last executing test programs: 23m55.907307379s ago: executing program 1 (id=596): unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) bpf$auto(0x5, 0x0, 0x39) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port6/quirks\x00', 0x62181, 0x0) io_uring_register$auto_IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f00000000c0)="3547d08e5617809e56a08d5a8a7610d20249208b4c4efebd75efe6d06a0c78590833d6cec684963048051c633aec39e966fcdd1ab4dc", 0xc) writev$auto(r0, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x381502, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) read$auto(r1, 0x0, 0x10001) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) fstat$auto(0x2, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) write$auto(0x3, 0x0, 0x200ffd8) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r2, &(0x7f0000000240)=""/177, 0xb1) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) 23m54.240619368s ago: executing program 1 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0xc840) 23m54.044886001s ago: executing program 1 (id=601): mmap$auto(0x0, 0x3, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000180), r0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0xfffffffffffffffb, 0xffffffffffff0007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(r1, 0x0, 0x103, 0x0, 0x9) io_uring_setup$auto(0x8, 0x0) connect$auto(0x3, 0x0, 0x57) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f00000000c0)={0xffff, &(0x7f0000000140)=&(0x7f0000000380)="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", 0x5f}) r2 = pidfd_open$auto(0x1, 0x0) ftruncate$auto(r2, 0x2000000700) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x28001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)='n', 0x1) socket(0x23, 0x80805, 0x0) write$auto(0x3, 0x0, 0xfdef) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/xfs/xqm\x00', 0x1c9802, 0x0) pread64$auto(r4, 0x0, 0x100000001, 0x2000006) ioctl$auto(r2, 0x89ea, r4) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x5607, r5) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) 23m52.267327138s ago: executing program 1 (id=604): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x5, 0x7aabb7ea, 0x0, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x5, 0x1, 0x1, 0xc, 0x4, 0x6, 0x0, 0x8, 0x4, 0x3, 0x7, 0x0, 0x3, 0x40, 0x40, 0x40, 0x5, 0x4, 0x8, 0x7, 0x8, 0x3, 0x6820, 0xb3, 0x9efe, 0x6, 0x72, 0x8, 0x5, 0x931c, 0x2f, 0x3, 0xff, 0xfffffffb, 0x80000000, 0x74814ca1, 0x0, 0xd0, 0x20, 0x3, 0x6, 0x10001, 0x5, 0x0, 0xffffffd9, 0x9, 0x3, 0x10, 0x3, 0x12, 0x6578, 0xfffffff9, 0x2, 0x1b, 0xa9, 0x6, 0x7, 0x3, 0xca92, 0x82, 0x9, 0x2, 0xa, 0xb4b3, 0x2, 0x7, 0x3ff, 0x6, 0x5, 0x9, 0x63a4183b, 0x0, 0x4d84, 0x3bc, 0x2, 0x0, 0x8, 0x10, 0x10000, 0x30f5, 0x8000, 0x56f, 0x7, 0x4, 0x1ff, 0x10001, 0x3, 0xffff, 0x40, 0x17, 0x8, 0x6, 0x6, 0x5, 0x1ff, 0x65bb, 0x29, 0x7, 0xfffffffe, 0x4, 0x5, 0x2, 0x3, 0xf2, 0xe, 0x0, 0x6, 0xffffffff, 0x0, 0xa896, 0x2, 0x1, 0x200, 0x7, 0x2, 0x8, 0x4, 0xf04, 0x6, 0x3, 0xe9b, 0x12d, 0x9, 0x4, 0x5, 0x3, 0x8, 0x40000000], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca00000000000000008d501b1329af8d4108ac0400000000040000a1b2dfae0f309c6ea588833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) sendfile$auto(0x3, r1, 0x0, 0x100400000000006) epoll_create$auto(0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 23m51.177393014s ago: executing program 1 (id=607): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x560a, r1) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x48084) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x100, 0x0) read$auto_buffer_percent_fops_trace(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = memfd_create$auto(0x0, 0xe) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, 0x0, 0x24084005) listen$auto(0x3, 0x81) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r3, 0x8000) r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x101, 0x103) unshare$auto(0x40000080) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(r1, r1, 0x2) 23m48.907073642s ago: executing program 1 (id=613): setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x5, 0x403}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x80}, 0x0) r0 = socket(0xa, 0x1, 0x6) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) mmap$auto(0x0, 0x20009, 0x4000000000e3, 0xeb2, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0x28, 0x1, 0x0) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop9/hctx0/active\x00', 0x800, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f00000002c0)=""/243, 0xf3) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0x801, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mincore$auto(0x1000, 0x4000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'nicvf0\x00', 0x0}) getitimer$auto(0x9, &(0x7f0000000140)={{0x4f72, 0x5}, {0x7fff, 0x7}}) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000080)=@query={@target_ifindex=r5, 0x3, 0xffff, 0x40, 0x6, @prog_cnt=0x1, 0x0, 0xdc56, 0x10001, 0x3, 0xa}, 0x8) ioctl$auto(0x3, 0x894b, 0x38) 23m33.743898869s ago: executing program 32 (id=613): setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x5, 0x403}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x80}, 0x0) r0 = socket(0xa, 0x1, 0x6) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) mmap$auto(0x0, 0x20009, 0x4000000000e3, 0xeb2, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0x28, 0x1, 0x0) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop9/hctx0/active\x00', 0x800, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f00000002c0)=""/243, 0xf3) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0x801, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mincore$auto(0x1000, 0x4000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'nicvf0\x00', 0x0}) getitimer$auto(0x9, &(0x7f0000000140)={{0x4f72, 0x5}, {0x7fff, 0x7}}) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000080)=@query={@target_ifindex=r5, 0x3, 0xffff, 0x40, 0x6, @prog_cnt=0x1, 0x0, 0xdc56, 0x10001, 0x3, 0xa}, 0x8) ioctl$auto(0x3, 0x894b, 0x38) 9m47.712662116s ago: executing program 0 (id=2655): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r0, 0xda6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) ioctl$auto_SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000300)="9ecfe23faf21ec061f67505cee80359b76318976b5d595aa8f4ca0ffffb66ac2a2edbf4d3c7b28647ebda19baa0efc0402655faa21e0758965458306dd509cce26e3503cc9ca6b6ec6b953f9fb9f6cecd1ff838c923ef0e11a98ee88b2655d771e6e1ca1f0e442c55ad9b03084b37b6da9f5c9c63017cf63704abd1bdf37844fa73ad4f8dee604a60f105c47c5a3af35c02b4bc2197527b4e4") bind$auto(r2, &(0x7f0000000100)=@xdp={0x2c, 0xc, r4, 0x1e}, 0x6b) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0xfbff) socket(0xa, 0x1, 0x84) r6 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETPAGEFILE(r6, 0x7a9, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r9, r8, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) 9m46.983584214s ago: executing program 0 (id=2658): r0 = socket(0x22, 0x80000, 0x7) mmap$auto(0x3, 0x20005, 0x0, 0x10, 0xffffffffffffffff, 0xfffefffffffffffe) r1 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000140)="61e35d7d", 0x4}, 0x1) close_range$auto(0x2, 0x8, 0x0) wait4$auto(0xffffffffffffffff, &(0x7f0000000140)=0xd8de95b, 0x5, &(0x7f00000001c0)={{0xffffffffffff0001, 0x8}, {0x2, 0x6}, 0xa3, 0x1, 0x8000000080000001, 0x9, 0x200, 0xffffffffffffffff, 0x9004, 0x1, 0xffffffffffffffff, 0x9, 0x2, 0x7fffffff, 0x3, 0x6}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/arp_tables_matches\x00', 0xa502, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x40401, 0x0) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xd, 0x2007d48, 0x948b, 0x4, 0x0, 0x4b, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x3a) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f00000008c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000280), 0xf4e9, 0x0) removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G') openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/free_buffer\x00', 0x34d6c3, 0xebff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x85000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) write$auto(0xffffffffffffffff, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2) mmap$auto(0xfffffffffffffffd, 0x3fffff, 0x0, 0x11, r0, 0x1) 9m45.582336227s ago: executing program 0 (id=2659): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) setsockopt$auto_SO_RCVBUF(r0, 0x0, 0x8, &(0x7f0000000040)='\x00', 0x4) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) swapon$auto(&(0x7f00000028c0)='/proc/bus/pci/00/01.3\x00\xd99\xf0q\xb8\xd7]\xa8\xac\x1f\r\x04\x00\x00\x00\x00\x00\x00\x00\xb8\x8a\x8a\x9f\xd9\x9f\x9e\xe3\xfc\\\x18\x9d\xa3x\x97U(\x99\xa8u\x96\xd0\xe6F\xcb\x1eH\xca\x8e)\xf4\xc0z\xbfo\xc4a`\x8fs\xf6\xb9\xe17\x89\x1b^} \xf1\x83\x12\xb5\xa7\xfef\xa6#{15\x89\xfa\xab9\xa3\xb1\x95\x8a\xc9:O\xb5\x89B3\x9aZ{@\xd3<\xe2VC\xe3\xce%\xde=\xd4R\x927\xd9l\x01\x8f2U', 0x3) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 9m45.133660026s ago: executing program 0 (id=2661): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/index\x00', 0xaa340, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/43, 0x2b) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r1 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x41, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x1, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x1, 0x4, 0xfffffff8, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x3, 0x3, 0x0, 0x400000000000000, 0x0, 0x0, 0x3, 0x800000000000000, 0x5]}, 0x1fe, 0xb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) read$auto(r1, 0x0, 0x3) mmap$auto(0x20, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/limit_max\x00', 0x82942, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r5], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 9m44.506986441s ago: executing program 0 (id=2663): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) mmap$auto(0x2, 0x1, 0x81, 0x10, 0xffffffffffffffff, 0x20d) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty6\x00', 0x8401, 0x0) ioctl$auto(r0, 0x9, r0) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS2\x00', 0x50bc83, 0x0) preadv$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xc}, 0x8, 0xe637, 0x200006) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r3, 0x3, 0x0, 0x400000000008) io_uring_setup$auto(0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$auto_SO_PROTOCOL(0xffffffffffffffff, 0xb29, 0x26, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) open$dir(&(0x7f0000000180)='./file0\x00', 0x20000, 0x110) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/231, 0xe7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x4602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x15, r1, 0x8000) madvise$auto(0x0, 0x400053, 0x9) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) landlock_add_rule$auto(r5, 0x2, 0x0, 0xd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer\x00', 0x8081, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) set_mempolicy$auto(0x4, &(0x7f0000000080)=0x400000009, 0x21) kexec_load$auto(0x0, 0x2, 0x0, 0x1000000000004) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 9m43.789527998s ago: executing program 0 (id=2665): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x184002, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000500)={{r0, &(0x7f0000000180)="5ded88b67ca557de60b133d029db76d2eae209eeec38d37f535fc435052c90bdb42c4826d45c28ceeb29b0b47b90fff7f372f6a167d32baaa8ca3eb14f2f03e1eec9f8ac5536675bec45bb3e6fb7b0d2dbcb573770b305ab995ec22bf9ff5001f9e945145ddba84a714607d4d0032c9a51ab918b5923c544c7b1918286b14409082795e82acb0944731094e27b5fa40be44a83c396b024f4c05a6256fb341cfeb1223915b923b5b18a78d3db705dce782d319f3898a82a272dc3be38a36005b6717a0b1e98c52f30ca8c75bc99fee627b023d9d2880c35158cf7", 0xca, &(0x7f0000000640)="b1c8837e11a322b1a71054792f8c83485a171f23ddc946ec64675f1fa0d58a1ae65310091abe5f0a453649df84ca166aceca0f5395df92db1a1d048b6066cfc0a6ec07613f7d7f3f66ad7e1ac891c6ff6b33763f593aef9a649dc7c91ea81b660aacd1e5d0508b85f6ac9e1af44491e5e2b2f9126594f5e9d5336e293068b6b9095ddd42465647dd8e9335c98debadbee5b73716024a", 0x1, &(0x7f0000000340)="e5fb2524bb2512bc751fea6d4153cc27feb4523064eeddb33844044051c15a9e3e9ca9b8abba744676192d7374e5c8a65c41d880e7a8e2e0b9f5b87c8462a975d3593a4a54cc660dcce7bd4bee", &(0x7f00000003c0)=0x2}, {[0x8, 0x8, 0x5, 0x1]}, 0x1, 0x401, &(0x7f0000000400)="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"}) ioctl$auto(r1, 0x7, r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x1000000000007111}, 0x1) mmap$auto(0x0, 0x80004, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop12\x00', 0x14fa02, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000600), 0x4000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x2, 0x6) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x820d02, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:160/strict_limit\x00', 0x103a42, 0x0) socketpair$auto(0x4001, 0x8, 0x7, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ttyS2\x00', 0x101e01, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) 9m28.410890342s ago: executing program 33 (id=2665): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x184002, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000500)={{r0, &(0x7f0000000180)="5ded88b67ca557de60b133d029db76d2eae209eeec38d37f535fc435052c90bdb42c4826d45c28ceeb29b0b47b90fff7f372f6a167d32baaa8ca3eb14f2f03e1eec9f8ac5536675bec45bb3e6fb7b0d2dbcb573770b305ab995ec22bf9ff5001f9e945145ddba84a714607d4d0032c9a51ab918b5923c544c7b1918286b14409082795e82acb0944731094e27b5fa40be44a83c396b024f4c05a6256fb341cfeb1223915b923b5b18a78d3db705dce782d319f3898a82a272dc3be38a36005b6717a0b1e98c52f30ca8c75bc99fee627b023d9d2880c35158cf7", 0xca, &(0x7f0000000640)="b1c8837e11a322b1a71054792f8c83485a171f23ddc946ec64675f1fa0d58a1ae65310091abe5f0a453649df84ca166aceca0f5395df92db1a1d048b6066cfc0a6ec07613f7d7f3f66ad7e1ac891c6ff6b33763f593aef9a649dc7c91ea81b660aacd1e5d0508b85f6ac9e1af44491e5e2b2f9126594f5e9d5336e293068b6b9095ddd42465647dd8e9335c98debadbee5b73716024a", 0x1, &(0x7f0000000340)="e5fb2524bb2512bc751fea6d4153cc27feb4523064eeddb33844044051c15a9e3e9ca9b8abba744676192d7374e5c8a65c41d880e7a8e2e0b9f5b87c8462a975d3593a4a54cc660dcce7bd4bee", &(0x7f00000003c0)=0x2}, {[0x8, 0x8, 0x5, 0x1]}, 0x1, 0x401, &(0x7f0000000400)="2b745597c628cb3eb5ccc83762498b334bf11bba250b8b50ab6ef085f9b74c2005b4e937b2f7df814dc4ebe69bf3b59c6607f4f58ef9fb4d0306318fd568ef359f40b0c2f9c5aed4727fee9b8d2f2f19b5b9de8781b8ad9cbd4715fdcc0f9bb5adac75a21fd0593c6886fb077cfa0d8a399059c499641ec44c05580c3a56a3f1dddd30a10a8c4c091e51eaf5d611821a0e852340b3fe3e1c2f459ac4dc9d8cf8e7cfba87b4d0399c4435baf0f760a867cb4ac9f9f48273f70294366a96d31a6bd27d6eb574d7b4745f8bb6a014e063884fa6b21e88bc79e60c5347630e0fbccd3a1821ecdcd7531752d5f0e4e1d7f78bb458b2f621ef9e2749c52b9d7637"}) ioctl$auto(r1, 0x7, r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x1000000000007111}, 0x1) mmap$auto(0x0, 0x80004, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop12\x00', 0x14fa02, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000600), 0x4000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x2, 0x6) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x820d02, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:160/strict_limit\x00', 0x103a42, 0x0) socketpair$auto(0x4001, 0x8, 0x7, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ttyS2\x00', 0x101e01, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) 1m29.382545097s ago: executing program 4 (id=3872): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r0, &(0x7f0000000080)='/ ys -ernel/tracing/set_event_notrace_pid\x00', 0x9) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x408000, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04000000077215f2a1f2e1df0d815934456525f1e80c7dd0402200c9575150785946c2c2e846fa22fd4827df372bb190d6a169a9c4042fa3ba85b95a24b60b783ba656b49bfefb0c99be72ff303c1c426dd33111a8bf050dcaa10f1be61fbd8c8fe2ce8303fb192639dfbba014e6408ce97fd50ae05bcd968a91de74d981fba44afdb137dcd18492721f1fb9cd455d91e598e520a43faff75c914e92bed28cf5bcea2d58e526548daf0500000007dd62e67b5a78a5168874b96c394139581ae2c1432eb7f3125c29582d498f", @ANYRES16=r2, @ANYBLOB="000226bd7000fddbdf2582000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x734f, 0x3f, 0x67f, 0xffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0x3, 0x9, 0x400006, 0x6, 0x81, 0x4, 0x1cd7, 0x8, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffa, 0x0, 0x0, 0x2, 0x101, [0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x1ff, 0x0, 0x9, 0x0, 0x40000000, 0x0, 0x7, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x3, 0x40000000000000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3c3, 0x0, 0x2]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) socket(0x10, 0x2, 0x0) unshare$auto(0x40000080) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000040), 0x7111}, 0x8) write$auto_proc_page_owner_threshold_(r5, &(0x7f0000000140), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r6) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="07031abd70250c0058"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) writev$auto(r3, &(0x7f0000000140)={&(0x7f00000004c0)="02cddf14387e7e6e9f1bddb4e507f233c2450aa55081dde5260bb5027536b9d6ab1fd299304705369fa7306027ff030000000000009e4214b19b05ec58578611067e856d472a64a5", 0xffffffffffff0000}, 0xc285) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f00000000c0), 0x462000, 0x0) 1m27.06915328s ago: executing program 4 (id=3876): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) mmap$auto(0x0, 0x9, 0x4000000000dd, 0xeb1, r0, 0x89) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) r1 = socketpair$auto(0x2c6, 0x3, 0xfffffff9, 0x0) mmap$auto(0x0, 0x4, 0x6, 0x40eb1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x9, 0x5, 0xeb1, r1, 0x8002) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/workqueue/nvme-wq/affinity_scope\x00', 0x8400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000b40)=""/4096, 0x1000) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd10406fcf6eb9bb") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x7fff) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x7) socket(0x10, 0x2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/io\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f00000051c0)=""/103, 0x67) execve$auto(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00/\xc4T\x1f\xe5\x89\x8diM\x1fQ\xcc\x11\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3*\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\aW\n\x11U\x8d\xe3\'\x19Fep\x86y\xb5\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xbc\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xd4\xe4\xd2\xbd\"o3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000180)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x8080) 1m26.063653491s ago: executing program 4 (id=3878): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x1b9c41, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000340)={0x7fffffff, 0x8001, 0x2, 0x6, 0x8002, 0x8, 0xffffffffffffffff, [], {0x6, 0xa, 0x5cc6, 0x2df, 0x500, 0x10000, 0x501, 0x6, 0x7}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) io_uring_register$auto(0x2, 0x24, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(0x3, 0x5418, 0xfffffffffffff4e0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xdf) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) close_range$auto(0x2, 0x8, 0x0) read$auto_snd_timer_f_ops_timer(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_UI_SET_PHYS(r0, 0x4008556c, 0x0) 1m24.551262791s ago: executing program 4 (id=3885): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x6, 0x5, 0x800000001007181, 0x2, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0x5, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x2, 0x0, 0x0, [0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2000000000000000, 0x0, 0x20000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0xffffffffffffffff, 0x100000004, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb5e6, 0x0, 0x0, 0x3]}, 0x9, 0xd) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0x0, 0x8000000008011, 0x3, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 64) read$auto_def_blk_fops_fs(r0, &(0x7f00000003c0)=""/238, 0xee) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1d}]}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r3) (async) socket(0x29, 0x800, 0xa) (async) mmap$auto(0x0, 0x0, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) (async) r8 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0129fa0e40250200800004000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0xe74, 0x9, &(0x7f00000000c0)={0xfffffffffffffffd, 0x8}) (async) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010729bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x48824) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, 0x0) (async) r9 = epoll_create$auto(0x8800001) epoll_ctl$auto(r9, 0x1, r1, 0x0) 1m24.151286119s ago: executing program 4 (id=3886): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cmdline\x00', 0x80000, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, &(0x7f0000000100)={@_si_pad}, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x11, 0x2, 0x300) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, 0x0, 0x2, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0), 0xff}, 0x5, 0x0, 0x4) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x6, 0x6, &(0x7f0000000200)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcaJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xd6\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8\xfe$DV\x06\xa1\tP}\x1d\xd3\xa5\'y\xe9\xfcp', 0x4000007) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000000)=' ', 0x1) settimeofday$auto(&(0x7f0000000180)={0x6ddb8b07, 0x9}, 0x0) 1m23.057134936s ago: executing program 4 (id=3892): mmap$auto(0x8, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x200000000000, 0x2020009, 0x0, 0xffffffffffff4174, 0xffffffffffffffff, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$auto_SO_TXTIME(0xffffffffffffffff, 0x7, 0x3d, &(0x7f0000000380)='\x017\xee\xc3%\xfd\xbc\xaf\x10\xf8\x88v5\xa5\xa8z\xe1\xb5R\xfbm\x98\f\x7f\xb1\xbf\xbfg\x00\xa0\x17\xe8\x8e\n:\xc4\x94&u\x00'/55, &(0x7f0000000280)=0x2) (async, rerun: 64) socket(0x2b, 0x4, 0x1) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000004c00), 0x40840, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000004c40)=""/28, 0x1c) connect$auto(0x3, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80000055) (async, rerun: 64) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a5, 0x3ff) (async, rerun: 64) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a3320003008000400088"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101402, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/dm_mod/parameters/use_blk_mq\x00', 0x183941, 0x0) (async) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x1) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x44001) (async) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r2, 0x0, 0x840003, 0x2e6c) (async) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) pipe$auto(0x0) (rerun: 32) pipe$auto(0x0) (async) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8055) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x800}, 0x2, 0x0, 0x7, 0xa505}, 0xa788}, 0x7, 0x8) (async) io_uring_setup$auto(0x9e6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 1m7.97958366s ago: executing program 34 (id=3892): mmap$auto(0x8, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x200000000000, 0x2020009, 0x0, 0xffffffffffff4174, 0xffffffffffffffff, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$auto_SO_TXTIME(0xffffffffffffffff, 0x7, 0x3d, &(0x7f0000000380)='\x017\xee\xc3%\xfd\xbc\xaf\x10\xf8\x88v5\xa5\xa8z\xe1\xb5R\xfbm\x98\f\x7f\xb1\xbf\xbfg\x00\xa0\x17\xe8\x8e\n:\xc4\x94&u\x00'/55, &(0x7f0000000280)=0x2) (async, rerun: 64) socket(0x2b, 0x4, 0x1) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000004c00), 0x40840, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000004c40)=""/28, 0x1c) connect$auto(0x3, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80000055) (async, rerun: 64) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a5, 0x3ff) (async, rerun: 64) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a3320003008000400088"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101402, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/dm_mod/parameters/use_blk_mq\x00', 0x183941, 0x0) (async) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x1) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x44001) (async) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r2, 0x0, 0x840003, 0x2e6c) (async) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) pipe$auto(0x0) (rerun: 32) pipe$auto(0x0) (async) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8055) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x800}, 0x2, 0x0, 0x7, 0xa505}, 0xa788}, 0x7, 0x8) (async) io_uring_setup$auto(0x9e6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 16.596861098s ago: executing program 2 (id=4065): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x3, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r0, 0x300000000000) r2 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) io_uring_setup$auto(0x5, &(0x7f00000001c0)={0x400, 0x6, 0xc564, 0x3, 0xd, 0x200, r2, [0x3, 0x1, 0x6], {0x14d0, 0x2, 0x1868, 0x1, 0x6e, 0x6568, 0x6, 0x5, 0x5}, {0x9, 0x10000000, 0x8, 0x100, 0x0, 0xc52, 0x5, 0x4, 0x9}}) getsockopt$auto_SO_RCVBUF(r0, 0x9, 0x8, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f0000000080)) 13.653218005s ago: executing program 2 (id=4072): r0 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy4/fragmentation_threshold\x00', 0x8000, 0x0) syz_clone3(&(0x7f00000012c0)={0x4001000, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x3}, &(0x7f00000001c0)=""/154, 0x9a, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=[0x0, 0x0, 0x0], 0x3}, 0x58) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000001340)={0x1ff, 0x2, 0x1, 0x0, 0x80000001, 0xffffffffffffffff}) r6 = getsid$auto(0xffffffffffffffff) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000015c0)={&(0x7f0000001380)={0x23c, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd487}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3}, @NL80211_ATTR_BSSID={0xb5, 0xf5, "d20a6b6cb78298dec4e264c5aa13b9d04faa4f9a98e4cf9ddc77791b084c401a712d7db3ffaf5a9c82c4cfe06f0347501ea26e4d42a2813447dd487e581329e1f595a974e32aa38ae513c13ed954cc8a4244f3a1428a08c2cb5d61e4fa072994ea5b4416ff8e2cbc1cb141e61dd511a4ceb92aa0a6edd860162dd5d0152fd24cc2568a8f9f5bc6052228096e264de0f604d05b6bc7b908158935d54a413cac5c0347b2011ac1155fe31d299a011f336160"}, @NL80211_ATTR_CSA_IES={0x154, 0xb9, 0x0, 0x1, [@nested={0x26, 0xf7, 0x0, 0x1, [@generic="9bd42f872cc02c14df818e7286c5baab7eb09e31040e2064be875429eda3151a9882"]}, @nested={0x20, 0xcf, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @fd=r2}, @typed={0x4, 0xc9}, @nested={0x4, 0xc9}, @nested={0x4, 0x90}, @typed={0x8, 0x116, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x8, 0x169, 0x0, 0x1, [@nested={0x4, 0xaf}]}, @typed={0x8, 0xc, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x138, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}, @typed={0x8, 0x78, 0x0, 0x0, @pid=r4}, @nested={0xe5, 0xef, 0x0, 0x1, [@typed={0x14, 0x4d, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x5e}, @nested={0x4, 0x6e}, @nested={0x4, 0xd6}, @generic="b876ad6caa5a42ca8013853969bebd01b48478298a4a58246ca92e87ffe192783c3e087b967327792aefc84044da31fc241341e2623a57e82bbe8261488d25104711e5e5151305c708e1dbf26ff3d4f44aed841cf484651a08555ae9d85995170dc3ed618a53a8b0f2b42ff44eb024fa451f2bea30c5f8285e0325c776cdd1aa74c2a326739a7ab190b41950de291cbee131b59f02aa30c406fc523096c78ca4c9f8c658563ac0b7a3", @typed={0x8, 0xe7, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x150, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x3c, 0x0, 0x0, @pid}]}]}, @NL80211_ATTR_DISABLE_EHT={0x4}]}, 0x23c}}, 0x10) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001680), r0) shmctl$auto_SHM_STAT_ANY(0x200, 0xf, &(0x7f0000001880)={{0x4, 0xee00, 0xee01, 0x3, 0x3, 0x0, 0x8}, 0x1, 0x2, 0x5, 0x10000, @raw=0xfffffff9, @raw=0x4, 0x3, 0x0, &(0x7f00000016c0)="ef2df78e29510fdd39c16130b564aaa538c0e027dd178b595eb38b37b8bb9cfe36bb3ee93fa030065d18f8011b748da064d55e06a9c7c4167451ce88b9fd2a595c9c4c977f3b73148ee1aed5fc479468490f75ca6f4f6266a35944b87c367bff5fb7fb0ce90e0231ef4037cf999560f66134aab90ad65e8af7e63ce3380d4c4cb4081c2c5454184a08f6310737655659236d5769fae60d057896de6dc52f773a18fc0d5b7558423b92517f23b7eacee7e7ba8e456e5ac0b5d2bfe365941f5258f5b8e07109f22e16a2f47f96ce03c4866aa944cee08e3abf83d51715d66f1762bfd43687d4b102f9baaa3f106df5fd8b6e7ace1ab0", &(0x7f00000017c0)="7f6df43d94bc3ad85ca02126540a50b681dff9ee965c47e8eff30fc441432a1917f4aa6013662cbf6f3c96354bc03e17c1ace29cf88c266860565ec61356ae42ca28881013ba9fd2632ecbf2565a65ea385a08a39cc0e864042616a8b9d5ae610acc41dc8ea749d2ffa16da00d2c357ca6fab841648eb7756fccad998a395b9dc441f14919b2cbd9"}) sendmsg$auto_NFC_CMD_LLC_SDREQ(r0, &(0x7f0000001d80)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001900)={0x420, r7, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xa3}, @NFC_ATTR_LLC_SDP={0x3ea, 0x13, 0x0, 0x1, [@generic="5ce43842ff1f268824c8fca2c0a6aa4b76b38873b092085e4ce0adc7b1f9b873c1e1c8dd3e41766b555db7bd98538014855a701a0099baf9a123feeaf3d0a7daab267d4a51148ba6133714ba880fd5c1bc12195266c7dc64fda40e512eac202b5e2ef175cdd68d10962776c8a9d6612680b7a4483ff3131a68625db52cf529df86ebad15c72e0cf9f7b4785c43bbc1f6b88fba6102dcc1ecbcbe9e6d59e6cdc34658ae", @generic="d291c82e17e550e89955a98719508e5dec54958b3fd8dfcc6ac1574deffd209749b401c80716709eb135765ac5975e746b9861ff365384e86d546dacc457270ad46d6ea299212bf81bb9835dd58e671cf753bb2273449351cd382f67d9cdba0c6d3d2f2696b7b2fadfd24d", @nested={0x103, 0x4f, 0x0, 0x1, [@generic="15e71fd53a3ff3cd4de28f2d718ec20f0109e1e3314343106b6452be7d3a43ccd19e1a89f6604de00ed58d05e6263ff36f58ebb030060f55a3e62b996900989e0d31bfc876eb0768038bc22284288e3e1626d47e2e84f568439e8101d33a4ee9622488f1db990882715bb2f54c1d02605f5db930dcd81c43dd53d3d6f1bd0dce9703736520c695457f105a9e2c4123d3028c8b", @generic, @typed={0x8, 0x168, 0x0, 0x0, @uid=r8}, @typed={0xc, 0x87, 0x0, 0x0, @u64=0xdf1}, @generic="3d784f1cb8676b66aec754820264e7a6a485c79e353b1b7fa31c87cf7df980d179a97753a2e66ec34f2b59104641940e9e34e36b5770b95adb6714926755103076025239c7abdce1c948fd17a5d14c478e1ad98b7bf736ac"]}, @typed={0xb4, 0x2a, 0x0, 0x0, @binary="6367e94326d892b3ef259e8c7261dc2f70e75249fe10b020c23d7e0c4ce96c6f359cca05b5f65bc78a51ab734889179b0d8990c9027f2a8f1a8b681af08d4a9d69bbb5c29e7c196dbf36e61f23efa165fdef652b9681ad819c6d055b86a39337c1de53311ea4d10be58c9acb2d7192f251ef0bc081957e24b78edb5985f0f91f2ab5ac2b0a96d92a6a62fadd3af2658d406b3d7966d342c43c9d85f425523d549788ca367a5a5de4a5500939ec4d4b64"}, @generic="c3d265ca8bffe83e44d4b13a7b369f2871de7f2a7011b17811e902dccff8f9e463e6a5cc8cf5db171c78a4bc6d63f79469e77fa01926a70a899e1e04ff4e21b2f7feb2d7c4dd6c889ebaf2314fa9b69a59e8683c85774be0eeb47e4a4fa4d26b47ec74a4f75e70d7f6fc81c9dc0a29701aa34ed8e0738ce3b87034bb07744984d6ea0149d5818b5e6087b2704864ff8953", @generic="45125900fb409af42a3091b82d35f63ea3da5d", @typed={0x4, 0x102, 0x0, 0x0, @binary}, @nested={0x75, 0x87, 0x0, 0x1, [@generic="fd81452c41d7beb1c12ba2f6cd55bc3b793bbef57e7d20888b0c0af21eed876d348a83ed", @generic="60a49908", @generic="a7af75f88d97c21226b99bafe0df33300c46af1c4a167bf495364c71231630bdf84f0bc544404ccdfb4a210729", @typed={0xc, 0x94, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x4, 0x11d}, @nested={0x4, 0x26}, @nested={0x4, 0x155}, @nested={0x4, 0x4f}]}]}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x60}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0xfb}]}, 0x420}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000084) r9 = memfd_create$auto(&(0x7f0000001dc0)='\'\'-%\x00', 0x6) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r9, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4015}, 0x0) r10 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001f40), r9) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_RESPONSE(r0, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008890}, 0x888c) r11 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) r12 = syz_clone(0x180, &(0x7f0000002080)="d1cc880d08cf21a178179154302ce238d930a8f7280bbc500fe0c053f33bed323669e69f9bccffb1a659271d29b67da026c0f17f5eff0b313c28bb2451fc272ecc8e5690a689b774fdef848eb6ed2c4681b6db056edf63b44182eb612eb2671f6af205844d221b151874e862b41a9b30051884d671c12e6dad63131a25a78b94671f07b0e403c00e5290eec2e85ac9b15af483bd003f30ad31c300b9fa0ff402c4b910e0098b079d7a6a0f800bd30bbade42b783915497bbaacb1b11b52845d2565e5d33e31206155fc625ebb599b156e429911c7a799ff56fdfdce93ca533d3dc4c2b958fcb8abb4bc19f7963f252c9a83b120d537f3d9e2c", 0xf9, &(0x7f0000002180), &(0x7f00000021c0), &(0x7f0000002200)="bab1406e4e1a12074ab7c44635fb46cb4e36d3a73e5e78395539") syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000002240), r9) read$auto_snd_rawmidi_f_ops_rawmidi(r9, &(0x7f0000002280)=""/90, 0x5a) getsockopt$auto_SO_LINGER(r9, 0xb9bf, 0xd, &(0x7f0000002300)='nfc\x00', &(0x7f0000002340)=0x5) setsockopt$auto(r3, 0x40, 0xd, &(0x7f0000002380)='MAC80211_HWSIM\x00', 0x3) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/fb0\x00', 0x20002, 0x0) fcntl$auto_F_ADD_SEALS(r11, 0x409, 0xffffffffffffff93) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000002400)='/dev/usbmon5\x00', 0x210080, 0x0) r13 = prctl$auto_PR_SET_MM_START_STACK(0x0, 0x5, r12, 0x9, 0x7fc0000000000) read$auto_fops_u16_(r13, &(0x7f0000002440)=""/244, 0xf4) r14 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002580), r9) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r9, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x1c, r14, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}]}, 0x1c}}, 0x10) ioctl$auto_SIOCGIFHWADDR2(r9, 0x8927, &(0x7f0000002680)="f16bbf3a1dd339c1115a6f97d78da6e4cd0f97f5403891927e5b20d9917338ec0d4d20641f12c711b091f00af2659c23b723cb1d751296ca808a7153c9793df6e757fd623a69fd4f7e9a2186800b23b7f6d03f081b967a220d0329ea6f1a7a1c9b743ba0b0cb3b8c3d45514506ce8d089ab23ecc022ca8bdb951f1d3f99a6c031d13bac1458084b33ae45dd23ee70638d3208b846ee7aaf9ec7aaad9e4ff9c2e12d153201d5ee755b7c158500e83932a44500456d7e79d17ae64544aaecec6881d9bff7edd099ac78f25322569fe1032411f35125bf780cd87f7d56d26102599") pidfd_getfd$auto(r13, r2, 0x1) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r9, 0xfffffffffffffffe, &(0x7f0000002780)="86d141678afe074655b56226c47a8c0b6d0f2e95718574cfa2a4f85dd945e8808f928a0d82a1a31595703f0882350efcaeaed7fee8b8255901724244a14169bd") 13.518238674s ago: executing program 6 (id=4073): madvise$auto(0x110c230000, 0x8031ca, 0x9) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) syz_clone3(0x0, 0x0) r0 = open(0x0, 0x88040, 0x184) fcntl$auto(r0, 0x400, 0x1) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 11.767517989s ago: executing program 2 (id=4078): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) (async) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1) syz_clone3(&(0x7f0000000200)={0x383281180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x57) r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r2, 0x0, 0x2, 0x0) (async) close_range$auto(0x0, 0x5, 0x0) (async) inotify_init1$auto(0x3000000000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c06, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xb41d, &(0x7f00000002c0)={0x0, 0xc4}, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0xce79, 0x6}, 0x9}, 0x7, 0x6, 0x0) (async) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54", 0x40000000001243}, 0x4, 0x0) r5 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r5, 0x40505330, 0x38) 9.913583332s ago: executing program 6 (id=4080): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x3, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r0, 0x300000000000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) getsockopt$auto_SO_RCVBUF(r0, 0x9, 0x8, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, &(0x7f0000000080)) 9.430925158s ago: executing program 2 (id=4081): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="69b5b2dfdabb136c46000229"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x2, 0x2, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x13, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) (async) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') (async) write$auto(r1, &(0x7f0000000280)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xc7\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01\x00\x00\x00\x00\x00\x00\x00\b\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x8000007f) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x2, 0x3, 0x100) (async) r2 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/self/ns/cgroup\x00', 0x800, 0x0) open_by_handle_at$auto(r2, &(0x7f0000000000)={0x14, 0xf1, "00d4985d36aefd7f0f5a6614130000cb40ef4d15"}, 0x7562) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mlockall$auto(0x7) munlock$auto(0x2, 0x200c06e) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) 8.110829674s ago: executing program 5 (id=4085): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0441, 0x0) pread64$auto(r0, 0x0, 0x1, 0x1ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2) sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20000800) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) mknod$auto(0x0, 0xc9, 0xfffffffa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto_SNDCTL_DSP_MAPINBUF(r1, 0x80105013, 0x0) write$auto(0x3, 0x0, 0x100082) sendfile$auto(r4, r3, 0x0, 0x10000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x4c8d0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) 7.639063413s ago: executing program 2 (id=4086): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = epoll_create1$auto(0x2) ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000000)=0x8) write$auto(0x3, 0x0, 0x100000000) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x5, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/sit0/statistics/tx_errors\x00', 0x400040, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) shutdown$auto(0x200000003, 0x2) 7.448848118s ago: executing program 6 (id=4087): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x1) arch_prctl$auto(0x9, 0x3) r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f0000000180)="c4484027d828120f57cd8cc438c2c390b1d5a62b57628e7351b768d6d679b450b53bd7c6fe7d4570dd878bc4bae003b2890fb024fa61c185091a73ec191acb51f29b119d2cdae76e7b3e9c07b57ddc6273a7c4d76ef780291aa3a0b2a20f7fc3b9566c962c5b059cf5ea9f7275582241979237a8509b68e26da85316283195e116c782d2545fa237e55f372445dc0a06cdde2007ede89233ad41191e32474ed0aa42ba6e834946b1964147f6cab2fed68ed88f987a7f3ded11cc41fa9952474419", 0x10, &(0x7f0000000280)="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", 0x3, &(0x7f0000000380)="d2aab14935718906c0ef5293ccbf4959deb21c90a066298d6b678dcd750e10f7e48785fb8cae4083c3edfcc3a1a6ff602a1bceaac6d7711b531803c155da9ee297ba26f83a45f399ac55076fa885f32cc8d4db38d9016d9c1950a61b3f650ffff0fd418960a18ba3bfda56e00329bdf01dfc1dfb626667fa392b629f537c5fe8", &(0x7f0000000400)=0xff}, {[0x400, 0x2, 0x100, 0x7ff]}, 0x5, 0x0, &(0x7f0000000440)="ce965c9a701746305497814fe209e1983a80cba79c9e4f3df2ebf5603221f6775a44334911d3f650e0489d1e0d56b577d1cd136d2f98889e9796b701e19847522f73e38804b1b89917"}) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/024/001\x00', 0x402, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x7) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0xb2c, 0x2, 0x20000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x6) write$auto(0x3, 0x0, 0x100085) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0x40a02, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x2, 0x2, 0x9, 0x105, &(0x7f0000000200)}) 6.336608144s ago: executing program 5 (id=4089): mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.swappiness\x00', 0x1ea102, 0x0) r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) socket(0x2, 0x1, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) mmap$auto(0x2, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc) madvise$auto(0x6e, 0x2, 0x401) r1 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$auto_SO_BSDCOMPAT(r0, 0x0, 0xe, &(0x7f0000000080)='/.\\\x00', 0x9) socket(0x8, 0xa, 0x4419bc89) socketpair$auto(0xeef0, 0x1, 0x9, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r2, 0x110, 0x4, 0x0, 0x4) select$auto(0x19, 0x0, 0x0, &(0x7f00000002c0)={[0x80000000000001ff, 0x6, 0x4002008f, 0x1, 0x0, 0x3, 0x15f4da0a, 0x3, 0x1006, 0x62, 0x401, 0x7, 0x10000005, 0x9, 0x2, 0x6]}, 0x0) wait4$auto(r1, 0x0, 0x80000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) prctl$auto_PR_SCHED_CORE_CREATE(0x0, 0x1, 0xffffffffffffffff, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2601, 0x0) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x3, 0x5) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x109000, 0x0) 6.165332725s ago: executing program 3 (id=4090): mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x400, 0x2, 0xb, 0x7, 0x3a, 0xf, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x2, 0x6, 0x9, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x8001, 0x7, 0x3, 0x0, 0x0, [0x1, 0x6, 0x4, 0x5, 0xfffffffffffffffd, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x5, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0xe, 0x0, 0x5, 0x2000000000, 0xffffffff, 0xfffffffffffffffc, 0x80000000, 0x0, 0x800, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4]}, 0x202, 0x2000000d) r1 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10000000084, 0x0, 0x0, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa507}, 0x5}, 0x7, 0x0) 5.721452449s ago: executing program 3 (id=4091): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/supported_sectorsizes\x00', 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) semctl$auto_GETPID(0xd89, 0x5, 0xb, 0xd5c) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0x7, 0x3, 0x1, 0x7, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2bffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) shutdown$auto(0x200000003, 0x2) ioctl$auto_USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000240)=&(0x7f0000000180)="588ad76fdf243d7027e4c12ff95ccf175feb4279a2af7f078c783967a11a620f21881253db1f4c9d93d9cbbcd8e9c2d9fb6e4696491d1c3668f9cfd23c8028324207c2656034b4ca87874014c979ed6b77b0d2ef6e2559e8ae54c56ddfa51bf90af010607de71112226026237de0e82774cd8932d75894ffebc95cacefbaa5117a040741f49fb8b3594aa4629ca121c7700d28467ad4e4525fa99fe7efd6af6232610d1a428964f58771d88a5c84f8a365c984d408bce6f47e481f750cec") 5.602443996s ago: executing program 5 (id=4092): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) connect$auto(0x3, 0x0, 0x54) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x40000, 0x28, 0xfffffffffffffffc, 0x10070) setresuid$auto(0x0, 0x0, 0xee01) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup$auto(0x12, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x21}, 0x21) write$auto(0x3, 0x0, 0x70) fanotify_init$auto(0x5, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$auto(0x41, 0x400, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) 4.74320864s ago: executing program 5 (id=4093): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2a6300, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x10000008, 0x0, 0x0, 0x5) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) r0 = timerfd_create$auto(0x4, 0xddf) mknod$auto(&(0x7f0000001200)='./file0\x00', 0x800, 0x8) timerfd_gettime$auto(r0, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) fcntl$auto(0x8000000000000001, 0x7, 0x8) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x42a81, 0x0) r2 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) sendmmsg$auto(r2, &(0x7f00000011c0)={{&(0x7f00000000c0)="bf5590e98390c6e7459f137ceca0d8b31e491b310db93e4b9e72764c44293c4645da64ca4ff71d5d9611921720f53b0d15bdcdf397ce56e1dd4f54acf3b2be3e9575600e57daec6ae5b8e266fa3dd9e6cba78185e8257a99133aa5d0d1ca7ace5c298153d04859018dbc147f20a922bec92b282aaea867078c76393d29eed5d465bce3108298ed7183d467a803637f35cda7b473880998df213665e3105d2f4141a10547f4f2eaa6a36091f80ae40182d0caac1651387550c61dfa029ae83a6809964791cd9695f00ed7647390890dbe2268557fade2074e13e948cf2e92abe2bd3977fa25b1df150e33334c5a6788590bda23117ac9087e4109ee7c09e2634023a9cd9568908622217d11ffbe65213ffbc5c0ee5e959076c401c7a35c84c50f12ffedc008060177986e85e568adbc87550fce9ad9e2e0c5fe3909d08620c2493c74838662d7d87ce5ab0e2e760601112565b1ca4f2b41e6b08166f6b640ccb0b008591a665b1db0da598e6c1c827bfa0ade25d08a9e22691595dfd9d04e34cba66a81f08d7b0a0661d561bbfab8ab43c2b724b6bb6b071221c68f5df9c3ec864e7579e02e03c8bd1c8dfe7e375ec1784624477c6b2f6090de61b160d3e218efff093a57085fcced9cb686308def148b00fff88b3b1da871d4df1f94af8ce003803af2f9676e2ad0a42f64b74f181c7883cfb8511314b1f888c96c5bdccf5017ec4c14c1ad33be934d501be1d5ad3b9cb50cc4b2af5729ade6540ea4b5599fc7baee6034e227fe158e7aec93edae9f3cd169b4b901fb74a6c3bc4ed87ebf5aff58774c9dc4f22eeaf743a313280f774a5df7a3acd8e15f1f686b079e8c6401c167b64f355b15138785c3fd53968ff4eaf9cb3a66d4a5a6bc2350a5d29659c9c1d56fa975c7a8fbb97ba8ad00ce0c5b4989745e19bfe45ce755b582546db8f641b923c57b91a8d5ecca042d8a9bd3a9b82ed0fa6106a99cdcf7c25dcf48b12c1da1c77717c4c431ed4df2e1d10af6a0e11a2834e80070675963d5f4b01f62c47a48e3107a23288f2c463b8723f82fc2adaa35ad7b02004d4c070a1274147e595d198817ad43febb54581ac17640de5121e1986365f9228484b14752b5ca10164432fd9d9148454838854bc89f2ec317c1300f6e0d16e97512fed6491a2698905c764964d96be11183daf709a83f061866d97b88c767cd7170f4e6c0acf58b509af32a8c0c3d5f04819d7a6bc504aea3fc8627a4aecbeb8cd7894c675ad75b9e06e9e68b436dd61c3f2ba9360e8052e01ed1a3098257a86efaf284783421915698be0cfbc1f09860429363e4f85b6fca1ca66bed14a7d38e856d31fbe4ca67845ac088eb61bd245a7635852f7a52c4ac36fcc79802b5e72d46832dccb2203fc2474b9c19c1630a76c82fc591ee68cba586316d99cbe52b3bb1f3d59880e6e4b610222315dc7ecabd6ad9058849d3d6f79f82610582dca48f99b60a7b955858cd502a1cef6cc5c610203b3778dfa5de9b17442a88d8aff1b71c17a4e0782b0fc697fb2208d57c41ba1a41628d99324210132c2f9b78ee1dda9a4c4653e677901e05b3ed3d35fb2560bec00fc8955a312706a7b8dc3c64660cead6ab1f211ea4765debe65c86d5c9001a5175e05408779870709da08c3ee17de0fc7982b4cdda5139951d40ce758693663d9697a04498dbb38f62b9d3a250b8c9ae9a02715d5c3032d2f6a0492aba5a13496b849173be517d25fbefbf0664e17ec7db57c5d31b8681a6a53c60abb0a0a9ee312d9bbe7b884bbba9b5d8a5c0f2cc7eb219fea75f0c5ea9f6e92b74bb1706b6215f3354909ce4e11d851c861aa6b42d37d5d1fbfff39967fa78ca470d92dc8c98db858cf939e8785e04efdd2c2074f62fe797416958e4fa54a5ac013e1dfe589ec8d8a8edbc70cca99d0bd5ca8ec12454d7a2188ba02a9c43dcdf76aa7132b50dbd93c4c8b1ff9d175336587fa9120513c592a571765a0345492582ad9f91369e4b4ee43565a66d59f473704bdcfef09b8f06ed98d30eb9d4770c6e506458d80522c1bbe6412ab51ee5a79be6f6874dfd438d2c9533cfde1c6ff633a6d155441960061f0159b65977a46b34b692e360b0c55ced12c53b64b03e5c9623a30d27feead717b43a5725af2894081aaa932d67664f2c14144757b66aa6710602862f62ab756e717bb3ca970b90fe02418537b1052a9bd8ea5d6dcc7e4340e191dc3a5cb22896a836f061fffc2db175541509594afbc44e418584911f68fa54f44f39871d5063e7ef8a5294208ad73df011d3f11faebc5efedf94e2861cd5933467c7ad9eaa78102a228ba1c6b9830544283c30a216eb9218db1c8d8318fd68a0e4497ef36b704188ba858c1ef91639cab6361617775daacd61c9762e70b42a661e617e35c149fdacff3d544c652948eab19f2beb9951d9ebf418f254e0ccfca4b79715939ebe539bda88bb58d35d3f91a701633b7eab965f449db6fe793535d0e4584005ced3868235d9053d7d3e1304a086a9b3b8b269edcf75657e9d1a9c80e82ac508abe708c8a3aa108a0cf629d0b02031d408d19ea44ea96ae0364b58168af1bc4378e8ec5610585c8b85a7225f59b7912285441d29dc959e5fa8de521e434737f409774d9afd2e396ac528ed2073025286c4af6f4699803bbf9446ef43a6323325733f5943dffd19ff0d367c48629f9d7f9aa96caa911c036b0dc716e2d1c118b62e0f257a9139207d60441ddc9713311635d4c926830f2a38203834372254feefbf641a1b9a0b6681043a42ec8a7338214e4ce92848431a34c30f9b7b9fbe5cbeb06103d9890c6c28ac60760eaacb5da7391034ad9f1fd1e0db80fcd1c8464cb21fb4103ccc9d91296ec51234c17fe747f267a7953b0a5011abcda36bdca5a86b6e9ff494a2ee5a0d1a831123cee66e5334401ad8a6c01907bdb3c87e14ca8138f3092a55fdc64dd615eddd3c763ab719308aad28bac096b922a84b2f8757a269393a7e744e8cbe3268c288e64baaad86211d8b95f1b399e0dbcc2b734fd6adc8f5362b2310318cccbd9787757b57385dc04b2ab6b0ac7c5c40eec85882bf51c51642df5d0b9019311d821b2bec2a0b147b7d51aaff23598978b4396d151f3181791cc45379172fb5105d28450b1373adac1d63f9af7d918357976faab33812e2995e770cb4e90ad3b7c954c3b7d06172aa437adef5178f842515005b5829bec8187b99ef322b3ecaf6144ab208df5dc30fca82720542cc01dd992b319540b5a990f013a7d39056b63bf4b8550a079142bd488ae9ad95423bda1628c9bae37a0d1187dcf5606119ed64fd45707f770500e38a686ff2b3c4c70b4bbec194b73f85ecb70de301c0fd13f735acebb6310b5a1ca2284ee9b40a5b4d0443711111b2586e2ae52f3f023ea6d6049cdc9481aab59993da7acc7b12c21716ad1166389ab146ada23a0f0d380104624e221014e1d709336cbbf3aaf0c10f6fa05e73231f148bc9174ed9398e1fb165d4ad6f68a5f631e9635ed4b4d7c4fb00a0ce783f39e7ed056043f7c97c9ebad3dfd24951b8ac8c06090828b855189aceab2584d0879082d0bd0c181694f0c943f2986f893ff39ce1a21cfe5c645e022a4c6d0606ce1d2829e51c7d6cc3d03c2086b6a4cd6103f57a185ceaedc41ac5d66f581367c542a4c02114f519bdee9b5125d395188ab41d46357c153241f46e60cf0db6cc2a25b4f4c7340c84dd338c1e7f7f417cfe32ec944c48ee51d2a9e19ba088915f9c79f91036cb3c44c224df5f2811587f64e79988028cef5909fc599f83b0a615b99ebfc4e8d8401a5127b0f452244c1d51cb3bf4d55dfba5c65aaa4f92d57ab27e1b1188a8ba47b1dd58849856ec0920aa4132175e0902731969ebddd824831c309b2c5c0c738f6180955b82751c26b19df93317bc11ef7326bd8d822c62919b17cfee6b63159942e9729bb6f9974f90e4020dd47abc2f729f0ca403b007b7a00ab81061351b332e1174bb2b7058817ab47a3a8c23959a0fef1a68acca3aeeb6b0fb626c86cd46f5c17ce3199a272875d970851f9f172b849ee3049cac7dfc53e0a22fb63667a753fd3809b912d7ec149039ef3766cd77d886bacdb74f14c0f7258e22003b1fd945070d9e99f0ab9023a15ac284f9e3607e7f9c3b0829e3f4d28c766e767e63ed09466df99e0f0328ac159d282733db8c04e25d736eb6e7db8ca33e8248d8d61df9b9be8f563b4807850d9abd39d6916f520c2a5dc80967fdbc79186b18469e0c4119f06e87b96ca52dd2ca2e07d6d9eea12498ab0993dc54c162e3a7d552cc1e28752a20dba43d76727220025a2756bf8903f9e23c156dbb6fa56fcb252254f5bd91517179b020705d963ca273bf0ad00bf20d745cfae998ba62a1809bd01a5e17aea9ee487e148ba7623c016b75ae859b0d5b4a8e3f1ff7af065c40432bb72dc0746827f6341b063c477d84d2d335c40bb10063562619ddbb31b963d553e4393aa9c2da536df4e221fa1a083b5c260c9d5fcde30df104125565461ae398effd1e6d1bed60dbbefb7f86aabda4f293952ffdb5cec8acc6cf52d2ca91ef5c405f69386e7bf2eef863d9be90d2cf91c628efa39a5a30dfcda7a3ff06abf40412d63177ec8a85d961e662a313a16ea436f7153d738ff13860815fcb918f17e017f440c9d48cfe2edff9a68c9ed77c324d72e4821f7ab2b11eeff48d84a9aa156f089ce2889138281e8d66b0d8862a2e25c70e277c2e4a9d343da1f8c398afe64e6b50a04e8fea79209a35b495b93dadbf8e84d43b2c1aaa0fafa27651a865810ef16f0ea81244268eafdbb21330bbff5b2acdcd196bd7feebbb11f557debaee0763d6806d2bd4afa89391356c45876aeef42955126fa58d5caa921c5d878e08a31bce1a42e77d351a7aecc6eb65bafbc4739b0271b79addd812db22b661f30c9ae69268066ee09f98da608cc101f8bcd419e5240526cb07aeef8868e0900eee6a0b2ffc41344adc6ff049fdc18aa5d8659156ceb2f4b368ce3473d812891fd192403e8337129ef5600d97fcf3b9c3f36d1cd69d3c4243e6096c9de40fe7b05350472ba31176b6fab8a4fc8e4bbe7f3c85c215c73f509ba026db077e1bf0cdc83a66e1fe9604e8b643610f6b27ca6f88d5f08fe84c5723c6cee1fd195b6b0b09cbe803aff417d157208222c379abcfbc4098f568f1e427b1e2fd554b7d38530ff519bb1e3f931cf86e49514d97ca9dc4be1255e4f5c925bd4763f532b60815a2c905a2d3445aedba19030dcf1ec9fd3d8e3e292965d1269d2cc98049062e91722985e8032968ecb5e4145958a7893428d1a69892cb5d95f97d530c19ef9755ddf60ec2a8ff5993bfeacfe9a3711bed34fb086afde04f254feec5568f18a52394d583fe71bc12cf72634ebb1e95b77cb267c23df45100be65c4b3df618ee3160352d75444192f303b49e32a2db7df78767b3feac6fd425583a15ba3033a40c39213b6390151c52afd87887e1a1f899504c050a3548e883c4838a22ca1fb3eab877d15b963754b8503c0746e9bf1d89d597bb06a222aa7c8f0471410a66c24c13fc4dd7b7dfa2a0d463f48ae2dd2a76779d70441384d89305035104115e646b1eb2f0fb2a473df4346587d178becf3b5d5304edadeff5e04fd69bb7a5f77834a0c2efe4dd13caaf8b54c087b947ac12eec9cf653026f0166d870f609b13661773c8ba82606be9f0c3e8d0f89795e760243d12064d417a4e6f06a7deb472b00249050c923ade45d843fc9db8b41f4d2a0e80871", 0x5, &(0x7f0000001100)={&(0x7f00000010c0)="71728088c31699fa2a446232a056402440a16286a0ea1c38fb596be436de2ad24c0bbec5cee382aa3c2bfb471ec473eb59648ddf1828236a85ebf5052df9", 0x3ff}, 0x6, &(0x7f0000001140)="2d7d9d55d09e205bbe3218a353b2f6a5b9318f6f5d587e82a12beea1a7537c99e0a1809444a35b65ec614601d9a4bbce95ca342147c6c91ea070a1dfb803d73c354073b2457b68df56cf86dbbef7fefb96a51128569673f6f8fd81bd34fdcff5d1b624808c7f", 0x786b, 0x5}, 0x8}, 0xf, 0x1) fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(r1, 0x8, 0x0) fcntl$auto(0x0, 0x407, 0x8100000) 3.658730385s ago: executing program 2 (id=4094): close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) unshare$auto(0x40000080) setfsuid$auto(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40008, 0xdb, 0x9b72, 0x7, 0x28000) socket(0x21, 0x2, 0x2) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x2, 0xffffffffffffffff, 0x1) io_uring_setup$auto(0xfa3, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(r0, &(0x7f0000000300)={{0x0, 0x6, &(0x7f0000000280)={0x0, 0x1ff}, 0xc, &(0x7f00000001c0), 0x40000000, 0xa}, 0x5a57}, 0xd, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x20000820}, 0x40000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) pipe$auto(0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, 0x0, 0x810) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, 0x0, 0x0) 3.527460511s ago: executing program 5 (id=4095): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_shared\x00', 0x20b42, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer2\x00', 0x200000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) socket(0x11, 0x3, 0x9) r0 = socket(0xa, 0x801, 0x84) close_range$auto(r0, 0xfffffffffffff000, 0x4000000000002) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x2, 0xa, 0xd, 0x2007d49, 0x80000000, 0x400000000000008, 0x0, 0xffffffff, 0x3, 0x0, 0x2, 0x6, 0x3, 0x5, 0x9, 0x5363]}, 0x0) 3.329797608s ago: executing program 6 (id=4096): mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.swappiness\x00', 0x1ea102, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x3, 0x0) socket(0x2, 0x1, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2601, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x109000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$auto_TUNSETNOCSUM(r0, 0x400454c8, &(0x7f0000000080)=0x7) bpf$auto(0x0, &(0x7f00000000c0)=@token_create={0x7, r2}, 0xf) bpf$auto(0x1, &(0x7f00000002c0)=@raw_tracepoint={0x5, r1, 0x0, 0x8}, 0x1) 2.917393739s ago: executing program 3 (id=4097): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8000) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r2, 0x0, 0xffffff7f, 0x8000000000009) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x4800, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000)=""/40, 0x28) r3 = socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) setsockopt$auto_SO_RCVBUF(r3, 0x0, 0x8, &(0x7f0000000040)='\x00', 0x4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_udc.3/driver_override\x00', 0xe2685, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000180), 0x6}, 0x3) 2.663379368s ago: executing program 6 (id=4098): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="18000000", @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r2, &(0x7f0000000000)='-\x00', 0x30) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x4000000001, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000008) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) 2.441920446s ago: executing program 5 (id=4099): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0x9f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x2, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x6, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r5 = clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r5], 0x1}, 0x58) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) unshare$auto(0x20000080) 2.047903963s ago: executing program 3 (id=4100): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) r1 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r1, &(0x7f0000000180)={@sival_int=0x8000, @inferred=r1, 0x0, @_sigev_thread={0x0, 0x0}}) read$auto(r0, 0x0, 0x1) r2 = socket(0x15, 0x5, 0x0) setsockopt$auto(r2, 0x114, 0x6, 0x0, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) r3 = socket(0x2, 0x5, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0x2, 0x1000007}, 0x1}, 0x5, 0x311) sendmmsg$auto(r3, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x4, 0xb}, 0x8}, 0x5, 0x7fffffff) 1.71313701s ago: executing program 3 (id=4101): openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, 0x0, 0x20103, 0x0) set_mempolicy$auto(0x28803fe5, 0x0, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_ECCGETSTATS(0xffffffffffffffff, 0x80104d12, &(0x7f0000000140)={0x81, 0x9c6c, 0xffffffff, 0x80}) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x210100, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x40c05, 0x0) write$auto_tracing_mark_raw_fops_trace(r1, &(0x7f0000000100)="cf7db5c7bf247c2a0c51aaee943762f80c1110567dd41f90e33af7ae36e333ca7597860fbff122839f25ed3f0e36b0a4c6f4d321873b8c9ee00bc5bb1f32ff37463638623dcb4dc0fa01d1022d7f8067b8982b39f26e31c52c513b0d467f2649ac36251b852b752b1c6540e616acaf38577c23bb6316d2bd116f3fe094a0fe1a65d6518e638efba80e08a885fd59298ce1abb427f60c0870519404f38eff910f78200f058ae3e16c169cd94d512d16441a6789642367fa80218b6b7ac76b5eb86fabaa2046646162c763104c4ffcfd71e4611d8c18a420158fc6167bcbb8f3bf035d96b206192b2a70fbbbcf059b93b4b2ae73081c6ec48ba1a8c4923a6c6c5a6772e97e1d01ca179d845de3913ff24eca297086349759ad9db126db5462aa5a0080c4e7650498e18f2bea2bfbdd8579006fa07590f69d533ef39662392281e5b9478c56b9edf06563f1e4702ad5f222ee3884f53eb4109530cd0e26d277823f081b3daedcf731681d6927d5e9bf1857c5e2eaeef5b33254f1843cec4c03528e735014a70e95640a3fcc8aa7dc8638d56d1e0c9db373751bd2de23e2aeed25d5fce398c36ef512267010d15756f645aee35851297dc121346fa95b86d310a010f7ef266d77a1485f363609f047a388b4b693db7b1b16a10ad254da5a68fdb98ce16d07fb3707e9f9185c14f409e72ef05a1ed9cdc7e3db5372556ecc628d5c3d35bd97b33de781f7271597fdb2e82ad2ae0f5b0c7362a63251255214c49fa9dc6e32b2b9428d8fb4ad5fa2790f941cda0d5d12c3aec31edbdadc8dacf3ed67fdd865005f23f00f780f5bffe13032dde03d4c58da2dc983f6aee7b85e250643c2a0a3ff441abbdf1de7dabba35e34708f511972ba83fc8815a315185db81c8a8def4bf2a9e01737d279dec44b23fda8198247729be39a3345160588aadadbbd7f0ca58049690034701ca3e150622f54de6e271d8a31a0bb3e77ac1e18d77c3ff1e50874d655f3ec3e99af9071338349f78d1aab8a834a5e59cf76179e9145beed8a07223e0917beaf137adad8b4928a9b389695fe083f783a8d1c50a3f49bf7a611692463b0a94ff1ef4ca3c0f979d176a4bf21ba1b3867a38292905f6910a19a7d592fa271d4c46d956171a110c2108d3e8cbecb5e63a31e7ac3db6d3203532038a41019dcdaee8ed795ab934787a119ab4b6d1dcde87bb120d4ee3a4e9c8c445227ca76dcf8e0217b0bca4a9d17540eeb102a33db74687cce0db60f05098f71101601d7bf1bde17408d40133b3d968afc8fc0829f7e6a75c50f41fd6da4e262600e9d2b88d3009736fb76b27fccfeabb7909bbffe7996643d2bc9b3c8e56f5df9abd6f9826308d9a89e8107d7efd405d4cff76a8a8747ddc3d69cdd758611bd48a1c2ba1fe8549e25591df324ca1a2b0b97a5d5b27f32908e375d89c5d968867ed15904f31a65e94b5e74a6993949daff6293a225d2ddbe9b4ad277d19a8ac866ca2c985b64979eda8c83d703f1c5572d59d44bb813df96c270bcda9fca4ef2fb4588f5d3475cbb7b8fb7e55560f3ae3e1171d7fcb72d60e446620e20a3c4d7d742ffaa044fdfa2c7b8d1a122796f3b53ae343ed9822a3146cd208fe947f4c2409eca6dc16a2815dc7186c5a422e39cce22d9af9bddf7b8f3ce393400a23b6eeffcefe473aff67ad1c5f1722f4a841faeb9e9cbf40cc9ae7eef599bb8c38e9e4fb7d5b57add967d3ff9ce28e83874c0776c6659f60a78abeec0fc3924627dc351c779d781c15ac1bc8822bfda1d9f9404ba3da555522e6ba4ad03f7cfe14926d18ce00ed6e6ef4f346f88bfb81ab7d6ae9c5b8ba5af59dd9569764b23d92b2fe37439e8951111776e2cbc06fa1a9117e31154b0e2babd6614f22a151dc1de4f5e5097de6376c2f2119c48716c29668788914490354b82ead8cb32ab804c070418637522804ca91dac87065b87f11a6996f8fc1be36bf3613557183bb1c313ed948350a6129df0c093b86f3151fad4324fff6928d16489a3d8b7deb8c8f8421c41de3bb68a896ccf4e9e6181bca2bce6ba5c1abcccee60164ebfff400fbc8fd7477930c5c3d52d44ba4939f7b30dd17aae79ebb029e35a658bf508d43177a984d778432575d421b9392fd43777baec7953124a1955ec3720d1fe868f64bc7f00a3a1e6c57855e964661a6083c3cd8c01b76c4cdf876c4a2d7bfe2250a42778b1828495deeeae88017b16704e3bf8df00fedadec470ddefd54e0b09318c0cd8dab9a5cc73993758e3c031e54edf38eceae60426495e950750296e260e4bd4b0e458e29538ab9b34cd494d72cce5ca260767ab059af55e0b45687ffed7f511ba8033c391587f7a0acdedb92f1b2c771b414669ce09b9f234b23050920efca0edd078d7f53c702d200432909c3319bca6812db3b5386eb7ea5015b0ac8224817a9328ba071e0bac9127cf206022ba7ef7e2867bb70948ee067312dad8233ea7d0121879e7ad1b51f937d611bbadf6151478a6b028df026c8d14887363d5dab229dc7642f6bdc84c6708e5c370b6dae8dc2eba8c6cdad242046854c0b51946526bdbb98d22c7bc1eea8a2649260a8818e8ef1de8de8ce8675a77c2785094b1b8bb30c777b26085ca9fac5d70cae34e2ca1dc95f64a21c6c7a3fd91c329b42f285fbd77c712fc304de53bc0b22dde2802ab5e81b46d3be70478ca37bf9896a610f9097ba1949bac06d57a712486f9f287299d92887374123de11ec018ce4cdc0bc67992de4731807ce4454f79c1fe3862287561bc672b88f218f9d0653b1d7f20c1bfe4a3d5368518d597d71c0c34733fea118c25d5ea8afe0dc77fe75b12e6ce6c8c65d621caa638af9a2b820b2a1e13d91f1282a1b812a5f5d1eeb4ca83a538315556e267b2686e3bdbb3e9f420789698e33990fec3ac2962b5c8e5037f7269c023a8ea5230b0ff87bfb18db7682617cd1a55a53e4baa1783757f2f1d5882329dbf68610e5360092093a697b0c74f9d310e421191084dbdea70aae3002fa0ce2d447d7bbcc277b02b0a17f246ed82bc2a162ac3a69a687b7b6039e202d206a1b42ee316925be97006f4e0a80ed48e8510f8e45a6504799cdc23857a551205ca62e3425efc0dac6b21a150a566ad84c9f6ad7eb828a5c787cd0eb375870cd3e8468057f7f412c6bdc06146433120e7a628296aea3ecb94915d3d17d6f402462ebf1ed41d7e556594ccfb80ae028889010fb3f634e0dbbcdaebe0eabe9108ca0be351f607be12e633a927618be8e4404cb95f080c1bd56a52bf518b606b19a1f229c19e41ae0a6f3e5032d62907befe6a4b469f5ff49a1eb673999a89b1f510f62ae5933c525a9da44e59873add146d96aa4470904010c0ee1ea8070a6c8a7a797aa85038ce5954b5c5cf331a99da177dfce7d1ea568e047c1880cacd0b8d3fed98e3a44c8b63b85205a1aa60ed8bebef90d216c1a37bc243e7c86d303cbf8c4ab5d77096bbeace18483994505ea43fa7a7f7d98c80c2d44f68b265795a96d6e3876d7590b458f3adc38dc1e154b00f7f46c835c432dc173f87f821dfdad830e1b0a3caff86ead2690bcf629dd0e68970cb51a64892909346b38c144ffbdf93507ba1913e666057a1203a59acbdc96af280450e5e324704fe2c7a8d9da86805010b9e03de42a1ed3fe9976d9795df588c03b6e7742b39097d05d019313bed8c6bf7b11dc1299bd2ce519f1ca6b4cf09e9163c6735f564ff92753d0e51be824c9feb0126d742a97ffcc9d292fc2ae520125cb3384ffc7b82b76a8eb4379a0c44d8a1a4d2231a068e8c3bc90d813631a40c08ee88e298367b3bc884d1c7b86fbe88aef83425150485e3d78d5f1df88c5dbe58f8e9019e09a7b888f21d947fff726ceb2473964ff773005a80a5ac66dd5300fab1311b2b1dd36f0dfd70c3b35a51c4ad29dec7201c4c1d3467a02fb3695d41d994fe2f03ff86ae8d914ab8b0d6b1ec530db0a2553efcb5e803327afd7fa989fef95ab9e42ee724b0d3b0e1b890b1b173d83d0270f904c55f73bebebd8f0f2d2b768941a9d7324b7d016d6199db0d18aad8d365c991cdd578867e1cbac5ee9b1eede6fd9ce676bdae3c5eadae7fdbed3b0c432647db98a8bad7c8f735ffcf06fef40e42adadfc3e4d5533fe16ccd74ad4fbf4e7596bb9d3e941b7bcf59976901e4004c7bd39bd0225d553bf774628cff29b2bdb3c36dac9954fbfaedc260669cc1f897535d5f2a48bdf97cca77205d766a830b85af3be6d88bc0db76f977c6f53bd0eca2454748b80244db039a6caebe49efebc7fe370d810b75d5d4f9f49e197c3eb8243e35f34e6a198ddef3fb31319492bba1ad217cfe822e1a85cef7d58e42c9a3065298e65684d7d8d11d36330f773890f11d8dbabb171b40591c80ff879a89d70de88398bbd80539897ee70c0d1f5750f2c7c413d1adf9e3d48234cd86a512066f65dd881628cd57afc4d15693daf2b4d5df38796f808e81b7618725c32496a766e4cd9c5234775715f3b01daa502d250e39bece6d6bbecc9dd6e58db00bb6f202062e8bea30273f2a981046d423b022e6290070ea2427b088e80303e0b5ad120403bc85007a3a07e3129c6f16af3f7cb1eb5d2bb771edbc2b1c885628a9ff72d33ddaa29fb3df3a8c3b36f1d1426e029d0b3e0af558ea684e2deb3d2da6d8197f2fa1f385de27f16cd0d27f8dacbe90086c8c737c246bf90694dfe0b0b024bcac3c28aa0c205b660a8cf5b687d57c3e928d829e8e50df9e46a65d45ee2288fb42ce547e9a82134685fe38cbc225870be8c2ba56df35eb00601f4304a54cf24790fb32acece65974e13fa0f9fe61af475a5f312c0849407d2f9a5d7146298690f7b45173769a9e9a1ac28c9e534704cdb7072123938e10633006f682c512e437c2815e76ae7431c86a5eb8603b3d42139b1ee376145221f2db8981d225a28399e14d84eb54a00ef29876a6d6b4b4f8018fbd8e48327cf9bd67d0030c4e67836a5791af42011aa1cf18e89125a5d7f865198edb0946ab2f9e9413a438e5e18ed9e628eb60685a94d1dcb0aada56e0548becdccc4b4871d905b3dd376f41863411ed6796c53165a1267036f2464b43cbba6bd8130135cd0bc26f8243eaf268c21e73e9c64a90d33bd338a3551b8fde1e50e989dbd58a0067f8307a9c524800ddab3a2ec608b0e8c3ba046b5084a9480893f4b278212f0b00df33d9153f3cc814b599e33587a0e022219a65dd6cf87eca77be757f0c9a91eae7b69bc20428ed2e02b63a9fed0ba8b7a9d22712f3921c63e6ff869530249858165aaf1c4f154d33a17968a6f9aee1a9c1b7bcd025bd2867596929c6f46bd331b6541f9c6a0b5b6c5ee64d59d07ca9c40fa117edad5c7b8c919406600cadbfd74f960e7641316cd9fa6b381ac5497dda5a26a46a785c960464f2e699d584801b1dc9efb49b8ff3f2588f9961ccb58289bc18503c5e0e80f2f5fd4a835e371f11cc32f89d2af03ac69ef8368ab2b50507880da674152d506b5f29b1e4cb937b3b89f113e082b257e78d708b7d61b3a201c4d912fa29ff0690e617b692322d2cd1da5ed44c0134ddf4b4d01d6c74417a711b5c399fad04b8f6b7431c81c3e8808e68c7e7abbb8f716a1d4602f4098ebde860e5ef679429aff916c570916f12e6b927c9252bc840946404d2322372267e1d3955fba90aa0b4949df0aa94af42ef6ed96c052e265f33c96f0dcaad4d8f0a7d4c88e0bdefa100191", 0xfe1) r2 = socket(0x2c, 0x3, 0x0) bind$auto(r2, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, 0x5) mmap$auto(0x0, 0x400008, 0x2, 0x2009b72, 0x2, 0x8000) write$auto(r0, 0x0, 0xffff) mmap$auto(0xfffffffffffffffe, 0xfffffffffffffffe, 0xd88a, 0x19, 0xffffffffffffffff, 0x3c3c) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) 1.352905457s ago: executing program 6 (id=4102): r0 = socket(0x10, 0x2, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r3 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount$auto(r3, 0x0, r2, 0x0, 0x9) setsockopt$auto_SO_LOCK_FILTER(r3, 0xc, 0x2c, &(0x7f0000000000)='vcan0\x00', 0x8e0) ioctl$auto(r0, 0x8004542e, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0) writev$auto(r4, &(0x7f00000002c0)={&(0x7f0000000480)='4r', 0x5}, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x13b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{0x1cb5, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, 0x0) writev$auto(r5, &(0x7f0000000340)={0x0, 0x500000}, 0x9) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) 0s ago: executing program 3 (id=4103): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x3, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) getsockopt$auto_SO_RCVBUF(r0, 0x9, 0x8, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 78] should_fail_ex.cold+0x5/0xa [ 1327.158509][T21678] should_failslab+0xc2/0x120 [ 1327.158551][T21678] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1327.158605][T21678] ? alloc_empty_file+0x5b/0x1c0 [ 1327.158655][T21678] ? __pfx_stack_trace_save+0x10/0x10 [ 1327.158707][T21678] alloc_empty_file+0x5b/0x1c0 [ 1327.158758][T21678] path_openat+0xe8/0x31a0 [ 1327.158799][T21678] ? kasan_save_stack+0x3f/0x50 [ 1327.158831][T21678] ? kasan_save_stack+0x30/0x50 [ 1327.158863][T21678] ? kasan_save_track+0x14/0x30 [ 1327.158895][T21678] ? __kasan_slab_alloc+0x89/0x90 [ 1327.158930][T21678] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1327.158991][T21678] ? do_getname+0x35/0x390 [ 1327.159033][T21678] ? do_sys_openat2+0xc5/0x1e0 [ 1327.159075][T21678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.159106][T21678] ? __pfx_path_openat+0x10/0x10 [ 1327.159152][T21678] do_file_open+0x20e/0x430 [ 1327.159191][T21678] ? __pfx_do_file_open+0x10/0x10 [ 1327.159253][T21678] ? alloc_fd+0x476/0x790 [ 1327.159287][T21678] ? do_getname+0x191/0x390 [ 1327.159341][T21678] do_sys_openat2+0x10d/0x1e0 [ 1327.159390][T21678] ? __pfx_do_sys_openat2+0x10/0x10 [ 1327.159448][T21678] __x64_sys_openat+0x12d/0x210 [ 1327.159495][T21678] ? __pfx___x64_sys_openat+0x10/0x10 [ 1327.159537][T21678] ? ksys_write+0x1ac/0x250 [ 1327.159581][T21678] ? rcu_is_watching+0x12/0xc0 [ 1327.159619][T21678] do_syscall_64+0x115/0x840 [ 1327.159657][T21678] ? clear_bhb_loop+0x40/0x90 [ 1327.159689][T21678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.159717][T21678] RIP: 0033:0x7f408079ce59 [ 1327.159741][T21678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.159769][T21678] RSP: 002b:00007f40815b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1327.159798][T21678] RAX: ffffffffffffffda RBX: 00007f4080a16180 RCX: 00007f408079ce59 [ 1327.159818][T21678] RDX: 0000000000000042 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1327.159835][T21678] RBP: 00007f4080832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1327.159851][T21678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.159867][T21678] R13: 00007f4080a16218 R14: 00007f4080a16180 R15: 00007ffcb0839f08 [ 1327.159903][T21678] [ 1328.650201][T21706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3085'. [ 1328.676746][T21706] netlink: 54041 bytes leftover after parsing attributes in process `syz.2.3085'. [ 1329.475566][T21548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1329.524467][T21548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1329.548253][T21548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1329.626007][T21548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1329.645226][T21548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1329.728441][T21548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1329.771750][T21548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1329.831204][T21723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3088'. [ 1329.865893][T21548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1330.470105][T11332] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1330.630634][T11332] Bluetooth: hci1: unexpected subevent 0x01 length: 5 < 18 [ 1330.650048][T21548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.742042][T21548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.795013][T19561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.802303][T19561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.817983][T21735] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3089'. [ 1330.887348][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.894656][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.214037][T21771] can: request_module (can-proto-0) failed. [ 1333.273601][T21548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.239269][T21548] veth0_vlan: entered promiscuous mode [ 1334.311631][T21548] veth1_vlan: entered promiscuous mode [ 1334.377069][T21548] veth0_macvtap: entered promiscuous mode [ 1334.431905][T21548] veth1_macvtap: entered promiscuous mode [ 1334.524374][T21548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1334.563476][T21548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.643124][T19562] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.667717][T21790] FAULT_INJECTION: forcing a failure. [ 1334.667717][T21790] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.683157][T19562] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.697657][T19562] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.717411][T11332] Bluetooth: hci3: unexpected subevent 0x03 length: 253 > 9 [ 1334.735735][T21790] CPU: 1 UID: 0 PID: 21790 Comm: syz.5.3098 Tainted: G L syzkaller #0 PREEMPT(full) [ 1334.735787][T21790] Tainted: [L]=SOFTLOCKUP [ 1334.735802][T21790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1334.735819][T21790] Call Trace: [ 1334.735828][T21790] [ 1334.735838][T21790] dump_stack_lvl+0x100/0x190 [ 1334.735868][T21790] should_fail_ex.cold+0x5/0xa [ 1334.735901][T21790] should_failslab+0xc2/0x120 [ 1334.735932][T21790] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1334.735969][T21790] ? sctp_datamsg_from_user+0x8e/0x1360 [ 1334.736122][T21790] sctp_datamsg_from_user+0x8e/0x1360 [ 1334.736173][T21790] ? __sk_mem_raise_allocated+0x789/0x1580 [ 1334.736222][T21790] ? __sk_mem_schedule+0xd0/0x100 [ 1334.736264][T21790] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 1334.736324][T21790] ? __lock_acquire+0x4a5/0x2630 [ 1334.736369][T21790] ? aa_label_sk_perm+0x194/0x5f0 [ 1334.736408][T21790] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1334.736438][T21790] ? do_raw_spin_lock+0x128/0x260 [ 1334.736467][T21790] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1334.736501][T21790] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 1334.736532][T21790] sctp_sendmsg+0x1144/0x22e0 [ 1334.736596][T21790] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1334.736629][T21790] ? is_bpf_text_address+0x94/0x1a0 [ 1334.736670][T21790] ? aa_sk_perm+0x309/0xaa0 [ 1334.736706][T21790] ? __pfx_aa_sk_perm+0x10/0x10 [ 1334.736747][T21790] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1334.736782][T21790] inet_sendmsg+0x11c/0x140 [ 1334.736831][T21790] sock_sendmsg+0x337/0x3d0 [ 1334.736864][T21790] ? __pfx_inet_sendmsg+0x10/0x10 [ 1334.736905][T21790] ? __pfx_sock_sendmsg+0x10/0x10 [ 1334.736938][T21790] ? kfree+0x223/0x6c0 [ 1334.736992][T21790] splice_to_socket+0xb4c/0x11b0 [ 1334.737041][T21790] ? __pfx_splice_to_socket+0x10/0x10 [ 1334.737111][T21790] ? lockdep_init_map_type+0x5c/0x250 [ 1334.737154][T21790] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1334.737185][T21790] ? __pfx_splice_to_socket+0x10/0x10 [ 1334.737221][T21790] direct_splice_actor+0x192/0x6c0 [ 1334.737287][T21790] splice_direct_to_actor+0x345/0xa30 [ 1334.737326][T21790] ? __pfx_direct_splice_actor+0x10/0x10 [ 1334.737364][T21790] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1334.737406][T21790] do_splice_direct+0x174/0x240 [ 1334.737441][T21790] ? __pfx_do_splice_direct+0x10/0x10 [ 1334.737475][T21790] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1334.737508][T21790] ? bpf_lsm_file_permission+0x9/0x10 [ 1334.737532][T21790] ? security_file_permission+0x76/0x210 [ 1334.737568][T21790] ? rw_verify_area+0xce/0x6d0 [ 1334.737596][T21790] do_sendfile+0xadc/0xe20 [ 1334.737629][T21790] ? __pfx_do_sendfile+0x10/0x10 [ 1334.737655][T21790] ? do_sock_setsockopt+0x101/0x1d0 [ 1334.737684][T21790] ? ipv6_setsockopt+0xcb/0x170 [ 1334.737815][T21790] ? __x64_sys_futex+0x34f/0x4d0 [ 1334.737842][T21790] ? __x64_sys_futex+0x358/0x4d0 [ 1334.737872][T21790] __x64_sys_sendfile64+0x1d8/0x220 [ 1334.737909][T21790] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1334.737948][T21790] ? rcu_is_watching+0x12/0xc0 [ 1334.737982][T21790] do_syscall_64+0x115/0x840 [ 1334.738018][T21790] ? clear_bhb_loop+0x40/0x90 [ 1334.738049][T21790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.738075][T21790] RIP: 0033:0x7f08a399ce59 [ 1334.738097][T21790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.738122][T21790] RSP: 002b:00007f08a1bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1334.738147][T21790] RAX: ffffffffffffffda RBX: 00007f08a3c15fa0 RCX: 00007f08a399ce59 [ 1334.738164][T21790] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 1334.738179][T21790] RBP: 00007f08a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1334.738195][T21790] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1334.738212][T21790] R13: 00007f08a3c16038 R14: 00007f08a3c15fa0 R15: 00007ffd175d74f8 [ 1334.738244][T21790] [ 1334.809898][T19562] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.854406][T21789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1335.865281][T21789] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1335.902245][T21789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1335.928680][T21789] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1335.952190][T21789] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1335.974352][T21789] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1336.268002][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.297778][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.328660][T11332] Bluetooth: hci0: command 0x0406 tx timeout [ 1336.432418][T12297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.456816][T12297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.921214][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 1337.927360][ T5636] Bluetooth: hci1: command 0x2016 tx timeout [ 1337.933900][T11332] Bluetooth: hci2: command 0x0c1a tx timeout [ 1338.717362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1340.001743][T21841] Bluetooth: hci2: command 0x0c1a tx timeout [ 1340.791190][T21862] futex_wake_op: syz.3.3109 tries to shift op by -2048; fix this program [ 1340.832279][T21862] 0x000000000001-0x000000020000 : "" [ 1340.908810][T21862] ftl_cs: FTL header corrupt! [ 1342.061979][T21841] Bluetooth: hci2: command 0x0c1a tx timeout [ 1344.792727][T21926] bond0: invalid ARP target specified [ 1344.827671][T21926] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1344.881019][T21926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3120'. [ 1346.068922][T21936] FAULT_INJECTION: forcing a failure. [ 1346.068922][T21936] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1346.233886][T21936] CPU: 0 UID: 0 PID: 21936 Comm: syz.4.3123 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.233942][T21936] Tainted: [L]=SOFTLOCKUP [ 1346.233954][T21936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1346.233976][T21936] Call Trace: [ 1346.233988][T21936] [ 1346.234003][T21936] dump_stack_lvl+0x100/0x190 [ 1346.234054][T21936] should_fail_ex.cold+0x5/0xa [ 1346.234094][T21936] ? prepare_alloc_pages+0x16d/0x5f0 [ 1346.234146][T21936] should_fail_alloc_page+0xeb/0x140 [ 1346.234194][T21936] prepare_alloc_pages+0x1f0/0x5f0 [ 1346.234240][T21936] ? rcu_is_watching+0x12/0xc0 [ 1346.234288][T21936] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1346.234347][T21936] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 1346.234410][T21936] ? __lock_acquire+0x4a5/0x2630 [ 1346.234484][T21936] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1346.234542][T21936] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1346.234609][T21936] ? is_bpf_text_address+0x8a/0x1a0 [ 1346.234657][T21936] ? bpf_ksym_find+0x124/0x1c0 [ 1346.234700][T21936] ? __lock_acquire+0x4a5/0x2630 [ 1346.234754][T21936] ? __css_rstat_updated+0x1ce/0x5a0 [ 1346.234814][T21936] ? __lock_acquire+0x4a5/0x2630 [ 1346.234867][T21936] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1346.234920][T21936] ? policy_nodemask+0xed/0x4f0 [ 1346.234965][T21936] alloc_pages_mpol+0x1fb/0x540 [ 1346.235011][T21936] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1346.235068][T21936] ? find_held_lock+0x2b/0x80 [ 1346.235112][T21936] ? __pud_alloc+0x4f6/0x690 [ 1346.235155][T21936] ? __pud_alloc+0x4f6/0x690 [ 1346.235205][T21936] alloc_pages_noprof+0x1a/0x160 [ 1346.235256][T21936] __pmd_alloc+0x3b/0x950 [ 1346.235298][T21936] ? __pud_alloc+0x4fb/0x690 [ 1346.235347][T21936] copy_page_range+0x41a8/0x5b20 [ 1346.235414][T21936] ? __lock_acquire+0x4a5/0x2630 [ 1346.235469][T21936] ? find_held_lock+0x2b/0x80 [ 1346.235536][T21936] ? mas_wr_store_entry+0xa1/0x1e80 [ 1346.235596][T21936] ? __pfx_copy_page_range+0x10/0x10 [ 1346.235658][T21936] ? mas_store+0x666/0xac0 [ 1346.235723][T21936] ? __pfx_mas_store+0x10/0x10 [ 1346.235787][T21936] ? __pfx___vma_start_write+0x10/0x10 [ 1346.235851][T21936] dup_mmap+0xd44/0x21b0 [ 1346.235915][T21936] ? __pfx_dup_mmap+0x10/0x10 [ 1346.235974][T21936] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1346.236033][T21936] ? __lock_acquire+0x4a5/0x2630 [ 1346.236078][T21936] ? find_held_lock+0x2b/0x80 [ 1346.236112][T21936] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1346.236181][T21936] copy_process+0x6c78/0x7ed0 [ 1346.236218][T21936] ? __futex_wait+0x256/0x300 [ 1346.236272][T21936] ? __pfx_copy_process+0x10/0x10 [ 1346.236316][T21936] ? find_held_lock+0x2b/0x80 [ 1346.236365][T21936] kernel_clone+0x176/0x9e0 [ 1346.236401][T21936] ? __pfx_futex_wait+0x10/0x10 [ 1346.236437][T21936] ? __pfx_kernel_clone+0x10/0x10 [ 1346.236499][T21936] __do_sys_clone+0xd9/0x120 [ 1346.236542][T21936] ? __pfx___do_sys_clone+0x10/0x10 [ 1346.236595][T21936] ? ksys_read+0x1ac/0x250 [ 1346.236638][T21936] ? rcu_is_watching+0x12/0xc0 [ 1346.236681][T21936] do_syscall_64+0x115/0x840 [ 1346.236722][T21936] ? clear_bhb_loop+0x40/0x90 [ 1346.236757][T21936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.236787][T21936] RIP: 0033:0x7f7e04d9ce59 [ 1346.236817][T21936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.236847][T21936] RSP: 002b:00007f7e05bb9fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1346.236876][T21936] RAX: ffffffffffffffda RBX: 00007f7e05015fa0 RCX: 00007f7e04d9ce59 [ 1346.236895][T21936] RDX: 0000200000001600 RSI: 00002000000015f0 RDI: 0000000000000400 [ 1346.236914][T21936] RBP: 00007f7e04e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1346.236934][T21936] R10: 0000200000001640 R11: 0000000000000206 R12: 0000000000000000 [ 1346.236981][T21936] R13: 00007f7e05016038 R14: 00007f7e05015fa0 R15: 00007ffcdfcb6f08 [ 1346.237036][T21936] [ 1347.776551][T17649] usb usb40-port5: attempt power cycle [ 1348.376841][T17649] usb usb40-port5: unable to enumerate USB device [ 1348.469655][T21971] bridge0: port 3(team0) entered blocking state [ 1348.497890][T21971] bridge0: port 3(team0) entered disabled state [ 1348.509202][T21971] team0: entered allmulticast mode [ 1348.539086][T21971] team_slave_0: entered allmulticast mode [ 1348.564659][T21971] team_slave_1: entered allmulticast mode [ 1348.749741][T21971] team0: entered promiscuous mode [ 1348.759030][T21971] team_slave_0: entered promiscuous mode [ 1348.809478][T21971] team_slave_1: entered promiscuous mode [ 1348.845427][T21971] bridge0: port 3(team0) entered blocking state [ 1348.852006][T21971] bridge0: port 3(team0) entered forwarding state [ 1350.737784][T21993] Process accounting paused [ 1351.854824][T21604] usb usb40-port5: attempt power cycle [ 1352.441084][T21604] usb usb40-port5: unable to enumerate USB device [ 1353.478809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1354.385604][T22039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3143'. [ 1354.825190][T22042] FAULT_INJECTION: forcing a failure. [ 1354.825190][T22042] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.893976][T22042] CPU: 1 UID: 0 PID: 22042 Comm: syz.5.3143 Tainted: G L syzkaller #0 PREEMPT(full) [ 1354.894032][T22042] Tainted: [L]=SOFTLOCKUP [ 1354.894046][T22042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1354.894068][T22042] Call Trace: [ 1354.894080][T22042] [ 1354.894094][T22042] dump_stack_lvl+0x100/0x190 [ 1354.894140][T22042] should_fail_ex.cold+0x5/0xa [ 1354.894187][T22042] should_failslab+0xc2/0x120 [ 1354.894232][T22042] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1354.894285][T22042] ? crtc_crc_open+0x3ba/0x7e0 [ 1354.894342][T22042] crtc_crc_open+0x3ba/0x7e0 [ 1354.894387][T22042] ? __debugfs_file_get+0x1fc/0x860 [ 1354.894546][T22042] ? __pfx_crtc_crc_open+0x10/0x10 [ 1354.894594][T22042] ? __pfx_apparmor_file_open+0x10/0x10 [ 1354.894634][T22042] ? path_get+0x61/0x80 [ 1354.894688][T22042] ? __pfx_crtc_crc_open+0x10/0x10 [ 1354.894733][T22042] full_proxy_open_regular+0x1b6/0x370 [ 1354.894794][T22042] do_dentry_open+0x6ab/0x14d0 [ 1354.894838][T22042] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1354.894909][T22042] vfs_open+0x82/0x3f0 [ 1354.894967][T22042] path_openat+0x208c/0x31a0 [ 1354.895028][T22042] ? __pfx_path_openat+0x10/0x10 [ 1354.895088][T22042] do_file_open+0x20e/0x430 [ 1354.895137][T22042] ? __pfx_do_file_open+0x10/0x10 [ 1354.895212][T22042] ? alloc_fd+0x476/0x790 [ 1354.895261][T22042] ? do_getname+0x191/0x390 [ 1354.895322][T22042] do_sys_openat2+0x10d/0x1e0 [ 1354.895378][T22042] ? __pfx_do_sys_openat2+0x10/0x10 [ 1354.895434][T22042] ? do_raw_spin_lock+0x128/0x260 [ 1354.895485][T22042] __x64_sys_openat+0x12d/0x210 [ 1354.895543][T22042] ? __pfx___x64_sys_openat+0x10/0x10 [ 1354.895607][T22042] ? rcu_is_watching+0x12/0xc0 [ 1354.895653][T22042] do_syscall_64+0x115/0x840 [ 1354.895703][T22042] ? clear_bhb_loop+0x40/0x90 [ 1354.895748][T22042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.895785][T22042] RIP: 0033:0x7f08a399ce59 [ 1354.895816][T22042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.895851][T22042] RSP: 002b:00007f08a1bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1354.895893][T22042] RAX: ffffffffffffffda RBX: 00007f08a3c16180 RCX: 00007f08a399ce59 [ 1354.895917][T22042] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1354.895942][T22042] RBP: 00007f08a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1354.895964][T22042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1354.895985][T22042] R13: 00007f08a3c16218 R14: 00007f08a3c16180 R15: 00007ffd175d74f8 [ 1354.896031][T22042] [ 1355.307253][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1355.437238][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.340063][T22056] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3146'. [ 1359.367589][T22085] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3151'. [ 1359.613275][ T42] usb usb40-port5: attempt power cycle [ 1360.202705][ T42] usb usb40-port5: unable to enumerate USB device [ 1361.756467][T22134] bridge0: port 4(bond0) entered blocking state [ 1361.783109][T22134] bridge0: port 4(bond0) entered disabled state [ 1361.814312][T22134] bond0: entered allmulticast mode [ 1361.841297][T22134] bond_slave_0: entered allmulticast mode [ 1361.868857][T22134] bond_slave_1: entered allmulticast mode [ 1361.897778][T22134] bond0: entered promiscuous mode [ 1361.914299][T22134] bond_slave_0: entered promiscuous mode [ 1361.938933][T22134] bond_slave_1: entered promiscuous mode [ 1361.958347][T22134] bridge0: port 4(bond0) entered blocking state [ 1361.964861][T22134] bridge0: port 4(bond0) entered forwarding state [ 1363.427484][T22166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3166'. [ 1363.699113][T21841] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 1364.498182][T22185] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1366.908024][T22209] FAULT_INJECTION: forcing a failure. [ 1366.908024][T22209] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.957863][T22209] CPU: 1 UID: 0 PID: 22209 Comm: syz.4.3174 Tainted: G L syzkaller #0 PREEMPT(full) [ 1366.957921][T22209] Tainted: [L]=SOFTLOCKUP [ 1366.957935][T22209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1366.957956][T22209] Call Trace: [ 1366.957967][T22209] [ 1366.957980][T22209] dump_stack_lvl+0x100/0x190 [ 1366.958025][T22209] should_fail_ex.cold+0x5/0xa [ 1366.958072][T22209] ? lsm_blob_alloc+0x68/0x90 [ 1366.958130][T22209] should_failslab+0xc2/0x120 [ 1366.958175][T22209] __kmalloc_noprof+0xe0/0x850 [ 1366.958217][T22209] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1366.958269][T22209] lsm_blob_alloc+0x68/0x90 [ 1366.958324][T22209] security_sk_alloc+0x2d/0x290 [ 1366.958366][T22209] sk_prot_alloc+0x1d1/0x2a0 [ 1366.958416][T22209] sk_alloc+0x36/0xe80 [ 1366.958452][T22209] tipc_sk_create+0xf9/0x23c0 [ 1366.958507][T22209] ? find_held_lock+0x2b/0x80 [ 1366.958552][T22209] ? __sock_create+0x2f3/0x860 [ 1366.958599][T22209] ? __sock_create+0x2f3/0x860 [ 1366.958652][T22209] __sock_create+0x339/0x860 [ 1366.958709][T22209] __sys_socketpair+0x1e4/0x5b0 [ 1366.958764][T22209] ? __pfx___sys_socketpair+0x10/0x10 [ 1366.958817][T22209] ? xfd_validate_state+0x129/0x190 [ 1366.958864][T22209] __x64_sys_socketpair+0x96/0x100 [ 1366.958916][T22209] ? lockdep_hardirqs_on+0x78/0x100 [ 1366.958967][T22209] do_syscall_64+0x115/0x840 [ 1366.959020][T22209] ? clear_bhb_loop+0x40/0x90 [ 1366.959064][T22209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.959102][T22209] RIP: 0033:0x7f7e04d9ce59 [ 1366.959131][T22209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.959168][T22209] RSP: 002b:00007f7e05bba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1366.959210][T22209] RAX: ffffffffffffffda RBX: 00007f7e05015fa0 RCX: 00007f7e04d9ce59 [ 1366.959235][T22209] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 1366.959257][T22209] RBP: 00007f7e04e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1366.959279][T22209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1366.959301][T22209] R13: 00007f7e05016038 R14: 00007f7e05015fa0 R15: 00007ffcdfcb6f08 [ 1366.959347][T22209] [ 1372.424594][T21841] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1372.835687][T22296] tipc: Publication distribution failure [ 1373.302410][T21841] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1373.310629][T21841] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 1373.695338][T22300] Console: switching to colour VGA+ 80x4 [ 1374.469849][T21841] Bluetooth: hci3: command 0x0c1a tx timeout [ 1374.642361][T17649] Process accounting resumed [ 1375.325062][T22316] Process accounting resumed [ 1376.226773][T22349] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3202'. [ 1376.540004][T21841] Bluetooth: hci3: command 0x0c1a tx timeout [ 1377.462555][T22363] random: crng reseeded on system resumption [ 1381.901302][T22425] Process accounting resumed [ 1382.433595][T22445] block2mtd: illegal erase size [ 1385.153672][T22495] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3229: iget: checksum invalid [ 1385.187562][T22495] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1385.209384][T22495] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3229: iget: checksum invalid [ 1385.232313][T22495] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1385.252720][T22495] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3229: iget: checksum invalid [ 1385.276807][T22495] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1385.315622][T22495] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3229: iget: checksum invalid [ 1385.341988][T22495] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1385.366631][T22495] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1385.395956][T22495] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1385.870842][T22503] netlink: 'syz.3.3232': attribute type 2 has an invalid length. [ 1386.206194][T22511] futex_wake_op: syz.5.3234 tries to shift op by -2048; fix this program [ 1388.763576][T22534] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.930965][T22534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.162051][T22534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.280923][T22534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.355188][T22552] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 1390.384708][T22552] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1390.390549][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022fbd400: rx timeout, send abort [ 1390.400952][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022fbd400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1390.414607][T22552] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1390.436306][T22552] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1390.476861][T22552] page dumped because: unmovable page [ 1390.556129][T22552] page_owner tracks the page as allocated [ 1390.603715][T22552] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1709364835, free_ts 0 [ 1390.668592][T22552] register_early_stack+0x74/0xaf [ 1390.681417][T22552] init_page_owner+0x4c/0xa10 [ 1390.691336][T22552] page_ext_init+0x71d/0x780 [ 1390.703015][T22552] mm_core_init+0x229/0x270 [ 1390.723862][T22552] page_owner free stack trace missing [ 1390.842113][T22534] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.436766][T22645] netlink: 'syz.4.3267': attribute type 10 has an invalid length. [ 1397.460602][T22645] netlink: 'syz.4.3267': attribute type 13 has an invalid length. [ 1397.640699][T15543] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1397.904469][T22650] input: jJǸ-9%vJ86 as /devices/virtual/input/input17 [ 1400.874256][T22689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3277'. [ 1401.205535][T22689] bond0: (slave bond_slave_0): Releasing backup interface [ 1401.515638][T22699] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3278'. [ 1401.643844][T22699] mac80211_hwsim hwsim55 : renamed from wlan0 (while UP) [ 1406.072493][T22746] Process accounting paused [ 1408.139634][T22798] random: crng reseeded on system resumption [ 1409.456254][T22811] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 1409.957549][T22811] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 1410.067452][T22811] pci 0000:00:01.3: PCI INT A: no GSI [ 1410.645617][T22825] vhci_hcd vhci_hcd.0: invalid port number 126 [ 1410.682832][T22825] vhci_hcd vhci_hcd.0: default hub control req: a089 v05b7 i007e l0 [ 1410.825045][ T29] audit: type=1800 audit(1843106759.518:31): pid=22815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3305" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1411.419087][T22829] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3307'. [ 1412.360582][T22813] Process accounting paused [ 1414.020037][T22862] netlink: 350 bytes leftover after parsing attributes in process `syz.3.3315'. [ 1414.070110][T22862] random: crng reseeded on system resumption [ 1415.881497][T22892] smpboot: CPU 1 is now offline [ 1416.435854][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1416.444549][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1419.533899][T22961] netlink: 146 bytes leftover after parsing attributes in process `syz.3.3340'. [ 1419.890627][T22980] futex_wake_op: syz.2.3342 tries to shift op by -2048; fix this program [ 1421.250238][T22998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3348'. [ 1421.483649][T22999] HfR: entered promiscuous mode [ 1421.909154][T23014] FAULT_INJECTION: forcing a failure. [ 1421.909154][T23014] name failslab, interval 1, probability 0, space 0, times 0 [ 1422.014987][T23014] CPU: 0 UID: 0 PID: 23014 Comm: syz.3.3351 Tainted: G L syzkaller #0 PREEMPT(full) [ 1422.015028][T23014] Tainted: [L]=SOFTLOCKUP [ 1422.015037][T23014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1422.015054][T23014] Call Trace: [ 1422.015062][T23014] [ 1422.015072][T23014] dump_stack_lvl+0x100/0x190 [ 1422.015105][T23014] should_fail_ex.cold+0x5/0xa [ 1422.015139][T23014] should_failslab+0xc2/0x120 [ 1422.015172][T23014] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1422.015210][T23014] ? init_srcu_struct_fields+0xa69/0xfa0 [ 1422.015257][T23014] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 1422.015299][T23014] init_srcu_struct_fields+0xa69/0xfa0 [ 1422.015345][T23014] kvm_dev_ioctl+0x7b6/0x1a50 [ 1422.015387][T23014] ? find_held_lock+0x2b/0x80 [ 1422.015418][T23014] ? __fget_files+0x215/0x3d0 [ 1422.015447][T23014] ? hook_file_ioctl_common+0x149/0x410 [ 1422.015486][T23014] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1422.015526][T23014] ? __fget_files+0x21f/0x3d0 [ 1422.015560][T23014] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1422.015597][T23014] __x64_sys_ioctl+0x18e/0x210 [ 1422.015625][T23014] do_syscall_64+0x115/0x840 [ 1422.015663][T23014] ? clear_bhb_loop+0x40/0x90 [ 1422.015695][T23014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.015723][T23014] RIP: 0033:0x7f408079ce59 [ 1422.015743][T23014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1422.015778][T23014] RSP: 002b:00007f40815d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1422.015803][T23014] RAX: ffffffffffffffda RBX: 00007f4080a16090 RCX: 00007f408079ce59 [ 1422.015821][T23014] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000000 [ 1422.015837][T23014] RBP: 00007f4080832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1422.015853][T23014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1422.015869][T23014] R13: 00007f4080a16128 R14: 00007f4080a16090 R15: 00007ffcb0839f08 [ 1422.015900][T23014] [ 1423.713668][T23032] ubi0: attaching mtd0 [ 1423.877196][T23032] ubi0: scanning is finished [ 1423.940649][T23032] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1424.149095][T23037] FAULT_INJECTION: forcing a failure. [ 1424.149095][T23037] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.397254][T23037] CPU: 0 UID: 0 PID: 23037 Comm: syz.3.3359 Tainted: G L syzkaller #0 PREEMPT(full) [ 1424.397295][T23037] Tainted: [L]=SOFTLOCKUP [ 1424.397305][T23037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1424.397321][T23037] Call Trace: [ 1424.397330][T23037] [ 1424.397340][T23037] dump_stack_lvl+0x100/0x190 [ 1424.397372][T23037] should_fail_ex.cold+0x5/0xa [ 1424.397404][T23037] ? __register_sysctl_table+0xac/0x1650 [ 1424.397439][T23037] should_failslab+0xc2/0x120 [ 1424.397470][T23037] __kmalloc_noprof+0xe0/0x850 [ 1424.397499][T23037] __register_sysctl_table+0xac/0x1650 [ 1424.397533][T23037] ? is_module_address+0x5f/0xf0 [ 1424.397562][T23037] ? __pfx___register_sysctl_table+0x10/0x10 [ 1424.397603][T23037] ? is_module_address+0x69/0xf0 [ 1424.397626][T23037] ? register_net_sysctl_sz+0x222/0x430 [ 1424.397765][T23037] ? __asan_memcpy+0x3c/0x60 [ 1424.397808][T23037] sctp_sysctl_net_register+0x15e/0x200 [ 1424.397861][T23037] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1424.397889][T23037] sctp_defaults_init+0x6d2/0xd90 [ 1424.397916][T23037] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1424.397942][T23037] ops_init+0x1e2/0x5f0 [ 1424.397975][T23037] setup_net+0x118/0x3a0 [ 1424.398003][T23037] ? __pfx_setup_net+0x10/0x10 [ 1424.398031][T23037] ? mutex_init_lockdep+0xf1/0x120 [ 1424.398062][T23037] copy_net_ns+0x46f/0x7c0 [ 1424.398095][T23037] create_new_namespaces+0x3ea/0xac0 [ 1424.398136][T23037] unshare_nsproxy_namespaces+0xf2/0x220 [ 1424.398172][T23037] ksys_unshare+0x438/0xab0 [ 1424.398210][T23037] ? __pfx_ksys_unshare+0x10/0x10 [ 1424.398246][T23037] ? xfd_validate_state+0x129/0x190 [ 1424.398281][T23037] __x64_sys_unshare+0x31/0x40 [ 1424.398318][T23037] do_syscall_64+0x115/0x840 [ 1424.398354][T23037] ? clear_bhb_loop+0x40/0x90 [ 1424.398385][T23037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.398412][T23037] RIP: 0033:0x7f408079ce59 [ 1424.398433][T23037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1424.398459][T23037] RSP: 002b:00007f40815f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1424.398486][T23037] RAX: ffffffffffffffda RBX: 00007f4080a15fa0 RCX: 00007f408079ce59 [ 1424.398504][T23037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1424.398520][T23037] RBP: 00007f4080832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1424.398537][T23037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1424.398553][T23037] R13: 00007f4080a16038 R14: 00007f4080a15fa0 R15: 00007ffcb0839f08 [ 1424.398592][T23037] [ 1426.401408][T23032] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1428.013509][T23081] tipc: Started in network mode [ 1428.059005][T23081] tipc: Node identity ee00, cluster identity 4711 [ 1428.147436][T23081] tipc: Node number set to 60928 [ 1430.175120][T23114] netlink: 'syz.2.3375': attribute type 4 has an invalid length. [ 1430.223269][T23114] netlink: 314 bytes leftover after parsing attributes in process `syz.2.3375'. [ 1431.138096][T23126] netlink: 'syz.3.3378': attribute type 4 has an invalid length. [ 1431.193502][T23126] netlink: 'syz.3.3378': attribute type 4 has an invalid length. [ 1434.961472][T23162] ima: policy update failed [ 1435.054285][ T29] audit: type=1802 audit(1843106783.852:32): pid=23162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3387" res=0 errno=0 [ 1435.384181][T23178] random: crng reseeded on system resumption [ 1435.558021][T23178] cougar: G6 mapped to space [ 1436.680566][T23178] Process accounting resumed [ 1437.302970][T23198] random: crng reseeded on system resumption [ 1438.938135][T23210] random: crng reseeded on system resumption [ 1442.647092][T23227] Process accounting resumed [ 1443.160132][T23252] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3411'. [ 1443.368397][T23256] netlink: zone id is out of range [ 1443.368415][T23256] netlink: zone id is out of range [ 1443.368424][T23256] netlink: zone id is out of range [ 1443.368434][T23256] netlink: zone id is out of range [ 1443.368442][T23256] netlink: zone id is out of range [ 1443.368452][T23256] netlink: zone id is out of range [ 1443.368461][T23256] netlink: zone id is out of range [ 1443.368470][T23256] netlink: zone id is out of range [ 1443.368479][T23256] netlink: zone id is out of range [ 1443.368488][T23256] netlink: zone id is out of range [ 1448.543543][T23330] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 1449.365177][T23351] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3434'. [ 1450.059287][T23366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3438'. [ 1450.154095][T23366] bond0: left allmulticast mode [ 1450.186965][T23366] bond_slave_0: left allmulticast mode [ 1450.221773][T23366] bond_slave_1: left allmulticast mode [ 1450.251362][T23366] bond0: left promiscuous mode [ 1450.280150][T23366] bond_slave_0: left promiscuous mode [ 1450.310525][T23366] bond_slave_1: left promiscuous mode [ 1450.344663][T23366] bridge0: port 4(bond0) entered disabled state [ 1450.387982][T23366] batadv0: left allmulticast mode [ 1450.415208][T23366] batadv0: left promiscuous mode [ 1450.439822][T23366] bridge0: port 3(batadv0) entered disabled state [ 1450.498057][T23366] bridge_slave_1: left allmulticast mode [ 1450.531423][T23366] bridge_slave_1: left promiscuous mode [ 1450.560504][T23366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.626914][T23366] bridge_slave_0: left allmulticast mode [ 1450.661818][T23366] bridge_slave_0: left promiscuous mode [ 1450.695676][T23366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.376738][T12297] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.444636][T23402] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 4, inode_bitmap = 141 [ 1453.774255][T15543] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 1453.774290][T15543] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 1453.789571][T15543] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 1453.801499][T15543] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 1453.801531][T15543] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 1453.816772][T15543] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 1454.253498][T21841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1454.277673][T21841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1454.286574][T21841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1454.317723][T21841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1454.327886][T21841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1454.403072][T12297] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.822176][T23424] netlink: 'syz.4.3455': attribute type 1 has an invalid length. [ 1454.925191][T12297] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.548136][T12297] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.405936][T21841] Bluetooth: hci1: command tx timeout [ 1456.548023][T23426] ubi0: attaching mtd0 [ 1456.674683][T23426] ubi0: scanning is finished [ 1456.748092][T23426] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1457.045170][T12297] bridge_slave_1: left allmulticast mode [ 1457.068930][T12297] bridge_slave_1: left promiscuous mode [ 1457.095009][T12297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.144175][T12297] bridge_slave_0: left allmulticast mode [ 1457.172095][T12297] bridge_slave_0: left promiscuous mode [ 1457.205878][T12297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.337340][T23426] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1458.349689][T12297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.418761][T12297] bond0 (unregistering): Released all slaves [ 1458.477571][T21841] Bluetooth: hci1: command tx timeout [ 1459.719016][T12297] hsr_slave_0: left promiscuous mode [ 1459.746885][T12297] hsr_slave_1: left promiscuous mode [ 1459.775574][T12297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1459.811392][T12297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1459.853801][T12297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1459.890552][T12297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1459.951884][T12297] veth1_macvtap: left promiscuous mode [ 1459.980797][T12297] veth0_macvtap: left promiscuous mode [ 1460.005572][T12297] veth1_vlan: left promiscuous mode [ 1460.030252][T12297] veth0_vlan: left promiscuous mode [ 1460.545060][T21841] Bluetooth: hci1: command tx timeout [ 1461.067841][T12297] team0 (unregistering): Port device team_slave_1 removed [ 1461.170923][T12297] team0 (unregistering): Port device team_slave_0 removed [ 1462.619125][T21841] Bluetooth: hci1: command tx timeout [ 1462.899036][T23495] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3467'. [ 1462.962277][T23495] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3467'. [ 1463.674077][T23416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.720250][T23416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.765045][T23416] bridge_slave_0: entered allmulticast mode [ 1463.812459][T23416] bridge_slave_0: entered promiscuous mode [ 1463.859820][T23416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.899254][T23416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.947395][T23416] bridge_slave_1: entered allmulticast mode [ 1463.998200][T23416] bridge_slave_1: entered promiscuous mode [ 1464.174434][T23416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.218707][T23513] __vm_enough_memory: pid: 23513, comm: syz.4.3472, bytes: 4398046457856 not enough memory for the allocation [ 1464.247392][T23416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.489086][T23416] team0: Port device team_slave_0 added [ 1464.538817][T23416] team0: Port device team_slave_1 added [ 1464.709779][T23416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.752622][T23416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.904544][T23416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.975303][T23416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1465.018387][T23416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1465.166270][T23416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1465.466030][T23416] hsr_slave_0: entered promiscuous mode [ 1465.514988][T23416] hsr_slave_1: entered promiscuous mode [ 1465.542991][T23416] debugfs: 'hsr0' already exists in 'hsr' [ 1465.571710][T23416] Cannot create hsr debugfs directory [ 1466.838554][T23536] Process accounting paused [ 1467.146265][T23560] sctp: [Deprecated]: syz.2.3483 (pid 23560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1467.146265][T23560] Use struct sctp_sack_info instead [ 1469.609078][T23416] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1469.671230][T23416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1469.715017][T23416] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1469.813316][T23416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1469.862005][T23416] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1469.923744][T23416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1469.977549][T23416] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1470.081598][T23416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1470.584937][T23600] random: crng reseeded on system resumption [ 1470.632529][T23416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.728160][T23416] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.798353][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.805594][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.942270][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.949532][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1471.206238][T23609] can: request_module (can-proto-5) failed. [ 1474.019569][T23416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1474.078831][T23668] netlink: 110 bytes leftover after parsing attributes in process `syz.4.3499'. [ 1474.725915][T23416] veth0_vlan: entered promiscuous mode [ 1474.802883][T23416] veth1_vlan: entered promiscuous mode [ 1474.993430][T23416] veth0_macvtap: entered promiscuous mode [ 1475.053599][T23416] veth1_macvtap: entered promiscuous mode [ 1475.154801][T23416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1475.232688][T23416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1475.323795][T19559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.371567][T19559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.428562][T19559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.475347][T19559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.734439][T23690] FAULT_INJECTION: forcing a failure. [ 1476.734439][T23690] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.883678][T23690] CPU: 0 UID: 0 PID: 23690 Comm: syz.2.3504 Tainted: G L syzkaller #0 PREEMPT(full) [ 1476.883717][T23690] Tainted: [L]=SOFTLOCKUP [ 1476.883726][T23690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1476.883741][T23690] Call Trace: [ 1476.883749][T23690] [ 1476.883759][T23690] dump_stack_lvl+0x100/0x190 [ 1476.883789][T23690] should_fail_ex.cold+0x5/0xa [ 1476.883820][T23690] should_failslab+0xc2/0x120 [ 1476.883851][T23690] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1476.883889][T23690] ? __proc_create+0x2cb/0x8c0 [ 1476.883928][T23690] __proc_create+0x2cb/0x8c0 [ 1476.883967][T23690] ? __pfx___proc_create+0x10/0x10 [ 1476.883999][T23690] ? _raw_write_unlock+0x28/0x50 [ 1476.884041][T23690] proc_create_reg+0x75/0x170 [ 1476.884075][T23690] ? __pfx_kcm_stats_seq_show+0x10/0x10 [ 1476.884203][T23690] proc_create_net_single+0x86/0x180 [ 1476.884237][T23690] ? __pfx_proc_create_net_single+0x10/0x10 [ 1476.884277][T23690] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 1476.884310][T23690] kcm_proc_init_net+0x52/0x120 [ 1476.884343][T23690] ops_init+0x1e2/0x5f0 [ 1476.884374][T23690] setup_net+0x118/0x3a0 [ 1476.884400][T23690] ? __pfx_setup_net+0x10/0x10 [ 1476.884427][T23690] ? mutex_init_lockdep+0xf1/0x120 [ 1476.884459][T23690] copy_net_ns+0x46f/0x7c0 [ 1476.884490][T23690] create_new_namespaces+0x3ea/0xac0 [ 1476.884529][T23690] unshare_nsproxy_namespaces+0xf2/0x220 [ 1476.884562][T23690] ksys_unshare+0x438/0xab0 [ 1476.884599][T23690] ? __pfx_ksys_unshare+0x10/0x10 [ 1476.884633][T23690] ? xfd_validate_state+0x129/0x190 [ 1476.884666][T23690] __x64_sys_unshare+0x31/0x40 [ 1476.884701][T23690] do_syscall_64+0x115/0x840 [ 1476.884735][T23690] ? clear_bhb_loop+0x40/0x90 [ 1476.884765][T23690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.884790][T23690] RIP: 0033:0x7fa3a279ce59 [ 1476.884811][T23690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.884834][T23690] RSP: 002b:00007fa3a360b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1476.884858][T23690] RAX: ffffffffffffffda RBX: 00007fa3a2a16180 RCX: 00007fa3a279ce59 [ 1476.884874][T23690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1476.884888][T23690] RBP: 00007fa3a2832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1476.884903][T23690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1476.884917][T23690] R13: 00007fa3a2a16218 R14: 00007fa3a2a16180 R15: 00007ffca2032cb8 [ 1476.884953][T23690] [ 1477.612155][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1477.620274][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1478.303894][T19556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.321812][T19556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.812169][T19562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.881693][T19562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.189197][T23698] netlink: 'syz.4.3506': attribute type 22 has an invalid length. [ 1479.204352][T23704] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 1479.242413][T23698] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3506'. [ 1479.259009][T23707] ecryptfs_miscdev_write: Invalid packet size [32] [ 1479.317329][T23707] ecryptfs_miscdev_write: Invalid packet size [110] [ 1479.353941][T23704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3507'. [ 1479.460230][T23710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3506'. [ 1479.631225][T23710] macvlan0: entered promiscuous mode [ 1479.675123][T23710] macvlan0: entered allmulticast mode [ 1479.745347][T23710] veth1_vlan: entered allmulticast mode [ 1479.984661][T23713] FAULT_INJECTION: forcing a failure. [ 1479.984661][T23713] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.211519][T23713] CPU: 0 UID: 0 PID: 23713 Comm: syz.2.3508 Tainted: G L syzkaller #0 PREEMPT(full) [ 1480.211561][T23713] Tainted: [L]=SOFTLOCKUP [ 1480.211571][T23713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1480.211587][T23713] Call Trace: [ 1480.211596][T23713] [ 1480.211606][T23713] dump_stack_lvl+0x100/0x190 [ 1480.211645][T23713] should_fail_ex.cold+0x5/0xa [ 1480.211678][T23713] ? get_callchain_buffers+0x123/0x380 [ 1480.211738][T23713] should_failslab+0xc2/0x120 [ 1480.211769][T23713] __kmalloc_noprof+0xe0/0x850 [ 1480.211793][T23713] ? __pfx_rcu_is_watching+0x10/0x10 [ 1480.211829][T23713] get_callchain_buffers+0x123/0x380 [ 1480.211862][T23713] ? bpf_lsm_capable+0x9/0x10 [ 1480.211890][T23713] ? security_capable+0x80/0x260 [ 1480.211917][T23713] stack_map_alloc+0x316/0x610 [ 1480.211949][T23713] ? __pfx_stack_map_mem_usage+0x10/0x10 [ 1480.211980][T23713] map_create+0x84e/0x2bc0 [ 1480.212016][T23713] ? futex_unqueue+0x13d/0x2c0 [ 1480.212042][T23713] ? __futex_wait+0x256/0x300 [ 1480.212081][T23713] ? __pfx_map_create+0x10/0x10 [ 1480.212117][T23713] ? __might_fault+0xc5/0x140 [ 1480.212156][T23713] ? __might_fault+0xc5/0x140 [ 1480.212208][T23713] __sys_bpf+0x2091/0x4b90 [ 1480.212236][T23713] ? __pfx___sys_bpf+0x10/0x10 [ 1480.212260][T23713] ? __pfx_futex_wait+0x10/0x10 [ 1480.212298][T23713] ? ksys_write+0x190/0x250 [ 1480.212335][T23713] ? do_futex+0x192/0x350 [ 1480.212377][T23713] ? xfd_validate_state+0x129/0x190 [ 1480.212411][T23713] __x64_sys_bpf+0x7b/0xc0 [ 1480.212436][T23713] ? lockdep_hardirqs_on+0x78/0x100 [ 1480.212473][T23713] do_syscall_64+0x115/0x840 [ 1480.212509][T23713] ? clear_bhb_loop+0x40/0x90 [ 1480.212540][T23713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.212567][T23713] RIP: 0033:0x7fa3a279ce59 [ 1480.212587][T23713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.212612][T23713] RSP: 002b:00007fa3a362c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1480.212642][T23713] RAX: ffffffffffffffda RBX: 00007fa3a2a16090 RCX: 00007fa3a279ce59 [ 1480.212659][T23713] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 1480.212675][T23713] RBP: 00007fa3a2832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1480.212691][T23713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.212706][T23713] R13: 00007fa3a2a16128 R14: 00007fa3a2a16090 R15: 00007ffca2032cb8 [ 1480.212738][T23713] [ 1486.513130][T23796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3525'. [ 1494.543669][T21841] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 1495.803125][T23967] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1496.913736][T23960] Process accounting resumed [ 1500.473259][T23991] can: request_module (can-proto-5) failed. [ 1501.175476][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 1504.736229][ T29] audit: type=1804 audit(1843106853.883:33): pid=24059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3582" name="/newroot/318/file0" dev="tmpfs" ino=1675 res=1 errno=0 [ 1505.586031][T24064] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3584'. [ 1509.148544][T24129] FAULT_INJECTION: forcing a failure. [ 1509.148544][T24129] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.237252][T24129] CPU: 0 UID: 0 PID: 24129 Comm: syz.4.3592 Tainted: G L syzkaller #0 PREEMPT(full) [ 1509.237294][T24129] Tainted: [L]=SOFTLOCKUP [ 1509.237304][T24129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1509.237321][T24129] Call Trace: [ 1509.237329][T24129] [ 1509.237339][T24129] dump_stack_lvl+0x100/0x190 [ 1509.237372][T24129] should_fail_ex.cold+0x5/0xa [ 1509.237404][T24129] should_failslab+0xc2/0x120 [ 1509.237436][T24129] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1509.237477][T24129] ? tipc_conn_alloc+0x48/0x590 [ 1509.237508][T24129] ? net_generic+0xea/0x2a0 [ 1509.237538][T24129] ? net_generic+0xea/0x2a0 [ 1509.237573][T24129] tipc_conn_alloc+0x48/0x590 [ 1509.237607][T24129] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 1509.237644][T24129] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 1509.237683][T24129] ? net_generic+0xea/0x2a0 [ 1509.237724][T24129] tipc_group_create+0x4ab/0x660 [ 1509.237764][T24129] tipc_setsockopt+0x611/0xe30 [ 1509.237791][T24129] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1509.237835][T24129] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1509.237862][T24129] do_sock_setsockopt+0xf3/0x1d0 [ 1509.237898][T24129] __sys_setsockopt+0x119/0x190 [ 1509.237929][T24129] __x64_sys_setsockopt+0xbd/0x160 [ 1509.237953][T24129] ? do_syscall_64+0x90/0x840 [ 1509.237989][T24129] ? lockdep_hardirqs_on+0x78/0x100 [ 1509.238025][T24129] do_syscall_64+0x115/0x840 [ 1509.238061][T24129] ? clear_bhb_loop+0x40/0x90 [ 1509.238092][T24129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.238118][T24129] RIP: 0033:0x7f7e04d9ce59 [ 1509.238138][T24129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1509.238163][T24129] RSP: 002b:00007f7e05bba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1509.238188][T24129] RAX: ffffffffffffffda RBX: 00007f7e05015fa0 RCX: 00007f7e04d9ce59 [ 1509.238205][T24129] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 1509.238221][T24129] RBP: 00007f7e04e32d6f R08: 0000000000000014 R09: 0000000000000000 [ 1509.238236][T24129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1509.238252][T24129] R13: 00007f7e05016038 R14: 00007f7e05015fa0 R15: 00007ffcdfcb6f08 [ 1509.238283][T24129] [ 1513.073390][T24153] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3598'. [ 1514.497063][T24170] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3601'. [ 1516.360738][T24183] FAULT_INJECTION: forcing a failure. [ 1516.360738][T24183] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.373664][T24183] CPU: 0 UID: 0 PID: 24183 Comm: syz.2.3605 Tainted: G L syzkaller #0 PREEMPT(full) [ 1516.373703][T24183] Tainted: [L]=SOFTLOCKUP [ 1516.373713][T24183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1516.373729][T24183] Call Trace: [ 1516.373738][T24183] [ 1516.373748][T24183] dump_stack_lvl+0x100/0x190 [ 1516.373780][T24183] should_fail_ex.cold+0x5/0xa [ 1516.373814][T24183] should_failslab+0xc2/0x120 [ 1516.373845][T24183] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1516.373882][T24183] ? tipc_nametbl_insert_publ+0x5a/0x1570 [ 1516.373931][T24183] tipc_nametbl_insert_publ+0x5a/0x1570 [ 1516.373973][T24183] ? do_raw_spin_lock+0x128/0x260 [ 1516.374003][T24183] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1516.374039][T24183] tipc_nametbl_publish+0x137/0x260 [ 1516.374085][T24183] tipc_sk_publish+0x1d8/0x430 [ 1516.374115][T24183] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1516.374148][T24183] tipc_setsockopt+0x7af/0xe30 [ 1516.374180][T24183] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1516.374217][T24183] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1516.374244][T24183] do_sock_setsockopt+0xf3/0x1d0 [ 1516.374280][T24183] __sys_setsockopt+0x119/0x190 [ 1516.374311][T24183] __x64_sys_setsockopt+0xbd/0x160 [ 1516.374334][T24183] ? do_syscall_64+0x90/0x840 [ 1516.374370][T24183] ? lockdep_hardirqs_on+0x78/0x100 [ 1516.374406][T24183] do_syscall_64+0x115/0x840 [ 1516.374441][T24183] ? clear_bhb_loop+0x40/0x90 [ 1516.374472][T24183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.374499][T24183] RIP: 0033:0x7fa3a279ce59 [ 1516.374520][T24183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.374545][T24183] RSP: 002b:00007fa3a364d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1516.374570][T24183] RAX: ffffffffffffffda RBX: 00007fa3a2a15fa0 RCX: 00007fa3a279ce59 [ 1516.374587][T24183] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 1516.374603][T24183] RBP: 00007fa3a2832d6f R08: 0000000000000014 R09: 0000000000000000 [ 1516.374619][T24183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1516.374635][T24183] R13: 00007fa3a2a16038 R14: 00007fa3a2a15fa0 R15: 00007ffca2032cb8 [ 1516.374668][T24183] [ 1518.814912][T24210] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3610'. [ 1518.933804][T24213] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 1519.159533][T21841] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1519.904496][T24225] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3614'. [ 1520.166553][T24225] FAULT_INJECTION: forcing a failure. [ 1520.166553][T24225] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.318729][T24225] CPU: 0 UID: 0 PID: 24225 Comm: syz.2.3614 Tainted: G L syzkaller #0 PREEMPT(full) [ 1520.318773][T24225] Tainted: [L]=SOFTLOCKUP [ 1520.318782][T24225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1520.318798][T24225] Call Trace: [ 1520.318807][T24225] [ 1520.318817][T24225] dump_stack_lvl+0x100/0x190 [ 1520.318855][T24225] should_fail_ex.cold+0x5/0xa [ 1520.318888][T24225] should_failslab+0xc2/0x120 [ 1520.318920][T24225] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1520.318957][T24225] ? syslog_print_all+0xed/0x3f0 [ 1520.318999][T24225] ? futex_hash+0x141/0x370 [ 1520.319043][T24225] syslog_print_all+0xed/0x3f0 [ 1520.319083][T24225] ? futex_wait+0x11e/0x370 [ 1520.319117][T24225] ? __pfx_syslog_print_all+0x10/0x10 [ 1520.319172][T24225] ? do_futex+0x192/0x350 [ 1520.319201][T24225] do_syslog+0x350/0x6d0 [ 1520.319229][T24225] ? __pfx_do_syslog+0x10/0x10 [ 1520.319265][T24225] ? ksys_write+0x1ac/0x250 [ 1520.319301][T24225] __x64_sys_syslog+0x74/0xb0 [ 1520.319328][T24225] ? lockdep_hardirqs_on+0x78/0x100 [ 1520.319365][T24225] do_syscall_64+0x115/0x840 [ 1520.319400][T24225] ? clear_bhb_loop+0x40/0x90 [ 1520.319432][T24225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.319458][T24225] RIP: 0033:0x7fa3a279ce59 [ 1520.319479][T24225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.319504][T24225] RSP: 002b:00007fa3a362c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1520.319528][T24225] RAX: ffffffffffffffda RBX: 00007fa3a2a16090 RCX: 00007fa3a279ce59 [ 1520.319546][T24225] RDX: 000000000000b38f RSI: 0000200000000000 RDI: 0000000000000003 [ 1520.319562][T24225] RBP: 00007fa3a2832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1520.319578][T24225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1520.319593][T24225] R13: 00007fa3a2a16128 R14: 00007fa3a2a16090 R15: 00007ffca2032cb8 [ 1520.319625][T24225] [ 1521.233846][T21841] Bluetooth: hci0: command 0x0406 tx timeout [ 1521.390969][T24234] MTRR 0 not used [ 1523.258170][T15543] Bluetooth: hci0: command 0x0406 tx timeout [ 1523.809553][T24265] FAULT_INJECTION: forcing a failure. [ 1523.809553][T24265] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.901497][T24265] CPU: 0 UID: 0 PID: 24265 Comm: syz.2.3622 Tainted: G L syzkaller #0 PREEMPT(full) [ 1523.901539][T24265] Tainted: [L]=SOFTLOCKUP [ 1523.901548][T24265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1523.901564][T24265] Call Trace: [ 1523.901573][T24265] [ 1523.901583][T24265] dump_stack_lvl+0x100/0x190 [ 1523.901851][T24265] should_fail_ex.cold+0x5/0xa [ 1523.901900][T24265] should_failslab+0xc2/0x120 [ 1523.901933][T24265] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1523.901976][T24265] ? sctp_transport_new+0xa4/0x760 [ 1523.902010][T24265] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1523.902044][T24265] sctp_transport_new+0xa4/0x760 [ 1523.902076][T24265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1523.902116][T24265] sctp_assoc_add_peer+0x302/0x14f0 [ 1523.902156][T24265] sctp_connect_new_asoc+0x1f8/0x770 [ 1523.902193][T24265] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1523.902233][T24265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1523.902274][T24265] sctp_sendmsg+0x1743/0x22e0 [ 1523.902314][T24265] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1523.902356][T24265] ? aa_sk_perm+0x309/0xaa0 [ 1523.902395][T24265] ? __pfx_aa_sk_perm+0x10/0x10 [ 1523.902436][T24265] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1523.902472][T24265] inet_sendmsg+0x11c/0x140 [ 1523.902516][T24265] ____sys_sendmsg+0x98d/0xb70 [ 1523.902549][T24265] ? __pfx_inet_sendmsg+0x10/0x10 [ 1523.902591][T24265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1523.902630][T24265] ? futex_unqueue+0x133/0x2c0 [ 1523.902662][T24265] ___sys_sendmsg+0x190/0x1e0 [ 1523.902700][T24265] ? __pfx____sys_sendmsg+0x10/0x10 [ 1523.902736][T24265] ? __pfx___futex_wait+0x10/0x10 [ 1523.902768][T24265] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1523.902815][T24265] ? find_held_lock+0x2b/0x80 [ 1523.902872][T24265] __sys_sendmmsg+0x205/0x430 [ 1523.902904][T24265] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1523.902940][T24265] ? __pfx_do_futex+0x10/0x10 [ 1523.902981][T24265] ? xfd_validate_state+0x129/0x190 [ 1523.903006][T24265] ? ksys_write+0x1ac/0x250 [ 1523.903043][T24265] __x64_sys_sendmmsg+0x9c/0x100 [ 1523.903070][T24265] ? lockdep_hardirqs_on+0x78/0x100 [ 1523.903107][T24265] do_syscall_64+0x115/0x840 [ 1523.903143][T24265] ? clear_bhb_loop+0x40/0x90 [ 1523.903175][T24265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.903202][T24265] RIP: 0033:0x7fa3a279ce59 [ 1523.903225][T24265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.903251][T24265] RSP: 002b:00007fa3a364d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1523.903276][T24265] RAX: ffffffffffffffda RBX: 00007fa3a2a15fa0 RCX: 00007fa3a279ce59 [ 1523.903293][T24265] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 0000000000000005 [ 1523.903309][T24265] RBP: 00007fa3a2832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1523.903326][T24265] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 1523.903343][T24265] R13: 00007fa3a2a16038 R14: 00007fa3a2a15fa0 R15: 00007ffca2032cb8 [ 1523.903375][T24265] [ 1525.104719][T24275] netlink: 'syz.3.3624': attribute type 4 has an invalid length. [ 1525.137914][T24275] futex_wake_op: syz.3.3624 tries to shift op by -2048; fix this program [ 1525.178021][T24275] futex_wake_op: syz.3.3624 tries to shift op by -2048; fix this program [ 1525.207557][T24267] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3622'. [ 1526.282951][T24287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3627'. [ 1527.056439][T24287] Process accounting paused [ 1527.151614][T24297] sysfs_service_op_store: Client not running :-5: [ 1527.374404][T24302] program syz.4.3630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1528.314905][T24320] FAULT_INJECTION: forcing a failure. [ 1528.314905][T24320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1528.425606][T24320] CPU: 0 UID: 0 PID: 24320 Comm: syz.3.3635 Tainted: G L syzkaller #0 PREEMPT(full) [ 1528.425648][T24320] Tainted: [L]=SOFTLOCKUP [ 1528.425658][T24320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1528.425674][T24320] Call Trace: [ 1528.425683][T24320] [ 1528.425693][T24320] dump_stack_lvl+0x100/0x190 [ 1528.425726][T24320] should_fail_ex.cold+0x5/0xa [ 1528.425756][T24320] ? prepare_alloc_pages+0x16d/0x5f0 [ 1528.425794][T24320] should_fail_alloc_page+0xeb/0x140 [ 1528.425827][T24320] prepare_alloc_pages+0x1f0/0x5f0 [ 1528.425865][T24320] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1528.425911][T24320] ? find_held_lock+0x2b/0x80 [ 1528.425952][T24320] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 1528.425986][T24320] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 1528.426018][T24320] ? find_held_lock+0x2b/0x80 [ 1528.426049][T24320] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1528.426083][T24320] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1528.426117][T24320] ? rcu_is_watching+0x12/0xc0 [ 1528.426147][T24320] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1528.426182][T24320] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1528.426226][T24320] ? finish_task_switch.isra.0+0x384/0x1010 [ 1528.426261][T24320] ? rcu_is_watching+0x12/0xc0 [ 1528.426289][T24320] ? trace_sched_exit_tp+0x11c/0x160 [ 1528.426333][T24320] ? __lock_acquire+0x4a5/0x2630 [ 1528.426373][T24320] ? vma_is_special_huge+0x23f/0x2d0 [ 1528.426404][T24320] ? __pfx_vma_is_special_huge+0x10/0x10 [ 1528.426439][T24320] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1528.426478][T24320] ? policy_nodemask+0xed/0x4f0 [ 1528.426510][T24320] alloc_pages_mpol+0x1fb/0x540 [ 1528.426542][T24320] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1528.426576][T24320] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1528.426616][T24320] alloc_pages_noprof+0x1a/0x160 [ 1528.426652][T24320] __pmd_alloc+0x3b/0x950 [ 1528.426695][T24320] __handle_mm_fault+0xa9c/0x2a00 [ 1528.426739][T24320] ? mt_find+0x45e/0x8e0 [ 1528.426783][T24320] ? __pfx___handle_mm_fault+0x10/0x10 [ 1528.426820][T24320] ? __pfx_mt_find+0x10/0x10 [ 1528.426875][T24320] ? find_vma+0xbf/0x140 [ 1528.426902][T24320] ? __pfx_find_vma+0x10/0x10 [ 1528.426933][T24320] handle_mm_fault+0x37b/0xa30 [ 1528.426986][T24320] do_user_addr_fault+0x74c/0x12f0 [ 1528.427021][T24320] ? trace_page_fault_kernel+0x7a/0x200 [ 1528.427053][T24320] exc_page_fault+0x6f/0xd0 [ 1528.427091][T24320] asm_exc_page_fault+0x26/0x30 [ 1528.427117][T24320] RIP: 0010:__put_user_8+0xd/0x20 [ 1528.427153][T24320] Code: 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 [ 1528.427180][T24320] RSP: 0018:ffffc9000451fed8 EFLAGS: 00050246 [ 1528.427201][T24320] RAX: 0000000000000018 RBX: 0000000000000000 RCX: 0000000000000000 [ 1528.427217][T24320] RDX: 0000000000080000 RSI: ffffffff8257f5d1 RDI: ffffffff8c1c4580 [ 1528.427234][T24320] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001cb [ 1528.427249][T24320] R10: 0000000000000200 R11: 0000000000000000 R12: 00007f3df4d369a0 [ 1528.427265][T24320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000112 [ 1528.427290][T24320] ? __might_fault+0x111/0x140 [ 1528.427334][T24320] __x64_sys_get_robust_list+0xbf/0x150 [ 1528.427365][T24320] do_syscall_64+0x115/0x840 [ 1528.427400][T24320] ? clear_bhb_loop+0x40/0x90 [ 1528.427431][T24320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.427457][T24320] RIP: 0033:0x7f3df3d9ce59 [ 1528.427477][T24320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1528.427503][T24320] RSP: 002b:00007f3df4d36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000112 [ 1528.427525][T24320] RAX: ffffffffffffffda RBX: 00007f3df4015fa0 RCX: 00007f3df3d9ce59 [ 1528.427543][T24320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1528.427559][T24320] RBP: 00007f3df3e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1528.427575][T24320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1528.427590][T24320] R13: 00007f3df4016038 R14: 00007f3df4015fa0 R15: 00007ffe29b586e8 [ 1528.427623][T24320] [ 1532.766945][T24375] FAULT_INJECTION: forcing a failure. [ 1532.766945][T24375] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.779786][T24375] CPU: 0 UID: 0 PID: 24375 Comm: syz.3.3647 Tainted: G L syzkaller #0 PREEMPT(full) [ 1532.779825][T24375] Tainted: [L]=SOFTLOCKUP [ 1532.779835][T24375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1532.779851][T24375] Call Trace: [ 1532.779862][T24375] [ 1532.779872][T24375] dump_stack_lvl+0x100/0x190 [ 1532.779904][T24375] should_fail_ex.cold+0x5/0xa [ 1532.779937][T24375] should_failslab+0xc2/0x120 [ 1532.779968][T24375] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1532.780012][T24375] ? __alloc_skb+0x140/0x710 [ 1532.780036][T24375] ? find_held_lock+0x2b/0x80 [ 1532.780087][T24375] __alloc_skb+0x140/0x710 [ 1532.780111][T24375] ? __pfx___alloc_skb+0x10/0x10 [ 1532.780138][T24375] ? do_raw_write_lock+0x11e/0x260 [ 1532.780171][T24375] tipc_buf_acquire+0x26/0xe0 [ 1532.780204][T24375] named_prepare_buf+0x29/0x170 [ 1532.780240][T24375] tipc_named_publish+0x1f2/0x760 [ 1532.780279][T24375] tipc_nametbl_publish+0x17b/0x260 [ 1532.780325][T24375] tipc_sk_publish+0x1d8/0x430 [ 1532.780350][T24375] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1532.780377][T24375] ? tipc_group_create+0x4c0/0x660 [ 1532.780416][T24375] tipc_setsockopt+0x7af/0xe30 [ 1532.780442][T24375] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1532.780479][T24375] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1532.780506][T24375] do_sock_setsockopt+0xf3/0x1d0 [ 1532.780541][T24375] __sys_setsockopt+0x119/0x190 [ 1532.780572][T24375] __x64_sys_setsockopt+0xbd/0x160 [ 1532.780595][T24375] ? do_syscall_64+0x90/0x840 [ 1532.780631][T24375] ? lockdep_hardirqs_on+0x78/0x100 [ 1532.780667][T24375] do_syscall_64+0x115/0x840 [ 1532.780703][T24375] ? clear_bhb_loop+0x40/0x90 [ 1532.780734][T24375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.780761][T24375] RIP: 0033:0x7f3df3d9ce59 [ 1532.780783][T24375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.780808][T24375] RSP: 002b:00007f3df4d36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1532.780832][T24375] RAX: ffffffffffffffda RBX: 00007f3df4015fa0 RCX: 00007f3df3d9ce59 [ 1532.780850][T24375] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 1532.780867][T24375] RBP: 00007f3df3e32d6f R08: 0000000000000014 R09: 0000000000000000 [ 1532.780883][T24375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1532.780899][T24375] R13: 00007f3df4016038 R14: 00007f3df4015fa0 R15: 00007ffe29b586e8 [ 1532.780931][T24375] [ 1532.780943][T24375] tipc: Publication distribution failure [ 1535.517987][T24417] random: crng reseeded on system resumption [ 1536.173885][T24425] bridge0: port 3(veth1) entered blocking state [ 1536.240782][T24425] bridge0: port 3(veth1) entered disabled state [ 1536.319374][T24425] veth1: entered allmulticast mode [ 1536.384847][T24425] veth1: entered promiscuous mode [ 1536.439941][T24425] bridge0: port 3(veth1) entered blocking state [ 1536.446409][T24425] bridge0: port 3(veth1) entered forwarding state [ 1537.790887][T24439] FAULT_INJECTION: forcing a failure. [ 1537.790887][T24439] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.806495][T24439] CPU: 0 UID: 0 PID: 24439 Comm: syz.4.3658 Tainted: G L syzkaller #0 PREEMPT(full) [ 1537.806536][T24439] Tainted: [L]=SOFTLOCKUP [ 1537.806546][T24439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1537.806564][T24439] Call Trace: [ 1537.806576][T24439] [ 1537.806587][T24439] dump_stack_lvl+0x100/0x190 [ 1537.806621][T24439] should_fail_ex.cold+0x5/0xa [ 1537.806657][T24439] should_failslab+0xc2/0x120 [ 1537.806689][T24439] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1537.806738][T24439] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 1537.806778][T24439] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 1537.806815][T24439] idr_get_free+0x52e/0xa00 [ 1537.806858][T24439] idr_alloc_u32+0x1ac/0x320 [ 1537.806896][T24439] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1537.806942][T24439] idr_alloc+0xc0/0x130 [ 1537.806978][T24439] ? __pfx_idr_alloc+0x10/0x10 [ 1537.807012][T24439] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1537.807048][T24439] tipc_conn_alloc+0x337/0x590 [ 1537.807083][T24439] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 1537.807120][T24439] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 1537.807158][T24439] ? net_generic+0xea/0x2a0 [ 1537.807200][T24439] tipc_group_create+0x4ab/0x660 [ 1537.807242][T24439] tipc_setsockopt+0x611/0xe30 [ 1537.807269][T24439] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1537.807306][T24439] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1537.807333][T24439] do_sock_setsockopt+0xf3/0x1d0 [ 1537.807370][T24439] __sys_setsockopt+0x119/0x190 [ 1537.807400][T24439] __x64_sys_setsockopt+0xbd/0x160 [ 1537.807424][T24439] ? do_syscall_64+0x90/0x840 [ 1537.807461][T24439] ? lockdep_hardirqs_on+0x78/0x100 [ 1537.807497][T24439] do_syscall_64+0x115/0x840 [ 1537.807532][T24439] ? clear_bhb_loop+0x40/0x90 [ 1537.807563][T24439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.807590][T24439] RIP: 0033:0x7f7e04d9ce59 [ 1537.807612][T24439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1537.807637][T24439] RSP: 002b:00007f7e05bba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1537.807661][T24439] RAX: ffffffffffffffda RBX: 00007f7e05015fa0 RCX: 00007f7e04d9ce59 [ 1537.807678][T24439] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 1537.807694][T24439] RBP: 00007f7e04e32d6f R08: 0000000000000014 R09: 0000000000000000 [ 1537.807716][T24439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1537.807731][T24439] R13: 00007f7e05016038 R14: 00007f7e05015fa0 R15: 00007ffcdfcb6f08 [ 1537.807763][T24439] [ 1538.769862][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1538.778815][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1541.923290][T24479] zswap: compressor not available [ 1541.992736][T24485] block2mtd: illegal erase size [ 1542.365144][T24511] FAULT_INJECTION: forcing a failure. [ 1542.365144][T24511] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1542.425946][T24511] CPU: 0 UID: 0 PID: 24511 Comm: syz.3.3675 Tainted: G L syzkaller #0 PREEMPT(full) [ 1542.425987][T24511] Tainted: [L]=SOFTLOCKUP [ 1542.425997][T24511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1542.426013][T24511] Call Trace: [ 1542.426021][T24511] [ 1542.426031][T24511] dump_stack_lvl+0x100/0x190 [ 1542.426062][T24511] should_fail_ex.cold+0x5/0xa [ 1542.426095][T24511] get_futex_key+0x1d2/0x1510 [ 1542.426140][T24511] ? __pfx_get_futex_key+0x10/0x10 [ 1542.426185][T24511] ? __lock_acquire+0x4a5/0x2630 [ 1542.426231][T24511] futex_wake+0xea/0x530 [ 1542.426265][T24511] ? __pfx_futex_wake+0x10/0x10 [ 1542.426299][T24511] ? find_held_lock+0x2b/0x80 [ 1542.426334][T24511] ? do_sys_openat2+0x1b4/0x1e0 [ 1542.426383][T24511] ? do_sys_openat2+0x1b4/0x1e0 [ 1542.426427][T24511] do_futex+0x32b/0x350 [ 1542.426453][T24511] ? __pfx_do_futex+0x10/0x10 [ 1542.426477][T24511] ? __pfx_do_sys_openat2+0x10/0x10 [ 1542.426525][T24511] __x64_sys_futex+0x34f/0x4d0 [ 1542.426553][T24511] ? __x64_sys_openat+0x12d/0x210 [ 1542.426594][T24511] ? __pfx___x64_sys_futex+0x10/0x10 [ 1542.426620][T24511] ? ksys_write+0x1ac/0x250 [ 1542.426653][T24511] ? rcu_is_watching+0x12/0xc0 [ 1542.426686][T24511] do_syscall_64+0x115/0x840 [ 1542.426722][T24511] ? clear_bhb_loop+0x40/0x90 [ 1542.426759][T24511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.426786][T24511] RIP: 0033:0x7f3df3d9ce59 [ 1542.426807][T24511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.426833][T24511] RSP: 002b:00007f3df4d360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1542.426857][T24511] RAX: ffffffffffffffda RBX: 00007f3df4015fa8 RCX: 00007f3df3d9ce59 [ 1542.426875][T24511] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3df4015fac [ 1542.426892][T24511] RBP: 00007f3df4015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1542.426908][T24511] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1542.426924][T24511] R13: 00007f3df4016038 R14: 00007ffe29b58600 R15: 00007ffe29b586e8 [ 1542.426956][T24511] [ 1545.398929][T24546] FAULT_INJECTION: forcing a failure. [ 1545.398929][T24546] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.483545][T24546] CPU: 0 UID: 0 PID: 24546 Comm: syz.4.3685 Tainted: G L syzkaller #0 PREEMPT(full) [ 1545.483586][T24546] Tainted: [L]=SOFTLOCKUP [ 1545.483596][T24546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1545.483612][T24546] Call Trace: [ 1545.483621][T24546] [ 1545.483631][T24546] dump_stack_lvl+0x100/0x190 [ 1545.483662][T24546] should_fail_ex.cold+0x5/0xa [ 1545.483696][T24546] should_failslab+0xc2/0x120 [ 1545.483728][T24546] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1545.483766][T24546] ? tipc_group_create+0xbc/0x660 [ 1545.483809][T24546] tipc_group_create+0xbc/0x660 [ 1545.483849][T24546] tipc_setsockopt+0x611/0xe30 [ 1545.483876][T24546] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1545.483913][T24546] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1545.483939][T24546] do_sock_setsockopt+0xf3/0x1d0 [ 1545.483975][T24546] __sys_setsockopt+0x119/0x190 [ 1545.484006][T24546] __x64_sys_setsockopt+0xbd/0x160 [ 1545.484029][T24546] ? do_syscall_64+0x90/0x840 [ 1545.484066][T24546] ? lockdep_hardirqs_on+0x78/0x100 [ 1545.484102][T24546] do_syscall_64+0x115/0x840 [ 1545.484137][T24546] ? clear_bhb_loop+0x40/0x90 [ 1545.484168][T24546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.484199][T24546] RIP: 0033:0x7f7e04d9ce59 [ 1545.484219][T24546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.484244][T24546] RSP: 002b:00007f7e05bba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1545.484275][T24546] RAX: ffffffffffffffda RBX: 00007f7e05015fa0 RCX: 00007f7e04d9ce59 [ 1545.484293][T24546] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 1545.484309][T24546] RBP: 00007f7e04e32d6f R08: 0000000000000014 R09: 0000000000000000 [ 1545.484326][T24546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1545.484342][T24546] R13: 00007f7e05016038 R14: 00007f7e05015fa0 R15: 00007ffcdfcb6f08 [ 1545.484374][T24546] [ 1548.526988][T24602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3695'. [ 1548.615444][T24604] FAULT_INJECTION: forcing a failure. [ 1548.615444][T24604] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1548.777942][T24604] CPU: 0 UID: 0 PID: 24604 Comm: syz.4.3695 Tainted: G L syzkaller #0 PREEMPT(full) [ 1548.777981][T24604] Tainted: [L]=SOFTLOCKUP [ 1548.777990][T24604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1548.778006][T24604] Call Trace: [ 1548.778014][T24604] [ 1548.778023][T24604] dump_stack_lvl+0x100/0x190 [ 1548.778054][T24604] should_fail_ex.cold+0x5/0xa [ 1548.778085][T24604] get_futex_key+0x1d2/0x1510 [ 1548.778128][T24604] ? __pfx_get_futex_key+0x10/0x10 [ 1548.778165][T24604] ? futex_hash+0x2ad/0x370 [ 1548.778205][T24604] ? __sys_bpf+0x173/0x4b90 [ 1548.778231][T24604] futex_wake+0xea/0x530 [ 1548.778257][T24604] ? __pfx___sys_bpf+0x10/0x10 [ 1548.778280][T24604] ? __pfx_futex_wait+0x10/0x10 [ 1548.778310][T24604] ? __pfx_futex_wake+0x10/0x10 [ 1548.778342][T24604] ? _copy_from_user+0x59/0xd0 [ 1548.778379][T24604] ? post_copy_siginfo_from_user.isra.0+0x227/0x300 [ 1548.778423][T24604] do_futex+0x32b/0x350 [ 1548.778448][T24604] ? __pfx_do_futex+0x10/0x10 [ 1548.778480][T24604] __x64_sys_futex+0x34f/0x4d0 [ 1548.778509][T24604] ? __pfx___x64_sys_futex+0x10/0x10 [ 1548.778539][T24604] ? rcu_is_watching+0x12/0xc0 [ 1548.778574][T24604] do_syscall_64+0x115/0x840 [ 1548.778607][T24604] ? clear_bhb_loop+0x40/0x90 [ 1548.778636][T24604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.778661][T24604] RIP: 0033:0x7f7e04d9ce59 [ 1548.778679][T24604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.778703][T24604] RSP: 002b:00007f7e05b780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1548.778726][T24604] RAX: ffffffffffffffda RBX: 00007f7e05016188 RCX: 00007f7e04d9ce59 [ 1548.778742][T24604] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e0501618c [ 1548.778757][T24604] RBP: 00007f7e05016180 R08: 0000000000000001 R09: 0000000000000000 [ 1548.778771][T24604] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1548.778786][T24604] R13: 00007f7e05016218 R14: 00007ffcdfcb6e20 R15: 00007ffcdfcb6f08 [ 1548.778816][T24604] [ 1549.253469][T24609] FAULT_INJECTION: forcing a failure. [ 1549.253469][T24609] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.269075][T24609] CPU: 0 UID: 0 PID: 24609 Comm: syz.2.3696 Tainted: G L syzkaller #0 PREEMPT(full) [ 1549.269115][T24609] Tainted: [L]=SOFTLOCKUP [ 1549.269124][T24609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1549.269141][T24609] Call Trace: [ 1549.269152][T24609] [ 1549.269164][T24609] dump_stack_lvl+0x100/0x190 [ 1549.269195][T24609] should_fail_ex.cold+0x5/0xa [ 1549.269223][T24609] ? tipc_conn_lookup+0xd0/0x260 [ 1549.269260][T24609] should_failslab+0xc2/0x120 [ 1549.269292][T24609] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1549.269330][T24609] ? tipc_topsrv_queue_evt+0x125/0x3f0 [ 1549.269372][T24609] tipc_topsrv_queue_evt+0x125/0x3f0 [ 1549.269412][T24609] tipc_sub_report_overlap+0x54c/0x9b0 [ 1549.269453][T24609] tipc_nametbl_insert_publ+0xd5a/0x1570 [ 1549.269508][T24609] tipc_nametbl_publish+0x137/0x260 [ 1549.269554][T24609] tipc_sk_publish+0x1d8/0x430 [ 1549.269579][T24609] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1549.269606][T24609] ? tipc_group_create+0x4c0/0x660 [ 1549.269646][T24609] tipc_setsockopt+0x7af/0xe30 [ 1549.269675][T24609] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1549.269712][T24609] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1549.269741][T24609] do_sock_setsockopt+0xf3/0x1d0 [ 1549.269777][T24609] __sys_setsockopt+0x119/0x190 [ 1549.269808][T24609] __x64_sys_setsockopt+0xbd/0x160 [ 1549.269832][T24609] ? do_syscall_64+0x90/0x840 [ 1549.269869][T24609] ? lockdep_hardirqs_on+0x78/0x100 [ 1549.269905][T24609] do_syscall_64+0x115/0x840 [ 1549.269941][T24609] ? clear_bhb_loop+0x40/0x90 [ 1549.269972][T24609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.270005][T24609] RIP: 0033:0x7fa3a279ce59 [ 1549.270027][T24609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.270052][T24609] RSP: 002b:00007fa3a364d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1549.270076][T24609] RAX: ffffffffffffffda RBX: 00007fa3a2a15fa0 RCX: 00007fa3a279ce59 [ 1549.270093][T24609] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 1549.270109][T24609] RBP: 00007fa3a2832d6f R08: 0000000000000014 R09: 0000000000000000 [ 1549.270125][T24609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1549.270141][T24609] R13: 00007fa3a2a16038 R14: 00007fa3a2a15fa0 R15: 00007ffca2032cb8 [ 1549.270174][T24609] [ 1549.584596][T24613] FAULT_INJECTION: forcing a failure. [ 1549.584596][T24613] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.597328][T24613] CPU: 0 UID: 0 PID: 24613 Comm: syz.4.3697 Tainted: G L syzkaller #0 PREEMPT(full) [ 1549.597365][T24613] Tainted: [L]=SOFTLOCKUP [ 1549.597374][T24613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1549.597388][T24613] Call Trace: [ 1549.597397][T24613] [ 1549.597407][T24613] dump_stack_lvl+0x100/0x190 [ 1549.597437][T24613] should_fail_ex.cold+0x5/0xa [ 1549.597467][T24613] should_failslab+0xc2/0x120 [ 1549.597498][T24613] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1549.597533][T24613] ? proc_thread_self_get_link+0x1a6/0x210 [ 1549.597569][T24613] proc_thread_self_get_link+0x1a6/0x210 [ 1549.597598][T24613] pick_link+0xac2/0x13c0 [ 1549.597622][T24613] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1549.597654][T24613] step_into_slowpath+0x9ba/0xf90 [ 1549.597685][T24613] ? __pfx_step_into_slowpath+0x10/0x10 [ 1549.597715][T24613] ? lookup_fast+0x2da/0x600 [ 1549.597737][T24613] ? inode_permission+0x374/0x620 [ 1549.597778][T24613] link_path_walk+0xf28/0x1cc0 [ 1549.597813][T24613] path_openat+0x1be/0x31a0 [ 1549.597842][T24613] ? kasan_save_stack+0x3f/0x50 [ 1549.597866][T24613] ? kasan_save_stack+0x30/0x50 [ 1549.597888][T24613] ? kasan_save_track+0x14/0x30 [ 1549.597918][T24613] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1549.597964][T24613] ? __pfx_path_openat+0x10/0x10 [ 1549.598005][T24613] do_file_open+0x20e/0x430 [ 1549.598038][T24613] ? __pfx_do_file_open+0x10/0x10 [ 1549.598089][T24613] ? alloc_fd+0x476/0x790 [ 1549.598126][T24613] ? do_getname+0x191/0x390 [ 1549.598164][T24613] do_sys_openat2+0x10d/0x1e0 [ 1549.598202][T24613] ? __pfx_do_sys_openat2+0x10/0x10 [ 1549.598251][T24613] __x64_sys_openat+0x12d/0x210 [ 1549.598290][T24613] ? __pfx___x64_sys_openat+0x10/0x10 [ 1549.598334][T24613] ? rcu_is_watching+0x12/0xc0 [ 1549.598366][T24613] do_syscall_64+0x115/0x840 [ 1549.598402][T24613] ? clear_bhb_loop+0x40/0x90 [ 1549.598432][T24613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.598457][T24613] RIP: 0033:0x7f7e04d5d68e [ 1549.598477][T24613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1549.598501][T24613] RSP: 002b:00007f7e05bb9f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1549.598523][T24613] RAX: ffffffffffffffda RBX: 00007f7e05bba6c0 RCX: 00007f7e04d5d68e [ 1549.598539][T24613] RDX: 0000000000000002 RSI: 00007f7e04e32676 RDI: ffffffffffffff9c [ 1549.598554][T24613] RBP: 00007f7e04e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1549.598569][T24613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.598583][T24613] R13: 00007f7e05016038 R14: 00007f7e05015fa0 R15: 00007ffcdfcb6f08 [ 1549.598613][T24613] [ 1549.598849][T24613] FAULT_INJECTION: forcing a failure. [ 1549.598849][T24613] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.947248][T24613] CPU: 0 UID: 0 PID: 24613 Comm: syz.4.3697 Tainted: G L syzkaller #0 PREEMPT(full) [ 1549.947288][T24613] Tainted: [L]=SOFTLOCKUP [ 1549.947297][T24613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1549.947312][T24613] Call Trace: [ 1549.947320][T24613] [ 1549.947333][T24613] dump_stack_lvl+0x100/0x190 [ 1549.947363][T24613] should_fail_ex.cold+0x5/0xa [ 1549.947394][T24613] should_failslab+0xc2/0x120 [ 1549.947424][T24613] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1549.947461][T24613] ? tipc_group_create+0xbc/0x660 [ 1549.947501][T24613] tipc_group_create+0xbc/0x660 [ 1549.947538][T24613] tipc_setsockopt+0x611/0xe30 [ 1549.947564][T24613] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1549.947599][T24613] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1549.947624][T24613] do_sock_setsockopt+0xf3/0x1d0 [ 1549.947657][T24613] __sys_setsockopt+0x119/0x190 [ 1549.947686][T24613] __x64_sys_setsockopt+0xbd/0x160 [ 1549.947708][T24613] ? do_syscall_64+0x90/0x840 [ 1549.947742][T24613] ? lockdep_hardirqs_on+0x78/0x100 [ 1549.947776][T24613] do_syscall_64+0x115/0x840 [ 1549.947808][T24613] ? clear_bhb_loop+0x40/0x90 [ 1549.947837][T24613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.947861][T24613] RIP: 0033:0x7f7e04d9ce59 [ 1549.947881][T24613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.947904][T24613] RSP: 002b:00007f7e05bba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1549.947933][T24613] RAX: ffffffffffffffda RBX: 00007f7e05015fa0 RCX: 00007f7e04d9ce59 [ 1549.947949][T24613] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 1549.947964][T24613] RBP: 00007f7e05bba090 R08: 0000000000000014 R09: 0000000000000000 [ 1549.947979][T24613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.947993][T24613] R13: 00007f7e05016038 R14: 00007f7e05015fa0 R15: 00007ffcdfcb6f08 [ 1549.948024][T24613] [ 1552.285685][T24634] can0: slcan on ttyS2. [ 1552.461602][T24644] FAULT_INJECTION: forcing a failure. [ 1552.461602][T24644] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1552.561932][T24644] CPU: 0 UID: 0 PID: 24644 Comm: syz.3.3705 Tainted: G L syzkaller #0 PREEMPT(full) [ 1552.561975][T24644] Tainted: [L]=SOFTLOCKUP [ 1552.561985][T24644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1552.562001][T24644] Call Trace: [ 1552.562010][T24644] [ 1552.562020][T24644] dump_stack_lvl+0x100/0x190 [ 1552.562051][T24644] should_fail_ex.cold+0x5/0xa [ 1552.562086][T24644] get_futex_key+0x1d2/0x1510 [ 1552.562132][T24644] ? __pfx_get_futex_key+0x10/0x10 [ 1552.562185][T24644] futex_wait_setup+0x83/0x510 [ 1552.562226][T24644] __futex_wait+0x19f/0x300 [ 1552.562261][T24644] ? __pfx___futex_wait+0x10/0x10 [ 1552.562293][T24644] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1552.562333][T24644] ? __pfx_futex_wake_mark+0x10/0x10 [ 1552.562369][T24644] ? futex_hash+0x2ad/0x370 [ 1552.562411][T24644] ? futex_hash+0x141/0x370 [ 1552.562455][T24644] futex_wait+0xe6/0x370 [ 1552.562488][T24644] ? __pfx_futex_wait+0x10/0x10 [ 1552.562526][T24644] ? __pfx_do_recvmmsg+0x10/0x10 [ 1552.562563][T24644] ? ksys_write+0x190/0x250 [ 1552.562616][T24644] do_futex+0x1ef/0x350 [ 1552.562650][T24644] ? __pfx_do_futex+0x10/0x10 [ 1552.562684][T24644] __x64_sys_futex+0x34f/0x4d0 [ 1552.562715][T24644] ? __pfx___x64_sys_futex+0x10/0x10 [ 1552.562743][T24644] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1552.562775][T24644] ? rcu_is_watching+0x12/0xc0 [ 1552.562809][T24644] do_syscall_64+0x115/0x840 [ 1552.562845][T24644] ? clear_bhb_loop+0x40/0x90 [ 1552.562877][T24644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.562903][T24644] RIP: 0033:0x7f3df3d9ce59 [ 1552.562924][T24644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.562949][T24644] RSP: 002b:00007f3df4d150e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1552.562975][T24644] RAX: ffffffffffffffda RBX: 00007f3df4016098 RCX: 00007f3df3d9ce59 [ 1552.562992][T24644] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3df4016098 [ 1552.563008][T24644] RBP: 00007f3df4016090 R08: 0000000000000000 R09: 0000000000000000 [ 1552.563023][T24644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1552.563039][T24644] R13: 00007f3df4016128 R14: 00007ffe29b58600 R15: 00007ffe29b586e8 [ 1552.563071][T24644] [ 1553.082254][T24640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 1553.325814][T24637] can0 (unregistered): slcan off ttyS2. [ 1553.589626][T24648] MTRR 0 not used [ 1553.899518][T24650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3708'. [ 1557.226433][T24681] netlink: 146 bytes leftover after parsing attributes in process `syz.4.3714'. [ 1557.782407][T24701] netlink: 146 bytes leftover after parsing attributes in process `syz.4.3714'. [ 1558.205613][T24673] Process accounting resumed [ 1559.115933][T24720] FAULT_INJECTION: forcing a failure. [ 1559.115933][T24720] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.218815][T24720] CPU: 0 UID: 0 PID: 24720 Comm: syz.2.3719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1559.218861][T24720] Tainted: [L]=SOFTLOCKUP [ 1559.218870][T24720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1559.218886][T24720] Call Trace: [ 1559.218894][T24720] [ 1559.218904][T24720] dump_stack_lvl+0x100/0x190 [ 1559.218935][T24720] should_fail_ex.cold+0x5/0xa [ 1559.218968][T24720] should_failslab+0xc2/0x120 [ 1559.219000][T24720] __kvmalloc_node_noprof+0xfa/0xa00 [ 1559.219025][T24720] ? proc_sys_call_handler+0x2c7/0x5a0 [ 1559.219068][T24720] proc_sys_call_handler+0x2c7/0x5a0 [ 1559.219105][T24720] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1559.219143][T24720] ? rw_verify_area+0xce/0x6d0 [ 1559.219168][T24720] ? __pfx_proc_sys_read+0x10/0x10 [ 1559.219209][T24720] vfs_read+0x825/0xb30 [ 1559.219243][T24720] ? __pfx_vfs_read+0x10/0x10 [ 1559.219290][T24720] ksys_read+0x12a/0x250 [ 1559.219320][T24720] ? __pfx_ksys_read+0x10/0x10 [ 1559.219348][T24720] ? exit_to_user_mode_loop+0xf3/0x670 [ 1559.219393][T24720] ? rcu_is_watching+0x12/0xc0 [ 1559.219427][T24720] do_syscall_64+0x115/0x840 [ 1559.219464][T24720] ? clear_bhb_loop+0x40/0x90 [ 1559.219495][T24720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.219522][T24720] RIP: 0033:0x7fa3a279ce59 [ 1559.219543][T24720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.219569][T24720] RSP: 002b:00007fa3a364d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1559.219593][T24720] RAX: ffffffffffffffda RBX: 00007fa3a2a15fa0 RCX: 00007fa3a279ce59 [ 1559.219610][T24720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1559.219626][T24720] RBP: 00007fa3a2832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1559.219641][T24720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.219661][T24720] R13: 00007fa3a2a16038 R14: 00007fa3a2a15fa0 R15: 00007ffca2032cb8 [ 1559.219696][T24720] [ 1566.241721][T24801] net_ratelimit: 47 callbacks suppressed [ 1566.241751][T24801] openvswitch: netlink: Key type 528 is out of range max 32 [ 1569.852758][T24857] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 1570.461503][T24860] FAULT_INJECTION: forcing a failure. [ 1570.461503][T24860] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.542264][T24860] CPU: 0 UID: 0 PID: 24860 Comm: syz.2.3745 Tainted: G L syzkaller #0 PREEMPT(full) [ 1570.542306][T24860] Tainted: [L]=SOFTLOCKUP [ 1570.542315][T24860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1570.542332][T24860] Call Trace: [ 1570.542347][T24860] [ 1570.542357][T24860] dump_stack_lvl+0x100/0x190 [ 1570.542390][T24860] should_fail_ex.cold+0x5/0xa [ 1570.542422][T24860] should_failslab+0xc2/0x120 [ 1570.542453][T24860] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1570.542495][T24860] ? prepare_creds+0x2c/0x950 [ 1570.542527][T24860] prepare_creds+0x2c/0x950 [ 1570.542554][T24860] cap_task_prctl+0x449/0xa50 [ 1570.542586][T24860] security_task_prctl+0xc2/0x160 [ 1570.542630][T24860] __do_sys_prctl+0x9b/0x2320 [ 1570.542656][T24860] ? __pfx___do_sys_prctl+0x10/0x10 [ 1570.542684][T24860] ? rcu_is_watching+0x12/0xc0 [ 1570.542717][T24860] do_syscall_64+0x115/0x840 [ 1570.542753][T24860] ? clear_bhb_loop+0x40/0x90 [ 1570.542787][T24860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.542813][T24860] RIP: 0033:0x7fa3a279ce59 [ 1570.542833][T24860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1570.542858][T24860] RSP: 002b:00007fa3a364d028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1570.542883][T24860] RAX: ffffffffffffffda RBX: 00007fa3a2a15fa0 RCX: 00007fa3a279ce59 [ 1570.542901][T24860] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 1570.542916][T24860] RBP: 00007fa3a2832d6f R08: 000000000000c6c5 R09: 0000000000000000 [ 1570.542932][T24860] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1570.542947][T24860] R13: 00007fa3a2a16038 R14: 00007fa3a2a15fa0 R15: 00007ffca2032cb8 [ 1570.542979][T24860] [ 1571.806039][T24865] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 8 with max blocks 4 with error 117 [ 1571.987946][T24865] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1571.987946][T24865] [ 1573.106767][T24887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3754'. [ 1574.048972][T24902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3758'. [ 1576.433472][T21841] Bluetooth: hci1: command 0x0406 tx timeout [ 1577.574038][T24931] random: crng reseeded on system resumption [ 1582.776788][T25005] scsi_dev_info_list_add_str: bad dev info string 'Bs";] [ 1582.776788][T25005] "Jey;'Ϛ%ᾶv' 'Z_̶!w > "p 4=q\e-.-@[gnAt [ 1599.698609][T25245] dump_stack_lvl+0x100/0x190 [ 1599.698640][T25245] should_fail_ex.cold+0x5/0xa [ 1599.698673][T25245] should_failslab+0xc2/0x120 [ 1599.698705][T25245] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1599.698746][T25245] ? do_getname+0x35/0x390 [ 1599.698788][T25245] ? __local_bh_enable_ip+0x9e/0x120 [ 1599.698832][T25245] do_getname+0x35/0x390 [ 1599.698873][T25245] do_sys_openat2+0xc5/0x1e0 [ 1599.698914][T25245] ? __pfx_do_sys_openat2+0x10/0x10 [ 1599.698955][T25245] ? do_sock_setsockopt+0x101/0x1d0 [ 1599.698986][T25245] ? kfree+0x1dd/0x6c0 [ 1599.699028][T25245] __x64_sys_openat+0x12d/0x210 [ 1599.699070][T25245] ? __pfx___x64_sys_openat+0x10/0x10 [ 1599.699116][T25245] ? rcu_is_watching+0x12/0xc0 [ 1599.699149][T25245] do_syscall_64+0x115/0x840 [ 1599.699185][T25245] ? clear_bhb_loop+0x40/0x90 [ 1599.699216][T25245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.699242][T25245] RIP: 0033:0x7fa3a279ce59 [ 1599.699264][T25245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1599.699290][T25245] RSP: 002b:00007fa3a364d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1599.699327][T25245] RAX: ffffffffffffffda RBX: 00007fa3a2a15fa0 RCX: 00007fa3a279ce59 [ 1599.699345][T25245] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1599.699362][T25245] RBP: 00007fa3a2832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1599.699378][T25245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1599.699394][T25245] R13: 00007fa3a2a16038 R14: 00007fa3a2a15fa0 R15: 00007ffca2032cb8 [ 1599.699425][T25245] [ 1600.212238][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1600.223803][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1601.873926][T25278] ubi0: attaching mtd0 [ 1601.940976][T25278] ubi0: scanning is finished [ 1602.014983][T25278] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1602.523825][T25278] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1603.834180][T25304] FAULT_INJECTION: forcing a failure. [ 1603.834180][T25304] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.847039][T25304] CPU: 0 UID: 0 PID: 25304 Comm: syz.2.3851 Tainted: G L syzkaller #0 PREEMPT(full) [ 1603.847079][T25304] Tainted: [L]=SOFTLOCKUP [ 1603.847089][T25304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1603.847105][T25304] Call Trace: [ 1603.847115][T25304] [ 1603.847126][T25304] dump_stack_lvl+0x100/0x190 [ 1603.847157][T25304] should_fail_ex.cold+0x5/0xa [ 1603.847185][T25304] ? tipc_conn_lookup+0xd0/0x260 [ 1603.847223][T25304] should_failslab+0xc2/0x120 [ 1603.847253][T25304] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1603.847292][T25304] ? tipc_topsrv_queue_evt+0x125/0x3f0 [ 1603.847333][T25304] tipc_topsrv_queue_evt+0x125/0x3f0 [ 1603.847374][T25304] tipc_sub_report_overlap+0x54c/0x9b0 [ 1603.847415][T25304] tipc_nametbl_insert_publ+0xd5a/0x1570 [ 1603.847470][T25304] tipc_nametbl_publish+0x137/0x260 [ 1603.847517][T25304] tipc_sk_publish+0x1d8/0x430 [ 1603.847541][T25304] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1603.847568][T25304] ? tipc_group_create+0x4c0/0x660 [ 1603.847637][T25304] tipc_setsockopt+0x7af/0xe30 [ 1603.847673][T25304] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1603.847710][T25304] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1603.847737][T25304] do_sock_setsockopt+0xf3/0x1d0 [ 1603.847778][T25304] __sys_setsockopt+0x119/0x190 [ 1603.847809][T25304] __x64_sys_setsockopt+0xbd/0x160 [ 1603.847833][T25304] ? do_syscall_64+0x90/0x840 [ 1603.847869][T25304] ? lockdep_hardirqs_on+0x78/0x100 [ 1603.847905][T25304] do_syscall_64+0x115/0x840 [ 1603.847940][T25304] ? clear_bhb_loop+0x40/0x90 [ 1603.847971][T25304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.847998][T25304] RIP: 0033:0x7fa3a279ce59 [ 1603.848020][T25304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.848045][T25304] RSP: 002b:00007fa3a364d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1603.848070][T25304] RAX: ffffffffffffffda RBX: 00007fa3a2a15fa0 RCX: 00007fa3a279ce59 [ 1603.848088][T25304] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 1603.848104][T25304] RBP: 00007fa3a2832d6f R08: 0000000000000014 R09: 0000000000000000 [ 1603.848120][T25304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1603.848136][T25304] R13: 00007fa3a2a16038 R14: 00007fa3a2a15fa0 R15: 00007ffca2032cb8 [ 1603.848168][T25304] [ 1609.023628][T25374] vivid-013: ================= START STATUS ================= [ 1609.174438][T25374] vivid-013: FM Deviation: 75000 [ 1609.384570][T25374] vivid-013: ================== END STATUS ================== [ 1617.604332][T25493] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3883'. [ 1618.346796][T25510] Console: switching to colour frame buffer device 13x6 [ 1620.148386][T25546] Process accounting resumed [ 1622.311497][T15543] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1623.283549][T25579] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3901'. [ 1624.713879][T25590] FAULT_INJECTION: forcing a failure. [ 1624.713879][T25590] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.792991][T25590] CPU: 0 UID: 0 PID: 25590 Comm: syz.2.3903 Tainted: G L syzkaller #0 PREEMPT(full) [ 1624.793032][T25590] Tainted: [L]=SOFTLOCKUP [ 1624.793041][T25590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1624.793057][T25590] Call Trace: [ 1624.793067][T25590] [ 1624.793077][T25590] dump_stack_lvl+0x100/0x190 [ 1624.793109][T25590] should_fail_ex.cold+0x5/0xa [ 1624.793141][T25590] should_failslab+0xc2/0x120 [ 1624.793172][T25590] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1624.793214][T25590] ? security_file_alloc+0x34/0x2c0 [ 1624.793249][T25590] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1624.793285][T25590] security_file_alloc+0x34/0x2c0 [ 1624.793320][T25590] init_file+0x95/0x480 [ 1624.793357][T25590] alloc_empty_file_noaccount+0x45/0xd0 [ 1624.793399][T25590] alloc_file_pseudo_noaccount+0x13a/0x230 [ 1624.793442][T25590] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 1624.793486][T25590] ? iput+0x3a/0x40 [ 1624.793525][T25590] bdev_file_open_by_dev+0x13a/0x210 [ 1624.793577][T25590] blkdev_bszset+0x170/0x240 [ 1624.793618][T25590] ? __pfx_blkdev_bszset+0x10/0x10 [ 1624.793663][T25590] ? find_held_lock+0x2b/0x80 [ 1624.793696][T25590] ? __fget_files+0x215/0x3d0 [ 1624.793725][T25590] ? hook_file_ioctl_common+0x149/0x410 [ 1624.793761][T25590] blkdev_ioctl+0x513/0x6f0 [ 1624.793802][T25590] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1624.793846][T25590] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1624.793888][T25590] __x64_sys_ioctl+0x18e/0x210 [ 1624.793916][T25590] do_syscall_64+0x115/0x840 [ 1624.793954][T25590] ? clear_bhb_loop+0x40/0x90 [ 1624.793985][T25590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.794012][T25590] RIP: 0033:0x7fa3a279ce59 [ 1624.794033][T25590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.794058][T25590] RSP: 002b:00007fa3a364d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1624.794083][T25590] RAX: ffffffffffffffda RBX: 00007fa3a2a15fa0 RCX: 00007fa3a279ce59 [ 1624.794100][T25590] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000002 [ 1624.794116][T25590] RBP: 00007fa3a2832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1624.794132][T25590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1624.794147][T25590] R13: 00007fa3a2a16038 R14: 00007fa3a2a15fa0 R15: 00007ffca2032cb8 [ 1624.794180][T25590] [ 1631.763204][ T29] audit: type=1800 audit(1843104532.419:34): pid=25669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3919" name="nullb0" dev="tmpfs" ino=789 res=0 errno=0 [ 1634.834397][T21841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1634.853256][T21841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1634.862501][T21841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1634.881717][T21841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1634.890271][T21841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1635.646750][T25692] Process accounting resumed [ 1635.961883][T25703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3926'. [ 1636.076190][T25706] netlink: 'syz.3.3927': attribute type 4 has an invalid length. [ 1636.120606][T25703] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 1636.147293][T25706] netlink: 314 bytes leftover after parsing attributes in process `syz.3.3927'. [ 1636.260705][T25703] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3926'. [ 1636.343039][T25708] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.3926: iget: checksum invalid [ 1636.463767][T25708] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1636.549481][T25708] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.3926: iget: checksum invalid [ 1636.633515][T25708] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1636.702561][T25708] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.3926: iget: checksum invalid [ 1636.821971][T25708] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1636.915619][T25708] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.3926: iget: checksum invalid [ 1636.998052][T21841] Bluetooth: hci4: command tx timeout [ 1637.013565][T25708] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1637.087990][T25708] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1637.148346][T25708] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1637.699648][ T29] audit: type=1804 audit(1843104538.390:35): pid=25721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3930" name="/newroot/sys/kernel/debug/tracing/uprobe_events" dev="tracefs" ino=7 res=1 errno=0 [ 1638.830498][T25694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.879245][T25694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.933206][T25694] bridge_slave_0: entered allmulticast mode [ 1638.992816][T25694] bridge_slave_0: entered promiscuous mode [ 1639.050931][T25694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.058566][T21841] Bluetooth: hci4: command tx timeout [ 1639.123349][T25694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.176603][T25694] bridge_slave_1: entered allmulticast mode [ 1639.217937][T25694] bridge_slave_1: entered promiscuous mode [ 1639.446474][T25694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.706828][T25694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.969658][T25694] team0: Port device team_slave_0 added [ 1640.015414][T25694] team0: Port device team_slave_1 added [ 1640.552391][T19561] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.989442][T25694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1641.030122][T25694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.133170][T21841] Bluetooth: hci4: command tx timeout [ 1641.168707][T25694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1641.255088][T25694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1641.288871][T25694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.406781][T25694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.653446][T19561] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.054929][T19561] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.255489][T25694] hsr_slave_0: entered promiscuous mode [ 1642.286649][T25694] hsr_slave_1: entered promiscuous mode [ 1642.323743][T25694] debugfs: 'hsr0' already exists in 'hsr' [ 1642.352712][T25694] Cannot create hsr debugfs directory [ 1642.542863][T19561] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.940207][ T29] audit: type=1326 audit(1843104543.657:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25776 comm="syz.2.3941" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3a279ce59 code=0x0 [ 1643.029352][T25779] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3941'. [ 1643.194358][T21841] Bluetooth: hci4: command tx timeout [ 1644.381839][T19561] veth1: left allmulticast mode [ 1644.426605][T19561] veth1: left promiscuous mode [ 1644.482115][T19561] bridge0: port 3(veth1) entered disabled state [ 1644.543945][T19561] bridge_slave_1: left allmulticast mode [ 1644.543976][T19561] bridge_slave_1: left promiscuous mode [ 1644.544181][T19561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.600095][T19561] bridge_slave_0: left allmulticast mode [ 1644.600124][T19561] bridge_slave_0: left promiscuous mode [ 1644.600321][T19561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.062833][T19561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1646.203720][T19561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1646.320409][T19561] bond0 (unregistering): Released all slaves [ 1646.555027][T19561] HfR: left promiscuous mode [ 1647.278336][T19561] tipc: Left network mode [ 1648.205626][T25694] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1648.263343][T25694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1648.339176][T19561] hsr_slave_0: left promiscuous mode [ 1648.382696][T19561] hsr_slave_1: left promiscuous mode [ 1648.410880][T19561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1648.465441][T19561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.642438][T19561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1648.686303][T19561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.760829][T19561] veth1_macvtap: left promiscuous mode [ 1648.796828][T19561] veth0_macvtap: left promiscuous mode [ 1648.824308][T19561] veth1_vlan: left allmulticast mode [ 1648.856594][T19561] veth1_vlan: left promiscuous mode [ 1648.892526][T19561] veth0_vlan: left promiscuous mode [ 1649.419498][T25835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3954'. [ 1650.049274][T19561] team0 (unregistering): Port device team_slave_1 removed [ 1650.130077][T19561] team0 (unregistering): Port device team_slave_0 removed [ 1650.146534][T25838] random: crng reseeded on system resumption [ 1650.690489][T25694] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1650.737717][T25694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1650.776798][T25694] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1650.826035][T25694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1650.932401][T25694] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1650.982087][T25694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1651.821763][T25853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3957'. [ 1651.860932][T25694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1651.973756][T25694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.998895][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.999022][ T6436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1652.012637][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.012726][ T6436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1654.265796][T25694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1654.296020][T25888] FAULT_INJECTION: forcing a failure. [ 1654.296020][T25888] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.485096][T25888] CPU: 0 UID: 0 PID: 25888 Comm: syz.2.3963 Tainted: G L syzkaller #0 PREEMPT(full) [ 1654.485140][T25888] Tainted: [L]=SOFTLOCKUP [ 1654.485150][T25888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1654.485166][T25888] Call Trace: [ 1654.485174][T25888] [ 1654.485184][T25888] dump_stack_lvl+0x100/0x190 [ 1654.485218][T25888] should_fail_ex.cold+0x5/0xa [ 1654.485252][T25888] should_failslab+0xc2/0x120 [ 1654.485285][T25888] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1654.485327][T25888] ? __proc_create+0x2cb/0x8c0 [ 1654.485367][T25888] __proc_create+0x2cb/0x8c0 [ 1654.485401][T25888] ? __pfx___proc_create+0x10/0x10 [ 1654.485438][T25888] ? _raw_write_unlock+0x28/0x50 [ 1654.485475][T25888] ? proc_register+0x559/0x8a0 [ 1654.485513][T25888] proc_create_reg+0x75/0x170 [ 1654.485555][T25888] ? __pfx_sctp_snmp_seq_show+0x10/0x10 [ 1654.485600][T25888] proc_create_net_single+0x86/0x180 [ 1654.485636][T25888] ? __pfx_proc_create_net_single+0x10/0x10 [ 1654.485671][T25888] ? sctp_defaults_init+0x720/0xd90 [ 1654.485706][T25888] sctp_proc_init+0xaa/0x270 [ 1654.485731][T25888] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1654.485755][T25888] sctp_defaults_init+0x758/0xd90 [ 1654.485782][T25888] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1654.485808][T25888] ops_init+0x1e2/0x5f0 [ 1654.485842][T25888] setup_net+0x118/0x3a0 [ 1654.485870][T25888] ? __pfx_setup_net+0x10/0x10 [ 1654.485897][T25888] ? mutex_init_lockdep+0xf1/0x120 [ 1654.485961][T25888] copy_net_ns+0x46f/0x7c0 [ 1654.485994][T25888] create_new_namespaces+0x3ea/0xac0 [ 1654.486034][T25888] unshare_nsproxy_namespaces+0xf2/0x220 [ 1654.486069][T25888] ksys_unshare+0x438/0xab0 [ 1654.486112][T25888] ? __pfx_ksys_unshare+0x10/0x10 [ 1654.486147][T25888] ? xfd_validate_state+0x129/0x190 [ 1654.486182][T25888] __x64_sys_unshare+0x31/0x40 [ 1654.486219][T25888] do_syscall_64+0x115/0x840 [ 1654.486255][T25888] ? clear_bhb_loop+0x40/0x90 [ 1654.486286][T25888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.486313][T25888] RIP: 0033:0x7fa3a279ce59 [ 1654.486333][T25888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1654.486360][T25888] RSP: 002b:00007fa3a364d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1654.486385][T25888] RAX: ffffffffffffffda RBX: 00007fa3a2a15fa0 RCX: 00007fa3a279ce59 [ 1654.486402][T25888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1654.486419][T25888] RBP: 00007fa3a2832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1654.486435][T25888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1654.486450][T25888] R13: 00007fa3a2a16038 R14: 00007fa3a2a15fa0 R15: 00007ffca2032cb8 [ 1654.486482][T25888] [ 1655.861043][T25894] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3964: iget: checksum invalid [ 1655.872487][T25894] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1655.937348][T25894] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3964: iget: checksum invalid [ 1655.988955][T25894] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1656.051697][T25894] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3964: iget: checksum invalid [ 1656.119205][T25894] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1656.184927][T25894] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3964: iget: checksum invalid [ 1656.255255][T25894] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1656.317090][T25894] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1656.332041][T25903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3965'. [ 1656.363845][T25894] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1657.037966][T25694] veth0_vlan: entered promiscuous mode [ 1657.128889][T25694] veth1_vlan: entered promiscuous mode [ 1657.274897][T25694] veth0_macvtap: entered promiscuous mode [ 1657.337371][T25694] veth1_macvtap: entered promiscuous mode [ 1657.433361][T25694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1657.496867][T25694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1657.575807][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.628555][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.683809][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.750902][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.161283][T19561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.219122][T19561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.351752][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.393305][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.966354][T25938] sd 0:0:1:0: PR command failed: 1026 [ 1658.993971][T25938] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1659.039658][T25938] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1660.945890][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1660.952807][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1662.004938][T25983] openvswitch: : Dropping previously announced user features [ 1662.192974][T25987] ubi0: attaching mtd0 [ 1662.230845][T25987] ubi0: scanning is finished [ 1662.260482][T25987] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1662.740258][T25987] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1664.482470][T26036] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3995'. [ 1664.594693][T26026] zswap: compressor  not available [ 1665.146148][T26043] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1665.258187][T26048] bond0: invalid ARP target specified [ 1665.322164][T26043] vhci_hcd vhci_hcd.2: invalid port number 46 [ 1665.330147][T26048] nbd: must specify at least one socket [ 1665.445071][T26043] vhci_hcd vhci_hcd.2: invalid port number 46 [ 1665.997394][T26043] Process accounting paused [ 1668.489544][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4009'. [ 1668.577582][T26089] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4009'. [ 1669.177757][T26105] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 1669.368396][T26111] netlink: 242 bytes leftover after parsing attributes in process `syz.2.4010'. [ 1669.379639][T26109] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1669.544407][T26114] FAULT_INJECTION: forcing a failure. [ 1669.544407][T26114] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.665634][T26105] ep_00: uevent: failed to send synthetic uevent: -22 [ 1669.674763][T26114] CPU: 0 UID: 0 PID: 26114 Comm: syz.3.4016 Tainted: G L syzkaller #0 PREEMPT(full) [ 1669.674803][T26114] Tainted: [L]=SOFTLOCKUP [ 1669.674813][T26114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1669.674830][T26114] Call Trace: [ 1669.674839][T26114] [ 1669.674849][T26114] dump_stack_lvl+0x100/0x190 [ 1669.674880][T26114] should_fail_ex.cold+0x5/0xa [ 1669.674913][T26114] should_failslab+0xc2/0x120 [ 1669.674944][T26114] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1669.674986][T26114] ? __mpol_dup+0x74/0x390 [ 1669.675026][T26114] __mpol_dup+0x74/0x390 [ 1669.675060][T26114] ? __pfx___mpol_dup+0x10/0x10 [ 1669.675093][T26114] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 1669.675134][T26114] ? sp_alloc+0x27/0x160 [ 1669.675182][T26114] sp_alloc+0x4d/0x160 [ 1669.675220][T26114] mpol_set_shared_policy+0xa5/0x890 [ 1669.675263][T26114] ? __pfx_shmem_set_policy+0x10/0x10 [ 1669.675296][T26114] mbind_range+0x339/0x550 [ 1669.675335][T26114] do_mbind+0x7dc/0xfd0 [ 1669.675379][T26114] ? __pfx_do_mbind+0x10/0x10 [ 1669.675415][T26114] ? ksys_write+0x190/0x250 [ 1669.675459][T26114] ? __pfx_get_nodes+0x10/0x10 [ 1669.675493][T26114] kernel_mbind+0x1b7/0x200 [ 1669.675531][T26114] ? __pfx_kernel_mbind+0x10/0x10 [ 1669.675571][T26114] ? rcu_is_watching+0x12/0xc0 [ 1669.675604][T26114] do_syscall_64+0x115/0x840 [ 1669.675640][T26114] ? clear_bhb_loop+0x40/0x90 [ 1669.675671][T26114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.675697][T26114] RIP: 0033:0x7f3df3d9ce59 [ 1669.675718][T26114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1669.675744][T26114] RSP: 002b:00007f3df4d15028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1669.675768][T26114] RAX: ffffffffffffffda RBX: 00007f3df4016090 RCX: 00007f3df3d9ce59 [ 1669.675785][T26114] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 1669.675802][T26114] RBP: 00007f3df3e32d6f R08: 0000000000000006 R09: 0000000000000002 [ 1669.675817][T26114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1669.675833][T26114] R13: 00007f3df4016128 R14: 00007f3df4016090 R15: 00007ffe29b586e8 [ 1669.675865][T26114] [ 1671.157159][T26133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4020'. [ 1671.694415][T26134] zswap: compressor not available [ 1678.216242][T26198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4036'. [ 1681.155173][T26238] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1682.328883][T26257] HfR: entered promiscuous mode [ 1682.376502][T26258] openvswitch: HfR: Dropping previously announced user features [ 1690.342262][T26379] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4077'. [ 1690.918363][T26383] misc userio: No port type given on /dev/userio [ 1694.342739][T26405] Process accounting resumed [ 1697.939066][T26432] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 1699.137839][T26454] Process accounting resumed [ 1699.882956][T26484] netlink: 13 bytes leftover after parsing attributes in process `syz.6.4098'. [ 1701.159999][T26492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4099'. [ 1702.223566][T26504] input: jJǸ-9%vJ86 as /devices/virtual/input/input23 [ 1702.670111][T26504] ================================================================== [ 1702.670158][T26504] BUG: KASAN: slab-use-after-free in fb_mode_is_equal+0x280/0x2f0 [ 1702.670255][T26504] Read of size 4 at addr ffff88802666219c by task syz.6.4102/26504 [ 1702.670277][T26504] [ 1702.670292][T26504] CPU: 0 UID: 0 PID: 26504 Comm: syz.6.4102 Tainted: G L syzkaller #0 PREEMPT(full) [ 1702.670328][T26504] Tainted: [L]=SOFTLOCKUP [ 1702.670338][T26504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1702.670354][T26504] Call Trace: [ 1702.670363][T26504] [ 1702.670373][T26504] dump_stack_lvl+0x100/0x190 [ 1702.670398][T26504] print_report+0x13d/0x4b0 [ 1702.670436][T26504] ? __virt_addr_valid+0x239/0x430 [ 1702.670479][T26504] ? fb_mode_is_equal+0x280/0x2f0 [ 1702.670504][T26504] kasan_report+0xdf/0x1d0 [ 1702.670535][T26504] ? fb_mode_is_equal+0x280/0x2f0 [ 1702.670563][T26504] fb_mode_is_equal+0x280/0x2f0 [ 1702.670589][T26504] fbcon_mode_deleted+0x146/0x1e0 [ 1702.670634][T26504] fb_set_var+0xe76/0x11b0 [ 1702.670688][T26504] ? __pfx_stack_trace_save+0x10/0x10 [ 1702.670725][T26504] ? __pfx_fb_set_var+0x10/0x10 [ 1702.670763][T26504] ? __lock_acquire+0x4a5/0x2630 [ 1702.670805][T26504] ? kasan_save_track+0x14/0x30 [ 1702.670830][T26504] ? kasan_save_free_info+0x3b/0x70 [ 1702.670866][T26504] ? __kasan_slab_free+0x5f/0x80 [ 1702.670892][T26504] ? kfree+0x223/0x6c0 [ 1702.670929][T26504] ? lock_acquire+0x1b1/0x370 [ 1702.670972][T26504] ? trace_contention_end+0x122/0x170 [ 1702.670997][T26504] ? __mutex_lock+0x26d/0x1b10 [ 1702.671035][T26504] ? do_fb_ioctl+0x1e3/0x7e0 [ 1702.671063][T26504] ? __lock_acquire+0x4a5/0x2630 [ 1702.671111][T26504] ? is_console_locked+0x9/0x20 [ 1702.671149][T26504] ? fbcon_info_from_console+0xf9/0x1d0 [ 1702.671196][T26504] ? fbcon_modechange_possible+0x35a/0x4d0 [ 1702.671237][T26504] do_fb_ioctl+0x734/0x7e0 [ 1702.671267][T26504] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1702.671303][T26504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1702.671354][T26504] ? __fget_files+0x21f/0x3d0 [ 1702.671386][T26504] fb_ioctl+0xe5/0x150 [ 1702.671413][T26504] ? __pfx_fb_ioctl+0x10/0x10 [ 1702.671442][T26504] __x64_sys_ioctl+0x18e/0x210 [ 1702.671468][T26504] do_syscall_64+0x115/0x840 [ 1702.671503][T26504] ? clear_bhb_loop+0x40/0x90 [ 1702.671555][T26504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.671597][T26504] RIP: 0033:0x7f828819ce59 [ 1702.671617][T26504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.671643][T26504] RSP: 002b:00007f8285fb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1702.671671][T26504] RAX: ffffffffffffffda RBX: 00007f8288416270 RCX: 00007f828819ce59 [ 1702.671690][T26504] RDX: 0000200000000080 RSI: 0000000000004601 RDI: 0000000000000003 [ 1702.671707][T26504] RBP: 00007f8288232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1702.671724][T26504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1702.671740][T26504] R13: 00007f8288416308 R14: 00007f8288416270 R15: 00007fffc117b3a8 [ 1702.671765][T26504] [ 1702.671774][T26504] [ 1702.671781][T26504] Allocated by task 19562: [ 1702.671794][T26504] kasan_save_stack+0x30/0x50 [ 1702.671818][T26504] kasan_save_track+0x14/0x30 [ 1702.671842][T26504] __kasan_kmalloc+0xaa/0xb0 [ 1702.671865][T26504] __kmalloc_noprof+0x301/0x850 [ 1702.671886][T26504] cfg80211_inform_single_bss_data+0x557/0x1de0 [ 1702.671951][T26504] cfg80211_inform_bss_data+0x237/0x3a00 [ 1702.671975][T26504] cfg80211_inform_bss_frame_data+0x247/0x780 [ 1702.671999][T26504] ieee80211_bss_info_update+0x310/0xab0 [ 1702.672060][T26504] ieee80211_ibss_rx_queued_mgmt+0x1922/0x2f80 [ 1702.672102][T26504] ieee80211_iface_work+0xbff/0x13e0 [ 1702.672154][T26504] cfg80211_wiphy_work+0x410/0x570 [ 1702.672202][T26504] process_one_work+0xa0e/0x1980 [ 1702.672224][T26504] worker_thread+0x5ef/0xe50 [ 1702.672245][T26504] kthread+0x370/0x450 [ 1702.672281][T26504] ret_from_fork+0x72b/0xd50 [ 1702.672305][T26504] ret_from_fork_asm+0x1a/0x30 [ 1702.672336][T26504] [ 1702.672342][T26504] Freed by task 15: [ 1702.672354][T26504] kasan_save_stack+0x30/0x50 [ 1702.672377][T26504] kasan_save_track+0x14/0x30 [ 1702.672400][T26504] kasan_save_free_info+0x3b/0x70 [ 1702.672435][T26504] __kasan_slab_free+0x5f/0x80 [ 1702.672459][T26504] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 1702.672492][T26504] rcu_free_sheaf+0x1a/0xe0 [ 1702.672515][T26504] rcu_core+0x5a2/0x10d0 [ 1702.672537][T26504] handle_softirqs+0x1ea/0xa00 [ 1702.672565][T26504] run_ksoftirqd+0x38/0x60 [ 1702.672593][T26504] smpboot_thread_fn+0x3d3/0xaa0 [ 1702.672626][T26504] kthread+0x370/0x450 [ 1702.672661][T26504] ret_from_fork+0x72b/0xd50 [ 1702.672683][T26504] ret_from_fork_asm+0x1a/0x30 [ 1702.672714][T26504] [ 1702.672720][T26504] The buggy address belongs to the object at ffff888026662180 [ 1702.672720][T26504] which belongs to the cache kmalloc-96 of size 96 [ 1702.672741][T26504] The buggy address is located 28 bytes inside of [ 1702.672741][T26504] freed 96-byte region [ffff888026662180, ffff8880266621e0) [ 1702.672766][T26504] [ 1702.672772][T26504] The buggy address belongs to the physical page: [ 1702.672783][T26504] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26662 [ 1702.672805][T26504] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1702.672825][T26504] page_type: f5(slab) [ 1702.672847][T26504] raw: 00fff00000000000 ffff88813fe30280 dead000000000100 dead000000000122 [ 1702.672872][T26504] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 1702.672887][T26504] page dumped because: kasan: bad access detected [ 1702.672900][T26504] page_owner tracks the page as allocated [ 1702.672909][T26504] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2995, tgid 2995 (kworker/u8:8), ts 29285253194, free_ts 29284937714 [ 1702.672953][T26504] post_alloc_hook+0xfd/0x120 [ 1702.672989][T26504] get_page_from_freelist+0x11a6/0x3410 [ 1702.673029][T26504] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1702.673069][T26504] new_slab+0xa6/0x6c0 [ 1702.673102][T26504] refill_objects+0x277/0x420 [ 1702.673138][T26504] __pcs_replace_empty_main+0x375/0x650 [ 1702.673185][T26504] __kmalloc_cache_node_noprof+0x5a3/0x770 [ 1702.673211][T26504] __get_vm_area_node+0x101/0x330 [ 1702.673241][T26504] __vmalloc_node_range_noprof+0x228/0x1630 [ 1702.673274][T26504] __vmalloc_node_noprof+0xad/0xf0 [ 1702.673306][T26504] copy_process+0x7fb/0x7ed0 [ 1702.673338][T26504] kernel_clone+0x176/0x9e0 [ 1702.673368][T26504] user_mode_thread+0xcc/0x110 [ 1702.673401][T26504] call_usermodehelper_exec_work+0xcb/0x180 [ 1702.673428][T26504] process_one_work+0xa0e/0x1980 [ 1702.673449][T26504] worker_thread+0x5ef/0xe50 [ 1702.673470][T26504] page last free pid 2995 tgid 2995 stack trace: [ 1702.673484][T26504] __free_frozen_pages+0x794/0x10a0 [ 1702.673516][T26504] __kasan_populate_vmalloc+0x164/0x210 [ 1702.673557][T26504] alloc_vmap_area+0x95d/0x2b70 [ 1702.673583][T26504] __get_vm_area_node+0x1ca/0x330 [ 1702.673612][T26504] __vmalloc_node_range_noprof+0x228/0x1630 [ 1702.673645][T26504] __vmalloc_node_noprof+0xad/0xf0 [ 1702.673676][T26504] copy_process+0x7fb/0x7ed0 [ 1702.673707][T26504] kernel_clone+0x176/0x9e0 [ 1702.673738][T26504] user_mode_thread+0xcc/0x110 [ 1702.673770][T26504] call_usermodehelper_exec_work+0xcb/0x180 [ 1702.673796][T26504] process_one_work+0xa0e/0x1980 [ 1702.673817][T26504] worker_thread+0x5ef/0xe50 [ 1702.673838][T26504] kthread+0x370/0x450 [ 1702.673873][T26504] ret_from_fork+0x72b/0xd50 [ 1702.673896][T26504] ret_from_fork_asm+0x1a/0x30 [ 1702.673928][T26504] [ 1702.673934][T26504] Memory state around the buggy address: [ 1702.673946][T26504] ffff888026662080: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1702.673965][T26504] ffff888026662100: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1702.673983][T26504] >ffff888026662180: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1702.673998][T26504] ^ [ 1702.674011][T26504] ffff888026662200: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1702.674029][T26504] ffff888026662280: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1702.674056][T26504] ================================================================== [ 1702.842096][T26504] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1702.842123][T26504] CPU: 0 UID: 0 PID: 26504 Comm: syz.6.4102 Tainted: G L syzkaller #0 PREEMPT(full) [ 1702.842255][T26504] Tainted: [L]=SOFTLOCKUP [ 1702.842271][T26504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1702.842288][T26504] Call Trace: [ 1702.842323][T26504] [ 1702.842334][T26504] dump_stack_lvl+0x100/0x190 [ 1702.842364][T26504] vpanic+0x552/0x970 [ 1702.842388][T26504] ? __pfx_vpanic+0x10/0x10 [ 1702.842413][T26504] ? mark_held_locks+0x40/0x70 [ 1702.842456][T26504] ? fb_mode_is_equal+0x280/0x2f0 [ 1702.842481][T26504] panic+0xd1/0xe0 [ 1702.842504][T26504] ? __pfx_panic+0x10/0x10 [ 1702.842529][T26504] ? fb_mode_is_equal+0x280/0x2f0 [ 1702.842554][T26504] ? preempt_schedule_common+0x42/0xc0 [ 1702.842595][T26504] check_panic_on_warn.cold+0x19/0x34 [ 1702.842624][T26504] end_report.part.0+0x3a/0x90 [ 1702.842661][T26504] kasan_report.cold+0xe/0x18 [ 1702.842700][T26504] ? fb_mode_is_equal+0x280/0x2f0 [ 1702.842729][T26504] fb_mode_is_equal+0x280/0x2f0 [ 1702.842755][T26504] fbcon_mode_deleted+0x146/0x1e0 [ 1702.842781][T26504] fb_set_var+0xe76/0x11b0 [ 1702.842819][T26504] ? __pfx_stack_trace_save+0x10/0x10 [ 1702.842855][T26504] ? __pfx_fb_set_var+0x10/0x10 [ 1702.842894][T26504] ? __lock_acquire+0x4a5/0x2630 [ 1702.842936][T26504] ? kasan_save_track+0x14/0x30 [ 1702.842962][T26504] ? kasan_save_free_info+0x3b/0x70 [ 1702.842999][T26504] ? __kasan_slab_free+0x5f/0x80 [ 1702.843025][T26504] ? kfree+0x223/0x6c0 [ 1702.843063][T26504] ? lock_acquire+0x1b1/0x370 [ 1702.843106][T26504] ? trace_contention_end+0x122/0x170 [ 1702.843131][T26504] ? __mutex_lock+0x26d/0x1b10 [ 1702.843169][T26504] ? do_fb_ioctl+0x1e3/0x7e0 [ 1702.843198][T26504] ? __lock_acquire+0x4a5/0x2630 [ 1702.843246][T26504] ? is_console_locked+0x9/0x20 [ 1702.843284][T26504] ? fbcon_info_from_console+0xf9/0x1d0 [ 1702.843328][T26504] ? fbcon_modechange_possible+0x35a/0x4d0 [ 1702.843369][T26504] do_fb_ioctl+0x734/0x7e0 [ 1702.843399][T26504] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1702.843435][T26504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1702.843487][T26504] ? __fget_files+0x21f/0x3d0 [ 1702.843520][T26504] fb_ioctl+0xe5/0x150 [ 1702.843547][T26504] ? __pfx_fb_ioctl+0x10/0x10 [ 1702.843577][T26504] __x64_sys_ioctl+0x18e/0x210 [ 1702.843603][T26504] do_syscall_64+0x115/0x840 [ 1702.843639][T26504] ? clear_bhb_loop+0x40/0x90 [ 1702.843669][T26504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.843696][T26504] RIP: 0033:0x7f828819ce59 [ 1702.843718][T26504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.843745][T26504] RSP: 002b:00007f8285fb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1702.843771][T26504] RAX: ffffffffffffffda RBX: 00007f8288416270 RCX: 00007f828819ce59 [ 1702.843789][T26504] RDX: 0000200000000080 RSI: 0000000000004601 RDI: 0000000000000003 [ 1702.843806][T26504] RBP: 00007f8288232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1702.843823][T26504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1702.843840][T26504] R13: 00007f8288416308 R14: 00007f8288416270 R15: 00007fffc117b3a8 [ 1702.843866][T26504] [ 1702.843944][T26504] Kernel Offset: disabled