last executing test programs: 15m16.068530649s ago: executing program 2 (id=3863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0xe22, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PLCA_TO_TMR={0x8}, @ETHTOOL_A_PLCA_BURST_TMR={0x8, 0x9, 0x2}, @ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0x9}, @ETHTOOL_A_PLCA_BURST_CNT={0x8, 0x8, 0x8}, @ETHTOOL_A_PLCA_TO_TMR={0x8, 0x7, 0x8}, @ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0x1}, @ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0x8c4}, @ETHTOOL_A_PLCA_BURST_TMR={0x8, 0x9, 0x5}, @ETHTOOL_A_PLCA_BURST_CNT={0x8, 0x8, 0x8}, @ETHTOOL_A_PLCA_NODE_ID={0x8, 0x6, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x2}, @ETHTOOL_A_MODULE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x4c}}, 0x4000000) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000340), r0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xac, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, "08cc7ee3e433c39fb83ef079ea2d310b7390a2cdc90ecbc1d38e7c169e4da5cb242796a24cf75188d209d1a28c12ba69b817cb97dbb43af927cb5d06e947e452e45d216fb3bc49083537a5f966e8504517102503b409134a320aa74cc6a6a0b1b0ad18d0c64ac376ca511fc6656395f0f89b11d773d39f67c0cd437e0c8402371406530399ac0f2a91022c3753b8c1dcd43fe7547b46266b"}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000500), r0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x200400c0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x80}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0xfffffffc}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x5b27}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x1}]}, 0x34}}, 0x4) r5 = ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000700)=0x1) sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x204001}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x18, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) fcntl$auto_F_OFD_SETLK(r0, 0x25, 0x3) r6 = fcntl$auto_F_GETOWN(r0, 0x9, 0x1) kill$auto(r6, 0xffffffbe) read$auto(r0, &(0x7f0000000840)='SMC_GEN_NETLINK\x00', 0x8) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000008c0), r0) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x20040000) ioctl$auto_FS_IOC_FIEMAP(r0, 0xc020660b, 0x1) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000a00), r0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r8, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BLA_BACKBONE={0xa, 0x21, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, @multicast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x4c24}, @BATADV_ATTR_TT_ADDRESS={0xa, 0x10, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004080}, 0x10) r9 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/mtd0\x00', 0x202000, 0x0) close_range$auto(r0, r9, 0x73) r10 = ioctl$auto_TUNGETVNETBE2(r5, 0x800454df, &(0x7f0000000b80)=0x10000) read$auto_xfs_dir_file_operations_xfs_file(r10, &(0x7f0000000bc0)=""/187, 0xbb) r11 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000cc0), 0xffffffffffffffff) r12 = ioctl$auto_TUNSETGROUP(r10, 0x400454ce, &(0x7f0000000d00)=0xac6) sendmsg$auto_SEG6_CMD_SETHMAC(r5, &(0x7f0000001100)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000d40)={0x344, r11, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_HMACINFO={0x327, 0x7, 0x0, 0x1, [@typed={0x12, 0x10e, 0x0, 0x0, @str='veth1_macvtap\x00'}, @generic="5ea6f258e4a8595f1293fca8561f828ce38894f901c1b156abf160a839f0dd1da034a18eb1d4e1da0ceb7fdf763abf4372f7d32fa41c48ef012de2dd77e5f6c1c41144454ee23c7ce901b0b298d3af0b6067becb6b023abe697894fdf851e603252a4d9bf18c862885eb980ce38a0d33ffba92db054d901e1e8a6c083ce4385310e8", @generic="f64830a7d9b6ca05e15078caeb77eb8d755e2d8f60d15d060e10550a7707ddee7fece126d34f483f7a68fa1682d42e00c067430acae3ea3cf158c7aef18502acd1dea20cbf24c4c7b9ffe55fa32bcc9f8c9859a9f82ec7804dd528a2cca87f", @typed={0x8, 0x55, 0x0, 0x0, @fd=r12}, @nested={0x8, 0xa8, 0x0, 0x1, [@nested={0x4, 0x38}]}, @generic="4985c887a570d060094fe04cf9e0da67c7c872f3f7ebc3cbca983fc83c1cdf3bb66e339aa8b6fc09d2a94b7dad019e552d9ca467a40c6ee4bfd30bb55f7e751b743df818df83291181d9fe1baa9eec190efab0ebe54c499e65ba65d8085eae6268174e29d42e9c487efab2a1d852455612677926b5846ef56d230dfb1e0495ab4bdfce388e3a821e5c2a611988e20c88cf20893deba5301e51027dc5ac5c1132fddca2803a5d173d381745e6d2d1504b6ff0493343c5a905a3ee010206c01e2ea4e7b8fd4a542eccaebe8faa33249c3082c44aa1097a465273e9bebeb22c601fbf", @typed={0x4, 0xda}, @generic="e95c8796f202d8587fd150a4698572", @generic="bf9ab1675d4322ec824c28ae5b94e73c9ca45731f64b8ef21a24309068964f5584c313fe452c7716d9858a8a7a15e2a8f6cdff3ab5232ca923a05a82fe87fcb7faa1b4c404415fef3df47877dd2594a3093f2c62025ff79e504b2c9eeef0d5bcd6642bbfd924fdd8cfdb8d537eb0074f56b70b142d75bb76b21d9894394fe36228653706c81c2e6e62dccf00ae859d38b022377b70422d8644d57dfd1456490e2983b213a95e367d803e", @generic="8dfac00ba6655421706a55cfe663af41b721f00cf990afe6f466ccee7eacaba30214485e1bb134dabf1499213a018aaf6ea6707459c285cddce3d441865a61df27196675252e8e94fd34c524c3228bfd16b1f61cab5bbabbd83dde757b7108120bd601a2ed6132b5326bc5b82acc316bfffbb6797d4e3e6adf9c5ac1afb54b18"]}]}, 0x344}, 0x1, 0x0, 0x0, 0x4000004}, 0x40800) ioctl$auto_SNDRV_PCM_IOCTL_HW_FREE2(r10, 0x4112, 0x0) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r10, 0x50009418, &(0x7f0000001140)={@inferred=r12, 0x100000000, 0xfffffffffffffff7, @unused, @devid}) 15m15.680870229s ago: executing program 2 (id=3866): close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x0) pipe$auto(&(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfffffdef) 15m15.274928195s ago: executing program 2 (id=3870): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x22342, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x2804c044) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x2804c044) read$auto(0x3, 0x0, 0x8080) (async) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000300)={{0x7c, 0x0, 0x0, 0x4, 0x8, 0x7fffffff, 0x1}, 0xd21, 0x0, 0x7, 0xfffffff, @raw=0x6, @inferred=0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0}) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x4d2101, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x2, 0x2) pipe2$auto(0x0, 0x80) getsockopt$auto(0xffffffffffffffff, 0x11d, 0x1, 0x0, 0x0) (async) getsockopt$auto(0xffffffffffffffff, 0x11d, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu9\x00', 0x400302, 0x0) ioctl$auto_TIOCMSET2(r0, 0x5418, &(0x7f00000000c0)="f8c050dbed4a5bf01afae2") (async) ioctl$auto_TIOCMSET2(r0, 0x5418, &(0x7f00000000c0)="f8c050dbed4a5bf01afae2") r1 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x2800, 0x0) ioctl$auto_AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000140)=0x8004aa) mkdir$auto(0x0, 0xff) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x4) (async) eventfd$auto(0x4) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4008af24, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/transparent_hugepage/hpage_pmd_size\x00', 0x0, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/transparent_hugepage/hpage_pmd_size\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000001c0)=""/43, 0x2b) (async) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000001c0)=""/43, 0x2b) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x321001, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) (async) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)) 15m14.931377758s ago: executing program 2 (id=3872): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r0) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x140080e4) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x7, 0x4, 0x200, 0xffff3347, 0x8, 0xf, r0, 0x0, 0x9}, 0x6f4) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r5, 0x100000000) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/drivers\x00', 0x100, 0x0) write$auto_proc_timens_offsets_operations_base(r4, &(0x7f0000000140)="18c6840a9830658b30e39f54a7", 0xd) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000080)=""/158, 0x9e) close$auto(r6) 15m14.530004464s ago: executing program 2 (id=3874): close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x0) pipe$auto(&(0x7f0000000040)) close_range$auto(0x0, 0xfffffffffffff001, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) bind$auto(r0, 0x0, 0x6f) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x1) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 15m12.772732461s ago: executing program 2 (id=3878): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) mount_setattr$auto(0x5, 0x0, 0x8004, 0x0, 0x57d23101) 15m12.156108437s ago: executing program 32 (id=3878): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) mount_setattr$auto(0x5, 0x0, 0x8004, 0x0, 0x57d23101) 3m21.991734209s ago: executing program 1 (id=6002): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x83, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS0\x00', 0x0, 0x0) ioctl$auto(r2, 0x5416, 0xffffffffffffffff) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x820000000000, 0x1, 0xfffffffffffffffb, 0x13, r0, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000000c0), 0x400100, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r3 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r3, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x11, 0x2, 0x73) clock_gettime$auto(0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x40401, 0x0) ioctl$auto_TCFLSH2(r4, 0x5411, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m21.745692807s ago: executing program 1 (id=6003): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/conns\x00', 0x0, 0x0) pread64$auto(r0, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x5) open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) unlink$auto(&(0x7f0000000180)='./file0\x00') fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) msgctl$auto_MSG_INFO(0x4, 0xc, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x2000, 0x20499d, 0x9) unshare$auto(0x40000080) prctl$auto(0x3e, 0x200000000001, 0x0, 0x400000000001, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x0, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x4, 0xf, 0x2, 0xc0eb1, 0xffffffffffffffff, 0x2ffffffffffe) mbind$auto(0x1fff, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 3m20.847794993s ago: executing program 1 (id=6010): r0 = prctl$auto_PR_SET_MM_START_DATA(0x9, 0x3, 0xffffffffffffffff, 0x31, 0x9) write$auto_proc_projid_map_operations_base(r0, &(0x7f0000000000)="59c952dc67a927b3df03d9ccacb5b83b4f2f65c2aa23dfa96aa4b0db41726ad1a31b0dbba4736c8b80feaf6a653e611a2054fb50007aedda110e273738b82a024c3e404f6fe955234ff2015afb2d593b215a01d0d3d62b55138e5193d15b74f54a4cd990b5f7c908e20cf78837d0294774d1", 0x72) (async, rerun: 64) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000000c0), r0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x604002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000060}, 0x4004020) (async) r3 = open(&(0x7f0000000200)='./file0\x00', 0x680200, 0x0) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000240), r0) write$auto(r3, &(0x7f0000000280)='\x00', 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000002c0)="17b8c6334e6be8327c948d54380e547c79eae9e4d67d55bd9f73c53e375ab4b2e343ec3fa87352a92d0959933fcabb332a4a8d8057aa7b728ef251341fe76724d02bf81d308f59fcab479ac9ceb0bee0881511c69ee9649263581c729fc9ec84e2d9614277a5095135ee9167e944712846d8d30332279d38c9316bf5337abc69ed1d9b06674c1d44077f56d5be2c86520f5565621e87a29482fa26ea0308e7872855ce5b6e4eda0f12aa698c0e8674831578") (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r0) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), r0) ioctl$auto_XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000000540)={0x200, @inferred=r0, @inferred=r0, 0x5, 0xd, '\x00', {0xa04, 0x7, 0x0, 0x0, 0xee01, 0x40, 0x3, 0x8, {0xffff, 0xfffffffe}, {0x3, 0x3}, {0x7, 0x1}, 0x7, 0x40, 0x1, 0x3, 0x8, 0x40, 0x40, 0x7, 0x8, 0x8000, '\x00', 0x0, 0x2, 0x1ff, 0x8}}) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000a80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000600)={0x410, r6, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0x3b, 0x129, "d420d1109332c858fd53041ee024a23338f06f088e146ea4cb874342e5fa40864dcdcef8a4b8bc9b2cf2820a996d784752c1dd4435c570"}, @NL80211_ATTR_PREV_BSSID={0xbd, 0x4f, "fcb85c06f12ab73f1e9e02acaf10df878822e22b91b73115f42854569be04e54c118dd4c9764515ad2974a7b93d4825709b448adb71975d9cfa80e64b64a4b0a30991286a90b7ffb85a66026825ecd3a835bf74750258aae6b044ae8f1dd95ab82c025ea6078af9c0fd03d2c2c4890418f4108eabd9a14dbe3ba344273ccbf3f744002cd374c74d9181729358dc023aae68ff34c4a14c8e3fb9a0221cc31d253bca7be43488bf3ffb2ee6eb82a06c51ce251aa586966d9ee60"}, @NL80211_ATTR_QOS_MAP={0x57, 0xc7, "ce11e6cdc3cddb8945794612082f3b4f2bc972c66b228bb94310c755ac3562599a5a0f8c170e6ec4c62d8834e302e1f7f5c83d2cc5f64120a1d1c2152e6bbd3e3dc3b706c7aa6c59b7c4b7c136097d5fa48927"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x64}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xf2}, @NL80211_ATTR_MESH_CONFIG={0x290, 0x23, 0x0, 0x1, [@generic="20c43d6ea290c028b164d745aa9de1884cdfdeb6ada2011403983106b4f84d3518eef628c30304fd36e5aee51f4ad8c05a66d7c71f31652a35ecf9c41dd3d78e8159af52beaeba39c93ab2bc135707cad55e0d57e4598a404d518eba0d3c33c5d0fe327fed044aba165f8530360cb7be17554b37d77c8d8acf", @generic="4ff674f44e7cbd14dbdae32fa8d537d52be16f55232e6b2cbca0ac710bcd3fd75a3a189c913cf40a5ed8942c3f563debadb73425d1c4be0b18746487d704048ed0d35a02df9f5df026feaa86ae6032b9bc591874e2a6a1589a4a37fbbda68eb2609074d6754212e5e9400ba65cdd822f1aa4c1fcd14b4814b57c42648dd19a40f46243d52418d20830331d18cc0a384ac713", @nested={0x68, 0xad, 0x0, 0x1, [@typed={0x14, 0x140, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x6d, 0x0, 0x0, @uid=r9}, @generic="d6982dadf88d6b2c1f5c058b247cd2ef99ef2a35", @typed={0x8, 0x97, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xe0}, @typed={0x8, 0x4e, 0x0, 0x0, @uid}, @typed={0x11, 0xfb, 0x0, 0x0, @str='veth0_to_hsr\x00'}, @typed={0xc, 0x134, 0x0, 0x0, @u64}]}, @typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="29a16b87289e519038dc67a86504403108919b56ec5a4b0a8b535e65e605ff2b0805fc6375716391ec9e9eb80519ea07dee5e14b0eac7ad06b37beb8211527a099b7224072919aba7f610ce4065d9ed36d3117293f30b0f48afac2d7bb1d631d943d4536679b264fc06ce01a087f6d3786441439e98951300b63269f4a763c30648c61b27a615597db", @generic="995b2b30f35c936a1384da642cb23cf1de671eff8904aaf49e7efa08f505cefa42830497e03f16614d67be872a79222980e0a9a9ebe43201e78bd33ba9419eeef19c6c1ce4d93dba775675603527ef1bd5bb7bd6631229a3c64d0be789e09befa1d55d9083215a56ea75aa214309f6bfa6447bac", @typed={0xe, 0xb5, 0x0, 0x0, @str='wireguard\x00'}, @typed={0x4, 0x47}]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x9}]}, 0x410}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) add_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000ac0)=']\x00', &(0x7f0000000b00)='nfsd\x00', &(0x7f0000000b40)="187243711fb9ae8b", 0x3, 0xfffffffffffffff8) (async) r10 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000bc0), r7) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r10, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4) r11 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000d00), r8) sendmsg$auto_NFC_CMD_ENABLE_SE(r7, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r11, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x9}, @NFC_ATTR_LLC_SDP={0x8, 0x13, 0x0, 0x1, [@typed={0x4, 0x13d}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9445febb70a6afba}, 0xc040) (async) fchdir$auto(r7) (async) sendmsg$auto_OVS_METER_CMD_SET(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x48, r10, 0x4, 0x70bd26, 0x25dfdbff, {}, [@OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x7, 0x8}}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xac}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0xfffffffffffffffa, 0x80}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x24004804) shmget$auto(0x0, 0x2f1, 0x6) (async) setsockopt$auto_SO_RCVTIMEO_OLD(r8, 0x0, 0x14, &(0x7f0000000f40)=']\x00', 0x0) (async) io_uring_setup$auto(0xffff, &(0x7f0000000f80)={0x6, 0x4, 0x5, 0x3, 0x4, 0x3, r7, [0x6, 0x4, 0x100], {0x1000, 0x7, 0x2, 0xc0, 0x1, 0x9, 0xffffff03, 0x5, 0x5}, {0x8, 0x717fb89, 0xee3, 0x95e1, 0xd, 0x1, 0xef72, 0x1, 0x10000}}) (async) ioctl$auto_XFS_IOC_FREESP(r7, 0x4030580b, &(0x7f0000001000)={0x4b0, 0x8, 0x6, 0xffff, 0x0, 0x0}) syz_open_procfs$namespace(r13, &(0x7f0000001040)='ns/net\x00') (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001080)='/dev/sequencer\x00', 0x111201, 0x0) (async) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r13, 0x6, 0x1374) read$auto_snd_seq_f_ops_seq_clientmgr(r12, &(0x7f00000010c0)=""/120, 0x78) 3m20.467230985s ago: executing program 1 (id=6013): r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x4) r2 = getpid() r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x7, 0x0, 0x8004) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r4, &(0x7f00000083c0)={0x0, 0xec0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r5, 0x32f, 0x70bd2a, 0x25dfdbfd, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) statx$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x5064, 0x80000001, &(0x7f0000000140)={0x3, 0x23, 0xffffffff, 0xc89, 0xee01, 0xffffffffffffffff, 0x2, 0x4, 0xffffffff, 0x7, 0x9, 0x10, {0x1, 0x8a}, {0xf, 0x5}, {0x8, 0x3}, {0x80000001, 0x9}, 0x1, 0x1, 0x5, 0x8336, 0x100000001, 0xe5, 0x9, 0x1000000000000000, 0xce, 0x3ff, 0x8000, 0x5, [0x2, 0x200, 0x7, 0x1ff, 0x3, 0x5, 0x6, 0x3, 0x1522]}) sendmsg$auto_IPVS_CMD_GET_DEST(r1, &(0x7f00000017c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB="87c18530c0fc060c47815f9b24c90de95b452fe5", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="1400fd00fe8000000000000000000000000000aa735d59d9dfa5ea2f424af1c7c4a31ea5c010c7ab7d5d315a447f1266540ac0670441fbcfe047dff00d17b385c7aa9bfa26562f9b9d4ee48691ed62a3ca2b238f00b08008003500", @ANYRES32=r0, @ANYBLOB='\b\x00A\x00', @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="00000008000500000100000800040008000000"], 0x153c}, 0x1, 0x0, 0x0, 0x8801}, 0x4008812) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x3f, 0x8, 0x1, 0x1}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, &(0x7f0000000180)=0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r7) 3m19.520733505s ago: executing program 1 (id=6023): socket(0xf, 0x80000, 0x8) mmap$auto(0xfff, 0x202000d, 0xffffffffffffffff, 0xeb3, 0xfffffffffffffffa, 0x28000) prctl$auto(0x7, 0x3f7, 0x0, 0xffffffffffffffff, 0x6) shmctl$auto_IPC_STAT(0xffff, 0x2, &(0x7f00000001c0)={{0x76f8c966, 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x20000003, 0x8}, 0x8, 0xce, 0x3, 0x4, @raw=0x1, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000280)="072646921a727bd9233ac9ad591af2a532e3c46623665b66c010da25d3609241b85422cfeffd62c863e1bd26d3ec3bb02940cb4e76c1e26eaf0ee7148191ecbc63fd104bf941581b848652331bc1ead1ce621cf97e3d1bae67e83df75a6574", &(0x7f0000000180)}) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000006e80), 0x1, 0x0) ioctl$auto_PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000006ec0)=0x3) 3m18.830110244s ago: executing program 1 (id=6016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700801dcdf2502000000080002000e0000000800010002000000"], 0x24}}, 0x4000) r2 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy11/hwsim/group\x00', 0x70a00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000039c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_SET(r3, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000003a00)={0x18, r4, 0x201, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc1}, 0x4044) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000000)=0x5) (async) close_range$auto(r5, r2, 0x8000006) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x163b00, 0x0) (async, rerun: 32) r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) (rerun: 32) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x50000600}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TQ={0x5, 0x19, 0x8}, @BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) r9 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x56, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x400, 0x9, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x10000], {0x6, 0x6, 0x2, 0x29f, 0x1, 0x84, 0x101, 0x17f, 0x2}, {0xff, 0x401, 0xfffffff9, 0x80005, 0x1, 0x7, 0x4, 0x7, 0x7}}) (async) r10 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r9, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) (async) readv$auto(r7, &(0x7f0000000a80)={0x0, 0x4c786f70}, 0x2) (async) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000100)=0xe25) (async) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, 0x0) (async) close_range$auto(r7, r6, 0xffffffff) (async) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x41, 0xffffffffffffff04, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x82, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0x0, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x7e30e0be]}, 0x1fe, 0xf) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) (async) io_uring_register$auto(r6, 0x1f, &(0x7f0000000540)="014f8997f304e761789eabea32dd89570e1a54999dc43f505a474d03631d3b93977b0699ad0818027a2aea1a83f905fa98a5ea9a61703a388925a6bb2ce5afc53138c899b9d67c432d3dddfbca13b664e5aab856d43166ca720f0105fdf7ffffffffffffff62bc3e12bc194258", 0x100001) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) 3m3.281214118s ago: executing program 33 (id=6016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700801dcdf2502000000080002000e0000000800010002000000"], 0x24}}, 0x4000) r2 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy11/hwsim/group\x00', 0x70a00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000039c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_SET(r3, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000003a00)={0x18, r4, 0x201, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc1}, 0x4044) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000000)=0x5) (async) close_range$auto(r5, r2, 0x8000006) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x163b00, 0x0) (async, rerun: 32) r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) (rerun: 32) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x50000600}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TQ={0x5, 0x19, 0x8}, @BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) r9 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x56, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x400, 0x9, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x10000], {0x6, 0x6, 0x2, 0x29f, 0x1, 0x84, 0x101, 0x17f, 0x2}, {0xff, 0x401, 0xfffffff9, 0x80005, 0x1, 0x7, 0x4, 0x7, 0x7}}) (async) r10 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r9, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) (async) readv$auto(r7, &(0x7f0000000a80)={0x0, 0x4c786f70}, 0x2) (async) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000100)=0xe25) (async) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, 0x0) (async) close_range$auto(r7, r6, 0xffffffff) (async) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x41, 0xffffffffffffff04, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x82, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0x0, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x7e30e0be]}, 0x1fe, 0xf) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) (async) io_uring_register$auto(r6, 0x1f, &(0x7f0000000540)="014f8997f304e761789eabea32dd89570e1a54999dc43f505a474d03631d3b93977b0699ad0818027a2aea1a83f905fa98a5ea9a61703a388925a6bb2ce5afc53138c899b9d67c432d3dddfbca13b664e5aab856d43166ca720f0105fdf7ffffffffffffff62bc3e12bc194258", 0x100001) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) 2m55.364328054s ago: executing program 4 (id=6109): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x83, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r2, 0x5416, 0xffffffffffffffff) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x820000000000, 0x1, 0xfffffffffffffffb, 0x13, r0, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) 2m54.903136144s ago: executing program 4 (id=6111): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x83, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS0\x00', 0x0, 0x0) ioctl$auto(r2, 0x5416, 0xffffffffffffffff) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x820000000000, 0x1, 0xfffffffffffffffb, 0x13, r0, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) 2m54.599552566s ago: executing program 4 (id=6114): mmap$auto(0x0, 0x4020009, 0xe1, 0x4000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/id\x00', 0x200, 0x0) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) 2m54.373624998s ago: executing program 4 (id=6116): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000006e80), 0x1, 0x0) ioctl$auto_PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000006ec0)=0x3) (fail_nth: 1) 2m53.235279779s ago: executing program 4 (id=6122): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC1\x00', 0x101842, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_POWER(r0, 0xc00455d0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop7\x00', 0x14f340, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) ioctl$auto(r3, 0x9210641f, 0xd) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$auto_TCFLSH2(r1, 0x540b, &(0x7f0000000000)="b9aa2cc146642085d7515da01c2f2cfc3d73d0aa8fa8df3fe99e9f783e211ea07dd76996adf50080e6ce0ff035d7f8a5cb8a29ae05326f30d4da71e306d98527f207a6af687ab2b590c97b52564b1e924560f457") ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) readlink$auto(&(0x7f0000000c80)='\x00', 0x0, 0x7) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000300)="db") 2m52.698416499s ago: executing program 4 (id=6126): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x23, 0x80805, 0x0) inotify_init1$auto(0x3000000000000) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1cc5087217524dd0}}, 0x6a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/memory0/online\x00', 0x123902, 0x0) write$auto(r1, &(0x7f00000001c0)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\xec\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r3 = dup$auto(r2) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r4, 0x81004523, r3) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r5, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00'}) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) 18.525115854s ago: executing program 0 (id=6683): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) bpf$auto(0x7ff, &(0x7f0000000040)=@iter_create={0xffffffffffffffff, 0xffffffff}, 0x5) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) eventfd$auto(0x7) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x10000, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mincore$auto(0x8, 0x3, &(0x7f0000000100)='[\x00') read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya6\x00', 0x40001, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x89f3, r2) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB="0800080004"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) 17.699467193s ago: executing program 6 (id=6686): openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x1, 0x106) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) unshare$auto(0x40000080) socket(0x1e, 0x6, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r0) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf250500000008000100baf7d531a782bf01800000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(r2, 0x104000000000010e, 0xa, 0x0, 0x400) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x2}, @THERMAL_GENL_ATTR_TZ_TRIP={0xf8, 0x4, 0x0, 0x1, [@generic="fdfff66e90e41f5145dca9d6ebb42ef1ac1f9fabcfba2539b4f7e39b19b9034676545adb6fe43b99e611dc9f8fedd0ba2e3e60da1187669ddf25d56c83a99b4f56ff27dc8f66ee44b284f763879962df99cf8c295515accadc7b8395500b76756956acb70e0cbfcabc207decf33e49666972b95a9af13eb3182c02c26b8c957099532af642e8ce95b392b0d75c761c48f99b6430a84130ae1665f428337ffe88db1adbad08c95d7c19b1555d7fc677eeb0f4f5f10033fae87162026d504044788b58552a7e9e4dab4000fb0f8eca8c65c6bc1397af42c5b472c820dcbfe5c80a902d03ff96ebda4c51079f73c576c8d1e79b308c"]}]}, 0x114}}, 0xe3554881342a936f) timer_create$auto(0x9, 0x0, 0x0) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x72042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) 17.604801183s ago: executing program 0 (id=6689): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/cpu/events/branch-instructions\x00', 0x22b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)=';') fchown$auto(r2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x3) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x400284, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x10540, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$auto(0xc8, 0x400454cb, 0xffffffffffffffff) 16.573929938s ago: executing program 0 (id=6698): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) bpf$auto(0x7ff, &(0x7f0000000040)=@iter_create={0xffffffffffffffff, 0xffffffff}, 0x5) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) eventfd$auto(0x7) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x10000, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mincore$auto(0x8, 0x3, &(0x7f0000000100)='[\x00') read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya6\x00', 0x40001, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x89f3, r2) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB="0800080004"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) 16.570382638s ago: executing program 3 (id=6699): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r0, &(0x7f0000000080)='/dev/audio\x00', 0x7ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x8, 0x6, 0x7, 0x8000, 0x5, 0x4000000, 0x5, 0x25991f93, 0xd, 0x1000, 0xfb, 0x1, 0x8, 0x4f, 0x96, 0x100]}, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) fcntl$auto(0x0, 0x407, 0x100000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) setresuid$auto(0x2, 0x7, 0x8080) ioctl$auto(0x3, 0x4b68, r2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) lsm_get_self_attr$auto(0x0, 0x0, 0x0, 0x0) 16.363167087s ago: executing program 6 (id=6691): unshare$auto(0x40000080) mmap$auto(0x0, 0x4, 0x0, 0x9b72, 0xffffffffffffffff, 0xa000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) ioctl$auto_USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000180)={0x7, 0x6a, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="010b27bd7000fda5c5a620736600080003", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x24048800) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/icmp6\x00', 0x0, 0x0) pread64$auto(r5, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x7) ioctl$auto_FS_IOC_UNRESVSP64(r5, 0x4030582b, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2, 0x3, 0x6) r7 = socket(0x2, 0x1, 0x0) bind$auto(r7, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) bind$auto(r4, &(0x7f0000000080)=@sco={0x1f, @none}, 0x80) write$auto(r6, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0xcb) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f00000001c0)="0e68949c1100a2027d45d1eacf4985a3f1e9699025aa4dce69e2d6000000000000009a2faa02a07158899871fb401af0ae9aad318aae5b06fae490375cc3bb6dbb142bf034109b1cecb63ef15e134f73ad93e971d6ce06b734bc351b50276b38bda233ef89c4a52ec1b05f0f4ce53414e830", 0x12, 0x0, 0xd, 0x0, 0x1f, 0xb}, 0x800008}, 0x6, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0xb2c, 0x2, 0x1ffffffc, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) write$auto(0x3, 0x0, 0x100085) 16.008246809s ago: executing program 0 (id=6693): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x83, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r2, 0x5416, 0xffffffffffffffff) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x820000000000, 0x1, 0xfffffffffffffffb, 0x13, r0, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000000c0), 0x400100, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r3 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r3, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x11, 0x2, 0x73) clock_gettime$auto(0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x40401, 0x0) ioctl$auto_TCFLSH2(r4, 0x5411, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 15.630348137s ago: executing program 0 (id=6694): open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x134) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./cgroup\x00') mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x44801, 0x0) 15.169519752s ago: executing program 6 (id=6695): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0x11, 0x2, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0x800) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE2(r1, 0x4140, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) 15.155687103s ago: executing program 0 (id=6696): r0 = prctl$auto_PR_SET_MM_ARG_START(0x7, 0x8, 0xffffffffffffffff, 0x8, 0xffffffff) write$auto(r0, &(0x7f00000001c0)='&,.-\'[\x00', 0x6a7b) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clockevents/clockevent0/unbind_device\x00', 0x20001, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004280)={0x1018, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_NAME={0xd0, 0x11, 'u)(\xa0\xb66s\xec\xbe\f\x19\"\xbfW:L\x15\x94\x1a\x06\xb27\b\xb7;\x1eF\xe0 .\xdfB\xbb\xe11\xea\xfdX\x95\xa5\x01\xd62\xf4E\xa5O\x1a\x950\xacJkD\xa39\x11\x11\xb4\xb1,>\xc7\xf97=\xe7\x98\xa9\xefPq\'\xc9\x8doJ$2\xae\xd1\xeaF\xd7os7\xffr\n#\x00\x00\x04\x00\xc3\x9fx\a\xc3f\xb1\xc1i\xa4\xaf8y\xf2\x0f\xa3\xcaa\xaf%\xe1\xd3j;U\xd8t\xc9\xf7\xbf\xbf\xb4$\xbb\x8eM\x17c\x9c\xc2\xbfn\x83\r\xcbY\xb4O(\x05[\x90\x9di\xbb\xd3oC\x1f\a\xd7\x1f\xeb\xb1pBr\x8e\a<\xa7?\x05\xf7UI\x92\xa4pt\x9b\xee\x904\x91\xd8\xa4\xcb\x83o\\\xdf&\xae\xe8\xe9\x80nmy\xf0\r[:\xf2\xf3\x1f\x1d\xa4'}, @HWSIM_ATTR_TX_INFO={0x4}, @HWSIM_ATTR_PMSR_RESULT={0xf30, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x4}, @NL80211_PMSR_ATTR_PEERS={0xf28, 0x5, 0x0, 0x1, [{0xf24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x70, 0x1, "30b15bb5020a0c56f70d6afa4ba70a03d25f684d8efc0052736b3a9d16e59adf56fb33dbad5f6f62f53e488fc6e4ad85adaf1c94f4ea8954beea89fdc55dc92d1740df25fcfee7d9a939759e13650e847bb42b301d8bdb938027a1fede24deed092ea6148c6d46c7383e3c27"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4a, 0x1, "9d6063ff475edb9426febe1ae6cc31dba6d10c14627b1dc504eb974915ff80e8c9285d4b097c3d42d06b2d2e1538c8cfbcee96b5855d0976d599a89ac2ac61358f7af7b2a9df"}, @NL80211_PMSR_PEER_ATTR_RESP={0x44, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x10}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x7}, @NL80211_PMSR_RESP_ATTR_DATA={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x40}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x58, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xfffffffffffffffe}, @NL80211_PMSR_RESP_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_FLAGS={0x5}]}]}]}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x8}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0xfff}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xdb3, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}]}]}]}]}, 0x1018}, 0x1, 0x0, 0x0, 0x2000c8c8}, 0x4048000) sendmsg$auto_HWSIM_CMD_FRAME(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@HWSIM_ATTR_CIPHER_SUPPORT={0xe1, 0x18, "0556f25a21558363c8bf667be9dbd752a4198c3c2c15b07d5a73fe3740f0e8e86c56fc7403d4f97282307ad1e72836ad9d7a29bcbf6b8dc39a4ad6731c78de41e301ad8f96261946817c14deeacc7f0b7f31555a0050b7fefd62c110cad9681a28f671b8a7a2ebd06fea7df8f855b73fa59daa4b27102256e68fed6c7d0ddb86d292eef0bc7edf10a470933f8627e3d1ae891cf15ea296fcab2a4a91d28e05c8799c645a32d2b17a2ff3d5f26f3f24faa767562aad75871d262ada6045eaed16d2a8e2a97215f171594d80eec19d0cd3be8ae997b713ab29f95c667956"}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_NO_VIF={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f0000002200)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r7) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xeb383c97e0f8ac60}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r8, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x5) ioctl$sock_SIOCGIFINDEX(r5, 0x4605, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000400)='\n', 0x1) 14.634706364s ago: executing program 3 (id=6697): r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000fbdbdf253600000008004200010100000501000100000000000c0000000000000000000038472f060000"], 0x34}}, 0x8880) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000cf9a3531eee4b59f13376389d7764ec622878ed0a6f1dd45e82765f5c9d79dc2e5201e23477042065d64a5638714434f9b7565fa6ddfbdcbb4a40314ef4307a6e667a20b74f6a513eb1463acbda995236dfd5f7a4332df508b8fe8033adb55171d833a10a53027d8ae9c21e86db9ff0f0000000000009be369c1677363d59038983dbcd60ad15d851cb1e884e139609ab3fd1bb160700df3b3f2880adfef32fbc5c6d0a26617f0dad4f938ba69acb7146343535ab33e39379a260c8c92850e64be351a954d54877b9ed26c84c6bcafb50a503d3298f776d4239b780696eaf4669cfda961cd3173d5cc9ef11f5c559a9ba4e6d5a5bbbb4c206e2f1dbf1e", @ANYRES16=r0, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001800038014000c000700000000000000000000000000000112000100898771f1c19f17790485908286dd00000400028004000800"], 0x4c}, 0x1, 0x0, 0x0, 0x44000884}, 0xc800) 14.372957743s ago: executing program 3 (id=6701): openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x1, 0x106) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) unshare$auto(0x40000080) socket(0x1e, 0x6, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r0) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf250500000008000100baf7d531a782bf01800000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(r2, 0x104000000000010e, 0xa, 0x0, 0x400) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x2}, @THERMAL_GENL_ATTR_TZ_TRIP={0xf8, 0x4, 0x0, 0x1, [@generic="fdfff66e90e41f5145dca9d6ebb42ef1ac1f9fabcfba2539b4f7e39b19b9034676545adb6fe43b99e611dc9f8fedd0ba2e3e60da1187669ddf25d56c83a99b4f56ff27dc8f66ee44b284f763879962df99cf8c295515accadc7b8395500b76756956acb70e0cbfcabc207decf33e49666972b95a9af13eb3182c02c26b8c957099532af642e8ce95b392b0d75c761c48f99b6430a84130ae1665f428337ffe88db1adbad08c95d7c19b1555d7fc677eeb0f4f5f10033fae87162026d504044788b58552a7e9e4dab4000fb0f8eca8c65c6bc1397af42c5b472c820dcbfe5c80a902d03ff96ebda4c51079f73c576c8d1e79b308c"]}]}, 0x114}}, 0xe3554881342a936f) timer_create$auto(0x9, 0x0, 0x0) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x72042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) 13.165382387s ago: executing program 3 (id=6705): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x83, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS0\x00', 0x0, 0x0) ioctl$auto(r2, 0x5416, 0xffffffffffffffff) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x820000000000, 0x1, 0xfffffffffffffffb, 0x13, r0, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x400100, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r3 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r3, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x11, 0x2, 0x73) clock_gettime$auto(0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x40401, 0x0) ioctl$auto_TCFLSH2(r4, 0x5411, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 12.407609683s ago: executing program 3 (id=6707): open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x134) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./cgroup\x00') mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x44801, 0x0) 12.134675614s ago: executing program 3 (id=6708): mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x4}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) madvise$auto(0x0, 0x8000000000000001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) fchownat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_restrict_self$auto(0xffffffffffffffff, 0x0) mknodat$auto(0xffffffffffffffff, 0x0, 0xfff, 0x9) renameat2$auto(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0xfffffffe) mknodat$auto(0xffffffffffffffff, 0x0, 0xfff, 0xfffffff8) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0002", @ANYRES16=0x0, @ANYBLOB="200327bd"], 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x68b82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, &(0x7f0000000080)={0xcc}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) 10.941550487s ago: executing program 5 (id=6713): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) bpf$auto(0x7ff, &(0x7f0000000040)=@iter_create={0xffffffffffffffff, 0xffffffff}, 0x5) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) eventfd$auto(0x7) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x10000, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mincore$auto(0x8, 0x3, &(0x7f0000000100)='[\x00') read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya6\x00', 0x40001, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x89f3, r2) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB="0800080004"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) 10.791608692s ago: executing program 5 (id=6714): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x83, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS0\x00', 0x0, 0x0) ioctl$auto(r2, 0x5416, 0xffffffffffffffff) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x820000000000, 0x1, 0xfffffffffffffffb, 0x13, r0, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x400100, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r3 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r3, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x11, 0x2, 0x73) clock_gettime$auto(0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x40401, 0x0) ioctl$auto_TCFLSH2(r4, 0x5411, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 10.615780222s ago: executing program 5 (id=6715): openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x1, 0x106) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) unshare$auto(0x40000080) socket(0x1e, 0x6, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r0) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf250500000008000100baf7d531a782bf01800000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(r2, 0x104000000000010e, 0xa, 0x0, 0x400) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x2}, @THERMAL_GENL_ATTR_TZ_TRIP={0xf8, 0x4, 0x0, 0x1, [@generic="fdfff66e90e41f5145dca9d6ebb42ef1ac1f9fabcfba2539b4f7e39b19b9034676545adb6fe43b99e611dc9f8fedd0ba2e3e60da1187669ddf25d56c83a99b4f56ff27dc8f66ee44b284f763879962df99cf8c295515accadc7b8395500b76756956acb70e0cbfcabc207decf33e49666972b95a9af13eb3182c02c26b8c957099532af642e8ce95b392b0d75c761c48f99b6430a84130ae1665f428337ffe88db1adbad08c95d7c19b1555d7fc677eeb0f4f5f10033fae87162026d504044788b58552a7e9e4dab4000fb0f8eca8c65c6bc1397af42c5b472c820dcbfe5c80a902d03ff96ebda4c51079f73c576c8d1e79b308c"]}]}, 0x114}}, 0xe3554881342a936f) timer_create$auto(0x9, 0x0, 0x0) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x72042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) 9.488481618s ago: executing program 5 (id=6716): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x83, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS0\x00', 0x0, 0x0) ioctl$auto(r2, 0x5416, 0xffffffffffffffff) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x820000000000, 0x1, 0xfffffffffffffffb, 0x13, r0, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x400100, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r3 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r3, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x11, 0x2, 0x73) clock_gettime$auto(0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x40401, 0x0) ioctl$auto_TCFLSH2(r4, 0x5411, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 9.244452425s ago: executing program 5 (id=6717): open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x134) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./cgroup\x00') mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x44801, 0x0) 54.764527ms ago: executing program 35 (id=6696): r0 = prctl$auto_PR_SET_MM_ARG_START(0x7, 0x8, 0xffffffffffffffff, 0x8, 0xffffffff) write$auto(r0, &(0x7f00000001c0)='&,.-\'[\x00', 0x6a7b) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clockevents/clockevent0/unbind_device\x00', 0x20001, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004280)={0x1018, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_NAME={0xd0, 0x11, 'u)(\xa0\xb66s\xec\xbe\f\x19\"\xbfW:L\x15\x94\x1a\x06\xb27\b\xb7;\x1eF\xe0 .\xdfB\xbb\xe11\xea\xfdX\x95\xa5\x01\xd62\xf4E\xa5O\x1a\x950\xacJkD\xa39\x11\x11\xb4\xb1,>\xc7\xf97=\xe7\x98\xa9\xefPq\'\xc9\x8doJ$2\xae\xd1\xeaF\xd7os7\xffr\n#\x00\x00\x04\x00\xc3\x9fx\a\xc3f\xb1\xc1i\xa4\xaf8y\xf2\x0f\xa3\xcaa\xaf%\xe1\xd3j;U\xd8t\xc9\xf7\xbf\xbf\xb4$\xbb\x8eM\x17c\x9c\xc2\xbfn\x83\r\xcbY\xb4O(\x05[\x90\x9di\xbb\xd3oC\x1f\a\xd7\x1f\xeb\xb1pBr\x8e\a<\xa7?\x05\xf7UI\x92\xa4pt\x9b\xee\x904\x91\xd8\xa4\xcb\x83o\\\xdf&\xae\xe8\xe9\x80nmy\xf0\r[:\xf2\xf3\x1f\x1d\xa4'}, @HWSIM_ATTR_TX_INFO={0x4}, @HWSIM_ATTR_PMSR_RESULT={0xf30, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x4}, @NL80211_PMSR_ATTR_PEERS={0xf28, 0x5, 0x0, 0x1, [{0xf24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x70, 0x1, "30b15bb5020a0c56f70d6afa4ba70a03d25f684d8efc0052736b3a9d16e59adf56fb33dbad5f6f62f53e488fc6e4ad85adaf1c94f4ea8954beea89fdc55dc92d1740df25fcfee7d9a939759e13650e847bb42b301d8bdb938027a1fede24deed092ea6148c6d46c7383e3c27"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4a, 0x1, "9d6063ff475edb9426febe1ae6cc31dba6d10c14627b1dc504eb974915ff80e8c9285d4b097c3d42d06b2d2e1538c8cfbcee96b5855d0976d599a89ac2ac61358f7af7b2a9df"}, @NL80211_PMSR_PEER_ATTR_RESP={0x44, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x10}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x7}, @NL80211_PMSR_RESP_ATTR_DATA={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x40}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x58, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xfffffffffffffffe}, @NL80211_PMSR_RESP_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_FLAGS={0x5}]}]}]}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x8}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0xfff}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xdb3, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}]}]}]}]}, 0x1018}, 0x1, 0x0, 0x0, 0x2000c8c8}, 0x4048000) sendmsg$auto_HWSIM_CMD_FRAME(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@HWSIM_ATTR_CIPHER_SUPPORT={0xe1, 0x18, "0556f25a21558363c8bf667be9dbd752a4198c3c2c15b07d5a73fe3740f0e8e86c56fc7403d4f97282307ad1e72836ad9d7a29bcbf6b8dc39a4ad6731c78de41e301ad8f96261946817c14deeacc7f0b7f31555a0050b7fefd62c110cad9681a28f671b8a7a2ebd06fea7df8f855b73fa59daa4b27102256e68fed6c7d0ddb86d292eef0bc7edf10a470933f8627e3d1ae891cf15ea296fcab2a4a91d28e05c8799c645a32d2b17a2ff3d5f26f3f24faa767562aad75871d262ada6045eaed16d2a8e2a97215f171594d80eec19d0cd3be8ae997b713ab29f95c667956"}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_NO_VIF={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f0000002200)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r7) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xeb383c97e0f8ac60}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r8, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x5) ioctl$sock_SIOCGIFINDEX(r5, 0x4605, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000400)='\n', 0x1) 10.620394ms ago: executing program 5 (id=6719): mmap$auto(0x0, 0x404008, 0xdf, 0x13, 0x2, 0x20000000000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyc3\x00', 0x40001, 0x0) ioctl$auto(r1, 0x5424, 0xffffffffffffffff) write$auto_proc_page_owner_threshold_(0xffffffffffffffff, &(0x7f0000000080)="94c28716412f7229c12ee27bc016c62f0e168a2514a363bab8a425c82f24706271784c1365bb6da57610e419391af68c0447903818b4c91e1172495ee9d3499e98435566d94b0ef6415a1f55bb80e7e2f6850366689404e229ef9e686203f1c1d6312915f9c022f95570452ea6aeabbe490363aeb57c9cc09a0fa20792d97ee15f8ba25f3ece1b1783fbc10e6bf771c66366ec435be8c9fe1fe3bd54e41d", 0x9e) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r0, 0x9, &(0x7f0000000140)='/dev/ptyc3\x00', &(0x7f0000000180)="67bb3199cd5073105e87b2f9017976304484771eecca451516f221e29bac4f1b8dabdc1fa9f788a2f147eeb094df5ceefc8dfcc95e580e56f296178f494e602d8b7ec9de5b652c425aad545e4ebdcf1bd2006c82b658bf694303c605370a61b0ade6a5923cb61a640d7a162793274a4ca9ad7d7785be9e060b77a4bec754a9c21b87ff31d7be5b9e999490a98771c2bade1829f09f9e7c0d39169bc31fa2333e288c3c86aacbe717a0c6b897da3d10676bc822fd68d21cc1f01541e2bf32cd454361ed3d4038c5ab432e30f13b30d95bc75db4b5967fcf9c66", 0x5) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/kvm/mmio_exits\x00', 0x8ec00, 0x0) 0s ago: executing program 36 (id=6695): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0x11, 0x2, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0x800) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE2(r1, 0x4140, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) kernel console output (not intermixed with test programs): 07ffe879ce138 [ 1846.071557][ T7705] [ 1846.071567][ T7705] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1846.673622][ T7740] FAULT_INJECTION: forcing a failure. [ 1846.673622][ T7740] name failslab, interval 1, probability 0, space 0, times 0 [ 1846.732752][ T7740] CPU: 0 UID: 0 PID: 7740 Comm: syz.5.6135 Tainted: G L syzkaller #0 PREEMPT(full) [ 1846.732791][ T7740] Tainted: [L]=SOFTLOCKUP [ 1846.732800][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1846.732813][ T7740] Call Trace: [ 1846.732822][ T7740] [ 1846.732831][ T7740] dump_stack_lvl+0x100/0x190 [ 1846.732872][ T7740] should_fail_ex.cold+0x5/0xa [ 1846.732901][ T7740] ? tomoyo_encode2+0xfb/0x3c0 [ 1846.732934][ T7740] should_failslab+0xc2/0x120 [ 1846.732961][ T7740] __kmalloc_noprof+0xe0/0x850 [ 1846.732998][ T7740] ? d_absolute_path+0x136/0x1b0 [ 1846.733037][ T7740] tomoyo_encode2+0xfb/0x3c0 [ 1846.733075][ T7740] tomoyo_encode+0x29/0x50 [ 1846.733107][ T7740] tomoyo_realpath_from_path+0x18c/0x690 [ 1846.733148][ T7740] tomoyo_path_number_perm+0x23c/0x580 [ 1846.733177][ T7740] ? tomoyo_path_number_perm+0x22e/0x580 [ 1846.733208][ T7740] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1846.733267][ T7740] ? find_held_lock+0x2b/0x80 [ 1846.733290][ T7740] ? __fget_files+0x215/0x3d0 [ 1846.733312][ T7740] ? hook_file_ioctl_common+0x146/0x410 [ 1846.733349][ T7740] ? __fget_files+0x21f/0x3d0 [ 1846.733377][ T7740] security_file_ioctl+0xd3/0x230 [ 1846.733413][ T7740] __x64_sys_ioctl+0xb7/0x210 [ 1846.733452][ T7740] do_syscall_64+0x106/0xf80 [ 1846.733475][ T7740] ? clear_bhb_loop+0x40/0x90 [ 1846.733505][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.733529][ T7740] RIP: 0033:0x7f1430f9c819 [ 1846.733548][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1846.733572][ T7740] RSP: 002b:00007f1431e5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1846.733595][ T7740] RAX: ffffffffffffffda RBX: 00007f1431215fa0 RCX: 00007f1430f9c819 [ 1846.733611][ T7740] RDX: 0000200000006ec0 RSI: 0000000040047438 RDI: 0000000000000003 [ 1846.733626][ T7740] RBP: 00007f1431e5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1846.733641][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1846.733672][ T7740] R13: 00007f1431216038 R14: 00007f1431215fa0 R15: 00007ffef9e082f8 [ 1846.733703][ T7740] [ 1846.733744][ T7740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1847.871472][ T7741] block nbd8: shutting down sockets [ 1850.618856][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6147'. [ 1852.498936][ T7884] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1852.520991][ T7884] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1852.533553][ T7884] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1852.553379][ T7884] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1852.579891][ T7884] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1852.597978][ T7884] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1852.655373][ T7884] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1852.977711][ T7892] FAULT_INJECTION: forcing a failure. [ 1852.977711][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.149928][ T7892] CPU: 0 UID: 0 PID: 7892 Comm: syz.3.6156 Tainted: G L syzkaller #0 PREEMPT(full) [ 1853.149967][ T7892] Tainted: [L]=SOFTLOCKUP [ 1853.149976][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1853.149992][ T7892] Call Trace: [ 1853.150003][ T7892] [ 1853.150012][ T7892] dump_stack_lvl+0x100/0x190 [ 1853.150055][ T7892] should_fail_ex.cold+0x5/0xa [ 1853.150084][ T7892] ? ima_alloc_init_template+0x19d/0x6d0 [ 1853.150120][ T7892] should_failslab+0xc2/0x120 [ 1853.150149][ T7892] __kmalloc_noprof+0xe0/0x850 [ 1853.150189][ T7892] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 1853.150229][ T7892] ima_alloc_init_template+0x19d/0x6d0 [ 1853.150260][ T7892] ? take_dentry_name_snapshot+0x310/0x7c0 [ 1853.150300][ T7892] ima_store_measurement+0x1e3/0x5b0 [ 1853.150331][ T7892] ? __pfx_ima_store_measurement+0x10/0x10 [ 1853.150373][ T7892] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1853.150419][ T7892] process_measurement+0x19cc/0x2350 [ 1853.150453][ T7892] ? stack_trace_save+0x8e/0xc0 [ 1853.150480][ T7892] ? __pfx_process_measurement+0x10/0x10 [ 1853.150506][ T7892] ? __lock_acquire+0x4a5/0x2630 [ 1853.150539][ T7892] ? __kasan_slab_alloc+0x89/0x90 [ 1853.150562][ T7892] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1853.150601][ T7892] ? init_file+0x95/0x480 [ 1853.150629][ T7892] ? alloc_empty_file+0x73/0x1c0 [ 1853.150660][ T7892] ? alloc_file_pseudo+0x13a/0x230 [ 1853.150691][ T7892] ? ksys_mmap_pgoff+0x232/0x650 [ 1853.150718][ T7892] ? __x64_sys_mmap+0x125/0x190 [ 1853.150754][ T7892] ? do_syscall_64+0x106/0xf80 [ 1853.150805][ T7892] ? __pfx_aa_file_perm+0x10/0x10 [ 1853.150850][ T7892] ima_file_mmap+0x1c4/0x1f0 [ 1853.150876][ T7892] ? __pfx_ima_file_mmap+0x10/0x10 [ 1853.150909][ T7892] security_mmap_file+0x278/0x9b0 [ 1853.150945][ T7892] vm_mmap_pgoff+0xec/0x470 [ 1853.150978][ T7892] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1853.151005][ T7892] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1853.151040][ T7892] ? hugetlbfs_get_inode+0x36e/0x750 [ 1853.151077][ T7892] ksys_mmap_pgoff+0x273/0x650 [ 1853.151136][ T7892] ? __x64_sys_futex+0x358/0x4d0 [ 1853.151171][ T7892] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1853.151200][ T7892] ? xfd_validate_state+0x129/0x190 [ 1853.151242][ T7892] __x64_sys_mmap+0x125/0x190 [ 1853.151283][ T7892] do_syscall_64+0x106/0xf80 [ 1853.151306][ T7892] ? clear_bhb_loop+0x40/0x90 [ 1853.151343][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.151369][ T7892] RIP: 0033:0x7f5fb479c819 [ 1853.151391][ T7892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.151415][ T7892] RSP: 002b:00007f5fb571d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1853.151438][ T7892] RAX: ffffffffffffffda RBX: 00007f5fb4a15fa0 RCX: 00007f5fb479c819 [ 1853.151455][ T7892] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1853.151470][ T7892] RBP: 00007f5fb4832c91 R08: 0000000000000401 R09: 0000300000000000 [ 1853.151486][ T7892] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1853.151501][ T7892] R13: 00007f5fb4a16038 R14: 00007f5fb4a15fa0 R15: 00007ffeeea85898 [ 1853.151532][ T7892] [ 1853.950916][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.957261][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.510592][T26552] Bluetooth: hci1: command 0x0c1a tx timeout [ 1854.590554][T26552] Bluetooth: hci0: command 0x0c1a tx timeout [ 1854.596631][T26552] Bluetooth: hci3: command 0x0c1a tx timeout [ 1854.603291][T26555] Bluetooth: hci4: command 0x0c1a tx timeout [ 1854.609306][T26555] Bluetooth: hci2: command 0x0c1a tx timeout [ 1854.952848][ T30] audit: type=1804 audit(1217558807.532:57): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.6156" name="anon_hugepage" dev="hugetlbfs" ino=255045 res=0 errno=0 [ 1855.515646][ T7971] netlink: 338 bytes leftover after parsing attributes in process `syz.3.6161'. [ 1856.676174][T26552] Bluetooth: hci0: command 0x0c1a tx timeout [ 1858.750188][T26552] Bluetooth: hci0: command 0x0c1a tx timeout [ 1860.921024][ T8031] zswap: compressor not available [ 1861.000997][T26557] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1861.014219][T26557] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1861.026200][T26557] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1861.046735][T26557] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1861.054632][T26557] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1861.394775][ T8042] Process accounting paused [ 1862.872003][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 1863.150469][T26557] Bluetooth: hci5: command tx timeout [ 1863.329636][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.377587][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.404137][ T8186] openvswitch: netlink: IP tunnel dst address not specified [ 1863.418066][ T8045] bridge_slave_0: entered allmulticast mode [ 1863.422408][ T8045] bridge_slave_0: entered promiscuous mode [ 1863.436646][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.436725][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.436915][ T8045] bridge_slave_1: entered allmulticast mode [ 1863.439098][ T8045] bridge_slave_1: entered promiscuous mode [ 1863.565529][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1863.578937][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1863.715607][ T8045] team0: Port device team_slave_0 added [ 1863.718250][ T8045] team0: Port device team_slave_1 added [ 1863.845190][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1863.845210][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1863.845241][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1863.866573][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1863.866593][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1863.866625][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1864.078010][ T8045] hsr_slave_0: entered promiscuous mode [ 1864.078903][ T8045] hsr_slave_1: entered promiscuous mode [ 1864.079484][ T8045] debugfs: 'hsr0' already exists in 'hsr' [ 1864.079505][ T8045] Cannot create hsr debugfs directory [ 1864.353010][ T8409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6182'. [ 1865.012097][ T8045] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1865.067758][ T8045] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1865.176410][ T8045] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1865.235511][T26557] Bluetooth: hci5: command tx timeout [ 1865.291124][ T8045] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1865.724335][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1865.809269][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1865.889439][T29072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.896679][T29072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1865.967890][T29072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.975146][T29072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1866.849816][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1867.310752][T26557] Bluetooth: hci5: command tx timeout [ 1867.933090][ T8045] veth0_vlan: entered promiscuous mode [ 1867.984140][ T8045] veth1_vlan: entered promiscuous mode [ 1868.056875][ T8045] veth0_macvtap: entered promiscuous mode [ 1868.086749][ T8045] veth1_macvtap: entered promiscuous mode [ 1868.136378][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1868.170879][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1868.206657][T29058] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.236176][T29058] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.414976][T29058] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.504958][T29058] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.018582][T25484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1869.079865][T25484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1869.244448][T25485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1869.310175][T25485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1869.392400][T26557] Bluetooth: hci5: command tx timeout [ 1870.507642][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6205'. [ 1870.546507][ T8581] FAULT_INJECTION: forcing a failure. [ 1870.546507][ T8581] name failslab, interval 1, probability 0, space 0, times 0 [ 1870.597943][ T30] audit: type=1804 audit(1217558823.182:58): pid=8593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6203" name="/newroot/sys/kernel/debug/tracing/buffer_subbuf_size_kb" dev="tracefs" ino=3548 res=1 errno=0 [ 1870.776591][ T8581] CPU: 0 UID: 0 PID: 8581 Comm: syz.6.6168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1870.776631][ T8581] Tainted: [L]=SOFTLOCKUP [ 1870.776640][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1870.776656][ T8581] Call Trace: [ 1870.776664][ T8581] [ 1870.776674][ T8581] dump_stack_lvl+0x100/0x190 [ 1870.776717][ T8581] should_fail_ex.cold+0x5/0xa [ 1870.776747][ T8581] should_failslab+0xc2/0x120 [ 1870.776776][ T8581] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1870.776811][ T8581] ? ima_d_path+0xc9/0x260 [ 1870.776838][ T8581] ? xattr_resolve_name+0x27d/0x3f0 [ 1870.776867][ T8581] ima_d_path+0xc9/0x260 [ 1870.776896][ T8581] ? __pfx_ima_d_path+0x10/0x10 [ 1870.776930][ T8581] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1870.776977][ T8581] process_measurement+0x1b25/0x2350 [ 1870.777010][ T8581] ? stack_trace_save+0x8e/0xc0 [ 1870.777036][ T8581] ? __pfx_process_measurement+0x10/0x10 [ 1870.777062][ T8581] ? __lock_acquire+0x4a5/0x2630 [ 1870.777094][ T8581] ? __kasan_slab_alloc+0x89/0x90 [ 1870.777118][ T8581] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1870.777156][ T8581] ? init_file+0x95/0x480 [ 1870.777184][ T8581] ? alloc_empty_file+0x73/0x1c0 [ 1870.777214][ T8581] ? alloc_file_pseudo+0x13a/0x230 [ 1870.777245][ T8581] ? ksys_mmap_pgoff+0x232/0x650 [ 1870.777270][ T8581] ? __x64_sys_mmap+0x125/0x190 [ 1870.777306][ T8581] ? do_syscall_64+0x106/0xf80 [ 1870.777356][ T8581] ? __pfx_aa_file_perm+0x10/0x10 [ 1870.777401][ T8581] ima_file_mmap+0x1c4/0x1f0 [ 1870.777427][ T8581] ? __pfx_ima_file_mmap+0x10/0x10 [ 1870.777460][ T8581] security_mmap_file+0x278/0x9b0 [ 1870.777494][ T8581] vm_mmap_pgoff+0xec/0x470 [ 1870.777527][ T8581] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1870.777561][ T8581] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1870.777598][ T8581] ? hugetlbfs_get_inode+0x36e/0x750 [ 1870.777639][ T8581] ksys_mmap_pgoff+0x273/0x650 [ 1870.777668][ T8581] ? __x64_sys_futex+0x358/0x4d0 [ 1870.777703][ T8581] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1870.777732][ T8581] ? xfd_validate_state+0x129/0x190 [ 1870.777774][ T8581] __x64_sys_mmap+0x125/0x190 [ 1870.777815][ T8581] do_syscall_64+0x106/0xf80 [ 1870.777838][ T8581] ? clear_bhb_loop+0x40/0x90 [ 1870.777892][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.777918][ T8581] RIP: 0033:0x7f2763d9c819 [ 1870.777938][ T8581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1870.777962][ T8581] RSP: 002b:00007f2764b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1870.777985][ T8581] RAX: ffffffffffffffda RBX: 00007f2764015fa0 RCX: 00007f2763d9c819 [ 1870.778002][ T8581] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1870.778018][ T8581] RBP: 00007f2763e32c91 R08: 0000000000000401 R09: 0000300000000000 [ 1870.778034][ T8581] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1870.778049][ T8581] R13: 00007f2764016038 R14: 00007f2764015fa0 R15: 00007ffc51843c28 [ 1870.778080][ T8581] [ 1871.560250][ T8605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6208'. [ 1872.184567][ T8634] FAULT_INJECTION: forcing a failure. [ 1872.184567][ T8634] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.238711][ T8634] CPU: 0 UID: 0 PID: 8634 Comm: syz.5.6211 Tainted: G L syzkaller #0 PREEMPT(full) [ 1872.238752][ T8634] Tainted: [L]=SOFTLOCKUP [ 1872.238761][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1872.238776][ T8634] Call Trace: [ 1872.238784][ T8634] [ 1872.238794][ T8634] dump_stack_lvl+0x100/0x190 [ 1872.238850][ T8634] should_fail_ex.cold+0x5/0xa [ 1872.238898][ T8634] ? constrain_params_by_rules+0x175/0xcc0 [ 1872.238935][ T8634] should_failslab+0xc2/0x120 [ 1872.238963][ T8634] __kmalloc_noprof+0xe0/0x850 [ 1872.239001][ T8634] ? unwind_get_return_address+0x59/0xa0 [ 1872.239035][ T8634] constrain_params_by_rules+0x175/0xcc0 [ 1872.239079][ T8634] ? stack_trace_save+0x8e/0xc0 [ 1872.239108][ T8634] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1872.239153][ T8634] ? __kasan_kmalloc+0xaa/0xb0 [ 1872.239174][ T8634] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 1872.239208][ T8634] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1872.239240][ T8634] ? snd_pcm_oss_set_trigger.isra.0+0x32/0x6c0 [ 1872.239284][ T8634] ? snd_interval_refine+0x2d0/0x580 [ 1872.239313][ T8634] snd_pcm_hw_refine+0x7e7/0xad0 [ 1872.239355][ T8634] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1872.239412][ T8634] ? snd_interval_refine+0x2d0/0x580 [ 1872.239442][ T8634] snd_pcm_oss_change_params_locked+0xdb3/0x39f0 [ 1872.239490][ T8634] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1872.239526][ T8634] ? __pfx___mutex_lock+0x10/0x10 [ 1872.239574][ T8634] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1872.239611][ T8634] snd_pcm_oss_set_trigger.isra.0+0x32/0x6c0 [ 1872.239651][ T8634] snd_pcm_oss_ioctl+0x1fb9/0x3720 [ 1872.239685][ T8634] ? find_held_lock+0x2b/0x80 [ 1872.239710][ T8634] ? __fget_files+0x215/0x3d0 [ 1872.239733][ T8634] ? hook_file_ioctl_common+0x146/0x410 [ 1872.239766][ T8634] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1872.239803][ T8634] ? __fget_files+0x21f/0x3d0 [ 1872.239832][ T8634] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1872.239868][ T8634] __x64_sys_ioctl+0x18e/0x210 [ 1872.239908][ T8634] do_syscall_64+0x106/0xf80 [ 1872.239931][ T8634] ? clear_bhb_loop+0x40/0x90 [ 1872.239961][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.239986][ T8634] RIP: 0033:0x7f1430f9c819 [ 1872.240010][ T8634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1872.240035][ T8634] RSP: 002b:00007f1431e5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1872.240060][ T8634] RAX: ffffffffffffffda RBX: 00007f1431215fa0 RCX: 00007f1430f9c819 [ 1872.240076][ T8634] RDX: 0000000000000000 RSI: 0000000040045010 RDI: 000000000000000a [ 1872.240091][ T8634] RBP: 00007f1431032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1872.240107][ T8634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1872.240122][ T8634] R13: 00007f1431216038 R14: 00007f1431215fa0 R15: 00007ffef9e082f8 [ 1872.240153][ T8634] [ 1873.195354][ T8648] FAULT_INJECTION: forcing a failure. [ 1873.195354][ T8648] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.259854][ T8648] CPU: 0 UID: 0 PID: 8648 Comm: syz.6.6212 Tainted: G L syzkaller #0 PREEMPT(full) [ 1873.259892][ T8648] Tainted: [L]=SOFTLOCKUP [ 1873.259901][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1873.259915][ T8648] Call Trace: [ 1873.259923][ T8648] [ 1873.259933][ T8648] dump_stack_lvl+0x100/0x190 [ 1873.259974][ T8648] should_fail_ex.cold+0x5/0xa [ 1873.260006][ T8648] ? ops_init+0x77/0x5f0 [ 1873.260027][ T8648] should_failslab+0xc2/0x120 [ 1873.260055][ T8648] __kmalloc_noprof+0xe0/0x850 [ 1873.260092][ T8648] ? brnf_init_net+0x2bc/0x450 [ 1873.260133][ T8648] ops_init+0x77/0x5f0 [ 1873.260159][ T8648] setup_net+0x118/0x3a0 [ 1873.260183][ T8648] ? __pfx_setup_net+0x10/0x10 [ 1873.260205][ T8648] ? lockdep_init_map_type+0x5c/0x250 [ 1873.260239][ T8648] ? mutex_init_lockep+0x110/0x150 [ 1873.260278][ T8648] copy_net_ns+0x46f/0x7c0 [ 1873.260326][ T8648] create_new_namespaces+0x3ea/0xac0 [ 1873.260366][ T8648] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1873.260397][ T8648] ksys_unshare+0x473/0xad0 [ 1873.260432][ T8648] ? __pfx_ksys_unshare+0x10/0x10 [ 1873.260476][ T8648] __x64_sys_unshare+0x31/0x40 [ 1873.260508][ T8648] do_syscall_64+0x106/0xf80 [ 1873.260532][ T8648] ? clear_bhb_loop+0x40/0x90 [ 1873.260562][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.260587][ T8648] RIP: 0033:0x7f2763d9c819 [ 1873.260608][ T8648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1873.260632][ T8648] RSP: 002b:00007f2764b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1873.260656][ T8648] RAX: ffffffffffffffda RBX: 00007f2764015fa0 RCX: 00007f2763d9c819 [ 1873.260673][ T8648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1873.260688][ T8648] RBP: 00007f2763e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1873.260703][ T8648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1873.260718][ T8648] R13: 00007f2764016038 R14: 00007f2764015fa0 R15: 00007ffc51843c28 [ 1873.260750][ T8648] [ 1874.056565][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6211'. [ 1874.575710][ T8662] synth uevent: /devices/platform/vimc.0/video4linux/video5: unknown uevent action string [ 1874.637292][ T8662] video4linux video5: uevent: failed to send synthetic uevent: -22 [ 1877.714748][ T8790] FAULT_INJECTION: forcing a failure. [ 1877.714748][ T8790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1877.760347][ T8790] CPU: 0 UID: 0 PID: 8790 Comm: syz.3.6228 Tainted: G L syzkaller #0 PREEMPT(full) [ 1877.760388][ T8790] Tainted: [L]=SOFTLOCKUP [ 1877.760397][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1877.760412][ T8790] Call Trace: [ 1877.760420][ T8790] [ 1877.760431][ T8790] dump_stack_lvl+0x100/0x190 [ 1877.760474][ T8790] should_fail_ex.cold+0x5/0xa [ 1877.760504][ T8790] _copy_from_user+0x2e/0xd0 [ 1877.760537][ T8790] snd_pcm_oss_write2+0x1c2/0x400 [ 1877.760573][ T8790] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1877.760616][ T8790] snd_pcm_oss_write+0x729/0xa30 [ 1877.760652][ T8790] ? security_file_permission+0x76/0x210 [ 1877.760692][ T8790] vfs_write+0x2aa/0x1070 [ 1877.760717][ T8790] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1877.760755][ T8790] ? __pfx_vfs_write+0x10/0x10 [ 1877.760777][ T8790] ? find_held_lock+0x2b/0x80 [ 1877.760801][ T8790] ? __fget_files+0x215/0x3d0 [ 1877.760824][ T8790] ? __fget_files+0x215/0x3d0 [ 1877.760854][ T8790] ? __fget_files+0x21f/0x3d0 [ 1877.760911][ T8790] ksys_write+0x12a/0x250 [ 1877.760935][ T8790] ? __pfx_ksys_write+0x10/0x10 [ 1877.760968][ T8790] do_syscall_64+0x106/0xf80 [ 1877.760993][ T8790] ? clear_bhb_loop+0x40/0x90 [ 1877.761023][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.761049][ T8790] RIP: 0033:0x7f5fb479c819 [ 1877.761069][ T8790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1877.761094][ T8790] RSP: 002b:00007f5fb56fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1877.761117][ T8790] RAX: ffffffffffffffda RBX: 00007f5fb4a16090 RCX: 00007f5fb479c819 [ 1877.761134][ T8790] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1877.761148][ T8790] RBP: 00007f5fb4832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1877.761164][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1877.761178][ T8790] R13: 00007f5fb4a16128 R14: 00007f5fb4a16090 R15: 00007ffeeea85898 [ 1877.761210][ T8790] [ 1877.766182][ T8792] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1879.054587][ T8807] FAULT_INJECTION: forcing a failure. [ 1879.054587][ T8807] name failslab, interval 1, probability 0, space 0, times 0 [ 1879.157039][ T8807] CPU: 0 UID: 0 PID: 8807 Comm: syz.5.6233 Tainted: G L syzkaller #0 PREEMPT(full) [ 1879.157079][ T8807] Tainted: [L]=SOFTLOCKUP [ 1879.157088][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1879.157103][ T8807] Call Trace: [ 1879.157112][ T8807] [ 1879.157121][ T8807] dump_stack_lvl+0x100/0x190 [ 1879.157165][ T8807] should_fail_ex.cold+0x5/0xa [ 1879.157194][ T8807] ? __register_sysctl_table+0xbe4/0x1650 [ 1879.157221][ T8807] should_failslab+0xc2/0x120 [ 1879.157249][ T8807] __kmalloc_noprof+0xe0/0x850 [ 1879.157295][ T8807] __register_sysctl_table+0xbe4/0x1650 [ 1879.157327][ T8807] ? __pfx___register_sysctl_table+0x10/0x10 [ 1879.157352][ T8807] ? is_module_address+0x69/0xf0 [ 1879.157385][ T8807] ? register_net_sysctl_sz+0x222/0x430 [ 1879.157412][ T8807] ? __asan_memcpy+0x20/0x60 [ 1879.157449][ T8807] ? kmemdup_noprof+0x49/0x60 [ 1879.157476][ T8807] ipv6_sysctl_net_init+0x180/0x2b0 [ 1879.157507][ T8807] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 1879.157536][ T8807] ops_init+0x1e2/0x5f0 [ 1879.157564][ T8807] setup_net+0x118/0x3a0 [ 1879.157589][ T8807] ? __pfx_setup_net+0x10/0x10 [ 1879.157612][ T8807] ? lockdep_init_map_type+0x5c/0x250 [ 1879.157647][ T8807] ? mutex_init_lockep+0x110/0x150 [ 1879.157687][ T8807] copy_net_ns+0x46f/0x7c0 [ 1879.157717][ T8807] create_new_namespaces+0x3ea/0xac0 [ 1879.157761][ T8807] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1879.157792][ T8807] ksys_unshare+0x473/0xad0 [ 1879.157828][ T8807] ? __pfx_ksys_unshare+0x10/0x10 [ 1879.157871][ T8807] __x64_sys_unshare+0x31/0x40 [ 1879.157904][ T8807] do_syscall_64+0x106/0xf80 [ 1879.157927][ T8807] ? clear_bhb_loop+0x40/0x90 [ 1879.157958][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1879.157983][ T8807] RIP: 0033:0x7f1430f9c819 [ 1879.158003][ T8807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1879.158028][ T8807] RSP: 002b:00007f1431e5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1879.158052][ T8807] RAX: ffffffffffffffda RBX: 00007f1431215fa0 RCX: 00007f1430f9c819 [ 1879.158068][ T8807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1879.158084][ T8807] RBP: 00007f1431032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1879.158100][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1879.158116][ T8807] R13: 00007f1431216038 R14: 00007f1431215fa0 R15: 00007ffef9e082f8 [ 1879.158147][ T8807] [ 1879.158158][ T8807] sysctl could not get directory: /net/ipv6/icmp -12 [ 1883.245336][ T8951] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(12) [ 1885.622332][ T9010] FAULT_INJECTION: forcing a failure. [ 1885.622332][ T9010] name failslab, interval 1, probability 0, space 0, times 0 [ 1885.687955][ T9010] CPU: 0 UID: 0 PID: 9010 Comm: syz.3.6252 Tainted: G L syzkaller #0 PREEMPT(full) [ 1885.687998][ T9010] Tainted: [L]=SOFTLOCKUP [ 1885.688008][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1885.688023][ T9010] Call Trace: [ 1885.688032][ T9010] [ 1885.688042][ T9010] dump_stack_lvl+0x100/0x190 [ 1885.688085][ T9010] should_fail_ex.cold+0x5/0xa [ 1885.688115][ T9010] ? __register_sysctl_table+0xbe4/0x1650 [ 1885.688148][ T9010] should_failslab+0xc2/0x120 [ 1885.688177][ T9010] __kmalloc_noprof+0xe0/0x850 [ 1885.688224][ T9010] __register_sysctl_table+0xbe4/0x1650 [ 1885.688256][ T9010] ? __pfx___register_sysctl_table+0x10/0x10 [ 1885.688282][ T9010] ? is_module_address+0x69/0xf0 [ 1885.688315][ T9010] ? register_net_sysctl_sz+0x222/0x430 [ 1885.688343][ T9010] ? __asan_memcpy+0x20/0x60 [ 1885.688381][ T9010] ? kmemdup_noprof+0x49/0x60 [ 1885.688408][ T9010] ipv6_sysctl_net_init+0x180/0x2b0 [ 1885.688440][ T9010] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 1885.688469][ T9010] ops_init+0x1e2/0x5f0 [ 1885.688497][ T9010] setup_net+0x118/0x3a0 [ 1885.688522][ T9010] ? __pfx_setup_net+0x10/0x10 [ 1885.688545][ T9010] ? lockdep_init_map_type+0x5c/0x250 [ 1885.688581][ T9010] ? mutex_init_lockep+0x110/0x150 [ 1885.688621][ T9010] copy_net_ns+0x46f/0x7c0 [ 1885.688652][ T9010] create_new_namespaces+0x3ea/0xac0 [ 1885.688686][ T9010] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1885.688716][ T9010] ksys_unshare+0x473/0xad0 [ 1885.688750][ T9010] ? __pfx_ksys_unshare+0x10/0x10 [ 1885.688793][ T9010] __x64_sys_unshare+0x31/0x40 [ 1885.688824][ T9010] do_syscall_64+0x106/0xf80 [ 1885.688848][ T9010] ? clear_bhb_loop+0x40/0x90 [ 1885.688878][ T9010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.688903][ T9010] RIP: 0033:0x7f5fb479c819 [ 1885.688924][ T9010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1885.688949][ T9010] RSP: 002b:00007f5fb571d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1885.688972][ T9010] RAX: ffffffffffffffda RBX: 00007f5fb4a15fa0 RCX: 00007f5fb479c819 [ 1885.688989][ T9010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1885.689004][ T9010] RBP: 00007f5fb4832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1885.689019][ T9010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1885.689034][ T9010] R13: 00007f5fb4a16038 R14: 00007f5fb4a15fa0 R15: 00007ffeeea85898 [ 1885.689065][ T9010] [ 1885.689164][ T9010] sysctl could not get directory: /net/ipv6/icmp -12 [ 1886.867298][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6257'. [ 1886.919714][ T9051] debugfs: '!PjE r҄y*"l-y–L̓B0' already exists in 'ieee80211' [ 1895.099085][ T9102] Process accounting resumed [ 1896.919960][ T9182] FAULT_INJECTION: forcing a failure. [ 1896.919960][ T9182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1897.520262][ T9182] CPU: 0 UID: 0 PID: 9182 Comm: syz.0.6268 Tainted: G L syzkaller #0 PREEMPT(full) [ 1897.520301][ T9182] Tainted: [L]=SOFTLOCKUP [ 1897.520311][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1897.520325][ T9182] Call Trace: [ 1897.520334][ T9182] [ 1897.520343][ T9182] dump_stack_lvl+0x100/0x190 [ 1897.520387][ T9182] should_fail_ex.cold+0x5/0xa [ 1897.520417][ T9182] _copy_from_iter+0x1f4/0x1690 [ 1897.520455][ T9182] ? policy_nodemask+0xed/0x4f0 [ 1897.520483][ T9182] ? __pfx__copy_from_iter+0x10/0x10 [ 1897.520518][ T9182] ? alloc_pages_mpol+0x25a/0x550 [ 1897.520546][ T9182] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1897.520580][ T9182] copy_page_from_iter+0xde/0x180 [ 1897.520617][ T9182] anon_pipe_write+0xae4/0x1d40 [ 1897.520654][ T9182] ? __pfx_anon_pipe_write+0x10/0x10 [ 1897.520683][ T9182] ? apparmor_file_permission+0x13f/0x1c0 [ 1897.520715][ T9182] ? bpf_lsm_file_permission+0x9/0x10 [ 1897.520740][ T9182] ? security_file_permission+0x76/0x210 [ 1897.520774][ T9182] ? rw_verify_area+0xce/0x6d0 [ 1897.520814][ T9182] vfs_write+0x6ac/0x1070 [ 1897.520839][ T9182] ? __pfx_anon_pipe_write+0x10/0x10 [ 1897.520868][ T9182] ? __pfx_vfs_write+0x10/0x10 [ 1897.520890][ T9182] ? find_held_lock+0x2b/0x80 [ 1897.520933][ T9182] ksys_write+0x1f8/0x250 [ 1897.520957][ T9182] ? __pfx_ksys_write+0x10/0x10 [ 1897.520990][ T9182] do_syscall_64+0x106/0xf80 [ 1897.521014][ T9182] ? clear_bhb_loop+0x40/0x90 [ 1897.521045][ T9182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.521070][ T9182] RIP: 0033:0x7fe3f5b9c819 [ 1897.521091][ T9182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1897.521117][ T9182] RSP: 002b:00007fe3f6a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1897.521149][ T9182] RAX: ffffffffffffffda RBX: 00007fe3f5e15fa0 RCX: 00007fe3f5b9c819 [ 1897.521165][ T9182] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1897.521181][ T9182] RBP: 00007fe3f5c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1897.521196][ T9182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1897.521211][ T9182] R13: 00007fe3f5e16038 R14: 00007fe3f5e15fa0 R15: 00007ffe879ce138 [ 1897.521243][ T9182] [ 1900.404678][ T30] audit: type=1800 audit(1217558852.992:59): pid=9363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6280" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1903.475825][ T9479] FAULT_INJECTION: forcing a failure. [ 1903.475825][ T9479] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.491875][ T9481] FAULT_INJECTION: forcing a failure. [ 1903.491875][ T9481] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.541101][ T9481] CPU: 0 UID: 0 PID: 9481 Comm: syz.3.6298 Tainted: G L syzkaller #0 PREEMPT(full) [ 1903.541139][ T9481] Tainted: [L]=SOFTLOCKUP [ 1903.541147][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1903.541162][ T9481] Call Trace: [ 1903.541170][ T9481] [ 1903.541179][ T9481] dump_stack_lvl+0x100/0x190 [ 1903.541219][ T9481] should_fail_ex.cold+0x5/0xa [ 1903.541249][ T9481] should_failslab+0xc2/0x120 [ 1903.541277][ T9481] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1903.541315][ T9481] ? __d_alloc+0x34/0xa80 [ 1903.541342][ T9481] ? lockdep_init_map_type+0x5c/0x250 [ 1903.541401][ T9481] __d_alloc+0x34/0xa80 [ 1903.541433][ T9481] d_alloc_pseudo+0x1c/0xc0 [ 1903.541470][ T9481] alloc_file_pseudo+0xcf/0x230 [ 1903.541505][ T9481] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1903.541538][ T9481] ? alloc_fd+0x476/0x790 [ 1903.541569][ T9481] sock_alloc_file+0x50/0x210 [ 1903.541595][ T9481] __sys_socket+0x1c0/0x260 [ 1903.541628][ T9481] ? __pfx___sys_socket+0x10/0x10 [ 1903.541668][ T9481] __x64_sys_socket+0x72/0xb0 [ 1903.541700][ T9481] ? lockdep_hardirqs_on+0x78/0x100 [ 1903.541724][ T9481] do_syscall_64+0x106/0xf80 [ 1903.541748][ T9481] ? clear_bhb_loop+0x40/0x90 [ 1903.541780][ T9481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.541805][ T9481] RIP: 0033:0x7f5fb479c819 [ 1903.541825][ T9481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1903.541849][ T9481] RSP: 002b:00007f5fb571d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1903.541878][ T9481] RAX: ffffffffffffffda RBX: 00007f5fb4a15fa0 RCX: 00007f5fb479c819 [ 1903.541902][ T9481] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 1903.541917][ T9481] RBP: 00007f5fb4832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1903.541933][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1903.541948][ T9481] R13: 00007f5fb4a16038 R14: 00007f5fb4a15fa0 R15: 00007ffeeea85898 [ 1903.541979][ T9481] [ 1903.544984][ T9479] CPU: 0 UID: 0 PID: 9479 Comm: syz.6.6297 Tainted: G L syzkaller #0 PREEMPT(full) [ 1903.545024][ T9479] Tainted: [L]=SOFTLOCKUP [ 1903.545033][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1903.545048][ T9479] Call Trace: [ 1903.545056][ T9479] [ 1903.545065][ T9479] dump_stack_lvl+0x100/0x190 [ 1903.545107][ T9479] should_fail_ex.cold+0x5/0xa [ 1903.545136][ T9479] ? lsm_blob_alloc+0x68/0x90 [ 1903.545173][ T9479] should_failslab+0xc2/0x120 [ 1903.545201][ T9479] __kmalloc_noprof+0xe0/0x850 [ 1903.545240][ T9479] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1903.545273][ T9479] lsm_blob_alloc+0x68/0x90 [ 1903.545311][ T9479] security_sk_alloc+0x2d/0x290 [ 1903.545340][ T9479] sk_prot_alloc+0x1d1/0x2a0 [ 1903.545371][ T9479] sk_alloc+0x36/0xe80 [ 1903.545420][ T9479] tipc_sk_create+0xf9/0x2420 [ 1903.545462][ T9479] ? find_held_lock+0x2b/0x80 [ 1903.545486][ T9479] ? __sock_create+0x2f3/0x860 [ 1903.545514][ T9479] ? __sock_create+0x2f3/0x860 [ 1903.545548][ T9479] __sock_create+0x339/0x860 [ 1903.545583][ T9479] __sys_socket+0x14d/0x260 [ 1903.545614][ T9479] ? __pfx___sys_socket+0x10/0x10 [ 1903.545654][ T9479] __x64_sys_socket+0x72/0xb0 [ 1903.545684][ T9479] ? lockdep_hardirqs_on+0x78/0x100 [ 1903.545708][ T9479] do_syscall_64+0x106/0xf80 [ 1903.545730][ T9479] ? clear_bhb_loop+0x40/0x90 [ 1903.545759][ T9479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.545783][ T9479] RIP: 0033:0x7f2763d9c819 [ 1903.545803][ T9479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1903.545827][ T9479] RSP: 002b:00007f2764b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1903.545850][ T9479] RAX: ffffffffffffffda RBX: 00007f2764015fa0 RCX: 00007f2763d9c819 [ 1903.545866][ T9479] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 1903.545880][ T9479] RBP: 00007f2763e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1903.545902][ T9479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1903.545916][ T9479] R13: 00007f2764016038 R14: 00007f2764015fa0 R15: 00007ffc51843c28 [ 1903.545947][ T9479] [ 1903.547801][ T9481] netlink: 338 bytes leftover after parsing attributes in process `syz.3.6298'. [ 1908.379473][ T9687] program syz.6.6316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1908.519347][ T9687] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1909.862287][ T9764] can: request_module (can-proto-0) failed. [ 1913.574108][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6345'. [ 1913.642906][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6345'. [ 1915.160326][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.170023][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.494353][ T9997] Malformed UNC in devname [ 1917.494353][ T9997] [ 1917.552249][ T9997] CIFS: VFS: Malformed UNC in devname [ 1918.300448][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6362'. [ 1922.198587][ T7920] syz.0.6157 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1922.714850][ T7920] CPU: 0 UID: 0 PID: 7920 Comm: syz.0.6157 Tainted: G L syzkaller #0 PREEMPT(full) [ 1922.714892][ T7920] Tainted: [L]=SOFTLOCKUP [ 1922.714901][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1922.714915][ T7920] Call Trace: [ 1922.714923][ T7920] [ 1922.714931][ T7920] dump_stack_lvl+0x100/0x190 [ 1922.714972][ T7920] dump_header+0xfb/0x606 [ 1922.714998][ T7920] oom_kill_process.cold+0xd/0x330 [ 1922.715025][ T7920] out_of_memory+0x340/0x14f0 [ 1922.715067][ T7920] ? __pfx_out_of_memory+0x10/0x10 [ 1922.715111][ T7920] mem_cgroup_out_of_memory+0xc6/0x130 [ 1922.715145][ T7920] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1922.715177][ T7920] ? find_held_lock+0x2b/0x80 [ 1922.715205][ T7920] ? do_raw_spin_unlock+0x145/0x1e0 [ 1922.715241][ T7920] ? _raw_spin_unlock+0x28/0x50 [ 1922.715278][ T7920] try_charge_memcg+0x652/0xc90 [ 1922.715309][ T7920] ? __pfx_try_charge_memcg+0x10/0x10 [ 1922.715335][ T7920] ? find_held_lock+0x2b/0x80 [ 1922.715356][ T7920] ? rcu_read_unlock+0x17/0x60 [ 1922.715382][ T7920] ? rcu_read_unlock+0x17/0x60 [ 1922.715418][ T7920] charge_memcg+0xa6/0x280 [ 1922.715443][ T7920] __mem_cgroup_charge+0x2b/0x1e0 [ 1922.715474][ T7920] filemap_add_folio+0xe7/0x690 [ 1922.715513][ T7920] ? __pfx_filemap_add_folio+0x10/0x10 [ 1922.715558][ T7920] __filemap_get_folio_mpol+0x5d5/0xe70 [ 1922.715589][ T7920] filemap_fault+0x8a2/0x2eb0 [ 1922.715618][ T7920] ? __pfx_filemap_fault+0x10/0x10 [ 1922.715644][ T7920] ? __pfx_filemap_map_pages+0x10/0x10 [ 1922.715688][ T7920] __do_fault+0x10d/0x550 [ 1922.715714][ T7920] do_fault+0xabb/0x18e0 [ 1922.715746][ T7920] __handle_mm_fault+0x1815/0x2b60 [ 1922.715787][ T7920] ? __pfx___handle_mm_fault+0x10/0x10 [ 1922.715821][ T7920] ? pte_offset_map_lock+0x174/0x320 [ 1922.715847][ T7920] ? find_held_lock+0x2b/0x80 [ 1922.715896][ T7920] ? follow_page_pte+0x5b3/0x1400 [ 1922.715929][ T7920] handle_mm_fault+0x36d/0xa20 [ 1922.715968][ T7920] __get_user_pages+0xf9c/0x34d0 [ 1922.716007][ T7920] ? __pfx___get_user_pages+0x10/0x10 [ 1922.716043][ T7920] get_dump_page+0x27e/0x3d0 [ 1922.716071][ T7920] ? __pfx_get_dump_page+0x10/0x10 [ 1922.716100][ T7920] ? dump_user_range+0x73b/0xb50 [ 1922.716127][ T7920] ? copy_mc_enhanced_fast_string+0x6/0xf [ 1922.716163][ T7920] dump_user_range+0x18d/0xb50 [ 1922.716196][ T7920] ? __pfx_dump_user_range+0x10/0x10 [ 1922.716233][ T7920] ? __pfx_writenote+0x10/0x10 [ 1922.716269][ T7920] elf_core_dump+0x2d5f/0x3d10 [ 1922.716315][ T7920] ? __pfx_elf_core_dump+0x10/0x10 [ 1922.716353][ T7920] ? find_held_lock+0x2b/0x80 [ 1922.716377][ T7920] ? 0xffffffffff600000 [ 1922.716397][ T7920] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1922.716433][ T7920] ? lockdep_hardirqs_on+0x78/0x100 [ 1922.716496][ T7920] ? vfs_coredump+0x27bc/0x5570 [ 1922.716521][ T7920] vfs_coredump+0x27bc/0x5570 [ 1922.716558][ T7920] ? __pfx_vfs_coredump+0x10/0x10 [ 1922.716586][ T7920] ? __lock_acquire+0x4a5/0x2630 [ 1922.716628][ T7920] ? lock_acquire+0x1cf/0x380 [ 1922.716669][ T7920] ? is_bpf_text_address+0x8a/0x1a0 [ 1922.716707][ T7920] ? bpf_ksym_find+0x124/0x1c0 [ 1922.716742][ T7920] ? __kernel_text_address+0xd/0x30 [ 1922.716777][ T7920] ? unwind_get_return_address+0x59/0xa0 [ 1922.716803][ T7920] ? arch_stack_walk+0xa6/0xf0 [ 1922.716836][ T7920] ? __sigqueue_free+0xbe/0x2a0 [ 1922.716872][ T7920] ? stack_trace_save+0x8e/0xc0 [ 1922.716895][ T7920] ? __pfx_stack_trace_save+0x10/0x10 [ 1922.716920][ T7920] ? stack_depot_save_flags+0x27/0x9d0 [ 1922.716952][ T7920] ? __lock_acquire+0x4a5/0x2630 [ 1922.717028][ T7920] ? proc_coredump_connector+0x2d3/0x4f0 [ 1922.717065][ T7920] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1922.717107][ T7920] ? rcu_is_watching+0x12/0xc0 [ 1922.717147][ T7920] get_signal+0x1f2a/0x21e0 [ 1922.717184][ T7920] ? __pfx_get_signal+0x10/0x10 [ 1922.717216][ T7920] arch_do_signal_or_restart+0x91/0x770 [ 1922.717247][ T7920] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1922.717285][ T7920] ? do_user_addr_fault+0x8d6/0x12f0 [ 1922.717314][ T7920] irqentry_exit+0x1f8/0x670 [ 1922.717340][ T7920] asm_exc_page_fault+0x26/0x30 [ 1922.717362][ T7920] RIP: 0033:0xefff [ 1922.717383][ T7920] Code: Unable to access opcode bytes at 0xefd5. [ 1922.717393][ T7920] RSP: 002b:000000000000000f EFLAGS: 00010a07 [ 1922.717411][ T7920] RAX: 00000000000000a4 RBX: 00007fe3f5e16180 RCX: 00007fe3f5b9c819 [ 1922.717427][ T7920] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000020003b46 [ 1922.717441][ T7920] RBP: 00007fe3f5c32c91 R08: 0000000000000002 R09: 0000000000000000 [ 1922.717455][ T7920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1922.717469][ T7920] R13: 00007fe3f5e16218 R14: 00007fe3f5e16180 R15: 00007ffe879ce138 [ 1922.717500][ T7920] [ 1923.642953][ T7920] memory: usage 307200kB, limit 307200kB, failcnt 25593 [ 1923.651936][ T7920] memory+swap: usage 432184kB, limit 9007199254740988kB, failcnt 0 [ 1923.659866][ T7920] kmem: usage 5344kB, limit 9007199254740988kB, failcnt 0 [ 1923.671802][ T7920] Memory cgroup stats for /syz0: [ 1923.672076][ T7920] cache 308994048 [ 1923.681198][ T7920] rss 94208 [ 1923.684384][ T7920] rss_huge 0 [ 1923.687593][ T7920] shmem 308965376 [ 1923.691750][ T7920] mapped_file 0 [ 1923.697633][ T7920] dirty 0 [ 1923.701018][ T7920] writeback 0 [ 1923.704315][ T7920] workingset_refault_anon 17478 [ 1923.709284][ T7920] workingset_refault_file 15157 [ 1923.719495][ T7920] swap 127983616 [ 1923.723389][ T7920] swapcached 247054336 [ 1923.727492][ T7920] pgpgin 1463225 [ 1923.737119][ T7920] pgpgout 1498731 [ 1923.741383][ T7920] pgfault 581834 [ 1923.744941][ T7920] pgmajfault 1697 [ 1923.748677][ T7920] inactive_anon 141058048 [ 1923.754296][ T7920] active_anon 168013824 [ 1923.758469][ T7920] inactive_file 28672 [ 1923.766691][ T7920] active_file 0 [ 1923.770614][ T7920] unevictable 0 [ 1923.774087][ T7920] hierarchical_memory_limit 314572800 [ 1923.779542][ T7920] hierarchical_memsw_limit 9223372036854771712 [ 1923.786225][ T7920] total_cache 308994048 [ 1923.790770][ T7920] total_rss 94208 [ 1923.794418][ T7920] total_rss_huge 0 [ 1923.798140][ T7920] total_shmem 308965376 [ 1923.802849][ T7920] total_mapped_file 0 [ 1923.806843][ T7920] total_dirty 0 [ 1923.810692][ T7920] total_writeback 0 [ 1923.814581][ T7920] total_workingset_refault_anon 17478 [ 1923.820379][ T7920] total_workingset_refault_file 15157 [ 1923.825833][ T7920] total_swap 127983616 [ 1923.829932][ T7920] total_swapcached 247054336 [ 1923.835047][ T7920] total_pgpgin 1463225 [ 1923.839192][ T7920] total_pgpgout 1498731 [ 1923.849456][ T7920] total_pgfault 581834 [ 1923.854231][ T7920] total_pgmajfault 1697 [ 1923.859239][ T7920] total_inactive_anon 141058048 [ 1923.864558][ T7920] total_active_anon 168013824 [ 1923.874021][ T7920] total_inactive_file 28672 [ 1923.878631][ T7920] total_active_file 0 [ 1923.883032][ T7920] total_unevictable 0 [ 1923.887021][ T7920] anon_cost 0 [ 1923.890748][ T7920] file_cost 0 [ 1923.894043][ T7920] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6157,pid=7931,uid=0 [ 1923.911687][ T7920] Memory cgroup out of memory: Killed process 7931 (syz.0.6157) total-vm:98972kB, anon-rss:3268kB, file-rss:31980kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 1925.889500][ T7925] syz.0.6157 (7925) used greatest stack depth: 17384 bytes left [ 1926.012507][T10172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1926.034937][T10172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1926.042713][ T32] oom_reaper: reaped process 7931 (syz.0.6157), now anon-rss:0kB, file-rss:30912kB, shmem-rss:0kB [ 1926.075389][T10185] Process accounting paused [ 1926.083683][T10172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1926.099200][T10172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1926.121538][T10172] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1926.127699][T10172] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1926.241335][T10172] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1926.790619][T10207] netlink: 'syz.0.6376': attribute type 10 has an invalid length. [ 1927.006308][T10207] netlink: 330 bytes leftover after parsing attributes in process `syz.0.6376'. [ 1927.624605][T10245] futex_wake_op: syz.6.6382 tries to shift op by -2048; fix this program [ 1928.030106][T26557] Bluetooth: hci2: command 0x0c1a tx timeout [ 1928.110191][T26557] Bluetooth: hci0: command 0x0c1a tx timeout [ 1928.116382][T26552] Bluetooth: hci3: command 0x0c1a tx timeout [ 1928.122839][T26552] Bluetooth: hci4: command 0x0c1a tx timeout [ 1928.190140][T10281] Bluetooth: hci5: command 0x0c1a tx timeout [ 1929.012851][T10325] FAULT_INJECTION: forcing a failure. [ 1929.012851][T10325] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.067204][T10325] CPU: 0 UID: 0 PID: 10325 Comm: syz.6.6387 Tainted: G L syzkaller #0 PREEMPT(full) [ 1929.067243][T10325] Tainted: [L]=SOFTLOCKUP [ 1929.067252][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1929.067266][T10325] Call Trace: [ 1929.067283][T10325] [ 1929.067292][T10325] dump_stack_lvl+0x100/0x190 [ 1929.067333][T10325] should_fail_ex.cold+0x5/0xa [ 1929.067362][T10325] should_failslab+0xc2/0x120 [ 1929.067389][T10325] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1929.067427][T10325] ? ptlock_alloc+0x1f/0x70 [ 1929.067465][T10325] ptlock_alloc+0x1f/0x70 [ 1929.067498][T10325] pte_alloc_one+0x82/0x3d0 [ 1929.067527][T10325] do_huge_pmd_anonymous_page+0x2bc/0x1ab0 [ 1929.067566][T10325] ? __pmd_alloc+0x3fb/0x950 [ 1929.067597][T10325] __handle_mm_fault+0x1ea4/0x2b60 [ 1929.067635][T10325] ? __lock_acquire+0x4a5/0x2630 [ 1929.067668][T10325] ? __pfx___handle_mm_fault+0x10/0x10 [ 1929.067700][T10325] ? __pfx_mt_find+0x10/0x10 [ 1929.067729][T10325] ? __lock_acquire+0x4a5/0x2630 [ 1929.067768][T10325] ? pmdp_set_access_flags+0x12d/0x1a0 [ 1929.067804][T10325] handle_mm_fault+0x36d/0xa20 [ 1929.067844][T10325] __get_user_pages+0xf9c/0x34d0 [ 1929.067883][T10325] ? __pfx___get_user_pages+0x10/0x10 [ 1929.067919][T10325] populate_vma_page_range+0x267/0x3f0 [ 1929.067952][T10325] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1929.067982][T10325] ? __pfx_find_vma_intersection+0x10/0x10 [ 1929.068010][T10325] ? do_mmap+0x93f/0x12f0 [ 1929.068040][T10325] __mm_populate+0x107/0x3a0 [ 1929.068072][T10325] ? __pfx___mm_populate+0x10/0x10 [ 1929.068104][T10325] ? up_write+0x290/0x4f0 [ 1929.068142][T10325] vm_mmap_pgoff+0x37f/0x470 [ 1929.068173][T10325] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1929.068204][T10325] ? do_futex+0x192/0x350 [ 1929.068236][T10325] ? __pfx_do_futex+0x10/0x10 [ 1929.068266][T10325] ? __pfx_do_sys_openat2+0x10/0x10 [ 1929.068310][T10325] ksys_mmap_pgoff+0xe1/0x650 [ 1929.068357][T10325] ? __x64_sys_futex+0x34f/0x4d0 [ 1929.068389][T10325] ? __x64_sys_futex+0x358/0x4d0 [ 1929.068424][T10325] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1929.068453][T10325] ? xfd_validate_state+0x129/0x190 [ 1929.068495][T10325] __x64_sys_mmap+0x125/0x190 [ 1929.068537][T10325] do_syscall_64+0x106/0xf80 [ 1929.068561][T10325] ? clear_bhb_loop+0x40/0x90 [ 1929.068591][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.068616][T10325] RIP: 0033:0x7f2763d9c819 [ 1929.068637][T10325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1929.068660][T10325] RSP: 002b:00007f2764b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1929.068714][T10325] RAX: ffffffffffffffda RBX: 00007f2764015fa0 RCX: 00007f2763d9c819 [ 1929.068730][T10325] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1929.068745][T10325] RBP: 00007f2763e32c91 R08: ffffffffffffffff R09: 0000000000000000 [ 1929.068760][T10325] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1929.068775][T10325] R13: 00007f2764016038 R14: 00007f2764015fa0 R15: 00007ffc51843c28 [ 1929.068806][T10325] [ 1930.033231][ T30] audit: type=1807 audit(1217558882.622:60): UNKNOWN=0x00 res=0 [ 1930.057893][ T30] audit: type=1802 audit(1217558882.642:61): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.6393" res=0 errno=0 [ 1930.242968][T10376] ima: policy update failed [ 1930.268637][ T30] audit: type=1802 audit(1217558882.852:62): pid=10376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.6393" res=0 errno=0 [ 1930.287372][T10281] Bluetooth: hci5: command 0x0c1a tx timeout [ 1931.249936][T10403] zswap: compressor not available [ 1931.593313][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6400'. [ 1931.842302][T10424] HfR: entered promiscuous mode [ 1932.355692][T10281] Bluetooth: hci5: command 0x0c1a tx timeout [ 1932.603059][ T30] audit: type=1807 audit(1217558885.192:63): UNKNOWN=0x00 res=0 [ 1932.642123][ T30] audit: type=1802 audit(1217558885.212:64): pid=10447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.6405" res=0 errno=0 [ 1932.984156][T10445] ima: policy update failed [ 1933.011744][ T30] audit: type=1802 audit(1217558885.602:65): pid=10445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.6405" res=0 errno=0 [ 1933.489940][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6412'. [ 1933.558673][T10481] HfR: entered promiscuous mode [ 1934.166363][T10509] FAULT_INJECTION: forcing a failure. [ 1934.166363][T10509] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1934.238266][T10509] CPU: 0 UID: 8 PID: 10509 Comm: syz.6.6416 Tainted: G L syzkaller #0 PREEMPT(full) [ 1934.238304][T10509] Tainted: [L]=SOFTLOCKUP [ 1934.238313][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1934.238328][T10509] Call Trace: [ 1934.238336][T10509] [ 1934.238345][T10509] dump_stack_lvl+0x100/0x190 [ 1934.238387][T10509] should_fail_ex.cold+0x5/0xa [ 1934.238416][T10509] get_futex_key+0x1d2/0x1620 [ 1934.238449][T10509] ? __pfx_get_futex_key+0x10/0x10 [ 1934.238478][T10509] ? kasan_save_stack+0x3f/0x50 [ 1934.238500][T10509] ? kasan_save_stack+0x30/0x50 [ 1934.238521][T10509] ? kasan_record_aux_stack+0xa7/0xc0 [ 1934.238553][T10509] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1934.238586][T10509] ? __put_cred+0x10c/0x180 [ 1934.238621][T10509] ? keyctl_session_to_parent+0x95a/0xae0 [ 1934.238648][T10509] ? __do_sys_keyctl+0x2b1/0x5a0 [ 1934.238672][T10509] ? do_syscall_64+0x106/0xf80 [ 1934.238696][T10509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.238725][T10509] futex_wake+0xea/0x530 [ 1934.238764][T10509] ? __pfx_futex_wake+0x10/0x10 [ 1934.238823][T10509] do_futex+0x32b/0x350 [ 1934.238857][T10509] ? __pfx_do_futex+0x10/0x10 [ 1934.238897][T10509] __x64_sys_futex+0x34f/0x4d0 [ 1934.238934][T10509] ? __pfx___x64_sys_futex+0x10/0x10 [ 1934.238965][T10509] ? __put_cred+0x111/0x180 [ 1934.239001][T10509] ? keyctl_session_to_parent+0x39a/0xae0 [ 1934.239037][T10509] do_syscall_64+0x106/0xf80 [ 1934.239059][T10509] ? clear_bhb_loop+0x40/0x90 [ 1934.239088][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.239113][T10509] RIP: 0033:0x7f2763d9c819 [ 1934.239132][T10509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1934.239155][T10509] RSP: 002b:00007f2764b9f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1934.239179][T10509] RAX: ffffffffffffffda RBX: 00007f2764015fa8 RCX: 00007f2763d9c819 [ 1934.239195][T10509] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2764015fac [ 1934.239210][T10509] RBP: 00007f2764015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1934.239224][T10509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1934.239246][T10509] R13: 00007f2764016038 R14: 00007ffc51843b40 R15: 00007ffc51843c28 [ 1934.239295][T10509] [ 1935.959432][ T30] audit: type=1807 audit(1217558888.542:66): UNKNOWN=0x00 res=0 [ 1936.000336][ T30] audit: type=1802 audit(1217558888.542:67): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.6419" res=0 errno=0 [ 1936.350910][T10528] ima: policy update failed [ 1936.360815][ T30] audit: type=1802 audit(1217558888.942:68): pid=10528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.6419" res=0 errno=0 [ 1936.841645][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6426'. [ 1936.914786][T10575] HfR: entered promiscuous mode [ 1937.574638][T10594] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 1937.844728][T10594] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1938.360124][ T30] audit: type=1807 audit(1217558890.942:69): UNKNOWN=0x00 res=0 [ 1938.400162][ T30] audit: type=1802 audit(1217558890.942:70): pid=10613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.6435" res=0 errno=0 [ 1938.447134][T10609] ima: policy update failed [ 1938.524437][ T30] audit: type=1802 audit(1217558891.052:71): pid=10609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.6435" res=0 errno=0 [ 1938.840802][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6441'. [ 1939.263459][T10639] HfR: entered promiscuous mode [ 1940.668570][T10726] sd 0:0:1:0: PR command failed: 1026 [ 1940.697342][T10720] FAULT_INJECTION: forcing a failure. [ 1940.697342][T10720] name failslab, interval 1, probability 0, space 0, times 0 [ 1940.775367][T10726] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1940.818389][T10720] CPU: 0 UID: 0 PID: 10720 Comm: syz.5.6451 Tainted: G L syzkaller #0 PREEMPT(full) [ 1940.818430][T10720] Tainted: [L]=SOFTLOCKUP [ 1940.818440][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1940.818454][T10720] Call Trace: [ 1940.818463][T10720] [ 1940.818473][T10720] dump_stack_lvl+0x100/0x190 [ 1940.818516][T10720] should_fail_ex.cold+0x5/0xa [ 1940.818546][T10720] should_failslab+0xc2/0x120 [ 1940.818574][T10720] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1940.818609][T10720] ? snd_seq_port_connect+0x61/0x560 [ 1940.818636][T10720] ? snd_seq_port_use_ptr+0x14d/0x1b0 [ 1940.818662][T10720] ? snd_seq_port_use_ptr+0x14d/0x1b0 [ 1940.818693][T10720] snd_seq_port_connect+0x61/0x560 [ 1940.818757][T10720] ? _raw_read_unlock+0x28/0x50 [ 1940.818796][T10720] ? check_subscription_permission.isra.0+0x146/0x240 [ 1940.818831][T10720] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 1940.818867][T10720] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 1940.818901][T10720] ? do_raw_spin_lock+0x128/0x260 [ 1940.818949][T10720] call_seq_client_ctl+0xa3/0x130 [ 1940.818979][T10720] snd_seq_kernel_client_ctl+0x77/0xd0 [ 1940.819009][T10720] snd_seq_oss_midi_open+0x48b/0x6b0 [ 1940.819047][T10720] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 1940.819084][T10720] ? snd_seq_oss_midi_reset+0x11a/0x4c0 [ 1940.819130][T10720] ? __mutex_lock+0x26a/0x1b90 [ 1940.819162][T10720] snd_seq_oss_synth_reset+0x439/0x8e0 [ 1940.819205][T10720] ? __pfx___mutex_lock+0x10/0x10 [ 1940.819232][T10720] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 1940.819271][T10720] ? __pfx___fsnotify_parent+0x10/0x10 [ 1940.819302][T10720] ? __pfx_odev_release+0x10/0x10 [ 1940.819330][T10720] snd_seq_oss_reset+0x73/0x290 [ 1940.819361][T10720] ? __pfx_odev_release+0x10/0x10 [ 1940.819395][T10720] snd_seq_oss_release+0x7c/0x180 [ 1940.819426][T10720] ? __pfx_odev_release+0x10/0x10 [ 1940.819452][T10720] odev_release+0x56/0xa0 [ 1940.819478][T10720] __fput+0x3ff/0xb40 [ 1940.819520][T10720] task_work_run+0x150/0x240 [ 1940.819559][T10720] ? __pfx_task_work_run+0x10/0x10 [ 1940.819605][T10720] exit_to_user_mode_loop+0x100/0x4a0 [ 1940.819643][T10720] do_syscall_64+0x668/0xf80 [ 1940.819666][T10720] ? clear_bhb_loop+0x40/0x90 [ 1940.819696][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.819722][T10720] RIP: 0033:0x7f1430f9c819 [ 1940.819743][T10720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1940.819768][T10720] RSP: 002b:00007f1431e5e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1940.819792][T10720] RAX: 0000000000000000 RBX: 00007f1431215fa0 RCX: 00007f1430f9c819 [ 1940.819808][T10720] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1940.819823][T10720] RBP: 00007f1431032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1940.819839][T10720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1940.819854][T10720] R13: 00007f1431216038 R14: 00007f1431215fa0 R15: 00007ffef9e082f8 [ 1940.819886][T10720] [ 1941.399444][T10713] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1941.433802][T10726] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1941.723733][T10706] sd 0:0:1:0: PR command failed: 1026 [ 1941.759158][T10706] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1941.822549][T10706] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1942.897791][T10711] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1944.463888][T10727] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1945.590734][T10830] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1945.651928][T10830] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1945.697866][T10830] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1945.755849][T10830] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1945.830171][T10830] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1945.890231][T10830] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1946.236288][T10728] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1948.232792][T10924] nvme_fabrics: unknown parameter or missing value 'g' in ctrl creation request [ 1948.287236][T10925] nvme_fabrics: unknown parameter or missing value 'g' in ctrl creation request [ 1949.230439][T10281] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1951.555088][T11045] FAULT_INJECTION: forcing a failure. [ 1951.555088][T11045] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.568951][T11045] CPU: 0 UID: 0 PID: 11045 Comm: syz.6.6493 Tainted: G L syzkaller #0 PREEMPT(full) [ 1951.568988][T11045] Tainted: [L]=SOFTLOCKUP [ 1951.568997][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1951.569012][T11045] Call Trace: [ 1951.569021][T11045] [ 1951.569031][T11045] dump_stack_lvl+0x100/0x190 [ 1951.569073][T11045] should_fail_ex.cold+0x5/0xa [ 1951.569102][T11045] should_failslab+0xc2/0x120 [ 1951.569129][T11045] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1951.569163][T11045] ? tipc_nametbl_insert_publ+0x6ee/0x1570 [ 1951.569196][T11045] tipc_nametbl_insert_publ+0x6ee/0x1570 [ 1951.569242][T11045] tipc_nametbl_publish+0x137/0x260 [ 1951.569274][T11045] tipc_sk_publish+0x1d8/0x430 [ 1951.569303][T11045] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1951.569333][T11045] ? __local_bh_enable_ip+0x9e/0x120 [ 1951.569364][T11045] tipc_sk_bind+0x16f/0x380 [ 1951.569394][T11045] tipc_bind+0x18d/0x280 [ 1951.569423][T11045] __sys_bind+0x1a9/0x260 [ 1951.569457][T11045] ? __pfx___sys_bind+0x10/0x10 [ 1951.569508][T11045] __x64_sys_bind+0x72/0xb0 [ 1951.569538][T11045] ? lockdep_hardirqs_on+0x78/0x100 [ 1951.569562][T11045] do_syscall_64+0x106/0xf80 [ 1951.569584][T11045] ? clear_bhb_loop+0x40/0x90 [ 1951.569613][T11045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.569637][T11045] RIP: 0033:0x7f2763d9c819 [ 1951.569659][T11045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1951.569682][T11045] RSP: 002b:00007f2764b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1951.569706][T11045] RAX: ffffffffffffffda RBX: 00007f2764015fa0 RCX: 00007f2763d9c819 [ 1951.569722][T11045] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000002 [ 1951.569737][T11045] RBP: 00007f2763e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1951.569752][T11045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1951.569766][T11045] R13: 00007f2764016038 R14: 00007f2764015fa0 R15: 00007ffc51843c28 [ 1951.569798][T11045] [ 1951.569809][T11045] tipc: Failed to bind to 64,0,2 [ 1952.264120][T11051] netlink: 350 bytes leftover after parsing attributes in process `syz.0.6495'. [ 1953.566066][T11085] input: jJǸ-9%vJ86 as /devices/virtual/input/input62 [ 1953.651377][T11092] FAULT_INJECTION: forcing a failure. [ 1953.651377][T11092] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1953.758790][T11092] CPU: 0 UID: 0 PID: 11092 Comm: syz.3.6506 Tainted: G L syzkaller #0 PREEMPT(full) [ 1953.758828][T11092] Tainted: [L]=SOFTLOCKUP [ 1953.758836][T11092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1953.758851][T11092] Call Trace: [ 1953.758859][T11092] [ 1953.758875][T11092] dump_stack_lvl+0x100/0x190 [ 1953.758916][T11092] should_fail_ex.cold+0x5/0xa [ 1953.758940][T11092] ? prepare_alloc_pages+0x16d/0x5f0 [ 1953.758972][T11092] should_fail_alloc_page+0xeb/0x140 [ 1953.759001][T11092] prepare_alloc_pages+0x1f0/0x5f0 [ 1953.759041][T11092] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1953.759082][T11092] ? __lock_acquire+0x4a5/0x2630 [ 1953.759120][T11092] ? __lock_acquire+0x4a5/0x2630 [ 1953.759155][T11092] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1953.759208][T11092] ? bpf_ksym_find+0x124/0x1c0 [ 1953.759238][T11092] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1953.759265][T11092] ? is_bpf_text_address+0x94/0x1a0 [ 1953.759303][T11092] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1953.759330][T11092] ? policy_nodemask+0xed/0x4f0 [ 1953.759359][T11092] alloc_pages_mpol+0x1fb/0x550 [ 1953.759386][T11092] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1953.759415][T11092] ? stack_trace_save+0x8e/0xc0 [ 1953.759442][T11092] alloc_pages_noprof+0x136/0x390 [ 1953.759470][T11092] pte_alloc_one+0x1c/0x3d0 [ 1953.759498][T11092] __pte_alloc+0x6d/0x3e0 [ 1953.759523][T11092] ? __pfx___pte_alloc+0x10/0x10 [ 1953.759556][T11092] copy_page_range+0x3ec9/0x6600 [ 1953.759620][T11092] ? __pfx_copy_page_range+0x10/0x10 [ 1953.759659][T11092] ? mas_store+0x666/0xac0 [ 1953.759690][T11092] ? __pfx_mas_store+0x10/0x10 [ 1953.759723][T11092] ? __pfx___vma_start_write+0x10/0x10 [ 1953.759764][T11092] dup_mmap+0xd25/0x2180 [ 1953.759805][T11092] ? __pfx_dup_mmap+0x10/0x10 [ 1953.759832][T11092] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1953.759876][T11092] ? __lock_acquire+0x4a5/0x2630 [ 1953.759907][T11092] ? find_held_lock+0x2b/0x80 [ 1953.759930][T11092] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1953.759986][T11092] copy_process+0x7523/0x7a40 [ 1953.760034][T11092] ? __pfx_copy_process+0x10/0x10 [ 1953.760078][T11092] kernel_clone+0xfc/0x9a0 [ 1953.760105][T11092] ? __pfx_futex_wait+0x10/0x10 [ 1953.760144][T11092] ? __pfx_kernel_clone+0x10/0x10 [ 1953.760190][T11092] __do_sys_clone+0xd9/0x120 [ 1953.760219][T11092] ? __pfx___do_sys_clone+0x10/0x10 [ 1953.760273][T11092] do_syscall_64+0x106/0xf80 [ 1953.760296][T11092] ? clear_bhb_loop+0x40/0x90 [ 1953.760325][T11092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.760350][T11092] RIP: 0033:0x7f5fb479c819 [ 1953.760368][T11092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1953.760392][T11092] RSP: 002b:00007f5fb56fbfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1953.760415][T11092] RAX: ffffffffffffffda RBX: 00007f5fb4a16090 RCX: 00007f5fb479c819 [ 1953.760431][T11092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1953.760446][T11092] RBP: 00007f5fb4832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1953.760460][T11092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1953.760474][T11092] R13: 00007f5fb4a16128 R14: 00007f5fb4a16090 R15: 00007ffeeea85898 [ 1953.760505][T11092] [ 1955.882881][T11093] netlink: zone id is out of range [ 1955.888284][T11093] netlink: zone id is out of range [ 1956.395807][T11165] FAULT_INJECTION: forcing a failure. [ 1956.395807][T11165] name failslab, interval 1, probability 0, space 0, times 0 [ 1956.423580][T11165] CPU: 0 UID: 0 PID: 11165 Comm: syz.3.6515 Tainted: G L syzkaller #0 PREEMPT(full) [ 1956.423617][T11165] Tainted: [L]=SOFTLOCKUP [ 1956.423625][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1956.423639][T11165] Call Trace: [ 1956.423647][T11165] [ 1956.423656][T11165] dump_stack_lvl+0x100/0x190 [ 1956.423717][T11165] should_fail_ex.cold+0x5/0xa [ 1956.423744][T11165] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1956.423792][T11165] should_failslab+0xc2/0x120 [ 1956.423821][T11165] __kmalloc_noprof+0xe0/0x850 [ 1956.423865][T11165] kernfs_fop_write_iter+0x26a/0x5f0 [ 1956.423897][T11165] vfs_write+0x6ac/0x1070 [ 1956.423922][T11165] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1956.423953][T11165] ? __pfx_vfs_write+0x10/0x10 [ 1956.423999][T11165] ksys_write+0x12a/0x250 [ 1956.424023][T11165] ? __pfx_ksys_write+0x10/0x10 [ 1956.424055][T11165] do_syscall_64+0x106/0xf80 [ 1956.424079][T11165] ? clear_bhb_loop+0x40/0x90 [ 1956.424108][T11165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.424133][T11165] RIP: 0033:0x7f5fb479c819 [ 1956.424153][T11165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1956.424177][T11165] RSP: 002b:00007f5fb571d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1956.424199][T11165] RAX: ffffffffffffffda RBX: 00007f5fb4a15fa0 RCX: 00007f5fb479c819 [ 1956.424216][T11165] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 1956.424231][T11165] RBP: 00007f5fb571d090 R08: 0000000000000000 R09: 0000000000000000 [ 1956.424245][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1956.424259][T11165] R13: 00007f5fb4a16038 R14: 00007f5fb4a15fa0 R15: 00007ffeeea85898 [ 1956.424290][T11165] [ 1957.331960][T11155] Process accounting resumed [ 1957.953872][T11186] FAULT_INJECTION: forcing a failure. [ 1957.953872][T11186] name failslab, interval 1, probability 0, space 0, times 0 [ 1957.953935][T11186] CPU: 0 UID: 0 PID: 11186 Comm: syz.3.6521 Tainted: G L syzkaller #0 PREEMPT(full) [ 1957.953969][T11186] Tainted: [L]=SOFTLOCKUP [ 1957.953979][T11186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1957.953994][T11186] Call Trace: [ 1957.954002][T11186] [ 1957.954011][T11186] dump_stack_lvl+0x100/0x190 [ 1957.954053][T11186] should_fail_ex.cold+0x5/0xa [ 1957.954083][T11186] ? drm_atomic_state_init+0x190/0x490 [ 1957.954118][T11186] should_failslab+0xc2/0x120 [ 1957.954147][T11186] __kmalloc_noprof+0xe0/0x850 [ 1957.954193][T11186] drm_atomic_state_init+0x190/0x490 [ 1957.954227][T11186] ? kasan_save_track+0x14/0x30 [ 1957.954253][T11186] drm_atomic_state_alloc+0xd3/0x120 [ 1957.954289][T11186] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 1957.954329][T11186] ? trace_contention_end+0x140/0x180 [ 1957.954366][T11186] ? __mutex_lock+0x26a/0x1b90 [ 1957.954393][T11186] ? __mutex_lock+0x26a/0x1b90 [ 1957.954418][T11186] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1957.954460][T11186] ? drm_master_internal_acquire+0x21/0x80 [ 1957.954525][T11186] drm_client_modeset_commit_locked+0x14d/0x580 [ 1957.954570][T11186] drm_client_modeset_commit+0x4f/0x80 [ 1957.954616][T11186] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1957.954670][T11186] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1957.954714][T11186] drm_fbdev_client_restore+0x1b/0x30 [ 1957.954746][T11186] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1957.954783][T11186] drm_client_dev_restore+0x205/0x2a0 [ 1957.954827][T11186] drm_release+0x2c6/0x360 [ 1957.954864][T11186] ? __pfx_drm_release+0x10/0x10 [ 1957.954901][T11186] __fput+0x3ff/0xb40 [ 1957.954939][T11186] task_work_run+0x150/0x240 [ 1957.954978][T11186] ? __pfx_task_work_run+0x10/0x10 [ 1957.955024][T11186] exit_to_user_mode_loop+0x100/0x4a0 [ 1957.955062][T11186] do_syscall_64+0x668/0xf80 [ 1957.955086][T11186] ? clear_bhb_loop+0x40/0x90 [ 1957.955116][T11186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.955142][T11186] RIP: 0033:0x7f5fb479c819 [ 1957.955162][T11186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1957.955186][T11186] RSP: 002b:00007f5fb571d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1957.955209][T11186] RAX: 0000000000000000 RBX: 00007f5fb4a15fa0 RCX: 00007f5fb479c819 [ 1957.955225][T11186] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1957.955239][T11186] RBP: 00007f5fb4832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1957.955255][T11186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1957.955269][T11186] R13: 00007f5fb4a16038 R14: 00007f5fb4a15fa0 R15: 00007ffeeea85898 [ 1957.955302][T11186] [ 1958.095393][T11197] mmap: syz.3.6521 (11197): VmData 37728256 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 1958.720855][T11231] FAULT_INJECTION: forcing a failure. [ 1958.720855][T11231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1958.721130][T11231] CPU: 0 UID: 0 PID: 11231 Comm: syz.3.6525 Tainted: G L syzkaller #0 PREEMPT(full) [ 1958.721165][T11231] Tainted: [L]=SOFTLOCKUP [ 1958.721173][T11231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1958.721187][T11231] Call Trace: [ 1958.721195][T11231] [ 1958.721204][T11231] dump_stack_lvl+0x100/0x190 [ 1958.721244][T11231] should_fail_ex.cold+0x5/0xa [ 1958.721278][T11231] _copy_from_iter+0x1f4/0x1690 [ 1958.721317][T11231] ? __pfx__copy_from_iter+0x10/0x10 [ 1958.721347][T11231] ? rcu_is_watching+0x12/0xc0 [ 1958.721385][T11231] ? trace_kmalloc+0x101/0x130 [ 1958.721410][T11231] ? __kasan_kmalloc+0xaa/0xb0 [ 1958.721434][T11231] ? __kmalloc_noprof+0x320/0x850 [ 1958.721477][T11231] kernfs_fop_write_iter+0x186/0x5f0 [ 1958.721509][T11231] vfs_write+0x6ac/0x1070 [ 1958.721533][T11231] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1958.721564][T11231] ? __pfx_vfs_write+0x10/0x10 [ 1958.721605][T11231] ksys_write+0x12a/0x250 [ 1958.721628][T11231] ? __pfx_ksys_write+0x10/0x10 [ 1958.721668][T11231] do_syscall_64+0x106/0xf80 [ 1958.721692][T11231] ? clear_bhb_loop+0x40/0x90 [ 1958.721721][T11231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.721746][T11231] RIP: 0033:0x7f5fb479c819 [ 1958.721765][T11231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1958.721791][T11231] RSP: 002b:00007f5fb571d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1958.721813][T11231] RAX: ffffffffffffffda RBX: 00007f5fb4a15fa0 RCX: 00007f5fb479c819 [ 1958.721828][T11231] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 1958.721843][T11231] RBP: 00007f5fb571d090 R08: 0000000000000000 R09: 0000000000000000 [ 1958.721858][T11231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1958.721872][T11231] R13: 00007f5fb4a16038 R14: 00007f5fb4a15fa0 R15: 00007ffeeea85898 [ 1958.721903][T11231] [ 1960.919555][T11278] FAULT_INJECTION: forcing a failure. [ 1960.919555][T11278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1960.970333][T11278] CPU: 0 UID: 0 PID: 11278 Comm: syz.0.6536 Tainted: G L syzkaller #0 PREEMPT(full) [ 1960.970384][T11278] Tainted: [L]=SOFTLOCKUP [ 1960.970392][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1960.970408][T11278] Call Trace: [ 1960.970416][T11278] [ 1960.970425][T11278] dump_stack_lvl+0x100/0x190 [ 1960.970466][T11278] should_fail_ex.cold+0x5/0xa [ 1960.970499][T11278] _copy_to_user+0x32/0xd0 [ 1960.970533][T11278] simple_read_from_buffer+0xcb/0x170 [ 1960.970575][T11278] proc_fail_nth_read+0x1af/0x230 [ 1960.970607][T11278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1960.970645][T11278] ? rw_verify_area+0xce/0x6d0 [ 1960.970682][T11278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1960.970713][T11278] vfs_read+0x1e4/0xb30 [ 1960.970740][T11278] ? __pfx_vfs_read+0x10/0x10 [ 1960.970762][T11278] ? __fget_files+0x215/0x3d0 [ 1960.970792][T11278] ? __fget_files+0x21f/0x3d0 [ 1960.970825][T11278] ksys_read+0x12a/0x250 [ 1960.970847][T11278] ? __pfx_ksys_read+0x10/0x10 [ 1960.970884][T11278] do_syscall_64+0x106/0xf80 [ 1960.970907][T11278] ? clear_bhb_loop+0x40/0x90 [ 1960.970936][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.970961][T11278] RIP: 0033:0x7fe3f5b5d04e [ 1960.970980][T11278] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1960.971004][T11278] RSP: 002b:00007fe3f6a97fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1960.971026][T11278] RAX: ffffffffffffffda RBX: 00007fe3f6a986c0 RCX: 00007fe3f5b5d04e [ 1960.971043][T11278] RDX: 000000000000000f RSI: 00007fe3f6a980a0 RDI: 0000000000000004 [ 1960.971057][T11278] RBP: 00007fe3f6a98090 R08: 0000000000000000 R09: 0000000000000000 [ 1960.971072][T11278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1960.971092][T11278] R13: 00007fe3f5e16038 R14: 00007fe3f5e15fa0 R15: 00007ffe879ce138 [ 1960.971122][T11278] [ 1961.237384][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1961.716382][T11298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6534'. [ 1961.804213][T11297] vivid-007: ================= START STATUS ================= [ 1961.881028][T11297] vivid-007: Generate PTS: true [ 1961.928534][T11297] vivid-007: Generate SCR: true [ 1961.963483][T11297] tpg source WxH: 320x240 (Y'CbCr) [ 1962.010168][T11297] tpg field: 1 [ 1962.026152][T11297] tpg crop: (0,0)/320x240 [ 1962.040125][T11297] tpg compose: (0,0)/320x240 [ 1962.072277][T11297] tpg colorspace: 8 [ 1962.091000][T11297] tpg transfer function: 0/0 [ 1962.135858][T11297] tpg Y'CbCr encoding: 0/0 [ 1962.156077][T11297] tpg quantization: 0/0 [ 1962.180634][T11297] tpg RGB range: 0/2 [ 1962.211017][T11297] vivid-007: ================== END STATUS ================== [ 1964.276896][ T30] audit: type=1804 audit(4294967299.459:72): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6545" name="/newroot/469/file0" dev="tmpfs" ino=2448 res=1 errno=0 [ 1965.232709][T10281] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1965.244800][T26555] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1965.254605][T26557] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1965.261332][T26552] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1965.268314][T11371] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 1965.311871][T11376] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 1965.319442][T11372] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 1965.391729][T11370] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 1965.399151][T11392] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 1965.406309][T11380] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 1965.413204][T11381] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 1965.420314][T11385] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 1965.472616][T11399] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 1965.479499][T11404] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 1965.486813][T11405] Bluetooth: hci19: Opcode 0x0c03 failed: -110 [ 1965.551535][T11407] Bluetooth: hci20: Opcode 0x0c03 failed: -110 [ 1965.559087][T11411] Bluetooth: hci21: Opcode 0x0c03 failed: -110 [ 1965.567755][T11414] Bluetooth: hci22: Opcode 0x0c03 failed: -110 [ 1965.631855][T11419] Bluetooth: hci23: Opcode 0x0c03 failed: -110 [ 1965.639792][T11424] Bluetooth: hci24: Opcode 0x0c03 failed: -110 [ 1965.712587][T11428] Bluetooth: hci25: Opcode 0x0c03 failed: -110 [ 1965.724898][T11406] Bluetooth: hci26: Opcode 0x0c03 failed: -110 [ 1965.732219][T11437] Bluetooth: hci27: Opcode 0x0c03 failed: -110 [ 1965.739568][T11446] Bluetooth: hci31: Opcode 0x0c03 failed: -110 [ 1965.793126][T11449] Bluetooth: hci28: Opcode 0x0c03 failed: -110 [ 1965.806182][T11436] Bluetooth: hci29: Opcode 0x0c03 failed: -110 [ 1965.813086][T11450] Bluetooth: hci30: Opcode 0x0c03 failed: -110 [ 1965.819876][T11455] Bluetooth: hci32: Opcode 0x0c03 failed: -110 [ 1965.826686][T11458] Bluetooth: hci34: Opcode 0x0c03 failed: -110 [ 1965.834208][T11457] Bluetooth: hci33: Opcode 0x0c03 failed: -110 [ 1965.873576][T11465] Bluetooth: hci35: Opcode 0x0c03 failed: -110 [ 1965.880973][T11467] Bluetooth: hci36: Opcode 0x0c03 failed: -110 [ 1965.888106][T11472] Bluetooth: hci37: Opcode 0x0c03 failed: -110 [ 1965.955133][T11476] Bluetooth: hci38: Opcode 0x0c03 failed: -110 [ 1965.962684][T11456] Bluetooth: hci39: Opcode 0x0c03 failed: -110 [ 1966.138348][T11483] Bluetooth: hci40: Opcode 0x0c03 failed: -110 [ 1966.147448][T11517] Bluetooth: hci44: Opcode 0x0c03 failed: -110 [ 1966.155329][T11513] Bluetooth: hci42: Opcode 0x0c03 failed: -110 [ 1966.165566][T11481] Bluetooth: hci41: Opcode 0x0c03 failed: -110 [ 1966.176097][T11516] Bluetooth: hci45: Opcode 0x0c03 failed: -110 [ 1966.192776][T11525] Bluetooth: hci43: Opcode 0x0c03 failed: -110 [ 1966.199929][T11519] Bluetooth: hci47: Opcode 0x0c03 failed: -110 [ 1966.207794][T11531] Bluetooth: hci50: Opcode 0x0c03 failed: -110 [ 1966.214563][T11520] Bluetooth: hci53: Opcode 0x0c03 failed: -110 [ 1966.221484][T11518] Bluetooth: hci46: Opcode 0x0c03 failed: -110 [ 1966.229611][T11526] Bluetooth: hci48: Opcode 0x0c03 failed: -110 [ 1966.278523][T11544] Bluetooth: hci54: Opcode 0x0c03 failed: -110 [ 1966.287509][T11539] Bluetooth: hci55: Opcode 0x0c03 failed: -110 [ 1966.295918][T11536] Bluetooth: hci51: Opcode 0x0c03 failed: -110 [ 1966.302828][T11545] Bluetooth: hci52: Opcode 0x0c03 failed: -110 [ 1966.309795][T11540] Bluetooth: hci49: Opcode 0x0c03 failed: -110 [ 1966.317064][T11547] Bluetooth: hci56: Opcode 0x0c03 failed: -110 [ 1966.354024][T11553] Bluetooth: hci57: Opcode 0x0c03 failed: -110 [ 1966.440042][T11551] Bluetooth: hci58: Opcode 0x0c03 failed: -110 [ 1966.452206][T11566] Bluetooth: hci59: Opcode 0x0c03 failed: -110 [ 1966.460018][T11567] Bluetooth: hci60: Opcode 0x0c03 failed: -110 [ 1966.526396][T11569] Bluetooth: hci61: Opcode 0x0c03 failed: -110 [ 1966.534379][T11579] Bluetooth: hci63: Opcode 0x0c03 failed: -110 [ 1966.541475][T11568] Bluetooth: hci65: Opcode 0x0c03 failed: -110 [ 1966.549127][T11584] Bluetooth: hci62: Opcode 0x0c03 failed: -110 [ 1966.556023][T11576] Bluetooth: hci64: Opcode 0x0c03 failed: -110 [ 1966.571660][T11581] Bluetooth: hci66: Opcode 0x0c03 failed: -110 [ 1966.599999][T11588] Bluetooth: hci67: Opcode 0x0c03 failed: -110 [ 1966.607255][T11591] Bluetooth: hci69: Opcode 0x0c03 failed: -110 [ 1966.614976][T11587] Bluetooth: hci68: Opcode 0x0c03 failed: -110 [ 1967.391997][T11799] FAULT_INJECTION: forcing a failure. [ 1967.391997][T11799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1967.480885][T11799] CPU: 0 UID: 0 PID: 11799 Comm: syz.6.6550 Tainted: G L syzkaller #0 PREEMPT(full) [ 1967.480940][T11799] Tainted: [L]=SOFTLOCKUP [ 1967.480949][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1967.480963][T11799] Call Trace: [ 1967.480971][T11799] [ 1967.480980][T11799] dump_stack_lvl+0x100/0x190 [ 1967.481022][T11799] should_fail_ex.cold+0x5/0xa [ 1967.481050][T11799] _copy_from_user+0x2e/0xd0 [ 1967.481081][T11799] __do_sys_copy_file_range+0x134/0x460 [ 1967.481113][T11799] ? fput+0x79/0x100 [ 1967.481140][T11799] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 1967.481170][T11799] ? ksys_write+0x1ac/0x250 [ 1967.481192][T11799] ? __pfx_ksys_write+0x10/0x10 [ 1967.481224][T11799] do_syscall_64+0x106/0xf80 [ 1967.481247][T11799] ? clear_bhb_loop+0x40/0x90 [ 1967.481276][T11799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.481301][T11799] RIP: 0033:0x7f2763d9c819 [ 1967.481319][T11799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1967.481343][T11799] RSP: 002b:00007f2764b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1967.481366][T11799] RAX: ffffffffffffffda RBX: 00007f2764015fa0 RCX: 00007f2763d9c819 [ 1967.481382][T11799] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1967.481396][T11799] RBP: 00007f2764b9f090 R08: 0000000000000002 R09: 0000000000000000 [ 1967.481411][T11799] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1967.481426][T11799] R13: 00007f2764016038 R14: 00007f2764015fa0 R15: 00007ffc51843c28 [ 1967.481456][T11799] [ 1968.573999][T11823] netlink: 334 bytes leftover after parsing attributes in process `syz.5.6555'. [ 1971.488637][T11980] FAULT_INJECTION: forcing a failure. [ 1971.488637][T11980] name failslab, interval 1, probability 0, space 0, times 0 [ 1971.606221][T11980] CPU: 0 UID: 0 PID: 11980 Comm: syz.3.6568 Tainted: G L syzkaller #0 PREEMPT(full) [ 1971.606258][T11980] Tainted: [L]=SOFTLOCKUP [ 1971.606266][T11980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1971.606281][T11980] Call Trace: [ 1971.606289][T11980] [ 1971.606298][T11980] dump_stack_lvl+0x100/0x190 [ 1971.606339][T11980] should_fail_ex.cold+0x5/0xa [ 1971.606367][T11980] should_failslab+0xc2/0x120 [ 1971.606394][T11980] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1971.606427][T11980] ? alloc_pipe_info+0x10e/0x590 [ 1971.606453][T11980] ? find_held_lock+0x2b/0x80 [ 1971.606491][T11980] alloc_pipe_info+0x10e/0x590 [ 1971.606520][T11980] splice_direct_to_actor+0x78f/0xa30 [ 1971.606549][T11980] ? __pfx_direct_splice_actor+0x10/0x10 [ 1971.606575][T11980] ? __pfx_aa_file_perm+0x10/0x10 [ 1971.606612][T11980] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1971.606638][T11980] ? __lock_acquire+0x4a5/0x2630 [ 1971.606674][T11980] do_splice_direct+0x174/0x240 [ 1971.606700][T11980] ? __pfx_do_splice_direct+0x10/0x10 [ 1971.606730][T11980] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1971.606781][T11980] vfs_copy_file_range+0xc1b/0x1880 [ 1971.606818][T11980] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 1971.606846][T11980] ? __might_fault+0xc5/0x140 [ 1971.606881][T11980] ? __might_fault+0xc5/0x140 [ 1971.606926][T11980] __do_sys_copy_file_range+0x1a1/0x460 [ 1971.606959][T11980] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 1971.606989][T11980] ? ksys_write+0x1ac/0x250 [ 1971.607011][T11980] ? __pfx_ksys_write+0x10/0x10 [ 1971.607043][T11980] do_syscall_64+0x106/0xf80 [ 1971.607066][T11980] ? clear_bhb_loop+0x40/0x90 [ 1971.607095][T11980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.607119][T11980] RIP: 0033:0x7f5fb479c819 [ 1971.607139][T11980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1971.607162][T11980] RSP: 002b:00007f5fb571d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1971.607185][T11980] RAX: ffffffffffffffda RBX: 00007f5fb4a15fa0 RCX: 00007f5fb479c819 [ 1971.607201][T11980] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1971.607216][T11980] RBP: 00007f5fb571d090 R08: 0000000000000002 R09: 0000000000000000 [ 1971.607230][T11980] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1971.607258][T11980] R13: 00007f5fb4a16038 R14: 00007f5fb4a15fa0 R15: 00007ffeeea85898 [ 1971.607288][T11980] [ 1972.226414][T12001] binder: 11991:12001 ioctl 40086602 e20 returned -22 [ 1973.538439][T12033] netlink: 334 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1974.439158][T12061] FAULT_INJECTION: forcing a failure. [ 1974.439158][T12061] name failslab, interval 1, probability 0, space 0, times 0 [ 1974.521106][T12061] CPU: 0 UID: 0 PID: 12061 Comm: syz.5.6582 Tainted: G L syzkaller #0 PREEMPT(full) [ 1974.521144][T12061] Tainted: [L]=SOFTLOCKUP [ 1974.521152][T12061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1974.521165][T12061] Call Trace: [ 1974.521173][T12061] [ 1974.521182][T12061] dump_stack_lvl+0x100/0x190 [ 1974.521230][T12061] should_fail_ex.cold+0x5/0xa [ 1974.521258][T12061] ? alloc_pipe_info+0x1ec/0x590 [ 1974.521283][T12061] should_failslab+0xc2/0x120 [ 1974.521310][T12061] __kmalloc_noprof+0xe0/0x850 [ 1974.521353][T12061] alloc_pipe_info+0x1ec/0x590 [ 1974.521382][T12061] splice_direct_to_actor+0x78f/0xa30 [ 1974.521410][T12061] ? __pfx_direct_splice_actor+0x10/0x10 [ 1974.521437][T12061] ? __pfx_aa_file_perm+0x10/0x10 [ 1974.521474][T12061] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1974.521500][T12061] ? __lock_acquire+0x4a5/0x2630 [ 1974.521537][T12061] do_splice_direct+0x174/0x240 [ 1974.521563][T12061] ? __pfx_do_splice_direct+0x10/0x10 [ 1974.521589][T12061] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1974.521640][T12061] vfs_copy_file_range+0xc1b/0x1880 [ 1974.521676][T12061] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 1974.521705][T12061] ? __might_fault+0xc5/0x140 [ 1974.521738][T12061] ? __might_fault+0xc5/0x140 [ 1974.521786][T12061] __do_sys_copy_file_range+0x1a1/0x460 [ 1974.521819][T12061] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 1974.521849][T12061] ? ksys_write+0x1ac/0x250 [ 1974.521872][T12061] ? __pfx_ksys_write+0x10/0x10 [ 1974.521903][T12061] do_syscall_64+0x106/0xf80 [ 1974.521927][T12061] ? clear_bhb_loop+0x40/0x90 [ 1974.521955][T12061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1974.521980][T12061] RIP: 0033:0x7f1430f9c819 [ 1974.521998][T12061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1974.522022][T12061] RSP: 002b:00007f1431e5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1974.522045][T12061] RAX: ffffffffffffffda RBX: 00007f1431215fa0 RCX: 00007f1430f9c819 [ 1974.522061][T12061] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1974.522075][T12061] RBP: 00007f1431e5e090 R08: 0000000000000002 R09: 0000000000000000 [ 1974.522089][T12061] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1974.522104][T12061] R13: 00007f1431216038 R14: 00007f1431215fa0 R15: 00007ffef9e082f8 [ 1974.522146][T12061] [ 1976.606798][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.625280][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.903574][T12153] input: f as /devices/virtual/input/input64 [ 1977.623723][T12192] FAULT_INJECTION: forcing a failure. [ 1977.623723][T12192] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.693589][T12190] bonding: no command found in bonding_masters - use +ifname or -ifname [ 1977.709224][T12192] CPU: 0 UID: 0 PID: 12192 Comm: syz.6.6593 Tainted: G L syzkaller #0 PREEMPT(full) [ 1977.709262][T12192] Tainted: [L]=SOFTLOCKUP [ 1977.709271][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1977.709285][T12192] Call Trace: [ 1977.709293][T12192] [ 1977.709301][T12192] dump_stack_lvl+0x100/0x190 [ 1977.709342][T12192] should_fail_ex.cold+0x5/0xa [ 1977.709370][T12192] ? copy_splice_read+0x1a3/0xb90 [ 1977.709393][T12192] should_failslab+0xc2/0x120 [ 1977.709419][T12192] __kmalloc_noprof+0xe0/0x850 [ 1977.709462][T12192] copy_splice_read+0x1a3/0xb90 [ 1977.709492][T12192] ? __pfx_copy_splice_read+0x10/0x10 [ 1977.709519][T12192] ? look_up_lock_class+0x55/0x120 [ 1977.709548][T12192] ? lockdep_init_map_type+0x5c/0x250 [ 1977.709581][T12192] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1977.709619][T12192] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 1977.709657][T12192] do_splice_read+0x2bd/0x370 [ 1977.709684][T12192] splice_direct_to_actor+0x2a1/0xa30 [ 1977.709710][T12192] ? __pfx_direct_splice_actor+0x10/0x10 [ 1977.709739][T12192] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1977.709765][T12192] ? __lock_acquire+0x4a5/0x2630 [ 1977.709800][T12192] do_splice_direct+0x174/0x240 [ 1977.709824][T12192] ? __pfx_do_splice_direct+0x10/0x10 [ 1977.709850][T12192] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1977.709904][T12192] vfs_copy_file_range+0xc1b/0x1880 [ 1977.709940][T12192] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 1977.709968][T12192] ? __might_fault+0xc5/0x140 [ 1977.710001][T12192] ? __might_fault+0xc5/0x140 [ 1977.710045][T12192] __do_sys_copy_file_range+0x1a1/0x460 [ 1977.710077][T12192] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 1977.710105][T12192] ? ksys_write+0x1ac/0x250 [ 1977.710127][T12192] ? __pfx_ksys_write+0x10/0x10 [ 1977.710157][T12192] do_syscall_64+0x106/0xf80 [ 1977.710179][T12192] ? clear_bhb_loop+0x40/0x90 [ 1977.710207][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1977.710230][T12192] RIP: 0033:0x7f2763d9c819 [ 1977.710266][T12192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1977.710289][T12192] RSP: 002b:00007f2764b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1977.710312][T12192] RAX: ffffffffffffffda RBX: 00007f2764015fa0 RCX: 00007f2763d9c819 [ 1977.710327][T12192] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1977.710342][T12192] RBP: 00007f2764b9f090 R08: 0000000000000002 R09: 0000000000000000 [ 1977.710356][T12192] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1977.710371][T12192] R13: 00007f2764016038 R14: 00007f2764015fa0 R15: 00007ffc51843c28 [ 1977.710401][T12192] [ 1979.726902][T12230] ovs_?: entered promiscuous mode [ 1979.827290][T12237] netlink: 334 bytes leftover after parsing attributes in process `syz.6.6596'. [ 1981.071743][T12304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6601'. [ 1981.238934][T12296] bond0: invalid ARP target specified [ 1981.286368][T12316] FAULT_INJECTION: forcing a failure. [ 1981.286368][T12316] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.445055][T12316] CPU: 0 UID: 0 PID: 12316 Comm: syz.3.6601 Tainted: G L syzkaller #0 PREEMPT(full) [ 1981.445101][T12316] Tainted: [L]=SOFTLOCKUP [ 1981.445111][T12316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1981.445126][T12316] Call Trace: [ 1981.445134][T12316] [ 1981.445143][T12316] dump_stack_lvl+0x100/0x190 [ 1981.445187][T12316] should_fail_ex.cold+0x5/0xa [ 1981.445218][T12316] should_failslab+0xc2/0x120 [ 1981.445246][T12316] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1981.445284][T12316] ? alloc_empty_file+0x55/0x1c0 [ 1981.445316][T12316] ? __pfx_stack_trace_save+0x10/0x10 [ 1981.445347][T12316] alloc_empty_file+0x55/0x1c0 [ 1981.445380][T12316] path_openat+0xe8/0x31a0 [ 1981.445405][T12316] ? kasan_save_stack+0x3f/0x50 [ 1981.445427][T12316] ? kasan_save_stack+0x30/0x50 [ 1981.445448][T12316] ? kasan_save_track+0x14/0x30 [ 1981.445469][T12316] ? __kasan_slab_alloc+0x89/0x90 [ 1981.445493][T12316] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1981.445538][T12316] ? do_getname+0x35/0x390 [ 1981.445569][T12316] ? do_sys_openat2+0xc5/0x1e0 [ 1981.445604][T12316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1981.445633][T12316] ? __pfx_path_openat+0x10/0x10 [ 1981.445671][T12316] do_file_open+0x20e/0x430 [ 1981.445701][T12316] ? __pfx_do_file_open+0x10/0x10 [ 1981.445748][T12316] ? alloc_fd+0x476/0x790 [ 1981.445777][T12316] ? do_getname+0x191/0x390 [ 1981.445817][T12316] do_sys_openat2+0x10d/0x1e0 [ 1981.445851][T12316] ? __pfx_do_sys_openat2+0x10/0x10 [ 1981.445896][T12316] __x64_sys_openat+0x12d/0x210 [ 1981.445931][T12316] ? __pfx___x64_sys_openat+0x10/0x10 [ 1981.445978][T12316] do_syscall_64+0x106/0xf80 [ 1981.446001][T12316] ? clear_bhb_loop+0x40/0x90 [ 1981.446031][T12316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1981.446056][T12316] RIP: 0033:0x7f5fb479c819 [ 1981.446080][T12316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1981.446104][T12316] RSP: 002b:00007f5fb56db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1981.446128][T12316] RAX: ffffffffffffffda RBX: 00007f5fb4a16180 RCX: 00007f5fb479c819 [ 1981.446145][T12316] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1981.446161][T12316] RBP: 00007f5fb4832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1981.446176][T12316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1981.446191][T12316] R13: 00007f5fb4a16218 R14: 00007f5fb4a16180 R15: 00007ffeeea85898 [ 1981.446223][T12316] [ 1981.732874][T12299] netlink: 338 bytes leftover after parsing attributes in process `syz.0.6599'. [ 1982.372532][T12344] FAULT_INJECTION: forcing a failure. [ 1982.372532][T12344] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1982.460857][T12344] CPU: 0 UID: 0 PID: 12344 Comm: syz.3.6603 Tainted: G L syzkaller #0 PREEMPT(full) [ 1982.460896][T12344] Tainted: [L]=SOFTLOCKUP [ 1982.460905][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1982.460919][T12344] Call Trace: [ 1982.460927][T12344] [ 1982.460936][T12344] dump_stack_lvl+0x100/0x190 [ 1982.460977][T12344] should_fail_ex.cold+0x5/0xa [ 1982.461001][T12344] ? prepare_alloc_pages+0x16d/0x5f0 [ 1982.461032][T12344] should_fail_alloc_page+0xeb/0x140 [ 1982.461061][T12344] prepare_alloc_pages+0x1f0/0x5f0 [ 1982.461112][T12344] ? kernel_text_address+0x8d/0x100 [ 1982.461153][T12344] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1982.461202][T12344] ? copy_splice_read+0x1a3/0xb90 [ 1982.461225][T12344] ? stack_trace_save+0x8e/0xc0 [ 1982.461250][T12344] ? __pfx_stack_trace_save+0x10/0x10 [ 1982.461276][T12344] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1982.461318][T12344] ? copy_splice_read+0x1a3/0xb90 [ 1982.461340][T12344] ? kasan_save_stack+0x3f/0x50 [ 1982.461360][T12344] ? kasan_save_stack+0x30/0x50 [ 1982.461380][T12344] ? kasan_save_track+0x14/0x30 [ 1982.461401][T12344] ? __kasan_kmalloc+0xaa/0xb0 [ 1982.461436][T12344] ? __kmalloc_noprof+0x301/0x850 [ 1982.461477][T12344] ? copy_splice_read+0x1a3/0xb90 [ 1982.461499][T12344] ? do_splice_read+0x2bd/0x370 [ 1982.461524][T12344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.461565][T12344] alloc_pages_bulk_noprof+0x782/0x1490 [ 1982.461615][T12344] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1982.461661][T12344] ? __kmalloc_noprof+0x320/0x850 [ 1982.461704][T12344] copy_splice_read+0x1e1/0xb90 [ 1982.461735][T12344] ? __pfx_copy_splice_read+0x10/0x10 [ 1982.461761][T12344] ? look_up_lock_class+0x55/0x120 [ 1982.461791][T12344] ? lockdep_init_map_type+0x5c/0x250 [ 1982.461825][T12344] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1982.461851][T12344] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 1982.461895][T12344] do_splice_read+0x2bd/0x370 [ 1982.461923][T12344] splice_direct_to_actor+0x2a1/0xa30 [ 1982.461950][T12344] ? __pfx_direct_splice_actor+0x10/0x10 [ 1982.461980][T12344] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1982.462006][T12344] ? __lock_acquire+0x4a5/0x2630 [ 1982.462042][T12344] do_splice_direct+0x174/0x240 [ 1982.462068][T12344] ? __pfx_do_splice_direct+0x10/0x10 [ 1982.462094][T12344] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1982.462144][T12344] vfs_copy_file_range+0xc1b/0x1880 [ 1982.462181][T12344] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 1982.462209][T12344] ? __might_fault+0xc5/0x140 [ 1982.462244][T12344] ? __might_fault+0xc5/0x140 [ 1982.462290][T12344] __do_sys_copy_file_range+0x1a1/0x460 [ 1982.462322][T12344] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 1982.462352][T12344] ? ksys_write+0x1ac/0x250 [ 1982.462374][T12344] ? __pfx_ksys_write+0x10/0x10 [ 1982.462405][T12344] do_syscall_64+0x106/0xf80 [ 1982.462428][T12344] ? clear_bhb_loop+0x40/0x90 [ 1982.462461][T12344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.462485][T12344] RIP: 0033:0x7f5fb479c819 [ 1982.462504][T12344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1982.462527][T12344] RSP: 002b:00007f5fb571d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1982.462551][T12344] RAX: ffffffffffffffda RBX: 00007f5fb4a15fa0 RCX: 00007f5fb479c819 [ 1982.462567][T12344] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1982.462581][T12344] RBP: 00007f5fb571d090 R08: 0000000000000002 R09: 0000000000000000 [ 1982.462596][T12344] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1982.462611][T12344] R13: 00007f5fb4a16038 R14: 00007f5fb4a15fa0 R15: 00007ffeeea85898 [ 1982.462641][T12344] [ 1983.141135][T12334] netlink: 342 bytes leftover after parsing attributes in process `syz.5.6602'. [ 1983.288391][T12364] FAULT_INJECTION: forcing a failure. [ 1983.288391][T12364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1983.332614][T12364] CPU: 0 UID: 0 PID: 12364 Comm: syz.0.6605 Tainted: G L syzkaller #0 PREEMPT(full) [ 1983.332822][T12364] Tainted: [L]=SOFTLOCKUP [ 1983.332832][T12364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1983.332848][T12364] Call Trace: [ 1983.332859][T12364] [ 1983.332869][T12364] dump_stack_lvl+0x100/0x190 [ 1983.332912][T12364] should_fail_ex.cold+0x5/0xa [ 1983.332941][T12364] strncpy_from_user+0x3b/0x2d0 [ 1983.332976][T12364] do_getname+0x78/0x390 [ 1983.333012][T12364] do_sys_openat2+0xc5/0x1e0 [ 1983.333046][T12364] ? __pfx_do_sys_openat2+0x10/0x10 [ 1983.333083][T12364] ? do_handle_open+0x2ca/0xce0 [ 1983.333119][T12364] __x64_sys_openat+0x12d/0x210 [ 1983.333155][T12364] ? __pfx___x64_sys_openat+0x10/0x10 [ 1983.333201][T12364] do_syscall_64+0x106/0xf80 [ 1983.333225][T12364] ? clear_bhb_loop+0x40/0x90 [ 1983.333255][T12364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.333280][T12364] RIP: 0033:0x7fe3f5b9c819 [ 1983.333301][T12364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1983.333326][T12364] RSP: 002b:00007fe3f6a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1983.333350][T12364] RAX: ffffffffffffffda RBX: 00007fe3f5e15fa0 RCX: 00007fe3f5b9c819 [ 1983.333376][T12364] RDX: 00000000000c0201 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1983.333393][T12364] RBP: 00007fe3f5c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1983.333409][T12364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1983.333424][T12364] R13: 00007fe3f5e16038 R14: 00007fe3f5e15fa0 R15: 00007ffe879ce138 [ 1983.333456][T12364] [ 1985.566174][T12498] FAULT_INJECTION: forcing a failure. [ 1985.566174][T12498] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.621083][T12498] CPU: 0 UID: 0 PID: 12498 Comm: syz.6.6614 Tainted: G L syzkaller #0 PREEMPT(full) [ 1985.621121][T12498] Tainted: [L]=SOFTLOCKUP [ 1985.621150][T12498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1985.621166][T12498] Call Trace: [ 1985.621175][T12498] [ 1985.621184][T12498] dump_stack_lvl+0x100/0x190 [ 1985.621225][T12498] should_fail_ex.cold+0x5/0xa [ 1985.621254][T12498] ? iter_file_splice_write+0x1d8/0x10a0 [ 1985.621280][T12498] should_failslab+0xc2/0x120 [ 1985.621307][T12498] __kmalloc_noprof+0xe0/0x850 [ 1985.621353][T12498] iter_file_splice_write+0x1d8/0x10a0 [ 1985.621378][T12498] ? lockdep_hardirqs_on+0x78/0x100 [ 1985.621406][T12498] ? copy_splice_read+0x734/0xb90 [ 1985.621428][T12498] ? kfree+0x1f6/0x6b0 [ 1985.621467][T12498] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1985.621494][T12498] ? __lock_acquire+0x4a5/0x2630 [ 1985.621528][T12498] ? __pfx_copy_splice_read+0x10/0x10 [ 1985.621568][T12498] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1985.621597][T12498] direct_splice_actor+0x192/0x6c0 [ 1985.621625][T12498] splice_direct_to_actor+0x345/0xa30 [ 1985.621652][T12498] ? __pfx_direct_splice_actor+0x10/0x10 [ 1985.621683][T12498] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1985.621709][T12498] ? __lock_acquire+0x4a5/0x2630 [ 1985.621746][T12498] do_splice_direct+0x174/0x240 [ 1985.621772][T12498] ? __pfx_do_splice_direct+0x10/0x10 [ 1985.621799][T12498] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1985.621849][T12498] vfs_copy_file_range+0xc1b/0x1880 [ 1985.621886][T12498] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 1985.621915][T12498] ? __might_fault+0xc5/0x140 [ 1985.621949][T12498] ? __might_fault+0xc5/0x140 [ 1985.621996][T12498] __do_sys_copy_file_range+0x1a1/0x460 [ 1985.622029][T12498] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 1985.622058][T12498] ? ksys_write+0x1ac/0x250 [ 1985.622081][T12498] ? __pfx_ksys_write+0x10/0x10 [ 1985.622113][T12498] do_syscall_64+0x106/0xf80 [ 1985.622136][T12498] ? clear_bhb_loop+0x40/0x90 [ 1985.622171][T12498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.622195][T12498] RIP: 0033:0x7f2763d9c819 [ 1985.622214][T12498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1985.622238][T12498] RSP: 002b:00007f2764b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1985.622261][T12498] RAX: ffffffffffffffda RBX: 00007f2764015fa0 RCX: 00007f2763d9c819 [ 1985.622277][T12498] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1985.622291][T12498] RBP: 00007f2764b9f090 R08: 0000000000000002 R09: 0000000000000000 [ 1985.622305][T12498] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1985.622320][T12498] R13: 00007f2764016038 R14: 00007f2764015fa0 R15: 00007ffc51843c28 [ 1985.622351][T12498] [ 1987.086233][T12539] vivid-003: ================= START STATUS ================= [ 1987.127508][T12539] vivid-003: Radio HW Seek Mode: Bounded [ 1987.156392][T12539] vivid-003: Radio Programmable HW Seek: false [ 1987.207372][T12539] vivid-003: RDS Rx I/O Mode: Block I/O [ 1987.230150][T12539] vivid-003: Generate RBDS Instead of RDS: false [ 1987.284537][T12542] netlink: 334 bytes leftover after parsing attributes in process `syz.6.6621'. [ 1987.303084][T12539] vivid-003: RDS Reception: true [ 1987.317210][T12539] vivid-003: RDS Program Type: 0 inactive [ 1987.354308][T12539] vivid-003: RDS PS Name: inactive [ 1987.404220][T12539] vivid-003: RDS Radio Text: inactive [ 1987.429920][T12539] vivid-003: RDS Traffic Announcement: false inactive [ 1987.522628][T12539] vivid-003: RDS Traffic Program: false inactive [ 1987.575175][T12539] vivid-003: RDS Music: false inactive [ 1987.622670][T12539] vivid-003: ================== END STATUS ================== [ 1988.243785][T11587] Bluetooth: hci4: unexpected subevent 0x03 length: 253 > 9 [ 1989.856216][T12525] Process accounting paused [ 1990.063246][T12637] netlink: 342 bytes leftover after parsing attributes in process `syz.6.6635'. [ 1990.387318][T12673] netlink: 206 bytes leftover after parsing attributes in process `syz.0.6637'. [ 1990.599605][T12668] ima: policy update failed [ 1990.631484][ T30] audit: type=1802 audit(4294967325.796:73): pid=12668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.6637" res=0 errno=0 [ 1991.023355][T12727] ptrace attach of "./syz-executor exec"[28143] was attempted by ""[12727] [ 1991.281467][T12744] FAULT_INJECTION: forcing a failure. [ 1991.281467][T12744] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1991.406885][T12744] CPU: 0 UID: 0 PID: 12744 Comm: syz.5.6640 Tainted: G L syzkaller #0 PREEMPT(full) [ 1991.406924][T12744] Tainted: [L]=SOFTLOCKUP [ 1991.406932][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1991.406946][T12744] Call Trace: [ 1991.406954][T12744] [ 1991.406963][T12744] dump_stack_lvl+0x100/0x190 [ 1991.407004][T12744] should_fail_ex.cold+0x5/0xa [ 1991.407032][T12744] get_futex_key+0x1d2/0x1620 [ 1991.407066][T12744] ? __pfx_get_futex_key+0x10/0x10 [ 1991.407110][T12744] ? update_se+0x94/0x760 [ 1991.407144][T12744] futex_wait_setup+0x83/0x510 [ 1991.407188][T12744] __futex_wait+0x19f/0x300 [ 1991.407226][T12744] ? __pfx___futex_wait+0x10/0x10 [ 1991.407261][T12744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1991.407316][T12744] ? lockdep_hardirqs_on+0x78/0x100 [ 1991.407343][T12744] ? __pfx_futex_wake_mark+0x10/0x10 [ 1991.407385][T12744] ? find_held_lock+0x2b/0x80 [ 1991.407408][T12744] ? futex_wake+0x456/0x530 [ 1991.407451][T12744] futex_wait+0xed/0x380 [ 1991.407488][T12744] ? __pfx_futex_wait+0x10/0x10 [ 1991.407531][T12744] ? __fget_files+0x215/0x3d0 [ 1991.407562][T12744] do_futex+0x1ef/0x350 [ 1991.407594][T12744] ? __pfx_do_futex+0x10/0x10 [ 1991.407625][T12744] ? fdget+0x18b/0x210 [ 1991.407668][T12744] ? __sys_sendmsg+0x18f/0x220 [ 1991.407708][T12744] __x64_sys_futex+0x34f/0x4d0 [ 1991.407743][T12744] ? __pfx___x64_sys_futex+0x10/0x10 [ 1991.407785][T12744] do_syscall_64+0x106/0xf80 [ 1991.407806][T12744] ? clear_bhb_loop+0x40/0x90 [ 1991.407835][T12744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.407858][T12744] RIP: 0033:0x7f1430f9c819 [ 1991.407876][T12744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1991.407898][T12744] RSP: 002b:00007f1431e5e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1991.407921][T12744] RAX: ffffffffffffffda RBX: 00007f1431215fa8 RCX: 00007f1430f9c819 [ 1991.407936][T12744] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1431215fa8 [ 1991.407950][T12744] RBP: 00007f1431215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1991.407964][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1991.407978][T12744] R13: 00007f1431216038 R14: 00007ffef9e08210 R15: 00007ffef9e082f8 [ 1991.408007][T12744] [ 1992.193104][T12772] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 1992.534017][T12786] netlink: 342 bytes leftover after parsing attributes in process `syz.3.6647'. [ 1993.522305][T12832] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 1996.127027][T12892] zswap: compressor not available [ 1999.040848][T13047] FAULT_INJECTION: forcing a failure. [ 1999.040848][T13047] name failslab, interval 1, probability 0, space 0, times 0 [ 1999.120741][T13047] CPU: 0 UID: 0 PID: 13047 Comm: syz.3.6684 Tainted: G L syzkaller #0 PREEMPT(full) [ 1999.120781][T13047] Tainted: [L]=SOFTLOCKUP [ 1999.120789][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1999.120804][T13047] Call Trace: [ 1999.120813][T13047] [ 1999.120823][T13047] dump_stack_lvl+0x100/0x190 [ 1999.120865][T13047] should_fail_ex.cold+0x5/0xa [ 1999.120895][T13047] should_failslab+0xc2/0x120 [ 1999.120923][T13047] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1999.120972][T13047] ? copy_process+0x48b/0x7a40 [ 1999.121000][T13047] ? rcu_is_watching+0x12/0xc0 [ 1999.121044][T13047] copy_process+0x48b/0x7a40 [ 1999.121076][T13047] ? __pfx___futex_wait+0x10/0x10 [ 1999.121125][T13047] ? __pfx_copy_process+0x10/0x10 [ 1999.121169][T13047] kernel_clone+0xfc/0x9a0 [ 1999.121197][T13047] ? __pfx_futex_wait+0x10/0x10 [ 1999.121233][T13047] ? __pfx_kernel_waitid+0x10/0x10 [ 1999.121270][T13047] ? __pfx_kernel_clone+0x10/0x10 [ 1999.121316][T13047] __do_sys_clone+0xd9/0x120 [ 1999.121346][T13047] ? __pfx___do_sys_clone+0x10/0x10 [ 1999.121400][T13047] do_syscall_64+0x106/0xf80 [ 1999.121424][T13047] ? clear_bhb_loop+0x40/0x90 [ 1999.121454][T13047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1999.121479][T13047] RIP: 0033:0x7f5fb479c819 [ 1999.121500][T13047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1999.121525][T13047] RSP: 002b:00007f5fb571d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1999.121548][T13047] RAX: ffffffffffffffda RBX: 00007f5fb4a15fa0 RCX: 00007f5fb479c819 [ 1999.121565][T13047] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 1999.121580][T13047] RBP: 00007f5fb4832c91 R08: 0000000000000002 R09: 0000000000000000 [ 1999.121596][T13047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1999.121611][T13047] R13: 00007f5fb4a16038 R14: 00007f5fb4a15fa0 R15: 00007ffeeea85898 [ 1999.121642][T13047] [ 2002.232041][ T6424] NFSD: Failed to start, no listeners configured. [ 2006.186789][T13436] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6712'. [ 2017.429374][T11591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2017.451301][T11591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2017.459931][T11591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2017.469134][T11591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2017.477741][T11591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2017.529670][T11591] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2017.540640][T11591] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2017.552925][T11591] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2017.561808][T11591] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2017.571723][T11591] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2018.151577][T13512] chnl_net:caif_netlink_parms(): no params data found [ 2018.230478][T13513] chnl_net:caif_netlink_parms(): no params data found [ 2018.551440][T13512] bridge0: port 1(bridge_slave_0) entered blocking state [ 2018.569096][T13512] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.576465][T13512] bridge_slave_0: entered allmulticast mode [ 2018.599486][T13512] bridge_slave_0: entered promiscuous mode [ 2018.645491][T13512] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.668521][T13512] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.675796][T13512] bridge_slave_1: entered allmulticast mode [ 2018.699700][T13512] bridge_slave_1: entered promiscuous mode [ 2018.739450][T13513] bridge0: port 1(bridge_slave_0) entered blocking state [ 2018.746750][T13513] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.770305][T13513] bridge_slave_0: entered allmulticast mode [ 2018.798979][T13513] bridge_slave_0: entered promiscuous mode [ 2018.827056][T13513] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.851250][T13513] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.871537][T13513] bridge_slave_1: entered allmulticast mode [ 2018.888257][T13513] bridge_slave_1: entered promiscuous mode [ 2018.901247][T13512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2018.946138][T13512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2019.062857][T13513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2019.095077][T13513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2019.118388][T13512] team0: Port device team_slave_0 added [ 2019.162981][T13512] team0: Port device team_slave_1 added [ 2019.264663][T13513] team0: Port device team_slave_0 added [ 2019.281250][T13513] team0: Port device team_slave_1 added [ 2019.287488][T13512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2019.312253][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.351575][T13512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2019.380103][T13512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2019.387097][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.415899][T13512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2019.454541][T13513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2019.464266][T13513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.491851][T13513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2019.515820][T13513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2019.524168][T13513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.560341][T13513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2019.579245][T11591] Bluetooth: hci1: command tx timeout [ 2019.662404][T11591] Bluetooth: hci6: command tx timeout [ 2019.673268][T13512] hsr_slave_0: entered promiscuous mode [ 2019.681538][T13512] hsr_slave_1: entered promiscuous mode [ 2019.687857][T13512] debugfs: 'hsr0' already exists in 'hsr' [ 2019.694314][T13512] Cannot create hsr debugfs directory [ 2019.752227][T13513] hsr_slave_0: entered promiscuous mode [ 2019.759926][T13513] hsr_slave_1: entered promiscuous mode [ 2019.766221][T13513] debugfs: 'hsr0' already exists in 'hsr' [ 2019.776897][T13513] Cannot create hsr debugfs directory [ 2020.583222][T13512] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2020.668149][T13512] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2020.694914][T11587] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2020.708317][T11587] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2020.717679][T11587] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2020.725751][T11587] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2020.734827][T11587] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2020.791949][T13512] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2020.864684][T13512] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2021.050018][T13513] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2021.076918][T13513] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2021.116664][T13513] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2021.140452][T13513] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2021.302107][T13512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2021.356655][T13512] 8021q: adding VLAN 0 to HW filter on device team0 [ 2021.402813][T28182] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.410060][T28182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2021.456743][T14037] chnl_net:caif_netlink_parms(): no params data found [ 2021.477942][T28182] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.485157][T28182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2021.661266][T11587] Bluetooth: hci1: command tx timeout [ 2021.740979][T11587] Bluetooth: hci6: command tx timeout [ 2021.755990][T13513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2021.772907][T14037] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.794259][T14037] bridge0: port 1(bridge_slave_0) entered disabled state [ 2021.822099][T14037] bridge_slave_0: entered allmulticast mode [ 2021.831296][T14037] bridge_slave_0: entered promiscuous mode [ 2021.855566][T14037] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.868810][T14037] bridge0: port 2(bridge_slave_1) entered disabled state [ 2021.877651][T14037] bridge_slave_1: entered allmulticast mode [ 2021.887274][T14037] bridge_slave_1: entered promiscuous mode [ 2021.915612][T13513] 8021q: adding VLAN 0 to HW filter on device team0 [ 2021.972421][T29078] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.979629][T29078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2022.013835][T29078] bridge0: port 2(bridge_slave_1) entered blocking state [ 2022.021052][T29078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2022.127205][T14037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2022.153343][T14037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2022.195113][T13513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2022.226859][T13512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2022.335079][T14037] team0: Port device team_slave_0 added [ 2022.367778][T14037] team0: Port device team_slave_1 added [ 2022.488562][T14037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2022.515333][T14037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2022.548350][T14037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2022.592291][T14037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2022.622025][T14037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2022.714727][T14037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2022.861424][T11587] Bluetooth: hci7: command tx timeout [ 2022.884808][T13513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2022.998491][T14037] hsr_slave_0: entered promiscuous mode [ 2023.048648][T14037] hsr_slave_1: entered promiscuous mode [ 2023.061054][T14037] debugfs: 'hsr0' already exists in 'hsr' [ 2023.066823][T14037] Cannot create hsr debugfs directory [ 2023.274888][T13512] veth0_vlan: entered promiscuous mode [ 2023.334979][T13512] veth1_vlan: entered promiscuous mode [ 2023.559129][T13512] veth0_macvtap: entered promiscuous mode [ 2023.605780][T13512] veth1_macvtap: entered promiscuous mode [ 2023.698981][T13513] veth0_vlan: entered promiscuous mode [ 2023.709957][T13512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2023.742785][T11587] Bluetooth: hci1: command tx timeout [ 2023.782116][T13512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2023.799162][T14037] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2023.813395][T13513] veth1_vlan: entered promiscuous mode [ 2023.821830][T11587] Bluetooth: hci6: command tx timeout [ 2023.844134][T29058] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.855835][T14037] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2023.869130][T29058] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.892407][T14037] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2023.910640][T29058] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.923123][T28182] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.943701][T14037] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2024.034384][T13513] veth0_macvtap: entered promiscuous mode [ 2024.099557][T13513] veth1_macvtap: entered promiscuous mode [ 2024.169901][T28182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.201670][T28182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.257139][T13513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2024.298320][T13513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2024.313638][T29057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.337030][T29057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.348287][T29058] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.397770][T29058] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.478355][T14037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2024.486372][T29058] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.510383][T14037] 8021q: adding VLAN 0 to HW filter on device team0 [ 2024.566875][T29058] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.612292][T29058] bridge0: port 1(bridge_slave_0) entered blocking state [ 2024.619445][T29058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2024.684369][T29058] bridge0: port 2(bridge_slave_1) entered blocking state [ 2024.691613][T29058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2024.880275][T25485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.911599][T25485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.941812][T11587] Bluetooth: hci7: command tx timeout [ 2025.086534][T25477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2025.132469][T25477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2025.788328][T14037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2025.823922][T11587] Bluetooth: hci1: command tx timeout [ 2025.902294][T11587] Bluetooth: hci6: command tx timeout [ 2026.410866][T14421] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2026.593979][T14424] netlink: 342 bytes leftover after parsing attributes in process `syz.7.6724'. [ 2027.024380][T11587] Bluetooth: hci7: command tx timeout [ 2027.199408][T14037] veth0_vlan: entered promiscuous mode [ 2027.307729][T14037] veth1_vlan: entered promiscuous mode [ 2027.440640][T14037] veth0_macvtap: entered promiscuous mode [ 2027.480964][T14037] veth1_macvtap: entered promiscuous mode [ 2027.564592][T14037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2027.594059][T14037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2027.628102][T28182] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.651035][T28182] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.727380][T28182] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.965425][T28182] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.197455][T28182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2028.224487][T28182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2028.355253][T29058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2028.375714][T29058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2028.677563][T14503] zram: Cannot change disksize for initialized device [ 2029.104503][T11587] Bluetooth: hci7: command tx timeout [ 2038.075891][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.082241][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.509163][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.523851][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2142.552270][T11591] Bluetooth: hci6: command 0x0406 tx timeout [ 2142.561712][T11591] Bluetooth: hci1: command 0x0406 tx timeout [ 2147.663702][T11591] Bluetooth: hci7: command 0x0406 tx timeout [ 2158.383292][ T31] INFO: task syz-executor:27855 blocked for more than 143 seconds. [ 2158.391825][ T31] Tainted: G L syzkaller #0 [ 2158.403937][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2158.412655][ T31] task:syz-executor state:D stack:24232 pid:27855 tgid:27855 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2158.430599][ T31] Call Trace: [ 2158.434648][ T31] [ 2158.438554][ T31] __schedule+0xfee/0x6120 [ 2158.453316][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2158.458317][ T31] ? __pfx___schedule+0x10/0x10 [ 2158.470831][ T31] ? find_held_lock+0x2b/0x80 [ 2158.485260][ T31] ? schedule+0x2bf/0x390 [ 2158.493007][ T31] schedule+0xdd/0x390 [ 2158.512860][ T31] schedule_preempt_disabled+0x13/0x30 [ 2158.518407][ T31] __mutex_lock+0xc9a/0x1b90 [ 2158.537337][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 2158.551049][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2158.603184][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2158.608287][ T31] ? net_generic+0xea/0x2a0 [ 2158.668424][ T31] ? net_generic+0xea/0x2a0 [ 2158.694133][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 2158.699482][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 2158.722803][ T31] nfsd_umount+0x3b/0x60 [ 2158.727129][ T31] deactivate_locked_super+0xc1/0x1b0 [ 2158.732533][ T31] deactivate_super+0xe7/0x110 [ 2158.755416][ T31] cleanup_mnt+0x21f/0x450 [ 2158.759918][ T31] task_work_run+0x150/0x240 [ 2158.773791][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2158.792811][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 2158.821446][ T31] do_syscall_64+0x668/0xf80 [ 2158.834498][ T31] ? clear_bhb_loop+0x40/0x90 [ 2158.839246][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2158.853543][ T31] RIP: 0033:0x7f5fb479da57 [ 2158.858011][ T31] RSP: 002b:00007ffeeea84b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2158.892824][ T31] RAX: 0000000000000000 RBX: 00007f5fb4832048 RCX: 00007f5fb479da57 [ 2158.909787][ T31] RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ffeeea85c50 [ 2158.932813][ T31] RBP: 00007ffeeea85c3c R08: 0000000000000000 R09: 0000000000000000 [ 2158.940861][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeeea85c50 [ 2158.963601][ T31] R13: 00007f5fb4832048 R14: 00000000001e9688 R15: 00007ffeeea85c90 [ 2158.971640][ T31] [ 2158.993550][ T31] INFO: task syz-executor:28143 blocked for more than 143 seconds. [ 2159.034910][ T31] Tainted: G L syzkaller #0 [ 2159.041483][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2159.057763][ T31] task:syz-executor state:D stack:23400 pid:28143 tgid:28143 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2159.070104][ T31] Call Trace: [ 2159.074395][ T31] [ 2159.077356][ T31] __schedule+0xfee/0x6120 [ 2159.081804][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2159.089092][ T31] ? __pfx___schedule+0x10/0x10 [ 2159.098696][ T31] ? find_held_lock+0x2b/0x80 [ 2159.105128][ T31] ? schedule+0x2bf/0x390 [ 2159.109521][ T31] schedule+0xdd/0x390 [ 2159.117466][ T31] schedule_preempt_disabled+0x13/0x30 [ 2159.123267][ T31] __mutex_lock+0xc9a/0x1b90 [ 2159.127886][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 2159.133978][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2159.139114][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2159.147307][ T31] ? net_generic+0xea/0x2a0 [ 2159.151888][ T31] ? net_generic+0xea/0x2a0 [ 2159.156867][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 2159.162214][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 2159.167752][ T31] nfsd_umount+0x3b/0x60 [ 2159.172046][ T31] deactivate_locked_super+0xc1/0x1b0 [ 2159.177893][ T31] deactivate_super+0xe7/0x110 [ 2159.184380][ T31] cleanup_mnt+0x21f/0x450 [ 2159.190669][ T31] task_work_run+0x150/0x240 [ 2159.195719][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2159.200880][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 2159.211164][ T31] do_syscall_64+0x668/0xf80 [ 2159.220910][ T31] ? clear_bhb_loop+0x40/0x90 [ 2159.225884][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2159.231811][ T31] RIP: 0033:0x7fe3f5b9da57 [ 2159.236673][ T31] RSP: 002b:00007ffe879cd3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2159.245388][ T31] RAX: 0000000000000000 RBX: 00007fe3f5c32048 RCX: 00007fe3f5b9da57 [ 2159.255718][ T31] RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ffe879ce4f0 [ 2159.268466][ T31] RBP: 00007ffe879ce4dc R08: 0000000000000000 R09: 0000000000000000 [ 2159.276803][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe879ce4f0 [ 2159.285762][ T31] R13: 00007fe3f5c32048 R14: 00000000001e8a6d R15: 00007ffe879ce530 [ 2159.296516][ T31] [ 2159.341629][ T31] INFO: task syz-executor:6941 blocked for more than 144 seconds. [ 2159.384865][ T31] Tainted: G L syzkaller #0 [ 2159.413724][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2159.442806][ T31] task:syz-executor state:D stack:23864 pid:6941 tgid:6941 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2159.462828][ T31] Call Trace: [ 2159.466155][ T31] [ 2159.469098][ T31] __schedule+0xfee/0x6120 [ 2159.493637][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2159.498666][ T31] ? __pfx___schedule+0x10/0x10 [ 2159.511200][ T31] ? find_held_lock+0x2b/0x80 [ 2159.525020][ T31] ? schedule+0x2bf/0x390 [ 2159.529439][ T31] schedule+0xdd/0x390 [ 2159.544308][ T31] schedule_preempt_disabled+0x13/0x30 [ 2159.549920][ T31] __mutex_lock+0xc9a/0x1b90 [ 2159.572815][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 2159.578256][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2159.592826][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2159.603035][ T31] ? net_generic+0xea/0x2a0 [ 2159.607611][ T31] ? net_generic+0xea/0x2a0 [ 2159.612145][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 2159.659078][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 2159.673504][ T31] nfsd_umount+0x3b/0x60 [ 2159.677802][ T31] deactivate_locked_super+0xc1/0x1b0 [ 2159.694870][ T31] deactivate_super+0xe7/0x110 [ 2159.704183][ T31] cleanup_mnt+0x21f/0x450 [ 2159.708740][ T31] task_work_run+0x150/0x240 [ 2159.713824][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2159.719676][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 2159.729018][ T31] do_syscall_64+0x668/0xf80 [ 2159.734006][ T31] ? clear_bhb_loop+0x40/0x90 [ 2159.738749][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2159.745060][ T31] RIP: 0033:0x7f1430f9da57 [ 2159.749523][ T31] RSP: 002b:00007ffef9e07568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2159.762465][ T31] RAX: 0000000000000000 RBX: 00007f1431032048 RCX: 00007f1430f9da57 [ 2159.771780][ T31] RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ffef9e086b0 [ 2159.780074][ T31] RBP: 00007ffef9e0869c R08: 0000000000000000 R09: 0000000000000000 [ 2159.788342][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef9e086b0 [ 2159.796596][ T31] R13: 00007f1431032048 R14: 00000000001ea277 R15: 00007ffef9e086f0 [ 2159.808648][ T31] [ 2159.844300][ T31] INFO: task syz.6.6695:13248 blocked for more than 144 seconds. [ 2159.872112][ T31] Tainted: G L syzkaller #0 [ 2159.880079][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2159.889531][ T31] task:syz.6.6695 state:D stack:26536 pid:13248 tgid:13247 ppid:8045 task_flags:0x400140 flags:0x00080002 [ 2159.901821][ T31] Call Trace: [ 2159.907544][ T31] [ 2159.910504][ T31] __schedule+0xfee/0x6120 [ 2159.917360][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2159.923373][ T31] ? __pfx___schedule+0x10/0x10 [ 2159.928272][ T31] ? find_held_lock+0x2b/0x80 [ 2159.936829][ T31] ? schedule+0x2bf/0x390 [ 2159.941241][ T31] schedule+0xdd/0x390 [ 2159.945735][ T31] schedule_preempt_disabled+0x13/0x30 [ 2159.951255][ T31] __mutex_lock+0xc9a/0x1b90 [ 2159.956302][ T31] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 2159.962060][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2159.967486][ T31] ? net_generic+0xea/0x2a0 [ 2159.972013][ T31] ? net_generic+0xea/0x2a0 [ 2159.981378][ T31] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 2159.988479][ T31] nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 2159.994378][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 2159.999961][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2160.008136][ T31] ? genl_get_cmd+0x3ef/0x720 [ 2160.013137][ T31] ? bpf_lsm_capable+0x9/0x10 [ 2160.017854][ T31] ? security_capable+0x80/0x260 [ 2160.026011][ T31] genl_rcv_msg+0x560/0x800 [ 2160.030565][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2160.039475][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 2160.045903][ T31] netlink_rcv_skb+0x159/0x420 [ 2160.050694][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2160.056120][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2160.061449][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2160.067666][ T31] genl_rcv+0x28/0x40 [ 2160.071692][ T31] netlink_unicast+0x5aa/0x870 [ 2160.076883][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2160.082206][ T31] netlink_sendmsg+0x8b0/0xda0 [ 2160.092044][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2160.098692][ T31] ? __import_iovec+0x1d2/0x640 [ 2160.103858][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2160.111298][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 2160.117020][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2160.122334][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2160.128632][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 2160.140286][ T31] ___sys_sendmsg+0x190/0x1e0 [ 2160.145305][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 2160.150568][ T31] __sys_sendmsg+0x170/0x220 [ 2160.155660][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 2160.160813][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 2160.166149][ T31] do_syscall_64+0x106/0xf80 [ 2160.170767][ T31] ? clear_bhb_loop+0x40/0x90 [ 2160.175880][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.181795][ T31] RIP: 0033:0x7f2763d9c819 [ 2160.186575][ T31] RSP: 002b:00007f2764b9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2160.199833][ T31] RAX: ffffffffffffffda RBX: 00007f2764015fa0 RCX: 00007f2763d9c819 [ 2160.209179][ T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000006 [ 2160.219259][ T31] RBP: 00007f2763e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 2160.228486][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2160.241188][ T31] R13: 00007f2764016038 R14: 00007f2764015fa0 R15: 00007ffc51843c28 [ 2160.251615][ T31] [ 2160.278384][ T31] [ 2160.278384][ T31] Showing all locks held in the system: [ 2160.314951][ T31] 1 lock held by pool_workqueue_/3: [ 2160.320200][ T31] 2 locks held by kworker/0:1/10: [ 2160.327768][ T31] #0: ffff8880b843b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 2160.338979][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 2160.351640][ T31] 1 lock held by khungtaskd/31: [ 2160.359019][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2160.369484][ T31] 2 locks held by getty/22561: [ 2160.374991][ T31] #0: ffff888038b400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2160.385152][ T31] #1: ffffc9000385b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 2160.395678][ T31] 2 locks held by syz-executor/27855: [ 2160.401061][ T31] #0: ffff88804682e0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 2160.411901][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 2160.428531][ T31] 2 locks held by syz-executor/28143: [ 2160.435153][ T31] #0: ffff888061bda0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 2160.449233][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 2160.459163][ T31] 4 locks held by kworker/u11:37/28182: [ 2160.467787][ T31] #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 2160.478511][ T31] #1: ffffc90003e17d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 2160.488770][ T31] #2: ffffffff905fe050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 2160.498422][ T31] #3: ffffffff906168a8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x250 [ 2160.508110][ T31] 2 locks held by syz.1.6016/6424: [ 2160.513487][ T31] #0: ffffffff906c2bd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2160.524522][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 2160.540808][ T31] 2 locks held by syz-executor/6941: [ 2160.550211][ T31] #0: ffff8880347d00e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 2160.560941][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 2160.570877][ T31] 2 locks held by syz.6.6695/13248: [ 2160.578718][ T31] #0: ffffffff906c2bd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2160.587270][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 2160.597646][ T31] 2 locks held by syz-executor/13512: [ 2160.603320][ T31] #0: ffffffff906168a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 2160.612339][ T31] #1: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 2160.625017][ T31] 2 locks held by syz-executor/13513: [ 2160.630433][ T31] #0: ffff88808e17e0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 2160.651779][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 2160.673801][ T31] [ 2160.676178][ T31] ============================================= [ 2160.676178][ T31] [ 2160.706267][ T31] NMI backtrace for cpu 0 [ 2160.706291][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2160.706325][ T31] Tainted: [L]=SOFTLOCKUP [ 2160.706334][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2160.706348][ T31] Call Trace: [ 2160.706355][ T31] [ 2160.706365][ T31] dump_stack_lvl+0x100/0x190 [ 2160.706406][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2160.706463][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2160.706501][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2160.706538][ T31] sys_info+0x141/0x190 [ 2160.706564][ T31] watchdog+0xd25/0x1050 [ 2160.706597][ T31] ? __pfx_watchdog+0x10/0x10 [ 2160.706622][ T31] ? __kthread_parkme+0x18c/0x230 [ 2160.706653][ T31] ? kthread+0x13a/0x450 [ 2160.706684][ T31] ? __pfx_watchdog+0x10/0x10 [ 2160.706705][ T31] kthread+0x370/0x450 [ 2160.706736][ T31] ? __pfx_kthread+0x10/0x10 [ 2160.706770][ T31] ret_from_fork+0x754/0xd80 [ 2160.706808][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2160.706846][ T31] ? __switch_to+0x7b4/0x1120 [ 2160.706873][ T31] ? __pfx_kthread+0x10/0x10 [ 2160.706907][ T31] ret_from_fork_asm+0x1a/0x30 [ 2160.706947][ T31] [ 2160.872390][T28182] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.891670][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2160.898573][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2160.909262][ T31] Tainted: [L]=SOFTLOCKUP [ 2160.913603][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2160.923676][ T31] Call Trace: [ 2160.926983][ T31] [ 2160.929924][ T31] dump_stack_lvl+0x100/0x190 [ 2160.934625][ T31] vpanic+0x552/0x970 [ 2160.938616][ T31] ? __pfx_vpanic+0x10/0x10 [ 2160.943136][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2160.949319][ T31] panic+0xd1/0xe0 [ 2160.953068][ T31] ? __pfx_panic+0x10/0x10 [ 2160.957514][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2160.963699][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2160.969900][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2160.976077][ T31] ? watchdog.cold+0x198/0x1ca [ 2160.980854][ T31] ? watchdog+0xd35/0x1050 [ 2160.985282][ T31] watchdog.cold+0x1a9/0x1ca [ 2160.989898][ T31] ? __pfx_watchdog+0x10/0x10 [ 2160.994589][ T31] ? __kthread_parkme+0x18c/0x230 [ 2160.999641][ T31] ? kthread+0x13a/0x450 [ 2161.003902][ T31] ? __pfx_watchdog+0x10/0x10 [ 2161.008680][ T31] kthread+0x370/0x450 [ 2161.012788][ T31] ? __pfx_kthread+0x10/0x10 [ 2161.017492][ T31] ret_from_fork+0x754/0xd80 [ 2161.022198][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2161.027427][ T31] ? __switch_to+0x7b4/0x1120 [ 2161.032138][ T31] ? __pfx_kthread+0x10/0x10 [ 2161.036751][ T31] ret_from_fork_asm+0x1a/0x30 [ 2161.041546][ T31] [ 2161.044635][ T31] Kernel Offset: disabled [ 2161.048976][ T31] Rebooting in 86400 seconds..