last executing test programs: 3m16.814574417s ago: executing program 3 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x309, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 3m16.604946369s ago: executing program 3 (id=646): io_uring_setup$auto(0x9, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x7, 0xffffffffffffffff, [], {0xa, 0x6, 0x8c48, 0x298, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0xe, 0x1a7b870a, 0xa67, 0x8000f, 0x100000000}}) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x28c40, 0x0) socket(0x2b, 0x1, 0x0) socket(0xa, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) socketpair$auto(0x1000, 0x5, 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto_SECCOMP_MODE_FILTER(0x9, 0x2, 0x0, 0x9, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyq0\x00', 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000280)="13") mmap$auto(0xc64, 0x63fffffc, 0x1, 0x210, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sysfs$auto(0x7f, 0x0, 0x100000001) fsopen$auto(0x0, 0x1) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) write$auto(r2, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xbeP\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) close_range$auto(0x2, 0x8000, 0x0) 3m15.188041697s ago: executing program 3 (id=650): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1ffffffffffffd, 0x2020009, 0x5, 0xeb7, r0, 0x7ffc) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) r1 = io_uring_setup$auto(0x8, 0x0) io_uring_register$auto(r0, 0x0, &(0x7f0000000000), 0x8000000c) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xea5675296372b572, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="7600d13c3c8a829261d8c17d1d3fe634644f2dbb9e91b2c3af177557f50000004084443e1f5a7b8b38f58e584d89d4a93e4e62f18267a3d1a4cd31a0bf622ef7f9fcf1ec93c2510a5336ba6626f016f4e476b1aebfb4d5209a4d58e21ae84757c9efc2d065d0cc6a995e553417cc33aaeb37d211430e7d547b5f1a083aeef78578a4712a20657cb8857576e04150eb09344f6cd387e0ac70e94cdb6870"], 0x1ac}, 0x1, 0x0, 0x0, 0x41}, 0x4040004) socket(0x10, 0x2, 0x0) r2 = socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x74) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyx9\x00', 0x400, 0x0) mmap$auto(0xde, 0x2020009, 0x10000, 0xeb1, 0xfffffffffffffffa, 0x7ffffffffe) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0x20200, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8900, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4030ae7b, r3) r5 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r5, 0x0, 0x1, 0x1ff) 3m13.925473136s ago: executing program 3 (id=654): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x189281, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x109500, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0xaf1) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) unshare$auto(0x40000080) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r5}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_OVS_DP_CMD_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r4, 0x1, 0x60bd2d, 0x25dfdbfc, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004895}, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto(0x3, 0x0, 0x100000000) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) ioctl$auto(r6, 0x4b2f, r6) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/loop1/hctx0/cpu0/read_rq_list\x00', 0x2000, 0x0) mq_open$auto(0x0, 0xffff0000, 0xe2, &(0x7f0000000100)={0x1, 0xfffffffffffffffd, 0x5, 0x9}) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, r0, 0x8000) unshare$auto(0x40000080) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) 3m11.525652114s ago: executing program 3 (id=662): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) tkill$auto(0x80000000000001, 0x7) r0 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci2/force_suspend\x00', 0x202002, 0x0) mmap$auto(0x9, 0xdd, 0xffff, 0x19, r0, 0x10001) 3m11.031840479s ago: executing program 3 (id=663): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x280, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x109500, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0xaf1) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) unshare$auto(0x40000080) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r5}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_OVS_DP_CMD_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r4, 0x1, 0x60bd2d, 0x25dfdbfc, {0x2, 0x0, 0x9eff}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004895}, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) ioctl$auto(r6, 0x4b2f, r6) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/loop1/hctx0/cpu0/read_rq_list\x00', 0x2000, 0x0) mq_open$auto(0x0, 0xffff0000, 0xe2, &(0x7f0000000100)={0x1, 0xfffffffffffffffd, 0x5, 0x9}) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, r0, 0x8000) unshare$auto(0x40000080) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) unshare$auto(0x40000080) 3m10.397941073s ago: executing program 32 (id=663): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x280, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x109500, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0xaf1) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) unshare$auto(0x40000080) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r5}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_OVS_DP_CMD_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r4, 0x1, 0x60bd2d, 0x25dfdbfc, {0x2, 0x0, 0x9eff}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004895}, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) ioctl$auto(r6, 0x4b2f, r6) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/loop1/hctx0/cpu0/read_rq_list\x00', 0x2000, 0x0) mq_open$auto(0x0, 0xffff0000, 0xe2, &(0x7f0000000100)={0x1, 0xfffffffffffffffd, 0x5, 0x9}) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, r0, 0x8000) unshare$auto(0x40000080) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) unshare$auto(0x40000080) 8.080898297s ago: executing program 2 (id=1267): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0x9, 0x1009b72, 0x2, 0x8000) mprotect$auto(0x500, 0x806121, 0x6) 7.312763885s ago: executing program 2 (id=1269): ioctl$auto_SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000000)="a5cd07711dd7d0d318ab9fc4abc17932e07b6e97dd8f9dab1d54836f7d819ae636b6add005946bc41d918ad490d55389b990c8fc09a9faece1002aaf0d408f3a0d4ea794ebb8e73810996ee8537f2f22aff666623920203b7f24391e23b9431472cc9ba7") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x309, 0x70bd2d, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$auto_NFSD_CMD_VERSION_GET(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x404008c}, 0x80000) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000480), r0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000027c0)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4802) r4 = socket(0xa, 0x2, 0x73) capset$auto(&(0x7f0000000f00)={0xfffffff3}, &(0x7f0000000f40)={0x2, 0xb0, 0x9}) r5 = io_uring_setup$auto(0x9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r6, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="2400000057fd3cc102b2aeebe18d3dfaf508248058be1e4e2013e3fcf3264e1e3558fbe818a32b27a4603c2e85f91a8e01e68793efb9525fceb003caeee3e4332cddf7c2fbc306255106564aaec9bfd12e5c8d22956cea6f57f160d8f0a5360b35b1f09dcea131d7841df4522df3ee554558f1eaba1da69f8ec7b96bf241133334e55831276a67f666245a4296f7feeb684be0fb8559f594328b5bb0626566d62852a1f372822e9a", @ANYRES16=r7, @ANYBLOB="230027bd7000fcdbdf2509000000040003800400028008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) close_range$auto(0x2, r5, 0x0) setsockopt$auto_SO_BINDTOIFINDEX(r4, 0x6, 0x3e, &(0x7f0000000080)='/dev/sda1\x00', 0xac8) openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats_csv\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$auto_thermal(0x0, r5) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x50, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_THRESHOLD={0xc, 0x18, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @fd=r4}]}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0xffffffff}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0x1}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x46a}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x1000}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x1ff}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x34}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20044894) shmctl$auto_SHM_LOCK(0xfffffffa, 0xb, &(0x7f0000000280)={{0x800000, 0xee00, 0x0, 0x400, 0x9, 0x0, 0x9}, 0x200, 0x6a22, 0x7fffffffffffffff, 0x431, @raw=0x8, @raw=0x81, 0x3, 0x0, &(0x7f0000000140)="acd9f5866c1854b936ddb8193b9cc5b8a8e7a4ba7abbeaffc2603e29137c8861b22c961f559287697bca4b73ae2e0df1ea112e9bdaa1c1723e44324baa7b67381620970c3ed0e20368842d9b07b76f84617ddd4275743604dd34126b7cb9a4afb46969f7c6c34dedf784eb8dd411dac661f0cb9cdc5320cccf54f497eff7c763b47565b2f0dedb596a076b7a13abc0b56fd6916765c6cb499860e87b2591ae98742367ab954ea81593e96237f6656b7009768b858a690ea36bf06e8766339e04053cde38694e40024bba7ea3c6d4c0380531a0087df5a0faa7f439d4a2feb730958dbc24a7445a638fe8ba2ad492", &(0x7f0000000240)="1ca8f27233ed28113301765dd500c9993c3748c49ba34af58edbeb549954d3862cfc9bd3f1e7b62c6058653f9df3ac2aee4215eac911558d"}) r10 = semctl$auto_GETPID(0x8, 0xffff8000, 0xb, 0x7) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000d40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r11, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_PBSS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xf5678f2ed6e21439}, 0x40000004) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r0, &(0x7f0000000c80)={&(0x7f0000000100), 0xc, &(0x7f0000000c40)={&(0x7f00000004c0)={0x778, r8, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_THRESHOLD={0x5c7, 0x18, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @uid=r9}, @nested={0x6d, 0x14d, 0x0, 0x1, [@generic="0ac307885c66cf14dd0c9aac1e1b3b4de2bf914543ba1b9c5110e9005aaa3049ba7a0dfed924622e926cd8dcfaa326aa5b989c87f4e5f32fedd036b8905fa6953087af3b1bee5c7900643b5edde404cb58672c9564f7c3ff4ceea3dc61ee9acb01", @nested={0x4, 0xe3}, @nested={0x4, 0x113}]}, @nested={0x71, 0xeb, 0x0, 0x1, [@nested={0x4, 0x7c}, @nested={0x4, 0xf9}, @typed={0x4, 0x85}, @typed={0x14, 0x15f, 0x0, 0x0, @ipv6=@remote}, @generic="c7aba5b4bc28e61112b2037d89a806441c9f5422f8702432a96b0168943ce160f26cc56cf9b05c6fb505e887d6e0900b63a0f4e384a86e7695d403ced5c54c77cd5d7c41eab5ad6161", @nested={0x4, 0x744}]}, @nested={0x16d, 0x80, 0x0, 0x1, [@typed={0x5, 0xc4, 0x0, 0x0, @str='\x00'}, @generic="9257b68d256dbbd7c69a706e55e1196756", @generic="1011fbd323ea49fb4e641293d6387ea577099d9a773fe05ffb166c85af1a31d09d34854cc323dfec2967acd44fe4027581ef411af4a50e24f4b8699f7544d5038d1011d4999e77a439eb5cbe32ee3ba624594a60cc41650a555faf8f7e4badcb03e3f30ec6f5bea41239bbe2e5d1e3fd4e05bb8f5aa297dcbc91859fb8f234ff18aaddabffa10b202c315d9c983d6d8b2c14f7b3a40688c0fd766110e1d54fa896879cdf9632992d31b68d10bd82dd28d18884453842f39bb43dfb32ba7b482939543431f7320e2323d25654d4e5cb99fcc9b1c4f0cd9a3640ce13bd18ed908b1a1f612db5be", @nested={0x4, 0xd6}, @typed={0x8, 0x12b, 0x0, 0x0, @pid=r10}, @generic="d95bffbfb1f174cc88369be2dd315b7cb00c006de0594a7b8b18418325e8850d7e953f89cff20bacd01a8bc90fd9993d11c5ef2230d4eb6b3415bf4def87fbf0a59d26ba9b17f207fe8c86e0c5c305645643028bf06de579cc210b0f3643"]}, @nested={0x10, 0xfb, 0x0, 0x1, [@typed={0x5, 0x3d, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x3e}]}, @typed={0xbf, 0x12, 0x0, 0x0, @binary="dfd17ec89539d37ef27a8f63128233f92df0884b837867014b666710fded4b5818117e5f1d821cdfd7acee360a34e50857516f73a041e5511812c60a5b73787ebf8081cd6c7b12cdf222b716b0f8ec4bae603835ba37ae79f25548d5908b9eec92c9312e579317eba9ac825d4c895d26ea67e384343e66101d9c304c394eaf50abf2160552ca97c0f45d3466c4db1170db545934fb234b68bd9bd2a0e3f8a6d2e0857f30198bf252647f48ee1f2b2c453152bbfb7c2fe8e3373983"}, @generic="1abd69119c26fd1fa523007bc3c9b2a5223e82ad516dcf32152fc32b80de95107299d0e44d71828af1ffdc55469285478873215e9cd54f45886d4d80e9defa5dbfc5ba51cbf9158a86f04e93a9b7c1068d9c81ab88489a73b01ea19dce6519ca10edd6503f07c1a4e34224a2838d044b4d109609fb2e1b81e2cc1b6867d07e46c5dd9b8897f48957a1d3c480bc835a530e291855085aa8ff8c4fe9cc3e08aacd8b880abd3f7ce6bce5f0fd138cbd5868daf36a838cc40e1db7d0a62fa2dd310cb601e04de60257ddb7d2711a4c0cc83e3c7d3124b3f84d7f5ab1be9d0aa0e9d1307e847fd520be2ceabee7a9fc87a12e4a919b", @generic="5cea0b1e6fea9438223e1fd7abd095b3186cf0975da45477e2ee68e745a0ac7e042f7b22d30d7b31a90cf09ec99befd593b7b822ae596b09ae881b1e6aeb7016805c232f11a14469c25a32f3a8361ee9c5d6407812eba7a47a114fc6c446d7acbed98fea47929634a72eeb0668a3b7987ede0d74f2abe4f9d53e1905f92dde24ea9c8c7f1f17b2863f74df9a9b97c0a33fe49577593b2fd7549cdbbd5f34d1e0157050d4cdebc377632bd2d7be5229874d228ef0616c003736", @generic="0b822441c84c24f5eeeb5ee4d66ae63a10ed9f6c9cbb0ceedada15ab35827b2aa12133371b69a4c22ee493cbcb49bf09e9ac3781eb6f377162b689554f4a0a6539bb2e4e121375bf4f7248e81a6b5f78e92e929362086d696af947bb238922a40bea37a6d1b49c3cd1ab54a523d4056d3910376c736264e1e7ae1eec0cfe65259aece657922f8a5906a6ff3dea34084b38f5ddc27b00a4124f3ccd899a15162e70d71e0120fe5a8aceca1ca49794cfb9d7606dd5cc64fc90660b5b48daca6c6eb4ba1086cb930dd1a0728a7a0947d8e9ea469e61aedc9b", @typed={0x14, 0xad, 0x0, 0x0, @ipv6=@mcast1}]}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x7}, @THERMAL_GENL_ATTR_THRESHOLD={0x18c, 0x18, 0x0, 0x1, [@nested={0x188, 0x49, 0x0, 0x1, [@typed={0x8, 0x9f, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x36, 0x0, 0x0, @fd=r0}, @generic="30237a7c440c1cbaed7e87285642ab93f1fa6017b23915bd8fbc3d6843ea68ed1fda73d75ef207df8077be203ea1bf3423dbd214227938140af80473d2db30a150f45ecafb75f3a1b01ad813980dd678c8da8a02f2f2ed8e8488870d571eb71ce35f52", @nested={0x4, 0x134}, @typed={0x8, 0xcd, 0x0, 0x0, @uid}, @generic="4ab36af730f73adf18a1087233dc7229a7581b4c8259066f7482722bae5f4af8b7d710be161304af5b9f82f6e0648619002fcdb7bf4c831a2a2ddf910a530662cb18f1b13129877954020f67208d3ed8f5cf79b2de9647bb00612eeef35e31c0070b372f6fb79be18f5cbd09b3edadb80cfb43042c23252a08f8284ab5f2eae98366a2693ce2c96ef4f4233e76d808469e52c8a2b7a5d3bd20b8fa3c3ce44beb480dcbadaed2597311421a", @nested={0x4, 0x116}, @nested={0x4, 0x15f}, @generic="d368296e7ebcce4904b9f00222f0fb23d2c8ddbd622a49666c0a709e38b11dd81e62e55cead6a16982a9302b675518423040b30e30e9437e290b3db18749baa352bc8becb38d4685151fd9abea08c1abacaf"]}]}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0x5d6}]}, 0x778}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r12 = creat$auto(&(0x7f0000000080)='./file0\x00', 0x5) ioctl$auto_SNDCTL_DSP_GETIPTR(r12, 0x800c5011, &(0x7f00000000c0)="13e1877fb253b3d997e65d7337e57b52be5d5ca439b81695253a55c4f870334238fec46a17c0f83ad95516873fc8ca2ed459216452") 7.117437296s ago: executing program 2 (id=1271): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x6) symlink$auto(0x0, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x200, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = socket(0x1, 0x80003, 0x3ff) setsockopt$auto(r0, 0x107, 0xc, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) socket(0x11, 0x80003, 0x300) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)=@test={0xffffffffffffffff, 0x2, 0xd25e, 0x7, 0x85a, 0x7f, 0xffff, 0xffffffff, 0x10, 0xfffffff9, 0x4c, 0x8c8, 0x8, 0x5, 0x4}, 0x67f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/bluetooth/hci5/rfkill30/persistent\x00', 0x82d00, 0x0) lseek$auto(0x3, 0x0, 0x1) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigqueueinfo$auto(r2, 0x29a6f4b4, &(0x7f00000000c0)={@_si_pad}) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x80, &(0x7f0000000300)='\x0fbi\x1bay3\x1e\xc1\xe1U\xb1\xb9s\'\x9ad\t\x84\x1d\x87\x13<\x01\xc4c\xd3\x1c\x88\xa8\x1d\xb9\xbf \x85)\xca\x92\t\xa4\x8a\x89\xd0%C\vhDS\x16\x9e\xc2\xedewrL\xb8\x80\xc2\x862],\x9e\x13\xc7\x953\x11\xb7\xd56\xd3D\xbd|k\xdf~\xd2\xf7\xec\x93\xee\xde\xcd\x95A1Ec\t\xfc@\xa1e2\xfd\xea;=\xa3\x1c\x80/\x9d\x14\x11g\x05\xcc\xc7\x03\x91\xd9yb\x88\x01S\x9e\x8f\xbdW\x9c\xa3\xad-\xbe\xe7\xae\x7fN\x8f\xa6\xc1:\ft?\x97\xaf\xb1\x83M\xce\xc6\xd1v\xdf\xec\xce\xb5\xcdL0\xb9`\x0f\x8e\xa3\xf4\xbby\xc0\f+J\x0f\xcd\x1a\x98', 0xfffffffb) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) shmdt$auto(0x0) 4.354061985s ago: executing program 0 (id=1277): mmap$auto(0x7f, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x2, 0x500000000, 0x2, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vivid.0/video4linux/video70/dev\x00', 0x2002, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup$auto(0x401, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@token_create={0xa, 0xffffffffffffffff}, 0x6) r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_qrtr_tun_ops_tun(r2, 0x0, 0x0) mlockall$auto(0x7) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd7, 0x3, 0xfffff004) io_uring_setup$auto(0x9, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) write$auto(r0, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xffffffffffffff5a, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf25300000000500a20004000000"], 0x1c}}, 0x20000085) process_vm_writev$auto(0x0, &(0x7f0000000280)={0x0, 0x600000000}, 0x1, &(0x7f0000000340)={0x0, 0x9249}, 0x8, 0x0) sendfile$auto(r0, r0, 0x0, 0x8000) 3.706707329s ago: executing program 2 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r2 = open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) unlink$auto(&(0x7f0000000000)='./file0\x00') sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x168, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x12}]}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb5c}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0x48001) ioctl$auto_BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000200)=0x79) 3.492121892s ago: executing program 1 (id=1281): ioctl$auto(0x4000000000000c8, 0x401054d6, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000380)={{0x3, 0x1}, {0x0, 0x6}}, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7f, 0x9) mmap$auto(0x0, 0x2020009, 0x100000005, 0xeb2, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/024/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0xc0105502, r0) 3.187614034s ago: executing program 1 (id=1283): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r1) sendmsg$auto_SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x30000, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0xb, 0x1, 'dummy0\x00'}, @SMC_PNETID_ETHNAME={0xb, 0x2, 'dummy0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) bind$auto(0x3, 0x0, 0x6d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0xffffffffffffffff, &(0x7f0000000080)={@siginfo_0_0={0x4, 0xe70, 0x9}}, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) madvise$auto(0x0, 0x2000048080000000, 0xd) socket(0x2, 0x801, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000001f00), 0x101002, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)=@bpf_attr_1={r4, 0x21f, @next_key=0x2f17, 0xff}, 0x6) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r6, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 3.053307285s ago: executing program 0 (id=1284): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x5000000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x4, 0x7, 0x3, 0x1d, 0xffffffffffffffff, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr5\x00', 0x0, 0x0) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4008890) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r1, r3, 0x0, 0x1000200) r4 = socket(0x11, 0x80003, 0x300) recvmmsg$auto(r4, 0x0, 0x10001, 0x0, 0x0) mount$auto(0x0, 0x0, 0x0, 0xf, 0x0) getdents64$auto(r1, &(0x7f00000000c0)={0x8b7, 0x10001, 0xf, 0x93, "98926d09103960d20df0ba9d16ae893e3741690ae4481076201fa4bb8b303e86fa9a71398cdbf8d199433c6fb654c503820757f8ef95685067a283853b1f19944e9c9c2097c83d869e74f55c5d73680cacbc7dd3f4a914610eb6d726118c6a6bed8695427da3d7"}, 0xa224) madvise$auto(0x3, 0x6, 0x2000015) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000039, 0x0) r5 = fsopen$auto(0x0, 0x1) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsconfig$auto(r5, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 2.927682326s ago: executing program 4 (id=1285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0xb0}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x38}}, 0x24048084) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x22000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pipe2$auto(0x0, 0x80) r2 = prctl$auto_PR_SET_MM_START_DATA(0x1, 0x3, 0x0, 0x7, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') pkey_mprotect$auto(0x5, 0x10000, 0x5c, 0x2) setns(r4, 0x0) mmap$auto(0x20000, 0x202000b, 0x9c, 0x13, r2, 0x61db) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x601, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(r2, 0x0, 0x1006d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x3) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x5, 0x6, 0x9) bind$auto(r4, &(0x7f0000000080)=@nl=@unspec, 0x5) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r6) sendmsg$auto_NL80211_CMD_SET_STATION(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="000027bd7a00ffdbdf25120000007200ac008301d097cad41fb94bed58a942b6a5721aed3ac377a0badbd68ff41ffe52beb2fb2dc9251f16cde9b7657cb2e0b5f96aa15dded41ac4a9370cf778a07a4aea55b8417a2717949f66b20d6c546aa146e1e0ea8e26695e247dffcf14545b4c88829e6200000c009900ff00"/142], 0x94}, 0x1, 0x0, 0x0, 0x81}, 0x4000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) 2.660411207s ago: executing program 2 (id=1286): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x1000, 0x1c9}, 0x2, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x820, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x4, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbf7, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c840) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000001100)=""/4106, 0x100a) sendfile$auto(r5, r5, 0x0, 0x10000800000003) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff3, 0x45a, 0x0, 0x0}) r8 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xff) fsetxattr$auto(r8, &(0x7f0000000280)='/dek\x85bus/usb/003/001\x00', &(0x7f00000001c0)="d9f6fd8f976809ec5affb5a0a3322d0a082b2b685a8e624d23fefa5ebd13269c7ed4f2a00da29f085217b737337fa6cb2a29ec02ecccc25406c6f6e50cac197d4e3988d74810ca0710cabbdde584064cff537696ffe35f24839c44e41cce1f19fe30c1", 0xfffffffffffffff7, 0x91d) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) 2.213957297s ago: executing program 1 (id=1287): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x40a02, 0x0) r1 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x400080, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x202, 0x26) brk$auto(0x7fffffffafff) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)=@bpf_attr_4={0x0, r2, 0x200009d, r1}, 0x3ff) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0xa, 0xe, 0x0) process_madvise$auto_MADV_RANDOM(r3, &(0x7f00000002c0)={&(0x7f0000000240)="7ff300bc0660abb9c4fb37810ab691b34d598e077424b7a2b816087fd27f739ef7663e2363eaa0fa339807b382bd339308332ec15171ab42357daeecb2a56b3f4666441820272164b8f30cb1c96c1308c731517495371891d18b755e027e", 0x6c000603}, 0x8000008, 0x1, 0x7) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r4, 0x8000) r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r5, 0x0, 0xffffff7f, 0x8000000000009) read$auto_mon_fops_text_t_mon_text(r5, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r6, 0xae03, 0xb9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socket(0x27, 0x3, 0x40007) r7 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r8, 0xb) fallocate$auto(0xffffffffffffffff, 0x100, 0x5, 0x200) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0xe00, 0x87, 0x8, 0x102}) 1.983042669s ago: executing program 4 (id=1288): mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sysfs$auto(0x2, 0x100000000000036, 0x800) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0xffff29c4, 0xfffffffffffffffd}, {0x103, 0x1, 0x55, 0x82, 0x8000004, 0x1a7b870a, 0x76c2, 0x0, 0x2}}) sysfs$auto(0x0, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0x2020006, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x6, 0x1, 0x106) socket(0x2c, 0x1, 0x6) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0xc0402, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) write$auto(0xffffffffffffffff, &(0x7f0000000340)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\xff\xcf\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x\x00\x80\x00\x00\x00\x00\x00\x00-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\x9a\xc4\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44o\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\x03\x00@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xbb\x7f\xa5\x87\x02\x87\xbbR\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xcau6^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1Tz\xc1;Pw!\x8b\xf5{\xc7Zf/7\xf7h\xe2f\x1d\xa2\x11U\x91v\xf8Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VEv\xeb>\xffY\xe7\xc7\xe1,\xe7`\xe3\xc4\x95\xe52\x9d\x1e`#\xd8\xd7M\xc7\x15\x00\x00\x00\x00\x00\x00E\xd0e\x0eM\xa9Q\xac\x0eX]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x00'/551, 0xcd) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x28102, 0x0) lseek$auto(r1, 0x7, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010008000d0000000100000000000020000000000000"], 0x1c}}, 0x80) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="60050000", @ANYRES32=r2, @ANYBLOB="a2ed79076256ccbf2f31aacfd32ca9a8005456fa9bb7d8510460800397ece4f254370707ca71958cd2e9c3ab30b2c8af80ec71337288a8b314b95a0baf0198814a3147902c04447902c06bbae20d53318ab8cb4d20efa648f37007e7d8ac000764640221fd06a30c644d3fb8481bdf4cbf8a1b8b3a2303983c01568008007c00050000002d018c8003b00e9304c93d171002f9d9c9324235ba16f63b5405d5a466eece4a3a74c8f3ec8516d54fe7d520f6fba237b69048747ae18023e20800ad00e0000002f7c71ec5d07eeb3818d981bdc3260395c14ce3b0e9791f14ceb689f48031b0080310ffd0c2f756db03925c5842260c36b19dcbb157ae0cd6a7de496b5f47f506a96244ad755d7cba4e90646394ddb0203277425c37c104f7510e983a476cc914a41adf9a944a644d0d0ea26e67b2bb766e41c21b007f9753c56dba32202757e5973fd8088cb09ea8bb5a2b9cb18cc2ee6c9ce80f25d8fd340111f595b51483d972c4245a7d42a0b2927c3b3f5bcc7f8d2e57948eb347637f980b2d1f5d9270d5b713fd5ad7b5ca87699c79923508e77140d229dfe7859369fb1ffd705448197f8b5c96eeae5f09c504006280000000e4004f8033001e800c0056000b0000000000000010a537eed747d7765a183ef3d77f0b4737e7ebae4b13eb5d1c465003ae2a9813890676000c00968004007f000400af808900cc8004003580d1882a0b8832f96e360c249c839a109132a47bfd587ba0181c17cc9bd7d558eaa635837e3d69293c337e7425f3ff8cd1fa22a83f84d5cf40f9e939a2e2e4d11c4ae52c1dc5a586e0dd9febaa5adf192f898a998036426d35b1f81a45bf34441d85875a2173ed18a541b5925685902aa32304f92b0544eeb4d0fe390e56da23f3270000001400790000000000000000000000ffffac1e0101cf016580ca345c8c2f6726c9f87606e96e9d7cf7bf8dcddd4028be6a4575d6ad4958fc2f75ef0615f955e68b6650bc4e1c402931a56602aac2ea3ebf79fe5edd15be2a9172bc87de42b75eb6613a2ef77f76b712b27aca5a0cbc43896de0471456e36bbbb20a64e1197e30b4ea76a7e39389dfeb14ff74260f549c30cfbdfd4fdd1cc4ece66d923213fe98225748c4d17ee3c23302a1fa38adde1eaec698eb4078808c68509f043c723d11b5057e8f6d8d3e9466b40ab6e0164d9bd9d19907401dbc69452e7a1c1036f6c78a6a651010992543bc1f5f4455f884d21d0c658dec56b959bcff55e3a9da5562bbb03dbf92dadef1445d921ec11e244a6313fb060252be5f3166b8638939f0715d07894a8e0bbf8f593d9d97ee8d562f1f46c920b0006a80f387bb8dd3407fe88e62f917f9c93e9e0de90500a4616a1ee295c437aa7d9d0e031503957268e8169f1d358fddc1a87116e32dc1cbfd0f9711ab0f6a6e22816a4d8b1fb5618efa9c3237aa6814fcd4ad55c430fb9b5ccf0d81b7ddc3599c66a0d7f77e447d9987c64fd3808dd0e3ad8d03e0a51a87aa4585ae33448340c1d58c544d61d2708d667dc543ae74b59c922ac22e77463d5a5c13a503ee7db7f19e34df1575a70f7ab2f959795f330000000004003f8014002800fe8000000000000000000000000000bb26f292b007b4f086e248ea9a393d5f28d136fec95027752c7414a5697dbb8e278261e9ec5770d610bef233d22608bc97fe9dc1bcc6542f194a40266a08", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0500290001000000"], 0x560}, 0x1, 0x0, 0x0, 0x8800}, 0x4040080) r4 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/current_tracer\x00', 0x40000, 0x0) read$auto_set_tracer_fops_trace(r4, 0x0, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) 1.665246897s ago: executing program 0 (id=1289): mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syslog$auto(0x3, &(0x7f00000001c0)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2b\xb7\a\xc5\xb2Tq\xad[\xa5\xc8\xf10\x9c\x03\x0e\xe4\xe1\xef\t\\:@\xbb6S\xea\xd4\xb3\b\b\x97\xbcw1\x95\xeb\x8a\x98\xcd\xbay\x80\n\xec\xd4\xe3I\x97', 0x9) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x400) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b46, 0x1) 1.559558068s ago: executing program 1 (id=1290): mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/eql/queues/tx-0/tx_timeout\x00', 0x1279c2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram12\x00', 0xa100, 0x0) sendfile$auto(0x3, r1, 0x0, 0x100400000000006) preadv$auto(r1, &(0x7f00000000c0)={0x0, 0x4008000}, 0x1d4, 0x6000000000f, 0x200000001) mmap$auto(0x0, 0x20009, 0xdf, 0xebe, r0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0xfffe) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x8000007b) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, 0x0) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty1\x00', 0x22080, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyta\x00', 0x48f40, 0x0) ioctl$auto(0x3, 0x402c542d, r4) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x23, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 1.378327595s ago: executing program 4 (id=1291): ioctl$auto_SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000000)="a5cd07711dd7d0d318ab9fc4abc17932e07b6e97dd8f9dab1d54836f7d819ae636b6add005946bc41d918ad490d55389b990c8fc09a9faece1002aaf0d408f3a0d4ea794ebb8e73810996ee8537f2f22aff666623920203b7f24391e23b9431472cc9ba7") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x309, 0x70bd2d, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$auto_NFSD_CMD_VERSION_GET(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x404008c}, 0x80000) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000480), r0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000027c0)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4802) r4 = socket(0xa, 0x2, 0x73) capset$auto(&(0x7f0000000f00)={0xfffffff3}, &(0x7f0000000f40)={0x2, 0xb0, 0x9}) r5 = io_uring_setup$auto(0x9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r6, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="2400000057fd3cc102b2aeebe18d3dfaf508248058be1e4e2013e3fcf3264e1e3558fbe818a32b27a4603c2e85f91a8e01e68793efb9525fceb003caeee3e4332cddf7c2fbc306255106564aaec9bfd12e5c8d22956cea6f57f160d8f0a5360b35b1f09dcea131d7841df4522df3ee554558f1eaba1da69f8ec7b96bf241133334e55831276a67f666245a4296f7feeb684be0fb8559f594328b5bb0626566d62852a1f372822e9a", @ANYRES16=r7, @ANYBLOB="230027bd7000fcdbdf2509000000040003800400028008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) close_range$auto(0x2, r5, 0x0) setsockopt$auto_SO_BINDTOIFINDEX(r4, 0x6, 0x3e, &(0x7f0000000080)='/dev/sda1\x00', 0xac8) openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats_csv\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r5) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r4, 0x0, 0x20044894) shmctl$auto_SHM_LOCK(0xfffffffa, 0xb, &(0x7f0000000280)={{0x800000, 0xee00, 0x0, 0x400, 0x9, 0x0, 0x9}, 0x200, 0x6a22, 0x7fffffffffffffff, 0x431, @raw=0x8, @raw=0x81, 0x3, 0x0, &(0x7f0000000140)="acd9f5866c1854b936ddb8193b9cc5b8a8e7a4ba7abbeaffc2603e29137c8861b22c961f559287697bca4b73ae2e0df1ea112e9bdaa1c1723e44324baa7b67381620970c3ed0e20368842d9b07b76f84617ddd4275743604dd34126b7cb9a4afb46969f7c6c34dedf784eb8dd411dac661f0cb9cdc5320cccf54f497eff7c763b47565b2f0dedb596a076b7a13abc0b56fd6916765c6cb499860e87b2591ae98742367ab954ea81593e96237f6656b7009768b858a690ea36bf06e8766339e04053cde38694e40024bba7ea3c6d4c0380531a0087df5a0faa7f439d4a2feb730958dbc24a7445a638fe8ba2ad492", &(0x7f0000000240)="1ca8f27233ed28113301765dd500c9993c3748c49ba34af58edbeb549954d3862cfc9bd3f1e7b62c6058653f9df3ac2aee4215eac911558d"}) r10 = semctl$auto_GETPID(0x8, 0xffff8000, 0xb, 0x7) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000d40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r11, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_PBSS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xf5678f2ed6e21439}, 0x40000004) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r0, &(0x7f0000000c80)={&(0x7f0000000100), 0xc, &(0x7f0000000c40)={&(0x7f00000004c0)={0x778, r8, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_THRESHOLD={0x5c7, 0x18, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @uid=r9}, @nested={0x6d, 0x14d, 0x0, 0x1, [@generic="0ac307885c66cf14dd0c9aac1e1b3b4de2bf914543ba1b9c5110e9005aaa3049ba7a0dfed924622e926cd8dcfaa326aa5b989c87f4e5f32fedd036b8905fa6953087af3b1bee5c7900643b5edde404cb58672c9564f7c3ff4ceea3dc61ee9acb01", @nested={0x4, 0xe3}, @nested={0x4, 0x113}]}, @nested={0x71, 0xeb, 0x0, 0x1, [@nested={0x4, 0x7c}, @nested={0x4, 0xf9}, @typed={0x4, 0x85}, @typed={0x14, 0x15f, 0x0, 0x0, @ipv6=@remote}, @generic="c7aba5b4bc28e61112b2037d89a806441c9f5422f8702432a96b0168943ce160f26cc56cf9b05c6fb505e887d6e0900b63a0f4e384a86e7695d403ced5c54c77cd5d7c41eab5ad6161", @nested={0x4, 0x744}]}, @nested={0x16d, 0x80, 0x0, 0x1, [@typed={0x5, 0xc4, 0x0, 0x0, @str='\x00'}, @generic="9257b68d256dbbd7c69a706e55e1196756", @generic="1011fbd323ea49fb4e641293d6387ea577099d9a773fe05ffb166c85af1a31d09d34854cc323dfec2967acd44fe4027581ef411af4a50e24f4b8699f7544d5038d1011d4999e77a439eb5cbe32ee3ba624594a60cc41650a555faf8f7e4badcb03e3f30ec6f5bea41239bbe2e5d1e3fd4e05bb8f5aa297dcbc91859fb8f234ff18aaddabffa10b202c315d9c983d6d8b2c14f7b3a40688c0fd766110e1d54fa896879cdf9632992d31b68d10bd82dd28d18884453842f39bb43dfb32ba7b482939543431f7320e2323d25654d4e5cb99fcc9b1c4f0cd9a3640ce13bd18ed908b1a1f612db5be", @nested={0x4, 0xd6}, @typed={0x8, 0x12b, 0x0, 0x0, @pid=r10}, @generic="d95bffbfb1f174cc88369be2dd315b7cb00c006de0594a7b8b18418325e8850d7e953f89cff20bacd01a8bc90fd9993d11c5ef2230d4eb6b3415bf4def87fbf0a59d26ba9b17f207fe8c86e0c5c305645643028bf06de579cc210b0f3643"]}, @nested={0x10, 0xfb, 0x0, 0x1, [@typed={0x5, 0x3d, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x3e}]}, @typed={0xbf, 0x12, 0x0, 0x0, @binary="dfd17ec89539d37ef27a8f63128233f92df0884b837867014b666710fded4b5818117e5f1d821cdfd7acee360a34e50857516f73a041e5511812c60a5b73787ebf8081cd6c7b12cdf222b716b0f8ec4bae603835ba37ae79f25548d5908b9eec92c9312e579317eba9ac825d4c895d26ea67e384343e66101d9c304c394eaf50abf2160552ca97c0f45d3466c4db1170db545934fb234b68bd9bd2a0e3f8a6d2e0857f30198bf252647f48ee1f2b2c453152bbfb7c2fe8e3373983"}, @generic="1abd69119c26fd1fa523007bc3c9b2a5223e82ad516dcf32152fc32b80de95107299d0e44d71828af1ffdc55469285478873215e9cd54f45886d4d80e9defa5dbfc5ba51cbf9158a86f04e93a9b7c1068d9c81ab88489a73b01ea19dce6519ca10edd6503f07c1a4e34224a2838d044b4d109609fb2e1b81e2cc1b6867d07e46c5dd9b8897f48957a1d3c480bc835a530e291855085aa8ff8c4fe9cc3e08aacd8b880abd3f7ce6bce5f0fd138cbd5868daf36a838cc40e1db7d0a62fa2dd310cb601e04de60257ddb7d2711a4c0cc83e3c7d3124b3f84d7f5ab1be9d0aa0e9d1307e847fd520be2ceabee7a9fc87a12e4a919b", @generic="5cea0b1e6fea9438223e1fd7abd095b3186cf0975da45477e2ee68e745a0ac7e042f7b22d30d7b31a90cf09ec99befd593b7b822ae596b09ae881b1e6aeb7016805c232f11a14469c25a32f3a8361ee9c5d6407812eba7a47a114fc6c446d7acbed98fea47929634a72eeb0668a3b7987ede0d74f2abe4f9d53e1905f92dde24ea9c8c7f1f17b2863f74df9a9b97c0a33fe49577593b2fd7549cdbbd5f34d1e0157050d4cdebc377632bd2d7be5229874d228ef0616c003736", @generic="0b822441c84c24f5eeeb5ee4d66ae63a10ed9f6c9cbb0ceedada15ab35827b2aa12133371b69a4c22ee493cbcb49bf09e9ac3781eb6f377162b689554f4a0a6539bb2e4e121375bf4f7248e81a6b5f78e92e929362086d696af947bb238922a40bea37a6d1b49c3cd1ab54a523d4056d3910376c736264e1e7ae1eec0cfe65259aece657922f8a5906a6ff3dea34084b38f5ddc27b00a4124f3ccd899a15162e70d71e0120fe5a8aceca1ca49794cfb9d7606dd5cc64fc90660b5b48daca6c6eb4ba1086cb930dd1a0728a7a0947d8e9ea469e61aedc9b", @typed={0x14, 0xad, 0x0, 0x0, @ipv6=@mcast1}]}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x7}, @THERMAL_GENL_ATTR_THRESHOLD={0x18c, 0x18, 0x0, 0x1, [@nested={0x188, 0x49, 0x0, 0x1, [@typed={0x8, 0x9f, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x36, 0x0, 0x0, @fd=r0}, @generic="30237a7c440c1cbaed7e87285642ab93f1fa6017b23915bd8fbc3d6843ea68ed1fda73d75ef207df8077be203ea1bf3423dbd214227938140af80473d2db30a150f45ecafb75f3a1b01ad813980dd678c8da8a02f2f2ed8e8488870d571eb71ce35f52", @nested={0x4, 0x134}, @typed={0x8, 0xcd, 0x0, 0x0, @uid}, @generic="4ab36af730f73adf18a1087233dc7229a7581b4c8259066f7482722bae5f4af8b7d710be161304af5b9f82f6e0648619002fcdb7bf4c831a2a2ddf910a530662cb18f1b13129877954020f67208d3ed8f5cf79b2de9647bb00612eeef35e31c0070b372f6fb79be18f5cbd09b3edadb80cfb43042c23252a08f8284ab5f2eae98366a2693ce2c96ef4f4233e76d808469e52c8a2b7a5d3bd20b8fa3c3ce44beb480dcbadaed2597311421a", @nested={0x4, 0x116}, @nested={0x4, 0x15f}, @generic="d368296e7ebcce4904b9f00222f0fb23d2c8ddbd622a49666c0a709e38b11dd81e62e55cead6a16982a9302b675518423040b30e30e9437e290b3db18749baa352bc8becb38d4685151fd9abea08c1abacaf"]}]}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0x5d6}]}, 0x778}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r12 = creat$auto(&(0x7f0000000080)='./file0\x00', 0x5) ioctl$auto_SNDCTL_DSP_GETIPTR(r12, 0x800c5011, &(0x7f00000000c0)="13e1877fb253b3d997e65d7337e57b52be5d5ca439b81695253a55c4f870334238fec46a17c0f83ad95516873fc8ca2ed459216452") 1.197346846s ago: executing program 0 (id=1292): mmap$auto(0x7f, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x2, 0x500000000, 0x2, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vivid.0/video4linux/video70/dev\x00', 0x2002, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup$auto(0x401, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@token_create={0xa, 0xffffffffffffffff}, 0x6) r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_qrtr_tun_ops_tun(r2, 0x0, 0x0) mlockall$auto(0x7) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd7, 0x3, 0xfffff004) io_uring_setup$auto(0x9, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) write$auto(r0, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xffffffffffffff5a, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf25300000000500a20004000000"], 0x1c}}, 0x20000085) process_vm_writev$auto(0x0, &(0x7f0000000280)={0x0, 0x600000000}, 0x1, &(0x7f0000000340)={0x0, 0x9249}, 0x8, 0x0) sendfile$auto(r0, r0, 0x0, 0x8000) 1.155361003s ago: executing program 2 (id=1293): r0 = prctl$auto(0x3c, 0x100000, 0xffffffffffffffff, 0xc9, 0xfffffffffffffff9) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000100)={0x8000000000000000, 0x80000001}) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x4d, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) r3 = socket(0xa, 0x1, 0x0) timer_create$auto(0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) sendfile$auto(r4, r3, 0x0, 0x3) prctl$auto(0x7, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x2) fcntl$auto(0xffffffffffffffff, 0x0, 0x0) statmount$auto(&(0x7f0000000000)={0x18, @inferred, 0x400000080000029, 0x100000001, 0x8}, 0x0, 0x207, 0x0) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, r0, 0x8003) mmap$auto(0x0, 0x40009, 0x6, 0x9b7f, 0x7, 0x28000) sysfs$auto(0x2, 0x4a, 0x0) r5 = socket(0x2, 0x5, 0x0) getsockopt$auto(r5, 0x84, 0x75, 0x0, 0x0) 1.132132592s ago: executing program 4 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f00000003c0)={0x0, 0xbc, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, r1, 0x701, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x300, 0x0, 0x800}, 0x10) 957.864083ms ago: executing program 4 (id=1295): socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x20000) r0 = io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x80, 0x8, 0x5, 0x5110, r0, 0x83ce) socket(0x2, 0x1, 0x106) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 514.647797ms ago: executing program 1 (id=1296): r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, 0x0) 373.955694ms ago: executing program 1 (id=1297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0xb0}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x38}}, 0x24048084) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x22000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pipe2$auto(0x0, 0x80) r2 = prctl$auto_PR_SET_MM_START_DATA(0x1, 0x3, 0x0, 0x7, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') pkey_mprotect$auto(0x5, 0x10000, 0x5c, 0x2) setns(r4, 0x0) mmap$auto(0x20000, 0x202000b, 0x9c, 0x13, r2, 0x61db) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x601, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(r2, 0x0, 0x1006d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x3) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x5, 0x6, 0x9) bind$auto(r4, 0x0, 0x5) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r6) sendmsg$auto_NL80211_CMD_SET_STATION(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="000027bd7a00ffdbdf25120000007200ac008301d097cad41fb94bed58a942b6a5721aed3ac377a0badbd68ff41ffe52beb2fb2dc9251f16cde9b7657cb2e0b5f96aa15dded41ac4a9370cf778a07a4aea55b8417a2717949f66b20d6c546aa146e1e0ea8e26695e247dffcf14545b4c88829e6200000c009900ff00"/142], 0x94}, 0x1, 0x0, 0x0, 0x81}, 0x4000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) 356.90693ms ago: executing program 4 (id=1298): mremap$auto(0x2, 0x500000000, 0x2, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@token_create={0xa, 0xffffffffffffffff}, 0x6) r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_qrtr_tun_ops_tun(r2, &(0x7f0000000300)="01000000d80746ebe4fa29705e2e6540f64b000003000000a7e9ce67feffffffb096b449", 0x24) mlockall$auto(0x7) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd7, 0x3, 0xfffff004) io_uring_setup$auto(0x9, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) write$auto(r0, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xffffffffffffff5a, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf25300000000500a20004000000"], 0x1c}}, 0x20000085) sendfile$auto(r0, r0, 0x0, 0x8000) 166.09008ms ago: executing program 0 (id=1299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0xfff0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, r1, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x30}}, 0x24048084) 0s ago: executing program 0 (id=1300): mmap$auto(0x3, 0x80002020009, 0x7, 0xfa, 0xffffffffffffffff, 0x400) setitimer$auto(0x10000, &(0x7f00000010c0)={{0x4, 0x8}, {0xfffffffffffffffe, 0x8}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x112, 0x80006) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sys/net/ipv6/conf/caif0/accept_dad\x00', 0x28283, 0x0) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001240)='/dev/ptyp8\x00', 0x30100, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000012c0)=ANY=[@ANYRES8=r0, @ANYRES8=r4, @ANYRESHEX=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$auto_SEG6_CMD_DUMPHMAC(r3, &(0x7f0000001040)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRES16=r3, @ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x1) sendfile$auto(r0, r0, 0x0, 0x80000000003) io_uring_setup$auto(0x59, &(0x7f0000001100)={0x80000000, 0xd, 0x1fc0, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x100006, 0x8, 0x29f, 0x100, 0x7f, 0x105, 0x6, 0x7f}, {0x100, 0x1, 0xb, 0x7, 0x1, 0x40, 0x3, 0x8, 0x100000000}}) mprotect$auto(0x200000000000, 0x806120, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x3, 0x2) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0xa10a) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): sys_unshare+0x10/0x10 [ 207.427511][ T7840] __x64_sys_unshare+0x31/0x40 [ 207.427527][ T7840] do_syscall_64+0x115/0x840 [ 207.427540][ T7840] ? clear_bhb_loop+0x40/0x90 [ 207.427558][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.427573][ T7840] RIP: 0033:0x7fcf2579de59 [ 207.427587][ T7840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.427602][ T7840] RSP: 002b:00007fcf26697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 207.427616][ T7840] RAX: ffffffffffffffda RBX: 00007fcf25a26090 RCX: 00007fcf2579de59 [ 207.427626][ T7840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 207.427634][ T7840] RBP: 00007fcf25833e6f R08: 0000000000000000 R09: 0000000000000000 [ 207.427643][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.427652][ T7840] R13: 00007fcf25a26128 R14: 00007fcf25a26090 R15: 00007fff58aeaed8 [ 207.427672][ T7840] [ 208.919796][ T7871] random: crng reseeded on system resumption [ 210.505999][ T7910] [ 210.692773][ T7912] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 211.487882][ T29] audit: type=1800 audit(1843104628.900:5): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.441" name="version" dev="configfs" ino=21386 res=0 errno=0 [ 212.158597][ T6378] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 212.370880][ T7950] smpboot: CPU 1 is now offline [ 212.554205][ T7963] FAULT_INJECTION: forcing a failure. [ 212.554205][ T7963] name failslab, interval 1, probability 0, space 0, times 0 [ 212.607904][ T7963] CPU: 0 UID: 0 PID: 7963 Comm: syz.2.447 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.607931][ T7963] Tainted: [L]=SOFTLOCKUP [ 212.607936][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 212.607945][ T7963] Call Trace: [ 212.607950][ T7963] [ 212.607956][ T7963] dump_stack_lvl+0x100/0x190 [ 212.607978][ T7963] should_fail_ex.cold+0x5/0xa [ 212.607997][ T7963] should_failslab+0xc2/0x120 [ 212.608016][ T7963] kmem_cache_alloc_noprof+0x91/0x6a0 [ 212.608034][ T7963] ? mas_preallocate+0x1105/0x14a0 [ 212.608064][ T7963] mas_preallocate+0x1105/0x14a0 [ 212.608085][ T7963] ? __lock_acquire+0x49f/0x1a40 [ 212.608106][ T7963] ? __pfx_mas_preallocate+0x10/0x10 [ 212.608130][ T7963] ? __asan_memset+0x23/0x50 [ 212.608144][ T7963] ? init_multi_vma_prep+0x33c/0x650 [ 212.608168][ T7963] commit_merge+0x3e3/0xbd0 [ 212.608193][ T7963] ? __pfx_commit_merge+0x10/0x10 [ 212.608214][ T7963] ? debug_check_no_obj_freed+0x31f/0x630 [ 212.608244][ T7963] vma_expand+0xac5/0xea0 [ 212.608270][ T7963] ? __pfx_vma_expand+0x10/0x10 [ 212.608292][ T7963] ? can_vma_merge_right+0x101/0x720 [ 212.608315][ T7963] ? __pfx_can_vma_merge_right+0x10/0x10 [ 212.608344][ T7963] vma_merge_new_range+0x516/0xc00 [ 212.608371][ T7963] ? __pfx_vma_merge_new_range+0x10/0x10 [ 212.608396][ T7963] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.608419][ T7963] __mmap_region+0xa86/0x2db0 [ 212.608445][ T7963] ? __pfx___mmap_region+0x10/0x10 [ 212.608465][ T7963] ? __pfx___might_resched+0x10/0x10 [ 212.608489][ T7963] ? __lock_acquire+0x49f/0x1a40 [ 212.608522][ T7963] ? __lock_acquire+0x49f/0x1a40 [ 212.608551][ T7963] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 212.608576][ T7963] ? rcu_is_watching+0x12/0xc0 [ 212.608592][ T7963] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 212.608606][ T7963] ? lockdep_hardirqs_on+0x78/0x100 [ 212.608658][ T7963] mmap_region+0x35d/0x620 [ 212.608673][ T7963] ? rcu_is_watching+0x12/0xc0 [ 212.608688][ T7963] ? __pfx_mmap_region+0x10/0x10 [ 212.608705][ T7963] ? cap_mmap_addr+0x4b/0x120 [ 212.608726][ T7963] ? bpf_lsm_mmap_addr+0x9/0x30 [ 212.608747][ T7963] ? security_mmap_addr+0x71/0x1e0 [ 212.608764][ T7963] ? __get_unmapped_area+0x255/0x3e0 [ 212.608785][ T7963] do_mmap+0xc63/0x12f0 [ 212.608807][ T7963] ? __pfx_do_mmap+0x10/0x10 [ 212.608825][ T7963] ? __pfx_down_write_killable+0x10/0x10 [ 212.608840][ T7963] ? __pfx_futex_wait+0x10/0x10 [ 212.608860][ T7963] vm_mmap_pgoff+0x29e/0x470 [ 212.608882][ T7963] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 212.608904][ T7963] ? __pfx_do_futex+0x10/0x10 [ 212.608921][ T7963] ksys_mmap_pgoff+0xe4/0x610 [ 212.608940][ T7963] ? __x64_sys_futex+0x358/0x4d0 [ 212.608955][ T7963] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 212.608973][ T7963] ? xfd_validate_state+0x129/0x190 [ 212.608992][ T7963] __x64_sys_mmap+0x125/0x190 [ 212.609011][ T7963] do_syscall_64+0x115/0x840 [ 212.609023][ T7963] ? clear_bhb_loop+0x40/0x90 [ 212.609041][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.609062][ T7963] RIP: 0033:0x7fbd5039de59 [ 212.609076][ T7963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.609090][ T7963] RSP: 002b:00007fbd512ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 212.609106][ T7963] RAX: ffffffffffffffda RBX: 00007fbd50625fa0 RCX: 00007fbd5039de59 [ 212.609116][ T7963] RDX: 0000000000000007 RSI: 0000000000040009 RDI: 0000000000000000 [ 212.609125][ T7963] RBP: 00007fbd50433e6f R08: 0000000000000007 R09: 0000000000028000 [ 212.609134][ T7963] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 212.609143][ T7963] R13: 00007fbd50626038 R14: 00007fbd50625fa0 R15: 00007ffcf9f3af98 [ 212.609163][ T7963] [ 217.880183][ T8042] FAULT_INJECTION: forcing a failure. [ 217.880183][ T8042] name failslab, interval 1, probability 0, space 0, times 0 [ 217.933357][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.3.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.933383][ T8042] Tainted: [L]=SOFTLOCKUP [ 217.933388][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 217.933398][ T8042] Call Trace: [ 217.933404][ T8042] [ 217.933410][ T8042] dump_stack_lvl+0x100/0x190 [ 217.933432][ T8042] should_fail_ex.cold+0x5/0xa [ 217.933450][ T8042] should_failslab+0xc2/0x120 [ 217.933471][ T8042] kmem_cache_alloc_noprof+0x91/0x6a0 [ 217.933489][ T8042] ? mas_preallocate+0x1105/0x14a0 [ 217.933510][ T8042] mas_preallocate+0x1105/0x14a0 [ 217.933530][ T8042] ? __lock_acquire+0x49f/0x1a40 [ 217.933552][ T8042] ? __pfx_mas_preallocate+0x10/0x10 [ 217.933575][ T8042] ? __asan_memset+0x23/0x50 [ 217.933589][ T8042] ? init_multi_vma_prep+0x33c/0x650 [ 217.933613][ T8042] commit_merge+0x3e3/0xbd0 [ 217.933638][ T8042] ? __pfx_commit_merge+0x10/0x10 [ 217.933658][ T8042] ? debug_check_no_obj_freed+0x31f/0x630 [ 217.933696][ T8042] vma_expand+0xac5/0xea0 [ 217.933721][ T8042] ? __pfx_vma_expand+0x10/0x10 [ 217.933744][ T8042] ? can_vma_merge_right+0x101/0x720 [ 217.933769][ T8042] ? __pfx_can_vma_merge_right+0x10/0x10 [ 217.933798][ T8042] vma_merge_new_range+0x516/0xc00 [ 217.933829][ T8042] ? __pfx_vma_merge_new_range+0x10/0x10 [ 217.933854][ T8042] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.933878][ T8042] __mmap_region+0xa86/0x2db0 [ 217.933904][ T8042] ? lock_acquire+0x1b9/0x370 [ 217.933924][ T8042] ? __pfx___mmap_region+0x10/0x10 [ 217.933946][ T8042] ? find_held_lock+0x2b/0x80 [ 217.933967][ T8042] ? __lock_acquire+0x49f/0x1a40 [ 217.934003][ T8042] ? __lock_acquire+0x49f/0x1a40 [ 217.934034][ T8042] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 217.934061][ T8042] ? rcu_is_watching+0x12/0xc0 [ 217.934077][ T8042] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 217.934092][ T8042] ? lockdep_hardirqs_on+0x78/0x100 [ 217.934144][ T8042] mmap_region+0x35d/0x620 [ 217.934159][ T8042] ? rcu_is_watching+0x12/0xc0 [ 217.934175][ T8042] ? __pfx_mmap_region+0x10/0x10 [ 217.934195][ T8042] ? cap_mmap_addr+0x4b/0x120 [ 217.934216][ T8042] ? bpf_lsm_mmap_addr+0x9/0x30 [ 217.934239][ T8042] ? security_mmap_addr+0x71/0x1e0 [ 217.934257][ T8042] ? __get_unmapped_area+0x255/0x3e0 [ 217.934278][ T8042] do_mmap+0xc63/0x12f0 [ 217.934343][ T8042] ? __pfx_do_mmap+0x10/0x10 [ 217.934362][ T8042] ? __pfx_down_write_killable+0x10/0x10 [ 217.934382][ T8042] ? __pfx_futex_wait+0x10/0x10 [ 217.934402][ T8042] vm_mmap_pgoff+0x29e/0x470 [ 217.934424][ T8042] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 217.934445][ T8042] ? __pfx_do_futex+0x10/0x10 [ 217.934463][ T8042] ksys_mmap_pgoff+0xe4/0x610 [ 217.934482][ T8042] ? __x64_sys_futex+0x358/0x4d0 [ 217.934497][ T8042] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 217.934515][ T8042] ? xfd_validate_state+0x129/0x190 [ 217.934535][ T8042] __x64_sys_mmap+0x125/0x190 [ 217.934554][ T8042] do_syscall_64+0x115/0x840 [ 217.934566][ T8042] ? clear_bhb_loop+0x40/0x90 [ 217.934584][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.934600][ T8042] RIP: 0033:0x7f734899de59 [ 217.934615][ T8042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.934628][ T8042] RSP: 002b:00007f73497d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 217.934643][ T8042] RAX: ffffffffffffffda RBX: 00007f7348c25fa0 RCX: 00007f734899de59 [ 217.934653][ T8042] RDX: 0000000000000007 RSI: 0000000000040009 RDI: 0000000000000000 [ 217.934663][ T8042] RBP: 00007f7348a33e6f R08: 0000000000000007 R09: 0000000000028000 [ 217.934672][ T8042] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 217.934681][ T8042] R13: 00007f7348c26038 R14: 00007f7348c25fa0 R15: 00007ffcd36f12a8 [ 217.934702][ T8042] [ 218.561257][ T8057] FAULT_INJECTION: forcing a failure. [ 218.561257][ T8057] name failslab, interval 1, probability 0, space 0, times 0 [ 218.573978][ T8057] CPU: 0 UID: 0 PID: 8057 Comm: syz.0.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.574003][ T8057] Tainted: [L]=SOFTLOCKUP [ 218.574009][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 218.574018][ T8057] Call Trace: [ 218.574025][ T8057] [ 218.574032][ T8057] dump_stack_lvl+0x100/0x190 [ 218.574053][ T8057] should_fail_ex.cold+0x5/0xa [ 218.574072][ T8057] should_failslab+0xc2/0x120 [ 218.574091][ T8057] kmem_cache_alloc_noprof+0x91/0x6a0 [ 218.574108][ T8057] ? d_instantiate+0x8a/0xb0 [ 218.574124][ T8057] ? d_instantiate+0x8a/0xb0 [ 218.574138][ T8057] ? alloc_empty_file+0x5b/0x1c0 [ 218.574158][ T8057] alloc_empty_file+0x5b/0x1c0 [ 218.574175][ T8057] alloc_file_pseudo+0x183/0x290 [ 218.574193][ T8057] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 218.574209][ T8057] ? alloc_fd+0x471/0x7a0 [ 218.574232][ T8057] ? do_raw_spin_unlock+0x145/0x1e0 [ 218.574250][ T8057] __anon_inode_getfile+0xe8/0x280 [ 218.574269][ T8057] anon_inode_getfile_fmode+0x37/0xa0 [ 218.574288][ T8057] __do_sys_fanotify_init+0xa0d/0xe30 [ 218.574312][ T8057] do_syscall_64+0x115/0x840 [ 218.574325][ T8057] ? clear_bhb_loop+0x40/0x90 [ 218.574343][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.574358][ T8057] RIP: 0033:0x7f4ab599de59 [ 218.574373][ T8057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.574386][ T8057] RSP: 002b:00007f4ab6919028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 218.574401][ T8057] RAX: ffffffffffffffda RBX: 00007f4ab5c26090 RCX: 00007f4ab599de59 [ 218.574410][ T8057] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000602 [ 218.574419][ T8057] RBP: 00007f4ab5a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 218.574427][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.574436][ T8057] R13: 00007f4ab5c26128 R14: 00007f4ab5c26090 R15: 00007ffe6cf525a8 [ 218.574455][ T8057] [ 227.873228][ T8206] ima: policy update failed [ 227.930173][ T29] audit: type=1802 audit(1843104645.340:6): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.501" res=0 errno=0 [ 228.515446][ T8227] Process accounting resumed [ 229.680617][ T8249] netlink: zone id is out of range [ 229.704408][ T8249] netlink: zone id is out of range [ 229.726108][ T8249] netlink: zone id is out of range [ 229.753477][ T8249] netlink: zone id is out of range [ 229.796837][ T8249] netlink: zone id is out of range [ 229.796850][ T8249] netlink: zone id is out of range [ 229.796855][ T8249] netlink: zone id is out of range [ 229.796861][ T8249] netlink: zone id is out of range [ 229.796867][ T8249] netlink: zone id is out of range [ 229.796872][ T8249] netlink: zone id is out of range [ 230.474517][ T8261] FAULT_INJECTION: forcing a failure. [ 230.474517][ T8261] name failslab, interval 1, probability 0, space 0, times 0 [ 230.569870][ T8261] CPU: 0 UID: 0 PID: 8261 Comm: syz.1.512 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.569898][ T8261] Tainted: [L]=SOFTLOCKUP [ 230.569903][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 230.569920][ T8261] Call Trace: [ 230.569925][ T8261] [ 230.569931][ T8261] dump_stack_lvl+0x100/0x190 [ 230.569953][ T8261] should_fail_ex.cold+0x5/0xa [ 230.569971][ T8261] should_failslab+0xc2/0x120 [ 230.569990][ T8261] kmem_cache_alloc_noprof+0x91/0x6a0 [ 230.570008][ T8261] ? mas_preallocate+0x1105/0x14a0 [ 230.570029][ T8261] mas_preallocate+0x1105/0x14a0 [ 230.570049][ T8261] ? __lock_acquire+0x49f/0x1a40 [ 230.570079][ T8261] ? __pfx_mas_preallocate+0x10/0x10 [ 230.570107][ T8261] ? __asan_memset+0x23/0x50 [ 230.570121][ T8261] ? init_multi_vma_prep+0x33c/0x650 [ 230.570144][ T8261] commit_merge+0x3e3/0xbd0 [ 230.570169][ T8261] ? __pfx_commit_merge+0x10/0x10 [ 230.570189][ T8261] ? debug_check_no_obj_freed+0x31f/0x630 [ 230.570281][ T8261] vma_expand+0xac5/0xea0 [ 230.570306][ T8261] ? __pfx_vma_expand+0x10/0x10 [ 230.570328][ T8261] ? can_vma_merge_right+0x101/0x720 [ 230.570352][ T8261] ? __pfx_can_vma_merge_right+0x10/0x10 [ 230.570381][ T8261] vma_merge_new_range+0x516/0xc00 [ 230.570408][ T8261] ? __pfx_vma_merge_new_range+0x10/0x10 [ 230.570432][ T8261] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 230.570456][ T8261] __mmap_region+0xa86/0x2db0 [ 230.570482][ T8261] ? __pfx___mmap_region+0x10/0x10 [ 230.570503][ T8261] ? __pfx___might_resched+0x10/0x10 [ 230.570527][ T8261] ? __lock_acquire+0x49f/0x1a40 [ 230.570560][ T8261] ? __lock_acquire+0x49f/0x1a40 [ 230.570589][ T8261] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 230.570620][ T8261] ? rcu_is_watching+0x12/0xc0 [ 230.570636][ T8261] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 230.570650][ T8261] ? lockdep_hardirqs_on+0x78/0x100 [ 230.570702][ T8261] mmap_region+0x35d/0x620 [ 230.570717][ T8261] ? rcu_is_watching+0x12/0xc0 [ 230.570733][ T8261] ? __pfx_mmap_region+0x10/0x10 [ 230.570750][ T8261] ? cap_mmap_addr+0x4b/0x120 [ 230.570827][ T8261] ? bpf_lsm_mmap_addr+0x9/0x30 [ 230.570849][ T8261] ? security_mmap_addr+0x71/0x1e0 [ 230.570888][ T8261] ? __get_unmapped_area+0x255/0x3e0 [ 230.570922][ T8261] do_mmap+0xc63/0x12f0 [ 230.570946][ T8261] ? __pfx_do_mmap+0x10/0x10 [ 230.570970][ T8261] ? __pfx_down_write_killable+0x10/0x10 [ 230.570986][ T8261] ? __pfx_futex_wait+0x10/0x10 [ 230.571006][ T8261] vm_mmap_pgoff+0x29e/0x470 [ 230.571028][ T8261] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 230.571056][ T8261] ? __pfx_do_futex+0x10/0x10 [ 230.571075][ T8261] ksys_mmap_pgoff+0xe4/0x610 [ 230.571094][ T8261] ? __x64_sys_futex+0x358/0x4d0 [ 230.571111][ T8261] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 230.571132][ T8261] ? xfd_validate_state+0x129/0x190 [ 230.571152][ T8261] __x64_sys_mmap+0x125/0x190 [ 230.571171][ T8261] do_syscall_64+0x115/0x840 [ 230.571184][ T8261] ? clear_bhb_loop+0x40/0x90 [ 230.571201][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.571216][ T8261] RIP: 0033:0x7fcf2579de59 [ 230.571230][ T8261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.571244][ T8261] RSP: 002b:00007fcf266b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 230.571258][ T8261] RAX: ffffffffffffffda RBX: 00007fcf25a25fa0 RCX: 00007fcf2579de59 [ 230.571269][ T8261] RDX: 0000000000000007 RSI: 0000000000040009 RDI: 0000000000000000 [ 230.571281][ T8261] RBP: 00007fcf25833e6f R08: 0000000000000007 R09: 0000000000028000 [ 230.571290][ T8261] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 230.571299][ T8261] R13: 00007fcf25a26038 R14: 00007fcf25a25fa0 R15: 00007fff58aeaed8 [ 230.571319][ T8261] [ 232.995590][ T8329] FAULT_INJECTION: forcing a failure. [ 232.995590][ T8329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.069580][ T8329] CPU: 0 UID: 0 PID: 8329 Comm: syz.2.527 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.069606][ T8329] Tainted: [L]=SOFTLOCKUP [ 233.069611][ T8329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 233.069623][ T8329] Call Trace: [ 233.069628][ T8329] [ 233.069634][ T8329] dump_stack_lvl+0x100/0x190 [ 233.069656][ T8329] should_fail_ex.cold+0x5/0xa [ 233.069673][ T8329] strncpy_from_user+0x3b/0x2d0 [ 233.069761][ T8329] do_getname+0x78/0x390 [ 233.069780][ T8329] do_sys_openat2+0xc7/0x1e0 [ 233.069799][ T8329] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.069818][ T8329] ? bpf_lsm_capable+0x9/0x10 [ 233.069832][ T8329] ? security_capable+0x80/0x260 [ 233.069858][ T8329] __x64_sys_openat+0x12d/0x210 [ 233.069877][ T8329] ? __pfx___x64_sys_openat+0x10/0x10 [ 233.069901][ T8329] do_syscall_64+0x115/0x840 [ 233.069915][ T8329] ? clear_bhb_loop+0x40/0x90 [ 233.069933][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.069948][ T8329] RIP: 0033:0x7fbd5039de59 [ 233.069962][ T8329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.069975][ T8329] RSP: 002b:00007fbd512ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 233.069993][ T8329] RAX: ffffffffffffffda RBX: 00007fbd50625fa0 RCX: 00007fbd5039de59 [ 233.070003][ T8329] RDX: 0000000000020201 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 233.070013][ T8329] RBP: 00007fbd50433e6f R08: 0000000000000000 R09: 0000000000000000 [ 233.070022][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.070030][ T8329] R13: 00007fbd50626038 R14: 00007fbd50625fa0 R15: 00007ffcf9f3af98 [ 233.070050][ T8329] [ 241.293877][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.559'. [ 241.420633][ T8461] ovs_: entered allmulticast mode [ 241.506313][ T8464] binder: 8460:8464 unknown command 161649 [ 241.593220][ T8464] binder: 8460:8464 ioctl c0306201 200000000000 returned -22 [ 243.217743][ T8484] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.253353][ T8484] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 243.361377][ T8484] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.373141][ T8484] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 243.400384][ T8484] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.413524][ T8484] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 243.428973][ T8484] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.463886][ T8484] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.487987][ T8484] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 244.557484][ T6378] Bluetooth: hci0: command 0x0406 tx timeout [ 245.437676][ T6378] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.443855][ T6378] Bluetooth: hci3: command 0x0406 tx timeout [ 245.450067][ T6802] Bluetooth: hci1: command 0x0406 tx timeout [ 245.650318][ T8540] random: crng reseeded on system resumption [ 246.637274][ T6802] Bluetooth: hci0: command 0x0406 tx timeout [ 247.522377][ T6802] Bluetooth: hci1: command 0x0406 tx timeout [ 247.528610][ T6378] Bluetooth: hci3: command 0x0406 tx timeout [ 247.534843][ T6421] Bluetooth: hci2: command 0x0c1a tx timeout [ 248.989164][ T8604] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 249.095735][ T8604] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 249.206903][ T8604] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 249.318026][ T8604] page_type: f5(slab) [ 249.364081][ T8604] raw: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 249.562189][ T8604] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 249.597957][ T6802] Bluetooth: hci2: command 0x0c1a tx timeout [ 249.651523][ T8604] head: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 249.707828][ T8604] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 249.764867][ T8604] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 249.820130][ T8604] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 249.921354][ T8604] page dumped because: unmovable page [ 249.954596][ T8604] page_owner tracks the page as allocated [ 249.984895][ T8604] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4992, tgid 4992 (udevd), ts 37272710006, free_ts 28146636939 [ 250.022710][ T29] audit: type=1806 audit(1843104667.430:7): xattr="" res=-22 [ 250.069287][ T8604] post_alloc_hook+0xfd/0x120 [ 250.093789][ T8604] get_page_from_freelist+0xf48/0x3530 [ 250.117312][ T8604] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 250.140849][ T8604] new_slab+0xa2/0x650 [ 250.155230][ T8604] refill_objects+0xe3/0x410 [ 250.171780][ T8604] __pcs_replace_empty_main+0x376/0x680 [ 250.188462][ T8604] __kmalloc_noprof+0x66d/0x820 [ 250.205161][ T8604] tomoyo_realpath_from_path+0xb6/0x690 [ 250.221088][ T8604] tomoyo_check_open_permission+0x2af/0x3c0 [ 250.245840][ T8604] tomoyo_file_open+0x6b/0x90 [ 250.271146][ T8604] security_file_open+0xb5/0x1e0 [ 250.296455][ T8604] do_dentry_open+0x588/0x14d0 [ 250.316635][ T8604] vfs_open+0x82/0x3f0 [ 250.330561][ T8604] path_openat+0x2873/0x4280 [ 250.346946][ T8604] do_file_open+0x20e/0x430 [ 250.363970][ T8604] do_sys_openat2+0x10f/0x1e0 [ 250.390033][ T8604] page last free pid 1 tgid 1 stack trace: [ 250.413845][ T8604] free_pages_prepare+0x586/0xd80 [ 250.431086][ T8604] __free_contig_range_common+0x14f/0x250 [ 250.449220][ T8604] destroy_args+0xa8/0x7a0 [ 250.464639][ T8604] debug_vm_pgtable+0x1d69/0x3490 [ 250.483364][ T8604] do_one_initcall+0x11d/0x700 [ 250.506263][ T8604] kernel_init_freeable+0x6ea/0x7b0 [ 250.530648][ T8604] kernel_init+0x1f/0x1e0 [ 250.543653][ T8604] ret_from_fork+0x72b/0xd50 [ 250.553754][ T8604] ret_from_fork_asm+0x1a/0x30 [ 251.125573][ T8644] netlink: 330 bytes leftover after parsing attributes in process `syz.1.599'. [ 251.713108][ T6802] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 251.734069][ T8663] ima: policy update failed [ 251.794036][ T29] audit: type=1802 audit(1843104669.210:8): pid=8663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.604" res=0 errno=0 [ 255.839301][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.845707][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.414894][ T8737] kAFS: No cell specified [ 257.283219][ T8758] futex_wake_op: syz.1.625 tries to shift op by -2048; fix this program [ 257.330162][ T8758] futex_wake_op: syz.1.625 tries to shift op by -2048; fix this program [ 258.947755][ T8792] net_ratelimit: 45 callbacks suppressed [ 258.947772][ T8792] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 262.300735][ T8856] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 264.648400][ T8890] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 264.726255][ T8892] openvswitch: ovs_: Dropping previously announced user features [ 264.774934][ T8890] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 264.882389][ T8890] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 264.977747][ T8890] page_type: f5(slab) [ 265.047983][ T8890] raw: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 265.172320][ T8890] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 265.292169][ T8890] head: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 265.447447][ T8890] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 265.576061][ T8890] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 265.626599][ T8890] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 265.673283][ T8890] page dumped because: unmovable page [ 265.703183][ T8890] page_owner tracks the page as allocated [ 265.724428][ T8890] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4992, tgid 4992 (udevd), ts 37272710006, free_ts 28146636939 [ 265.788790][ T8890] post_alloc_hook+0xfd/0x120 [ 265.804489][ T8890] get_page_from_freelist+0xf48/0x3530 [ 265.829093][ T8890] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 265.852667][ T8890] new_slab+0xa2/0x650 [ 265.875089][ T8890] refill_objects+0xe3/0x410 [ 265.894939][ T8890] __pcs_replace_empty_main+0x376/0x680 [ 265.914167][ T8890] __kmalloc_noprof+0x66d/0x820 [ 265.930848][ T8890] tomoyo_realpath_from_path+0xb6/0x690 [ 265.954167][ T8890] tomoyo_check_open_permission+0x2af/0x3c0 [ 265.983064][ T8890] tomoyo_file_open+0x6b/0x90 [ 265.999780][ T8890] security_file_open+0xb5/0x1e0 [ 266.015032][ T8890] do_dentry_open+0x588/0x14d0 [ 266.032416][ T8890] vfs_open+0x82/0x3f0 [ 266.046288][ T8890] path_openat+0x2873/0x4280 [ 266.060495][ T8890] do_file_open+0x20e/0x430 [ 266.077581][ T8890] do_sys_openat2+0x10f/0x1e0 [ 266.092631][ T8890] page last free pid 1 tgid 1 stack trace: [ 266.110880][ T8890] free_pages_prepare+0x586/0xd80 [ 266.127650][ T8890] __free_contig_range_common+0x14f/0x250 [ 266.149286][ T8890] destroy_args+0xa8/0x7a0 [ 266.166325][ T8890] debug_vm_pgtable+0x1d69/0x3490 [ 266.190278][ T8890] do_one_initcall+0x11d/0x700 [ 266.211741][ T8890] kernel_init_freeable+0x6ea/0x7b0 [ 266.231181][ T8890] kernel_init+0x1f/0x1e0 [ 266.245902][ T8890] ret_from_fork+0x72b/0xd50 [ 266.264749][ T8890] ret_from_fork_asm+0x1a/0x30 [ 266.452657][ T8909] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 267.006420][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.661'. [ 267.090829][ T8925] mmap: syz.1.661 (8925) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 267.620274][ T6384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.919069][ T6384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.129759][ T6384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.376865][ T6378] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.390375][ T6378] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.407523][ T6378] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.416680][ T6378] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.431280][ T6378] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.535886][ T6384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.706228][ T8943] openvswitch: HfR: Dropping previously announced user features [ 269.449285][ T6384] bridge_slave_1: left allmulticast mode [ 269.481617][ T6384] bridge_slave_1: left promiscuous mode [ 269.514781][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.578574][ T6384] bridge_slave_0: left allmulticast mode [ 269.617096][ T6384] bridge_slave_0: left promiscuous mode [ 269.625649][ T6378] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 269.635656][ T6378] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 269.645648][ T6378] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 269.685521][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.263660][ T8977] netlink: del zone limit has 4 unknown bytes [ 270.481143][ T6378] Bluetooth: hci1: command tx timeout [ 270.506181][ T6384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.554110][ T6384] bond0 (unregistering): Released all slaves [ 271.191248][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 271.900665][ T6384] hsr_slave_0: left promiscuous mode [ 271.934642][ T6384] hsr_slave_1: left promiscuous mode [ 271.952656][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.976231][ T6384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.010345][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.032010][ T6384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.079192][ T6384] veth1_macvtap: left promiscuous mode [ 272.103573][ T6384] veth0_macvtap: left promiscuous mode [ 272.129325][ T6384] veth1_vlan: left promiscuous mode [ 272.144900][ T6384] veth0_vlan: left promiscuous mode [ 272.557783][ T6378] Bluetooth: hci1: command tx timeout [ 272.775783][ T6384] team0 (unregistering): Port device team_slave_1 removed [ 272.834149][ T6384] team0 (unregistering): Port device team_slave_0 removed [ 273.068508][ T6384] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 273.489841][ T6378] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 274.637758][ T6378] Bluetooth: hci1: command tx timeout [ 274.916234][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.951604][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.976743][ T8940] bridge_slave_0: entered allmulticast mode [ 274.996528][ T8940] bridge_slave_0: entered promiscuous mode [ 275.065021][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 275.146882][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.165550][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.182974][ T8940] bridge_slave_1: entered allmulticast mode [ 275.192267][ T8940] bridge_slave_1: entered promiscuous mode [ 275.220975][ T9046] ovs_?: entered promiscuous mode [ 275.306145][ T8940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.370635][ T8940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.572315][ T8940] team0: Port device team_slave_0 added [ 275.627639][ T8940] team0: Port device team_slave_1 added [ 275.777784][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.822435][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.972891][ T8940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.042505][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.084175][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.232256][ T8940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.717518][ T6378] Bluetooth: hci1: command tx timeout [ 276.756767][ T8940] hsr_slave_0: entered promiscuous mode [ 276.795396][ T8940] hsr_slave_1: entered promiscuous mode [ 276.834652][ T8940] debugfs: 'hsr0' already exists in 'hsr' [ 276.862139][ T8940] Cannot create hsr debugfs directory [ 276.936953][ T9054] kexec: Could not allocate control_code_buffer [ 276.984160][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 278.541993][ T9121] FAULT_INJECTION: forcing a failure. [ 278.541993][ T9121] name failslab, interval 1, probability 0, space 0, times 0 [ 278.638790][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.1.689 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.638815][ T9121] Tainted: [L]=SOFTLOCKUP [ 278.638821][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 278.638830][ T9121] Call Trace: [ 278.638836][ T9121] [ 278.638842][ T9121] dump_stack_lvl+0x100/0x190 [ 278.638866][ T9121] should_fail_ex.cold+0x5/0xa [ 278.638884][ T9121] should_failslab+0xc2/0x120 [ 278.638905][ T9121] kmem_cache_alloc_noprof+0x91/0x6a0 [ 278.638921][ T9121] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 278.638938][ T9121] ? alloc_vfsmnt+0x23/0x710 [ 278.638958][ T9121] alloc_vfsmnt+0x23/0x710 [ 278.638976][ T9121] clone_mnt+0x4b/0x930 [ 278.638995][ T9121] ? is_subdir+0x1a8/0x3e0 [ 278.639013][ T9121] copy_tree+0x329/0xbf0 [ 278.639032][ T9121] copy_mnt_ns+0x3fa/0x1180 [ 278.639051][ T9121] ? __pfx_copy_mnt_ns+0x10/0x10 [ 278.639068][ T9121] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 278.639084][ T9121] ? create_new_namespaces+0x30/0xac0 [ 278.639111][ T9121] create_new_namespaces+0xd3/0xac0 [ 278.639140][ T9121] ? bpf_lsm_capable+0x9/0x10 [ 278.639154][ T9121] ? security_capable+0x80/0x260 [ 278.639180][ T9121] unshare_nsproxy_namespaces+0xf2/0x220 [ 278.639198][ T9121] ksys_unshare+0x438/0xab0 [ 278.639216][ T9121] ? __pfx_ksys_unshare+0x10/0x10 [ 278.639241][ T9121] __x64_sys_unshare+0x31/0x40 [ 278.639258][ T9121] do_syscall_64+0x115/0x840 [ 278.639272][ T9121] ? clear_bhb_loop+0x40/0x90 [ 278.639289][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.639305][ T9121] RIP: 0033:0x7fcf2579de59 [ 278.639319][ T9121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.639334][ T9121] RSP: 002b:00007fcf26676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 278.639348][ T9121] RAX: ffffffffffffffda RBX: 00007fcf25a26180 RCX: 00007fcf2579de59 [ 278.639358][ T9121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 278.639367][ T9121] RBP: 00007fcf25833e6f R08: 0000000000000000 R09: 0000000000000000 [ 278.639376][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.639384][ T9121] R13: 00007fcf25a26218 R14: 00007fcf25a26180 R15: 00007fff58aeaed8 [ 278.639404][ T9121] [ 279.124256][ T8940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.153918][ T8940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.171279][ T8940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.264396][ T8940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.304086][ T8940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.353639][ T8940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.385953][ T8940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.413033][ T8940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.422686][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 279.869423][ T8940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.982505][ T8940] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.048899][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.056091][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.114781][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.121968][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.564932][ T8940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.678372][ T8940] veth0_vlan: entered promiscuous mode [ 282.746745][ T8940] veth1_vlan: entered promiscuous mode [ 282.851747][ T8940] veth0_macvtap: entered promiscuous mode [ 282.911116][ T8940] veth1_macvtap: entered promiscuous mode [ 282.981561][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.024943][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.085946][ T6385] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.124698][ T6385] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.210883][ T6385] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.247738][ T6385] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.663642][ T6384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.707315][ T6384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.802987][ T6384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.841362][ T6384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.433121][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 284.589770][ T9218] zswap: compressor not available [ 284.610452][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 285.173197][ T9230] vivid-007: ================= START STATUS ================= [ 285.212271][ T9230] vivid-007: Generate PTS: true [ 285.262397][ T9230] vivid-007: Generate SCR: true [ 285.291221][ T9230] tpg source WxH: 320x240 (Y'CbCr) [ 285.361714][ T9230] tpg field: 1 [ 285.379068][ T9230] tpg crop: (0,0)/320x240 [ 285.398372][ T9230] tpg compose: (0,0)/320x240 [ 285.418085][ T9230] tpg colorspace: 8 [ 285.436323][ T9230] tpg transfer function: 0/0 [ 285.457308][ T9230] tpg Y'CbCr encoding: 0/0 [ 285.482333][ T9230] tpg quantization: 0/0 [ 285.507696][ T9230] tpg RGB range: 0/2 [ 285.533152][ T9230] vivid-007: ================== END STATUS ================== [ 289.171603][ T29] audit: type=1806 audit(1843104706.580:9): xattr="" res=-22 [ 291.626520][ T9350] vivid-011: ================= START STATUS ================= [ 291.690084][ T9350] vivid-011: Radio HW Seek Mode: Bounded [ 291.729949][ T9350] vivid-011: Radio Programmable HW Seek: false [ 291.789887][ T9350] vivid-011: RDS Rx I/O Mode: Block I/O [ 291.820530][ T9350] vivid-011: Generate RBDS Instead of RDS: false [ 291.862952][ T9350] vivid-011: RDS Reception: true [ 291.900871][ T9350] vivid-011: RDS Program Type: 0 inactive [ 291.960000][ T9350] vivid-011: RDS PS Name: inactive [ 292.004239][ T9350] vivid-011: RDS Radio Text: inactive [ 292.033688][ T9350] vivid-011: RDS Traffic Announcement: false inactive [ 292.098288][ T9350] vivid-011: RDS Traffic Program: false inactive [ 292.143425][ T9350] vivid-011: RDS Music: false inactive [ 292.174869][ T9350] vivid-011: ================== END STATUS ================== [ 293.526145][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 293.666740][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 294.523166][ T6378] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 296.820840][ T6378] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 298.654694][ T9495] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 300.238996][ T9512] zswap: compressor not available [ 302.209816][ T9530] vivid-007: ================= START STATUS ================= [ 302.248502][ T9530] vivid-007: Generate PTS: true [ 302.265654][ T9530] vivid-007: Generate SCR: true [ 302.282122][ T9530] tpg source WxH: 320x240 (Y'CbCr) [ 302.298636][ T9530] tpg field: 1 [ 302.315616][ T9530] tpg crop: (0,0)/320x240 [ 302.333840][ T9530] tpg compose: (0,0)/320x240 [ 302.399782][ T9530] tpg colorspace: 8 [ 302.415410][ T9530] tpg transfer function: 0/0 [ 302.437720][ T9530] tpg Y'CbCr encoding: 0/0 [ 302.458398][ T9530] tpg quantization: 0/0 [ 302.476040][ T9530] tpg RGB range: 0/2 [ 302.495754][ T9530] vivid-007: ================== END STATUS ================== [ 302.880617][ T9553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.754'. [ 304.078557][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 304.385180][ T9574] bond0: option packets_per_slave: invalid value () [ 304.476086][ T9574] bond0: option packets_per_slave: allowed values 0 - 65535 [ 304.634546][ T9571] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.646099][ T9589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.762'. [ 304.670591][ T9571] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 304.704969][ T9571] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.745655][ T9571] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.766442][ T9589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.784530][ T9571] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.794004][ T9591] FAULT_INJECTION: forcing a failure. [ 304.794004][ T9591] name failslab, interval 1, probability 0, space 0, times 0 [ 304.832516][ T9571] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 304.874304][ T9591] CPU: 0 UID: 0 PID: 9591 Comm: syz.1.764 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.874330][ T9591] Tainted: [L]=SOFTLOCKUP [ 304.874335][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 304.874344][ T9591] Call Trace: [ 304.874349][ T9591] [ 304.874355][ T9591] dump_stack_lvl+0x100/0x190 [ 304.874376][ T9591] should_fail_ex.cold+0x5/0xa [ 304.874393][ T9591] should_failslab+0xc2/0x120 [ 304.874413][ T9591] __kmalloc_noprof+0xfc/0x820 [ 304.874428][ T9591] ? rcu_is_watching+0x12/0xc0 [ 304.874445][ T9591] ? tomoyo_realpath_from_path+0xb6/0x690 [ 304.874470][ T9591] tomoyo_realpath_from_path+0xb6/0x690 [ 304.874493][ T9591] tomoyo_check_open_permission+0x2af/0x3c0 [ 304.874511][ T9591] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 304.874534][ T9591] ? hook_file_open+0x24f/0x8f0 [ 304.874644][ T9591] ? lock_acquire+0x1b9/0x370 [ 304.874671][ T9591] tomoyo_file_open+0x6b/0x90 [ 304.874694][ T9591] security_file_open+0xb5/0x1e0 [ 304.874713][ T9591] do_dentry_open+0x588/0x14d0 [ 304.874741][ T9591] vfs_open+0x82/0x3f0 [ 304.874760][ T9591] path_openat+0x2873/0x4280 [ 304.874791][ T9591] ? __pfx_path_openat+0x10/0x10 [ 304.874818][ T9591] do_file_open+0x20e/0x430 [ 304.874849][ T9591] ? __pfx_do_file_open+0x10/0x10 [ 304.874878][ T9591] ? __pfx_kfree_link+0x10/0x10 [ 304.874903][ T9591] ? alloc_fd+0x471/0x7a0 [ 304.874927][ T9591] ? do_getname+0x191/0x390 [ 304.874945][ T9591] do_sys_openat2+0x10f/0x1e0 [ 304.874963][ T9591] ? __pfx_do_sys_openat2+0x10/0x10 [ 304.874981][ T9591] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 304.875011][ T9591] __x64_sys_openat+0x12d/0x210 [ 304.875029][ T9591] ? __pfx___x64_sys_openat+0x10/0x10 [ 304.875055][ T9591] do_syscall_64+0x115/0x840 [ 304.875068][ T9591] ? clear_bhb_loop+0x40/0x90 [ 304.875086][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.875102][ T9591] RIP: 0033:0x7fcf2575e68e [ 304.875115][ T9591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 304.875129][ T9591] RSP: 002b:00007fcf266b7f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 304.875144][ T9591] RAX: ffffffffffffffda RBX: 00007fcf266b86c0 RCX: 00007fcf2575e68e [ 304.875154][ T9591] RDX: 0000000000000002 RSI: 00007fcf25833776 RDI: ffffffffffffff9c [ 304.875163][ T9591] RBP: 00007fcf25833e6f R08: 0000000000000000 R09: 0000000000000000 [ 304.875172][ T9591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.875180][ T9591] R13: 00007fcf25a26038 R14: 00007fcf25a25fa0 R15: 00007fff58aeaed8 [ 304.875200][ T9591] [ 304.875207][ T9591] ERROR: Out of memory at tomoyo_realpath_from_path. [ 305.157575][ T9571] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 305.175886][ T9594] ptp ptp0: only physical clock in use now [ 305.212482][ T9589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.078463][ T6378] Bluetooth: hci0: command 0x0406 tx timeout [ 306.718314][ T6378] Bluetooth: hci3: command 0x0406 tx timeout [ 306.797256][ T6378] Bluetooth: hci1: command 0x0c1a tx timeout [ 306.803323][ T6378] Bluetooth: hci2: command 0x0c1a tx timeout [ 308.157195][ T6378] Bluetooth: hci0: command 0x0406 tx timeout [ 308.877327][ T6378] Bluetooth: hci1: command 0x0c1a tx timeout [ 309.001735][ T9682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.776'. [ 309.151656][ T9682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.267980][ T9686] ptp ptp0: only physical clock in use now [ 309.332815][ T9682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.957576][ T6378] Bluetooth: hci1: command 0x0c1a tx timeout [ 311.151948][ T9707] Process accounting resumed [ 311.760611][ T6378] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 312.426638][ T9732] FAULT_INJECTION: forcing a failure. [ 312.426638][ T9732] name fail_futex, interval 1, probability 0, space 0, times 0 [ 312.475952][ T9732] CPU: 0 UID: 0 PID: 9732 Comm: syz.4.786 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.475979][ T9732] Tainted: [L]=SOFTLOCKUP [ 312.475984][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 312.475994][ T9732] Call Trace: [ 312.475999][ T9732] [ 312.476005][ T9732] dump_stack_lvl+0x100/0x190 [ 312.476027][ T9732] should_fail_ex.cold+0x5/0xa [ 312.476045][ T9732] get_futex_key+0x1d2/0x14f0 [ 312.476070][ T9732] ? __pfx_get_futex_key+0x10/0x10 [ 312.476093][ T9732] ? find_held_lock+0x2b/0x80 [ 312.476109][ T9732] ? futex_wake+0x4ea/0x5e0 [ 312.476131][ T9732] futex_wake+0xf4/0x5e0 [ 312.476150][ T9732] ? __pfx_futex_wake+0x10/0x10 [ 312.476166][ T9732] ? ipcget+0xf8/0xf50 [ 312.476249][ T9732] ? up_write+0x2e5/0x5c0 [ 312.476266][ T9732] do_futex+0x2b2/0x440 [ 312.476282][ T9732] ? __pfx_do_futex+0x10/0x10 [ 312.476298][ T9732] ? find_held_lock+0x2b/0x80 [ 312.476317][ T9732] __x64_sys_futex+0x34f/0x4d0 [ 312.476335][ T9732] ? __pfx___x64_sys_futex+0x10/0x10 [ 312.476363][ T9732] do_syscall_64+0x115/0x840 [ 312.476378][ T9732] ? clear_bhb_loop+0x40/0x90 [ 312.476397][ T9732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.476412][ T9732] RIP: 0033:0x7f0119d9de59 [ 312.476427][ T9732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.476441][ T9732] RSP: 002b:00007f011acfc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 312.476456][ T9732] RAX: ffffffffffffffda RBX: 00007f011a025fa8 RCX: 00007f0119d9de59 [ 312.476466][ T9732] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f011a025fac [ 312.476476][ T9732] RBP: 00007f011a025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 312.476485][ T9732] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 312.476494][ T9732] R13: 00007f011a026038 R14: 00007ffc0f526650 R15: 00007ffc0f526738 [ 312.476514][ T9732] [ 314.553468][ T9775] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 317.284324][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.293704][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.188965][ T6378] Bluetooth: hci0: unexpected event 0x3e length: 356 > 260 [ 320.188991][ T6378] Bluetooth: hci0: unexpected subevent 0x1b length: 355 > 260 [ 321.295972][ T9869] FAULT_INJECTION: forcing a failure. [ 321.295972][ T9869] name failslab, interval 1, probability 0, space 0, times 0 [ 321.377240][ T9869] CPU: 0 UID: 0 PID: 9869 Comm: syz.2.812 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.377267][ T9869] Tainted: [L]=SOFTLOCKUP [ 321.377272][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 321.377282][ T9869] Call Trace: [ 321.377287][ T9869] [ 321.377293][ T9869] dump_stack_lvl+0x100/0x190 [ 321.377316][ T9869] should_fail_ex.cold+0x5/0xa [ 321.377334][ T9869] should_failslab+0xc2/0x120 [ 321.377353][ T9869] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 321.377372][ T9869] ? __d_alloc+0x35/0xa50 [ 321.377391][ T9869] __d_alloc+0x35/0xa50 [ 321.377407][ T9869] d_alloc_pseudo+0x1c/0xc0 [ 321.377425][ T9869] alloc_file_pseudo+0x118/0x290 [ 321.377443][ T9869] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 321.377461][ T9869] ? alloc_fd+0x471/0x7a0 [ 321.377485][ T9869] sock_alloc_file+0x50/0x210 [ 321.377505][ T9869] __sys_socket+0x1c0/0x260 [ 321.377527][ T9869] ? __pfx___sys_socket+0x10/0x10 [ 321.377554][ T9869] __x64_sys_socket+0x72/0xb0 [ 321.377578][ T9869] ? lockdep_hardirqs_on+0x78/0x100 [ 321.377600][ T9869] do_syscall_64+0x115/0x840 [ 321.377613][ T9869] ? clear_bhb_loop+0x40/0x90 [ 321.377632][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.377651][ T9869] RIP: 0033:0x7fbd5039de59 [ 321.377664][ T9869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.377679][ T9869] RSP: 002b:00007fbd512ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 321.377694][ T9869] RAX: ffffffffffffffda RBX: 00007fbd50625fa0 RCX: 00007fbd5039de59 [ 321.377704][ T9869] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 321.377712][ T9869] RBP: 00007fbd50433e6f R08: 0000000000000000 R09: 0000000000000000 [ 321.377721][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.377730][ T9869] R13: 00007fbd50626038 R14: 00007fbd50625fa0 R15: 00007ffcf9f3af98 [ 321.377750][ T9869] [ 322.935928][ T9884] [U] ^\ [ 325.383052][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.826'. [ 325.631025][ T9922] bond0: (slave bond_slave_0): Releasing backup interface [ 325.837834][ T9930] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 325.991192][ T9931] openvswitch: ovs_: Dropping previously announced user features [ 326.059587][ T9930] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 326.238252][ T9930] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 326.343740][ T9930] page_type: f5(slab) [ 326.343769][ T9930] raw: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 326.343786][ T9930] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 326.343800][ T9930] head: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 326.343815][ T9930] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 326.343830][ T9930] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 326.343845][ T9930] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 326.343854][ T9930] page dumped because: unmovable page [ 326.343866][ T9930] page_owner tracks the page as allocated [ 326.343873][ T9930] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4992, tgid 4992 (udevd), ts 37272710006, free_ts 28146636939 [ 326.343903][ T9930] post_alloc_hook+0xfd/0x120 [ 326.343929][ T9930] get_page_from_freelist+0xf48/0x3530 [ 326.343945][ T9930] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 326.343961][ T9930] new_slab+0xa2/0x650 [ 326.343983][ T9930] refill_objects+0xe3/0x410 [ 326.343997][ T9930] __pcs_replace_empty_main+0x376/0x680 [ 326.344019][ T9930] __kmalloc_noprof+0x66d/0x820 [ 326.344035][ T9930] tomoyo_realpath_from_path+0xb6/0x690 [ 326.344074][ T9930] tomoyo_check_open_permission+0x2af/0x3c0 [ 326.344093][ T9930] tomoyo_file_open+0x6b/0x90 [ 326.344114][ T9930] security_file_open+0xb5/0x1e0 [ 326.344132][ T9930] do_dentry_open+0x588/0x14d0 [ 326.344155][ T9930] vfs_open+0x82/0x3f0 [ 326.344172][ T9930] path_openat+0x2873/0x4280 [ 326.344193][ T9930] do_file_open+0x20e/0x430 [ 326.344215][ T9930] do_sys_openat2+0x10f/0x1e0 [ 326.344232][ T9930] page last free pid 1 tgid 1 stack trace: [ 326.344241][ T9930] free_pages_prepare+0x586/0xd80 [ 326.344261][ T9930] __free_contig_range_common+0x14f/0x250 [ 326.344283][ T9930] destroy_args+0xa8/0x7a0 [ 326.344299][ T9930] debug_vm_pgtable+0x1d69/0x3490 [ 326.344314][ T9930] do_one_initcall+0x11d/0x700 [ 326.344335][ T9930] kernel_init_freeable+0x6ea/0x7b0 [ 326.344371][ T9930] kernel_init+0x1f/0x1e0 [ 326.344390][ T9930] ret_from_fork+0x72b/0xd50 [ 326.344406][ T9930] ret_from_fork_asm+0x1a/0x30 [ 327.513224][ T9950] syz.0.831 (9950) used greatest stack depth: 19616 bytes left [ 327.664239][ T9962] random: crng reseeded on system resumption [ 331.396771][T10005] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 331.736963][T10010] FAULT_INJECTION: forcing a failure. [ 331.736963][T10010] name failslab, interval 1, probability 0, space 0, times 0 [ 331.895191][T10010] CPU: 0 UID: 0 PID: 10010 Comm: syz.1.842 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.895220][T10010] Tainted: [L]=SOFTLOCKUP [ 331.895226][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 331.895236][T10010] Call Trace: [ 331.895242][T10010] [ 331.895248][T10010] dump_stack_lvl+0x100/0x190 [ 331.895271][T10010] should_fail_ex.cold+0x5/0xa [ 331.895289][T10010] should_failslab+0xc2/0x120 [ 331.895310][T10010] __kmalloc_cache_noprof+0x91/0x6c0 [ 331.895336][T10010] ? madvise_collapse+0x228/0x750 [ 331.895360][T10010] madvise_collapse+0x228/0x750 [ 331.895384][T10010] ? __pfx_madvise_collapse+0x10/0x10 [ 331.895409][T10010] ? mtree_range_walk+0x72b/0xb70 [ 331.895434][T10010] madvise_vma_behavior+0x107c/0x2240 [ 331.895457][T10010] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 331.895483][T10010] ? find_vma_prev+0xd8/0x150 [ 331.895502][T10010] ? __pfx_find_vma_prev+0x10/0x10 [ 331.895525][T10010] ? __futex_wait+0x256/0x300 [ 331.895547][T10010] madvise_walk_vmas+0x2fe/0xa90 [ 331.895571][T10010] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 331.895597][T10010] madvise_do_behavior+0x1ea/0x510 [ 331.895620][T10010] ? __pfx_madvise_do_behavior+0x10/0x10 [ 331.895641][T10010] ? down_read+0x13b/0x4c0 [ 331.895655][T10010] ? __pfx_futex_wait+0x10/0x10 [ 331.895681][T10010] do_madvise+0x238/0x290 [ 331.895701][T10010] ? __pfx_do_madvise+0x10/0x10 [ 331.895720][T10010] ? do_futex+0x190/0x440 [ 331.895749][T10010] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 331.895774][T10010] __x64_sys_madvise+0xa9/0x110 [ 331.895793][T10010] ? lockdep_hardirqs_on+0x78/0x100 [ 331.895816][T10010] do_syscall_64+0x115/0x840 [ 331.895829][T10010] ? clear_bhb_loop+0x40/0x90 [ 331.895847][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.895863][T10010] RIP: 0033:0x7fcf2579de59 [ 331.895877][T10010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.895891][T10010] RSP: 002b:00007fcf266b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 331.895906][T10010] RAX: ffffffffffffffda RBX: 00007fcf25a25fa0 RCX: 00007fcf2579de59 [ 331.895917][T10010] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 331.895926][T10010] RBP: 00007fcf25833e6f R08: 0000000000000000 R09: 0000000000000000 [ 331.895935][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.895944][T10010] R13: 00007fcf25a26038 R14: 00007fcf25a25fa0 R15: 00007fff58aeaed8 [ 331.895964][T10010] [ 334.803560][T10057] futex_wake_op: syz.2.852 tries to shift op by -2048; fix this program [ 334.831504][T10057] futex_wake_op: syz.2.852 tries to shift op by -2048; fix this program [ 338.297742][T10086] kexec: Could not allocate control_code_buffer [ 340.178672][ T6378] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 341.875028][T10140] Process accounting paused [ 343.189588][T10185] random: crng reseeded on system resumption [ 349.264730][T10283] FAULT_INJECTION: forcing a failure. [ 349.264730][T10283] name failslab, interval 1, probability 0, space 0, times 0 [ 349.335737][T10283] CPU: 0 UID: 0 PID: 10283 Comm: syz.1.906 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.335770][T10283] Tainted: [L]=SOFTLOCKUP [ 349.335775][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 349.335784][T10283] Call Trace: [ 349.335790][T10283] [ 349.335796][T10283] dump_stack_lvl+0x100/0x190 [ 349.335818][T10283] should_fail_ex.cold+0x5/0xa [ 349.335837][T10283] should_failslab+0xc2/0x120 [ 349.335857][T10283] __kmalloc_cache_noprof+0x91/0x6c0 [ 349.335881][T10283] ? xfd_validate_state+0x129/0x190 [ 349.335896][T10283] ? do_epoll_create+0x62/0x540 [ 349.335982][T10283] do_epoll_create+0x62/0x540 [ 349.335997][T10283] __x64_sys_epoll_create+0x45/0x70 [ 349.336014][T10283] do_syscall_64+0x115/0x840 [ 349.336028][T10283] ? clear_bhb_loop+0x40/0x90 [ 349.336048][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.336064][T10283] RIP: 0033:0x7fcf2579de59 [ 349.336078][T10283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.336092][T10283] RSP: 002b:00007fcf266b8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 349.336107][T10283] RAX: ffffffffffffffda RBX: 00007fcf25a25fa0 RCX: 00007fcf2579de59 [ 349.336117][T10283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003e [ 349.336125][T10283] RBP: 00007fcf25833e6f R08: 0000000000000000 R09: 0000000000000000 [ 349.336137][T10283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.336146][T10283] R13: 00007fcf25a26038 R14: 00007fcf25a25fa0 R15: 00007fff58aeaed8 [ 349.336166][T10283] [ 351.022117][T10306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.913'. [ 351.051229][T10305] tipc: Started in network mode [ 351.073885][T10305] tipc: Node identity ee00, cluster identity 4711 [ 351.099480][T10305] tipc: Node number set to 60928 [ 351.263815][T10308] FAULT_INJECTION: forcing a failure. [ 351.263815][T10308] name failslab, interval 1, probability 0, space 0, times 0 [ 351.324815][T10308] CPU: 0 UID: 0 PID: 10308 Comm: syz.0.914 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.324840][T10308] Tainted: [L]=SOFTLOCKUP [ 351.324846][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 351.324855][T10308] Call Trace: [ 351.324860][T10308] [ 351.324866][T10308] dump_stack_lvl+0x100/0x190 [ 351.324887][T10308] should_fail_ex.cold+0x5/0xa [ 351.324907][T10308] should_failslab+0xc2/0x120 [ 351.324926][T10308] kmem_cache_alloc_noprof+0x91/0x6a0 [ 351.324943][T10308] ? audit_log_start+0x29d/0x930 [ 351.324963][T10308] audit_log_start+0x29d/0x930 [ 351.324981][T10308] ? __pfx_audit_log_start+0x10/0x10 [ 351.324997][T10308] ? rcu_is_watching+0x12/0xc0 [ 351.325014][T10308] ? apparmor_capable+0x1d7/0x4d0 [ 351.325095][T10308] ? bpf_lsm_capable+0x9/0x10 [ 351.325109][T10308] ? security_capable+0x80/0x260 [ 351.325135][T10308] evm_write_xattrs+0x169/0x910 [ 351.325180][T10308] ? __pfx_evm_write_xattrs+0x10/0x10 [ 351.325208][T10308] vfs_write+0x2aa/0x1050 [ 351.325232][T10308] ? __pfx_evm_write_xattrs+0x10/0x10 [ 351.325252][T10308] ? __pfx_vfs_write+0x10/0x10 [ 351.325272][T10308] ? __fget_files+0x215/0x3d0 [ 351.325298][T10308] ? __fget_files+0x21f/0x3d0 [ 351.325324][T10308] ksys_write+0x12a/0x250 [ 351.325345][T10308] ? __pfx_ksys_write+0x10/0x10 [ 351.325372][T10308] do_syscall_64+0x115/0x840 [ 351.325386][T10308] ? clear_bhb_loop+0x40/0x90 [ 351.325404][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.325419][T10308] RIP: 0033:0x7f4ab599de59 [ 351.325432][T10308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.325446][T10308] RSP: 002b:00007f4ab693a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 351.325461][T10308] RAX: ffffffffffffffda RBX: 00007f4ab5c25fa0 RCX: 00007f4ab599de59 [ 351.325471][T10308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 351.325480][T10308] RBP: 00007f4ab693a090 R08: 0000000000000000 R09: 0000000000000000 [ 351.325488][T10308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.325497][T10308] R13: 00007f4ab5c26038 R14: 00007f4ab5c25fa0 R15: 00007ffe6cf525a8 [ 351.325517][T10308] [ 351.325543][T10308] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 352.217914][T10308] audit: out of memory in audit_log_start [ 354.016425][T10331] netlink: zone id is out of range [ 354.045595][T10331] netlink: zone id is out of range [ 354.074811][T10331] netlink: zone id is out of range [ 354.117459][T10331] netlink: zone id is out of range [ 354.117471][T10331] netlink: zone id is out of range [ 354.117477][T10331] netlink: zone id is out of range [ 354.117482][T10331] netlink: zone id is out of range [ 354.117493][T10331] netlink: zone id is out of range [ 354.117499][T10331] netlink: zone id is out of range [ 354.117505][T10331] netlink: zone id is out of range [ 359.137793][T10440] input: f as /devices/virtual/input/input9 [ 359.704222][T10447] FAULT_INJECTION: forcing a failure. [ 359.704222][T10447] name failslab, interval 1, probability 0, space 0, times 0 [ 359.785811][T10447] CPU: 0 UID: 0 PID: 10447 Comm: syz.0.944 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.785838][T10447] Tainted: [L]=SOFTLOCKUP [ 359.785844][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 359.785853][T10447] Call Trace: [ 359.785858][T10447] [ 359.785865][T10447] dump_stack_lvl+0x100/0x190 [ 359.785888][T10447] should_fail_ex.cold+0x5/0xa [ 359.785905][T10447] should_failslab+0xc2/0x120 [ 359.785927][T10447] kmem_cache_alloc_noprof+0x91/0x6a0 [ 359.785946][T10447] ? mas_preallocate+0x1105/0x14a0 [ 359.785968][T10447] mas_preallocate+0x1105/0x14a0 [ 359.785988][T10447] ? __lock_acquire+0x49f/0x1a40 [ 359.786010][T10447] ? __pfx_mas_preallocate+0x10/0x10 [ 359.786033][T10447] ? __asan_memset+0x23/0x50 [ 359.786047][T10447] ? init_multi_vma_prep+0x33c/0x650 [ 359.786071][T10447] commit_merge+0x3e3/0xbd0 [ 359.786097][T10447] ? __pfx_commit_merge+0x10/0x10 [ 359.786118][T10447] ? debug_check_no_obj_freed+0x31f/0x630 [ 359.786149][T10447] vma_expand+0xac5/0xea0 [ 359.786173][T10447] ? __pfx_vma_expand+0x10/0x10 [ 359.786195][T10447] ? can_vma_merge_right+0x101/0x720 [ 359.786220][T10447] ? __pfx_can_vma_merge_right+0x10/0x10 [ 359.786252][T10447] vma_merge_new_range+0x516/0xc00 [ 359.786278][T10447] ? __pfx_vma_merge_new_range+0x10/0x10 [ 359.786303][T10447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 359.786326][T10447] __mmap_region+0xa86/0x2db0 [ 359.786352][T10447] ? __pfx___mmap_region+0x10/0x10 [ 359.786373][T10447] ? __pfx___might_resched+0x10/0x10 [ 359.786398][T10447] ? __lock_acquire+0x49f/0x1a40 [ 359.786431][T10447] ? __lock_acquire+0x49f/0x1a40 [ 359.786460][T10447] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 359.786486][T10447] ? rcu_is_watching+0x12/0xc0 [ 359.786501][T10447] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 359.786516][T10447] ? lockdep_hardirqs_on+0x78/0x100 [ 359.786576][T10447] mmap_region+0x35d/0x620 [ 359.786594][T10447] ? rcu_is_watching+0x12/0xc0 [ 359.786610][T10447] ? __pfx_mmap_region+0x10/0x10 [ 359.786627][T10447] ? cap_mmap_addr+0x4b/0x120 [ 359.786649][T10447] ? bpf_lsm_mmap_addr+0x9/0x30 [ 359.786670][T10447] ? security_mmap_addr+0x71/0x1e0 [ 359.786688][T10447] ? __get_unmapped_area+0x255/0x3e0 [ 359.786709][T10447] do_mmap+0xc63/0x12f0 [ 359.786738][T10447] ? __pfx_do_mmap+0x10/0x10 [ 359.786757][T10447] ? __pfx_down_write_killable+0x10/0x10 [ 359.786774][T10447] ? __pfx_futex_wait+0x10/0x10 [ 359.786795][T10447] vm_mmap_pgoff+0x29e/0x470 [ 359.786818][T10447] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 359.786840][T10447] ? __pfx_do_futex+0x10/0x10 [ 359.786858][T10447] ksys_mmap_pgoff+0xe4/0x610 [ 359.786876][T10447] ? __x64_sys_futex+0x358/0x4d0 [ 359.786891][T10447] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 359.786910][T10447] ? xfd_validate_state+0x129/0x190 [ 359.786930][T10447] __x64_sys_mmap+0x125/0x190 [ 359.786948][T10447] do_syscall_64+0x115/0x840 [ 359.786961][T10447] ? clear_bhb_loop+0x40/0x90 [ 359.786979][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.786994][T10447] RIP: 0033:0x7f4ab599de59 [ 359.787008][T10447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.787022][T10447] RSP: 002b:00007f4ab693a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 359.787037][T10447] RAX: ffffffffffffffda RBX: 00007f4ab5c25fa0 RCX: 00007f4ab599de59 [ 359.787047][T10447] RDX: 0000000000000007 RSI: 0000000000040009 RDI: 0000000000000000 [ 359.787056][T10447] RBP: 00007f4ab5a33e6f R08: 0000000000000007 R09: 0000000000028000 [ 359.787065][T10447] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 359.787075][T10447] R13: 00007f4ab5c26038 R14: 00007f4ab5c25fa0 R15: 00007ffe6cf525a8 [ 359.787095][T10447] [ 360.531269][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 360.541709][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 360.571184][ T29] audit: type=1326 audit(1843105800.700:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10445 comm="syz.4.946" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0119d9de59 code=0x0 [ 361.770090][T10485] FAULT_INJECTION: forcing a failure. [ 361.770090][T10485] name failslab, interval 1, probability 0, space 0, times 0 [ 361.886568][T10485] CPU: 0 UID: 0 PID: 10485 Comm: syz.0.951 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.886596][T10485] Tainted: [L]=SOFTLOCKUP [ 361.886606][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 361.886615][T10485] Call Trace: [ 361.886620][T10485] [ 361.886627][T10485] dump_stack_lvl+0x100/0x190 [ 361.886649][T10485] should_fail_ex.cold+0x5/0xa [ 361.886670][T10485] should_failslab+0xc2/0x120 [ 361.886690][T10485] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 361.886710][T10485] ? cache_create_net+0x2b/0x1f0 [ 361.886730][T10485] kmemdup_noprof+0x29/0x60 [ 361.886747][T10485] cache_create_net+0x2b/0x1f0 [ 361.886766][T10485] gss_svc_init_net+0x11f/0x640 [ 361.886782][T10485] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 361.886800][T10485] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 361.886817][T10485] ops_init+0x1e2/0x5f0 [ 361.886859][T10485] setup_net+0x118/0x3a0 [ 361.886879][T10485] ? __pfx_setup_net+0x10/0x10 [ 361.886897][T10485] ? mutex_init_lockdep+0xf1/0x120 [ 361.886925][T10485] copy_net_ns+0x46f/0x7c0 [ 361.886946][T10485] create_new_namespaces+0x3ea/0xac0 [ 361.886974][T10485] unshare_nsproxy_namespaces+0xf2/0x220 [ 361.886990][T10485] ksys_unshare+0x438/0xab0 [ 361.887009][T10485] ? __pfx_ksys_unshare+0x10/0x10 [ 361.887033][T10485] __x64_sys_unshare+0x31/0x40 [ 361.887049][T10485] do_syscall_64+0x115/0x840 [ 361.887063][T10485] ? clear_bhb_loop+0x40/0x90 [ 361.887081][T10485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.887096][T10485] RIP: 0033:0x7f4ab599de59 [ 361.887109][T10485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.887124][T10485] RSP: 002b:00007f4ab68f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 361.887139][T10485] RAX: ffffffffffffffda RBX: 00007f4ab5c26180 RCX: 00007f4ab599de59 [ 361.887149][T10485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 361.887158][T10485] RBP: 00007f4ab5a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 361.887167][T10485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.887175][T10485] R13: 00007f4ab5c26218 R14: 00007f4ab5c26180 R15: 00007ffe6cf525a8 [ 361.887196][T10485] [ 364.134446][ T6378] Bluetooth: hci1: unexpected event 0x3e length: 356 > 260 [ 364.134470][ T6378] Bluetooth: hci1: unexpected subevent 0x1b length: 355 > 260 [ 364.841310][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 372.949677][T10598] Process accounting resumed [ 377.582527][T10725] FAULT_INJECTION: forcing a failure. [ 377.582527][T10725] name failslab, interval 1, probability 0, space 0, times 0 [ 377.672902][T10725] CPU: 0 UID: 0 PID: 10725 Comm: syz.0.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.672930][T10725] Tainted: [L]=SOFTLOCKUP [ 377.672935][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 377.672944][T10725] Call Trace: [ 377.672950][T10725] [ 377.672956][T10725] dump_stack_lvl+0x100/0x190 [ 377.672979][T10725] should_fail_ex.cold+0x5/0xa [ 377.672997][T10725] should_failslab+0xc2/0x120 [ 377.673016][T10725] __kmalloc_cache_noprof+0x91/0x6c0 [ 377.673041][T10725] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 377.673067][T10725] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 377.673093][T10725] ? snd_pcm_oss_make_ready+0xcb/0x1b0 [ 377.673115][T10725] ? __mutex_lock+0x26d/0x1bd0 [ 377.673131][T10725] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 377.673159][T10725] ? __pfx___mutex_lock+0x10/0x10 [ 377.673174][T10725] ? snd_pcm_oss_sync+0x1a0/0x840 [ 377.673203][T10725] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 377.673232][T10725] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 377.673256][T10725] snd_pcm_oss_sync+0x1de/0x840 [ 377.673281][T10725] snd_pcm_oss_release+0x238/0x300 [ 377.673302][T10725] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 377.673324][T10725] __fput+0x3ff/0xb50 [ 377.673344][T10725] task_work_run+0x150/0x240 [ 377.673364][T10725] ? __pfx_task_work_run+0x10/0x10 [ 377.673389][T10725] exit_to_user_mode_loop+0x1d8/0x6f0 [ 377.673411][T10725] ? rcu_is_watching+0x12/0xc0 [ 377.673432][T10725] do_syscall_64+0x652/0x840 [ 377.673445][T10725] ? clear_bhb_loop+0x40/0x90 [ 377.673463][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.673479][T10725] RIP: 0033:0x7f4ab599de59 [ 377.673492][T10725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.673506][T10725] RSP: 002b:00007f4ab693a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 377.673520][T10725] RAX: 0000000000000000 RBX: 00007f4ab5c25fa0 RCX: 00007f4ab599de59 [ 377.673530][T10725] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 377.673539][T10725] RBP: 00007f4ab5a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 377.673547][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.673556][T10725] R13: 00007f4ab5c26038 R14: 00007f4ab5c25fa0 R15: 00007ffe6cf525a8 [ 377.673575][T10725] [ 378.168030][T10725] netlink: 286 bytes leftover after parsing attributes in process `syz.0.1000'. [ 378.760954][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.771238][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.100410][ T29] audit: type=1800 audit(1843105819.480:11): pid=10750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1009" name="members" dev="configfs" ino=38784 res=0 errno=0 [ 379.278297][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 379.674959][T10774] random: crng reseeded on system resumption [ 380.289418][T10784] random: crng reseeded on system resumption [ 380.446194][T10758] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 382.452594][ T6378] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 382.800165][T10838] FAULT_INJECTION: forcing a failure. [ 382.800165][T10838] name failslab, interval 1, probability 0, space 0, times 0 [ 382.868651][T10838] CPU: 0 UID: 0 PID: 10838 Comm: syz.0.1027 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.868682][T10838] Tainted: [L]=SOFTLOCKUP [ 382.868687][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 382.868697][T10838] Call Trace: [ 382.868702][T10838] [ 382.868708][T10838] dump_stack_lvl+0x100/0x190 [ 382.868729][T10838] should_fail_ex.cold+0x5/0xa [ 382.868747][T10838] should_failslab+0xc2/0x120 [ 382.868767][T10838] kmem_cache_alloc_noprof+0x91/0x6a0 [ 382.868783][T10838] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 382.868799][T10838] ? alloc_vfsmnt+0x23/0x710 [ 382.868819][T10838] alloc_vfsmnt+0x23/0x710 [ 382.868837][T10838] clone_mnt+0x4b/0x930 [ 382.868858][T10838] ? is_subdir+0x1a8/0x3e0 [ 382.868876][T10838] copy_tree+0x329/0xbf0 [ 382.868894][T10838] copy_mnt_ns+0x3fa/0x1180 [ 382.868914][T10838] ? __pfx_copy_mnt_ns+0x10/0x10 [ 382.868930][T10838] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 382.868947][T10838] ? create_new_namespaces+0x30/0xac0 [ 382.868973][T10838] create_new_namespaces+0xd3/0xac0 [ 382.868996][T10838] ? bpf_lsm_capable+0x9/0x10 [ 382.869010][T10838] ? security_capable+0x80/0x260 [ 382.869036][T10838] unshare_nsproxy_namespaces+0xf2/0x220 [ 382.869052][T10838] ksys_unshare+0x438/0xab0 [ 382.869071][T10838] ? __pfx_ksys_unshare+0x10/0x10 [ 382.869096][T10838] __x64_sys_unshare+0x31/0x40 [ 382.869113][T10838] do_syscall_64+0x115/0x840 [ 382.869127][T10838] ? clear_bhb_loop+0x40/0x90 [ 382.869145][T10838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.869161][T10838] RIP: 0033:0x7f4ab599de59 [ 382.869175][T10838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.869189][T10838] RSP: 002b:00007f4ab68d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 382.869204][T10838] RAX: ffffffffffffffda RBX: 00007f4ab5c26270 RCX: 00007f4ab599de59 [ 382.869214][T10838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 382.869223][T10838] RBP: 00007f4ab5a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 382.869232][T10838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.869240][T10838] R13: 00007f4ab5c26308 R14: 00007f4ab5c26270 R15: 00007ffe6cf525a8 [ 382.869260][T10838] [ 384.948797][ T6378] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 386.193309][T10912] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 386.429144][T10908] Process accounting resumed [ 386.569995][T10918] smpboot: CPU 1 is now offline [ 388.417621][T10937] random: crng reseeded on system resumption [ 388.578558][ T29] audit: type=1806 audit(1843105828.965:12): xattr="" res=-22 [ 388.862589][T10951] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 388.944156][T10951] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 389.043430][T10951] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 389.085590][T10953] ovs_: entered promiscuous mode [ 389.130416][T10951] page_type: f5(slab) [ 389.151019][T10951] raw: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 389.201174][T10951] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 389.281356][T10951] head: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 389.369067][T10951] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 389.464635][T10963] netlink: 'syz.4.1055': attribute type 2 has an invalid length. [ 389.474111][T10951] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 389.573490][T10951] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 389.651316][T10951] page dumped because: unmovable page [ 389.761535][T10951] page_owner tracks the page as allocated [ 389.870081][T10951] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4992, tgid 4992 (udevd), ts 37272710006, free_ts 28146636939 [ 390.196136][T10951] post_alloc_hook+0xfd/0x120 [ 390.206540][T10979] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 390.256200][T10951] get_page_from_freelist+0xf48/0x3530 [ 390.317890][T10951] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 390.429059][T10951] new_slab+0xa2/0x650 [ 390.513863][T10951] refill_objects+0xe3/0x410 [ 390.590838][T10951] __pcs_replace_empty_main+0x376/0x680 [ 390.674292][T10951] __kmalloc_noprof+0x66d/0x820 [ 390.738898][T10951] tomoyo_realpath_from_path+0xb6/0x690 [ 390.821493][T10951] tomoyo_check_open_permission+0x2af/0x3c0 [ 390.873668][T10951] tomoyo_file_open+0x6b/0x90 [ 390.965950][T10951] security_file_open+0xb5/0x1e0 [ 391.029565][T10951] do_dentry_open+0x588/0x14d0 [ 391.059073][T10951] vfs_open+0x82/0x3f0 [ 391.091319][T10951] path_openat+0x2873/0x4280 [ 391.125222][T10951] do_file_open+0x20e/0x430 [ 391.146313][T10951] do_sys_openat2+0x10f/0x1e0 [ 391.159695][T10951] page last free pid 1 tgid 1 stack trace: [ 391.180289][T10951] free_pages_prepare+0x586/0xd80 [ 391.196078][T10951] __free_contig_range_common+0x14f/0x250 [ 391.210564][T10951] destroy_args+0xa8/0x7a0 [ 391.225367][T10951] debug_vm_pgtable+0x1d69/0x3490 [ 391.233583][T10951] do_one_initcall+0x11d/0x700 [ 391.249501][T10951] kernel_init_freeable+0x6ea/0x7b0 [ 391.267709][T10951] kernel_init+0x1f/0x1e0 [ 391.282383][T10951] ret_from_fork+0x72b/0xd50 [ 391.291724][T10951] ret_from_fork_asm+0x1a/0x30 [ 391.442392][ T29] audit: type=1326 audit(1843105831.814:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.0.1062" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ab599de59 code=0x0 [ 391.547505][T10998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1063'. [ 391.679473][T11004] binder: 10996:11004 unknown command 0 [ 391.715992][T11004] binder: 10996:11004 ioctl c0306201 200000000000 returned -22 [ 392.288367][T11012] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1067'. [ 393.370377][T11036] FAULT_INJECTION: forcing a failure. [ 393.370377][T11036] name failslab, interval 1, probability 0, space 0, times 0 [ 393.442203][T11036] CPU: 0 UID: 0 PID: 11036 Comm: syz.1.1071 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.442230][T11036] Tainted: [L]=SOFTLOCKUP [ 393.442235][T11036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 393.442244][T11036] Call Trace: [ 393.442250][T11036] [ 393.442256][T11036] dump_stack_lvl+0x100/0x190 [ 393.442277][T11036] should_fail_ex.cold+0x5/0xa [ 393.442294][T11036] should_failslab+0xc2/0x120 [ 393.442313][T11036] __kmalloc_cache_noprof+0x91/0x6c0 [ 393.442335][T11036] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 393.442355][T11036] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 393.442374][T11036] ? loopback_open+0x145/0x1370 [ 393.442395][T11036] loopback_open+0x145/0x1370 [ 393.442416][T11036] snd_pcm_open_substream+0xa76/0x1850 [ 393.442433][T11036] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 393.442450][T11036] ? snd_pcm_oss_open+0x5e5/0x1390 [ 393.442473][T11036] snd_pcm_oss_open+0x735/0x1390 [ 393.442501][T11036] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 393.442522][T11036] ? __lock_acquire+0x49f/0x1a40 [ 393.442544][T11036] ? __pfx_default_wake_function+0x10/0x10 [ 393.442566][T11036] ? do_raw_spin_lock+0x128/0x260 [ 393.442582][T11036] ? soundcore_open+0x231/0x5a0 [ 393.442603][T11036] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 393.442625][T11036] soundcore_open+0x2e3/0x5a0 [ 393.442645][T11036] ? __pfx_soundcore_open+0x10/0x10 [ 393.442663][T11036] chrdev_open+0x234/0x6a0 [ 393.442676][T11036] ? __pfx_apparmor_file_open+0x10/0x10 [ 393.442691][T11036] ? __pfx_chrdev_open+0x10/0x10 [ 393.442716][T11036] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 393.442798][T11036] do_dentry_open+0x6ab/0x14d0 [ 393.442826][T11036] ? __pfx_chrdev_open+0x10/0x10 [ 393.442853][T11036] vfs_open+0x82/0x3f0 [ 393.442872][T11036] path_openat+0x2873/0x4280 [ 393.442904][T11036] ? __pfx_path_openat+0x10/0x10 [ 393.442931][T11036] do_file_open+0x20e/0x430 [ 393.442955][T11036] ? __pfx_do_file_open+0x10/0x10 [ 393.442993][T11036] ? alloc_fd+0x471/0x7a0 [ 393.443017][T11036] ? do_getname+0x191/0x390 [ 393.443035][T11036] do_sys_openat2+0x10f/0x1e0 [ 393.443053][T11036] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.443071][T11036] ? __fget_files+0x21f/0x3d0 [ 393.443097][T11036] __x64_sys_openat+0x12d/0x210 [ 393.443115][T11036] ? __pfx___x64_sys_openat+0x10/0x10 [ 393.443140][T11036] do_syscall_64+0x115/0x840 [ 393.443154][T11036] ? clear_bhb_loop+0x40/0x90 [ 393.443172][T11036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.443187][T11036] RIP: 0033:0x7fcf2579de59 [ 393.443200][T11036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.443215][T11036] RSP: 002b:00007fcf26697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.443229][T11036] RAX: ffffffffffffffda RBX: 00007fcf25a26090 RCX: 00007fcf2579de59 [ 393.443239][T11036] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 393.443248][T11036] RBP: 00007fcf25833e6f R08: 0000000000000000 R09: 0000000000000000 [ 393.443257][T11036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.443266][T11036] R13: 00007fcf25a26128 R14: 00007fcf25a26090 R15: 00007fff58aeaed8 [ 393.443286][T11036] [ 394.768033][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 401.700873][T11165] NFSD: Failed to start, no listeners configured. [ 402.761939][ T29] audit: type=1806 audit(1843105843.128:14): xattr="" res=-22 [ 403.523584][T11200] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1111'. [ 403.568241][T11200] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.601053][T11200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.611078][T11200] IPv6: NLM_F_CREATE should be set when creating new route [ 403.618455][T11200] IPv6: NLM_F_CREATE should be set when creating new route [ 403.669157][T11202] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1111'. [ 403.688665][T11202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.733240][T11216] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 404.860029][ T29] audit: type=1806 audit(1843105845.227:15): xattr="" res=-22 [ 407.040664][ T29] audit: type=1806 audit(1843105847.406:16): xattr="" res=-22 [ 408.392913][ T29] audit: type=1804 audit(1843105848.766:17): pid=11269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1129" name="/newroot/sys/kernel/debug/tracing/saved_tgids" dev="tracefs" ino=3435 res=1 errno=0 [ 410.464826][ T6378] Bluetooth: hci1: Unable to find connection for big 0xe0 [ 410.976171][T11321] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 411.063788][T11322] ovs_: entered promiscuous mode [ 411.101598][T11321] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 411.181984][T11321] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 411.256560][T11321] page_type: f5(slab) [ 411.322069][T11321] raw: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 411.397341][T11321] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 411.439918][T11321] head: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 411.543284][T11321] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 411.603521][T11321] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 411.676166][T11321] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 411.748441][T11321] page dumped because: unmovable page [ 411.809437][T11321] page_owner tracks the page as allocated [ 411.860428][T11321] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4992, tgid 4992 (udevd), ts 37272710006, free_ts 28146636939 [ 411.980665][T11321] post_alloc_hook+0xfd/0x120 [ 412.002775][T11321] get_page_from_freelist+0xf48/0x3530 [ 412.023753][T11321] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 412.050938][T11321] new_slab+0xa2/0x650 [ 412.066760][T11321] refill_objects+0xe3/0x410 [ 412.087756][T11321] __pcs_replace_empty_main+0x376/0x680 [ 412.112594][T11321] __kmalloc_noprof+0x66d/0x820 [ 412.133925][T11321] tomoyo_realpath_from_path+0xb6/0x690 [ 412.161097][T11321] tomoyo_check_open_permission+0x2af/0x3c0 [ 412.186957][T11321] tomoyo_file_open+0x6b/0x90 [ 412.205178][T11321] security_file_open+0xb5/0x1e0 [ 412.227472][T11321] do_dentry_open+0x588/0x14d0 [ 412.253105][T11321] vfs_open+0x82/0x3f0 [ 412.270402][T11321] path_openat+0x2873/0x4280 [ 412.289797][T11321] do_file_open+0x20e/0x430 [ 412.307215][T11321] do_sys_openat2+0x10f/0x1e0 [ 412.329684][T11321] page last free pid 1 tgid 1 stack trace: [ 412.355872][T11321] free_pages_prepare+0x586/0xd80 [ 412.377994][T11321] __free_contig_range_common+0x14f/0x250 [ 412.407103][T11321] destroy_args+0xa8/0x7a0 [ 412.421848][T11321] debug_vm_pgtable+0x1d69/0x3490 [ 412.442951][T11321] do_one_initcall+0x11d/0x700 [ 412.466337][T11321] kernel_init_freeable+0x6ea/0x7b0 [ 412.492681][T11321] kernel_init+0x1f/0x1e0 [ 412.508298][T11321] ret_from_fork+0x72b/0xd50 [ 412.528080][T11321] ret_from_fork_asm+0x1a/0x30 [ 414.862129][T11353] Process accounting resumed [ 417.298058][T11376] Process accounting paused [ 417.458346][ T29] audit: type=1806 audit(1843105857.821:18): xattr="" res=-22 [ 417.474534][T11410] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 417.474559][T11410] CIFS mount error: No usable UNC path provided in device string! [ 417.474559][T11410] [ 417.474712][T11410] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 418.280286][T11429] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5623] was attempted by "_[8Z>&F%,\x0d#Kk`[k7F([TgHi.~[x/<\x5c\x1bgH f2w\x0a\x0d݁,_߹A,UYefχW%DHҀNe{Iۡg״m{\x0cpd%A\x22h#Bb*%>5%\x07.F](Bjbs0\x5c7E:wOb#\x22t-!)-[\x5c8n7e_41>g!e!.G/Vؽ秦Ѥq)_C:`kwD\x09kt}Z?lgf\x07Cl{9竬kK‡ܥg#Ǭ-U}jv4A{+񈕯#(i}f>B>~\x1b~Av ~E:sK |fm#L-t&C\x22T\x09kEq&!COs{tkBq&9e'3p '\x1be=rIGZ\x0a/9O(@/a%5&WDI\x5c^ i]趌I}\x0ahi~3tպz$´n\x5c\x5csoԩqwblqcÙ8Cz\x5cx0>Q|3^Rd-+Zfźg`tDe^oBҚ|e&! ŭ\x0dvxF=]WgY#&w֘D틧uYs3r\x2258@DK/,)e%:\x0cۤ4qW8m^WM [ 419.646300][T11448] random: crng reseeded on system resumption [ 421.093810][T11471] zero sized request [ 422.636403][T11487] random: crng reseeded on system resumption [ 423.784869][ T6378] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 424.198434][ T6378] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.620149][ T6378] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 425.209484][T11530] FAULT_INJECTION: forcing a failure. [ 425.209484][T11530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.266568][T11530] CPU: 0 UID: 0 PID: 11530 Comm: syz.2.1185 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.266596][T11530] Tainted: [L]=SOFTLOCKUP [ 425.266602][T11530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 425.266612][T11530] Call Trace: [ 425.266617][T11530] [ 425.266624][T11530] dump_stack_lvl+0x100/0x190 [ 425.266647][T11530] should_fail_ex.cold+0x5/0xa [ 425.266665][T11530] ? prepare_alloc_pages+0x16d/0x5f0 [ 425.266688][T11530] should_fail_alloc_page+0xeb/0x140 [ 425.266717][T11530] prepare_alloc_pages+0x1f0/0x5f0 [ 425.266741][T11530] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 425.266766][T11530] ? __lock_acquire+0x49f/0x1a40 [ 425.266791][T11530] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 425.266819][T11530] ? is_bpf_text_address+0x8a/0x1a0 [ 425.266838][T11530] ? is_bpf_text_address+0x8a/0x1a0 [ 425.266857][T11530] ? bpf_ksym_find+0x124/0x1c0 [ 425.266872][T11530] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 425.266892][T11530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.266913][T11530] ? policy_nodemask+0xed/0x4f0 [ 425.266933][T11530] alloc_pages_mpol+0x1fb/0x540 [ 425.266953][T11530] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 425.266978][T11530] folio_alloc_mpol_noprof+0x36/0x260 [ 425.267001][T11530] shmem_alloc_folio+0x135/0x160 [ 425.267022][T11530] shmem_alloc_and_add_folio+0x371/0xd40 [ 425.267050][T11530] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 425.267083][T11530] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 425.267112][T11530] shmem_get_folio_gfp+0x6ad/0x1910 [ 425.267140][T11530] ? __lock_acquire+0x49f/0x1a40 [ 425.267161][T11530] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 425.267193][T11530] shmem_fault+0x1f9/0xa20 [ 425.267206][T11530] ? rcu_is_watching+0x12/0xc0 [ 425.267224][T11530] ? __pfx_shmem_fault+0x10/0x10 [ 425.267248][T11530] ? rcu_read_unlock+0x17/0x60 [ 425.267267][T11530] ? find_held_lock+0x2b/0x80 [ 425.267283][T11530] ? rcu_read_unlock+0x17/0x60 [ 425.267302][T11530] ? rcu_read_unlock+0x17/0x60 [ 425.267327][T11530] ? __pfx_filemap_map_pages+0x10/0x10 [ 425.267348][T11530] __do_fault+0x10b/0x440 [ 425.267366][T11530] do_fault+0x2db/0x1750 [ 425.267384][T11530] ? __pmd_alloc+0x3fb/0x950 [ 425.267405][T11530] __handle_mm_fault+0x187d/0x2a00 [ 425.267430][T11530] ? mt_find+0x45e/0x8e0 [ 425.267447][T11530] ? __pfx___handle_mm_fault+0x10/0x10 [ 425.267468][T11530] ? __pfx_mt_find+0x10/0x10 [ 425.267495][T11530] ? find_vma+0xbf/0x140 [ 425.267511][T11530] ? __pfx_find_vma+0x10/0x10 [ 425.267530][T11530] handle_mm_fault+0x37b/0xa30 [ 425.267557][T11530] do_user_addr_fault+0x74c/0x12f0 [ 425.267582][T11530] exc_page_fault+0x6f/0xd0 [ 425.267605][T11530] asm_exc_page_fault+0x26/0x30 [ 425.267620][T11530] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 425.267640][T11530] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 425.267655][T11530] RSP: 0018:ffffc9000348fae8 EFLAGS: 00050206 [ 425.267667][T11530] RAX: 3030363030307830 RBX: 0000000000000000 RCX: 000000000000000b [ 425.267677][T11530] RDX: 0000000000000001 RSI: ffff888032d0c000 RDI: 0000000000000000 [ 425.267686][T11530] RBP: ffffc9000348fd80 R08: 0000000000000000 R09: ffffed10065a1801 [ 425.267695][T11530] R10: ffff888032d0c00a R11: 0000000000000000 R12: 000000000000000b [ 425.267711][T11530] R13: 00007ffffffff000 R14: ffff888032d0c000 R15: 000000000000000b [ 425.267732][T11530] _copy_to_iter+0x391/0x1720 [ 425.267822][T11530] ? __mutex_unlock_slowpath+0x35d/0x930 [ 425.267849][T11530] ? __pfx__copy_to_iter+0x10/0x10 [ 425.267869][T11530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 425.267896][T11530] ? kernfs_put_active+0x93/0xe0 [ 425.267950][T11530] seq_read_iter+0xdab/0x1270 [ 425.267985][T11530] kernfs_fop_read_iter+0x46c/0x610 [ 425.268002][T11530] ? rw_verify_area+0xce/0x6d0 [ 425.268021][T11530] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 425.268039][T11530] vfs_read+0x82e/0xb40 [ 425.268062][T11530] ? __pfx_vfs_read+0x10/0x10 [ 425.268096][T11530] ksys_read+0x12a/0x250 [ 425.268116][T11530] ? __pfx_ksys_read+0x10/0x10 [ 425.268142][T11530] do_syscall_64+0x115/0x840 [ 425.268155][T11530] ? clear_bhb_loop+0x40/0x90 [ 425.268174][T11530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.268188][T11530] RIP: 0033:0x7fbd5039de59 [ 425.268202][T11530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.268216][T11530] RSP: 002b:00007fbd512ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.268233][T11530] RAX: ffffffffffffffda RBX: 00007fbd50625fa0 RCX: 00007fbd5039de59 [ 425.268243][T11530] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000009 [ 425.268252][T11530] RBP: 00007fbd50433e6f R08: 0000000000000000 R09: 0000000000000000 [ 425.268261][T11530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.268269][T11530] R13: 00007fbd50626038 R14: 00007fbd50625fa0 R15: 00007ffcf9f3af98 [ 425.268289][T11530] [ 428.788927][T11550] random: crng reseeded on system resumption [ 429.773626][T11566] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 429.864764][T11572] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1193'. [ 429.982452][T11572] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1193'. [ 430.052019][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 430.667543][T11584] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 432.447020][T11599] syz.1.1199 (11599) used obsolete PPPIOCDETACH ioctl [ 432.859667][T11612] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 433.184875][T11625] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 433.504238][ T6378] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 434.197355][T11642] FAULT_INJECTION: forcing a failure. [ 434.197355][T11642] name failslab, interval 1, probability 0, space 0, times 0 [ 434.354655][T11642] CPU: 0 UID: 0 PID: 11642 Comm: syz.0.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.354685][T11642] Tainted: [L]=SOFTLOCKUP [ 434.354690][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 434.354700][T11642] Call Trace: [ 434.354705][T11642] [ 434.354711][T11642] dump_stack_lvl+0x100/0x190 [ 434.354733][T11642] should_fail_ex.cold+0x5/0xa [ 434.354751][T11642] should_failslab+0xc2/0x120 [ 434.354772][T11642] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 434.354791][T11642] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 434.354808][T11642] ? rcu_is_watching+0x12/0xc0 [ 434.354824][T11642] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 434.354847][T11642] krealloc_node_align_noprof+0x1f9/0x3e0 [ 434.354867][T11642] snd_pcm_hw_rule_add+0x3b3/0x510 [ 434.354887][T11642] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 434.354908][T11642] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 434.354928][T11642] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 434.354950][T11642] ? mutex_init_lockdep+0xf1/0x120 [ 434.354980][T11642] ? snd_pcm_attach_substream+0x287/0xd20 [ 434.355001][T11642] snd_pcm_open_substream+0x942/0x1850 [ 434.355019][T11642] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 434.355037][T11642] ? snd_pcm_oss_open+0x5e5/0x1390 [ 434.355061][T11642] snd_pcm_oss_open+0x735/0x1390 [ 434.355089][T11642] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 434.355110][T11642] ? __lock_acquire+0x49f/0x1a40 [ 434.355131][T11642] ? __pfx_default_wake_function+0x10/0x10 [ 434.355154][T11642] ? do_raw_spin_lock+0x128/0x260 [ 434.355170][T11642] ? soundcore_open+0x231/0x5a0 [ 434.355190][T11642] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 434.355211][T11642] soundcore_open+0x2e3/0x5a0 [ 434.355232][T11642] ? __pfx_soundcore_open+0x10/0x10 [ 434.355250][T11642] chrdev_open+0x234/0x6a0 [ 434.355263][T11642] ? __pfx_apparmor_file_open+0x10/0x10 [ 434.355279][T11642] ? __pfx_chrdev_open+0x10/0x10 [ 434.355302][T11642] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 434.355321][T11642] do_dentry_open+0x6ab/0x14d0 [ 434.355343][T11642] ? __pfx_chrdev_open+0x10/0x10 [ 434.355370][T11642] vfs_open+0x82/0x3f0 [ 434.355390][T11642] path_openat+0x2873/0x4280 [ 434.355421][T11642] ? __pfx_path_openat+0x10/0x10 [ 434.355448][T11642] do_file_open+0x20e/0x430 [ 434.355472][T11642] ? __pfx_do_file_open+0x10/0x10 [ 434.355508][T11642] ? alloc_fd+0x471/0x7a0 [ 434.355531][T11642] ? do_getname+0x191/0x390 [ 434.355550][T11642] do_sys_openat2+0x10f/0x1e0 [ 434.355568][T11642] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.355587][T11642] ? __fget_files+0x21f/0x3d0 [ 434.355612][T11642] __x64_sys_openat+0x12d/0x210 [ 434.355630][T11642] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.355648][T11642] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 434.355672][T11642] ? syscall_user_dispatch+0x76/0x130 [ 434.355689][T11642] do_syscall_64+0x115/0x840 [ 434.355703][T11642] ? clear_bhb_loop+0x40/0x90 [ 434.355721][T11642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.355736][T11642] RIP: 0033:0x7f4ab599de59 [ 434.355751][T11642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.355770][T11642] RSP: 002b:00007f4ab6919028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 434.355786][T11642] RAX: ffffffffffffffda RBX: 00007f4ab5c26090 RCX: 00007f4ab599de59 [ 434.355796][T11642] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 434.355806][T11642] RBP: 00007f4ab5a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 434.355815][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.355824][T11642] R13: 00007f4ab5c26128 R14: 00007f4ab5c26090 R15: 00007ffe6cf525a8 [ 434.355844][T11642] [ 434.785776][T11642] FAULT_INJECTION: forcing a failure. [ 434.785776][T11642] name fail_futex, interval 1, probability 0, space 0, times 0 [ 434.799638][T11642] CPU: 0 UID: 0 PID: 11642 Comm: syz.0.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.799664][T11642] Tainted: [L]=SOFTLOCKUP [ 434.799670][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 434.799680][T11642] Call Trace: [ 434.799685][T11642] [ 434.799691][T11642] dump_stack_lvl+0x100/0x190 [ 434.799713][T11642] should_fail_ex.cold+0x5/0xa [ 434.799730][T11642] get_futex_key+0x1d2/0x14f0 [ 434.799757][T11642] ? __pfx_get_futex_key+0x10/0x10 [ 434.799779][T11642] ? __pfx___css_rstat_updated+0x10/0x10 [ 434.799806][T11642] futex_wake+0xf4/0x5e0 [ 434.799822][T11642] ? find_held_lock+0x2b/0x80 [ 434.799839][T11642] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 434.799859][T11642] ? __pfx_futex_wake+0x10/0x10 [ 434.799939][T11642] ? do_user_addr_fault+0x7de/0x12f0 [ 434.799966][T11642] do_futex+0x2b2/0x440 [ 434.799982][T11642] ? __pfx_do_futex+0x10/0x10 [ 434.799995][T11642] ? lockdep_hardirqs_on+0x78/0x100 [ 434.800019][T11642] ? irqentry_exit+0x24d/0xa00 [ 434.800044][T11642] __x64_sys_futex+0x34f/0x4d0 [ 434.800062][T11642] ? __pfx___x64_sys_futex+0x10/0x10 [ 434.800078][T11642] ? __get_user_nocheck_1+0x6/0x30 [ 434.800099][T11642] ? syscall_user_dispatch+0x76/0x130 [ 434.800117][T11642] do_syscall_64+0x115/0x840 [ 434.800130][T11642] ? clear_bhb_loop+0x40/0x90 [ 434.800149][T11642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.800164][T11642] RIP: 0033:0x7f4ab599de59 [ 434.800178][T11642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.800193][T11642] RSP: 002b:00007f4ab69190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 434.800207][T11642] RAX: ffffffffffffffda RBX: 00007f4ab5c26098 RCX: 00007f4ab599de59 [ 434.800217][T11642] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4ab5c2609c [ 434.800227][T11642] RBP: 00007f4ab5c26090 R08: 0000000000000001 R09: 0000000000000000 [ 434.800236][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.800245][T11642] R13: 00007f4ab5c26128 R14: 00007ffe6cf524c0 R15: 00007ffe6cf525a8 [ 434.800265][T11642] [ 435.091946][T11642] [U] ^R [ 435.945635][T11663] random: crng reseeded on system resumption [ 436.551716][T11670] ubi0: attaching mtd0 [ 436.612115][T11670] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 436.651913][T11670] eraseblock attaching information dump: [ 436.677706][T11670] ec 1 [ 436.694932][T11670] pnum 0 [ 436.713242][T11670] lnum 0 [ 436.736978][T11670] scrub 0 [ 436.766327][T11670] sqnum 1 [ 436.788364][T11670] Volume identifier header dump: [ 436.810020][T11670] magic 55424921 [ 436.827698][T11670] version 1 [ 436.842907][T11670] vol_type 1 [ 436.868473][T11670] copy_flag 0 [ 436.881710][T11670] compat 5 [ 436.894640][T11670] vol_id 2147479551 [ 436.913951][T11670] lnum 0 [ 436.933127][T11670] data_size 0 [ 436.949222][T11670] used_ebs 0 [ 436.964464][T11670] data_pad 0 [ 436.985475][T11670] sqnum 1 [ 436.999366][T11670] hdr_crc 65b3bd2d [ 437.014174][T11670] Volume identifier header hexdump: [ 437.159985][T11670] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 438.512845][T11707] net_ratelimit: 45 callbacks suppressed [ 438.512865][T11707] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 438.526755][T11707] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 439.142300][T11713] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 440.225191][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.231777][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.400230][T11742] FAULT_INJECTION: forcing a failure. [ 440.400230][T11742] name failslab, interval 1, probability 0, space 0, times 0 [ 440.400263][T11742] CPU: 0 UID: 0 PID: 11742 Comm: syz.4.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.400286][T11742] Tainted: [L]=SOFTLOCKUP [ 440.400292][T11742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 440.400301][T11742] Call Trace: [ 440.400306][T11742] [ 440.400313][T11742] dump_stack_lvl+0x100/0x190 [ 440.400335][T11742] should_fail_ex.cold+0x5/0xa [ 440.400355][T11742] should_failslab+0xc2/0x120 [ 440.400376][T11742] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 440.400395][T11742] ? __alloc_skb+0x5b7/0x710 [ 440.400410][T11742] ? __alloc_skb+0x140/0x710 [ 440.400429][T11742] __alloc_skb+0x140/0x710 [ 440.400443][T11742] ? __alloc_skb+0x5b7/0x710 [ 440.400458][T11742] ? __pfx___alloc_skb+0x10/0x10 [ 440.400479][T11742] netlink_alloc_large_skb+0x69/0x150 [ 440.400520][T11742] netlink_sendmsg+0x680/0xda0 [ 440.400547][T11742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.400572][T11742] ? apparmor_socket_sendmsg+0x15b/0x270 [ 440.400665][T11742] ____sys_sendmsg+0xa4d/0xbe0 [ 440.400687][T11742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.400714][T11742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.400744][T11742] ___sys_sendmsg+0x190/0x1e0 [ 440.400766][T11742] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.400786][T11742] ? __lock_acquire+0x49f/0x1a40 [ 440.400830][T11742] __sys_sendmsg+0x160/0x210 [ 440.400847][T11742] ? __pfx___sys_sendmsg+0x10/0x10 [ 440.400878][T11742] do_syscall_64+0x115/0x840 [ 440.400892][T11742] ? clear_bhb_loop+0x40/0x90 [ 440.400910][T11742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.400926][T11742] RIP: 0033:0x7f0119d9de59 [ 440.400940][T11742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.400954][T11742] RSP: 002b:00007f011acdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.400969][T11742] RAX: ffffffffffffffda RBX: 00007f011a026090 RCX: 00007f0119d9de59 [ 440.400979][T11742] RDX: 0000000000004010 RSI: 0000200000000440 RDI: 0000000000000009 [ 440.400990][T11742] RBP: 00007f0119e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 440.400999][T11742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.401008][T11742] R13: 00007f011a026128 R14: 00007f011a026090 R15: 00007ffc0f526738 [ 440.401028][T11742] [ 440.488695][T11747] FAULT_INJECTION: forcing a failure. [ 440.488695][T11747] name failslab, interval 1, probability 0, space 0, times 0 [ 440.488727][T11747] CPU: 0 UID: 0 PID: 11747 Comm: syz.4.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.488748][T11747] Tainted: [L]=SOFTLOCKUP [ 440.488755][T11747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 440.488764][T11747] Call Trace: [ 440.488769][T11747] [ 440.488775][T11747] dump_stack_lvl+0x100/0x190 [ 440.488797][T11747] should_fail_ex.cold+0x5/0xa [ 440.488815][T11747] should_failslab+0xc2/0x120 [ 440.488834][T11747] kmem_cache_alloc_noprof+0x91/0x6a0 [ 440.488851][T11747] ? trace_kmem_cache_alloc+0xdd/0x100 [ 440.488871][T11747] ? security_file_alloc+0x34/0x2c0 [ 440.488893][T11747] security_file_alloc+0x34/0x2c0 [ 440.488911][T11747] init_file+0x95/0x480 [ 440.488928][T11747] alloc_empty_file+0x79/0x1c0 [ 440.488946][T11747] alloc_file_pseudo+0x183/0x290 [ 440.488964][T11747] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 440.488980][T11747] ? alloc_fd+0x471/0x7a0 [ 440.489003][T11747] ? do_raw_spin_unlock+0x145/0x1e0 [ 440.489021][T11747] __anon_inode_getfile+0xe8/0x280 [ 440.489041][T11747] anon_inode_getfile_fmode+0x37/0xa0 [ 440.489059][T11747] __do_sys_fanotify_init+0xa0d/0xe30 [ 440.489084][T11747] do_syscall_64+0x115/0x840 [ 440.489097][T11747] ? clear_bhb_loop+0x40/0x90 [ 440.489115][T11747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.489131][T11747] RIP: 0033:0x7f0119d9de59 [ 440.489144][T11747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.489160][T11747] RSP: 002b:00007f011acba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 440.489178][T11747] RAX: ffffffffffffffda RBX: 00007f011a026180 RCX: 00007f0119d9de59 [ 440.489188][T11747] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000602 [ 440.489196][T11747] RBP: 00007f0119e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 440.489205][T11747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.489214][T11747] R13: 00007f011a026218 R14: 00007f011a026180 R15: 00007ffc0f526738 [ 440.489233][T11747] [ 442.203110][T11768] NFSD: Failed to start, no listeners configured. [ 442.360058][T11770] NFSD: Failed to start, no listeners configured. [ 443.349293][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 443.409477][T11795] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1241'. [ 444.031678][T11798] random: crng reseeded on system resumption [ 444.912477][T11822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1247'. [ 444.998757][T11822] ovs_: entered allmulticast mode [ 445.019030][T11824] binder: 11821:11824 unknown command 0 [ 445.050663][T11824] binder: 11821:11824 ioctl c0306201 200000000000 returned -22 [ 445.616486][T11830] bond0: invalid ARP target specified [ 445.964477][T11838] FAULT_INJECTION: forcing a failure. [ 445.964477][T11838] name failslab, interval 1, probability 0, space 0, times 0 [ 445.979071][T11842] FAULT_INJECTION: forcing a failure. [ 445.979071][T11842] name fail_futex, interval 1, probability 0, space 0, times 0 [ 446.041379][T11842] CPU: 0 UID: 0 PID: 11842 Comm: syz.2.1252 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.041406][T11842] Tainted: [L]=SOFTLOCKUP [ 446.041411][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 446.041421][T11842] Call Trace: [ 446.041426][T11842] [ 446.041432][T11842] dump_stack_lvl+0x100/0x190 [ 446.041453][T11842] should_fail_ex.cold+0x5/0xa [ 446.041469][T11842] get_futex_key+0xf74/0x14f0 [ 446.041495][T11842] ? __pfx_get_futex_key+0x10/0x10 [ 446.041517][T11842] ? lock_acquire+0x1b9/0x370 [ 446.041543][T11842] futex_wake+0xf4/0x5e0 [ 446.041563][T11842] ? __pfx_futex_wake+0x10/0x10 [ 446.041580][T11842] ? find_held_lock+0x2b/0x80 [ 446.041599][T11842] ? exit_mm_release+0x19/0x30 [ 446.041620][T11842] do_futex+0x2b2/0x440 [ 446.041636][T11842] ? __pfx_do_futex+0x10/0x10 [ 446.041649][T11842] ? __might_fault+0xc5/0x140 [ 446.041667][T11842] mm_release+0x24a/0x2f0 [ 446.041682][T11842] do_exit+0x707/0x2ae0 [ 446.041703][T11842] ? __pfx_do_exit+0x10/0x10 [ 446.041721][T11842] ? do_raw_spin_lock+0x128/0x260 [ 446.041735][T11842] ? find_held_lock+0x2b/0x80 [ 446.041751][T11842] ? get_signal+0x7e0/0x21e0 [ 446.041767][T11842] do_group_exit+0xd5/0x2a0 [ 446.041787][T11842] get_signal+0x1ec7/0x21e0 [ 446.041809][T11842] ? __pfx_get_signal+0x10/0x10 [ 446.041825][T11842] ? do_futex+0x190/0x440 [ 446.041841][T11842] arch_do_signal_or_restart+0x91/0x7a0 [ 446.041865][T11842] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 446.041891][T11842] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 446.041915][T11842] exit_to_user_mode_loop+0x139/0x6f0 [ 446.041938][T11842] ? rcu_is_watching+0x12/0xc0 [ 446.041955][T11842] do_syscall_64+0x652/0x840 [ 446.041969][T11842] ? clear_bhb_loop+0x40/0x90 [ 446.041987][T11842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.042001][T11842] RIP: 0033:0x7fbd5039de59 [ 446.042015][T11842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.042028][T11842] RSP: 002b:00007fbd512a90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 446.042043][T11842] RAX: fffffffffffffe00 RBX: 00007fbd50626098 RCX: 00007fbd5039de59 [ 446.042053][T11842] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbd50626098 [ 446.042062][T11842] RBP: 00007fbd50626090 R08: 0000000000000000 R09: 0000000000000000 [ 446.042071][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.042080][T11842] R13: 00007fbd50626128 R14: 00007ffcf9f3aeb0 R15: 00007ffcf9f3af98 [ 446.042098][T11842] [ 446.304222][T11838] CPU: 0 UID: 0 PID: 11838 Comm: syz.4.1250 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.304251][T11838] Tainted: [L]=SOFTLOCKUP [ 446.304257][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 446.304267][T11838] Call Trace: [ 446.304272][T11838] [ 446.304278][T11838] dump_stack_lvl+0x100/0x190 [ 446.304301][T11838] should_fail_ex.cold+0x5/0xa [ 446.304320][T11838] should_failslab+0xc2/0x120 [ 446.304341][T11838] kmem_cache_alloc_noprof+0x91/0x6a0 [ 446.304359][T11838] ? mas_preallocate+0x1105/0x14a0 [ 446.304381][T11838] mas_preallocate+0x1105/0x14a0 [ 446.304401][T11838] ? __lock_acquire+0x49f/0x1a40 [ 446.304422][T11838] ? __pfx_mas_preallocate+0x10/0x10 [ 446.304445][T11838] ? __asan_memset+0x23/0x50 [ 446.304459][T11838] ? init_multi_vma_prep+0x33c/0x650 [ 446.304483][T11838] commit_merge+0x3e3/0xbd0 [ 446.304507][T11838] ? __pfx_commit_merge+0x10/0x10 [ 446.304528][T11838] ? debug_check_no_obj_freed+0x31f/0x630 [ 446.304559][T11838] vma_expand+0xac5/0xea0 [ 446.304584][T11838] ? __pfx_vma_expand+0x10/0x10 [ 446.304606][T11838] ? can_vma_merge_right+0x101/0x720 [ 446.304630][T11838] ? __pfx_can_vma_merge_right+0x10/0x10 [ 446.304660][T11838] vma_merge_new_range+0x516/0xc00 [ 446.304693][T11838] ? __pfx_vma_merge_new_range+0x10/0x10 [ 446.304718][T11838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.304744][T11838] __mmap_region+0xa86/0x2db0 [ 446.304771][T11838] ? __pfx___mmap_region+0x10/0x10 [ 446.304792][T11838] ? __pfx___might_resched+0x10/0x10 [ 446.304821][T11838] ? do_raw_spin_lock+0x128/0x260 [ 446.304841][T11838] ? do_raw_spin_unlock+0x145/0x1e0 [ 446.304856][T11838] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 446.304878][T11838] ? debug_object_activate+0x343/0x4b0 [ 446.304900][T11838] ? __pfx_debug_object_activate+0x10/0x10 [ 446.304919][T11838] ? __lock_acquire+0x49f/0x1a40 [ 446.305016][T11838] ? mark_held_locks+0x40/0x70 [ 446.305047][T11838] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 446.305097][T11838] mmap_region+0x35d/0x620 [ 446.305168][T11838] ? rcu_is_watching+0x12/0xc0 [ 446.305186][T11838] ? __pfx_mmap_region+0x10/0x10 [ 446.305204][T11838] ? cap_mmap_addr+0x4b/0x120 [ 446.305228][T11838] ? bpf_lsm_mmap_addr+0x9/0x30 [ 446.305249][T11838] ? security_mmap_addr+0x71/0x1e0 [ 446.305267][T11838] ? __get_unmapped_area+0x255/0x3e0 [ 446.305296][T11838] do_mmap+0xc63/0x12f0 [ 446.305319][T11838] ? __pfx_do_mmap+0x10/0x10 [ 446.305338][T11838] ? __pfx_down_write_killable+0x10/0x10 [ 446.305355][T11838] ? __pfx_futex_wait+0x10/0x10 [ 446.305377][T11838] vm_mmap_pgoff+0x29e/0x470 [ 446.305401][T11838] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 446.305424][T11838] ? __pfx_do_futex+0x10/0x10 [ 446.305443][T11838] ksys_mmap_pgoff+0xe4/0x610 [ 446.305462][T11838] ? __x64_sys_futex+0x358/0x4d0 [ 446.305478][T11838] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 446.305496][T11838] ? xfd_validate_state+0x129/0x190 [ 446.305517][T11838] __x64_sys_mmap+0x125/0x190 [ 446.305535][T11838] do_syscall_64+0x115/0x840 [ 446.305548][T11838] ? clear_bhb_loop+0x40/0x90 [ 446.305567][T11838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.305582][T11838] RIP: 0033:0x7f0119d9de59 [ 446.305597][T11838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.305621][T11838] RSP: 002b:00007f011acdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 446.305637][T11838] RAX: ffffffffffffffda RBX: 00007f011a026090 RCX: 00007f0119d9de59 [ 446.305647][T11838] RDX: 0000000000000007 RSI: 0000000000040009 RDI: 0000000000000000 [ 446.305656][T11838] RBP: 00007f0119e33e6f R08: 0000000000000007 R09: 0000000000028000 [ 446.305666][T11838] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 446.305675][T11838] R13: 00007f011a026128 R14: 00007f011a026090 R15: 00007ffc0f526738 [ 446.305697][T11838] [ 446.775792][T11835] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 446.851402][T11849] FAULT_INJECTION: forcing a failure. [ 446.851402][T11849] name failslab, interval 1, probability 0, space 0, times 0 [ 446.864554][T11849] CPU: 0 UID: 0 PID: 11849 Comm: syz.0.1254 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.864581][T11849] Tainted: [L]=SOFTLOCKUP [ 446.864587][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 446.864596][T11849] Call Trace: [ 446.864602][T11849] [ 446.864608][T11849] dump_stack_lvl+0x100/0x190 [ 446.864630][T11849] should_fail_ex.cold+0x5/0xa [ 446.864648][T11849] should_failslab+0xc2/0x120 [ 446.864668][T11849] kmem_cache_alloc_noprof+0x91/0x6a0 [ 446.864686][T11849] ? __pmd_alloc+0xbf/0x950 [ 446.864710][T11849] __pmd_alloc+0xbf/0x950 [ 446.864728][T11849] ? mt_find+0x687/0x8e0 [ 446.864745][T11849] huge_pte_alloc+0x5ee/0x730 [ 446.864769][T11849] hugetlb_fault+0x369/0x1410 [ 446.864793][T11849] ? __pfx_hugetlb_fault+0x10/0x10 [ 446.864823][T11849] ? find_vma+0xbf/0x140 [ 446.864839][T11849] ? __pfx_find_vma+0x10/0x10 [ 446.864858][T11849] handle_mm_fault+0x5ff/0xa30 [ 446.864884][T11849] do_user_addr_fault+0x74c/0x12f0 [ 446.864909][T11849] exc_page_fault+0x6f/0xd0 [ 446.864931][T11849] asm_exc_page_fault+0x26/0x30 [ 446.864946][T11849] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 446.864966][T11849] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 2e 0f [ 446.864980][T11849] RSP: 0018:ffffc9000376fe78 EFLAGS: 00050206 [ 446.864992][T11849] RAX: 0000000000000070 RBX: 0000000000000006 RCX: 0000000000000006 [ 446.865001][T11849] RDX: 0000000000000001 RSI: ffffffff8c16b600 RDI: 0000000000000000 [ 446.865010][T11849] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff182d6c0 [ 446.865019][T11849] R10: 0000000000000005 R11: 0000000000000000 R12: ffffffff8c16b600 [ 446.865028][T11849] R13: 0000000000000006 R14: 00007ffffffff000 R15: 0000000000000000 [ 446.865047][T11849] _copy_to_user+0xa4/0xd0 [ 446.865145][T11849] fs_name+0x25e/0x4a0 [ 446.865163][T11849] __x64_sys_sysfs+0xe6/0x120 [ 446.865181][T11849] do_syscall_64+0x115/0x840 [ 446.865194][T11849] ? clear_bhb_loop+0x40/0x90 [ 446.865214][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.865229][T11849] RIP: 0033:0x7f4ab599de59 [ 446.865242][T11849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.865256][T11849] RSP: 002b:00007f4ab693a028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 446.865271][T11849] RAX: ffffffffffffffda RBX: 00007f4ab5c25fa0 RCX: 00007f4ab599de59 [ 446.865280][T11849] RDX: 0000000000000000 RSI: 0100000000000036 RDI: 0000000000000002 [ 446.865289][T11849] RBP: 00007f4ab5a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 446.865298][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.865308][T11849] R13: 00007f4ab5c26038 R14: 00007f4ab5c25fa0 R15: 00007ffe6cf525a8 [ 446.865328][T11849] [ 447.752838][T11837] smpboot: CPU 1 is now offline [ 448.037902][T11847] Process accounting resumed [ 448.192134][T11874] random: crng reseeded on system resumption [ 448.447045][T11878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1260'. [ 450.476114][T11915] FAULT_INJECTION: forcing a failure. [ 450.476114][T11915] name failslab, interval 1, probability 0, space 0, times 0 [ 450.537008][T11915] CPU: 0 UID: 0 PID: 11915 Comm: syz.4.1268 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.537037][T11915] Tainted: [L]=SOFTLOCKUP [ 450.537043][T11915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 450.537053][T11915] Call Trace: [ 450.537058][T11915] [ 450.537064][T11915] dump_stack_lvl+0x100/0x190 [ 450.537086][T11915] should_fail_ex.cold+0x5/0xa [ 450.537105][T11915] should_failslab+0xc2/0x120 [ 450.537126][T11915] __kmalloc_cache_noprof+0x91/0x6c0 [ 450.537150][T11915] ? newque+0xa3/0x680 [ 450.537174][T11915] newque+0xa3/0x680 [ 450.537194][T11915] ipcget+0xee/0xf50 [ 450.537213][T11915] ? __pfx_do_futex+0x10/0x10 [ 450.537230][T11915] ? find_held_lock+0x2b/0x80 [ 450.537248][T11915] ? __pfx_ipcget+0x10/0x10 [ 450.537266][T11915] ? __x64_sys_futex+0x34f/0x4d0 [ 450.537280][T11915] ? __x64_sys_futex+0x358/0x4d0 [ 450.537297][T11915] __x64_sys_msgget+0x125/0x1a0 [ 450.537318][T11915] ? __pfx___x64_sys_msgget+0x10/0x10 [ 450.537344][T11915] do_syscall_64+0x115/0x840 [ 450.537357][T11915] ? clear_bhb_loop+0x40/0x90 [ 450.537375][T11915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.537390][T11915] RIP: 0033:0x7f0119d9de59 [ 450.537404][T11915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.537418][T11915] RSP: 002b:00007f011acfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 450.537440][T11915] RAX: ffffffffffffffda RBX: 00007f011a025fa0 RCX: 00007f0119d9de59 [ 450.537450][T11915] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 450.537459][T11915] RBP: 00007f0119e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 450.537468][T11915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.537477][T11915] R13: 00007f011a026038 R14: 00007f011a025fa0 R15: 00007ffc0f526738 [ 450.537498][T11915] [ 450.817924][T11912] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1265: iget: checksum invalid [ 450.829579][T11912] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 450.841005][T11912] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1265: iget: checksum invalid [ 450.852268][T11912] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 450.862714][T11912] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1265: iget: checksum invalid [ 450.874568][T11912] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 450.885420][T11912] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1265: iget: checksum invalid [ 450.896566][T11912] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 450.906024][T11912] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 450.916402][T11912] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 451.435944][T11924] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 452.095413][T11943] FAULT_INJECTION: forcing a failure. [ 452.095413][T11943] name failslab, interval 1, probability 0, space 0, times 0 [ 452.141893][T11945] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 452.166712][T11943] CPU: 0 UID: 0 PID: 11943 Comm: syz.1.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.166747][T11943] Tainted: [L]=SOFTLOCKUP [ 452.166753][T11943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 452.166762][T11943] Call Trace: [ 452.166767][T11943] [ 452.166774][T11943] dump_stack_lvl+0x100/0x190 [ 452.166796][T11943] should_fail_ex.cold+0x5/0xa [ 452.166814][T11943] should_failslab+0xc2/0x120 [ 452.166834][T11943] kmem_cache_alloc_noprof+0x91/0x6a0 [ 452.166850][T11943] ? stack_trace_save+0x8e/0xc0 [ 452.166871][T11943] ? alloc_empty_file+0x5b/0x1c0 [ 452.166891][T11943] alloc_empty_file+0x5b/0x1c0 [ 452.166908][T11943] path_openat+0xe7/0x4280 [ 452.166929][T11943] ? __kasan_slab_alloc+0x89/0x90 [ 452.166946][T11943] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 452.166961][T11943] ? do_getname+0x35/0x390 [ 452.166978][T11943] ? do_sys_openat2+0xc7/0x1e0 [ 452.166996][T11943] ? __x64_sys_openat+0x12d/0x210 [ 452.167012][T11943] ? do_syscall_64+0x115/0x840 [ 452.167025][T11943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.167046][T11943] ? __pfx_path_openat+0x10/0x10 [ 452.167074][T11943] do_file_open+0x20e/0x430 [ 452.167097][T11943] ? __pfx_do_file_open+0x10/0x10 [ 452.167133][T11943] ? alloc_fd+0x471/0x7a0 [ 452.167157][T11943] ? do_getname+0x191/0x390 [ 452.167175][T11943] do_sys_openat2+0x10f/0x1e0 [ 452.167193][T11943] ? __pfx_do_sys_openat2+0x10/0x10 [ 452.167217][T11943] __x64_sys_openat+0x12d/0x210 [ 452.167239][T11943] ? __pfx___x64_sys_openat+0x10/0x10 [ 452.167265][T11943] do_syscall_64+0x115/0x840 [ 452.167278][T11943] ? clear_bhb_loop+0x40/0x90 [ 452.167296][T11943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.167312][T11943] RIP: 0033:0x7fcf2579de59 [ 452.167325][T11943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.167340][T11943] RSP: 002b:00007fcf266b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 452.167354][T11943] RAX: ffffffffffffffda RBX: 00007fcf25a25fa0 RCX: 00007fcf2579de59 [ 452.167364][T11943] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 452.167374][T11943] RBP: 00007fcf25833e6f R08: 0000000000000000 R09: 0000000000000000 [ 452.167383][T11943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.167393][T11943] R13: 00007fcf25a26038 R14: 00007fcf25a25fa0 R15: 00007fff58aeaed8 [ 452.167413][T11943] [ 452.687796][T11945] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 452.731210][T11945] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 452.773102][T11945] page_type: f5(slab) [ 452.785554][T11945] raw: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 452.809625][T11945] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 452.865210][T11948] openvswitch: ovs_: Dropping previously announced user features [ 452.896878][T11945] head: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 452.980065][T11945] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 453.012780][T11945] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 453.036162][T11945] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 453.071481][T11945] page dumped because: unmovable page [ 453.087494][T11945] page_owner tracks the page as allocated [ 453.101703][T11945] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4992, tgid 4992 (udevd), ts 37272710006, free_ts 28146636939 [ 453.175561][T11945] post_alloc_hook+0xfd/0x120 [ 453.210368][T11945] get_page_from_freelist+0xf48/0x3530 [ 453.222252][T11945] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 453.238396][T11945] new_slab+0xa2/0x650 [ 453.248437][T11945] refill_objects+0xe3/0x410 [ 453.258634][T11945] __pcs_replace_empty_main+0x376/0x680 [ 453.272628][T11945] __kmalloc_noprof+0x66d/0x820 [ 453.311949][T11945] tomoyo_realpath_from_path+0xb6/0x690 [ 453.405919][T11945] tomoyo_check_open_permission+0x2af/0x3c0 [ 453.499832][T11945] tomoyo_file_open+0x6b/0x90 [ 453.552097][T11945] security_file_open+0xb5/0x1e0 [ 453.573194][T11945] do_dentry_open+0x588/0x14d0 [ 453.587869][T11945] vfs_open+0x82/0x3f0 [ 453.602344][T11945] path_openat+0x2873/0x4280 [ 453.619358][T11945] do_file_open+0x20e/0x430 [ 453.635444][T11945] do_sys_openat2+0x10f/0x1e0 [ 453.652649][T11945] page last free pid 1 tgid 1 stack trace: [ 453.672481][T11945] free_pages_prepare+0x586/0xd80 [ 453.696016][T11945] __free_contig_range_common+0x14f/0x250 [ 453.736316][T11945] destroy_args+0xa8/0x7a0 [ 453.768604][T11945] debug_vm_pgtable+0x1d69/0x3490 [ 453.789818][T11945] do_one_initcall+0x11d/0x700 [ 453.800768][T11945] kernel_init_freeable+0x6ea/0x7b0 [ 453.817049][T11945] kernel_init+0x1f/0x1e0 [ 453.837918][T11945] ret_from_fork+0x72b/0xd50 [ 453.868826][T11945] ret_from_fork_asm+0x1a/0x30 [ 454.613890][T11966] dlm: non-version read from control device 2147479540 [ 456.124276][T11995] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 456.361446][T11997] vhci_hcd vhci_hcd.2: invalid port number 135 [ 456.406340][T11997] vhci_hcd vhci_hcd.2: invalid port number 135 [ 457.307070][T12021] random: crng reseeded on system resumption [ 458.596937][T12051] ================================================================== [ 458.596960][T12051] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 458.597041][T12051] Write of size 8 at addr ffffc90004a91000 by task syz.0.1300/12051 [ 458.597055][T12051] [ 458.597065][T12051] CPU: 0 UID: 0 PID: 12051 Comm: syz.0.1300 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.597087][T12051] Tainted: [L]=SOFTLOCKUP [ 458.597093][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 458.597103][T12051] Call Trace: [ 458.597109][T12051] [ 458.597115][T12051] dump_stack_lvl+0x100/0x190 [ 458.597132][T12051] print_report+0x13d/0x4b0 [ 458.597154][T12051] ? _raw_spin_lock_irqsave+0x52/0x60 [ 458.597176][T12051] ? sys_fillrect+0x174a/0x1910 [ 458.597194][T12051] kasan_report+0xdf/0x1c0 [ 458.597214][T12051] ? sys_fillrect+0x174a/0x1910 [ 458.597231][T12051] sys_fillrect+0x174a/0x1910 [ 458.597250][T12051] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 458.597332][T12051] bit_clear+0x17d/0x220 [ 458.597354][T12051] ? __pfx_bit_clear+0x10/0x10 [ 458.597377][T12051] ? fb_get_color_depth+0x120/0x250 [ 458.597419][T12051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 458.597441][T12051] __fbcon_clear+0x633/0x760 [ 458.597462][T12051] ? __pfx_bit_clear+0x10/0x10 [ 458.597485][T12051] fbcon_scroll+0x48b/0x650 [ 458.597506][T12051] con_scroll+0x464/0x690 [ 458.597548][T12051] csi_ECMA.constprop.0+0x1238/0x3b60 [ 458.597589][T12051] ? find_held_lock+0x2b/0x80 [ 458.597607][T12051] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 458.597628][T12051] do_con_write+0x3660/0x4a30 [ 458.597651][T12051] ? __pfx_do_con_write+0x10/0x10 [ 458.597669][T12051] ? tty_put_char+0xc5/0x160 [ 458.597709][T12051] ? add_softcursor+0x140/0x290 [ 458.597724][T12051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 458.597745][T12051] con_write+0x23/0xb0 [ 458.597763][T12051] n_tty_write+0x431/0x1160 [ 458.597813][T12051] ? __pfx_n_tty_write+0x10/0x10 [ 458.597839][T12051] ? __kasan_kmalloc+0xaa/0xb0 [ 458.597857][T12051] ? __pfx_woken_wake_function+0x10/0x10 [ 458.597872][T12051] ? rcu_is_watching+0x12/0xc0 [ 458.597888][T12051] ? file_tty_write.isra.0+0x694/0x890 [ 458.597905][T12051] ? kfree+0x1e5/0x6c0 [ 458.597925][T12051] ? __pfx_n_tty_write+0x10/0x10 [ 458.597946][T12051] file_tty_write.isra.0+0x4d2/0x890 [ 458.597965][T12051] redirected_tty_write+0xd4/0x120 [ 458.597981][T12051] vfs_write+0x6ac/0x1050 [ 458.598002][T12051] ? __pfx_redirected_tty_write+0x10/0x10 [ 458.598020][T12051] ? __pfx_vfs_write+0x10/0x10 [ 458.598040][T12051] ? find_held_lock+0x2b/0x80 [ 458.598061][T12051] ksys_write+0x12a/0x250 [ 458.598081][T12051] ? __pfx_ksys_write+0x10/0x10 [ 458.598104][T12051] do_syscall_64+0x115/0x840 [ 458.598117][T12051] ? clear_bhb_loop+0x40/0x90 [ 458.598134][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.598149][T12051] RIP: 0033:0x7f4ab599de59 [ 458.598163][T12051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.598177][T12051] RSP: 002b:00007f4ab68f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.598192][T12051] RAX: ffffffffffffffda RBX: 00007f4ab5c26180 RCX: 00007f4ab599de59 [ 458.598203][T12051] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 458.598213][T12051] RBP: 00007f4ab5a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 458.598223][T12051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.598232][T12051] R13: 00007f4ab5c26218 R14: 00007f4ab5c26180 R15: 00007ffe6cf525a8 [ 458.598247][T12051] [ 458.598252][T12051] [ 458.598257][T12051] The buggy address belongs to a vmalloc virtual mapping [ 458.598268][T12051] Memory state around the buggy address: [ 458.598276][T12051] ffffc90004a90f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 458.598287][T12051] ffffc90004a90f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 458.598298][T12051] >ffffc90004a91000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 458.598306][T12051] ^ [ 458.598313][T12051] ffffc90004a91080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 458.598331][T12051] ffffc90004a91100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 458.598339][T12051] ================================================================== [ 458.650021][T12051] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 458.650043][T12051] CPU: 0 UID: 0 PID: 12051 Comm: syz.0.1300 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.650067][T12051] Tainted: [L]=SOFTLOCKUP [ 458.650073][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 458.650082][T12051] Call Trace: [ 458.650088][T12051] [ 458.650094][T12051] dump_stack_lvl+0x100/0x190 [ 458.650114][T12051] vpanic+0x552/0x970 [ 458.650128][T12051] ? __pfx_vpanic+0x10/0x10 [ 458.650144][T12051] ? sys_fillrect+0x174a/0x1910 [ 458.650161][T12051] panic+0xd1/0xe0 [ 458.650175][T12051] ? __pfx_panic+0x10/0x10 [ 458.650194][T12051] ? sys_fillrect+0x174a/0x1910 [ 458.650210][T12051] ? preempt_schedule_common+0x42/0xc0 [ 458.650253][T12051] check_panic_on_warn.cold+0x19/0x34 [ 458.650269][T12051] end_report.part.0+0x3a/0x90 [ 458.650291][T12051] kasan_report.cold+0xe/0x18 [ 458.650312][T12051] ? sys_fillrect+0x174a/0x1910 [ 458.650331][T12051] sys_fillrect+0x174a/0x1910 [ 458.650350][T12051] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 458.650374][T12051] bit_clear+0x17d/0x220 [ 458.650403][T12051] ? __pfx_bit_clear+0x10/0x10 [ 458.650425][T12051] ? fb_get_color_depth+0x120/0x250 [ 458.650447][T12051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 458.650469][T12051] __fbcon_clear+0x633/0x760 [ 458.650490][T12051] ? __pfx_bit_clear+0x10/0x10 [ 458.650583][T12051] fbcon_scroll+0x48b/0x650 [ 458.650611][T12051] con_scroll+0x464/0x690 [ 458.650630][T12051] csi_ECMA.constprop.0+0x1238/0x3b60 [ 458.650654][T12051] ? find_held_lock+0x2b/0x80 [ 458.650753][T12051] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 458.650784][T12051] do_con_write+0x3660/0x4a30 [ 458.650817][T12051] ? __pfx_do_con_write+0x10/0x10 [ 458.650836][T12051] ? tty_put_char+0xc5/0x160 [ 458.650853][T12051] ? add_softcursor+0x140/0x290 [ 458.650869][T12051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 458.650892][T12051] con_write+0x23/0xb0 [ 458.650910][T12051] n_tty_write+0x431/0x1160 [ 458.650934][T12051] ? __pfx_n_tty_write+0x10/0x10 [ 458.650954][T12051] ? __kasan_kmalloc+0xaa/0xb0 [ 458.650971][T12051] ? __pfx_woken_wake_function+0x10/0x10 [ 458.650987][T12051] ? rcu_is_watching+0x12/0xc0 [ 458.651002][T12051] ? file_tty_write.isra.0+0x694/0x890 [ 458.651026][T12051] ? kfree+0x1e5/0x6c0 [ 458.651047][T12051] ? __pfx_n_tty_write+0x10/0x10 [ 458.651068][T12051] file_tty_write.isra.0+0x4d2/0x890 [ 458.651088][T12051] redirected_tty_write+0xd4/0x120 [ 458.651105][T12051] vfs_write+0x6ac/0x1050 [ 458.651128][T12051] ? __pfx_redirected_tty_write+0x10/0x10 [ 458.651146][T12051] ? __pfx_vfs_write+0x10/0x10 [ 458.651166][T12051] ? find_held_lock+0x2b/0x80 [ 458.651188][T12051] ksys_write+0x12a/0x250 [ 458.651221][T12051] ? __pfx_ksys_write+0x10/0x10 [ 458.651248][T12051] do_syscall_64+0x115/0x840 [ 458.651263][T12051] ? clear_bhb_loop+0x40/0x90 [ 458.651283][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.651300][T12051] RIP: 0033:0x7f4ab599de59 [ 458.651317][T12051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.651333][T12051] RSP: 002b:00007f4ab68f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.651349][T12051] RAX: ffffffffffffffda RBX: 00007f4ab5c26180 RCX: 00007f4ab599de59 [ 458.651361][T12051] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 458.651372][T12051] RBP: 00007f4ab5a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 458.651383][T12051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.651393][T12051] R13: 00007f4ab5c26218 R14: 00007f4ab5c26180 R15: 00007ffe6cf525a8 [ 458.651409][T12051] [ 458.651479][T12051] Kernel Offset: disabled