last executing test programs: 7m56.48335397s ago: executing program 3 (id=1096): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000200)='}[,&*}\x00', &(0x7f0000000240)='nfsd\x00', 0x3, 0x0) access$auto(&(0x7f0000000000)='}[,&*}\x00', 0x7) (async) access$auto(&(0x7f0000000000)='}[,&*}\x00', 0x7) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x1}}) socket(0x1a, 0x1, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_NAPI_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {0xb, 0x0, 0x300}}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) 7m55.380741914s ago: executing program 3 (id=1101): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4, 0x4000000000df, 0x1040eb2, 0x402, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) kexec_load$auto(0x9, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c004}, 0x3) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) mincore$auto(0x1000, 0x4000000, 0x0) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[], 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) landlock_restrict_self$auto(r1, 0x0) inotify_init1$auto(0x3000000000000) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1cc5087217524dd0}}, 0x6a) close_range$auto(0x2, 0x8, 0x0) 7m53.758951695s ago: executing program 3 (id=1108): timer_create$auto(0x2, 0x0, &(0x7f0000000140)=0x6) clock_nanosleep$auto(0x2, 0x200, &(0x7f0000000100)={0x8, 0x7}, 0x0) timer_settime$auto(0x0, 0x6, &(0x7f0000000000)={{0x100000001, 0x3ff}, {0x5a, 0x2}}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.2/usb3/devspec\x00', 0x1c2580, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/86, 0x56) 7m52.792386343s ago: executing program 3 (id=1114): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00'}) (async) socket(0xa, 0x2, 0x3a) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r2 = socket(0xa, 0x3, 0x3a) (async) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) (async) r3 = socket(0x2, 0x3, 0x2) socketpair$auto(0x1, 0x801, 0x81, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x163340, 0x6a) (async) socket(0xa, 0x2, 0x88) (async) setsockopt$auto(r3, 0x1, 0x1, 0x0, 0xc086) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x5) (async) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e22, @broadcast}, 0x55) (async) getsockopt$auto(r2, 0x29, 0x1, 0x0, 0x0) (async) sendfile$auto(r1, r1, 0x0, 0x7fffe000) (async) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) 7m51.524205127s ago: executing program 3 (id=1120): sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x20000881) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) r4 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r3}) sendfile$auto(r4, r3, 0x0, 0x7fffe002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000040)={0x10, 0x3}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) 7m49.8589443s ago: executing program 3 (id=1125): syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = socket(0x28, 0x1, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_memory\x00', 0xf22437c730143eb6, 0x0) move_pages$auto(0x0, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000001380)={0x2, 0x0, [{0x4b564d07, 0x400, 0xffffffffffffffff}]}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x8a000, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r1, @ANYRES16=r4, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000100000000000000000006000700010000000600070006000000086b2212fc1145eb6eec000300"], 0x68}, 0x1, 0x0, 0x0, 0x44014}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/fail-nth\x00', 0x900, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7m34.853395171s ago: executing program 32 (id=1125): syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = socket(0x28, 0x1, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_memory\x00', 0xf22437c730143eb6, 0x0) move_pages$auto(0x0, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000001380)={0x2, 0x0, [{0x4b564d07, 0x400, 0xffffffffffffffff}]}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x8a000, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r1, @ANYRES16=r4, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000100000000000000000006000700010000000600070006000000086b2212fc1145eb6eec000300"], 0x68}, 0x1, 0x0, 0x0, 0x44014}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/fail-nth\x00', 0x900, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7m21.420187359s ago: executing program 4 (id=1177): mmap$auto(0x0, 0x9, 0x5, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_getevents$auto(0x1, 0x401, 0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x200000000000001, 0x6}) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) close_range$auto(0x2, 0x8, 0x0) 7m20.880546259s ago: executing program 4 (id=1225): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_macvtap/enhanced_dad\x00', 0x341682, 0x0) mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x100008000) close_range$auto(0xffffffffffffffff, 0x8, 0x100003) semctl$auto(0xa, 0x0, 0x20000004, 0xdd) r0 = socketpair$auto(0x7ff, 0x80, 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xb8, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) r1 = socket(0x11, 0x3, 0x9) socket(0x11, 0x80003, 0x300) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) socket(0x2, 0x2, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socketpair$auto(0x10805, 0x6, 0x6, 0x0) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000002580)=ANY=[@ANYBLOB="8411000006e76f515a48266699600ae43f195ebffa197ad655ed264794ea5884af0cb7cd5d96802b641952e86d5023cbfc1362a55da51d6723b40250795d74543b21c0863208f4b8554a5889cb11e3b6e128ffa840d54b30f94098a5441dc67e226a08a20b5040017ce47aa0a36eed8333c2f26123b6b6456dc75fdd2d3168a3d536b4820db37af29d5ab441f6651770310455061bfa54af33c4080a6e519a9d72e49e03913471", @ANYRES16=0x0, @ANYBLOB="000d2cbd7000ffdbdf254a0000002211a6802800450007000400000000000000f7000000000000000000000000009da327b1c38afd46dff1d3861410748008004000", @ANYRES32=0xee00, @ANYBLOB="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"], 0x1184}, 0x1, 0x0, 0x0, 0x10}, 0x40800) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000001c0), r3) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000380)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRES8=r4], 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x1) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r2, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x404c534a, 0x38) ioctl$auto_MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) 7m5.609214749s ago: executing program 33 (id=1225): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_macvtap/enhanced_dad\x00', 0x341682, 0x0) mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x100008000) close_range$auto(0xffffffffffffffff, 0x8, 0x100003) semctl$auto(0xa, 0x0, 0x20000004, 0xdd) r0 = socketpair$auto(0x7ff, 0x80, 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xb8, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) r1 = socket(0x11, 0x3, 0x9) socket(0x11, 0x80003, 0x300) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) socket(0x2, 0x2, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socketpair$auto(0x10805, 0x6, 0x6, 0x0) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000002580)=ANY=[@ANYBLOB="8411000006e76f515a48266699600ae43f195ebffa197ad655ed264794ea5884af0cb7cd5d96802b641952e86d5023cbfc1362a55da51d6723b40250795d74543b21c0863208f4b8554a5889cb11e3b6e128ffa840d54b30f94098a5441dc67e226a08a20b5040017ce47aa0a36eed8333c2f26123b6b6456dc75fdd2d3168a3d536b4820db37af29d5ab441f6651770310455061bfa54af33c4080a6e519a9d72e49e03913471", @ANYRES16=0x0, @ANYBLOB="000d2cbd7000ffdbdf254a0000002211a6802800450007000400000000000000f7000000000000000000000000009da327b1c38afd46dff1d3861410748008004000", @ANYRES32=0xee00, @ANYBLOB="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"], 0x1184}, 0x1, 0x0, 0x0, 0x10}, 0x40800) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000001c0), r3) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000380)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRES8=r4], 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x1) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r2, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x404c534a, 0x38) ioctl$auto_MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) 4m13.576536143s ago: executing program 5 (id=1912): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/batadv0/mcast_solicit\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000380)={0xdd, 0x0, [{0x40000000, 0x9, 0x3b0}]}) setresgid$auto(0x81, 0x800000a0, 0x8) r4 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={"b2a4c33c473dab346bce472c47d1158a4bc0f66c24678a7261c092c45cc82899", 0x5, 0xff000000, 0x2, 0x7fffffff, 0x400}) read$auto_tracing_fops_trace(r4, &(0x7f0000000580)=""/4096, 0x1000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresuid$auto(0x8, 0x8, 0x0) read$auto(r0, 0x0, 0x1ff) 4m13.346546669s ago: executing program 5 (id=1915): socket(0xa, 0x1, 0x84) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) unshare$auto(0x40000080) (async) setsockopt$auto(0x400000000000003, 0x29, 0x39, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0x10, 0x2, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 4m12.925306459s ago: executing program 5 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVLOWAT(r0, 0x1, 0x12, &(0x7f0000000ac0)='\'!\x00', &(0x7f0000000b00)=0x80) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) shmctl$auto_SHM_LOCK(0xffff, 0xb, &(0x7f0000001300)={{0xcf4, 0xee00, 0xee01, 0x989, 0x4, 0x1ff, 0xffff}, 0x7, 0x7, 0x6, 0x3, @raw=0xffffffff, @raw=0x8, 0x8, 0x0, &(0x7f0000000300)="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", &(0x7f00000001c0)="907a8ec6c3"}) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000029c0), r0) sendmsg$auto_IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x58, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@generic="d3db6a0986a53e65b61df0f4210e2e7e754f2b7e1bda813bb88443ad611b430f09f79c099c13f578efe38579", @nested={0xc, 0x91, 0x0, 0x1, [@typed={0x8, 0x148, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x4000) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000002940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000001380)={0x15bc, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_SCAN_SSIDS={0x14b, 0x2d, 0x0, 0x1, [@typed={0x14, 0x6a, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x148, 0x0, 0x0, @u32=0x7}, @typed={0xa5, 0x61, 0x0, 0x0, @binary="20af258d0e99c3bffc1d2166b34b264fbe7ce03a35b454c2b93fe8a5c6406ce2c7e8a32ea4095226d3af46b1ec3f0763a7394069f2ada1b7198e9cef729b12fb3e3c08941f99575ab82a874720c1aa2873b784efb1b90409a9886c7b9a2c7662fa446a0de441a6acbb3ec60e3de9dc2a41015b2cb9148783bf7e74846452d075f11ddd06feb47417237a54634a0dc56b13587932f347bcd27605e0177291ea1a4a"}, @generic="a0e8df623cef3902685a5e63348fc67db64d70aa28df80975d77afb5d062d05ebe7a28e56e9eb90f6e8d39065be3b82e809a0f0bf63c9e9663f235f6cc122dfc76e13cf3faf629a5b88235396c5343b487cedd8e662e35629d877aee961033f9f1bbff15f73a0a52fe053899f5806218eb1759cbc9ec1f58dd00c2239fa750eb8b985a"]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4e6}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x45, 0xbb, "806265801868c5669b6e5d4cb65eea798471056986ffe702f653a60a8d521ddc3fdcfcdc7aa1526568ba8da212fa8b499b24d162f8c21e946072068b4a06ea161f"}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x44}, @NL80211_ATTR_PEER_AID={0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xbda}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x180, 0x75, 0x0, 0x1, [@nested={0x156, 0x45, 0x0, 0x1, [@generic="45191d7eab5a7b0eff7db927a97a761ce0e7550eb5a5df5514895d4050a298fd3656b74e207a7613472cdbe4544d57f94125499990dc16a83f1c85f3615c6f43bf8f53d08f6adb135f480806ad8ac630977f69bd786f1a03fb75614cb44d19cb787bf6149c173994baad4e7f45ccf7e582b005a0c40b32452751704fe702581c965fdbef46a5692a5a98f1c2f4209c2c2424ac3ecb56ef78698eab6c5878bcb54732d985b24d05", @nested={0x4, 0x48}, @generic="89352574118f176607aa7384908a024c9af7818c9b1c0e4f5c51e33110dc90b42ae0654c396ac42d5ef94c9b025ea0fa9334376384d1ea871ac431f5bc269a8528abd86563b3d253f48566f77af4277c48290445abe457e89ecb525f41718f8079efc589f2402365e3e8418459cac3804fb7010b0f2811e1ffce171c6288272d403e577c12fba1f307cea2ba434eeab5ace956499b86d95869663d87b5507a6d1a94f88eb4b1cb"]}, @generic="d182d217d6d34f92c1f2189925f841aaf812538c4ccc0af68b0c0cf96db16683", @typed={0x4, 0x64}]}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x126c, 0x25, 0x0, 0x1, [@nested={0x20, 0x94, 0x0, 0x1, [@typed={0xc, 0xaa, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x14f, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x23c, 0x3c, 0x0, 0x1, [@generic="73c55ea35c3d98fb2edde099090382df9634049e7b353c9410e3fdcaeee78eadc1f2bf8eba6f1cdd25b453d782dce5f0d288eb71a39842db6581d6318ff2e6124130dad3387ab73985b3d794e3658cc69f1e8423ccb3a32b3f9321d99da3765e9bfddc8291", @nested={0x4, 0x13d}, @generic="388037d047ba0e758f8348775994041d1635828dca91da4242b6efdf9018049de221e9a2730a9dd48532", @generic="5ea42aed3627391745cba55eae82e0a59fc04f7bc59a91d7a47e417d8f2c956f71ff11e137d535d255405a944cb9aa07867a06d0c65e70174e3e8fdf2ba879ec6aa0094572c0b5fdbdd1f6f6d2f4a7bfae48a95418075c30caa89432f7d314498e8f0168355f632ae18b7f06d7b7e38ed220640744ef671002bc873fa526d88acfdf7e1534ea3dd66f726221f62d3a5ec27d77ad742f8f", @nested={0x4, 0x151}, @nested={0x4, 0xb7}, @generic="afabca9bf712310858fb0fae30d13a28f14dbf5583856a4db230e7c71a1288d59d4b9ecb6f411e72d6d382874ff01a10761984cf81e46c5044a4e397665e66c981b4a992534740325c3457242cedbd27b48f31ba7fff55f83d271684c204e4acd7c601bc9a0627b0cae1debf8c6e3e751e4c7c6e33d482b4313cc91518182509451f3bf4bd656edac937fae1622986743184099d0b0199099280a034efbe4dfb570dd68d556eded4d7065bccf482494d9ab19777ea1903da6c686086d9f90c099c0a7d9a7c63ad112ae1b848c8e712ac8a15a70ca4cd01cf", @generic="914cbc186b81fee47a6cf07ed47a8695956497e63f3366cfb0f7896e8e17eda165481945dc34bdb1f1f1d47e8bb0"]}, @nested={0xc, 0x5d, 0x0, 0x1, [@typed={0x8, 0xa6, 0x0, 0x0, @uid=r4}]}, @generic="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"]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x7}]}, 0x15bc}, 0x1, 0x0, 0x0, 0x1004}, 0x0) bpf$auto(0x14, &(0x7f00000000c0)=@enable_stats={0x1}, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd6c00fbdbdf250200000008000300000000000800010047c7e2"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x4, 0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4m12.677473164s ago: executing program 5 (id=1919): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x80) ioctl$auto(r0, 0x8903, 0x8) r1 = socket(0x2b, 0x1, 0x0) mmap$auto(0x8000000000000, 0x400005, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x3, 0x1, 0x1e, 0x0, 0xfff) listen$auto(0x3, 0x81) r2 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getsockopt$auto_SO_NETNS_COOKIE(r0, 0x9, 0x47, &(0x7f0000000540)='nl80211\x00', &(0x7f0000000580)) prctl$auto(0x3e, 0x0, 0x4, 0x1, 0x7fe) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000500)={{&(0x7f00000001c0), 0x6cd1, &(0x7f00000002c0)={0x0, 0x4}, 0x13f1, 0x0, 0xd, 0x7}, 0x10}, 0x5, 0xfff) madvise$auto(0x0, 0x2003f2, 0x15) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4890) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r2, 0x1, 0x70bd2d, 0x25dfdc00, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x59}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) sendfile$auto(0x3, r3, 0x0, 0x2) 4m11.149607485s ago: executing program 5 (id=1925): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xa1c0, 0x0) ioctl$auto(r1, 0x4004550c, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x100000001, 0x8004000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x0, 0x22, 0xa) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x4000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) madvise$auto(0x0, 0x2003f0, 0x11) madvise$auto(0x1, 0x1000, 0x10000) personality$auto(0xfffffffc) 3m55.996453308s ago: executing program 34 (id=1925): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xa1c0, 0x0) ioctl$auto(r1, 0x4004550c, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x100000001, 0x8004000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x0, 0x22, 0xa) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x4000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) madvise$auto(0x0, 0x2003f0, 0x11) madvise$auto(0x1, 0x1000, 0x10000) personality$auto(0xfffffffc) 2m6.572075454s ago: executing program 0 (id=2317): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec27\x00', 0x80200, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x47ee) pread64$auto(r0, &(0x7f00000000c0)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x6, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x61c042, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f00000001c0)={0x0, 0x6}, 0x3) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) 2m4.70047563s ago: executing program 0 (id=2321): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mseal$auto(0x0, 0x200000000007dda, 0x40000000) mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x41045508, r0) socket(0x11, 0xa, 0x300) r1 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322df4) r2 = open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) sendfile$auto(r2, r1, 0x0, 0x2) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) setsockopt$auto_SO_WIFI_STATUS(r2, 0x9, 0x29, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x3925) madvise$auto(0x1, 0x2003f0, 0x1) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x4000) r3 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000140), 0xcb}, 0x3, 0x0, 0x80000000, 0x7}, 0x80010009}, 0x7, 0x200, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mseal$auto(0x0, 0x200000000007dda, 0x40000000) (async) mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async) ioctl$auto(r0, 0x41045508, r0) (async) socket(0x11, 0xa, 0x300) (async) open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322df4) (async) open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x5, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) (async) sendfile$auto(r2, r1, 0x0, 0x2) (async) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (async) setsockopt$auto_SO_WIFI_STATUS(r2, 0x9, 0x29, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x3925) (async) madvise$auto(0x1, 0x2003f0, 0x1) (async) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x4000) (async) socket(0x10, 0x2, 0x0) (async) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000140), 0xcb}, 0x3, 0x0, 0x80000000, 0x7}, 0x80010009}, 0x7, 0x200, 0x0) (async) 2m3.807821079s ago: executing program 0 (id=2325): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r0, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) 2m3.398227583s ago: executing program 0 (id=2326): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/apparmor/parameters/debug\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r0, 0x0, 0xb4d3) socket(0xa, 0x80000, 0x1) write$auto(0x3, 0x0, 0xffd8) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) ioctl$auto_SNDCTL_DSP_NONBLOCK(r1, 0x500e, &(0x7f0000000080)="d8969b863e44672d8f01c993bc3aec65a1dacccbfcc1be1928f883b5e84f7a71f8a0ceba68fa2eccaf7761ad43869366faff23d5db9353f85d8e10559cc43e69ca9a53424eb6a7cdea4e3982cc5dad4cc0a4e12a6fd6e167518c0ec01d21dae476596f1add1e1221fbc51fd3") 2m2.63971379s ago: executing program 0 (id=2328): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socket(0x1e, 0xa, 0x8000000) select$auto(0x821, 0x0, 0x0, &(0x7f0000000040)={[0x5, 0xb, 0xa, 0x40007fff, 0x948b, 0xfffffffffffffffe, 0x100015f4da0a, 0x7f, 0xab13, 0x0, 0x80000001, 0x7, 0xfffffffffffffffe, 0x93, 0x400, 0xfffffffffffffffb]}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000240)=@bpf_attr_11={0x3, 0xe, 0x337, 0x2, 0x0, 0x3, 0x6, r1}, 0x401) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f00000001c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x53) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) listen$auto(0x3, 0x83) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000ec0)=""/4096, 0x1000) 2m1.645133338s ago: executing program 0 (id=2329): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x6) (async) socket(0x10, 0x2, 0x4) close_range$auto(0x2, r1, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="18000000", @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) (async) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000010, 0x400, 0x718c1257}]}) (async) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x406a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000000)=0xfffffff9) 1m45.710845319s ago: executing program 35 (id=2329): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x6) (async) socket(0x10, 0x2, 0x4) close_range$auto(0x2, r1, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="18000000", @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) (async) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000010, 0x400, 0x718c1257}]}) (async) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x406a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000000)=0xfffffff9) 10.707886356s ago: executing program 1 (id=2632): mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) lsm_get_self_attr$auto(0x2, &(0x7f0000000000)={0x10000000e, 0x4, 0xfffffffffffffffe, 0xa, "b4f27300000000008667"}, &(0x7f0000000080)=0x2c1c9c84, 0x1ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x8, 0x2, 0x40000000de, 0x100000eb1, 0x401, 0x7fff) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x3, 0x7, 0xe29d, 0x11, r0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x6, 0xfffffffffffffffe, 0x5, 0xfffffffffffff9fe) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0x4}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x407, 0x4008) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x2201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x216641, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000840)={0x6, 0x1, 0x9, 0x100000a, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x5b, 0x4005, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6e, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40085, 0x1, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x4, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000004]}, 0x1fe, 0x200c) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048011) 7.743959968s ago: executing program 1 (id=2640): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socket(0x1e, 0xa, 0x8000000) select$auto(0x821, 0x0, 0x0, &(0x7f0000000040)={[0x5, 0xb, 0xa, 0x40007fff, 0x948b, 0xfffffffffffffffe, 0x100015f4da0a, 0x7f, 0xab13, 0x0, 0x80000001, 0x7, 0xfffffffffffffffe, 0x93, 0x400, 0xfffffffffffffffb]}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000240)=@bpf_attr_11={0x3, 0xe, 0x337, 0x2, 0x0, 0x3, 0x6, r1}, 0x401) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f00000001c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x53) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x243e, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) listen$auto(0x3, 0x83) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000ec0)=""/4096, 0x1000) 6.472591628s ago: executing program 7 (id=2642): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2000b, 0xdd, 0x40eb1, 0x401, 0x8000) openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0x1011c0, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002e00), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000002f80)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) write$auto(0xffffffffffffffff, 0x0, 0x58c) socket(0x18, 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x541b, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x2}, 0x52) r2 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x30, &(0x7f0000000080)='\xef', 0x8000) 6.127912888s ago: executing program 1 (id=2644): r0 = socket(0x18, 0x5, 0x1) pipe$auto(0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x0, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r1 = socket(0x2, 0x1, 0x0) io_getevents$auto(0x24, 0xffffffff, 0x4, 0x0, 0xfffffffffffffffd) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) r4 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000001c0), 0x105204, 0x0) io_cancel$auto(0x100000000, &(0x7f0000000240)={0xffffffffffff8000, 0x2, 0x8, 0xfff, 0x2, r2, 0x5, 0x9, 0x7, 0x0, 0x7, r4}, &(0x7f0000000280)={0x4, 0xffffffff, 0x7, 0xb}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="250f26bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000080), r2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@empty}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "d60bdd59a82bcca99e710ecbc772"}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x3c}}, 0x20000045) connect$auto(r0, &(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x5}}, 0x2b) 6.088930728s ago: executing program 2 (id=2645): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xb, 0x940, 0x1ffde, 0x3, 0x1, 0x8000001, 0x9, 0x5, 0x2, 0x85b5, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0xfffffffffffffffc, 0x0, 0x100001ad, 0x0, 0x3, [0x0, 0x0, 0x2, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0xfc, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8, 0x20000001, 0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x80800, 0x0, 0x8001, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000001]}, 0xffff, 0x7d) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d00)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x37c60ad6183ba5b}, 0x810) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 5.818705003s ago: executing program 2 (id=2646): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='r'], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4004000000df, 0x800000000044eb2, r1, 0x300000010000) madvise$auto(0x0, 0x20000a, 0x4) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0x20000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xe2, 0x9b72, 0x2, 0x8000) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_RTC_PARAM_SET(r2, 0x40187014, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000006c92aed7f7a188fc724e0eb87c369aa30b728bf851f127a36170344a2407", @ANYRES16=r3, @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x101080, 0x0) r5 = semctl$auto_GETPID(0x1, 0x1, 0xb, 0x0) r6 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)=@bpf_attr_7={@start_id=0x2, 0x313, 0x2, r1}, 0x7) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@inferred=r5, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x5f32e201}, 0x4, 0x966, 0x1, @raw=0x404, @integer64={0x7, 0x5, 0x80}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="080000000970835a1fd2f7b55d01143f10a454637cff82cc00bfcef27fafc843e35223c5154111", @ANYRESOCT=r8, @ANYBLOB="010026bd7000fddbdf250c0000000800060000000000369b01e31b2969b7b68ea1dbb74f202fa66447fdcfbbfe25a08c8c918fac0beb27eeb3d6185b2b77c8ccafd2998c4397608fa43db4cde5fee4198d67cd552ec669488f33f3c395bc6e800e2cac0e58fc85cf6a2748e551466745288255d29e8c284e050f86a868c0d53a1cda7c388f48d00bd2b7a1350175c16d1089dbe1b12a0adbdb6bf27ba3ba7868e3b99424841b7fda6a6e4aa1bbb5edb2b167845ec0e6fd17430f469512380992"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x6000000) r9 = setfsuid$auto(0xee00) r10 = setfsuid$auto(0xee01) setresuid$auto(r9, r10, r9) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000009b80)=ANY=[@ANYBLOB="00000002f0c2300c78901d1d094dbac28627c4c0b63c88088cd75f130191d0d92c4fe529", @ANYRES16, @ANYBLOB="000226bd7000fbdbdf25010000001c01018010013e800400f38008003f00", @ANYRES32=r6, @ANYBLOB="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"/1244, @ANYRES32=r7, @ANYRES64=r6, @ANYRES32=0x0, @ANYRES16=r9, @ANYRES16=r4, @ANYBLOB="7fd9b4fab34c63a6b23b7ed0bda2765aa6d520d4d659878718e7eb5a40474012567b31eb5ce7dcca42f6ae4204aeff4e405d855f3fd7c06bc697c55ea2d7152b344807c86bd406b518b8f7f93b445b5a20e7db27c6294220ec7a4d9d2ec050ba25d1c8763e1b922c934fe0cc50f8bcf7ac30cef29437f105f43c05a08db526a6b2c5839406d508e9cb4c753c158e761bc737bb257a95102f7f492584e5d4f1583f9fa91a3928e3c59d510408008800", @ANYRES32, @ANYBLOB="000400af80726541f44b3ab231b04490df8722acf2995f762d04653e8deb6961a733b7efca61cf458b5a1cc79722a0e65abc2b7a8c4cc71093480123c660a7d55a5b733f8eff3e54d7dd0ca458528eb5332c7911a7c7e13fb650fa8ddc7ebd8c3539f10392301549f5d6795c9828063ea4b810496ed65d7414f1fce7f947d3d66d640193e18d503b5fb68a80582639005c6a3d54eda362acf63b87f2b43141f5890dfc3aa5a3daacf7bcfac7ffed45ecdf1145d1558570207f08bea497121c62a6934331b2aa2739ea09ae95025668110c004000cf2a0000000000000008002500", @ANYRES32=r10, @ANYBLOB], 0x2748}, 0x1, 0x0, 0x0, 0x8001}, 0x4001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x80044944, 0x0) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000000)={0xffffffffffffffd7, 0x82, 0x8000, 0x1000, 0x0, 0xff, 0x5, 0x3, 0x9, 0x8, 0x4, 0x3, 0x1, 0x7, 0xffff}) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r6) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) 5.74333715s ago: executing program 1 (id=2647): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r0, &(0x7f0000000440)='OF\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) (async) poll$auto(&(0x7f00000001c0)={r0, 0xc, 0xa25}, 0x3, 0x7fff) (async) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec28\x00', 0x88003, 0x0) mmap$auto(0x82, 0x2020009, 0x4, 0x15, r1, 0x401) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket(0x10, 0x2, 0xc) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x20, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffffe) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x5a9402, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, 0x0, 0x10044010) (async) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(r4, 0x0, 0xffdb) unshare$auto(0x40000080) (async) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x7c, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e0054c9e474be535fd29da000000", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"}) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x11, 0x3, 0x2) (async) getsockopt$auto(r4, 0x107, 0x2, 0x0, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0x40086203, 0xffffffffffffffff) (async, rerun: 64) setresuid$auto(0x2, 0x7, 0x8080) (async) r6 = clone$auto(0x6fc, 0x4dbb2, 0x0, 0x0, 0x4000c1a) tkill$auto(r6, 0x9) (async) fsconfig$auto(r3, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r5) 4.815489784s ago: executing program 2 (id=2649): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x40010, r0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') (async) pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) socketpair$auto(0x20000001, 0x2, 0x3, 0x0) (async) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(0x0) (async) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xae, 0x6, 0x1, 0x2}) ioctl$auto_BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000140)=0xffffffffffffffff) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x101940, 0x0) pread64$auto(r4, 0x0, 0x1ff, 0x5) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 4.719705914s ago: executing program 7 (id=2650): pidfd_open$auto(0x1, 0x0) (async) r0 = pidfd_open$auto(0x1, 0x0) socket(0xa, 0x3, 0x3a) (async) r1 = socket(0xa, 0x3, 0x3a) r2 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x8, 0x1, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd) syz_clone3(&(0x7f0000000280)={0x1e02c856826e0653, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = socket(0xa, 0x1, 0x84) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) (async) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r3, 0x84, 0x7c, 0x0, 0x0) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x384, 0x1) poll$auto(0x0, 0x5, 0x400) mmap$auto(0x8000000000, 0x4020009, 0x9, 0x17, 0x401, 0x0) recvfrom$auto(r0, &(0x7f0000000000)="906ce858e097fb77f51cadd83a004cd7a85fc18fe7388afcb03fa8ae9dbfb69d7634bc11f4774abfa0ccea327f8d965e40c0725fb9e7b69ebdd3908f3742037caf764fbc662889e9ce27b6e92257eb48c811161cf6f0764e2f43588df596a1dbe6c107f7c9d06202f5b79f0aa6194d90c45e7f857b3835a4df8ebd26976d11cfcce3c5b44ef7b2b1ecdeac02e4e541f0ca3cd4dfc20f7d5d930b4999ddb5bc7948da26020aa71a8ad34ba836396677c9e89a728e36e7c0eb3c9100758f8008c3a7684730a7e8b86bf1051f58", 0x247, 0x800, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000180)=0x1000) (async) recvfrom$auto(r0, &(0x7f0000000000)="906ce858e097fb77f51cadd83a004cd7a85fc18fe7388afcb03fa8ae9dbfb69d7634bc11f4774abfa0ccea327f8d965e40c0725fb9e7b69ebdd3908f3742037caf764fbc662889e9ce27b6e92257eb48c811161cf6f0764e2f43588df596a1dbe6c107f7c9d06202f5b79f0aa6194d90c45e7f857b3835a4df8ebd26976d11cfcce3c5b44ef7b2b1ecdeac02e4e541f0ca3cd4dfc20f7d5d930b4999ddb5bc7948da26020aa71a8ad34ba836396677c9e89a728e36e7c0eb3c9100758f8008c3a7684730a7e8b86bf1051f58", 0x247, 0x800, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000180)=0x1000) io_uring_setup$auto(0x6, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f00000001c0), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01012bbd7000fddbdf250d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000100000010000000"], 0x28}, 0x1, 0x0, 0x0, 0x64004401}, 0x800) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) setns(r0, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) setreuid$auto(0x3, 0x7) syz_clone3(&(0x7f0000000300)={0x10120000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) 3.639645739s ago: executing program 1 (id=2653): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) ioctl$auto_BLKCLOSEZONE(r0, 0x40101287, &(0x7f0000000000)={0x2, 0x4}) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@inferred, 0x85, 0x20e, 0x5, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x42, 0x5, 0x4, 0x6, 0x9, 0xffffffffffffffff, 0x9, 0x3, 0x101, 0x101, 0x22, 0x4, 0x6, 0x4, 0x7, 0xf, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe294, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x4, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0x14f3, 0x1ff, 0x1, 0x8000000006e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x2f79f1d9, 0x0, 0x401, 0x9, 0x6, 0x100000001, 0xffffffff, 0x800, 0x2, 0x5, 0x5ed4, 0x1, 0x7, 0x80000000, 0x962, 0x5, 0xfffffffffffffffe, 0x8, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x5, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x51, 0x8, 0x30, 0x2d, 0x0, 0x3, 0x2, 0x0, 0x726, 0x7fffffff, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0x0, 0x2, 0x4, 0x0, 0x5, 0x1, 0x3f, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x80000000000140, 0x0, 0x2, 0xfc05, 0x0, 0x4, 0x6, 0x8, 0x3, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b232c6035a4fe805c1ce1b6b1d83d21bb42794e210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c8500"}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r1, 0x0, 0x40001000f42c, 0x586) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x7) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000680)=""/249, 0xf9) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x426a2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x6, 0x6, 0x6) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) 3.468686814s ago: executing program 6 (id=2654): r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x4, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setresuid$auto(0x0, 0x8, 0x8000) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x4b, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_ADD_LINK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x40c, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_IE={0x27a, 0x2a, "5f0e2278b9eab0e93c93708622ff9389fa12f6b64c9adf0866b2a92111316251819d22e78531f57d5150bc6b86371b3129145afe51cc84d43eda7cfb923a3dc39809e5277fafa0122afdd22b4a0dba95a52e1887774b0538ccee0c3830e12f2473249ab392ae67c2cd8d63667134fbe6bca2276e26c4268b61864566c65f8f5ef922c46f950c9ecae3f0f486ea5a31e10ace5367942ac9b0c7d2a06e9f2355a1f2517502f223ad080e28807ddef18ae262f7f9dfaa8e0d71326bb86da0f4bd72c47906c44abf43c6410439916e77156d98014c10169bfd398d19a0248423719fa546b0a93ccc2773168b6d44ccd91fe8a347db3dbef25c0b0b034d4c129bce780400d2d2ba1cf23a928b17f1e2e54f11ab357042f7d367758c320dbd124eee489950dca28f5e9a2155563eac98e3a9b8199f24a877b1e0ba5314773c0f8e63429840e9e7e9eeec384e14cf7cf15cac8fd66daf4b3ef3396e0babfb1bc900ca74b506857b912e01121560266b9d030eb64e5979e7b9e0ae03906a503cc725e37b8fbcf898dd4136e0bbc4690c6f29ba0e36439dd0dc945717299ebbcacbc7ec77878de995b252a9fb41a83570702a570cd740a6c4493bdbef1d30a11730ad55566f0173fbc8f9b0b71faf14424090f43037b8d454bb18a94a4bb2deb6a195c1e4940e6f0408547b92f472b351ecaf3a4cd3ec1555e26bf38e1692de0b34f76fc84cf3171701802feaefc2221ba8fc40583dea9ef3128ba1640945cc292cee31b3b069389922bbb16b2a5d2f64ec0f59c1bdabc42d211d8bf98149cd852a2dc631877d63364d4232c45fb7b3bc3e72ab203213fc3e28760f7508fb12818d016d0b9ef8e56935efdc75027c311d1a5c8ac487acbdd21571"}, @NL80211_ATTR_FTM_RESPONDER={0x174, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xb3, 0x2, "5d00534dd6d674e2570d90eabb4964611675bb38c0fb46adec53181c6a1c807ca78215fcca05d8855d91a5a01561e0b88b75ea4ee06552a04eca3172f43873b1fea97c8096124b2c9312f8976f9ac0ef85123d6515daa2cfeeed52fb28696159e28c3a3f39c911d276ccb3e875042ed204436595e0527442512c9d48ef0779907402b6970fbdfcbed9d2c046d3c2a60ff26256a72fc310656f04d244aee8b25651e36942d73ba0425ccab5fc794e35"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb7, 0x3, "875daffe076d5400fa4891a185ef8d9a5e4a156a7962bb2128a94e3dc7ac04c5580deab02005e6b65a1ab0a10120ecf466dc1219410e3add3c9d6568a70f3a446c08a52314644f4c31b0928bbd026c1b1c46b86e2f7818b8b1fa69b115cb8ae565d724ef4d79d1a538509a648a8ab4b258f23cc2c0c767a90fb9ebb22d11179306a2fa13982b1ba68fe2caa1d611ba7e6860569c23aa5aae1822b48f13cdbd5d382fa723cef02f4cdbf6cf41d7a77185045dde"}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40010) 2.986719575s ago: executing program 2 (id=2655): close_range$auto(0x2, 0x8, 0x0) r0 = socketcall$auto(0x8000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mremap$auto(0x110c230000, 0x0, 0x2000101, 0x3, 0xf000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0x1000, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 2.986331295s ago: executing program 7 (id=2656): mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000000)={0x5, @raw=0xd7, 0x3, 0x1, 0x5}, 0x0, 0xe, 0xfffffff8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop8/ro\x00', 0x800, 0x0) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="0a5cbc3ac5229b90633d", 0xa) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x9, 0x9, 0x20, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x8, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7169, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x3, [0x80e, 0x6, 0x3, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x2000000000, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x80000, 0x0, 0x100000000, 0x7, 0x8000000000000001, 0xc2, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC2\x00', 0x60002, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)={0x30db, 0x6}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x6) eventfd$auto(0x8c) r3 = socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, &(0x7f0000000180), 0x1) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xfffffffffffffff8, &(0x7f00000014c0)="cc07bdd81135128f5a1e2d535158b4bf81c651d49cc2ad12d324546322bafbc1d06779d78bfab992b0d0d2f213b2adb2fc976148e5b50883b595c1a950abc3d54d80691420076cc4f0453efa686329be466e3e3f6f275067e60d855251cea2331043db5fc9bb58c17ce8118d3a13f260d497d8e75ceba0cc22a09c09bae5905cfbe515") r4 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x9, 0xa502}, 0x800}, 0xc, 0x4008) 2.982107464s ago: executing program 6 (id=2657): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket(0x15, 0x5, 0x0) (async) r0 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r0, 0x65, 0x6, 0x0, 0xd) (async) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) (async) capset$auto(&(0x7f0000000180)={0x19980330, 0x0}, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b44, 0x7) (async) socket(0x2, 0x5, 0x0) (async) r3 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0xfffffffffffffeee, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@OVS_DP_ATTR_NAME={0x10, 0x1, '/dev/audio1\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xf}, @OVS_DP_ATTR_NAME={0x10, 0x1, '/dev/audio1\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r1}, @OVS_DP_ATTR_NAME={0x6, 0x1, '@\x00'}, @OVS_DP_ATTR_NAME={0x7, 0x1, '{*\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0xc014) (async) read$auto(r4, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x1e, 0x805, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r7 = socket(0x15, 0x5, 0x0) bind$auto(r7, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmsg$auto(r7, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (async) r8 = socket(0x15, 0x5, 0x0) getsockopt$auto(r8, 0x114, 0x2715, 0xfffffffffffffffc, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) (async) ioctl$auto(0x3, 0x40045532, 0x38) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0c\x00', 0x80, 0x0) 2.331331405s ago: executing program 7 (id=2658): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='r'], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4004000000df, 0x800000000044eb2, r1, 0x300000010000) madvise$auto(0x0, 0x20000a, 0x4) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0x20000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xe2, 0x9b72, 0x2, 0x8000) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_RTC_PARAM_SET(r2, 0x40187014, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000006c92aed7f7a188fc724e0eb87c369aa30b728bf851f127a36170344a2407", @ANYRES16=r3, @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x101080, 0x0) r5 = semctl$auto_GETPID(0x1, 0x1, 0xb, 0x0) r6 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)=@bpf_attr_7={@start_id=0x2, 0x313, 0x2, r1}, 0x7) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@inferred=r5, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x5f32e201}, 0x4, 0x966, 0x1, @raw=0x404, @integer64={0x7, 0x5, 0x80}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="080000000970835a1fd2f7b55d01143f10a454637cff82cc00bfcef27fafc843e35223c5154111", @ANYRESOCT=r8, @ANYBLOB="010026bd7000fddbdf250c0000000800060000000000369b01e31b2969b7b68ea1dbb74f202fa66447fdcfbbfe25a08c8c918fac0beb27eeb3d6185b2b77c8ccafd2998c4397608fa43db4cde5fee4198d67cd552ec669488f33f3c395bc6e800e2cac0e58fc85cf6a2748e551466745288255d29e8c284e050f86a868c0d53a1cda7c388f48d00bd2b7a1350175c16d1089dbe1b12a0adbdb6bf27ba3ba7868e3b99424841b7fda6a6e4aa1bbb5edb2b167845ec0e6fd17430f469512380992"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x6000000) r9 = setfsuid$auto(0xee00) r10 = setfsuid$auto(0xee01) setresuid$auto(r9, r10, r9) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000009b80)=ANY=[@ANYBLOB="00000002f0c2300c78901d1d094dbac28627c4c0b63c88088cd75f130191d0d92c4fe529", @ANYRES16, @ANYBLOB="000226bd7000fbdbdf25010000001c01018010013e800400f38008003f00", @ANYRES32=r6, @ANYBLOB="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"/1244, @ANYRES32=r7, @ANYRES64=r6, @ANYRES32=0x0, @ANYRES16=r9, @ANYRES16=r4, @ANYBLOB="7fd9b4fab34c63a6b23b7ed0bda2765aa6d520d4d659878718e7eb5a40474012567b31eb5ce7dcca42f6ae4204aeff4e405d855f3fd7c06bc697c55ea2d7152b344807c86bd406b518b8f7f93b445b5a20e7db27c6294220ec7a4d9d2ec050ba25d1c8763e1b922c934fe0cc50f8bcf7ac30cef29437f105f43c05a08db526a6b2c5839406d508e9cb4c753c158e761bc737bb257a95102f7f492584e5d4f1583f9fa91a3928e3c59d510408008800", @ANYRES32, @ANYBLOB="000400af80726541f44b3ab231b04490df8722acf2995f762d04653e8deb6961a733b7efca61cf458b5a1cc79722a0e65abc2b7a8c4cc71093480123c660a7d55a5b733f8eff3e54d7dd0ca458528eb5332c7911a7c7e13fb650fa8ddc7ebd8c3539f10392301549f5d6795c9828063ea4b810496ed65d7414f1fce7f947d3d66d640193e18d503b5fb68a80582639005c6a3d54eda362acf63b87f2b43141f5890dfc3aa5a3daacf7bcfac7ffed45ecdf1145d1558570207f08bea497121c62a6934331b2aa2739ea09ae95025668110c004000cf2a0000000000000008002500", @ANYRES32=r10, @ANYBLOB], 0x2748}, 0x1, 0x0, 0x0, 0x8001}, 0x4001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x80044944, 0x0) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000000)={0xffffffffffffffd7, 0x82, 0x8000, 0x1000, 0x0, 0xff, 0x5, 0x3, 0x9, 0x8, 0x4, 0x3, 0x1, 0x7, 0xffff}) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r6) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) 2.139938311s ago: executing program 6 (id=2659): quotactl$auto(0x9, 0x0, 0x62a0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000c, 0x800000000de, 0xe31, 0x40000000000a5, 0x8000) inotify_init1$auto(0x7fff) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000080)="351547") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) r4 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000001240)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/ipsec\x00', 0x400, 0x0) read$auto_ipsec_dbg_fops_ipsec(r4, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0xa94e, 0x66, 0x0, 0x0, 0x0, 0x1000000006, 0xfffffffffffffffe, 0x7ffffffffffffffd, 0x5, 0x7fffffff, 0x6, 0x7, 0x7, 0x61, 0x40000103}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="1cbc94caebf317ba76af2277ef2e0d9c79a924cef859459cc3c88475f32c75fd88bda9d43cb3c65464f61364e4e9f73acb8aa8c41e6f09a09ea7147a6124162255bb2b08b2d9358c709d3fa47ff630c4636c533c7c2ffdf50e6788ce9750197d5c0215bca0844bda8baee90a3cfe4a132d39e682f97bf54163bfeb462e2512dac3100c07208b6ad4069057b0770c617a5f0ce70a"], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) r6 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x103282, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r6, 0x4143, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) lseek$auto(r0, 0x7, 0x401) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) prctl$auto(0x4000002a, 0x3, 0x0, 0x1, 0x0) 1.819806482s ago: executing program 2 (id=2660): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x826c0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0xfffffff8, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x24000000) write$auto(r3, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r4 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x2, &(0x7f00000001c0)={@siginfo_0_0={0x6, 0x4, 0xffffa6aa, @_timer={r4, 0x4, @sival_int=0x4}}}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x5, 0x2a340, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0x8cfb7, 0x9, 0x6]}, 0x0) wait4$auto(r4, 0x0, 0x80000001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x4b564d03, 0x11, 0x1}]}) 1.436095008s ago: executing program 7 (id=2661): r0 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x12000, 0x0) read$auto_dma_buf_debug_fops_(r0, &(0x7f00000002c0)=""/130, 0x82) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) adjtimex$auto(&(0x7f0000000000)={0x16, 0x0, 0x7, 0x4, 0x1000007fffffff, 0x4, 0x100, 0x0, 0x5, 0xffffffffffff8000, 0x4, {0x3, 0xa}, 0xe5, 0x9, 0x9, 0x4, 0x0, 0x6, 0x6, 0x81, 0x5, 0xffffffffffff8472, 0x1000}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r2, 0x110, 0x5, 0x0, 0x4) ioctl$auto(0x3, 0xae60, 0x10000000000402) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice$auto(r3, &(0x7f0000000480)={0x0, 0x807ff}, 0x8000000000000001, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="010025bd7000f7dbdf250100003f"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket(0x10, 0x2, 0x0) bind$auto(r4, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) sendmsg$auto_NET_DM_CMD_CONFIG_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8fc1084c172ccee74846332bdcfa1facb1143de77a855b2a7d712469d1b524de59c0e346640754d5b090dcbc641ea50f93837c15494b1bf7a1dd9b5daf265bf", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250600000004001400050001000400000004000000040015000400140008000b0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8880) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'veth1_virt_wifi\x00'}) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)) 1.116059148s ago: executing program 6 (id=2662): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x10, 0x2, 0xc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_EHT_CAPABILITY={0xbf, 0x136, "e7206f1d9a82ef01040d34787c603a0421aa212e08f5329ad1ecf99bfcb47e40854d6bd661fabc772ee18f3741515fbb0204744b82da38f722ad8a62e4f1f5b1438e0b0f474645bf13b1ac2e5d7cf7816f110af459ebbb6137a93e5f3bf9c0c3a4f21bce14755c68fe2d8ff0838b7a7950526f83d2bedb315dce65cbe87f4ea4179266f015e77e82eb6b0a4cc22455f73083e1a861a012c84810c2f7221d81ce79d33c98072768ec878043755b2b42f6ddfa37a9fda7e779ba9311"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff800}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "0526742c6b8cfdb461e0f78f6fafad9f6735a0947eeca4d39ad4"}]}, 0x104}, 0x1, 0x0, 0x0, 0x4058000}, 0x40000d4) (async, rerun: 64) ioctl$auto(0x3, 0xae41, r1) (async, rerun: 64) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xf6, 0x0, [{0x1fc, 0xfffffdff, 0x8000000100000005}]}) 640.053269ms ago: executing program 2 (id=2663): mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) lsm_get_self_attr$auto(0x2, &(0x7f0000000000)={0x10000000e, 0x4, 0xfffffffffffffffe, 0xa, "b4f27300000000008667"}, &(0x7f0000000080)=0x2c1c9c84, 0x1ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x8, 0x2, 0x40000000de, 0x100000eb1, 0x401, 0x7fff) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x3, 0x7, 0xe29d, 0x11, r0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x6, 0xfffffffffffffffe, 0x5, 0xfffffffffffff9fe) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0x4}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x407, 0x4008) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x2201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x216641, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000840)={0x6, 0x1, 0x9, 0x100000a, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x5b, 0x4005, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6e, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40085, 0x1, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x4, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000004]}, 0x1fe, 0x200c) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048011) 635.607308ms ago: executing program 1 (id=2664): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x1f, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyb9/power/runtime_status\x00', 0x40000, 0x0) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) r1 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/stats\x00', 0x2000, 0x0) read$auto_tracing_stats_fops_trace(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x1a3b02, 0x0) write$auto(r2, &(0x7f00000000c0)=',.\\\x00', 0xd) r3 = socket(0x2, 0x1, 0x106) setsockopt$auto(r3, 0x1, 0xd, 0x0, 0x0) socket(0x23, 0x80805, 0x0) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000040)={r3, 0x0, 0x2, 0x0, 0x1, 0x651, [0x8, 0x2, 0x0, 0x800, 0x9, 0x8]}) r5 = clone$auto(0xd97768f, 0x6, &(0x7f0000000100)=0xfffffffd, &(0x7f0000000140)=0x101, 0x4) ioctl$auto_XFS_IOC_ALLOCSP64(r4, 0x40305824, &(0x7f0000000180)={0x8, 0x8, 0x8, 0x5, 0x10, r5}) poll$auto(&(0x7f0000000000)={r2, 0x4, 0x8}, 0x5, 0x400) setsockopt$auto(r6, 0x7, 0x2234, 0x0, 0x1) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) r7 = socket(0x1d, 0x800, 0x2) sendto$auto(r7, &(0x7f0000000000)="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", 0x9, 0x5, &(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x2) connect$auto(0x3, 0x0, 0x55) r8 = socket(0x10, 0x3, 0x6) r9 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) fanotify_mark$auto(r8, 0x0, 0x0, r9, &(0x7f0000000140)='./file0\x00') mmap$auto(0x0, 0x101, 0x4100000000df, 0xeb1, 0x200000401, 0x2008000) socket(0x23, 0x5, 0x0) socketpair$auto(0x8dc, 0xad, 0x8001, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 536.79555ms ago: executing program 6 (id=2665): openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/snd_virmidi.0/uevent\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff003) 402.603µs ago: executing program 7 (id=2666): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) sendfile$auto(r0, r0, &(0x7f0000000180)=0x1, 0x400000000ad6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(r2, &(0x7f0000000100)={0x0, 0x6}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r4}, 0x6f4) read$auto(r3, 0x0, 0x20) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0) write$auto(r5, 0x0, 0x6) ioctl$auto_TIOCGPTPEER(r4, 0x5441, 0x0) unshare$auto(0x40000080) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)="b2", 0x1) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r1, r7, 0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) socket(0x10, 0x80002, 0x0) bind$auto(r2, &(0x7f0000000140)=@l2={0x1f, 0x6, @none, 0xc57, 0x1}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.0/usb9/9-0:1.0/usb9-port7/over_current_count\x00', 0x400000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 0s ago: executing program 6 (id=2667): openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/setgroups\x00', 0x101000, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x80000, 0x0) ioctl$auto_SG_SET_COMMAND_Q2(r0, 0x2271, &(0x7f00000002c0)="ebec805b79d129fb085df521dc94fb85c76d35d68fbc732a3f209928932a8b355765d181575625b42101e6f6bdfb77da9d3b1374df67ec74a9a30507686bf5defe5ff2687f6a8e4d619d08c0e835afd7e1be5c54b8be50e452534e86c74a7c047c4aa5a807c814329f773aec8ea4bab2cb52f7347f364bc4369559ff93908f0b0da7c8106b570ff50567d0ba992724e2f3ee90bcafcc54e09a1732ede85e11e26326a75cec2accf0eced30d125b4add26c5648886fa6c18bcbbba521dae77673b87580411900506356fda01a377864acd7e786ab3f821203f12e72cd24cfd4b38ba082d09e4f4f71") r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto(0xc8, 0x401054d5, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) write$auto_dev_fops_plock(0xffffffffffffffff, &(0x7f0000000200)="a466e7ea0dd11ec297df04236175", 0xe) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r2, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0xfdf31875370e1716) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r3, &(0x7f0000000a80)={0x0, 0x2}, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, 0x0) (async, rerun: 32) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) (async, rerun: 32) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) kernel console output (not intermixed with test programs): xcf0 [ 736.737134][T17485] ? __pfx_vfs_read+0x10/0x10 [ 736.737187][T17485] ksys_read+0x12a/0x250 [ 736.737220][T17485] ? __pfx_ksys_read+0x10/0x10 [ 736.737262][T17485] do_syscall_64+0xcd/0xf80 [ 736.737286][T17485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.737311][T17485] RIP: 0033:0x7f06ae58f7c9 [ 736.737330][T17485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.737352][T17485] RSP: 002b:00007f06ac7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 736.737374][T17485] RAX: ffffffffffffffda RBX: 00007f06ae7e5fa0 RCX: 00007f06ae58f7c9 [ 736.737390][T17485] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 736.737404][T17485] RBP: 00007f06ae613f91 R08: 0000000000000000 R09: 0000000000000000 [ 736.737419][T17485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.737433][T17485] R13: 00007f06ae7e6038 R14: 00007f06ae7e5fa0 R15: 00007fff73d69668 [ 736.737465][T17485] [ 738.296344][T17528] FAULT_INJECTION: forcing a failure. [ 738.296344][T17528] name failslab, interval 1, probability 0, space 0, times 0 [ 738.389686][T17528] CPU: 1 UID: 0 PID: 17528 Comm: syz.1.2292 Tainted: G U L syzkaller #0 PREEMPT(full) [ 738.389741][T17528] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 738.389754][T17528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 738.389774][T17528] Call Trace: [ 738.389786][T17528] [ 738.389799][T17528] dump_stack_lvl+0x16c/0x1f0 [ 738.389860][T17528] should_fail_ex+0x512/0x640 [ 738.389898][T17528] ? __kmalloc_cache_noprof+0x5f/0x800 [ 738.389944][T17528] should_failslab+0xc2/0x120 [ 738.389996][T17528] __kmalloc_cache_noprof+0x80/0x800 [ 738.390035][T17528] ? kstrdup+0xb5/0x100 [ 738.390074][T17528] ? fscontext_alloc_log+0x4a/0x1b0 [ 738.390116][T17528] ? v9fs_init_fs_context+0x43d/0x590 [ 738.390172][T17528] ? fscontext_alloc_log+0x4a/0x1b0 [ 738.390213][T17528] fscontext_alloc_log+0x4a/0x1b0 [ 738.390255][T17528] __x64_sys_fsopen+0x157/0x240 [ 738.390298][T17528] do_syscall_64+0xcd/0xf80 [ 738.390334][T17528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.390369][T17528] RIP: 0033:0x7fe11858f7c9 [ 738.390395][T17528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.390428][T17528] RSP: 002b:00007fe119368038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 738.390460][T17528] RAX: ffffffffffffffda RBX: 00007fe1187e5fa0 RCX: 00007fe11858f7c9 [ 738.390483][T17528] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 738.390504][T17528] RBP: 00007fe118613f91 R08: 0000000000000000 R09: 0000000000000000 [ 738.390525][T17528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.390544][T17528] R13: 00007fe1187e6038 R14: 00007fe1187e5fa0 R15: 00007ffc0ca9b478 [ 738.390588][T17528] [ 738.968720][T17542] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 739.305078][T17541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 739.352688][T17541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 739.376813][T17541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 739.408807][T17541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 739.472809][T17553] block2mtd: device name too long [ 739.863398][T17555] usbip-vudc usbip-vudc.0: gadget not bound [ 741.338203][ T8780] Bluetooth: hci2: command 0x0c1a tx timeout [ 741.411216][ T8780] Bluetooth: hci4: command 0x0419 tx timeout [ 741.413496][ T8784] Bluetooth: hci0: command 0x0c1a tx timeout [ 741.418420][ T8780] Bluetooth: hci3: command 0x0c1a tx timeout [ 742.906018][ T6639] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1354 with max blocks 45 with error 117 [ 742.932694][ T6639] EXT4-fs (sda1): This should not happen!! Data will be lost [ 742.932694][ T6639] [ 743.634932][ T8780] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 743.643643][ T8780] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 743.768917][T17656] can: request_module (can-proto-0) failed. [ 744.451030][T17672] FAULT_INJECTION: forcing a failure. [ 744.451030][T17672] name failslab, interval 1, probability 0, space 0, times 0 [ 744.544861][T17672] CPU: 0 UID: 0 PID: 17672 Comm: syz.1.2308 Tainted: G U L syzkaller #0 PREEMPT(full) [ 744.544930][T17672] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 744.544943][T17672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 744.544963][T17672] Call Trace: [ 744.544974][T17672] [ 744.544988][T17672] dump_stack_lvl+0x16c/0x1f0 [ 744.545046][T17672] should_fail_ex+0x512/0x640 [ 744.545086][T17672] ? __kmalloc_cache_noprof+0x5f/0x800 [ 744.545131][T17672] should_failslab+0xc2/0x120 [ 744.545184][T17672] __kmalloc_cache_noprof+0x80/0x800 [ 744.545224][T17672] ? vb2_vmalloc_alloc+0xf9/0x410 [ 744.545275][T17672] ? vb2_vmalloc_alloc+0xf9/0x410 [ 744.545316][T17672] vb2_vmalloc_alloc+0xf9/0x410 [ 744.545359][T17672] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 744.545401][T17672] __vb2_queue_alloc+0x8c9/0x1280 [ 744.545462][T17672] vb2_core_reqbufs+0xa90/0xfe0 [ 744.545512][T17672] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 744.545576][T17672] __vb2_init_fileio+0x3f1/0x1100 [ 744.545618][T17672] ? vb2_fop_read+0xe6/0x3e0 [ 744.545661][T17672] __vb2_perform_fileio+0x9c2/0x1660 [ 744.545714][T17672] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 744.545771][T17672] vb2_fop_read+0x215/0x3e0 [ 744.545816][T17672] v4l2_read+0x229/0x360 [ 744.545864][T17672] ? __pfx_v4l2_read+0x10/0x10 [ 744.545925][T17672] vfs_read+0x1e4/0xcf0 [ 744.545983][T17672] ? __pfx_vfs_read+0x10/0x10 [ 744.546028][T17672] ? find_held_lock+0x2b/0x80 [ 744.546073][T17672] ? __fget_files+0x204/0x3c0 [ 744.546128][T17672] ? __fget_files+0x20e/0x3c0 [ 744.546187][T17672] ksys_read+0x12a/0x250 [ 744.546235][T17672] ? __pfx_ksys_read+0x10/0x10 [ 744.546296][T17672] do_syscall_64+0xcd/0xf80 [ 744.546330][T17672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.546364][T17672] RIP: 0033:0x7fe11858f7c9 [ 744.546392][T17672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.546438][T17672] RSP: 002b:00007fe119368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 744.546469][T17672] RAX: ffffffffffffffda RBX: 00007fe1187e5fa0 RCX: 00007fe11858f7c9 [ 744.546510][T17672] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000008 [ 744.546531][T17672] RBP: 00007fe118613f91 R08: 0000000000000000 R09: 0000000000000000 [ 744.546550][T17672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.546570][T17672] R13: 00007fe1187e6038 R14: 00007fe1187e5fa0 R15: 00007ffc0ca9b478 [ 744.546614][T17672] [ 745.727587][T17694] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2310'. [ 745.906653][T17690] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2310'. [ 745.972460][T17690] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2310'. [ 747.971633][T17740] FAULT_INJECTION: forcing a failure. [ 747.971633][T17740] name failslab, interval 1, probability 0, space 0, times 0 [ 748.036683][T17740] CPU: 0 UID: 0 PID: 17740 Comm: syz.0.2317 Tainted: G U L syzkaller #0 PREEMPT(full) [ 748.036736][T17740] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 748.036748][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.036767][T17740] Call Trace: [ 748.036779][T17740] [ 748.036790][T17740] dump_stack_lvl+0x16c/0x1f0 [ 748.036856][T17740] should_fail_ex+0x512/0x640 [ 748.036914][T17740] ? __kmalloc_noprof+0xca/0x910 [ 748.036954][T17740] should_failslab+0xc2/0x120 [ 748.037005][T17740] __kmalloc_noprof+0xeb/0x910 [ 748.037042][T17740] ? __register_sysctl_table+0xb3/0x1900 [ 748.037095][T17740] ? __register_sysctl_table+0xb3/0x1900 [ 748.037140][T17740] __register_sysctl_table+0xb3/0x1900 [ 748.037184][T17740] ? is_module_address+0x5f/0xf0 [ 748.037228][T17740] ? __pfx___register_sysctl_table+0x10/0x10 [ 748.037272][T17740] ? is_module_address+0x69/0xf0 [ 748.037308][T17740] ? register_net_sysctl_sz+0x222/0x450 [ 748.037348][T17740] ? __asan_memcpy+0x3c/0x60 [ 748.037392][T17740] sctp_sysctl_net_register+0x15d/0x200 [ 748.037448][T17740] ? __pfx_sctp_defaults_init+0x10/0x10 [ 748.037499][T17740] sctp_defaults_init+0x6d2/0xd90 [ 748.037553][T17740] ? __pfx_sctp_defaults_init+0x10/0x10 [ 748.037606][T17740] ops_init+0x1e2/0x5f0 [ 748.037658][T17740] setup_net+0x11d/0x3a0 [ 748.037708][T17740] ? __pfx_setup_net+0x10/0x10 [ 748.037753][T17740] ? lockdep_init_map_type+0x5c/0x270 [ 748.037787][T17740] ? mutex_init_lockep+0x110/0x150 [ 748.037833][T17740] copy_net_ns+0x351/0x7c0 [ 748.037866][T17740] create_new_namespaces+0x3ea/0xab0 [ 748.037920][T17740] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 748.037970][T17740] ksys_unshare+0x45b/0xa40 [ 748.038000][T17740] ? __pfx_ksys_unshare+0x10/0x10 [ 748.038045][T17740] __x64_sys_unshare+0x31/0x40 [ 748.038086][T17740] do_syscall_64+0xcd/0xf80 [ 748.038117][T17740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.038159][T17740] RIP: 0033:0x7f4fdc18f7c9 [ 748.038184][T17740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.038214][T17740] RSP: 002b:00007f4fdcfe1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 748.038264][T17740] RAX: ffffffffffffffda RBX: 00007f4fdc3e5fa0 RCX: 00007f4fdc18f7c9 [ 748.038294][T17740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 748.038314][T17740] RBP: 00007f4fdc213f91 R08: 0000000000000000 R09: 0000000000000000 [ 748.038334][T17740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.038355][T17740] R13: 00007f4fdc3e6038 R14: 00007f4fdc3e5fa0 R15: 00007ffd14013cd8 [ 748.038397][T17740] [ 748.628588][T17752] FAULT_INJECTION: forcing a failure. [ 748.628588][T17752] name failslab, interval 1, probability 0, space 0, times 0 [ 748.641684][T17752] CPU: 0 UID: 0 PID: 17752 Comm: syz.6.2319 Tainted: G U L syzkaller #0 PREEMPT(full) [ 748.641740][T17752] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 748.641754][T17752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.641774][T17752] Call Trace: [ 748.641787][T17752] [ 748.641799][T17752] dump_stack_lvl+0x16c/0x1f0 [ 748.641867][T17752] should_fail_ex+0x512/0x640 [ 748.641906][T17752] ? kmem_cache_alloc_noprof+0x62/0x770 [ 748.641953][T17752] should_failslab+0xc2/0x120 [ 748.642005][T17752] kmem_cache_alloc_noprof+0x83/0x770 [ 748.642047][T17752] ? __kernfs_new_node+0xd2/0x9b0 [ 748.642095][T17752] ? __kernfs_new_node+0xd2/0x9b0 [ 748.642131][T17752] __kernfs_new_node+0xd2/0x9b0 [ 748.642177][T17752] ? __pfx___kernfs_new_node+0x10/0x10 [ 748.642229][T17752] ? find_held_lock+0x2b/0x80 [ 748.642275][T17752] ? kernfs_root+0xee/0x2a0 [ 748.642323][T17752] kernfs_new_node+0x13c/0x1e0 [ 748.642376][T17752] __kernfs_create_file+0x53/0x350 [ 748.642434][T17752] sysfs_add_file_mode_ns+0x207/0x3c0 [ 748.642483][T17752] internal_create_group+0x597/0xf70 [ 748.642536][T17752] ? __pfx_internal_create_group+0x10/0x10 [ 748.642587][T17752] ? kernfs_create_link+0x1bd/0x240 [ 748.642627][T17752] internal_create_groups+0x9d/0x150 [ 748.642674][T17752] device_add+0x7a5/0x1980 [ 748.642731][T17752] ? __pfx_device_add+0x10/0x10 [ 748.642798][T17752] __add_disk+0x457/0xf00 [ 748.642857][T17752] ? find_held_lock+0x2b/0x80 [ 748.642905][T17752] add_disk_fwnode+0x3f8/0x5d0 [ 748.642963][T17752] zram_add+0x4bf/0x6f0 [ 748.642996][T17752] ? __pfx_zram_add+0x10/0x10 [ 748.643059][T17752] ? find_held_lock+0x2b/0x80 [ 748.643107][T17752] ? __pfx_hot_add_show+0x10/0x10 [ 748.643139][T17752] ? __pfx_class_attr_show+0x10/0x10 [ 748.643186][T17752] hot_add_show+0x21/0x80 [ 748.643220][T17752] class_attr_show+0x72/0xa0 [ 748.643270][T17752] sysfs_kf_seq_show+0x216/0x3e0 [ 748.643314][T17752] seq_read_iter+0x50e/0x12d0 [ 748.643385][T17752] kernfs_fop_read_iter+0x46c/0x610 [ 748.643437][T17752] ? rw_verify_area+0xcf/0x6c0 [ 748.643483][T17752] vfs_read+0x8bf/0xcf0 [ 748.643538][T17752] ? __pfx_vfs_read+0x10/0x10 [ 748.643611][T17752] ksys_read+0x12a/0x250 [ 748.643659][T17752] ? __pfx_ksys_read+0x10/0x10 [ 748.643720][T17752] do_syscall_64+0xcd/0xf80 [ 748.643756][T17752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.643790][T17752] RIP: 0033:0x7fb97b98f7c9 [ 748.643816][T17752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.643856][T17752] RSP: 002b:00007fb97c85b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 748.643888][T17752] RAX: ffffffffffffffda RBX: 00007fb97bbe5fa0 RCX: 00007fb97b98f7c9 [ 748.643910][T17752] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 748.643932][T17752] RBP: 00007fb97ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 748.643952][T17752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.643972][T17752] R13: 00007fb97bbe6038 R14: 00007fb97bbe5fa0 R15: 00007ffd9658e888 [ 748.644019][T17752] [ 750.012043][ T8780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 750.022216][ T8780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 750.031106][ T8780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 750.039635][ T8780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 750.047479][ T8780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 751.461185][ T6639] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.517608][T17809] FAULT_INJECTION: forcing a failure. [ 751.517608][T17809] name failslab, interval 1, probability 0, space 0, times 0 [ 751.565449][T17809] CPU: 0 UID: 0 PID: 17809 Comm: syz.0.2328 Tainted: G U L syzkaller #0 PREEMPT(full) [ 751.565519][T17809] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 751.565533][T17809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 751.565554][T17809] Call Trace: [ 751.565567][T17809] [ 751.565580][T17809] dump_stack_lvl+0x16c/0x1f0 [ 751.565643][T17809] should_fail_ex+0x512/0x640 [ 751.565683][T17809] ? kmem_cache_alloc_noprof+0x62/0x770 [ 751.565729][T17809] should_failslab+0xc2/0x120 [ 751.565783][T17809] kmem_cache_alloc_noprof+0x83/0x770 [ 751.565825][T17809] ? __kernfs_new_node+0xd2/0x9b0 [ 751.565873][T17809] ? __kernfs_new_node+0xd2/0x9b0 [ 751.565910][T17809] __kernfs_new_node+0xd2/0x9b0 [ 751.565956][T17809] ? __pfx___kernfs_new_node+0x10/0x10 [ 751.566008][T17809] ? find_held_lock+0x2b/0x80 [ 751.566053][T17809] ? kernfs_root+0xee/0x2a0 [ 751.566101][T17809] kernfs_new_node+0x13c/0x1e0 [ 751.566155][T17809] __kernfs_create_file+0x53/0x350 [ 751.566214][T17809] sysfs_add_file_mode_ns+0x207/0x3c0 [ 751.566265][T17809] internal_create_group+0x597/0xf70 [ 751.566319][T17809] ? __pfx_internal_create_group+0x10/0x10 [ 751.566370][T17809] ? kernfs_create_link+0x1bd/0x240 [ 751.566409][T17809] internal_create_groups+0x9d/0x150 [ 751.566456][T17809] device_add+0x757/0x1980 [ 751.566519][T17809] ? __pfx_device_add+0x10/0x10 [ 751.566587][T17809] __add_disk+0x457/0xf00 [ 751.566639][T17809] ? find_held_lock+0x2b/0x80 [ 751.566686][T17809] add_disk_fwnode+0x3f8/0x5d0 [ 751.566744][T17809] zram_add+0x4bf/0x6f0 [ 751.566776][T17809] ? __pfx_zram_add+0x10/0x10 [ 751.566840][T17809] ? find_held_lock+0x2b/0x80 [ 751.566892][T17809] ? __pfx_hot_add_show+0x10/0x10 [ 751.566924][T17809] ? __pfx_class_attr_show+0x10/0x10 [ 751.566972][T17809] hot_add_show+0x21/0x80 [ 751.567006][T17809] class_attr_show+0x72/0xa0 [ 751.567056][T17809] sysfs_kf_seq_show+0x216/0x3e0 [ 751.567101][T17809] seq_read_iter+0x50e/0x12d0 [ 751.567167][T17809] kernfs_fop_read_iter+0x46c/0x610 [ 751.567220][T17809] ? rw_verify_area+0xcf/0x6c0 [ 751.567268][T17809] vfs_read+0x8bf/0xcf0 [ 751.567326][T17809] ? __pfx_vfs_read+0x10/0x10 [ 751.567403][T17809] ksys_read+0x12a/0x250 [ 751.567452][T17809] ? __pfx_ksys_read+0x10/0x10 [ 751.567520][T17809] do_syscall_64+0xcd/0xf80 [ 751.567556][T17809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.567589][T17809] RIP: 0033:0x7f4fdc18f7c9 [ 751.567618][T17809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.567653][T17809] RSP: 002b:00007f4fdcfe1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 751.567686][T17809] RAX: ffffffffffffffda RBX: 00007f4fdc3e5fa0 RCX: 00007f4fdc18f7c9 [ 751.567709][T17809] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 751.567730][T17809] RBP: 00007f4fdc213f91 R08: 0000000000000000 R09: 0000000000000000 [ 751.567750][T17809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.567771][T17809] R13: 00007f4fdc3e6038 R14: 00007f4fdc3e5fa0 R15: 00007ffd14013cd8 [ 751.567819][T17809] [ 751.895675][T17800] FAULT_INJECTION: forcing a failure. [ 751.895675][T17800] name failslab, interval 1, probability 0, space 0, times 0 [ 751.946499][T17800] CPU: 0 UID: 0 PID: 17800 Comm: syz.6.2327 Tainted: G U L syzkaller #0 PREEMPT(full) [ 751.946559][T17800] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 751.946572][T17800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 751.946592][T17800] Call Trace: [ 751.946603][T17800] [ 751.946615][T17800] dump_stack_lvl+0x16c/0x1f0 [ 751.946674][T17800] should_fail_ex+0x512/0x640 [ 751.946711][T17800] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 751.946765][T17800] should_failslab+0xc2/0x120 [ 751.946818][T17800] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 751.946868][T17800] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 751.946921][T17800] ? ip6_route_net_init+0x301/0x8b0 [ 751.946966][T17800] ? fib6_update_sernum+0x161/0x180 [ 751.947006][T17800] ? kmemdup_noprof+0x29/0x60 [ 751.947044][T17800] kmemdup_noprof+0x29/0x60 [ 751.947085][T17800] ip6_route_net_init+0x301/0x8b0 [ 751.947137][T17800] ? __pfx_ip6_route_net_init+0x10/0x10 [ 751.947184][T17800] ops_init+0x1e2/0x5f0 [ 751.947234][T17800] setup_net+0x11d/0x3a0 [ 751.947283][T17800] ? __pfx_setup_net+0x10/0x10 [ 751.947330][T17800] ? lockdep_init_map_type+0x5c/0x270 [ 751.947365][T17800] ? mutex_init_lockep+0x110/0x150 [ 751.947406][T17800] copy_net_ns+0x351/0x7c0 [ 751.947441][T17800] create_new_namespaces+0x3ea/0xab0 [ 751.947498][T17800] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 751.947558][T17800] ksys_unshare+0x45b/0xa40 [ 751.947590][T17800] ? __pfx_ksys_unshare+0x10/0x10 [ 751.947622][T17800] ? xfd_validate_state+0x61/0x180 [ 751.947666][T17800] __x64_sys_unshare+0x31/0x40 [ 751.947696][T17800] do_syscall_64+0xcd/0xf80 [ 751.947730][T17800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.947764][T17800] RIP: 0033:0x7fb97b98f7c9 [ 751.947792][T17800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.947826][T17800] RSP: 002b:00007fb97c85b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 751.947858][T17800] RAX: ffffffffffffffda RBX: 00007fb97bbe5fa0 RCX: 00007fb97b98f7c9 [ 751.947880][T17800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 751.947901][T17800] RBP: 00007fb97ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 751.947922][T17800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.947943][T17800] R13: 00007fb97bbe6038 R14: 00007fb97bbe5fa0 R15: 00007ffd9658e888 [ 751.947988][T17800] [ 752.196706][ T8780] Bluetooth: hci1: command tx timeout [ 752.397927][ T6639] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.464070][T17775] chnl_net:caif_netlink_parms(): no params data found [ 752.580299][ T6639] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.838838][ T6639] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.307973][T17775] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.334927][T17775] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.353367][T17775] bridge_slave_0: entered allmulticast mode [ 753.370981][T17775] bridge_slave_0: entered promiscuous mode [ 753.443538][T17775] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.458005][T17775] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.468414][T17775] bridge_slave_1: entered allmulticast mode [ 753.476453][T17775] bridge_slave_1: entered promiscuous mode [ 753.699102][T17775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.721593][T17775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.139565][T17846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 754.234953][ T8780] Bluetooth: hci1: command tx timeout [ 754.470011][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.476499][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.747988][ T6639] HSR: left promiscuous mode [ 754.842098][T17775] team0: Port device team_slave_0 added [ 754.850155][T17775] team0: Port device team_slave_1 added [ 755.093669][T17775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.107532][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.174261][T17775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.210526][T17775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.231766][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.294447][T17775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.662543][T17775] hsr_slave_0: entered promiscuous mode [ 755.689741][T17775] hsr_slave_1: entered promiscuous mode [ 755.696234][T17775] debugfs: 'hsr0' already exists in 'hsr' [ 755.722992][T17775] Cannot create hsr debugfs directory [ 755.734141][T17866] zswap: compressor not available [ 755.739918][T17867] zswap: compressor not available [ 756.295143][ T8780] Bluetooth: hci1: command tx timeout [ 756.948968][ T6639] hsr_slave_0: left promiscuous mode [ 756.990310][ T6639] hsr_slave_1: left promiscuous mode [ 757.001323][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.019364][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.070774][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.078229][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.151770][ T6639] veth0_macvtap: left promiscuous mode [ 757.408581][ T6639] pim6reg (unregistering): left allmulticast mode [ 758.040995][ T6639] team0 (unregistering): Port device team_slave_1 removed [ 758.144759][ T6639] team0 (unregistering): Port device team_slave_0 removed [ 758.369177][ T8780] Bluetooth: hci1: command tx timeout [ 759.601485][T17775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 759.655359][T17775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 759.680409][T17775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 759.716515][T17775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 759.992434][T17775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.070183][T17775] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.124267][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.131507][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.182798][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.190087][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.875407][T17775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.038045][T17775] veth0_vlan: entered promiscuous mode [ 761.066529][T17775] veth1_vlan: entered promiscuous mode [ 761.145007][T17775] veth0_macvtap: entered promiscuous mode [ 761.176941][T17775] veth1_macvtap: entered promiscuous mode [ 761.222568][T17775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.265152][T17775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.297139][ T6645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.317220][ T6645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.338705][ T6645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.357144][ T6645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.568441][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.597155][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.682690][ T3754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.717204][ T3754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.608913][T17919] Process accounting paused [ 764.925873][T17964] usb usb3: usbfs: interface 0 claimed by hub while 'syz.6.2345' sets config #0 [ 765.077356][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 765.948086][T17988] nbd: socks must be embedded in a SOCK_ITEM attr [ 765.978191][T17988] block nbd0: shutting down sockets [ 766.004883][T17992] block loop4: the capability attribute has been deprecated. [ 766.098021][T17988] FAULT_INJECTION: forcing a failure. [ 766.098021][T17988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.160068][T17988] CPU: 1 UID: 0 PID: 17988 Comm: syz.2.2349 Tainted: G U L syzkaller #0 PREEMPT(full) [ 766.160123][T17988] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 766.160137][T17988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.160158][T17988] Call Trace: [ 766.160169][T17988] [ 766.160183][T17988] dump_stack_lvl+0x16c/0x1f0 [ 766.160243][T17988] should_fail_ex+0x512/0x640 [ 766.160298][T17988] _copy_from_user+0x2e/0xd0 [ 766.160338][T17988] post_copy_siginfo_from_user.isra.0+0x16e/0x300 [ 766.160376][T17988] ? __pfx_post_copy_siginfo_from_user.isra.0+0x10/0x10 [ 766.160413][T17988] ? find_held_lock+0x2b/0x80 [ 766.160474][T17988] __x64_sys_rt_tgsigqueueinfo+0x151/0x210 [ 766.160510][T17988] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 766.160565][T17988] do_syscall_64+0xcd/0xf80 [ 766.160598][T17988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.160629][T17988] RIP: 0033:0x7f079d98f7c9 [ 766.160654][T17988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.160686][T17988] RSP: 002b:00007f079e7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 766.160717][T17988] RAX: ffffffffffffffda RBX: 00007f079dbe5fa0 RCX: 00007f079d98f7c9 [ 766.160737][T17988] RDX: 0000000000000021 RSI: 0000000000000011 RDI: 0000000000000010 [ 766.160757][T17988] RBP: 00007f079da13f91 R08: 0000000000000000 R09: 0000000000000000 [ 766.160777][T17988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.160797][T17988] R13: 00007f079dbe6038 R14: 00007f079dbe5fa0 R15: 00007ffcdc0af1e8 [ 766.160839][T17988] [ 767.319968][T18019] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input34 [ 768.620485][T18051] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 768.934605][ T8785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 768.946417][ T8785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 768.954620][ T8785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 768.974552][ T8785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 768.982626][ T8785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 769.426454][T18069] nbd: socks must be embedded in a SOCK_ITEM attr [ 769.441877][T18069] block nbd0: shutting down sockets [ 769.575162][T18069] FAULT_INJECTION: forcing a failure. [ 769.575162][T18069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.609086][T18069] CPU: 0 UID: 0 PID: 18069 Comm: syz.6.2360 Tainted: G U L syzkaller #0 PREEMPT(full) [ 769.609143][T18069] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 769.609157][T18069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 769.609177][T18069] Call Trace: [ 769.609188][T18069] [ 769.609201][T18069] dump_stack_lvl+0x16c/0x1f0 [ 769.609259][T18069] should_fail_ex+0x512/0x640 [ 769.609304][T18069] _copy_from_user+0x2e/0xd0 [ 769.609342][T18069] post_copy_siginfo_from_user.isra.0+0x16e/0x300 [ 769.609379][T18069] ? __pfx_post_copy_siginfo_from_user.isra.0+0x10/0x10 [ 769.609414][T18069] ? find_held_lock+0x2b/0x80 [ 769.609474][T18069] __x64_sys_rt_tgsigqueueinfo+0x151/0x210 [ 769.609509][T18069] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 769.609560][T18069] do_syscall_64+0xcd/0xf80 [ 769.609596][T18069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.609629][T18069] RIP: 0033:0x7fb97b98f7c9 [ 769.609655][T18069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.609689][T18069] RSP: 002b:00007fb97c85b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 769.609731][T18069] RAX: ffffffffffffffda RBX: 00007fb97bbe5fa0 RCX: 00007fb97b98f7c9 [ 769.609753][T18069] RDX: 0000000000000021 RSI: 00000000000001a2 RDI: 00000000000001a1 [ 769.609773][T18069] RBP: 00007fb97ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 769.609793][T18069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.609812][T18069] R13: 00007fb97bbe6038 R14: 00007fb97bbe5fa0 R15: 00007ffd9658e888 [ 769.609853][T18069] [ 770.646497][T18057] chnl_net:caif_netlink_parms(): no params data found [ 771.018135][ T8785] Bluetooth: hci2: command tx timeout [ 771.090615][T18057] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.126484][T18057] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.156584][T18057] bridge_slave_0: entered allmulticast mode [ 771.168180][T18057] bridge_slave_0: entered promiscuous mode [ 771.198949][T18057] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.245841][T18057] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.253300][T18057] bridge_slave_1: entered allmulticast mode [ 771.293112][T18057] bridge_slave_1: entered promiscuous mode [ 771.429186][T18057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.487771][T18057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.673674][T18057] team0: Port device team_slave_0 added [ 771.753382][T18057] team0: Port device team_slave_1 added [ 771.995859][T18057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.022524][T18057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.111595][T18057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.218238][T18057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.228083][T18057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.257304][T18124] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 772.376792][T18057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.562828][T18057] hsr_slave_0: entered promiscuous mode [ 772.582552][T18057] hsr_slave_1: entered promiscuous mode [ 773.092794][ T8785] Bluetooth: hci2: command tx timeout [ 774.131961][T18057] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 774.215672][T18057] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 774.272405][T18057] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 774.335600][T18057] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 775.043397][T18057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.055614][ T8785] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 775.055657][ T8785] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 775.072210][ T8785] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 775.072254][ T8785] Bluetooth: hci3: adv larger than maximum supported [ 775.079502][ T8785] Bluetooth: hci3: Malformed LE Event: 0x0d [ 775.094963][ T8785] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 775.095003][ T8785] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 775.110391][ T8785] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 775.110429][ T8785] Bluetooth: hci3: adv larger than maximum supported [ 775.117612][ T8785] Bluetooth: hci3: Malformed LE Event: 0x0d [ 775.162782][ T8785] Bluetooth: hci2: command tx timeout [ 775.351290][T13351] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.406854][T18057] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.526351][T13351] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.609055][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.616346][ T8170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.764429][T13351] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.847991][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.855195][ T8170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.962970][T13351] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.803350][T13351] bridge_slave_1: left allmulticast mode [ 776.826660][T13351] bridge_slave_1: left promiscuous mode [ 776.832575][T13351] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.027816][T13351] bridge_slave_0: left allmulticast mode [ 777.033531][T13351] bridge_slave_0: left promiscuous mode [ 777.056065][T13351] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.234743][ T8785] Bluetooth: hci2: command tx timeout [ 778.079593][T13351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.104782][T13351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.128787][T13351] bond0 (unregistering): Released all slaves [ 778.339457][T18057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.732491][T13351] hsr_slave_0: left promiscuous mode [ 779.749179][T13351] hsr_slave_1: left promiscuous mode [ 779.762426][T13351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.780504][T13351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.812586][T13351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.820071][T13351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.893073][T13351] veth1_macvtap: left promiscuous mode [ 779.908987][T13351] veth0_macvtap: left promiscuous mode [ 779.919167][T13351] veth1_vlan: left promiscuous mode [ 779.929382][T13351] veth0_vlan: left promiscuous mode [ 781.340472][T13351] team0 (unregistering): Port device team_slave_1 removed [ 781.446970][T13351] team0 (unregistering): Port device team_slave_0 removed [ 782.520089][T18057] veth0_vlan: entered promiscuous mode [ 782.546107][T18057] veth1_vlan: entered promiscuous mode [ 782.665496][T18057] veth0_macvtap: entered promiscuous mode [ 782.695270][T18057] veth1_macvtap: entered promiscuous mode [ 782.812555][T18057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.842690][T18234] Process accounting resumed [ 782.861987][T18057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.909612][ T6645] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.957160][ T6645] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.037904][ T6645] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.068066][ T6645] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.091529][ T30] audit: type=1800 audit(4294967338.160:139): pid=18240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2387" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 783.418544][T18247] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2388'. [ 783.737302][ T8170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.779287][ T8170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.450286][ T8170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.450341][ T8170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.173375][T18274] vivid-009: ================= START STATUS ================= [ 785.203396][T18274] vivid-009: Radio HW Seek Mode: Bounded [ 785.209605][T18274] vivid-009: Radio Programmable HW Seek: false [ 785.264846][T18274] vivid-009: RDS Rx I/O Mode: Block I/O [ 785.284988][T18274] vivid-009: Generate RBDS Instead of RDS: false [ 785.332406][T18274] vivid-009: RDS Reception: true [ 785.356250][T18274] vivid-009: RDS Program Type: 0 inactive [ 785.384695][T18274] vivid-009: RDS PS Name: inactive [ 785.431144][T18274] vivid-009: RDS Radio Text: inactive [ 785.439539][T18274] vivid-009: RDS Traffic Announcement: false inactive [ 785.462724][T18274] vivid-009: RDS Traffic Program: false inactive [ 785.469255][T18274] vivid-009: RDS Music: false inactive [ 785.512185][T18274] vivid-009: ================== END STATUS ================== [ 786.681831][T18313] FAULT_INJECTION: forcing a failure. [ 786.681831][T18313] name failslab, interval 1, probability 0, space 0, times 0 [ 786.745513][T18313] CPU: 1 UID: 0 PID: 18313 Comm: syz.7.2396 Tainted: G U L syzkaller #0 PREEMPT(full) [ 786.745568][T18313] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 786.745582][T18313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.745602][T18313] Call Trace: [ 786.745613][T18313] [ 786.745626][T18313] dump_stack_lvl+0x16c/0x1f0 [ 786.745687][T18313] should_fail_ex+0x512/0x640 [ 786.745727][T18313] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 786.745792][T18313] should_failslab+0xc2/0x120 [ 786.745844][T18313] __kmalloc_cache_node_noprof+0x83/0x830 [ 786.745890][T18313] ? __xas_nomem+0x1b4/0x670 [ 786.745940][T18313] ? blkg_alloc+0xb7/0xb60 [ 786.745984][T18313] ? blkg_alloc+0xb7/0xb60 [ 786.746017][T18313] blkg_alloc+0xb7/0xb60 [ 786.746054][T18313] ? find_held_lock+0x2b/0x80 [ 786.746104][T18313] blkcg_init_disk+0x51/0x580 [ 786.746148][T18313] __alloc_disk_node+0x2f6/0x6b0 [ 786.746218][T18313] __blk_alloc_disk+0xd0/0x160 [ 786.746271][T18313] ? __pfx___blk_alloc_disk+0x10/0x10 [ 786.746350][T18313] ? lockdep_init_map_type+0x5c/0x270 [ 786.746383][T18313] ? __raw_spin_lock_init+0x3a/0x110 [ 786.746425][T18313] ? __pfx_hot_add_show+0x10/0x10 [ 786.746458][T18313] zram_add+0x164/0x6f0 [ 786.746491][T18313] ? __pfx_zram_add+0x10/0x10 [ 786.746550][T18313] ? find_held_lock+0x2b/0x80 [ 786.746598][T18313] ? __pfx_hot_add_show+0x10/0x10 [ 786.746629][T18313] ? __pfx_class_attr_show+0x10/0x10 [ 786.746674][T18313] hot_add_show+0x21/0x80 [ 786.746706][T18313] class_attr_show+0x72/0xa0 [ 786.746749][T18313] sysfs_kf_seq_show+0x216/0x3e0 [ 786.746792][T18313] seq_read_iter+0x50e/0x12d0 [ 786.746853][T18313] kernfs_fop_read_iter+0x46c/0x610 [ 786.746906][T18313] ? rw_verify_area+0xcf/0x6c0 [ 786.746952][T18313] vfs_read+0x8bf/0xcf0 [ 786.747006][T18313] ? __pfx_vfs_read+0x10/0x10 [ 786.747098][T18313] ksys_read+0x12a/0x250 [ 786.747146][T18313] ? __pfx_ksys_read+0x10/0x10 [ 786.747217][T18313] do_syscall_64+0xcd/0xf80 [ 786.747254][T18313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.747287][T18313] RIP: 0033:0x7f028118f7c9 [ 786.747315][T18313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.747347][T18313] RSP: 002b:00007f0281fb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 786.747379][T18313] RAX: ffffffffffffffda RBX: 00007f02813e5fa0 RCX: 00007f028118f7c9 [ 786.747401][T18313] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 786.747420][T18313] RBP: 00007f0281213f91 R08: 0000000000000000 R09: 0000000000000000 [ 786.747440][T18313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.747460][T18313] R13: 00007f02813e6038 R14: 00007f02813e5fa0 R15: 00007ffd11a7f658 [ 786.747505][T18313] [ 787.254306][T18313] zram: Error allocating disk structure for device 5 [ 787.730852][T18323] usb usb15: usbfs: interface 0 claimed by hub while 'syz.6.2400' sets config #3 [ 788.135534][T18339] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2399'. [ 788.148970][T18340] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2399'. [ 791.562523][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2411'. [ 791.615582][T18397] FAULT_INJECTION: forcing a failure. [ 791.615582][T18397] name failslab, interval 1, probability 0, space 0, times 0 [ 791.691500][T18397] CPU: 1 UID: 0 PID: 18397 Comm: syz.6.2413 Tainted: G U L syzkaller #0 PREEMPT(full) [ 791.691542][T18397] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 791.691551][T18397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 791.691565][T18397] Call Trace: [ 791.691573][T18397] [ 791.691582][T18397] dump_stack_lvl+0x16c/0x1f0 [ 791.691625][T18397] should_fail_ex+0x512/0x640 [ 791.691653][T18397] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 791.691691][T18397] should_failslab+0xc2/0x120 [ 791.691728][T18397] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 791.691765][T18397] ? drm_open_helper+0x204/0x550 [ 791.691794][T18397] ? kasprintf+0xc7/0x100 [ 791.691820][T18397] ? chrdev_open+0x234/0x6a0 [ 791.691860][T18397] ? kvasprintf+0xbc/0x150 [ 791.691885][T18397] kvasprintf+0xbc/0x150 [ 791.691912][T18397] ? __pfx_kvasprintf+0x10/0x10 [ 791.691953][T18397] kasprintf+0xc7/0x100 [ 791.691980][T18397] ? __pfx_kasprintf+0x10/0x10 [ 791.692018][T18397] ? lockdep_init_map_type+0x5c/0x270 [ 791.692044][T18397] ? drm_file_alloc+0x5b4/0xb40 [ 791.692073][T18397] drm_debugfs_clients_add+0x48/0x200 [ 791.692101][T18397] drm_file_alloc+0x5c6/0xb40 [ 791.692133][T18397] drm_open_helper+0x204/0x550 [ 791.692165][T18397] drm_open+0x1a0/0x3e0 [ 791.692192][T18397] ? __pfx_drm_open+0x10/0x10 [ 791.692219][T18397] drm_stub_open+0x20f/0x380 [ 791.692248][T18397] ? __pfx_drm_stub_open+0x10/0x10 [ 791.692276][T18397] chrdev_open+0x234/0x6a0 [ 791.692311][T18397] ? __pfx_apparmor_file_open+0x10/0x10 [ 791.692337][T18397] ? __pfx_chrdev_open+0x10/0x10 [ 791.692374][T18397] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 791.692417][T18397] do_dentry_open+0x748/0x1590 [ 791.692450][T18397] ? __pfx_chrdev_open+0x10/0x10 [ 791.692494][T18397] vfs_open+0x82/0x3f0 [ 791.692523][T18397] path_openat+0x2078/0x3140 [ 791.692567][T18397] ? __pfx_path_openat+0x10/0x10 [ 791.692612][T18397] do_filp_open+0x20b/0x470 [ 791.692648][T18397] ? __pfx_do_filp_open+0x10/0x10 [ 791.692703][T18397] ? alloc_fd+0x471/0x7d0 [ 791.692746][T18397] do_sys_openat2+0x121/0x290 [ 791.692772][T18397] ? __pfx_do_sys_openat2+0x10/0x10 [ 791.692809][T18397] __x64_sys_openat+0x174/0x210 [ 791.692836][T18397] ? __pfx___x64_sys_openat+0x10/0x10 [ 791.692875][T18397] do_syscall_64+0xcd/0xf80 [ 791.692899][T18397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.692922][T18397] RIP: 0033:0x7fb97b98f7c9 [ 791.692940][T18397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.692963][T18397] RSP: 002b:00007fb97c83a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 791.692984][T18397] RAX: ffffffffffffffda RBX: 00007fb97bbe6090 RCX: 00007fb97b98f7c9 [ 791.693000][T18397] RDX: 0000000000000040 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 791.693022][T18397] RBP: 00007fb97ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 791.693037][T18397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.693051][T18397] R13: 00007fb97bbe6128 R14: 00007fb97bbe6090 R15: 00007ffd9658e888 [ 791.693081][T18397] [ 796.490342][ T8780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 796.502245][ T8780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 796.510919][ T8780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 796.521237][ T8780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 796.530925][ T8780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 796.576429][ T8245] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.610526][T18497] FAULT_INJECTION: forcing a failure. [ 796.610526][T18497] name failslab, interval 1, probability 0, space 0, times 0 [ 796.653506][T18497] CPU: 0 UID: 0 PID: 18497 Comm: syz.2.2428 Tainted: G U L syzkaller #0 PREEMPT(full) [ 796.653569][T18497] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 796.653583][T18497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 796.653602][T18497] Call Trace: [ 796.653613][T18497] [ 796.653625][T18497] dump_stack_lvl+0x16c/0x1f0 [ 796.653684][T18497] should_fail_ex+0x512/0x640 [ 796.653721][T18497] ? __kmalloc_noprof+0xca/0x910 [ 796.653761][T18497] should_failslab+0xc2/0x120 [ 796.653811][T18497] __kmalloc_noprof+0xeb/0x910 [ 796.653845][T18497] ? __register_sysctl_table+0xb3/0x1900 [ 796.653899][T18497] ? __register_sysctl_table+0xb3/0x1900 [ 796.653941][T18497] __register_sysctl_table+0xb3/0x1900 [ 796.653987][T18497] ? is_module_address+0x5f/0xf0 [ 796.654032][T18497] ? __pfx___register_sysctl_table+0x10/0x10 [ 796.654077][T18497] ? is_module_address+0x69/0xf0 [ 796.654114][T18497] ? register_net_sysctl_sz+0x222/0x450 [ 796.654161][T18497] ? __asan_memcpy+0x3c/0x60 [ 796.654216][T18497] devinet_init_net+0x378/0x910 [ 796.654266][T18497] ? __pfx_devinet_init_net+0x10/0x10 [ 796.654310][T18497] ops_init+0x1e2/0x5f0 [ 796.654387][T18497] setup_net+0x11d/0x3a0 [ 796.654438][T18497] ? __pfx_setup_net+0x10/0x10 [ 796.654484][T18497] ? lockdep_init_map_type+0x5c/0x270 [ 796.654526][T18497] ? mutex_init_lockep+0x110/0x150 [ 796.654574][T18497] copy_net_ns+0x351/0x7c0 [ 796.654608][T18497] create_new_namespaces+0x3ea/0xab0 [ 796.654665][T18497] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 796.654715][T18497] ksys_unshare+0x45b/0xa40 [ 796.654746][T18497] ? __pfx_ksys_unshare+0x10/0x10 [ 796.654779][T18497] ? xfd_validate_state+0x61/0x180 [ 796.654823][T18497] __x64_sys_unshare+0x31/0x40 [ 796.654853][T18497] do_syscall_64+0xcd/0xf80 [ 796.654888][T18497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.654922][T18497] RIP: 0033:0x7f079d98f7c9 [ 796.654948][T18497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.654979][T18497] RSP: 002b:00007f079e7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 796.655010][T18497] RAX: ffffffffffffffda RBX: 00007f079dbe5fa0 RCX: 00007f079d98f7c9 [ 796.655032][T18497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 796.655051][T18497] RBP: 00007f079da13f91 R08: 0000000000000000 R09: 0000000000000000 [ 796.655071][T18497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.655090][T18497] R13: 00007f079dbe6038 R14: 00007f079dbe5fa0 R15: 00007ffcdc0af1e8 [ 796.655135][T18497] [ 797.014274][ T8245] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.149674][T18480] Process accounting resumed [ 797.202876][ T8245] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.528282][ T8245] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.573367][T18498] chnl_net:caif_netlink_parms(): no params data found [ 797.670558][T18519] FAULT_INJECTION: forcing a failure. [ 797.670558][T18519] name failslab, interval 1, probability 0, space 0, times 0 [ 797.713598][T18519] CPU: 0 UID: 0 PID: 18519 Comm: syz.7.2432 Tainted: G U L syzkaller #0 PREEMPT(full) [ 797.713653][T18519] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 797.713666][T18519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 797.713684][T18519] Call Trace: [ 797.713695][T18519] [ 797.713706][T18519] dump_stack_lvl+0x16c/0x1f0 [ 797.713757][T18519] should_fail_ex+0x512/0x640 [ 797.713792][T18519] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 797.713836][T18519] should_failslab+0xc2/0x120 [ 797.713877][T18519] __kmalloc_cache_node_noprof+0x83/0x830 [ 797.713915][T18519] ? __xas_nomem+0x1b4/0x670 [ 797.713953][T18519] ? blkg_alloc+0xb7/0xb60 [ 797.713990][T18519] ? blkg_alloc+0xb7/0xb60 [ 797.714018][T18519] blkg_alloc+0xb7/0xb60 [ 797.714048][T18519] ? find_held_lock+0x2b/0x80 [ 797.714093][T18519] blkcg_init_disk+0x51/0x580 [ 797.714128][T18519] __alloc_disk_node+0x2f6/0x6b0 [ 797.714180][T18519] __blk_alloc_disk+0xd0/0x160 [ 797.714225][T18519] ? __pfx___blk_alloc_disk+0x10/0x10 [ 797.714304][T18519] ? lockdep_init_map_type+0x5c/0x270 [ 797.714335][T18519] ? __raw_spin_lock_init+0x3a/0x110 [ 797.714371][T18519] ? __pfx_hot_add_show+0x10/0x10 [ 797.714398][T18519] zram_add+0x164/0x6f0 [ 797.714426][T18519] ? __pfx_zram_add+0x10/0x10 [ 797.714479][T18519] ? find_held_lock+0x2b/0x80 [ 797.714525][T18519] ? __pfx_hot_add_show+0x10/0x10 [ 797.714558][T18519] ? __pfx_class_attr_show+0x10/0x10 [ 797.714608][T18519] hot_add_show+0x21/0x80 [ 797.714640][T18519] class_attr_show+0x72/0xa0 [ 797.714689][T18519] sysfs_kf_seq_show+0x216/0x3e0 [ 797.714731][T18519] seq_read_iter+0x50e/0x12d0 [ 797.714794][T18519] kernfs_fop_read_iter+0x46c/0x610 [ 797.714841][T18519] ? rw_verify_area+0xcf/0x6c0 [ 797.714884][T18519] vfs_read+0x8bf/0xcf0 [ 797.714928][T18519] ? __pfx_vfs_read+0x10/0x10 [ 797.714990][T18519] ksys_read+0x12a/0x250 [ 797.715033][T18519] ? __pfx_ksys_read+0x10/0x10 [ 797.715091][T18519] do_syscall_64+0xcd/0xf80 [ 797.715124][T18519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.715155][T18519] RIP: 0033:0x7f028118f7c9 [ 797.715179][T18519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.715210][T18519] RSP: 002b:00007f0281fb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 797.715240][T18519] RAX: ffffffffffffffda RBX: 00007f02813e5fa0 RCX: 00007f028118f7c9 [ 797.715312][T18519] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 797.715333][T18519] RBP: 00007f0281213f91 R08: 0000000000000000 R09: 0000000000000000 [ 797.715355][T18519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.715375][T18519] R13: 00007f02813e6038 R14: 00007f02813e5fa0 R15: 00007ffd11a7f658 [ 797.715417][T18519] [ 798.014542][T18519] zram: Error allocating disk structure for device 5 [ 798.399195][T18498] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.416156][T18498] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.423607][T18498] bridge_slave_0: entered allmulticast mode [ 798.456211][T18498] bridge_slave_0: entered promiscuous mode [ 798.492500][T18498] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.502141][T18498] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.510187][T18498] bridge_slave_1: entered allmulticast mode [ 798.518540][T18498] bridge_slave_1: entered promiscuous mode [ 798.547572][T18530] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 798.558767][ T8785] Bluetooth: hci3: command tx timeout [ 799.047585][T18498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.077943][T18498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.097376][ T8245] : left promiscuous mode [ 799.187495][ T8245] HSR: left promiscuous mode [ 799.229366][T18498] team0: Port device team_slave_0 added [ 799.331145][T18498] team0: Port device team_slave_1 added [ 799.348709][ T8245] tipc: Left network mode [ 799.443484][T18498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.458031][T18498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.509350][T18498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.540699][T18498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.547700][T18498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.591790][T18498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.887180][T18498] hsr_slave_0: entered promiscuous mode [ 799.894582][T18498] hsr_slave_1: entered promiscuous mode [ 799.946991][T18498] debugfs: 'hsr0' already exists in 'hsr' [ 799.980056][T18498] Cannot create hsr debugfs directory [ 800.416652][T18554] can: request_module (can-proto-0) failed. [ 800.602124][T18562] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2439'. [ 800.651296][ T8785] Bluetooth: hci3: command tx timeout [ 800.702911][T18562] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2439'. [ 801.553485][T18575] [U] mEVYr؟{=LÒ [ 801.558417][T18575] [U] F63&Y [ 801.578402][T18575] [U] R,w.9X2N<,r+P;fs"by%k5oh [ 801.585827][T18575] [U] Z)8b0UXXe h¤:\7sz4޲$q[1؋S۔Oeؗ̏ŸL2(Һy|dqKwTX;lt",!œa uacȐze[d.ӛjijilkP.zD^3ڙ> >*b]|p̎|8sK2F<) [ 801.610062][T18575] [U] _,<%`5t~q3G M!?kK [ 801.615801][T18575] [U] mag1VCja mgݺi{y^6͊I~Wcb[2:cg$ܔ]'g0{}R}1Ѳ9nR [ 801.627359][T18575] [U] [[A&ĸ}QgIgP9,o1,V"3ދtQ=eMP~\Xj*oK2 [ 801.638578][T18575] [U] *wFJځnқ݀x&.5hI܏+a'1 [ 801.646039][T18575] [U] b=_<0elO d3SV~ė:UP"![[$^K o [ 801.654046][T18575] [U] \i89_<'M6^6S}\Mֱtkn8;WD*IO+<>D̯Q :hF4‰+mmcfy Kzݎ上֓fp^/0$ ;dHm<>*eq1y ʃWoh.-WϮZiMb!D~ӂtpN.0|dRG׫Y>¿@v{SAf/lXV [ 801.718886][T18575] [U] KfC'8[ [ 801.770911][ T8245] hsr_slave_0: left promiscuous mode [ 801.831398][T18575] [U] Um K [ 801.834982][T18575] [U] \ [ 801.882080][T18575] [U] \ [ 801.929423][T18575] [U] \ [ 801.998426][T18575] [U] \ [ 802.045546][T18575] [U] \ [ 802.092616][T18575] [U] \ [ 802.139561][T18575] [U] \ [ 802.215521][T18575] [U] \ [ 802.262643][T18575] [U] \ [ 802.309635][T18575] [U] \ [ 802.357255][T18575] [U] \ [ 802.437632][T18575] [U] [ 802.456865][ T8245] hsr_slave_1: left promiscuous mode [ 802.473781][ T8245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.569529][ T8245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.672716][ T8245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.690512][ T8245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.701809][ T8785] Bluetooth: hci3: command tx timeout [ 804.110209][ T8245] team0 (unregistering): Port device team_slave_1 removed [ 804.186899][ T8245] team0 (unregistering): Port device team_slave_0 removed [ 804.763891][ T8785] Bluetooth: hci3: command tx timeout [ 805.267284][T18498] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 805.399450][T18626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2451'. [ 805.529436][T18498] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 805.591654][T18498] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 805.654419][T18498] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 806.348181][T18498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.446565][T18648] zram: Added device: zram5 [ 806.509234][T18498] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.535184][ T6640] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.542466][ T6640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.624844][T18650] zram: Added device: zram6 [ 806.626595][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.638338][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.758945][T18498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.901334][T18682] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2460'. [ 807.940839][T18682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.028272][T18682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.071713][T18682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.081182][T18682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.314686][T18498] veth0_vlan: entered promiscuous mode [ 808.339052][T18498] veth1_vlan: entered promiscuous mode [ 808.453072][T18498] veth0_macvtap: entered promiscuous mode [ 808.506004][T18498] veth1_macvtap: entered promiscuous mode [ 808.603113][T18498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.671498][T18498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.738079][ T8245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.760799][ T8245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.792022][ T8245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.821140][ T8245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.990560][T18703] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2462'. [ 809.129695][T18706] hub 8-0:1.0: USB hub found [ 809.178383][T18706] hub 8-0:1.0: 1 port detected [ 809.527240][ T8245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.571468][ T8245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.688901][ T4534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.730219][ T4534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.868477][T18746] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 811.369192][T18759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2472'. [ 811.892546][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'. [ 813.111879][T18806] FAULT_INJECTION: forcing a failure. [ 813.111879][T18806] name failslab, interval 1, probability 0, space 0, times 0 [ 813.143740][T18806] CPU: 0 UID: 0 PID: 18806 Comm: syz.7.2480 Tainted: G U L syzkaller #0 PREEMPT(full) [ 813.143801][T18806] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 813.143813][T18806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 813.143833][T18806] Call Trace: [ 813.143852][T18806] [ 813.143865][T18806] dump_stack_lvl+0x16c/0x1f0 [ 813.143922][T18806] should_fail_ex+0x512/0x640 [ 813.143959][T18806] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 813.144002][T18806] should_failslab+0xc2/0x120 [ 813.144056][T18806] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 813.144097][T18806] ? __pfx___debug_object_init+0x10/0x10 [ 813.144150][T18806] ? __d_alloc+0x35/0xa80 [ 813.144185][T18806] ? __d_alloc+0x35/0xa80 [ 813.144215][T18806] __d_alloc+0x35/0xa80 [ 813.144248][T18806] d_alloc_pseudo+0x1c/0xc0 [ 813.144287][T18806] alloc_file_pseudo+0xcf/0x230 [ 813.144326][T18806] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 813.144368][T18806] ? alloc_fd+0x471/0x7d0 [ 813.144416][T18806] sock_alloc_file+0x50/0x210 [ 813.144462][T18806] __sys_socket+0x1c0/0x260 [ 813.144494][T18806] ? __pfx___sys_socket+0x10/0x10 [ 813.144527][T18806] ? xfd_validate_state+0x61/0x180 [ 813.144555][T18806] ? __pfx_ksys_write+0x10/0x10 [ 813.144607][T18806] __x64_sys_socket+0x72/0xb0 [ 813.144638][T18806] ? lockdep_hardirqs_on+0x7c/0x110 [ 813.144667][T18806] do_syscall_64+0xcd/0xf80 [ 813.144699][T18806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.144730][T18806] RIP: 0033:0x7f028118f7c9 [ 813.144755][T18806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.144785][T18806] RSP: 002b:00007f0281fb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 813.144813][T18806] RAX: ffffffffffffffda RBX: 00007f02813e5fa0 RCX: 00007f028118f7c9 [ 813.144834][T18806] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 813.144860][T18806] RBP: 00007f0281213f91 R08: 0000000000000000 R09: 0000000000000000 [ 813.144879][T18806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.144899][T18806] R13: 00007f02813e6038 R14: 00007f02813e5fa0 R15: 00007ffd11a7f658 [ 813.144941][T18806] [ 814.957313][T18819] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 815.000836][T18819] FAULT_INJECTION: forcing a failure. [ 815.000836][T18819] name failslab, interval 1, probability 0, space 0, times 0 [ 815.169413][T18819] CPU: 0 UID: 0 PID: 18819 Comm: syz.7.2480 Tainted: G U L syzkaller #0 PREEMPT(full) [ 815.169455][T18819] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 815.169464][T18819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 815.169479][T18819] Call Trace: [ 815.169488][T18819] [ 815.169497][T18819] dump_stack_lvl+0x16c/0x1f0 [ 815.169540][T18819] should_fail_ex+0x512/0x640 [ 815.169569][T18819] ? kmem_cache_alloc_noprof+0x62/0x770 [ 815.169602][T18819] should_failslab+0xc2/0x120 [ 815.169640][T18819] kmem_cache_alloc_noprof+0x83/0x770 [ 815.169668][T18819] ? fc_mount+0xa2/0x220 [ 815.169702][T18819] ? alloc_vfsmnt+0x23/0x6b0 [ 815.169732][T18819] ? alloc_vfsmnt+0x23/0x6b0 [ 815.169756][T18819] alloc_vfsmnt+0x23/0x6b0 [ 815.169783][T18819] fc_mount+0x105/0x220 [ 815.169813][T18819] trace_automount+0xfb/0x110 [ 815.169845][T18819] __traverse_mounts+0x1b9/0x830 [ 815.169875][T18819] step_into_slowpath+0x772/0xf50 [ 815.169907][T18819] ? __d_lookup+0x25c/0x4a0 [ 815.169938][T18819] ? __pfx_step_into_slowpath+0x10/0x10 [ 815.169972][T18819] ? __d_lookup+0x266/0x4a0 [ 815.170003][T18819] ? lookup_fast+0x156/0x610 [ 815.170030][T18819] ? inode_permission+0x37b/0x640 [ 815.170060][T18819] link_path_walk+0xd26/0x1c70 [ 815.170102][T18819] path_openat+0x1bd/0x3140 [ 815.170137][T18819] ? do_syscall_64+0xcd/0xf80 [ 815.170158][T18819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.170190][T18819] ? __pfx_path_openat+0x10/0x10 [ 815.170237][T18819] do_filp_open+0x20b/0x470 [ 815.170274][T18819] ? __pfx_do_filp_open+0x10/0x10 [ 815.170330][T18819] ? alloc_fd+0x471/0x7d0 [ 815.170373][T18819] do_sys_openat2+0x121/0x290 [ 815.170400][T18819] ? __pfx_do_sys_openat2+0x10/0x10 [ 815.170438][T18819] __x64_sys_openat+0x174/0x210 [ 815.170466][T18819] ? __pfx___x64_sys_openat+0x10/0x10 [ 815.170505][T18819] do_syscall_64+0xcd/0xf80 [ 815.170529][T18819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.170553][T18819] RIP: 0033:0x7f028118f7c9 [ 815.170572][T18819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.170596][T18819] RSP: 002b:00007f0281f76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 815.170618][T18819] RAX: ffffffffffffffda RBX: 00007f02813e6180 RCX: 00007f028118f7c9 [ 815.170634][T18819] RDX: 0000000000000201 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 815.170649][T18819] RBP: 00007f0281213f91 R08: 0000000000000000 R09: 0000000000000000 [ 815.170664][T18819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.170678][T18819] R13: 00007f02813e6218 R14: 00007f02813e6180 R15: 00007ffd11a7f658 [ 815.170715][T18819] [ 815.589363][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.785136][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.810082][T18774] Process accounting paused [ 816.065364][T18839] FAULT_INJECTION: forcing a failure. [ 816.065364][T18839] name fail_futex, interval 1, probability 0, space 0, times 0 [ 816.111925][T18839] CPU: 1 UID: 0 PID: 18839 Comm: syz.2.2484 Tainted: G U L syzkaller #0 PREEMPT(full) [ 816.111977][T18839] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 816.111989][T18839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 816.112007][T18839] Call Trace: [ 816.112017][T18839] [ 816.112029][T18839] dump_stack_lvl+0x16c/0x1f0 [ 816.112085][T18839] should_fail_ex+0x512/0x640 [ 816.112127][T18839] should_fail_futex+0x4c/0x60 [ 816.112162][T18839] __x64_sys_futex+0x25e/0x4c0 [ 816.112203][T18839] ? __pfx___x64_sys_futex+0x10/0x10 [ 816.112241][T18839] ? xfd_validate_state+0x61/0x180 [ 816.112283][T18839] do_syscall_64+0xcd/0xf80 [ 816.112317][T18839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.112349][T18839] RIP: 0033:0x7f079d98f7c9 [ 816.112374][T18839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.112406][T18839] RSP: 002b:00007ffcdc0af348 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 816.112437][T18839] RAX: ffffffffffffffda RBX: 00000000000c81a7 RCX: 00007f079d98f7c9 [ 816.112458][T18839] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f079dbe609c [ 816.112476][T18839] RBP: 0000000000000032 R08: 00007f079e7f9000 R09: 0000000bdc0af63f [ 816.112495][T18839] R10: 00007ffcdc0af440 R11: 0000000000000246 R12: 00007f079dbe609c [ 816.112514][T18839] R13: 00007ffcdc0af440 R14: 00000000000c81d9 R15: 00007ffcdc0af460 [ 816.112555][T18839] [ 817.346682][T18866] input: f as /devices/virtual/input/input36 [ 817.687416][T18875] zram: Removed device: zram0 [ 820.616852][T18938] random: crng reseeded on system resumption [ 821.008068][T18936] zram: Added device: zram0 [ 822.959362][T18974] zswap: compressor not available [ 823.166791][T18981] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 823.630680][T18970] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 824.272539][T19011] zram: Added device: zram7 [ 825.394356][T19025] FAULT_INJECTION: forcing a failure. [ 825.394356][T19025] name fail_futex, interval 1, probability 0, space 0, times 0 [ 825.461758][T19025] CPU: 1 UID: 0 PID: 19025 Comm: syz.6.2513 Tainted: G U L syzkaller #0 PREEMPT(full) [ 825.461811][T19025] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 825.461821][T19025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 825.461836][T19025] Call Trace: [ 825.461844][T19025] [ 825.461853][T19025] dump_stack_lvl+0x16c/0x1f0 [ 825.461898][T19025] should_fail_ex+0x512/0x640 [ 825.461930][T19025] get_futex_key+0x1d0/0x15f0 [ 825.461959][T19025] ? __pfx_do_get_feature_msr+0x10/0x10 [ 825.461982][T19025] ? __pfx_get_futex_key+0x10/0x10 [ 825.462008][T19025] ? __pfx_msr_io+0x10/0x10 [ 825.462038][T19025] ? tomoyo_path_number_perm+0x18d/0x580 [ 825.462071][T19025] futex_wake+0xea/0x530 [ 825.462102][T19025] ? kvm_arch_dev_ioctl+0x111/0x760 [ 825.462132][T19025] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 825.462163][T19025] ? __pfx_futex_wake+0x10/0x10 [ 825.462201][T19025] ? do_vfs_ioctl+0x128/0x14f0 [ 825.462234][T19025] do_futex+0x1e3/0x350 [ 825.462262][T19025] ? __pfx_do_futex+0x10/0x10 [ 825.462291][T19025] ? find_held_lock+0x2b/0x80 [ 825.462326][T19025] __x64_sys_futex+0x1e0/0x4c0 [ 825.462356][T19025] ? __fget_files+0x20e/0x3c0 [ 825.462389][T19025] ? __pfx___x64_sys_futex+0x10/0x10 [ 825.462421][T19025] ? fput+0x70/0xf0 [ 825.462448][T19025] do_syscall_64+0xcd/0xf80 [ 825.462472][T19025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.462497][T19025] RIP: 0033:0x7fb97b98f7c9 [ 825.462516][T19025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.462539][T19025] RSP: 002b:00007fb97c83a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 825.462561][T19025] RAX: ffffffffffffffda RBX: 00007fb97bbe6098 RCX: 00007fb97b98f7c9 [ 825.462577][T19025] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb97bbe609c [ 825.462592][T19025] RBP: 00007fb97bbe6090 R08: 00007fb97c85c000 R09: 0000000000000000 [ 825.462607][T19025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.462621][T19025] R13: 00007fb97bbe6128 R14: 00007ffd9658e7a0 R15: 00007ffd9658e888 [ 825.462651][T19025] [ 825.930418][ T30] audit: type=1326 audit(4294967381.213:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19026 comm="syz.6.2514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb97b98f7c9 code=0x0 [ 826.158684][T19034] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2515'. [ 826.383219][T19036] FAULT_INJECTION: forcing a failure. [ 826.383219][T19036] name failslab, interval 1, probability 0, space 0, times 0 [ 826.442216][T19036] CPU: 1 UID: 0 PID: 19036 Comm: syz.2.2516 Tainted: G U L syzkaller #0 PREEMPT(full) [ 826.442271][T19036] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 826.442285][T19036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 826.442305][T19036] Call Trace: [ 826.442317][T19036] [ 826.442329][T19036] dump_stack_lvl+0x16c/0x1f0 [ 826.442390][T19036] should_fail_ex+0x512/0x640 [ 826.442430][T19036] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 826.442478][T19036] should_failslab+0xc2/0x120 [ 826.442529][T19036] kmem_cache_alloc_node_noprof+0x86/0x800 [ 826.442573][T19036] ? do_kmem_cache_create+0x25e/0x740 [ 826.442633][T19036] ? do_kmem_cache_create+0x25e/0x740 [ 826.442683][T19036] do_kmem_cache_create+0x25e/0x740 [ 826.442752][T19036] __kmem_cache_create_args+0x1fc/0x3b0 [ 826.442795][T19036] mon_text_open+0x333/0x510 [ 826.442847][T19036] ? __pfx_mon_text_open+0x10/0x10 [ 826.442899][T19036] ? __pfx_mon_text_ctor+0x10/0x10 [ 826.442948][T19036] ? __pfx_apparmor_file_open+0x10/0x10 [ 826.442983][T19036] ? lockdown_is_locked_down+0x3f/0x130 [ 826.443035][T19036] ? bpf_lsm_locked_down+0x9/0x10 [ 826.443087][T19036] ? __pfx_mon_text_open+0x10/0x10 [ 826.443134][T19036] full_proxy_open_regular+0x1b9/0x350 [ 826.443191][T19036] do_dentry_open+0x748/0x1590 [ 826.443241][T19036] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 826.443306][T19036] vfs_open+0x82/0x3f0 [ 826.443348][T19036] path_openat+0x2078/0x3140 [ 826.443414][T19036] ? __pfx_path_openat+0x10/0x10 [ 826.443483][T19036] do_filp_open+0x20b/0x470 [ 826.443537][T19036] ? __pfx_do_filp_open+0x10/0x10 [ 826.443621][T19036] ? alloc_fd+0x471/0x7d0 [ 826.443683][T19036] do_sys_openat2+0x121/0x290 [ 826.443732][T19036] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.443789][T19036] __x64_sys_openat+0x174/0x210 [ 826.443830][T19036] ? __pfx___x64_sys_openat+0x10/0x10 [ 826.443889][T19036] do_syscall_64+0xcd/0xf80 [ 826.443927][T19036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.443961][T19036] RIP: 0033:0x7f079d98f7c9 [ 826.443988][T19036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.444025][T19036] RSP: 002b:00007f079e7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 826.444058][T19036] RAX: ffffffffffffffda RBX: 00007f079dbe5fa0 RCX: 00007f079d98f7c9 [ 826.444081][T19036] RDX: 0000000000000800 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 826.444104][T19036] RBP: 00007f079da13f91 R08: 0000000000000000 R09: 0000000000000000 [ 826.444124][T19036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.444144][T19036] R13: 00007f079dbe6038 R14: 00007f079dbe5fa0 R15: 00007ffcdc0af1e8 [ 826.444191][T19036] [ 826.444308][T19036] __kmem_cache_create_args(mon_text_ffff88805e8eb400) failed with error -22 [ 826.799525][T19036] CPU: 0 UID: 0 PID: 19036 Comm: syz.2.2516 Tainted: G U L syzkaller #0 PREEMPT(full) [ 826.799575][T19036] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 826.799587][T19036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 826.799605][T19036] Call Trace: [ 826.799618][T19036] [ 826.799631][T19036] dump_stack_lvl+0x16c/0x1f0 [ 826.799690][T19036] __kmem_cache_create_args+0x122/0x3b0 [ 826.799734][T19036] mon_text_open+0x333/0x510 [ 826.799782][T19036] ? __pfx_mon_text_open+0x10/0x10 [ 826.799834][T19036] ? __pfx_mon_text_ctor+0x10/0x10 [ 826.799892][T19036] ? __pfx_apparmor_file_open+0x10/0x10 [ 826.799927][T19036] ? lockdown_is_locked_down+0x3f/0x130 [ 826.799979][T19036] ? bpf_lsm_locked_down+0x9/0x10 [ 826.800035][T19036] ? __pfx_mon_text_open+0x10/0x10 [ 826.800080][T19036] full_proxy_open_regular+0x1b9/0x350 [ 826.800136][T19036] do_dentry_open+0x748/0x1590 [ 826.800182][T19036] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 826.800244][T19036] vfs_open+0x82/0x3f0 [ 826.800285][T19036] path_openat+0x2078/0x3140 [ 826.800347][T19036] ? __pfx_path_openat+0x10/0x10 [ 826.800408][T19036] do_filp_open+0x20b/0x470 [ 826.800477][T19036] ? __pfx_do_filp_open+0x10/0x10 [ 826.800560][T19036] ? alloc_fd+0x471/0x7d0 [ 826.800622][T19036] do_sys_openat2+0x121/0x290 [ 826.800659][T19036] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.800713][T19036] __x64_sys_openat+0x174/0x210 [ 826.800753][T19036] ? __pfx___x64_sys_openat+0x10/0x10 [ 826.800809][T19036] do_syscall_64+0xcd/0xf80 [ 826.800844][T19036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.800878][T19036] RIP: 0033:0x7f079d98f7c9 [ 826.800922][T19036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.800954][T19036] RSP: 002b:00007f079e7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 826.800986][T19036] RAX: ffffffffffffffda RBX: 00007f079dbe5fa0 RCX: 00007f079d98f7c9 [ 826.801009][T19036] RDX: 0000000000000800 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 826.801030][T19036] RBP: 00007f079da13f91 R08: 0000000000000000 R09: 0000000000000000 [ 826.801050][T19036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.801070][T19036] R13: 00007f079dbe6038 R14: 00007f079dbe5fa0 R15: 00007ffcdc0af1e8 [ 826.801115][T19036] [ 827.578157][T19042] Process accounting paused [ 827.756942][T19056] FAULT_INJECTION: forcing a failure. [ 827.756942][T19056] name failslab, interval 1, probability 0, space 0, times 0 [ 827.791081][T19056] CPU: 0 UID: 0 PID: 19056 Comm: syz.7.2521 Tainted: G U L syzkaller #0 PREEMPT(full) [ 827.791136][T19056] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 827.791148][T19056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 827.791168][T19056] Call Trace: [ 827.791179][T19056] [ 827.791192][T19056] dump_stack_lvl+0x16c/0x1f0 [ 827.791248][T19056] should_fail_ex+0x512/0x640 [ 827.791284][T19056] ? fs_reclaim_acquire+0xae/0x150 [ 827.791338][T19056] should_failslab+0xc2/0x120 [ 827.791389][T19056] __kmalloc_noprof+0xeb/0x910 [ 827.791427][T19056] ? tomoyo_encode2+0x100/0x3e0 [ 827.791478][T19056] ? tomoyo_encode2+0x100/0x3e0 [ 827.791522][T19056] tomoyo_encode2+0x100/0x3e0 [ 827.791573][T19056] tomoyo_encode+0x29/0x50 [ 827.791618][T19056] tomoyo_realpath_from_path+0x18f/0x6e0 [ 827.791677][T19056] tomoyo_path_number_perm+0x245/0x580 [ 827.791717][T19056] ? tomoyo_path_number_perm+0x237/0x580 [ 827.791761][T19056] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 827.791805][T19056] ? find_held_lock+0x2b/0x80 [ 827.791889][T19056] ? find_held_lock+0x2b/0x80 [ 827.791930][T19056] ? hook_file_ioctl_common+0x144/0x410 [ 827.791980][T19056] ? __fget_files+0x20e/0x3c0 [ 827.792034][T19056] security_file_ioctl+0x9b/0x240 [ 827.792078][T19056] __x64_sys_ioctl+0xb7/0x210 [ 827.792122][T19056] do_syscall_64+0xcd/0xf80 [ 827.792156][T19056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.792189][T19056] RIP: 0033:0x7f028118f7c9 [ 827.792215][T19056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.792246][T19056] RSP: 002b:00007f0281f97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 827.792276][T19056] RAX: ffffffffffffffda RBX: 00007f02813e6090 RCX: 00007f028118f7c9 [ 827.792298][T19056] RDX: 0000000000000000 RSI: 0000000000004b3b RDI: 0000000000000003 [ 827.792318][T19056] RBP: 00007f0281f97090 R08: 0000000000000000 R09: 0000000000000000 [ 827.792338][T19056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.792357][T19056] R13: 00007f02813e6128 R14: 00007f02813e6090 R15: 00007ffd11a7f658 [ 827.792402][T19056] [ 827.792428][T19056] ERROR: Out of memory at tomoyo_realpath_from_path. [ 829.733171][T19092] Invalid ELF header magic: != ELF [ 830.437814][T19092] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(7.0.1), cmd(6) [ 830.608265][T19101] FAULT_INJECTION: forcing a failure. [ 830.608265][T19101] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 830.680718][T19101] CPU: 1 UID: 0 PID: 19101 Comm: syz.7.2532 Tainted: G U L syzkaller #0 PREEMPT(full) [ 830.680771][T19101] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 830.680785][T19101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 830.680803][T19101] Call Trace: [ 830.680814][T19101] [ 830.680827][T19101] dump_stack_lvl+0x16c/0x1f0 [ 830.680884][T19101] should_fail_ex+0x512/0x640 [ 830.680929][T19101] should_fail_alloc_page+0xe7/0x130 [ 830.680982][T19101] prepare_alloc_pages+0x401/0x670 [ 830.681040][T19101] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 830.681081][T19101] ? find_held_lock+0x2b/0x80 [ 830.681128][T19101] ? mark_held_locks+0x49/0x80 [ 830.681158][T19101] ? finish_task_switch.isra.0+0x207/0xbd0 [ 830.681204][T19101] ? lockdep_hardirqs_on+0x7c/0x110 [ 830.681233][T19101] ? finish_task_switch.isra.0+0x207/0xbd0 [ 830.681283][T19101] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 830.681323][T19101] ? trace_sched_exit_tp+0xd1/0x110 [ 830.681403][T19101] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 830.681455][T19101] ? policy_nodemask+0xea/0x4e0 [ 830.681509][T19101] alloc_pages_mpol+0x1fb/0x550 [ 830.681562][T19101] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 830.681612][T19101] ? preempt_schedule_thunk+0x16/0x30 [ 830.681653][T19101] folio_alloc_mpol_noprof+0x36/0x2f0 [ 830.681691][T19101] vma_alloc_folio_noprof+0xed/0x1e0 [ 830.681725][T19101] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 830.681765][T19101] ? rcu_read_unlock+0x2d/0xb0 [ 830.681811][T19101] do_wp_page+0x202f/0x5010 [ 830.681873][T19101] ? __pfx_do_wp_page+0x10/0x10 [ 830.681935][T19101] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 830.681986][T19101] __handle_mm_fault+0x1bd2/0x2bb0 [ 830.682034][T19101] ? __pfx___handle_mm_fault+0x10/0x10 [ 830.682094][T19101] ? find_vma+0xbf/0x140 [ 830.682137][T19101] ? __pfx_find_vma+0x10/0x10 [ 830.682179][T19101] ? kfree+0x2f8/0x6e0 [ 830.682218][T19101] handle_mm_fault+0x3fe/0xad0 [ 830.682261][T19101] do_user_addr_fault+0x7a6/0x1370 [ 830.682306][T19101] ? rcu_is_watching+0x12/0xc0 [ 830.682363][T19101] exc_page_fault+0x64/0xc0 [ 830.682415][T19101] asm_exc_page_fault+0x26/0x30 [ 830.682446][T19101] RIP: 0010:__put_user_4+0xd/0x20 [ 830.682497][T19101] Code: 66 89 01 31 c9 0f 01 ca e9 80 be 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 57 be 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 830.682529][T19101] RSP: 0018:ffffc90003627b78 EFLAGS: 00050246 [ 830.682556][T19101] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 830.682575][T19101] RDX: 0000000000000004 RSI: ffffffff8529fbad RDI: ffff88802896c40c [ 830.682594][T19101] RBP: ffffc90003627d20 R08: 00000000ffffffff R09: 00000000ffffffff [ 830.682613][T19101] R10: 0000000000000001 R11: ffff888079968b30 R12: 0000000000004b3b [ 830.682632][T19101] R13: ffff88802896c000 R14: 1ffff920006c4f76 R15: ffff88802896c000 [ 830.682666][T19101] ? vt_ioctl+0x38d/0x30a0 [ 830.682709][T19101] vt_ioctl+0x3ce/0x30a0 [ 830.682751][T19101] ? __pfx_vt_ioctl+0x10/0x10 [ 830.682789][T19101] ? tomoyo_path_number_perm+0x295/0x580 [ 830.682837][T19101] ? tomoyo_path_number_perm+0x18d/0x580 [ 830.682882][T19101] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 830.682925][T19101] ? find_held_lock+0x2b/0x80 [ 830.682968][T19101] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 830.683018][T19101] ? tty_jobctrl_ioctl+0x152/0xe00 [ 830.683060][T19101] ? __pfx_vt_ioctl+0x10/0x10 [ 830.683093][T19101] tty_ioctl+0x661/0x1650 [ 830.683143][T19101] ? __pfx_tty_ioctl+0x10/0x10 [ 830.683204][T19101] ? find_held_lock+0x2b/0x80 [ 830.683245][T19101] ? hook_file_ioctl_common+0x144/0x410 [ 830.683295][T19101] ? __fget_files+0x20e/0x3c0 [ 830.683356][T19101] ? __pfx_tty_ioctl+0x10/0x10 [ 830.683406][T19101] __x64_sys_ioctl+0x18e/0x210 [ 830.683450][T19101] do_syscall_64+0xcd/0xf80 [ 830.683483][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.683516][T19101] RIP: 0033:0x7f028118f7c9 [ 830.683540][T19101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.683570][T19101] RSP: 002b:00007f0281f97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.683599][T19101] RAX: ffffffffffffffda RBX: 00007f02813e6090 RCX: 00007f028118f7c9 [ 830.683620][T19101] RDX: 0000000000000000 RSI: 0000000000004b3b RDI: 0000000000000003 [ 830.683640][T19101] RBP: 00007f0281f97090 R08: 0000000000000000 R09: 0000000000000000 [ 830.683660][T19101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.683680][T19101] R13: 00007f02813e6128 R14: 00007f02813e6090 R15: 00007ffd11a7f658 [ 830.683725][T19101] [ 832.543770][T19114] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2535'. [ 832.900693][T19108] delete_channel: no stack [ 833.673922][T19130] Invalid ELF header magic: != ELF [ 835.563247][ T30] audit: type=1800 audit(4294967390.903:141): pid=19154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2545" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 836.882129][T19167] random: crng reseeded on system resumption [ 838.466136][ T8785] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 840.378219][T19219] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2561'. [ 841.016298][T19243] sctp: [Deprecated]: syz.2.2567 (pid 19243) Use of int in maxseg socket option. [ 841.016298][T19243] Use struct sctp_assoc_value instead [ 842.805128][T19272] input: jJǸ-9%vJ86 as /devices/virtual/input/input38 [ 842.858252][T19275] usb usb24: usbfs: process 19275 (syz.7.2572) did not claim interface 0 before use [ 844.280351][T19290] FAULT_INJECTION: forcing a failure. [ 844.280351][T19290] name failslab, interval 1, probability 0, space 0, times 0 [ 844.296998][T19292] FAULT_INJECTION: forcing a failure. [ 844.296998][T19292] name failslab, interval 1, probability 0, space 0, times 0 [ 844.320077][T19292] CPU: 0 UID: 0 PID: 19292 Comm: syz.7.2578 Tainted: G U L syzkaller #0 PREEMPT(full) [ 844.320146][T19292] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 844.320160][T19292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 844.320181][T19292] Call Trace: [ 844.320193][T19292] [ 844.320207][T19292] dump_stack_lvl+0x16c/0x1f0 [ 844.320269][T19292] should_fail_ex+0x512/0x640 [ 844.320310][T19292] ? fs_reclaim_acquire+0xae/0x150 [ 844.320369][T19292] should_failslab+0xc2/0x120 [ 844.320422][T19292] kmem_cache_alloc_noprof+0x83/0x770 [ 844.320462][T19292] ? __pfx_map_id_range_down+0x10/0x10 [ 844.320511][T19292] ? security_inode_alloc+0x3b/0x2b0 [ 844.320558][T19292] ? security_inode_alloc+0x3b/0x2b0 [ 844.320593][T19292] security_inode_alloc+0x3b/0x2b0 [ 844.320633][T19292] inode_init_always_gfp+0xced/0x1040 [ 844.320692][T19292] alloc_inode+0x86/0x240 [ 844.320730][T19292] new_inode+0x22/0x1c0 [ 844.320773][T19292] bdev_alloc+0x2b/0x420 [ 844.320816][T19292] __alloc_disk_node+0x116/0x6b0 [ 844.320876][T19292] __blk_alloc_disk+0xd0/0x160 [ 844.320929][T19292] ? __pfx___blk_alloc_disk+0x10/0x10 [ 844.321010][T19292] ? lockdep_init_map_type+0x5c/0x270 [ 844.321048][T19292] ? __raw_spin_lock_init+0x3a/0x110 [ 844.321092][T19292] ? __pfx_hot_add_show+0x10/0x10 [ 844.321142][T19292] zram_add+0x164/0x6f0 [ 844.321174][T19292] ? __pfx_zram_add+0x10/0x10 [ 844.321237][T19292] ? find_held_lock+0x2b/0x80 [ 844.321290][T19292] ? __pfx_hot_add_show+0x10/0x10 [ 844.321323][T19292] ? __pfx_class_attr_show+0x10/0x10 [ 844.321370][T19292] hot_add_show+0x21/0x80 [ 844.321404][T19292] class_attr_show+0x72/0xa0 [ 844.321454][T19292] sysfs_kf_seq_show+0x216/0x3e0 [ 844.321498][T19292] seq_read_iter+0x50e/0x12d0 [ 844.321564][T19292] kernfs_fop_read_iter+0x46c/0x610 [ 844.321619][T19292] ? rw_verify_area+0xcf/0x6c0 [ 844.321667][T19292] vfs_read+0x8bf/0xcf0 [ 844.321724][T19292] ? __pfx_vfs_read+0x10/0x10 [ 844.321802][T19292] ksys_read+0x12a/0x250 [ 844.321849][T19292] ? __pfx_ksys_read+0x10/0x10 [ 844.321911][T19292] do_syscall_64+0xcd/0xf80 [ 844.321947][T19292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.321982][T19292] RIP: 0033:0x7f028118f7c9 [ 844.322010][T19292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.322043][T19292] RSP: 002b:00007f0281fb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 844.322076][T19292] RAX: ffffffffffffffda RBX: 00007f02813e5fa0 RCX: 00007f028118f7c9 [ 844.322108][T19292] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 844.322130][T19292] RBP: 00007f0281213f91 R08: 0000000000000000 R09: 0000000000000000 [ 844.322151][T19292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.322170][T19292] R13: 00007f02813e6038 R14: 00007f02813e5fa0 R15: 00007ffd11a7f658 [ 844.322216][T19292] [ 844.337996][T19290] CPU: 1 UID: 0 PID: 19290 Comm: syz.1.2577 Tainted: G U L syzkaller #0 PREEMPT(full) [ 844.338134][T19290] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 844.338168][T19290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 844.338226][T19290] Call Trace: [ 844.338256][T19290] [ 844.338296][T19290] dump_stack_lvl+0x16c/0x1f0 [ 844.338463][T19290] should_fail_ex+0x512/0x640 [ 844.338562][T19290] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 844.338722][T19290] should_failslab+0xc2/0x120 [ 844.338849][T19290] kmem_cache_alloc_node_noprof+0x86/0x800 [ 844.338964][T19290] ? do_kmem_cache_create+0x25e/0x740 [ 844.339113][T19290] ? do_kmem_cache_create+0x25e/0x740 [ 844.339240][T19290] do_kmem_cache_create+0x25e/0x740 [ 844.339401][T19290] __kmem_cache_create_args+0x1fc/0x3b0 [ 844.339510][T19290] mon_text_open+0x333/0x510 [ 844.339633][T19290] ? __pfx_mon_text_open+0x10/0x10 [ 844.339770][T19290] ? __pfx_mon_text_ctor+0x10/0x10 [ 844.339899][T19290] ? __pfx_apparmor_file_open+0x10/0x10 [ 844.340000][T19290] ? lockdown_is_locked_down+0x3f/0x130 [ 844.340165][T19290] ? bpf_lsm_locked_down+0x9/0x10 [ 844.340298][T19290] ? __pfx_mon_text_open+0x10/0x10 [ 844.340428][T19290] full_proxy_open_regular+0x1b9/0x350 [ 844.340574][T19290] do_dentry_open+0x748/0x1590 [ 844.340693][T19290] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 844.340856][T19290] vfs_open+0x82/0x3f0 [ 844.340964][T19290] path_openat+0x2078/0x3140 [ 844.341129][T19290] ? __pfx_path_openat+0x10/0x10 [ 844.341300][T19290] do_filp_open+0x20b/0x470 [ 844.341469][T19290] ? __pfx_do_filp_open+0x10/0x10 [ 844.341675][T19290] ? alloc_fd+0x471/0x7d0 [ 844.341837][T19290] do_sys_openat2+0x121/0x290 [ 844.341933][T19290] ? __pfx_do_sys_openat2+0x10/0x10 [ 844.342072][T19290] __x64_sys_openat+0x174/0x210 [ 844.342175][T19290] ? __pfx___x64_sys_openat+0x10/0x10 [ 844.342325][T19290] do_syscall_64+0xcd/0xf80 [ 844.342424][T19290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.342511][T19290] RIP: 0033:0x7f3e1578f7c9 [ 844.342567][T19290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.342658][T19290] RSP: 002b:00007f3e16618038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 844.342752][T19290] RAX: ffffffffffffffda RBX: 00007f3e159e5fa0 RCX: 00007f3e1578f7c9 [ 844.342822][T19290] RDX: 0000000000000800 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 844.342876][T19290] RBP: 00007f3e15813f91 R08: 0000000000000000 R09: 0000000000000000 [ 844.342930][T19290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.342983][T19290] R13: 00007f3e159e6038 R14: 00007f3e159e5fa0 R15: 00007fff438ad1b8 [ 844.343099][T19290] [ 844.385189][T19290] __kmem_cache_create_args(mon_text_ffff88807ed1ec00) failed with error -22 [ 844.903599][T19292] zram: Error allocating disk structure for device 8 [ 844.915605][T19294] FAULT_INJECTION: forcing a failure. [ 844.915605][T19294] name failslab, interval 1, probability 0, space 0, times 0 [ 844.961492][T19290] CPU: 1 UID: 0 PID: 19290 Comm: syz.1.2577 Tainted: G U L syzkaller #0 PREEMPT(full) [ 844.961545][T19290] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 844.961557][T19290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 844.961577][T19290] Call Trace: [ 844.961589][T19290] [ 844.961602][T19290] dump_stack_lvl+0x16c/0x1f0 [ 844.961663][T19290] __kmem_cache_create_args+0x122/0x3b0 [ 844.961706][T19290] mon_text_open+0x333/0x510 [ 844.961757][T19290] ? __pfx_mon_text_open+0x10/0x10 [ 844.961809][T19290] ? __pfx_mon_text_ctor+0x10/0x10 [ 844.961860][T19290] ? __pfx_apparmor_file_open+0x10/0x10 [ 844.961895][T19290] ? lockdown_is_locked_down+0x3f/0x130 [ 844.961948][T19290] ? bpf_lsm_locked_down+0x9/0x10 [ 844.961998][T19290] ? __pfx_mon_text_open+0x10/0x10 [ 844.962053][T19290] full_proxy_open_regular+0x1b9/0x350 [ 844.962111][T19290] do_dentry_open+0x748/0x1590 [ 844.962159][T19290] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 844.962223][T19290] vfs_open+0x82/0x3f0 [ 844.962266][T19290] path_openat+0x2078/0x3140 [ 844.962330][T19290] ? __pfx_path_openat+0x10/0x10 [ 844.962398][T19290] do_filp_open+0x20b/0x470 [ 844.962451][T19290] ? __pfx_do_filp_open+0x10/0x10 [ 844.962533][T19290] ? alloc_fd+0x471/0x7d0 [ 844.962592][T19290] do_sys_openat2+0x121/0x290 [ 844.962630][T19290] ? __pfx_do_sys_openat2+0x10/0x10 [ 844.962687][T19290] __x64_sys_openat+0x174/0x210 [ 844.962725][T19290] ? __pfx___x64_sys_openat+0x10/0x10 [ 844.962782][T19290] do_syscall_64+0xcd/0xf80 [ 844.962817][T19290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.962852][T19290] RIP: 0033:0x7f3e1578f7c9 [ 844.962878][T19290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.962912][T19290] RSP: 002b:00007f3e16618038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 844.962943][T19290] RAX: ffffffffffffffda RBX: 00007f3e159e5fa0 RCX: 00007f3e1578f7c9 [ 844.962965][T19290] RDX: 0000000000000800 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 844.962986][T19290] RBP: 00007f3e15813f91 R08: 0000000000000000 R09: 0000000000000000 [ 844.963005][T19290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.963023][T19290] R13: 00007f3e159e6038 R14: 00007f3e159e5fa0 R15: 00007fff438ad1b8 [ 844.963076][T19290] [ 845.373853][T19294] CPU: 0 UID: 0 PID: 19294 Comm: syz.2.2576 Tainted: G U L syzkaller #0 PREEMPT(full) [ 845.373895][T19294] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 845.373905][T19294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 845.373920][T19294] Call Trace: [ 845.373928][T19294] [ 845.373938][T19294] dump_stack_lvl+0x16c/0x1f0 [ 845.373982][T19294] should_fail_ex+0x512/0x640 [ 845.374011][T19294] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 845.374053][T19294] should_failslab+0xc2/0x120 [ 845.374091][T19294] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 845.374123][T19294] ? alloc_inode+0xc3/0x240 [ 845.374163][T19294] ? alloc_inode+0xc3/0x240 [ 845.374189][T19294] alloc_inode+0xc3/0x240 [ 845.374216][T19294] path_from_stashed+0x25b/0x750 [ 845.374237][T19294] ? do_raw_spin_unlock+0x172/0x230 [ 845.374271][T19294] ns_get_path+0x60/0x80 [ 845.374307][T19294] proc_ns_get_link+0x121/0x230 [ 845.374335][T19294] ? __pfx_proc_ns_get_link+0x10/0x10 [ 845.374365][T19294] ? atime_needs_update+0x8b/0x710 [ 845.374398][T19294] pick_link+0xc96/0x13b0 [ 845.374427][T19294] ? __pfx_proc_ns_get_link+0x10/0x10 [ 845.374458][T19294] step_into_slowpath+0x6c6/0xf50 [ 845.374495][T19294] ? __pfx_step_into_slowpath+0x10/0x10 [ 845.374526][T19294] ? find_held_lock+0x2b/0x80 [ 845.374566][T19294] path_openat+0x10db/0x3140 [ 845.374610][T19294] ? __pfx_path_openat+0x10/0x10 [ 845.374661][T19294] do_filp_open+0x20b/0x470 [ 845.374697][T19294] ? __pfx_do_filp_open+0x10/0x10 [ 845.374754][T19294] ? alloc_fd+0x471/0x7d0 [ 845.374796][T19294] do_sys_openat2+0x121/0x290 [ 845.374823][T19294] ? __pfx_do_sys_openat2+0x10/0x10 [ 845.374865][T19294] __x64_sys_openat+0x174/0x210 [ 845.374894][T19294] ? __pfx___x64_sys_openat+0x10/0x10 [ 845.374933][T19294] do_syscall_64+0xcd/0xf80 [ 845.374957][T19294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.374982][T19294] RIP: 0033:0x7f079d98e010 [ 845.375000][T19294] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 845.375029][T19294] RSP: 002b:00007f079e7d6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 845.375051][T19294] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f079d98e010 [ 845.375066][T19294] RDX: 0000000000000002 RSI: 00007f079e7d6fa0 RDI: 00000000ffffff9c [ 845.375081][T19294] RBP: 00007f079e7d6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 845.375095][T19294] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 845.375109][T19294] R13: 00007f079dbe6128 R14: 00007f079dbe6090 R15: 00007ffcdc0af1e8 [ 845.375140][T19294] [ 845.925629][T19245] Process accounting resumed [ 850.812675][T19383] FAULT_INJECTION: forcing a failure. [ 850.812675][T19383] name failslab, interval 1, probability 0, space 0, times 0 [ 850.866452][T19383] CPU: 0 UID: 0 PID: 19383 Comm: syz.2.2598 Tainted: G U L syzkaller #0 PREEMPT(full) [ 850.866506][T19383] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 850.866521][T19383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 850.866541][T19383] Call Trace: [ 850.866552][T19383] [ 850.866676][T19383] dump_stack_lvl+0x16c/0x1f0 [ 850.866740][T19383] should_fail_ex+0x512/0x640 [ 850.866779][T19383] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 850.866828][T19383] should_failslab+0xc2/0x120 [ 850.866879][T19383] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 850.866919][T19383] ? find_held_lock+0x2b/0x80 [ 850.866964][T19383] ? bdev_alloc_inode+0x26/0x90 [ 850.867004][T19383] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 850.867033][T19383] ? bdev_alloc_inode+0x26/0x90 [ 850.867062][T19383] bdev_alloc_inode+0x26/0x90 [ 850.867093][T19383] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 850.867123][T19383] alloc_inode+0x64/0x240 [ 850.867161][T19383] new_inode+0x22/0x1c0 [ 850.867202][T19383] bdev_alloc+0x2b/0x420 [ 850.867243][T19383] __alloc_disk_node+0x116/0x6b0 [ 850.867303][T19383] __blk_alloc_disk+0xd0/0x160 [ 850.867354][T19383] ? __pfx___blk_alloc_disk+0x10/0x10 [ 850.867429][T19383] ? lockdep_init_map_type+0x5c/0x270 [ 850.867464][T19383] ? __raw_spin_lock_init+0x3a/0x110 [ 850.867508][T19383] ? __pfx_hot_add_show+0x10/0x10 [ 850.867557][T19383] zram_add+0x164/0x6f0 [ 850.867590][T19383] ? __pfx_zram_add+0x10/0x10 [ 850.867651][T19383] ? find_held_lock+0x2b/0x80 [ 850.867704][T19383] ? __pfx_hot_add_show+0x10/0x10 [ 850.867739][T19383] ? __pfx_class_attr_show+0x10/0x10 [ 850.867791][T19383] hot_add_show+0x21/0x80 [ 850.867833][T19383] class_attr_show+0x72/0xa0 [ 850.867885][T19383] sysfs_kf_seq_show+0x216/0x3e0 [ 850.867931][T19383] seq_read_iter+0x50e/0x12d0 [ 850.867997][T19383] kernfs_fop_read_iter+0x46c/0x610 [ 850.868049][T19383] ? rw_verify_area+0xcf/0x6c0 [ 850.868098][T19383] vfs_read+0x8bf/0xcf0 [ 850.868154][T19383] ? __pfx_vfs_read+0x10/0x10 [ 850.868232][T19383] ksys_read+0x12a/0x250 [ 850.868282][T19383] ? __pfx_ksys_read+0x10/0x10 [ 850.868346][T19383] do_syscall_64+0xcd/0xf80 [ 850.868383][T19383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.868418][T19383] RIP: 0033:0x7f079d98f7c9 [ 850.868447][T19383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.868481][T19383] RSP: 002b:00007f079e7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 850.868547][T19383] RAX: ffffffffffffffda RBX: 00007f079dbe5fa0 RCX: 00007f079d98f7c9 [ 850.868571][T19383] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 850.868592][T19383] RBP: 00007f079da13f91 R08: 0000000000000000 R09: 0000000000000000 [ 850.868614][T19383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.868635][T19383] R13: 00007f079dbe6038 R14: 00007f079dbe5fa0 R15: 00007ffcdc0af1e8 [ 850.868684][T19383] [ 851.265045][T19383] zram: Error allocating disk structure for device 8 [ 851.303617][T19384] FAULT_INJECTION: forcing a failure. [ 851.303617][T19384] name failslab, interval 1, probability 0, space 0, times 0 [ 851.415580][T19384] CPU: 1 UID: 0 PID: 19384 Comm: syz.7.2597 Tainted: G U L syzkaller #0 PREEMPT(full) [ 851.415640][T19384] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 851.415654][T19384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 851.415674][T19384] Call Trace: [ 851.415685][T19384] [ 851.415699][T19384] dump_stack_lvl+0x16c/0x1f0 [ 851.415769][T19384] should_fail_ex+0x512/0x640 [ 851.415809][T19384] ? __kmalloc_cache_noprof+0x5f/0x800 [ 851.415855][T19384] should_failslab+0xc2/0x120 [ 851.415907][T19384] __kmalloc_cache_noprof+0x80/0x800 [ 851.415949][T19384] ? rand_initialize_disk+0x3f/0xc0 [ 851.415996][T19384] ? rand_initialize_disk+0x3f/0xc0 [ 851.416036][T19384] rand_initialize_disk+0x3f/0xc0 [ 851.416077][T19384] __alloc_disk_node+0x322/0x6b0 [ 851.416138][T19384] __blk_alloc_disk+0xd0/0x160 [ 851.416192][T19384] ? __pfx___blk_alloc_disk+0x10/0x10 [ 851.416277][T19384] ? lockdep_init_map_type+0x5c/0x270 [ 851.416314][T19384] ? __raw_spin_lock_init+0x3a/0x110 [ 851.416358][T19384] ? __pfx_hot_add_show+0x10/0x10 [ 851.416393][T19384] zram_add+0x164/0x6f0 [ 851.416426][T19384] ? __pfx_zram_add+0x10/0x10 [ 851.416488][T19384] ? find_held_lock+0x2b/0x80 [ 851.416538][T19384] ? __pfx_hot_add_show+0x10/0x10 [ 851.416569][T19384] ? __pfx_class_attr_show+0x10/0x10 [ 851.416618][T19384] hot_add_show+0x21/0x80 [ 851.416652][T19384] class_attr_show+0x72/0xa0 [ 851.416703][T19384] sysfs_kf_seq_show+0x216/0x3e0 [ 851.416755][T19384] seq_read_iter+0x50e/0x12d0 [ 851.416822][T19384] kernfs_fop_read_iter+0x46c/0x610 [ 851.416876][T19384] ? rw_verify_area+0xcf/0x6c0 [ 851.416926][T19384] vfs_read+0x8bf/0xcf0 [ 851.416983][T19384] ? __pfx_vfs_read+0x10/0x10 [ 851.417060][T19384] ksys_read+0x12a/0x250 [ 851.417109][T19384] ? __pfx_ksys_read+0x10/0x10 [ 851.417171][T19384] do_syscall_64+0xcd/0xf80 [ 851.417207][T19384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.417241][T19384] RIP: 0033:0x7f028118f7c9 [ 851.417268][T19384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.417303][T19384] RSP: 002b:00007f0281fb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 851.417335][T19384] RAX: ffffffffffffffda RBX: 00007f02813e5fa0 RCX: 00007f028118f7c9 [ 851.417358][T19384] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 851.417378][T19384] RBP: 00007f0281213f91 R08: 0000000000000000 R09: 0000000000000000 [ 851.417398][T19384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.417417][T19384] R13: 00007f02813e6038 R14: 00007f02813e5fa0 R15: 00007ffd11a7f658 [ 851.417463][T19384] [ 851.754660][T19384] zram: Added device: zram8 [ 853.824082][T19405] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 853.882396][T19405] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 853.966225][T19405] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 854.158674][T19405] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 854.614359][T19405] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 854.643199][T19405] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 854.751079][T19405] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 854.787059][T19434] hub 8-0:1.0: USB hub found [ 854.795519][T19434] hub 8-0:1.0: 1 port detected [ 854.930919][T19405] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 854.967710][T19405] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 855.129511][T19405] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 855.864808][ T8785] Bluetooth: hci0: command 0x0c1a tx timeout [ 855.944264][ T8785] Bluetooth: hci1: command 0x0c1a tx timeout [ 856.650460][ T8785] Bluetooth: hci2: command 0x0c1a tx timeout [ 856.980370][ T8785] Bluetooth: hci3: command 0x0c1a tx timeout [ 857.025834][ T8785] Bluetooth: hci0: Malformed HCI Event [ 857.930789][T19483] Process accounting resumed [ 858.010522][ T8785] Bluetooth: hci1: command 0x0c1a tx timeout [ 858.720164][ T8785] Bluetooth: hci2: command 0x0c1a tx timeout [ 859.048993][ T8785] Bluetooth: hci3: command 0x0c1a tx timeout [ 860.072666][ T8785] Bluetooth: hci1: command 0x0c1a tx timeout [ 860.799334][ T8785] Bluetooth: hci2: command 0x0c1a tx timeout [ 861.107852][ T8785] Bluetooth: hci3: command 0x0c1a tx timeout [ 861.490050][T19538] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2626'. [ 861.579880][T19538] bond0: (slave bond_slave_0): Releasing backup interface [ 862.048138][T19541] FAULT_INJECTION: forcing a failure. [ 862.048138][T19541] name failslab, interval 1, probability 0, space 0, times 0 [ 862.082561][T19541] CPU: 1 UID: 0 PID: 19541 Comm: syz.6.2627 Tainted: G U L syzkaller #0 PREEMPT(full) [ 862.082616][T19541] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 862.082630][T19541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.082650][T19541] Call Trace: [ 862.082662][T19541] [ 862.082675][T19541] dump_stack_lvl+0x16c/0x1f0 [ 862.082736][T19541] should_fail_ex+0x512/0x640 [ 862.082774][T19541] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 862.082821][T19541] should_failslab+0xc2/0x120 [ 862.082881][T19541] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 862.082923][T19541] ? find_held_lock+0x2b/0x80 [ 862.082976][T19541] ? bdev_alloc_inode+0x26/0x90 [ 862.083018][T19541] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 862.083050][T19541] ? bdev_alloc_inode+0x26/0x90 [ 862.083082][T19541] bdev_alloc_inode+0x26/0x90 [ 862.083115][T19541] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 862.083147][T19541] alloc_inode+0x64/0x240 [ 862.083187][T19541] new_inode+0x22/0x1c0 [ 862.083230][T19541] bdev_alloc+0x2b/0x420 [ 862.083274][T19541] __alloc_disk_node+0x116/0x6b0 [ 862.083334][T19541] __blk_alloc_disk+0xd0/0x160 [ 862.083388][T19541] ? __pfx___blk_alloc_disk+0x10/0x10 [ 862.083469][T19541] ? lockdep_init_map_type+0x5c/0x270 [ 862.083506][T19541] ? __raw_spin_lock_init+0x3a/0x110 [ 862.083559][T19541] ? __pfx_hot_add_show+0x10/0x10 [ 862.083593][T19541] zram_add+0x164/0x6f0 [ 862.083628][T19541] ? __pfx_zram_add+0x10/0x10 [ 862.083690][T19541] ? find_held_lock+0x2b/0x80 [ 862.083742][T19541] ? __pfx_hot_add_show+0x10/0x10 [ 862.083774][T19541] ? __pfx_class_attr_show+0x10/0x10 [ 862.083822][T19541] hot_add_show+0x21/0x80 [ 862.083856][T19541] class_attr_show+0x72/0xa0 [ 862.083905][T19541] sysfs_kf_seq_show+0x216/0x3e0 [ 862.083950][T19541] seq_read_iter+0x50e/0x12d0 [ 862.084015][T19541] kernfs_fop_read_iter+0x46c/0x610 [ 862.084070][T19541] ? rw_verify_area+0xcf/0x6c0 [ 862.084118][T19541] vfs_read+0x8bf/0xcf0 [ 862.084175][T19541] ? __pfx_vfs_read+0x10/0x10 [ 862.084252][T19541] ksys_read+0x12a/0x250 [ 862.084300][T19541] ? __pfx_ksys_read+0x10/0x10 [ 862.084361][T19541] do_syscall_64+0xcd/0xf80 [ 862.084397][T19541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.084431][T19541] RIP: 0033:0x7fb97b98f7c9 [ 862.084458][T19541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.084491][T19541] RSP: 002b:00007fb97c85b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 862.084523][T19541] RAX: ffffffffffffffda RBX: 00007fb97bbe5fa0 RCX: 00007fb97b98f7c9 [ 862.084552][T19541] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 862.084572][T19541] RBP: 00007fb97ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 862.084592][T19541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.084612][T19541] R13: 00007fb97bbe6038 R14: 00007fb97bbe5fa0 R15: 00007ffd9658e888 [ 862.084660][T19541] [ 862.770759][T19541] zram: Error allocating disk structure for device 9 [ 863.466798][T19557] FAULT_INJECTION: forcing a failure. [ 863.466798][T19557] name fail_futex, interval 1, probability 0, space 0, times 0 [ 863.536700][T19557] CPU: 1 UID: 0 PID: 19557 Comm: syz.7.2630 Tainted: G U L syzkaller #0 PREEMPT(full) [ 863.536753][T19557] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 863.536766][T19557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 863.536786][T19557] Call Trace: [ 863.536797][T19557] [ 863.536810][T19557] dump_stack_lvl+0x16c/0x1f0 [ 863.536868][T19557] should_fail_ex+0x512/0x640 [ 863.536913][T19557] get_futex_key+0x1d0/0x15f0 [ 863.536956][T19557] ? __pfx_get_futex_key+0x10/0x10 [ 863.537006][T19557] futex_wake+0xea/0x530 [ 863.537048][T19557] ? futex_wait+0x120/0x380 [ 863.537093][T19557] ? __pfx_futex_wait+0x10/0x10 [ 863.537138][T19557] ? __pfx_futex_wake+0x10/0x10 [ 863.537202][T19557] do_futex+0x1e3/0x350 [ 863.537240][T19557] ? __pfx_do_futex+0x10/0x10 [ 863.537281][T19557] ? cap_task_prctl+0x2af/0xa80 [ 863.537321][T19557] __x64_sys_futex+0x1e0/0x4c0 [ 863.537366][T19557] ? __pfx___x64_sys_futex+0x10/0x10 [ 863.537407][T19557] ? __pfx___do_sys_prctl+0x10/0x10 [ 863.537456][T19557] do_syscall_64+0xcd/0xf80 [ 863.537491][T19557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.537524][T19557] RIP: 0033:0x7f028118f7c9 [ 863.537549][T19557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.537580][T19557] RSP: 002b:00007f0281f760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 863.537611][T19557] RAX: ffffffffffffffda RBX: 00007f02813e6188 RCX: 00007f028118f7c9 [ 863.537632][T19557] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f02813e618c [ 863.537652][T19557] RBP: 00007f02813e6180 R08: 00007f0281fb9000 R09: 0000000000000000 [ 863.537680][T19557] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 863.537701][T19557] R13: 00007f02813e6218 R14: 00007ffd11a7f570 R15: 00007ffd11a7f658 [ 863.537745][T19557] [ 864.029881][T19565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2632'. [ 864.121353][ T8785] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 864.316509][T19560] NFSD: Failed to start, no listeners configured. [ 865.046768][T19592] hub 8-0:1.0: USB hub found [ 865.077067][T19592] hub 8-0:1.0: 1 port detected [ 865.591464][T19598] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2637'. [ 867.031920][T19612] FAULT_INJECTION: forcing a failure. [ 867.031920][T19612] name failslab, interval 1, probability 0, space 0, times 0 [ 867.067599][T19612] CPU: 0 UID: 0 PID: 19612 Comm: syz.1.2640 Tainted: G U L syzkaller #0 PREEMPT(full) [ 867.067654][T19612] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 867.067667][T19612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 867.067687][T19612] Call Trace: [ 867.067698][T19612] [ 867.067712][T19612] dump_stack_lvl+0x16c/0x1f0 [ 867.067772][T19612] should_fail_ex+0x512/0x640 [ 867.067811][T19612] ? __kmalloc_cache_noprof+0x5f/0x800 [ 867.067855][T19612] should_failslab+0xc2/0x120 [ 867.067908][T19612] __kmalloc_cache_noprof+0x80/0x800 [ 867.067950][T19612] ? percpu_ref_init+0xec/0x410 [ 867.068007][T19612] ? percpu_ref_init+0xec/0x410 [ 867.068055][T19612] ? __pfx_blkg_release+0x10/0x10 [ 867.068097][T19612] percpu_ref_init+0xec/0x410 [ 867.068146][T19612] ? kasan_save_track+0x14/0x30 [ 867.068198][T19612] blkg_alloc+0xea/0xb60 [ 867.068236][T19612] ? find_held_lock+0x2b/0x80 [ 867.068287][T19612] blkcg_init_disk+0x51/0x580 [ 867.068330][T19612] __alloc_disk_node+0x2f6/0x6b0 [ 867.068390][T19612] __blk_alloc_disk+0xd0/0x160 [ 867.068442][T19612] ? __pfx___blk_alloc_disk+0x10/0x10 [ 867.068517][T19612] ? lockdep_init_map_type+0x5c/0x270 [ 867.068552][T19612] ? __raw_spin_lock_init+0x3a/0x110 [ 867.068595][T19612] ? __pfx_hot_add_show+0x10/0x10 [ 867.068631][T19612] zram_add+0x164/0x6f0 [ 867.068665][T19612] ? __pfx_zram_add+0x10/0x10 [ 867.068725][T19612] ? find_held_lock+0x2b/0x80 [ 867.068776][T19612] ? __pfx_hot_add_show+0x10/0x10 [ 867.068808][T19612] ? __pfx_class_attr_show+0x10/0x10 [ 867.068855][T19612] hot_add_show+0x21/0x80 [ 867.068888][T19612] class_attr_show+0x72/0xa0 [ 867.068936][T19612] sysfs_kf_seq_show+0x216/0x3e0 [ 867.068980][T19612] seq_read_iter+0x50e/0x12d0 [ 867.069043][T19612] kernfs_fop_read_iter+0x46c/0x610 [ 867.069104][T19612] ? rw_verify_area+0xcf/0x6c0 [ 867.069152][T19612] vfs_read+0x8bf/0xcf0 [ 867.069207][T19612] ? __pfx_vfs_read+0x10/0x10 [ 867.069283][T19612] ksys_read+0x12a/0x250 [ 867.069329][T19612] ? __pfx_ksys_read+0x10/0x10 [ 867.069389][T19612] do_syscall_64+0xcd/0xf80 [ 867.069432][T19612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.069465][T19612] RIP: 0033:0x7f3e1578f7c9 [ 867.069492][T19612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.069533][T19612] RSP: 002b:00007f3e16618038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 867.069566][T19612] RAX: ffffffffffffffda RBX: 00007f3e159e5fa0 RCX: 00007f3e1578f7c9 [ 867.069588][T19612] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 867.069609][T19612] RBP: 00007f3e15813f91 R08: 0000000000000000 R09: 0000000000000000 [ 867.069628][T19612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.069648][T19612] R13: 00007f3e159e6038 R14: 00007f3e159e5fa0 R15: 00007fff438ad1b8 [ 867.069692][T19612] [ 867.524413][T19612] zram: Error allocating disk structure for device 9 [ 867.925749][T19615] [U]  [ 867.928626][T19615] [U] [ 867.931365][T19615] [U] [ 867.934105][T19615] [U] [ 867.961130][T19621] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2645'. [ 867.983075][T19615] [U] [ 867.985822][T19615] [U] [ 867.988541][T19615] [U] [ 867.991277][T19615] [U] [ 867.995265][T19621] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2645'. [ 868.012461][T19621] netlink: 210 bytes leftover after parsing attributes in process `syz.2.2645'. [ 868.022521][T19615] [U] [ 868.025308][T19615] [U] [ 868.028076][T19615] [U] [ 868.030835][T19615] [U] [ 868.077375][T19615] [U] [ 868.080185][T19615] [U] [ 868.082922][T19615] [U] [ 868.085638][T19615] [U] [ 868.089017][T19615] [U] [ 868.091753][T19615] [U] [ 868.094462][T19615] [U] [ 868.097183][T19615] [U] [ 868.101316][T19615] [U] [ 868.104091][T19615] [U] [ 868.106877][T19615] [U] [ 868.109640][T19615] [U] [ 868.114314][T19615] [U] [ 868.117094][T19615] [U] [ 868.119854][T19615] [U] [ 868.122610][T19615] [U] [ 868.130968][T19615] [U] [ 868.133767][T19615] [U] [ 868.136515][T19615] [U] [ 868.139269][T19615] [U] [ 868.156130][T19615] [U] [ 868.158922][T19615] [U] [ 868.161693][T19615] [U] [ 868.164441][T19615] [U] [ 868.211625][T19615] [U] [ 868.214429][T19615] [U] [ 868.217186][T19615] [U] [ 868.219935][T19615] [U] [ 868.235318][T19615] [U] [ 868.238116][T19615] [U] [ 868.240873][T19615] [U] [ 868.243647][T19615] [U] [ 868.282115][T19615] [U] [ 868.284914][T19615] [U] [ 868.287671][T19615] [U] [ 868.290427][T19615] [U] [ 868.320105][T19615] [U] [ 868.322902][T19615] [U] [ 868.325669][T19615] [U] [ 868.328425][T19615] [U] [ 868.351189][T19615] [U] [ 868.353967][T19615] [U] [ 868.356716][T19615] [U] [ 868.359467][T19615] [U] [ 868.377500][T19615] [U] [ 868.380312][T19615] [U] [ 868.383086][T19615] [U] [ 868.385847][T19615] [U] [ 868.402107][T19615] [U] [ 868.404900][T19615] [U] [ 868.407671][T19615] [U] [ 868.410429][T19615] [U] [ 868.442170][T19615] [U] [ 868.444953][T19615] [U] [ 868.447699][T19615] [U] [ 868.450436][T19615] [U] [ 868.494248][T19615] [U] [ 868.497069][T19615] [U] [ 868.499827][T19615] [U] [ 868.502586][T19615] [U] [ 868.638689][T19615] [U] [ 868.641470][T19615] [U] [ 868.644208][T19615] [U] [ 868.646945][T19615] [U] [ 868.653143][T19615] [U] [ 868.655925][T19615] [U] [ 868.658692][T19615] [U] [ 868.661440][T19615] [U] [ 868.664715][T19615] [U] [ 868.667484][T19615] [U] [ 868.670249][T19615] [U] [ 868.673007][T19615] [U] [ 868.678174][T19615] [U] [ 868.680953][T19615] [U] [ 868.683714][T19615] [U] [ 868.686465][T19615] [U] [ 868.690919][T19615] [U] [ 868.693801][T19615] [U] [ 868.696547][T19615] [U] [ 868.699281][T19615] [U] [ 868.702298][T19615] [U] [ 868.705070][T19615] [U] [ 868.707826][T19615] [U] [ 868.710580][T19615] [U] [ 868.713821][T19615] [U] [ 868.716588][T19615] [U] [ 868.719362][T19615] [U] [ 868.722135][T19615] [U] [ 868.725123][T19615] [U] [ 868.727897][T19615] [U] [ 868.730650][T19615] [U] [ 868.733399][T19615] [U] [ 868.736632][T19615] [U] [ 868.739414][T19615] [U] [ 868.742170][T19615] [U] [ 868.744921][T19615] [U] [ 868.757559][T19615] [U] [ 868.760333][T19615] [U] [ 868.763090][T19615] [U] [ 868.765856][T19615] [U] [ 868.778143][T19615] [U] [ 868.836508][T19636] FAULT_INJECTION: forcing a failure. [ 868.836508][T19636] name failslab, interval 1, probability 0, space 0, times 0 [ 868.849315][T19636] CPU: 0 UID: 0 PID: 19636 Comm: syz.6.2648 Tainted: G U L syzkaller #0 PREEMPT(full) [ 868.849372][T19636] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 868.849385][T19636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 868.849403][T19636] Call Trace: [ 868.849413][T19636] [ 868.849425][T19636] dump_stack_lvl+0x16c/0x1f0 [ 868.849485][T19636] should_fail_ex+0x512/0x640 [ 868.849525][T19636] ? __kmalloc_cache_noprof+0x5f/0x800 [ 868.849569][T19636] should_failslab+0xc2/0x120 [ 868.849621][T19636] __kmalloc_cache_noprof+0x80/0x800 [ 868.849662][T19636] ? device_add+0xcf2/0x1980 [ 868.849718][T19636] ? device_add+0xcf2/0x1980 [ 868.849767][T19636] device_add+0xcf2/0x1980 [ 868.849814][T19636] ? dev_set_name+0xc7/0x100 [ 868.849844][T19636] ? __pfx_dev_set_name+0x10/0x10 [ 868.849877][T19636] ? __pfx_device_add+0x10/0x10 [ 868.849953][T19636] __add_disk+0x457/0xf00 [ 868.850005][T19636] ? find_held_lock+0x2b/0x80 [ 868.850055][T19636] add_disk_fwnode+0x3f8/0x5d0 [ 868.850112][T19636] zram_add+0x4bf/0x6f0 [ 868.850146][T19636] ? __pfx_zram_add+0x10/0x10 [ 868.850209][T19636] ? find_held_lock+0x2b/0x80 [ 868.850261][T19636] ? __pfx_hot_add_show+0x10/0x10 [ 868.850293][T19636] ? __pfx_class_attr_show+0x10/0x10 [ 868.850341][T19636] hot_add_show+0x21/0x80 [ 868.850375][T19636] class_attr_show+0x72/0xa0 [ 868.850425][T19636] sysfs_kf_seq_show+0x216/0x3e0 [ 868.850469][T19636] seq_read_iter+0x50e/0x12d0 [ 868.850534][T19636] kernfs_fop_read_iter+0x46c/0x610 [ 868.850588][T19636] ? rw_verify_area+0xcf/0x6c0 [ 868.850634][T19636] vfs_read+0x8bf/0xcf0 [ 868.850691][T19636] ? __pfx_vfs_read+0x10/0x10 [ 868.850768][T19636] ksys_read+0x12a/0x250 [ 868.850815][T19636] ? __pfx_ksys_read+0x10/0x10 [ 868.850876][T19636] do_syscall_64+0xcd/0xf80 [ 868.850912][T19636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.850968][T19636] RIP: 0033:0x7fb97b98f7c9 [ 868.850996][T19636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.851028][T19636] RSP: 002b:00007fb97c85b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 868.851062][T19636] RAX: ffffffffffffffda RBX: 00007fb97bbe5fa0 RCX: 00007fb97b98f7c9 [ 868.851084][T19636] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 868.851104][T19636] RBP: 00007fb97ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 868.851126][T19636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.851146][T19636] R13: 00007fb97bbe6038 R14: 00007fb97bbe5fa0 R15: 00007ffd9658e888 [ 868.851194][T19636] [ 870.392038][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2652'. [ 871.276786][T19664] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2656'. [ 871.417399][T19664] bond0: (slave bond_slave_0): Releasing backup interface [ 871.916684][T19674] snd_virmidi snd_virmidi.0: control 61678:131081:3:y>o[k<:1597170177 is already present [ 873.609516][T19702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2663'. [ 873.669353][ T8785] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 874.328659][ T8174] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 9 with max blocks 4 with error 117 [ 874.410215][T19718] ================================================================== [ 874.410233][T19718] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 874.410270][T19718] Read of size 256 at addr ffff88805c2aa3c0 by task syz.7.2666/19718 [ 874.410291][T19718] [ 874.410305][T19718] CPU: 0 UID: 0 PID: 19718 Comm: syz.7.2666 Tainted: G U L syzkaller #0 PREEMPT(full) [ 874.410340][T19718] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 874.410349][T19718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.410364][T19718] Call Trace: [ 874.410372][T19718] [ 874.410381][T19718] dump_stack_lvl+0x116/0x1f0 [ 874.410421][T19718] print_report+0xcd/0x630 [ 874.410477][T19718] ? __virt_addr_valid+0x81/0x610 [ 874.410520][T19718] ? __phys_addr+0xe8/0x180 [ 874.410556][T19718] ? fbcon_prepare_logo+0xa03/0xc70 [ 874.410583][T19718] kasan_report+0xe0/0x110 [ 874.410619][T19718] ? fbcon_prepare_logo+0xa03/0xc70 [ 874.410650][T19718] kasan_check_range+0x100/0x1b0 [ 874.410675][T19718] __asan_memcpy+0x23/0x60 [ 874.410704][T19718] fbcon_prepare_logo+0xa03/0xc70 [ 874.410734][T19718] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 874.410773][T19718] fbcon_init+0xda0/0x1930 [ 874.410803][T19718] visual_init+0x320/0x620 [ 874.410832][T19718] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 874.410870][T19718] store_bind+0x61d/0x760 [ 874.410904][T19718] ? sysfs_file_kobj+0xe4/0x290 [ 874.410928][T19718] ? __pfx_store_bind+0x10/0x10 [ 874.410959][T19718] dev_attr_store+0x58/0x80 [ 874.410992][T19718] ? __pfx_dev_attr_store+0x10/0x10 [ 874.411024][T19718] sysfs_kf_write+0xf2/0x150 [ 874.411048][T19718] kernfs_fop_write_iter+0x3af/0x570 [ 874.411083][T19718] ? __pfx_sysfs_kf_write+0x10/0x10 [ 874.411108][T19718] iter_file_splice_write+0xa24/0x12b0 [ 874.411154][T19718] ? __pfx_iter_file_splice_write+0x10/0x10 [ 874.411193][T19718] ? __pfx_copy_splice_read+0x10/0x10 [ 874.411235][T19718] ? __pfx_iter_file_splice_write+0x10/0x10 [ 874.411272][T19718] direct_splice_actor+0x192/0x6c0 [ 874.411309][T19718] splice_direct_to_actor+0x345/0xa30 [ 874.411345][T19718] ? __pfx_direct_splice_actor+0x10/0x10 [ 874.411383][T19718] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 874.411423][T19718] do_splice_direct+0x174/0x240 [ 874.411457][T19718] ? __pfx_do_splice_direct+0x10/0x10 [ 874.411493][T19718] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 874.411536][T19718] ? rw_verify_area+0xcf/0x6c0 [ 874.411568][T19718] do_sendfile+0xb06/0xe50 [ 874.411603][T19718] ? __pfx_do_sendfile+0x10/0x10 [ 874.411637][T19718] ? __x64_sys_futex+0x1e0/0x4c0 [ 874.411664][T19718] ? __x64_sys_futex+0x1e9/0x4c0 [ 874.411693][T19718] __x64_sys_sendfile64+0x1d8/0x220 [ 874.411716][T19718] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 874.411745][T19718] do_syscall_64+0xcd/0xf80 [ 874.411768][T19718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.411793][T19718] RIP: 0033:0x7f028118f7c9 [ 874.411811][T19718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.411835][T19718] RSP: 002b:00007f0281f55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 874.411858][T19718] RAX: ffffffffffffffda RBX: 00007f02813e6270 RCX: 00007f028118f7c9 [ 874.411874][T19718] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000004 [ 874.411889][T19718] RBP: 00007f0281213f91 R08: 0000000000000000 R09: 0000000000000000 [ 874.411903][T19718] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 874.411918][T19718] R13: 00007f02813e6308 R14: 00007f02813e6270 R15: 00007ffd11a7f658 [ 874.411963][T19718] [ 874.411973][T19718] [ 874.411979][T19718] Allocated by task 18339: [ 874.411991][T19718] kasan_save_stack+0x33/0x60 [ 874.412022][T19718] kasan_save_track+0x14/0x30 [ 874.412052][T19718] __kasan_slab_alloc+0x89/0x90 [ 874.412085][T19718] kmem_cache_alloc_noprof+0x25e/0x770 [ 874.412112][T19718] sk_prot_alloc+0x60/0x2a0 [ 874.412132][T19718] sk_alloc+0x36/0xe30 [ 874.412158][T19718] inet_create+0x3a1/0x1040 [ 874.412186][T19718] __sock_create+0x339/0x8a0 [ 874.412206][T19718] __sys_socket+0x14d/0x260 [ 874.412229][T19718] __x64_sys_socket+0x72/0xb0 [ 874.412252][T19718] do_syscall_64+0xcd/0xf80 [ 874.412272][T19718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.412294][T19718] [ 874.412300][T19718] Freed by task 18170: [ 874.412311][T19718] kasan_save_stack+0x33/0x60 [ 874.412341][T19718] kasan_save_track+0x14/0x30 [ 874.412371][T19718] kasan_save_free_info+0x3b/0x60 [ 874.412395][T19718] __kasan_slab_free+0x5f/0x80 [ 874.412426][T19718] slab_free_after_rcu_debug+0x10c/0x300 [ 874.412454][T19718] rcu_core+0x79c/0x15f0 [ 874.412481][T19718] handle_softirqs+0x219/0x950 [ 874.412518][T19718] __irq_exit_rcu+0x109/0x170 [ 874.412548][T19718] irq_exit_rcu+0x9/0x30 [ 874.412578][T19718] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 874.412615][T19718] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 874.412639][T19718] [ 874.412646][T19718] Last potentially related work creation: [ 874.412653][T19718] kasan_save_stack+0x33/0x60 [ 874.412683][T19718] kasan_record_aux_stack+0xa7/0xc0 [ 874.412707][T19718] kmem_cache_free+0x15e/0x770 [ 874.412735][T19718] __sk_destruct+0x64c/0xbc0 [ 874.412760][T19718] sk_destruct+0xc2/0xf0 [ 874.412787][T19718] __sk_free+0xf4/0x3e0 [ 874.412813][T19718] sk_free+0x6a/0x90 [ 874.412854][T19718] smc_release+0x41d/0x620 [ 874.412883][T19718] __sock_release+0xb3/0x270 [ 874.412914][T19718] sock_close+0x1c/0x30 [ 874.412954][T19718] __fput+0x402/0xb70 [ 874.412974][T19718] task_work_run+0x150/0x240 [ 874.412997][T19718] exit_to_user_mode_loop+0xfb/0x540 [ 874.413023][T19718] do_syscall_64+0x4ee/0xf80 [ 874.413042][T19718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.413065][T19718] [ 874.413070][T19718] The buggy address belongs to the object at ffff88805c2a9900 [ 874.413070][T19718] which belongs to the cache INET_SMC of size 3024 [ 874.413089][T19718] The buggy address is located 2752 bytes inside of [ 874.413089][T19718] freed 3024-byte region [ffff88805c2a9900, ffff88805c2aa4d0) [ 874.413113][T19718] [ 874.413119][T19718] The buggy address belongs to the physical page: [ 874.413130][T19718] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805c2a9900 pfn:0x5c2a8 [ 874.413151][T19718] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 874.413169][T19718] memcg:ffff8880794d5201 [ 874.413179][T19718] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 874.413199][T19718] page_type: f5(slab) [ 874.413219][T19718] raw: 00fff00000000040 ffff88814d148640 dead000000000122 0000000000000000 [ 874.413241][T19718] raw: ffff88805c2a9900 00000000800a0007 00000000f5000000 ffff8880794d5201 [ 874.413263][T19718] head: 00fff00000000040 ffff88814d148640 dead000000000122 0000000000000000 [ 874.413285][T19718] head: ffff88805c2a9900 00000000800a0007 00000000f5000000 ffff8880794d5201 [ 874.413307][T19718] head: 00fff00000000003 ffffea000170aa01 00000000ffffffff 00000000ffffffff [ 874.413328][T19718] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 874.413342][T19718] page dumped because: kasan: bad access detected [ 874.413354][T19718] page_owner tracks the page as allocated [ 874.413362][T19718] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6251, tgid 6245 (syz.0.67), ts 129065958433, free_ts 129050557565 [ 874.413403][T19718] post_alloc_hook+0x1af/0x220 [ 874.413427][T19718] get_page_from_freelist+0xd0b/0x31a0 [ 874.413453][T19718] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 874.413481][T19718] alloc_pages_mpol+0x1fb/0x550 [ 874.413520][T19718] new_slab+0x2c3/0x430 [ 874.413541][T19718] ___slab_alloc+0xe18/0x1c90 [ 874.413563][T19718] __slab_alloc.constprop.0+0x63/0x110 [ 874.413587][T19718] kmem_cache_alloc_noprof+0x44d/0x770 [ 874.413614][T19718] sk_prot_alloc+0x60/0x2a0 [ 874.413633][T19718] sk_alloc+0x36/0xe30 [ 874.413658][T19718] inet_create+0x3a1/0x1040 [ 874.413685][T19718] __sock_create+0x339/0x8a0 [ 874.413705][T19718] __sys_socket+0x14d/0x260 [ 874.413727][T19718] __x64_sys_socket+0x72/0xb0 [ 874.413751][T19718] do_syscall_64+0xcd/0xf80 [ 874.413774][T19718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.413796][T19718] page last free pid 5202 tgid 5202 stack trace: [ 874.413809][T19718] __free_frozen_pages+0x7df/0x1170 [ 874.413830][T19718] __put_partials+0x130/0x170 [ 874.413854][T19718] qlist_free_all+0x4c/0xf0 [ 874.413882][T19718] kasan_quarantine_reduce+0x195/0x1e0 [ 874.413912][T19718] __kasan_slab_alloc+0x69/0x90 [ 874.413944][T19718] kmem_cache_alloc_noprof+0x25e/0x770 [ 874.413970][T19718] getname_flags.part.0+0x4c/0x550 [ 874.413996][T19718] __x64_sys_unlink+0xb0/0x110 [ 874.414015][T19718] do_syscall_64+0xcd/0xf80 [ 874.414035][T19718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.414057][T19718] [ 874.414063][T19718] Memory state around the buggy address: [ 874.414074][T19718] ffff88805c2aa280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 874.414091][T19718] ffff88805c2aa300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 874.414108][T19718] >ffff88805c2aa380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 874.414120][T19718] ^ [ 874.414133][T19718] ffff88805c2aa400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 874.414150][T19718] ffff88805c2aa480: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 874.414164][T19718] ================================================================== [ 874.414177][T19718] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 874.414195][T19718] CPU: 0 UID: 0 PID: 19718 Comm: syz.7.2666 Tainted: G U L syzkaller #0 PREEMPT(full) [ 874.414231][T19718] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 874.414241][T19718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.414256][T19718] Call Trace: [ 874.414266][T19718] [ 874.414275][T19718] dump_stack_lvl+0x3d/0x1f0 [ 874.414314][T19718] vpanic+0x640/0x6f0 [ 874.414338][T19718] panic+0xca/0xd0 [ 874.414360][T19718] ? __pfx_panic+0x10/0x10 [ 874.414390][T19718] check_panic_on_warn+0xab/0xb0 [ 874.414415][T19718] end_report+0x107/0x160 [ 874.414450][T19718] kasan_report+0xee/0x110 [ 874.414486][T19718] ? fbcon_prepare_logo+0xa03/0xc70 [ 874.414525][T19718] kasan_check_range+0x100/0x1b0 [ 874.414551][T19718] __asan_memcpy+0x23/0x60 [ 874.414579][T19718] fbcon_prepare_logo+0xa03/0xc70 [ 874.414609][T19718] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 874.414651][T19718] fbcon_init+0xda0/0x1930 [ 874.414682][T19718] visual_init+0x320/0x620 [ 874.414711][T19718] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 874.414751][T19718] store_bind+0x61d/0x760 [ 874.414786][T19718] ? sysfs_file_kobj+0xe4/0x290 [ 874.414809][T19718] ? __pfx_store_bind+0x10/0x10 [ 874.414841][T19718] dev_attr_store+0x58/0x80 [ 874.414874][T19718] ? __pfx_dev_attr_store+0x10/0x10 [ 874.414907][T19718] sysfs_kf_write+0xf2/0x150 [ 874.414931][T19718] kernfs_fop_write_iter+0x3af/0x570 [ 874.414967][T19718] ? __pfx_sysfs_kf_write+0x10/0x10 [ 874.414992][T19718] iter_file_splice_write+0xa24/0x12b0 [ 874.415038][T19718] ? __pfx_iter_file_splice_write+0x10/0x10 [ 874.415079][T19718] ? __pfx_copy_splice_read+0x10/0x10 [ 874.415121][T19718] ? __pfx_iter_file_splice_write+0x10/0x10 [ 874.415158][T19718] direct_splice_actor+0x192/0x6c0 [ 874.415195][T19718] splice_direct_to_actor+0x345/0xa30 [ 874.415232][T19718] ? __pfx_direct_splice_actor+0x10/0x10 [ 874.415271][T19718] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 874.415311][T19718] do_splice_direct+0x174/0x240 [ 874.415346][T19718] ? __pfx_do_splice_direct+0x10/0x10 [ 874.415381][T19718] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 874.415418][T19718] ? rw_verify_area+0xcf/0x6c0 [ 874.415450][T19718] do_sendfile+0xb06/0xe50 [ 874.415484][T19718] ? __pfx_do_sendfile+0x10/0x10 [ 874.415524][T19718] ? __x64_sys_futex+0x1e0/0x4c0 [ 874.415552][T19718] ? __x64_sys_futex+0x1e9/0x4c0 [ 874.415582][T19718] __x64_sys_sendfile64+0x1d8/0x220 [ 874.415606][T19718] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 874.415635][T19718] do_syscall_64+0xcd/0xf80 [ 874.415658][T19718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.415683][T19718] RIP: 0033:0x7f028118f7c9 [ 874.415701][T19718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.415724][T19718] RSP: 002b:00007f0281f55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 874.415747][T19718] RAX: ffffffffffffffda RBX: 00007f02813e6270 RCX: 00007f028118f7c9 [ 874.415764][T19718] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000004 [ 874.415778][T19718] RBP: 00007f0281213f91 R08: 0000000000000000 R09: 0000000000000000 [ 874.415794][T19718] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 874.415809][T19718] R13: 00007f02813e6308 R14: 00007f02813e6270 R15: 00007ffd11a7f658 [ 874.415833][T19718] [ 874.416452][T19718] Kernel Offset: disabled