last executing test programs: 17m43.504340133s ago: executing program 1 (id=2197): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xffffffffffffffff, 0x20009, 0x4df, 0x20000000000e31, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0xe4e, 0xdc5, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x200000000007, 0x40009, 0xdf, 0x8000000000000011, 0xffffffffffffffff, 0x619d) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x0, 0x0) r1 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioprio_set$auto(0x2, 0x0, 0x1000000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x710f}, 0xa) poll$auto(0x0, 0x5, 0x108) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0xfffffffffffffffd, 0x4020009, 0xdf, 0xeb0, 0xffffffffffffffff, 0x80) setns(0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x14}}, 0x4000081) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x5e600ddb52ae03ee, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x100211, r0, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "09003d000000020a000000000600"}, 0x5b) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x383f519a, 0xffffffffffffa781, 0x0, 0x5b10, 0x3) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000100), r3) symlink$auto(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00') r4 = open(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x903080, 0xa1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nbd8\x00', 0x8000, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8095}, 0x404c081) 17m42.196823107s ago: executing program 1 (id=2203): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5429, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0xb, 0x6, 0x8001, 0x10, 0x6, 0x10000, 0xefe, 0xfffffff9, 0x5, 0x8001, 0x62f, 0x101, 0x8, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x9, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0xfffff1b6, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1cec, 0x9, 0x34b5, 0xfff, 0x5, 0x4, 0x2, 0x1000, 0x9, 0x0, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x5, 0x4, 0x80, 0x6ed, 0x0, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x1000005, 0x400, 0x7, 0x4, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78d, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x4, 0x5, 0xfffff43e, 0x0, 0x4f000, 0xfe, 0x5, 0x7, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xf2, 0x0, 0x7fffffff, 0x7f77, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x0, 0x5, 0x1000, 0x1, 0x7, 0x400, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ac0)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf250100000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x84) socket(0x2, 0x1, 0x106) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x361101, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r5, 0x5452, &(0x7f0000000080)={0x80, 0xbed0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = io_uring_setup$auto(0x401, 0x0) ioctl$auto_MEMLOCK(r6, 0x40084d05, 0x0) timer_gettime$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xcff, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, &(0x7f00000003c0)='7\x00\\\xa0\x04\x9c\"\xa9Nd_\xff\xa0k\xd8\xc9\xba\x00\xb5\x89\x8cg\xa84\xd8D)\xfdcR8\xdb\x98\xc5\xd7\x94\x94\xda\xc0r\x8f)\xbb_\xa2\fz\xe1\xffm\xf9t\x012A\xc8%H\x88\xaej\xda\xae\x1dO\xd7\x88?\x19\xf3\x068\xb4e\xb5\x93\x9a\xb9|Kh\xc2d\xb2\x9f\xb0\xf7\b\xba\x17\"-\x90\xda\xac\xe5\x1fb~8\xf2q\x0e\x98A[\xbb5\xb8\xeb\n!\x80r*}\x9cS5\xff0\xe9\xafx\xe9\x17\xbd\xf9m\xfa\xac`\x1d\xa3\xeb\xb1[\x971\xd92\xce=V\xe8\xb3}\xc2\x17k{\x182}\xe1\xa5\x05!\aws(\x19\xfe\x82?\x14L\x7f\xc0By\xa7\xca\xcbB\xd7?\x97', 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r7, 0x0, 0x7) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0xc}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f00000002c0)={0xffffffffffffffff, 0xfff, 0x6}, 0x40, 0xffffc) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioctl$auto_KVM_GET_API_VERSION(r6, 0xae00, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x4, 0x8000) 17m40.19133287s ago: executing program 1 (id=2210): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000140)={"2a3acdadebd503233f8627dc01fad2d28de9e7b31673ea6084a58d804640be56efe06ba46edc72d286b0c73c3a12dc4d02cb38d7167aa30fa69c23079456cf6b995f2c27cf3661c0a37d5be662f9152e425f9a02b9f803cb6878f9180cd042167e7ba5b006dbdf90bfd852cc0f38149d217c115b340258edb063c10e76b077bf", "d547497b022e6a7e6dc9c0fd4c10dbd964ab56dd83df66ba9664e584b171847cebd5cdd677f00eeb8fd8fc79c0961beca005bc961ed35f6c064f573d3a6fbd9654345da48e75577120cfb77bd2f8db7c45a6e304a29c2839fd538032b8f883a64b9f265ef859eb71d82736a2397e724b4d4439fa13ac216c5af8037fcb1192a0", 0x1}) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000c00)) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mmap$auto(0x0, 0x2020006, 0x6, 0xeb1, 0xfffffffffffffffa, 0x7ffe) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x882, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x1ffffffffffe, 0xd59f) r2 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x89a0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0xc41, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) 17m39.049178736s ago: executing program 1 (id=2215): r0 = socket(0x10, 0xa, 0xf) sendto$auto(r0, &(0x7f0000000180)="f57882d1e42cca5e9d0b19c1c7c573ea434c6d5c34218dafdd08398e998ba4a286357c70af880c2d35546e51ef7aaa1777ec8f0a5275dcbf9e1089fc7947c9618265c7869d5ef666d6b705788b2d6758c7eb78d833a027f991142203f144f08ffd", 0x3fc, 0xfd, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x3) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0x8000, 0x1d, 0x403, 0x8000000008000) clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, &(0x7f0000000240)="a89f3fdf30e45e6b1ab7425e238386d0021b6e9bd906171bbe923c0c56cbdb1dc79e942ec3d790ba07821b465403343e338216a8fdfa96037d0f281f87b7e2a473fa99b46e30fe0fdfd98833e266dc95c5099ec05b3a42a80cb98da0b70e4ea6da29ef9e311fe63d827a7610850d77b1be566b58561e1d92d8169b1f4c0ea969a1c5cf8953914673dde768a2bca3f767d9b2badbf07f4fefe3ce8ef9ca") io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) socket(0x23, 0x0, 0xf) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x28000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) setsockopt$auto(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xc089) futex$auto(&(0x7f0000000b40)=0x1, 0x6, 0x6, &(0x7f0000000b80)={0xd0, 0x4}, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x40200, 0x0) clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf) fremovexattr$auto(r1, &(0x7f0000000000)='system.posix_acl_access\x00') recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0x801, 0x106) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') 17m38.126882169s ago: executing program 1 (id=2220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000002180), 0x100, 0x0) ioctl$auto(r2, 0x80200000, 0xffffffffffffffff) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000080)={0x7, 0x52, 0x0, 0x4, 0x0, 0x0}) r5 = getpgid$auto(0xffffffffffffffff) shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x7, 0xee01, 0xee01, 0x6, 0x8, 0x3, 0x3}, 0x2, 0xffffffff, 0x63d8, 0x7, @inferred=0xffffffffffffffff, @inferred, 0xe, 0x0, &(0x7f00000000c0)="7128917b65fa857ee475b597a03eecc5d97cc01b9d237c531f94f7aa75f972c24b57a2a14fd05dd0099fedb0495ddac08078ce192f4883d4c6a8fbd4d5da2fb3c08b701703f0ef2dac377c8cdc08829d61b57ebbb40803bce28cb864dd74d0b074d5ca92f0d79f6589b1ab2a25b506bf3bb3ca4cd4c28bca3c9ea6bd943f6cb6cdab9bda61ab00a34a266bdf66f9329a84b54e31049958965aa05be9f95434e2b4b2d6f798080f8af8048c26ff43a73cb7f212a322dc4389c7547f148900b255635daca538906673a7e1e03aef7b127405f39ef5d272643b25d1815e97600e5b08b4a7e14931314f19067324d1", &(0x7f00000001c0)="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"}) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001240)={0x460, r1, 0x801, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x44c, 0x2e, 0x0, 0x1, [@nested={0xe4, 0x6d, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x9d, 0x0, 0x0, @uid=r3}, @typed={0x15, 0x17, 0x0, 0x0, @binary="ae24d45faceb47156bba776e029be43ba5"}, @nested={0x4, 0x10}, @nested={0x4, 0xd6}, @nested={0x4, 0xb9}, @typed={0xab, 0x32, 0x0, 0x0, @binary="7bd0ab470cf91af1bc72d8f69a8995742303917e3af6a9575f014cdbca855fa0e705cccff200324f898a3baea7ea5eaaa5eef652aa0725d0c963cff967fc5dfe884263411f21713d638c3e3b8607d195aa85623607ff11b9e8782522fb5ebf98c06e632a35bdbf7b7d46c4b60f60bb4f4189fcad065629bd59b475e74d7b2d470a832ad911bf64db67610d91bec960778f082f6053cbb5f183b0ccb9e00a7341261d0c9d7fc606"}]}, @generic="ae04b09e7c9749f1d247dec21348611d11890796bc4f4c377742aad87707c6cd1a94797e94e15361c1679088be38441b6864c1e0dcc2b04f67b1b50713520dce6d7fc044b5f581db08389f079d357768ec83744c285a9a7198fa1edb07829370148666b3b140add783f44eaae647986a55d08a4219f2f0c483f1534f16fc59bd6349079e2e08c83bc4bb228178ec77c88d675f74cfe186e297e5e8c905ebbb5de0736926b92628a12923c22825a1", @generic="9a6d9d4673e0aefc66cf7a8358b8ebe935e7eb44c1b2eb4ae8f696dd5419b1d984b029eaa9", @nested={0x1f9, 0x147, 0x0, 0x1, [@typed={0x8, 0xf9, 0x0, 0x0, @pid=r4}, @generic="aef67c1efba402c280d9c756deb27f9ce58200daacc8a1b150a2dd53cfa5d121bb360dcb9940a57471348e7a93a06cffd3417bf1c33e24afc9e548a5c45af62a0265cf59700d4987a782dc2741c61d70334056d6846f0ccdffdbe1405b5b9bd26d29afb0736830f4681b13271b27a5dbb0661609fe00ef6ad4be4be41d301abbf2f9c15950cf012f1249bfa7b069de64a0423252b6e78448a82d", @generic="8cba751fd318e51301195cb1bb160fdcb618a894f0ca3fb049429a00e3f89ff1b605daeb76113c7686979e803b", @generic, @typed={0x8, 0x142, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xc8, 0x0, 0x0, @uid=r6}, @generic="ca321e6100835027dea5519dfb00816142b5d1ffb4cfa800d04f8ba40223c63783e5b3c0dce1d0dd12ba83673723ec272f88bd3bf95671ef0730cb4141ff46c79b", @generic="57b413f554568c19ead67188e97521149ec11164bba3fc8215610f08fce408394c7d06949531a1a9bab683dff57ea43add2d5bb0b81ebe51b166941213eca6ac0f9fcf99d17de069a20ac43320bbb98b6e46092885a3a3abe1e74bf35b43a99e9d62925d187fc5dfc290bebbe257704232ce7cc22310b25e5fd39a84c382d8e167eecffe7780f5cf60a7d615038bcca429338ff9649049d2ed9bab8111dfa771af2bf8e03117fac73fc7117c102b8f9c5a3e92e5eb5d50e73880eea4a5cc7fa7a60c86de371724ef82d7445aa54fb0b1dfb811ede5"]}, @typed={0x8, 0x16, 0x0, 0x0, @fd}, @typed={0xc, 0x137, 0x0, 0x0, @u64=0x7}, @generic="88669077b85c678aedc362b5e23a756986fe09b06dc9cb34e5e1b22ac59b401d7fc68fb2ccca00ae5f76f0942d576285346c298ba39fe76c77701715af04205d6fd76ae1610213ee235c2c5c981503b1d390d4590f3dabc8ceb87f7632fab3df792d0f8626edffa7eec8767975efb66b0d81e0318c01d5ed7ddb76090a70c72de3"]}]}, 0x460}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) io_uring_register$auto(r7, 0x80000000, 0x0, 0x76a7ceb) setrlimit$auto(0x8, 0x0) mmap$auto(0x7fffffffe000, 0x61, 0x100001000000004, 0xfa31, 0x403, 0x8000) 17m37.211955792s ago: executing program 1 (id=2224): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) r2 = io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x2, 0x88) r4 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_prog_fd=r1}, 0xa3) r6 = bpf$auto(0x9, &(0x7f0000000040)=@link_update={r4, @new_prog_fd=r5, 0x1, @old_prog_fd=r2}, 0x9) r7 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) dup$auto(r6) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') waitid$auto(0x9, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000001c0)={{0x4, 0x4000000000002}, {0x3}, 0xffffffffffffff74, 0x3ff, 0x4, 0x3, 0x4, 0x3, 0x7c3, 0x6, 0x1, 0x3, 0x8, 0x2, 0x9, 0x200}) r9 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r9, 0xfffffff7effffd07, &(0x7f00000001c0)) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8}, @GTPA_MS_ADDRESS={0x8}, @GTPA_VERSION={0x8, 0x2, 0xd}, @GTPA_LINK={0x8, 0x1, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x80) 17m36.669367792s ago: executing program 32 (id=2224): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) r2 = io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x2, 0x88) r4 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_prog_fd=r1}, 0xa3) r6 = bpf$auto(0x9, &(0x7f0000000040)=@link_update={r4, @new_prog_fd=r5, 0x1, @old_prog_fd=r2}, 0x9) r7 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) dup$auto(r6) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') waitid$auto(0x9, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000001c0)={{0x4, 0x4000000000002}, {0x3}, 0xffffffffffffff74, 0x3ff, 0x4, 0x3, 0x4, 0x3, 0x7c3, 0x6, 0x1, 0x3, 0x8, 0x2, 0x9, 0x200}) r9 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r9, 0xfffffff7effffd07, &(0x7f00000001c0)) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8}, @GTPA_MS_ADDRESS={0x8}, @GTPA_VERSION={0x8, 0x2, 0xd}, @GTPA_LINK={0x8, 0x1, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x80) 17m34.53402719s ago: executing program 0 (id=2228): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) 17m32.478116482s ago: executing program 0 (id=2232): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169001, 0x0) ioctl$auto(r0, 0xc0285629, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r1 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sysfs$auto(0x7, 0x5, 0x8000) close_range$auto(r1, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/ht40allow_map\x00', 0xc9400, 0x0) read$auto(r2, &(0x7f0000000040)='^{-!S\x84\x00', 0x9) write$auto(0x3, 0x0, 0x8) read$auto(0x3, 0x0, 0x7fffffff) 17m27.642916715s ago: executing program 0 (id=2244): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00002fef", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf2565000000080009000100000006001a01050000000400d100"], 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x202000, 0x0) write$auto_proc_loginuid_operations_base(r1, &(0x7f00000001c0)="7d0d656920b70e2aaf9f86ca16c4595cfa78e38d4e4a2ff215d5190c8e31cf0207ca311ab035dbce60e8075351a4c5272c74a2a3f241d2460716c52bba6b690196385d40f9bfa8d905a7f27fd67765dd4fc11c9c6107a8b350b5fa2bf9031ad389dfe8e6d7c70c", 0x67) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x86, 0x9, 0x0, 0x5) socket(0x1, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6b) connect$auto(0x3, 0x0, 0x6b) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/buffer_size_kb\x00', 0x101000, 0x0) 17m27.4165715s ago: executing program 0 (id=2245): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x801, 0x100) setsockopt$auto_SO_TIMESTAMPING_OLD(r0, 0x6, 0x1f, 0x0, 0x3ff) semctl$auto_SETVAL(0x0, 0xffffff83, 0x10, 0xfff) (async) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0) (async) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r1, 0x0) (async) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20342, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) (async) socket(0x10, 0x2, 0x0) socket(0x2c, 0x3, 0x0) socket(0x15, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0x100) (async) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x1) (async) socket(0x2, 0x801, 0x106) (async) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) (async) io_uring_setup$auto(0x6, 0x0) (async) r3 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x8, @old_prog_fd=r3}, 0xa3) 17m26.710309684s ago: executing program 0 (id=2247): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000"], 0x14}}, 0x24048004) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) mmap$auto(0x0, 0x3, 0x9, 0x3132, 0x4008df3, 0x0) getsockopt$auto(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000002c00010004000000000000000c00010040000000000000000a"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r5 = socket(0x10, 0x2, 0x6) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x5, 0x400a) 17m25.222857257s ago: executing program 0 (id=2252): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram14/ro\x00', 0xc040, 0x0) (async) writev$auto(0xffffffffffffffff, 0x0, 0x3) (async) r0 = socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) r1 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, 0x0) (async) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, &(0x7f0000000300)=0xf3) (async) socket(0x10, 0x2, 0xff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) (async) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) sysfs$auto(0x2, 0x42, 0x0) (async) prctl$auto_PR_SYS_DISPATCH_ON(0x2, 0x1, r1, 0x400, 0x1) (async, rerun: 32) write$auto(0x3, 0x0, 0xfdf3) (rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000810) (async) modify_ldt$auto(0x200003, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40100, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) socket(0x10, 0x2, 0x0) 17m10.085691181s ago: executing program 33 (id=2252): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram14/ro\x00', 0xc040, 0x0) (async) writev$auto(0xffffffffffffffff, 0x0, 0x3) (async) r0 = socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) r1 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, 0x0) (async) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, &(0x7f0000000300)=0xf3) (async) socket(0x10, 0x2, 0xff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) (async) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) sysfs$auto(0x2, 0x42, 0x0) (async) prctl$auto_PR_SYS_DISPATCH_ON(0x2, 0x1, r1, 0x400, 0x1) (async, rerun: 32) write$auto(0x3, 0x0, 0xfdf3) (rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000810) (async) modify_ldt$auto(0x200003, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40100, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) socket(0x10, 0x2, 0x0) 1m45.074693094s ago: executing program 3 (id=5490): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) epoll_create$auto(0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) epoll_ctl$auto(0x5, 0x3, r3, 0x0) setresuid$auto(0x8, 0x8, 0x0) r4 = setfsuid$auto(0xee00) setreuid$auto(r4, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) timer_create$auto(0x0, 0x0, &(0x7f0000000200)=0x1000004) timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}}) msgsnd$auto(0x2, 0x0, 0x65, 0xfffffffd) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r6, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r7, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 1m43.949622965s ago: executing program 3 (id=5492): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) r1 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) (rerun: 64) read$auto(r1, 0x0, 0x1) (async, rerun: 64) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) msgctl$auto_IPC_INFO(0x6, 0x3, 0x0) (async) r3 = pidfd_open$auto(r0, 0x1613bfa2) ioctl$auto_BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000100)={0xfff, 0x864, 0x6, 0x61f, {0x3, 0x6, 0x3, 0x401, 0x2, 0x5, 0x3, 0x4, 0x0, 0x9, 0x80000000, 0xf0, 0xb, 0x3, 0x6}}) (async) socket(0x2, 0x1, 0x0) (async) getsockopt$auto(r2, 0x0, 0x43, 0x0, &(0x7f0000000040)=0x1e) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x7fffffff, 0x0, 0x9) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r4, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001ac0)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) (async) r7 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x101480, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r7, 0x8008330e, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) chdir$auto(&(0x7f00000000c0)='./file0\x00') (rerun: 32) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/card1/pcm1c/sub0/xrun_injection\x00', 0x80480, 0x0) read$auto(r8, &(0x7f0000000000)='/\x00', 0x6) (async, rerun: 32) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x200, 0x0) (rerun: 32) munmap$auto(0x8, 0x6) (async) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) madvise$auto(0x0, 0x1, 0xc) 1m40.94290107s ago: executing program 3 (id=5495): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) madvise$auto(0x4, 0x7, 0x2) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) brk$auto(0x40008000) sendmsg$auto_ETHTOOL_MSG_FEC_GET(0xffffffffffffffff, 0x0, 0x8080) mmap$auto(0xb, 0x2020005, 0x1, 0xfffffffffffff593, 0xffffffffffffffff, 0xffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0x1181, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) 1m27.922123931s ago: executing program 3 (id=5515): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x7f, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x6, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) madvise$auto(0x0, 0x400053, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x2, 0x2) ioctl$auto_IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000200)={0x333f, 0x5, 0x200}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d7) listen$auto(0x3, 0x81) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_MEMGETINFO(r3, 0x80204d01, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) 1m22.79499287s ago: executing program 3 (id=5524): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) madvise$auto(0x4, 0x7, 0x2) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x4d, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) brk$auto(0x40008000) sendmsg$auto_ETHTOOL_MSG_FEC_GET(0xffffffffffffffff, 0x0, 0x8080) mmap$auto(0xb, 0x2020005, 0x1, 0xfffffffffffff593, 0xffffffffffffffff, 0xffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0x1181, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) socket(0xa, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) 1m15.094757232s ago: executing program 3 (id=5551): close_range$auto(0x0, 0xffffffffffffffff, 0x2) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xf, 0x80000040df, 0x9b72, 0x2, 0x8000) madvise$auto(0x1, 0x4bcf, 0x15) madvise$auto(0x5, 0x4, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000200), 0x600, 0x0) mmap$auto(0x3, 0x0, 0x4, 0x200000eb0, 0xffffffffffffffff, 0x705cf82b) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/midi2\x00', 0x234001, 0x0) select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948b, 0x3, 0x0, 0x3, 0x59, 0x60, 0x80000000, 0x0, 0x6d3c, 0x8004, 0xa, 0xfffffff7fffffffc]}, 0x0) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000340)="63e46100000000000000003c2cae6cbe0b1f4c13dc13b0bb94c70829c8a61424f02b520b16b55f0bb9c47da2799dc4a6cc836e0853177e1921f70f163dd2693761c90eb9c4eea0e24fad4d78827b004409eb354ec668c36f996717c25517b594075d1810f596b55976debc715e8280687afbcce0b5069660ea9bc113671ac9", 0x7f) getpid() mmap$auto(0x0, 0x2020009, 0x40000000000003, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x25) write$auto(r3, 0x0, 0xfffffdf1) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=':,\x00', 0x1000) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) utimes$auto(&(0x7f00000000c0)=':,\x00', 0x0) mprotect$auto(0x1ff, 0x7, 0x8) mmap$auto(0xffffff7fffff5f79, 0x0, 0x4, 0xffffffffffffffd9, r2, 0x8000) r4 = socket(0x2b, 0x1, 0x1) r5 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv$auto(r5, &(0x7f0000000580)={0x0, 0x10001}, 0x1) getsockopt$auto(r4, 0x11e, 0x1, 0xfffffffffffffffe, 0x0) 1m0.106407741s ago: executing program 34 (id=5551): close_range$auto(0x0, 0xffffffffffffffff, 0x2) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xf, 0x80000040df, 0x9b72, 0x2, 0x8000) madvise$auto(0x1, 0x4bcf, 0x15) madvise$auto(0x5, 0x4, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000200), 0x600, 0x0) mmap$auto(0x3, 0x0, 0x4, 0x200000eb0, 0xffffffffffffffff, 0x705cf82b) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/midi2\x00', 0x234001, 0x0) select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948b, 0x3, 0x0, 0x3, 0x59, 0x60, 0x80000000, 0x0, 0x6d3c, 0x8004, 0xa, 0xfffffff7fffffffc]}, 0x0) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000340)="63e46100000000000000003c2cae6cbe0b1f4c13dc13b0bb94c70829c8a61424f02b520b16b55f0bb9c47da2799dc4a6cc836e0853177e1921f70f163dd2693761c90eb9c4eea0e24fad4d78827b004409eb354ec668c36f996717c25517b594075d1810f596b55976debc715e8280687afbcce0b5069660ea9bc113671ac9", 0x7f) getpid() mmap$auto(0x0, 0x2020009, 0x40000000000003, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x25) write$auto(r3, 0x0, 0xfffffdf1) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=':,\x00', 0x1000) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) utimes$auto(&(0x7f00000000c0)=':,\x00', 0x0) mprotect$auto(0x1ff, 0x7, 0x8) mmap$auto(0xffffff7fffff5f79, 0x0, 0x4, 0xffffffffffffffd9, r2, 0x8000) r4 = socket(0x2b, 0x1, 0x1) r5 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv$auto(r5, &(0x7f0000000580)={0x0, 0x10001}, 0x1) getsockopt$auto(r4, 0x11e, 0x1, 0xfffffffffffffffe, 0x0) 9.246613118s ago: executing program 5 (id=5737): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x1a0, 0x0) write$auto(r0, &(0x7f0000000140)='\f\xb4k\xb1\x8eU\x1c\xfd\xf0\xacfLu\xff\x7f{\xe7@\xe8\xe2\x01\x8a\xa6\x82a\x88y\xd5N.\x03\xbb\x95\xd2\x90{Uz\x19\xe7F\xac\xd0\xf3?\x86(:7M\xcf\xf3\xa78*\x1c\xc3w\xb4\xce\xfc\xd4?\xc6\x00\x00\x88\x884\xc7\xebR\xd9\xc0\xcf\x04\x17\xbd\xd0\n\xe6\xd7\xc5z\"\xf3\xe4V\x04\xc5@\xa9\xa1\x1eb\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\xcb\xc0\xf2\xdd\t)\xb4\x06\xaex\x92\'\x82~\xcb-\xeb\xc6\x9b\x047]\xf0\xecN\xd1\x88\x05\x8b\xa5\x06{\xfe\x89K\x8a\xd7\x9cZ)\xcbv%\x0eB\x19\xf7\xb0\xad=\x18\xcc-\xe3V9\x9dC~{\xd0\x1c\xa1t8\xe6\xa2\xf7\xeb\x02g\x9b\x1f&\\)qJ\xde\x00\xf4\xed\'I\xdc\x87F\x17\a\xf5Y\xfb\r\xdd5\x9e\x85\xc9\x83\xbe?\x84r\xd6\xc1\x18\xba;\x9fh\x94\xefD\xc6Xl\xe0G\xf4\x9e\'\x1e\x1c\xa8\xd9\xcay}\xde\xd3~I\x174;\xd5y8\x93}\xaf\x8eEA\x8ax\x84\x85n\x9b0\x19\xfb\t\xfd<\xc1HK\x8f\x98\x14\xc7\xe9\x19\x19\xfdWt2\x9e9\xff\xc9\xaf\x9dI\xf6Nf\x1c\xdc`\x80\b\x84\v\xb0\x9a\x19\xfb\xbc\x90\xe1,\x8e\x00\x00\xf3\xdd9\xc7\x1f\x04T\x91\x9c\xef\xad\x87R?\xa9\x81U\xec\xe6\xab\"n\xd5\xd1\xf4\xee\x8a\xa3\x8cK\x97\xcaG\xeb\xaeU\fK\x00'/362, 0x1) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x6, 0x21) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x3, 0x2) connect$auto(0x3, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0x54) io_uring_register$auto(0x2, 0x8, &(0x7f0000000000), 0x3) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7f, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x8000000000000000, 0x4, 0x7) socketpair$auto(0x1, 0x1, 0xfffffffd, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xae}, 0x5, 0x0, 0x3, 0x3a3217f}, 0x4}, 0x0, 0x9) getsockopt$auto(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) gettid() close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) 8.362486017s ago: executing program 6 (id=5738): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x7fffffe, 0xfffffffa, 0x0, 0x100000a) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000001c0)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x40980, 0x0) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) madvise$auto(0x0, 0x2003ed, 0x19) pread64$auto(r3, 0x0, 0x1000f42d, 0x100) sysfs$auto(0x6, 0x8, 0x7) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) timer_create$auto(0x3, 0x0, 0x0) futex$auto(&(0x7f00000000c0)=0x401, 0x0, 0x10, &(0x7f0000000180)={0x6, 0x926}, &(0x7f0000000200)=0xdd, 0xc) io_uring_setup$auto(0x40000002c55, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x100, 0x4, 0x6, 0x18, r1, 0xd3d) 7.772088532s ago: executing program 4 (id=5739): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_adjustment\x00', 0x400, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0xb, 0xc, 0x1000, 0x0) semctl$auto(0x1, 0xfffffffe, 0x3, 0x5) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) memfd_create$auto(0x0, 0xe) socket(0xa, 0x801, 0x106) pipe2$auto(0x0, 0x4800) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) 7.636122308s ago: executing program 5 (id=5741): mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) lsm_get_self_attr$auto(0x2, &(0x7f0000000000)={0x1, 0x4, 0x4, 0xf, "b4f273094038173f03ea1cc19e8667"}, &(0x7f0000000080)=0x2c1c9c84, 0x1ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x8, 0x2, 0x40000000de, 0x100000eb1, 0x401, 0x7fff) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x3, 0x7, 0xe29d, 0x11, r0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x6, 0xfffffffffffffffe, 0x5, 0xfffffffffffff9fe) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0x400000, 0x22, 0x940, 0x1ffde, 0x0, 0x4, 0x7, 0xa, 0x6, 0xfffffffffffffffe, 0x8000000000000001, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0xfffff7fe, 0x5, 0x2, 0x1000, 0x7, 0x9, 0x0, 0x1, 0x4, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffeffa, 0x400000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x7, 0xffffffffff, 0x1, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x5757, 0x80000000000000, 0x2, 0x1, 0x8000000000000, 0x53d, 0x0, 0x0, 0x2]}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0x4}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x407, 0x4008) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x2201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x216641, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000840)={0x8, 0x1, 0x9, 0x100000a, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x40000000401, 0x4005, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x8, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40085, 0x1, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x4, 0x0, 0x0, 0xb8a0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6]}, 0x1fe, 0x200c) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 7.111186448s ago: executing program 6 (id=5742): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x100) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0) r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/power/connected_duration\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000003480)=""/247, 0xf7) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) socket(0x2, 0x80002, 0x73) ioctl$auto(r0, 0x8915, 0x24) socketpair$auto(0x2, 0x6, 0xff, &(0x7f0000000080)=0xf0fa) 6.622541322s ago: executing program 2 (id=5743): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvfrom$auto(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) sendmsg$auto_MACSEC_CMD_GET_TXSC(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x4018) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x8008) close_range$auto(0x2, 0x8, 0x0) 5.563543977s ago: executing program 4 (id=5744): mmap$auto(0x0, 0x810004, 0x7f, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x6, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) madvise$auto(0x0, 0x400053, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x2, 0x2) ioctl$auto_IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000200)={0x333f, 0x5, 0x200}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d7) listen$auto(0x3, 0x81) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_MEMGETINFO(r2, 0x80204d01, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) 5.403202185s ago: executing program 6 (id=5745): syz_clone(0x400, &(0x7f0000000180)="af1cd8018efdec22de7dedd698da42194bdb7cb14c1dd066e8ab7a8240639d9fb0c06694546bfd285000d340ac24915dc2cf3d046e1f809b4fb3d66168e62ccf7a16b589335e31fecbc96265105971fc7e3b386b1122784ce1119076fc4e59dad5ce3c71b901fc66e436e090133636242561b3473218d917e30a", 0x7a, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000840)="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") mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) getdents64$auto(r1, &(0x7f0000000000)={0x1e, 0x459b, 0x0, 0xf8}, 0x18) mknodat$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x842f, 0x1) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x7fffffffffffffff}, 0x1000000000028, 0x0, 0x1, 0x203e0}, 0x803}, 0x0, 0x4008) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D0\x00', 0x94281, 0x0) socket(0x23, 0x80805, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(r3, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0x8, 0xfffffffffffffffe, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x4]}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x7a9840, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000200)='}[,&*}/file0\x00', 0x0, &(0x7f0000000100)=&(0x7f00000009c0)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\xd5\x9aR\x9e\xc8\xe0r)\xe3/q:h\xc8\x02= \xad\xf4/A\xe5\\\xd1\x03],x\xbfW\xc5\x1e\xd1!9Rh!\xd6}\x99\xe7|A\xc9\x96\x18F]') mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fd, 0x0) 5.086481594s ago: executing program 5 (id=5746): r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000180)={0x7fffefff, 0x5, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x7fff, 0x8000000400000001}, {0x100, 0x1, 0x10000052, 0x7, 0x11, 0x101, 0x0, 0x2, 0x3}}) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socket(0x2b, 0x1, 0x1) prctl$auto(0x6, 0x42b, 0x0, 0x8000000000000071, 0xfffffffffffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x2, 0x3, 0x1) getsockopt$auto_SO_DEBUG(r3, 0xff, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r2, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f00000000c0)={0x92}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f00000003c0)="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", 0x5) madvise$auto(0xfffffffffffffffe, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r4) mmap$auto(0x1002, 0xb63, 0x2, 0x1c, 0x401, 0x701cf82d) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/radio25/dev\x00', 0x589401, 0x0) sendfile$auto(r5, r5, 0x0, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x10000010, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x400, 0x15f4da0a, 0x4003, 0x400, 0x62, 0x80000000, 0x4, 0x6d41, 0x8001, 0xa, 0xfffffffffffffdf7]}, 0x0) 3.230492479s ago: executing program 4 (id=5747): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/uvcvideo/parameters/clock\x00', 0xb02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r2) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x7}, @ETHTOOL_A_STATS_HEADER={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}]}, @ETHTOOL_A_STATS_SRC={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c4}, 0x20000000) r6 = socket(0x11, 0x3, 0x6) getsockopt$auto_SO_TIMESTAMPNS_OLD(r6, 0x1, 0x23, &(0x7f0000000080)='-$\x00', &(0x7f00000000c0)=0x8) sendfile$auto(r3, r3, 0x0, 0x8000000003) 3.229114616s ago: executing program 2 (id=5748): mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='ogsd\t', 0x0, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fd, 0x0) open$auto(&(0x7f0000000000)='}[,&*}\x00', 0x401, 0x5) 3.100949117s ago: executing program 5 (id=5749): r0 = bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, 0x0, 0x54) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/pressure/memory\x00', 0xa2102, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r5], 0x28}}, 0x400c080) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7100f97bf53b7200000408000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) clone$auto(0x2, 0x20aa2890, 0x0, 0x0, 0xfffffffffffffe00) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r2, 0x0, 0xa) ioctl$auto_BLKROTATIONAL(r0, 0x127e, 0x0) 3.03109844s ago: executing program 6 (id=5750): r0 = socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) madvise$auto(0x400, 0x8, 0xffff) mmap$auto(0xfffffffffffffffc, 0xf3d, 0x428ff8ef, 0x16, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0x9, 0x10, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.3/usb15/15-0:1.0/usb15-port5/location\x00', 0x0, 0x0) ioctl$auto(0x3, 0x80108907, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/ecc_failures\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)=""/205, 0xcd) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000340)="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") mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(r0, r1, 0x0) sysfs$auto(0x2, 0x23, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x1, 0x84) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) 2.809673337s ago: executing program 2 (id=5751): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f00000008000400010000880a0011"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.602521692s ago: executing program 4 (id=5752): openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x4a0400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000008140)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x80100, 0x0) read$auto_tracing_entries_fops_trace(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) clock_gettime$auto(0x4, &(0x7f0000000340)={0x0, 0x8}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100263c4cc943a4b5187300000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x109000, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10f, 0x80, 0x0, 0x7) open(&(0x7f0000000040)='./file0\x00', 0xc0200, 0x50) 2.5023874s ago: executing program 5 (id=5753): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) madvise$auto(0x4, 0x7, 0x2) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x4d, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) brk$auto(0x40008000) sendmsg$auto_ETHTOOL_MSG_FEC_GET(0xffffffffffffffff, 0x0, 0x8080) mmap$auto(0xb, 0x2020005, 0x1, 0xfffffffffffff593, 0xffffffffffffffff, 0xffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0x1181, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) socket(0xa, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) 2.476027547s ago: executing program 6 (id=5754): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) madvise$auto(0x4, 0x7, 0x2) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x4d, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) brk$auto(0x40008000) sendmsg$auto_ETHTOOL_MSG_FEC_GET(0xffffffffffffffff, 0x0, 0x8080) mmap$auto(0xb, 0x2020005, 0x1, 0xfffffffffffff593, 0xffffffffffffffff, 0xffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0x1181, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) socket(0xa, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) 2.391926592s ago: executing program 2 (id=5755): openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snd/pcmC1D0c\x00', 0x80, 0x0) syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) sysfs$auto(0x2, 0x400000000008, 0x0) fsopen$auto(0x0, 0x1) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4605, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f0000000400)={[0x4, 0xff, 0x5, 0x80000000, 0x10001, 0x552, 0x6, 0x1, 0xc, 0x3, 0x100000000, 0x7d24, 0x0, 0x3b8, 0x7fff, 0x80000001]}, 0x0) writev$auto(r0, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x4, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/usbip-vudc.0/usbip_status\x00', 0x8a180, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001940), 0x101000, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x7d48, 0x948b, 0x4, 0x15f4da0c, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) 2.03632546s ago: executing program 4 (id=5756): mmap$auto(0x0, 0x202000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x8) socket(0x11, 0xa, 0x300) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x40002, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) socket(0x2, 0x1, 0x106) r0 = socket(0xa, 0x2, 0x73) sendto$auto(r0, 0x0, 0x3804400000000, 0xfffffffe, &(0x7f00000000c0)=@in={0x2, 0x4e20, @private=0xa010100}, 0x18) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x80002, 0x73) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000400)={0x2, "4d3c36c2729cc3c52863a7172b94a95c", 0x40, 0x1, "ab39d4af15cdc6c17cdc5a1d6cab6391", '\x00', "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"}) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) mlockall$auto(0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_active_count\x00', 0x0, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x80, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 1.422035726s ago: executing program 2 (id=5757): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x7f, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x6, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) madvise$auto(0x0, 0x400053, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x2, 0x2) ioctl$auto_IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000200)={0x333f, 0x5, 0x200}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) pread64$auto(r2, 0x0, 0x8100000041, 0x413e) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d7) listen$auto(0x3, 0x81) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) ftruncate$auto(0xffffffffffffffff, 0x10000000004) write$auto_tracing_fops_trace(0xffffffffffffffff, &(0x7f0000000300)="8a23d9d8d1a62ab2112f07fa6e7da49dca944ab16012975359d4ad276e42e4e6a22bd17fba9b1b287d4c12d429a6fd062f0ec4b841720e2f63cc0c439d8cd5c7d3b41ddc304976fa1fe17d3ae1c6d18a833443d65874aa60667d96a4d8c64ebebe0c3592a6b86235070ad5e625e851a6b8fe4a11d99e239422c9f28d374a9fd9e7b0372ab9d695721552cee39f6a2b3dbd79d2a1af486f60cfad99b378575d1f17c425ebfa6d78fcaf75913f77092f9405fbbd79a2dc21c5c8840b9f0f1e9cd0ef0f14531e4a9e05431c1e0e17b9a0a21d9ecf40098c601ec853db93bb32b4c0d8ce665f2c698a8c5a7cf908221514d3a64ab980b9341976", 0xf8) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_MEMGETINFO(r4, 0x80204d01, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) 627.311638ms ago: executing program 5 (id=5758): acct$auto(&(0x7f0000000280)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/dT\t\xa2%h\xdd\xfep\x0e\xe6\x96w\x05r\x9c\xb6L\t0\x0f\x954\xf6\b\xa0&C\x83L\xc0\xe9\t\"\xa5\x8f\xce\x03\xb6\x16\x90\xc3\x97\xb7\n\"zB\xedCf\xfd \x87\xdb\x8f\x87\xe9\xea\x89-B\x06\x97\xcb+\xf09\xa1\xa5\x8d\x9b\b\xc8\x15\xb6|\xc7 t\xc8#\xf8,\xab\x96\xf6\x03Z\x93\xf5\xc8\x87\xc9z}]\x85\xcc\xd5d\x02_\xd4>b\x96\xc5\x93\xb1\xa0E\xda\xb8\xb1\xa5G\r\xf4[\xec \"\xd9\x13\x803\xa6V\xe3\x06\xc72\xc0d|?\xfaA\xd2\xd6\xce\xfa\x9a\x98\x01\aXV.\xf15>;\xfaR\xcb\xc2v\x0f\xfc\xb3:f\x8f\xae\xcc\xbb\xd2\xfa\xef%\xfa\x85\xd9\x7fL\xad\xab\xd0\xd1\xc9v{Ze\x8a\xeb~\xf1V<\xc2p~\x90\xe6\x1c\xf86\xeb\x11\xe2\x90\rr\xda.\x82\xbd\x0f\xbd{\x861\x03\xda\r#\\^`\xc8\x01%V\xab\r\b\xde\xaa\xf8s\x86K\bR\x12\xbc{\xef\xc5<\xfd\x02\xe2\xf0\br\xb4\n\xe4\xa6\v\xbcd\x1e\xe9\xbd\x18\x89\xa1\xe8w\x0e7\xae\x10e\xb6\xce\xe25\xdf\xd8\x12X`\xec\n\x87\x86X\x9b\x80i7\xcb\xed\xbdQ\xe4\xbb*\xedq\xb0>\x92\xb6W\b\x1eV\xadk\x11\xa9\xa1\x1f\xe1\xac\xb7\xd0\xcc\x94\xc1g\x8c\xe5\xf0\"\xe1\xc2. \\X\xe0\xd30\xa9X\x8d@\xb1\xddS\xbey\xb4]j \x96\xe3\x84\xcc\x02C\xd23\x16T\xden\"\xea\xf2j\b\xd2\xf6\xe5\xc2a\xaa\xefr\x80\rZ\x06s\xa0\xaf\x93M\x00\b\x00\x00\x00\x00\x00\x00S\xc4\xca\x84H\x19T\xd4\xc4>\x8e\x050\x9c\x8f\xa9P\x8a\xd0\xd48\xb4\x0e0\xff\x98\xce\x01\'\x83i\xd9\x94\xcf\xd7\x03_|J\x9b\x06q\x0e\xdf_/u\xfa\xcd\xb9\"L\x17\xc3\xdc\x16\xc7\x02\xb7\x91\x85Ot\xd0r\xc2r\xee\xce\xefU\x1a\x89\xd6,\x04\x96o\xb9\x1b\x00\xec\xf17\xbbpu\xeeW\xd7HSXt\xe4\xf07+\xc8\xd3\x87|\x15\x9b\x95t\x195l\xcb\xfd\xae@\xbd>\xdcd\xaa\x19r\xec_>\xf2\x7f\xe6\xe7\x1c\x1dE\x87k(k\x98\x81\xe8\t\"\xed\x94\xe33\xfd*\xc1\xcc\x98\x1d\xdd\x9c\v\xc3\xef\x9b\xc3\xca\x14\xb54\x8aS\xa0`*\xc4\xe6|n\xc7\xbf1\x02yc\xc2\xf3\xb1\x0e\xb4\xc5\xf3\xe2\x10\xa9\xbdQ\xb6\x02t\xac\x0f\xa6\xd7[\x10&2;F<\\ \x10\xcf\x1eAq\x1et\xc7\xef\x04@\x81\xf5\xd5/\xd7=yb\xbf\bn\xbe\xe9L\xf3\xa9\x14\x8e\xe2m/\xddp\xc6~\xed`v?m\x16\xcd\x11\xa3\xfd\x04q\xd3\xc1N\x86i\xb5\xd7\xe0\xf2\xb4\xb7u\x80\xaeX\xfe\x140\x06\xfe\x92\xc0\x87\xa0\x88b\xa0l\xc2Z\xd3\n\xca\xd5') select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x7, 0x2a, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x5, 0x8d, 0xffffffdffffffffe]}, 0x0) (async) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x7, 0x2a, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x5, 0x8d, 0xffffffdffffffffe]}, 0x0) r0 = socket(0xa, 0x2, 0x0) sendto$auto(r0, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) (async) getrandom$auto(0x0, 0x6000000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) (async) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r2, 0xc0305602, r1) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff2d, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x101, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0x6, 0x5, 0x1fe, 0x2, 0x1, 0x4, 0x4007, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x82, 0x7fffffffffffffff, 0x89, 0x9, 0xffff, 0x3ff, 0x7ff, @attach_btf_obj_fd, 0x440, 0x100a, 0x7, 0x1ff, 0x9}, 0x9) r3 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x5e8}, 0x2, &(0x7f0000000140), 0x7, 0x1}, 0x5}, 0x2, 0x101) (async) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x5e8}, 0x2, &(0x7f0000000140), 0x7, 0x1}, 0x5}, 0x2, 0x101) capset$auto(&(0x7f0000000040)={0x19980330}, 0x0) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x28003c, 0x0, 0x9) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf25030000000810030003020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001000000060007000600000008000300"], 0x68}, 0x1, 0x0, 0x0, 0x44014}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1000000c4}, 0x2, 0x0, 0x0, 0x800009}, 0x8}, 0x3, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x6, 0x2, 0x0) 624.184685ms ago: executing program 2 (id=5759): mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x183e02, 0x0) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r2, 0x805c6103, &(0x7f0000000080)={"0e0249ce", 0x9, 0x9, 0x63, 0x20000002, 0x2, "17feffa64c1623ea1d6c5c0db75e84", "e869bd22", "f113f5d5", "a9fb8a8b", ["9c73c0f224a1b6b9c4b88c99", "053b4edb9d596667316fc6ee", "430f83685c8e4a38596b51e3", "ab498a671b39809153a78787"]}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="01002c010000fbdbdf257bfffff208000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) mincore$auto(0x0, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000200)=@link_update={r1, @new_prog_fd=r1, 0x6, @old_map_fd=r0}, 0xff) r4 = socket(0xa, 0x801, 0x84) socket(0x0, 0x9, 0x2) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xa}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) setsockopt$auto(r4, 0x10000000084, 0x0, 0x0, 0x10) 33.721848ms ago: executing program 6 (id=5760): r0 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x801, 0x0) ioctl$auto_EXT4_IOC_SETVERSION(r0, 0x40086604, &(0x7f0000000280)=0x5) waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x100, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x8000004, 0x24d3225d, 0x5, 0x400003, 0x0, 0x8000, 0x80000000, 0x7, 0xb8, 0xdd9, 0x5, 0x7ff, 0x2055}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x10001], {0x9, 0x6, 0xf, 0x29f, 0xfffff970, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x2, 0x5, 0x1, 0x40, 0x104, 0x8, 0x5f480000}}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3920fca3081b68247f452cf45a565bd0e9ab80a14fd5", @ANYRES16=r5, @ANYBLOB="1b0026bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video47\x00', 0xc0480, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) 0s ago: executing program 4 (id=5761): mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) r2 = socket(0x2, 0x801, 0x100) listen$auto(r2, 0x200005) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/mem\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) madvise$auto(0x0, 0x2000000080000001, 0x3) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) socketpair$auto(0xfff, 0xe, 0x7, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b8c, r0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fd, 0x0) kernel console output (not intermixed with test programs): eft allmulticast mode [ 1518.055294][T24396] futex_wake_op: syz.3.5079 tries to shift op by -2048; fix this program [ 1518.162598][T24408] zswap: compressor not available [ 1518.202110][T24416] Setting dangerous option i915.mitigations - tainting kernel [ 1518.897694][T24445] random: crng reseeded on system resumption [ 1519.638686][T24497] lo: entered allmulticast mode [ 1519.879819][T24497] lo: left allmulticast mode [ 1521.398088][T24626] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1523.420552][T24717] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1523.432388][T24715] netlink: 186 bytes leftover after parsing attributes in process `syz.3.5091'. [ 1523.553498][T24717] serio: Serial port pty6 [ 1523.581673][T24719] overlayfs: missing 'lowerdir' [ 1526.469186][T24756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5098'. [ 1528.426272][T24802] Setting dangerous option i915.mitigations - tainting kernel [ 1528.489878][T24801] lo: entered allmulticast mode [ 1528.495348][T24801] lo: left allmulticast mode [ 1529.763691][T24882] futex_wake_op: syz.4.5106 tries to shift op by -2048; fix this program [ 1529.837876][T24882] futex_wake_op: syz.4.5106 tries to shift op by -2048; fix this program [ 1530.264924][T24891] futex_wake_op: syz.2.5107 tries to shift op by -2048; fix this program [ 1530.292217][T24891] futex_wake_op: syz.2.5107 tries to shift op by -2048; fix this program [ 1530.862243][T24900] FAULT_INJECTION: forcing a failure. [ 1530.862243][T24900] name failslab, interval 1, probability 393216, space 0, times 0 [ 1530.875444][T24900] CPU: 0 UID: 0 PID: 24900 Comm: syz.3.5110 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1530.875497][T24900] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1530.875510][T24900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1530.875543][T24900] Call Trace: [ 1530.875555][T24900] [ 1530.875568][T24900] dump_stack_lvl+0x16c/0x1f0 [ 1530.875626][T24900] should_fail_ex+0x512/0x640 [ 1530.875663][T24900] ? fs_reclaim_acquire+0xae/0x150 [ 1530.875716][T24900] should_failslab+0xc2/0x120 [ 1530.875764][T24900] kmem_cache_alloc_noprof+0x83/0x770 [ 1530.875802][T24900] ? __pfx_map_id_range_down+0x10/0x10 [ 1530.875850][T24900] ? security_inode_alloc+0x3b/0x2b0 [ 1530.875891][T24900] ? security_inode_alloc+0x3b/0x2b0 [ 1530.875924][T24900] security_inode_alloc+0x3b/0x2b0 [ 1530.875961][T24900] inode_init_always_gfp+0xced/0x1040 [ 1530.876014][T24900] alloc_inode+0x86/0x240 [ 1530.876050][T24900] create_pipe_files+0x4c/0x9a0 [ 1530.876105][T24900] do_pipe2+0xaf/0x1c0 [ 1530.876153][T24900] ? __pfx_do_pipe2+0x10/0x10 [ 1530.876203][T24900] ? xfd_validate_state+0x61/0x180 [ 1530.876232][T24900] ? __pfx_ksys_write+0x10/0x10 [ 1530.876287][T24900] __x64_sys_pipe+0x33/0x50 [ 1530.876336][T24900] do_syscall_64+0xcd/0xf80 [ 1530.876368][T24900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.876401][T24900] RIP: 0033:0x7fd57bb8f7c9 [ 1530.876425][T24900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1530.876457][T24900] RSP: 002b:00007fd57c9e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1530.876487][T24900] RAX: ffffffffffffffda RBX: 00007fd57bde5fa0 RCX: 00007fd57bb8f7c9 [ 1530.876509][T24900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1530.876537][T24900] RBP: 00007fd57bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1530.876557][T24900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1530.876577][T24900] R13: 00007fd57bde6038 R14: 00007fd57bde5fa0 R15: 00007ffe05179908 [ 1530.876621][T24900] [ 1531.281696][T24900] FAULT_INJECTION: forcing a failure. [ 1531.281696][T24900] name failslab, interval 1, probability 393216, space 0, times 0 [ 1531.345293][T24900] CPU: 1 UID: 0 PID: 24900 Comm: syz.3.5110 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1531.345348][T24900] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1531.345361][T24900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1531.345380][T24900] Call Trace: [ 1531.345409][T24900] [ 1531.345422][T24900] dump_stack_lvl+0x16c/0x1f0 [ 1531.345479][T24900] should_fail_ex+0x512/0x640 [ 1531.345518][T24900] ? __kmalloc_noprof+0xca/0x910 [ 1531.345560][T24900] should_failslab+0xc2/0x120 [ 1531.345626][T24900] __kmalloc_noprof+0xeb/0x910 [ 1531.345678][T24900] ? sk_prot_alloc+0x1a8/0x2a0 [ 1531.345734][T24900] ? sk_prot_alloc+0x1a8/0x2a0 [ 1531.345793][T24900] sk_prot_alloc+0x1a8/0x2a0 [ 1531.345844][T24900] sk_alloc+0x36/0xe30 [ 1531.345883][T24900] pptp_create+0x32/0x340 [ 1531.345930][T24900] pppox_create+0x15c/0x2c0 [ 1531.345977][T24900] __sock_create+0x339/0x8a0 [ 1531.346017][T24900] __sys_socket+0x14d/0x260 [ 1531.346051][T24900] ? __pfx___sys_socket+0x10/0x10 [ 1531.346104][T24900] ? xfd_validate_state+0x61/0x180 [ 1531.346145][T24900] __x64_sys_socket+0x72/0xb0 [ 1531.346178][T24900] ? lockdep_hardirqs_on+0x7c/0x110 [ 1531.346232][T24900] do_syscall_64+0xcd/0xf80 [ 1531.346266][T24900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.346310][T24900] RIP: 0033:0x7fd57bb8f7c9 [ 1531.346337][T24900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1531.346372][T24900] RSP: 002b:00007fd57c9e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1531.346404][T24900] RAX: ffffffffffffffda RBX: 00007fd57bde5fa0 RCX: 00007fd57bb8f7c9 [ 1531.346427][T24900] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000018 [ 1531.346447][T24900] RBP: 00007fd57bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1531.346468][T24900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1531.346488][T24900] R13: 00007fd57bde6038 R14: 00007fd57bde5fa0 R15: 00007ffe05179908 [ 1531.346533][T24900] [ 1531.574549][T24901] lo: entered allmulticast mode [ 1531.580050][T24901] lo: left allmulticast mode [ 1531.608831][T24901] Setting dangerous option i915.mitigations - tainting kernel [ 1532.056690][T24930] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1532.091800][T24930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1532.106446][T24933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5113'. [ 1532.127362][T24930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1532.134170][T24930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1532.831894][T24935] zswap: compressor 000 not available [ 1533.178637][T24943] lo: entered allmulticast mode [ 1533.286269][T24943] lo: left allmulticast mode [ 1533.365450][T24943] Setting dangerous option i915.mitigations - tainting kernel [ 1533.501997][T24950] usb usb36: usbfs: process 24950 (syz.5.5115) did not claim interface 0 before use [ 1534.132242][T21284] Bluetooth: hci0: command 0x0406 tx timeout [ 1534.138324][T31347] Bluetooth: hci4: command 0x0c1a tx timeout [ 1534.206787][T21284] Bluetooth: hci3: command 0x0c1a tx timeout [ 1534.213242][T31347] Bluetooth: hci1: command 0x0c1a tx timeout [ 1534.292384][T24981] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 1534.292384][T24981] program syz.4.5120 not setting count and/or reply_len properly [ 1534.526782][T24983] futex_wake_op: syz.3.5119 tries to shift op by -2048; fix this program [ 1534.556244][T24983] futex_wake_op: syz.3.5119 tries to shift op by -2048; fix this program [ 1536.199883][T25051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5125'. [ 1536.237485][T25051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.316634][T25051] bridge_slave_1 (unregistering): left allmulticast mode [ 1536.333881][T25051] bridge_slave_1 (unregistering): left promiscuous mode [ 1536.359513][T25051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.807591][T25083] lo: entered allmulticast mode [ 1536.858262][T25083] lo: left allmulticast mode [ 1536.934368][T25070] Setting dangerous option i915.mitigations - tainting kernel [ 1536.943692][T25100] nfsd: Unknown parameter '*' [ 1536.967192][T25100] nfsd: Unknown parameter '*' [ 1536.973064][T25100] nfsd: Unknown parameter '*' [ 1536.978301][T25100] nfsd: Unknown parameter '*' [ 1536.983925][T25100] nfsd: Unknown parameter '*' [ 1536.989322][T25100] nfsd: Unknown parameter '*' [ 1536.994417][T25100] nfsd: Unknown parameter '*' [ 1537.000864][T25100] nfsd: Unknown parameter '*' [ 1537.006546][T25100] nfsd: Unknown parameter '*' [ 1537.016520][T25105] FAULT_INJECTION: forcing a failure. [ 1537.016520][T25105] name failslab, interval 1, probability 393216, space 0, times 0 [ 1537.083782][T25105] CPU: 1 UID: 0 PID: 25105 Comm: syz.5.5130 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1537.083832][T25105] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1537.083846][T25105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1537.083864][T25105] Call Trace: [ 1537.083875][T25105] [ 1537.083887][T25105] dump_stack_lvl+0x16c/0x1f0 [ 1537.083951][T25105] should_fail_ex+0x512/0x640 [ 1537.083986][T25105] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1537.084027][T25105] should_failslab+0xc2/0x120 [ 1537.084082][T25105] kmem_cache_alloc_noprof+0x83/0x770 [ 1537.084116][T25105] ? getname_flags.part.0+0x4c/0x550 [ 1537.084156][T25105] ? getname_flags.part.0+0x4c/0x550 [ 1537.084185][T25105] getname_flags.part.0+0x4c/0x550 [ 1537.084216][T25105] getname_flags+0x93/0xf0 [ 1537.084247][T25105] do_sys_openat2+0xb9/0x290 [ 1537.084272][T25105] ? __pfx_do_sys_openat2+0x10/0x10 [ 1537.084299][T25105] ? find_held_lock+0x2b/0x80 [ 1537.084334][T25105] __x64_sys_openat+0x174/0x210 [ 1537.084361][T25105] ? __pfx___x64_sys_openat+0x10/0x10 [ 1537.084398][T25105] do_syscall_64+0xcd/0xf80 [ 1537.084424][T25105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.084455][T25105] RIP: 0033:0x7fb5d6b8f7c9 [ 1537.084479][T25105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1537.084506][T25105] RSP: 002b:00007fb5d7987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1537.084533][T25105] RAX: ffffffffffffffda RBX: 00007fb5d6de5fa0 RCX: 00007fb5d6b8f7c9 [ 1537.084551][T25105] RDX: 0000000000000302 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1537.084569][T25105] RBP: 00007fb5d6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1537.084586][T25105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1537.084602][T25105] R13: 00007fb5d6de6038 R14: 00007fb5d6de5fa0 R15: 00007ffe4a610958 [ 1537.084658][T25105] [ 1537.384469][T25116] Invalid ELF header magic: != ELF [ 1537.665608][T25112] zswap: compressor 000 not available [ 1539.073928][T25192] lo: entered allmulticast mode [ 1539.090468][T25192] lo: left allmulticast mode [ 1539.473015][T25202] zswap: compressor not available [ 1539.481507][T25127] Process accounting paused [ 1539.923583][T25237] ptrace attach of "./syz-executor exec"[22487] was attempted by ""[25237] [ 1541.407151][T25266] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 1541.567119][T25251] zswap: compressor 000 not available [ 1542.243880][T25310] futex_wake_op: syz.4.5150 tries to shift op by -2048; fix this program [ 1542.299755][T25310] futex_wake_op: syz.4.5150 tries to shift op by -2048; fix this program [ 1543.488638][T25350] netlink: 'syz.3.5153': attribute type 28 has an invalid length. [ 1543.556128][T25350] netlink: 'syz.3.5153': attribute type 3 has an invalid length. [ 1543.581535][T25350] netlink: 306 bytes leftover after parsing attributes in process `syz.3.5153'. [ 1544.257880][T25370] FAULT_INJECTION: forcing a failure. [ 1544.257880][T25370] name failslab, interval 1, probability 393216, space 0, times 0 [ 1544.307943][T25370] CPU: 1 UID: 0 PID: 25370 Comm: syz.5.5155 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1544.307992][T25370] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1544.308004][T25370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1544.308022][T25370] Call Trace: [ 1544.308050][T25370] [ 1544.308064][T25370] dump_stack_lvl+0x16c/0x1f0 [ 1544.308121][T25370] should_fail_ex+0x512/0x640 [ 1544.308156][T25370] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1544.308198][T25370] should_failslab+0xc2/0x120 [ 1544.308246][T25370] __kmalloc_cache_noprof+0x80/0x800 [ 1544.308281][T25370] ? __pfx_fib6_net_init+0x10/0x10 [ 1544.308330][T25370] ? fib6_net_init+0x165/0xb20 [ 1544.308384][T25370] ? fib6_net_init+0x165/0xb20 [ 1544.308428][T25370] ? __pfx_fib6_net_init+0x10/0x10 [ 1544.308476][T25370] fib6_net_init+0x165/0xb20 [ 1544.308534][T25370] ? __pfx_fib6_net_init+0x10/0x10 [ 1544.308581][T25370] ops_init+0x1e2/0x5f0 [ 1544.308632][T25370] setup_net+0x11d/0x3a0 [ 1544.308678][T25370] ? __pfx_setup_net+0x10/0x10 [ 1544.308721][T25370] ? lockdep_init_map_type+0x5c/0x270 [ 1544.308762][T25370] ? mutex_init_lockep+0x110/0x150 [ 1544.308802][T25370] copy_net_ns+0x351/0x7c0 [ 1544.308854][T25370] create_new_namespaces+0x3ea/0xab0 [ 1544.308907][T25370] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1544.308954][T25370] ksys_unshare+0x45b/0xa40 [ 1544.309024][T25370] ? __pfx_ksys_unshare+0x10/0x10 [ 1544.309077][T25370] ? xfd_validate_state+0x61/0x180 [ 1544.309120][T25370] __x64_sys_unshare+0x31/0x40 [ 1544.309149][T25370] do_syscall_64+0xcd/0xf80 [ 1544.309181][T25370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.309213][T25370] RIP: 0033:0x7fb5d6b8f7c9 [ 1544.309238][T25370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1544.309270][T25370] RSP: 002b:00007fb5d7987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1544.309300][T25370] RAX: ffffffffffffffda RBX: 00007fb5d6de5fa0 RCX: 00007fb5d6b8f7c9 [ 1544.309322][T25370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1544.309343][T25370] RBP: 00007fb5d6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1544.309363][T25370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1544.309383][T25370] R13: 00007fb5d6de6038 R14: 00007fb5d6de5fa0 R15: 00007ffe4a610958 [ 1544.309427][T25370] [ 1545.364637][T25393] futex_wake_op: syz.4.5159 tries to shift op by -2048; fix this program [ 1545.424957][T25393] futex_wake_op: syz.4.5159 tries to shift op by -2048; fix this program [ 1546.159470][T25403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5164'. [ 1548.155385][T25426] zswap: compressor not available [ 1548.220140][T25441] FAULT_INJECTION: forcing a failure. [ 1548.220140][T25441] name failslab, interval 1, probability 393216, space 0, times 0 [ 1548.239132][T25441] CPU: 0 UID: 0 PID: 25441 Comm: syz.2.5170 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1548.239197][T25441] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1548.239209][T25441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1548.239225][T25441] Call Trace: [ 1548.239235][T25441] [ 1548.239246][T25441] dump_stack_lvl+0x16c/0x1f0 [ 1548.239299][T25441] should_fail_ex+0x512/0x640 [ 1548.239333][T25441] ? __kvmalloc_node_noprof+0x129/0xa40 [ 1548.239377][T25441] should_failslab+0xc2/0x120 [ 1548.239424][T25441] __kvmalloc_node_noprof+0x14a/0xa40 [ 1548.239466][T25441] ? __pfx_futex_wake_mark+0x10/0x10 [ 1548.239508][T25441] ? do_semtimedop+0x23a/0x2e0 [ 1548.239559][T25441] ? do_semtimedop+0x23a/0x2e0 [ 1548.239591][T25441] do_semtimedop+0x23a/0x2e0 [ 1548.239628][T25441] ? __pfx_do_semtimedop+0x10/0x10 [ 1548.239712][T25441] ? __x64_sys_futex+0x1e0/0x4c0 [ 1548.239745][T25441] ? __x64_sys_futex+0x1e9/0x4c0 [ 1548.239783][T25441] __x64_sys_semtimedop+0x1b4/0x1f0 [ 1548.239820][T25441] ? __pfx___x64_sys_semtimedop+0x10/0x10 [ 1548.239868][T25441] do_syscall_64+0xcd/0xf80 [ 1548.239899][T25441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.239930][T25441] RIP: 0033:0x7fc8e318f7c9 [ 1548.239953][T25441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1548.239983][T25441] RSP: 002b:00007fc8e40f3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 1548.240011][T25441] RAX: ffffffffffffffda RBX: 00007fc8e33e5fa0 RCX: 00007fc8e318f7c9 [ 1548.240031][T25441] RDX: 00000000000001f4 RSI: 0000000000000000 RDI: 0000000000000000 [ 1548.240049][T25441] RBP: 00007fc8e3213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1548.240068][T25441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1548.240086][T25441] R13: 00007fc8e33e6038 R14: 00007fc8e33e5fa0 R15: 00007ffc542cd5f8 [ 1548.240127][T25441] [ 1548.734148][T25470] zswap: compressor 000 not available [ 1549.107471][T25498] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1549.644781][T25523] futex_wake_op: syz.3.5174 tries to shift op by -2048; fix this program [ 1549.661749][T25523] futex_wake_op: syz.3.5174 tries to shift op by -2048; fix this program [ 1550.653464][T25567] netlink: 306 bytes leftover after parsing attributes in process `syz.4.5177'. [ 1551.088291][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.094878][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.260917][T25600] zswap: compressor not available [ 1551.280163][T25602] Setting dangerous option i915.mitigations - tainting kernel [ 1551.361712][T25593] lo: entered allmulticast mode [ 1551.405176][T25593] lo: left allmulticast mode [ 1552.154657][T25663] futex_wake_op: syz.5.5183 tries to shift op by -2048; fix this program [ 1552.197302][T25663] futex_wake_op: syz.5.5183 tries to shift op by -2048; fix this program [ 1553.435360][T25686] zswap: compressor not available [ 1553.467503][T25694] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1554.310711][T25768] futex_wake_op: syz.4.5194 tries to shift op by -2048; fix this program [ 1554.319603][T25768] futex_wake_op: syz.4.5194 tries to shift op by -2048; fix this program [ 1554.515459][T25770] FAULT_INJECTION: forcing a failure. [ 1554.515459][T25770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1554.570401][T25770] CPU: 1 UID: 0 PID: 25770 Comm: syz.2.5196 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1554.570451][T25770] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1554.570463][T25770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1554.570479][T25770] Call Trace: [ 1554.570489][T25770] [ 1554.570500][T25770] dump_stack_lvl+0x16c/0x1f0 [ 1554.570548][T25770] should_fail_ex+0x512/0x640 [ 1554.570585][T25770] _copy_from_user+0x2e/0xd0 [ 1554.570618][T25770] packet_setsockopt+0x1d54/0x2b30 [ 1554.570657][T25770] ? __pfx___might_resched+0x10/0x10 [ 1554.570699][T25770] ? __pfx_packet_setsockopt+0x10/0x10 [ 1554.570738][T25770] ? aa_sk_perm+0x2f2/0xae0 [ 1554.570772][T25770] ? ksys_write+0x190/0x250 [ 1554.570816][T25770] ? __pfx_aa_sk_perm+0x10/0x10 [ 1554.570853][T25770] ? find_held_lock+0x2b/0x80 [ 1554.570902][T25770] ? aa_sock_opt_perm+0xfd/0x1b0 [ 1554.570946][T25770] ? __pfx_packet_setsockopt+0x10/0x10 [ 1554.570981][T25770] do_sock_setsockopt+0xf3/0x1d0 [ 1554.571026][T25770] __sys_setsockopt+0x120/0x1a0 [ 1554.571065][T25770] __x64_sys_setsockopt+0xbd/0x160 [ 1554.571098][T25770] ? do_syscall_64+0x91/0xf80 [ 1554.571120][T25770] ? lockdep_hardirqs_on+0x7c/0x110 [ 1554.571168][T25770] do_syscall_64+0xcd/0xf80 [ 1554.571194][T25770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.571223][T25770] RIP: 0033:0x7fc8e318f7c9 [ 1554.571245][T25770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1554.571272][T25770] RSP: 002b:00007fc8e40d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1554.571298][T25770] RAX: ffffffffffffffda RBX: 00007fc8e33e6090 RCX: 00007fc8e318f7c9 [ 1554.571315][T25770] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000006 [ 1554.571332][T25770] RBP: 00007fc8e40d2090 R08: 0000000000008004 R09: 0000000000000000 [ 1554.571350][T25770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.571366][T25770] R13: 00007fc8e33e6128 R14: 00007fc8e33e6090 R15: 00007ffc542cd5f8 [ 1554.571401][T25770] [ 1554.912488][T25764] lo: entered allmulticast mode [ 1554.918394][T25764] lo: left allmulticast mode [ 1555.265722][T25771] zswap: compressor not available [ 1555.310633][T25770] zswap: compressor failed to read /proc/thread-self/fail-nth not available [ 1555.386325][T25786] zswap: compressor not available [ 1555.432039][T25804] Setting dangerous option i915.mitigations - tainting kernel [ 1555.439639][T25764] Setting dangerous option i915.mitigations - tainting kernel [ 1555.773965][T25840] lo: entered allmulticast mode [ 1556.117041][T25835] zswap: compressor 000 not available [ 1556.173893][T25840] lo: left allmulticast mode [ 1556.354678][T25855] random: crng reseeded on system resumption [ 1556.364832][T25832] block2mtd: device name too long [ 1557.319306][T25890] Format for deleting device is "id" (uint). [ 1558.140826][T25893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.291647][T25893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.418172][T25893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.518311][T25893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.334252][T25970] futex_wake_op: syz.2.5206 tries to shift op by -2048; fix this program [ 1559.493015][T25970] futex_wake_op: syz.2.5206 tries to shift op by -2048; fix this program [ 1560.769425][T25981] netlink: 'syz.5.5207': attribute type 1 has an invalid length. [ 1562.444984][T26112] FAULT_INJECTION: forcing a failure. [ 1562.444984][T26112] name failslab, interval 1, probability 393216, space 0, times 0 [ 1562.488675][T26112] CPU: 0 UID: 0 PID: 26112 Comm: syz.5.5213 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1562.488713][T26112] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1562.488723][T26112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1562.488736][T26112] Call Trace: [ 1562.488744][T26112] [ 1562.488753][T26112] dump_stack_lvl+0x16c/0x1f0 [ 1562.488794][T26112] should_fail_ex+0x512/0x640 [ 1562.488820][T26112] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1562.488849][T26112] should_failslab+0xc2/0x120 [ 1562.488886][T26112] __kmalloc_cache_noprof+0x80/0x800 [ 1562.488912][T26112] ? smaps_rollup_open+0x4c/0x170 [ 1562.488938][T26112] ? smaps_rollup_open+0x4c/0x170 [ 1562.488959][T26112] smaps_rollup_open+0x4c/0x170 [ 1562.488982][T26112] do_dentry_open+0x748/0x1590 [ 1562.489019][T26112] ? __pfx_smaps_rollup_open+0x10/0x10 [ 1562.489048][T26112] vfs_open+0x82/0x3f0 [ 1562.489076][T26112] path_openat+0x2078/0x3140 [ 1562.489139][T26112] ? __pfx_path_openat+0x10/0x10 [ 1562.489184][T26112] do_filp_open+0x20b/0x470 [ 1562.489238][T26112] ? __pfx_do_filp_open+0x10/0x10 [ 1562.489284][T26112] ? __pfx_kfree_link+0x10/0x10 [ 1562.489320][T26112] ? alloc_fd+0x471/0x7d0 [ 1562.489363][T26112] do_sys_openat2+0x121/0x290 [ 1562.489389][T26112] ? __pfx_do_sys_openat2+0x10/0x10 [ 1562.489426][T26112] __x64_sys_openat+0x174/0x210 [ 1562.489453][T26112] ? __pfx___x64_sys_openat+0x10/0x10 [ 1562.489492][T26112] do_syscall_64+0xcd/0xf80 [ 1562.489515][T26112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.489546][T26112] RIP: 0033:0x7fb5d6b8f7c9 [ 1562.489564][T26112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.489601][T26112] RSP: 002b:00007fb5d7966038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1562.489623][T26112] RAX: ffffffffffffffda RBX: 00007fb5d6de6090 RCX: 00007fb5d6b8f7c9 [ 1562.489639][T26112] RDX: 0000000000000840 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1562.489655][T26112] RBP: 00007fb5d6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1562.489669][T26112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1562.489683][T26112] R13: 00007fb5d6de6128 R14: 00007fb5d6de6090 R15: 00007ffe4a610958 [ 1562.489713][T26112] [ 1562.886906][T26109] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1562.948519][T26109] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1562.968815][T26109] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1562.974958][T26109] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1563.023259][T26114] lo: entered allmulticast mode [ 1563.064150][T26114] lo: left allmulticast mode [ 1563.235507][T26134] zswap: compressor not available [ 1563.275829][T26114] Setting dangerous option i915.mitigations - tainting kernel [ 1564.074756][T26196] FAULT_INJECTION: forcing a failure. [ 1564.074756][T26196] name failslab, interval 1, probability 393216, space 0, times 0 [ 1564.141675][T26196] CPU: 0 UID: 0 PID: 26196 Comm: syz.3.5218 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1564.141729][T26196] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1564.141742][T26196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1564.141761][T26196] Call Trace: [ 1564.141773][T26196] [ 1564.141785][T26196] dump_stack_lvl+0x16c/0x1f0 [ 1564.141841][T26196] should_fail_ex+0x512/0x640 [ 1564.141876][T26196] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1564.141921][T26196] should_failslab+0xc2/0x120 [ 1564.141970][T26196] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1564.142013][T26196] ? __d_alloc+0x35/0xa80 [ 1564.142058][T26196] ? __d_alloc+0x35/0xa80 [ 1564.142083][T26196] __d_alloc+0x35/0xa80 [ 1564.142133][T26196] d_alloc_pseudo+0x1c/0xc0 [ 1564.142172][T26196] alloc_file_pseudo+0xcf/0x230 [ 1564.142209][T26196] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1564.142245][T26196] ? alloc_fd+0x471/0x7d0 [ 1564.142298][T26196] sock_alloc_file+0x50/0x210 [ 1564.142346][T26196] __sys_socket+0x1c0/0x260 [ 1564.142388][T26196] ? fput+0x70/0xf0 [ 1564.142417][T26196] ? __pfx___sys_socket+0x10/0x10 [ 1564.142450][T26196] ? xfd_validate_state+0x61/0x180 [ 1564.142479][T26196] ? __pfx_ksys_write+0x10/0x10 [ 1564.142532][T26196] __x64_sys_socket+0x72/0xb0 [ 1564.142563][T26196] ? lockdep_hardirqs_on+0x7c/0x110 [ 1564.142613][T26196] do_syscall_64+0xcd/0xf80 [ 1564.142644][T26196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.142677][T26196] RIP: 0033:0x7fd57bb8f7c9 [ 1564.142702][T26196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1564.142735][T26196] RSP: 002b:00007fd57c9e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1564.142766][T26196] RAX: ffffffffffffffda RBX: 00007fd57bde5fa0 RCX: 00007fd57bb8f7c9 [ 1564.142788][T26196] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1564.142808][T26196] RBP: 00007fd57bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1564.142828][T26196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1564.142848][T26196] R13: 00007fd57bde6038 R14: 00007fd57bde5fa0 R15: 00007ffe05179908 [ 1564.142891][T26196] [ 1564.573703][T26213] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1564.939098][T21284] Bluetooth: hci0: command 0x0406 tx timeout [ 1565.017729][T21213] Bluetooth: hci4: command 0x0c1a tx timeout [ 1565.023866][T31347] Bluetooth: hci3: command 0x0c1a tx timeout [ 1565.029993][T21284] Bluetooth: hci1: command 0x0c1a tx timeout [ 1565.824926][T26268] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1567.040867][T26339] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 1567.533151][T26387] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1568.628120][T26365] ima: policy update failed [ 1568.655307][ T31] audit: type=1802 audit(4294969397.926:54): pid=26365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.5229" res=0 errno=0 [ 1569.885798][T26452] lo: entered allmulticast mode [ 1569.891489][T26452] lo: left allmulticast mode [ 1569.929045][T26436] Process accounting resumed [ 1570.130228][T26452] zswap: compressor not available [ 1570.141492][T26481] Setting dangerous option i915.mitigations - tainting kernel [ 1570.188336][T14509] Process accounting resumed [ 1570.336880][T26511] random: crng reseeded on system resumption [ 1572.198507][T26543] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1573.258786][T19229] usb usb38-port5: attempt power cycle [ 1573.866400][T19229] usb usb38-port5: unable to enumerate USB device [ 1574.139928][T26593] futex_wake_op: syz.5.5246 tries to shift op by -2048; fix this program [ 1574.433774][T26593] futex_wake_op: syz.5.5246 tries to shift op by -2048; fix this program [ 1575.732336][ T7147] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.768759][T26647] lo: entered allmulticast mode [ 1575.780396][T26647] lo: left allmulticast mode [ 1576.164896][T26647] zswap: compressor not available [ 1576.233989][T26673] Setting dangerous option i915.mitigations - tainting kernel [ 1578.371727][T26754] FAULT_INJECTION: forcing a failure. [ 1578.371727][T26754] name failslab, interval 1, probability 393216, space 0, times 0 [ 1578.394290][T26754] CPU: 0 UID: 0 PID: 26754 Comm: syz.3.5264 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1578.394338][T26754] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1578.394350][T26754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1578.394378][T26754] Call Trace: [ 1578.394387][T26754] [ 1578.394398][T26754] dump_stack_lvl+0x16c/0x1f0 [ 1578.394448][T26754] should_fail_ex+0x512/0x640 [ 1578.394480][T26754] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1578.394516][T26754] should_failslab+0xc2/0x120 [ 1578.394568][T26754] __kmalloc_cache_noprof+0x80/0x800 [ 1578.394601][T26754] ? assoc_array_insert+0x10c/0x3970 [ 1578.394646][T26754] ? assoc_array_insert+0x10c/0x3970 [ 1578.394684][T26754] assoc_array_insert+0x10c/0x3970 [ 1578.394725][T26754] ? __mutex_lock+0x27b/0x1ca0 [ 1578.394754][T26754] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1578.394794][T26754] ? key_link+0x28a/0x310 [ 1578.394845][T26754] ? __pfx_assoc_array_insert+0x10/0x10 [ 1578.394883][T26754] ? __pfx___might_resched+0x10/0x10 [ 1578.394929][T26754] ? down_write+0x14d/0x200 [ 1578.394957][T26754] ? __pfx_down_write+0x10/0x10 [ 1578.394991][T26754] __key_link_begin+0xf5/0x260 [ 1578.395034][T26754] key_link+0x103/0x310 [ 1578.395075][T26754] ? __pfx_key_link+0x10/0x10 [ 1578.395114][T26754] ? bpf_lsm_key_permission+0x9/0x10 [ 1578.395153][T26754] ? key_task_permission+0x2e5/0x400 [ 1578.395189][T26754] keyctl_get_persistent+0x5c3/0x8c0 [ 1578.395231][T26754] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 1578.395295][T26754] ? __x64_sys_futex+0x1e0/0x4c0 [ 1578.395328][T26754] ? __x64_sys_futex+0x1e9/0x4c0 [ 1578.395370][T26754] ? xfd_validate_state+0x61/0x180 [ 1578.395396][T26754] ? __pfx_ksys_write+0x10/0x10 [ 1578.395445][T26754] __do_sys_keyctl+0x1a9/0x590 [ 1578.395479][T26754] do_syscall_64+0xcd/0xf80 [ 1578.395509][T26754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.395547][T26754] RIP: 0033:0x7fd57bb8f7c9 [ 1578.395572][T26754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1578.395602][T26754] RSP: 002b:00007fd57c9c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1578.395630][T26754] RAX: ffffffffffffffda RBX: 00007fd57bde6090 RCX: 00007fd57bb8f7c9 [ 1578.395649][T26754] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 1578.395668][T26754] RBP: 00007fd57bc13f91 R08: 000000000000000c R09: 0000000000000000 [ 1578.395687][T26754] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 1578.395705][T26754] R13: 00007fd57bde6128 R14: 00007fd57bde6090 R15: 00007ffe05179908 [ 1578.395745][T26754] [ 1580.520602][T26825] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1580.529701][T26825] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1582.985722][T26900] futex_wake_op: syz.3.5272 tries to shift op by -2048; fix this program [ 1583.033076][T26900] futex_wake_op: syz.3.5272 tries to shift op by -2048; fix this program [ 1584.299203][T26980] FAULT_INJECTION: forcing a failure. [ 1584.299203][T26980] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1584.312204][T26980] CPU: 1 UID: 0 PID: 26980 Comm: syz.3.5276 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1584.312253][T26980] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1584.312265][T26980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1584.312283][T26980] Call Trace: [ 1584.312305][T26980] [ 1584.312317][T26980] dump_stack_lvl+0x16c/0x1f0 [ 1584.312369][T26980] should_fail_ex+0x512/0x640 [ 1584.312408][T26980] get_futex_key+0x1d0/0x15f0 [ 1584.312470][T26980] ? __pfx_get_futex_key+0x10/0x10 [ 1584.312508][T26980] ? mmap_region+0x1ee/0x3f0 [ 1584.312545][T26980] ? __get_unmapped_area+0x267/0x3f0 [ 1584.312593][T26980] futex_wake+0xea/0x530 [ 1584.312635][T26980] ? __pfx_futex_wake+0x10/0x10 [ 1584.312701][T26980] ? up_write+0x282/0x4e0 [ 1584.312742][T26980] do_futex+0x1e3/0x350 [ 1584.312777][T26980] ? __pfx_do_futex+0x10/0x10 [ 1584.312824][T26980] __x64_sys_futex+0x1e0/0x4c0 [ 1584.312867][T26980] ? __pfx___x64_sys_futex+0x10/0x10 [ 1584.312903][T26980] ? ksys_mmap_pgoff+0x85/0x5c0 [ 1584.312947][T26980] ? xfd_validate_state+0x61/0x180 [ 1584.312976][T26980] ? __pfx_do_writev+0x10/0x10 [ 1584.313029][T26980] do_syscall_64+0xcd/0xf80 [ 1584.313061][T26980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.313093][T26980] RIP: 0033:0x7fd57bb8f7c9 [ 1584.313120][T26980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1584.313152][T26980] RSP: 002b:00007fd57c9e20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1584.313182][T26980] RAX: ffffffffffffffda RBX: 00007fd57bde5fa8 RCX: 00007fd57bb8f7c9 [ 1584.313213][T26980] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd57bde5fac [ 1584.313232][T26980] RBP: 00007fd57bde5fa0 R08: 00007fd57c9e3000 R09: 0000000000000000 [ 1584.313251][T26980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1584.313269][T26980] R13: 00007fd57bde6038 R14: 00007ffe05179820 R15: 00007ffe05179908 [ 1584.313308][T26980] [ 1585.642151][T27011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5278'. [ 1585.731182][T27011] netlink: 354 bytes leftover after parsing attributes in process `syz.4.5278'. [ 1586.058591][T27019] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 1586.058591][T27019] M' is too long [ 1586.082064][T27019] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 1586.082064][T27019] W ' is too long [ 1586.834150][T31347] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1587.070485][T27032] lo: entered allmulticast mode [ 1587.076136][T27032] lo: left allmulticast mode [ 1587.475611][T27032] zswap: compressor not available [ 1587.488488][T27036] Setting dangerous option i915.mitigations - tainting kernel [ 1587.520408][T31347] Bluetooth: hci0: unexpected event 0x31 length: 19 > 6 [ 1588.468118][T27074] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1588.497557][T27103] futex_wake_op: syz.4.5289 tries to shift op by -2048; fix this program [ 1588.546250][T27103] futex_wake_op: syz.4.5289 tries to shift op by -2048; fix this program [ 1590.240422][T27147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5293'. [ 1590.585707][T27164] FAULT_INJECTION: forcing a failure. [ 1590.585707][T27164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.669666][T27164] CPU: 0 UID: 0 PID: 27164 Comm: syz.3.5294 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1590.669702][T27164] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1590.669710][T27164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1590.669722][T27164] Call Trace: [ 1590.669729][T27164] [ 1590.669738][T27164] dump_stack_lvl+0x16c/0x1f0 [ 1590.669775][T27164] should_fail_ex+0x512/0x640 [ 1590.669803][T27164] _copy_from_user+0x2e/0xd0 [ 1590.669827][T27164] copy_msghdr_from_user+0x98/0x160 [ 1590.669858][T27164] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1590.669899][T27164] ___sys_sendmsg+0xfe/0x1d0 [ 1590.669928][T27164] ? __pfx____sys_sendmsg+0x10/0x10 [ 1590.669986][T27164] __sys_sendmsg+0x16d/0x220 [ 1590.670013][T27164] ? __pfx___sys_sendmsg+0x10/0x10 [ 1590.670058][T27164] do_syscall_64+0xcd/0xf80 [ 1590.670079][T27164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.670106][T27164] RIP: 0033:0x7fd57bb8f7c9 [ 1590.670123][T27164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.670143][T27164] RSP: 002b:00007fd57c9a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1590.670162][T27164] RAX: ffffffffffffffda RBX: 00007fd57bde6180 RCX: 00007fd57bb8f7c9 [ 1590.670176][T27164] RDX: 0000000000000004 RSI: 000020000000ca40 RDI: 0000000000000008 [ 1590.670189][T27164] RBP: 00007fd57c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1590.670201][T27164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1590.670214][T27164] R13: 00007fd57bde6218 R14: 00007fd57bde6180 R15: 00007ffe05179908 [ 1590.670241][T27164] [ 1590.874730][T27160] zswap: compressor 000 not available [ 1591.137418][T27187] WARNING! power/level is deprecated; use power/control instead [ 1591.383576][T27189] zswap: compressor not available [ 1593.038066][T27202] futex_wake_op: syz.3.5299 tries to shift op by -2048; fix this program [ 1593.055787][T27202] futex_wake_op: syz.3.5299 tries to shift op by -2048; fix this program [ 1593.177098][T27231] futex_wake_op: syz.2.5301 tries to shift op by -2048; fix this program [ 1593.371151][T27231] futex_wake_op: syz.2.5301 tries to shift op by -2048; fix this program [ 1595.250992][T27266] zswap: compressor 000 not available [ 1595.832203][T27287] zswap: compressor 000 not available [ 1596.579724][T27345] FAULT_INJECTION: forcing a failure. [ 1596.579724][T27345] name failslab, interval 1, probability 393216, space 0, times 0 [ 1596.648276][T27345] CPU: 0 UID: 0 PID: 27345 Comm: syz.4.5307 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1596.648327][T27345] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1596.648340][T27345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1596.648358][T27345] Call Trace: [ 1596.648369][T27345] [ 1596.648382][T27345] dump_stack_lvl+0x16c/0x1f0 [ 1596.648438][T27345] should_fail_ex+0x512/0x640 [ 1596.648474][T27345] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1596.648519][T27345] should_failslab+0xc2/0x120 [ 1596.648578][T27345] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1596.648619][T27345] ? __alloc_skb+0x156/0x410 [ 1596.648665][T27345] ? __alloc_skb+0x156/0x410 [ 1596.648700][T27345] __alloc_skb+0x156/0x410 [ 1596.648747][T27345] ? __alloc_skb+0x35d/0x410 [ 1596.648782][T27345] ? __pfx___alloc_skb+0x10/0x10 [ 1596.648820][T27345] ? netlink_autobind.isra.0+0x158/0x370 [ 1596.648895][T27345] netlink_alloc_large_skb+0x69/0x140 [ 1596.648946][T27345] netlink_sendmsg+0x698/0xdd0 [ 1596.649003][T27345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1596.649055][T27345] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1596.649117][T27345] ____sys_sendmsg+0xa5d/0xc30 [ 1596.649149][T27345] ? copy_msghdr_from_user+0x10a/0x160 [ 1596.649203][T27345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1596.649251][T27345] ___sys_sendmsg+0x134/0x1d0 [ 1596.649295][T27345] ? __pfx____sys_sendmsg+0x10/0x10 [ 1596.649385][T27345] __sys_sendmsg+0x16d/0x220 [ 1596.649429][T27345] ? __pfx___sys_sendmsg+0x10/0x10 [ 1596.649497][T27345] do_syscall_64+0xcd/0xf80 [ 1596.649529][T27345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.649567][T27345] RIP: 0033:0x7fb196b8f7c9 [ 1596.649593][T27345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1596.649623][T27345] RSP: 002b:00007fb194dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1596.649652][T27345] RAX: ffffffffffffffda RBX: 00007fb196de6180 RCX: 00007fb196b8f7c9 [ 1596.649674][T27345] RDX: 0000000000000004 RSI: 000020000000ca40 RDI: 0000000000000008 [ 1596.649694][T27345] RBP: 00007fb194dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.649714][T27345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.649733][T27345] R13: 00007fb196de6218 R14: 00007fb196de6180 R15: 00007ffc36c4c388 [ 1596.649776][T27345] [ 1596.937706][T27324] zswap: compressor 000 not available [ 1597.762753][T27378] lo: entered allmulticast mode [ 1597.811501][T27378] lo: left allmulticast mode [ 1598.100625][T27386] zswap: compressor 000 not available [ 1598.161307][T27409] tipc: Started in network mode [ 1598.166787][T27409] tipc: Node identity ffffffff, cluster identity 4711 [ 1598.183708][T27409] tipc: Node number set to 4294967295 [ 1598.930959][T27401] zswap: compressor not available [ 1598.936394][T27378] Setting dangerous option i915.mitigations - tainting kernel [ 1599.037617][T27434] FAULT_INJECTION: forcing a failure. [ 1599.037617][T27434] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1599.094342][T27434] CPU: 1 UID: 0 PID: 27434 Comm: syz.3.5319 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1599.094391][T27434] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1599.094403][T27434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1599.094421][T27434] Call Trace: [ 1599.094430][T27434] [ 1599.094442][T27434] dump_stack_lvl+0x16c/0x1f0 [ 1599.094493][T27434] should_fail_ex+0x512/0x640 [ 1599.094527][T27434] ? unwind_get_return_address+0x59/0xa0 [ 1599.094570][T27434] get_futex_key+0x1d0/0x15f0 [ 1599.094607][T27434] ? __pfx_get_futex_key+0x10/0x10 [ 1599.094639][T27434] ? stack_trace_save+0x8e/0xc0 [ 1599.094692][T27434] ? __pfx_stack_trace_save+0x10/0x10 [ 1599.094744][T27434] futex_wait_setup+0x9d/0x570 [ 1599.094797][T27434] __futex_wait+0x193/0x2f0 [ 1599.094838][T27434] ? __pfx___futex_wait+0x10/0x10 [ 1599.094885][T27434] ? __pfx_futex_wake_mark+0x10/0x10 [ 1599.094931][T27434] ? futex_hash+0x2c5/0x380 [ 1599.094966][T27434] ? futex_private_hash_put+0x160/0x1b0 [ 1599.095001][T27434] futex_wait+0xe8/0x380 [ 1599.095040][T27434] ? __pfx_futex_wait+0x10/0x10 [ 1599.095094][T27434] ? kmem_cache_free+0x171/0x770 [ 1599.095137][T27434] do_futex+0x229/0x350 [ 1599.095172][T27434] ? __pfx_do_futex+0x10/0x10 [ 1599.095205][T27434] ? __pfx___might_resched+0x10/0x10 [ 1599.095248][T27434] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 1599.095306][T27434] ? _raw_spin_unlock_irq+0x23/0x50 [ 1599.095355][T27434] __x64_sys_futex+0x1e0/0x4c0 [ 1599.095394][T27434] ? __do_sys_close_range+0x278/0x730 [ 1599.095447][T27434] ? __pfx___x64_sys_futex+0x10/0x10 [ 1599.095486][T27434] ? rcu_is_watching+0x12/0xc0 [ 1599.095540][T27434] do_syscall_64+0xcd/0xf80 [ 1599.095572][T27434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.095604][T27434] RIP: 0033:0x7fd57bb8f7c9 [ 1599.095628][T27434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1599.095659][T27434] RSP: 002b:00007fd57c9e20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1599.095694][T27434] RAX: ffffffffffffffda RBX: 00007fd57bde5fa8 RCX: 00007fd57bb8f7c9 [ 1599.095715][T27434] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd57bde5fa8 [ 1599.095734][T27434] RBP: 00007fd57bde5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1599.095754][T27434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1599.095772][T27434] R13: 00007fd57bde6038 R14: 00007ffe05179820 R15: 00007ffe05179908 [ 1599.095815][T27434] [ 1599.903054][T27430] zswap: compressor 000 not available [ 1600.427062][T27480] futex_wake_op: syz.4.5323 tries to shift op by -2048; fix this program [ 1600.614385][T27446] Process accounting paused [ 1600.807052][T27480] futex_wake_op: syz.4.5323 tries to shift op by -2048; fix this program [ 1601.541222][T27495] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1601.605123][T27493] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 1603.109351][T27663] FAULT_INJECTION: forcing a failure. [ 1603.109351][T27663] name failslab, interval 1, probability 393216, space 0, times 0 [ 1603.176654][T27663] CPU: 0 UID: 0 PID: 27663 Comm: syz.2.5331 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1603.176700][T27663] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1603.176712][T27663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1603.176730][T27663] Call Trace: [ 1603.176740][T27663] [ 1603.176751][T27663] dump_stack_lvl+0x16c/0x1f0 [ 1603.176800][T27663] should_fail_ex+0x512/0x640 [ 1603.176831][T27663] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1603.176872][T27663] should_failslab+0xc2/0x120 [ 1603.176918][T27663] kmem_cache_alloc_noprof+0x83/0x770 [ 1603.176953][T27663] ? skb_clone+0x190/0x3f0 [ 1603.176999][T27663] ? skb_clone+0x190/0x3f0 [ 1603.177035][T27663] skb_clone+0x190/0x3f0 [ 1603.177075][T27663] netlink_deliver_tap+0xabd/0xd30 [ 1603.177125][T27663] netlink_unicast+0x64c/0x870 [ 1603.177183][T27663] ? __pfx_netlink_unicast+0x10/0x10 [ 1603.177243][T27663] netlink_sendmsg+0x8c8/0xdd0 [ 1603.177295][T27663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1603.177344][T27663] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1603.177401][T27663] ____sys_sendmsg+0xa5d/0xc30 [ 1603.177429][T27663] ? copy_msghdr_from_user+0x10a/0x160 [ 1603.177468][T27663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1603.177512][T27663] ___sys_sendmsg+0x134/0x1d0 [ 1603.177572][T27663] ? __pfx____sys_sendmsg+0x10/0x10 [ 1603.177662][T27663] __sys_sendmsg+0x16d/0x220 [ 1603.177704][T27663] ? __pfx___sys_sendmsg+0x10/0x10 [ 1603.177773][T27663] do_syscall_64+0xcd/0xf80 [ 1603.177815][T27663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.177844][T27663] RIP: 0033:0x7fc8e318f7c9 [ 1603.177867][T27663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1603.177894][T27663] RSP: 002b:00007fc8e40b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1603.177920][T27663] RAX: ffffffffffffffda RBX: 00007fc8e33e6180 RCX: 00007fc8e318f7c9 [ 1603.177936][T27663] RDX: 0000000000000004 RSI: 000020000000ca40 RDI: 0000000000000008 [ 1603.177951][T27663] RBP: 00007fc8e40b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.177967][T27663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.177982][T27663] R13: 00007fc8e33e6218 R14: 00007fc8e33e6180 R15: 00007ffc542cd5f8 [ 1603.178014][T27663] [ 1603.774511][T27649] zswap: compressor 000 not available [ 1603.982668][T27666] zswap: compressor 000 not available [ 1604.884373][T27708] futex_wake_op: syz.4.5336 tries to shift op by -2048; fix this program [ 1604.990659][T27708] futex_wake_op: syz.4.5336 tries to shift op by -2048; fix this program [ 1605.798234][T27751] netlink: 504 bytes leftover after parsing attributes in process `syz.4.5344'. [ 1606.049036][T27782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5345'. [ 1606.161217][T27761] zswap: compressor not available [ 1606.191846][T27773] Setting dangerous option i915.mitigations - tainting kernel [ 1606.240950][T27782] hsr_slave_0 (unregistering): left promiscuous mode [ 1608.460637][T27814] futex_wake_op: syz.3.5352 tries to shift op by -2048; fix this program [ 1608.469403][T27814] futex_wake_op: syz.3.5352 tries to shift op by -2048; fix this program [ 1609.647491][ T31] audit: type=1800 audit(4294967329.853:55): pid=27867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5357" name="lu_gp_id" dev="configfs" ino=152872 res=0 errno=0 [ 1609.700328][T27867] kstrtoul() returned -22 for lu_gp_id [ 1610.711411][T27923] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5361'. [ 1610.721086][T27923] mac80211_hwsim hwsim62 : renamed from wlan0 (while UP) [ 1612.246351][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.252730][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.111965][T28002] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1615.193698][ T31] audit: type=1800 audit(4294967335.429:56): pid=28023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5374" name="members" dev="configfs" ino=153079 res=0 errno=0 [ 1615.404720][T28039] FAULT_INJECTION: forcing a failure. [ 1615.404720][T28039] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1615.424384][T28035] FAULT_INJECTION: forcing a failure. [ 1615.424384][T28035] name failslab, interval 1, probability 393216, space 0, times 0 [ 1615.437860][T28035] CPU: 1 UID: 0 PID: 28035 Comm: syz.3.5373 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1615.437899][T28035] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1615.437907][T28035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1615.437920][T28035] Call Trace: [ 1615.437926][T28035] [ 1615.437934][T28035] dump_stack_lvl+0x16c/0x1f0 [ 1615.437970][T28035] should_fail_ex+0x512/0x640 [ 1615.437993][T28035] ? __kmalloc_noprof+0xca/0x910 [ 1615.438018][T28035] should_failslab+0xc2/0x120 [ 1615.438055][T28035] __kmalloc_noprof+0xeb/0x910 [ 1615.438095][T28035] ? slhc_init+0x1ad/0x570 [ 1615.438120][T28035] ? slhc_init+0x1ad/0x570 [ 1615.438139][T28035] slhc_init+0x1ad/0x570 [ 1615.438158][T28035] ? kasan_save_track+0x14/0x30 [ 1615.438190][T28035] slip_open+0x8ee/0x1150 [ 1615.438215][T28035] ? __pfx_slip_open+0x10/0x10 [ 1615.438234][T28035] ? down_write+0x14d/0x200 [ 1615.438258][T28035] ? __pfx_slip_open+0x10/0x10 [ 1615.438278][T28035] tty_ldisc_open+0x9f/0x120 [ 1615.438306][T28035] tty_set_ldisc+0x32b/0x780 [ 1615.438337][T28035] tty_ioctl+0xc2d/0x1650 [ 1615.438368][T28035] ? __pfx_tty_ioctl+0x10/0x10 [ 1615.438411][T28035] ? find_held_lock+0x2b/0x80 [ 1615.438444][T28035] ? hook_file_ioctl_common+0x144/0x410 [ 1615.438476][T28035] ? __fget_files+0x20e/0x3c0 [ 1615.438510][T28035] ? __pfx_tty_ioctl+0x10/0x10 [ 1615.438570][T28035] __x64_sys_ioctl+0x18e/0x210 [ 1615.438611][T28035] do_syscall_64+0xcd/0xf80 [ 1615.438642][T28035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.438664][T28035] RIP: 0033:0x7fd57bb8f7c9 [ 1615.438682][T28035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1615.438704][T28035] RSP: 002b:00007fd57c9c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1615.438723][T28035] RAX: ffffffffffffffda RBX: 00007fd57bde6090 RCX: 00007fd57bb8f7c9 [ 1615.438737][T28035] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000009 [ 1615.438750][T28035] RBP: 00007fd57bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1615.438763][T28035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1615.438775][T28035] R13: 00007fd57bde6128 R14: 00007fd57bde6090 R15: 00007ffe05179908 [ 1615.438804][T28035] [ 1615.660937][T28039] CPU: 1 UID: 0 PID: 28039 Comm: syz.5.5375 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1615.660994][T28039] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1615.661007][T28039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1615.661028][T28039] Call Trace: [ 1615.661039][T28039] [ 1615.661053][T28039] dump_stack_lvl+0x16c/0x1f0 [ 1615.661110][T28039] should_fail_ex+0x512/0x640 [ 1615.661154][T28039] get_futex_key+0x1d0/0x15f0 [ 1615.661195][T28039] ? __pfx_get_futex_key+0x10/0x10 [ 1615.661246][T28039] futex_wake+0xea/0x530 [ 1615.661295][T28039] ? __pfx_futex_wake+0x10/0x10 [ 1615.661359][T28039] do_futex+0x1e3/0x350 [ 1615.661406][T28039] ? __pfx_do_futex+0x10/0x10 [ 1615.661445][T28039] ? ktime_get_ts64+0x2d2/0x400 [ 1615.661486][T28039] __x64_sys_futex+0x1e0/0x4c0 [ 1615.661531][T28039] ? __pfx___x64_sys_futex+0x10/0x10 [ 1615.661568][T28039] ? __x64_sys_poll+0x123/0x450 [ 1615.661614][T28039] ? __pfx___x64_sys_poll+0x10/0x10 [ 1615.661673][T28039] do_syscall_64+0xcd/0xf80 [ 1615.661707][T28039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.661740][T28039] RIP: 0033:0x7fb5d6b8f7c9 [ 1615.661766][T28039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1615.661800][T28039] RSP: 002b:00007fb5d79870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1615.661831][T28039] RAX: ffffffffffffffda RBX: 00007fb5d6de5fa8 RCX: 00007fb5d6b8f7c9 [ 1615.661854][T28039] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb5d6de5fac [ 1615.661876][T28039] RBP: 00007fb5d6de5fa0 R08: 00007fb5d7988000 R09: 0000000000000000 [ 1615.661898][T28039] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000000 [ 1615.661919][T28039] R13: 00007fb5d6de6038 R14: 00007ffe4a610870 R15: 00007ffe4a610958 [ 1615.661963][T28039] [ 1617.682049][T28178] futex_wake_op: syz.3.5381 tries to shift op by -2048; fix this program [ 1617.690671][T28178] futex_wake_op: syz.3.5381 tries to shift op by -2048; fix this program [ 1618.186676][T28179] futex_wake_op: syz.4.5382 tries to shift op by -2048; fix this program [ 1618.229817][T28179] futex_wake_op: syz.4.5382 tries to shift op by -2048; fix this program [ 1618.574967][T28232] vivid-007: ================= START STATUS ================= [ 1618.612304][T28232] vivid-007: Generate PTS: true [ 1618.757103][T28232] vivid-007: Generate SCR: true [ 1618.762159][T28232] tpg source WxH: 320x240 (Y'CbCr) [ 1618.767858][T28232] tpg field: 1 [ 1618.771340][T28232] tpg crop: (0,0)/320x240 [ 1618.776171][T28232] tpg compose: (0,0)/320x240 [ 1618.781031][T28232] tpg colorspace: 8 [ 1618.786320][T28232] tpg transfer function: 0/0 [ 1618.795507][T28232] tpg Y'CbCr encoding: 0/0 [ 1618.889492][T28232] tpg quantization: 0/0 [ 1618.985390][T28232] tpg RGB range: 0/2 [ 1619.003982][T28232] vivid-007: ================== END STATUS ================== [ 1619.123985][T28235] zswap: compressor not available [ 1619.356236][T28222] lo: entered allmulticast mode [ 1619.361304][T28222] lo: left allmulticast mode [ 1619.996000][T28285] netlink: 330 bytes leftover after parsing attributes in process `syz.4.5389'. [ 1620.122467][T28285] mac80211_hwsim hwsim65 : renamed from wlan0 (while UP) [ 1621.687969][T28390] futex_wake_op: syz.3.5393 tries to shift op by -2048; fix this program [ 1621.737949][T28390] futex_wake_op: syz.3.5393 tries to shift op by -2048; fix this program [ 1621.849809][T28400] FAULT_INJECTION: forcing a failure. [ 1621.849809][T28400] name failslab, interval 1, probability 393216, space 0, times 0 [ 1621.872797][T28400] CPU: 0 UID: 0 PID: 28400 Comm: syz.4.5394 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1621.872851][T28400] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1621.872865][T28400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1621.872884][T28400] Call Trace: [ 1621.872896][T28400] [ 1621.872908][T28400] dump_stack_lvl+0x16c/0x1f0 [ 1621.872985][T28400] should_fail_ex+0x512/0x640 [ 1621.873022][T28400] ? __kmalloc_noprof+0xca/0x910 [ 1621.873063][T28400] should_failslab+0xc2/0x120 [ 1621.873114][T28400] __kmalloc_noprof+0xeb/0x910 [ 1621.873153][T28400] ? tracing_open+0x2b0/0xe10 [ 1621.873196][T28400] ? tracing_open+0x2b0/0xe10 [ 1621.873230][T28400] tracing_open+0x2b0/0xe10 [ 1621.873276][T28400] do_dentry_open+0x748/0x1590 [ 1621.873344][T28400] ? __pfx_tracing_open+0x10/0x10 [ 1621.873392][T28400] vfs_open+0x82/0x3f0 [ 1621.873431][T28400] path_openat+0x2078/0x3140 [ 1621.873493][T28400] ? __pfx_path_openat+0x10/0x10 [ 1621.873567][T28400] do_filp_open+0x20b/0x470 [ 1621.873614][T28400] ? __pfx_do_filp_open+0x10/0x10 [ 1621.873688][T28400] ? alloc_fd+0x471/0x7d0 [ 1621.873742][T28400] do_sys_openat2+0x121/0x290 [ 1621.873777][T28400] ? __pfx_do_sys_openat2+0x10/0x10 [ 1621.873827][T28400] __x64_sys_openat+0x174/0x210 [ 1621.873862][T28400] ? __pfx___x64_sys_openat+0x10/0x10 [ 1621.873913][T28400] do_syscall_64+0xcd/0xf80 [ 1621.873962][T28400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.873995][T28400] RIP: 0033:0x7fb196b8f7c9 [ 1621.874021][T28400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1621.874052][T28400] RSP: 002b:00007fb197944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1621.874084][T28400] RAX: ffffffffffffffda RBX: 00007fb196de5fa0 RCX: 00007fb196b8f7c9 [ 1621.874105][T28400] RDX: 1a6b75d63882a792 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1621.874126][T28400] RBP: 00007fb196c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1621.874146][T28400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1621.874166][T28400] R13: 00007fb196de6038 R14: 00007fb196de5fa0 R15: 00007ffc36c4c388 [ 1621.874210][T28400] [ 1624.099342][T28502] FAULT_INJECTION: forcing a failure. [ 1624.099342][T28502] name failslab, interval 1, probability 393216, space 0, times 0 [ 1624.318266][T28502] CPU: 1 UID: 0 PID: 28502 Comm: syz.5.5399 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1624.318334][T28502] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1624.318348][T28502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1624.318368][T28502] Call Trace: [ 1624.318380][T28502] [ 1624.318393][T28502] dump_stack_lvl+0x16c/0x1f0 [ 1624.318449][T28502] should_fail_ex+0x512/0x640 [ 1624.318485][T28502] ? __kmalloc_noprof+0xca/0x910 [ 1624.318523][T28502] should_failslab+0xc2/0x120 [ 1624.318572][T28502] __kmalloc_noprof+0xeb/0x910 [ 1624.318609][T28502] ? slhc_init+0x3dd/0x570 [ 1624.318647][T28502] ? slhc_init+0x3dd/0x570 [ 1624.318675][T28502] slhc_init+0x3dd/0x570 [ 1624.318708][T28502] ? kasan_save_track+0x14/0x30 [ 1624.318755][T28502] slip_open+0x8ee/0x1150 [ 1624.318793][T28502] ? __pfx_slip_open+0x10/0x10 [ 1624.318821][T28502] ? down_write+0x14d/0x200 [ 1624.318859][T28502] ? __pfx_slip_open+0x10/0x10 [ 1624.318890][T28502] tty_ldisc_open+0x9f/0x120 [ 1624.318931][T28502] tty_set_ldisc+0x32b/0x780 [ 1624.318986][T28502] tty_ioctl+0xc2d/0x1650 [ 1624.319035][T28502] ? __pfx_tty_ioctl+0x10/0x10 [ 1624.319094][T28502] ? find_held_lock+0x2b/0x80 [ 1624.319146][T28502] ? hook_file_ioctl_common+0x144/0x410 [ 1624.319192][T28502] ? __fget_files+0x20e/0x3c0 [ 1624.319241][T28502] ? __pfx_tty_ioctl+0x10/0x10 [ 1624.319287][T28502] __x64_sys_ioctl+0x18e/0x210 [ 1624.319327][T28502] do_syscall_64+0xcd/0xf80 [ 1624.319358][T28502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.319389][T28502] RIP: 0033:0x7fb5d6b8f7c9 [ 1624.319414][T28502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.319444][T28502] RSP: 002b:00007fb5d7966038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1624.319473][T28502] RAX: ffffffffffffffda RBX: 00007fb5d6de6090 RCX: 00007fb5d6b8f7c9 [ 1624.319493][T28502] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000009 [ 1624.319511][T28502] RBP: 00007fb5d6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1624.319530][T28502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1624.319549][T28502] R13: 00007fb5d6de6128 R14: 00007fb5d6de6090 R15: 00007ffe4a610958 [ 1624.319591][T28502] [ 1624.896007][ T31] audit: type=1807 audit(4294967345.175:57): UNKNOWN=cover res=0 [ 1624.928824][ T31] audit: type=1802 audit(4294967345.215:58): pid=28558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.5401" res=0 errno=0 [ 1624.951097][T28516] lo: entered allmulticast mode [ 1624.960786][ T31] audit: type=1807 audit(4294967345.235:59): UNKNOWN=(errno res=0 [ 1624.985556][ T31] audit: type=1802 audit(4294967345.235:60): pid=28558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.5401" res=0 errno=0 [ 1625.739315][T28576] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1626.515335][T28604] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5407'. [ 1626.545371][T28604] veth1_macvtap: left promiscuous mode [ 1626.716817][T28523] lo: left allmulticast mode [ 1626.815414][T28523] ima: policy update failed [ 1626.926623][ T31] audit: type=1802 audit(4294967347.224:61): pid=28523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5401" res=0 errno=0 [ 1627.805614][T28645] futex_wake_op: syz.3.5411 tries to shift op by -2048; fix this program [ 1627.846005][T28645] futex_wake_op: syz.3.5411 tries to shift op by -2048; fix this program [ 1628.137191][T28677] futex_wake_op: syz.5.5412 tries to shift op by -2048; fix this program [ 1628.162992][T28677] futex_wake_op: syz.5.5412 tries to shift op by -2048; fix this program [ 1628.641380][T28686] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1628.678344][T28686] serio: Serial port pty6 [ 1629.711241][T28694] FAULT_INJECTION: forcing a failure. [ 1629.711241][T28694] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1629.734088][T28694] CPU: 1 UID: 0 PID: 28694 Comm: syz.2.5421 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1629.734146][T28694] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1629.734160][T28694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1629.734190][T28694] Call Trace: [ 1629.734201][T28694] [ 1629.734213][T28694] dump_stack_lvl+0x16c/0x1f0 [ 1629.734287][T28694] should_fail_ex+0x512/0x640 [ 1629.734342][T28694] should_fail_alloc_page+0xe7/0x130 [ 1629.734391][T28694] prepare_alloc_pages+0x401/0x670 [ 1629.734448][T28694] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1629.734492][T28694] ? stack_trace_save+0x8e/0xc0 [ 1629.734541][T28694] ? __pfx_stack_trace_save+0x10/0x10 [ 1629.734599][T28694] ? stack_depot_save_flags+0x29/0x9b0 [ 1629.734648][T28694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1629.734687][T28694] ? __kasan_kmalloc+0xaa/0xb0 [ 1629.734726][T28694] ? write_ldt+0x852/0xd20 [ 1629.734760][T28694] ? do_syscall_64+0xcd/0xf80 [ 1629.734793][T28694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.734847][T28694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1629.734897][T28694] ? policy_nodemask+0xea/0x4e0 [ 1629.734948][T28694] alloc_pages_mpol+0x1fb/0x550 [ 1629.735008][T28694] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1629.735062][T28694] alloc_pages_noprof+0x131/0x390 [ 1629.735108][T28694] get_zeroed_page_noprof+0x18/0xb0 [ 1629.735153][T28694] alloc_ldt_struct+0x9f/0x1a0 [ 1629.735186][T28694] write_ldt+0x852/0xd20 [ 1629.735227][T28694] ? __pfx_write_ldt+0x10/0x10 [ 1629.735267][T28694] ? __pfx___do_sys_prctl+0x10/0x10 [ 1629.735308][T28694] __x64_sys_modify_ldt+0xb1/0x170 [ 1629.735344][T28694] do_syscall_64+0xcd/0xf80 [ 1629.735373][T28694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.735401][T28694] RIP: 0033:0x7fc8e318f7c9 [ 1629.735425][T28694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1629.735454][T28694] RSP: 002b:00007fc8e40b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1629.735481][T28694] RAX: ffffffffffffffda RBX: 00007fc8e33e6180 RCX: 00007fc8e318f7c9 [ 1629.735500][T28694] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 1629.735519][T28694] RBP: 00007fc8e3213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1629.735538][T28694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1629.735555][T28694] R13: 00007fc8e33e6218 R14: 00007fc8e33e6180 R15: 00007ffc542cd5f8 [ 1629.735608][T28694] [ 1631.035351][T28682] Process accounting resumed [ 1631.071539][T28729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5419'. [ 1631.229944][ T31] audit: type=1800 audit(4294967351.545:62): pid=28727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5420" name="members" dev="configfs" ino=154287 res=0 errno=0 [ 1631.363192][T28719] zswap: compressor not available [ 1631.368919][T28724] Setting dangerous option i915.mitigations - tainting kernel [ 1631.449202][T28756] futex_wake_op: syz.2.5422 tries to shift op by -2048; fix this program [ 1631.458012][T28756] futex_wake_op: syz.2.5422 tries to shift op by -2048; fix this program [ 1633.613034][T28884] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1633.950311][T28900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5431'. [ 1633.968167][T28900] veth1_macvtap: left promiscuous mode [ 1634.698366][T28921] zswap: compressor 000 not available [ 1635.314891][T28930] futex_wake_op: syz.3.5433 tries to shift op by -2048; fix this program [ 1635.515785][T28930] futex_wake_op: syz.3.5433 tries to shift op by -2048; fix this program [ 1640.929575][T29128] futex_wake_op: syz.5.5446 tries to shift op by -2048; fix this program [ 1640.959951][T29128] futex_wake_op: syz.5.5446 tries to shift op by -2048; fix this program [ 1641.101711][T29133] aoe: could not set interface list: too many interfaces [ 1642.403427][T29153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5447'. [ 1644.155448][T29228] netlink: zone id is out of range [ 1644.182379][T29228] netlink: zone id is out of range [ 1644.385727][T29239] futex_wake_op: syz.3.5453 tries to shift op by -2048; fix this program [ 1644.405781][T29239] futex_wake_op: syz.3.5453 tries to shift op by -2048; fix this program [ 1644.558426][T29260] nfs: Bad value for 'source' [ 1645.028438][T29253] zswap: compressor not available [ 1645.746038][T29279] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 1645.834580][T29282] dyndbg: bad flag-op , at start of 5VUKd [ 1645.842803][T29282] dyndbg: flags parse failed [ 1647.198769][T29342] netlink: zone id is out of range [ 1647.300083][T29342] netlink: zone id is out of range [ 1647.305273][T29342] netlink: zone id is out of range [ 1647.324547][T29330] FAULT_INJECTION: forcing a failure. [ 1647.324547][T29330] name failslab, interval 1, probability 393216, space 0, times 0 [ 1647.346363][T29285] futex_wake_op: syz.3.5460 tries to shift op by -2048; fix this program [ 1647.357989][T29285] futex_wake_op: syz.3.5460 tries to shift op by -2048; fix this program [ 1647.396944][T29352] futex_wake_op: syz.2.5466 tries to shift op by -2048; fix this program [ 1647.408978][T29352] futex_wake_op: syz.2.5466 tries to shift op by -2048; fix this program [ 1647.423160][T29342] netlink: zone id is out of range [ 1647.519371][T29342] netlink: zone id is out of range [ 1647.524714][T29342] netlink: zone id is out of range [ 1647.588541][T29330] CPU: 1 UID: 0 PID: 29330 Comm: syz.5.5463 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1647.588597][T29330] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1647.588610][T29330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1647.588630][T29330] Call Trace: [ 1647.588642][T29330] [ 1647.588662][T29330] dump_stack_lvl+0x16c/0x1f0 [ 1647.588722][T29330] should_fail_ex+0x512/0x640 [ 1647.588759][T29330] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1647.588814][T29330] should_failslab+0xc2/0x120 [ 1647.588865][T29330] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1647.588915][T29330] ? smc_sysctl_net_init+0x14b/0x7d0 [ 1647.588948][T29330] ? find_held_lock+0x2b/0x80 [ 1647.588993][T29330] ? __pfx_smc_net_init+0x10/0x10 [ 1647.589031][T29330] ? kmemdup_noprof+0x29/0x60 [ 1647.589068][T29330] kmemdup_noprof+0x29/0x60 [ 1647.589107][T29330] smc_sysctl_net_init+0x14b/0x7d0 [ 1647.589148][T29330] ? __pfx_smc_net_init+0x10/0x10 [ 1647.589186][T29330] smc_net_init+0x16/0x50 [ 1647.589222][T29330] ops_init+0x1e2/0x5f0 [ 1647.589273][T29330] setup_net+0x11d/0x3a0 [ 1647.589347][T29330] ? __pfx_setup_net+0x10/0x10 [ 1647.589389][T29330] ? lockdep_init_map_type+0x5c/0x270 [ 1647.589421][T29330] ? mutex_init_lockep+0x110/0x150 [ 1647.589458][T29330] copy_net_ns+0x351/0x7c0 [ 1647.589510][T29330] create_new_namespaces+0x3ea/0xab0 [ 1647.589572][T29330] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1647.589615][T29330] ksys_unshare+0x45b/0xa40 [ 1647.589668][T29330] ? __pfx_ksys_unshare+0x10/0x10 [ 1647.589715][T29330] ? xfd_validate_state+0x61/0x180 [ 1647.589753][T29330] __x64_sys_unshare+0x31/0x40 [ 1647.589779][T29330] do_syscall_64+0xcd/0xf80 [ 1647.589808][T29330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.589838][T29330] RIP: 0033:0x7fb5d6b8f7c9 [ 1647.589862][T29330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1647.589891][T29330] RSP: 002b:00007fb5d41ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1647.589920][T29330] RAX: ffffffffffffffda RBX: 00007fb5d6de6450 RCX: 00007fb5d6b8f7c9 [ 1647.589939][T29330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1647.589957][T29330] RBP: 00007fb5d6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1647.589974][T29330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1647.589992][T29330] R13: 00007fb5d6de64e8 R14: 00007fb5d6de6450 R15: 00007ffe4a610958 [ 1647.590031][T29330] [ 1647.850896][T29342] netlink: zone id is out of range [ 1647.856155][T29342] netlink: zone id is out of range [ 1648.162617][T29357] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1648.517853][T29376] nfs: Bad value for 'source' [ 1648.729879][T29366] zswap: compressor not available [ 1648.917300][T29364] zswap: compressor 000 not available [ 1649.175161][T29390] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5475'. [ 1650.186347][T29394] futex_wake_op: syz.2.5476 tries to shift op by -2048; fix this program [ 1650.194928][T29394] futex_wake_op: syz.2.5476 tries to shift op by -2048; fix this program [ 1650.227371][T29394] 0x000000000001-0x000000020000 : "" [ 1650.276094][T29394] ftl_cs: FTL header corrupt! [ 1651.659613][T29466] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1652.058601][T29479] zswap: compressor 000 not available [ 1653.084917][T29520] random: crng reseeded on system resumption [ 1653.588887][T29566] nfs: Bad value for 'source' [ 1653.702086][T29567] futex_wake_op: syz.5.5485 tries to shift op by -2048; fix this program [ 1653.781810][T29567] futex_wake_op: syz.5.5485 tries to shift op by -2048; fix this program [ 1654.367072][T29575] sctp: [Deprecated]: syz.4.5487 (pid 29575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1654.367072][T29575] Use struct sctp_sack_info instead [ 1654.408244][T29561] zswap: compressor not available [ 1655.131664][T29582] zswap: compressor 000 not available [ 1655.916596][T29636] cgroup: fork rejected by pids controller in /syz3 [ 1659.226079][T29495] ima: policy update failed [ 1659.231933][ T31] audit: type=1802 audit(4294969427.674:63): pid=29495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5481" res=0 errno=0 [ 1663.338307][T29587] Process accounting paused [ 1665.158229][T29989] FAULT_INJECTION: forcing a failure. [ 1665.158229][T29989] name failslab, interval 1, probability 393216, space 0, times 0 [ 1665.181703][T29989] CPU: 1 UID: 0 PID: 29989 Comm: syz.4.5498 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1665.181760][T29989] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1665.181774][T29989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1665.181794][T29989] Call Trace: [ 1665.181806][T29989] [ 1665.181818][T29989] dump_stack_lvl+0x16c/0x1f0 [ 1665.181883][T29989] should_fail_ex+0x512/0x640 [ 1665.181925][T29989] should_failslab+0xc2/0x120 [ 1665.181976][T29989] __kmalloc_cache_noprof+0x80/0x800 [ 1665.182013][T29989] ? bdi_split_work_to_wbs+0x1c1/0xfc0 [ 1665.182059][T29989] ? bdi_split_work_to_wbs+0x1c1/0xfc0 [ 1665.182096][T29989] bdi_split_work_to_wbs+0x1c1/0xfc0 [ 1665.182144][T29989] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 1665.182202][T29989] ? __lock_acquire+0x436/0x2890 [ 1665.182238][T29989] __writeback_inodes_sb_nr+0x200/0x2b0 [ 1665.182278][T29989] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 1665.182335][T29989] ? get_nr_dirty_inodes+0x170/0x1e0 [ 1665.182381][T29989] ? __pfx_fs_bdev_sync+0x10/0x10 [ 1665.182420][T29989] sync_filesystem+0xbb/0x290 [ 1665.182450][T29989] ? __pfx_fs_bdev_sync+0x10/0x10 [ 1665.182487][T29989] fs_bdev_sync+0x2c/0x40 [ 1665.182526][T29989] blkdev_common_ioctl+0x2250/0x2b80 [ 1665.182572][T29989] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1665.182624][T29989] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1665.182676][T29989] ? do_vfs_ioctl+0x128/0x14f0 [ 1665.182716][T29989] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1665.182767][T29989] ? find_held_lock+0x2b/0x80 [ 1665.182815][T29989] blkdev_ioctl+0x2b5/0x6e0 [ 1665.182864][T29989] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1665.182909][T29989] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1665.182951][T29989] __x64_sys_ioctl+0x18e/0x210 [ 1665.182992][T29989] do_syscall_64+0xcd/0xf80 [ 1665.183024][T29989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.183056][T29989] RIP: 0033:0x7fb196b8f7c9 [ 1665.183083][T29989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1665.183116][T29989] RSP: 002b:00007fb194df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1665.183148][T29989] RAX: ffffffffffffffda RBX: 00007fb196de6090 RCX: 00007fb196b8f7c9 [ 1665.183170][T29989] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000004 [ 1665.183189][T29989] RBP: 00007fb196c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1665.183209][T29989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1665.183228][T29989] R13: 00007fb196de6128 R14: 00007fb196de6090 R15: 00007ffc36c4c388 [ 1665.183270][T29989] [ 1669.573503][T30112] sp0: Synchronizing with TNC [ 1669.627737][T30105] futex_wake_op: syz.5.5509 tries to shift op by -2048; fix this program [ 1669.665445][T30105] futex_wake_op: syz.5.5509 tries to shift op by -2048; fix this program [ 1670.757618][T30181] Format for deleting device is "id" (uint). [ 1671.860647][T30207] FAULT_INJECTION: forcing a failure. [ 1671.860647][T30207] name failslab, interval 1, probability 393216, space 0, times 0 [ 1671.873933][T30207] CPU: 0 UID: 0 PID: 30207 Comm: syz.4.5516 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1671.873979][T30207] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1671.873990][T30207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1671.874008][T30207] Call Trace: [ 1671.874018][T30207] [ 1671.874030][T30207] dump_stack_lvl+0x16c/0x1f0 [ 1671.874079][T30207] should_fail_ex+0x512/0x640 [ 1671.874111][T30207] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1671.874152][T30207] should_failslab+0xc2/0x120 [ 1671.874193][T30207] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1671.874226][T30207] ? __d_lookup+0x25c/0x4a0 [ 1671.874259][T30207] ? __d_alloc+0x35/0xa80 [ 1671.874288][T30207] ? __d_alloc+0x35/0xa80 [ 1671.874313][T30207] __d_alloc+0x35/0xa80 [ 1671.874343][T30207] d_alloc+0x4a/0x1e0 [ 1671.874373][T30207] lookup_one_qstr_excl+0x175/0x250 [ 1671.874431][T30207] start_dirop+0x59/0xb0 [ 1671.874480][T30207] simple_start_creating+0xf4/0x100 [ 1671.874528][T30207] ? __pfx_simple_start_creating+0x10/0x10 [ 1671.874571][T30207] ? do_raw_spin_unlock+0x172/0x230 [ 1671.874613][T30207] ? simple_pin_fs+0xa3/0x190 [ 1671.874654][T30207] debugfs_start_creating.part.0+0x86/0x1c0 [ 1671.874712][T30207] __debugfs_create_file+0xb3/0x530 [ 1671.874752][T30207] debugfs_create_file_full+0x41/0x60 [ 1671.874788][T30207] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 1671.874829][T30207] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1671.874928][T30207] ? lockdep_init_map_type+0x5c/0x270 [ 1671.874969][T30207] preinit_net.part.0+0x24e/0x8f0 [ 1671.875019][T30207] copy_net_ns+0x4cd/0x7c0 [ 1671.875075][T30207] create_new_namespaces+0x3ea/0xab0 [ 1671.875131][T30207] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1671.875182][T30207] ksys_unshare+0x45b/0xa40 [ 1671.875237][T30207] ? __pfx_ksys_unshare+0x10/0x10 [ 1671.875304][T30207] ? xfd_validate_state+0x61/0x180 [ 1671.875346][T30207] __x64_sys_unshare+0x31/0x40 [ 1671.875374][T30207] do_syscall_64+0xcd/0xf80 [ 1671.875425][T30207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.875466][T30207] RIP: 0033:0x7fb196b8f7c9 [ 1671.875501][T30207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1671.875535][T30207] RSP: 002b:00007fb197944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1671.875567][T30207] RAX: ffffffffffffffda RBX: 00007fb196de5fa0 RCX: 00007fb196b8f7c9 [ 1671.875589][T30207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1671.875608][T30207] RBP: 00007fb196c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1671.875628][T30207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1671.875649][T30207] R13: 00007fb196de6038 R14: 00007fb196de5fa0 R15: 00007ffc36c4c388 [ 1671.875694][T30207] [ 1673.391464][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.398396][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.853485][T30380] zswap: compressor 000 not available [ 1680.775804][T30437] futex_wake_op: syz.5.5536 tries to shift op by -2048; fix this program [ 1680.784520][T30437] futex_wake_op: syz.5.5536 tries to shift op by -2048; fix this program [ 1680.870094][T30440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5538'. [ 1681.205465][T30448] zswap: compressor not available [ 1682.172166][T30477] FAULT_INJECTION: forcing a failure. [ 1682.172166][T30477] name failslab, interval 1, probability 393216, space 0, times 0 [ 1682.200951][T30477] CPU: 0 UID: 0 PID: 30477 Comm: syz.4.5545 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1682.201000][T30477] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1682.201012][T30477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1682.201030][T30477] Call Trace: [ 1682.201041][T30477] [ 1682.201053][T30477] dump_stack_lvl+0x16c/0x1f0 [ 1682.201108][T30477] should_fail_ex+0x512/0x640 [ 1682.201143][T30477] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1682.201184][T30477] should_failslab+0xc2/0x120 [ 1682.201229][T30477] kmem_cache_alloc_noprof+0x83/0x770 [ 1682.201265][T30477] ? __pmd_alloc+0xbf/0x9c0 [ 1682.201318][T30477] ? __pmd_alloc+0xbf/0x9c0 [ 1682.201365][T30477] __pmd_alloc+0xbf/0x9c0 [ 1682.201416][T30477] __handle_mm_fault+0xbeb/0x2bb0 [ 1682.201460][T30477] ? __pfx___handle_mm_fault+0x10/0x10 [ 1682.201527][T30477] handle_mm_fault+0x3fe/0xad0 [ 1682.201569][T30477] __get_user_pages+0x54e/0x3590 [ 1682.201633][T30477] ? __pfx___get_user_pages+0x10/0x10 [ 1682.201693][T30477] populate_vma_page_range+0x267/0x3f0 [ 1682.201745][T30477] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1682.201794][T30477] ? __pfx_find_vma_intersection+0x10/0x10 [ 1682.201851][T30477] ? do_mmap+0x69c/0x1210 [ 1682.201902][T30477] __mm_populate+0x1d8/0x380 [ 1682.201953][T30477] ? __pfx___mm_populate+0x10/0x10 [ 1682.202006][T30477] ? up_write+0x282/0x4e0 [ 1682.202045][T30477] vm_mmap_pgoff+0x37f/0x470 [ 1682.202094][T30477] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1682.202144][T30477] ? __fget_files+0x20e/0x3c0 [ 1682.202197][T30477] ksys_mmap_pgoff+0x32c/0x5c0 [ 1682.202242][T30477] ? __pfx_ksys_write+0x10/0x10 [ 1682.202292][T30477] __x64_sys_mmap+0x125/0x190 [ 1682.202329][T30477] do_syscall_64+0xcd/0xf80 [ 1682.202370][T30477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.202400][T30477] RIP: 0033:0x7fb196b8f7c9 [ 1682.202424][T30477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1682.202453][T30477] RSP: 002b:00007fb197944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1682.202482][T30477] RAX: ffffffffffffffda RBX: 00007fb196de5fa0 RCX: 00007fb196b8f7c9 [ 1682.202501][T30477] RDX: 000000000000007f RSI: 0000000000810004 RDI: 0000000000000000 [ 1682.202519][T30477] RBP: 00007fb197944090 R08: 0000000000000003 R09: 0000000000008000 [ 1682.202538][T30477] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 1682.202556][T30477] R13: 00007fb196de6038 R14: 00007fb196de5fa0 R15: 00007ffc36c4c388 [ 1682.202596][T30477] [ 1682.521695][T30478] futex_wake_op: syz.4.5545 tries to shift op by -2048; fix this program [ 1682.543568][T29640] syz.3.5492 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1682.554312][T30478] futex_wake_op: syz.4.5545 tries to shift op by -2048; fix this program [ 1682.563006][T29640] CPU: 0 UID: 0 PID: 29640 Comm: syz.3.5492 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1682.563052][T29640] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1682.563064][T29640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1682.563082][T29640] Call Trace: [ 1682.563092][T29640] [ 1682.563104][T29640] dump_stack_lvl+0x16c/0x1f0 [ 1682.563155][T29640] dump_header+0x101/0x960 [ 1682.563192][T29640] oom_kill_process+0x176/0x910 [ 1682.563229][T29640] out_of_memory+0x350/0x1700 [ 1682.563261][T29640] ? __lock_acquire+0x436/0x2890 [ 1682.563294][T29640] ? __pfx_out_of_memory+0x10/0x10 [ 1682.563338][T29640] mem_cgroup_out_of_memory+0x118/0x130 [ 1682.563373][T29640] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1682.563417][T29640] ? do_raw_spin_unlock+0x172/0x230 [ 1682.563459][T29640] try_charge_memcg+0x695/0xd30 [ 1682.563513][T29640] ? __pfx_try_charge_memcg+0x10/0x10 [ 1682.563565][T29640] ? __print_lock_name+0x31/0xe0 [ 1682.563604][T29640] ? rcu_read_unlock+0x17/0x60 [ 1682.563643][T29640] charge_memcg+0x8a/0x230 [ 1682.563689][T29640] __mem_cgroup_charge+0x2b/0x1e0 [ 1682.563722][T29640] shmem_alloc_and_add_folio+0x50c/0xc20 [ 1682.563766][T29640] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1682.563804][T29640] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1682.563848][T29640] shmem_get_folio_gfp+0x67f/0x1610 [ 1682.563890][T29640] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1682.563936][T29640] shmem_write_begin+0x1a4/0x3b0 [ 1682.563972][T29640] ? __pfx_shmem_write_begin+0x10/0x10 [ 1682.564008][T29640] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1682.564050][T29640] ? lockdep_hardirqs_on+0x7c/0x110 [ 1682.564104][T29640] generic_perform_write+0x3c4/0x900 [ 1682.564144][T29640] ? __pfx_generic_perform_write+0x10/0x10 [ 1682.564176][T29640] ? file_update_time_flags+0x35c/0x520 [ 1682.564211][T29640] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1682.564248][T29640] shmem_file_write_iter+0x10e/0x140 [ 1682.564289][T29640] __kernel_write_iter+0x31a/0xb10 [ 1682.564334][T29640] ? __pfx___kernel_write_iter+0x10/0x10 [ 1682.564374][T29640] ? __up_read+0x2d1/0x700 [ 1682.564410][T29640] ? dump_user_range+0x756/0xb70 [ 1682.564455][T29640] ? dump_user_range+0x580/0xb70 [ 1682.564489][T29640] dump_user_range+0x413/0xb70 [ 1682.564526][T29640] ? __pfx_dump_user_range+0x10/0x10 [ 1682.564564][T29640] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 1682.564593][T29640] ? __pfx_writenote+0x10/0x10 [ 1682.564618][T29640] elf_core_dump+0x29c3/0x3c10 [ 1682.564652][T29640] ? __pfx_elf_core_dump+0x10/0x10 [ 1682.564671][T29640] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1682.564701][T29640] ? rcu_is_watching+0x12/0xc0 [ 1682.564733][T29640] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1682.564763][T29640] ? 0xffffffffff600000 [ 1682.564780][T29640] ? __schedule+0x114c/0x6150 [ 1682.564812][T29640] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1682.564883][T29640] ? vfs_coredump+0x2b85/0x55e0 [ 1682.564913][T29640] vfs_coredump+0x2b85/0x55e0 [ 1682.564953][T29640] ? __pfx_vfs_coredump+0x10/0x10 [ 1682.564983][T29640] ? __lock_acquire+0x436/0x2890 [ 1682.565008][T29640] ? __lock_acquire+0x436/0x2890 [ 1682.565030][T29640] ? lock_acquire+0x179/0x330 [ 1682.565055][T29640] ? lock_acquire+0x179/0x330 [ 1682.565091][T29640] ? arch_stack_walk+0xa6/0x100 [ 1682.565127][T29640] ? stack_trace_save+0x8e/0xc0 [ 1682.565159][T29640] ? __pfx_stack_trace_save+0x10/0x10 [ 1682.565192][T29640] ? stack_depot_save_flags+0x29/0x9b0 [ 1682.565217][T29640] ? __lock_acquire+0x436/0x2890 [ 1682.565239][T29640] ? kasan_save_stack+0x42/0x60 [ 1682.565310][T29640] ? proc_coredump_connector+0x2d1/0x4f0 [ 1682.565345][T29640] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1682.565386][T29640] ? rcu_is_watching+0x12/0xc0 [ 1682.565418][T29640] get_signal+0x22e1/0x26d0 [ 1682.565457][T29640] ? __pfx_get_signal+0x10/0x10 [ 1682.565492][T29640] arch_do_signal_or_restart+0x8f/0x7a0 [ 1682.565524][T29640] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1682.565566][T29640] ? do_user_addr_fault+0x926/0x1370 [ 1682.565597][T29640] irqentry_exit+0x38a/0x8c0 [ 1682.565618][T29640] asm_exc_page_fault+0x26/0x30 [ 1682.565638][T29640] RIP: 0033:0xfff [ 1682.565659][T29640] Code: Unable to access opcode bytes at 0xfd5. [ 1682.565669][T29640] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 1682.565684][T29640] RAX: 0000000000000000 RBX: 00007fd57bde6180 RCX: 00007fd57bb8f7c9 [ 1682.565698][T29640] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 1682.565710][T29640] RBP: 00007fd57bc13f91 R08: 0000000000000002 R09: 0000000000000000 [ 1682.565723][T29640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.565735][T29640] R13: 00007fd57bde6218 R14: 00007fd57bde6180 R15: 00007ffe05179908 [ 1682.565763][T29640] [ 1683.270830][T29640] memory: usage 307200kB, limit 307200kB, failcnt 35799 [ 1683.277835][T29640] memory+swap: usage 431996kB, limit 9007199254740988kB, failcnt 0 [ 1683.285891][T29640] kmem: usage 4172kB, limit 9007199254740988kB, failcnt 0 [ 1683.293079][T29640] Memory cgroup stats for /syz3: [ 1683.293361][T29640] cache 310071296 [ 1683.302031][T29640] rss 221184 [ 1683.305251][T29640] rss_huge 0 [ 1683.308446][T29640] shmem 309391360 [ 1683.312142][T29640] mapped_file 8192 [ 1683.315884][T29640] dirty 0 [ 1683.318844][T29640] writeback 0 [ 1683.322265][T29640] workingset_refault_anon 17154 [ 1683.329693][T29640] workingset_refault_file 18087 [ 1683.334601][T29640] swap 127791104 [ 1683.338143][T29640] swapcached 8192 [ 1683.342511][T29640] pgpgin 1508427 [ 1683.346103][T29640] pgpgout 1537008 [ 1683.349751][T29640] pgfault 667586 [ 1683.355619][T29640] pgmajfault 3129 [ 1683.359280][T29640] inactive_anon 218136576 [ 1683.363731][T29640] active_anon 91222016 [ 1683.367857][T29640] inactive_file 319488 [ 1683.373721][T29640] active_file 0 [ 1683.377218][T29640] unevictable 0 [ 1683.380840][T29640] hierarchical_memory_limit 314572800 [ 1683.386236][T29640] hierarchical_memsw_limit 9223372036854771712 [ 1683.392480][T29640] total_cache 310071296 [ 1683.396667][T29640] total_rss 221184 [ 1683.400558][T29640] total_rss_huge 0 [ 1683.404308][T29640] total_shmem 309391360 [ 1683.408503][T29640] total_mapped_file 8192 [ 1683.412862][T29640] total_dirty 0 [ 1683.416351][T29640] total_writeback 0 [ 1683.431534][T29640] total_workingset_refault_anon 17154 [ 1683.436938][T29640] total_workingset_refault_file 18087 [ 1683.442446][T29640] total_swap 127791104 [ 1683.446552][T29640] total_swapcached 8192 [ 1683.451182][T29640] total_pgpgin 1508427 [ 1683.455289][T29640] total_pgpgout 1537008 [ 1683.459473][T29640] total_pgfault 667586 [ 1683.796744][T29640] total_pgmajfault 3129 [ 1683.959931][T29640] total_inactive_anon 218136576 [ 1684.003193][T29640] total_active_anon 91222016 [ 1684.041837][T30489] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1684.061089][T30489] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1684.071193][T30489] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1684.111758][T30489] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1684.166003][T29640] total_inactive_file 319488 [ 1684.359571][T30522] futex_wake_op: syz.4.5548 tries to shift op by -2048; fix this program [ 1684.386589][T30522] futex_wake_op: syz.4.5548 tries to shift op by -2048; fix this program [ 1684.473804][T29640] total_active_file 0 [ 1684.696280][T29640] total_unevictable 0 [ 1684.701386][T29640] anon_cost 2574 [ 1684.984445][T29640] file_cost 16148 [ 1684.988143][T29640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5492,pid=29669,uid=0 [ 1685.315975][T29640] Memory cgroup out of memory: Killed process 29669 (syz.3.5492) total-vm:98592kB, anon-rss:1396kB, file-rss:31104kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 1685.521758][T30568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5556'. [ 1685.551613][T30568] netlink: 354 bytes leftover after parsing attributes in process `syz.2.5556'. [ 1685.990189][T30570] futex_wake_op: syz.4.5557 tries to shift op by -2048; fix this program [ 1685.999084][T30570] futex_wake_op: syz.4.5557 tries to shift op by -2048; fix this program [ 1686.063563][T31347] Bluetooth: hci0: command 0x0406 tx timeout [ 1686.141488][T21213] Bluetooth: hci4: command 0x0c1a tx timeout [ 1686.147558][T31347] Bluetooth: hci3: command 0x0c1a tx timeout [ 1686.158822][T21284] Bluetooth: hci1: command 0x0c1a tx timeout [ 1687.137351][T30614] random: crng reseeded on system resumption [ 1688.831530][ T33] oom_reaper: reaped process 29669 (syz.3.5492), now anon-rss:56kB, file-rss:29984kB, shmem-rss:0kB [ 1689.804476][T21213] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1692.563697][T30659] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1693.407443][T30692] Process accounting resumed [ 1696.370440][T30765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5581'. [ 1696.579452][T30740] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1697.522692][T30782] FAULT_INJECTION: forcing a failure. [ 1697.522692][T30782] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1697.576108][T30782] CPU: 1 UID: 0 PID: 30782 Comm: syz.4.5583 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1697.576161][T30782] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1697.576173][T30782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1697.576190][T30782] Call Trace: [ 1697.576199][T30782] [ 1697.576211][T30782] dump_stack_lvl+0x16c/0x1f0 [ 1697.576262][T30782] should_fail_ex+0x512/0x640 [ 1697.576299][T30782] get_futex_key+0x1d0/0x15f0 [ 1697.576334][T30782] ? __pfx_get_futex_key+0x10/0x10 [ 1697.576376][T30782] futex_wake+0xea/0x530 [ 1697.576414][T30782] ? kasan_quarantine_put+0x10a/0x240 [ 1697.576452][T30782] ? __pfx_futex_wake+0x10/0x10 [ 1697.576494][T30782] ? putname+0xf5/0x1a0 [ 1697.576528][T30782] do_futex+0x1e3/0x350 [ 1697.576560][T30782] ? __pfx_do_futex+0x10/0x10 [ 1697.576601][T30782] __x64_sys_futex+0x1e0/0x4c0 [ 1697.576636][T30782] ? __x64_sys_openat+0x174/0x210 [ 1697.576669][T30782] ? __pfx___x64_sys_futex+0x10/0x10 [ 1697.576716][T30782] do_syscall_64+0xcd/0xf80 [ 1697.576743][T30782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.576771][T30782] RIP: 0033:0x7fb196b8f7c9 [ 1697.576793][T30782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1697.576822][T30782] RSP: 002b:00007fb1979440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1697.576849][T30782] RAX: ffffffffffffffda RBX: 00007fb196de5fa8 RCX: 00007fb196b8f7c9 [ 1697.576868][T30782] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb196de5fac [ 1697.576886][T30782] RBP: 00007fb196de5fa0 R08: 00007fb197945000 R09: 0000000000000000 [ 1697.576904][T30782] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1697.576920][T30782] R13: 00007fb196de6038 R14: 00007ffc36c4c2a0 R15: 00007ffc36c4c388 [ 1697.576958][T30782] [ 1698.365018][T29638] syz.3.5492 (29638) used greatest stack depth: 18568 bytes left [ 1698.416223][T30811] futex_wake_op: syz.4.5585 tries to shift op by -2048; fix this program [ 1698.424939][T30811] futex_wake_op: syz.4.5585 tries to shift op by -2048; fix this program [ 1698.517405][T30809] futex_wake_op: syz.2.5584 tries to shift op by -2048; fix this program [ 1698.526281][T30809] futex_wake_op: syz.2.5584 tries to shift op by -2048; fix this program [ 1699.703897][T30828] zswap: compressor 000 not available [ 1700.242049][T21284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1700.366630][T21284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1700.375352][T21284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1700.401311][T21284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1700.409122][T21284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1700.973221][T30842] chnl_net:caif_netlink_parms(): no params data found [ 1701.339667][T30940] zswap: compressor not available [ 1701.672542][T30842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.686097][T30842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.701825][T30842] bridge_slave_0: entered allmulticast mode [ 1701.736334][T30842] bridge_slave_0: entered promiscuous mode [ 1701.795797][T30987] lo: entered allmulticast mode [ 1701.800779][T30987] lo: left allmulticast mode [ 1701.903568][T30842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.925576][T30842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.932853][T30842] bridge_slave_1: entered allmulticast mode [ 1701.995035][T30842] bridge_slave_1: entered promiscuous mode [ 1702.003275][T30988] zswap: compressor not available [ 1702.026165][T30993] Setting dangerous option i915.mitigations - tainting kernel [ 1702.330112][T30842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1702.365602][T30842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.531101][T21284] Bluetooth: hci2: command tx timeout [ 1702.653411][T30842] team0: Port device team_slave_0 added [ 1702.693049][T30842] team0: Port device team_slave_1 added [ 1703.297166][T30842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1703.304177][T30842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1703.475836][T30842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1703.548266][T30842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.555768][T30842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1703.596211][T30842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.767701][T30842] hsr_slave_0: entered promiscuous mode [ 1703.785402][T30842] hsr_slave_1: entered promiscuous mode [ 1703.791757][T30842] debugfs: 'hsr0' already exists in 'hsr' [ 1703.805084][T30842] Cannot create hsr debugfs directory [ 1703.919035][T14849] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.163542][T14849] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.407270][T14849] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.573651][T14849] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.607228][T21284] Bluetooth: hci2: command tx timeout [ 1705.121954][T30842] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1705.173293][T30842] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1705.263453][T30842] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1705.327251][T30842] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1705.389744][T14849] bridge_slave_1: left allmulticast mode [ 1705.395452][T14849] bridge_slave_1: left promiscuous mode [ 1705.403176][T14849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.414280][T14849] bridge_slave_0: left allmulticast mode [ 1705.421389][T14849] bridge_slave_0: left promiscuous mode [ 1705.427740][T14849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.204998][T14849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.246442][T14849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.264583][T14849] bond0 (unregistering): Released all slaves [ 1706.428669][T14849] tipc: Left network mode [ 1706.670891][T21284] Bluetooth: hci2: command tx timeout [ 1707.449639][T14849] hsr_slave_1: left promiscuous mode [ 1707.456037][T14849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1707.466095][T14849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1707.478526][T14849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1707.492178][T14849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1707.604806][T14849] veth0_macvtap: left promiscuous mode [ 1708.041639][T31424] zswap: compressor not available [ 1708.074569][T31429] Setting dangerous option i915.mitigations - tainting kernel [ 1708.428942][T14849] team0 (unregistering): Port device team_slave_1 removed [ 1708.471144][T14849] team0 (unregistering): Port device team_slave_0 removed [ 1708.743369][T21284] Bluetooth: hci2: command tx timeout [ 1709.031261][T30842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1709.039578][T31415] lo: entered allmulticast mode [ 1709.056749][T31415] lo: left allmulticast mode [ 1709.114959][T30842] 8021q: adding VLAN 0 to HW filter on device team0 [ 1709.190801][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.198060][ T7153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1709.258558][T27878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.265761][T27878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1709.370137][T30842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1709.856394][T31485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5617'. [ 1711.536972][T30842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1713.317447][T30842] veth0_vlan: entered promiscuous mode [ 1713.546062][T30842] veth1_vlan: entered promiscuous mode [ 1713.660373][T30842] veth0_macvtap: entered promiscuous mode [ 1713.679298][T30842] veth1_macvtap: entered promiscuous mode [ 1713.753596][T30842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1713.790883][T30842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1713.831375][ T7141] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.964660][ T7141] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.996266][ T7141] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.092409][ T7141] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.545139][ T7153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.735157][ T7153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.870210][T31673] FAULT_INJECTION: forcing a failure. [ 1714.870210][T31673] name failslab, interval 1, probability 393216, space 0, times 0 [ 1714.870268][T31673] CPU: 0 UID: 0 PID: 31673 Comm: syz.2.5630 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1714.870314][T31673] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1714.870326][T31673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1714.870343][T31673] Call Trace: [ 1714.870353][T31673] [ 1714.870366][T31673] dump_stack_lvl+0x16c/0x1f0 [ 1714.870419][T31673] should_fail_ex+0x512/0x640 [ 1714.870455][T31673] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1714.870497][T31673] should_failslab+0xc2/0x120 [ 1714.870546][T31673] kmem_cache_alloc_noprof+0x83/0x770 [ 1714.870582][T31673] ? __mutex_unlock_slowpath+0x161/0x790 [ 1714.870612][T31673] ? getname_flags.part.0+0x4c/0x550 [ 1714.870655][T31673] ? getname_flags.part.0+0x4c/0x550 [ 1714.870696][T31673] getname_flags.part.0+0x4c/0x550 [ 1714.870737][T31673] getname_flags+0x93/0xf0 [ 1714.870778][T31673] user_path_at+0x24/0x60 [ 1714.870822][T31673] __x64_sys_mount+0x1fb/0x310 [ 1714.870855][T31673] ? __pfx___x64_sys_mount+0x10/0x10 [ 1714.870899][T31673] do_syscall_64+0xcd/0xf80 [ 1714.870930][T31673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.870962][T31673] RIP: 0033:0x7fc8e318f7c9 [ 1714.870987][T31673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1714.871018][T31673] RSP: 002b:00007fc8e40f3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1714.871047][T31673] RAX: ffffffffffffffda RBX: 00007fc8e33e5fa0 RCX: 00007fc8e318f7c9 [ 1714.871068][T31673] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 1714.871087][T31673] RBP: 00007fc8e40f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1714.871107][T31673] R10: 00000000000001fd R11: 0000000000000246 R12: 0000000000000001 [ 1714.871126][T31673] R13: 00007fc8e33e6038 R14: 00007fc8e33e5fa0 R15: 00007ffc542cd5f8 [ 1714.871169][T31673] [ 1715.064637][T30212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.064716][T30212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.930776][T31709] can: request_module (can-proto-3) failed. [ 1717.217583][T31718] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 1717.344974][T31721] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5633'. [ 1717.701686][T31721] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5633'. [ 1719.820007][T31721] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 1721.747604][T31906] __vm_enough_memory: pid: 31906, comm: syz.2.5641, bytes: 4398046511104 not enough memory for the allocation [ 1721.809888][ T31] audit: type=1800 audit(4294969490.548:64): pid=31909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5640" name="SYSV00000001" dev="tmpfs" ino=0 res=0 errno=0 [ 1722.366087][T31926] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1722.413727][T31922] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1722.816459][T31933] input: 00 [ 1722.816459][T31933] as /devices/virtual/input/input55 [ 1722.832016][T31933] FAULT_INJECTION: forcing a failure. [ 1722.832016][T31933] name failslab, interval 1, probability 393216, space 0, times 0 [ 1722.848717][T31933] CPU: 0 UID: 0 PID: 31933 Comm: syz.6.5643 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1722.848765][T31933] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1722.848776][T31933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1722.848794][T31933] Call Trace: [ 1722.848804][T31933] [ 1722.848816][T31933] dump_stack_lvl+0x16c/0x1f0 [ 1722.848866][T31933] should_fail_ex+0x512/0x640 [ 1722.848898][T31933] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1722.848937][T31933] should_failslab+0xc2/0x120 [ 1722.848980][T31933] kmem_cache_alloc_noprof+0x83/0x770 [ 1722.849016][T31933] ? __kernfs_new_node+0xd2/0x9b0 [ 1722.849059][T31933] ? __kernfs_new_node+0xd2/0x9b0 [ 1722.849092][T31933] __kernfs_new_node+0xd2/0x9b0 [ 1722.849131][T31933] ? __pfx___kernfs_new_node+0x10/0x10 [ 1722.849176][T31933] ? find_held_lock+0x2b/0x80 [ 1722.849215][T31933] ? kernfs_root+0xee/0x2a0 [ 1722.849256][T31933] kernfs_new_node+0x13c/0x1e0 [ 1722.849314][T31933] kernfs_create_link+0xcc/0x240 [ 1722.849360][T31933] sysfs_do_create_link_sd+0x90/0x140 [ 1722.849396][T31933] sysfs_create_link+0x61/0xc0 [ 1722.849427][T31933] device_add+0xb3a/0x1980 [ 1722.849472][T31933] ? __pfx_device_add+0x10/0x10 [ 1722.849513][T31933] ? __pfx_exact_lock+0x10/0x10 [ 1722.849560][T31933] ? kobject_get+0xbb/0x150 [ 1722.849596][T31933] cdev_device_add+0x12b/0x270 [ 1722.849641][T31933] evdev_connect+0x3a4/0x4c0 [ 1722.849703][T31933] input_attach_handler.isra.0+0x176/0x250 [ 1722.849752][T31933] input_register_device+0xab9/0x11b0 [ 1722.849799][T31933] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 1722.849832][T31933] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1722.849867][T31933] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1722.849909][T31933] ? find_held_lock+0x2b/0x80 [ 1722.849964][T31933] ? __pfx_uinput_ioctl+0x10/0x10 [ 1722.849988][T31933] __x64_sys_ioctl+0x18e/0x210 [ 1722.850017][T31933] do_syscall_64+0xcd/0xf80 [ 1722.850037][T31933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.850059][T31933] RIP: 0033:0x7fc18bd8f7c9 [ 1722.850076][T31933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1722.850097][T31933] RSP: 002b:00007fc18cc2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1722.850116][T31933] RAX: ffffffffffffffda RBX: 00007fc18bfe6090 RCX: 00007fc18bd8f7c9 [ 1722.850131][T31933] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 1722.850143][T31933] RBP: 00007fc18be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1722.850156][T31933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1722.850169][T31933] R13: 00007fc18bfe6128 R14: 00007fc18bfe6090 R15: 00007ffc10813738 [ 1722.850197][T31933] [ 1723.146873][T31933] input: failed to attach handler evdev to device input55, error: -12 [ 1723.462153][T31947] zswap: compressor not available [ 1723.529225][T31959] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 1723.555382][T31947] Invalid ELF header magic: != ELF [ 1723.651618][T31959] ep_00: uevent: failed to send synthetic uevent: -22 [ 1724.312225][T31947] Process accounting paused [ 1724.332266][T32001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1724.338573][T32001] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1724.344714][T32001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1724.369614][T32001] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1724.397814][T32001] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1724.424497][T32001] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1726.339806][T31347] Bluetooth: hci0: command 0x0406 tx timeout [ 1726.345864][T21213] Bluetooth: hci1: command 0x0c1a tx timeout [ 1726.352070][T21284] Bluetooth: hci3: command 0x0c1a tx timeout [ 1726.422868][T21213] Bluetooth: hci2: command 0x0c1a tx timeout [ 1726.723406][T32159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5667'. [ 1726.855629][T32164] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1728.449721][T32211] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1728.518957][T21213] Bluetooth: hci2: command 0x0c1a tx timeout [ 1728.877786][T32225] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 1729.443526][T32229] futex_wake_op: syz.5.5675 tries to shift op by -2048; fix this program [ 1729.961984][T32247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5678'. [ 1729.993489][T32247] FAULT_INJECTION: forcing a failure. [ 1729.993489][T32247] name failslab, interval 1, probability 393216, space 0, times 0 [ 1730.030582][T32247] CPU: 0 UID: 0 PID: 32247 Comm: syz.6.5678 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1730.030641][T32247] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1730.030653][T32247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1730.030669][T32247] Call Trace: [ 1730.030679][T32247] [ 1730.030691][T32247] dump_stack_lvl+0x16c/0x1f0 [ 1730.030745][T32247] should_fail_ex+0x512/0x640 [ 1730.030775][T32247] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1730.030811][T32247] should_failslab+0xc2/0x120 [ 1730.030855][T32247] __kmalloc_cache_noprof+0x80/0x800 [ 1730.030886][T32247] ? rcu_is_watching+0x12/0xc0 [ 1730.030928][T32247] ? call_usermodehelper_setup+0xaf/0x360 [ 1730.030966][T32247] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1730.031022][T32247] ? call_usermodehelper_setup+0xaf/0x360 [ 1730.031056][T32247] call_usermodehelper_setup+0xaf/0x360 [ 1730.031107][T32247] __request_module+0x3bd/0x660 [ 1730.031146][T32247] ? __pfx___request_module+0x10/0x10 [ 1730.031203][T32247] ? find_held_lock+0x2b/0x80 [ 1730.031251][T32247] inet_create+0xd21/0x1040 [ 1730.031289][T32247] ? inet_create+0x93/0x1040 [ 1730.031332][T32247] __sock_create+0x339/0x8a0 [ 1730.031369][T32247] __sys_socket+0x14d/0x260 [ 1730.031397][T32247] ? fput+0x70/0xf0 [ 1730.031424][T32247] ? __pfx___sys_socket+0x10/0x10 [ 1730.031455][T32247] ? xfd_validate_state+0x61/0x180 [ 1730.031481][T32247] ? __pfx_ksys_write+0x10/0x10 [ 1730.031531][T32247] __x64_sys_socket+0x72/0xb0 [ 1730.031561][T32247] ? lockdep_hardirqs_on+0x7c/0x110 [ 1730.031604][T32247] do_syscall_64+0xcd/0xf80 [ 1730.031633][T32247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.031663][T32247] RIP: 0033:0x7fc18bd8f7c9 [ 1730.031687][T32247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1730.031716][T32247] RSP: 002b:00007fc18cc4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1730.031745][T32247] RAX: ffffffffffffffda RBX: 00007fc18bfe5fa0 RCX: 00007fc18bd8f7c9 [ 1730.031765][T32247] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 1730.031783][T32247] RBP: 00007fc18be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1730.031801][T32247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1730.031819][T32247] R13: 00007fc18bfe6038 R14: 00007fc18bfe5fa0 R15: 00007ffc10813738 [ 1730.031859][T32247] [ 1730.565687][T21213] Bluetooth: hci2: command 0x0c1a tx timeout [ 1732.398397][T32318] futex_wake_op: syz.2.5685 tries to shift op by -2048; fix this program [ 1732.443547][T32318] futex_wake_op: syz.2.5685 tries to shift op by -2048; fix this program [ 1733.298089][T32372] [U] [ 1733.300874][T32372] [U] [ 1733.303641][T32372] [U] [ 1733.306404][T32372] [U] [ 1733.336132][T32372] [U] [ 1733.338906][T32372] [U] [ 1733.341658][T32372] [U] [ 1733.344423][T32372] [U] [ 1733.372727][T32372] [U] [ 1733.375539][T32372] [U] [ 1733.378316][T32372] [U] [ 1733.381089][T32372] [U] [ 1733.418498][T32372] [U] [ 1733.421267][T32372] [U] [ 1733.423998][T32372] [U] [ 1733.426741][T32372] [U] [ 1733.505047][T32372] [U] [ 1733.507851][T32372] [U] [ 1733.510669][T32372] [U] [ 1733.513410][T32372] [U] [ 1733.567334][T32372] [U] [ 1733.570117][T32372] [U] [ 1733.572869][T32372] [U] [ 1733.575646][T32372] [U] [ 1733.618267][T32372] [U] [ 1733.621038][T32372] [U] [ 1733.623786][T32372] [U] [ 1733.626559][T32372] [U] [ 1733.667554][T32372] [U] [ 1733.670343][T32372] [U] [ 1733.673092][T32372] [U] [ 1733.675846][T32372] [U] [ 1733.714524][T32372] [U] [ 1733.717327][T32372] [U] [ 1733.720070][T32372] [U] [ 1733.722818][T32372] [U] [ 1733.777649][T32372] [U] [ 1733.780460][T32372] [U] [ 1733.783218][T32372] [U] [ 1733.785985][T32372] [U] [ 1733.814352][T32372] [U] [ 1733.817133][T32372] [U] [ 1733.819882][T32372] [U] [ 1733.822651][T32372] [U] [ 1733.828835][T32372] [U] [ 1733.831657][T32372] [U] [ 1733.834417][T32372] [U] [ 1733.837164][T32372] [U] [ 1733.843339][T32372] [U] [ 1733.846110][T32372] [U] [ 1733.848863][T32372] [U] [ 1733.851620][T32372] [U] [ 1733.873248][T32372] [U] [ 1733.876024][T32372] [U] [ 1733.878773][T32372] [U] [ 1733.881517][T32372] [U] [ 1733.904826][T32372] [U] [ 1733.907614][T32372] [U] [ 1733.910374][T32372] [U] [ 1733.913124][T32372] [U] [ 1733.967084][T32372] [U] [ 1733.969876][T32372] [U] [ 1733.972630][T32372] [U] [ 1733.975378][T32372] [U] [ 1734.019309][T32372] [U] [ 1734.022085][T32372] [U] [ 1734.024825][T32372] [U] [ 1734.027553][T32372] [U] [ 1734.102400][T32372] [U] [ 1734.105176][T32372] [U] [ 1734.107919][T32372] [U] [ 1734.110667][T32372] [U] [ 1734.201599][T32372] [U] [ 1734.446176][T32415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5693'. [ 1734.548132][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1734.564690][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.578004][T32417] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1734.681610][T32421] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1735.710675][T32442] Invalid ELF header magic: != ELF [ 1735.842928][T32448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5698'. [ 1735.857961][T32444] netlink: 25 bytes leftover after parsing attributes in process `syz.4.5699'. [ 1735.933593][T21213] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13 [ 1735.966177][T32434] zswap: compressor not available [ 1736.179712][T32463] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5698'. [ 1736.679964][T32474] FAULT_INJECTION: forcing a failure. [ 1736.679964][T32474] name failslab, interval 1, probability 393216, space 0, times 0 [ 1736.745667][T32474] CPU: 0 UID: 0 PID: 32474 Comm: syz.4.5701 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1736.745717][T32474] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1736.745729][T32474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1736.745746][T32474] Call Trace: [ 1736.745757][T32474] [ 1736.745770][T32474] dump_stack_lvl+0x16c/0x1f0 [ 1736.745822][T32474] should_fail_ex+0x512/0x640 [ 1736.745855][T32474] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1736.745892][T32474] should_failslab+0xc2/0x120 [ 1736.745939][T32474] __kmalloc_cache_noprof+0x80/0x800 [ 1736.745974][T32474] ? file_f_owner_allocate+0x84/0x130 [ 1736.746012][T32474] ? file_f_owner_allocate+0x84/0x130 [ 1736.746044][T32474] file_f_owner_allocate+0x84/0x130 [ 1736.746078][T32474] f_setown+0x79/0x290 [ 1736.746111][T32474] do_fcntl+0x785/0x1660 [ 1736.746144][T32474] ? __pfx_do_fcntl+0x10/0x10 [ 1736.746187][T32474] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1736.746249][T32474] __x64_sys_fcntl+0x163/0x200 [ 1736.746282][T32474] do_syscall_64+0xcd/0xf80 [ 1736.746310][T32474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.746338][T32474] RIP: 0033:0x7fb196b8f7c9 [ 1736.746359][T32474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1736.746387][T32474] RSP: 002b:00007fb194df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1736.746411][T32474] RAX: ffffffffffffffda RBX: 00007fb196de6090 RCX: 00007fb196b8f7c9 [ 1736.746429][T32474] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 1736.746445][T32474] RBP: 00007fb196c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1736.746471][T32474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1736.746505][T32474] R13: 00007fb196de6128 R14: 00007fb196de6090 R15: 00007ffc36c4c388 [ 1736.746544][T32474] [ 1737.133909][T32448] bond0: (slave bond_slave_1): Releasing backup interface [ 1737.538276][T32496] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 1737.546547][T32498] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5703'. [ 1737.765029][T32519] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5703'. [ 1739.357498][T32498] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 1740.023474][T32597] FAULT_INJECTION: forcing a failure. [ 1740.023474][T32597] name failslab, interval 1, probability 393216, space 0, times 0 [ 1740.056084][T32597] CPU: 1 UID: 0 PID: 32597 Comm: syz.2.5705 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1740.056139][T32597] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1740.056152][T32597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1740.056171][T32597] Call Trace: [ 1740.056182][T32597] [ 1740.056195][T32597] dump_stack_lvl+0x16c/0x1f0 [ 1740.056254][T32597] should_fail_ex+0x512/0x640 [ 1740.056302][T32597] ? __kmalloc_node_noprof+0xcd/0x930 [ 1740.056355][T32597] should_failslab+0xc2/0x120 [ 1740.056406][T32597] __kmalloc_node_noprof+0xee/0x930 [ 1740.056451][T32597] ? user_buffer_init+0x4d0/0x750 [ 1740.056502][T32597] ? user_buffer_init+0x4d0/0x750 [ 1740.056542][T32597] user_buffer_init+0x4d0/0x750 [ 1740.056590][T32597] tracing_mark_open+0x19d/0x220 [ 1740.056640][T32597] do_dentry_open+0x748/0x1590 [ 1740.056687][T32597] ? __pfx_tracing_mark_open+0x10/0x10 [ 1740.056743][T32597] vfs_open+0x82/0x3f0 [ 1740.056780][T32597] path_openat+0x2078/0x3140 [ 1740.056842][T32597] ? __pfx_path_openat+0x10/0x10 [ 1740.056905][T32597] do_filp_open+0x20b/0x470 [ 1740.056956][T32597] ? __pfx_do_filp_open+0x10/0x10 [ 1740.057035][T32597] ? alloc_fd+0x471/0x7d0 [ 1740.057093][T32597] do_sys_openat2+0x121/0x290 [ 1740.057129][T32597] ? __pfx_do_sys_openat2+0x10/0x10 [ 1740.057182][T32597] __x64_sys_openat+0x174/0x210 [ 1740.057219][T32597] ? __pfx___x64_sys_openat+0x10/0x10 [ 1740.057283][T32597] do_syscall_64+0xcd/0xf80 [ 1740.057316][T32597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.057349][T32597] RIP: 0033:0x7fc8e318f7c9 [ 1740.057375][T32597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1740.057406][T32597] RSP: 002b:00007fc8e40f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1740.057455][T32597] RAX: ffffffffffffffda RBX: 00007fc8e33e5fa0 RCX: 00007fc8e318f7c9 [ 1740.057477][T32597] RDX: 0000000000000201 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1740.057498][T32597] RBP: 00007fc8e3213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1740.057519][T32597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1740.057539][T32597] R13: 00007fc8e33e6038 R14: 00007fc8e33e5fa0 R15: 00007ffc542cd5f8 [ 1740.057595][T32597] [ 1740.329121][T32613] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1740.922135][T32656] random: crng reseeded on system resumption [ 1742.117962][T32656] hub 1-0:1.0: USB hub found [ 1742.535646][T32656] hub 1-0:1.0: 1 port detected [ 1742.543971][T32687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5712'. [ 1743.400600][T32701] futex_wake_op: syz.6.5714 tries to shift op by -2048; fix this program [ 1743.437671][T32701] futex_wake_op: syz.6.5714 tries to shift op by -2048; fix this program [ 1743.616190][T32719] FAULT_INJECTION: forcing a failure. [ 1743.616190][T32719] name failslab, interval 1, probability 393216, space 0, times 0 [ 1743.658480][T32719] CPU: 1 UID: 0 PID: 32719 Comm: syz.2.5716 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1743.658518][T32719] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1743.658526][T32719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1743.658539][T32719] Call Trace: [ 1743.658547][T32719] [ 1743.658555][T32719] dump_stack_lvl+0x16c/0x1f0 [ 1743.658593][T32719] should_fail_ex+0x512/0x640 [ 1743.658617][T32719] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1743.658644][T32719] should_failslab+0xc2/0x120 [ 1743.658678][T32719] __kmalloc_cache_noprof+0x80/0x800 [ 1743.658702][T32719] ? file_f_owner_allocate+0x84/0x130 [ 1743.658729][T32719] ? file_f_owner_allocate+0x84/0x130 [ 1743.658751][T32719] file_f_owner_allocate+0x84/0x130 [ 1743.658775][T32719] f_setown+0x79/0x290 [ 1743.658797][T32719] do_fcntl+0x785/0x1660 [ 1743.658820][T32719] ? __pfx_do_fcntl+0x10/0x10 [ 1743.658851][T32719] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1743.658888][T32719] __x64_sys_fcntl+0x163/0x200 [ 1743.658914][T32719] do_syscall_64+0xcd/0xf80 [ 1743.658934][T32719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.658956][T32719] RIP: 0033:0x7fc8e318f7c9 [ 1743.658973][T32719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1743.658994][T32719] RSP: 002b:00007fc8e40d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1743.659014][T32719] RAX: ffffffffffffffda RBX: 00007fc8e33e6090 RCX: 00007fc8e318f7c9 [ 1743.659029][T32719] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 1743.659081][T32719] RBP: 00007fc8e3213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1743.659095][T32719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1743.659107][T32719] R13: 00007fc8e33e6128 R14: 00007fc8e33e6090 R15: 00007ffc542cd5f8 [ 1743.659135][T32719] [ 1743.929304][T32718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5715'. [ 1744.755324][ T338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5720'. [ 1744.792282][ T338] FAULT_INJECTION: forcing a failure. [ 1744.792282][ T338] name failslab, interval 1, probability 393216, space 0, times 0 [ 1744.811109][ T338] CPU: 1 UID: 0 PID: 338 Comm: syz.5.5720 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1744.811161][ T338] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1744.811173][ T338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1744.811191][ T338] Call Trace: [ 1744.811200][ T338] [ 1744.811212][ T338] dump_stack_lvl+0x16c/0x1f0 [ 1744.811274][ T338] should_fail_ex+0x512/0x640 [ 1744.811308][ T338] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1744.811347][ T338] should_failslab+0xc2/0x120 [ 1744.811394][ T338] __kmalloc_cache_noprof+0x80/0x800 [ 1744.811427][ T338] ? rcu_is_watching+0x12/0xc0 [ 1744.811481][ T338] ? call_usermodehelper_setup+0xaf/0x360 [ 1744.811516][ T338] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1744.811553][ T338] ? call_usermodehelper_setup+0xaf/0x360 [ 1744.811586][ T338] call_usermodehelper_setup+0xaf/0x360 [ 1744.811626][ T338] __request_module+0x3bd/0x660 [ 1744.811663][ T338] ? __pfx___request_module+0x10/0x10 [ 1744.811712][ T338] ? find_held_lock+0x2b/0x80 [ 1744.811758][ T338] inet_create+0xd21/0x1040 [ 1744.811813][ T338] ? inet_create+0x93/0x1040 [ 1744.811868][ T338] __sock_create+0x339/0x8a0 [ 1744.811905][ T338] __sys_socket+0x14d/0x260 [ 1744.811931][ T338] ? fput+0x70/0xf0 [ 1744.811957][ T338] ? __pfx___sys_socket+0x10/0x10 [ 1744.811987][ T338] ? xfd_validate_state+0x61/0x180 [ 1744.812013][ T338] ? __pfx_ksys_write+0x10/0x10 [ 1744.812061][ T338] __x64_sys_socket+0x72/0xb0 [ 1744.812089][ T338] ? lockdep_hardirqs_on+0x7c/0x110 [ 1744.812152][ T338] do_syscall_64+0xcd/0xf80 [ 1744.812182][ T338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1744.812213][ T338] RIP: 0033:0x7fb5d6b8f7c9 [ 1744.812244][ T338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1744.812273][ T338] RSP: 002b:00007fb5d7987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1744.812302][ T338] RAX: ffffffffffffffda RBX: 00007fb5d6de5fa0 RCX: 00007fb5d6b8f7c9 [ 1744.812322][ T338] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 1744.812339][ T338] RBP: 00007fb5d6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1744.812358][ T338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1744.812376][ T338] R13: 00007fb5d6de6038 R14: 00007fb5d6de5fa0 R15: 00007ffe4a610958 [ 1744.812416][ T338] [ 1745.671356][ T375] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input58 [ 1747.544892][ T450] random: crng reseeded on system resumption [ 1748.744878][ T452] futex_wake_op: syz.4.5729 tries to shift op by -2048; fix this program [ 1748.760025][ T452] futex_wake_op: syz.4.5729 tries to shift op by -2048; fix this program [ 1749.614524][ T547] futex_wake_op: syz.6.5732 tries to shift op by -2048; fix this program [ 1749.623158][ T547] futex_wake_op: syz.6.5732 tries to shift op by -2048; fix this program [ 1749.652870][ T547] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 1749.652870][ T547] M' is too long [ 1749.699119][ T547] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 1749.699119][ T547] W ' is too long [ 1750.058145][ T31] audit: type=1804 audit(4294969518.921:65): pid=549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5733" name="/newroot/209/file0" dev="tmpfs" ino=1096 res=1 errno=0 [ 1751.569379][ T602] random: crng reseeded on system resumption [ 1751.793968][ T604] ptrace attach of "./syz-executor exec"[30842] was attempted by ""[604] [ 1752.490073][ T608] NFSD: Failed to start, no listeners configured. [ 1752.503484][ T616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5741'. [ 1752.593582][T21213] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 1753.434361][ T625] netlink: 342 bytes leftover after parsing attributes in process `syz.5.5741'. [ 1753.467700][ T637] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1753.558224][ T616] bond0: (slave bond_slave_1): Releasing backup interface [ 1754.994820][ T693] futex_wake_op: syz.4.5744 tries to shift op by -2048; fix this program [ 1755.161555][ T693] futex_wake_op: syz.4.5744 tries to shift op by -2048; fix this program [ 1756.373113][ T636] Process accounting resumed [ 1756.762231][ T736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5749'. [ 1756.809602][ T736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5749'. [ 1756.875200][ T727] zswap: compressor 000 not available [ 1756.926543][ T742] netlink: 'syz.2.5751': attribute type 17 has an invalid length. [ 1756.949362][ T742] netlink: 326 bytes leftover after parsing attributes in process `syz.2.5751'. [ 1757.320441][ T753] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1757.405699][ T753] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input59 [ 1757.564948][ T757] CIFS mount error: No usable UNC path provided in device string! [ 1757.564948][ T757] [ 1757.611392][ T757] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1758.510756][ T785] futex_wake_op: syz.2.5757 tries to shift op by -2048; fix this program [ 1758.519947][ T785] futex_wake_op: syz.2.5757 tries to shift op by -2048; fix this program [ 1760.084742][ T812] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1760.092623][ T812] #PF: supervisor instruction fetch in kernel mode [ 1760.099163][ T812] #PF: error_code(0x0010) - not-present page [ 1760.105177][ T812] PGD 800000002817d067 P4D 800000002817d067 PUD 6663c067 PMD 0 [ 1760.112868][ T812] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 1760.118285][ T812] CPU: 0 UID: 0 PID: 812 Comm: syz.4.5761 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1760.129096][ T812] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1760.134313][ T812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1760.144410][ T812] RIP: 0010:0x0 [ 1760.147910][ T812] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1760.155300][ T812] RSP: 0018:ffffc9000f387988 EFLAGS: 00010287 [ 1760.161404][ T812] RAX: 00000000000008e2 RBX: 0000000000000000 RCX: ffffc9000df49000 [ 1760.169411][ T812] RDX: 0000000000080000 RSI: ffffea0000481e00 RDI: ffff888021fa4fc0 [ 1760.177433][ T812] RBP: ffffea0000481e00 R08: 0000000000000007 R09: 0000000000000000 [ 1760.185439][ T812] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001e70f32 [ 1760.193632][ T812] R13: ffff888021fa4fc0 R14: 0000000000000000 R15: dffffc0000000000 [ 1760.201642][ T812] FS: 00007fb1979446c0(0000) GS:ffff8881248f9000(0000) knlGS:0000000000000000 [ 1760.210613][ T812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1760.217235][ T812] CR2: ffffffffffffffd6 CR3: 0000000033076000 CR4: 00000000003526f0 [ 1760.225245][ T812] Call Trace: [ 1760.228550][ T812] [ 1760.231513][ T812] filemap_read_folio+0xc8/0x2a0 [ 1760.236507][ T812] ? __pfx_filemap_read_folio+0x10/0x10 [ 1760.242105][ T812] do_read_cache_folio+0x266/0x5c0 [ 1760.247279][ T812] freader_get_folio+0x33a/0x930 [ 1760.252288][ T812] freader_fetch+0xbd/0x740 [ 1760.256842][ T812] ? __asan_memset+0x23/0x50 [ 1760.261461][ T812] __build_id_parse.isra.0+0xdd/0x6c0 [ 1760.266872][ T812] ? query_matching_vma+0x48e/0x7d0 [ 1760.272100][ T812] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 1760.278139][ T812] do_procmap_query+0xb0e/0x1080 [ 1760.283118][ T812] ? __pfx_do_procmap_query+0x10/0x10 [ 1760.288538][ T812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1760.294473][ T812] ? do_vfs_ioctl+0x128/0x14f0 [ 1760.299288][ T812] ? __fget_files+0x20e/0x3c0 [ 1760.304010][ T812] procfs_procmap_ioctl+0x9d/0xe0 [ 1760.309061][ T812] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 1760.314820][ T812] __x64_sys_ioctl+0x18e/0x210 [ 1760.319620][ T812] do_syscall_64+0xcd/0xf80 [ 1760.324151][ T812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.330076][ T812] RIP: 0033:0x7fb196b8f7c9 [ 1760.334505][ T812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1760.354138][ T812] RSP: 002b:00007fb197944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1760.362578][ T812] RAX: ffffffffffffffda RBX: 00007fb196de5fa0 RCX: 00007fb196b8f7c9 [ 1760.370573][ T812] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000004 [ 1760.378565][ T812] RBP: 00007fb196c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1760.386556][ T812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1760.394554][ T812] R13: 00007fb196de6038 R14: 00007fb196de5fa0 R15: 00007ffc36c4c388 [ 1760.402550][ T812] [ 1760.405587][ T812] Modules linked in: [ 1760.409500][ T812] CR2: 0000000000000000 [ 1760.413663][ T812] ---[ end trace 0000000000000000 ]--- [ 1760.419151][ T812] RIP: 0010:0x0 [ 1760.422641][ T812] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1760.430022][ T812] RSP: 0018:ffffc9000f387988 EFLAGS: 00010287 [ 1760.436127][ T812] RAX: 00000000000008e2 RBX: 0000000000000000 RCX: ffffc9000df49000 [ 1760.444141][ T812] RDX: 0000000000080000 RSI: ffffea0000481e00 RDI: ffff888021fa4fc0 [ 1760.452153][ T812] RBP: ffffea0000481e00 R08: 0000000000000007 R09: 0000000000000000 [ 1760.460147][ T812] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001e70f32 [ 1760.468136][ T812] R13: ffff888021fa4fc0 R14: 0000000000000000 R15: dffffc0000000000 [ 1760.476127][ T812] FS: 00007fb1979446c0(0000) GS:ffff8881248f9000(0000) knlGS:0000000000000000 [ 1760.485084][ T812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1760.491690][ T812] CR2: ffffffffffffffd6 CR3: 0000000033076000 CR4: 00000000003526f0 [ 1760.499692][ T812] Kernel panic - not syncing: Fatal exception [ 1760.506332][ T812] Kernel Offset: disabled [ 1760.510659][ T812] Rebooting in 86400 seconds..