last executing test programs: 1m56.865017749s ago: executing program 0 (id=376): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0x3, 0x4020aea5, 0x38) r1 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x8, 0x1, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd) syz_clone3(&(0x7f0000000280)={0x1e02c856826e0653, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) io_uring_setup$auto(0x400000, &(0x7f0000000080)={0x2, 0x6, 0x9, 0x7, 0x1, 0x3ff, r1, [0x5, 0x4f, 0xf5], {0x5, 0x8, 0x8, 0x6, 0x3b54d8ec, 0x1, 0xfffff800, 0xfffffff9, 0x8a9}, {0xce89, 0xfffffff8, 0x4, 0x8, 0x1, 0x80000001, 0x7, 0x3, 0xffffffffffff44ca}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) ioctl$auto(0x3, 0x4020aea5, 0x38) (async) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x8, 0x1, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd) (async) syz_clone3(&(0x7f0000000280)={0x1e02c856826e0653, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) io_uring_setup$auto(0x400000, &(0x7f0000000080)={0x2, 0x6, 0x9, 0x7, 0x1, 0x3ff, r1, [0x5, 0x4f, 0xf5], {0x5, 0x8, 0x8, 0x6, 0x3b54d8ec, 0x1, 0xfffff800, 0xfffffff9, 0x8a9}, {0xce89, 0xfffffff8, 0x4, 0x8, 0x1, 0x80000001, 0x7, 0x3, 0xffffffffffff44ca}}) (async) 1m55.406136579s ago: executing program 0 (id=381): r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = pipe$auto(&(0x7f0000000000)=r0) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x407, 0xffffffff, 0xd29e, 0x47, 0x1, 0x1007182, 0x2, 0xa, 0x6, 0x7, 0x88, 0x8, 0x4, 0x200000000001, 0x3, 0xfffffffffffffffa, 0x4ffffffffffffff, 0x0, 0x30, 0x0, 0x862, 0xe, 0x0, 0x9, 0x4, 0x83, 0xfffffffffffffffc, 0x0, 0x0, 0x80000000, 0x0, [0x0, 0x0, 0x0, 0x71, 0x0, 0x40000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x2000000000000, 0x0, 0x20000, 0x0, 0xf, 0x20000000, 0xe56, 0x0, 0x0, 0x7, 0x1000040000, 0x20000008, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, 0x9, 0x0, 0x3, 0xfffffffffffffffc, 0x3]}, 0x7, 0x49) mmap$auto(0x8001, 0x100000400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x80200, 0x0) ioctl$auto_OTPGETREGIONINFO(r4, 0x400c4d0f, 0x0) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=r2, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r1, 0x0, 0xe6e) r6 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r6, 0x0, 0x2) inotify_add_watch$auto(r6, 0x0, 0x20000e6e) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'team_slave_0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01bd0bff45c32e92e28582b5a01ffd38032e", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pim6reg1\x00'}) 1m54.875266182s ago: executing program 0 (id=383): bpf$auto(0x18, &(0x7f0000000040)=@test={0xffffffffffffffff, 0xb, 0x8, 0x11, 0x6, 0xffff, 0x81, 0x3, 0x1000000, 0x0, 0xa13f, 0xb, 0x1, 0xfffff7ff, 0x7}, 0x93) sendmsg$auto_NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x440d1}, 0x4084) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000200)="c74418b505348957f02b87eb0234b7eb1ade525a9a72d8e865dd0588287029c1b0ea5e16ed394c6bb178e8478115e108a68b961576d702d5b2d658dfca02067ad04179fbe7bc9c75d7569d4a15c5e348a2404f0770c8c08794a6010d926d54d365f479d4bb865457b43040688a803a39cfe21590baf22abcb18e4c6f35", 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000180)='/dev/binderfs/binder0\x00', 0x200, 0x0) 1m54.481379519s ago: executing program 0 (id=387): close_range$auto(0x2, 0x8, 0x0) 1m54.191301006s ago: executing program 0 (id=389): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00eeffb00f88b498f506c86f87e95a52aea35d06000000000000002e3aa5e80c556fe244bdeb0eb05172ac9f337ab24912a1235b2d8888d7196e760fdcc9844618ef6e975d9590b9ea9b8ddf78c0f439cf50d9c5ac3d3b8b08ad77da00ebb8eb12a361153106c20317a8af9b6b6db853df2458ba8c520b628e0cf8595952bbb6a7", @ANYRES16=r0, @ANYBLOB="080402000000ffdbdf25170000000800a10002000000"], 0x1c}}, 0x4000084) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon12\x00', 0xd0b000, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x100000011, r1, 0x0) r2 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/admmidi2\x00', 0x8001, 0x0) fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYRES16=r3, @ANYRES16=0x0, @ANYBLOB="00022cbd7000efdbdf250f00000008001d00", @ANYRESHEX=r3, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x20048124}, 0xc000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0xffffffff7fffffff, 0x2000b, 0x0, 0xeb1, 0x401, 0x7fff) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40001) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r5) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r6, @ANYRES16=r6, @ANYRES64=0x0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$auto_SO_PEEK_OFF(r7, 0x0, 0x2a, 0x0, 0x6) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="000000000000000b0100000000"], 0xa8}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r2, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r2, 0x2, 0x9193) 1m53.509709338s ago: executing program 0 (id=391): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mmap$auto(0x8, 0x2000a, 0x4, 0x7f, 0x401, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x592500, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x0, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x20000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) semctl$auto(0x3, 0x6, 0xa, 0x9) mmap$auto(0x3, 0x2020009, 0x4, 0x800000000eb1, 0xffffffffffffffff, 0x3) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r2, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x0, 0x7d, 0x1, 0x4000000009b72, r2, 0x8000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, 0x0, 0x0) (async) write$auto_tomoyo_operations_securityfs_if(r3, 0x0, 0x0) open(0x0, 0x0, 0x4c7) (async) r4 = open(0x0, 0x0, 0x4c7) getdents$auto(r4, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) close_range$auto(r2, 0x8, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0xffffffffffffffff, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f6) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0xffffffffffffffff, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) 1m38.220929871s ago: executing program 32 (id=391): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mmap$auto(0x8, 0x2000a, 0x4, 0x7f, 0x401, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x592500, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x0, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x20000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) semctl$auto(0x3, 0x6, 0xa, 0x9) mmap$auto(0x3, 0x2020009, 0x4, 0x800000000eb1, 0xffffffffffffffff, 0x3) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r2, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x0, 0x7d, 0x1, 0x4000000009b72, r2, 0x8000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, 0x0, 0x0) (async) write$auto_tomoyo_operations_securityfs_if(r3, 0x0, 0x0) open(0x0, 0x0, 0x4c7) (async) r4 = open(0x0, 0x0, 0x4c7) getdents$auto(r4, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) close_range$auto(r2, 0x8, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0xffffffffffffffff, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f6) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0xffffffffffffffff, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) 34.092092101s ago: executing program 2 (id=669): process_vm_readv$auto(0x0, &(0x7f0000000080)={&(0x7f0000000040), 0x5994}, 0xf, &(0x7f0000000180)={&(0x7f00000000c0)="11064136c50f34f81996c0dbe0d86688e0613c96c8d99c3a49d420d630eb847ad9326dc483ed1f251e33d8a7ea78baa2733f5266de80b90fec1dfbd49a7e6142217dbfb9c3c291925cde2c4aa14ec02e3bdcbaba417b111c739d539ab7a63aab3b48187c290cc084130852352303e05385019d32d59f67e55e93be5c3d84bdd5da2634ca2020ecdb9eb6d0415a1a606f6a6f03b675c82d5fdc2ade837f267f06c75947cdc3c9aba297dafd1c74fc937bd238", 0x6}, 0x1, 0x5) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) close_range$auto(0x2, 0x8, 0x0) 33.64060563s ago: executing program 2 (id=672): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/i8042/serio0/bind_mode\x00', 0xe3102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x68140, 0x0) timer_settime$auto(0x4, 0x5, &(0x7f00000000c0)={{0x8, 0x10004}, {0x809, 0x11}}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) 33.130048755s ago: executing program 2 (id=674): socket(0xf, 0x3, 0x2) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x400000000, 0x6, 0xdf, 0x9b76, 0x2, 0x72) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x6a) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x1000000000000006, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x48101, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) r1 = socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0x1000fe, 0x6fb3, 0x8a, 0x4, 0xffffffffffffffff, [0x100, 0x3, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0x4, 0xf08a2b3}, {0x8, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0xfffffff7) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) close_range$auto(0x2, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf25030000000400081908"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 32.292260624s ago: executing program 2 (id=678): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e22, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_MPATH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x4000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') pivot_root$auto(&(0x7f0000000040)='..\x00', 0x0) setsockopt$auto(0x3, 0x86, 0x800017, 0x0, 0x70ed581b) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4, 0x7ff) ptrace$auto_PTRACE_OLDSETOPTIONS(0x4212, r6, 0x7ffffffe, 0xf) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/dev_snmp6/tunl0\x00', 0x800000, 0x0) getsockopt$auto_SO_TYPE(r7, 0x4, 0x3, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0x5) 31.492849204s ago: executing program 2 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) msgctl$auto_MSG_STAT_ANY(0x8, 0xd, &(0x7f0000000140)={{0xa0, 0x0, 0xee00, 0x4, 0x5, 0xfffffffe, 0x3}, &(0x7f00000000c0)=0x7f, &(0x7f0000000100)=0x4, 0xfffffffffffff997, 0x9, 0x1f2, 0x8, 0x7fffffffffffffff, 0x1, 0x101, 0x100, @inferred=0xffffffffffffffff, @raw}) r3 = gettid() waitid$auto_P_PIDFD(0x3, r0, &(0x7f0000000200)={@siginfo_0_0={0x9, 0x9, 0x10, @_timer={0x0, 0x5, @sival_ptr=&(0x7f00000001c0)="eb3a6fa44ed27b44a743bfd6e7726c728b85410999d86ebe8662d7bcc0290f4e51a9fe4011f52a74c7d351d3"}}}, 0x10001, &(0x7f0000000280)={{0x1, 0xe}, {0x8, 0xffffffffffff0001}, 0x9, 0x5, 0x4, 0x8000000000000000, 0x8000000000000001, 0x2, 0x0, 0x49, 0x8, 0xff80, 0x1, 0x4, 0x2, 0x7fffffffffffffff}) msgctl$auto_IPC_STAT(0xdea2, 0x2, &(0x7f00000003c0)={{0x5, 0xee00, 0xffffffffffffffff, 0x8001, 0x4, 0x7fff, 0x6}, &(0x7f0000000340)=0x6, &(0x7f0000000380)=0x3, 0xfff, 0x1, 0x0, 0x3, 0x4, 0x40, 0xb86, 0x7c, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) (async) msgctl$auto_IPC_STAT(0xdea2, 0x2, &(0x7f00000003c0)={{0x5, 0xee00, 0xffffffffffffffff, 0x8001, 0x4, 0x7fff, 0x6}, &(0x7f0000000340)=0x6, &(0x7f0000000380)=0x3, 0xfff, 0x1, 0x0, 0x3, 0x4, 0x40, 0xb86, 0x7c, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) r6 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/ns/cgroup\x00', 0x400100, 0x0) setfsuid$auto(0xee01) (async) r7 = setfsuid$auto(0xee01) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, r7, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) (async) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, r7, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)={0x1b88, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x22a, 0x4, 0x0, 0x1, [@nested={0x24, 0x122, 0x0, 0x1, [@generic, @typed={0x14, 0x78, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x3e}]}, @typed={0x11, 0x101, 0x0, 0x0, @str='ovs_ct_limit\x00'}, @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@loopback}, @generic="a1c8113521578fa023f9664977439448cc35cdcf106b5d7d6f709d6dd25a9a386d3b406ee5432188164088053f3450b03f2c85190967f446a187d3f3a8fb88fd9a717fe2685972cf5d785a86af8006b2faa77a851a0a78300240b9eb0b464e31386fb49ba3d97ee5dba82343b4646bb58e009486d9382fba04fbe2d6d03d125044e2c312ca4cebf5b7c4fe80adf08ebfe421b095eca4332c4494d76e4c39771bff9b69d232fe1cecfe7c20033d1c7f19619bfe83c51999d2f58a663b0e919fab120d8949b357", @nested={0x10, 0xeb, 0x0, 0x1, [@nested={0x4, 0x42}, @nested={0x4, 0x96}, @nested={0x4, 0xef}]}, @nested={0x10f, 0x14, 0x0, 0x1, [@generic="40ecfc761f11ce85fdfd35d748773e5e8d3180a849017ab2199786b070673793b7277829c191e4e34bc58b0d11aaf59dfd5394c56bbbc30814efa9d307404fb518cc2b52297c537547c64aeb44b69f962efce1e8248b7ca0a49c9ed60265dad89616bdff5d42b69d", @generic="f673dccfdd3fab08064647db430020e435feec27934936120732d8828d3d7ffeecf4462580702722163e9a0bc6958ecd04059471bb6f4b375c300af0815be51348bf0a318edbd5261757602a5c3e7b17c3c790a6e1d76bc85ac1831ef8955d266c26c28b07a5a58347355ca57937", @generic="783f8cf27f7e266d347ac89c7e46a94437af9340d638266e77da531e479f95317a3890a23ab4c30c648307f312", @typed={0x6, 0x151, 0x0, 0x0, @str='%\x00'}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@typed={0x2f, 0x7c, 0x0, 0x0, @binary="0b587917c9908041a0f5dd5c911aa07c3c480c0c9f31acc9275569dc0361740cd5513dc99577ab3f8e520d"}, @generic, @typed={0x4, 0x4a}]}, @TIPC_NLA_NODE={0x1433, 0x6, 0x0, 0x1, [@nested={0xdb, 0x9a, 0x0, 0x1, [@nested={0x4, 0xfb}, @generic="16616c3b3e207843896297213b4076d4df07d1e09d41ae7d0a98a2f8a6f37e95f306288bb514776e6af2b2e24a1569b15e26cd33ca517fbf1344dbb3fb39a94219233a067bf41296656b5ce09bbb4eb299590842f7ff9e57ea88475900a9906eef48dfad26301bb263a0d702201ffcc9c3da80b383e90a5bd5d48f41aad9700b461cb535b7540fbb9b4fc28f2a9ca1c607fd4854a63c41d775593126098bc719fd1fd27e105d4c7c16f00e1d1d7d760a76cbaec16827c0195e23c374b5b4512d36eec611decc8d76af2df4", @nested={0x4, 0x6d}, @nested={0x4, 0x2d}]}, @generic="dd790ef497f8fca3c678056c570d5f96", @generic="1cb351f8d9a6e898b758e335bdaa", @typed={0x8, 0x9c, 0x0, 0x0, @u32=0x4c87}, @nested={0x119d, 0xea, 0x0, 0x1, [@typed={0x8, 0x10d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x153, 0x0, 0x0, @pid=r3}, @generic="854e4e68776fc67a00c6e165c73f1e3cf34d731ee19f66eac0d1e1f3a17ae1dd0b9a8be412c4e082ed2bef6c0717eb2209e346dc982c7b84f51045ae2231feec73240ae0ade2e65bbc8f8ecc82c24af92a98110b03ddcba3832489e5bafcbcb4ba025d54a8fef83fcc9b9ec7d4fbf1c26768ffa18107413abb92771cd2ca38ff13b5c813351cc95e7043fedf12b9fba848301dda6af0adbdbd284717ae93617af1835de66ed7f016da2d04f90fe21379", @nested={0x4, 0x4e}, @typed={0x4, 0x7d}, @typed={0x14, 0x94, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x4e, 0x0, 0x0, @u32=0x9}, @generic="025b062cb8dfe16cbd3e10118eb7ad8b0a502b938a6147a653c8aa408eda75dafdd8d58266eb9016f57a5f1cf96dd5e45c3225657f0388955009599ca31bf75d53d907aa3f64dc63d2d8245da02629154a310f5d0f5f3bee2f92e7e0d6ab01fcd5ca58f5b61b0a7f05cd6fa21690375cf1b192d8d7be4127b5406c7a8645a8e183bf97346e86475f04d3cdcf0d457737df420d789c2053b13da390fc4bbc13bd98d23547685c05540d92228f96", @generic="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"]}, @generic="351de3834bc028aee70ddda22e03efdff6f82b81cd667ab54d013e2ac20114272f24bd72983a48cd7680456e55f5b3711d952639dfb8ae897d59fe831dad8d5edc25e355d2d7e277ac1340ec262ea5f95e08be57b4924179b2c7a4bf2fa47df08f37b55a954f42afd40b6c4666", @nested={0xf1, 0x31, 0x0, 0x1, [@nested={0x4, 0xe1}, @nested={0x4, 0x1d}, @typed={0x8, 0x87, 0x0, 0x0, @pid=r4}, @typed={0x8, 0xfe, 0x0, 0x0, @fd=r0}, @typed={0x9, 0x13d, 0x0, 0x0, @str=',%[\xa8\x00'}, @typed={0x3f, 0xc9, 0x0, 0x0, @binary="034352eed5eb27e33fd9897868a74f14f2ce04ec44bcda38b6ece08e613ca43a781377a600be450b56aa5fd88dfe6807e818461174d57f46d1e1cf"}, @generic="7a8823b4fc1c817a891ea63ce759b7da9a06afd953f4ffcfea9e8b8ef316f1944e82fe9f234d985ea72eff151c02992805ec42a8350f193d3204cdcf504a0e26e4efdb25de2d47d15b168ce24d8425be65f607eb0560dafdd7597517f50668206bd64912c2ed7addf23827ba8946e05273140f514ccfaf18e363402c86713d2f2a", @typed={0x8, 0x131, 0x0, 0x0, @fd=r0}]}, @generic="50c2a12c4dcb655e0051d22b11062a8d90ef0f83eccad325e760f1ca894ea2bbafdf3300033ca6c43dadcd95"]}, @TIPC_NLA_LINK={0x158, 0x4, 0x0, 0x1, [@generic="e6a1c9cad50bfd623d220b9d5e6980e2c2f63605c78374f847a0dccebb69ee79a3120e335a9aacf8d0c809e77a700daf16d903557e8da0bc42ae965323aa8ab218484d63ba819a70434f4a8d1d26f57a7087e2f78febb32226d3e8bf28d946e22c8b8907888d4798b350af4f93df27ff86f6cdcb5a5a5b9340897bb638f964c380ab622aa664040de310da1595837c1a4da0bed0a2246c982bd8818c2c0ff9b36b96dfd7efb2c6922fb928f21103fe6f", @nested={0x7d, 0x6a, 0x0, 0x1, [@generic="90092cc5b679e5bbb93dcf9dbc6cdf2409d293a25286f0efc500b52ced0a4455078b42caf882f78aa03c689a061878e6a087987fd8ef0979dccdd344bca4613b44979747fe39722d692ea4e0725dc808d79246c2957752cf8e8a619bb62346c8e6b7747bb93b1a8952bb0f122f61ad81e4d062b28a48d91a77"]}, @nested={0x10, 0x129, 0x0, 0x1, [@typed={0x8, 0x157, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x14f}]}, @typed={0xc, 0x83, 0x0, 0x0, @u64=0x697}, @typed={0x8, 0xb7, 0x0, 0x0, @fd=r6}]}, @TIPC_NLA_LINK={0x381, 0x4, 0x0, 0x1, [@generic="25b7d0b3b3871347b02a617a9fb4db6bd40bb8a709db52a5ddd0dd5d3fca976074beed947318a958a0c984a07989a38e3a23358c3b12d4e0e69f541bff01d81dc42b7cd5cc737a4d3b4dc2fa8a2c2ecbebc9f31aa7b5e0023f09784ffa8245c858c100ced0839f35e228c63aeeb60dbb9c252203e0d40d89da3345d1ef476058bbd6231942cbdea24d4cab63b40159d41d842270a521fbc031e38ee015ad92d7ff29cee194e2fd27916f8d1beb6c", @generic="24db869adaafc70e0b70daffad603578fa66c37ded2a67a9e89c6bd3d6765938c68eea2d79a904e5eba31d715a700859d993855d9a86b333b29d26e37461b6be9f6b659f5d6a6118ab3831cffe316d37b7bf06549dab8b717ed71112d06022315a504a44bcb4d8fe2a101c33dc83782841eaddb1dc6ef4f864c0cc", @nested={0x1db, 0x5d, 0x0, 0x1, [@nested={0x4, 0x9b}, @nested={0x4, 0x12}, @typed={0x8, 0x21, 0x0, 0x0, @uid=r7}, @generic="b284500588c500b2157a14f7ec6109d2e3f64dc7dde4", @typed={0x7, 0xb4, 0x0, 0x0, @str='UJ\x00'}, @generic="e4661ff03a525f16d8f35e4bcb8104902113fdf073a79743a58f8dda2a3361104d5d6b7e8272a37b67974748bb14867a47869869ba25db724be90a625879b4964b066641e602098b282578274ad5c1f8c0778b9fd4eacf749b825ab6e2895aef946c1f1160145b41b5fe27457052d54701c6293ca4687aa0c2fa4b302dfc0c508c14398c57c6a88a78fb17f42649a99d6dbe2b77b645936d0f97dca9c223cb3e624ba5054198634d4e708d", @generic="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"]}, @typed={0x4, 0x159}, @generic="7b930990c51983c821f07b2ab8590640095f9417607472da10748c0fff260c8c4e432f896d4f93d164aa20d4c067edf1d2e9da6e23c1851ea3107efff6e6f56d31df9fc6a896a14d2a6e69ec9899c8610497c5280d8da8a34d4eff5bc6f9d3a6e08e40c36f5f5c4a", @typed={0xb, 0x82, 0x0, 0x0, @str='^)]+\\\xb0\x00'}]}]}, 0x1b88}, 0x1, 0x0, 0x0, 0x2404c404}, 0x4800) r8 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000a00)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x2f, 0x0, 0x1, [@nested={0x4, 0xf7}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) 30.487804155s ago: executing program 2 (id=687): socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="18000000", @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r1, &(0x7f0000000000)='-\x00', 0x30) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11RTSSuccessCount\x00', 0x800, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x84) r5 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000180), r4) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x3b0, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4}, @NLBL_CIPSOV4_A_MLSLVL={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0xa4}]}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4}, @NLBL_CIPSOV4_A_MLSCAT={0x379, 0xb, 0x0, 0x1, [@nested={0xed, 0x54, 0x0, 0x1, [@generic="c59492b8140338fc96668b8962b60a2c1b2c3915f2819ae1f209e0d34d8087b768d08f3d70681b62f2b182932ee7471b82054d707b2c2e78adb1e1e8b68a4a355bfab256fcda4490437a208de344641d0ae1b8cea697aae2c4093d6645bfd09d3e2ce25452e57ca1e747006b83cddc0d9b8e1d2a899728d870bdecd9d3bb5d1d264687d661550ff383f6481975c28fc1848447cf55d4338c68ece658dcd306d6cb5f4c6caaaf7430fd6ad8e42ec49424417dee25b7cc4b55f94addfa69c3af0e243409d5d44a6eb01c8fce0ff2872a26be0abc61f5cd6647c49ef761617d62c8d1b57234bef0658a7c"]}, @typed={0xc, 0xbd, 0x0, 0x0, @u64=0x5}, @generic="de11a9d8ca9a5b677adeedc536e97b8ff8815c51b22adaf5d838c7d11f1228ac0f203c0aab5130d702e94bef9f5b83f4acf778ba12a143100d1c5bc28178bd349e606afbf84b30a87c0ad677c3c7a8abc0ab982727338195450a68d4cd118500ec1459eb65be3893", @generic="9e43c1f484e62390f6ab6ab5b8515ae566c7", @generic="4bb5d8af2baabd94de14e3384654cb72d10e54934e45e1daffdb45aa10445ab0c4724738889dd76bac362c8287613285ee6a4cdc76614ed74700c0b7c9e6877d8322c3b6ae00213cab74ed806276863fb41f6f3056920719562cffc082f09c32ef68dd962f9b6314cc59d0e49639adac30fae6b87e410d3b29097ef8e566d582026eb4f71b2fa610d8f3d3e8af7ad49902595e1fb7eef233590ed7d19de1e41616df157732ab91774d3c7d41efc76ac10a7b47a955e946a8a2fe9170e50a3f7498c1f1b47996da", @generic="87ac1491d9c012bd7ae0347b637d21d6a3fd5eec369270553d503c2a6b7e2bab96f236841cb11c194e6fdde7581a850dcfe6ecc348abecb7b2ce66148517aa03dc7994aec148495002482b57d935418ff5cceed09f01cecbc0aa8f2889721d79fcd28d55a977baa52b16de1f48ba", @typed={0x4, 0x65}, @generic="8e012c3b96c294191240ee404528f9ad6961c7531ed3a365faa74691aca2fa9c4d75183645805db774b0adeb03ceef7db83f28c16a3f83788f4753632db53e3893e16326a9fbf9c3805dd9afe77afb0922d1cd527329e3bd376333f4025ca34fe9dce7c3240c0bd4219b776dff11d93bec33dfa36c2a3292c0ed7c67454fd1246b1c7ceb5ba4cc63e4febd7ad25c57cbabc2ca991bf9b7d2bc96457b8fe3dd5c0e9bd9e7da7b2e14cda6f07b161f43b7f37db5045f302bd25824f9c00dbe", @typed={0x8, 0x32, 0x0, 0x0, @fd=r3}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000081) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x97af}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x400c050) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 29.750544518s ago: executing program 33 (id=687): socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="18000000", @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r1, &(0x7f0000000000)='-\x00', 0x30) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11RTSSuccessCount\x00', 0x800, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x84) r5 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000180), r4) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x3b0, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4}, @NLBL_CIPSOV4_A_MLSLVL={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0xa4}]}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4}, @NLBL_CIPSOV4_A_MLSCAT={0x379, 0xb, 0x0, 0x1, [@nested={0xed, 0x54, 0x0, 0x1, [@generic="c59492b8140338fc96668b8962b60a2c1b2c3915f2819ae1f209e0d34d8087b768d08f3d70681b62f2b182932ee7471b82054d707b2c2e78adb1e1e8b68a4a355bfab256fcda4490437a208de344641d0ae1b8cea697aae2c4093d6645bfd09d3e2ce25452e57ca1e747006b83cddc0d9b8e1d2a899728d870bdecd9d3bb5d1d264687d661550ff383f6481975c28fc1848447cf55d4338c68ece658dcd306d6cb5f4c6caaaf7430fd6ad8e42ec49424417dee25b7cc4b55f94addfa69c3af0e243409d5d44a6eb01c8fce0ff2872a26be0abc61f5cd6647c49ef761617d62c8d1b57234bef0658a7c"]}, @typed={0xc, 0xbd, 0x0, 0x0, @u64=0x5}, @generic="de11a9d8ca9a5b677adeedc536e97b8ff8815c51b22adaf5d838c7d11f1228ac0f203c0aab5130d702e94bef9f5b83f4acf778ba12a143100d1c5bc28178bd349e606afbf84b30a87c0ad677c3c7a8abc0ab982727338195450a68d4cd118500ec1459eb65be3893", @generic="9e43c1f484e62390f6ab6ab5b8515ae566c7", @generic="4bb5d8af2baabd94de14e3384654cb72d10e54934e45e1daffdb45aa10445ab0c4724738889dd76bac362c8287613285ee6a4cdc76614ed74700c0b7c9e6877d8322c3b6ae00213cab74ed806276863fb41f6f3056920719562cffc082f09c32ef68dd962f9b6314cc59d0e49639adac30fae6b87e410d3b29097ef8e566d582026eb4f71b2fa610d8f3d3e8af7ad49902595e1fb7eef233590ed7d19de1e41616df157732ab91774d3c7d41efc76ac10a7b47a955e946a8a2fe9170e50a3f7498c1f1b47996da", @generic="87ac1491d9c012bd7ae0347b637d21d6a3fd5eec369270553d503c2a6b7e2bab96f236841cb11c194e6fdde7581a850dcfe6ecc348abecb7b2ce66148517aa03dc7994aec148495002482b57d935418ff5cceed09f01cecbc0aa8f2889721d79fcd28d55a977baa52b16de1f48ba", @typed={0x4, 0x65}, @generic="8e012c3b96c294191240ee404528f9ad6961c7531ed3a365faa74691aca2fa9c4d75183645805db774b0adeb03ceef7db83f28c16a3f83788f4753632db53e3893e16326a9fbf9c3805dd9afe77afb0922d1cd527329e3bd376333f4025ca34fe9dce7c3240c0bd4219b776dff11d93bec33dfa36c2a3292c0ed7c67454fd1246b1c7ceb5ba4cc63e4febd7ad25c57cbabc2ca991bf9b7d2bc96457b8fe3dd5c0e9bd9e7da7b2e14cda6f07b161f43b7f37db5045f302bd25824f9c00dbe", @typed={0x8, 0x32, 0x0, 0x0, @fd=r3}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000081) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x97af}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x400c050) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 9.528376614s ago: executing program 3 (id=745): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x29, 0x2, 0x0) recvfrom$auto(0xffffffffffffffff, &(0x7f0000000180)="2512683702c78aa366adde5483233ba62b5f1b0aa86d8137bc9e30cb56cbc69805ea2abbfb20dbed8e619f86d21290031ad3ff89dccea2abedcc8754725987450ef20d0111117f0b641631eecdaa6e7b0de194b5487fa6496ac851c8ba202961d0048e96c98298407192a22aab433167b74e190835b5c5f049a17f4e1b0e2c0bdb7c72dd3279a7eb42e48f26ecf8f7daee9d38c811405c0fe91bfeca6449723bebfc04628d49189a73f80d8a642a2306139006bea83b064b4d02f8ed5fb5e31b98", 0x100, 0xc0a, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x805aa, 0x0, 0x9c90, 0x0, 0x7, 0x80001083}, 0x5}, 0xaf2, 0x100) r1 = socketcall$auto(0x5, &(0x7f0000000080)=0x2000000) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r1, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="2bb22bbd7000fcdbfa2506"], 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x80003, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ubi/version\x00', 0x400, 0x0) sysfs$auto(0x2, 0x1b, 0x0) fsopen$auto(0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x5, 0x2, 0x1, 0x948b, 0x7, 0x15f4da0e, 0x4, 0x3, 0x11000000, 0x300000000000000, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffc]}, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = socket(0x2, 0x3, 0x9) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r4 = socket(0x11, 0x80003, 0x3ff) setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004) sendmmsg$auto(r3, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3) setresuid$auto(0x0, 0x2, 0x0) ioctl$auto(r0, 0x8993, 0x24) 9.502103631s ago: executing program 1 (id=746): mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) r0 = socket(0x2, 0x3, 0xd) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) pipe2$auto(&(0x7f0000000200), 0xfffffff1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0a000100bbbbbbbbbbbb0000"], 0x28}, 0x1, 0x0, 0x0, 0x240008c5}, 0x4054) r4 = prctl$auto(0x3b, 0x5, 0x0, 0x9, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x2000b, 0xffffffffffffffff, 0xeb1, r0, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0x7fffffff, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'nr0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) 8.781872591s ago: executing program 3 (id=748): mmap$auto(0x0, 0x202000d, 0x3, 0x20000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x181000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 7.973546838s ago: executing program 1 (id=751): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000180)={0x2000000000100d, 0x7, 0x1, 0x200000000010000, 0xe11b, 0x8000000000000000, 0x9a1, 0x2, 0x12006, 0x1ff, 0x5185}, 0xfffffffffffffa81) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = open(0x0, 0x261c2, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r5, r4, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x67f, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x80000001}, 0x2) bpf$auto(0x1, &(0x7f0000000380)=@raw_tracepoint={0x5, r3, 0x0, 0x6}, 0xc) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) 6.479287779s ago: executing program 5 (id=752): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x0, 0xdfffffffffffffff, 0x69c9, 0x0, 0x400) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="df250c000000"], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x6) write$auto(0xffffffffffffffff, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 4.595072284s ago: executing program 3 (id=753): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/7/wakeup\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/72, 0x48) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x6600, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4, 0xe3, 0x9b71, 0x7, 0x28000) close_range$auto(0x0, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0) socket(0xa, 0x2, 0x3a) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x10003b, 0x1fb, 0x4, 0xc, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/msr/msr1/power/runtime_suspended_time\x00', 0x100, 0x0) unshare$auto(0x40000080) pread64$auto(r4, 0x0, 0x8, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(r1, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/002/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000040)=0x1) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video27\x00', 0xac9b743b0797eac3, 0x0) ioctl$auto(r6, 0xae41, r5) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x4, 0x100000) ioctl$auto_USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000100)=0xfffffffd) setsockopt$auto_SO_PASSSEC(r6, 0x4, 0x22, &(0x7f0000000180)='-/[\'3@)!,\x92\x00', 0x2) 3.882101846s ago: executing program 1 (id=755): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) (async) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0xfffffffffffffff9, 0x2, 0x9000000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x7000000000000, 0x8, 0x2, 0x7fff, 0x9, 0x5, 0x1, 0x1, 0xa}) (async) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x2c, 0xee01, 0xb67, 0x6}) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) (async) r3 = clone$auto(0x7f, 0x4, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x5, 0x8000000000000000) shmctl$auto(0xd64c, 0x7f, &(0x7f0000000380)={{0x3, r0, r1, 0x8, 0x71, 0xffffa191, 0xfffb}, 0xfffffff1, 0x7, 0xb2, 0x2, @inferred=r2, @inferred=r3, 0x8, 0x0, &(0x7f0000000240)="9fdc01b41ad753e9d840127391df690d55befa6044fcad29207637d1f7f321de24ca14bccbdd260b2952f63bdbab0fa7bca9a75c", &(0x7f0000000280)="49bedb43e023ae854982fdf78362deec4e530606ff9d88284cc3f6c30743450d992704a970397bad2779759bd26545a8513f996bfcbf40b2632e00e1323c5b3a5d4b8d2974ae1739d3aa5e72740c15f295caff6735f88a254cb2d5fbfc5ce3273b3c8f4549c957a101ccfe69ffdeb088ed2e4739da37a88afe11a5895179fd707e115787b6165a920d5c6db9d6a81c2e02528c87c74fe7b97c189e"}) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) open$auto(&(0x7f0000000340)='./file0\x00', 0x8, 0x800) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000002980)=""/4075, 0xfeb) (async) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000) (async) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r5, 0x40084d02, r5) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) (async) rt_sigqueueinfo$auto(r2, 0x9, &(0x7f0000000500)={@_si_pad}) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000640)={@sival_ptr=&(0x7f0000000440)="f4fde0007d439a9cc2ea169e7a55852fe0f3d845267dafe6ff99fc8be22ed068ff0b0d87ec0a757041110a", @raw=0xc6, 0x7, @_sigev_thread={&(0x7f00000004c0)=&(0x7f0000000480)=0x7f, &(0x7f0000000580)="753ac5015fcf7bc39fba29650d0fce91cd0ad393913cf96a779f05c013badad3517c35bac1af92e2a8ecabd8ed2ad3a68aad52ef81e3b466d6892303949e7daeb34aae9ae9ccc8fef487a61e0e44f4afd45f9d26119d4c4286c9745f7c96beb3a42e78e4ac1bf2f93185de6ba5c594d425737a0806ed66e4ef875b21cd5ebcfc6bd0a96d"}}, &(0x7f0000000680)=0x6a98) write$auto(0x3, 0x0, 0xfffffdef) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r6) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000800)={&(0x7f00000006c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r8, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2}, @NL80211_ATTR_MESH_ID={0x1a, 0x18, "eb56d093b6308695629ba7fed5d5834931c0463ce6fc"}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xaa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x26ea}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xc2d}]}, 0x68}, 0x1, 0x0, 0x0, 0x2400c810}, 0x800) (async) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r9, 0x4, 0x7ff) (async) ptrace$auto_PTRACE_OLDSETOPTIONS(0x4212, r9, 0x7ffffffe, 0xf) (async) shutdown$auto(0x200000003, 0x2) 3.765603961s ago: executing program 5 (id=756): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x480c1, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xffffffff, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000001c, 0x4000005, 0x0, 0x400000000009, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptypb\x00', 0x804, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x8001, 0x1, 0x9, 0x5, 0x8, 0x40000000000000, 0x3, 0x8000000008, 0xfffffffffffffffa, 0xab, 0x2, 0x9]}, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/loadavg\x00', 0x503000, 0x0) close_range$auto(0x2, r1, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) fchmod$auto(r0, 0x5) 2.812153946s ago: executing program 4 (id=758): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x1003, @remote}, 0x6a) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b00)=""/4077, 0xffd0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x7, 0x10000006, 0x48}) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) syz_clone(0xac2e6400, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) adjtimex$auto(0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8, 0x0) 2.695576967s ago: executing program 1 (id=759): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x81) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r3 = ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)) r4 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000040)="deb07ae72d70adf76ba3cce2d9e107e81a", 0x11) close_range$auto(r3, r4, 0x0) 2.630038421s ago: executing program 5 (id=760): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x40001, 0x7, 0xf, 0x5, 0x207f93, 0xfffffffe, 0x4, 0x2, 0x7, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd700002b55e2510000000180001801400020076657468315f746f5f7465616d0000000800110001040000"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80014) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf25010000000800010600000001080001000a"], 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x800) futex_waitv$auto(&(0x7f0000000000)={0xf, 0xffffffffffffeffe, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x4d) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ueagle_atm/parameters/sync_wait\x00', 0x562142, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(r1, 0x0, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x50000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x7, 0x1, 0x0, 0x1, 0x0) cachestat$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) r3 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x0, 0x10, 0x7f5) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES8=0x0, @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40014) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000100), r1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x4, 0x8402000d, 0x100000001, 0x13, r3, 0xe849) close_range$auto(r3, 0xffffffffffffffff, 0xffffffff) 2.425947769s ago: executing program 5 (id=761): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) mmap$auto(0x7, 0x400008, 0xdf, 0x91, 0x7, 0x800008000) socket(0xa, 0x3, 0x3a) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) io_uring_setup$auto(0x2, 0x0) lseek$auto(0xffffffffffffffff, 0x9, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) unshare$auto(0x40000080) pread64$auto(0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0xffff, 0xb2) close_range$auto(0x2, 0x8, 0x0) 2.387116557s ago: executing program 3 (id=762): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.0/usb10/power/wakeup_active\x00', 0x20b42, 0x0) sendmsg$auto_VDPA_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480cd}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0xfffffffb, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000000), 0xc2f, &(0x7f0000000100)={&(0x7f0000000080)="1e4306002c53", 0x807f}, 0x40000005, 0x0, 0xb, 0x107f}, 0x5}, 0x3, 0x100) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r1, 0x0, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0xe1, 0x80000011, 0x7, 0x28000) close_range$auto(r2, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="d71544400010", @ANYRES16=r0, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000c80080006800111e15812000100898771f1c19f17790485908286dd000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) r4 = socket$nl_generic(0x10, 0x3, 0x10) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x202000d, 0x10000000000000a, 0xeb1, r1, 0x8000) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0xffffffffffffffff, 0x26, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x1, 0x6, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1c/sub7/sw_params\x00', 0x280c60, 0x0) pread64$auto(r4, 0x0, 0x5, 0x2000000000006573) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 2.099943341s ago: executing program 4 (id=763): io_uring_register$auto_IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, &(0x7f0000000000)="a4ec1eb01b347d19f184c00e80e154cb83715e8bb16aba0c291284067cbc6e6b695ce8330fd9f0871f5bed616cb7737deada6f93e9beb5ca3ee9e84f06b49b29abd5193df9998d231f2f3a093ce972cb979d828b8ea7cb07b47eca27ce4357916d495df98a103c0fd582d7", 0x8) r0 = bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000080)=@bpf_attr_0={0x3bb2657, 0xb, 0x8, 0x3, 0x9, 0xffffffffffffffff, 0x367f, "d3b400ae484b5480c92ab4896e298ebf", 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1ff, 0x7fffffff, 0xffffffffffffffff, 0xffffffffffffffff}, 0x4f6c) write$auto(r1, &(0x7f0000000140)='(\'\'&@^\x00', 0x3) ioctl$auto_XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000180)={r2, 0x3}) write$auto(r5, &(0x7f00000001c0)='(\'\'&@^\x00', 0xffffffffbf5507bc) r6 = fcntl$auto_F_UNLCK(r0, 0x80000001, 0x2) write$auto(r6, &(0x7f0000000200)='(\'\'&@^\x00', 0x8001) (async) write$auto(r6, &(0x7f0000000200)='(\'\'&@^\x00', 0x8001) ioctl$auto_BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000240)={0xff, 0xfffffffffffffff8, @status={0x5, 0x9, 0x4, 0x2, 0x9, 0x7}, [0x0, 0x4, 0x1, 0x2, 0xc, 0x1, 0xf9e4, 0x0, 0x3, 0x84, 0xf0e, 0x2, 0xc, 0x8, 0x4, 0x400, 0x3, 0x9, 0x8, 0x7fffffff, 0x80, 0x6, 0x80000000, 0x1ff, 0x9, 0xa8d, 0xffffffffffffffff, 0x8, 0x7f, 0xfffffffffffffffa, 0x7, 0xb, 0xfffffffffffff000, 0x1, 0x6, 0x1000, 0x3, 0x1ff, 0x9, 0x4, 0x8000000000000000, 0x1, 0x101, 0x10001, 0x7, 0x8, 0xff, 0xc, 0x2, 0x4, 0x5, 0x0, 0x7f, 0xffffffffffff8000, 0xff, 0x6, 0x6, 0x9, 0x8, 0x4, 0x1, 0x9, 0x3ff, 0x8000]}) pipe$auto(&(0x7f0000000cc0)=r6) (async) pipe$auto(&(0x7f0000000cc0)=r6) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000c80), r7) membarrier$auto(0xd53, 0x8000, 0x8) (async) membarrier$auto(0xd53, 0x8000, 0x8) ioctl$auto_FS_IOC_FSSETXATTR(r6, 0x401c5820, 0x0) (async) ioctl$auto_FS_IOC_FSSETXATTR(r6, 0x401c5820, 0x0) read$auto_evm_key_ops_evm_secfs(r1, &(0x7f0000000d00)=""/143, 0x8f) read$auto_proc_timers_operations_base(r3, &(0x7f0000000dc0)=""/112, 0x70) prctl$auto_PR_SET_MM_ENV_START(0x7, 0xa, 0x0, 0x1, 0x3) (async) r8 = prctl$auto_PR_SET_MM_ENV_START(0x7, 0xa, 0x0, 0x1, 0x3) read$auto_fops_u32_ro_(r8, &(0x7f0000000e40)=""/232, 0xe8) (async) read$auto_fops_u32_ro_(r8, &(0x7f0000000e40)=""/232, 0xe8) sendmsg$auto_NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x18, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000004}, 0x24000010) (async) sendmsg$auto_NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x18, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000004}, 0x24000010) membarrier$auto(0x5, 0xd0, 0xa) sendmsg$auto_SMC_NETLINK_GET_LINK_SMCR(r6, &(0x7f0000001080)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x24040840}, 0x4044011) getpriority$auto_PRIO_USER(0x2, 0xee01) membarrier$auto(0x8, 0x2, 0xa485) (async) membarrier$auto(0x8, 0x2, 0xa485) r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001100), r5) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001240), r1) ioctl$auto_XFS_IOC_ALLOCSP64(r4, 0x40305824, &(0x7f0000001280)={0x800, 0x3, 0x7, 0x11, 0x3, 0xffffffffffffffff}) (async) ioctl$auto_XFS_IOC_ALLOCSP64(r4, 0x40305824, &(0x7f0000001280)={0x800, 0x3, 0x7, 0x11, 0x3, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000025c0)={&(0x7f0000001200), 0xc, &(0x7f0000002580)={&(0x7f00000012c0)={0x1288, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}, @NL80211_ATTR_MLO_LINKS={0x126c, 0x138, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_ATTR_MPATH_NEXT_HOP={0xd7, 0x1a, "dcf4c7ba8350a45be0be3ae490d4a3804cb8175d5e801f927c2f651ecc598166d05904d9e098eb79ad0fc7de7907fcbaa545d44d05d5d7d5085616c9b8951a1af063e322e21a04ce2fc1133cc29bd632ceb440f5f321a3cffe3c6b5b4278831af8b9b138c90cf2931c9bb380a305c4f8ba5b449549a0c02c904e393f5d52aeb4f0fb258bd5998b10b450deeed5cabb51f3f6da8a69e3a162eb189a8527d01701160fd84d9cfcdd93593a218af7ec3ecb8891bd435027cbcdea95c52fccef2dc989fb7b31ed42d6d846c618dbddcecbd3677c1b"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, {0xf88, 0x0, 0x0, 0x1, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xa}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TID_CONFIG={0x90, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0xf7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xfc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0xff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x8}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xd3c, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x161, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x1}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x58d, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x634, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xc83}]}, @NL80211_ATTR_BEACON_HEAD={0x18e, 0xe, "0340d19e4732658a92b0cea796347ba3dd8b68b291951cdcbd0ab633d6ef069edf6798b0a9036d736a597826932334711ee55a93977099114322564c27f481163aeef39ae22623e1833687a1c7f6fd2fbc510b34a82aeb0a454a9611aa5a99970dd442e0dde00ed785097643f24f7af394aead916beaaeb5729d029c8dc8b3a35c631965f7f88534e60613e2382faf1f1d9d32b63cd4692c2df433e48277733dec02d6d4830b775d2239742e5aee4ed03b4789e70fb9e3879bfc7f9f1f7325894f852b91f3ed64e159a074f4d3f5f334595d2d8b01080a714d4e0d8ee3f74b388ebe9c57c385ac267484039a330d4c909be80c7e50085d57888c1de9dad159a90d0219c7483b809d4ff7cdc0976de9b990b774aa28c1eb29c6c3b1ecaef80f88be5ede1a2c44b14f6a24e9ff7eacecbc06ecc2e28ecf22b27367d1e72c4fedc26393064f1d66964ea38dd62de1b8a26d13c5b68acae48006743d6bf5adb42055eb3b5733d39e4cbd5225610f9603b9e9568b20883100471e2deae0ecfc0d7d64c463363a9039228a4ac0"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xc08f}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xd}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x39, 0x115, "83386cec38e194a41723f3ec4cc086cc9d37fd79c64564fd24abbf2ef3b528356138fd07cdf698a812b432cd4763a3a4c128369e06"}, @NL80211_ATTR_BSS_BASIC_RATES={0xf, 0x24, "bfa8e1aef56b85a54822f1"}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_STA_FLAGS2={0xd6, 0x43, "e254ddd5cace48dd4d168208201a04cd87dda74f592084277e1edf802a2360947411ad04d8fcdc8016b35ab61a7d20fa4d787ea53239a9764a936b62bc6d9a3e8bdc01fc0bcb6e53613e834f35225508c9eb933100a5ade563febc2f6f12b742e5012a2858fde154ede9c9f07b09c7085837fe9ca19951ee3cca8c9e74b178a611740f317f9c4a1ff6cdab294b65aca00cd77ecab8d17240db30d648b0edc8177b9b76662546764fd9bf4b22c7a001f4053317b0260c931c1260187bc4beeb0be80a736edfe06e345d0821ac2e38e3669ab1"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_VENDOR_DATA={0x69, 0xc5, "00d55afefca0cb3346bb3be53f36a4acabb8837876fd036a5c66b41d7bf00f48ba89d4908b9598c4882d7101c8025e1a54746f4104e7ea7aba79c15bd39a84b27db2b37f26e9f178716e225809f83c66bb79d7d93907dd8e0124958085cb36ce22b5f59a9c"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x10000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x3}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_PID={0x8, 0x52, r11}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x24, 0x13, "bc1182cd83ac5d97e01ac563049b37d09a7d97b4a54361609af2a9cbf7e517f0"}]}]}]}, 0x1288}}, 0x4804) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000002600), r12) r13 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002680), r12) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r0, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x3c, r13, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PODL_PSE_ADMIN_CONTROL={0x8, 0x3, 0x7ff}, @ETHTOOL_A_PODL_PSE_ADMIN_CONTROL={0x8, 0x3, 0x5}, @ETHTOOL_A_PODL_PSE_ADMIN_CONTROL={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_C33_PSE_AVAIL_PW_LIMIT={0x8, 0xc, 0x400}, @ETHTOOL_A_C33_PSE_ADMIN_CONTROL={0x8, 0x6, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10051}, 0x24014802) (async) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r0, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x3c, r13, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PODL_PSE_ADMIN_CONTROL={0x8, 0x3, 0x7ff}, @ETHTOOL_A_PODL_PSE_ADMIN_CONTROL={0x8, 0x3, 0x5}, @ETHTOOL_A_PODL_PSE_ADMIN_CONTROL={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_C33_PSE_AVAIL_PW_LIMIT={0x8, 0xc, 0x400}, @ETHTOOL_A_C33_PSE_ADMIN_CONTROL={0x8, 0x6, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10051}, 0x24014802) 1.782395998s ago: executing program 5 (id=764): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x100000, 0x2b1, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x6) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xc834, 0xfffffffffffffffa, 0x8000) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r1) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r2, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x4}, @NL802154_ATTR_COORDINATOR={0x8, 0x1e, 0x0, 0x1, [@generic="25d3500a"]}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x4000040) prctl$auto_SECCOMP_MODE_STRICT(0x3, 0x1, 0x0, 0x9, 0x1) 1.74791108s ago: executing program 4 (id=765): mmap$auto(0x0, 0xe, 0x4000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x2) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x7, 0x4, 0x9, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x3}, 0x3, 0x5, 0x4, @raw=0x1ff, @reserved="b1ea6985ff9d79893916e465a933fe72ea1338383d75362878f1bca9026785465be30df39b4799c73ed765d9349a3573eb6595b7cdebe133e32693cdf6875da1356401ea8f174ce6bce5f9fe2ab87c639541d632d23bee248101b2953407195cbb85bb1cfd7bea80a8c4891c77a8965fe9c23d4100", "7a9fc190334fdd7334022bd212b67212f0bcab84b1007ce8cbce0bb32777702b8d7c2d000f00040000001000"}) socket(0x10, 0x3, 0x6) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xfc, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x12c}, @NL802154_ATTR_SEC_LEVEL={0xe0, 0x2d, 0x0, 0x1, [@nested={0xc5, 0xc8, 0x0, 0x1, [@nested={0x4, 0x54}, @generic="9ad9b167f7a912e0f4b130f09b4a0d4e9329190f6bfabf21e00d9e0e6dac1c274649f9dc5067b857d80112dfd2f69754f98e662a16991b088ed19efb3f07c4037a186f68a581c982e25681e7589713a70f11606ed0d33960b2fff7cee645ab0cb08c1b36800f9d8b6a9f3c9c32a40b207fcdaf8572559aad68b5e45adfc413283c7269638259c4c5f4d0a8fad3b0627b96b6c41167ff22a3974fb4ab87ecec6bcba509815b79516126a9d715f73231e386c4385343b5c52873", @typed={0x4, 0x10a}]}, @typed={0x8, 0xaa, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0x127, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x2000c800}, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x2, 0x4) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r1, @ANYBLOB="0800fb"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x10000000000001, 0x0, 0x3, 0x9}, 0x7}, 0x3, 0x6d3674ac) r3 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r3, 0x11b, 0x9, 0xffffffffffffffff, 0x4) setresuid$auto(0x2, 0x7, 0x8080) mmap$auto(0xf000, 0x8, 0x2, 0x9b72, 0x2, 0x8000) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/011/001\x00', 0x2, 0x0) read$auto(r4, &(0x7f0000000100)='/dev/bus/usb/011/001\x00', 0x7f) write$auto(0x3, 0x0, 0xffd8) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/rc_rateidx_mcs_mask_5ghz\x00', 0x88000, 0x0) read$auto(r5, &(0x7f0000001200)='\x00', 0x4) setsockopt$auto(0x3, 0x10f, 0x7f, 0x0, 0x18) 1.504074413s ago: executing program 4 (id=766): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x40040, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) (async, rerun: 32) socket(0xf, 0x9, 0x4002) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000000)=@sco={0x1f, @none}, 0x58) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) (async) fsconfig$auto(0xffffffffffffffff, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040), 0x0) (async) ioctl$auto_USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000040)={0xff, 0xfffffffd, 0x4, &(0x7f0000000240)="0b8f0e9ebfb961d30cf70208832a5a133cfd711cd05cd3502af0e1c9850b4a5db894e644a4c0c258456d5541730f5279158d68ad030056e353784094bb0e571ccaede4a4aeab78082f70605b76ed6f940400432ec8d9fca2116cb74315abbcf1a23f05bb28dbe14456916ac2d6fb0f065d48fd1a83ca0ce97422e897a5ca187f13e7bde3b2a7e1c74981dace976e57c31988b4045c69179d8cc1bd668f287ea2f8ac77c2699313cd7c288940f47882f40f6810c0b277bf9648cd6286b58907b5731a0dfccadc4890"}) (async, rerun: 64) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async, rerun: 64) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/version\x00', 0x101243, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2fb) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_I2C_SLAVE_FORCE(r1, 0x706, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r2, 0x7fd, 0x1) (async) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) (async) set_mempolicy$auto(0x6, 0x0, 0x21) (async, rerun: 64) pidfd_open$auto(0x1, 0x0) (rerun: 64) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) setfsuid$auto(0xee00) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) (async, rerun: 32) write$auto(0x3, 0x0, 0x8) (rerun: 32) 1.367341971s ago: executing program 5 (id=767): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/1/type\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/33, 0x21) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) r3 = pipe2$auto(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000031c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000180), r3) shmctl$auto_SHM_STAT(0x4, 0xd, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffff7, 0xe7a, 0x1, 0x5}, 0x100b, 0xffff, 0x8, 0xff, @raw=0x401, @raw=0x76, 0x2, 0x0, 0x0, &(0x7f0000000a00)}) sendmsg$auto_WG_CMD_SET_DEVICE(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)={0x31c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0xda, 0x3, "95b2d4cee9e592d1ba96d1ce587e7abcef16698e48cc562b36d12509b5df8820331ef6c7a350f57035bd51b2b01cb8a071a9f65a7bcdf46ceab48fe5da18f5653476625f65d1d239e9bcfae344653914d4b0abb190169f30358672fefd5ec9a3f622a86b8f80334aa6d3b33019e7049f628548ee91bd99290cdf36874b18989624b4642fc00e896df341ca58062a4d73413d13d4be81f4d750522ff8cc3ceceb9dd05bbd3582a398c79c6ea65e6ed63aa2898af77d77c6d6e60e217d9bef3d805ac6eb96bf4b742c6870c44c6bd4a73bed708d6a90d0"}, @WGDEVICE_A_PRIVATE_KEY={0x2d, 0x3, "9e1b290da3c21f529e9833895f779f2dd30739a2f34cb005aff9c30fd2258b3d994c0a33f5e0faf309"}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x101}, @WGDEVICE_A_PEERS={0x1e9, 0x8, 0x0, 0x1, [@generic="955c80aac0b166db574f83081e27d70225030ef4188ac27cbb1c3bacc7eead7e50d8ab02cc48cf434019258e3f2d240e4c5ba6f747a30508a6a90d2eb8dda73ec708a2882de691712457853aa270818823e8dcf0557f7263ed0eb3b3881678607377ada8d204f211a422dd09265e65e3ce12ffabef2458abf0035e", @typed={0x34, 0x123, 0x0, 0x0, @binary="398e43ff7a2a5f2060afb83777d63c4998c3d0f7bf3090a008c97fc149cc358b488e4d153ffe233161af5e1e5417725f"}, @generic="58eda9e90a939f4ac1ca144fbc6bebce432aa6a2be50153eaa94658dc1817469e4", @generic="0be99630c86058efbd93824d183885f453d2ce83a1e585071abde06766bd0485757e5707f9966bc473a318af26dcf037ffdfedbde9d43aa76266c71a679b20203c142695fdfc4e734c2db09a87ecb5effbd86afe8a9fbe786db5e850ce601350f3ada579448dc62c936ca52aa2e98a7e11957b37e1ca6751a5366ff2b61f3ea9c1c137b28f6dccda2cc03ff30b4f6b20afe17aae6c3e65038c3dc6b2b9dae9f116ebb88603f7003934fd6fe5f64ed976aec7b0a9c43bcb6024bafbbc13a4cff7dfdc72048a79305d7b481d6b75f9587ce408984ab45d038e9b", @nested={0x34, 0x93, 0x0, 0x1, [@nested={0x4, 0x1}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x58, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}}, @generic, @typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @typed={0x8, 0x3, 0x0, 0x0, @uid=r7}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0xfffffffa}]}, 0x31c}, 0x1, 0x0, 0x0, 0x800}, 0x40) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000003200)=""/64, 0x40) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x8602, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xe8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r8 = fanotify_init$auto(0xb3d, 0xfffffff7) sendmsg$auto_OVS_FLOW_CMD_SET(r8, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x170, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_KEY={0x156, 0x1, 0x0, 0x1, [@generic="c44d6c614bfb06ab2efa8c0a12704a87557e24abdbfde4c7470972dff7ef8598c57fa5f20e5f5858a11ef5257b835eb489fa6a245dd0578dbbfea4", @generic="143efe43d2781344", @generic, @generic="c577898005cf73bca5eb4e5b4569f589e995ece6fa73f081ee11b1a38250f141a45d23ecd9e584a610868ba9a62e41216905b87eb1f6db0d466f0dfb2d560fef32757cdb1fb6825524aa0c18ac5dc98d96038ac613efe30d5cdd9293f2b5988e35cfd7d722f3810d9d33fc078dd027092d5b6875457b951f268779b4e449d3a94057eebb42b8bd2bf0b044d8b8567d426cf4cfb8cc32024d0ceb42b08af7bf", @typed={0x6e, 0x13f, 0x0, 0x0, @binary="bc90e0aae9e03f2c07d51fd4d929a0837b84dd6fd32535e9f3cbb99d0c93586d39ea4e73845fc190bfe694e18719b106e8220d8bf136429f85ea1a9ff7940bd393bf454b93fc1eb105991ca230de3e045b9aa76a31e6587d30643e5783d45fead68b57d47f65c44ccc4f"}]}, @OVS_FLOW_ATTR_KEY={0x4, 0x1, 0x0, 0x1, [@generic]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x10000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) unshare$auto(0x40000080) 1.284338392s ago: executing program 1 (id=768): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/conf/syz_tun/accept_local\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) bpf$auto(0x9, &(0x7f0000000100)=@enable_stats, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0}, 0x3) mmap$auto(0x0, 0x86f3, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x2b, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x13, 0x0, 0x40) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x54) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x5, 0xb8, 0x13fd4, 0x3, 0xfffff003) mkdir$auto(&(0x7f0000000040)='./cgroup.net/\f\x00\x00\x00\x00', 0xa3) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x4, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x1, 0x100, 0x7f, 0x101, 0x6, 0xfffffffffffff000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c06, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) ioctl$auto_XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f00000001c0)={0x100, 0x2, 0x0, 0x883a}) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x104200, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) 907.053435ms ago: executing program 3 (id=769): r0 = socket(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) (async, rerun: 32) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async, rerun: 32) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x80000000007, 0x1ff, 0x5, 0xf8, 0x401, 0x208000) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x24044810) (async) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) (async) r2 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) read$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000003dc0)=""/167, 0xa7) (async, rerun: 32) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) (rerun: 32) 324.079477ms ago: executing program 3 (id=770): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x5}) getsockopt$auto_SO_TIMESTAMP_NEW(r0, 0x4, 0x3f, &(0x7f0000000280)='&@\'\x00', &(0x7f00000002c0)=0x4) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000000)={r0, 0x10000}) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x2}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, r0}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40820}, 0x24008000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x0, 0x28, 0x0, 0xc) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0xb02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/loginuid\x00', 0x101000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/5/smp_affinity\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0xf34) writev$auto(r4, &(0x7f0000000380)={&(0x7f0000000300), 0x6}, 0x4) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1058}, 0x1, 0x0, 0x0, 0x40050}, 0x20004004) writev$auto(0x3, &(0x7f00000001c0)={0x0, 0x3}, 0x7) clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103) 323.168079ms ago: executing program 4 (id=771): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1, 0x0) (async) sysfs$auto(0x2, 0x1, 0x0) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0xd1, 0x0, 0x0) (async) getsockopt$auto(r0, 0x29, 0xd1, 0x0, 0x0) mmap$auto(0x6, 0x2000000000000000, 0xfffffffffffffffe, 0x70, r0, 0x5) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x21, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x400c854) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f0000000040)={0x1880, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xf63}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1ff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_IE_PROBE_RESP={0x84b, 0x7f, "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"}, @NL80211_ATTR_MAC_MASK={0x1004, 0xd7, "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"}]}, 0x1880}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) (async) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) 100.009706ms ago: executing program 1 (id=772): close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/pci/drivers/ath9k/bind\x00', 0x0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, r1, 0x9) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000380)={0xdd, 0x0, [{0x40000000, 0x9, 0x3b0}]}) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x25, 0x80000, 0x1200000) r4 = socket(0x10, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x1, 0x5) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x40b00, 0x0) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r0) r6 = epoll_create$auto(0x8800001) epoll_ctl$auto(r6, 0x1, r5, 0x0) socket(0x1e, 0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) 0s ago: executing program 4 (id=773): r0 = socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5c) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xa, 0xe983, 0x1, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/ath6kl_usb/new_id\x00', 0x80302, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r3 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x20000, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r3, 0x50009405, 0x0) preadv$auto(0x3, 0x0, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000000000000002) readv$auto(0x3, 0x0, 0x1) r4 = setfsuid$auto(0xee01) r5 = setfsgid$auto(0xee01) setresgid$auto(r5, 0x0, 0x0) ioctl$auto_XFS_IOC_FREESP(r1, 0x4030580b, &(0x7f00000000c0)={0x4, 0x0, 0x7fffffff, 0x0, 0x80, 0xffffffffffffffff}) r7 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, &(0x7f00000001c0)=0x7) shmctl$auto_SHM_LOCK(0xea, 0xb, &(0x7f0000001240)={{0x5, r4, r5, 0x7, 0x3e8ce460, 0x3, 0x1}, 0x1, 0x4, 0x2, 0x4, @inferred=r6, @inferred=r7, 0x7, 0x0, &(0x7f0000000200)="12bad3ce3cc1e5f097b1fc4526ebf85c38c85502b654d2d8a5d92e543f048bbb13302fd1872a0bd28983217c8d8c4266c02aadc7518b5b3bb92700", &(0x7f0000000240)="576726c7c1f83ba63f28febe1bacd32fcabbb2fbe91dd53d66d2b1984a30d0ca521122ea083dd0afce71b8aa981c68bdd4af9c3286d3158828b6a16c5f961397f841436e829edd8e501c2dc2cbdf863b463ecdc82a7a2a32cb31c06ee9d2cec8d760548e945be0984268d2596bf8a475d5356129c80162528669d10ced56aa0494b957b49fcfa47ad46d2969a8350ecd5878187e678ade917fb2e7e78e5d5c02ef96e0d7b0f7a956b472e9df0f452dfa92f0d39178ad95c8428991d57ad4378543244655c4e7f1a86054ae9d9f95c4b97cb683a1b6cbc368032f1cdba52f4d3ed2148531f508cdae1f67cce9281a18463cabb1bb72be74b9ecf815034469b0eb3d48beb801cf820b89076bd5dfb9797c028a9527c3c53e0e0677d4bd5bc6be68749f436071996697d7c3cb22119a5c6a413a63c89b3545c7ac0c7ed23257321136aee4df5bfe170851a6a64d9b07a6bf471b5206da7b73909861a1bf80b03fbe8c1ef79e90fc049543f19a9d75324bbc45355bfe614198b5cb70c9cb0c691e8eb26369150ac762c7937b33defa7cacd543645b1617511dc3444340dc061ff24a2e39813821c07a69c0d18f36dc408e3b87f6e3c1afb914fe2b9ad973197a0fa9b11e2f128588ecc7b50b37407ca60dddc09d46c9c81a4b7bed6dd2b43ec664d8f2b483dab9a78c6816e26ff6f7c2bc9079adeaa5340c5ef2dc81835a6decdfc326bf0845e779c0b44cb24bc9112a7bc01793055f4cab802cab4cf18a31be8485b8144469f6ff8723ff9e28d10281b1b7c5ac67986228ed396f7d9df976509fe725546b939923605199368fa04ec0e37478f6d991a7ad8972430bcda641da56fe276ee214ff1622b2b9971fbd6c54df097a3e1ae0bc65396a67f489e4cd45fd9dce6820643c31f16627831b61e87526f33d4e96efe91f4f8b7d35e892750d14a51787d3ddb4f4df6ddf72060bbc8d5a3889fb01abb24bf2459b80407908ab08659cdb84781d8f525767fdf3446bbef0e4df1248f713e8da73308718259726aba1971851e6996c941fe916d77aea4d94bc510b33ea6598390c1afdc9fe5453c5ab265a859a9dde631364c660939f9be771b4fa5081f27c42033ddd87c59e49b0bfe55de9c9463e53e0815ae9911ff678003c3bb6fa34b9678a521c79ce0050c083cb4add5da030d60ca13c66c5148f96dc93d610dd510ddd4d49ae3ad40affab21bc36aeda612ab81379aee0ad5fba565889bc96a6da3d2529298d547a832abd54a9bd9f8c7923fd102e33169a7f29af3ed83230bc9981f89d72a5554db91a865ca1222ef1ee0027a1312382839a1bcd5cc06a8dae59288577cf813287bbfb4ce757809a91a7b7e03637351db5ab54684e9bf8dae5b9b5451dc730c800ae8a4da248482752bf75af6eef636513a143fcef06f22f6937b730d96329f2dd99dc97c2f5d24354abdf01f9deaa33a53ee28f4ca20a1b3454b1dd8ead3d397a0eae449890e30cd609df44f70e741d046cab27715d2c26b1e391b9414d530f285883ce6bb5bf1670a2c1227e6cc2127191bde03a31b6f01269fe22b38e2596d4b2f453bd9b9c1bf75712c129ff95784cfe85c0c2b4c195fb86e156645f6b38126be4400f6dcd268ca5616125c7525f57fc34e18200115501b5675c6c8ecb2d8deb1f11d59243c5c9dffad392d40146a30d9d8efe537ab3d69f77726bacfecac35df11af4caa37e8dc47bda3e0eee3e9edc9b05c625726156f7e022482ac01aebfba9f136b7bb5c1617aa1b6ca1e292b075d47e8af1de3810710e002da3d7f6da20b6e81376d9d0e45e1624104c6934af6bf41520bef77ef69f9d259d7a1e233c5046482b28278238c4a709448ca182a538fe9323abd8da1fbfe452747e279ab52b184dbe89af12c01e78b0a25724cef975ed402076e9aa7b08dbcd3c7c36c066c556690794b6508ef1cd128779eeb8366f996607b7ec1d0e749a15fe07865b1795ae44a5209d8adb39d9c2d7be49fc5708e3e57c4a23c85a460decb34140205fa7bdb8adcdde6ef5328b74fda9f591421d82fba4aba32117d7bd471d410ed550a2b9be4b3401551500578aec1a8dac2a7eb44aa3b1604958cae9a404cc6369c2c999f0af83c4ffdb79f4f1507c415b9915abe8ca69e877f69810488e12f62f4bcafb311fac20d0261199b03151255b91f6ed12a87d0487290ce48ef3917ef1f0aab7db6da1598826ad80d35cd298d4cf90b895e323030d3cee09c4d07455a1303085a0db6cd32a99946f5241d8e43a3bf8270753b1b91849774e5114cc4a0267d60daf36f3b93d555a0ad5ace7afdbff4954a30b12b0eaa540ce5bbfc5b368c7e5b431f6ebc4c227edb9912473258ac7c2bc1fa2d1474f6e6df31a102bce7255dbd74f9a3c60946b1b688b587653b2b21d88f7e963bef1d8f4553e022240c94336703f9741c79b792998e646b2b95ad4d6637b720ccafddbf656bcea5753a0180ebec3b771d7eceeb92b0e6b572bba65f6ab1cf1c1d9c6b442d661801ca9ce46b826807b0d2eb157f06ca21d90589a3de859f9849a60f66f9e83045d301be9b88210e2dc4bfb914ba4e7229de2d01ccd8cb07d01df03af8007cfc9fe1dec83d07882ef4c9f801924e70a7665b207051605ae1092baa5e49ba8959cf619cfbe5af2e03a7e2d819d77609c5f9e7e00fa6e5ceb2e6e2d72b0ddf380a74fca0aec2c469280cc3395e9af4c4913e8614858a1c578d8ddcec5e3820c402d104b0ddab6e00f7ba951e4076de61e957234f9c8e7421bf7c583e6db9c47e9a4088f37ba770886908ca0b44ce2a507dcb8f1db7639dc9c78f7835fd50f133f97eecc0dd0f0831b089c1097a636b5b82e7b3454aaa9fcf33b0ddb3a3232fca5df4fac778b6222af58e9cf2fcff840b7d40a75adecebc8b4cb2c1e2f4689143789e32c66a93df6a6a42e86ef75f6c7296f1eeadd45676dcdb4933d95545c3548ecef004b92e5677c5f01c6dfde2974f920453f7886987b614d58341776b2352f98885ce252d01136cdbdb28bccf53559c7ee1b7460b5480488b883b4aaa95bef90f01c6ff1a4253859d0c8b6985e5ec7dc7ae79fda7de5db75a4cf40d1d7b91119883d02798827665445b0f85f78f15f8105f48649d2dde7632c626a2d7ebc383261bd37619ef5f252eb7fc13c36a61c968cb76a3603ccac92a23c8a5a8cb101c7a26b59a25bee0e9264bb4686c3c9a4630b1357d593aca2bdd9e360051329d0c85949a6a986804b8e776e6fa54d9a88fe56a35e2aa8ea1a98bca7c108c44e7eb9f74a3ef0225c084b0cf3b9a87021fb7d3c9d863a7fa07219b0f883cb6c4d8314c7718bf554263084256b29840e8843b4431bbbb08991836e20db8c932100d5793cee0ebe3fbffcdc5a87e66e661ed74d28e1f6203a290bba681ea8fa6b7839b6f809042de3c52be1d4b414004f917e8c72c1393d7e55a33a38d37836a02d27c5f9676b6f5300d5281524e965b9e22f77cc8f42187e3637f80eeb9494080e8e559bd4b2e13bb2186690ae00e18e1b1bd6b062b7a5bd8a23607f5d2f9f2fb64e6b6096a4977c954c78c538253aa6d5c5e928eac4fb68d4c6eb612a9fc89303f6b4af19ee0db5a3284c0ebdebcdec31bf43fd53118eeba27810125e4a0cec373f908d8d5dd6322f7aa63871f3a3adcb2a37aad3c178cdbfd500cf6bc8c9bbafb8ea4a496e77bd9aa80e2a489eba81247cfe481b1c34f147613e5f5f9d5c80b3679360bba61dd338e96d3d50aa85d3d8d4e0eee9dbf987f38b28fa89ce6f839ea8bb798f8a3316e1ce394157939fc294e858a1d54f6c9ab07abe1e69087136987d6d8dbd531fa4fbb4a40018b1a1aa9a4e6c0571ed03ebb44d2e5d2c9a9b9ae97ab8d3afe2132ab404f5ab99b789c961d57c700f356729403bd0e94559a93c7eab0cf320545ccbf6e3f42936f68dfdf792c8530071227d580bf047060afdf3b8ef4e262a634d22ce280c9b5a8917baf285fca93562c0eb9d0754af78eb6a892464210135b4af83ddf46390d49b80b308cecb48f8c461a2dfc11de2c3cb8055af92cca204761c66db5239bc15f28c926012c3fda21f0224605782f28a4eb1e451ecd548efc5a3b43cd6d9accf05ebf708b2be36bfe54f08eed1a614ff586ed35291cc2a2dd9fd568f3f981cb3323e917f1ce45800c90ad388fa7f32c523ffed46a8b0ca2ccaa392cb359f2a48ed16f97a4cc089486edcb02869d5808dabd2a280148a5b13302dc3e790a8b6439b01ba7136a39ac9cf1d3d356f6c13539422020318cd86753d192d54211084fd46a83abb0b1dcd2c5dd2b16e301cc7a16c97bb24bc8c30be6fc42252812015306bc3df232fbcdd6943e1845ac737f730ee9225484720d15c169e7303039703af5a7a85a5fb1584b8da7239a73e73c1bf73ca3701742e62ec9041f6ef57875508fe71561b98bab76700def12dc7b3635bde858f8815c1ddebb0d5a54cac6640dd583ae3a494ea28597db0452d4de937f7dbf1233699404c9395187e83940a1708a3063afe8a3c9feba6a7bd2c900e03e57deded4969662ec77787a47b9725c7d07fa4246945f1cce660bcebf30995ffc7a46eca610dad7b2f6642159a95a6252a127faa76600374360db7204e108a3284b31fa0622caf3224fde6fe0b6fb1c4a7f357b7eb5bb9a3d6e1d8c9a81340798c6f7c41b82998db204b02cd66133134784317310a91c2fe1ec25a787080de4db0cc05ac5adb036bc07d6d96894f72d1aeb9b8f3fbc5b83006c440dfafd4ecdd5c5896f830b1ee35d815a6681d9b67a9b74d70c2cacac72fd30e0d9a02e09f8d5f06f1294569bfe41ab422ad1939630ded7399781485bef740ac9b72aca15bdf2c47e25e47c5951fdd09018e3991ddbdd2778efaf102e13910f438f740a077cee289f8b5cccb2c4115080c820f654c24f6710f4e000d67094dc99be7fcfe89af158263f5113f8de0918915f9c2ccb66405b29b777c1f446d607f6e30e640aaa67e99e6d23c428b304e34644760e72c3e64c2449ebc4685affc2fd06ef98ba176e8a7e19e609b25e66e7a74a3fe483e8867a368f68d78b2e149fdfc2a363c93bee04be5984595edd52f4b854208183622e8b28777e2fe75cd3bddbaa306f562c666d1bbbb0cc94c2e6d1ff19501bf58ea23059351034e7e1b93abc71499396308164e09957e56fa859e97315f1b23f5d0f923e5145901462828fb387c74513193fc7f99e2c035561a0ddf209f7644a40b39a6cd875a5c4a4efa4f43a9ccad529d309dae906f2064cec952eb274ec7f680cc54df134e87829441f3f93a4ac2c8a7037c009863c2eb53b9236fe894623e67085065088afb68e75d42cf4346ab04ad40f7d6d210bd6bd80279fdf1c5f057b34985d3e55c79e276d7f5f190d76eea11bb51b08e0823754c2784d34c061e5372f58ccb4ae351670c472a6668ac9347052dd56dc9043bf4e2488c1396c0dd62bed15ff65cf8480923e3e66cd452934abad50752e9a491309aca21dbc613b7ba09babd89a617c56d221045e99aa94139e559a0464c7a9c2a9f6795782d27ca6edc4c2e80132641551848f910a1e0f970a59cffcf40f05c6d07a59592c1cce722e04db57394a778655dde4ebecf7362210164cf9ffe3848922264a0b8604534570aeaa15f795a364f38ddd6ecee07ed555686bd7e257c0d6c9d4863a11374aed0b61b9cf4151d22b92bff55951b8af0416aafeaaeadcd201b45f05fd008d52369d725cef2c7d4f2f67ccd3b703d923cbf3a3c423aa0b189baf77fe47800f52493e1"}) io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_adjtime$auto(0x354d, 0x0) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) rt_sigsuspend$auto(0x0, 0x8) kernel console output (not intermixed with test programs): e failslab, interval 1, probability 0, space 0, times 0 [ 185.246327][ T7221] CPU: 0 UID: 0 PID: 7221 Comm: syz.1.252 Tainted: G U L syzkaller #0 PREEMPT(full) [ 185.246377][ T7221] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 185.246385][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 185.246398][ T7221] Call Trace: [ 185.246406][ T7221] [ 185.246415][ T7221] dump_stack_lvl+0x100/0x190 [ 185.246446][ T7221] should_fail_ex.cold+0x5/0xa [ 185.246484][ T7221] should_failslab+0xc2/0x120 [ 185.246516][ T7221] ? tomoyo_realpath_from_path+0xb6/0x690 [ 185.246540][ T7221] __kmalloc_noprof+0xf6/0x9c0 [ 185.246571][ T7221] ? tomoyo_realpath_from_path+0xb6/0x690 [ 185.246593][ T7221] tomoyo_realpath_from_path+0xb6/0x690 [ 185.246622][ T7221] tomoyo_path_number_perm+0x23c/0x580 [ 185.246655][ T7221] ? tomoyo_path_number_perm+0x22e/0x580 [ 185.246691][ T7221] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 185.246724][ T7221] ? futex_wait+0x125/0x380 [ 185.246771][ T7221] ? find_held_lock+0x2b/0x80 [ 185.246794][ T7221] ? hook_file_ioctl_common+0x146/0x410 [ 185.246828][ T7221] ? __fget_files+0x215/0x3d0 [ 185.246858][ T7221] ? __fget_files+0x21f/0x3d0 [ 185.246887][ T7221] security_file_ioctl+0xd3/0x230 [ 185.246923][ T7221] __x64_sys_ioctl+0xb7/0x210 [ 185.246962][ T7221] do_syscall_64+0xc9/0xf80 [ 185.246993][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.247016][ T7221] RIP: 0033:0x7f79d2b9af79 [ 185.247033][ T7221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.247054][ T7221] RSP: 002b:00007f79d39ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.247075][ T7221] RAX: ffffffffffffffda RBX: 00007f79d2e15fa0 RCX: 00007f79d2b9af79 [ 185.247090][ T7221] RDX: 0000200000000b80 RSI: 0000000040305824 RDI: 0000000000000000 [ 185.247104][ T7221] RBP: 00007f79d2c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 185.247117][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.247130][ T7221] R13: 00007f79d2e16038 R14: 00007f79d2e15fa0 R15: 00007ffef035e9f8 [ 185.247159][ T7221] [ 185.247169][ T7221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 185.597988][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 185.692528][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 186.045922][ T7252] bridge_slave_1: left allmulticast mode [ 186.052373][ T7252] bridge_slave_1: left promiscuous mode [ 186.064924][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.097249][ T7280] FAULT_INJECTION: forcing a failure. [ 187.097249][ T7280] name fail_futex, interval 1, probability 0, space 0, times 0 [ 187.153934][ T7280] CPU: 0 UID: 0 PID: 7280 Comm: syz.1.263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 187.153988][ T7280] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 187.154001][ T7280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 187.154020][ T7280] Call Trace: [ 187.154030][ T7280] [ 187.154042][ T7280] dump_stack_lvl+0x100/0x190 [ 187.154087][ T7280] should_fail_ex.cold+0x5/0xa [ 187.154140][ T7280] get_futex_key+0x1d2/0x1620 [ 187.154187][ T7280] ? __pfx_get_futex_key+0x10/0x10 [ 187.154242][ T7280] futex_wait_setup+0x81/0x500 [ 187.154284][ T7280] __futex_wait+0x19f/0x300 [ 187.154318][ T7280] ? __pfx___futex_wait+0x10/0x10 [ 187.154356][ T7280] ? __pfx_futex_wake_mark+0x10/0x10 [ 187.154415][ T7280] ? __hrtimer_setup+0x178/0x280 [ 187.154469][ T7280] ? ktime_add_safe+0x60/0x70 [ 187.154521][ T7280] futex_wait+0xed/0x380 [ 187.154552][ T7280] ? __pfx_futex_wait+0x10/0x10 [ 187.154579][ T7280] ? __lock_acquire+0x4a5/0x2630 [ 187.154626][ T7280] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 187.154688][ T7280] do_futex+0x1ef/0x350 [ 187.154733][ T7280] ? __pfx_do_futex+0x10/0x10 [ 187.154774][ T7280] ? rcu_is_watching+0x12/0xc0 [ 187.154812][ T7280] ? ktime_get+0x200/0x300 [ 187.154848][ T7280] ? lockdep_hardirqs_on+0x78/0x100 [ 187.154886][ T7280] ? read_tsc+0x9/0x20 [ 187.154932][ T7280] __x64_sys_futex+0x34f/0x4d0 [ 187.154983][ T7280] ? __pfx___x64_sys_futex+0x10/0x10 [ 187.155027][ T7280] ? xfd_validate_state+0x129/0x190 [ 187.155092][ T7280] do_syscall_64+0xc9/0xf80 [ 187.155135][ T7280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.155168][ T7280] RIP: 0033:0x7f79d2b9af79 [ 187.155193][ T7280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.155223][ T7280] RSP: 002b:00007ffef035eb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.155253][ T7280] RAX: ffffffffffffffda RBX: 000000000002daa9 RCX: 00007f79d2b9af79 [ 187.155273][ T7280] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f79d2e15fac [ 187.155292][ T7280] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 187.155311][ T7280] R10: 00007ffef035ec60 R11: 0000000000000246 R12: 00007ffef035ec80 [ 187.155332][ T7280] R13: 00007f79d2e15fac R14: 000000000002dadb R15: 00007ffef035ec60 [ 187.155374][ T7280] [ 187.629098][ T7286] random: crng reseeded on system resumption [ 190.677593][ T7341] FAULT_INJECTION: forcing a failure. [ 190.677593][ T7341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.720472][ T7341] CPU: 0 UID: 0 PID: 7341 Comm: syz.0.275 Tainted: G U L syzkaller #0 PREEMPT(full) [ 190.720525][ T7341] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 190.720537][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 190.720556][ T7341] Call Trace: [ 190.720566][ T7341] [ 190.720578][ T7341] dump_stack_lvl+0x100/0x190 [ 190.720621][ T7341] should_fail_ex.cold+0x5/0xa [ 190.720675][ T7341] _copy_from_user+0x2e/0xd0 [ 190.720733][ T7341] copy_msghdr_from_user+0x9f/0x4f0 [ 190.720774][ T7341] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 190.720819][ T7341] ? _kstrtoull+0x13c/0x1f0 [ 190.720854][ T7341] ? __pfx__kstrtoull+0x10/0x10 [ 190.720897][ T7341] ___sys_sendmsg+0x106/0x1e0 [ 190.720939][ T7341] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.721026][ T7341] __sys_sendmmsg+0x205/0x430 [ 190.721079][ T7341] ? __pfx___sys_sendmmsg+0x10/0x10 [ 190.721139][ T7341] ? __fget_files+0x215/0x3d0 [ 190.721186][ T7341] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.721242][ T7341] ? fput+0x79/0x100 [ 190.721284][ T7341] ? ksys_write+0x1ac/0x250 [ 190.721319][ T7341] ? __pfx_ksys_write+0x10/0x10 [ 190.721361][ T7341] __x64_sys_sendmmsg+0x9c/0x100 [ 190.721408][ T7341] ? lockdep_hardirqs_on+0x78/0x100 [ 190.721445][ T7341] do_syscall_64+0xc9/0xf80 [ 190.721505][ T7341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.721538][ T7341] RIP: 0033:0x7fed9bb9af79 [ 190.721563][ T7341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.721593][ T7341] RSP: 002b:00007fed9ca0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 190.721635][ T7341] RAX: ffffffffffffffda RBX: 00007fed9be15fa0 RCX: 00007fed9bb9af79 [ 190.721655][ T7341] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 190.721674][ T7341] RBP: 00007fed9ca0b090 R08: 0000000000000000 R09: 0000000000000000 [ 190.721693][ T7341] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 190.721711][ T7341] R13: 00007fed9be16038 R14: 00007fed9be15fa0 R15: 00007ffc7a226178 [ 190.721758][ T7341] [ 191.321123][ T7351] bridge0: port 3(hsr0) entered blocking state [ 191.338343][ T30] audit: type=1804 audit(1770666899.244:2): pid=7352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.276" name="/newroot/73/file0" dev="tmpfs" ino=403 res=1 errno=0 [ 191.375209][ T7351] bridge0: port 3(hsr0) entered disabled state [ 191.400095][ T7351] hsr0: entered allmulticast mode [ 191.406961][ T7351] hsr_slave_0: entered allmulticast mode [ 191.415770][ T7351] hsr_slave_1: entered allmulticast mode [ 191.472076][ T30] audit: type=1804 audit(1770666899.354:3): pid=7347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.276" name="/newroot/73/file0" dev="tmpfs" ino=403 res=1 errno=0 [ 191.478920][ T7351] hsr0: entered promiscuous mode [ 191.545612][ T7351] bridge0: port 3(hsr0) entered blocking state [ 191.551985][ T7351] bridge0: port 3(hsr0) entered forwarding state [ 192.194972][ T7371] FAULT_INJECTION: forcing a failure. [ 192.194972][ T7371] name failslab, interval 1, probability 0, space 0, times 0 [ 192.228655][ T7371] CPU: 1 UID: 0 PID: 7371 Comm: syz.2.281 Tainted: G U L syzkaller #0 PREEMPT(full) [ 192.228710][ T7371] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 192.228721][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 192.228738][ T7371] Call Trace: [ 192.228748][ T7371] [ 192.228758][ T7371] dump_stack_lvl+0x100/0x190 [ 192.228799][ T7371] should_fail_ex.cold+0x5/0xa [ 192.228846][ T7371] should_failslab+0xc2/0x120 [ 192.228886][ T7371] kmem_cache_alloc_noprof+0x83/0x780 [ 192.228923][ T7371] ? prepare_creds+0x2c/0x950 [ 192.228954][ T7371] ? prepare_creds+0x2c/0x950 [ 192.228976][ T7371] prepare_creds+0x2c/0x950 [ 192.229003][ T7371] cap_task_prctl+0x449/0xa50 [ 192.229044][ T7371] security_task_prctl+0xc2/0x160 [ 192.229079][ T7371] __do_sys_prctl+0x9b/0x21a0 [ 192.229105][ T7371] ? __pfx___do_sys_prctl+0x10/0x10 [ 192.229159][ T7371] do_syscall_64+0xc9/0xf80 [ 192.229196][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.229223][ T7371] RIP: 0033:0x7f78c219af79 [ 192.229245][ T7371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.229271][ T7371] RSP: 002b:00007f78c307f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 192.229298][ T7371] RAX: ffffffffffffffda RBX: 00007f78c2415fa0 RCX: 00007f78c219af79 [ 192.229328][ T7371] RDX: ffffffffffffffff RSI: 0000000000000001 RDI: 0000000000000008 [ 192.229347][ T7371] RBP: 00007f78c22316e0 R08: 0000000000000006 R09: 0000000000000000 [ 192.229363][ T7371] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 192.229379][ T7371] R13: 00007f78c2416038 R14: 00007f78c2415fa0 R15: 00007ffd9e837c28 [ 192.229415][ T7371] [ 192.493918][ T7368] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 192.991487][ T7381] FAULT_INJECTION: forcing a failure. [ 192.991487][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 193.039634][ T7381] CPU: 1 UID: 0 PID: 7381 Comm: syz.1.284 Tainted: G U L syzkaller #0 PREEMPT(full) [ 193.039689][ T7381] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 193.039702][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 193.039721][ T7381] Call Trace: [ 193.039732][ T7381] [ 193.039745][ T7381] dump_stack_lvl+0x100/0x190 [ 193.039794][ T7381] should_fail_ex.cold+0x5/0xa [ 193.039852][ T7381] should_failslab+0xc2/0x120 [ 193.039903][ T7381] kmem_cache_alloc_noprof+0x83/0x780 [ 193.039950][ T7381] ? __kernfs_new_node+0xd2/0x960 [ 193.040005][ T7381] ? __kernfs_new_node+0xd2/0x960 [ 193.040051][ T7381] __kernfs_new_node+0xd2/0x960 [ 193.040101][ T7381] ? __pfx___kernfs_new_node+0x10/0x10 [ 193.040161][ T7381] ? find_held_lock+0x2b/0x80 [ 193.040194][ T7381] ? kernfs_root+0xee/0x2a0 [ 193.040239][ T7381] ? kernfs_root+0xee/0x2a0 [ 193.040305][ T7381] kernfs_new_node+0x11b/0x1a0 [ 193.040367][ T7381] __kernfs_create_file+0x53/0x350 [ 193.040412][ T7381] sysfs_add_file_mode_ns+0x207/0x3c0 [ 193.040468][ T7381] internal_create_group+0x593/0xf40 [ 193.040529][ T7381] ? __pfx_internal_create_group+0x10/0x10 [ 193.040587][ T7381] ? kernfs_create_link+0x1bd/0x240 [ 193.040633][ T7381] internal_create_groups+0x9d/0x150 [ 193.040687][ T7381] device_add+0x7c8/0x1950 [ 193.040738][ T7381] ? __pfx_device_add+0x10/0x10 [ 193.040785][ T7381] ? lockdep_init_map_type+0x5c/0x250 [ 193.040831][ T7381] ? __init_waitqueue_head+0xca/0x150 [ 193.040894][ T7381] netdev_register_kobject+0x1a9/0x3d0 [ 193.040937][ T7381] register_netdevice+0x12b3/0x21d0 [ 193.040976][ T7381] ? idr_alloc+0xdd/0x130 [ 193.041015][ T7381] ? __pfx_register_netdevice+0x10/0x10 [ 193.041045][ T7381] ? net_generic+0xea/0x2a0 [ 193.041109][ T7381] ppp_dev_configure+0x986/0xcb0 [ 193.041161][ T7381] ppp_ioctl+0x985/0x2800 [ 193.041207][ T7381] ? find_held_lock+0x2b/0x80 [ 193.041240][ T7381] ? __pfx_ppp_ioctl+0x10/0x10 [ 193.041298][ T7381] ? __fget_files+0x21f/0x3d0 [ 193.041342][ T7381] ? __pfx_ppp_ioctl+0x10/0x10 [ 193.041387][ T7381] __x64_sys_ioctl+0x18e/0x210 [ 193.041444][ T7381] do_syscall_64+0xc9/0xf80 [ 193.041488][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.041522][ T7381] RIP: 0033:0x7f79d2b9af79 [ 193.041548][ T7381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.041580][ T7381] RSP: 002b:00007f79d39ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.041611][ T7381] RAX: ffffffffffffffda RBX: 00007f79d2e15fa0 RCX: 00007f79d2b9af79 [ 193.041632][ T7381] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000d [ 193.041651][ T7381] RBP: 00007f79d2c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 193.041670][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.041689][ T7381] R13: 00007f79d2e16038 R14: 00007f79d2e15fa0 R15: 00007ffef035e9f8 [ 193.041732][ T7381] [ 193.440661][ T7389] FAULT_INJECTION: forcing a failure. [ 193.440661][ T7389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.495057][ T7389] CPU: 0 UID: 0 PID: 7389 Comm: syz.2.286 Tainted: G U L syzkaller #0 PREEMPT(full) [ 193.495110][ T7389] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 193.495122][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 193.495140][ T7389] Call Trace: [ 193.495151][ T7389] [ 193.495162][ T7389] dump_stack_lvl+0x100/0x190 [ 193.495207][ T7389] should_fail_ex.cold+0x5/0xa [ 193.495260][ T7389] _copy_from_user+0x2e/0xd0 [ 193.495313][ T7389] ____sys_sendmsg+0x1d1/0xc30 [ 193.495353][ T7389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.495393][ T7389] ? _kstrtoull+0x13c/0x1f0 [ 193.495428][ T7389] ? __pfx__kstrtoull+0x10/0x10 [ 193.495479][ T7389] ___sys_sendmsg+0x190/0x1e0 [ 193.495520][ T7389] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.495608][ T7389] __sys_sendmmsg+0x205/0x430 [ 193.495664][ T7389] ? __pfx___sys_sendmmsg+0x10/0x10 [ 193.495724][ T7389] ? __fget_files+0x215/0x3d0 [ 193.495761][ T7389] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 193.495820][ T7389] ? fput+0x79/0x100 [ 193.495864][ T7389] ? ksys_write+0x1ac/0x250 [ 193.495900][ T7389] ? __pfx_ksys_write+0x10/0x10 [ 193.495944][ T7389] __x64_sys_sendmmsg+0x9c/0x100 [ 193.495993][ T7389] ? lockdep_hardirqs_on+0x78/0x100 [ 193.496031][ T7389] do_syscall_64+0xc9/0xf80 [ 193.496074][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.496107][ T7389] RIP: 0033:0x7f78c219af79 [ 193.496131][ T7389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.496162][ T7389] RSP: 002b:00007f78c307f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 193.496192][ T7389] RAX: ffffffffffffffda RBX: 00007f78c2415fa0 RCX: 00007f78c219af79 [ 193.496213][ T7389] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 193.496232][ T7389] RBP: 00007f78c307f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.496251][ T7389] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 193.496270][ T7389] R13: 00007f78c2416038 R14: 00007f78c2415fa0 R15: 00007ffd9e837c28 [ 193.496312][ T7389] [ 194.735022][ T7415] sysfs_service_op_show: Client not running :-5: [ 195.011578][ T7424] zswap: compressor  not available [ 195.020168][ T7426] Setting dangerous option i915.mitigations - tainting kernel [ 195.030387][ T7429] Setting dangerous option i915.mitigations - tainting kernel [ 195.675267][ T7438] FAULT_INJECTION: forcing a failure. [ 195.675267][ T7438] name failslab, interval 1, probability 0, space 0, times 0 [ 195.745693][ T7438] CPU: 1 UID: 0 PID: 7438 Comm: syz.0.294 Tainted: G U L syzkaller #0 PREEMPT(full) [ 195.745735][ T7438] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 195.745744][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 195.745759][ T7438] Call Trace: [ 195.745767][ T7438] [ 195.745776][ T7438] dump_stack_lvl+0x100/0x190 [ 195.745810][ T7438] should_fail_ex.cold+0x5/0xa [ 195.745851][ T7438] should_failslab+0xc2/0x120 [ 195.745887][ T7438] kmem_cache_alloc_noprof+0x83/0x780 [ 195.745920][ T7438] ? __proc_create+0xc2/0x8c0 [ 195.745959][ T7438] ? __proc_create+0x2cb/0x8c0 [ 195.746006][ T7438] ? __proc_create+0x2cb/0x8c0 [ 195.746058][ T7438] __proc_create+0x2cb/0x8c0 [ 195.746099][ T7438] ? __pfx___proc_create+0x10/0x10 [ 195.746144][ T7438] ? _raw_write_unlock+0x28/0x50 [ 195.746177][ T7438] proc_create_reg+0x75/0x170 [ 195.746202][ T7438] proc_create_data+0x86/0x110 [ 195.746226][ T7438] ? __pfx_proc_create_data+0x10/0x10 [ 195.746328][ T7438] ? cache_register_net+0x137/0x5e0 [ 195.746371][ T7438] ? cache_register_net+0x137/0x5e0 [ 195.746415][ T7438] cache_register_net+0x1e0/0x5e0 [ 195.746458][ T7438] nfsd_idmap_init+0xb6/0x250 [ 195.746487][ T7438] ? __pfx_nfsd_net_init+0x10/0x10 [ 195.746525][ T7438] nfsd_net_init+0x69/0x3d0 [ 195.746564][ T7438] ? __pfx_nfsd_net_init+0x10/0x10 [ 195.746602][ T7438] ops_init+0x1e2/0x5f0 [ 195.746645][ T7438] setup_net+0x118/0x3a0 [ 195.746667][ T7438] ? __pfx_setup_net+0x10/0x10 [ 195.746687][ T7438] ? lockdep_init_map_type+0x5c/0x250 [ 195.746731][ T7438] ? mutex_init_lockep+0x110/0x150 [ 195.746771][ T7438] copy_net_ns+0x46f/0x7c0 [ 195.746799][ T7438] create_new_namespaces+0x3ea/0xab0 [ 195.746835][ T7438] copy_namespaces+0x468/0x5e0 [ 195.746865][ T7438] copy_process+0x32d5/0x7890 [ 195.746898][ T7438] ? preempt_schedule_thunk+0x16/0x30 [ 195.746934][ T7438] ? __pfx_copy_process+0x10/0x10 [ 195.746968][ T7438] ? find_held_lock+0x2b/0x80 [ 195.746997][ T7438] ? futex_private_hash_put+0x107/0x1c0 [ 195.747037][ T7438] kernel_clone+0xfc/0x930 [ 195.747079][ T7438] ? __pfx_kernel_clone+0x10/0x10 [ 195.747133][ T7438] __do_sys_clone+0xd9/0x120 [ 195.747167][ T7438] ? __pfx___do_sys_clone+0x10/0x10 [ 195.747201][ T7438] ? __fget_files+0x21f/0x3d0 [ 195.747238][ T7438] ? xfd_validate_state+0x129/0x190 [ 195.747299][ T7438] do_syscall_64+0xc9/0xf80 [ 195.747332][ T7438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.747357][ T7438] RIP: 0033:0x7fed9bb9af79 [ 195.747377][ T7438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.747400][ T7438] RSP: 002b:00007fed9ca0afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 195.747423][ T7438] RAX: ffffffffffffffda RBX: 00007fed9be15fa0 RCX: 00007fed9bb9af79 [ 195.747439][ T7438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 195.747454][ T7438] RBP: 00007fed9bc316e0 R08: 0000000000000000 R09: 0000000000000000 [ 195.747469][ T7438] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.747484][ T7438] R13: 00007fed9be16038 R14: 00007fed9be15fa0 R15: 00007ffc7a226178 [ 195.747514][ T7438] [ 196.438312][ T7447] netlink: 326 bytes leftover after parsing attributes in process `syz.3.296'. [ 197.392478][ T7465] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 197.535733][ T7473] Invalid ELF header magic: != ELF [ 198.530386][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.303'. [ 198.670927][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.303'. [ 200.148709][ T7531] random: crng reseeded on system resumption [ 201.059659][ T7551] netlink: 186 bytes leftover after parsing attributes in process `syz.3.311'. [ 201.111858][ T7547] can: request_module (can-proto-5) failed. [ 201.543427][ T7556] netlink: 330 bytes leftover after parsing attributes in process `syz.3.313'. [ 201.841932][ T7565] FAULT_INJECTION: forcing a failure. [ 201.841932][ T7565] name failslab, interval 1, probability 0, space 0, times 0 [ 201.931147][ T7565] CPU: 1 UID: 0 PID: 7565 Comm: syz.3.315 Tainted: G U L syzkaller #0 PREEMPT(full) [ 201.931201][ T7565] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 201.931213][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 201.931232][ T7565] Call Trace: [ 201.931242][ T7565] [ 201.931264][ T7565] dump_stack_lvl+0x100/0x190 [ 201.931310][ T7565] should_fail_ex.cold+0x5/0xa [ 201.931366][ T7565] should_failslab+0xc2/0x120 [ 201.931414][ T7565] kmem_cache_alloc_noprof+0x83/0x780 [ 201.931457][ T7565] ? copy_utsname+0x1a8/0x690 [ 201.931493][ T7565] ? copy_utsname+0x1a8/0x690 [ 201.931521][ T7565] copy_utsname+0x1a8/0x690 [ 201.931552][ T7565] create_new_namespaces+0x16a/0xab0 [ 201.931589][ T7565] ? bpf_lsm_capable+0x9/0x10 [ 201.931615][ T7565] ? security_capable+0x80/0x260 [ 201.931675][ T7565] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 201.931726][ T7565] ksys_unshare+0x455/0xab0 [ 201.931778][ T7565] ? __pfx_ksys_unshare+0x10/0x10 [ 201.931825][ T7565] ? xfd_validate_state+0x129/0x190 [ 201.931891][ T7565] __x64_sys_unshare+0x31/0x40 [ 201.931946][ T7565] do_syscall_64+0xc9/0xf80 [ 201.932002][ T7565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.932036][ T7565] RIP: 0033:0x7f3bc699af79 [ 201.932071][ T7565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.932103][ T7565] RSP: 002b:00007f3bc77ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 201.932141][ T7565] RAX: ffffffffffffffda RBX: 00007f3bc6c16090 RCX: 00007f3bc699af79 [ 201.932163][ T7565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 201.932184][ T7565] RBP: 00007f3bc6a316e0 R08: 0000000000000000 R09: 0000000000000000 [ 201.932204][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.932223][ T7565] R13: 00007f3bc6c16128 R14: 00007f3bc6c16090 R15: 00007ffd64db3658 [ 201.932266][ T7565] [ 203.448137][ T30] audit: type=1800 audit(1770666911.344:4): pid=7576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.318" name="dbroot" dev="configfs" ino=15892 res=0 errno=0 [ 203.978424][ T7588] syz.3.321 (7588): drop_caches: 0 [ 204.040463][ T30] audit: type=1326 audit(1770666911.954:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.3.321" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bc699af79 code=0x0 [ 204.744352][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.750998][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.150242][ T7649] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 207.365522][ T7649] vhci_hcd vhci_hcd.2: invalid port number 252 [ 207.413295][ T7649] vhci_hcd vhci_hcd.2: default hub control req: 040f v0772 i00fc l2 [ 208.209630][ T7669] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 209.243602][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.347'. [ 210.135316][ T7714] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 210.420526][ T7720] FAULT_INJECTION: forcing a failure. [ 210.420526][ T7720] name failslab, interval 1, probability 0, space 0, times 0 [ 210.470053][ T7720] CPU: 0 UID: 0 PID: 7720 Comm: syz.3.352 Tainted: G U L syzkaller #0 PREEMPT(full) [ 210.470097][ T7720] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 210.470106][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 210.470119][ T7720] Call Trace: [ 210.470127][ T7720] [ 210.470136][ T7720] dump_stack_lvl+0x100/0x190 [ 210.470169][ T7720] should_fail_ex.cold+0x5/0xa [ 210.470204][ T7720] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 210.470230][ T7720] should_failslab+0xc2/0x120 [ 210.470318][ T7720] kmem_cache_alloc_noprof+0x83/0x780 [ 210.470359][ T7720] ? skb_clone+0x190/0x400 [ 210.470412][ T7720] ? skb_clone+0x190/0x400 [ 210.470457][ T7720] skb_clone+0x190/0x400 [ 210.470506][ T7720] netlink_deliver_tap+0xaed/0xcc0 [ 210.470564][ T7720] netlink_unicast+0x650/0x870 [ 210.470621][ T7720] ? __pfx_netlink_unicast+0x10/0x10 [ 210.470679][ T7720] ? __pfx___might_resched+0x10/0x10 [ 210.470729][ T7720] ? __lock_acquire+0x4a5/0x2630 [ 210.470781][ T7720] netlink_sendmsg+0x8b0/0xda0 [ 210.470839][ T7720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.470888][ T7720] ? __import_iovec+0x1d2/0x640 [ 210.470943][ T7720] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 210.470991][ T7720] ____sys_sendmsg+0xa54/0xc30 [ 210.471021][ T7720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.471050][ T7720] ? _kstrtoull+0x13c/0x1f0 [ 210.471074][ T7720] ? __pfx__kstrtoull+0x10/0x10 [ 210.471105][ T7720] ___sys_sendmsg+0x190/0x1e0 [ 210.471134][ T7720] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.471188][ T7720] ? __pfx___might_resched+0x10/0x10 [ 210.471230][ T7720] __sys_sendmmsg+0x205/0x430 [ 210.471269][ T7720] ? __pfx___sys_sendmmsg+0x10/0x10 [ 210.471312][ T7720] ? __fget_files+0x215/0x3d0 [ 210.471337][ T7720] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 210.471379][ T7720] ? fput+0x79/0x100 [ 210.471411][ T7720] ? ksys_write+0x1ac/0x250 [ 210.471437][ T7720] ? __pfx_ksys_write+0x10/0x10 [ 210.471468][ T7720] __x64_sys_sendmmsg+0x9c/0x100 [ 210.471503][ T7720] ? lockdep_hardirqs_on+0x78/0x100 [ 210.471530][ T7720] do_syscall_64+0xc9/0xf80 [ 210.471561][ T7720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.471585][ T7720] RIP: 0033:0x7f3bc699af79 [ 210.471620][ T7720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.471642][ T7720] RSP: 002b:00007f3bc780b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 210.471668][ T7720] RAX: ffffffffffffffda RBX: 00007f3bc6c15fa0 RCX: 00007f3bc699af79 [ 210.471683][ T7720] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000005 [ 210.471697][ T7720] RBP: 00007f3bc780b090 R08: 0000000000000000 R09: 0000000000000000 [ 210.471711][ T7720] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 210.471724][ T7720] R13: 00007f3bc6c16038 R14: 00007f3bc6c15fa0 R15: 00007ffd64db3658 [ 210.471754][ T7720] [ 210.780185][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.352'. [ 211.525190][ T7733] random: crng reseeded on system resumption [ 211.549493][ T7733] hub 1-0:1.0: USB hub found [ 211.586467][ T7733] hub 1-0:1.0: 1 port detected [ 212.795638][ T7750] FAULT_INJECTION: forcing a failure. [ 212.795638][ T7750] name failslab, interval 1, probability 0, space 0, times 0 [ 212.808762][ T7750] CPU: 1 UID: 0 PID: 7750 Comm: syz.1.358 Tainted: G U L syzkaller #0 PREEMPT(full) [ 212.808802][ T7750] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 212.808811][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 212.808826][ T7750] Call Trace: [ 212.808834][ T7750] [ 212.808842][ T7750] dump_stack_lvl+0x100/0x190 [ 212.808876][ T7750] should_fail_ex.cold+0x5/0xa [ 212.808919][ T7750] should_failslab+0xc2/0x120 [ 212.808954][ T7750] ? kvm_io_bus_register_dev+0x1d2/0x710 [ 212.808991][ T7750] __kmalloc_noprof+0xf6/0x9c0 [ 212.809024][ T7750] ? kvm_io_bus_register_dev+0x1d2/0x710 [ 212.809061][ T7750] kvm_io_bus_register_dev+0x1d2/0x710 [ 212.809107][ T7750] kvm_pic_init+0x22f/0x380 [ 212.809135][ T7750] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 212.809176][ T7750] ? __lock_acquire+0x4a5/0x2630 [ 212.809210][ T7750] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 212.809253][ T7750] ? __lock_acquire+0x4a5/0x2630 [ 212.809290][ T7750] ? __lock_acquire+0x4a5/0x2630 [ 212.809330][ T7750] ? __lock_acquire+0x4a5/0x2630 [ 212.809369][ T7750] ? __lock_acquire+0x4a5/0x2630 [ 212.809424][ T7750] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 212.809455][ T7750] ? is_bpf_text_address+0x94/0x1a0 [ 212.809485][ T7750] ? kernel_text_address+0x8d/0x100 [ 212.809525][ T7750] ? __kernel_text_address+0xd/0x30 [ 212.809565][ T7750] ? unwind_get_return_address+0x59/0xa0 [ 212.809598][ T7750] ? arch_stack_walk+0xa6/0xf0 [ 212.809637][ T7750] ? stack_trace_save+0x8e/0xc0 [ 212.809665][ T7750] ? __pfx_stack_trace_save+0x10/0x10 [ 212.809694][ T7750] ? stack_depot_save_flags+0x27/0x9c0 [ 212.809735][ T7750] ? __lock_acquire+0x4a5/0x2630 [ 212.809770][ T7750] ? kasan_save_stack+0x3f/0x50 [ 212.809800][ T7750] ? kasan_save_stack+0x30/0x50 [ 212.809829][ T7750] ? kasan_save_track+0x14/0x30 [ 212.809859][ T7750] ? kasan_save_free_info+0x3b/0x70 [ 212.809881][ T7750] ? __kasan_slab_free+0x5f/0x80 [ 212.809912][ T7750] ? kfree+0x1c7/0x690 [ 212.809933][ T7750] ? tomoyo_path_number_perm+0x46d/0x580 [ 212.809970][ T7750] ? security_file_ioctl+0xd3/0x230 [ 212.810005][ T7750] ? __x64_sys_ioctl+0xb7/0x210 [ 212.810048][ T7750] kvm_vm_ioctl+0x1564/0x4020 [ 212.810092][ T7750] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 212.810143][ T7750] ? kasan_quarantine_put+0x104/0x240 [ 212.810173][ T7750] ? lockdep_hardirqs_on+0x78/0x100 [ 212.810208][ T7750] ? find_held_lock+0x2b/0x80 [ 212.810232][ T7750] ? tomoyo_path_number_perm+0x28f/0x580 [ 212.810268][ T7750] ? tomoyo_path_number_perm+0x28f/0x580 [ 212.810311][ T7750] ? tomoyo_path_number_perm+0x188/0x580 [ 212.810350][ T7750] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.810387][ T7750] ? futex_wake+0x1ad/0x530 [ 212.810436][ T7750] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.810470][ T7750] ? do_vfs_ioctl+0x226/0x13e0 [ 212.810512][ T7750] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 212.810561][ T7750] ? find_held_lock+0x2b/0x80 [ 212.810584][ T7750] ? hook_file_ioctl_common+0x146/0x410 [ 212.810629][ T7750] ? __fget_files+0x21f/0x3d0 [ 212.810661][ T7750] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 212.810696][ T7750] __x64_sys_ioctl+0x18e/0x210 [ 212.810739][ T7750] do_syscall_64+0xc9/0xf80 [ 212.810772][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.810797][ T7750] RIP: 0033:0x7f79d2b9af79 [ 212.810817][ T7750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.810840][ T7750] RSP: 002b:00007f79d39ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.810864][ T7750] RAX: ffffffffffffffda RBX: 00007f79d2e15fa0 RCX: 00007f79d2b9af79 [ 212.810880][ T7750] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 212.810896][ T7750] RBP: 00007f79d2c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 212.810910][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.810925][ T7750] R13: 00007f79d2e16038 R14: 00007f79d2e15fa0 R15: 00007ffef035e9f8 [ 212.810956][ T7750] [ 213.263241][ T7697] syz.0.344 (7697) used greatest stack depth: 19688 bytes left [ 213.813200][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.361'. [ 213.847858][ T7756] FAULT_INJECTION: forcing a failure. [ 213.847858][ T7756] name failslab, interval 1, probability 0, space 0, times 0 [ 213.875268][ T7756] CPU: 1 UID: 0 PID: 7756 Comm: syz.2.361 Tainted: G U L syzkaller #0 PREEMPT(full) [ 213.875320][ T7756] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 213.875332][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 213.875358][ T7756] Call Trace: [ 213.875368][ T7756] [ 213.875380][ T7756] dump_stack_lvl+0x100/0x190 [ 213.875422][ T7756] should_fail_ex.cold+0x5/0xa [ 213.875475][ T7756] should_failslab+0xc2/0x120 [ 213.875522][ T7756] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 213.875569][ T7756] ? __alloc_skb+0x156/0x410 [ 213.875620][ T7756] ? __alloc_skb+0x156/0x410 [ 213.875662][ T7756] __alloc_skb+0x156/0x410 [ 213.875703][ T7756] ? __alloc_skb+0x35d/0x410 [ 213.875744][ T7756] ? __pfx___alloc_skb+0x10/0x10 [ 213.875784][ T7756] ? __pfx_rtnl_dellink+0x10/0x10 [ 213.875846][ T7756] netlink_ack+0x117/0xb80 [ 213.875887][ T7756] netlink_rcv_skb+0x333/0x420 [ 213.875916][ T7756] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 213.875970][ T7756] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.876014][ T7756] ? netlink_deliver_tap+0x1ae/0xcc0 [ 213.876071][ T7756] netlink_unicast+0x5aa/0x870 [ 213.876128][ T7756] ? __pfx_netlink_unicast+0x10/0x10 [ 213.876177][ T7756] ? __pfx___might_resched+0x10/0x10 [ 213.876228][ T7756] ? __lock_acquire+0x4a5/0x2630 [ 213.876281][ T7756] netlink_sendmsg+0x8b0/0xda0 [ 213.876339][ T7756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.876393][ T7756] ? __import_iovec+0x1d2/0x640 [ 213.876448][ T7756] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 213.876496][ T7756] ____sys_sendmsg+0xa54/0xc30 [ 213.876537][ T7756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.876577][ T7756] ? _kstrtoull+0x13c/0x1f0 [ 213.876612][ T7756] ? __pfx__kstrtoull+0x10/0x10 [ 213.876653][ T7756] ___sys_sendmsg+0x190/0x1e0 [ 213.876692][ T7756] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.876761][ T7756] ? __pfx___might_resched+0x10/0x10 [ 213.876817][ T7756] __sys_sendmmsg+0x205/0x430 [ 213.876870][ T7756] ? __pfx___sys_sendmmsg+0x10/0x10 [ 213.876926][ T7756] ? __fget_files+0x215/0x3d0 [ 213.876960][ T7756] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.877017][ T7756] ? fput+0x79/0x100 [ 213.877059][ T7756] ? ksys_write+0x1ac/0x250 [ 213.877095][ T7756] ? __pfx_ksys_write+0x10/0x10 [ 213.877137][ T7756] __x64_sys_sendmmsg+0x9c/0x100 [ 213.877186][ T7756] ? lockdep_hardirqs_on+0x78/0x100 [ 213.877224][ T7756] do_syscall_64+0xc9/0xf80 [ 213.877267][ T7756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.877300][ T7756] RIP: 0033:0x7f78c219af79 [ 213.877325][ T7756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.877365][ T7756] RSP: 002b:00007f78c307f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 213.877395][ T7756] RAX: ffffffffffffffda RBX: 00007f78c2415fa0 RCX: 00007f78c219af79 [ 213.877415][ T7756] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000005 [ 213.877434][ T7756] RBP: 00007f78c307f090 R08: 0000000000000000 R09: 0000000000000000 [ 213.877453][ T7756] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 213.877472][ T7756] R13: 00007f78c2416038 R14: 00007f78c2415fa0 R15: 00007ffd9e837c28 [ 213.877515][ T7756] [ 214.589111][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'. [ 214.707882][ T7765] sd 0:0:1:0: PR command failed: 1026 [ 214.713811][ T7765] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 214.741012][ T7765] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 214.782158][ T5839] Bluetooth: hci1: ACL packet too small [ 216.967705][ T7816] FAULT_INJECTION: forcing a failure. [ 216.967705][ T7816] name failslab, interval 1, probability 0, space 0, times 0 [ 216.996530][ T7816] CPU: 0 UID: 0 PID: 7816 Comm: syz.2.377 Tainted: G U L syzkaller #0 PREEMPT(full) [ 216.996588][ T7816] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 216.996601][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 216.996622][ T7816] Call Trace: [ 216.996634][ T7816] [ 216.996647][ T7816] dump_stack_lvl+0x100/0x190 [ 216.996695][ T7816] should_fail_ex.cold+0x5/0xa [ 216.996753][ T7816] should_failslab+0xc2/0x120 [ 216.996802][ T7816] ? __register_sysctl_table+0xac/0x1650 [ 216.996855][ T7816] __kmalloc_noprof+0xf6/0x9c0 [ 216.996902][ T7816] ? __register_sysctl_table+0xac/0x1650 [ 216.996953][ T7816] __register_sysctl_table+0xac/0x1650 [ 216.997007][ T7816] ? is_module_address+0x5f/0xf0 [ 216.997074][ T7816] ? __pfx___register_sysctl_table+0x10/0x10 [ 216.997127][ T7816] ? is_module_address+0x69/0xf0 [ 216.997174][ T7816] ? register_net_sysctl_sz+0x222/0x430 [ 216.997229][ T7816] ? __asan_memcpy+0x3c/0x60 [ 216.997270][ T7816] sctp_sysctl_net_register+0x15e/0x200 [ 216.997324][ T7816] ? __pfx_sctp_defaults_init+0x10/0x10 [ 216.997372][ T7816] sctp_defaults_init+0x6d2/0xd90 [ 216.997422][ T7816] ? __pfx_sctp_defaults_init+0x10/0x10 [ 216.997470][ T7816] ops_init+0x1e2/0x5f0 [ 216.997528][ T7816] setup_net+0x118/0x3a0 [ 216.997560][ T7816] ? __pfx_setup_net+0x10/0x10 [ 216.997587][ T7816] ? lockdep_init_map_type+0x5c/0x250 [ 216.997635][ T7816] ? mutex_init_lockep+0x110/0x150 [ 216.997688][ T7816] copy_net_ns+0x46f/0x7c0 [ 216.997728][ T7816] create_new_namespaces+0x3ea/0xab0 [ 216.997776][ T7816] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 216.997819][ T7816] ksys_unshare+0x455/0xab0 [ 216.997871][ T7816] ? __pfx_ksys_unshare+0x10/0x10 [ 216.997918][ T7816] ? xfd_validate_state+0x129/0x190 [ 216.997991][ T7816] __x64_sys_unshare+0x31/0x40 [ 216.998046][ T7816] do_syscall_64+0xc9/0xf80 [ 216.998089][ T7816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.998123][ T7816] RIP: 0033:0x7f78c219af79 [ 216.998149][ T7816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.998182][ T7816] RSP: 002b:00007f78c307f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 216.998213][ T7816] RAX: ffffffffffffffda RBX: 00007f78c2415fa0 RCX: 00007f78c219af79 [ 216.998236][ T7816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 216.998256][ T7816] RBP: 00007f78c22316e0 R08: 0000000000000000 R09: 0000000000000000 [ 216.998276][ T7816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.998296][ T7816] R13: 00007f78c2416038 R14: 00007f78c2415fa0 R15: 00007ffd9e837c28 [ 216.998340][ T7816] [ 220.336204][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.393'. [ 220.379104][ T7886] veth1_macvtap: left allmulticast mode [ 220.385034][ T7886] veth1_macvtap: left promiscuous mode [ 221.157113][ T7896] FAULT_INJECTION: forcing a failure. [ 221.157113][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 221.223999][ T7896] CPU: 1 UID: 0 PID: 7896 Comm: syz.2.394 Tainted: G U L syzkaller #0 PREEMPT(full) [ 221.224054][ T7896] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 221.224067][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 221.224085][ T7896] Call Trace: [ 221.224096][ T7896] [ 221.224109][ T7896] dump_stack_lvl+0x100/0x190 [ 221.224156][ T7896] should_fail_ex.cold+0x5/0xa [ 221.224213][ T7896] should_failslab+0xc2/0x120 [ 221.224262][ T7896] __kmalloc_cache_noprof+0x80/0x810 [ 221.224300][ T7896] ? percpu_ref_init+0xec/0x3f0 [ 221.224349][ T7896] ? percpu_ref_init+0xec/0x3f0 [ 221.224389][ T7896] ? __pfx_css_release+0x10/0x10 [ 221.224439][ T7896] percpu_ref_init+0xec/0x3f0 [ 221.224484][ T7896] cgroup_mkdir+0x2a0/0x12d0 [ 221.224525][ T7896] ? __pfx_cgroup_mkdir+0x10/0x10 [ 221.224561][ T7896] kernfs_iop_mkdir+0x111/0x190 [ 221.224610][ T7896] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 221.224656][ T7896] vfs_mkdir+0x729/0xb50 [ 221.224720][ T7896] do_mkdirat+0x435/0x590 [ 221.224766][ T7896] ? __pfx_do_mkdirat+0x10/0x10 [ 221.224807][ T7896] ? strncpy_from_user+0x19d/0x2d0 [ 221.224862][ T7896] ? getname_flags.part.0+0x1c5/0x540 [ 221.224927][ T7896] __x64_sys_mkdir+0xef/0x140 [ 221.224972][ T7896] do_syscall_64+0xc9/0xf80 [ 221.225024][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.225059][ T7896] RIP: 0033:0x7f78c219af79 [ 221.225087][ T7896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.225124][ T7896] RSP: 002b:00007f78c305e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 221.225156][ T7896] RAX: ffffffffffffffda RBX: 00007f78c2416090 RCX: 00007f78c219af79 [ 221.225178][ T7896] RDX: 0000000000000000 RSI: 00000000000007ff RDI: 0000200000000000 [ 221.225199][ T7896] RBP: 00007f78c22316e0 R08: 0000000000000000 R09: 0000000000000000 [ 221.225220][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.225239][ T7896] R13: 00007f78c2416128 R14: 00007f78c2416090 R15: 00007ffd9e837c28 [ 221.225283][ T7896] [ 221.514697][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.395'. [ 221.764415][ T7903] Invalid ELF header magic: != ELF [ 222.698295][ T7908] zswap: compressor not available [ 222.799423][ T10] Process accounting resumed [ 223.851536][ T7917] Process accounting resumed [ 224.315126][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.402'. [ 224.963030][ T7939] mmap: syz.3.403 (7939): VmData 37855232 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 226.608935][ T7959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.406'. [ 227.890337][ T5839] Bluetooth: hci3: ACL packet too small [ 233.078933][ T8051] could not allocate digest TFM handle [ 233.132363][ T8059] FAULT_INJECTION: forcing a failure. [ 233.132363][ T8059] name failslab, interval 1, probability 0, space 0, times 0 [ 233.196617][ T8059] CPU: 0 UID: 0 PID: 8059 Comm: syz.2.425 Tainted: G U L syzkaller #0 PREEMPT(full) [ 233.196660][ T8059] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 233.196669][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.196684][ T8059] Call Trace: [ 233.196691][ T8059] [ 233.196700][ T8059] dump_stack_lvl+0x100/0x190 [ 233.196734][ T8059] should_fail_ex.cold+0x5/0xa [ 233.196775][ T8059] should_failslab+0xc2/0x120 [ 233.196821][ T8059] ? lsm_blob_alloc+0x68/0x90 [ 233.196847][ T8059] __kmalloc_noprof+0xf6/0x9c0 [ 233.196880][ T8059] ? lsm_blob_alloc+0x68/0x90 [ 233.196906][ T8059] lsm_blob_alloc+0x68/0x90 [ 233.196933][ T8059] security_prepare_creds+0x2d/0x290 [ 233.196959][ T8059] prepare_creds+0x5d6/0x950 [ 233.196984][ T8059] copy_creds+0xa7/0xa50 [ 233.197010][ T8059] copy_process+0x1029/0x7890 [ 233.197057][ T8059] ? __pfx_copy_process+0x10/0x10 [ 233.197098][ T8059] ? _copy_from_user+0x59/0xd0 [ 233.197139][ T8059] kernel_clone+0xfc/0x930 [ 233.197175][ T8059] ? __pfx_kernel_clone+0x10/0x10 [ 233.197215][ T8059] ? __pfx_futex_wait+0x10/0x10 [ 233.197245][ T8059] __do_sys_clone3+0x214/0x290 [ 233.197279][ T8059] ? __pfx___do_sys_clone3+0x10/0x10 [ 233.197350][ T8059] do_syscall_64+0xc9/0xf80 [ 233.197389][ T8059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.197414][ T8059] RIP: 0033:0x7f78c219af79 [ 233.197433][ T8059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.197456][ T8059] RSP: 002b:00007f78c307eef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 233.197479][ T8059] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f78c219af79 [ 233.197495][ T8059] RDX: 00007f78c307ef10 RSI: 0000000000000058 RDI: 00007f78c307ef10 [ 233.197511][ T8059] RBP: 00007f78c22316e0 R08: 0000000000000000 R09: 0000000000000058 [ 233.197526][ T8059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.197540][ T8059] R13: 00007f78c2416038 R14: 00007f78c2415fa0 R15: 00007ffd9e837c28 [ 233.197571][ T8059] [ 233.621600][ T8061] FAULT_INJECTION: forcing a failure. [ 233.621600][ T8061] name failslab, interval 1, probability 0, space 0, times 0 [ 233.668323][ T8061] CPU: 1 UID: 0 PID: 8061 Comm: syz.1.426 Tainted: G U L syzkaller #0 PREEMPT(full) [ 233.668379][ T8061] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 233.668393][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.668416][ T8061] Call Trace: [ 233.668424][ T8061] [ 233.668433][ T8061] dump_stack_lvl+0x100/0x190 [ 233.668468][ T8061] should_fail_ex.cold+0x5/0xa [ 233.668512][ T8061] should_failslab+0xc2/0x120 [ 233.668549][ T8061] __kmalloc_cache_noprof+0x80/0x810 [ 233.668576][ T8061] ? device_create_groups_vargs+0x8a/0x270 [ 233.668621][ T8061] ? device_create_groups_vargs+0x8a/0x270 [ 233.668658][ T8061] device_create_groups_vargs+0x8a/0x270 [ 233.668700][ T8061] device_create+0xed/0x130 [ 233.668744][ T8061] ? __pfx_device_create+0x10/0x10 [ 233.668783][ T8061] ? timer_init_key+0x14c/0x2c0 [ 233.668818][ T8061] ? ieee80211_roc_setup+0x136/0x270 [ 233.668850][ T8061] ? ieee80211_alloc_hw_nm+0x19c3/0x22a0 [ 233.668894][ T8061] mac80211_hwsim_new_radio+0x37f/0x57c0 [ 233.668945][ T8061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.668975][ T8061] ? __nla_validate_parse+0x1e7/0x28b0 [ 233.669004][ T8061] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 233.669051][ T8061] hwsim_new_radio_nl+0xc1f/0x1340 [ 233.669087][ T8061] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 233.669120][ T8061] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 233.669167][ T8061] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 233.669196][ T8061] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 233.669230][ T8061] genl_family_rcv_msg_doit+0x214/0x300 [ 233.669261][ T8061] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 233.669289][ T8061] ? genl_get_cmd+0x3ef/0x720 [ 233.669319][ T8061] ? bpf_lsm_capable+0x9/0x10 [ 233.669340][ T8061] ? security_capable+0x80/0x260 [ 233.669372][ T8061] ? ns_capable+0xd2/0xf0 [ 233.669402][ T8061] genl_rcv_msg+0x560/0x800 [ 233.669446][ T8061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.669474][ T8061] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 233.669524][ T8061] netlink_rcv_skb+0x159/0x420 [ 233.669547][ T8061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.669575][ T8061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.669610][ T8061] ? netlink_deliver_tap+0x1ae/0xcc0 [ 233.669654][ T8061] genl_rcv+0x28/0x40 [ 233.669678][ T8061] netlink_unicast+0x5aa/0x870 [ 233.669724][ T8061] ? __pfx_netlink_unicast+0x10/0x10 [ 233.669782][ T8061] netlink_sendmsg+0x8b0/0xda0 [ 233.669827][ T8061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.669867][ T8061] ? __import_iovec+0x1d2/0x640 [ 233.669911][ T8061] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 233.669947][ T8061] ____sys_sendmsg+0xa54/0xc30 [ 233.669978][ T8061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.670004][ T8061] ? __pfx___futex_wait+0x10/0x10 [ 233.670033][ T8061] ? __pfx_futex_wake_mark+0x10/0x10 [ 233.670079][ T8061] ___sys_sendmsg+0x190/0x1e0 [ 233.670111][ T8061] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.670154][ T8061] ? find_held_lock+0x2b/0x80 [ 233.670197][ T8061] __sys_sendmsg+0x170/0x220 [ 233.670236][ T8061] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.670273][ T8061] ? __x64_sys_futex+0x34f/0x4d0 [ 233.670326][ T8061] do_syscall_64+0xc9/0xf80 [ 233.670359][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.670385][ T8061] RIP: 0033:0x7f79d2b9af79 [ 233.670405][ T8061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.670428][ T8061] RSP: 002b:00007f79d39ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.670452][ T8061] RAX: ffffffffffffffda RBX: 00007f79d2e15fa0 RCX: 00007f79d2b9af79 [ 233.670468][ T8061] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 233.670483][ T8061] RBP: 00007f79d2c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 233.670498][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.670512][ T8061] R13: 00007f79d2e16038 R14: 00007f79d2e15fa0 R15: 00007ffef035e9f8 [ 233.670543][ T8061] [ 235.366624][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 235.649869][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.663744][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.676484][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.684828][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.696219][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.331426][ T8111] FAULT_INJECTION: forcing a failure. [ 236.331426][ T8111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.389976][ T8097] chnl_net:caif_netlink_parms(): no params data found [ 236.412737][ T8111] CPU: 1 UID: 0 PID: 8111 Comm: syz.3.437 Tainted: G U L syzkaller #0 PREEMPT(full) [ 236.412795][ T8111] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 236.412808][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 236.412827][ T8111] Call Trace: [ 236.412839][ T8111] [ 236.412851][ T8111] dump_stack_lvl+0x100/0x190 [ 236.412897][ T8111] should_fail_ex.cold+0x5/0xa [ 236.412948][ T8111] ? prepare_alloc_pages+0x16d/0x5f0 [ 236.413005][ T8111] should_fail_alloc_page+0xeb/0x140 [ 236.413057][ T8111] prepare_alloc_pages+0x1f0/0x5f0 [ 236.413096][ T8111] ? do_raw_spin_unlock+0x145/0x1e0 [ 236.413139][ T8111] __alloc_frozen_pages_noprof+0x193/0x2410 [ 236.413178][ T8111] ? stack_depot_save_flags+0x412/0x9c0 [ 236.413224][ T8111] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.413260][ T8111] ? kasan_save_track+0x14/0x30 [ 236.413291][ T8111] ? alloc_ldt_struct+0x5d/0x1b0 [ 236.413318][ T8111] ? __x64_sys_modify_ldt+0xb1/0x170 [ 236.413346][ T8111] ? do_syscall_64+0xc9/0xf80 [ 236.413374][ T8111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.413413][ T8111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.413442][ T8111] ? policy_nodemask+0xed/0x4f0 [ 236.413481][ T8111] alloc_pages_mpol+0x1fb/0x550 [ 236.413521][ T8111] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 236.413565][ T8111] alloc_pages_noprof+0x131/0x390 [ 236.413603][ T8111] get_zeroed_page_noprof+0x18/0xb0 [ 236.413640][ T8111] alloc_ldt_struct+0x9f/0x1b0 [ 236.413667][ T8111] write_ldt+0x62b/0xd40 [ 236.413700][ T8111] ? __pfx_write_ldt+0x10/0x10 [ 236.413727][ T8111] ? fput+0x79/0x100 [ 236.413761][ T8111] ? xfd_validate_state+0x129/0x190 [ 236.413808][ T8111] __x64_sys_modify_ldt+0xb1/0x170 [ 236.413838][ T8111] do_syscall_64+0xc9/0xf80 [ 236.413871][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.413895][ T8111] RIP: 0033:0x7f3bc699af79 [ 236.413914][ T8111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.413937][ T8111] RSP: 002b:00007f3bc780b028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 236.413960][ T8111] RAX: ffffffffffffffda RBX: 00007f3bc6c15fa0 RCX: 00007f3bc699af79 [ 236.413977][ T8111] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 236.413992][ T8111] RBP: 00007f3bc6a316e0 R08: 0000000000000000 R09: 0000000000000000 [ 236.414006][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.414045][ T8111] R13: 00007f3bc6c16038 R14: 00007f3bc6c15fa0 R15: 00007ffd64db3658 [ 236.414087][ T8111] [ 236.839598][ T8111] random: crng reseeded on system resumption [ 236.890862][ T8115] netlink: 'syz.2.438': attribute type 5 has an invalid length. [ 237.067025][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 237.123139][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.130702][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.138812][ T8097] bridge_slave_0: entered allmulticast mode [ 237.159384][ T8097] bridge_slave_0: entered promiscuous mode [ 237.169639][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.178274][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.185596][ T8097] bridge_slave_1: entered allmulticast mode [ 237.193812][ T8097] bridge_slave_1: entered promiscuous mode [ 237.273441][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.352120][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.467984][ T8097] team0: Port device team_slave_0 added [ 237.491179][ T8097] team0: Port device team_slave_1 added [ 237.554308][ T8131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.440'. [ 237.592076][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.612834][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.687644][ T8097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.715718][ T8134] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 237.735108][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.788666][ T5839] Bluetooth: hci4: command tx timeout [ 237.812273][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.943840][ T8097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.475175][ T8097] hsr_slave_0: entered promiscuous mode [ 238.526166][ T8097] hsr_slave_1: entered promiscuous mode [ 238.561350][ T8097] debugfs: 'hsr0' already exists in 'hsr' [ 238.604476][ T8097] Cannot create hsr debugfs directory [ 238.881501][ T8149] Invalid ELF header magic: != ELF [ 239.572127][ T8097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.866621][ T5839] Bluetooth: hci4: command tx timeout [ 239.931760][ T8097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.000494][ T8097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.128136][ T8097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.662430][ T8097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.779512][ T8097] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.845309][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.852940][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.926621][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.933834][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.938356][ T5839] Bluetooth: hci4: command tx timeout [ 241.995578][ T8097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.068377][ T8198] Invalid ELF header magic: != ELF [ 243.101460][ T8097] veth0_vlan: entered promiscuous mode [ 243.213541][ T8097] veth1_vlan: entered promiscuous mode [ 243.447802][ T8097] veth0_macvtap: entered promiscuous mode [ 243.534892][ T8097] veth1_macvtap: entered promiscuous mode [ 243.593425][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.612190][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.702635][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.773672][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.792891][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.889380][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.026355][ T5839] Bluetooth: hci4: command tx timeout [ 244.233458][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.241782][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.399516][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.428197][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.255333][ T5839] Bluetooth: hci4: ACL packet too small [ 245.685819][ T30] audit: type=1800 audit(1770666953.594:6): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.467" name="members" dev="configfs" ino=20646 res=0 errno=0 [ 245.806139][ T30] audit: type=1326 audit(1770666953.664:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.1.466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79d2b9af79 code=0x0 [ 245.847483][ T8265] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 245.847483][ T8265] The task syz.1.466 (8265) triggered the difference, watch for misbehavior. [ 247.211565][ T8282] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 247.346602][ T5839] Bluetooth: hci2: ACL packet too small [ 248.307172][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.467141][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.653814][ T8311] FAULT_INJECTION: forcing a failure. [ 248.653814][ T8311] name failslab, interval 1, probability 0, space 0, times 0 [ 248.696441][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.754051][ T8311] CPU: 1 UID: 0 PID: 8311 Comm: syz.4.478 Tainted: G U L syzkaller #0 PREEMPT(full) [ 248.754093][ T8311] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 248.754109][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 248.754133][ T8311] Call Trace: [ 248.754141][ T8311] [ 248.754150][ T8311] dump_stack_lvl+0x100/0x190 [ 248.754183][ T8311] should_fail_ex.cold+0x5/0xa [ 248.754225][ T8311] should_failslab+0xc2/0x120 [ 248.754261][ T8311] kmem_cache_alloc_noprof+0x83/0x780 [ 248.754294][ T8311] ? ima_d_path+0xc4/0x2a0 [ 248.754335][ T8311] ? ima_d_path+0xc4/0x2a0 [ 248.754369][ T8311] ima_d_path+0xc4/0x2a0 [ 248.754404][ T8311] ? __pfx_ima_d_path+0x10/0x10 [ 248.754443][ T8311] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 248.754479][ T8311] process_measurement+0x1bad/0x2400 [ 248.754519][ T8311] ? __pfx_process_measurement+0x10/0x10 [ 248.754548][ T8311] ? kasan_save_stack+0x3f/0x50 [ 248.754579][ T8311] ? kasan_save_track+0x14/0x30 [ 248.754609][ T8311] ? kmem_cache_alloc_noprof+0x2ad/0x780 [ 248.754650][ T8311] ? aa_file_perm+0x268/0x1540 [ 248.754709][ T8311] ima_file_mmap+0x1be/0x1e0 [ 248.754739][ T8311] ? __pfx_ima_file_mmap+0x10/0x10 [ 248.754777][ T8311] security_mmap_file+0x278/0x9b0 [ 248.754820][ T8311] vm_mmap_pgoff+0xec/0x470 [ 248.754861][ T8311] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 248.754897][ T8311] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 248.754937][ T8311] ? hugetlbfs_get_inode+0x36e/0x6f0 [ 248.754971][ T8311] ksys_mmap_pgoff+0x1c4/0x5b0 [ 248.755013][ T8311] __x64_sys_mmap+0x125/0x190 [ 248.755039][ T8311] do_syscall_64+0xc9/0xf80 [ 248.755134][ T8311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.755172][ T8311] RIP: 0033:0x7f6c1959af79 [ 248.755197][ T8311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.755220][ T8311] RSP: 002b:00007f6c177ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 248.755242][ T8311] RAX: ffffffffffffffda RBX: 00007f6c19815fa0 RCX: 00007f6c1959af79 [ 248.755259][ T8311] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 248.755274][ T8311] RBP: 00007f6c196316e0 R08: 0000000000000401 R09: 0000300000000000 [ 248.755289][ T8311] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 248.755304][ T8311] R13: 00007f6c19816038 R14: 00007f6c19815fa0 R15: 00007ffff6aebc38 [ 248.755335][ T8311] [ 249.174464][ T8313] zswap: compressor not available [ 249.195587][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.628311][ T12] team0: left allmulticast mode [ 249.633545][ T12] team_slave_0: left allmulticast mode [ 249.652644][ T12] team_slave_1: left allmulticast mode [ 249.667713][ T12] team0: left promiscuous mode [ 249.677924][ T12] team_slave_0: left promiscuous mode [ 249.684333][ T12] team_slave_1: left promiscuous mode [ 249.715688][ T12] bridge0: port 3(team0) entered disabled state [ 249.796757][ T12] bridge_slave_0: left allmulticast mode [ 249.836600][ T12] bridge_slave_0: left promiscuous mode [ 249.861993][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.211149][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.239648][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.299506][ T12] bond0 (unregistering): Released all slaves [ 251.638797][ T8379] FAULT_INJECTION: forcing a failure. [ 251.638797][ T8379] name failslab, interval 1, probability 0, space 0, times 0 [ 251.678286][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.1.489 Tainted: G U L syzkaller #0 PREEMPT(full) [ 251.678328][ T8379] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 251.678337][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 251.678351][ T8379] Call Trace: [ 251.678359][ T8379] [ 251.678368][ T8379] dump_stack_lvl+0x100/0x190 [ 251.678401][ T8379] should_fail_ex.cold+0x5/0xa [ 251.678443][ T8379] should_failslab+0xc2/0x120 [ 251.678479][ T8379] kmem_cache_alloc_noprof+0x83/0x780 [ 251.678513][ T8379] ? __anon_vma_prepare+0xae/0x5e0 [ 251.678545][ T8379] ? __anon_vma_prepare+0xae/0x5e0 [ 251.678572][ T8379] __anon_vma_prepare+0xae/0x5e0 [ 251.678598][ T8379] ? __pfx___pte_alloc+0x10/0x10 [ 251.678637][ T8379] __vmf_anon_prepare+0x11f/0x250 [ 251.678678][ T8379] do_anonymous_page+0x520/0x1f40 [ 251.678705][ T8379] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 251.678749][ T8379] ? __pmd_alloc+0x6aa/0x9c0 [ 251.678791][ T8379] __handle_mm_fault+0x1d3a/0x2b50 [ 251.678822][ T8379] ? mt_find+0x45e/0x8e0 [ 251.678855][ T8379] ? __pfx___handle_mm_fault+0x10/0x10 [ 251.678881][ T8379] ? __pfx_mt_find+0x10/0x10 [ 251.678936][ T8379] handle_mm_fault+0x36d/0xa20 [ 251.678969][ T8379] __get_user_pages+0xf9c/0x34d0 [ 251.679018][ T8379] ? __pfx___get_user_pages+0x10/0x10 [ 251.679065][ T8379] populate_vma_page_range+0x267/0x3f0 [ 251.679115][ T8379] ? __pfx_populate_vma_page_range+0x10/0x10 [ 251.679156][ T8379] ? __pfx_find_vma_intersection+0x10/0x10 [ 251.679195][ T8379] ? do_mmap+0x93f/0x12f0 [ 251.679236][ T8379] __mm_populate+0x107/0x3a0 [ 251.679260][ T8379] ? __pfx___mm_populate+0x10/0x10 [ 251.679302][ T8379] ? up_write+0x290/0x4f0 [ 251.679343][ T8379] vm_mmap_pgoff+0x37f/0x470 [ 251.679385][ T8379] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 251.679422][ T8379] ? ktime_get+0x1a7/0x300 [ 251.679450][ T8379] ? find_held_lock+0x2b/0x80 [ 251.679479][ T8379] ? __x64_sys_futex+0x34f/0x4d0 [ 251.679513][ T8379] ? __x64_sys_futex+0x358/0x4d0 [ 251.679552][ T8379] ksys_mmap_pgoff+0x7d/0x5b0 [ 251.679593][ T8379] __x64_sys_mmap+0x125/0x190 [ 251.679620][ T8379] do_syscall_64+0xc9/0xf80 [ 251.679653][ T8379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.679678][ T8379] RIP: 0033:0x7f79d2b9af79 [ 251.679698][ T8379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.679721][ T8379] RSP: 002b:00007f79d39ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 251.679744][ T8379] RAX: ffffffffffffffda RBX: 00007f79d2e15fa0 RCX: 00007f79d2b9af79 [ 251.679760][ T8379] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 251.679775][ T8379] RBP: 00007f79d2c316e0 R08: 0000000000000007 R09: 0000000000028000 [ 251.679790][ T8379] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 251.679805][ T8379] R13: 00007f79d2e16038 R14: 00007f79d2e15fa0 R15: 00007ffef035e9f8 [ 251.679836][ T8379] [ 252.606059][ T8391] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 253.551465][ T12] hsr_slave_0: left promiscuous mode [ 253.612972][ T12] hsr_slave_1: left promiscuous mode [ 253.619519][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.626963][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.636788][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.645241][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.668003][ T12] veth1_macvtap: left promiscuous mode [ 253.674107][ T12] veth0_macvtap: left promiscuous mode [ 254.071384][ T12] team0 (unregistering): Port device team_slave_1 removed [ 254.116075][ T12] team0 (unregistering): Port device team_slave_0 removed [ 255.473698][ T8371] Process accounting paused [ 255.603531][ T5839] Bluetooth: hci3: ACL packet too small [ 256.536941][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 256.558849][ T8456] netlink: 5 bytes leftover after parsing attributes in process `syz.3.499'. [ 256.572413][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 256.751727][ T8463] futex_wake_op: syz.3.501 tries to shift op by -2048; fix this program [ 256.801768][ T8463] 0x000000000000-0x000000020000 : "" [ 256.916248][ T8463] ftl_cs: FTL header not found. [ 257.151058][ T8467] zswap: compressor not available [ 257.456392][ T5839] Bluetooth: hci4: ACL packet too small [ 258.184860][ T8501] FAULT_INJECTION: forcing a failure. [ 258.184860][ T8501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 258.260666][ T8501] CPU: 1 UID: 0 PID: 8501 Comm: syz.3.507 Tainted: G U L syzkaller #0 PREEMPT(full) [ 258.260722][ T8501] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 258.260736][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 258.260754][ T8501] Call Trace: [ 258.260764][ T8501] [ 258.260775][ T8501] dump_stack_lvl+0x100/0x190 [ 258.260822][ T8501] should_fail_ex.cold+0x5/0xa [ 258.260873][ T8501] ? prepare_alloc_pages+0x16d/0x5f0 [ 258.260930][ T8501] should_fail_alloc_page+0xeb/0x140 [ 258.260983][ T8501] prepare_alloc_pages+0x1f0/0x5f0 [ 258.261035][ T8501] ? rcu_is_watching+0x12/0xc0 [ 258.261073][ T8501] __alloc_frozen_pages_noprof+0x193/0x2410 [ 258.261119][ T8501] ? __lock_acquire+0x4a5/0x2630 [ 258.261181][ T8501] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 258.261226][ T8501] ? do_raw_spin_lock+0x128/0x260 [ 258.261281][ T8501] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 258.261331][ T8501] ? find_held_lock+0x2b/0x80 [ 258.261377][ T8501] ? __lock_acquire+0x4a5/0x2630 [ 258.261423][ T8501] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.261463][ T8501] ? policy_nodemask+0xed/0x4f0 [ 258.261525][ T8501] alloc_pages_mpol+0x1fb/0x550 [ 258.261578][ T8501] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 258.261628][ T8501] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 258.261677][ T8501] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 258.261734][ T8501] folio_alloc_mpol_noprof+0x36/0x340 [ 258.261793][ T8501] shmem_alloc_folio+0x135/0x160 [ 258.261830][ T8501] shmem_alloc_and_add_folio+0x371/0xd40 [ 258.261884][ T8501] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 258.261933][ T8501] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 258.261986][ T8501] shmem_get_folio_gfp+0x6ab/0x1900 [ 258.262040][ T8501] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 258.262084][ T8501] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 258.262135][ T8501] ? lockdep_hardirqs_on+0x78/0x100 [ 258.262182][ T8501] shmem_fault+0x1f9/0xa20 [ 258.262222][ T8501] ? __lock_acquire+0x4a5/0x2630 [ 258.262264][ T8501] ? __pfx_shmem_fault+0x10/0x10 [ 258.262304][ T8501] ? __pfx_current_time+0x10/0x10 [ 258.262351][ T8501] ? __up_read+0x2c5/0x700 [ 258.262415][ T8501] ? __pfx_filemap_map_pages+0x10/0x10 [ 258.262451][ T8501] __do_fault+0x10d/0x550 [ 258.262501][ T8501] ? __pfx_filemap_map_pages+0x10/0x10 [ 258.262538][ T8501] do_fault+0x2db/0x1990 [ 258.262589][ T8501] __handle_mm_fault+0x1807/0x2b50 [ 258.262625][ T8501] ? mt_find+0x45e/0x8e0 [ 258.262665][ T8501] ? __pfx___handle_mm_fault+0x10/0x10 [ 258.262695][ T8501] ? __pfx_mt_find+0x10/0x10 [ 258.262750][ T8501] ? find_vma+0xbf/0x140 [ 258.262788][ T8501] ? __pfx_find_vma+0x10/0x10 [ 258.262830][ T8501] handle_mm_fault+0x36d/0xa20 [ 258.262868][ T8501] do_user_addr_fault+0x74c/0x12f0 [ 258.262909][ T8501] exc_page_fault+0x6f/0xd0 [ 258.262942][ T8501] asm_exc_page_fault+0x26/0x30 [ 258.262969][ T8501] RIP: 0010:rep_stos_alternative+0x57/0x80 [ 258.263012][ T8501] Code: 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 <48> 89 47 30 48 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 [ 258.263039][ T8501] RSP: 0018:ffffc9000bce7d28 EFLAGS: 00050202 [ 258.263062][ T8501] RAX: 0000000000000000 RBX: 000000000080000d RCX: 00000000007d2044 [ 258.263079][ T8501] RDX: 0000000000080000 RSI: ffffffff82527001 RDI: 000000000002dfc9 [ 258.263097][ T8501] RBP: 1ffff9200179cfac R08: 0000000000000001 R09: 00000000000001c6 [ 258.263114][ T8501] R10: 0000000000000200 R11: 0000000000000000 R12: 00007ffffffff000 [ 258.263131][ T8501] R13: 0000000000800004 R14: 0000000000000009 R15: 0000000000000000 [ 258.263158][ T8501] ? __might_fault+0x111/0x140 [ 258.263195][ T8501] evdev_do_ioctl+0xd09/0x1b60 [ 258.263239][ T8501] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 258.263286][ T8501] ? find_held_lock+0x2b/0x80 [ 258.263329][ T8501] evdev_ioctl+0x16f/0x1a0 [ 258.263366][ T8501] ? __pfx_evdev_ioctl+0x10/0x10 [ 258.263406][ T8501] __x64_sys_ioctl+0x18e/0x210 [ 258.263456][ T8501] do_syscall_64+0xc9/0xf80 [ 258.263500][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.263528][ T8501] RIP: 0033:0x7f3bc699af79 [ 258.263550][ T8501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.263577][ T8501] RSP: 002b:00007f3bc780b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.263602][ T8501] RAX: ffffffffffffffda RBX: 00007f3bc6c15fa0 RCX: 00007f3bc699af79 [ 258.263620][ T8501] RDX: 0000200000000000 RSI: 0000000080104592 RDI: 0000000000000004 [ 258.263637][ T8501] RBP: 00007f3bc6a316e0 R08: 0000000000000000 R09: 0000000000000000 [ 258.263654][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.263670][ T8501] R13: 00007f3bc6c16038 R14: 00007f3bc6c15fa0 R15: 00007ffd64db3658 [ 258.263706][ T8501] [ 260.026463][ T8532] openvswitch: netlink: Duplicate or invalid key (type 0). [ 260.480050][ T30] audit: type=1800 audit(1770666968.394:8): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.515" name="members" dev="configfs" ino=21426 res=0 errno=0 [ 261.803538][ T8579] binder: 8573:8579 ioctl c018620c 0 returned -1 [ 262.365499][ T8597] FAULT_INJECTION: forcing a failure. [ 262.365499][ T8597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.380895][ T8597] CPU: 1 UID: 0 PID: 8597 Comm: syz.4.525 Tainted: G U L syzkaller #0 PREEMPT(full) [ 262.380946][ T8597] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 262.380958][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 262.380975][ T8597] Call Trace: [ 262.380984][ T8597] [ 262.380995][ T8597] dump_stack_lvl+0x100/0x190 [ 262.381037][ T8597] should_fail_ex.cold+0x5/0xa [ 262.381092][ T8597] _copy_from_user+0x2e/0xd0 [ 262.381142][ T8597] kstrtouint_from_user+0xd6/0x1d0 [ 262.381170][ T8597] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 262.381199][ T8597] ? __lock_acquire+0x4a5/0x2630 [ 262.381234][ T8597] ? lock_acquire+0x17c/0x330 [ 262.381270][ T8597] proc_fail_nth_write+0x83/0x220 [ 262.381299][ T8597] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 262.381336][ T8597] vfs_write+0x2aa/0x1070 [ 262.381364][ T8597] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 262.381395][ T8597] ? __pfx_vfs_write+0x10/0x10 [ 262.381419][ T8597] ? find_held_lock+0x2b/0x80 [ 262.381446][ T8597] ? __fget_files+0x215/0x3d0 [ 262.381477][ T8597] ? __fget_files+0x21f/0x3d0 [ 262.381511][ T8597] ksys_write+0x12a/0x250 [ 262.381538][ T8597] ? __pfx_ksys_write+0x10/0x10 [ 262.381572][ T8597] do_syscall_64+0xc9/0xf80 [ 262.381604][ T8597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.381627][ T8597] RIP: 0033:0x7f6c1955b84e [ 262.381645][ T8597] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 262.381666][ T8597] RSP: 002b:00007f6c177edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.381687][ T8597] RAX: ffffffffffffffda RBX: 00007f6c177ee6c0 RCX: 00007f6c1955b84e [ 262.381703][ T8597] RDX: 0000000000000001 RSI: 00007f6c177ee0a0 RDI: 0000000000000008 [ 262.381716][ T8597] RBP: 00007f6c177ee090 R08: 0000000000000000 R09: 0000000000000000 [ 262.381731][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.381744][ T8597] R13: 00007f6c19816038 R14: 00007f6c19815fa0 R15: 00007ffff6aebc38 [ 262.381774][ T8597] [ 262.663194][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 263.685802][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 264.069431][ T5839] Bluetooth: hci2: ACL packet too small [ 264.581659][ T8635] zswap: compressor not available [ 264.815822][ T8654] ubi0: attaching mtd0 [ 264.850701][ T8654] ubi0: scanning is finished [ 264.863506][ T8654] ubi0: empty MTD device detected [ 265.078056][ T8654] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 265.085796][ T8654] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 265.093586][ T8654] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 265.100935][ T8654] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 265.109893][ T8654] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 265.116808][ T8654] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 265.126426][ T8654] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3410990846 [ 265.136991][ T8654] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 265.183134][ T8656] ubi0: detaching mtd0 [ 265.195164][ T8656] ubi0: mtd0 is detached [ 265.449555][ T8669] FAULT_INJECTION: forcing a failure. [ 265.449555][ T8669] name failslab, interval 1, probability 0, space 0, times 0 [ 265.494096][ T8669] CPU: 1 UID: 0 PID: 8669 Comm: syz.4.537 Tainted: G U L syzkaller #0 PREEMPT(full) [ 265.494150][ T8669] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 265.494162][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 265.494182][ T8669] Call Trace: [ 265.494193][ T8669] [ 265.494204][ T8669] dump_stack_lvl+0x100/0x190 [ 265.494248][ T8669] should_fail_ex.cold+0x5/0xa [ 265.494301][ T8669] should_failslab+0xc2/0x120 [ 265.494350][ T8669] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 265.494393][ T8669] ? copy_process+0x402/0x7890 [ 265.494436][ T8669] ? copy_process+0x402/0x7890 [ 265.494476][ T8669] ? copy_process+0x48b/0x7890 [ 265.494526][ T8669] ? copy_process+0x48b/0x7890 [ 265.494566][ T8669] copy_process+0x48b/0x7890 [ 265.494607][ T8669] ? __lock_acquire+0x4a5/0x2630 [ 265.494668][ T8669] ? __pfx_copy_process+0x10/0x10 [ 265.494713][ T8669] ? find_held_lock+0x2b/0x80 [ 265.494768][ T8669] kernel_clone+0xfc/0x930 [ 265.494809][ T8669] ? find_held_lock+0x2b/0x80 [ 265.494844][ T8669] ? __pfx_kernel_clone+0x10/0x10 [ 265.494909][ T8669] __do_sys_clone+0xd9/0x120 [ 265.494954][ T8669] ? __pfx___do_sys_clone+0x10/0x10 [ 265.495015][ T8669] ? ksys_write+0x1ac/0x250 [ 265.495053][ T8669] ? __pfx_ksys_write+0x10/0x10 [ 265.495101][ T8669] do_syscall_64+0xc9/0xf80 [ 265.495149][ T8669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.495182][ T8669] RIP: 0033:0x7f6c1959af79 [ 265.495207][ T8669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.495237][ T8669] RSP: 002b:00007f6c177ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 265.495269][ T8669] RAX: ffffffffffffffda RBX: 00007f6c19815fa0 RCX: 00007f6c1959af79 [ 265.495291][ T8669] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0002000020003b4a [ 265.495311][ T8669] RBP: 00007f6c177ee090 R08: 0000000000000103 R09: 0000000000000000 [ 265.495330][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.495349][ T8669] R13: 00007f6c19816038 R14: 00007f6c19815fa0 R15: 00007ffff6aebc38 [ 265.495392][ T8669] [ 266.183358][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.195425][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.354673][ T8681] netlink: 186 bytes leftover after parsing attributes in process `syz.4.539'. [ 267.529587][ T8692] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 267.974182][ T8694] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 269.286793][ T5839] Bluetooth: hci3: ACL packet too small [ 271.196013][ T8749] FAULT_INJECTION: forcing a failure. [ 271.196013][ T8749] name failslab, interval 1, probability 0, space 0, times 0 [ 271.292781][ T8749] CPU: 0 UID: 0 PID: 8749 Comm: syz.3.553 Tainted: G U L syzkaller #0 PREEMPT(full) [ 271.292835][ T8749] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 271.292849][ T8749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 271.292867][ T8749] Call Trace: [ 271.292877][ T8749] [ 271.292890][ T8749] dump_stack_lvl+0x100/0x190 [ 271.292939][ T8749] should_fail_ex.cold+0x5/0xa [ 271.292994][ T8749] should_failslab+0xc2/0x120 [ 271.293042][ T8749] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 271.293087][ T8749] ? d_alloc_parallel+0xb4e/0x14e0 [ 271.293119][ T8749] ? proc_alloc_inode+0x25/0x200 [ 271.293181][ T8749] ? __pfx_proc_alloc_inode+0x10/0x10 [ 271.293226][ T8749] ? proc_alloc_inode+0x25/0x200 [ 271.293269][ T8749] proc_alloc_inode+0x25/0x200 [ 271.293314][ T8749] alloc_inode+0x68/0x250 [ 271.293364][ T8749] new_inode+0x22/0x1c0 [ 271.293416][ T8749] proc_pid_make_inode+0x22/0x160 [ 271.293463][ T8749] proc_pident_instantiate+0x85/0x310 [ 271.293515][ T8749] proc_pident_lookup+0x1e3/0x270 [ 271.293571][ T8749] ? __pfx_proc_tgid_base_lookup+0x10/0x10 [ 271.293618][ T8749] lookup_open.isra.0+0x486/0x1890 [ 271.293660][ T8749] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 271.293716][ T8749] ? lookup_fast+0x2da/0x600 [ 271.293751][ T8749] path_openat+0xa9b/0x3120 [ 271.293802][ T8749] ? __pfx_path_openat+0x10/0x10 [ 271.293855][ T8749] do_filp_open+0x1f7/0x420 [ 271.293897][ T8749] ? __pfx_do_filp_open+0x10/0x10 [ 271.293952][ T8749] ? __pfx_kfree_link+0x10/0x10 [ 271.294013][ T8749] ? _raw_spin_unlock+0x28/0x50 [ 271.294047][ T8749] ? alloc_fd+0x476/0x790 [ 271.294096][ T8749] do_sys_openat2+0x12e/0x220 [ 271.294149][ T8749] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.294224][ T8749] __x64_sys_openat+0x12d/0x210 [ 271.294274][ T8749] ? __pfx___x64_sys_openat+0x10/0x10 [ 271.294323][ T8749] ? xfd_validate_state+0x129/0x190 [ 271.294390][ T8749] do_syscall_64+0xc9/0xf80 [ 271.294431][ T8749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.294460][ T8749] RIP: 0033:0x7f3bc699af79 [ 271.294485][ T8749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.294517][ T8749] RSP: 002b:00007f3bc780b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 271.294548][ T8749] RAX: ffffffffffffffda RBX: 00007f3bc6c15fa0 RCX: 00007f3bc699af79 [ 271.294570][ T8749] RDX: 0000000000008400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 271.294589][ T8749] RBP: 00007f3bc6a316e0 R08: 0000000000000000 R09: 0000000000000000 [ 271.294608][ T8749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.294627][ T8749] R13: 00007f3bc6c16038 R14: 00007f3bc6c15fa0 R15: 00007ffd64db3658 [ 271.294670][ T8749] [ 273.021810][ T8812] WARNING! power/level is deprecated; use power/control instead [ 273.397898][ T8829] FAULT_INJECTION: forcing a failure. [ 273.397898][ T8829] name failslab, interval 1, probability 0, space 0, times 0 [ 273.493261][ T8829] CPU: 0 UID: 0 PID: 8829 Comm: syz.1.564 Tainted: G U L syzkaller #0 PREEMPT(full) [ 273.493314][ T8829] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 273.493326][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 273.493345][ T8829] Call Trace: [ 273.493355][ T8829] [ 273.493367][ T8829] dump_stack_lvl+0x100/0x190 [ 273.493412][ T8829] should_fail_ex.cold+0x5/0xa [ 273.493465][ T8829] should_failslab+0xc2/0x120 [ 273.493513][ T8829] kmem_cache_alloc_noprof+0x83/0x780 [ 273.493555][ T8829] ? lsm_blob_alloc+0x68/0x90 [ 273.493587][ T8829] ? dup_fd+0x4d/0xd10 [ 273.493625][ T8829] ? dup_fd+0x4d/0xd10 [ 273.493651][ T8829] dup_fd+0x4d/0xd10 [ 273.493688][ T8829] ? apparmor_task_alloc+0x2c1/0x3b0 [ 273.493803][ T8829] copy_process+0x26cc/0x7890 [ 273.493931][ T8829] ? __lock_acquire+0x4a5/0x2630 [ 273.494076][ T8829] ? __pfx_copy_process+0x10/0x10 [ 273.494187][ T8829] ? find_held_lock+0x2b/0x80 [ 273.494309][ T8829] kernel_clone+0xfc/0x930 [ 273.494417][ T8829] ? find_held_lock+0x2b/0x80 [ 273.494504][ T8829] ? __pfx_kernel_clone+0x10/0x10 [ 273.494667][ T8829] __do_sys_clone+0xd9/0x120 [ 273.494804][ T8829] ? __pfx___do_sys_clone+0x10/0x10 [ 273.494949][ T8829] ? ksys_write+0x1ac/0x250 [ 273.495041][ T8829] ? __pfx_ksys_write+0x10/0x10 [ 273.495162][ T8829] do_syscall_64+0xc9/0xf80 [ 273.495271][ T8829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.495357][ T8829] RIP: 0033:0x7f79d2b9af79 [ 273.495436][ T8829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.495535][ T8829] RSP: 002b:00007f79d39ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 273.495619][ T8829] RAX: ffffffffffffffda RBX: 00007f79d2e15fa0 RCX: 00007f79d2b9af79 [ 273.495674][ T8829] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0002000020003b4a [ 273.495728][ T8829] RBP: 00007f79d39ed090 R08: 0000000000000103 R09: 0000000000000000 [ 273.495774][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.495819][ T8829] R13: 00007f79d2e16038 R14: 00007f79d2e15fa0 R15: 00007ffef035e9f8 [ 273.495926][ T8829] [ 273.608119][ T30] audit: type=1804 audit(1770666981.494:9): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.563" name="/newroot/29/file0" dev="tmpfs" ino=170 res=1 errno=0 [ 273.608195][ T30] audit: type=1804 audit(1770666981.494:10): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.563" name="/newroot/29/file0" dev="tmpfs" ino=170 res=1 errno=0 [ 274.623891][ T8855] netlink: 4176 bytes leftover after parsing attributes in process `syz.3.567'. [ 274.889064][ T8853] FAULT_INJECTION: forcing a failure. [ 274.889064][ T8853] name failslab, interval 1, probability 0, space 0, times 0 [ 274.889155][ T8853] CPU: 1 UID: 0 PID: 8853 Comm: syz.4.568 Tainted: G U L syzkaller #0 PREEMPT(full) [ 274.889193][ T8853] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 274.889202][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 274.889218][ T8853] Call Trace: [ 274.889225][ T8853] [ 274.889234][ T8853] dump_stack_lvl+0x100/0x190 [ 274.889267][ T8853] should_fail_ex.cold+0x5/0xa [ 274.889309][ T8853] should_failslab+0xc2/0x120 [ 274.889346][ T8853] __kvmalloc_node_noprof+0x101/0xac0 [ 274.889379][ T8853] ? nf_hook_entries_grow+0x6b9/0x870 [ 274.889415][ T8853] ? mark_held_locks+0x40/0x70 [ 274.889454][ T8853] ? nf_hook_entries_grow+0x6b9/0x870 [ 274.889490][ T8853] nf_hook_entries_grow+0x6b9/0x870 [ 274.889532][ T8853] ? __pfx___debug_object_init+0x10/0x10 [ 274.889574][ T8853] __nf_register_net_hook+0x112/0x780 [ 274.889660][ T8853] nf_register_net_hook+0xdb/0x170 [ 274.889719][ T8853] nf_register_net_hooks+0x5d/0xd0 [ 274.889759][ T8853] ? __pfx_apparmor_nf_register+0x10/0x10 [ 274.889789][ T8853] ops_init+0x1e2/0x5f0 [ 274.889831][ T8853] setup_net+0x118/0x3a0 [ 274.889855][ T8853] ? __pfx_setup_net+0x10/0x10 [ 274.889876][ T8853] ? lockdep_init_map_type+0x5c/0x250 [ 274.889912][ T8853] ? mutex_init_lockep+0x110/0x150 [ 274.889952][ T8853] copy_net_ns+0x46f/0x7c0 [ 274.889980][ T8853] create_new_namespaces+0x3ea/0xab0 [ 274.890015][ T8853] copy_namespaces+0x468/0x5e0 [ 274.890045][ T8853] copy_process+0x32d5/0x7890 [ 274.890079][ T8853] ? preempt_schedule_thunk+0x16/0x30 [ 274.890116][ T8853] ? __pfx_copy_process+0x10/0x10 [ 274.890150][ T8853] ? find_held_lock+0x2b/0x80 [ 274.890179][ T8853] ? futex_private_hash_put+0x107/0x1c0 [ 274.890217][ T8853] kernel_clone+0xfc/0x930 [ 274.890253][ T8853] ? __pfx_kernel_clone+0x10/0x10 [ 274.890303][ T8853] __do_sys_clone+0xd9/0x120 [ 274.890337][ T8853] ? __pfx___do_sys_clone+0x10/0x10 [ 274.890372][ T8853] ? __fget_files+0x21f/0x3d0 [ 274.890409][ T8853] ? xfd_validate_state+0x129/0x190 [ 274.890460][ T8853] do_syscall_64+0xc9/0xf80 [ 274.890494][ T8853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.890519][ T8853] RIP: 0033:0x7f6c1959af79 [ 274.890539][ T8853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.890563][ T8853] RSP: 002b:00007f6c177edfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 274.890587][ T8853] RAX: ffffffffffffffda RBX: 00007f6c19815fa0 RCX: 00007f6c1959af79 [ 274.890609][ T8853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 274.890624][ T8853] RBP: 00007f6c196316e0 R08: 0000000000000000 R09: 0000000000000000 [ 274.890639][ T8853] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 274.890654][ T8853] R13: 00007f6c19816038 R14: 00007f6c19815fa0 R15: 00007ffff6aebc38 [ 274.890686][ T8853] [ 276.716462][ T5839] Bluetooth: hci1: ACL packet too small [ 277.384361][ T8892] binder: 8889:8892 ioctl c018620c 0 returned -1 [ 282.114677][ T8987] Dead loop on virtual device ip6_vti0, fix it urgently! [ 282.132363][ T8987] Dead loop on virtual device ip6_vti0, fix it urgently! [ 282.152079][ T8987] Dead loop on virtual device ip6_vti0, fix it urgently! [ 282.168915][ T8987] Dead loop on virtual device ip6_vti0, fix it urgently! [ 282.214276][ T8987] Dead loop on virtual device ip6_vti0, fix it urgently! [ 282.231072][ T8987] Dead loop on virtual device ip6_vti0, fix it urgently! [ 282.968787][ T9002] random: crng reseeded on system resumption [ 283.389371][ T9010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.602'. [ 283.490958][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 283.500222][ T5839] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6 [ 283.813135][ T5839] Bluetooth: hci4: ACL packet too small [ 283.863308][ T9023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.605'. [ 283.886277][ T9015] zswap: compressor not available [ 284.172051][ T9030] FAULT_INJECTION: forcing a failure. [ 284.172051][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 284.237303][ T9030] CPU: 1 UID: 0 PID: 9030 Comm: syz.2.607 Tainted: G U L syzkaller #0 PREEMPT(full) [ 284.237363][ T9030] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 284.237376][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 284.237396][ T9030] Call Trace: [ 284.237407][ T9030] [ 284.237419][ T9030] dump_stack_lvl+0x100/0x190 [ 284.237468][ T9030] should_fail_ex.cold+0x5/0xa [ 284.237526][ T9030] should_failslab+0xc2/0x120 [ 284.237576][ T9030] __kmalloc_cache_noprof+0x80/0x810 [ 284.237614][ T9030] ? snd_midi_event_new+0x6f/0x210 [ 284.237660][ T9030] ? snd_midi_event_new+0x6f/0x210 [ 284.237691][ T9030] ? kasan_save_track+0x14/0x30 [ 284.237744][ T9030] snd_midi_event_new+0x6f/0x210 [ 284.237783][ T9030] snd_virmidi_output_open+0x106/0x670 [ 284.237828][ T9030] open_substream+0x480/0x9e0 [ 284.237877][ T9030] rawmidi_open_priv+0x595/0x6f0 [ 284.237931][ T9030] snd_rawmidi_open+0x4c9/0xba0 [ 284.237989][ T9030] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 284.238044][ T9030] ? __pfx_default_wake_function+0x10/0x10 [ 284.238087][ T9030] ? kobject_get_unless_zero+0x156/0x200 [ 284.238140][ T9030] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 284.238189][ T9030] snd_open+0x22d/0x4c0 [ 284.238229][ T9030] ? __pfx_snd_open+0x10/0x10 [ 284.238268][ T9030] chrdev_open+0x234/0x6a0 [ 284.238311][ T9030] ? __pfx_apparmor_file_open+0x10/0x10 [ 284.238358][ T9030] ? __pfx_chrdev_open+0x10/0x10 [ 284.238403][ T9030] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 284.238454][ T9030] do_dentry_open+0x73e/0x1570 [ 284.238495][ T9030] ? __pfx_chrdev_open+0x10/0x10 [ 284.238538][ T9030] ? security_inode_permission+0xbf/0x250 [ 284.238596][ T9030] vfs_open+0x82/0x3f0 [ 284.238652][ T9030] path_openat+0x21dc/0x3120 [ 284.238716][ T9030] ? __pfx_path_openat+0x10/0x10 [ 284.238775][ T9030] do_filp_open+0x1f7/0x420 [ 284.238820][ T9030] ? __pfx_do_filp_open+0x10/0x10 [ 284.238894][ T9030] ? _raw_spin_unlock+0x28/0x50 [ 284.238928][ T9030] ? alloc_fd+0x476/0x790 [ 284.238981][ T9030] do_sys_openat2+0x12e/0x220 [ 284.239035][ T9030] ? __pfx_do_sys_openat2+0x10/0x10 [ 284.239089][ T9030] ? __fget_files+0x21f/0x3d0 [ 284.239132][ T9030] __x64_sys_openat+0x12d/0x210 [ 284.239187][ T9030] ? __pfx___x64_sys_openat+0x10/0x10 [ 284.239237][ T9030] ? xfd_validate_state+0x129/0x190 [ 284.239305][ T9030] do_syscall_64+0xc9/0xf80 [ 284.239351][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.239387][ T9030] RIP: 0033:0x7f78c219af79 [ 284.239414][ T9030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.239450][ T9030] RSP: 002b:00007f78c305e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 284.239474][ T9030] RAX: ffffffffffffffda RBX: 00007f78c2416090 RCX: 00007f78c219af79 [ 284.239492][ T9030] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 284.239507][ T9030] RBP: 00007f78c22316e0 R08: 0000000000000000 R09: 0000000000000000 [ 284.239522][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.239537][ T9030] R13: 00007f78c2416128 R14: 00007f78c2416090 R15: 00007ffd9e837c28 [ 284.239569][ T9030] [ 284.635215][ T9031] ptp ptp0: new virtual clock ptp1 [ 284.707501][ T9031] ptp ptp0: new virtual clock ptp2 [ 284.745081][ T9031] ptp ptp0: new virtual clock ptp3 [ 284.776806][ T9031] ptp ptp0: new virtual clock ptp4 [ 284.823881][ T9031] ptp ptp0: new virtual clock ptp5 [ 284.871692][ T9031] ptp ptp0: new virtual clock ptp6 [ 284.938999][ T9031] ptp ptp0: new virtual clock ptp7 [ 284.985464][ T9031] ptp ptp0: new virtual clock ptp8 [ 284.998447][ T9031] failed to create ptp aux_worker -4 [ 285.028682][ T9030] ptp ptp0: only physical clock in use now [ 285.264276][ T30] audit: type=1800 audit(1770666993.174:11): pid=9047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.609" name="members" dev="configfs" ino=24748 res=0 errno=0 [ 285.668380][ T9051] Process accounting resumed [ 285.883996][ T9064] FAULT_INJECTION: forcing a failure. [ 285.883996][ T9064] name failslab, interval 1, probability 0, space 0, times 0 [ 285.907837][ T9064] CPU: 1 UID: 0 PID: 9064 Comm: syz.4.614 Tainted: G U L syzkaller #0 PREEMPT(full) [ 285.907878][ T9064] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 285.907887][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 285.907901][ T9064] Call Trace: [ 285.907908][ T9064] [ 285.907917][ T9064] dump_stack_lvl+0x100/0x190 [ 285.907949][ T9064] should_fail_ex.cold+0x5/0xa [ 285.907988][ T9064] should_failslab+0xc2/0x120 [ 285.908057][ T9064] kmem_cache_alloc_noprof+0x83/0x780 [ 285.908100][ T9064] ? mas_alloc_nodes+0x280/0x390 [ 285.908140][ T9064] ? mas_alloc_nodes+0x280/0x390 [ 285.908170][ T9064] mas_alloc_nodes+0x280/0x390 [ 285.908206][ T9064] mas_preallocate+0x39c/0xf10 [ 285.908257][ T9064] ? __pfx_mas_preallocate+0x10/0x10 [ 285.908295][ T9064] ? anon_vma_name+0x81/0x2c0 [ 285.908336][ T9064] __split_vma+0x33d/0xe30 [ 285.908366][ T9064] ? __pfx___split_vma+0x10/0x10 [ 285.908398][ T9064] ? __pfx_mas_prev+0x10/0x10 [ 285.908436][ T9064] vms_gather_munmap_vmas+0x3aa/0x1320 [ 285.908468][ T9064] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 285.908495][ T9064] ? __pfx___up_read+0x10/0x10 [ 285.908530][ T9064] ? validate_mm+0x261/0x4e0 [ 285.908553][ T9064] ? validate_mm+0x261/0x4e0 [ 285.908581][ T9064] ? mas_find+0x2dd/0x740 [ 285.908612][ T9064] ? validate_mm+0x392/0x4e0 [ 285.908640][ T9064] do_vmi_align_munmap+0x287/0x5f0 [ 285.908671][ T9064] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 285.908739][ T9064] do_vmi_munmap+0x1f8/0x3e0 [ 285.908770][ T9064] __vm_munmap+0x196/0x390 [ 285.908800][ T9064] ? __pfx___vm_munmap+0x10/0x10 [ 285.908835][ T9064] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 285.908886][ T9064] __x64_sys_munmap+0x59/0x80 [ 285.908922][ T9064] do_syscall_64+0xc9/0xf80 [ 285.908953][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.908977][ T9064] RIP: 0033:0x7f6c1959ada7 [ 285.908995][ T9064] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.909017][ T9064] RSP: 002b:00007f6c177ecd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 285.909039][ T9064] RAX: ffffffffffffffda RBX: 00007f6c10000000 RCX: 00007f6c1959ada7 [ 285.909055][ T9064] RDX: 0000000000000000 RSI: 0000000000a00000 RDI: 00007f6c0f600000 [ 285.909069][ T9064] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 285.909083][ T9064] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 285.909097][ T9064] R13: 0000000000001000 R14: 00007f6c14000000 R15: 0000000000a00000 [ 285.909126][ T9064] [ 286.466120][ T9069] netlink: 330 bytes leftover after parsing attributes in process `syz.4.615'. [ 286.509167][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 286.536003][ T9069] : renamed from bond_slave_0 (while UP) [ 286.613202][ T9069] netlink: 330 bytes leftover after parsing attributes in process `syz.4.615'. [ 287.075437][ T30] audit: type=1800 audit(1770666994.984:12): pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.620" name="lu_gp_id" dev="configfs" ino=24808 res=0 errno=0 [ 287.757859][ T9093] binder: 9085:9093 ioctl c018620c 0 returned -1 [ 288.010382][ T9115] random: crng reseeded on system resumption [ 289.669041][ T9152] zswap: compressor  not available [ 290.948670][ T9184] FAULT_INJECTION: forcing a failure. [ 290.948670][ T9184] name failslab, interval 1, probability 0, space 0, times 0 [ 290.979720][ T9184] CPU: 1 UID: 0 PID: 9184 Comm: syz.2.637 Tainted: G U L syzkaller #0 PREEMPT(full) [ 290.979776][ T9184] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 290.979790][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 290.979810][ T9184] Call Trace: [ 290.979821][ T9184] [ 290.979833][ T9184] dump_stack_lvl+0x100/0x190 [ 290.979880][ T9184] should_fail_ex.cold+0x5/0xa [ 290.979939][ T9184] should_failslab+0xc2/0x120 [ 290.979989][ T9184] ? sg_kmalloc+0x35/0x70 [ 290.980027][ T9184] __kmalloc_noprof+0xf6/0x9c0 [ 290.980060][ T9184] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 290.980108][ T9184] ? sg_kmalloc+0x35/0x70 [ 290.980148][ T9184] ? __asan_memset+0x23/0x50 [ 290.980182][ T9184] sg_kmalloc+0x35/0x70 [ 290.980221][ T9184] __sg_alloc_table+0x31c/0x490 [ 290.980279][ T9184] sg_alloc_table+0x37/0x1c0 [ 290.980319][ T9184] ? __pfx_sg_kmalloc+0x10/0x10 [ 290.980364][ T9184] system_heap_allocate+0x732/0x10e0 [ 290.980416][ T9184] ? __pfx_system_heap_allocate+0x10/0x10 [ 290.980455][ T9184] ? __might_fault+0xc5/0x140 [ 290.980511][ T9184] dma_heap_ioctl+0x37f/0x5e0 [ 290.980572][ T9184] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 290.980626][ T9184] ? __do_sys_close_range+0x230/0x740 [ 290.980690][ T9184] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 290.980748][ T9184] __x64_sys_ioctl+0x18e/0x210 [ 290.980807][ T9184] do_syscall_64+0xc9/0xf80 [ 290.980853][ T9184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.980889][ T9184] RIP: 0033:0x7f78c219af79 [ 290.980916][ T9184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.980950][ T9184] RSP: 002b:00007f78c305e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.980982][ T9184] RAX: ffffffffffffffda RBX: 00007f78c2416090 RCX: 00007f78c219af79 [ 290.981005][ T9184] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000001 [ 290.981027][ T9184] RBP: 00007f78c22316e0 R08: 0000000000000000 R09: 0000000000000000 [ 290.981048][ T9184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.981068][ T9184] R13: 00007f78c2416128 R14: 00007f78c2416090 R15: 00007ffd9e837c28 [ 290.981114][ T9184] [ 291.939902][ T9202] futex_wake_op: syz.2.640 tries to shift op by -2048; fix this program [ 291.996829][ T9202] futex_wake_op: syz.2.640 tries to shift op by -2048; fix this program [ 292.132707][ T9200] hub 1-0:1.0: USB hub found [ 292.150522][ T9200] hub 1-0:1.0: 1 port detected [ 293.135963][ T9245] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 293.574704][ T9256] FAULT_INJECTION: forcing a failure. [ 293.574704][ T9256] name failslab, interval 1, probability 0, space 0, times 0 [ 293.627602][ T9256] CPU: 0 UID: 0 PID: 9256 Comm: syz.1.648 Tainted: G U L syzkaller #0 PREEMPT(full) [ 293.627660][ T9256] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 293.627674][ T9256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 293.627695][ T9256] Call Trace: [ 293.627706][ T9256] [ 293.627719][ T9256] dump_stack_lvl+0x100/0x190 [ 293.627765][ T9256] should_fail_ex.cold+0x5/0xa [ 293.627821][ T9256] should_failslab+0xc2/0x120 [ 293.627871][ T9256] kmem_cache_alloc_noprof+0x83/0x780 [ 293.627905][ T9256] ? d_instantiate+0x90/0xb0 [ 293.627938][ T9256] ? alloc_empty_file+0x55/0x1c0 [ 293.627980][ T9256] ? alloc_empty_file+0x55/0x1c0 [ 293.628046][ T9256] alloc_empty_file+0x55/0x1c0 [ 293.628100][ T9256] alloc_file_pseudo+0x13a/0x230 [ 293.628146][ T9256] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 293.628185][ T9256] ? alloc_fd+0x476/0x790 [ 293.628219][ T9256] sock_alloc_file+0x50/0x210 [ 293.628261][ T9256] __sys_socket+0x1c0/0x260 [ 293.628290][ T9256] ? fput+0x79/0x100 [ 293.628323][ T9256] ? __pfx___sys_socket+0x10/0x10 [ 293.628352][ T9256] ? xfd_validate_state+0x129/0x190 [ 293.628399][ T9256] __x64_sys_socket+0x72/0xb0 [ 293.628428][ T9256] ? lockdep_hardirqs_on+0x78/0x100 [ 293.628459][ T9256] do_syscall_64+0xc9/0xf80 [ 293.628491][ T9256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.628516][ T9256] RIP: 0033:0x7f79d2b9af79 [ 293.628536][ T9256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.628560][ T9256] RSP: 002b:00007f79d39ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 293.628583][ T9256] RAX: ffffffffffffffda RBX: 00007f79d2e15fa0 RCX: 00007f79d2b9af79 [ 293.628600][ T9256] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 293.628615][ T9256] RBP: 00007f79d2c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 293.628631][ T9256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.628646][ T9256] R13: 00007f79d2e16038 R14: 00007f79d2e15fa0 R15: 00007ffef035e9f8 [ 293.628677][ T9256] [ 293.902816][ T5839] Bluetooth: hci1: ACL packet too small [ 293.973620][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 295.330297][ T9280] FAULT_INJECTION: forcing a failure. [ 295.330297][ T9280] name fail_futex, interval 1, probability 0, space 0, times 0 [ 295.377428][ T9280] CPU: 0 UID: 0 PID: 9280 Comm: syz.1.652 Tainted: G U L syzkaller #0 PREEMPT(full) [ 295.377480][ T9280] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 295.377493][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 295.377515][ T9280] Call Trace: [ 295.377525][ T9280] [ 295.377537][ T9280] dump_stack_lvl+0x100/0x190 [ 295.377580][ T9280] should_fail_ex.cold+0x5/0xa [ 295.377631][ T9280] get_futex_key+0x1d2/0x1620 [ 295.377678][ T9280] ? __pfx_get_futex_key+0x10/0x10 [ 295.377716][ T9280] ? do_raw_spin_lock+0x128/0x260 [ 295.377765][ T9280] ? find_held_lock+0x2b/0x80 [ 295.377796][ T9280] ? futex_wake+0x456/0x530 [ 295.377841][ T9280] ? futex_wake+0x456/0x530 [ 295.377917][ T9280] futex_wake+0xea/0x530 [ 295.377977][ T9280] ? __lock_acquire+0x4a5/0x2630 [ 295.378020][ T9280] ? __pfx_futex_wake+0x10/0x10 [ 295.378087][ T9280] do_futex+0x32b/0x350 [ 295.378134][ T9280] ? __pfx_do_futex+0x10/0x10 [ 295.378187][ T9280] __x64_sys_futex+0x34f/0x4d0 [ 295.378232][ T9280] ? fdget+0x18b/0x210 [ 295.378267][ T9280] ? __pfx___x64_sys_futex+0x10/0x10 [ 295.378328][ T9280] do_syscall_64+0xc9/0xf80 [ 295.378372][ T9280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.378406][ T9280] RIP: 0033:0x7f79d2b9af79 [ 295.378431][ T9280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.378463][ T9280] RSP: 002b:00007f79d39cc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 295.378495][ T9280] RAX: ffffffffffffffda RBX: 00007f79d2e16098 RCX: 00007f79d2b9af79 [ 295.378516][ T9280] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f79d2e1609c [ 295.378536][ T9280] RBP: 00007f79d2e16090 R08: 0000000000000000 R09: 0000000000000000 [ 295.378555][ T9280] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 295.378575][ T9280] R13: 00007f79d2e16128 R14: 00007ffef035e910 R15: 00007ffef035e9f8 [ 295.378618][ T9280] [ 296.383734][ T9322] cougar: G6 mapped to space [ 298.768815][ T30] audit: type=1800 audit(1770667006.674:13): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.665" name="members" dev="configfs" ino=25850 res=0 errno=0 [ 299.183795][ T5839] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 299.183828][ T5839] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 299.200275][ T5839] Bluetooth: hci1: Dropping invalid advertising data [ 299.207335][ T5839] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 299.207369][ T5839] Bluetooth: hci1: Dropping invalid advertising data [ 299.222226][ T5839] Bluetooth: hci1: Malformed LE Event: 0x02 [ 300.698524][ T9403] netlink: 'syz.3.675': attribute type 3 has an invalid length. [ 300.746303][ T9403] hub 1-0:1.0: USB hub found [ 300.767468][ T9403] hub 1-0:1.0: 1 port detected [ 300.905419][ T9408] netlink: Unknown conntrack attr (type=257, max=9) [ 301.444908][ T9417] FAULT_INJECTION: forcing a failure. [ 301.444908][ T9417] name fail_futex, interval 1, probability 0, space 0, times 0 [ 301.568317][ T9417] CPU: 0 UID: 0 PID: 9417 Comm: syz.1.679 Tainted: G U L syzkaller #0 PREEMPT(full) [ 301.568377][ T9417] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 301.568387][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 301.568404][ T9417] Call Trace: [ 301.568412][ T9417] [ 301.568421][ T9417] dump_stack_lvl+0x100/0x190 [ 301.568454][ T9417] should_fail_ex.cold+0x5/0xa [ 301.568494][ T9417] get_futex_key+0x1d2/0x1620 [ 301.568529][ T9417] ? __pfx_get_futex_key+0x10/0x10 [ 301.568560][ T9417] ? sock_write_iter+0x339/0x610 [ 301.568588][ T9417] ? __pfx_sock_write_iter+0x10/0x10 [ 301.568620][ T9417] futex_wake+0xea/0x530 [ 301.568661][ T9417] ? __pfx_futex_wake+0x10/0x10 [ 301.568705][ T9417] ? vfs_write+0x15d/0x1070 [ 301.568733][ T9417] ? __pfx_sock_write_iter+0x10/0x10 [ 301.568763][ T9417] do_futex+0x32b/0x350 [ 301.568797][ T9417] ? __pfx_do_futex+0x10/0x10 [ 301.568838][ T9417] __x64_sys_futex+0x34f/0x4d0 [ 301.568874][ T9417] ? fput+0x79/0x100 [ 301.568907][ T9417] ? __pfx___x64_sys_futex+0x10/0x10 [ 301.568940][ T9417] ? ksys_write+0x1ac/0x250 [ 301.568967][ T9417] ? __pfx_ksys_write+0x10/0x10 [ 301.569003][ T9417] do_syscall_64+0xc9/0xf80 [ 301.569035][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.569059][ T9417] RIP: 0033:0x7f79d2b9af79 [ 301.569078][ T9417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.569108][ T9417] RSP: 002b:00007f79d39ed0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 301.569136][ T9417] RAX: ffffffffffffffda RBX: 00007f79d2e15fa8 RCX: 00007f79d2b9af79 [ 301.569152][ T9417] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f79d2e15fac [ 301.569168][ T9417] RBP: 00007f79d2e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 301.569183][ T9417] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 301.569198][ T9417] R13: 00007f79d2e16038 R14: 00007ffef035e910 R15: 00007ffef035e9f8 [ 301.569228][ T9417] [ 303.190141][ T9441] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 303.208338][ T9441] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 303.626598][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.790749][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.017580][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.126601][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.139043][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.153863][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.163200][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.174080][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.325349][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.139675][ T30] audit: type=1800 audit(1770667013.054:14): pid=9480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.695" name="members" dev="configfs" ino=26732 res=0 errno=0 [ 305.234848][ T9482] usb usb37: usbfs: process 9482 (syz.3.696) did not claim interface 0 before use [ 305.272930][ T12] bridge_slave_1: left allmulticast mode [ 305.289572][ T12] bridge_slave_1: left promiscuous mode [ 305.302590][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.332841][ T12] bridge_slave_0: left allmulticast mode [ 305.348997][ T12] bridge_slave_0: left promiscuous mode [ 305.359403][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.370613][ T9482] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 306.063096][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.085560][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.110111][ T12] bond0 (unregistering): Released all slaves [ 306.241912][ T12] ovs_: left promiscuous mode [ 306.259200][ T5833] Bluetooth: hci0: command tx timeout [ 306.733795][ T9460] chnl_net:caif_netlink_parms(): no params data found [ 307.401440][ T12] hsr_slave_0: left promiscuous mode [ 307.444486][ T12] hsr_slave_1: left promiscuous mode [ 307.462988][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.553651][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.587435][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.602936][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.666274][ T12] veth0_macvtap: left promiscuous mode [ 308.349278][ T5833] Bluetooth: hci0: command tx timeout [ 308.890668][ T12] team0 (unregistering): Port device team_slave_1 removed [ 308.997575][ T12] team0 (unregistering): Port device team_slave_0 removed [ 309.860825][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.868386][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.875810][ T9460] bridge_slave_0: entered allmulticast mode [ 309.886362][ T9460] bridge_slave_0: entered promiscuous mode [ 309.997566][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.022709][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.030196][ T9460] bridge_slave_1: entered allmulticast mode [ 310.038239][ T9460] bridge_slave_1: entered promiscuous mode [ 310.125014][ T9460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.177060][ T9460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.307911][ T9460] team0: Port device team_slave_0 added [ 310.324247][ T9460] team0: Port device team_slave_1 added [ 310.418927][ T5833] Bluetooth: hci0: command tx timeout [ 310.442806][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.458271][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.505397][ T9460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.559209][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.566252][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.596427][ T9460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.090750][ T9460] hsr_slave_0: entered promiscuous mode [ 311.097595][ T9460] hsr_slave_1: entered promiscuous mode [ 311.857616][ T30] audit: type=1800 audit(1770667019.764:15): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.708" name="members" dev="configfs" ino=27094 res=0 errno=0 [ 312.498658][ T5833] Bluetooth: hci0: command tx timeout [ 312.563788][ T9460] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 312.678806][ T9460] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 312.739796][ T9460] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 312.827941][ T9460] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 313.592141][ T9460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.051136][ T9460] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.176946][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.184158][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.253337][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.260555][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.483974][ T9460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.922654][ T5833] Bluetooth: hci1: ACL packet too small [ 315.170141][ T9650] netlink: 334 bytes leftover after parsing attributes in process `syz.4.715'. [ 315.603221][ T9460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.041571][ T9659] zswap: compressor not available [ 316.044056][ T9667] Setting dangerous option i915.mitigations - tainting kernel [ 316.117258][ T9677] FAULT_INJECTION: forcing a failure. [ 316.117258][ T9677] name failslab, interval 1, probability 0, space 0, times 0 [ 316.117347][ T9677] CPU: 0 UID: 0 PID: 9677 Comm: syz.1.719 Tainted: G U L syzkaller #0 PREEMPT(full) [ 316.117401][ T9677] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 316.117415][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 316.117435][ T9677] Call Trace: [ 316.117445][ T9677] [ 316.117458][ T9677] dump_stack_lvl+0x100/0x190 [ 316.117505][ T9677] should_fail_ex.cold+0x5/0xa [ 316.117563][ T9677] should_failslab+0xc2/0x120 [ 316.117611][ T9677] kmem_cache_alloc_noprof+0x83/0x780 [ 316.117656][ T9677] ? __proc_create+0xc2/0x8c0 [ 316.117707][ T9677] ? __proc_create+0x2cb/0x8c0 [ 316.117775][ T9677] ? __proc_create+0x2cb/0x8c0 [ 316.117828][ T9677] __proc_create+0x2cb/0x8c0 [ 316.117883][ T9677] ? __pfx___proc_create+0x10/0x10 [ 316.117959][ T9677] _proc_mkdir+0xb9/0x210 [ 316.117996][ T9677] ? __pfx__proc_mkdir+0x10/0x10 [ 316.118024][ T9677] ? net_generic+0xea/0x2a0 [ 316.118070][ T9677] ? __pfx_vlan_init_net+0x10/0x10 [ 316.118120][ T9677] vlan_proc_init+0x93/0x160 [ 316.118161][ T9677] ops_init+0x1e2/0x5f0 [ 316.118220][ T9677] setup_net+0x118/0x3a0 [ 316.118250][ T9677] ? __pfx_setup_net+0x10/0x10 [ 316.118276][ T9677] ? lockdep_init_map_type+0x5c/0x250 [ 316.118323][ T9677] ? mutex_init_lockep+0x110/0x150 [ 316.118373][ T9677] copy_net_ns+0x46f/0x7c0 [ 316.118412][ T9677] create_new_namespaces+0x3ea/0xab0 [ 316.118459][ T9677] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 316.118500][ T9677] ksys_unshare+0x455/0xab0 [ 316.118550][ T9677] ? __pfx_ksys_unshare+0x10/0x10 [ 316.118599][ T9677] ? xfd_validate_state+0x129/0x190 [ 316.118669][ T9677] __x64_sys_unshare+0x31/0x40 [ 316.118719][ T9677] do_syscall_64+0xc9/0xf80 [ 316.118774][ T9677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.118809][ T9677] RIP: 0033:0x7f79d2b9af79 [ 316.118834][ T9677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.118869][ T9677] RSP: 002b:00007f79d39cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 316.118901][ T9677] RAX: ffffffffffffffda RBX: 00007f79d2e16090 RCX: 00007f79d2b9af79 [ 316.118924][ T9677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 316.118944][ T9677] RBP: 00007f79d2c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 316.118965][ T9677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.118985][ T9677] R13: 00007f79d2e16128 R14: 00007f79d2e16090 R15: 00007ffef035e9f8 [ 316.119029][ T9677] [ 316.137905][ T9677] 8021q: can't create entry in proc filesystem! [ 316.317356][ T9672] Process accounting paused [ 317.046620][ T9460] veth0_vlan: entered promiscuous mode [ 317.063255][ T9460] veth1_vlan: entered promiscuous mode [ 317.207855][ T9460] veth0_macvtap: entered promiscuous mode [ 317.212487][ T9460] veth1_macvtap: entered promiscuous mode [ 317.263871][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.330783][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.337270][ T9695] netlink: 342 bytes leftover after parsing attributes in process `syz.3.721'. [ 317.408796][ T9516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.440359][ T9516] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.489754][ T9516] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.537926][ T9516] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.792771][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.834677][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.944379][ T9515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.989600][ T9515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.486448][ T9719] FAULT_INJECTION: forcing a failure. [ 318.486448][ T9719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 318.504777][ T9719] CPU: 0 UID: 0 PID: 9719 Comm: syz.5.688 Tainted: G U L syzkaller #0 PREEMPT(full) [ 318.504827][ T9719] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 318.504839][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 318.504858][ T9719] Call Trace: [ 318.504869][ T9719] [ 318.504881][ T9719] dump_stack_lvl+0x100/0x190 [ 318.504924][ T9719] should_fail_ex.cold+0x5/0xa [ 318.504967][ T9719] ? prepare_alloc_pages+0x16d/0x5f0 [ 318.505014][ T9719] should_fail_alloc_page+0xeb/0x140 [ 318.505056][ T9719] prepare_alloc_pages+0x1f0/0x5f0 [ 318.505103][ T9719] __alloc_frozen_pages_noprof+0x193/0x2410 [ 318.505137][ T9719] ? process_measurement+0x4c2/0x2400 [ 318.505177][ T9719] ? up_write+0x290/0x4f0 [ 318.505224][ T9719] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 318.505274][ T9719] ? __lock_acquire+0x4a5/0x2630 [ 318.505309][ T9719] ? find_held_lock+0x2b/0x80 [ 318.505334][ T9719] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 318.505366][ T9719] ? policy_nodemask+0xed/0x4f0 [ 318.505407][ T9719] alloc_pages_mpol+0x1fb/0x550 [ 318.505447][ T9719] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 318.505496][ T9719] alloc_pages_noprof+0x131/0x390 [ 318.505537][ T9719] __pmd_alloc+0x3b/0x9c0 [ 318.505583][ T9719] __handle_mm_fault+0xa99/0x2b50 [ 318.505618][ T9719] ? mt_find+0x45e/0x8e0 [ 318.505656][ T9719] ? __pfx___handle_mm_fault+0x10/0x10 [ 318.505683][ T9719] ? __pfx_mt_find+0x10/0x10 [ 318.505743][ T9719] ? find_vma+0xbf/0x140 [ 318.505779][ T9719] ? __pfx_find_vma+0x10/0x10 [ 318.505820][ T9719] handle_mm_fault+0x36d/0xa20 [ 318.505856][ T9719] do_user_addr_fault+0x74c/0x12f0 [ 318.505896][ T9719] exc_page_fault+0x6f/0xd0 [ 318.505929][ T9719] asm_exc_page_fault+0x26/0x30 [ 318.505955][ T9719] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 318.505997][ T9719] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 318.506023][ T9719] RSP: 0018:ffffc90003457cd8 EFLAGS: 00050202 [ 318.506045][ T9719] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000078 [ 318.506062][ T9719] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003457db8 [ 318.506078][ T9719] RBP: 0000000000000078 R08: 0000000000000001 R09: fffff5200068afc5 [ 318.506094][ T9719] R10: ffffc90003457e2f R11: 0000000000000000 R12: 0000000000000000 [ 318.506110][ T9719] R13: ffffc90003457db8 R14: 0000000000000000 R15: dffffc0000000000 [ 318.506144][ T9719] _copy_from_user+0x98/0xd0 [ 318.506187][ T9719] io_uring_setup+0xc0/0x160 [ 318.506224][ T9719] ? __pfx_io_uring_setup+0x10/0x10 [ 318.506259][ T9719] ? do_futex+0x192/0x350 [ 318.506297][ T9719] ? __pfx_do_futex+0x10/0x10 [ 318.506359][ T9719] ? __fget_files+0x21f/0x3d0 [ 318.506388][ T9719] ? xfd_validate_state+0x129/0x190 [ 318.506457][ T9719] __x64_sys_io_uring_setup+0xc2/0x170 [ 318.506492][ T9719] do_syscall_64+0xc9/0xf80 [ 318.506528][ T9719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.506554][ T9719] RIP: 0033:0x7fdbccb9af79 [ 318.506574][ T9719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.506600][ T9719] RSP: 002b:00007fdbcd971028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 318.506624][ T9719] RAX: ffffffffffffffda RBX: 00007fdbcce15fa0 RCX: 00007fdbccb9af79 [ 318.506641][ T9719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 318.506657][ T9719] RBP: 00007fdbccc316e0 R08: 0000000000000000 R09: 0000000000000000 [ 318.506673][ T9719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.506689][ T9719] R13: 00007fdbcce16038 R14: 00007fdbcce15fa0 R15: 00007fff8a164ef8 [ 318.506724][ T9719] [ 319.606860][ T9727] zswap: compressor *E;3߃L MapCMcsyF*srHDU}]$rm+8ጅY7TU9d L@saXfmY6  =KԿ_+ gX not available [ 319.718182][ T9729] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 319.718694][ T9729] capability: warning: `syz.1.729' uses 32-bit capabilities (legacy support in use) [ 319.780342][ T9732] ima: policy update failed [ 319.788099][ T30] audit: type=1802 audit(1770667027.694:16): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.729" res=0 errno=0 [ 319.851895][ T9727] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 320.202264][ T30] audit: type=1800 audit(1770667028.104:17): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.732" name="members" dev="configfs" ino=28836 res=0 errno=0 [ 321.561908][ T9767] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 321.864005][ T9775] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078005000 pfn:0x78005 [ 321.883817][ T9775] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 321.902595][ T9775] page_type: f2(table) [ 321.906761][ T9775] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 321.941276][ T9775] raw: ffff888078005000 ffff888078746240 00000001f2000000 0000000000000000 [ 321.956244][ T9775] page dumped because: unmovable page [ 321.965804][ T9775] page_owner tracks the page as allocated [ 321.979413][ T9775] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 9446, tgid 9446 (syz-executor), ts 304045769305, free_ts 303475485815 [ 322.051889][ T9775] post_alloc_hook+0x1e1/0x250 [ 322.056773][ T9775] get_page_from_freelist+0xe3d/0x2e10 [ 322.077402][ T9760] [U] [ 322.135961][ T9775] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 322.158388][ T9775] alloc_pages_mpol+0x1fb/0x550 [ 322.164585][ T9775] alloc_pages_noprof+0x131/0x390 [ 322.369356][ T9775] pte_alloc_one+0x1e/0x3e0 [ 322.395034][ T9775] __pte_alloc+0x6d/0x3f0 [ 322.429778][ T9775] copy_page_range+0x3f17/0x6ba0 [ 322.440853][ T9775] dup_mmap+0xbea/0x1e20 [ 322.451809][ T9775] copy_process+0x7451/0x7890 [ 322.473015][ T9775] kernel_clone+0xfc/0x930 [ 322.487938][ T9775] __do_sys_clone+0xd9/0x120 [ 322.518199][ T9775] do_syscall_64+0xc9/0xf80 [ 322.552554][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.602420][ T9775] page last free pid 797 tgid 797 stack trace: [ 322.683574][ T9775] __free_frozen_pages+0x822/0x1130 [ 322.758228][ T9775] pcpu_free_pages.isra.0+0x13c/0x1c0 [ 322.764860][ T9775] pcpu_balance_workfn+0x24e/0xdd0 [ 322.808277][ T9775] process_one_work+0x9c2/0x1840 [ 322.848306][ T9775] worker_thread+0x5da/0xe40 [ 322.853093][ T9775] kthread+0x3b3/0x730 [ 322.857250][ T9775] ret_from_fork+0x754/0xaf0 [ 322.874581][ T9784] binder: 9779:9784 ioctl c018620c 0 returned -1 [ 322.915586][ T9775] ret_from_fork_asm+0x1a/0x30 [ 323.580014][ T9787] kexec: Could not allocate control_code_buffer [ 324.141066][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.746'. [ 327.634008][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.647379][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.249002][ T9903] FAULT_INJECTION: forcing a failure. [ 330.249002][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 330.290665][ T9903] CPU: 0 UID: 0 PID: 9903 Comm: syz.4.757 Tainted: G U L syzkaller #0 PREEMPT(full) [ 330.290722][ T9903] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 330.290736][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 330.290757][ T9903] Call Trace: [ 330.290768][ T9903] [ 330.290779][ T9903] dump_stack_lvl+0x100/0x190 [ 330.290826][ T9903] should_fail_ex.cold+0x5/0xa [ 330.290882][ T9903] should_failslab+0xc2/0x120 [ 330.290931][ T9903] kmem_cache_alloc_noprof+0x83/0x780 [ 330.290977][ T9903] ? sk_prot_alloc+0x60/0x2a0 [ 330.291019][ T9903] ? sk_prot_alloc+0x60/0x2a0 [ 330.291051][ T9903] sk_prot_alloc+0x60/0x2a0 [ 330.291089][ T9903] sk_alloc+0x36/0xe80 [ 330.291136][ T9903] inet_create+0x3a0/0x1060 [ 330.291177][ T9903] ? inet_create+0x94/0x1060 [ 330.291222][ T9903] __sock_create+0x339/0x860 [ 330.291270][ T9903] __sys_socket+0x14d/0x260 [ 330.291311][ T9903] ? __pfx___sys_socket+0x10/0x10 [ 330.291351][ T9903] ? xfd_validate_state+0x129/0x190 [ 330.291428][ T9903] __x64_sys_socket+0x72/0xb0 [ 330.291468][ T9903] ? lockdep_hardirqs_on+0x78/0x100 [ 330.291509][ T9903] do_syscall_64+0xc9/0xf80 [ 330.291554][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.291587][ T9903] RIP: 0033:0x7f6c1959af79 [ 330.291614][ T9903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.291652][ T9903] RSP: 002b:00007f6c177ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 330.291685][ T9903] RAX: ffffffffffffffda RBX: 00007f6c19815fa0 RCX: 00007f6c1959af79 [ 330.291708][ T9903] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 330.291726][ T9903] RBP: 00007f6c196316e0 R08: 0000000000000000 R09: 0000000000000000 [ 330.291747][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.291767][ T9903] R13: 00007f6c19816038 R14: 00007f6c19815fa0 R15: 00007ffff6aebc38 [ 330.291810][ T9903] [ 332.247026][ T30] audit: type=1800 audit(1770667040.154:18): pid=9960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.766" name="version" dev="configfs" ino=28510 res=0 errno=0 [ 333.500011][ T9984] BUG: Bad rss-counter state mm:ffff888022f88c40 type:MM_FILEPAGES val:224 Comm:syz.3.770 Pid:9984 [ 333.508695][ T9904] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022f88c40 pfn:0x576a6 [ 333.521346][ T9904] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 333.528847][ T9904] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 333.537507][ T9904] raw: ffff888022f88c40 0000000000000000 00000000ffffffff 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.546276][ T9904] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 333.554150][ T9904] page_owner tracks the page as freed [ 333.560584][ T9904] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 5822, tgid 5822 (syz-executor), ts 333099225946, free_ts 333499983024 [ 333.581156][ T9904] post_alloc_hook+0x1e1/0x250 [ 333.585998][ T9904] get_page_from_freelist+0xe3d/0x2e10 [ 333.592542][ T9904] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 333.598641][ T9904] alloc_pages_mpol+0x1fb/0x550 [ 333.603559][ T9904] alloc_pages_noprof+0x131/0x390 [ 333.608710][ T9904] pgd_alloc+0x4d/0x640 [ 333.612920][ T9904] mm_init+0x6da/0x10d0 [ 333.617132][ T9904] copy_process+0x7433/0x7890 [ 333.622645][ T9904] kernel_clone+0xfc/0x930 [ 333.627142][ T9904] __do_sys_clone+0xd9/0x120 [ 333.632036][ T9904] do_syscall_64+0xc9/0xf80 [ 333.636608][ T9904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.642650][ T9904] page last free pid 9984 tgid 9983 stack trace: [ 333.649071][ T9904] __free_frozen_pages+0x822/0x1130 [ 333.654331][ T9904] pgd_free+0x3f4/0x560 [ 333.658932][ T15] ================================================================== [ 333.658956][ T15] BUG: KASAN: slab-use-after-free in __schedule+0xc56/0x5fa0 [ 333.658996][ T15] Read of size 4 at addr ffff888022f88d00 by task ksoftirqd/0/15 [ 333.659022][ T15] [ 333.659041][ T15] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 333.659090][ T15] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 333.659102][ T15] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 333.659122][ T15] Call Trace: [ 333.659132][ T15] [ 333.659142][ T15] dump_stack_lvl+0x100/0x190 [ 333.659192][ T15] print_report+0x156/0x4c9 [ 333.659334][ T15] ? __virt_addr_valid+0x81/0x620 [ 333.659473][ T15] ? __phys_addr+0xe8/0x180 [ 333.659595][ T15] ? __schedule+0xc56/0x5fa0 [ 333.659676][ T15] kasan_report+0xdf/0x1a0 [ 333.659793][ T15] ? __schedule+0xc56/0x5fa0 [ 333.659888][ T15] kasan_check_range+0x10f/0x1e0 [ 333.659963][ T15] __schedule+0xc56/0x5fa0 [ 333.660054][ T15] ? __lock_acquire+0x4a5/0x2630 [ 333.660240][ T15] ? __pfx___schedule+0x10/0x10 [ 333.660323][ T15] ? find_held_lock+0x2b/0x80 [ 333.660415][ T15] ? schedule+0x2bf/0x390 [ 333.660500][ T15] schedule+0xdd/0x390 [ 333.660589][ T15] smpboot_thread_fn+0x893/0xaa0 [ 333.660734][ T15] ? kthread+0x17d/0x730 [ 333.660861][ T15] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 333.660958][ T15] kthread+0x3b3/0x730 [ 333.661072][ T15] ? __pfx_kthread+0x10/0x10 [ 333.661180][ T15] ? ret_from_fork+0x79/0xaf0 [ 333.661254][ T15] ? ret_from_fork+0x79/0xaf0 [ 333.661331][ T15] ? rcu_is_watching+0x12/0xc0 [ 333.661426][ T15] ? __pfx_kthread+0x10/0x10 [ 333.661563][ T15] ret_from_fork+0x754/0xaf0 [ 333.661641][ T15] ? __pfx_ret_from_fork+0x10/0x10 [ 333.661720][ T15] ? __switch_to+0x7b9/0x10c0 [ 333.661834][ T15] ? __pfx_kthread+0x10/0x10 [ 333.661961][ T15] ret_from_fork_asm+0x1a/0x30 [ 333.662162][ T15] [ 333.662206][ T15] [ 333.667234][ T9904] __mmdrop+0xe5/0x750 [ 333.674617][ T15] Allocated by task 5822: [ 333.674634][ T15] kasan_save_stack+0x30/0x50 [ 333.674670][ T15] kasan_save_track+0x14/0x30 [ 333.674706][ T15] __kasan_slab_alloc+0x89/0x90 [ 333.674744][ T15] kmem_cache_alloc_noprof+0x2ad/0x780 [ 333.674783][ T15] copy_process+0x73df/0x7890 [ 333.674823][ T15] kernel_clone+0xfc/0x930 [ 333.674862][ T15] __do_sys_clone+0xd9/0x120 [ 333.674901][ T15] do_syscall_64+0xc9/0xf80 [ 333.674936][ T15] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.674966][ T15] [ 333.674974][ T15] Freed by task 9984: [ 333.674988][ T15] kasan_save_stack+0x30/0x50 [ 333.675025][ T15] kasan_save_track+0x14/0x30 [ 333.675062][ T15] kasan_save_free_info+0x3b/0x70 [ 333.675092][ T15] __kasan_slab_free+0x5f/0x80 [ 333.675130][ T15] kmem_cache_free+0x143/0x720 [ 333.675162][ T15] __mmput+0x379/0x410 [ 333.675197][ T15] mmput+0x67/0x80 [ 333.675231][ T15] do_exit+0x78a/0x2a30 [ 333.675274][ T15] do_group_exit+0xd5/0x2a0 [ 333.675318][ T15] get_signal+0x1ec7/0x21e0 [ 333.675352][ T15] arch_do_signal_or_restart+0x91/0x770 [ 333.675402][ T15] exit_to_user_mode_loop+0x86/0x4b0 [ 333.675446][ T15] do_syscall_64+0x4ea/0xf80 [ 333.675482][ T15] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.675513][ T15] [ 333.675521][ T15] The buggy address belongs to the object at ffff888022f88c40 [ 333.675521][ T15] which belongs to the cache mm_struct of size 2968 [ 333.675547][ T15] The buggy address is located 192 bytes inside of [ 333.675547][ T15] freed 2968-byte region [ffff888022f88c40, ffff888022f897d8) [ 333.675580][ T15] [ 333.675588][ T15] The buggy address belongs to the physical page: [ 333.675602][ T15] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22f88 [ 333.675630][ T15] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 333.675656][ T15] memcg:ffff88807d93f901 [ 333.675668][ T15] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 333.675696][ T15] page_type: f5(slab) [ 333.675724][ T15] raw: 00fff00000000040 ffff88813ff30b40 ffffea0001e37200 dead000000000003 [ 333.675754][ T15] raw: 0000000000000000 00000000000a000a 00000000f5000000 ffff88807d93f901 [ 333.675784][ T15] head: 00fff00000000040 ffff88813ff30b40 ffffea0001e37200 dead000000000003 [ 333.675814][ T15] head: 0000000000000000 00000000000a000a 00000000f5000000 ffff88807d93f901 [ 333.675845][ T15] head: 00fff00000000003 ffffea00008be201 00000000ffffffff 00000000ffffffff [ 333.675875][ T15] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 333.675895][ T15] page dumped because: kasan: bad access detected [ 333.675910][ T15] page_owner tracks the page as allocated [ 333.675921][ T15] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5570, tgid 5570 (S50sshd), ts 68394946418, free_ts 68344353499 [ 333.675976][ T15] post_alloc_hook+0x1e1/0x250 [ 333.676008][ T15] get_page_from_freelist+0xe3d/0x2e10 [ 333.676043][ T15] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 333.676080][ T15] alloc_pages_mpol+0x1fb/0x550 [ 333.676122][ T15] new_slab+0x2c4/0x440 [ 333.676148][ T15] ___slab_alloc+0xda3/0x1ca0 [ 333.676176][ T15] __slab_alloc.isra.0+0x63/0x110 [ 333.686062][ T9904] __mmput+0x379/0x410 [ 333.686244][ T15] kmem_cache_alloc_noprof+0x4ec/0x780 [ 333.697361][ T9904] mmput+0x67/0x80 [ 333.702214][ T15] mm_alloc+0x1c/0xd0 [ 333.702251][ T15] alloc_bprm+0x2af/0x710 [ 333.702279][ T15] do_execveat_common.isra.0+0x1d0/0x5b0 [ 333.712458][ T9904] do_exit+0x78a/0x2a30 [ 333.715639][ T15] __x64_sys_execve+0x8e/0xb0 [ 333.718702][ T9904] do_group_exit+0xd5/0x2a0 [ 333.723265][ T15] do_syscall_64+0xc9/0xf80 [ 333.727773][ T9904] get_signal+0x1ec7/0x21e0 [ 333.732803][ T15] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.732836][ T15] page last free pid 5568 tgid 5568 stack trace: [ 333.732855][ T15] __free_frozen_pages+0x822/0x1130 [ 333.737359][ T9904] arch_do_signal_or_restart+0x91/0x770 [ 333.741986][ T15] __put_partials+0x127/0x160 [ 333.742019][ T15] qlist_free_all+0x47/0xe0 [ 333.746477][ T9904] exit_to_user_mode_loop+0x86/0x4b0 [ 333.751074][ T15] kasan_quarantine_reduce+0x1a0/0x1f0 [ 333.751114][ T15] __kasan_slab_alloc+0x69/0x90 [ 333.751153][ T15] kmem_cache_alloc_noprof+0x2ad/0x780 [ 333.756105][ T9904] do_syscall_64+0x4ea/0xf80 [ 333.760527][ T15] mas_alloc_nodes+0x280/0x390 [ 333.760556][ T15] mas_preallocate+0x39c/0xf10 [ 333.760594][ T15] commit_merge+0x3e3/0xbd0 [ 333.760623][ T15] vma_expand+0x7c3/0xd50 [ 333.760652][ T15] relocate_vma_down+0x259/0x4d0 [ 333.760690][ T15] setup_arg_pages+0x536/0xb60 [ 333.760717][ T15] load_elf_binary+0xb75/0x5110 [ 333.760753][ T15] bprm_execve+0x8fb/0x1620 [ 333.760781][ T15] do_execveat_common.isra.0+0x4dc/0x5b0 [ 333.760813][ T15] __x64_sys_execve+0x8e/0xb0 [ 333.760845][ T15] [ 333.760853][ T15] Memory state around the buggy address: [ 333.760871][ T15] ffff888022f88c00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 333.760893][ T15] ffff888022f88c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.760917][ T15] >ffff888022f88d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.760935][ T15] ^ [ 333.760952][ T15] ffff888022f88d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.760976][ T15] ffff888022f88e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.760995][ T15] ================================================================== [ 333.761024][ T15] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 333.761048][ T15] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 333.761098][ T15] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 333.761111][ T15] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 333.761132][ T15] Call Trace: [ 333.761142][ T15] [ 333.761154][ T15] dump_stack_lvl+0x100/0x190 [ 333.761254][ T15] vpanic+0x20d/0x630 [ 333.761350][ T15] panic+0xd1/0xd1 [ 333.761430][ T15] ? __pfx_panic+0x10/0x10 [ 333.761514][ T15] ? end_report.part.0+0x23/0x90 [ 333.761635][ T15] ? rcu_is_watching+0x12/0xc0 [ 333.761728][ T15] ? end_report.part.0+0x23/0x90 [ 333.761827][ T15] ? check_panic_on_warn+0x1f/0x90 [ 333.761963][ T15] check_panic_on_warn.cold+0x19/0x34 [ 333.762047][ T15] end_report.part.0+0x3a/0x90 [ 333.762155][ T15] kasan_report.cold+0xe/0x18 [ 333.762270][ T15] ? __schedule+0xc56/0x5fa0 [ 333.762368][ T15] kasan_check_range+0x10f/0x1e0 [ 333.762441][ T15] __schedule+0xc56/0x5fa0 [ 333.762533][ T15] ? __lock_acquire+0x4a5/0x2630 [ 333.762691][ T15] ? __pfx___schedule+0x10/0x10 [ 333.762789][ T15] ? find_held_lock+0x2b/0x80 [ 333.762877][ T15] ? schedule+0x2bf/0x390 [ 333.762969][ T15] schedule+0xdd/0x390 [ 333.763054][ T15] smpboot_thread_fn+0x893/0xaa0 [ 333.763171][ T15] ? kthread+0x17d/0x730 [ 333.763285][ T15] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 333.763392][ T15] kthread+0x3b3/0x730 [ 333.763516][ T15] ? __pfx_kthread+0x10/0x10 [ 333.763628][ T15] ? ret_from_fork+0x79/0xaf0 [ 333.763703][ T15] ? ret_from_fork+0x79/0xaf0 [ 333.763782][ T15] ? rcu_is_watching+0x12/0xc0 [ 333.763865][ T15] ? __pfx_kthread+0x10/0x10 [ 333.763980][ T15] ret_from_fork+0x754/0xaf0 [ 333.764089][ T15] ? __pfx_ret_from_fork+0x10/0x10 [ 333.764201][ T15] ? __switch_to+0x7b9/0x10c0 [ 333.764321][ T15] ? __pfx_kthread+0x10/0x10 [ 333.764450][ T15] ret_from_fork_asm+0x1a/0x30 [ 333.764609][ T15] [ 333.766714][ T15] Kernel Offset: disabled