x29f, 0x110, 0x7, 0x101, 0x4000006, 0x1ffc}, {0x401, 0x1, 0x52, 0x5, 0x1, 0x0, 0x9, 0x8, 0x1}}) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pivot_root$auto(0x0, 0x0) open(0x0, 0x103803, 0x92) mmap$auto(0x800000000000006, 0x20009, 0xe0, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xc0401, 0x0) write$auto_proc_timens_offsets_operations_base(r2, &(0x7f0000000300)="38675fd347658c23ffecd0d8bc1d982487a3ad5094ae47160fda3b2630d3370ca8b975057089c083c9bd2814031c19ae951929c98655d8f55cbc42208ee9cb966bf6eb2e555b9301df7e72e7d7f53dbef536f56921ce229e1c5344e237d9b7f62a6b66e774fffd83a8e0711677f72efdaa79cc9854619d920d7454de5411cc09e0af56d8d004f5031b601d8c3159ca47129002f5afde5d3f116c5d58712583b7077b170a11", 0xa5) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/pci/drivers/vmwgfx/new_id\x00', 0xa001, 0x0) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000140), 0x1ca180, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 3.159411213s ago: executing program 7 (id=1459): mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x8, 0x0, 0x1, [@generic="8592a023"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r1 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x4a9c933c, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x200000000006, 0x8) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) madvise$auto(0x0, 0x2003f0, 0x15) 1.945333826s ago: executing program 6 (id=1460): r0 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x256042, 0x0) ioctl$auto_FIOCLEX(r0, 0x5451, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0x3ff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x7f, 0x2, 0x8, 0xc, 0xe3, 0x4000000082, 0x3}, 0x6f4) bpf$auto(0x8000000000000018, 0xfffffffffffffffe, 0x0) r1 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/dormant_links\x00', 0x802, 0x0) read$auto(r1, &(0x7f0000000040)=' ', 0x8) read$auto(r1, 0x0, 0xa8) read$auto_stats_fops_(r0, &(0x7f0000000040)=""/47, 0x2f) 1.943031424s ago: executing program 5 (id=1461): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x4, 0x2, 0x0, 0x1, 0x0) mmap$auto(0x20, 0x6a6, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8004) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x74c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x800df, 0x9b72, 0xfffffffffffffffe, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) socketpair$auto(0x1e, 0x5, 0x3, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x80201, 0x0) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/io\x00', 0x4c400, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f00000001c0)=""/164, 0xa4) socket(0x22, 0x80000, 0x5) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) pidfd_open$auto(0x1, 0x0) 1.734634318s ago: executing program 0 (id=1462): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x66) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff59, &(0x7f0000000340)={0x0}}, 0x801) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) clone$auto(0x4, 0x9, 0x0, &(0x7f0000000100)=0xa00000, 0x4) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) open(&(0x7f0000000180)='./file0\x00', 0x42, 0x147) select$auto(0x109, 0x0, 0x0, &(0x7f00000002c0)={[0x4, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r4, 0x0, 0x24000000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event_pid\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/257, 0x101) mmap$auto(0x0, 0x2020009, 0x400000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x310, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x1000000, 0x9, 0xff6, 0x8000000008013, r3, 0x7fffff0000000000) madvise$auto(0x0, 0x400053, 0x9) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) 1.733473404s ago: executing program 6 (id=1463): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto_tun_fops_tun(0xffffffffffffffff, &(0x7f0000000040)="3cc192647411f92010190da9d2065bd64795b786f646ca9b48b1370d182898475d4a4d4582af776f6e15ed95fed3df2c6e2c9a3f82ed5f80b594", 0x3a) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdb\xfd=x\x13\x01V\xd4\xee\xc2\xdd\xa7\v$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z\b\x00\x00\x00\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\x93\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00', 0x1) listen$auto(0x3, 0x81) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x2, 0x38) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x103b, 0x1, 0x4, 0x8000000000000001, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0x100082) 998.469872ms ago: executing program 6 (id=1464): mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x8, 0x0, 0x1, [@generic="8592a023"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r2 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x4a9c933c, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x200000000006, 0x8) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) madvise$auto(0x0, 0x2003f0, 0x15) 590.829564ms ago: executing program 5 (id=1465): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity_list\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0xf34) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x2, 0x1, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r4) sendmsg$auto_TIPC_NL_NET_SET(r4, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="846c812000"/15, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB="167df8e2fc4ea81d20a6459a7302b7f73404316e7e45c460f9dc25f07cbe4a9bcaa522b2d7e9c8b95706879a38bf39a5ca7c6d03abb8f4cc6c6f354566d7f45a50a5ed0be12b87374a0e3516acca8a0ea4d77b1f4a9513352288a389e7ccb09a9344dcc8b782ffe46a84586801e1e9e393454870e03fd75ada2ce4fb86f10eae4468dc8af7cb5bfef5271ec8ab51f165e64580df73cca12be8b5e5f3f3207f", @ANYBLOB="bc0fc5da0dd4299aaff1f5779c7acf5f48c0bef6dfb7fb95bf018e1621fd4b1fcc163f27fc1a9f75cbe1332ceed6706553549e8bd3e0a647c9300020415a7bb143f158ba21b90b639ed434632d97accf6926c79d9bc6c55c713c361c22827630c08c7e087dc0182a898953baee99d71c94bf969b4c7daae9afae26c6e8518f5875a4dfb143d23dc3ebb064df69a856932945dcd666fe84397df925d10c6779415de8c9e0c4bc359c4b91724d66ffea5b0bb6a2d8d8ee2efabf421d6fcee070d40fcdc8a9f7487308336daf3adc7b45ca9d0b8500e692", @ANYRESHEX=r2], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000001080)=""/244, 0xf4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r7) sendmsg$auto_TASKSTATS_CMD_GET(r7, &(0x7f0000000200)={0x0, 0xf3e0fff77c47799f, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r8, 0xa01, 0x70bd25, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r9 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="010027bd7000f9dbdf250100000006000200000000000500070080000000080009000100000008000a000800000008001700", @ANYRES16=r2], 0x3c}}, 0x4000000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3d55, 0x0) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0x0) mknod$auto(0x0, 0x1001, 0x4) write$auto(0x3, 0x0, 0x7) 486.421145ms ago: executing program 7 (id=1466): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x0, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/18, 0x12) connect$auto(0xffffffffffffffff, 0x0, 0x54) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) r1 = timerfd_create$auto(0x9, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity_list\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0xf34) r2 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/setgroups\x00', 0x183200, 0x0) pread64$auto(r2, &(0x7f0000000400)=']}%\x00', 0x73da, 0x5) write$auto(0x3, 0x0, 0x7) ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f0000000000)={0x78, 0xa454, 0x1, 0x6, 0x0, 0xffffffffffffffff}) prctl$auto(0xfffffffc, 0x7fffffff, r3, 0x5, 0x6) 281.514759ms ago: executing program 5 (id=1467): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) madvise$auto(0x0, 0x240007, 0x19) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) (async) socket(0x25, 0x1, 0x0) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async) bpf$auto(0x2, 0x0, 0x1) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 0s ago: executing program 0 (id=1468): mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x8, 0x0, 0x1, [@generic="8592a023"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r2 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x200000000006, 0x8) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) madvise$auto(0x0, 0x2003f0, 0x15) kernel console output (not intermixed with test programs): 699693][T11135] __futex_wait+0x193/0x2f0 [ 377.699713][T11135] ? __pfx___futex_wait+0x10/0x10 [ 377.699735][T11135] ? __pfx_futex_wake_mark+0x10/0x10 [ 377.699757][T11135] ? find_held_lock+0x2b/0x80 [ 377.699779][T11135] ? futex_private_hash_put+0x160/0x1b0 [ 377.699795][T11135] futex_wait+0xe8/0x380 [ 377.699814][T11135] ? __pfx_futex_wait+0x10/0x10 [ 377.699839][T11135] ? madvise_unlock+0x7c/0x220 [ 377.699865][T11135] do_futex+0x229/0x350 [ 377.699881][T11135] ? __pfx_do_futex+0x10/0x10 [ 377.699902][T11135] __x64_sys_futex+0x1e0/0x4c0 [ 377.699921][T11135] ? __pfx___x64_sys_futex+0x10/0x10 [ 377.699938][T11135] ? xfd_validate_state+0x61/0x180 [ 377.699950][T11135] ? __pfx_ksys_write+0x10/0x10 [ 377.699976][T11135] do_syscall_64+0xcd/0xf80 [ 377.700000][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.700014][T11135] RIP: 0033:0x7fa06178f7c9 [ 377.700026][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.700040][T11135] RSP: 002b:00007fa05f5d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 377.700054][T11135] RAX: ffffffffffffffda RBX: 00007fa0619e6278 RCX: 00007fa06178f7c9 [ 377.700064][T11135] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0619e6278 [ 377.700073][T11135] RBP: 00007fa0619e6270 R08: 0000000000000000 R09: 0000000000000000 [ 377.700081][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.700089][T11135] R13: 00007fa0619e6308 R14: 00007ffc96c14af0 R15: 00007ffc96c14bd8 [ 377.700110][T11135] [ 379.227571][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.240453][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.254331][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.266900][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.303581][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.775701][T11169] chnl_net:caif_netlink_parms(): no params data found [ 380.058474][T11152] FAULT_INJECTION: forcing a failure. [ 380.058474][T11152] name fail_futex, interval 1, probability 0, space 0, times 0 [ 380.062647][T11169] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.107364][T11152] CPU: 0 UID: 0 PID: 11152 Comm: syz.5.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.107390][T11152] Tainted: [L]=SOFTLOCKUP [ 380.107395][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.107404][T11152] Call Trace: [ 380.107409][T11152] [ 380.107415][T11152] dump_stack_lvl+0x16c/0x1f0 [ 380.107441][T11152] should_fail_ex+0x512/0x640 [ 380.107460][T11152] get_futex_key+0x1085/0x15f0 [ 380.107479][T11152] ? __pfx_get_futex_key+0x10/0x10 [ 380.107500][T11152] futex_wake+0xea/0x530 [ 380.107521][T11152] ? __pfx_futex_wake+0x10/0x10 [ 380.107548][T11152] do_futex+0x1e3/0x350 [ 380.107564][T11152] ? __pfx_do_futex+0x10/0x10 [ 380.107579][T11152] ? __might_fault+0xe3/0x190 [ 380.107601][T11152] mm_release+0x24e/0x300 [ 380.107621][T11152] do_exit+0x69e/0x2bd0 [ 380.107639][T11152] ? __pfx_do_exit+0x10/0x10 [ 380.107651][T11152] ? do_raw_spin_lock+0x12c/0x2b0 [ 380.107667][T11152] ? find_held_lock+0x2b/0x80 [ 380.107689][T11152] do_group_exit+0xd3/0x2a0 [ 380.107704][T11152] get_signal+0x2671/0x26d0 [ 380.107731][T11152] ? __pfx_get_signal+0x10/0x10 [ 380.107752][T11152] ? do_futex+0x122/0x350 [ 380.107769][T11152] arch_do_signal_or_restart+0x8f/0x7a0 [ 380.107791][T11152] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 380.107817][T11152] ? __pfx___x64_sys_futex+0x10/0x10 [ 380.107837][T11152] exit_to_user_mode_loop+0x8c/0x540 [ 380.107857][T11152] do_syscall_64+0x4ee/0xf80 [ 380.107881][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.107896][T11152] RIP: 0033:0x7f79c7b8f7c9 [ 380.107909][T11152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.107923][T11152] RSP: 002b:00007f79c5df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 380.107938][T11152] RAX: fffffffffffffe00 RBX: 00007f79c7de6098 RCX: 00007f79c7b8f7c9 [ 380.107947][T11152] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f79c7de6098 [ 380.107956][T11152] RBP: 00007f79c7de6090 R08: 0000000000000000 R09: 0000000000000000 [ 380.107971][T11152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.107979][T11152] R13: 00007f79c7de6128 R14: 00007ffcff8c7840 R15: 00007ffcff8c7928 [ 380.107998][T11152] [ 380.376941][T11169] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.407891][T11169] bridge_slave_0: entered allmulticast mode [ 380.425902][T11169] bridge_slave_0: entered promiscuous mode [ 380.435144][T11169] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.600620][T11169] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.621076][T11169] bridge_slave_1: entered allmulticast mode [ 380.640696][T11169] bridge_slave_1: entered promiscuous mode [ 380.723975][T11169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.791811][T11169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.862648][T11169] team0: Port device team_slave_0 added [ 380.878003][T11169] team0: Port device team_slave_1 added [ 380.928373][T11169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.935360][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.962307][T11169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.977982][T11169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.988724][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.038578][T11169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.123200][T11169] hsr_slave_0: entered promiscuous mode [ 381.136288][T11169] hsr_slave_1: entered promiscuous mode [ 381.147069][T11169] debugfs: 'hsr0' already exists in 'hsr' [ 381.163012][T11169] Cannot create hsr debugfs directory [ 381.395882][ T5834] Bluetooth: hci5: command tx timeout [ 381.460121][T11193] zswap: compressor not available [ 381.638842][T11169] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 381.674955][T11169] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 381.712009][T11169] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 381.786519][T11169] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 382.003336][T11169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.072373][T11169] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.128530][ T9931] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.135635][ T9931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.191655][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.198887][ T9931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.842428][T11169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.391680][T11169] veth0_vlan: entered promiscuous mode [ 383.433591][T11169] veth1_vlan: entered promiscuous mode [ 383.465923][ T5834] Bluetooth: hci5: command tx timeout [ 383.562025][T11169] veth0_macvtap: entered promiscuous mode [ 383.569313][T11222] FAULT_INJECTION: forcing a failure. [ 383.569313][T11222] name fail_futex, interval 1, probability 0, space 0, times 0 [ 383.576512][T11169] veth1_macvtap: entered promiscuous mode [ 383.599057][T11222] CPU: 1 UID: 0 PID: 11222 Comm: syz.5.1144 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.599094][T11222] Tainted: [L]=SOFTLOCKUP [ 383.599102][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.599114][T11222] Call Trace: [ 383.599121][T11222] [ 383.599130][T11222] dump_stack_lvl+0x16c/0x1f0 [ 383.599170][T11222] should_fail_ex+0x512/0x640 [ 383.599201][T11222] get_futex_key+0x1085/0x15f0 [ 383.599229][T11222] ? __pfx_get_futex_key+0x10/0x10 [ 383.599263][T11222] futex_wake+0xea/0x530 [ 383.599301][T11222] ? __pfx_futex_wake+0x10/0x10 [ 383.599343][T11222] do_futex+0x1e3/0x350 [ 383.599366][T11222] ? __pfx_do_futex+0x10/0x10 [ 383.599389][T11222] ? __might_fault+0xe3/0x190 [ 383.599422][T11222] mm_release+0x24e/0x300 [ 383.599452][T11222] do_exit+0x69e/0x2bd0 [ 383.599479][T11222] ? __pfx_do_exit+0x10/0x10 [ 383.599501][T11222] ? do_raw_spin_lock+0x12c/0x2b0 [ 383.599526][T11222] ? find_held_lock+0x2b/0x80 [ 383.599559][T11222] do_group_exit+0xd3/0x2a0 [ 383.599583][T11222] get_signal+0x2671/0x26d0 [ 383.599624][T11222] ? __pfx_get_signal+0x10/0x10 [ 383.599657][T11222] ? do_futex+0x122/0x350 [ 383.599684][T11222] arch_do_signal_or_restart+0x8f/0x7a0 [ 383.599718][T11222] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 383.599767][T11222] ? __pfx___x64_sys_futex+0x10/0x10 [ 383.599801][T11222] exit_to_user_mode_loop+0x8c/0x540 [ 383.599834][T11222] do_syscall_64+0x4ee/0xf80 [ 383.599870][T11222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.599893][T11222] RIP: 0033:0x7f79c7b8f7c9 [ 383.599912][T11222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.599936][T11222] RSP: 002b:00007f79c894c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 383.599958][T11222] RAX: fffffffffffffe00 RBX: 00007f79c7de5fa8 RCX: 00007f79c7b8f7c9 [ 383.599972][T11222] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f79c7de5fa8 [ 383.599986][T11222] RBP: 00007f79c7de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 383.600001][T11222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.600015][T11222] R13: 00007f79c7de6038 R14: 00007ffcff8c7840 R15: 00007ffcff8c7928 [ 383.600046][T11222] [ 383.614459][T11169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.911704][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.914337][T11169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.927496][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.980624][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.093036][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.123591][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.163858][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.169231][T11251] FAULT_INJECTION: forcing a failure. [ 384.169231][T11251] name failslab, interval 1, probability 0, space 0, times 0 [ 384.211085][T11251] CPU: 1 UID: 0 PID: 11251 Comm: syz.4.1150 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.211124][T11251] Tainted: [L]=SOFTLOCKUP [ 384.211130][T11251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.211139][T11251] Call Trace: [ 384.211144][T11251] [ 384.211151][T11251] dump_stack_lvl+0x16c/0x1f0 [ 384.211179][T11251] should_fail_ex+0x512/0x640 [ 384.211197][T11251] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 384.211218][T11251] should_failslab+0xc2/0x120 [ 384.211241][T11251] kmem_cache_alloc_node_noprof+0x86/0x800 [ 384.211259][T11251] ? __alloc_skb+0x156/0x410 [ 384.211279][T11251] ? __alloc_skb+0x156/0x410 [ 384.211293][T11251] __alloc_skb+0x156/0x410 [ 384.211307][T11251] ? __alloc_skb+0x35d/0x410 [ 384.211322][T11251] ? __pfx___alloc_skb+0x10/0x10 [ 384.211337][T11251] ? rcu_is_watching+0x12/0xc0 [ 384.211358][T11251] ? print_track+0x20/0x50 [ 384.211378][T11251] ? kmem_cache_alloc_noprof+0x2af/0x770 [ 384.211396][T11251] ? lockdep_init_map_type+0x5c/0x270 [ 384.211415][T11251] audit_log_start+0x34e/0x950 [ 384.211435][T11251] ? __pfx_audit_log_start+0x10/0x10 [ 384.211458][T11251] ? integrity_audit_msg+0x41/0x60 [ 384.211482][T11251] integrity_audit_message+0x10c/0x580 [ 384.211504][T11251] ? __pfx_integrity_audit_message+0x10/0x10 [ 384.211526][T11251] ? __pfx_ima_add_template_entry+0x10/0x10 [ 384.211551][T11251] integrity_audit_msg+0x41/0x60 [ 384.211574][T11251] ima_add_violation+0x1b4/0x3d0 [ 384.211592][T11251] ? __pfx_ima_add_violation+0x10/0x10 [ 384.211607][T11251] ? ima_d_path+0x12b/0x2a0 [ 384.211620][T11251] ? __pfx___might_resched+0x10/0x10 [ 384.211641][T11251] ? __pfx_ima_d_path+0x10/0x10 [ 384.211659][T11251] ? __pfx_down_write+0x10/0x10 [ 384.211678][T11251] process_measurement+0x16d7/0x22d0 [ 384.211707][T11251] ? __pfx_process_measurement+0x10/0x10 [ 384.211732][T11251] ? trace_contention_end+0xdd/0x110 [ 384.211748][T11251] ? __mutex_lock+0x27b/0x1ca0 [ 384.211770][T11251] ? find_held_lock+0x2b/0x80 [ 384.211790][T11251] ? tracing_check_open_get_tr.part.0+0xdc/0x190 [ 384.211827][T11251] ? tracing_check_open_get_tr.part.0+0xe1/0x190 [ 384.211847][T11251] ? inode_to_bdi+0x9e/0x160 [ 384.211868][T11251] ima_file_check+0xc7/0x110 [ 384.211892][T11251] ? __pfx_ima_file_check+0x10/0x10 [ 384.211919][T11251] security_file_post_open+0x8e/0x210 [ 384.211938][T11251] path_openat+0xe5f/0x3140 [ 384.211966][T11251] ? __pfx_path_openat+0x10/0x10 [ 384.211995][T11251] do_filp_open+0x20b/0x470 [ 384.212026][T11251] ? __pfx_do_filp_open+0x10/0x10 [ 384.212062][T11251] ? alloc_fd+0x471/0x7d0 [ 384.212090][T11251] do_sys_openat2+0x121/0x290 [ 384.212107][T11251] ? __pfx_do_sys_openat2+0x10/0x10 [ 384.212132][T11251] __x64_sys_openat+0x174/0x210 [ 384.212148][T11251] ? __pfx___x64_sys_openat+0x10/0x10 [ 384.212173][T11251] do_syscall_64+0xcd/0xf80 [ 384.212196][T11251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.212212][T11251] RIP: 0033:0x7f6244f8f7c9 [ 384.212225][T11251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.212239][T11251] RSP: 002b:00007f6245da3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 384.212254][T11251] RAX: ffffffffffffffda RBX: 00007f62451e5fa0 RCX: 00007f6244f8f7c9 [ 384.212264][T11251] RDX: 0000000000040000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 384.212273][T11251] RBP: 00007f6245013f91 R08: 0000000000000000 R09: 0000000000000000 [ 384.212283][T11251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.212292][T11251] R13: 00007f62451e6038 R14: 00007f62451e5fa0 R15: 00007fffd86463d8 [ 384.212312][T11251] [ 384.212336][T11251] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 384.596632][T11251] audit: out of memory in audit_log_start [ 384.693787][ T9860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.712004][ T9860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.929619][ T9860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.956392][ T9860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.548107][ T5834] Bluetooth: hci5: command tx timeout [ 386.745116][T11276] FAULT_INJECTION: forcing a failure. [ 386.745116][T11276] name fail_futex, interval 1, probability 0, space 0, times 0 [ 386.784275][T11276] CPU: 0 UID: 0 PID: 11276 Comm: syz.0.1156 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.784300][T11276] Tainted: [L]=SOFTLOCKUP [ 386.784305][T11276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.784314][T11276] Call Trace: [ 386.784319][T11276] [ 386.784325][T11276] dump_stack_lvl+0x16c/0x1f0 [ 386.784351][T11276] should_fail_ex+0x512/0x640 [ 386.784371][T11276] get_futex_key+0x1085/0x15f0 [ 386.784390][T11276] ? __pfx_get_futex_key+0x10/0x10 [ 386.784411][T11276] futex_wake+0xea/0x530 [ 386.784432][T11276] ? __pfx_futex_wake+0x10/0x10 [ 386.784460][T11276] do_futex+0x1e3/0x350 [ 386.784476][T11276] ? __pfx_do_futex+0x10/0x10 [ 386.784496][T11276] ? __might_fault+0xe3/0x190 [ 386.784518][T11276] mm_release+0x24e/0x300 [ 386.784538][T11276] do_exit+0x69e/0x2bd0 [ 386.784555][T11276] ? __pfx_do_exit+0x10/0x10 [ 386.784569][T11276] ? do_raw_spin_lock+0x12c/0x2b0 [ 386.784585][T11276] ? find_held_lock+0x2b/0x80 [ 386.784606][T11276] do_group_exit+0xd3/0x2a0 [ 386.784621][T11276] get_signal+0x2671/0x26d0 [ 386.784648][T11276] ? __pfx_get_signal+0x10/0x10 [ 386.784668][T11276] ? do_futex+0x122/0x350 [ 386.784686][T11276] arch_do_signal_or_restart+0x8f/0x7a0 [ 386.784707][T11276] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 386.784737][T11276] ? __pfx___x64_sys_futex+0x10/0x10 [ 386.784757][T11276] exit_to_user_mode_loop+0x8c/0x540 [ 386.784777][T11276] do_syscall_64+0x4ee/0xf80 [ 386.784801][T11276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.784816][T11276] RIP: 0033:0x7fa06178f7c9 [ 386.784829][T11276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.784842][T11276] RSP: 002b:00007fa0625690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 386.784856][T11276] RAX: fffffffffffffe00 RBX: 00007fa0619e5fa8 RCX: 00007fa06178f7c9 [ 386.784866][T11276] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0619e5fa8 [ 386.784874][T11276] RBP: 00007fa0619e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 386.784883][T11276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.784891][T11276] R13: 00007fa0619e6038 R14: 00007ffc96c14af0 R15: 00007ffc96c14bd8 [ 386.784911][T11276] [ 387.025649][T11262] FAULT_INJECTION: forcing a failure. [ 387.025649][T11262] name fail_futex, interval 1, probability 0, space 0, times 0 [ 387.039429][T11262] CPU: 0 UID: 0 PID: 11262 Comm: syz.6.1136 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.039454][T11262] Tainted: [L]=SOFTLOCKUP [ 387.039459][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.039468][T11262] Call Trace: [ 387.039472][T11262] [ 387.039478][T11262] dump_stack_lvl+0x16c/0x1f0 [ 387.039504][T11262] should_fail_ex+0x512/0x640 [ 387.039523][T11262] get_futex_key+0x1085/0x15f0 [ 387.039550][T11262] ? __pfx_get_futex_key+0x10/0x10 [ 387.039571][T11262] futex_wake+0xea/0x530 [ 387.039593][T11262] ? __pfx_futex_wake+0x10/0x10 [ 387.039620][T11262] do_futex+0x1e3/0x350 [ 387.039636][T11262] ? __pfx_do_futex+0x10/0x10 [ 387.039650][T11262] ? __might_fault+0xe3/0x190 [ 387.039672][T11262] mm_release+0x24e/0x300 [ 387.039692][T11262] do_exit+0x69e/0x2bd0 [ 387.039709][T11262] ? __pfx_do_exit+0x10/0x10 [ 387.039722][T11262] ? do_raw_spin_lock+0x12c/0x2b0 [ 387.039739][T11262] ? find_held_lock+0x2b/0x80 [ 387.039760][T11262] do_group_exit+0xd3/0x2a0 [ 387.039775][T11262] get_signal+0x2671/0x26d0 [ 387.039804][T11262] ? __pfx_get_signal+0x10/0x10 [ 387.039826][T11262] ? do_futex+0x122/0x350 [ 387.039843][T11262] arch_do_signal_or_restart+0x8f/0x7a0 [ 387.039865][T11262] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 387.039891][T11262] ? __pfx___x64_sys_futex+0x10/0x10 [ 387.039911][T11262] exit_to_user_mode_loop+0x8c/0x540 [ 387.039931][T11262] do_syscall_64+0x4ee/0xf80 [ 387.039954][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.039969][T11262] RIP: 0033:0x7f1018f8f7c9 [ 387.039981][T11262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.039995][T11262] RSP: 002b:00007f1019eb00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 387.040010][T11262] RAX: fffffffffffffe00 RBX: 00007f10191e5fa8 RCX: 00007f1018f8f7c9 [ 387.040020][T11262] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10191e5fa8 [ 387.040028][T11262] RBP: 00007f10191e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 387.040037][T11262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.040045][T11262] R13: 00007f10191e6038 R14: 00007ffe23051660 R15: 00007ffe23051748 [ 387.040064][T11262] [ 387.517469][T11294] FAULT_INJECTION: forcing a failure. [ 387.517469][T11294] name failslab, interval 1, probability 0, space 0, times 0 [ 387.530719][T11294] CPU: 1 UID: 7 PID: 11294 Comm: syz.5.1160 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.530761][T11294] Tainted: [L]=SOFTLOCKUP [ 387.530779][T11294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.530795][T11294] Call Trace: [ 387.530803][T11294] [ 387.530813][T11294] dump_stack_lvl+0x16c/0x1f0 [ 387.530857][T11294] should_fail_ex+0x512/0x640 [ 387.530883][T11294] ? __kmalloc_cache_noprof+0x5f/0x800 [ 387.530916][T11294] should_failslab+0xc2/0x120 [ 387.530954][T11294] __kmalloc_cache_noprof+0x80/0x800 [ 387.530982][T11294] ? mqueue_init_fs_context+0x4b/0x680 [ 387.531012][T11294] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 387.531036][T11294] ? mqueue_init_fs_context+0x4b/0x680 [ 387.531060][T11294] mqueue_init_fs_context+0x4b/0x680 [ 387.531084][T11294] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 387.531110][T11294] alloc_fs_context+0x629/0xf50 [ 387.531142][T11294] mq_init_ns+0x16e/0x810 [ 387.531171][T11294] copy_ipcs+0x3db/0x7d0 [ 387.531199][T11294] create_new_namespaces+0x20a/0xab0 [ 387.531233][T11294] ? security_capable+0x7e/0x260 [ 387.531274][T11294] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 387.531311][T11294] ksys_unshare+0x45b/0xa40 [ 387.531347][T11294] ? __pfx_ksys_unshare+0x10/0x10 [ 387.531383][T11294] ? xfd_validate_state+0x61/0x180 [ 387.531416][T11294] __x64_sys_unshare+0x31/0x40 [ 387.531438][T11294] do_syscall_64+0xcd/0xf80 [ 387.531476][T11294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.531501][T11294] RIP: 0033:0x7f79c7b8f7c9 [ 387.531522][T11294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.531547][T11294] RSP: 002b:00007f79c894c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 387.531571][T11294] RAX: ffffffffffffffda RBX: 00007f79c7de5fa0 RCX: 00007f79c7b8f7c9 [ 387.531589][T11294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 387.531605][T11294] RBP: 00007f79c7c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 387.531622][T11294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.531637][T11294] R13: 00007f79c7de6038 R14: 00007f79c7de5fa0 R15: 00007ffcff8c7928 [ 387.531671][T11294] [ 387.647470][ T5834] Bluetooth: hci5: command tx timeout [ 388.397726][T11303] FAULT_INJECTION: forcing a failure. [ 388.397726][T11303] name failslab, interval 1, probability 0, space 0, times 0 [ 388.410553][T11303] CPU: 1 UID: 0 PID: 11303 Comm: syz.5.1161 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.410577][T11303] Tainted: [L]=SOFTLOCKUP [ 388.410582][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.410590][T11303] Call Trace: [ 388.410596][T11303] [ 388.410601][T11303] dump_stack_lvl+0x16c/0x1f0 [ 388.410627][T11303] should_fail_ex+0x512/0x640 [ 388.410644][T11303] ? kmem_cache_alloc_noprof+0x62/0x770 [ 388.410665][T11303] should_failslab+0xc2/0x120 [ 388.410687][T11303] kmem_cache_alloc_noprof+0x83/0x770 [ 388.410704][T11303] ? security_file_alloc+0x34/0x2b0 [ 388.410726][T11303] ? security_file_alloc+0x34/0x2b0 [ 388.410743][T11303] security_file_alloc+0x34/0x2b0 [ 388.410761][T11303] init_file+0x93/0x4c0 [ 388.410776][T11303] alloc_empty_file+0x73/0x1e0 [ 388.410792][T11303] alloc_file_pseudo+0x13a/0x230 [ 388.410808][T11303] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 388.410829][T11303] __shmem_file_setup+0x1a8/0x350 [ 388.410855][T11303] shmem_zero_setup+0x93/0x1b0 [ 388.410874][T11303] __mmap_region+0x2271/0x2a00 [ 388.410892][T11303] ? __lock_acquire+0x436/0x2890 [ 388.410906][T11303] ? __pfx___mmap_region+0x10/0x10 [ 388.410928][T11303] ? lock_acquire+0x179/0x330 [ 388.410948][T11303] ? finish_task_switch.isra.0+0x207/0xbd0 [ 388.411004][T11303] ? rcu_is_watching+0x12/0xc0 [ 388.411029][T11303] mmap_region+0x1ab/0x3f0 [ 388.411046][T11303] ? __get_unmapped_area+0x267/0x3f0 [ 388.411069][T11303] do_mmap+0xa3e/0x1210 [ 388.411093][T11303] ? __pfx_do_mmap+0x10/0x10 [ 388.411114][T11303] ? __pfx_down_write_killable+0x10/0x10 [ 388.411133][T11303] vm_mmap_pgoff+0x29e/0x470 [ 388.411156][T11303] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 388.411181][T11303] ? __x64_sys_futex+0x1e0/0x4c0 [ 388.411197][T11303] ? __x64_sys_futex+0x1e9/0x4c0 [ 388.411215][T11303] ksys_mmap_pgoff+0x7d/0x5c0 [ 388.411235][T11303] ? xfd_validate_state+0x61/0x180 [ 388.411248][T11303] ? __pfx_ksys_read+0x10/0x10 [ 388.411270][T11303] __x64_sys_mmap+0x125/0x190 [ 388.411287][T11303] do_syscall_64+0xcd/0xf80 [ 388.411310][T11303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.411325][T11303] RIP: 0033:0x7f79c7b8f7c9 [ 388.411338][T11303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.411352][T11303] RSP: 002b:00007f79c894c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 388.411366][T11303] RAX: ffffffffffffffda RBX: 00007f79c7de5fa0 RCX: 00007f79c7b8f7c9 [ 388.411375][T11303] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 388.411384][T11303] RBP: 00007f79c7c13f91 R08: 00040000000000a5 R09: 0000000000008000 [ 388.411397][T11303] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 388.411405][T11303] R13: 00007f79c7de6038 R14: 00007f79c7de5fa0 R15: 00007ffcff8c7928 [ 388.411432][T11303] [ 388.962831][T11292] FAULT_INJECTION: forcing a failure. [ 388.962831][T11292] name fail_futex, interval 1, probability 0, space 0, times 0 [ 389.008139][T11292] CPU: 0 UID: 0 PID: 11292 Comm: syz.0.1159 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.008164][T11292] Tainted: [L]=SOFTLOCKUP [ 389.008169][T11292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.008181][T11292] Call Trace: [ 389.008186][T11292] [ 389.008192][T11292] dump_stack_lvl+0x16c/0x1f0 [ 389.008218][T11292] should_fail_ex+0x512/0x640 [ 389.008238][T11292] get_futex_key+0x1085/0x15f0 [ 389.008257][T11292] ? __pfx_get_futex_key+0x10/0x10 [ 389.008278][T11292] futex_wake+0xea/0x530 [ 389.008299][T11292] ? __pfx_futex_wake+0x10/0x10 [ 389.008326][T11292] do_futex+0x1e3/0x350 [ 389.008343][T11292] ? __pfx_do_futex+0x10/0x10 [ 389.008357][T11292] ? __might_fault+0xe3/0x190 [ 389.008379][T11292] mm_release+0x24e/0x300 [ 389.008401][T11292] do_exit+0x69e/0x2bd0 [ 389.008415][T11292] ? __lock_acquire+0x436/0x2890 [ 389.008431][T11292] ? __pfx_do_exit+0x10/0x10 [ 389.008444][T11292] ? do_raw_spin_lock+0x12c/0x2b0 [ 389.008460][T11292] ? find_held_lock+0x2b/0x80 [ 389.008481][T11292] do_group_exit+0xd3/0x2a0 [ 389.008497][T11292] get_signal+0x2671/0x26d0 [ 389.008517][T11292] ? finish_task_switch.isra.0+0x207/0xbd0 [ 389.008537][T11292] ? lockdep_hardirqs_on+0x7c/0x110 [ 389.008561][T11292] ? rcu_is_watching+0x12/0xc0 [ 389.008582][T11292] ? __pfx_get_signal+0x10/0x10 [ 389.008606][T11292] arch_do_signal_or_restart+0x8f/0x7a0 [ 389.008628][T11292] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 389.008666][T11292] exit_to_user_mode_loop+0x8c/0x540 [ 389.008687][T11292] do_syscall_64+0x4ee/0xf80 [ 389.008710][T11292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.008725][T11292] RIP: 0033:0x7fa06178f7c9 [ 389.008738][T11292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.008752][T11292] RSP: 002b:00007fa0625690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 389.008766][T11292] RAX: fffffffffffffe00 RBX: 00007fa0619e5fa8 RCX: 00007fa06178f7c9 [ 389.008776][T11292] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0619e5fa8 [ 389.008785][T11292] RBP: 00007fa0619e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 389.008793][T11292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.008802][T11292] R13: 00007fa0619e6038 R14: 00007ffc96c14af0 R15: 00007ffc96c14bd8 [ 389.008820][T11292] [ 389.579777][T11319] Process accounting paused [ 391.475905][T11337] FAULT_INJECTION: forcing a failure. [ 391.475905][T11337] name fail_futex, interval 1, probability 0, space 0, times 0 [ 391.562662][T11337] CPU: 0 UID: 0 PID: 11337 Comm: syz.0.1168 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.562695][T11337] Tainted: [L]=SOFTLOCKUP [ 391.562700][T11337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.562708][T11337] Call Trace: [ 391.562714][T11337] [ 391.562720][T11337] dump_stack_lvl+0x16c/0x1f0 [ 391.562748][T11337] should_fail_ex+0x512/0x640 [ 391.562767][T11337] get_futex_key+0x293/0x15f0 [ 391.562785][T11337] ? __pfx_get_futex_key+0x10/0x10 [ 391.562807][T11337] futex_wake+0xea/0x530 [ 391.562828][T11337] ? __pfx_futex_wake+0x10/0x10 [ 391.562855][T11337] do_futex+0x1e3/0x350 [ 391.562871][T11337] ? __pfx_do_futex+0x10/0x10 [ 391.562886][T11337] ? __might_fault+0xe3/0x190 [ 391.562908][T11337] mm_release+0x24e/0x300 [ 391.562928][T11337] do_exit+0x69e/0x2bd0 [ 391.562946][T11337] ? __pfx_do_exit+0x10/0x10 [ 391.562959][T11337] ? do_raw_spin_lock+0x12c/0x2b0 [ 391.562975][T11337] ? find_held_lock+0x2b/0x80 [ 391.562997][T11337] do_group_exit+0xd3/0x2a0 [ 391.563012][T11337] get_signal+0x2671/0x26d0 [ 391.563039][T11337] ? __pfx_get_signal+0x10/0x10 [ 391.563060][T11337] ? do_futex+0x122/0x350 [ 391.563077][T11337] arch_do_signal_or_restart+0x8f/0x7a0 [ 391.563100][T11337] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 391.563126][T11337] ? __pfx___x64_sys_futex+0x10/0x10 [ 391.563145][T11337] exit_to_user_mode_loop+0x8c/0x540 [ 391.563166][T11337] do_syscall_64+0x4ee/0xf80 [ 391.563190][T11337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.563205][T11337] RIP: 0033:0x7fa06178f7c9 [ 391.563217][T11337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.563238][T11337] RSP: 002b:00007fa0625690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 391.563252][T11337] RAX: fffffffffffffe00 RBX: 00007fa0619e5fa8 RCX: 00007fa06178f7c9 [ 391.563261][T11337] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0619e5fa8 [ 391.563270][T11337] RBP: 00007fa0619e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 391.563278][T11337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.563287][T11337] R13: 00007fa0619e6038 R14: 00007ffc96c14af0 R15: 00007ffc96c14bd8 [ 391.563306][T11337] [ 392.892952][T11360] FAULT_INJECTION: forcing a failure. [ 392.892952][T11360] name failslab, interval 1, probability 0, space 0, times 0 [ 392.940553][T11360] CPU: 0 UID: 0 PID: 11360 Comm: syz.0.1172 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.940598][T11360] Tainted: [L]=SOFTLOCKUP [ 392.940608][T11360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.940623][T11360] Call Trace: [ 392.940632][T11360] [ 392.940644][T11360] dump_stack_lvl+0x16c/0x1f0 [ 392.940689][T11360] should_fail_ex+0x512/0x640 [ 392.940719][T11360] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 392.940759][T11360] should_failslab+0xc2/0x120 [ 392.940800][T11360] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 392.940832][T11360] ? __d_alloc+0x35/0xa80 [ 392.940862][T11360] ? __d_alloc+0x35/0xa80 [ 392.940883][T11360] __d_alloc+0x35/0xa80 [ 392.940934][T11360] d_alloc_pseudo+0x1c/0xc0 [ 392.940966][T11360] alloc_file_pseudo+0xcf/0x230 [ 392.941002][T11360] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 392.941032][T11360] ? alloc_fd+0x471/0x7d0 [ 392.941077][T11360] sock_alloc_file+0x50/0x210 [ 392.941115][T11360] __sys_socket+0x1c0/0x260 [ 392.941139][T11360] ? __fget_files+0x20e/0x3c0 [ 392.941174][T11360] ? __pfx___sys_socket+0x10/0x10 [ 392.941197][T11360] ? xfd_validate_state+0x61/0x180 [ 392.941232][T11360] __x64_sys_socket+0x72/0xb0 [ 392.941257][T11360] ? lockdep_hardirqs_on+0x7c/0x110 [ 392.941313][T11360] do_syscall_64+0xcd/0xf80 [ 392.941355][T11360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.941391][T11360] RIP: 0033:0x7fa06178f7c9 [ 392.941413][T11360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.941442][T11360] RSP: 002b:00007fa062569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 392.941469][T11360] RAX: ffffffffffffffda RBX: 00007fa0619e5fa0 RCX: 00007fa06178f7c9 [ 392.941488][T11360] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 392.941504][T11360] RBP: 00007fa061813f91 R08: 0000000000000000 R09: 0000000000000000 [ 392.941521][T11360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.941536][T11360] R13: 00007fa0619e6038 R14: 00007fa0619e5fa0 R15: 00007ffc96c14bd8 [ 392.941574][T11360] [ 393.865483][T11376] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 393.999411][T11379] random: crng reseeded on system resumption [ 395.578146][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1179'. [ 395.671489][T11389] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1179'. [ 395.792285][ T5834] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 395.914258][ T5834] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 396.161361][T11416] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1186'. [ 396.249330][T11416] nvme_fabrics: missing parameter 'transport=%s' [ 396.268141][T11416] nvme_fabrics: missing parameter 'nqn=%s' [ 397.939395][ T5834] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 398.050441][T11462] random: crng reseeded on system resumption [ 398.092569][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 398.546139][T11477] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1200'. [ 398.568987][T11474] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1200'. [ 398.661204][T11478] device-mapper: ioctl: device name cannot contain '/' [ 398.973760][T11465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1197'. [ 399.021537][T11465] bond0: (slave bond_slave_1): Releasing backup interface [ 399.394720][ T5834] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 400.406867][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 400.418263][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 400.428646][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 400.442502][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 400.453748][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 400.788501][T11518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1209'. [ 401.084841][ T5834] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 401.178024][T11508] chnl_net:caif_netlink_parms(): no params data found [ 401.281286][T11530] random: crng reseeded on system resumption [ 401.430263][T11508] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.446002][T11508] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.463565][T11508] bridge_slave_0: entered allmulticast mode [ 401.488746][T11508] bridge_slave_0: entered promiscuous mode [ 401.517377][T11540] ubi0: attaching mtd0 [ 401.523275][T11540] ubi0: scanning is finished [ 401.525299][T11508] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.543553][T11508] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.553554][T11508] bridge_slave_1: entered allmulticast mode [ 401.565409][T11508] bridge_slave_1: entered promiscuous mode [ 401.604830][T11540] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 401.640687][T11508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.668301][T11508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.807728][T11508] team0: Port device team_slave_0 added [ 401.848132][T11508] team0: Port device team_slave_1 added [ 401.933043][T11540] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 402.109393][T11508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.175872][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.244314][T11508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.387235][T11508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.436846][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.466132][T11508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.525836][ T5834] Bluetooth: hci6: command tx timeout [ 402.681097][T11508] hsr_slave_0: entered promiscuous mode [ 402.687996][T11508] hsr_slave_1: entered promiscuous mode [ 402.694441][T11508] debugfs: 'hsr0' already exists in 'hsr' [ 402.700943][T11508] Cannot create hsr debugfs directory [ 403.229703][T11571] sctp: [Deprecated]: syz.6.1220 (pid 11571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.229703][T11571] Use struct sctp_sack_info instead [ 403.378660][ T5834] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 403.681373][T11508] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 403.738324][T11508] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 403.800665][T11508] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 403.814748][T11508] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 404.046650][T11508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.087549][T11508] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.131483][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.138690][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.265299][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.272484][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.586142][ T5834] Bluetooth: hci6: command tx timeout [ 404.960925][T11508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.652814][T11508] veth0_vlan: entered promiscuous mode [ 405.703236][T11508] veth1_vlan: entered promiscuous mode [ 405.860481][T11508] veth0_macvtap: entered promiscuous mode [ 405.886069][T11508] veth1_macvtap: entered promiscuous mode [ 405.901208][T11508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.911615][T11508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.040890][ T9929] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.056474][ T9860] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.099649][ T3920] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.324435][ T3920] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.367105][ T7349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.403258][ T7349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.543285][ T7349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.588201][ T7349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.666750][ T5834] Bluetooth: hci6: command tx timeout [ 407.418804][T11658] FAULT_INJECTION: forcing a failure. [ 407.418804][T11658] name failslab, interval 1, probability 0, space 0, times 0 [ 407.431830][T11658] CPU: 1 UID: 0 PID: 11658 Comm: syz.6.1237 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.431874][T11658] Tainted: [L]=SOFTLOCKUP [ 407.431884][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.431899][T11658] Call Trace: [ 407.431909][T11658] [ 407.431919][T11658] dump_stack_lvl+0x16c/0x1f0 [ 407.431964][T11658] should_fail_ex+0x512/0x640 [ 407.431994][T11658] ? lockdep_hardirqs_on+0x7c/0x110 [ 407.432037][T11658] should_failslab+0xc2/0x120 [ 407.432075][T11658] kmem_cache_alloc_noprof+0x83/0x770 [ 407.432116][T11658] ? do_raw_spin_lock+0x12c/0x2b0 [ 407.432147][T11658] ? inet_bind_bucket_create+0x2d/0x280 [ 407.432186][T11658] ? inet_bind_bucket_create+0x2d/0x280 [ 407.432218][T11658] inet_bind_bucket_create+0x2d/0x280 [ 407.432253][T11658] inet_csk_get_port+0x117d/0x2890 [ 407.432320][T11658] ? trace_inet_sock_set_state+0x194/0x1f0 [ 407.432350][T11658] ? __pfx_inet_csk_get_port+0x10/0x10 [ 407.432389][T11658] inet_csk_listen_start+0x158/0x380 [ 407.432430][T11658] __inet_listen_sk+0x20f/0x520 [ 407.432462][T11658] ? __pfx___inet_listen_sk+0x10/0x10 [ 407.432492][T11658] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 407.432530][T11658] ? __local_bh_enable_ip+0xa4/0x120 [ 407.432571][T11658] inet_listen+0x93/0xd0 [ 407.432602][T11658] __sys_listen_socket+0x117/0x160 [ 407.432630][T11658] __sys_listen+0xa7/0x130 [ 407.432658][T11658] __x64_sys_listen+0x53/0x80 [ 407.432684][T11658] do_syscall_64+0xcd/0xf80 [ 407.432724][T11658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.432753][T11658] RIP: 0033:0x7f1018f8f7c9 [ 407.432775][T11658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.432799][T11658] RSP: 002b:00007f1019eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 407.432822][T11658] RAX: ffffffffffffffda RBX: 00007f10191e5fa0 RCX: 00007f1018f8f7c9 [ 407.432838][T11658] RDX: 0000000000000000 RSI: 00000000000000a1 RDI: 0000000000000007 [ 407.432852][T11658] RBP: 00007f1019013f91 R08: 0000000000000000 R09: 0000000000000000 [ 407.432867][T11658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.432881][T11658] R13: 00007f10191e6038 R14: 00007f10191e5fa0 R15: 00007ffe23051748 [ 407.432918][T11658] [ 408.746014][ T5834] Bluetooth: hci6: command tx timeout [ 410.674826][T11695] zswap: compressor not available [ 410.822906][T11700] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1249'. [ 410.984552][T11700] ipvlan1: entered allmulticast mode [ 411.005811][T11700] veth0_vlan: entered allmulticast mode [ 413.466829][T11739] tipc: Withdrawal distribution failure [ 414.149673][T11748] mkiss: ax0: crc mode is auto. [ 414.677723][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1255'. [ 418.405891][T11755] FAULT_INJECTION: forcing a failure. [ 418.405891][T11755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 418.485890][T11755] CPU: 1 UID: 0 PID: 11755 Comm: syz.7.1259 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.485927][T11755] Tainted: [L]=SOFTLOCKUP [ 418.485934][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.485946][T11755] Call Trace: [ 418.485953][T11755] [ 418.485962][T11755] dump_stack_lvl+0x16c/0x1f0 [ 418.486002][T11755] should_fail_ex+0x512/0x640 [ 418.486034][T11755] get_futex_key+0x293/0x15f0 [ 418.486064][T11755] ? __pfx_get_futex_key+0x10/0x10 [ 418.486099][T11755] futex_wake+0xea/0x530 [ 418.486134][T11755] ? __pfx_futex_wake+0x10/0x10 [ 418.486192][T11755] do_futex+0x1e3/0x350 [ 418.486218][T11755] ? __pfx_do_futex+0x10/0x10 [ 418.486240][T11755] ? __might_fault+0xe3/0x190 [ 418.486276][T11755] mm_release+0x24e/0x300 [ 418.486308][T11755] do_exit+0x69e/0x2bd0 [ 418.486339][T11755] ? __pfx_do_exit+0x10/0x10 [ 418.486360][T11755] ? do_raw_spin_lock+0x12c/0x2b0 [ 418.486386][T11755] ? find_held_lock+0x2b/0x80 [ 418.486422][T11755] do_group_exit+0xd3/0x2a0 [ 418.486447][T11755] get_signal+0x2671/0x26d0 [ 418.486491][T11755] ? __pfx_get_signal+0x10/0x10 [ 418.486527][T11755] ? do_futex+0x122/0x350 [ 418.486556][T11755] arch_do_signal_or_restart+0x8f/0x7a0 [ 418.486589][T11755] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 418.486633][T11755] ? __pfx___x64_sys_futex+0x10/0x10 [ 418.486668][T11755] exit_to_user_mode_loop+0x8c/0x540 [ 418.486703][T11755] do_syscall_64+0x4ee/0xf80 [ 418.486740][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.486763][T11755] RIP: 0033:0x7f9a7f58f7c9 [ 418.486782][T11755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.486805][T11755] RSP: 002b:00007f9a8038e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 418.486829][T11755] RAX: fffffffffffffe00 RBX: 00007f9a7f7e5fa8 RCX: 00007f9a7f58f7c9 [ 418.486845][T11755] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9a7f7e5fa8 [ 418.486860][T11755] RBP: 00007f9a7f7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 418.486874][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.486889][T11755] R13: 00007f9a7f7e6038 R14: 00007ffd97167d70 R15: 00007ffd97167e58 [ 418.486925][T11755] [ 421.455334][T11781] Process accounting resumed [ 421.584594][T11793] FAULT_INJECTION: forcing a failure. [ 421.584594][T11793] name failslab, interval 1, probability 0, space 0, times 0 [ 421.597293][T11793] CPU: 0 UID: 0 PID: 11793 Comm: syz.0.1265 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.597327][T11793] Tainted: [L]=SOFTLOCKUP [ 421.597333][T11793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.597342][T11793] Call Trace: [ 421.597350][T11793] [ 421.597357][T11793] dump_stack_lvl+0x16c/0x1f0 [ 421.597385][T11793] should_fail_ex+0x512/0x640 [ 421.597401][T11793] ? lockdep_hardirqs_on+0x7c/0x110 [ 421.597425][T11793] should_failslab+0xc2/0x120 [ 421.597448][T11793] kmem_cache_alloc_noprof+0x83/0x770 [ 421.597466][T11793] ? do_raw_spin_lock+0x12c/0x2b0 [ 421.597482][T11793] ? inet_bind_bucket_create+0x2d/0x280 [ 421.597505][T11793] ? inet_bind_bucket_create+0x2d/0x280 [ 421.597521][T11793] inet_bind_bucket_create+0x2d/0x280 [ 421.597541][T11793] inet_csk_get_port+0x117d/0x2890 [ 421.597572][T11793] ? trace_inet_sock_set_state+0x194/0x1f0 [ 421.597590][T11793] ? __pfx_inet_csk_get_port+0x10/0x10 [ 421.597612][T11793] inet_csk_listen_start+0x158/0x380 [ 421.597641][T11793] __inet_listen_sk+0x20f/0x520 [ 421.597659][T11793] ? __pfx___inet_listen_sk+0x10/0x10 [ 421.597677][T11793] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 421.597699][T11793] ? __local_bh_enable_ip+0xa4/0x120 [ 421.597723][T11793] inet_listen+0x93/0xd0 [ 421.597739][T11793] __sys_listen_socket+0x117/0x160 [ 421.597756][T11793] __sys_listen+0xa7/0x130 [ 421.597771][T11793] __x64_sys_listen+0x53/0x80 [ 421.597785][T11793] do_syscall_64+0xcd/0xf80 [ 421.597808][T11793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.597824][T11793] RIP: 0033:0x7fa06178f7c9 [ 421.597837][T11793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.597851][T11793] RSP: 002b:00007fa062569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 421.597867][T11793] RAX: ffffffffffffffda RBX: 00007fa0619e5fa0 RCX: 00007fa06178f7c9 [ 421.597878][T11793] RDX: 0000000000000000 RSI: 00000000000000a1 RDI: 0000000000000007 [ 421.597887][T11793] RBP: 00007fa061813f91 R08: 0000000000000000 R09: 0000000000000000 [ 421.597896][T11793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.597905][T11793] R13: 00007fa0619e6038 R14: 00007fa0619e5fa0 R15: 00007ffc96c14bd8 [ 421.597926][T11793] [ 421.906265][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 421.967597][T11787] FAULT_INJECTION: forcing a failure. [ 421.967597][T11787] name fail_futex, interval 1, probability 0, space 0, times 0 [ 421.980855][T11787] CPU: 1 UID: 0 PID: 11787 Comm: syz.7.1264 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.980890][T11787] Tainted: [L]=SOFTLOCKUP [ 421.980899][T11787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.980912][T11787] Call Trace: [ 421.980920][T11787] [ 421.980930][T11787] dump_stack_lvl+0x16c/0x1f0 [ 421.981032][T11787] should_fail_ex+0x512/0x640 [ 421.981065][T11787] get_futex_key+0x1085/0x15f0 [ 421.981097][T11787] ? __pfx_get_futex_key+0x10/0x10 [ 421.981136][T11787] futex_wake+0xea/0x530 [ 421.981171][T11787] ? __pfx_futex_wake+0x10/0x10 [ 421.981217][T11787] do_futex+0x1e3/0x350 [ 421.981244][T11787] ? __pfx_do_futex+0x10/0x10 [ 421.981269][T11787] ? __might_fault+0xe3/0x190 [ 421.981306][T11787] mm_release+0x24e/0x300 [ 421.981336][T11787] do_exit+0x69e/0x2bd0 [ 421.981363][T11787] ? __pfx_do_exit+0x10/0x10 [ 421.981385][T11787] ? do_raw_spin_lock+0x12c/0x2b0 [ 421.981410][T11787] ? find_held_lock+0x2b/0x80 [ 421.981446][T11787] do_group_exit+0xd3/0x2a0 [ 421.981472][T11787] get_signal+0x2671/0x26d0 [ 421.981516][T11787] ? __pfx_get_signal+0x10/0x10 [ 421.981557][T11787] ? do_futex+0x122/0x350 [ 421.981586][T11787] arch_do_signal_or_restart+0x8f/0x7a0 [ 421.981619][T11787] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 421.981662][T11787] ? __pfx___x64_sys_futex+0x10/0x10 [ 421.981702][T11787] exit_to_user_mode_loop+0x8c/0x540 [ 421.981734][T11787] do_syscall_64+0x4ee/0xf80 [ 421.981769][T11787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.981794][T11787] RIP: 0033:0x7f9a7f58f7c9 [ 421.981812][T11787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.981833][T11787] RSP: 002b:00007f9a8036d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 421.981855][T11787] RAX: fffffffffffffe00 RBX: 00007f9a7f7e6098 RCX: 00007f9a7f58f7c9 [ 421.981870][T11787] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9a7f7e6098 [ 421.981883][T11787] RBP: 00007f9a7f7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 421.981896][T11787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.981908][T11787] R13: 00007f9a7f7e6128 R14: 00007ffd97167d70 R15: 00007ffd97167e58 [ 421.981941][T11787] [ 422.886203][T11803] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 422.907821][ T30] audit: type=1804 audit(4294985976.655:11): pid=11803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1268" name="/newroot/sys/kernel/debug/tracing/trace_marker_raw" dev="tracefs" ino=1137 res=1 errno=0 [ 424.927001][T11830] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1273'. [ 428.339252][ T30] audit: type=1804 audit(4294985982.085:12): pid=11858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1279" name="/newroot/sys/kernel/debug/tracing/trace_marker_raw" dev="tracefs" ino=1137 res=1 errno=0 [ 428.741963][ T5834] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 433.134558][T11899] FAULT_INJECTION: forcing a failure. [ 433.134558][T11899] name fail_futex, interval 1, probability 0, space 0, times 0 [ 433.184321][T11899] CPU: 0 UID: 0 PID: 11899 Comm: syz.6.1287 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.184362][T11899] Tainted: [L]=SOFTLOCKUP [ 433.184372][T11899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.184386][T11899] Call Trace: [ 433.184394][T11899] [ 433.184404][T11899] dump_stack_lvl+0x16c/0x1f0 [ 433.184451][T11899] should_fail_ex+0x512/0x640 [ 433.184483][T11899] get_futex_key+0x1d0/0x15f0 [ 433.184515][T11899] ? __pfx_get_futex_key+0x10/0x10 [ 433.184551][T11899] futex_wake+0xea/0x530 [ 433.184585][T11899] ? __pfx_futex_wake+0x10/0x10 [ 433.184629][T11899] do_futex+0x1e3/0x350 [ 433.184657][T11899] ? __pfx_do_futex+0x10/0x10 [ 433.184680][T11899] ? __might_fault+0xe3/0x190 [ 433.184714][T11899] mm_release+0x24e/0x300 [ 433.184744][T11899] do_exit+0x69e/0x2bd0 [ 433.184775][T11899] ? __pfx_do_exit+0x10/0x10 [ 433.184799][T11899] ? do_raw_spin_lock+0x12c/0x2b0 [ 433.184826][T11899] ? find_held_lock+0x2b/0x80 [ 433.184863][T11899] do_group_exit+0xd3/0x2a0 [ 433.184889][T11899] get_signal+0x2671/0x26d0 [ 433.184929][T11899] ? __pfx_get_signal+0x10/0x10 [ 433.184956][T11899] ? do_futex+0x122/0x350 [ 433.184977][T11899] arch_do_signal_or_restart+0x8f/0x7a0 [ 433.185004][T11899] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 433.185037][T11899] ? __pfx___x64_sys_futex+0x10/0x10 [ 433.185062][T11899] exit_to_user_mode_loop+0x8c/0x540 [ 433.185087][T11899] do_syscall_64+0x4ee/0xf80 [ 433.185118][T11899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.185137][T11899] RIP: 0033:0x7f1018f8f7c9 [ 433.185154][T11899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.185175][T11899] RSP: 002b:00007f1019e8f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 433.185192][T11899] RAX: fffffffffffffe00 RBX: 00007f10191e6098 RCX: 00007f1018f8f7c9 [ 433.185204][T11899] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10191e6098 [ 433.185214][T11899] RBP: 00007f10191e6090 R08: 0000000000000000 R09: 0000000000000000 [ 433.185225][T11899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.185235][T11899] R13: 00007f10191e6128 R14: 00007ffe23051660 R15: 00007ffe23051748 [ 433.185263][T11899] [ 434.131611][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 436.775806][T11932] FAULT_INJECTION: forcing a failure. [ 436.775806][T11932] name failslab, interval 1, probability 0, space 0, times 0 [ 436.827284][T11932] CPU: 0 UID: 0 PID: 11932 Comm: syz.6.1293 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.827316][T11932] Tainted: [L]=SOFTLOCKUP [ 436.827321][T11932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.827330][T11932] Call Trace: [ 436.827335][T11932] [ 436.827341][T11932] dump_stack_lvl+0x16c/0x1f0 [ 436.827372][T11932] should_fail_ex+0x512/0x640 [ 436.827388][T11932] ? kmem_cache_alloc_noprof+0x62/0x770 [ 436.827408][T11932] should_failslab+0xc2/0x120 [ 436.827430][T11932] kmem_cache_alloc_noprof+0x83/0x770 [ 436.827447][T11932] ? __pfx_acct_collect+0x10/0x10 [ 436.827466][T11932] ? taskstats_exit+0x654/0xbe0 [ 436.827490][T11932] ? taskstats_exit+0x654/0xbe0 [ 436.827508][T11932] taskstats_exit+0x654/0xbe0 [ 436.827530][T11932] ? __pfx_taskstats_exit+0x10/0x10 [ 436.827552][T11932] ? exit_signals+0x388/0xb00 [ 436.827574][T11932] do_exit+0x5e4/0x2bd0 [ 436.827592][T11932] ? __pfx_do_exit+0x10/0x10 [ 436.827605][T11932] ? do_raw_spin_lock+0x12c/0x2b0 [ 436.827621][T11932] ? find_held_lock+0x2b/0x80 [ 436.827643][T11932] do_group_exit+0xd3/0x2a0 [ 436.827657][T11932] get_signal+0x2671/0x26d0 [ 436.827683][T11932] ? __pfx_get_signal+0x10/0x10 [ 436.827704][T11932] ? do_futex+0x122/0x350 [ 436.827721][T11932] arch_do_signal_or_restart+0x8f/0x7a0 [ 436.827744][T11932] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 436.827770][T11932] ? __pfx___x64_sys_futex+0x10/0x10 [ 436.827789][T11932] exit_to_user_mode_loop+0x8c/0x540 [ 436.827810][T11932] do_syscall_64+0x4ee/0xf80 [ 436.827833][T11932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.827848][T11932] RIP: 0033:0x7f1018f8f7c9 [ 436.827860][T11932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.827879][T11932] RSP: 002b:00007f1019eb00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 436.827894][T11932] RAX: fffffffffffffe00 RBX: 00007f10191e5fa8 RCX: 00007f1018f8f7c9 [ 436.827904][T11932] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10191e5fa8 [ 436.827912][T11932] RBP: 00007f10191e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 436.827921][T11932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.827929][T11932] R13: 00007f10191e6038 R14: 00007ffe23051660 R15: 00007ffe23051748 [ 436.827948][T11932] [ 438.179778][T11962] FAULT_INJECTION: forcing a failure. [ 438.179778][T11962] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.233846][T11962] CPU: 0 UID: 0 PID: 11962 Comm: syz.7.1300 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.233873][T11962] Tainted: [L]=SOFTLOCKUP [ 438.233878][T11962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 438.233887][T11962] Call Trace: [ 438.233892][T11962] [ 438.233899][T11962] dump_stack_lvl+0x16c/0x1f0 [ 438.233926][T11962] should_fail_ex+0x512/0x640 [ 438.233946][T11962] should_fail_alloc_page+0xe7/0x130 [ 438.233972][T11962] prepare_alloc_pages+0x401/0x670 [ 438.233994][T11962] ? rcu_is_watching+0x12/0xc0 [ 438.234017][T11962] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 438.234044][T11962] ? __lock_acquire+0x436/0x2890 [ 438.234065][T11962] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 438.234085][T11962] ? __mod_zone_page_state+0xcc/0x1a0 [ 438.234102][T11962] ? lru_gen_add_folio+0x1a4/0xef0 [ 438.234122][T11962] ? __lock_acquire+0x436/0x2890 [ 438.234137][T11962] ? __lock_acquire+0x436/0x2890 [ 438.234151][T11962] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 438.234174][T11962] ? policy_nodemask+0xea/0x4e0 [ 438.234198][T11962] alloc_pages_mpol+0x1fb/0x550 [ 438.234220][T11962] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 438.234248][T11962] folio_alloc_mpol_noprof+0x36/0x2f0 [ 438.234264][T11962] vma_alloc_folio_noprof+0xed/0x1e0 [ 438.234278][T11962] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 438.234299][T11962] do_anonymous_page+0xc81/0x2190 [ 438.234321][T11962] __handle_mm_fault+0x1ecf/0x2bb0 [ 438.234342][T11962] ? __pfx___handle_mm_fault+0x10/0x10 [ 438.234358][T11962] ? __pte_offset_map_lock+0x174/0x310 [ 438.234379][T11962] ? find_held_lock+0x2b/0x80 [ 438.234404][T11962] ? follow_page_pte+0x5cf/0x1390 [ 438.234429][T11962] handle_mm_fault+0x3fe/0xad0 [ 438.234448][T11962] __get_user_pages+0x54e/0x3590 [ 438.234477][T11962] ? __pfx___get_user_pages+0x10/0x10 [ 438.234504][T11962] populate_vma_page_range+0x267/0x3f0 [ 438.234529][T11962] ? __pfx_populate_vma_page_range+0x10/0x10 [ 438.234551][T11962] ? __pfx_find_vma_intersection+0x10/0x10 [ 438.234573][T11962] ? do_mmap+0x69c/0x1210 [ 438.234596][T11962] __mm_populate+0x1d8/0x380 [ 438.234626][T11962] ? __pfx___mm_populate+0x10/0x10 [ 438.234651][T11962] ? up_write+0x282/0x4e0 [ 438.234669][T11962] vm_mmap_pgoff+0x37f/0x470 [ 438.234693][T11962] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 438.234719][T11962] ? __x64_sys_futex+0x1e0/0x4c0 [ 438.234735][T11962] ? __x64_sys_futex+0x1e9/0x4c0 [ 438.234754][T11962] ksys_mmap_pgoff+0x7d/0x5c0 [ 438.234781][T11962] ? xfd_validate_state+0x61/0x180 [ 438.234798][T11962] __x64_sys_mmap+0x125/0x190 [ 438.234815][T11962] do_syscall_64+0xcd/0xf80 [ 438.234841][T11962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.234856][T11962] RIP: 0033:0x7f9a7f58f7c9 [ 438.234870][T11962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.234884][T11962] RSP: 002b:00007f9a8038e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 438.234899][T11962] RAX: ffffffffffffffda RBX: 00007f9a7f7e5fa0 RCX: 00007f9a7f58f7c9 [ 438.234909][T11962] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 438.234918][T11962] RBP: 00007f9a7f613f91 R08: 0000000000000002 R09: 0000000000008000 [ 438.234927][T11962] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 438.234936][T11962] R13: 00007f9a7f7e6038 R14: 00007f9a7f7e5fa0 R15: 00007ffd97167e58 [ 438.234961][T11962] [ 439.238118][T11964] FAULT_INJECTION: forcing a failure. [ 439.238118][T11964] name fail_futex, interval 1, probability 0, space 0, times 0 [ 439.328703][T11964] CPU: 0 UID: 0 PID: 11964 Comm: syz.5.1299 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.328749][T11964] Tainted: [L]=SOFTLOCKUP [ 439.328760][T11964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 439.328776][T11964] Call Trace: [ 439.328785][T11964] [ 439.328796][T11964] dump_stack_lvl+0x16c/0x1f0 [ 439.328841][T11964] should_fail_ex+0x512/0x640 [ 439.328880][T11964] get_futex_key+0x1d0/0x15f0 [ 439.328912][T11964] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 439.328941][T11964] ? __pfx_get_futex_key+0x10/0x10 [ 439.328974][T11964] ? blk_finish_plug+0x53/0xa0 [ 439.329004][T11964] ? madvise_do_behavior+0x1f4/0x530 [ 439.329041][T11964] futex_wake+0xea/0x530 [ 439.329079][T11964] ? __pfx___up_read+0x10/0x10 [ 439.329109][T11964] ? __pfx_futex_wake+0x10/0x10 [ 439.329142][T11964] ? madvise_unlock+0x16d/0x220 [ 439.329189][T11964] ? madvise_unlock+0x7c/0x220 [ 439.329233][T11964] do_futex+0x1e3/0x350 [ 439.329264][T11964] ? __pfx_do_futex+0x10/0x10 [ 439.329301][T11964] __x64_sys_futex+0x1e0/0x4c0 [ 439.329337][T11964] ? __pfx___x64_sys_futex+0x10/0x10 [ 439.329367][T11964] ? xfd_validate_state+0x61/0x180 [ 439.329391][T11964] ? __pfx_ksys_write+0x10/0x10 [ 439.329437][T11964] do_syscall_64+0xcd/0xf80 [ 439.329478][T11964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.329506][T11964] RIP: 0033:0x7f79c7b8f7c9 [ 439.329528][T11964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.329554][T11964] RSP: 002b:00007f79c5df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 439.329580][T11964] RAX: ffffffffffffffda RBX: 00007f79c7de6098 RCX: 00007f79c7b8f7c9 [ 439.329599][T11964] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f79c7de609c [ 439.329617][T11964] RBP: 00007f79c7de6090 R08: 00007f79c894d000 R09: 0000000000000000 [ 439.329634][T11964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.329650][T11964] R13: 00007f79c7de6128 R14: 00007ffcff8c7840 R15: 00007ffcff8c7928 [ 439.329687][T11964] [ 442.134251][T11999] FAULT_INJECTION: forcing a failure. [ 442.134251][T11999] name fail_futex, interval 1, probability 0, space 0, times 0 [ 442.186334][T11999] CPU: 1 UID: 0 PID: 11999 Comm: syz.7.1307 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.186366][T11999] Tainted: [L]=SOFTLOCKUP [ 442.186371][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.186379][T11999] Call Trace: [ 442.186384][T11999] [ 442.186390][T11999] dump_stack_lvl+0x16c/0x1f0 [ 442.186418][T11999] should_fail_ex+0x512/0x640 [ 442.186437][T11999] get_futex_key+0x1085/0x15f0 [ 442.186456][T11999] ? __pfx_get_futex_key+0x10/0x10 [ 442.186477][T11999] futex_wake+0xea/0x530 [ 442.186498][T11999] ? __pfx_futex_wake+0x10/0x10 [ 442.186534][T11999] do_futex+0x1e3/0x350 [ 442.186551][T11999] ? __pfx_do_futex+0x10/0x10 [ 442.186566][T11999] ? __might_fault+0xe3/0x190 [ 442.186588][T11999] mm_release+0x24e/0x300 [ 442.186608][T11999] do_exit+0x69e/0x2bd0 [ 442.186626][T11999] ? __pfx_do_exit+0x10/0x10 [ 442.186639][T11999] ? do_raw_spin_lock+0x12c/0x2b0 [ 442.186655][T11999] ? find_held_lock+0x2b/0x80 [ 442.186677][T11999] do_group_exit+0xd3/0x2a0 [ 442.186692][T11999] get_signal+0x2671/0x26d0 [ 442.186718][T11999] ? __pfx_get_signal+0x10/0x10 [ 442.186739][T11999] ? do_futex+0x122/0x350 [ 442.186755][T11999] arch_do_signal_or_restart+0x8f/0x7a0 [ 442.186778][T11999] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 442.186805][T11999] ? __pfx___x64_sys_futex+0x10/0x10 [ 442.186825][T11999] exit_to_user_mode_loop+0x8c/0x540 [ 442.186845][T11999] do_syscall_64+0x4ee/0xf80 [ 442.186868][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.186883][T11999] RIP: 0033:0x7f9a7f58f7c9 [ 442.186895][T11999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.186909][T11999] RSP: 002b:00007f9a8038e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 442.186923][T11999] RAX: fffffffffffffe00 RBX: 00007f9a7f7e5fa8 RCX: 00007f9a7f58f7c9 [ 442.186933][T11999] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9a7f7e5fa8 [ 442.186941][T11999] RBP: 00007f9a7f7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 442.186950][T11999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.186958][T11999] R13: 00007f9a7f7e6038 R14: 00007ffd97167d70 R15: 00007ffd97167e58 [ 442.186977][T11999] [ 445.313111][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.319603][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.657478][T12042] FAULT_INJECTION: forcing a failure. [ 446.657478][T12042] name fail_futex, interval 1, probability 0, space 0, times 0 [ 446.674963][T12042] CPU: 1 UID: 0 PID: 12042 Comm: syz.0.1322 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.675000][T12042] Tainted: [L]=SOFTLOCKUP [ 446.675005][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 446.675014][T12042] Call Trace: [ 446.675019][T12042] [ 446.675025][T12042] dump_stack_lvl+0x16c/0x1f0 [ 446.675052][T12042] should_fail_ex+0x512/0x640 [ 446.675072][T12042] get_futex_key+0x1085/0x15f0 [ 446.675090][T12042] ? __pfx_get_futex_key+0x10/0x10 [ 446.675112][T12042] futex_wake+0xea/0x530 [ 446.675133][T12042] ? __pfx_futex_wake+0x10/0x10 [ 446.675160][T12042] do_futex+0x1e3/0x350 [ 446.675183][T12042] ? __pfx_do_futex+0x10/0x10 [ 446.675197][T12042] ? __might_fault+0xe3/0x190 [ 446.675219][T12042] mm_release+0x24e/0x300 [ 446.675240][T12042] do_exit+0x69e/0x2bd0 [ 446.675257][T12042] ? __pfx_do_exit+0x10/0x10 [ 446.675271][T12042] ? do_raw_spin_lock+0x12c/0x2b0 [ 446.675287][T12042] ? find_held_lock+0x2b/0x80 [ 446.675308][T12042] do_group_exit+0xd3/0x2a0 [ 446.675323][T12042] get_signal+0x2671/0x26d0 [ 446.675350][T12042] ? __pfx_get_signal+0x10/0x10 [ 446.675371][T12042] ? do_futex+0x122/0x350 [ 446.675388][T12042] arch_do_signal_or_restart+0x8f/0x7a0 [ 446.675410][T12042] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 446.675439][T12042] ? __pfx___x64_sys_futex+0x10/0x10 [ 446.675458][T12042] exit_to_user_mode_loop+0x8c/0x540 [ 446.675479][T12042] do_syscall_64+0x4ee/0xf80 [ 446.675503][T12042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.675518][T12042] RIP: 0033:0x7fa06178f7c9 [ 446.675531][T12042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.675545][T12042] RSP: 002b:00007fa0625690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 446.675559][T12042] RAX: fffffffffffffe00 RBX: 00007fa0619e5fa8 RCX: 00007fa06178f7c9 [ 446.675568][T12042] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0619e5fa8 [ 446.675577][T12042] RBP: 00007fa0619e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 446.675586][T12042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.675594][T12042] R13: 00007fa0619e6038 R14: 00007ffc96c14af0 R15: 00007ffc96c14bd8 [ 446.675613][T12042] [ 447.639461][T12065] FAULT_INJECTION: forcing a failure. [ 447.639461][T12065] name failslab, interval 1, probability 0, space 0, times 0 [ 447.684856][T12065] CPU: 1 UID: 0 PID: 12065 Comm: syz.0.1318 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.684900][T12065] Tainted: [L]=SOFTLOCKUP [ 447.684910][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.684926][T12065] Call Trace: [ 447.684935][T12065] [ 447.684946][T12065] dump_stack_lvl+0x16c/0x1f0 [ 447.684990][T12065] should_fail_ex+0x512/0x640 [ 447.685020][T12065] ? __kmalloc_node_noprof+0xcd/0x930 [ 447.685062][T12065] should_failslab+0xc2/0x120 [ 447.685100][T12065] __kmalloc_node_noprof+0xee/0x930 [ 447.685137][T12065] ? __get_vm_area_node+0x208/0x330 [ 447.685186][T12065] ? __vmalloc_node_range_noprof+0x405/0x16b0 [ 447.685221][T12065] ? __vmalloc_node_range_noprof+0x405/0x16b0 [ 447.685247][T12065] __vmalloc_node_range_noprof+0x405/0x16b0 [ 447.685286][T12065] ? vb2_vmalloc_alloc+0x135/0x410 [ 447.685328][T12065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.685371][T12065] ? vb2_vmalloc_alloc+0x135/0x410 [ 447.685402][T12065] vmalloc_user_noprof+0x9e/0xe0 [ 447.685426][T12065] ? vb2_vmalloc_alloc+0x135/0x410 [ 447.685458][T12065] vb2_vmalloc_alloc+0x135/0x410 [ 447.685490][T12065] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 447.685520][T12065] __vb2_queue_alloc+0x8c9/0x1280 [ 447.685567][T12065] vb2_core_reqbufs+0xa90/0xfe0 [ 447.685604][T12065] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 447.685655][T12065] __vb2_init_fileio+0x3f1/0x1100 [ 447.685679][T12065] ? lockdep_hardirqs_on+0x7c/0x110 [ 447.685719][T12065] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 447.685752][T12065] ? __pollwait+0x271/0x460 [ 447.685785][T12065] vb2_core_poll+0x5ec/0x700 [ 447.685814][T12065] vb2_poll+0x4b/0xe0 [ 447.685830][T12065] vb2_fop_poll+0x10f/0x2c0 [ 447.685845][T12065] ? __pfx_vb2_fop_poll+0x10/0x10 [ 447.685859][T12065] v4l2_poll+0x163/0x320 [ 447.685879][T12065] ? __pfx_v4l2_poll+0x10/0x10 [ 447.685897][T12065] do_sys_poll+0x55c/0xdf0 [ 447.685923][T12065] ? __pfx_do_sys_poll+0x10/0x10 [ 447.685960][T12065] ? __futex_wait+0x24b/0x2f0 [ 447.685980][T12065] ? __pfx___pollwait+0x10/0x10 [ 447.686001][T12065] ? __pfx_pollwake+0x10/0x10 [ 447.686048][T12065] ? __pfx_timespec64_add_safe+0x10/0x10 [ 447.686065][T12065] ? ktime_get_ts64+0x2d2/0x400 [ 447.686080][T12065] ? read_tsc+0x9/0x20 [ 447.686099][T12065] ? ktime_get_ts64+0x256/0x400 [ 447.686118][T12065] __x64_sys_poll+0x1a6/0x450 [ 447.686138][T12065] ? __pfx___x64_sys_poll+0x10/0x10 [ 447.686172][T12065] do_syscall_64+0xcd/0xf80 [ 447.686197][T12065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.686212][T12065] RIP: 0033:0x7fa06178f7c9 [ 447.686227][T12065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.686241][T12065] RSP: 002b:00007fa062569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 447.686255][T12065] RAX: ffffffffffffffda RBX: 00007fa0619e5fa0 RCX: 00007fa06178f7c9 [ 447.686265][T12065] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 447.686274][T12065] RBP: 00007fa061813f91 R08: 0000000000000000 R09: 0000000000000000 [ 447.686284][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.686293][T12065] R13: 00007fa0619e6038 R14: 00007fa0619e5fa0 R15: 00007ffc96c14bd8 [ 447.686313][T12065] [ 448.047067][T12065] syz.0.1318: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 448.382947][T12065] CPU: 1 UID: 0 PID: 12065 Comm: syz.0.1318 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.382991][T12065] Tainted: [L]=SOFTLOCKUP [ 448.383000][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 448.383016][T12065] Call Trace: [ 448.383025][T12065] [ 448.383034][T12065] dump_stack_lvl+0x16c/0x1f0 [ 448.383065][T12065] warn_alloc+0x248/0x3a0 [ 448.383085][T12065] ? __pfx_warn_alloc+0x10/0x10 [ 448.383101][T12065] ? dump_stack_lvl+0x1a3/0x1f0 [ 448.383127][T12065] ? should_fail_ex+0x354/0x640 [ 448.383146][T12065] ? rcu_is_watching+0x12/0xc0 [ 448.383168][T12065] ? trace_kmalloc+0x2b/0xb0 [ 448.383188][T12065] ? __kmalloc_node_noprof+0x372/0x930 [ 448.383208][T12065] ? __get_vm_area_node+0x208/0x330 [ 448.383229][T12065] ? __vmalloc_node_range_noprof+0x405/0x16b0 [ 448.383248][T12065] __vmalloc_node_range_noprof+0x1309/0x16b0 [ 448.383268][T12065] ? vb2_vmalloc_alloc+0x135/0x410 [ 448.383291][T12065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 448.383313][T12065] ? vb2_vmalloc_alloc+0x135/0x410 [ 448.383330][T12065] vmalloc_user_noprof+0x9e/0xe0 [ 448.383344][T12065] ? vb2_vmalloc_alloc+0x135/0x410 [ 448.383361][T12065] vb2_vmalloc_alloc+0x135/0x410 [ 448.383387][T12065] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 448.383405][T12065] __vb2_queue_alloc+0x8c9/0x1280 [ 448.383431][T12065] vb2_core_reqbufs+0xa90/0xfe0 [ 448.383451][T12065] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 448.383479][T12065] __vb2_init_fileio+0x3f1/0x1100 [ 448.383495][T12065] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.383518][T12065] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 448.383539][T12065] ? __pollwait+0x271/0x460 [ 448.383561][T12065] vb2_core_poll+0x5ec/0x700 [ 448.383578][T12065] vb2_poll+0x4b/0xe0 [ 448.383592][T12065] vb2_fop_poll+0x10f/0x2c0 [ 448.383607][T12065] ? __pfx_vb2_fop_poll+0x10/0x10 [ 448.383621][T12065] v4l2_poll+0x163/0x320 [ 448.383641][T12065] ? __pfx_v4l2_poll+0x10/0x10 [ 448.383659][T12065] do_sys_poll+0x55c/0xdf0 [ 448.383685][T12065] ? __pfx_do_sys_poll+0x10/0x10 [ 448.383723][T12065] ? __futex_wait+0x24b/0x2f0 [ 448.383742][T12065] ? __pfx___pollwait+0x10/0x10 [ 448.383764][T12065] ? __pfx_pollwake+0x10/0x10 [ 448.383811][T12065] ? __pfx_timespec64_add_safe+0x10/0x10 [ 448.383827][T12065] ? ktime_get_ts64+0x2d2/0x400 [ 448.383842][T12065] ? read_tsc+0x9/0x20 [ 448.383861][T12065] ? ktime_get_ts64+0x256/0x400 [ 448.383879][T12065] __x64_sys_poll+0x1a6/0x450 [ 448.383900][T12065] ? __pfx___x64_sys_poll+0x10/0x10 [ 448.383925][T12065] do_syscall_64+0xcd/0xf80 [ 448.383949][T12065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.383964][T12065] RIP: 0033:0x7fa06178f7c9 [ 448.383978][T12065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.383993][T12065] RSP: 002b:00007fa062569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 448.384007][T12065] RAX: ffffffffffffffda RBX: 00007fa0619e5fa0 RCX: 00007fa06178f7c9 [ 448.384018][T12065] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 448.384027][T12065] RBP: 00007fa061813f91 R08: 0000000000000000 R09: 0000000000000000 [ 448.384036][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.384046][T12065] R13: 00007fa0619e6038 R14: 00007fa0619e5fa0 R15: 00007ffc96c14bd8 [ 448.384066][T12065] [ 448.384072][T12065] Mem-Info: [ 448.747159][T12065] active_anon:98178 inactive_anon:22 isolated_anon:0 [ 448.747159][T12065] active_file:19818 inactive_file:40402 isolated_file:0 [ 448.747159][T12065] unevictable:768 dirty:861 writeback:0 [ 448.747159][T12065] slab_reclaimable:12112 slab_unreclaimable:104732 [ 448.747159][T12065] mapped:76911 shmem:82706 pagetables:1665 [ 448.747159][T12065] sec_pagetables:0 bounce:0 [ 448.747159][T12065] kernel_misc_reclaimable:0 [ 448.747159][T12065] free:1179496 free_pcp:8386 free_cma:0 [ 448.906077][T12065] Node 0 active_anon:397112kB inactive_anon:88kB active_file:79272kB inactive_file:161452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:296224kB dirty:3444kB writeback:0kB shmem:333548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13720kB pagetables:6432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 449.070451][T12065] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 449.365836][T12065] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 449.455945][T12065] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 449.461786][T12065] Node 0 DMA32 free:800304kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:396128kB inactive_anon:88kB active_file:79272kB inactive_file:161456kB unevictable:1536kB writepending:3448kB zspages:352kB present:3129332kB managed:2541028kB mlocked:0kB bounce:0kB free_pcp:37744kB local_pcp:20096kB free_cma:0kB [ 449.498378][T12065] lowmem_reserve[]: 0 0 1 1 1 [ 449.503149][T12065] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 449.533585][T12065] lowmem_reserve[]: 0 0 0 0 0 [ 449.538500][T12065] Node 1 Normal free:3894404kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:156kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3788kB local_pcp:2048kB free_cma:0kB [ 449.655955][T12065] lowmem_reserve[]: 0 0 0 0 0 [ 449.660744][T12065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 449.673882][T12065] Node 0 DMA32: 706*4kB (U) 2684*8kB (UM) 992*16kB (UME) 112*32kB (UE) 23*64kB (U) 120*128kB (UME) 169*256kB (U) 78*512kB (UM) 60*1024kB (UM) 2*2048kB (ME) 144*4096kB (UM) = 799144kB [ 449.692560][T12065] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 449.705995][T12065] Node 1 Normal: 161*4kB (UM) 62*8kB (UME) 43*16kB (UME) 255*32kB (UME) 86*64kB (UME) 36*128kB (UME) 22*256kB (UME) 12*512kB (UME) 0*1024kB 4*2048kB (UME) 941*4096kB (M) = 3894404kB [ 449.724447][T12065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 449.734110][T12065] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 449.743516][T12065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 449.753185][T12065] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 449.762570][T12065] 144404 total pagecache pages [ 449.767421][T12065] 44 pages in swap cache [ 449.771671][T12065] Free swap = 124648kB [ 449.776038][T12065] Total swap = 124996kB [ 449.780203][T12065] 2097051 pages RAM [ 449.784008][T12065] 0 pages HighMem/MovableOnly [ 449.874418][T12065] 429768 pages reserved [ 449.908431][T12065] 0 pages cma reserved [ 450.006350][ T5834] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 450.017637][T12079] FAULT_INJECTION: forcing a failure. [ 450.017637][T12079] name failslab, interval 1, probability 0, space 0, times 0 [ 450.031783][T12079] CPU: 1 UID: 0 PID: 12079 Comm: syz.5.1321 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.031821][T12079] Tainted: [L]=SOFTLOCKUP [ 450.031830][T12079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 450.031844][T12079] Call Trace: [ 450.031852][T12079] [ 450.031862][T12079] dump_stack_lvl+0x16c/0x1f0 [ 450.031902][T12079] should_fail_ex+0x512/0x640 [ 450.031927][T12079] ? fs_reclaim_acquire+0xae/0x150 [ 450.031966][T12079] should_failslab+0xc2/0x120 [ 450.031997][T12079] __kmalloc_noprof+0xeb/0x910 [ 450.032019][T12079] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 450.032052][T12079] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 450.032077][T12079] tomoyo_realpath_from_path+0xc2/0x6e0 [ 450.032106][T12079] ? tomoyo_profile+0x47/0x60 [ 450.032138][T12079] tomoyo_path_number_perm+0x245/0x580 [ 450.032159][T12079] ? tomoyo_path_number_perm+0x237/0x580 [ 450.032191][T12079] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 450.032215][T12079] ? find_held_lock+0x2b/0x80 [ 450.032263][T12079] ? find_held_lock+0x2b/0x80 [ 450.032287][T12079] ? hook_file_ioctl_common+0x144/0x410 [ 450.032316][T12079] ? __fget_files+0x20e/0x3c0 [ 450.032348][T12079] security_file_ioctl+0x9b/0x240 [ 450.032372][T12079] __x64_sys_ioctl+0xb7/0x210 [ 450.032398][T12079] do_syscall_64+0xcd/0xf80 [ 450.032430][T12079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.032450][T12079] RIP: 0033:0x7f79c7b8f7c9 [ 450.032466][T12079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.032485][T12079] RSP: 002b:00007f79c894c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.032503][T12079] RAX: ffffffffffffffda RBX: 00007f79c7de5fa0 RCX: 00007f79c7b8f7c9 [ 450.032517][T12079] RDX: 0000000000000000 RSI: 0000000000004610 RDI: 0000000000000008 [ 450.032529][T12079] RBP: 00007f79c894c090 R08: 0000000000000000 R09: 0000000000000000 [ 450.032541][T12079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.032553][T12079] R13: 00007f79c7de6038 R14: 00007f79c7de5fa0 R15: 00007ffcff8c7928 [ 450.032580][T12079] [ 450.032592][T12079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 450.798358][T12097] netlink: 'syz.0.1326': attribute type 4 has an invalid length. [ 452.557536][T12108] Process accounting paused [ 453.250861][T12126] FAULT_INJECTION: forcing a failure. [ 453.250861][T12126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.374394][T12126] CPU: 0 UID: 0 PID: 12126 Comm: syz.5.1329 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.374433][T12126] Tainted: [L]=SOFTLOCKUP [ 453.374441][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 453.374456][T12126] Call Trace: [ 453.374464][T12126] [ 453.374474][T12126] dump_stack_lvl+0x16c/0x1f0 [ 453.374514][T12126] should_fail_ex+0x512/0x640 [ 453.374547][T12126] _copy_from_user+0x2e/0xd0 [ 453.374574][T12126] memdup_user_nul+0x6c/0x120 [ 453.374607][T12126] bitmap_parselist_user+0x24/0x90 [ 453.374637][T12126] irq_affinity_list_proc_write+0x147/0x260 [ 453.374666][T12126] ? __pfx_irq_affinity_list_proc_write+0x10/0x10 [ 453.374712][T12126] ? __pfx_irq_affinity_list_proc_write+0x10/0x10 [ 453.374735][T12126] proc_reg_write+0x240/0x330 [ 453.374755][T12126] ? __pfx_proc_reg_write+0x10/0x10 [ 453.374772][T12126] vfs_write+0x2a0/0x11d0 [ 453.374794][T12126] ? __pfx___mutex_lock+0x10/0x10 [ 453.374818][T12126] ? __pfx_vfs_write+0x10/0x10 [ 453.374844][T12126] ? __fget_files+0x20e/0x3c0 [ 453.374870][T12126] ksys_write+0x12a/0x250 [ 453.374889][T12126] ? __pfx_ksys_write+0x10/0x10 [ 453.374915][T12126] do_syscall_64+0xcd/0xf80 [ 453.374941][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.374956][T12126] RIP: 0033:0x7f79c7b8f7c9 [ 453.374969][T12126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.374982][T12126] RSP: 002b:00007f79c894c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.374996][T12126] RAX: ffffffffffffffda RBX: 00007f79c7de5fa0 RCX: 00007f79c7b8f7c9 [ 453.375006][T12126] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 453.375014][T12126] RBP: 00007f79c894c090 R08: 0000000000000000 R09: 0000000000000000 [ 453.375022][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.375030][T12126] R13: 00007f79c7de6038 R14: 00007f79c7de5fa0 R15: 00007ffcff8c7928 [ 453.375050][T12126] [ 454.011443][T12133] FAULT_INJECTION: forcing a failure. [ 454.011443][T12133] name fail_futex, interval 1, probability 0, space 0, times 0 [ 454.024729][T12133] CPU: 0 UID: 0 PID: 12133 Comm: syz.5.1331 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.024770][T12133] Tainted: [L]=SOFTLOCKUP [ 454.024779][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 454.024792][T12133] Call Trace: [ 454.024800][T12133] [ 454.024810][T12133] dump_stack_lvl+0x16c/0x1f0 [ 454.024852][T12133] should_fail_ex+0x512/0x640 [ 454.024888][T12133] get_futex_key+0x1d0/0x15f0 [ 454.024922][T12133] ? __pfx_get_futex_key+0x10/0x10 [ 454.024964][T12133] ? __lock_acquire+0x436/0x2890 [ 454.024995][T12133] futex_wake+0xea/0x530 [ 454.025027][T12133] ? futex_wait+0x120/0x380 [ 454.025064][T12133] ? __pfx_futex_wake+0x10/0x10 [ 454.025105][T12133] ? msgctl_stat+0x542/0x780 [ 454.025148][T12133] do_futex+0x1e3/0x350 [ 454.025178][T12133] ? __pfx_do_futex+0x10/0x10 [ 454.025205][T12133] ? ksys_msgctl.constprop.0+0x15a/0x330 [ 454.025245][T12133] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 454.025291][T12133] __x64_sys_futex+0x1e0/0x4c0 [ 454.025326][T12133] ? __pfx___x64_sys_futex+0x10/0x10 [ 454.025371][T12133] do_syscall_64+0xcd/0xf80 [ 454.025412][T12133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.025439][T12133] RIP: 0033:0x7f79c7b8f7c9 [ 454.025461][T12133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.025487][T12133] RSP: 002b:00007f79c894c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 454.025513][T12133] RAX: ffffffffffffffda RBX: 00007f79c7de5fa8 RCX: 00007f79c7b8f7c9 [ 454.025531][T12133] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f79c7de5fac [ 454.025548][T12133] RBP: 00007f79c7de5fa0 R08: 00007f79c894d000 R09: 0000000000000000 [ 454.025565][T12133] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 454.025581][T12133] R13: 00007f79c7de6038 R14: 00007ffcff8c7840 R15: 00007ffcff8c7928 [ 454.025619][T12133] [ 454.573526][T12137] sp0: Synchronizing with TNC [ 455.038812][ T5834] Bluetooth: hci5: unexpected subevent 0x04 length: 122 > 11 [ 455.048368][T12144] FAULT_INJECTION: forcing a failure. [ 455.048368][T12144] name failslab, interval 1, probability 0, space 0, times 0 [ 455.061165][T12144] CPU: 1 UID: 0 PID: 12144 Comm: syz.6.1334 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.061200][T12144] Tainted: [L]=SOFTLOCKUP [ 455.061207][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.061220][T12144] Call Trace: [ 455.061227][T12144] [ 455.061236][T12144] dump_stack_lvl+0x16c/0x1f0 [ 455.061274][T12144] should_fail_ex+0x512/0x640 [ 455.061297][T12144] ? fs_reclaim_acquire+0xae/0x150 [ 455.061337][T12144] should_failslab+0xc2/0x120 [ 455.061373][T12144] __kmalloc_noprof+0xeb/0x910 [ 455.061401][T12144] ? tomoyo_encode2+0x100/0x3e0 [ 455.061438][T12144] ? tomoyo_encode2+0x100/0x3e0 [ 455.061467][T12144] tomoyo_encode2+0x100/0x3e0 [ 455.061503][T12144] tomoyo_encode+0x29/0x50 [ 455.061532][T12144] tomoyo_realpath_from_path+0x18f/0x6e0 [ 455.061575][T12144] tomoyo_path_number_perm+0x245/0x580 [ 455.061603][T12144] ? tomoyo_path_number_perm+0x237/0x580 [ 455.061635][T12144] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 455.061713][T12144] ? find_held_lock+0x2b/0x80 [ 455.061773][T12144] ? find_held_lock+0x2b/0x80 [ 455.061802][T12144] ? hook_file_ioctl_common+0x144/0x410 [ 455.061836][T12144] ? __fget_files+0x20e/0x3c0 [ 455.061875][T12144] security_file_ioctl+0x9b/0x240 [ 455.061905][T12144] __x64_sys_ioctl+0xb7/0x210 [ 455.061937][T12144] do_syscall_64+0xcd/0xf80 [ 455.061975][T12144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.061999][T12144] RIP: 0033:0x7f1018f8f7c9 [ 455.062020][T12144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.062043][T12144] RSP: 002b:00007f1019eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.062066][T12144] RAX: ffffffffffffffda RBX: 00007f10191e5fa0 RCX: 00007f1018f8f7c9 [ 455.062083][T12144] RDX: 0000000000000000 RSI: 0000000000004610 RDI: 0000000000000008 [ 455.062097][T12144] RBP: 00007f1019eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 455.062112][T12144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.062126][T12144] R13: 00007f10191e6038 R14: 00007f10191e5fa0 R15: 00007ffe23051748 [ 455.062162][T12144] [ 455.062187][T12144] ERROR: Out of memory at tomoyo_realpath_from_path. [ 460.465900][T12206] syz.5.1348(12206): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 462.322446][T12235] FAULT_INJECTION: forcing a failure. [ 462.322446][T12235] name fail_futex, interval 1, probability 0, space 0, times 0 [ 462.382522][T12235] CPU: 0 UID: 0 PID: 12235 Comm: syz.6.1350 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.382562][T12235] Tainted: [L]=SOFTLOCKUP [ 462.382572][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.382586][T12235] Call Trace: [ 462.382593][T12235] [ 462.382603][T12235] dump_stack_lvl+0x16c/0x1f0 [ 462.382644][T12235] should_fail_ex+0x512/0x640 [ 462.382677][T12235] get_futex_key+0x1d0/0x15f0 [ 462.382709][T12235] ? __pfx_get_futex_key+0x10/0x10 [ 462.382731][T12235] ? __pfx_mas_prev+0x10/0x10 [ 462.382780][T12235] futex_wait_setup+0x9d/0x570 [ 462.382823][T12235] __futex_wait+0x193/0x2f0 [ 462.382857][T12235] ? __pfx___futex_wait+0x10/0x10 [ 462.382887][T12235] ? __blk_flush_plug+0x2f3/0x4b0 [ 462.382918][T12235] ? __pfx_futex_wake_mark+0x10/0x10 [ 462.382955][T12235] ? futex_hash+0x2c5/0x380 [ 462.382984][T12235] ? futex_private_hash_put+0x160/0x1b0 [ 462.383013][T12235] futex_wait+0xe8/0x380 [ 462.383045][T12235] ? __pfx_futex_wait+0x10/0x10 [ 462.383075][T12235] ? __pfx___up_read+0x10/0x10 [ 462.383119][T12235] ? madvise_unlock+0x7c/0x220 [ 462.383162][T12235] do_futex+0x229/0x350 [ 462.383189][T12235] ? __pfx_do_futex+0x10/0x10 [ 462.383226][T12235] __x64_sys_futex+0x1e0/0x4c0 [ 462.383258][T12235] ? __pfx___x64_sys_futex+0x10/0x10 [ 462.383286][T12235] ? xfd_validate_state+0x61/0x180 [ 462.383308][T12235] ? __pfx_ksys_write+0x10/0x10 [ 462.383352][T12235] do_syscall_64+0xcd/0xf80 [ 462.383390][T12235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.383416][T12235] RIP: 0033:0x7f1018f8f7c9 [ 462.383436][T12235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.383458][T12235] RSP: 002b:00007f1019e4d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 462.383482][T12235] RAX: ffffffffffffffda RBX: 00007f10191e6278 RCX: 00007f1018f8f7c9 [ 462.383498][T12235] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10191e6278 [ 462.383514][T12235] RBP: 00007f10191e6270 R08: 0000000000000000 R09: 0000000000000000 [ 462.383529][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.383544][T12235] R13: 00007f10191e6308 R14: 00007ffe23051660 R15: 00007ffe23051748 [ 462.383578][T12235] [ 463.838396][T12250] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1354'. [ 464.092570][T12258] ALSA: mixer_oss: invalid OSS volume '0' [ 464.101540][T12258] ALSA: mixer_oss: invalid OSS volume 'PHONET' [ 464.121738][T12258] ALSA: mixer_oss: invalid OSS volume 'L2TP/IPv6' [ 464.909989][T12268] ptp ptp0: only physical clock in use now [ 465.431390][T12267] could not allocate digest TFM handle [ 465.792204][ T9407] NFSD: Failed to start, no listeners configured. [ 467.391262][ T5834] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 467.401312][T12293] FAULT_INJECTION: forcing a failure. [ 467.401312][T12293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.414602][T12293] CPU: 1 UID: 0 PID: 12293 Comm: syz.0.1365 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.414642][T12293] Tainted: [L]=SOFTLOCKUP [ 467.414651][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.414665][T12293] Call Trace: [ 467.414674][T12293] [ 467.414684][T12293] dump_stack_lvl+0x16c/0x1f0 [ 467.414725][T12293] should_fail_ex+0x512/0x640 [ 467.414757][T12293] _copy_to_user+0x32/0xd0 [ 467.414787][T12293] simple_read_from_buffer+0xcb/0x170 [ 467.414824][T12293] proc_fail_nth_read+0x197/0x240 [ 467.414865][T12293] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.414906][T12293] ? rw_verify_area+0xcf/0x6c0 [ 467.414936][T12293] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.414982][T12293] vfs_read+0x1e4/0xcf0 [ 467.415016][T12293] ? __pfx___mutex_lock+0x10/0x10 [ 467.415056][T12293] ? __pfx_vfs_read+0x10/0x10 [ 467.415099][T12293] ? __fget_files+0x20e/0x3c0 [ 467.415142][T12293] ksys_read+0x12a/0x250 [ 467.415175][T12293] ? __pfx_ksys_read+0x10/0x10 [ 467.415209][T12293] ? fput+0x70/0xf0 [ 467.415239][T12293] do_syscall_64+0xcd/0xf80 [ 467.415277][T12293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.415303][T12293] RIP: 0033:0x7fa06178e1dc [ 467.415324][T12293] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 467.415348][T12293] RSP: 002b:00007fa062569030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.415372][T12293] RAX: ffffffffffffffda RBX: 00007fa0619e5fa0 RCX: 00007fa06178e1dc [ 467.415390][T12293] RDX: 000000000000000f RSI: 00007fa0625690a0 RDI: 0000000000000009 [ 467.415406][T12293] RBP: 00007fa062569090 R08: 0000000000000000 R09: 0000000000000000 [ 467.415421][T12293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.415436][T12293] R13: 00007fa0619e6038 R14: 00007fa0619e5fa0 R15: 00007ffc96c14bd8 [ 467.415472][T12293] [ 468.277071][T12298] ubi0: attaching mtd0 [ 468.282338][T12298] ubi0: scanning is finished [ 468.309023][T12298] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 468.486927][T12298] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 470.132678][T12303] FAULT_INJECTION: forcing a failure. [ 470.132678][T12303] name fail_futex, interval 1, probability 0, space 0, times 0 [ 470.196290][T12303] CPU: 1 UID: 0 PID: 12303 Comm: syz.5.1374 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.196321][T12303] Tainted: [L]=SOFTLOCKUP [ 470.196326][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.196335][T12303] Call Trace: [ 470.196340][T12303] [ 470.196346][T12303] dump_stack_lvl+0x16c/0x1f0 [ 470.196372][T12303] should_fail_ex+0x512/0x640 [ 470.196392][T12303] get_futex_key+0x1085/0x15f0 [ 470.196411][T12303] ? __pfx_get_futex_key+0x10/0x10 [ 470.196432][T12303] futex_wake+0xea/0x530 [ 470.196454][T12303] ? __pfx_futex_wake+0x10/0x10 [ 470.196480][T12303] do_futex+0x1e3/0x350 [ 470.196499][T12303] ? __pfx_do_futex+0x10/0x10 [ 470.196514][T12303] ? __might_fault+0xe3/0x190 [ 470.196536][T12303] mm_release+0x24e/0x300 [ 470.196556][T12303] do_exit+0x69e/0x2bd0 [ 470.196573][T12303] ? __pfx_do_exit+0x10/0x10 [ 470.196586][T12303] ? do_raw_spin_lock+0x12c/0x2b0 [ 470.196602][T12303] ? find_held_lock+0x2b/0x80 [ 470.196624][T12303] do_group_exit+0xd3/0x2a0 [ 470.196639][T12303] get_signal+0x2671/0x26d0 [ 470.196665][T12303] ? __pfx_get_signal+0x10/0x10 [ 470.196686][T12303] ? do_futex+0x122/0x350 [ 470.196703][T12303] arch_do_signal_or_restart+0x8f/0x7a0 [ 470.196725][T12303] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 470.196757][T12303] ? __pfx___x64_sys_futex+0x10/0x10 [ 470.196777][T12303] exit_to_user_mode_loop+0x8c/0x540 [ 470.196797][T12303] do_syscall_64+0x4ee/0xf80 [ 470.196820][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.196835][T12303] RIP: 0033:0x7f79c7b8f7c9 [ 470.196850][T12303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.196872][T12303] RSP: 002b:00007f79c894c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 470.196892][T12303] RAX: fffffffffffffe00 RBX: 00007f79c7de5fa8 RCX: 00007f79c7b8f7c9 [ 470.196908][T12303] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f79c7de5fa8 [ 470.196923][T12303] RBP: 00007f79c7de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 470.196938][T12303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.196951][T12303] R13: 00007f79c7de6038 R14: 00007ffcff8c7840 R15: 00007ffcff8c7928 [ 470.196983][T12303] [ 471.638954][T12320] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1369'. [ 471.686314][T12320] ipvlan1: entered allmulticast mode [ 471.695391][T12320] veth0_vlan: entered allmulticast mode [ 472.814368][T12344] mkiss: ax0: crc mode is auto. [ 476.431014][T12377] ubi0: attaching mtd0 [ 476.454489][T12377] ubi0: scanning is finished [ 476.521732][T12377] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 476.593123][T12373] FAULT_INJECTION: forcing a failure. [ 476.593123][T12373] name fail_futex, interval 1, probability 0, space 0, times 0 [ 476.657590][T12373] CPU: 0 UID: 0 PID: 12373 Comm: syz.0.1379 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.657616][T12373] Tainted: [L]=SOFTLOCKUP [ 476.657621][T12373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.657629][T12373] Call Trace: [ 476.657634][T12373] [ 476.657639][T12373] dump_stack_lvl+0x16c/0x1f0 [ 476.657666][T12373] should_fail_ex+0x512/0x640 [ 476.657685][T12373] get_futex_key+0x1085/0x15f0 [ 476.657704][T12373] ? __pfx_get_futex_key+0x10/0x10 [ 476.657725][T12373] futex_wake+0xea/0x530 [ 476.657747][T12373] ? __pfx_futex_wake+0x10/0x10 [ 476.657774][T12373] do_futex+0x1e3/0x350 [ 476.657790][T12373] ? __pfx_do_futex+0x10/0x10 [ 476.657804][T12373] ? __might_fault+0xe3/0x190 [ 476.657826][T12373] mm_release+0x24e/0x300 [ 476.657846][T12373] do_exit+0x69e/0x2bd0 [ 476.657864][T12373] ? __pfx_do_exit+0x10/0x10 [ 476.657877][T12373] ? do_raw_spin_lock+0x12c/0x2b0 [ 476.657894][T12373] ? find_held_lock+0x2b/0x80 [ 476.657915][T12373] do_group_exit+0xd3/0x2a0 [ 476.657930][T12373] get_signal+0x2671/0x26d0 [ 476.657956][T12373] ? __pfx_get_signal+0x10/0x10 [ 476.657977][T12373] ? do_futex+0x122/0x350 [ 476.657994][T12373] arch_do_signal_or_restart+0x8f/0x7a0 [ 476.658016][T12373] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 476.658042][T12373] ? __pfx___x64_sys_futex+0x10/0x10 [ 476.658062][T12373] exit_to_user_mode_loop+0x8c/0x540 [ 476.658091][T12373] do_syscall_64+0x4ee/0xf80 [ 476.658115][T12373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.658130][T12373] RIP: 0033:0x7fa06178f7c9 [ 476.658142][T12373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.658156][T12373] RSP: 002b:00007fa05f1b00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 476.658170][T12373] RAX: fffffffffffffe00 RBX: 00007fa0619e6368 RCX: 00007fa06178f7c9 [ 476.658179][T12373] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0619e6368 [ 476.658188][T12373] RBP: 00007fa0619e6360 R08: 0000000000000000 R09: 0000000000000000 [ 476.658196][T12373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.658205][T12373] R13: 00007fa0619e63f8 R14: 00007ffc96c14af0 R15: 00007ffc96c14bd8 [ 476.658223][T12373] [ 477.102720][T12377] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 479.182655][T12406] openvswitch: netlink: Flow key attribute not present in set flow. [ 482.641546][T12439] Process accounting resumed [ 485.204367][T12483] can: request_module (can-proto-3) failed. [ 487.016894][T12472] FAULT_INJECTION: forcing a failure. [ 487.016894][T12472] name fail_futex, interval 1, probability 0, space 0, times 0 [ 487.060158][T12472] CPU: 0 UID: 0 PID: 12472 Comm: syz.6.1400 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.060194][T12472] Tainted: [L]=SOFTLOCKUP [ 487.060201][T12472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.060214][T12472] Call Trace: [ 487.060221][T12472] [ 487.060229][T12472] dump_stack_lvl+0x16c/0x1f0 [ 487.060277][T12472] should_fail_ex+0x512/0x640 [ 487.060307][T12472] get_futex_key+0x1085/0x15f0 [ 487.060336][T12472] ? __pfx_get_futex_key+0x10/0x10 [ 487.060372][T12472] futex_wake+0xea/0x530 [ 487.060405][T12472] ? __pfx_futex_wake+0x10/0x10 [ 487.060453][T12472] do_futex+0x1e3/0x350 [ 487.060479][T12472] ? __pfx_do_futex+0x10/0x10 [ 487.060502][T12472] ? __might_fault+0xe3/0x190 [ 487.060537][T12472] mm_release+0x24e/0x300 [ 487.060573][T12472] do_exit+0x69e/0x2bd0 [ 487.060603][T12472] ? __pfx_do_exit+0x10/0x10 [ 487.060626][T12472] ? do_raw_spin_lock+0x12c/0x2b0 [ 487.060653][T12472] ? find_held_lock+0x2b/0x80 [ 487.060683][T12472] do_group_exit+0xd3/0x2a0 [ 487.060698][T12472] get_signal+0x2671/0x26d0 [ 487.060725][T12472] ? __pfx_get_signal+0x10/0x10 [ 487.060746][T12472] ? do_futex+0x122/0x350 [ 487.060763][T12472] arch_do_signal_or_restart+0x8f/0x7a0 [ 487.060785][T12472] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 487.060811][T12472] ? __pfx___x64_sys_futex+0x10/0x10 [ 487.060831][T12472] exit_to_user_mode_loop+0x8c/0x540 [ 487.060851][T12472] do_syscall_64+0x4ee/0xf80 [ 487.060874][T12472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.060889][T12472] RIP: 0033:0x7f1018f8f7c9 [ 487.060901][T12472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.060915][T12472] RSP: 002b:00007f1019e8f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 487.060929][T12472] RAX: fffffffffffffe00 RBX: 00007f10191e6098 RCX: 00007f1018f8f7c9 [ 487.060938][T12472] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10191e6098 [ 487.060947][T12472] RBP: 00007f10191e6090 R08: 0000000000000000 R09: 0000000000000000 [ 487.060955][T12472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.060964][T12472] R13: 00007f10191e6128 R14: 00007ffe23051660 R15: 00007ffe23051748 [ 487.060983][T12472] [ 488.523710][T12516] FAULT_INJECTION: forcing a failure. [ 488.523710][T12516] name fail_futex, interval 1, probability 0, space 0, times 0 [ 488.599835][T12516] CPU: 0 UID: 0 PID: 12516 Comm: syz.6.1411 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.599871][T12516] Tainted: [L]=SOFTLOCKUP [ 488.599879][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 488.599892][T12516] Call Trace: [ 488.599901][T12516] [ 488.599910][T12516] dump_stack_lvl+0x16c/0x1f0 [ 488.599949][T12516] should_fail_ex+0x512/0x640 [ 488.599983][T12516] get_futex_key+0x1d0/0x15f0 [ 488.600012][T12516] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 488.600038][T12516] ? __pfx_get_futex_key+0x10/0x10 [ 488.600067][T12516] ? blk_finish_plug+0x53/0xa0 [ 488.600095][T12516] ? madvise_do_behavior+0x1f4/0x530 [ 488.600129][T12516] futex_wake+0xea/0x530 [ 488.600162][T12516] ? __pfx___up_read+0x10/0x10 [ 488.600190][T12516] ? __pfx_futex_wake+0x10/0x10 [ 488.600218][T12516] ? madvise_unlock+0x16d/0x220 [ 488.600268][T12516] ? madvise_unlock+0x7c/0x220 [ 488.600309][T12516] do_futex+0x1e3/0x350 [ 488.600338][T12516] ? __pfx_do_futex+0x10/0x10 [ 488.600374][T12516] __x64_sys_futex+0x1e0/0x4c0 [ 488.600407][T12516] ? __pfx___x64_sys_futex+0x10/0x10 [ 488.600435][T12516] ? xfd_validate_state+0x61/0x180 [ 488.600457][T12516] ? __pfx_ksys_write+0x10/0x10 [ 488.600500][T12516] do_syscall_64+0xcd/0xf80 [ 488.600537][T12516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.600560][T12516] RIP: 0033:0x7f1018f8f7c9 [ 488.600579][T12516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.600600][T12516] RSP: 002b:00007f1019eb00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 488.600622][T12516] RAX: ffffffffffffffda RBX: 00007f10191e5fa8 RCX: 00007f1018f8f7c9 [ 488.600637][T12516] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f10191e5fac [ 488.600651][T12516] RBP: 00007f10191e5fa0 R08: 00007f1019eb1000 R09: 0000000000000000 [ 488.600664][T12516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.600676][T12516] R13: 00007f10191e6038 R14: 00007ffe23051660 R15: 00007ffe23051748 [ 488.600704][T12516] [ 490.959640][T12557] openvswitch: netlink: Flow key attribute not present in set flow. [ 492.135155][T12570] openvswitch: netlink: Message has 91 unknown bytes. [ 493.479375][T12581] FAULT_INJECTION: forcing a failure. [ 493.479375][T12581] name fail_futex, interval 1, probability 0, space 0, times 0 [ 493.492332][T12581] CPU: 1 UID: 0 PID: 12581 Comm: syz.6.1423 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.492371][T12581] Tainted: [L]=SOFTLOCKUP [ 493.492380][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.492393][T12581] Call Trace: [ 493.492401][T12581] [ 493.492411][T12581] dump_stack_lvl+0x16c/0x1f0 [ 493.492453][T12581] should_fail_ex+0x512/0x640 [ 493.492486][T12581] get_futex_key+0x1d0/0x15f0 [ 493.492519][T12581] ? __pfx_get_futex_key+0x10/0x10 [ 493.492543][T12581] ? __pfx_mas_prev+0x10/0x10 [ 493.492592][T12581] futex_wait_setup+0x9d/0x570 [ 493.492637][T12581] __futex_wait+0x193/0x2f0 [ 493.492672][T12581] ? __pfx___futex_wait+0x10/0x10 [ 493.492703][T12581] ? __blk_flush_plug+0x2f3/0x4b0 [ 493.492737][T12581] ? __pfx_futex_wake_mark+0x10/0x10 [ 493.492775][T12581] ? futex_hash+0x2c5/0x380 [ 493.492806][T12581] ? futex_private_hash_put+0x160/0x1b0 [ 493.492837][T12581] futex_wait+0xe8/0x380 [ 493.492869][T12581] ? __pfx_futex_wait+0x10/0x10 [ 493.492900][T12581] ? __pfx___up_read+0x10/0x10 [ 493.492938][T12581] ? madvise_unlock+0x7c/0x220 [ 493.492981][T12581] do_futex+0x229/0x350 [ 493.493011][T12581] ? __pfx_do_futex+0x10/0x10 [ 493.493048][T12581] __x64_sys_futex+0x1e0/0x4c0 [ 493.493082][T12581] ? __pfx___x64_sys_futex+0x10/0x10 [ 493.493117][T12581] ? xfd_validate_state+0x61/0x180 [ 493.493140][T12581] ? __pfx_ksys_write+0x10/0x10 [ 493.493185][T12581] do_syscall_64+0xcd/0xf80 [ 493.493225][T12581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.493251][T12581] RIP: 0033:0x7f1018f8f7c9 [ 493.493272][T12581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.493297][T12581] RSP: 002b:00007f1019eb00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 493.493321][T12581] RAX: ffffffffffffffda RBX: 00007f10191e5fa8 RCX: 00007f1018f8f7c9 [ 493.493338][T12581] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10191e5fa8 [ 493.493353][T12581] RBP: 00007f10191e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 493.493369][T12581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.493383][T12581] R13: 00007f10191e6038 R14: 00007ffe23051660 R15: 00007ffe23051748 [ 493.493419][T12581] [ 493.786506][T12585] FAULT_INJECTION: forcing a failure. [ 493.786506][T12585] name fail_futex, interval 1, probability 0, space 0, times 0 [ 493.826230][T12585] CPU: 0 UID: 0 PID: 12585 Comm: syz.7.1422 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.826263][T12585] Tainted: [L]=SOFTLOCKUP [ 493.826268][T12585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.826277][T12585] Call Trace: [ 493.826283][T12585] [ 493.826289][T12585] dump_stack_lvl+0x16c/0x1f0 [ 493.826317][T12585] should_fail_ex+0x512/0x640 [ 493.826336][T12585] get_futex_key+0x1085/0x15f0 [ 493.826354][T12585] ? __pfx_get_futex_key+0x10/0x10 [ 493.826376][T12585] futex_wake+0xea/0x530 [ 493.826397][T12585] ? __pfx_futex_wake+0x10/0x10 [ 493.826424][T12585] do_futex+0x1e3/0x350 [ 493.826441][T12585] ? __pfx_do_futex+0x10/0x10 [ 493.826456][T12585] ? __might_fault+0xe3/0x190 [ 493.826477][T12585] mm_release+0x24e/0x300 [ 493.826498][T12585] do_exit+0x69e/0x2bd0 [ 493.826515][T12585] ? __pfx_do_exit+0x10/0x10 [ 493.826528][T12585] ? do_raw_spin_lock+0x12c/0x2b0 [ 493.826545][T12585] ? find_held_lock+0x2b/0x80 [ 493.826566][T12585] do_group_exit+0xd3/0x2a0 [ 493.826581][T12585] get_signal+0x2671/0x26d0 [ 493.826609][T12585] ? __pfx_get_signal+0x10/0x10 [ 493.826630][T12585] ? do_futex+0x122/0x350 [ 493.826647][T12585] arch_do_signal_or_restart+0x8f/0x7a0 [ 493.826669][T12585] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 493.826695][T12585] ? __pfx___x64_sys_futex+0x10/0x10 [ 493.826715][T12585] exit_to_user_mode_loop+0x8c/0x540 [ 493.826736][T12585] do_syscall_64+0x4ee/0xf80 [ 493.826759][T12585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.826775][T12585] RIP: 0033:0x7f9a7f58f7c9 [ 493.826787][T12585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.826801][T12585] RSP: 002b:00007f9a8036d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 493.826815][T12585] RAX: fffffffffffffe00 RBX: 00007f9a7f7e6098 RCX: 00007f9a7f58f7c9 [ 493.826825][T12585] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9a7f7e6098 [ 493.826834][T12585] RBP: 00007f9a7f7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 493.826851][T12585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.826860][T12585] R13: 00007f9a7f7e6128 R14: 00007ffd97167d70 R15: 00007ffd97167e58 [ 493.826881][T12585] [ 496.289844][T12618] ubi0: attaching mtd0 [ 496.396448][T12618] ubi0: scanning is finished [ 496.413403][T12618] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 496.792932][T12618] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 497.091976][T12627] FAULT_INJECTION: forcing a failure. [ 497.091976][T12627] name fail_futex, interval 1, probability 0, space 0, times 0 [ 497.205835][T12627] CPU: 1 UID: 0 PID: 12627 Comm: syz.6.1430 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.205882][T12627] Tainted: [L]=SOFTLOCKUP [ 497.205889][T12627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.205898][T12627] Call Trace: [ 497.205904][T12627] [ 497.205910][T12627] dump_stack_lvl+0x16c/0x1f0 [ 497.205937][T12627] should_fail_ex+0x512/0x640 [ 497.205956][T12627] get_futex_key+0x1d0/0x15f0 [ 497.205975][T12627] ? __pfx_get_futex_key+0x10/0x10 [ 497.205988][T12627] ? __pfx_mas_prev+0x10/0x10 [ 497.206017][T12627] futex_wait_setup+0x9d/0x570 [ 497.206042][T12627] __futex_wait+0x193/0x2f0 [ 497.206062][T12627] ? __pfx___futex_wait+0x10/0x10 [ 497.206080][T12627] ? __blk_flush_plug+0x2f3/0x4b0 [ 497.206099][T12627] ? __pfx_futex_wake_mark+0x10/0x10 [ 497.206121][T12627] ? futex_hash+0x2c5/0x380 [ 497.206138][T12627] ? futex_private_hash_put+0x160/0x1b0 [ 497.206154][T12627] futex_wait+0xe8/0x380 [ 497.206173][T12627] ? __pfx_futex_wait+0x10/0x10 [ 497.206191][T12627] ? __pfx___up_read+0x10/0x10 [ 497.206213][T12627] ? madvise_unlock+0x7c/0x220 [ 497.206238][T12627] do_futex+0x229/0x350 [ 497.206255][T12627] ? __pfx_do_futex+0x10/0x10 [ 497.206276][T12627] __x64_sys_futex+0x1e0/0x4c0 [ 497.206295][T12627] ? __pfx___x64_sys_futex+0x10/0x10 [ 497.206311][T12627] ? xfd_validate_state+0x61/0x180 [ 497.206323][T12627] ? __pfx_ksys_write+0x10/0x10 [ 497.206350][T12627] do_syscall_64+0xcd/0xf80 [ 497.206373][T12627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.206389][T12627] RIP: 0033:0x7f1018f8f7c9 [ 497.206401][T12627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.206415][T12627] RSP: 002b:00007f1019e4d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 497.206429][T12627] RAX: ffffffffffffffda RBX: 00007f10191e6278 RCX: 00007f1018f8f7c9 [ 497.206439][T12627] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10191e6278 [ 497.206447][T12627] RBP: 00007f10191e6270 R08: 0000000000000000 R09: 0000000000000000 [ 497.206456][T12627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.206464][T12627] R13: 00007f10191e6308 R14: 00007ffe23051660 R15: 00007ffe23051748 [ 497.206482][T12627] [ 499.813800][T12662] aoe: copy from user failed [ 499.875616][T12662] aoe: could not set interface list: too many interfaces [ 500.872545][ T5834] Bluetooth: hci2: unknown advertising packet type: 0xea [ 502.588645][T12695] FAULT_INJECTION: forcing a failure. [ 502.588645][T12695] name fail_futex, interval 1, probability 0, space 0, times 0 [ 502.614266][T12695] CPU: 1 UID: 0 PID: 12695 Comm: syz.6.1445 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.614305][T12695] Tainted: [L]=SOFTLOCKUP [ 502.614313][T12695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 502.614327][T12695] Call Trace: [ 502.614335][T12695] [ 502.614346][T12695] dump_stack_lvl+0x16c/0x1f0 [ 502.614385][T12695] should_fail_ex+0x512/0x640 [ 502.614424][T12695] get_futex_key+0x1d0/0x15f0 [ 502.614450][T12695] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 502.614475][T12695] ? __pfx_get_futex_key+0x10/0x10 [ 502.614503][T12695] ? blk_finish_plug+0x53/0xa0 [ 502.614529][T12695] ? madvise_do_behavior+0x1f4/0x530 [ 502.614555][T12695] futex_wake+0xea/0x530 [ 502.614587][T12695] ? __pfx___up_read+0x10/0x10 [ 502.614613][T12695] ? __pfx_futex_wake+0x10/0x10 [ 502.614641][T12695] ? madvise_unlock+0x16d/0x220 [ 502.614682][T12695] ? madvise_unlock+0x7c/0x220 [ 502.614722][T12695] do_futex+0x1e3/0x350 [ 502.614750][T12695] ? __pfx_do_futex+0x10/0x10 [ 502.614787][T12695] __x64_sys_futex+0x1e0/0x4c0 [ 502.614820][T12695] ? __pfx___x64_sys_futex+0x10/0x10 [ 502.614848][T12695] ? xfd_validate_state+0x61/0x180 [ 502.614869][T12695] ? __pfx_ksys_write+0x10/0x10 [ 502.614911][T12695] do_syscall_64+0xcd/0xf80 [ 502.614948][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.614974][T12695] RIP: 0033:0x7f1018f8f7c9 [ 502.614994][T12695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.615018][T12695] RSP: 002b:00007f1019e8f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 502.615047][T12695] RAX: ffffffffffffffda RBX: 00007f10191e6098 RCX: 00007f1018f8f7c9 [ 502.615065][T12695] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f10191e609c [ 502.615080][T12695] RBP: 00007f10191e6090 R08: 00007f1019eb1000 R09: 0000000000000000 [ 502.615096][T12695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.615110][T12695] R13: 00007f10191e6128 R14: 00007ffe23051660 R15: 00007ffe23051748 [ 502.615144][T12695] [ 503.285793][T12703] FAULT_INJECTION: forcing a failure. [ 503.285793][T12703] name fail_futex, interval 1, probability 0, space 0, times 0 [ 503.311938][T12703] CPU: 0 UID: 0 PID: 12703 Comm: syz.0.1447 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.311976][T12703] Tainted: [L]=SOFTLOCKUP [ 503.311984][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 503.311997][T12703] Call Trace: [ 503.312006][T12703] [ 503.312016][T12703] dump_stack_lvl+0x16c/0x1f0 [ 503.312056][T12703] should_fail_ex+0x512/0x640 [ 503.312089][T12703] get_futex_key+0x1085/0x15f0 [ 503.312129][T12703] ? __pfx_get_futex_key+0x10/0x10 [ 503.312169][T12703] futex_wake+0xea/0x530 [ 503.312205][T12703] ? __pfx_futex_wake+0x10/0x10 [ 503.312252][T12703] do_futex+0x1e3/0x350 [ 503.312280][T12703] ? __pfx_do_futex+0x10/0x10 [ 503.312306][T12703] ? __might_fault+0xe3/0x190 [ 503.312343][T12703] mm_release+0x24e/0x300 [ 503.312374][T12703] do_exit+0x69e/0x2bd0 [ 503.312404][T12703] ? __pfx_do_exit+0x10/0x10 [ 503.312424][T12703] ? do_raw_spin_lock+0x12c/0x2b0 [ 503.312449][T12703] ? find_held_lock+0x2b/0x80 [ 503.312481][T12703] do_group_exit+0xd3/0x2a0 [ 503.312508][T12703] get_signal+0x2671/0x26d0 [ 503.312553][T12703] ? __pfx_get_signal+0x10/0x10 [ 503.312590][T12703] ? do_futex+0x122/0x350 [ 503.312620][T12703] arch_do_signal_or_restart+0x8f/0x7a0 [ 503.312656][T12703] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 503.312701][T12703] ? __pfx___x64_sys_futex+0x10/0x10 [ 503.312737][T12703] exit_to_user_mode_loop+0x8c/0x540 [ 503.312772][T12703] do_syscall_64+0x4ee/0xf80 [ 503.312810][T12703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.312836][T12703] RIP: 0033:0x7fa06178f7c9 [ 503.312856][T12703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.312880][T12703] RSP: 002b:00007fa0625690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 503.312905][T12703] RAX: fffffffffffffe00 RBX: 00007fa0619e5fa8 RCX: 00007fa06178f7c9 [ 503.312922][T12703] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0619e5fa8 [ 503.312957][T12703] RBP: 00007fa0619e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 503.312972][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.312987][T12703] R13: 00007fa0619e6038 R14: 00007ffc96c14af0 R15: 00007ffc96c14bd8 [ 503.313022][T12703] [ 503.715787][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 505.432174][T12723] FAULT_INJECTION: forcing a failure. [ 505.432174][T12723] name fail_futex, interval 1, probability 0, space 0, times 0 [ 505.460189][T12723] CPU: 1 UID: 0 PID: 12723 Comm: syz.6.1449 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.460228][T12723] Tainted: [L]=SOFTLOCKUP [ 505.460236][T12723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 505.460248][T12723] Call Trace: [ 505.460256][T12723] [ 505.460264][T12723] dump_stack_lvl+0x16c/0x1f0 [ 505.460302][T12723] should_fail_ex+0x512/0x640 [ 505.460332][T12723] get_futex_key+0x1d0/0x15f0 [ 505.460361][T12723] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 505.460386][T12723] ? __pfx_get_futex_key+0x10/0x10 [ 505.460415][T12723] ? blk_finish_plug+0x53/0xa0 [ 505.460443][T12723] ? madvise_do_behavior+0x1f4/0x530 [ 505.460471][T12723] futex_wake+0xea/0x530 [ 505.460505][T12723] ? __pfx___up_read+0x10/0x10 [ 505.460532][T12723] ? __pfx_futex_wake+0x10/0x10 [ 505.460560][T12723] ? madvise_unlock+0x16d/0x220 [ 505.460603][T12723] ? madvise_unlock+0x7c/0x220 [ 505.460645][T12723] do_futex+0x1e3/0x350 [ 505.460673][T12723] ? __pfx_do_futex+0x10/0x10 [ 505.460708][T12723] __x64_sys_futex+0x1e0/0x4c0 [ 505.460740][T12723] ? __pfx___x64_sys_futex+0x10/0x10 [ 505.460769][T12723] ? xfd_validate_state+0x61/0x180 [ 505.460791][T12723] ? __pfx_ksys_write+0x10/0x10 [ 505.460834][T12723] do_syscall_64+0xcd/0xf80 [ 505.460874][T12723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.460898][T12723] RIP: 0033:0x7f1018f8f7c9 [ 505.460918][T12723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.460940][T12723] RSP: 002b:00007f1019e4d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 505.460961][T12723] RAX: ffffffffffffffda RBX: 00007f10191e6278 RCX: 00007f1018f8f7c9 [ 505.460986][T12723] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f10191e627c [ 505.460999][T12723] RBP: 00007f10191e6270 R08: 00007f1019eb1000 R09: 0000000000000000 [ 505.461012][T12723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.461025][T12723] R13: 00007f10191e6308 R14: 00007ffe23051660 R15: 00007ffe23051748 [ 505.461060][T12723] [ 506.764642][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.771030][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.510802][T12767] ubi0: attaching mtd0 [ 507.527717][T12767] ubi0: scanning is finished [ 507.532389][T12767] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 507.718703][T12761] FAULT_INJECTION: forcing a failure. [ 507.718703][T12761] name failslab, interval 1, probability 0, space 0, times 0 [ 507.747682][T12761] CPU: 0 UID: 0 PID: 12761 Comm: syz.5.1455 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.747709][T12761] Tainted: [L]=SOFTLOCKUP [ 507.747714][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 507.747724][T12761] Call Trace: [ 507.747730][T12761] [ 507.747736][T12761] dump_stack_lvl+0x16c/0x1f0 [ 507.747764][T12761] should_fail_ex+0x512/0x640 [ 507.747781][T12761] ? kmem_cache_alloc_noprof+0x62/0x770 [ 507.747802][T12761] should_failslab+0xc2/0x120 [ 507.747825][T12761] kmem_cache_alloc_noprof+0x83/0x770 [ 507.747843][T12761] ? __proc_create+0x2c8/0x8d0 [ 507.747866][T12761] ? __proc_create+0x2c8/0x8d0 [ 507.747884][T12761] __proc_create+0x2c8/0x8d0 [ 507.747904][T12761] ? __pfx___proc_create+0x10/0x10 [ 507.747925][T12761] ? _raw_write_unlock+0x28/0x50 [ 507.747946][T12761] ? proc_register+0x559/0x8b0 [ 507.747968][T12761] proc_create_reg+0x7d/0x180 [ 507.747989][T12761] proc_create_net_data+0x8e/0x1c0 [ 507.748011][T12761] ? __pfx_proc_create_net_data+0x10/0x10 [ 507.748036][T12761] sctp_proc_init+0x14c/0x270 [ 507.748059][T12761] ? __pfx_sctp_defaults_init+0x10/0x10 [ 507.748080][T12761] sctp_defaults_init+0x758/0xd90 [ 507.748102][T12761] ? __pfx_sctp_defaults_init+0x10/0x10 [ 507.748130][T12761] ops_init+0x1e2/0x5f0 [ 507.748153][T12761] setup_net+0x11d/0x3a0 [ 507.748175][T12761] ? __pfx_setup_net+0x10/0x10 [ 507.748194][T12761] ? lockdep_init_map_type+0x5c/0x270 [ 507.748209][T12761] ? mutex_init_lockep+0x110/0x150 [ 507.748227][T12761] copy_net_ns+0x351/0x7c0 [ 507.748250][T12761] create_new_namespaces+0x3ea/0xab0 [ 507.748275][T12761] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 507.748296][T12761] ksys_unshare+0x45b/0xa40 [ 507.748320][T12761] ? __pfx_ksys_unshare+0x10/0x10 [ 507.748343][T12761] ? xfd_validate_state+0x61/0x180 [ 507.748362][T12761] __x64_sys_unshare+0x31/0x40 [ 507.748375][T12761] do_syscall_64+0xcd/0xf80 [ 507.748398][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.748413][T12761] RIP: 0033:0x7f79c7b8f7c9 [ 507.748426][T12761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.748440][T12761] RSP: 002b:00007f79c894c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 507.748454][T12761] RAX: ffffffffffffffda RBX: 00007f79c7de5fa0 RCX: 00007f79c7b8f7c9 [ 507.748463][T12761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 507.748472][T12761] RBP: 00007f79c7c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 507.748480][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.748488][T12761] R13: 00007f79c7de6038 R14: 00007f79c7de5fa0 R15: 00007ffcff8c7928 [ 507.748508][T12761] [ 508.196476][T12767] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 511.234814][T12821] FAULT_INJECTION: forcing a failure. [ 511.234814][T12821] name fail_futex, interval 1, probability 0, space 0, times 0 [ 511.356799][T12821] CPU: 0 UID: 0 PID: 12821 Comm: syz.6.1464 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.356825][T12821] Tainted: [L]=SOFTLOCKUP [ 511.356830][T12821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 511.356839][T12821] Call Trace: [ 511.356844][T12821] [ 511.356850][T12821] dump_stack_lvl+0x16c/0x1f0 [ 511.356877][T12821] should_fail_ex+0x512/0x640 [ 511.356896][T12821] get_futex_key+0x1d0/0x15f0 [ 511.356913][T12821] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 511.356928][T12821] ? __pfx_get_futex_key+0x10/0x10 [ 511.356945][T12821] ? blk_finish_plug+0x53/0xa0 [ 511.356961][T12821] ? madvise_do_behavior+0x1f4/0x530 [ 511.356977][T12821] futex_wake+0xea/0x530 [ 511.356997][T12821] ? __pfx___up_read+0x10/0x10 [ 511.357013][T12821] ? __pfx_futex_wake+0x10/0x10 [ 511.357030][T12821] ? madvise_unlock+0x16d/0x220 [ 511.357056][T12821] ? madvise_unlock+0x7c/0x220 [ 511.357081][T12821] do_futex+0x1e3/0x350 [ 511.357098][T12821] ? __pfx_do_futex+0x10/0x10 [ 511.357119][T12821] __x64_sys_futex+0x1e0/0x4c0 [ 511.357138][T12821] ? __pfx___x64_sys_futex+0x10/0x10 [ 511.357154][T12821] ? xfd_validate_state+0x61/0x180 [ 511.357167][T12821] ? __pfx_ksys_write+0x10/0x10 [ 511.357193][T12821] do_syscall_64+0xcd/0xf80 [ 511.357216][T12821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.357232][T12821] RIP: 0033:0x7f1018f8f7c9 [ 511.357244][T12821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.357258][T12821] RSP: 002b:00007f1019e4d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 511.357272][T12821] RAX: ffffffffffffffda RBX: 00007f10191e6278 RCX: 00007f1018f8f7c9 [ 511.357281][T12821] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f10191e627c [ 511.357290][T12821] RBP: 00007f10191e6270 R08: 00007f1019eb1000 R09: 0000000000000000 [ 511.357299][T12821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.357307][T12821] R13: 00007f10191e6308 R14: 00007ffe23051660 R15: 00007ffe23051748 [ 511.357326][T12821] [ 511.867433][ T31] INFO: task syz-executor:5831 blocked for more than 143 seconds. [ 511.946052][ T31] Tainted: G L syzkaller #0 [ 511.954221][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.972330][ T31] task:syz-executor state:D stack:22552 pid:5831 tgid:5831 ppid:1 task_flags:0x400140 flags:0x00080002 [ 511.992869][ T31] Call Trace: [ 512.019776][ T31] [ 512.043021][ T31] ? __schedule+0x10b9/0x6150 [ 512.052023][ T31] __schedule+0x1139/0x6150 [ 512.062207][ T31] ? __pfx___schedule+0x10/0x10 [ 512.071994][ T31] ? find_held_lock+0x2b/0x80 [ 512.080188][ T31] ? schedule+0x2d7/0x3a0 [ 512.138323][ T31] schedule+0xe7/0x3a0 [ 512.153599][ T31] schedule_preempt_disabled+0x13/0x30 [ 512.192275][ T31] __mutex_lock+0xc69/0x1ca0 [ 512.218268][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 512.273940][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 512.282129][ T31] ? net_generic+0xea/0x2a0 [ 512.311893][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 512.389897][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 512.422051][ T31] nfsd_umount+0x3b/0x60 [ 512.461943][ T31] deactivate_locked_super+0xc1/0x1a0 [ 512.500870][ T31] deactivate_super+0xde/0x100 [ 512.537894][ T31] cleanup_mnt+0x225/0x450 [ 512.609239][ T31] task_work_run+0x150/0x240 [ 512.622384][ T31] ? __pfx_task_work_run+0x10/0x10 [ 512.635853][ T31] exit_to_user_mode_loop+0xfb/0x540 [ 512.641511][ T31] do_syscall_64+0x4ee/0xf80 [ 512.646996][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.653009][ T31] RIP: 0033:0x7f7771f90af7 [ 512.657558][ T31] RSP: 002b:00007ffd9ca09288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 512.666103][ T31] RAX: 0000000000000000 RBX: 00007f7772013d7d RCX: 00007f7771f90af7 [ 512.674099][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9ca0a3d0 [ 512.682935][ T31] RBP: 00007ffd9ca0a3bc R08: 0000000000000000 R09: 0000000000000000 [ 512.691011][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9ca0a3d0 [ 512.722150][ T31] R13: 00007f7772013d7d R14: 0000000000058bd2 R15: 00007ffd9ca0a410 [ 512.781657][ T31] [ 512.787933][ T31] [ 512.787933][ T31] Showing all locks held in the system: [ 512.824023][ T31] 1 lock held by khungtaskd/31: [ 512.829445][T12813] caif:caif_disconnect_client(): nothing to disconnect [ 512.843658][ T31] #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 512.896233][ T31] 2 locks held by getty/5589: [ 512.960776][ T31] #0: ffff88814e9fc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 512.977566][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 512.995291][ T31] 2 locks held by syz-executor/5831: [ 513.001130][ T31] #0: ffff88807c95a0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 513.012037][ T31] #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 513.022442][ T31] 3 locks held by kworker/0:3/5837: [ 513.045786][ T31] #0: ffff88813ff55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 513.100693][ T31] #1: ffffc90003f6fc90 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 513.162675][ T31] #2: ffffffff8e3d4b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 513.235265][ T31] 2 locks held by syz-executor/6804: [ 513.302250][ T31] #0: ffff888057b7e0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 513.321060][ T31] #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 513.337074][ T31] 2 locks held by syz.1.796/9407: [ 513.350005][ T31] #0: ffffffff901eb5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 513.379943][ T31] #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 513.418306][ T31] 5 locks held by kworker/u8:26/9860: [ 513.437979][ T31] #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 513.486136][ T31] #1: ffffc90003397c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 513.527714][ T31] #2: ffffffff9012e790 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 513.548366][ T31] #3: ffffffff90144f68 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 513.568886][ T31] #4: ffffffff8e3d4c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 513.585784][ T31] 1 lock held by syz.5.1436/12655: [ 513.590961][ T31] 2 locks held by syz.0.1450/12729: [ 513.601407][ T31] 5 locks held by syz.0.1462/12798: [ 513.607933][ T31] 1 lock held by syz.6.1464/12803: [ 513.613078][ T31] #0: ffffffff90144f68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 513.635726][ T31] 2 locks held by syz.7.1466/12825: [ 513.640970][ T31] #0: ffffffff9012e790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 513.666745][ T31] #1: ffffffff90144f68 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x260 [ 513.724744][ T31] 3 locks held by syz.5.1467/12813: [ 513.733916][ T31] #0: ffff88805d218208 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 513.749652][ T31] #1: ffff8880777ba260 (sk_lock-AF_CAIF){+.+.}-{0:0}, at: caif_release+0x10b/0x430 [ 513.759269][ T31] #2: ffffffff8e3d4c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 513.774851][ T31] 2 locks held by syz.0.1468/12824: [ 513.781616][ T31] 1 lock held by syz.0.1468/12834: [ 513.790407][ T31] #0: ffffffff90144f68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 513.814086][ T31] [ 513.825079][ T31] ============================================= [ 513.825079][ T31] [ 513.862145][ T31] NMI backtrace for cpu 0 [ 513.862170][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 513.862200][ T31] Tainted: [L]=SOFTLOCKUP [ 513.862205][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.862213][ T31] Call Trace: [ 513.862218][ T31] [ 513.862225][ T31] dump_stack_lvl+0x116/0x1f0 [ 513.862252][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 513.862269][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 513.862285][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 513.862303][ T31] sys_info+0x133/0x180 [ 513.862316][ T31] watchdog+0xe66/0x1180 [ 513.862344][ T31] ? rcu_is_watching+0x12/0xc0 [ 513.862365][ T31] ? __pfx_watchdog+0x10/0x10 [ 513.862384][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 513.862407][ T31] ? __kthread_parkme+0x19e/0x250 [ 513.862429][ T31] ? __pfx_watchdog+0x10/0x10 [ 513.862449][ T31] kthread+0x3c5/0x780 [ 513.862463][ T31] ? __pfx_kthread+0x10/0x10 [ 513.862478][ T31] ? rcu_is_watching+0x12/0xc0 [ 513.862497][ T31] ? __pfx_kthread+0x10/0x10 [ 513.862512][ T31] ret_from_fork+0x983/0xb10 [ 513.862527][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 513.862542][ T31] ? __switch_to+0x7af/0x10d0 [ 513.862560][ T31] ? __pfx_kthread+0x10/0x10 [ 513.862575][ T31] ret_from_fork_asm+0x1a/0x30 [ 513.862611][ T31] [ 513.862616][ T31] Sending NMI from CPU 0 to CPUs 1: [ 514.005399][ C1] NMI backtrace for cpu 1 [ 514.005422][ C1] CPU: 1 UID: 0 PID: 12824 Comm: syz.0.1468 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.005457][ C1] Tainted: [L]=SOFTLOCKUP [ 514.005465][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.005480][ C1] RIP: 0010:rcu_is_watching+0x41/0xc0 [ 514.005518][ C1] Code: b3 93 89 c5 83 f8 07 0f 87 82 00 00 00 48 8d 3c ed 20 3f d7 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <75> 5c 48 03 1c ed 20 3f d7 8d 48 b8 00 00 00 00 00 fc ff df 48 89 [ 514.005542][ C1] RSP: 0018:ffffc9000c24ec20 EFLAGS: 00000246 [ 514.005562][ C1] RAX: dffffc0000000000 RBX: ffffffff93b379e8 RCX: 0000000000000000 [ 514.005578][ C1] RDX: 1ffffffff1bae7e5 RSI: ffffffff8bf2b500 RDI: ffffffff8dd73f28 [ 514.005595][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 514.005610][ C1] R10: 0000000000000000 R11: ffff888026af4830 R12: 0000000000000001 [ 514.005625][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.005639][ C1] FS: 00007fa0625696c0(0000) GS:ffff8881249fc000(0000) knlGS:0000000000000000 [ 514.005669][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.005683][ C1] CR2: 00002000005a3000 CR3: 0000000078708000 CR4: 00000000003526f0 [ 514.005699][ C1] Call Trace: [ 514.005706][ C1] [ 514.005716][ C1] lock_acquire+0x2cd/0x330 [ 514.005739][ C1] ? lock_acquire+0x179/0x330 [ 514.005762][ C1] _raw_spin_lock+0x2e/0x40 [ 514.005792][ C1] ? cluster_alloc_swap_entry+0x4c3/0xbd0 [ 514.005827][ C1] cluster_alloc_swap_entry+0x4c3/0xbd0 [ 514.005865][ C1] folio_alloc_swap+0x3a9/0xfb0 [ 514.005902][ C1] shrink_folio_list+0x2317/0x4bc0 [ 514.005930][ C1] ? rcu_is_watching+0x12/0xc0 [ 514.005961][ C1] ? __pfx_shrink_folio_list+0x10/0x10 [ 514.005994][ C1] ? lock_acquire+0x179/0x330 [ 514.006015][ C1] ? find_held_lock+0x2b/0x80 [ 514.006059][ C1] ? mark_held_locks+0x49/0x80 [ 514.006079][ C1] ? smp_call_function_many_cond+0x120f/0x15e0 [ 514.006117][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 514.006151][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 514.006177][ C1] reclaim_folio_list+0xda/0x5a0 [ 514.006199][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 514.006225][ C1] ? __pfx_reclaim_folio_list+0x10/0x10 [ 514.006254][ C1] ? lru_gen_update_size+0x543/0xe10 [ 514.006300][ C1] ? lru_gen_del_folio+0x32b/0x540 [ 514.006337][ C1] reclaim_pages+0x3ec/0x570 [ 514.006362][ C1] ? __pfx_reclaim_pages+0x10/0x10 [ 514.006384][ C1] ? find_held_lock+0x2b/0x80 [ 514.006413][ C1] ? madvise_cold_or_pageout_pte_range+0x739/0x2100 [ 514.006442][ C1] madvise_cold_or_pageout_pte_range+0x1624/0x2100 [ 514.006473][ C1] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 514.006499][ C1] ? lock_acquire+0x179/0x330 [ 514.006521][ C1] ? find_held_lock+0x2b/0x80 [ 514.006552][ C1] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 514.006578][ C1] walk_pgd_range+0xc10/0x1f80 [ 514.006618][ C1] ? __pfx_walk_pgd_range+0x10/0x10 [ 514.006646][ C1] ? finish_task_switch.isra.0+0x207/0xbd0 [ 514.006686][ C1] ? rcu_is_watching+0x12/0xc0 [ 514.006720][ C1] __walk_page_range+0x163/0x820 [ 514.006756][ C1] walk_page_range_vma_unsafe+0x23f/0x9e0 [ 514.006790][ C1] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 514.006826][ C1] ? find_held_lock+0x2b/0x80 [ 514.006855][ C1] ? mlock_drain_local+0x22d/0x4e0 [ 514.006885][ C1] walk_page_range_vma+0x63/0x90 [ 514.006916][ C1] madvise_pageout+0x257/0x540 [ 514.006953][ C1] ? __pfx_madvise_pageout+0x10/0x10 [ 514.007000][ C1] madvise_vma_behavior+0x912/0x29e0 [ 514.007024][ C1] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 514.007060][ C1] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 514.007084][ C1] ? mas_prev+0x9b/0xf0 [ 514.007102][ C1] ? __pfx_mas_prev+0x10/0x10 [ 514.007142][ C1] ? find_vma_prev+0xd3/0x150 [ 514.007174][ C1] ? find_held_lock+0x2b/0x80 [ 514.007203][ C1] ? __pfx_find_vma_prev+0x10/0x10 [ 514.007242][ C1] ? __futex_wait+0x24b/0x2f0 [ 514.007275][ C1] madvise_walk_vmas+0x31f/0xac0 [ 514.007300][ C1] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 514.007327][ C1] madvise_do_behavior+0x1e2/0x530 [ 514.007349][ C1] ? futex_private_hash_put+0x160/0x1b0 [ 514.007374][ C1] ? __pfx_madvise_do_behavior+0x10/0x10 [ 514.007398][ C1] ? down_read+0x13d/0x460 [ 514.007428][ C1] do_madvise+0x176/0x240 [ 514.007449][ C1] ? __pfx_do_madvise+0x10/0x10 [ 514.007470][ C1] ? do_futex+0x122/0x350 [ 514.007506][ C1] ? xfd_validate_state+0x61/0x180 [ 514.007527][ C1] ? __pfx_ksys_write+0x10/0x10 [ 514.007563][ C1] __x64_sys_madvise+0xa9/0x110 [ 514.007585][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 514.007619][ C1] do_syscall_64+0xcd/0xf80 [ 514.007660][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.007685][ C1] RIP: 0033:0x7fa06178f7c9 [ 514.007703][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.007726][ C1] RSP: 002b:00007fa062569038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 514.007748][ C1] RAX: ffffffffffffffda RBX: 00007fa0619e5fa0 RCX: 00007fa06178f7c9 [ 514.007764][ C1] RDX: 0000000000000015 RSI: 00000000002003f0 RDI: 0000000000000000 [ 514.007778][ C1] RBP: 00007fa061813f91 R08: 0000000000000000 R09: 0000000000000000 [ 514.007792][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.007806][ C1] R13: 00007fa0619e6038 R14: 00007fa0619e5fa0 R15: 00007ffc96c14bd8 [ 514.007831][ C1] [ 514.014064][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 514.014091][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 514.014128][ T31] Tainted: [L]=SOFTLOCKUP [ 514.014137][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.014152][ T31] Call Trace: [ 514.014162][ T31] [ 514.014172][ T31] dump_stack_lvl+0x3d/0x1f0 [ 514.014214][ T31] vpanic+0x640/0x6f0 [ 514.014246][ T31] panic+0xca/0xd0 [ 514.014270][ T31] ? __pfx_panic+0x10/0x10 [ 514.014292][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 514.014322][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 514.014349][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 514.014388][ T31] ? watchdog+0xe83/0x1180 [ 514.014422][ T31] ? watchdog+0xe76/0x1180 [ 514.014457][ T31] watchdog+0xe94/0x1180 [ 514.014497][ T31] ? rcu_is_watching+0x12/0xc0 [ 514.014531][ T31] ? __pfx_watchdog+0x10/0x10 [ 514.014563][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 514.014600][ T31] ? __kthread_parkme+0x19e/0x250 [ 514.014636][ T31] ? __pfx_watchdog+0x10/0x10 [ 514.014670][ T31] kthread+0x3c5/0x780 [ 514.014695][ T31] ? __pfx_kthread+0x10/0x10 [ 514.014722][ T31] ? rcu_is_watching+0x12/0xc0 [ 514.014753][ T31] ? __pfx_kthread+0x10/0x10 [ 514.014779][ T31] ret_from_fork+0x983/0xb10 [ 514.014805][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 514.014833][ T31] ? __switch_to+0x7af/0x10d0 [ 514.014863][ T31] ? __pfx_kthread+0x10/0x10 [ 514.014889][ T31] ret_from_fork_asm+0x1a/0x30 [ 514.014939][ T31] [ 514.701698][ T31] Kernel Offset: disabled [ 514.706020][ T31] Rebooting in 86400 seconds..