last executing test programs: 7m35.764926904s ago: executing program 0 (id=1217): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5dce3c0000000000002502000000040002000800048000000000080001000600000061825262d547c0720de944ef622e1f49221af8884a7c8cce3e813516f75872062f2ea9a9f119e545b4249741fe15c54bbec85e894e44771c0ae86e30b63ab78f23f5f33482d9fd7adbaf33e078d1ead6ade411930dc9730e1f8228ef36b33005bab84d278318efbbcf55d2ec1e3d6b579b7d3b8a4a014e93ae"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40) (async) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) (async) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) read$auto(r3, 0x0, 0x4) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000002c0)={0x0, 0x7}, 0x3) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) (async) readv$auto(0xffffffffffffffff, 0x0, 0x4) (async) r5 = wait4$auto(0x0, 0x0, 0x4, 0x0) prctl$auto_PR_SCHED_CORE_CREATE(0x0, 0x1, r5, 0x8, 0x3a9) (async) rt_tgsigqueueinfo$auto(0x0, r5, 0x200, 0x0) unshare$auto(0x6c000000) (async, rerun: 64) getsockopt$auto(r0, 0x114, 0x5, 0xfffffffffffffffc, 0x0) (rerun: 64) 7m34.949404976s ago: executing program 0 (id=1219): unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) ioperm$auto(0x7, 0x6, 0x10) ioperm$auto(0x94, 0xc81, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, 0x0) connect$auto(0x3, 0x0, 0x55) pread64$auto(r0, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x6, 0x8, "b87d000002000000997e8b3f222ce1", '\x00', "0001410c", "00000180", ["f58c46658f15a89b9c0060c1", "70d9a9a3af9f39c700000001", "ef5ac4897ad89c5c00", "020400000000000000001100"]}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmget$auto(0x0, 0x2, 0x8) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000480)={"801cc4c5", 0x8, 0x8, 0x0, 0x5d, 0x1, "9c73930014ae6d1c64f0c9cfc40a01", "354d40de", "91391d0a", "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39fb065454a4b28879acd24c", "42565eb931f9cfbfabac8990", "19c57f7fee8d089a10cdd8c3"]}) 7m33.329783911s ago: executing program 0 (id=1227): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram14\x00', 0x80803, 0x0) ioctl$auto_BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000001240)={0xfffffffffffffff8, 0x3, 0x1}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8aa182, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) mmap$auto(0x8b, 0x810004, 0x100000002, 0x8002000008011, 0x3, 0xffff) close_range$auto(0x2, 0x8, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) keyctl$auto(0xb, 0xfffffffd, 0x7, 0x0, 0x6) open(0x0, 0x161342, 0x130) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x2, 0x13) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd10/queue/zone_append_max_bytes\x00', 0x80, 0x0) 7m32.548435666s ago: executing program 0 (id=1229): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, 0x0, 0x5, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x400) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kexec_load$auto(0x5, 0x2, 0x0, 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') getcwd$auto(0x0, 0xffffffffffffffff) rename$auto(&(0x7f0000000280)='./file1\x00', 0x0) rename$auto(0x0, &(0x7f0000000100)='./file1\x00') shutdown$auto(r0, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 7m30.959745989s ago: executing program 0 (id=1236): mmap$auto(0x3, 0x2020009, 0x7, 0xf6, 0xffffffffffffffff, 0x400) setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) socket(0x26, 0x80805, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = socket(0x18, 0x80000, 0x0) connect$auto(r1, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x800}, 0x1e) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x8, "407ee5c1900b59f9c62f68a8145adc8a5d9120ef9ec9a1db8b76e6c0c7782d4f", @inferred=r1}) socket(0x5, 0x5, 0x4000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x28, 0x5, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x26441, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r5 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/tracing/trace_options\x00', 0x80442, 0x0) preadv$auto(r5, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x3, 0x7ffffffd, 0x5) write$auto_tty_fops_tty_io(r4, &(0x7f00000009c0)="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", 0xe68) ioctl$auto_BLKSSZGET(r3, 0x1268, 0x0) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) 7m29.332117298s ago: executing program 0 (id=1246): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x200, 0x3, 0x3, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0xc, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) fsconfig$auto_FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='\'[\':]%\x00', &(0x7f0000000340)="fe280626095955ee0f07c114c6637dc3ae135c7a0a4c92805d1ee0f537baf7f61dd1062c3683fab0281b8d0947ca835679b3aefa9511025b6870f4efcf45baa259855cd6684de41262c6db8d7eae096eef9844073be2670b07eb713533a2c2a78154ee57c3a2e51ab8b6701e998f6778b1a892a2b61040a2337247b06ea2615c34968cf38ca4a13a641bcfe0fcd54f57ebd9b2e96f988a1b2b29a7bb923cbb6e0c6722fdf8a3acad7e392bb0", 0x25a3) (async, rerun: 64) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 64) ioctl$auto(0xffffffffffffffff, 0x400454ca, 0x38) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, 0x0) (async) write$auto(0x3, 0x0, 0xfdf3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="20002abd7000fddbdf250200000005000200000000000b000300275b273a5d25000007000100f82f000006000200240000001f0001002f70726f632f7468726561642d73656c662f6c6f67696e7569640000"], 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x801) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0) (async) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) (async) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a44"}) (async) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0xfffffe00, 0x0, 0x4, 0x4, 0x4000000000007) (async) set_mempolicy$auto(0x4, &(0x7f0000000080)=0x3, 0x21) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async, rerun: 32) mmap$auto(0x0, 0x3, 0x1000000000001, 0x11, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) kexec_load$auto(0xfffffffffffffffd, 0xffffffffffffff1b, 0x0, 0x8000002) (async) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) (async, rerun: 32) fallocate$auto(r3, 0xa691, 0x7, 0x0) (rerun: 32) 7m14.06496229s ago: executing program 32 (id=1246): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x200, 0x3, 0x3, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0xc, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) fsconfig$auto_FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='\'[\':]%\x00', &(0x7f0000000340)="fe280626095955ee0f07c114c6637dc3ae135c7a0a4c92805d1ee0f537baf7f61dd1062c3683fab0281b8d0947ca835679b3aefa9511025b6870f4efcf45baa259855cd6684de41262c6db8d7eae096eef9844073be2670b07eb713533a2c2a78154ee57c3a2e51ab8b6701e998f6778b1a892a2b61040a2337247b06ea2615c34968cf38ca4a13a641bcfe0fcd54f57ebd9b2e96f988a1b2b29a7bb923cbb6e0c6722fdf8a3acad7e392bb0", 0x25a3) (async, rerun: 64) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 64) ioctl$auto(0xffffffffffffffff, 0x400454ca, 0x38) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, 0x0) (async) write$auto(0x3, 0x0, 0xfdf3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="20002abd7000fddbdf250200000005000200000000000b000300275b273a5d25000007000100f82f000006000200240000001f0001002f70726f632f7468726561642d73656c662f6c6f67696e7569640000"], 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x801) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0) (async) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) (async) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a44"}) (async) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0xfffffe00, 0x0, 0x4, 0x4, 0x4000000000007) (async) set_mempolicy$auto(0x4, &(0x7f0000000080)=0x3, 0x21) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async, rerun: 32) mmap$auto(0x0, 0x3, 0x1000000000001, 0x11, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) kexec_load$auto(0xfffffffffffffffd, 0xffffffffffffff1b, 0x0, 0x8000002) (async) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) (async, rerun: 32) fallocate$auto(r3, 0xa691, 0x7, 0x0) (rerun: 32) 42.032551969s ago: executing program 2 (id=2811): madvise$auto_MADV_DONTNEED(0x1, 0x4, 0x4) madvise$auto_MADV_DONTNEED(0x9, 0x4, 0x4) madvise$auto_MADV_DONTNEED(0x8, 0x355, 0x4) madvise$auto_MADV_DONTNEED(0x5, 0x7fffffff, 0x4) madvise$auto_MADV_DONTNEED(0x3, 0x5, 0x4) (async) madvise$auto_MADV_DONTNEED(0x3, 0x5, 0x4) madvise$auto_MADV_DONTNEED(0x4, 0x3, 0x4) madvise$auto_MADV_DONTNEED(0x9, 0x6, 0x4) madvise$auto_MADV_DONTNEED(0x3, 0x200000000000000, 0x4) madvise$auto_MADV_DONTNEED(0x0, 0x4, 0x4) madvise$auto_MADV_DONTNEED(0x7, 0x3, 0x4) (async) madvise$auto_MADV_DONTNEED(0x7, 0x3, 0x4) madvise$auto_MADV_DONTNEED(0x8, 0x40, 0x4) madvise$auto_MADV_DONTNEED(0x4, 0x6, 0x4) madvise$auto_MADV_DONTNEED(0x8, 0x10001, 0x4) madvise$auto_MADV_DONTNEED(0x1156, 0x9, 0x4) madvise$auto_MADV_DONTNEED(0x7ff, 0x2, 0x4) (async) madvise$auto_MADV_DONTNEED(0x7ff, 0x2, 0x4) madvise$auto_MADV_DONTNEED(0x14, 0x8, 0x4) (async) madvise$auto_MADV_DONTNEED(0x14, 0x8, 0x4) madvise$auto_MADV_DONTNEED(0x3, 0x100000001, 0x4) madvise$auto_MADV_DONTNEED(0x1, 0x7, 0x4) (async) madvise$auto_MADV_DONTNEED(0x1, 0x7, 0x4) madvise$auto_MADV_DONTNEED(0xfff, 0x0, 0x4) madvise$auto_MADV_DONTNEED(0x4, 0x1, 0x4) (async) madvise$auto_MADV_DONTNEED(0x4, 0x1, 0x4) madvise$auto_MADV_DONTNEED(0xc77, 0x2, 0x4) madvise$auto_MADV_DONTNEED(0x10001, 0x0, 0x4) madvise$auto_MADV_DONTNEED(0x2, 0x1, 0x4) madvise$auto_MADV_DONTNEED(0xcf20, 0x6, 0x4) (async) madvise$auto_MADV_DONTNEED(0xcf20, 0x6, 0x4) madvise$auto_MADV_DONTNEED(0xf820, 0xf, 0x4) madvise$auto_MADV_DONTNEED(0x200, 0x9, 0x4) (async) madvise$auto_MADV_DONTNEED(0x200, 0x9, 0x4) madvise$auto_MADV_DONTNEED(0x1, 0x3f, 0x4) madvise$auto_MADV_DONTNEED(0x6, 0x5, 0x4) (async) madvise$auto_MADV_DONTNEED(0x6, 0x5, 0x4) madvise$auto_MADV_DONTNEED(0x5, 0x5, 0x4) madvise$auto_MADV_DONTNEED(0x1, 0x7fffffff, 0x4) (async) madvise$auto_MADV_DONTNEED(0x1, 0x7fffffff, 0x4) 41.869392107s ago: executing program 2 (id=2813): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0\x00', 0x48000, 0x0) ioctl$auto_MEMGETINFO(r0, 0x80204d01, &(0x7f0000000240)={0x40, 0xfffffff0, 0x4, 0x5, 0x3, 0x9}) mmap$auto(0x1, 0xa, 0xbffffffffffff801, 0x9b72, 0x5, 0x8000) r1 = socket(0xa, 0x801, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x18, 0x0, &(0x7f0000000280)=0x1000c0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0xffff738b) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x402000a, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8004) dup3$auto(r3, r3, 0x4) r4 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0x46, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) mmap$auto(0x4000000000, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x13, &(0x7f00000001c0), 0x2) sysfs$auto(0x2, 0x1a, 0x0) fsopen$auto(0x0, 0x1) ioctl$auto_BTRFS_IOC_FORGET_DEV(r4, 0x50009405, 0x0) 40.138860294s ago: executing program 2 (id=2817): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x3) r0 = socket(0x1e, 0x3, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000200)={&(0x7f00000001c0)="661b", 0x1000000000049}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x2, 0x0) pidfd_open$auto(0x1, 0x0) ioctl$auto_XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000240)={0x9, 0x80000001, 0x10001, @raw=0x1}) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) capset$auto(0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b47, 0x1) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/247, 0xf7) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000300)={"969d2926a627af0881b63476e2b4d22240a6b280923a3624f66aeca9ea73e1dd", 0x6, 0x4, 0x80000, 0x5, 0x3}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0xfffffffffffffffe) r4 = socket(0x11, 0x80003, 0x300) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000001300)=""/4096, 0xfffffeba) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) r6 = socket(0x27, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) acct$auto(&(0x7f0000000000)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xd2\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\x8f\x17\xfc\x1aK^\xb1\x8b\x96\xfdPw\xa4M@.(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x021\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3dr\xfd\f\xae\x96u\x91\x11ru\xa5\x9f\xec\xe7\x99\xbe\xcb\bN:\xe9\xf0KFJ\aD\xb4(\x03h\xa0%\xf6N\xeb3\x1c\xdcQ+\xa2\xc1wM\xde)J[\xe6O%\xa1\xda\xa9\x9c \x18pD\xb0P\xa3\x86\xfd[\x05\xdb\xcc\xb4d\xab\xc4\a#3.\xfb>\xb0\xf7\x8cp\xab\xd1\xaa\x9d\x8djz\xb2\xcf\xa5\xb5lS\xd7\x80\x8eI\"eH\x9f+o\x8d\xff\x7f!\x9f0\xd2n\xb8/Gy9\x9f\x85EP\x99\xf4\xfcN\xfe\x1e\b\x84G\x8a\x0f\xab\x14vVy*\x1f\xe6\xdf\xe6^\b\x1ecm\xc5\xfe+\x8d\xd5\x17\'oQb\xc1\x89l\xd2\x9d7C\xbf\tdB(\xb6\x93\xdfj~`\x94\xc2\x99t\xbf)|A\x05\x1b\xf7^\xd9\xa1\xee\xfb\'\xaa\x13\xb33\xe7\xc3G!}\x18\a\xbd@\xea\xfd>f\xb7\xb9\xe4\xb1\x1b\x1b\x95\x01\xe4i\x82\xda\x82~1cT\xdb\x92Q\xbd\xc1z\xc0\xf8\x88~\xe3id\xceg\x98\x8a\xa0Rq\x0f^\x11r:\xe1\xd1a\x15\xbb\xd6]\xc6\xfb\xbf`\xd1\\\xfd\xeeW\xc4\x0f\x10bv5\xa2\xde|&\xee\xaf\xa9Y\xc1\x1d\x8a$\xd61Uq\xe3\x94\x9e;8\x7f\x18J\xaf\xbd\xf6\x950W\x03\xdbrf\xe6\xfb\xe5\xf1\xc4a8\xcfo#R\xaa\xfb\xbc\x00') writev$auto(r7, &(0x7f0000000100)={0x0, 0x7111}, 0x4000000008) 39.734873483s ago: executing program 2 (id=2819): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) linkat$auto(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x10000, &(0x7f0000000280)='(\x00', 0x5) shmctl$auto_SHM_LOCK(0x0, 0xb, &(0x7f00000001c0)={{0x2, 0xffffffffffffffff, 0xee01, 0x7fffffff, 0x4, 0x1781, 0x40}, 0x80000001, 0x71, 0x7fff, 0x400, @inferred=0x0, @inferred=0xffffffffffffffff, 0x2, 0x0, 0x0, &(0x7f0000000180)="6aa9f450cd41400ff19ce80c38955761650847da1d19a473ea07c5f21d47cae01a"}) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x180, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x30, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x6}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x10000}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x1}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x34, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x8080}]}, @NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xfffffff8}]}, @NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xd}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x48, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xd2be}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x30}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x7f}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x9}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x3305}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000000}]}, @NFSD_A_SERVER_PROTO_VERSION={0x8, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x20, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0xa}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x7}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xdb10}]}, @NFSD_A_SERVER_PROTO_VERSION={0x3c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x1}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x6}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x1}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x643f}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xc}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x3c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xdcf}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x3}, @NFSD_A_VERSION_MAJOR={0x8}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x9}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x3}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x4008040) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000340)={{0x0, 0xee00, 0xee00, 0x0, 0x8, 0x80000000, 0x80}, 0x7f, 0x1, 0x7, 0x3, @raw=0xc, @raw, 0x5, 0x0, 0x0, 0x0}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) shmget$auto(0xd, 0x8, 0x24f3) r5 = fanotify_init$auto(0xc00, 0x2) r6 = open(&(0x7f0000000000)='./file0\x00', 0x165b42, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r6, 0x0) shmctl$auto_IPC_INFO(0x9, 0x3, &(0x7f00000005c0)={{0x2f8a, r1, r2, 0x6, 0x8, 0xd, 0x400}, 0x3, 0x699, 0x3, 0x80000000, @raw=0x3, @inferred=r3, 0x0, 0x0, &(0x7f0000000240)="167f8e1bb3be12be62beb1cc478d21bc47ecfbdd7652f63c70b22c0b817934deb82394f9d12ca9ab5ae0b365456f3e94584bb2", &(0x7f00000002c0)="c0c424974f565c3fc519"}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4743, 0x117) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r7 = socket(0xa, 0x5, 0x0) fstat$auto(0x2, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r7, 0x80086601, 0x7) open(0x0, 0x22240, 0x154) read$auto_debugfs_full_proxy_file_operations_internal(r5, &(0x7f0000000080)=""/117, 0x75) 39.475380023s ago: executing program 2 (id=2820): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = open(0x0, 0x14927f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x40086602, 0x0) lstat$auto(0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_pwait$auto(r0, &(0x7f0000000140)={0x1, 0xcd4}, 0x37b4817, 0x3, &(0x7f00000001c0)={0x9}, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/mm/ksm/advisor_max_pages_to_scan\x00', 0x20b42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_FS_IOC_GETFLAGS2(r2, 0x80086601, &(0x7f0000000000)=0x40) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x4) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="14f70002", @ANYRES16=r3, @ANYBLOB="00012bbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x8d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x35cb}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_C33_PSE_AVAIL_PW_LIMIT={0x8, 0xc, 0xfffffffe}, @ETHTOOL_A_C33_PSE_AVAIL_PW_LIMIT={0x8, 0xc, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044}, 0x1) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0x180, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000002080)=""/4082, 0xff2) write$auto(r6, 0x0, 0x9) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000003080)={@raw=0xe5f6, 0x2, 0x7766, @btrfs_ioctl_vol_args_v2_3_0={0xfffffffffffffffb, &(0x7f0000000040)={0x6, 0x0, 0x6, 0xfffffffffffffffc, {0x9, 0x6, 0xff, 0x7, 0xd}, [0x5, 0x1, 0x3, 0x5, 0x48000000, 0x2, 0x88, 0x46]}}, @subvolid=0x9}) 39.196491967s ago: executing program 2 (id=2822): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x2, 0x0) cachestat$auto(r0, &(0x7f0000000000)={0x0, 0x7fc}, &(0x7f0000000040)={0x6, 0x0, 0x8, 0x1, 0x3}, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x3, 0x3a) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r1, 0x8, 0x0, 0x2) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5516, 0x0}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = open(0x0, 0x0, 0x408) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x0, 0x40000000000001, 0x0, 0x0, 0x0, 0x8000000000000000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r4, r4, 0x0, 0x8) socket(0xa, 0x2, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/reserved_clusters\x00', 0x222080, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) r6 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/sda/hctx0/busy\x00', 0x169100, 0x0) pread64$auto(r6, 0x0, 0x1000f42d, 0x100) getdents$auto(r3, 0x0, 0x400018) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) 24.031804252s ago: executing program 33 (id=2822): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x2, 0x0) cachestat$auto(r0, &(0x7f0000000000)={0x0, 0x7fc}, &(0x7f0000000040)={0x6, 0x0, 0x8, 0x1, 0x3}, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x3, 0x3a) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r1, 0x8, 0x0, 0x2) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5516, 0x0}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = open(0x0, 0x0, 0x408) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x0, 0x40000000000001, 0x0, 0x0, 0x0, 0x8000000000000000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r4, r4, 0x0, 0x8) socket(0xa, 0x2, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/reserved_clusters\x00', 0x222080, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) r6 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/sda/hctx0/busy\x00', 0x169100, 0x0) pread64$auto(r6, 0x0, 0x1000f42d, 0x100) getdents$auto(r3, 0x0, 0x400018) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) 14.233315216s ago: executing program 4 (id=2883): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x3) r0 = socket(0x1e, 0x3, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000200)={&(0x7f00000001c0)="661b", 0x1000000000049}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x2, 0x0) pidfd_open$auto(0x1, 0x0) ioctl$auto_XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000240)={0x9, 0x80000001, 0x10001, @raw=0x1}) capset$auto(0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b47, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/cache/index3/type\x00', 0x22340, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/247, 0xf7) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000300)={"969d2926a627af0881b63476e2b4d22240a6b280923a3624f66aeca9ea73e1dd", 0x6, 0x4, 0x80000, 0x5, 0x3}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0xfffffffffffffffe) r5 = socket(0x11, 0x80003, 0x300) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000001300)=""/4096, 0xfffffeba) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) r7 = socket(0x27, 0x80003, 0x300) setsockopt$auto(r7, 0x107, 0x12, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) acct$auto(&(0x7f0000000000)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xd2\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\x8f\x17\xfc\x1aK^\xb1\x8b\x96\xfdPw\xa4M@.(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x021\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3dr\xfd\f\xae\x96u\x91\x11ru\xa5\x9f\xec\xe7\x99\xbe\xcb\bN:\xe9\xf0KFJ\aD\xb4(\x03h\xa0%\xf6N\xeb3\x1c\xdcQ+\xa2\xc1wM\xde)J[\xe6O%\xa1\xda\xa9\x9c \x18pD\xb0P\xa3\x86\xfd[\x05\xdb\xcc\xb4d\xab\xc4\a#3.\xfb>\xb0\xf7\x8cp\xab\xd1\xaa\x9d\x8djz\xb2\xcf\xa5\xb5lS\xd7\x80\x8eI\"eH\x9f+o\x8d\xff\x7f!\x9f0\xd2n\xb8/Gy9\x9f\x85EP\x99\xf4\xfcN\xfe\x1e\b\x84G\x8a\x0f\xab\x14vVy*\x1f\xe6\xdf\xe6^\b\x1ecm\xc5\xfe+\x8d\xd5\x17\'oQb\xc1\x89l\xd2\x9d7C\xbf\tdB(\xb6\x93\xdfj~`\x94\xc2\x99t\xbf)|A\x05\x1b\xf7^\xd9\xa1\xee\xfb\'\xaa\x13\xb33\xe7\xc3G!}\x18\a\xbd@\xea\xfd>f\xb7\xb9\xe4\xb1\x1b\x1b\x95\x01\xe4i\x82\xda\x82~1cT\xdb\x92Q\xbd\xc1z\xc0\xf8\x88~\xe3id\xceg\x98\x8a\xa0Rq\x0f^\x11r:\xe1\xd1a\x15\xbb\xd6]\xc6\xfb\xbf`\xd1\\\xfd\xeeW\xc4\x0f\x10bv5\xa2\xde|&\xee\xaf\xa9Y\xc1\x1d\x8a$\xd61Uq\xe3\x94\x9e;8\x7f\x18J\xaf\xbd\xf6\x950W\x03\xdbrf\xe6\xfb\xe5\xf1\xc4a8\xcfo#R\xaa\xfb\xbc\x00') writev$auto(r8, &(0x7f0000000100)={0x0, 0x7111}, 0x4000000008) 13.080789445s ago: executing program 4 (id=2886): mmap$auto(0x0, 0x7, 0x2ebf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) ioctl$auto(0x3, 0x4020565b, 0x38) ioctl$auto_FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) select$auto(0xe, 0x0, 0x0, &(0x7f0000000000)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x100, 0xd08, 0xc, 0x200000000000c, 0x0, 0x6d2f, 0xffffffffffffff00, 0x2, 0x4000000000000d]}, 0x0) socket(0x2c, 0x1, 0x4004) getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setregid$auto(0xee01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(r0, 0x3, 0x0, 0xfffffffffffffffc) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x853, 0x2000000000000002, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x201, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/ip6gretap0/accept_source_route\x00', 0x20140, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) 10.727856097s ago: executing program 1 (id=2891): r0 = socket(0x11, 0x3, 0x9) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pread64$auto(r1, 0x0, 0x8, 0xffff) statmount$auto(0x0, 0x0, 0x40009, 0xd) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/xfs/stats_clear\x00', 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0x9b, 0x14, 0x0, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0x2, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd05, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) semctl$auto(0x8, 0x8, 0x10a, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r5, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) lstat$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000600)={0x318, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, 0x6, 0xffff, 0x5, 0x100, 0x36, 0x7fff, 0x6, 0x7000000000, 0xd, 0x9}) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r7, 0x541c, r8) 9.099745705s ago: executing program 1 (id=2894): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20481, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={"063e43d730767fba3778fb7d82abee8b8a49f5806117bb0bb5a5fa3eba45d3be", 0x3, 0x2, 0x80000000, 0x82, 0xfffffffffffffff8}) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000400), r1) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_COORDINATOR={0xa7, 0x1e, 0x0, 0x1, [@generic="9bf17bf549028fb027a79166ad00bcacf96d701be6d30683ec2124695b7f8f854ef74c53fbe1848317789b3928fbec246cb196a4d856c2c8c0e56eb82c74cf8c85e6a239e3793c3a71bf33e9f87f272a23d01e14707d2dec974aa43871e018ad3f7157785a53bfe91b2937e0eb4a1311ff5d6cab05b2ef97071d8d4f56e5e3bdb776086814bb95569b37080b96b46f20990ab5b1cef82fed982b66", @nested={0x8, 0x159, 0x0, 0x1, [@nested={0x4, 0x150}]}]}]}, 0xc4}}, 0x40) 8.712882996s ago: executing program 4 (id=2895): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x3) r0 = socket(0x1e, 0x3, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000200)={&(0x7f00000001c0)="661b", 0x1000000000049}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) pidfd_open$auto(0x1, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) capset$auto(0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b47, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/cache/index3/type\x00', 0x22340, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/247, 0xf7) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000300)={"969d2926a627af0881b63476e2b4d22240a6b280923a3624f66aeca9ea73e1dd", 0x6, 0x4, 0x80000, 0x5, 0x3}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0xfffffffffffffffe) r4 = socket(0x11, 0x80003, 0x300) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000001300)=""/4096, 0xfffffeba) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) r6 = socket(0x27, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) acct$auto(&(0x7f0000000000)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xd2\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\x8f\x17\xfc\x1aK^\xb1\x8b\x96\xfdPw\xa4M@.(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x021\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3dr\xfd\f\xae\x96u\x91\x11ru\xa5\x9f\xec\xe7\x99\xbe\xcb\bN:\xe9\xf0KFJ\aD\xb4(\x03h\xa0%\xf6N\xeb3\x1c\xdcQ+\xa2\xc1wM\xde)J[\xe6O%\xa1\xda\xa9\x9c \x18pD\xb0P\xa3\x86\xfd[\x05\xdb\xcc\xb4d\xab\xc4\a#3.\xfb>\xb0\xf7\x8cp\xab\xd1\xaa\x9d\x8djz\xb2\xcf\xa5\xb5lS\xd7\x80\x8eI\"eH\x9f+o\x8d\xff\x7f!\x9f0\xd2n\xb8/Gy9\x9f\x85EP\x99\xf4\xfcN\xfe\x1e\b\x84G\x8a\x0f\xab\x14vVy*\x1f\xe6\xdf\xe6^\b\x1ecm\xc5\xfe+\x8d\xd5\x17\'oQb\xc1\x89l\xd2\x9d7C\xbf\tdB(\xb6\x93\xdfj~`\x94\xc2\x99t\xbf)|A\x05\x1b\xf7^\xd9\xa1\xee\xfb\'\xaa\x13\xb33\xe7\xc3G!}\x18\a\xbd@\xea\xfd>f\xb7\xb9\xe4\xb1\x1b\x1b\x95\x01\xe4i\x82\xda\x82~1cT\xdb\x92Q\xbd\xc1z\xc0\xf8\x88~\xe3id\xceg\x98\x8a\xa0Rq\x0f^\x11r:\xe1\xd1a\x15\xbb\xd6]\xc6\xfb\xbf`\xd1\\\xfd\xeeW\xc4\x0f\x10bv5\xa2\xde|&\xee\xaf\xa9Y\xc1\x1d\x8a$\xd61Uq\xe3\x94\x9e;8\x7f\x18J\xaf\xbd\xf6\x950W\x03\xdbrf\xe6\xfb\xe5\xf1\xc4a8\xcfo#R\xaa\xfb\xbc\x00') writev$auto(r7, &(0x7f0000000100)={0x0, 0x7111}, 0x4000000008) 8.531524291s ago: executing program 1 (id=2896): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, 0x0, 0xc050) fsconfig$auto(0xffffffffffffffff, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47e5ca3b8343ea7d7b90f3557fd5f312dc", 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r2) pkey_mprotect$auto(0x100000000, 0x9, 0x6, 0x80000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), 0xffffffffffffffff) clone3$auto(0x0, 0xfffffffffffffff8) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400d0}, 0x4000000) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC_HINT={0x56, 0xc8, "692500000000da588923faf3fd38aec014aaffb72063771b505504664e8ec90f6c3516b464ef05000f6405ce76b8d12ec6d022fc3303eda354db571915f7b6d89b022ad36669d683c88e496c2b85d127e15d"}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x140088d4}, 0x80) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r4 = socket(0xa, 0x5, 0x0) fchown$auto(r4, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb9, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, r4, 0x5, 0x7, 0x7, 0x9}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) 7.599576624s ago: executing program 4 (id=2897): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0\x00', 0x48000, 0x0) ioctl$auto_MEMGETINFO(r0, 0x80204d01, &(0x7f0000000240)={0x40, 0xfffffff0, 0x4, 0x5, 0x3, 0x9}) mmap$auto(0x1, 0xa, 0xbffffffffffff801, 0x9b72, r0, 0x8000) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x18, 0x0, &(0x7f0000000280)=0x1000c0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) dup3$auto(r2, r2, 0x4) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0x46, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r6 = socket(0x18, 0x5, 0x1) connect$auto(r6, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x80047437, 0x0) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 6.817921608s ago: executing program 1 (id=2899): mmap$auto(0x0, 0x4, 0x4, 0x40eb4, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000280)='/dev/binderfs/binder0\x00', 0xa00d82, 0x0) ioctl$auto_BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)="9451dc0c63e316863ff6552181473542159c3d4afb") r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, 0x0, 0x400c880) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyd4\x00', 0x40001, 0x0) mmap$auto(0x0, 0x10002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyq1\x00', 0x101c40, 0x0) r6 = socketpair$auto(0x3, 0x7ff, 0x5, 0x0) ioctl$auto(r5, 0x4b67, r6) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto(r4, 0x8910, r4) r7 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=@query={@target_fd=r1, 0x6, 0xfffffff8, 0x2, 0x9, @prog_cnt=0x7, 0x0, 0x6, 0x0, 0x7, 0x6}, 0x100007ff) sendfile$auto(r3, r3, 0x0, 0x4000000000001) fcntl$auto_F_UNLCK(r0, 0xfffffffd, 0x2) r8 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0xc8002, 0x0) ioctl$auto_FS_IOC_GETFSSYSFSPATH(r8, 0x80811501, 0xfff) r9 = pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) tee$auto(r10, r9, 0x8, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_METER_CMD_SET(r11, 0x0, 0x0) sendmsg$auto_OVS_METER_CMD_DEL(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="03979e00cb5197b539b3b18161a8019040f7c31fcd0ef0b6f626fbbeb10e294842c591d807", @ANYRES16=r12, @ANYBLOB="200029bd7000fbdbdf25030000000c000500000000800000000004000200"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000081) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 4.539547918s ago: executing program 1 (id=2901): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) linkat$auto(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x10000, &(0x7f0000000280)='(\x00', 0x5) shmctl$auto_SHM_LOCK(0x0, 0xb, &(0x7f00000001c0)={{0x2, 0xffffffffffffffff, 0xee01, 0x7fffffff, 0x4, 0x1781, 0x40}, 0x80000001, 0x71, 0x7fff, 0x400, @inferred=0x0, @inferred=0xffffffffffffffff, 0x2, 0x0, 0x0, &(0x7f0000000180)="6aa9f450cd41400ff19ce80c38955761650847da1d19a473ea07c5f21d47cae01adb43"}) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x180, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x30, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x6}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x10000}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x1}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x34, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x8080}]}, @NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xfffffff8}]}, @NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xd}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x48, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xd2be}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x30}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x7f}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x9}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x3305}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000000}]}, @NFSD_A_SERVER_PROTO_VERSION={0x8, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x20, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0xa}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x7}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xdb10}]}, @NFSD_A_SERVER_PROTO_VERSION={0x3c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x1}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x6}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x1}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x643f}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xc}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x3c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xdcf}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x3}, @NFSD_A_VERSION_MAJOR={0x8}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x9}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x3}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x4008040) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000340)={{0x0, 0xee00, 0xee00, 0x0, 0x8, 0x80000000, 0x80}, 0x7f, 0x1, 0x7, 0x3, @raw=0xc, @raw, 0x5, 0x0, 0x0, 0x0}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) shmget$auto(0xd, 0x8, 0x24f3) r5 = fanotify_init$auto(0xc00, 0x2) r6 = open(&(0x7f0000000000)='./file0\x00', 0x165b42, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r6, 0x0) shmctl$auto_IPC_INFO(0x9, 0x3, &(0x7f00000005c0)={{0x2f8a, r1, r2, 0x6, 0x8, 0xd, 0x400}, 0x3, 0x699, 0x3, 0x80000000, @raw=0x3, @inferred=r3, 0x0, 0x0, &(0x7f0000000240)="167f8e1bb3be12be62beb1cc478d21bc47ecfbdd7652f63c70b22c0b817934deb82394f9d12ca9ab5ae0b365456f3e94584bb2", &(0x7f00000002c0)="c0c424974f565c3fc519"}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4743, 0x117) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r7 = socket(0xa, 0x5, 0x0) fstat$auto(0x2, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r7, 0x80086601, 0x7) open(0x0, 0x22240, 0x154) read$auto_debugfs_full_proxy_file_operations_internal(r5, &(0x7f0000000080)=""/117, 0x75) 4.470102843s ago: executing program 3 (id=2902): socket(0xa, 0x1, 0x84) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) shutdown$auto(0x200000003, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x8, &(0x7f0000000000)={@sival_int=0xccea, @inferred, 0x1}, &(0x7f0000000040)=0x200) timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}, {0x1002}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}}) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/dummy_hcd.7/usb8/bNumConfigurations\x00', 0x424900, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/kernel/usermodehelper/bset\x00', 0x88802, 0x0) write$auto(r1, &(0x7f0000000080)='\xab\x00\x1f\x80M\x03T\x1bq}\xc8\xca-j\x9f\xb6;#WB\x13\n\x9co\xc87\xc1F\x04\xa1\xa3\x81\x9a\x1e\x14z\xd3\x89\xc4BB\xbf\xc1\xaf\x1f\xd3\xaa\xd6G\x9d\xef\x0fB\t\xa7\xa5\x84\xc4\xff\xe6\xbf\xb4&\x1b\xac\xd5R})\xa1m\x10\x05\x10\x98p\x05\xf3\x87p\xc9\x88\xac\"\x9e\x93!\xbe\x9bT-\xe4\xf8\xb1\xd3\xe0\t\x97', 0x0) write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, &(0x7f0000000100)="1716e93133eb5aa2f422", 0xa) timerfd_settime$auto(0xffffffffffffffff, 0x4000000, &(0x7f0000001240)={{0x0, 0x6}, {0x6, 0x4000000080000000}}, 0x0) getsockopt$auto_SO_SNDLOWAT(r1, 0xffffffff, 0x13, &(0x7f0000000000)='/proc/sys/kernel/usermodehelper/bset\x00', &(0x7f0000000040)) r2 = socket(0x36, 0x3, 0x3a) r3 = fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) write$auto(0x6, 0x0, 0x100000001) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB='1\x00-'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = open(0x0, 0x14927f, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x40086602, 0x0) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r3, @ANYRES16=r0, @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x44080}, 0x44000) socket(0x10, 0x2, 0x0) 3.8674509s ago: executing program 1 (id=2903): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810003, 0xffb, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x200000000) write$auto(0xca, 0x0, 0x2d9) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) unshare$auto(0x40000080) semctl$auto_SETVAL(0x2, 0x5, 0x10, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/modules\x00', 0x200100, 0x0) io_uring_setup$auto(0xc, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/acpi/parameters/acpica_version\x00', 0x400, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/error_log\x00', 0x20c00, 0x0) socket(0x2, 0x5, 0x0) pipe2$auto(0x0, 0x80) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) 3.632938843s ago: executing program 5 (id=2863): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff010}}) (async) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 32) socket(0xa, 0x1, 0x84) (rerun: 32) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x7, 0x2, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x3, 0x0, 0x200, 0xd, 0x0, 0x9, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x29, 0x80000, 0x6) (async) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x734f, 0x3f, 0x4, 0x12b8960a, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0x3, 0x9, 0x400006, 0x6, 0x81, 0x4, 0x1cd7, 0x8, 0x2000, 0x203, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x2, 0x104, [0x0, 0x3, 0x8004, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x5, 0x0, 0x9, 0x0, 0x40000000, 0x0, 0x7, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x3, 0x40000000000000, 0x0, 0x0, 0x0, 0xff, 0xffffffffffffff59, 0x8, 0x0, 0x3c3, 0x0, 0x2]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) (async, rerun: 32) r2 = socket(0x10, 0x2, 0x0) (rerun: 32) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, &(0x7f0000000100), 0x3, 0x2}, 0x10000}, 0xffffffff, 0x4008) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, 0x0) 3.367369782s ago: executing program 3 (id=2904): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20481, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={"063e43d730767fba3778fb7d82abee8b8a49f5806117bb0bb5a5fa3eba45d3be", 0x3, 0x2, 0x80000000, 0x82, 0xfffffffffffffff8}) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000400), r1) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd0, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_COORDINATOR={0xb2, 0x1e, 0x0, 0x1, [@generic="9bf17bf549028fb027a79166ad00bcacf96d701be6d30683ec2124695b7f8f854ef74c53fbe1848317789b3928fbec246cb196a4d856c2c8c0e56eb82c74cf8c85e6a239e3793c3a71bf33e9f87f272a23d01e14707d2dec974aa43871e018ad3f7157785a53bfe91b2937e0eb4a1311ff5d6cab05b2ef97071d8d4f56e5e3bdb776086814bb95569b37080b96b46f20990ab5b1cef82fed982b66aa3b202e54f06a801fb5aa", @nested={0x8, 0x159, 0x0, 0x1, [@nested={0x4, 0x150}]}]}]}, 0xd0}}, 0x40) 3.000580768s ago: executing program 3 (id=2905): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x3) r0 = socket(0x1e, 0x3, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000200)={&(0x7f00000001c0)="661b", 0x1000000000049}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) pidfd_open$auto(0x1, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) capset$auto(0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b47, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/cache/index3/type\x00', 0x22340, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/247, 0xf7) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000300)={"969d2926a627af0881b63476e2b4d22240a6b280923a3624f66aeca9ea73e1dd", 0x6, 0x4, 0x80000, 0x5, 0x3}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0xfffffffffffffffe) r4 = socket(0x11, 0x80003, 0x300) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000001300)=""/4096, 0xfffffeba) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) r6 = socket(0x27, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) acct$auto(&(0x7f0000000000)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xd2\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\x8f\x17\xfc\x1aK^\xb1\x8b\x96\xfdPw\xa4M@.(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x021\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3dr\xfd\f\xae\x96u\x91\x11ru\xa5\x9f\xec\xe7\x99\xbe\xcb\bN:\xe9\xf0KFJ\aD\xb4(\x03h\xa0%\xf6N\xeb3\x1c\xdcQ+\xa2\xc1wM\xde)J[\xe6O%\xa1\xda\xa9\x9c \x18pD\xb0P\xa3\x86\xfd[\x05\xdb\xcc\xb4d\xab\xc4\a#3.\xfb>\xb0\xf7\x8cp\xab\xd1\xaa\x9d\x8djz\xb2\xcf\xa5\xb5lS\xd7\x80\x8eI\"eH\x9f+o\x8d\xff\x7f!\x9f0\xd2n\xb8/Gy9\x9f\x85EP\x99\xf4\xfcN\xfe\x1e\b\x84G\x8a\x0f\xab\x14vVy*\x1f\xe6\xdf\xe6^\b\x1ecm\xc5\xfe+\x8d\xd5\x17\'oQb\xc1\x89l\xd2\x9d7C\xbf\tdB(\xb6\x93\xdfj~`\x94\xc2\x99t\xbf)|A\x05\x1b\xf7^\xd9\xa1\xee\xfb\'\xaa\x13\xb33\xe7\xc3G!}\x18\a\xbd@\xea\xfd>f\xb7\xb9\xe4\xb1\x1b\x1b\x95\x01\xe4i\x82\xda\x82~1cT\xdb\x92Q\xbd\xc1z\xc0\xf8\x88~\xe3id\xceg\x98\x8a\xa0Rq\x0f^\x11r:\xe1\xd1a\x15\xbb\xd6]\xc6\xfb\xbf`\xd1\\\xfd\xeeW\xc4\x0f\x10bv5\xa2\xde|&\xee\xaf\xa9Y\xc1\x1d\x8a$\xd61Uq\xe3\x94\x9e;8\x7f\x18J\xaf\xbd\xf6\x950W\x03\xdbrf\xe6\xfb\xe5\xf1\xc4a8\xcfo#R\xaa\xfb\xbc\x00') writev$auto(r7, &(0x7f0000000100)={0x0, 0x7111}, 0x4000000008) 2.828953341s ago: executing program 4 (id=2906): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, 0x0, 0xc050) fsconfig$auto(0xffffffffffffffff, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47e5ca3b8343ea7d7b90f3557fd5f312dc", 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r2) pkey_mprotect$auto(0x100000000, 0x9, 0x6, 0x80000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), 0xffffffffffffffff) clone3$auto(0x0, 0xfffffffffffffff8) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400d0}, 0x4000000) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC_HINT={0x56, 0xc8, "692500000000da588923faf3fd38aec014aaffb72063771b505504664e8ec90f6c3516b464ef05000f6405ce76b8d12ec6d022fc3303eda354db571915f7b6d89b022ad36669d683c88e496c2b85d127e15d"}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x140088d4}, 0x80) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r4 = socket(0xa, 0x5, 0x0) fchown$auto(r4, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb9, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, r4, 0x5, 0x7, 0x7, 0x9}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) 2.508340108s ago: executing program 3 (id=2907): ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001340)={{0xffffffffffffffff, &(0x7f0000000000)="f331791a921dc264fcf2ca56cc0ec9550e47106a917521a53428fe8370ff53546859fd7e59fd54c849b1b6043bb2eb4f639bd2cc25af4162fc242dfd1471063e283f960d7eb4caa2805b13206ceb403f8d2549cef9728e9985c306c1352052d968505e4f151adc8c34c1c6f2a684e74f51a270ce9acfd4f0bbb213ac4c9d9e6a337251a71c9de88e0d2f45e0a068569b8f46c7f9e6ea40a3c99903f61d32f48bac020cdae538519edbaa6ab83c11a2322992d4945a585c75bf081c054c4c95dc553d5f4d96ddf792caf99dea81f2c9f44963a35a6cac9327f2", 0xffff, &(0x7f0000000100)="8d621d3bf33c3d", 0xf, &(0x7f0000000140)="d58a25c6c4d55a49c501edda305f11504bdd3665f6f725f3369b12f2c00c9d5a8fb21fd713ff7d5c4122418f91319ba05cd841ef181a6fad6229840b6c5dbd0a1f9136b5960bfce77ba21072f1b12e9e734ed44e641545718ec8", &(0x7f00000001c0)=0x3}, 0x56a, &(0x7f0000001300)={0x7f, 0x3, &(0x7f0000000200)="eaa16b7db3379d827f1aa35012f320d8a36316f97e0886ee1c0217f89aa9d90a0306bd9909852936a9131a514b6cea285a97343da61778e64c4a7767a980bd879130777d8b3563bd608f39731d85e4bcd58dd83842931fd5e870f9285280c94cb80e26da5c177ce302f0e9aab9950a1bdcca12e67bb7229004d770c008bafb5568f8cb506fe3734da0ead70241e5be5bdf26405c82b7ef5dfd6fcc9a5fc05105ad44ddce5d840aecb70f6a2cff48504644c0ac7aecb91634a74d108536d65ebf7aea2a4efbb77f01f63904f199c4ec5502e61204de46efb1de3dd5d0f5e453", &(0x7f0000000300)="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", 0x4}}) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(r1, 0x51, r0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001400), r0) (async) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001400), r0) capget$auto(&(0x7f0000001440)={0xa92, 0xffffffffffffffff}, &(0x7f0000001480)={0xf, 0x8, 0xa}) (async) capget$auto(&(0x7f0000001440)={0xa92, 0xffffffffffffffff}, &(0x7f0000001480)={0xf, 0x8, 0xa}) r4 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f00000014c0), 0x8a100, 0x0) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f0000001500)={"7436188e6bc5293d147f1b2b9c346723f2db1140280ff44d6a65c6ac430290fd", 0x2, 0x8000, 0x3, 0x4, 0x4, 0x0}) capset$auto(&(0x7f0000001580)={0x4bb, 0xffffffffffffffff}, &(0x7f00000015c0)={0xc4f, 0x9, 0x2}) r7 = clone3$auto(&(0x7f0000001600)={0x4, 0x7, 0x1, 0x7fffffffffffffff, 0x25, 0x80000000, 0x2, 0x6, 0xd561, 0x0, 0x7}, 0x9) gettid() (async) r8 = gettid() waitid$auto(0x8, r0, &(0x7f0000001680)={@_si_pad}, 0x7, &(0x7f0000001700)={{0xf, 0xffffffffffffff81}, {0x1, 0x8}, 0x8, 0xfffffffffffffc01, 0x5, 0x9, 0x7, 0x4, 0x7, 0xf, 0x8, 0x100000000, 0x7, 0x80, 0x8001, 0x100000000}) (async) r9 = waitid$auto(0x8, r0, &(0x7f0000001680)={@_si_pad}, 0x7, &(0x7f0000001700)={{0xf, 0xffffffffffffff81}, {0x1, 0x8}, 0x8, 0xfffffffffffffc01, 0x5, 0x9, 0x7, 0x4, 0x7, 0xf, 0x8, 0x100000000, 0x7, 0x80, 0x8001, 0x100000000}) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000017c0), 0x30000, 0x0) (async) r10 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000017c0), 0x30000, 0x0) r11 = ioctl$auto_NS_GET_OWNER_UID(r1, 0xb704, 0x0) r12 = setfsuid$auto(0xee00) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000001800)='/sys/kernel/debug/netdevsim/netdevsim7/take_snapshot\x00', 0x101000, 0x0) (async) r13 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000001800)='/sys/kernel/debug/netdevsim/netdevsim7/take_snapshot\x00', 0x101000, 0x0) openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000001840), 0x551001, 0x0) (async) r14 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000001840), 0x551001, 0x0) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000005c00)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005bc0)={&(0x7f0000001880)={0x4318, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x2e8, 0x5, 0x0, 0x1, [@typed={0x4, 0x158}, @generic="3e1d319cc18cfd21a172ed3a5f0b2368dbd316ddfe4ac73554268501946b0bf3995d4558c8f9fa098f7a10f85d4708705bdd2c4daa5634229daeadae7d4299ee32b4f95b68b884cd750614e706aa7787db76f0b03410334c0cefc1b01358f29ec3345b30247dae0f26d448c73ccb31a00f35385f0174e99fd70067f04984ddf905e59c0d46e8378a1c8f518713e5c6baad4c8b32083880550666f67a784de58ff801882d1d11d828abcd704582e19e9ea1be98adc22cc7bb476debe53f9712b17ea5a6f4cfefd44ecd0b1792e5b49db903a7fb7b28c878a217538af471a921a15f5292de9b443ba4b1f8a4c30d9a8f", @nested={0xbd, 0x8e, 0x0, 0x1, [@typed={0xc, 0x4e, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x126}, @generic="682b3db8ea6a42b4134440eb01e5e895c499467f9ab0260fc5e6f7ba6efa1c00ffde6d7d6102ee1463b07793b2c3d779dd46dd6097175b551cb805ded1c889a45be92a929788f916652ca4194d3dee2de9696decb3f30c18ad45496d1b5eb5a6323c98186d7d88cf", @typed={0x8, 0xc8, 0x0, 0x0, @pid=r3}, @generic="043c624987bbdd268bf8d0fd52e1de399178962bc9ee0ef2a36b84c2b3c9d676e0e99b26d3ceeee8647b4df63daf48d0b2d8a01aedf7145282"]}, @generic="80adcd004b794e2c76d205d9208b8e0021e08525b95cc9e8fbe5e2b57b9706c5f94617ea1f6b442bdc28608aa0fafe88d7433223753661072fbe0fed8007dcd531c4acd58d90b3b4602c8c11a059b340a8a6fa9eabb1a39e2c", @typed={0x8, 0x143, 0x0, 0x0, @u32=0x7}, @generic="584a9439e9a29f5ec5ab45cdd665f2a3ac61f238438118980424820fef6f801ffeffb10a8aa1361558be35ac4c9176b485f92aff96eb33d8f204e00c40ca0f35e4d9e860839ceb20313f8b48d163a314e14ca43cdcf5c666a9e2c3ac1b7799ec221f0f52f77b5e81ea72705b03a562562a700d881a3d3b06613503ca56fe3c27497dc79965e4bdc9212643632076fb4a4108a38a3b7bd8ea58f52154ed8ecad0bd1a750920879e", @generic="f747bf71f8b3a377c24a26ade30c4de100cab4ce3a7df466f93cacb9c836eb39ec775cbec2ddfe43a4"]}, @TIPC_NLA_MON={0x202c, 0x9, 0x0, 0x1, [@nested={0x2028, 0x10f, 0x0, 0x1, [@nested={0x4, 0x47}, @typed={0x5, 0x18, 0x0, 0x0, @str='\x00'}, @typed={0x1004, 0x9c, 0x0, 0x0, @binary="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"}, @generic="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", @typed={0x8, 0x47, 0x0, 0x0, @u32=0x5b7f}, @nested={0x4, 0xf0}, @typed={0x8, 0x96, 0x0, 0x0, @fd=r4}]}]}, @TIPC_NLA_PUBL={0x2af, 0x3, 0x0, 0x1, [@nested={0x101, 0x103, 0x0, 0x1, [@typed={0x8, 0xf6, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x10}, @typed={0x8, 0xac, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x14a}, @typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x84}, @generic="8200fe338a37894cf44c54cd0c8988dae7f01343c746b0e959579a5b7b1d05c8cd541186b363d6ca063a684ed19166423890aa8560328431c9886914cd9a56b003a1a69ee9198dd1ed02f72c381554f19f14ece28917a9e19b00b2f1d3ad52b96cc9114bc85ae173e0d4fbd16670e61a2a63258966a1c6278a921ec86785c7bc06da491c09a0b757af130508bbc2b64b794e3881cd9ec74e3be56dc9f4abbc169b9b1db5ed85fbb2cbb93d05a802655df689a9335fffaff7fe028dab53f97522553038850802f9ed6c627601ea4df24ad163ca706f604baae7"]}, @generic="389c2818b6637acbfc390ad10d43f32fc5e5547e1a69e45b5ccb65e6c0c4fd634c30d95213be7a7bdf0529ab3f3917d545af26a04eba66fe570f49ff159a9ea2b547dd760db970620613cd8180c7bfdc59bd90998c36a0b3c08dcf626b2fdda304b34066fa780d9fbea0433e", @nested={0xf8, 0x26, 0x0, 0x1, [@generic, @typed={0x8, 0x70, 0x0, 0x0, @pid=r7}, @generic="10b0df562f37f571b892eb05146777f5f75284c32d02925dad9c0f713fd706f34ff8111aa5b925e52d9b78e2b8a3e620", @nested={0x4, 0x5a}, @generic="587e0bbfefafa33f092f9b6e04fa35125540015ea454bf5ca910f950f0d3ddc6c89ea7378ee6025c1ee745826ed62170d37a9bd7fbf1924ceb85a9559c521b566e4b62882e18b932b19e32f3e9061f826bdfe925056bb70c82013b50337af2153330cd848f6fdc5034f19526c8fa2db84ef0d47ac34eb92c392eab3f4eedbe9f649bd478dce24a35327e6db161a63c35193fbfd80a100a023ffb9fc5e51a32fc74734573", @nested={0x4, 0x59}, @nested={0x4, 0xeb}, @typed={0xc, 0x155, 0x0, 0x0, @u64=0x10}]}, @typed={0x8, 0x133, 0x0, 0x0, @fd=r0}, @generic="73c65dc26ade5865b7e7133dd598ca6a24bbb77ed8d7ac936e02373c303967b6ec282f11098807f14e17bc5ad548df3eebd5b49a6bbadaa54d515c"]}, @TIPC_NLA_PUBL={0xdc, 0x3, 0x0, 0x1, [@nested={0xd8, 0x156, 0x0, 0x1, [@generic="c5cb2b538a875c24b14f20ca8b71cf0edc36f09dc148e3dd1e4e5019c4fd9ec53d3304adb06a84f1cedab6e95664d11bbc76b0f769f89a7cf2d78055b918d54ee199168d488cd328810d44a9e442750dbe779c13b3db23ffdb5fcef9f9b5ec15afae9aea137a84ff7c0ff47a6ad1094248e6c040a0c9ed64bfd0952cfb86cdf38944d6b1a2c0307d8509fad769220524ab28ddd8756ad5d0c696bb925cfa75b06eccc7d4c12fafb9799804e099dd042949cc6b69261dcfd89eda32bc18b35a0656194d6ed9ed526e10c31aebc8ed58ecc0c4b4a9"]}]}, @TIPC_NLA_PUBL={0x4b8, 0x3, 0x0, 0x1, [@typed={0xc, 0x23, 0x0, 0x0, @u64=0x400}, @typed={0x8, 0x0, 0x0, 0x0, @pid=r8}, @nested={0x25d, 0xba, 0x0, 0x1, [@generic="5adab81b2464a52d1549977dbb436d2973f4fdaa3ff0fed686f3b43d0c28bea1f74449f2f45c53a98d216949bbe38b76", @generic="d4544b2954448cec27702996de9eec88d0a5744ae9f110c690b27f05b349875a4f970446280e8484b46b4c140b5b611137c902ccac369eae02de818a547521320bc5ab57d67066fa20c8a6ee9b012356c966207f11656f1a2fc2d296db53147fa2a1262f960ffe71d60a7f1a99da4b4345a3b60b64e138e6496586d5121d6909a5767931200ed33e9f18d64bafcf799c8c31fb52bf1a01edb430522df83d8b51d2cbc8aa399125ea5cf7613941901d393a27a12b7cc7ca9b418bc0f0225e", @nested={0x4, 0xf9}, @generic="0adb9399d2996393f7a82d216797f49312b9fbc4ff73d2a23c7cd9a9b899b4f774a6902ae025da51fa86de7742cbf967fe0681362f1ea68fc80d84326ebaa546da735436dbc5dafc0546a777461ad761ab6ba36a18db5a2cd06f9a4030911c234f148f8078f710e0e823465cd49e7968eada498e65bfe73386be7a105597584353a510ebd12a75be45d4c847e650d9e07c3d7c9a3ae411f2f3a79373b3c3130447a499cbb193567d492e726ecc6bcfbf6c2f4988e62d581e3b0be1f12c61b43790185b032a49453f6795dfdf", @generic="9ea43e3814504d2ef22cd04423fcc51d535751a465682948369e7a0028e17db8f2d7eab05ce40efb5751e5f560ce7bda68c4196b2bf9ec5951c9bdba40d7732192271032ace6417350e665b9f03c535fe2ebff79bf78a87bf2a86a8a0efa146f08679964cb7c1c2537ee59a21171bd7af876b0139185cbd3b1596bbdd0904df708e537d2273dac51a4d0c1f657589c57f89205455c853c3f0059e6"]}, @typed={0x8, 0x1794, 0x0, 0x0, @pid=r9}, @nested={0xa6, 0xbc, 0x0, 0x1, [@nested={0x4, 0xce}, @typed={0x4, 0x54}, @typed={0x8, 0x7c, 0x0, 0x0, @fd=r10}, @generic="4471252c3990756bf275a94af8b69e05a4be51b3b5243d52fc7d6a1ad53e96c3b9c5b8cdc01073d96f1a01e479d0a4c1a140494dfee35def4d2f6ab18dca44cf57df7b7d339071ca72e44a30deede9b3050ae19695e659c69349c53e8b184eb128e9e44860464d9e005855570eb1de949a227be5ba01a7cf46b825db638442e0c50b29cc7626e8ec208a932c4712a5eb2b29"]}, @nested={0x8, 0x9b, 0x0, 0x1, [@nested={0x4, 0x139}]}, @generic="85ae3a71df1ee22ad9128dc7b53f9c72efa962559706f32266c3df58c87718b75e879aa53e1c45decdab6902d5391c22faa601129c244a3d5d6b92c9d6e5adbd16afcd2051b7fa637b8deeab790bda1c670a6a965424636cc3c0fddf7e8ef2f4da7a0f9f2c6171f223e44c93fb559bad01fb1036a816f2b92c654284860038821c0b8e768700e7e6fa0141111626b6e634f226ae06ef20b14f2f1b692b4d43ed4b4a87e608428a853a7b4ce395a96a06d83cf83b38a65717", @generic="75511c9d1a84da434f0531d69b96083d8d2936ef8ae63ff33ddb115a43263f4a2a21bf0a7f20c5650f85a8e4d5c2aad75735d53d5dd23be0efd7e74f695dd4aa85dda7d75136e1bfcbc22add10a43009b0e66ab1322e23c0c4d1948d39a44ad2a8f1baaa7bcb4c84470df20a59667f7b7085bc926150fb2cf25835407d96b275309330f9cb521f7173bc2d1855209cf7980364f59db1b3c6a51c2bb72c7405c6940d08e8908a150efcd6b277220377eea845a297fc445147bd189f605df0f671", @nested={0x8, 0x11b, 0x0, 0x1, [@nested={0x4, 0x9e}]}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @TIPC_NLA_NODE={0x228, 0x6, 0x0, 0x1, [@generic="5e7076c1777dad7dfbe3c6459a34af0fc429efae5f76f85495aba695b4e7e057df3da70360790a45b598ecb75dcef890ca2f8df2213901a77391f0d8f5668f615e9c42999ff77357ba0cdbb5441e884267b4d175d631ade2b22212359d2c59003a1a2a201110c9dd68fa871862c4ff4c55aa097bc57963d4f1c925352d349b6f87f418fb6ef5de", @generic="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", @nested={0x74, 0x12c, 0x0, 0x1, [@typed={0x4, 0x157}, @nested={0x4, 0x15c}, @nested={0x4, 0xb8}, @typed={0x8, 0x64, 0x0, 0x0, @fd=r11}, @nested={0x4, 0x15a}, @typed={0x8, 0xa1, 0x0, 0x0, @fd=r1}, @generic="bb1adb13e07e8a8d7731b164113ae7d98180f3e1b989e7aa1c0052699b1e5ce3fad52f58602bb320c52d068ddce78a6709c29c1dcf3cfd012c6ae32e0c492b2842834660c7d34640b1915954bac218b4"]}, @typed={0x8, 0xca, 0x0, 0x0, @uid=r12}, @generic="8518f44276ce422de2d3ef1204c0b14a23a7f9c988a87991994b8ba50fbee98a6e0e50801382dd"]}, @TIPC_NLA_UNSPEC={0x1004, 0x0, "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"}, @TIPC_NLA_NODE={0x404, 0x6, 0x0, 0x1, [@nested={0xb0, 0x115, 0x0, 0x1, [@nested={0x4, 0x10c}, @generic="d3aad11ac70ac539c8857dd47da02a2a547fdd8283c04565965eba84dfca746bdf2316e62a7685514809afc9d83908af59298a137a86fed0f7de1dcf1039d9437b12e75fad6649ff53fda3d7d6b1ef5e4c40eee2c68a3af46073829c0e254d7e58ec994e81a1e83c8e8f93f96d27e481e1ca1164361d215abb1704276d955d5b4f985f163048ba5e14ed3b6d9927c17705313da8df6ddf7ef2372ad561eef04bc3774168", @nested={0x4, 0xc8}]}, @generic="3b09c17af2b1f4a5df85dbbe892d66c09d77d30d8316d9f5cb123a9a8b0150b3daaacb24ac097b4482b5f3a7d9cb133cf98f2d8ff02eefeb8a26f8a50ee3cd81429ec771ab5180740ff7d42f1b407c876d24d1f5555ac8839be6c5ce12446e08462ff0cae34860d3aa9924d3bece9afeb63d5df566e5538ec22484059639fa54f8d489753edf8370449f2bb66e2ce50c60ddf02b486de8a2b7", @generic="323246c2395e53290c36da93549e7a25ab759ee913a3305e4cc314a4c7b6b978c2a6726ef22f84d8d165c46105677cc18ed7c5c99863d15262addd46b2", @typed={0x8, 0x4, 0x0, 0x0, @fd=r13}, @generic="c1786b6e839cd62ec92f6ef30360b64f7f59cbfd06d85b6eecd3e3748cc41040738abed37311698b2a39cf9f4d131377f4e9abd33c3c06ec26a40d62756dbc0b45e64ad16001c07904655c188fe0185042ae80fc17db68935ba1755756f0644ca144808b6429447a97c0ea437b193dab0d72d7c4e5ee998d9f81f0520203632a9d4c089783162c5d23790da8eb6a42f40a3c2365325fd0e2fdbb1ab8719f462c01761747e514c6fe1de9fe697dd61bfb751baf468b739a57fa3c0bfb01e4d1fd89d704bda91e58a82e36e34eaa02eae32b8e8810a6d9d05eec1c", @generic="3933a2a99fcc115e9107d5085dc3998f42ee2273e6b6892ea0aae67592a3bf628a2106ad657826b2412d073df4bdb9f137ec61e9e6c6e9c66f35", @generic="17aa8192f4b0bca73e4dded0e9c0a40af43d2fa4c937ad09e719230c7180bb72f42eb33a4e80111baa23d96d79afcc93848c54ad97916d33d79695d8422959defd57c529fb00fb4601ed14550ceeb2f5dd7e18d1e216414724056622b271e1575e6216899c5384023ee9", @typed={0xe, 0x2, 0x0, 0x0, @str='\xb0)]-s*$/\'\x00'}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r14}, @generic="27432dec21aca068d037ba51ad94ab7009594115cc49b07813251ae46c3c15ff34ba15bda189bb8b5c0b159e7f536cd3dc2d38cb02138b9657e041ba16a1d8eca3a6270861e95084b0768dad7ca33f32db971e5c472e5a635a741eaca5c9a05ec0856da3580f82067615f4bb76ddaad39dda7b8281ace2110309d980ac63ffe4e332912448f61987580ad8a25a326b060b58c7d201b77c787b5ac74407c570c3f9c196696942291156a0ff1a9717d0aedcabb0f7ab752a00913c30d67a26046c9f40ebb4d207d932f553f1b32fbe4ca3f45dcd78027deecb9d1f63f2"]}, @TIPC_NLA_MON={0x17c, 0x9, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x16d, 0xeb, 0x0, 0x1, [@generic="a4e62561b654853e50f7656666f405b40edaffa051d5d78bee94730c5b20830c658d6dc574f9866c90dc79893c61c98002131d1db97f3a77a4b70077bb5c2af2edc3ce193934cde6e589202ee5fe6335f9801bd98975b263d434b03fff9d5456739e1ef890df968062fc0df9412f0b37d175661d4907339afea57a5dcb7dea178791492f", @generic="0ccee8bf6881ff32ee910721d8f04b1580e37a703fd0c269ca6790b67670725393ac2c3422981422d7af306803b5d3990d0c61bf5f88193ea48950694fa0dfabe6c3ab12ace754afe89fb43932c477097f9f6b9f292a8748070175fcd35b253e2b78efc6e42151073332b41dbe32a2ef258cfa71340133680cead1711e24c7fe5bd9cba33b2685bb1bfd40c477bd5172acefbd9d483424802fa4074b5f13eeab53e660786ad4a57e5b7a183decc32d7a69b72889f00f4b7cdeb0088ec174dcbaaea21a7bf82e51678378cd8ad09c74209aaefee77cb083e1e01120c448c6aa2153cca46b6b"]}]}]}, 0x4318}, 0x1, 0x0, 0x0, 0x84d4}, 0x4008854) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000005c40), 0x0, 0x0) (async) r15 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000005c40), 0x0, 0x0) read$auto(r15, &(0x7f0000005c80)='$,\\&\x00', 0xc) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000005cc0)={0x7fff, 0x9, 0xffffffff, 0xc466, 0x400, 0x7fffffff, 0x5f, 0x0, 0x0, 0xf, 0x80, 0x53da, 0x7b9c, 0x9b, 0xfffff027, 0x7fff, 0xfffffffd, 0x80, "5e99a405b6f2f983dc6e77cff4a9471832ccdb0217b5c9d60c6a9d2e402522b370911464"}) (async) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000005cc0)={0x7fff, 0x9, 0xffffffff, 0xc466, 0x400, 0x7fffffff, 0x5f, 0x0, 0x0, 0xf, 0x80, 0x53da, 0x7b9c, 0x9b, 0xfffff027, 0x7fff, 0xfffffffd, 0x80, "5e99a405b6f2f983dc6e77cff4a9471832ccdb0217b5c9d60c6a9d2e402522b370911464"}) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005d80), r11) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r16, &(0x7f0000005ec0)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005e80)={&(0x7f0000005dc0)={0xac, r17, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_VENDOR_DATA={0x8f, 0xc5, "f60d36be93b50a9ab5d2f09c41a3d9461b3ab7b5693803aa0400e282d975af399c8d00dddaa8e1c18fe0413105157e7ac157a821b62d5976b62f36eb5f8248b6ed5bd8166c8d519d7737463b354f2044c5843e36f9f089e7d815e1a34b00c6a85f2e2b88c1aaf27af74223898d3dd48924171d01c1b600d36e17ef28c1884b74c1cf4428350ef8b77e0e3b"}, @NL80211_ATTR_WIPHY_NAME={0x5, 0x2, '\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x24000088}, 0x24084004) sendmmsg$auto(r16, &(0x7f0000007040)={{&(0x7f0000005f00)="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", 0x2, &(0x7f0000006f40)={&(0x7f0000006f00)="2707d00df9bb474c", 0xbebc}, 0x6d, &(0x7f0000006f80)="7e987ccb20661ca74ee116e94afb77339a4a7d74580c7b5295201deb5e41db52e4146872ed5e7a7a5780e22e0ea29b5b230f4d31541c70cb20c1db1fde4f79682eb52ac05999e09ad0bcb8ddde9dce10da247eb3ecf909af952a25c42cea9b78949e09d2bc8dc7a9fcd1e96d09701fd918b3f19c572d6247106a1ac1c7e20df14a8820416811a42b03f952e34213220e0db0fd9c372e0f1de13a574aea738231e6b89add3ec3d3d3c5b86caa81d56c828a59c0bd171f1526a2bd", 0x7}, 0x8}, 0x48e8, 0x5) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000007080)='/dev/audio1\x00', 0x202000, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r11, 0x5, &(0x7f00000070c0)={@_si_pad}, 0x2) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r11, 0x7a0, 0x0) getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x2, 0x28, &(0x7f0000007140)='[\x00', &(0x7f0000007180)=0xbb0d) socket$nl_generic(0x10, 0x3, 0x10) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r18, &(0x7f00000072c0)={&(0x7f00000071c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007280)={&(0x7f0000007240)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x6}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x2}]}, 0x30}}, 0x0) 2.238020765s ago: executing program 5 (id=2908): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x7) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x24040, 0x0) inotify_add_watch$auto(r1, &(0x7f0000000080)='./file0\x00', 0xea) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x0) socket(0x10, 0x2, 0xc) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x14000, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r4, 0x0, 0xfffffdf1) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0x0, 0x10000020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) memfd_create$auto(0x0, 0x4) statx$auto(0xffffffffffffffff, 0x0, 0x200, 0x2000bdfe, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4004ae8b, &(0x7f0000000080)={0xfc}) socket$nl_generic(0x10, 0x3, 0x10) 2.109212084s ago: executing program 3 (id=2909): mmap$auto(0x0, 0x7, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x50) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100000a00) r2 = socket(0x2, 0x1, 0x106) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0xa901, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) madvise$auto(0x0, 0x6, 0xfffffffc) r3 = memfd_create$auto(&(0x7f0000000000)='($\x00', 0xa) statx$auto(r3, &(0x7f0000000180)='./file0\x00', 0xff, 0x0, &(0x7f0000000280)={0x4674, 0x3, 0x7, 0x288, 0xffffffffffffffff, 0xee01, 0x1, 0x4, 0x8, 0x17, 0x81, 0x400, {0x4, 0x6}, {0x3, 0xf9}, {0x7015, 0x98b}, {0x4, 0xe}, 0x654, 0x6, 0x0, 0x3, 0x7000000000000, 0x2, 0x7f, 0x5, 0x8, 0x5, 0x47, 0xaa59, [0x9, 0x3, 0x3, 0x6, 0x7e, 0x9, 0x3, 0x100000000, 0x6]}) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x1b4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_EMA_RNR_ELEMS={0x191, 0x145, 0x0, 0x1, [@nested={0x4, 0x158}, @typed={0x5e, 0x140, 0x0, 0x0, @binary="fdc347bbece0c30dd573cdad2bf185008bff9df4341fe9b0f5d2bff6e3ddc1a0d005f71035fe43987a7b2968e74b59c722e1f1051fe9c02e627f1219a11b57971b09f372abf04fce5115e3f71cfae1681fcc1adc5110ac05c5f5"}, @generic="4c6739b77572f724f2d18d245194597c806e50b66bf681a8249d8c01843670a50d1f2b8437e1c0a4ac2b423f1e7b92c9204888c9072254d03adcf0b86ed6e2fbdfce00db5ae2f5d5bcce32f5e824be6117cf8d9271b9d8a3f5f0f2a5535ef79a4643f4e0a0288342bab6eeeaf7da04f490dedaad2de7c3a102eb0253c64a91ef1651df83ce64bfd384d39b07bc143cc250a830dccc3d114997ad42cc4bc915efbe3463ac4da525f143053515795d14fbb50ba7b3b01aa53b44762f80af9022008652823d0ebdca7885eb9d11662e054b73e0acb2ee6c1ab46468d5a883cd6a7d76a77b1b5631da3e8a", @nested={0x40, 0x22, 0x0, 0x1, [@nested={0x4, 0x10f}, @nested={0x4, 0xb6}, @nested={0x4, 0x87}, @typed={0x8, 0x51, 0x0, 0x0, @uid=r4}, @nested={0x4, 0xe7}, @generic="b53862d5d0a0b61377399e05e8f4df81ec2e36a3b92bf58a77318b748d51333431ebfa45"]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x10}, 0x810) sendfile$auto(0x1, 0x3, 0x0, 0x74c) shutdown$auto(0x200000003, 0x2) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80005}]}, 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) 30.418405ms ago: executing program 3 (id=2910): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/content\x00', 0x2000, 0x0) pread64$auto(r0, 0x0, 0xf42c, 0x38) setgroups$auto(0x29, 0xfffffffffffffffc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/content\x00', 0x2000, 0x0) (async) pread64$auto(r0, 0x0, 0xf42c, 0x38) (async) setgroups$auto(0x29, 0xfffffffffffffffc) (async) 0s ago: executing program 4 (id=2911): mmap$auto(0x0, 0x4, 0x3, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup$auto(0x1, 0x0) move_pages$auto(0x0, 0x800000f54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8040) ioctl$auto_KVM_CREATE_VM(r0, 0x4048aecb, 0x0) kernel console output (not intermixed with test programs): 7cf9cdd9 [ 516.856449][T12669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.856486][T12669] RSP: 002b:00007f4a7b1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 516.856522][T12669] RAX: ffffffffffffffda RBX: 00007f4a7d216090 RCX: 00007f4a7cf9cdd9 [ 516.856549][T12669] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 516.856572][T12669] RBP: 00007f4a7d032d69 R08: 0000000000000000 R09: 0000000000000000 [ 516.856595][T12669] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 516.856617][T12669] R13: 00007f4a7d216128 R14: 00007f4a7d216090 R15: 00007fff60a9c758 [ 516.856666][T12669] [ 518.293458][T12695] FAULT_INJECTION: forcing a failure. [ 518.293458][T12695] name failslab, interval 1, probability 0, space 0, times 0 [ 518.331717][T12695] CPU: 1 UID: 0 PID: 12695 Comm: syz.4.1482 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.331766][T12695] Tainted: [L]=SOFTLOCKUP [ 518.331776][T12695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 518.331794][T12695] Call Trace: [ 518.331805][T12695] [ 518.331817][T12695] dump_stack_lvl+0x100/0x190 [ 518.331856][T12695] should_fail_ex.cold+0x5/0xa [ 518.331896][T12695] should_failslab+0xc2/0x120 [ 518.331933][T12695] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 518.331993][T12695] ? security_inode_alloc+0x3b/0x2c0 [ 518.332044][T12695] ? lockdep_init_map_type+0x5c/0x250 [ 518.332082][T12695] security_inode_alloc+0x3b/0x2c0 [ 518.332133][T12695] inode_init_always_gfp+0xcc0/0x1000 [ 518.332179][T12695] alloc_inode+0x8e/0x250 [ 518.332229][T12695] new_inode+0x22/0x1c0 [ 518.332280][T12695] shmem_get_inode+0x1e3/0xfb0 [ 518.332329][T12695] ? __pfx_shmem_get_inode+0x10/0x10 [ 518.332383][T12695] __shmem_file_setup+0x382/0x460 [ 518.332428][T12695] ? __pfx___shmem_file_setup+0x10/0x10 [ 518.332477][T12695] ? vm_area_alloc+0x1f/0x160 [ 518.332529][T12695] shmem_zero_setup+0x96/0x1b0 [ 518.332563][T12695] __mmap_region+0x24e7/0x2da0 [ 518.332619][T12695] ? __pfx___mmap_region+0x10/0x10 [ 518.332677][T12695] ? update_load_avg+0x1fd/0x1bb0 [ 518.332707][T12695] ? update_curr+0x71/0x4b0 [ 518.332762][T12695] ? __lock_acquire+0x4a5/0x2630 [ 518.332793][T12695] ? do_raw_spin_unlock+0x145/0x1e0 [ 518.332832][T12695] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 518.332889][T12695] ? find_held_lock+0x2b/0x80 [ 518.332933][T12695] ? rcu_is_watching+0x12/0xc0 [ 518.332997][T12695] ? rcu_is_watching+0x12/0xc0 [ 518.333037][T12695] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 518.333081][T12695] ? lockdep_hardirqs_on+0x78/0x100 [ 518.333182][T12695] mmap_region+0x35d/0x620 [ 518.333212][T12695] ? rcu_is_watching+0x12/0xc0 [ 518.333250][T12695] ? __pfx_mmap_region+0x10/0x10 [ 518.333283][T12695] ? cap_mmap_addr+0x4b/0x120 [ 518.333328][T12695] ? bpf_lsm_mmap_addr+0x9/0x30 [ 518.333358][T12695] ? security_mmap_addr+0x71/0x1e0 [ 518.333394][T12695] ? __get_unmapped_area+0x255/0x3e0 [ 518.333439][T12695] do_mmap+0xc63/0x12f0 [ 518.333486][T12695] ? __pfx_do_mmap+0x10/0x10 [ 518.333524][T12695] ? __pfx_down_write_killable+0x10/0x10 [ 518.333576][T12695] vm_mmap_pgoff+0x29e/0x470 [ 518.333626][T12695] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 518.333670][T12695] ? do_futex+0x192/0x350 [ 518.333707][T12695] ? __pfx_do_futex+0x10/0x10 [ 518.333749][T12695] ksys_mmap_pgoff+0xe4/0x610 [ 518.333789][T12695] ? __x64_sys_futex+0x358/0x4d0 [ 518.333825][T12695] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 518.333865][T12695] ? xfd_validate_state+0x129/0x190 [ 518.333907][T12695] __x64_sys_mmap+0x125/0x190 [ 518.333945][T12695] do_syscall_64+0x10b/0xf80 [ 518.333989][T12695] ? clear_bhb_loop+0x40/0x90 [ 518.334029][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.334062][T12695] RIP: 0033:0x7f0e7579cdd9 [ 518.334088][T12695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.334118][T12695] RSP: 002b:00007f0e766a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 518.334150][T12695] RAX: ffffffffffffffda RBX: 00007f0e75a16090 RCX: 00007f0e7579cdd9 [ 518.334172][T12695] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 518.334193][T12695] RBP: 00007f0e75832d69 R08: 0000000000000401 R09: 0000000000008000 [ 518.334212][T12695] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 518.334230][T12695] R13: 00007f0e75a16128 R14: 00007f0e75a16090 R15: 00007ffdf620dc48 [ 518.334273][T12695] [ 519.464263][T12718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1487'. [ 519.649587][T12676] ima: policy update failed [ 519.685378][ T30] audit: type=1802 audit(1843123187.905:20): pid=12676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1474" res=0 errno=0 [ 520.396352][T12738] FAULT_INJECTION: forcing a failure. [ 520.396352][T12738] name failslab, interval 1, probability 0, space 0, times 0 [ 520.461353][T12738] CPU: 1 UID: 0 PID: 12738 Comm: syz.4.1493 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.461417][T12738] Tainted: [L]=SOFTLOCKUP [ 520.461453][T12738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 520.461477][T12738] Call Trace: [ 520.461490][T12738] [ 520.461505][T12738] dump_stack_lvl+0x100/0x190 [ 520.461556][T12738] should_fail_ex.cold+0x5/0xa [ 520.461605][T12738] should_failslab+0xc2/0x120 [ 520.461648][T12738] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 520.461710][T12738] ? skb_clone+0x190/0x400 [ 520.461759][T12738] skb_clone+0x190/0x400 [ 520.461797][T12738] netlink_deliver_tap+0xaed/0xcc0 [ 520.461850][T12738] netlink_unicast+0x62b/0x850 [ 520.461905][T12738] ? __pfx_netlink_unicast+0x10/0x10 [ 520.461968][T12738] netlink_sendmsg+0x8b0/0xda0 [ 520.462027][T12738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.462082][T12738] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 520.462146][T12738] __sys_sendto+0x468/0x4b0 [ 520.462203][T12738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.462255][T12738] ? __pfx___sys_sendto+0x10/0x10 [ 520.462329][T12738] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 520.462371][T12738] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 520.462468][T12738] __x64_sys_sendto+0xe0/0x1c0 [ 520.462528][T12738] ? do_syscall_64+0x90/0xf80 [ 520.462573][T12738] ? lockdep_hardirqs_on+0x78/0x100 [ 520.462620][T12738] do_syscall_64+0x10b/0xf80 [ 520.462666][T12738] ? clear_bhb_loop+0x40/0x90 [ 520.462718][T12738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.462759][T12738] RIP: 0033:0x7f0e7575d60e [ 520.462792][T12738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 520.462831][T12738] RSP: 002b:00007f0e76661e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 520.462869][T12738] RAX: ffffffffffffffda RBX: 00007f0e766636c0 RCX: 00007f0e7575d60e [ 520.462894][T12738] RDX: 0000000000000024 RSI: 00007f0e76662000 RDI: 0000000000000008 [ 520.462918][T12738] RBP: 0000000000000000 R08: 00007f0e76661f04 R09: 000000000000000c [ 520.462941][T12738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 520.462963][T12738] R13: 00007f0e76661f58 R14: 00007f0e76662000 R15: 0000000000000000 [ 520.463012][T12738] [ 521.365878][T12750] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1496'. [ 522.086228][T12757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'. [ 522.603860][T12751] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 522.659633][T12751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 522.698657][T12751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 522.705553][T12751] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 522.714719][T12751] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 522.814251][T12751] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 523.413343][ T5884] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 523.808232][ T5884] Bluetooth: hci0: command 0x0c1a tx timeout [ 524.593398][T12793] ubi0: attaching mtd0 [ 524.643806][T12793] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 524.663814][T12793] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 3 [ 524.682919][T12793] eraseblock attaching information dump: [ 524.688744][ T5884] Bluetooth: hci1: command 0x0c1a tx timeout [ 524.766698][T12793] ec 2 [ 524.770743][T11036] Bluetooth: hci3: command 0x0c1a tx timeout [ 524.770812][ T5884] Bluetooth: hci4: command 0x0c1a tx timeout [ 524.850428][T12793] pnum 0 [ 524.925432][T12793] lnum 0 [ 524.934658][T12793] scrub 0 [ 524.959520][T12793] sqnum 3 [ 524.966103][T12793] Volume identifier header dump: [ 525.007931][T12793] magic 55424921 [ 525.025915][T12793] version 1 [ 525.041478][T12793] vol_type 1 [ 525.056447][T12793] copy_flag 0 [ 525.072928][T12793] compat 5 [ 525.094307][T12793] vol_id 2147479551 [ 525.100359][T12793] lnum 0 [ 525.109849][T12793] data_size 0 [ 525.126023][T12793] used_ebs 0 [ 525.136200][T12793] data_pad 0 [ 525.151699][T12793] sqnum 3 [ 525.171567][T12793] hdr_crc 05ef0866 [ 525.190516][T12793] Volume identifier header hexdump: [ 525.761380][T12793] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 526.848275][ T5884] Bluetooth: hci4: command 0x0c1a tx timeout [ 527.239169][T12818] i2c i2c-0: delete_device: Can't find device in list [ 528.654512][T12832] Scaler: ================= START STATUS ================= [ 528.673811][T12832] Scaler: ================== END STATUS ================== [ 528.928270][ T5884] Bluetooth: hci4: command 0x0c1a tx timeout [ 530.313102][T12851] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1520'. [ 530.347654][T12851] mac80211_hwsim hwsim24 ›: renamed from wlan0 (while UP) [ 531.405385][T12863] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1523'. [ 531.538530][T12865] ksmbd: Unknown IPC event: 14, ignore. [ 532.946884][T12885] random: crng reseeded on system resumption [ 533.325518][T12885] hub 1-0:1.0: USB hub found [ 533.387568][T12885] hub 1-0:1.0: 1 port detected [ 534.123062][T12900] bond0: Unable to set down delay as MII monitoring is disabled [ 534.962471][T12924] random: crng reseeded on system resumption [ 535.821388][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1541'. [ 536.877687][T12943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1543'. [ 537.109670][T12898] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 538.622281][T12965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1549'. [ 539.865180][T12989] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1554'. [ 541.757496][T13010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1558'. [ 545.301836][T13054] Process accounting resumed [ 545.410941][T13066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1573'. [ 545.455605][T13063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1572'. [ 545.860282][T13070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1583'. [ 546.505820][T13089] kAFS: Invalid Command on /proc/fs/afs/cells file [ 549.530572][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 550.885250][T13185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1605'. [ 551.241218][T13192] netlink: 'syz.4.1606': attribute type 16 has an invalid length. [ 551.241244][T13192] netlink: 306 bytes leftover after parsing attributes in process `syz.4.1606'. [ 551.587139][T13197] FAULT_INJECTION: forcing a failure. [ 551.587139][T13197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.659856][T13197] CPU: 0 UID: 0 PID: 13197 Comm: syz.4.1609 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.659894][T13197] Tainted: [L]=SOFTLOCKUP [ 551.659902][T13197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.659916][T13197] Call Trace: [ 551.659923][T13197] [ 551.659932][T13197] dump_stack_lvl+0x100/0x190 [ 551.659963][T13197] should_fail_ex.cold+0x5/0xa [ 551.659993][T13197] _copy_to_user+0x32/0xd0 [ 551.660034][T13197] simple_read_from_buffer+0xcb/0x170 [ 551.660064][T13197] proc_fail_nth_read+0x1af/0x230 [ 551.660102][T13197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.660141][T13197] ? rw_verify_area+0xce/0x6d0 [ 551.660164][T13197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.660204][T13197] vfs_read+0x1e4/0xb30 [ 551.660261][T13197] ? __pfx_vfs_read+0x10/0x10 [ 551.660296][T13197] ? __fget_files+0x215/0x3d0 [ 551.660341][T13197] ? __fget_files+0x21f/0x3d0 [ 551.660389][T13197] ksys_read+0x12a/0x250 [ 551.660424][T13197] ? __pfx_ksys_read+0x10/0x10 [ 551.660463][T13197] ? rcu_is_watching+0x12/0xc0 [ 551.660507][T13197] do_syscall_64+0x10b/0xf80 [ 551.660546][T13197] ? clear_bhb_loop+0x40/0x90 [ 551.660585][T13197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.660620][T13197] RIP: 0033:0x7f0e7575d60e [ 551.660654][T13197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 551.660687][T13197] RSP: 002b:00007f0e766c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 551.660719][T13197] RAX: ffffffffffffffda RBX: 00007f0e766c66c0 RCX: 00007f0e7575d60e [ 551.660822][T13197] RDX: 000000000000000f RSI: 00007f0e766c60a0 RDI: 0000000000000004 [ 551.660842][T13197] RBP: 00007f0e766c6090 R08: 0000000000000000 R09: 0000000000000000 [ 551.660862][T13197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.660881][T13197] R13: 00007f0e75a16038 R14: 00007f0e75a15fa0 R15: 00007ffdf620dc48 [ 551.660922][T13197] [ 552.522096][T13203] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1610'. [ 553.060546][T13215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'. [ 554.784414][ T30] audit: type=1800 audit(1843123223.015:21): pid=13236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1622" name="sr0" dev="devtmpfs" ino=2843 res=0 errno=0 [ 554.889850][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 555.304210][T13248] FAULT_INJECTION: forcing a failure. [ 555.304210][T13248] name fail_futex, interval 1, probability 0, space 0, times 0 [ 555.381891][T13248] CPU: 1 UID: 0 PID: 13248 Comm: syz.3.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.381943][T13248] Tainted: [L]=SOFTLOCKUP [ 555.381954][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.381973][T13248] Call Trace: [ 555.381982][T13248] [ 555.381994][T13248] dump_stack_lvl+0x100/0x190 [ 555.382034][T13248] should_fail_ex.cold+0x5/0xa [ 555.382076][T13248] get_futex_key+0x1d2/0x1510 [ 555.382113][T13248] ? __pfx_get_futex_key+0x10/0x10 [ 555.382160][T13248] futex_wake+0xea/0x530 [ 555.382202][T13248] ? __lock_acquire+0x4a5/0x2630 [ 555.382233][T13248] ? __pfx_futex_wake+0x10/0x10 [ 555.382279][T13248] ? rcu_is_watching+0x12/0xc0 [ 555.382326][T13248] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 555.382374][T13248] do_futex+0x32b/0x350 [ 555.382408][T13248] ? __pfx_do_futex+0x10/0x10 [ 555.382452][T13248] ? find_held_lock+0x2b/0x80 [ 555.382492][T13248] ? __x64_sys_close_range+0x3ce/0x5d0 [ 555.382540][T13248] __x64_sys_futex+0x34f/0x4d0 [ 555.382578][T13248] ? __x64_sys_close_range+0x30f/0x5d0 [ 555.382621][T13248] ? __pfx___x64_sys_futex+0x10/0x10 [ 555.382660][T13248] ? __pfx___x64_sys_close_range+0x10/0x10 [ 555.382700][T13248] ? rcu_is_watching+0x12/0xc0 [ 555.382741][T13248] ? rcu_is_watching+0x12/0xc0 [ 555.382786][T13248] do_syscall_64+0x10b/0xf80 [ 555.382825][T13248] ? clear_bhb_loop+0x40/0x90 [ 555.382865][T13248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.382903][T13248] RIP: 0033:0x7f4a7cf9cdd9 [ 555.382930][T13248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.382962][T13248] RSP: 002b:00007f4a7b1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 555.382993][T13248] RAX: ffffffffffffffda RBX: 00007f4a7d216098 RCX: 00007f4a7cf9cdd9 [ 555.383015][T13248] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4a7d21609c [ 555.383035][T13248] RBP: 00007f4a7d216090 R08: 0000000000000001 R09: 0000000000000000 [ 555.383054][T13248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.383074][T13248] R13: 00007f4a7d216128 R14: 00007fff60a9c670 R15: 00007fff60a9c758 [ 555.383117][T13248] [ 555.903546][T13251] FAULT_INJECTION: forcing a failure. [ 555.903546][T13251] name failslab, interval 1, probability 0, space 0, times 0 [ 555.948189][T13251] CPU: 1 UID: 0 PID: 13251 Comm: syz.3.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.948240][T13251] Tainted: [L]=SOFTLOCKUP [ 555.948251][T13251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.948269][T13251] Call Trace: [ 555.948279][T13251] [ 555.948291][T13251] dump_stack_lvl+0x100/0x190 [ 555.948340][T13251] should_fail_ex.cold+0x5/0xa [ 555.948382][T13251] should_failslab+0xc2/0x120 [ 555.948429][T13251] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 555.948480][T13251] ? taskstats_exit+0x67b/0xc10 [ 555.948523][T13251] ? rcu_is_watching+0x12/0xc0 [ 555.948569][T13251] taskstats_exit+0x67b/0xc10 [ 555.948614][T13251] ? __pfx_acct_update_integrals+0x10/0x10 [ 555.948672][T13251] ? __pfx_taskstats_exit+0x10/0x10 [ 555.948718][T13251] ? rcu_read_lock_any_held+0x6a/0xa0 [ 555.948761][T13251] ? exit_signals+0x395/0xaf0 [ 555.948838][T13251] do_exit+0x65c/0x2a60 [ 555.948901][T13251] ? __pfx_do_exit+0x10/0x10 [ 555.948951][T13251] ? do_raw_spin_lock+0x128/0x260 [ 555.948987][T13251] ? find_held_lock+0x2b/0x80 [ 555.949028][T13251] ? get_signal+0x7e0/0x21e0 [ 555.949073][T13251] do_group_exit+0xd5/0x2a0 [ 555.949139][T13251] get_signal+0x1ec7/0x21e0 [ 555.949197][T13251] ? __pfx_get_signal+0x10/0x10 [ 555.949241][T13251] ? do_futex+0x192/0x350 [ 555.949280][T13251] arch_do_signal_or_restart+0x91/0x770 [ 555.949339][T13251] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 555.949411][T13251] ? __pfx___x64_sys_futex+0x10/0x10 [ 555.949445][T13251] ? rcu_is_watching+0x12/0xc0 [ 555.949488][T13251] exit_to_user_mode_loop+0x86/0x4a0 [ 555.949518][T13251] ? do_syscall_64+0x519/0xf80 [ 555.949567][T13251] do_syscall_64+0x6f2/0xf80 [ 555.949604][T13251] ? clear_bhb_loop+0x40/0x90 [ 555.949644][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.949678][T13251] RIP: 0033:0x7f4a7cf9cdd9 [ 555.949704][T13251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.949741][T13251] RSP: 002b:00007f4a7b1930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 555.949784][T13251] RAX: fffffffffffffe00 RBX: 00007f4a7d216368 RCX: 00007f4a7cf9cdd9 [ 555.949811][T13251] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4a7d216368 [ 555.949831][T13251] RBP: 00007f4a7d216360 R08: 0000000000000000 R09: 0000000000000000 [ 555.949851][T13251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.949870][T13251] R13: 00007f4a7d2163f8 R14: 00007fff60a9c670 R15: 00007fff60a9c758 [ 555.949911][T13251] [ 558.637485][T13284] netlink: 4596 bytes leftover after parsing attributes in process `syz.3.1632'. [ 558.927181][T13293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1633'. [ 563.016931][T13341] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 563.296295][T13348] FAULT_INJECTION: forcing a failure. [ 563.296295][T13348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.378365][T13348] CPU: 1 UID: 0 PID: 13348 Comm: syz.2.1647 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.378420][T13348] Tainted: [L]=SOFTLOCKUP [ 563.378432][T13348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.378452][T13348] Call Trace: [ 563.378461][T13348] [ 563.378474][T13348] dump_stack_lvl+0x100/0x190 [ 563.378514][T13348] should_fail_ex.cold+0x5/0xa [ 563.378564][T13348] _copy_from_user+0x2e/0xd0 [ 563.378618][T13348] copy_msghdr_from_user+0x9f/0x4f0 [ 563.378663][T13348] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 563.378717][T13348] ? __lock_acquire+0x4a5/0x2630 [ 563.378755][T13348] ___sys_recvmsg+0xdd/0x1a0 [ 563.378799][T13348] ? __pfx____sys_recvmsg+0x10/0x10 [ 563.378847][T13348] ? find_held_lock+0x2b/0x80 [ 563.378913][T13348] do_recvmmsg+0x301/0x760 [ 563.378963][T13348] ? __pfx_do_recvmmsg+0x10/0x10 [ 563.379004][T13348] ? ksys_write+0x190/0x250 [ 563.379047][T13348] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 563.379088][T13348] ? kernel_write+0x5f3/0x6c0 [ 563.379133][T13348] ? __fget_files+0x21f/0x3d0 [ 563.379180][T13348] __x64_sys_recvmmsg+0x22a/0x280 [ 563.379217][T13348] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 563.379254][T13348] ? rcu_is_watching+0x12/0xc0 [ 563.379305][T13348] do_syscall_64+0x10b/0xf80 [ 563.379341][T13348] ? clear_bhb_loop+0x40/0x90 [ 563.379378][T13348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.379410][T13348] RIP: 0033:0x7f64fc99cdd9 [ 563.379436][T13348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.379466][T13348] RSP: 002b:00007f64fd8af028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 563.379497][T13348] RAX: ffffffffffffffda RBX: 00007f64fcc15fa0 RCX: 00007f64fc99cdd9 [ 563.379518][T13348] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 563.379538][T13348] RBP: 00007f64fd8af090 R08: 0000000000000000 R09: 0000000000000000 [ 563.379557][T13348] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 563.379576][T13348] R13: 00007f64fcc16038 R14: 00007f64fcc15fa0 R15: 00007ffcf675d578 [ 563.379616][T13348] [ 563.960556][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 564.960442][T13374] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1653'. [ 565.624001][T13390] FAULT_INJECTION: forcing a failure. [ 565.624001][T13390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 565.683964][T13390] CPU: 1 UID: 0 PID: 13390 Comm: syz.2.1658 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.684017][T13390] Tainted: [L]=SOFTLOCKUP [ 565.684029][T13390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 565.684047][T13390] Call Trace: [ 565.684057][T13390] [ 565.684069][T13390] dump_stack_lvl+0x100/0x190 [ 565.684118][T13390] should_fail_ex.cold+0x5/0xa [ 565.684152][T13390] ? prepare_alloc_pages+0x16d/0x5f0 [ 565.684198][T13390] should_fail_alloc_page+0xeb/0x140 [ 565.684239][T13390] prepare_alloc_pages+0x1f0/0x5f0 [ 565.684287][T13390] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 565.684344][T13390] ? __kernel_text_address+0xd/0x30 [ 565.684378][T13390] ? unwind_get_return_address+0x59/0xa0 [ 565.684423][T13390] ? arch_stack_walk+0xa6/0xf0 [ 565.684466][T13390] ? __lock_acquire+0x4a5/0x2630 [ 565.684502][T13390] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 565.684538][T13390] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 565.684600][T13390] ? register_lock_class+0x40/0x560 [ 565.684632][T13390] ? find_held_lock+0x2b/0x80 [ 565.684675][T13390] ? ima_match_policy+0x8c4/0x2350 [ 565.684718][T13390] ? vma_is_special_huge+0x23f/0x2d0 [ 565.684755][T13390] ? __pfx_vma_is_special_huge+0x10/0x10 [ 565.684793][T13390] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 565.684848][T13390] ? policy_nodemask+0xed/0x4f0 [ 565.684889][T13390] alloc_pages_mpol+0x1fb/0x540 [ 565.684930][T13390] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 565.684966][T13390] ? __pfx___might_resched+0x10/0x10 [ 565.685007][T13390] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 565.685057][T13390] alloc_pages_noprof+0x1a/0x160 [ 565.685108][T13390] __pmd_alloc+0x3b/0x950 [ 565.685154][T13390] __handle_mm_fault+0xa9c/0x2a00 [ 565.685211][T13390] ? mt_find+0x45e/0x8e0 [ 565.685255][T13390] ? __pfx___handle_mm_fault+0x10/0x10 [ 565.685302][T13390] ? __pfx_mt_find+0x10/0x10 [ 565.685366][T13390] ? find_vma+0xbf/0x140 [ 565.685399][T13390] ? __pfx_find_vma+0x10/0x10 [ 565.685439][T13390] handle_mm_fault+0x36d/0xa20 [ 565.685495][T13390] do_user_addr_fault+0x74c/0x12f0 [ 565.685541][T13390] ? trace_page_fault_kernel+0x7a/0x200 [ 565.685583][T13390] exc_page_fault+0x6f/0xd0 [ 565.685623][T13390] asm_exc_page_fault+0x26/0x30 [ 565.685654][T13390] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 565.685704][T13390] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 565.685735][T13390] RSP: 0018:ffffc90004627a30 EFLAGS: 00050206 [ 565.685761][T13390] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000038 [ 565.685781][T13390] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004627a88 [ 565.685800][T13390] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff520008c4f57 [ 565.685820][T13390] R10: ffffc90004627abf R11: 0000000000000000 R12: 0000000000000000 [ 565.685840][T13390] R13: ffffc90004627a88 R14: 0000000000000000 R15: dffffc0000000000 [ 565.685880][T13390] _copy_from_user+0x98/0xd0 [ 565.685932][T13390] copy_msghdr_from_user+0x9f/0x4f0 [ 565.685977][T13390] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 565.686027][T13390] ? __lock_acquire+0x4a5/0x2630 [ 565.686064][T13390] ___sys_recvmsg+0xdd/0x1a0 [ 565.686116][T13390] ? __pfx____sys_recvmsg+0x10/0x10 [ 565.686163][T13390] ? find_held_lock+0x2b/0x80 [ 565.686233][T13390] do_recvmmsg+0x301/0x760 [ 565.686282][T13390] ? __pfx_do_recvmmsg+0x10/0x10 [ 565.686322][T13390] ? ksys_write+0x190/0x250 [ 565.686361][T13390] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 565.686395][T13390] ? kernel_write+0x5f3/0x6c0 [ 565.686440][T13390] ? __fget_files+0x21f/0x3d0 [ 565.686486][T13390] __x64_sys_recvmmsg+0x22a/0x280 [ 565.686521][T13390] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 565.686560][T13390] ? rcu_is_watching+0x12/0xc0 [ 565.686605][T13390] do_syscall_64+0x10b/0xf80 [ 565.686643][T13390] ? clear_bhb_loop+0x40/0x90 [ 565.686683][T13390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.686716][T13390] RIP: 0033:0x7f64fc99cdd9 [ 565.686742][T13390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.686774][T13390] RSP: 002b:00007f64fd8af028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 565.686804][T13390] RAX: ffffffffffffffda RBX: 00007f64fcc15fa0 RCX: 00007f64fc99cdd9 [ 565.686824][T13390] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 565.686844][T13390] RBP: 00007f64fd8af090 R08: 0000000000000000 R09: 0000000000000000 [ 565.686865][T13390] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 565.686885][T13390] R13: 00007f64fcc16038 R14: 00007f64fcc15fa0 R15: 00007ffcf675d578 [ 565.686928][T13390] [ 567.206974][T13387] kexec: Could not allocate control_code_buffer [ 568.468583][T13428] bonding: no command found in bonding_masters - use +ifname or -ifname [ 568.530924][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.538803][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.399097][T13487] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 574.532067][T13525] misc userio: Invalid payload size [ 575.390165][ T5719] Process accounting paused [ 575.485755][T13542] Process accounting resumed [ 577.203380][T13578] netlink: 'syz.3.1704': attribute type 2 has an invalid length. [ 577.584845][T13597] FAULT_INJECTION: forcing a failure. [ 577.584845][T13597] name failslab, interval 1, probability 0, space 0, times 0 [ 577.625435][T13594] netlink: 4596 bytes leftover after parsing attributes in process `syz.4.1707'. [ 577.633533][T13597] CPU: 1 UID: 0 PID: 13597 Comm: syz.3.1708 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.633676][T13597] Tainted: [L]=SOFTLOCKUP [ 577.633708][T13597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 577.633755][T13597] Call Trace: [ 577.633786][T13597] [ 577.633820][T13597] dump_stack_lvl+0x100/0x190 [ 577.633935][T13597] should_fail_ex.cold+0x5/0xa [ 577.634039][T13597] should_failslab+0xc2/0x120 [ 577.634138][T13597] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 577.634282][T13597] ? ptlock_alloc+0x1f/0x70 [ 577.634436][T13597] ? do_raw_spin_lock+0x128/0x260 [ 577.634549][T13597] ptlock_alloc+0x1f/0x70 [ 577.634671][T13597] pte_alloc_one+0x82/0x3d0 [ 577.634785][T13597] do_fault+0x86c/0x1750 [ 577.634904][T13597] ? __pmd_alloc+0x3fb/0x950 [ 577.635011][T13597] __handle_mm_fault+0x187d/0x2a00 [ 577.635096][T13597] ? mt_find+0x45e/0x8e0 [ 577.635138][T13597] ? __pfx___handle_mm_fault+0x10/0x10 [ 577.635189][T13597] ? __pfx_mt_find+0x10/0x10 [ 577.635251][T13597] ? find_vma+0xbf/0x140 [ 577.635284][T13597] ? __pfx_find_vma+0x10/0x10 [ 577.635322][T13597] handle_mm_fault+0x36d/0xa20 [ 577.635376][T13597] do_user_addr_fault+0x74c/0x12f0 [ 577.635478][T13597] ? trace_page_fault_kernel+0x7a/0x200 [ 577.635609][T13597] exc_page_fault+0x6f/0xd0 [ 577.635710][T13597] asm_exc_page_fault+0x26/0x30 [ 577.635798][T13597] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 577.635944][T13597] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 577.636024][T13597] RSP: 0018:ffffc90005cc7a30 EFLAGS: 00050206 [ 577.636099][T13597] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000038 [ 577.636147][T13597] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90005cc7a88 [ 577.636212][T13597] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff52000b98f57 [ 577.636267][T13597] R10: ffffc90005cc7abf R11: 0000000000000000 R12: 0000000000000000 [ 577.636322][T13597] R13: ffffc90005cc7a88 R14: 0000000000000000 R15: dffffc0000000000 [ 577.636425][T13597] _copy_from_user+0x98/0xd0 [ 577.636583][T13597] copy_msghdr_from_user+0x9f/0x4f0 [ 577.636703][T13597] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 577.636838][T13597] ? __lock_acquire+0x4a5/0x2630 [ 577.636952][T13597] ___sys_recvmsg+0xdd/0x1a0 [ 577.637085][T13597] ? __pfx____sys_recvmsg+0x10/0x10 [ 577.637226][T13597] ? find_held_lock+0x2b/0x80 [ 577.637402][T13597] do_recvmmsg+0x301/0x760 [ 577.637533][T13597] ? __pfx_do_recvmmsg+0x10/0x10 [ 577.637644][T13597] ? ksys_write+0x190/0x250 [ 577.637756][T13597] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 577.637864][T13597] ? kernel_write+0x5f3/0x6c0 [ 577.637993][T13597] ? __fget_files+0x21f/0x3d0 [ 577.638115][T13597] __x64_sys_recvmmsg+0x22a/0x280 [ 577.638224][T13597] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 577.638325][T13597] ? rcu_is_watching+0x12/0xc0 [ 577.638475][T13597] do_syscall_64+0x10b/0xf80 [ 577.638573][T13597] ? clear_bhb_loop+0x40/0x90 [ 577.638682][T13597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.638762][T13597] RIP: 0033:0x7f4a7cf9cdd9 [ 577.638837][T13597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.638915][T13597] RSP: 002b:00007f4a7dd75028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 577.638977][T13597] RAX: ffffffffffffffda RBX: 00007f4a7d215fa0 RCX: 00007f4a7cf9cdd9 [ 577.639033][T13597] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 577.639085][T13597] RBP: 00007f4a7dd75090 R08: 0000000000000000 R09: 0000000000000000 [ 577.639139][T13597] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 577.639193][T13597] R13: 00007f4a7d216038 R14: 00007f4a7d215fa0 R15: 00007fff60a9c758 [ 577.639296][T13597] [ 579.337867][T13634] random: crng reseeded on system resumption [ 579.368578][T13620] ptrace attach of "./syz-executor exec"[5625] was attempted by ""[13620] [ 579.822031][T13640] FAULT_INJECTION: forcing a failure. [ 579.822031][T13640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 579.877997][T13640] CPU: 0 UID: 0 PID: 13640 Comm: syz.4.1721 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.878049][T13640] Tainted: [L]=SOFTLOCKUP [ 579.878060][T13640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 579.878077][T13640] Call Trace: [ 579.878087][T13640] [ 579.878099][T13640] dump_stack_lvl+0x100/0x190 [ 579.878138][T13640] should_fail_ex.cold+0x5/0xa [ 579.878171][T13640] ? prepare_alloc_pages+0x16d/0x5f0 [ 579.878213][T13640] should_fail_alloc_page+0xeb/0x140 [ 579.878251][T13640] prepare_alloc_pages+0x1f0/0x5f0 [ 579.878292][T13640] ? __pfx_stack_trace_save+0x10/0x10 [ 579.878339][T13640] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 579.878409][T13640] ? __lock_acquire+0x4a5/0x2630 [ 579.878447][T13640] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 579.878501][T13640] ? __lock_acquire+0x4a5/0x2630 [ 579.878554][T13640] ? find_held_lock+0x2b/0x80 [ 579.878596][T13640] ? is_bpf_text_address+0x8a/0x1a0 [ 579.878642][T13640] ? is_bpf_text_address+0x8a/0x1a0 [ 579.878684][T13640] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 579.878735][T13640] ? policy_nodemask+0xed/0x4f0 [ 579.878776][T13640] alloc_pages_mpol+0x1fb/0x540 [ 579.878815][T13640] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 579.878849][T13640] ? arch_stack_walk+0xa6/0xf0 [ 579.878902][T13640] folio_alloc_mpol_noprof+0x36/0x260 [ 579.878958][T13640] shmem_alloc_folio+0x135/0x160 [ 579.879007][T13640] shmem_alloc_and_add_folio+0x371/0xd40 [ 579.879072][T13640] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 579.879131][T13640] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 579.879196][T13640] shmem_get_folio_gfp+0x6ab/0x1900 [ 579.879260][T13640] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 579.879315][T13640] ? filemap_map_pages+0x9c1/0x2140 [ 579.879376][T13640] shmem_fault+0x1f9/0xa20 [ 579.879433][T13640] ? __pfx_shmem_fault+0x10/0x10 [ 579.879484][T13640] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 579.879541][T13640] ? __pfx_filemap_map_pages+0x10/0x10 [ 579.879598][T13640] ? find_held_lock+0x2b/0x80 [ 579.879644][T13640] __do_fault+0x10b/0x440 [ 579.879679][T13640] do_fault+0xa99/0x1750 [ 579.879719][T13640] ? __pmd_alloc+0x3fb/0x950 [ 579.879764][T13640] __handle_mm_fault+0x187d/0x2a00 [ 579.879821][T13640] ? mt_find+0x45e/0x8e0 [ 579.879866][T13640] ? __pfx___handle_mm_fault+0x10/0x10 [ 579.879911][T13640] ? __pfx_mt_find+0x10/0x10 [ 579.879983][T13640] ? find_vma+0xbf/0x140 [ 579.880018][T13640] ? __pfx_find_vma+0x10/0x10 [ 579.880059][T13640] handle_mm_fault+0x36d/0xa20 [ 579.880116][T13640] do_user_addr_fault+0x74c/0x12f0 [ 579.880163][T13640] ? trace_page_fault_kernel+0x7a/0x200 [ 579.880206][T13640] exc_page_fault+0x6f/0xd0 [ 579.880246][T13640] asm_exc_page_fault+0x26/0x30 [ 579.880307][T13640] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 579.880359][T13640] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 579.880392][T13640] RSP: 0018:ffffc90005e2fa30 EFLAGS: 00050206 [ 579.880418][T13640] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000038 [ 579.880437][T13640] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90005e2fa88 [ 579.880457][T13640] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff52000bc5f57 [ 579.880476][T13640] R10: ffffc90005e2fabf R11: 0000000000000000 R12: 0000000000000000 [ 579.880497][T13640] R13: ffffc90005e2fa88 R14: 0000000000000000 R15: dffffc0000000000 [ 579.880538][T13640] _copy_from_user+0x98/0xd0 [ 579.880592][T13640] copy_msghdr_from_user+0x9f/0x4f0 [ 579.880639][T13640] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 579.880693][T13640] ? __lock_acquire+0x4a5/0x2630 [ 579.880731][T13640] ___sys_recvmsg+0xdd/0x1a0 [ 579.880776][T13640] ? __pfx____sys_recvmsg+0x10/0x10 [ 579.880824][T13640] ? find_held_lock+0x2b/0x80 [ 579.880893][T13640] do_recvmmsg+0x301/0x760 [ 579.880952][T13640] ? __pfx_do_recvmmsg+0x10/0x10 [ 579.880995][T13640] ? ksys_write+0x190/0x250 [ 579.881040][T13640] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 579.881083][T13640] ? kernel_write+0x5f3/0x6c0 [ 579.881131][T13640] ? __fget_files+0x21f/0x3d0 [ 579.881180][T13640] __x64_sys_recvmmsg+0x22a/0x280 [ 579.881219][T13640] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 579.881255][T13640] ? rcu_is_watching+0x12/0xc0 [ 579.881300][T13640] do_syscall_64+0x10b/0xf80 [ 579.881340][T13640] ? clear_bhb_loop+0x40/0x90 [ 579.881381][T13640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.881415][T13640] RIP: 0033:0x7f0e7579cdd9 [ 579.881444][T13640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.881477][T13640] RSP: 002b:00007f0e766c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 579.881508][T13640] RAX: ffffffffffffffda RBX: 00007f0e75a15fa0 RCX: 00007f0e7579cdd9 [ 579.881531][T13640] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 579.881552][T13640] RBP: 00007f0e766c6090 R08: 0000000000000000 R09: 0000000000000000 [ 579.881572][T13640] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 579.881593][T13640] R13: 00007f0e75a16038 R14: 00007f0e75a15fa0 R15: 00007ffdf620dc48 [ 579.881639][T13640] [ 581.583986][T13658] kAFS: Invalid Command on /proc/fs/afs/cells file [ 581.837241][T13665] vivid-014: ================= START STATUS ================= [ 581.856949][T13652] Process accounting resumed [ 581.888335][T13665] vivid-014: Test Pattern: 75% Colorbar [ 581.949560][T13665] vivid-014: Fill Percentage of Frame: 100 [ 581.998268][T13665] vivid-014: Horizontal Movement: No Movement [ 582.020338][T13665] vivid-014: Vertical Movement: No Movement [ 582.032373][T13665] vivid-014: OSD Text Mode: All [ 582.037927][T13665] vivid-014: Show Border: false [ 582.044452][T13665] vivid-014: Show Square: false [ 582.050022][T13665] vivid-014: Sensor Flipped Horizontally: false [ 582.057070][T13665] vivid-014: Sensor Flipped Vertically: false [ 582.064543][T13665] vivid-014: Insert SAV Code in Image: false [ 582.071394][T13665] vivid-014: Insert EAV Code in Image: false [ 582.094529][T13665] vivid-014: Insert Video Guard Band: false [ 582.118162][T13665] vivid-014: Reduced Framerate: false [ 582.179962][T13665] vivid-014: HDMI 014-0 Is Connected To: Test Pattern Generator [ 582.261280][T13665] vivid-014: S-Video 014-0 Is Connected To: Test Pattern Generator [ 582.319048][T13665] vivid-014: Enable Capture Cropping: true [ 582.343532][T13665] vivid-014: Enable Capture Composing: true [ 582.360544][T13665] vivid-014: Enable Capture Scaler: true [ 582.385000][T13665] vivid-014: Timestamp Source: End of Frame [ 582.418646][T13665] vivid-014: Colorspace: sRGB [ 582.445913][T13665] vivid-014: Transfer Function: Default [ 582.479069][T13665] vivid-014: Y'CbCr Encoding: Default [ 582.494413][T13665] vivid-014: HSV Encoding: Hue 0-179 [ 582.516843][T13665] vivid-014: Quantization: Default [ 582.537592][T13665] vivid-014: Apply Alpha To Red Only: false [ 582.594172][T13665] vivid-014: Standard Aspect Ratio: 4x3 [ 582.644134][T13665] vivid-014: DV Timings Signal Mode: Current DV Timings inactive [ 582.672038][T13665] vivid-014: DV Timings: 640x480p59 inactive [ 582.692675][T13665] vivid-014: DV Timings Aspect Ratio: Source Width x Height [ 582.718260][T13665] vivid-014: Maximum EDID Blocks: 2 [ 582.744527][T13665] vivid-014: Limited RGB Range (16-235): false [ 582.766179][T13665] vivid-014: Rx RGB Quantization Range: Automatic [ 582.796971][T13665] vivid-014: Power Present: 0x00000001 [ 582.816254][T13665] tpg source WxH: 320x240 (Y'CbCr) [ 582.833247][T13665] tpg field: 1 [ 582.854366][T13665] tpg crop: (0,0)/320x240 [ 582.877029][T13665] tpg compose: (0,0)/320x240 [ 582.898199][T13665] tpg colorspace: 8 [ 582.907961][T13665] tpg transfer function: 0/0 [ 582.996450][T13665] tpg Y'CbCr encoding: 0/0 [ 583.003854][T13665] tpg quantization: 0/0 [ 583.014582][T13665] tpg RGB range: 0/2 [ 583.039853][T13665] vivid-014: ================== END STATUS ================== [ 584.639138][T13714] kAFS: Invalid Command on /proc/fs/afs/cells file [ 591.606360][T13817] Process accounting resumed [ 592.071002][T13831] binder: 13830:13831 ioctl 40046210 0 returned -14 [ 592.492144][T13839] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 592.515421][T13839] nbd: error processing sock list [ 593.073922][T13852] vivid-007: ================= START STATUS ================= [ 593.090741][T13852] vivid-007: Generate PTS: true [ 593.099910][T13852] vivid-007: Generate SCR: true [ 593.121910][T13852] tpg source WxH: 320x240 (Y'CbCr) [ 593.136077][T13852] tpg field: 1 [ 593.142415][T13852] tpg crop: (0,0)/320x240 [ 593.147181][T13852] tpg compose: (0,0)/320x240 [ 593.155673][T13852] tpg colorspace: 8 [ 593.160399][T13852] tpg transfer function: 0/0 [ 593.165187][T13852] tpg Y'CbCr encoding: 0/0 [ 593.171184][T13852] tpg quantization: 0/0 [ 593.177393][T13852] tpg RGB range: 0/2 [ 593.182793][T13852] vivid-007: ================== END STATUS ================== [ 593.270695][T13859] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 595.536304][T13885] ubi9: attaching mtd2 [ 595.548201][T13885] ubi9 error: ubi_attach_mtd_dev: bad VID header (10) or data offsets (74) [ 595.568274][ T5884] Bluetooth: hci0: command 0x0c1a tx timeout [ 595.575066][T13852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 596.035072][T13852] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 596.050035][T13852] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 596.062785][T13852] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 596.846910][T13894] usb usb38: selecting invalid altsetting 65537 [ 597.648929][ T5884] Bluetooth: hci1: command 0x0c1a tx timeout [ 598.128241][T11036] Bluetooth: hci3: command 0x0c1a tx timeout [ 598.135496][ T5884] Bluetooth: hci4: command 0x0c1a tx timeout [ 599.560904][T13954] kAFS: Invalid Command on /proc/fs/afs/cells file [ 601.708988][T13999] binder: 13997:13999 ioctl 40046210 0 returned -14 [ 603.190136][T14026] Process accounting resumed [ 604.351880][T14052] kAFS: Invalid Command on /proc/fs/afs/cells file [ 604.621297][T14055] netlink: zone id is out of range [ 604.651060][T14055] netlink: zone id is out of range [ 604.674508][T14055] netlink: zone id is out of range [ 604.702290][T14056] netlink: 6232 bytes leftover after parsing attributes in process `syz.3.1831'. [ 604.729721][T14055] netlink: zone id is out of range [ 604.815986][T14055] netlink: zone id is out of range [ 604.857214][T14055] netlink: set zone limit has 8 unknown bytes [ 606.460374][T14084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1840'. [ 606.544623][T14081] can: request_module (can-proto-0) failed. [ 606.649822][T14084] ipvlan1: entered promiscuous mode [ 606.659450][T14084] ipvlan1: entered allmulticast mode [ 606.666307][T14084] veth0_vlan: entered allmulticast mode [ 609.390929][ T5884] block nbd0: Receive control failed (result -32) [ 613.982726][T14200] kAFS: Invalid Command on /proc/fs/afs/cells file [ 614.503606][T14208] random: crng reseeded on system resumption [ 615.497054][T14226] Process accounting resumed [ 615.693003][T14238] netlink: 'syz.3.1882': attribute type 11 has an invalid length. [ 616.078729][T14245] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 3697530745 out of range (51000000..2150000000) [ 617.479554][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1895'. [ 617.904525][T14285] input: f¬  as /devices/virtual/input/input11 [ 618.696128][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 619.160501][T14323] kAFS: Invalid Command on /proc/fs/afs/cells file [ 619.997283][T14345] netlink: zone id is out of range [ 620.019418][T14345] netlink: zone id is out of range [ 620.038635][T14345] netlink: zone id is out of range [ 620.072297][T14345] netlink: zone id is out of range [ 620.130089][T14352] kAFS: Invalid Command on /proc/fs/afs/cells file [ 620.152812][T14345] netlink: zone id is out of range [ 620.164743][T14345] netlink: set zone limit has 8 unknown bytes [ 620.388539][T14359] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1920'. [ 621.722246][T14380] Process accounting paused [ 622.135570][T14394] nbd: illegal input index 37139 [ 622.949282][T14416] random: crng reseeded on system resumption [ 624.097580][T14443] kAFS: Invalid Command on /proc/fs/afs/cells file [ 624.749380][T14453] kAFS: Invalid Command on /proc/fs/afs/cells file [ 626.945310][T14501] Process accounting resumed [ 627.742078][T14528] kAFS: Invalid Command on /proc/fs/afs/cells file [ 629.723668][T14566] Process accounting resumed [ 629.980260][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.987238][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.107241][T14590] kAFS: Invalid Command on /proc/fs/afs/cells file [ 631.356003][T14609] Process accounting resumed [ 633.323552][T14628] Process accounting paused [ 633.352075][T14653] netlink: zone id is out of range [ 633.357523][T14653] netlink: zone id is out of range [ 633.367030][T14653] netlink: zone id is out of range [ 633.429495][T14653] netlink: set zone limit has 8 unknown bytes [ 633.500530][T14659] netlink: 6232 bytes leftover after parsing attributes in process `syz.1.1985'. [ 636.406266][T14703] CIFS mount error: No usable UNC path provided in device string! [ 636.406266][T14703] [ 636.450283][T14703] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 637.910685][T14725] ubi0: attaching mtd0 [ 637.926412][T14725] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 637.944954][T14725] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 3 [ 637.954317][T14725] eraseblock attaching information dump: [ 637.961263][T14725] ec 2 [ 637.965010][T14725] pnum 0 [ 637.971738][T14725] lnum 0 [ 637.977224][T14725] scrub 0 [ 637.985987][T14725] sqnum 3 [ 637.991405][T14725] Volume identifier header dump: [ 638.001574][T14725] magic 55424921 [ 638.007297][T14725] version 1 [ 638.020923][T14725] vol_type 1 [ 638.034701][T14725] copy_flag 0 [ 638.044840][T14725] compat 5 [ 638.058153][T14725] vol_id 2147479551 [ 638.069389][T14725] lnum 0 [ 638.079929][T14725] data_size 0 [ 638.088380][T14725] used_ebs 0 [ 638.098490][T14725] data_pad 0 [ 638.116441][T14725] sqnum 3 [ 638.131690][T14725] hdr_crc 05ef0866 [ 638.148605][T14725] Volume identifier header hexdump: [ 638.342253][T14725] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 638.716300][T14744] futex_wake_op: syz.1.2013 tries to shift op by -2048; fix this program [ 638.743565][T14744] futex_wake_op: syz.1.2013 tries to shift op by -2048; fix this program [ 639.540864][T14765] kernel profiling enabled (shift: 0) [ 642.810594][T14822] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 643.454027][T14836] kAFS: Invalid Command on /proc/fs/afs/cells file [ 646.447609][T14877] kAFS: Invalid Command on /proc/fs/afs/cells file [ 646.557236][T14849] can: request_module (can-proto-5) failed. [ 649.450674][T14924] Process accounting resumed [ 651.535080][T14961] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2066'. [ 651.568534][T14961] mac80211_hwsim hwsim7 ›: renamed from wlan0 (while UP) [ 651.569565][T14959] kAFS: Invalid Command on /proc/fs/afs/cells file [ 652.261270][T14978] netlink: zone id is out of range [ 652.275437][T14978] netlink: zone id is out of range [ 652.288887][T14978] netlink: zone id is out of range [ 652.311247][T14978] netlink: zone id is out of range [ 652.363518][T14983] netlink: 6232 bytes leftover after parsing attributes in process `syz.3.2072'. [ 652.392103][T14978] netlink: zone id is out of range [ 652.435282][T14978] netlink: set zone limit has 8 unknown bytes [ 652.506857][ T5884] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 652.556343][T14988] futex_wake_op: syz.1.2074 tries to shift op by -2048; fix this program [ 652.579490][T14988] futex_wake_op: syz.1.2074 tries to shift op by -2048; fix this program [ 652.911061][T14991] kAFS: Invalid Command on /proc/fs/afs/cells file [ 654.630411][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 654.767280][T15022] bond0: no command found in slaves file - use +ifname or -ifname [ 658.137874][T15092] FAULT_INJECTION: forcing a failure. [ 658.137874][T15092] name failslab, interval 1, probability 0, space 0, times 0 [ 658.137917][T15092] CPU: 0 UID: 0 PID: 15092 Comm: syz.2.2101 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.137952][T15092] Tainted: [L]=SOFTLOCKUP [ 658.137962][T15092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 658.137978][T15092] Call Trace: [ 658.137987][T15092] [ 658.138028][T15092] dump_stack_lvl+0x100/0x190 [ 658.138078][T15092] should_fail_ex.cold+0x5/0xa [ 658.138124][T15092] ? vc_allocate+0x4c3/0x880 [ 658.138171][T15092] should_failslab+0xc2/0x120 [ 658.138210][T15092] __kmalloc_noprof+0xe0/0x850 [ 658.138274][T15092] vc_allocate+0x4c3/0x880 [ 658.138321][T15092] ? __pfx_vc_allocate+0x10/0x10 [ 658.138381][T15092] con_install+0xa1/0x620 [ 658.138435][T15092] ? __pfx_con_install+0x10/0x10 [ 658.138476][T15092] ? __pfx_con_install+0x10/0x10 [ 658.138513][T15092] tty_init_dev.part.0+0x9e/0x470 [ 658.138563][T15092] tty_open+0xa63/0xfa0 [ 658.138636][T15092] ? __pfx_tty_open+0x10/0x10 [ 658.138690][T15092] ? chrdev_open+0x10b/0x6a0 [ 658.138720][T15092] ? chrdev_open+0x10b/0x6a0 [ 658.138755][T15092] ? __pfx_tty_open+0x10/0x10 [ 658.138794][T15092] chrdev_open+0x234/0x6a0 [ 658.138825][T15092] ? __pfx_apparmor_file_open+0x10/0x10 [ 658.138865][T15092] ? __pfx_chrdev_open+0x10/0x10 [ 658.138899][T15092] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 658.138940][T15092] do_dentry_open+0x6d8/0x1660 [ 658.138970][T15092] ? __pfx_chrdev_open+0x10/0x10 [ 658.139009][T15092] vfs_open+0x82/0x3f0 [ 658.139051][T15092] path_openat+0x208c/0x31a0 [ 658.139103][T15092] ? __pfx_path_openat+0x10/0x10 [ 658.139146][T15092] do_file_open+0x20e/0x430 [ 658.139180][T15092] ? __pfx_do_file_open+0x10/0x10 [ 658.139233][T15092] ? alloc_fd+0x476/0x790 [ 658.139267][T15092] ? do_getname+0x191/0x390 [ 658.139307][T15092] do_sys_openat2+0x10d/0x1e0 [ 658.139346][T15092] ? __pfx_do_sys_openat2+0x10/0x10 [ 658.139387][T15092] ? __x64_sys_close_range+0x2d9/0x5d0 [ 658.139427][T15092] __x64_sys_openat+0x12d/0x210 [ 658.139468][T15092] ? __pfx___x64_sys_openat+0x10/0x10 [ 658.139513][T15092] ? rcu_is_watching+0x12/0xc0 [ 658.139548][T15092] do_syscall_64+0x10b/0xf80 [ 658.139579][T15092] ? clear_bhb_loop+0x40/0x90 [ 658.139610][T15092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.139637][T15092] RIP: 0033:0x7f64fc99cdd9 [ 658.139659][T15092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.139684][T15092] RSP: 002b:00007f64fd86d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 658.139709][T15092] RAX: ffffffffffffffda RBX: 00007f64fcc16180 RCX: 00007f64fc99cdd9 [ 658.139727][T15092] RDX: 0000000000002001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 658.139743][T15092] RBP: 00007f64fca32d69 R08: 0000000000000000 R09: 0000000000000000 [ 658.139760][T15092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.139775][T15092] R13: 00007f64fcc16218 R14: 00007f64fcc16180 R15: 00007ffcf675d578 [ 658.139808][T15092] [ 660.628988][T15121] Process accounting paused [ 660.825674][T15138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2113'. [ 662.134238][T15171] netlink: zone id is out of range [ 662.163526][T15171] netlink: zone id is out of range [ 662.201786][T15171] netlink: zone id is out of range [ 662.238460][T15172] netlink: 6232 bytes leftover after parsing attributes in process `syz.3.2121'. [ 662.269793][T15171] netlink: zone id is out of range [ 662.300213][T15171] netlink: zone id is out of range [ 662.321568][T15171] netlink: set zone limit has 8 unknown bytes [ 664.371525][T15154] Process accounting resumed [ 665.230632][T15208] netlink: zone id is out of range [ 665.245558][T15208] netlink: zone id is out of range [ 665.271171][T15208] netlink: zone id is out of range [ 665.333647][T15214] netlink: 6232 bytes leftover after parsing attributes in process `syz.4.2130'. [ 665.349779][T15208] netlink: zone id is out of range [ 666.753056][T15228] kAFS: Invalid Command on /proc/fs/afs/cells file [ 667.317963][T15241] net_ratelimit: 2 callbacks suppressed [ 667.340909][T15241] netlink: zone id is out of range [ 667.346508][T15241] netlink: zone id is out of range [ 667.360463][T15241] netlink: zone id is out of range [ 667.371910][T15241] netlink: zone id is out of range [ 667.401405][T15245] netlink: 6232 bytes leftover after parsing attributes in process `syz.4.2139'. [ 667.448173][T15241] netlink: zone id is out of range [ 667.495190][T15241] netlink: set zone limit has 8 unknown bytes [ 667.523651][T15243] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 667.579889][T15243] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 668.720457][ T5884] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 669.985384][T15280] netlink: zone id is out of range [ 670.001279][T15280] netlink: zone id is out of range [ 670.023590][T15280] netlink: zone id is out of range [ 670.034357][T15280] netlink: zone id is out of range [ 671.142939][T15295] Scaler: ================= START STATUS ================= [ 671.142959][T15295] Scaler: ================== END STATUS ================== [ 675.899735][T15380] net_ratelimit: 126 callbacks suppressed [ 675.899765][T15380] netlink: zone id is out of range [ 675.931314][T15380] netlink: zone id is out of range [ 675.945507][T15380] netlink: zone id is out of range [ 675.987646][T15380] netlink: zone id is out of range [ 676.046467][T15381] netlink: 6232 bytes leftover after parsing attributes in process `syz.3.2168'. [ 676.062547][T15380] netlink: zone id is out of range [ 676.121192][T15380] netlink: set zone limit has 8 unknown bytes [ 676.301321][T15383] kAFS: Invalid Command on /proc/fs/afs/cells file [ 677.400804][T15409] netlink: zone id is out of range [ 677.407017][T15409] netlink: zone id is out of range [ 677.414731][T15409] netlink: zone id is out of range [ 677.442585][T15409] netlink: zone id is out of range [ 678.041869][T15423] kAFS: Invalid Command on /proc/fs/afs/cells file [ 678.883844][T15439] Process accounting resumed [ 680.534349][T15481] FAULT_INJECTION: forcing a failure. [ 680.534349][T15481] name failslab, interval 1, probability 0, space 0, times 0 [ 680.575691][T15481] CPU: 0 UID: 0 PID: 15481 Comm: syz.4.2192 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.575758][T15481] Tainted: [L]=SOFTLOCKUP [ 680.575774][T15481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.575798][T15481] Call Trace: [ 680.575812][T15481] [ 680.575828][T15481] dump_stack_lvl+0x100/0x190 [ 680.575879][T15481] should_fail_ex.cold+0x5/0xa [ 680.575928][T15481] should_failslab+0xc2/0x120 [ 680.575968][T15481] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 680.576026][T15481] ? seq_open+0x55/0x170 [ 680.576086][T15481] ? __pfx_edid_show+0x10/0x10 [ 680.576134][T15481] ? __pfx_edid_open+0x10/0x10 [ 680.576189][T15481] seq_open+0x55/0x170 [ 680.576247][T15481] ? __pfx_edid_show+0x10/0x10 [ 680.576293][T15481] single_open+0xfc/0x1d0 [ 680.576356][T15481] full_proxy_open_regular+0x1b6/0x370 [ 680.576414][T15481] do_dentry_open+0x6d8/0x1660 [ 680.576461][T15481] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 680.576524][T15481] vfs_open+0x82/0x3f0 [ 680.576586][T15481] path_openat+0x208c/0x31a0 [ 680.576651][T15481] ? __pfx_path_openat+0x10/0x10 [ 680.576737][T15481] do_file_open+0x20e/0x430 [ 680.576789][T15481] ? __pfx_do_file_open+0x10/0x10 [ 680.576869][T15481] ? alloc_fd+0x476/0x790 [ 680.576921][T15481] ? do_getname+0x191/0x390 [ 680.576986][T15481] do_sys_openat2+0x10d/0x1e0 [ 680.577045][T15481] ? __pfx_do_sys_openat2+0x10/0x10 [ 680.577106][T15481] ? __fget_files+0x21f/0x3d0 [ 680.577232][T15481] __x64_sys_openat+0x12d/0x210 [ 680.577303][T15481] ? __pfx___x64_sys_openat+0x10/0x10 [ 680.577383][T15481] ? rcu_is_watching+0x12/0xc0 [ 680.577437][T15481] do_syscall_64+0x10b/0xf80 [ 680.577486][T15481] ? clear_bhb_loop+0x40/0x90 [ 680.577536][T15481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.577579][T15481] RIP: 0033:0x7f0e7579cdd9 [ 680.577613][T15481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.577655][T15481] RSP: 002b:00007f0e76684028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 680.577693][T15481] RAX: ffffffffffffffda RBX: 00007f0e75a16180 RCX: 00007f0e7579cdd9 [ 680.577721][T15481] RDX: 0000000000000400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 680.577748][T15481] RBP: 00007f0e75832d69 R08: 0000000000000000 R09: 0000000000000000 [ 680.577774][T15481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.577799][T15481] R13: 00007f0e75a16218 R14: 00007f0e75a16180 R15: 00007ffdf620dc48 [ 680.577849][T15481] [ 681.546815][T15494] Process accounting resumed [ 682.559836][T15462] kexec: Could not allocate control_code_buffer [ 682.845042][T15513] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2200'. [ 683.410471][T15532] Process accounting resumed [ 683.601922][ T5884] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 683.611620][ T5884] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 685.525625][T15562] kAFS: Invalid Command on /proc/fs/afs/cells file [ 691.023904][T15650] Process accounting resumed [ 691.305183][T15618] Process accounting resumed [ 691.412027][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.420395][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.633716][T15667] blktrace: Concurrent blktraces are not allowed on loop2 [ 692.293330][T15678] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 692.331633][T15678] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 694.351867][T15700] phram: parameter too long [ 694.730393][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 695.074130][T15710] net_ratelimit: 2 callbacks suppressed [ 695.074159][T15710] openvswitch: netlink: Key type 261 is out of range max 32 [ 695.707711][T11036] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 695.727338][T11036] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 695.738658][T11036] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 695.751830][T11036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 695.775843][T11036] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 696.019958][T15741] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 696.749608][T11036] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 696.865824][ T6662] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.954290][T15751] qrtr: Invalid version 0 [ 697.160650][ T6662] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.526465][ T6662] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.743273][ T6662] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.888235][T11036] Bluetooth: hci2: command tx timeout [ 698.272643][ T6662] bridge_slave_1: left allmulticast mode [ 698.288254][ T6662] bridge_slave_1: left promiscuous mode [ 698.295905][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.326622][ T6662] bridge_slave_0: left allmulticast mode [ 698.337509][ T6662] bridge_slave_0: left promiscuous mode [ 698.344089][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.893285][ T6662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.940501][ T6662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.966129][ T6662] bond0 (unregistering): Released all slaves [ 699.738827][T15735] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.763679][T15735] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.791431][T15735] bridge_slave_0: entered allmulticast mode [ 699.828211][T15735] bridge_slave_0: entered promiscuous mode [ 699.881434][T15735] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.913631][T15735] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.940458][T15735] bridge_slave_1: entered allmulticast mode [ 699.969345][T11036] Bluetooth: hci2: command tx timeout [ 699.973869][T15735] bridge_slave_1: entered promiscuous mode [ 700.316137][T15735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.386340][T15735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.667719][T15735] team0: Port device team_slave_0 added [ 700.708979][T15735] team0: Port device team_slave_1 added [ 701.120967][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 701.147250][T15735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.158691][T15735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.187702][T15735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.214204][T15735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.245533][T15735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.296788][T15735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.693283][ T6662] hsr_slave_0: left promiscuous mode [ 701.723148][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.758136][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.863912][ T6662] veth1_macvtap: left promiscuous mode [ 701.885450][ T6662] veth0_macvtap: left promiscuous mode [ 701.912013][ T6662] veth1_vlan: left promiscuous mode [ 701.931043][ T6662] veth0_vlan: left promiscuous mode [ 702.049135][T11036] Bluetooth: hci2: command tx timeout [ 702.065455][T15834] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 702.095203][T15834] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 702.462600][T15842] kAFS: Invalid Command on /proc/fs/afs/cells file [ 702.634978][ T6662] team0 (unregistering): Port device team_slave_1 removed [ 702.701984][ T6662] team0 (unregistering): Port device team_slave_0 removed [ 703.150755][T15735] hsr_slave_0: entered promiscuous mode [ 703.167317][T15735] hsr_slave_1: entered promiscuous mode [ 703.200721][T15735] debugfs: 'hsr0' already exists in 'hsr' [ 703.226557][T15735] Cannot create hsr debugfs directory [ 703.697200][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 704.129601][T11036] Bluetooth: hci2: command tx timeout [ 706.289544][T15735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 706.357112][T15735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 706.395785][T15735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 706.474778][T15735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 706.515442][T15735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 706.580789][T15735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 706.613650][T15735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 706.655750][T15735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 707.129798][T15735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.215382][T15735] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.319432][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.328303][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.435305][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.445477][ T6678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.883053][T15952] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 708.946119][T15952] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 709.204816][T15960] Process accounting paused [ 709.302804][T15735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.691972][T15735] veth0_vlan: entered promiscuous mode [ 709.752348][T15735] veth1_vlan: entered promiscuous mode [ 709.890248][T15735] veth0_macvtap: entered promiscuous mode [ 709.921657][T15735] veth1_macvtap: entered promiscuous mode [ 710.036766][T15967] zswap: compressor û not available [ 710.055282][T15735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.128845][T15735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.217823][ T6678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.251751][ T6678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.285176][ T6678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.324968][ T6678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.669373][T15984] netlink: zone id is out of range [ 710.691121][ T5883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.713335][T15984] netlink: zone id is out of range [ 710.719785][ T5883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.753927][T15984] netlink: zone id is out of range [ 710.785251][T15984] netlink: zone id is out of range [ 710.852426][T15984] netlink: zone id is out of range [ 710.876029][ T5883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.912760][ T5883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.930080][T15984] netlink: set zone limit has 8 unknown bytes [ 711.522262][T16014] kAFS: Invalid Command on /proc/fs/afs/cells file [ 714.925585][T16086] binder: 16085:16086 ioctl c0086202 ffffffffffffffff returned -22 [ 716.553488][T16128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2321'. [ 716.632352][T16128] bond0: (slave bond_slave_0): Releasing backup interface [ 717.186085][T16140] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 717.260893][T16140] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 717.272869][T16144] futex_wake_op: syz.1.2325 tries to shift op by -2048; fix this program [ 718.853845][T16168] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 719.706131][T16178] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 719.727709][T16178] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 720.255238][T16186] Process accounting resumed [ 721.083327][T16189] Process accounting paused [ 721.546055][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2342'. [ 721.935738][T16216] binder: 16209:16216 ioctl c0086202 ffffffffffffffff returned -22 [ 722.766059][ T5884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 722.790128][ T5884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 722.809769][ T5884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 722.837147][ T5884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 722.852635][ T5884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 723.875094][T11360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.135659][T11360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.478900][T11360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.499072][T16267] zram0: detected capacity change from 0 to 16 [ 724.809733][T11360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.930956][T11036] Bluetooth: hci0: command tx timeout [ 726.263214][T11360] bridge_slave_1: left allmulticast mode [ 726.277577][T11360] bridge_slave_1: left promiscuous mode [ 726.300983][T11360] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.338419][T11360] bridge_slave_0: left allmulticast mode [ 726.344681][T11360] bridge_slave_0: left promiscuous mode [ 726.379494][T11360] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.926387][T11360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.970157][T11360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.011522][T11036] Bluetooth: hci0: command tx timeout [ 727.032530][T11360] bond0 (unregistering): Released all slaves [ 727.389529][T11360] ovs_: left promiscuous mode [ 727.944635][T16230] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.962365][T16230] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.989919][T16230] bridge_slave_0: entered allmulticast mode [ 728.025939][T16230] bridge_slave_0: entered promiscuous mode [ 728.079393][T16230] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.127359][T16230] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.164778][T16230] bridge_slave_1: entered allmulticast mode [ 728.189809][T16230] bridge_slave_1: entered promiscuous mode [ 728.231113][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 728.502931][T16230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.627641][T16230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.865306][T11360] hsr_slave_0: left promiscuous mode [ 728.884762][T11360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.912462][T11360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.954687][T11360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.964839][T11360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.025960][T11360] veth0_macvtap: left promiscuous mode [ 729.049926][T11360] veth1_vlan: left promiscuous mode [ 729.074775][T11360] veth0_vlan: left promiscuous mode [ 729.088150][T11036] Bluetooth: hci0: command tx timeout [ 730.235973][T11360] team0 (unregistering): Port device team_slave_1 removed [ 730.317464][T11360] team0 (unregistering): Port device team_slave_0 removed [ 730.872111][T16230] team0: Port device team_slave_0 added [ 730.930601][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 730.967562][T16230] team0: Port device team_slave_1 added [ 731.126128][T16230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.170381][T11036] Bluetooth: hci0: command tx timeout [ 731.177062][T16230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.315500][T16230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.368974][T16230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.394289][T16230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.466219][T16230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.606721][T16356] FAULT_INJECTION: forcing a failure. [ 731.606721][T16356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 731.640042][T16356] CPU: 0 UID: 0 PID: 16356 Comm: syz.1.2368 Tainted: G L syzkaller #0 PREEMPT(full) [ 731.640099][T16356] Tainted: [L]=SOFTLOCKUP [ 731.640112][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 731.640132][T16356] Call Trace: [ 731.640145][T16356] [ 731.640158][T16356] dump_stack_lvl+0x100/0x190 [ 731.640204][T16356] should_fail_ex.cold+0x5/0xa [ 731.640243][T16356] ? prepare_alloc_pages+0x16d/0x5f0 [ 731.640299][T16356] should_fail_alloc_page+0xeb/0x140 [ 731.640343][T16356] prepare_alloc_pages+0x1f0/0x5f0 [ 731.640386][T16356] ? rcu_is_watching+0x12/0xc0 [ 731.640431][T16356] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 731.640491][T16356] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 731.640550][T16356] ? find_held_lock+0x2b/0x80 [ 731.640594][T16356] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 731.640645][T16356] ? mark_held_locks+0x40/0x70 [ 731.640699][T16356] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 731.640749][T16356] ? __lock_acquire+0x4a5/0x2630 [ 731.640783][T16356] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 731.640843][T16356] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 731.640944][T16356] ? __lock_acquire+0x4a5/0x2630 [ 731.640977][T16356] ? look_up_lock_class+0x55/0x120 [ 731.641027][T16356] ? __lock_acquire+0x4a5/0x2630 [ 731.641067][T16356] ? __lock_acquire+0x4a5/0x2630 [ 731.641098][T16356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 731.641151][T16356] ? policy_nodemask+0xed/0x4f0 [ 731.641195][T16356] alloc_pages_mpol+0x1fb/0x540 [ 731.641236][T16356] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 731.641283][T16356] ? find_held_lock+0x2b/0x80 [ 731.641322][T16356] ? __pud_alloc+0x4f6/0x690 [ 731.641357][T16356] ? __pud_alloc+0x4f6/0x690 [ 731.641394][T16356] alloc_pages_noprof+0x1a/0x160 [ 731.641431][T16356] __pmd_alloc+0x3b/0x950 [ 731.641463][T16356] ? __pud_alloc+0x4fb/0x690 [ 731.641499][T16356] huge_pte_alloc+0x5ee/0x730 [ 731.641539][T16356] copy_hugetlb_page_range+0x4ef/0x2c20 [ 731.641598][T16356] ? __pfx_copy_hugetlb_page_range+0x10/0x10 [ 731.641637][T16356] ? stack_depot_save_flags+0x27/0x9d0 [ 731.641674][T16356] ? kasan_save_stack+0x3f/0x50 [ 731.641711][T16356] copy_page_range+0x33a6/0x5b00 [ 731.641764][T16356] ? __lock_acquire+0x4a5/0x2630 [ 731.641792][T16356] ? find_held_lock+0x2b/0x80 [ 731.641835][T16356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 731.641879][T16356] ? mas_wr_walk_descend+0x506/0xac0 [ 731.641920][T16356] ? __lock_acquire+0x4a5/0x2630 [ 731.641948][T16356] ? mas_wr_store_entry+0xa1/0x1e80 [ 731.641989][T16356] ? __pfx_copy_page_range+0x10/0x10 [ 731.642043][T16356] ? __pfx___might_resched+0x10/0x10 [ 731.642089][T16356] ? up_write+0x28c/0x4f0 [ 731.642122][T16356] dup_mmap+0xd25/0x2180 [ 731.642173][T16356] ? __pfx_dup_mmap+0x10/0x10 [ 731.642211][T16356] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 731.642250][T16356] ? __lock_acquire+0x4a5/0x2630 [ 731.642293][T16356] ? find_held_lock+0x2b/0x80 [ 731.642333][T16356] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 731.642392][T16356] copy_process+0x7b37/0x7fa0 [ 731.642457][T16356] ? __pfx_copy_process+0x10/0x10 [ 731.642505][T16356] ? futex_hash+0x141/0x370 [ 731.642544][T16356] kernel_clone+0x12e/0x9c0 [ 731.642585][T16356] ? __pfx_futex_wait+0x10/0x10 [ 731.642629][T16356] ? __pfx_kernel_clone+0x10/0x10 [ 731.642690][T16356] __do_sys_clone+0xd9/0x120 [ 731.642736][T16356] ? __pfx___do_sys_clone+0x10/0x10 [ 731.642803][T16356] ? rcu_is_watching+0x12/0xc0 [ 731.642847][T16356] do_syscall_64+0x10b/0xf80 [ 731.642887][T16356] ? clear_bhb_loop+0x40/0x90 [ 731.642928][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.642965][T16356] RIP: 0033:0x7fcef259cdd9 [ 731.642993][T16356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.643025][T16356] RSP: 002b:00007fcef33ccfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 731.643054][T16356] RAX: ffffffffffffffda RBX: 00007fcef2815fa0 RCX: 00007fcef259cdd9 [ 731.643074][T16356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 731.643092][T16356] RBP: 00007fcef2632d69 R08: 0000000000000000 R09: 0000000000000000 [ 731.643110][T16356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 731.643129][T16356] R13: 00007fcef2816038 R14: 00007fcef2815fa0 R15: 00007ffe9f70e298 [ 731.643170][T16356] [ 732.419404][T16230] hsr_slave_0: entered promiscuous mode [ 732.470618][T16230] hsr_slave_1: entered promiscuous mode [ 732.497064][T16230] debugfs: 'hsr0' already exists in 'hsr' [ 732.535795][T16230] Cannot create hsr debugfs directory [ 732.983593][T16372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2371'. [ 733.021352][T16372] openvswitch: netlink: IP tunnel dst address not specified [ 733.846967][T16390] blktrace: Concurrent blktraces are not allowed on nullb0 [ 735.867528][T16230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 735.907423][T16230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 735.929937][T16230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 735.998550][T16230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.031655][T16230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 736.109469][T16230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.161354][T16230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 736.226680][T16230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 736.352638][T16428] binder: 16396:16428 ioctl 40086602 e20 returned -22 [ 736.670835][T16230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.768229][T16230] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.809086][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.816786][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.907359][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.914880][ T6678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.925914][T16230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.041720][T16230] veth0_vlan: entered promiscuous mode [ 739.132102][T16230] veth1_vlan: entered promiscuous mode [ 739.320438][T16230] veth0_macvtap: entered promiscuous mode [ 739.347416][T16230] veth1_macvtap: entered promiscuous mode [ 739.449139][T16230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.530909][T16230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.585325][ T6662] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.616456][ T6662] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.684381][ T6662] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.765063][ T6662] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.134993][ T6678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.166689][ T6678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.347284][ T6662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.384356][ T6662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.502161][T16503] blktrace: Concurrent blktraces are not allowed on nullb0 [ 740.865449][T16512] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 740.904155][T16512] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 742.800191][T16544] binder: 16533:16544 ioctl c0086202 ffffffffffffffff returned -22 [ 744.882921][T16571] binder: 16570:16571 ioctl c0086202 ffffffffffffffff returned -22 [ 746.249952][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2407'. [ 746.476887][T16599] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 746.531674][T16599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2407'. [ 746.612649][T16602] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 746.638409][T16602] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 747.747512][T16615] ovs_ÿþÿþ?: entered promiscuous mode [ 749.544603][T16644] blktrace: Concurrent blktraces are not allowed on nullb0 [ 749.708395][T16648] blktrace: Concurrent blktraces are not allowed on loop2 [ 750.041752][T16651] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 750.041816][T16651] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 750.534057][T16647] binder: 16645:16647 ioctl c0086202 ffffffffffffffff returned -22 [ 751.263188][T16663] Process accounting resumed [ 751.563187][T16660] Process accounting paused [ 752.867628][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.876006][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.837833][T16702] FAULT_INJECTION: forcing a failure. [ 753.837833][T16702] name failslab, interval 1, probability 0, space 0, times 0 [ 753.949834][T16702] CPU: 0 UID: 8 PID: 16702 Comm: syz.3.2433 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.949892][T16702] Tainted: [L]=SOFTLOCKUP [ 753.949906][T16702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 753.949929][T16702] Call Trace: [ 753.949941][T16702] [ 753.949955][T16702] dump_stack_lvl+0x100/0x190 [ 753.949999][T16702] should_fail_ex.cold+0x5/0xa [ 753.950051][T16702] should_failslab+0xc2/0x120 [ 753.950093][T16702] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 753.950150][T16702] ? key_alloc+0x3c5/0x1310 [ 753.950185][T16702] ? mark_held_locks+0x40/0x70 [ 753.950250][T16702] key_alloc+0x3c5/0x1310 [ 753.950301][T16702] ? __pfx_key_alloc+0x10/0x10 [ 753.950337][T16702] ? __pfx_key_default_cmp+0x10/0x10 [ 753.950380][T16702] ? __pfx_keyring_search_iterator+0x10/0x10 [ 753.950430][T16702] keyring_alloc+0x44/0xc0 [ 753.950475][T16702] look_up_user_keyrings+0x508/0x790 [ 753.950539][T16702] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 753.950593][T16702] ? futex_wake+0x1ad/0x530 [ 753.950643][T16702] ? __pfx_futex_wake+0x10/0x10 [ 753.950695][T16702] lookup_user_key+0xbb1/0x1300 [ 753.950756][T16702] ? __pfx_lookup_user_key+0x10/0x10 [ 753.950824][T16702] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 753.950886][T16702] ? __x64_sys_futex+0x34f/0x4d0 [ 753.950923][T16702] ? __x64_sys_futex+0x358/0x4d0 [ 753.950975][T16702] keyctl_session_to_parent+0x28/0xae0 [ 753.951044][T16702] __do_sys_keyctl+0x2b1/0x5a0 [ 753.951099][T16702] do_syscall_64+0x10b/0xf80 [ 753.951142][T16702] ? clear_bhb_loop+0x40/0x90 [ 753.951185][T16702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.951222][T16702] RIP: 0033:0x7fb1c779cdd9 [ 753.951251][T16702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.951287][T16702] RSP: 002b:00007fb1c860a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 753.951321][T16702] RAX: ffffffffffffffda RBX: 00007fb1c7a15fa0 RCX: 00007fb1c779cdd9 [ 753.951345][T16702] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 753.951366][T16702] RBP: 00007fb1c7832d69 R08: 0000000000000001 R09: 0000000000000000 [ 753.951387][T16702] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 753.951413][T16702] R13: 00007fb1c7a16038 R14: 00007fb1c7a15fa0 R15: 00007ffdf35ff878 [ 753.951459][T16702] [ 754.364072][ T5884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 754.386332][ T5884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 754.396503][ T5884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 754.405202][ T5884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 754.413884][ T5884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 754.777395][T16716] Process accounting resumed [ 755.186669][T16724] random: crng reseeded on system resumption [ 756.529662][ T5884] Bluetooth: hci3: command tx timeout [ 756.885309][T16707] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.912406][T16707] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.932888][T16707] bridge_slave_0: entered allmulticast mode [ 756.969264][T16707] bridge_slave_0: entered promiscuous mode [ 757.003443][T16707] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.031778][T16707] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.066446][T16707] bridge_slave_1: entered allmulticast mode [ 757.090119][T16707] bridge_slave_1: entered promiscuous mode [ 757.264282][T16707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.319172][T16707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.432822][T16707] team0: Port device team_slave_0 added [ 757.480863][T16707] team0: Port device team_slave_1 added [ 757.675142][T16707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.709761][T16707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.728951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 757.759104][T16707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.815868][T16707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.832838][T16707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.883046][T16707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.052377][T16707] hsr_slave_0: entered promiscuous mode [ 758.081696][T16707] hsr_slave_1: entered promiscuous mode [ 758.122722][T16707] debugfs: 'hsr0' already exists in 'hsr' [ 758.149155][T16707] Cannot create hsr debugfs directory [ 758.311499][T16761] blktrace: Concurrent blktraces are not allowed on nullb0 [ 758.610292][ T5884] Bluetooth: hci3: command tx timeout [ 759.088435][T16769] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 759.159514][T16769] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 759.584574][T16707] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 759.627658][T16707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 759.700376][T16707] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 759.727178][T16707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 759.752320][T16707] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 759.795644][T16707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 759.813608][T16707] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 759.864106][T16707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 760.524210][T16800] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 760.558382][T16800] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 760.688606][ T5884] Bluetooth: hci3: command tx timeout [ 761.013930][T16707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.108965][T16707] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.154695][ T6664] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.163100][ T6664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.244747][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.253227][ T6678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.762250][T16707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.770318][ T5884] Bluetooth: hci3: command tx timeout [ 763.524084][T16707] veth0_vlan: entered promiscuous mode [ 763.574026][T16707] veth1_vlan: entered promiscuous mode [ 763.585091][T16849] binder: 16840:16849 ioctl c0086202 ffffffffffffffff returned -22 [ 763.654631][T16707] veth0_macvtap: entered promiscuous mode [ 763.670572][T16707] veth1_macvtap: entered promiscuous mode [ 763.699518][T16707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.783361][T16707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.835567][ T6662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.850068][ T6662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.882515][ T6662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.933558][ T6662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.254521][ T6674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.301953][ T6674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.414790][ T6678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.429998][ T6678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.023329][T16851] binder: 16850:16851 ioctl c0086202 ffffffffffffffff returned -22 [ 765.370971][T16865] blktrace: Concurrent blktraces are not allowed on nullb0 [ 765.886093][T16874] FAULT_INJECTION: forcing a failure. [ 765.886093][T16874] name failslab, interval 1, probability 0, space 0, times 0 [ 765.939701][T16874] CPU: 0 UID: 0 PID: 16874 Comm: syz.1.2463 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.939757][T16874] Tainted: [L]=SOFTLOCKUP [ 765.939770][T16874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 765.939790][T16874] Call Trace: [ 765.939800][T16874] [ 765.939813][T16874] dump_stack_lvl+0x100/0x190 [ 765.939861][T16874] should_fail_ex.cold+0x5/0xa [ 765.939910][T16874] should_failslab+0xc2/0x120 [ 765.939949][T16874] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 765.940002][T16874] ? do_getname+0x35/0x390 [ 765.940058][T16874] do_getname+0x35/0x390 [ 765.940109][T16874] acct_on+0x91/0x9e0 [ 765.940153][T16874] ? __pfx_acct_on+0x10/0x10 [ 765.940195][T16874] ? bpf_lsm_capable+0x9/0x10 [ 765.940232][T16874] ? security_capable+0x80/0x260 [ 765.940285][T16874] __x64_sys_acct+0x81/0x1e0 [ 765.940326][T16874] ? lockdep_hardirqs_on+0x78/0x100 [ 765.940367][T16874] do_syscall_64+0x10b/0xf80 [ 765.940404][T16874] ? clear_bhb_loop+0x40/0x90 [ 765.940445][T16874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.940480][T16874] RIP: 0033:0x7fcef259cdd9 [ 765.940506][T16874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.940538][T16874] RSP: 002b:00007fcef33cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 765.940570][T16874] RAX: ffffffffffffffda RBX: 00007fcef2815fa0 RCX: 00007fcef259cdd9 [ 765.940593][T16874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000480 [ 765.940614][T16874] RBP: 00007fcef33cd090 R08: 0000000000000000 R09: 0000000000000000 [ 765.940633][T16874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.940653][T16874] R13: 00007fcef2816038 R14: 00007fcef2815fa0 R15: 00007ffe9f70e298 [ 765.940721][T16874] [ 765.975122][T16868] Process accounting resumed [ 766.498671][T16877] blktrace: Concurrent blktraces are not allowed on nullb0 [ 766.770859][T16892] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 766.927193][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'. [ 767.046787][ T5884] Bluetooth: hci0: unexpected event 0x03 length: 123 > 11 [ 767.082023][T16901] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 767.098448][T16901] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 767.426500][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2473'. [ 767.469007][T16909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2473'. [ 768.830455][T16931] blktrace: Concurrent blktraces are not allowed on nullb0 [ 768.897642][T16927] Process accounting resumed [ 771.124748][T16965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 771.424727][T16980] blktrace: Concurrent blktraces are not allowed on nullb0 [ 771.939281][T16994] FAULT_INJECTION: forcing a failure. [ 771.939281][T16994] name failslab, interval 1, probability 0, space 0, times 0 [ 771.963119][T16994] CPU: 1 UID: 0 PID: 16994 Comm: syz.3.2494 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.963179][T16994] Tainted: [L]=SOFTLOCKUP [ 771.963194][T16994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.963216][T16994] Call Trace: [ 771.963228][T16994] [ 771.963244][T16994] dump_stack_lvl+0x100/0x190 [ 771.963293][T16994] should_fail_ex.cold+0x5/0xa [ 771.963342][T16994] should_failslab+0xc2/0x120 [ 771.963551][T16994] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 771.963628][T16994] ? vm_area_alloc+0x1f/0x160 [ 771.963689][T16994] vm_area_alloc+0x1f/0x160 [ 771.963743][T16994] __mmap_region+0x104d/0x2da0 [ 771.963807][T16994] ? __pfx___mmap_region+0x10/0x10 [ 771.963868][T16994] ? __lock_acquire+0x4a5/0x2630 [ 771.963932][T16994] ? __lock_acquire+0x4a5/0x2630 [ 771.963968][T16994] ? do_raw_spin_unlock+0x145/0x1e0 [ 771.964011][T16994] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 771.964074][T16994] ? find_held_lock+0x2b/0x80 [ 771.964124][T16994] ? rcu_is_watching+0x12/0xc0 [ 771.964187][T16994] ? rcu_is_watching+0x12/0xc0 [ 771.964613][T16994] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 771.964665][T16994] ? lockdep_hardirqs_on+0x78/0x100 [ 771.964760][T16994] ? futex_unqueue+0x133/0x2c0 [ 771.964814][T16994] mmap_region+0x35d/0x620 [ 771.964853][T16994] ? rcu_is_watching+0x12/0xc0 [ 771.964910][T16994] ? __pfx_mmap_region+0x10/0x10 [ 771.964971][T16994] ? cap_mmap_addr+0x4b/0x120 [ 771.965026][T16994] ? bpf_lsm_mmap_addr+0x9/0x30 [ 771.965074][T16994] ? security_mmap_addr+0x71/0x1e0 [ 771.965119][T16994] ? __get_unmapped_area+0x255/0x3e0 [ 771.965177][T16994] do_mmap+0xc63/0x12f0 [ 771.965233][T16994] ? __pfx_do_mmap+0x10/0x10 [ 771.965290][T16994] ? __pfx_down_write_killable+0x10/0x10 [ 771.965357][T16994] vm_mmap_pgoff+0x29e/0x470 [ 771.965418][T16994] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 771.965470][T16994] ? do_futex+0x192/0x350 [ 771.965515][T16994] ? __pfx_do_futex+0x10/0x10 [ 771.965567][T16994] ksys_mmap_pgoff+0xe4/0x610 [ 771.965615][T16994] ? __x64_sys_futex+0x358/0x4d0 [ 771.965662][T16994] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 771.965710][T16994] ? xfd_validate_state+0x129/0x190 [ 771.965751][T16994] ? __task_pid_nr_ns+0x1ca/0x510 [ 771.965822][T16994] __x64_sys_mmap+0x125/0x190 [ 771.965879][T16994] do_syscall_64+0x10b/0xf80 [ 771.965928][T16994] ? clear_bhb_loop+0x40/0x90 [ 771.965979][T16994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.966022][T16994] RIP: 0033:0x7fb1c779cdd9 [ 771.966066][T16994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.966107][T16994] RSP: 002b:00007fb1c860a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 771.966144][T16994] RAX: ffffffffffffffda RBX: 00007fb1c7a15fa0 RCX: 00007fb1c779cdd9 [ 771.966173][T16994] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 771.966198][T16994] RBP: 00007fb1c7832d69 R08: ffffffffffffffff R09: 0000000000000000 [ 771.966226][T16994] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 771.966250][T16994] R13: 00007fb1c7a16038 R14: 00007fb1c7a15fa0 R15: 00007ffdf35ff878 [ 771.966299][T16994] [ 776.503658][T17055] FAULT_INJECTION: forcing a failure. [ 776.503658][T17055] name failslab, interval 1, probability 0, space 0, times 0 [ 776.541192][ T5884] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 776.584129][T17055] CPU: 1 UID: 0 PID: 17055 Comm: syz.3.2507 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.584167][T17055] Tainted: [L]=SOFTLOCKUP [ 776.584176][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 776.584191][T17055] Call Trace: [ 776.584199][T17055] [ 776.584210][T17055] dump_stack_lvl+0x100/0x190 [ 776.584290][T17055] should_fail_ex.cold+0x5/0xa [ 776.584321][T17055] should_failslab+0xc2/0x120 [ 776.584349][T17055] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 776.584388][T17055] ? security_file_alloc+0x34/0x2c0 [ 776.584414][T17055] ? trace_kmem_cache_alloc+0xd5/0x100 [ 776.584448][T17055] security_file_alloc+0x34/0x2c0 [ 776.584475][T17055] init_file+0x95/0x480 [ 776.584509][T17055] alloc_empty_file+0x79/0x1c0 [ 776.584545][T17055] path_openat+0xe8/0x31a0 [ 776.584578][T17055] ? stack_trace_save+0x8e/0xc0 [ 776.584611][T17055] ? __pfx_stack_trace_save+0x10/0x10 [ 776.584652][T17055] ? stack_depot_save_flags+0x27/0x9d0 [ 776.584679][T17055] ? __pfx_path_openat+0x10/0x10 [ 776.584710][T17055] ? kasan_save_stack+0x3f/0x50 [ 776.584732][T17055] ? kasan_save_stack+0x30/0x50 [ 776.584753][T17055] ? kasan_save_track+0x14/0x30 [ 776.584775][T17055] ? __kasan_slab_alloc+0x89/0x90 [ 776.584798][T17055] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 776.584835][T17055] ? do_getname+0x35/0x390 [ 776.584873][T17055] do_file_open+0x20e/0x430 [ 776.584907][T17055] ? __pfx_do_file_open+0x10/0x10 [ 776.584961][T17055] ? find_held_lock+0x2b/0x80 [ 776.584991][T17055] ? __might_fault+0xc5/0x140 [ 776.585032][T17055] ? __might_fault+0xc5/0x140 [ 776.585071][T17055] file_open_name+0x198/0x3b0 [ 776.585108][T17055] ? __pfx_file_open_name+0x10/0x10 [ 776.585149][T17055] ? do_getname+0x191/0x390 [ 776.585186][T17055] acct_on+0xa4/0x9e0 [ 776.585218][T17055] ? __pfx_acct_on+0x10/0x10 [ 776.585249][T17055] ? bpf_lsm_capable+0x9/0x10 [ 776.585276][T17055] ? security_capable+0x80/0x260 [ 776.585348][T17055] __x64_sys_acct+0x81/0x1e0 [ 776.585378][T17055] ? lockdep_hardirqs_on+0x78/0x100 [ 776.585406][T17055] do_syscall_64+0x10b/0xf80 [ 776.585433][T17055] ? clear_bhb_loop+0x40/0x90 [ 776.585462][T17055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.585487][T17055] RIP: 0033:0x7fb1c779cdd9 [ 776.585507][T17055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.585530][T17055] RSP: 002b:00007fb1c860a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 776.585554][T17055] RAX: ffffffffffffffda RBX: 00007fb1c7a15fa0 RCX: 00007fb1c779cdd9 [ 776.585571][T17055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000480 [ 776.585587][T17055] RBP: 00007fb1c860a090 R08: 0000000000000000 R09: 0000000000000000 [ 776.585602][T17055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.585616][T17055] R13: 00007fb1c7a16038 R14: 00007fb1c7a15fa0 R15: 00007ffdf35ff878 [ 776.585686][T17055] [ 779.550739][T17101] FAULT_INJECTION: forcing a failure. [ 779.550739][T17101] name failslab, interval 1, probability 0, space 0, times 0 [ 779.590403][T17101] CPU: 0 UID: 0 PID: 17101 Comm: syz.1.2516 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.590457][T17101] Tainted: [L]=SOFTLOCKUP [ 779.590467][T17101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 779.590483][T17101] Call Trace: [ 779.590492][T17101] [ 779.590502][T17101] dump_stack_lvl+0x100/0x190 [ 779.590535][T17101] should_fail_ex.cold+0x5/0xa [ 779.590572][T17101] ? tomoyo_encode2+0xfb/0x3c0 [ 779.590602][T17101] should_failslab+0xc2/0x120 [ 779.590633][T17101] __kmalloc_noprof+0xe0/0x850 [ 779.590674][T17101] ? d_absolute_path+0x136/0x1b0 [ 779.590720][T17101] tomoyo_encode2+0xfb/0x3c0 [ 779.590755][T17101] tomoyo_encode+0x29/0x50 [ 779.590783][T17101] tomoyo_realpath_from_path+0x18c/0x690 [ 779.590821][T17101] tomoyo_check_open_permission+0x2af/0x3c0 [ 779.590849][T17101] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 779.590886][T17101] ? hook_file_open+0x24e/0x7a0 [ 779.590932][T17101] ? path_get+0x61/0x80 [ 779.590970][T17101] tomoyo_file_open+0x6b/0x90 [ 779.591007][T17101] security_file_open+0xb5/0x1e0 [ 779.591036][T17101] do_dentry_open+0x5aa/0x1660 [ 779.591069][T17101] ? security_inode_permission+0xbf/0x250 [ 779.591099][T17101] vfs_open+0x82/0x3f0 [ 779.591140][T17101] path_openat+0x208c/0x31a0 [ 779.591217][T17101] ? __pfx_path_openat+0x10/0x10 [ 779.591261][T17101] do_file_open+0x20e/0x430 [ 779.591295][T17101] ? __pfx_do_file_open+0x10/0x10 [ 779.591350][T17101] ? alloc_fd+0x476/0x790 [ 779.591414][T17101] ? do_getname+0x191/0x390 [ 779.591468][T17101] do_sys_openat2+0x10d/0x1e0 [ 779.591521][T17101] ? __pfx_do_sys_openat2+0x10/0x10 [ 779.591571][T17101] __x64_sys_openat+0x12d/0x210 [ 779.591613][T17101] ? __pfx___x64_sys_openat+0x10/0x10 [ 779.591652][T17101] ? ksys_write+0x1ac/0x250 [ 779.591685][T17101] ? rcu_is_watching+0x12/0xc0 [ 779.591719][T17101] do_syscall_64+0x10b/0xf80 [ 779.591750][T17101] ? clear_bhb_loop+0x40/0x90 [ 779.591781][T17101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.591809][T17101] RIP: 0033:0x7fcef259cdd9 [ 779.591830][T17101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.591855][T17101] RSP: 002b:00007fcef33ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 779.591880][T17101] RAX: ffffffffffffffda RBX: 00007fcef2816090 RCX: 00007fcef259cdd9 [ 779.591897][T17101] RDX: 00000000000c0802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 779.591913][T17101] RBP: 00007fcef2632d69 R08: 0000000000000000 R09: 0000000000000000 [ 779.591929][T17101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.591945][T17101] R13: 00007fcef2816128 R14: 00007fcef2816090 R15: 00007ffe9f70e298 [ 779.591977][T17101] [ 779.593692][T17101] ERROR: Out of memory at tomoyo_realpath_from_path. [ 780.496707][ T5884] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 780.496753][ T5884] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 780.513339][ T5884] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 780.526045][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2520'. [ 780.555126][T17110] Process accounting resumed [ 783.416941][T17153] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 783.455376][T17153] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 784.101576][T17165] Process accounting resumed [ 785.587435][T17205] blktrace: Concurrent blktraces are not allowed on nullb0 [ 785.668148][T17203] syz.2.2543(17203): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 785.836621][ T30] audit: type=1800 audit(4294967365.040:22): pid=17202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2544" name="dbroot" dev="configfs" ino=70541 res=0 errno=0 [ 786.622482][T17207] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 786.631011][T17207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 786.687666][T17207] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 786.725452][T17207] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 786.847134][T17207] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 786.871378][T17207] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 786.941336][T17207] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 786.999146][T17207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 787.020258][T17207] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 787.050897][T17207] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 788.456791][ T5884] Bluetooth: hci4: command 0x0c1a tx timeout [ 788.689859][ T5884] Bluetooth: hci2: command 0x0c1a tx timeout [ 788.939878][ T5884] Bluetooth: hci0: command 0x0c1a tx timeout [ 789.009307][ T5884] Bluetooth: hci3: command 0x0c1a tx timeout [ 789.962958][T17267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2558'. [ 790.224321][T17267] hsr_slave_0 (unregistering): left promiscuous mode [ 790.769698][ T5884] Bluetooth: hci2: command 0x0c1a tx timeout [ 791.008712][ T5884] Bluetooth: hci0: command 0x0c1a tx timeout [ 791.088122][ T5884] Bluetooth: hci3: command 0x0c1a tx timeout [ 791.312869][T17294] FAULT_INJECTION: forcing a failure. [ 791.312869][T17294] name fail_futex, interval 1, probability 0, space 0, times 0 [ 791.371509][T17294] CPU: 0 UID: 0 PID: 17294 Comm: syz.1.2564 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.371561][T17294] Tainted: [L]=SOFTLOCKUP [ 791.371573][T17294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 791.371592][T17294] Call Trace: [ 791.371603][T17294] [ 791.371615][T17294] dump_stack_lvl+0x100/0x190 [ 791.371659][T17294] should_fail_ex.cold+0x5/0xa [ 791.371704][T17294] get_futex_key+0x1d2/0x1510 [ 791.371744][T17294] ? __pfx_get_futex_key+0x10/0x10 [ 791.371777][T17294] ? do_mmap+0x93f/0x12f0 [ 791.371815][T17294] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 791.371866][T17294] futex_wake+0xea/0x530 [ 791.371915][T17294] ? __pfx_futex_wake+0x10/0x10 [ 791.371979][T17294] do_futex+0x32b/0x350 [ 791.372017][T17294] ? __pfx_do_futex+0x10/0x10 [ 791.372057][T17294] ? fput+0x79/0x100 [ 791.372108][T17294] __x64_sys_futex+0x34f/0x4d0 [ 791.372148][T17294] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 791.372188][T17294] ? __pfx___x64_sys_futex+0x10/0x10 [ 791.372242][T17294] ? ksys_write+0x1ac/0x250 [ 791.372292][T17294] ? rcu_is_watching+0x12/0xc0 [ 791.372338][T17294] do_syscall_64+0x10b/0xf80 [ 791.372389][T17294] ? clear_bhb_loop+0x40/0x90 [ 791.372431][T17294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.372468][T17294] RIP: 0033:0x7fcef259cdd9 [ 791.372496][T17294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.372531][T17294] RSP: 002b:00007fcef33ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 791.372564][T17294] RAX: ffffffffffffffda RBX: 00007fcef2816098 RCX: 00007fcef259cdd9 [ 791.372587][T17294] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcef281609c [ 791.372609][T17294] RBP: 00007fcef2816090 R08: 0000000000000001 R09: 0000000000000000 [ 791.372631][T17294] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 791.372653][T17294] R13: 00007fcef2816128 R14: 00007ffe9f70e1b0 R15: 00007ffe9f70e298 [ 791.372698][T17294] [ 792.849197][ T5884] Bluetooth: hci2: command 0x0c1a tx timeout [ 793.113552][ T5884] Bluetooth: hci0: command 0x0c1a tx timeout [ 793.170865][ T5884] Bluetooth: hci3: command 0x0c1a tx timeout [ 794.573904][T17325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2572'. [ 796.364311][T17355] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 796.400377][T17354] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 798.912352][T17387] Process accounting paused [ 799.044140][T17397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2590'. [ 802.236686][T17415] binder: 17408:17415 ioctl 40086602 e20 returned -22 [ 804.867400][T17484] blktrace: Concurrent blktraces are not allowed on nullb0 [ 805.013707][T17485] binder: 17480:17485 ioctl c0086202 ffffffffffffffff returned -22 [ 806.166821][T17510] blktrace: Concurrent blktraces are not allowed on nullb0 [ 806.279378][T17491] Process accounting resumed [ 806.477156][T17520] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 806.502619][T17520] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 806.795198][T17524] binder: 17521:17524 ioctl c0086202 ffffffffffffffff returned -22 [ 807.444925][T17539] blktrace: Concurrent blktraces are not allowed on nullb0 [ 808.270540][T17546] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 808.415769][T17549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2634'. [ 808.837204][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 809.372308][T17555] __vm_enough_memory: pid: 17555, comm: syz.4.2636, bytes: 4398046457856 not enough memory for the allocation [ 809.703124][T17558] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 809.740791][T17558] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 811.452469][T17570] binder: 17564:17570 ioctl c0086202 ffffffffffffffff returned -22 [ 811.475423][T17567] Process accounting paused [ 814.290210][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.301307][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.757605][T17628] Process accounting paused [ 816.215997][T17640] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 817.702234][T17673] blktrace: Concurrent blktraces are not allowed on nullb0 [ 818.949646][T17699] blktrace: Concurrent blktraces are not allowed on nullb0 [ 819.836830][T17710] ubi0: attaching mtd0 [ 819.848228][T17710] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 820.172325][T17714] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2682'. [ 820.291903][T17715] Format for deleting device is "id" (uint). [ 820.748887][T17727] FAULT_INJECTION: forcing a failure. [ 820.748887][T17727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 820.826514][T17721] can: request_module (can-proto-3) failed. [ 820.847309][T17727] CPU: 0 UID: 0 PID: 17727 Comm: syz.4.2684 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.847357][T17727] Tainted: [L]=SOFTLOCKUP [ 820.847365][T17727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 820.847380][T17727] Call Trace: [ 820.847389][T17727] [ 820.847398][T17727] dump_stack_lvl+0x100/0x190 [ 820.847429][T17727] should_fail_ex.cold+0x5/0xa [ 820.847455][T17727] ? prepare_alloc_pages+0x16d/0x5f0 [ 820.847488][T17727] should_fail_alloc_page+0xeb/0x140 [ 820.847518][T17727] prepare_alloc_pages+0x1f0/0x5f0 [ 820.847548][T17727] ? rcu_is_watching+0x12/0xc0 [ 820.847581][T17727] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 820.847624][T17727] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 820.847665][T17727] ? __lock_acquire+0x4a5/0x2630 [ 820.847699][T17727] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 820.847738][T17727] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 820.847781][T17727] ? is_bpf_text_address+0x8a/0x1a0 [ 820.847815][T17727] ? look_up_lock_class+0x55/0x120 [ 820.847856][T17727] ? __lock_acquire+0x4a5/0x2630 [ 820.847883][T17727] ? __lock_acquire+0x4a5/0x2630 [ 820.847905][T17727] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 820.847982][T17727] ? policy_nodemask+0xed/0x4f0 [ 820.848035][T17727] alloc_pages_mpol+0x1fb/0x540 [ 820.848071][T17727] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 820.848099][T17727] ? find_held_lock+0x2b/0x80 [ 820.848206][T17727] ? __pud_alloc+0x4f6/0x690 [ 820.848238][T17727] ? __pud_alloc+0x4f6/0x690 [ 820.848311][T17727] alloc_pages_noprof+0x1a/0x160 [ 820.848503][T17727] __pmd_alloc+0x3b/0x950 [ 820.848548][T17727] ? __pud_alloc+0x4fb/0x690 [ 820.848588][T17727] copy_page_range+0x418b/0x5b00 [ 820.848645][T17727] ? __lock_acquire+0x4a5/0x2630 [ 820.848676][T17727] ? find_held_lock+0x2b/0x80 [ 820.848735][T17727] ? mas_wr_store_entry+0xa1/0x1e80 [ 820.848780][T17727] ? __pfx_copy_page_range+0x10/0x10 [ 820.848830][T17727] ? mas_store+0x666/0xac0 [ 820.848872][T17727] ? __pfx_mas_store+0x10/0x10 [ 820.848919][T17727] ? __pfx___vma_start_write+0x10/0x10 [ 820.848973][T17727] dup_mmap+0xd25/0x2180 [ 820.849035][T17727] ? __pfx_dup_mmap+0x10/0x10 [ 820.849072][T17727] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 820.849113][T17727] ? __lock_acquire+0x4a5/0x2630 [ 820.849145][T17727] ? find_held_lock+0x2b/0x80 [ 820.849186][T17727] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 820.849255][T17727] copy_process+0x7b37/0x7fa0 [ 820.849330][T17727] ? __pfx_copy_process+0x10/0x10 [ 820.849393][T17727] ? futex_hash+0x141/0x370 [ 820.849436][T17727] kernel_clone+0x12e/0x9c0 [ 820.849481][T17727] ? __pfx_futex_wait+0x10/0x10 [ 820.849529][T17727] ? __pfx_kernel_clone+0x10/0x10 [ 820.849604][T17727] __do_sys_clone+0xd9/0x120 [ 820.849648][T17727] ? __pfx___do_sys_clone+0x10/0x10 [ 820.849694][T17727] ? __fget_files+0x21f/0x3d0 [ 820.849758][T17727] ? rcu_is_watching+0x12/0xc0 [ 820.849804][T17727] do_syscall_64+0x10b/0xf80 [ 820.849844][T17727] ? clear_bhb_loop+0x40/0x90 [ 820.849887][T17727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.849924][T17727] RIP: 0033:0x7f0e7579cdd9 [ 820.849954][T17727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.849985][T17727] RSP: 002b:00007f0e766c5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 820.850016][T17727] RAX: ffffffffffffffda RBX: 00007f0e75a15fa0 RCX: 00007f0e7579cdd9 [ 820.850036][T17727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 820.850056][T17727] RBP: 00007f0e75832d69 R08: 0000000000000000 R09: 0000000000000000 [ 820.850076][T17727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 820.850097][T17727] R13: 00007f0e75a16038 R14: 00007f0e75a15fa0 R15: 00007ffdf620dc48 [ 820.850142][T17727] [ 821.875008][T17734] binder: 17733:17734 ioctl c0086202 ffffffffffffffff returned -22 [ 823.114943][T17760] nvme_fabrics: missing parameter 'transport=%s' [ 823.161825][T17760] nvme_fabrics: missing parameter 'nqn=%s' [ 825.313051][T17797] binder: 17796:17797 ioctl c0086202 ffffffffffffffff returned -22 [ 825.424895][T17805] capability: warning: `syz.3.2699' uses deprecated v2 capabilities in a way that may be insecure [ 826.136739][T17762] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 827.309934][T17831] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2706'. [ 827.338214][T17831] Zero length message leads to an empty skb [ 828.744676][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2710'. [ 828.774069][T17856] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 828.795753][T17856] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 829.294886][T17854] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 829.344121][T17854] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 829.364526][T17854] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 829.387320][T17854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 830.929003][ T5884] Bluetooth: hci4: command 0x0c1a tx timeout [ 831.169620][T17883] blktrace: Concurrent blktraces are not allowed on nullb0 [ 831.411141][ T5884] Bluetooth: hci3: command 0x0c1a tx timeout [ 831.417704][T11036] Bluetooth: hci0: command 0x0c1a tx timeout [ 831.427289][T11036] Bluetooth: hci2: command 0x0c1a tx timeout [ 831.633509][T17892] nvme_fabrics: missing parameter 'transport=%s' [ 831.654833][T17892] nvme_fabrics: missing parameter 'nqn=%s' [ 832.599169][T17909] syz.1.2725 uses obsolete (PF_INET,SOCK_PACKET) [ 833.102682][T17914] bridge0: port 3(netdevsim3) entered blocking state [ 833.126727][T17914] bridge0: port 3(netdevsim3) entered disabled state [ 833.145787][T17914] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 833.167630][T17914] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 833.193958][T17914] bridge0: port 3(netdevsim3) entered blocking state [ 833.204634][T17914] bridge0: port 3(netdevsim3) entered listening state [ 833.483859][T17920] binder: 17919:17920 ioctl c0086202 ffffffffffffffff returned -22 [ 835.109131][T17934] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 835.989945][T17938] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 836.430588][T17947] Process accounting paused [ 837.007176][T17967] Process accounting resumed [ 837.181812][T17969] smpboot: CPU 1 is now offline [ 837.824021][T17997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2746'. [ 837.865985][T17994] binder: 17982:17994 ioctl c0086202 ffffffffffffffff returned -22 [ 838.634986][T18007] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 838.678168][T18007] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 843.069877][T18092] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 843.107429][T18092] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 843.717226][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2776'. [ 844.217032][T18107] blktrace: Concurrent blktraces are not allowed on nullb0 [ 846.001772][T18140] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 846.044377][T18140] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 846.177783][T18136] Process accounting resumed [ 847.591167][T18167] Console: switching to colour VGA+ 80x25 [ 848.850554][ C0] bridge0: port 3(netdevsim3) entered learning state [ 849.245322][T18185] netlink: 'syz.2.2798': attribute type 1 has an invalid length. [ 849.338834][T18185] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2798'. [ 850.520136][T18212] netlink: 'syz.4.2804': attribute type 1 has an invalid length. [ 850.661940][T18212] netlink: 322 bytes leftover after parsing attributes in process `syz.4.2804'. [ 851.516006][T18234] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 851.552510][T18234] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 852.855080][T18264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2815'. [ 854.033715][T18278] blktrace: Concurrent blktraces are not allowed on nullb0 [ 855.599584][T18306] random: crng reseeded on system resumption [ 856.025355][T18303] hub 1-0:1.0: USB hub found [ 856.101522][T18303] hub 1-0:1.0: 1 port detected [ 856.809162][T18311] device-mapper: ioctl: Invalid ioctl structure: name þÿÿÿÿÿÿÿd, dev 3000000000 [ 857.897072][T18315] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2826'. [ 858.662247][T18327] block2mtd: device name too long [ 860.229633][T18345] mmap: syz.3.2834 (18345) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 864.210607][ C0] bridge0: port 3(netdevsim3) entered forwarding state [ 864.218222][ C0] bridge0: topology change detected, propagating [ 866.674738][T18411] Process accounting resumed [ 870.052225][T16707] Process accounting paused [ 870.685452][T17886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 870.712710][T17886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 870.727753][T17886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 870.741508][T17886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 870.749781][T17886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 872.850665][T17886] Bluetooth: hci1: command tx timeout [ 874.263988][T18500] futex_wake_op: syz.3.2870 tries to shift op by -2048; fix this program [ 874.416607][T18499] process 'syz.4.2869' launched './file0' with NULL argv: empty string added [ 874.474251][T18507] futex_wake_op: syz.3.2870 tries to shift op by -2048; fix this program [ 874.924976][T18518] openvswitch: netlink: Message has 4 unknown bytes. [ 874.940231][T17886] Bluetooth: hci1: command tx timeout [ 875.733630][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.744225][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.851644][T18458] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.912704][T18458] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.001697][T18458] bridge_slave_0: entered allmulticast mode [ 876.051334][T18458] bridge_slave_0: entered promiscuous mode [ 876.149138][T18458] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.185489][T18458] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.247381][T18458] bridge_slave_1: entered allmulticast mode [ 876.294329][T18458] bridge_slave_1: entered promiscuous mode [ 876.482357][T18458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.615068][T18458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.816434][T18527] Process accounting paused [ 876.963813][T18458] team0: Port device team_slave_0 added [ 877.008970][T17886] Bluetooth: hci1: command tx timeout [ 877.029467][T18458] team0: Port device team_slave_1 added [ 877.625355][T18458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.671728][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.830558][T18458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.922277][T18458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.964941][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.135627][T18458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.633136][T18458] hsr_slave_0: entered promiscuous mode [ 878.702514][T18458] hsr_slave_1: entered promiscuous mode [ 878.767743][T18458] debugfs: 'hsr0' already exists in 'hsr' [ 878.831676][T18458] Cannot create hsr debugfs directory [ 879.088336][T17886] Bluetooth: hci1: command tx timeout [ 880.276682][T18573] blktrace: Concurrent blktraces are not allowed on nullb0 [ 880.945748][T18458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 881.112421][T18458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 881.163011][T18458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 881.219248][T18458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 881.267516][T18458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 881.331166][T18458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 881.393570][T18458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 881.475558][T18458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 882.221286][T18458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.500660][T18458] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.597131][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.604857][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.725823][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.734109][ T6678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.962169][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2890'. [ 882.983137][T18458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 883.063893][T18458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 884.497457][T18621] zswap: compressor not available [ 885.800893][T18641] blktrace: Concurrent blktraces are not allowed on nullb0 [ 886.028439][T18458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.472108][T18458] veth0_vlan: entered promiscuous mode [ 887.563184][T18458] veth1_vlan: entered promiscuous mode [ 887.796253][T18458] veth0_macvtap: entered promiscuous mode [ 887.877262][T18458] veth1_macvtap: entered promiscuous mode [ 888.017485][T18458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.159996][T18458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.316256][T18665] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 888.331890][ T6678] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.394259][T18665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 888.408164][ T6678] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.490067][ T6678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.505410][T18665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 888.546026][ T6678] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.607530][T18665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 888.693035][T18665] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 888.994732][T18665] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 889.300310][T11360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.362970][T11360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.541998][T11360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.601963][T11360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.982505][T18458] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 890.128499][T17886] Bluetooth: hci4: command 0x0c1a tx timeout [ 890.448836][T17886] Bluetooth: hci2: command 0x0c1a tx timeout [ 890.528281][T17886] Bluetooth: hci0: command 0x0c1a tx timeout [ 890.688430][T17886] Bluetooth: hci1: command 0x0c1a tx timeout [ 890.760824][T18686] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 890.980648][T18684] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2863'. [ 891.076246][T18684] veth1_macvtap: left promiscuous mode [ 891.157342][T18694] blktrace: Concurrent blktraces are not allowed on nullb0 [ 892.768331][T17886] Bluetooth: hci1: command 0x0c1a tx timeout [ 894.075522][T18713] ================================================================== [ 894.084435][T18713] BUG: KASAN: slab-out-of-bounds in cache_seq_start_rcu+0x3fe/0x420 [ 894.093029][T18713] Read of size 8 at addr ffff88807bbcb800 by task syz.3.2910/18713 [ 894.101874][T18713] [ 894.104467][T18713] CPU: 0 UID: 0 PID: 18713 Comm: syz.3.2910 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.104506][T18713] Tainted: [L]=SOFTLOCKUP [ 894.104516][T18713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 894.104531][T18713] Call Trace: [ 894.104543][T18713] [ 894.104552][T18713] dump_stack_lvl+0x100/0x190 [ 894.104583][T18713] print_report+0x13d/0x4b0 [ 894.104619][T18713] ? __virt_addr_valid+0x239/0x430 [ 894.104660][T18713] ? cache_seq_start_rcu+0x3fe/0x420 [ 894.104706][T18713] kasan_report+0xdf/0x1d0 [ 894.104735][T18713] ? cache_seq_start_rcu+0x3fe/0x420 [ 894.104776][T18713] cache_seq_start_rcu+0x3fe/0x420 [ 894.104812][T18713] seq_read_iter+0x2c1/0x1270 [ 894.104849][T18713] seq_read+0x33b/0x4c0 [ 894.104873][T18713] ? __pfx_seq_read+0x10/0x10 [ 894.104906][T18713] ? __pfx_seq_read+0x10/0x10 [ 894.104930][T18713] proc_reg_read+0x240/0x330 [ 894.104957][T18713] ? __pfx_proc_reg_read+0x10/0x10 [ 894.104985][T18713] vfs_read+0x1e4/0xb30 [ 894.105017][T18713] ? __pfx_vfs_read+0x10/0x10 [ 894.105041][T18713] ? find_held_lock+0x2b/0x80 [ 894.105072][T18713] ? __fget_files+0x215/0x3d0 [ 894.105098][T18713] ? __fget_files+0x215/0x3d0 [ 894.105127][T18713] ? __fget_files+0x21f/0x3d0 [ 894.105157][T18713] __x64_sys_pread64+0x1eb/0x250 [ 894.105205][T18713] ? __pfx___x64_sys_pread64+0x10/0x10 [ 894.105235][T18713] ? rcu_is_watching+0x12/0xc0 [ 894.105265][T18713] do_syscall_64+0x10b/0xf80 [ 894.105294][T18713] ? clear_bhb_loop+0x40/0x90 [ 894.105323][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.105348][T18713] RIP: 0033:0x7fb1c779cdd9 [ 894.105369][T18713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.105398][T18713] RSP: 002b:00007fb1c85e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 894.105420][T18713] RAX: ffffffffffffffda RBX: 00007fb1c7a16090 RCX: 00007fb1c779cdd9 [ 894.105438][T18713] RDX: 000000000000f42c RSI: 0000000000000000 RDI: 0000000000000003 [ 894.105453][T18713] RBP: 00007fb1c7832d69 R08: 0000000000000000 R09: 0000000000000000 [ 894.105468][T18713] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000000 [ 894.105483][T18713] R13: 00007fb1c7a16128 R14: 00007fb1c7a16090 R15: 00007ffdf35ff878 [ 894.105506][T18713] [ 894.105515][T18713] [ 894.356314][T18713] Allocated by task 16230: [ 894.361157][T18713] kasan_save_stack+0x30/0x50 [ 894.366450][T18713] kasan_save_track+0x14/0x30 [ 894.371350][T18713] __kasan_kmalloc+0xaa/0xb0 [ 894.376146][T18713] __kmalloc_noprof+0x301/0x850 [ 894.381180][T18713] cache_create_net+0xa2/0x1f0 [ 894.386932][T18713] ip_map_cache_create+0x60/0x130 [ 894.394450][T18713] sunrpc_init_net+0x55/0x190 [ 894.400096][T18713] ops_init+0x1e2/0x5f0 [ 894.405106][T18713] setup_net+0x118/0x3a0 [ 894.409934][T18713] copy_net_ns+0x46f/0x7c0 [ 894.415114][T18713] create_new_namespaces+0x3ea/0xac0 [ 894.420985][T18713] unshare_nsproxy_namespaces+0xf2/0x220 [ 894.428356][T18713] ksys_unshare+0x438/0xab0 [ 894.433109][T18713] __x64_sys_unshare+0x31/0x40 [ 894.438861][T18713] do_syscall_64+0x10b/0xf80 [ 894.443928][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.450181][T18713] [ 894.452721][T18713] The buggy address belongs to the object at ffff88807bbcb000 [ 894.452721][T18713] which belongs to the cache kmalloc-2k of size 2048 [ 894.467332][T18713] The buggy address is located 0 bytes to the right of [ 894.467332][T18713] allocated 2048-byte region [ffff88807bbcb000, ffff88807bbcb800) [ 894.482986][T18713] [ 894.485362][T18713] The buggy address belongs to the physical page: [ 894.492050][T18713] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bbc8 [ 894.501386][T18713] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 894.511473][T18713] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 894.519579][T18713] page_type: f5(slab) [ 894.523861][T18713] raw: 00fff00000000040 ffff88813fe2e000 dead000000000100 dead000000000122 [ 894.533344][T18713] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 894.542522][T18713] head: 00fff00000000040 ffff88813fe2e000 dead000000000100 dead000000000122 [ 894.551771][T18713] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 894.561451][T18713] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 894.570559][T18713] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 894.579992][T18713] page dumped because: kasan: bad access detected [ 894.586873][T18713] page_owner tracks the page as allocated [ 894.592902][T18713] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7719, tgid 7716 (syz.3.421), ts 230668868405, free_ts 230660732585 [ 894.615269][T18713] post_alloc_hook+0x153/0x170 [ 894.620820][T18713] get_page_from_freelist+0x11a6/0x33b0 [ 894.626960][T18713] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 894.634673][T18713] new_slab+0xa6/0x6c0 [ 894.638979][T18713] refill_objects+0x277/0x420 [ 894.643956][T18713] __pcs_replace_empty_main+0x375/0x650 [ 894.649702][T18713] __kmalloc_noprof+0x688/0x850 [ 894.654628][T18713] sk_prot_alloc+0x10b/0x2a0 [ 894.659522][T18713] sk_alloc+0x36/0xe80 [ 894.664155][T18713] __netlink_create+0x5e/0x2c0 [ 894.669137][T18713] netlink_create+0x298/0x610 [ 894.674511][T18713] __sock_create+0x339/0x860 [ 894.679903][T18713] __sys_socket+0x14d/0x260 [ 894.684651][T18713] __x64_sys_socket+0x72/0xb0 [ 894.689918][T18713] do_syscall_64+0x10b/0xf80 [ 894.695015][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.701537][T18713] page last free pid 5625 tgid 5625 stack trace: [ 894.708077][T18713] __free_frozen_pages+0x747/0x1040 [ 894.714369][T18713] qlist_free_all+0x47/0xf0 [ 894.719533][T18713] kasan_quarantine_reduce+0x1a0/0x1f0 [ 894.726461][T18713] __kasan_slab_alloc+0x69/0x90 [ 894.731973][T18713] kmem_cache_alloc_noprof+0x241/0x6e0 [ 894.737930][T18713] sk_prot_alloc+0x60/0x2a0 [ 894.742540][T18713] sk_alloc+0x36/0xe80 [ 894.746836][T18713] inet_create+0x3a0/0x1060 [ 894.752195][T18713] __sock_create+0x339/0x860 [ 894.756919][T18713] __sys_socket+0x14d/0x260 [ 894.761576][T18713] __x64_sys_socket+0x72/0xb0 [ 894.766654][T18713] do_syscall_64+0x10b/0xf80 [ 894.771524][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.777772][T18713] [ 894.780674][T18713] Memory state around the buggy address: [ 894.786943][T18713] ffff88807bbcb700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 894.796013][T18713] ffff88807bbcb780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 894.804114][T18713] >ffff88807bbcb800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 894.812458][T18713] ^ [ 894.816679][T18713] ffff88807bbcb880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 894.825032][T18713] ffff88807bbcb900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 894.833284][T18713] ================================================================== [ 895.482514][T17886] Bluetooth: hci1: command 0x0c1a tx timeout [ 897.108590][T18713] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 897.116259][T18713] CPU: 0 UID: 0 PID: 18713 Comm: syz.3.2910 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.127605][T18713] Tainted: [L]=SOFTLOCKUP [ 897.132431][T18713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 897.143740][T18713] Call Trace: [ 897.147199][T18713] [ 897.151376][T18713] dump_stack_lvl+0x100/0x190 [ 897.157725][T18713] vpanic+0x552/0x970 [ 897.162372][T18713] ? __pfx_vpanic+0x10/0x10 [ 897.167537][T18713] ? cache_seq_start_rcu+0x3fe/0x420 [ 897.173162][T18713] panic+0xd1/0xe0 [ 897.177418][T18713] ? __pfx_panic+0x10/0x10 [ 897.182392][T18713] ? cache_seq_start_rcu+0x3fe/0x420 [ 897.188786][T18713] ? preempt_schedule_common+0x42/0xc0 [ 897.194409][T18713] ? check_panic_on_warn+0x1f/0x90 [ 897.199776][T18713] check_panic_on_warn.cold+0x19/0x34 [ 897.205725][T18713] end_report.part.0+0x3a/0x90 [ 897.211211][T18713] kasan_report.cold+0xe/0x18 [ 897.216216][T18713] ? cache_seq_start_rcu+0x3fe/0x420 [ 897.222003][T18713] cache_seq_start_rcu+0x3fe/0x420 [ 897.227238][T18713] seq_read_iter+0x2c1/0x1270 [ 897.232519][T18713] seq_read+0x33b/0x4c0 [ 897.236907][T18713] ? __pfx_seq_read+0x10/0x10 [ 897.242420][T18713] ? __pfx_seq_read+0x10/0x10 [ 897.247244][T18713] proc_reg_read+0x240/0x330 [ 897.252224][T18713] ? __pfx_proc_reg_read+0x10/0x10 [ 897.257577][T18713] vfs_read+0x1e4/0xb30 [ 897.261863][T18713] ? __pfx_vfs_read+0x10/0x10 [ 897.267068][T18713] ? find_held_lock+0x2b/0x80 [ 897.272679][T18713] ? __fget_files+0x215/0x3d0 [ 897.278289][T18713] ? __fget_files+0x215/0x3d0 [ 897.283377][T18713] ? __fget_files+0x21f/0x3d0 [ 897.289941][T18713] __x64_sys_pread64+0x1eb/0x250 [ 897.295797][T18713] ? __pfx___x64_sys_pread64+0x10/0x10 [ 897.301815][T18713] ? rcu_is_watching+0x12/0xc0 [ 897.307605][T18713] do_syscall_64+0x10b/0xf80 [ 897.312880][T18713] ? clear_bhb_loop+0x40/0x90 [ 897.318288][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.325012][T18713] RIP: 0033:0x7fb1c779cdd9 [ 897.329827][T18713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.350762][T18713] RSP: 002b:00007fb1c85e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 897.360621][T18713] RAX: ffffffffffffffda RBX: 00007fb1c7a16090 RCX: 00007fb1c779cdd9 [ 897.369690][T18713] RDX: 000000000000f42c RSI: 0000000000000000 RDI: 0000000000000003 [ 897.378177][T18713] RBP: 00007fb1c7832d69 R08: 0000000000000000 R09: 0000000000000000 [ 897.387438][T18713] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000000 [ 897.396401][T18713] R13: 00007fb1c7a16128 R14: 00007fb1c7a16090 R15: 00007ffdf35ff878 [ 897.404756][T18713] [ 897.408061][T18713] Kernel Offset: disabled [ 897.413286][T18713] Rebooting in 86400 seconds..