last executing test programs: 6m39.351908807s ago: executing program 3 (id=1057): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xa00002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) io_uring_setup$auto(0x59, 0x0) (async) r0 = io_uring_setup$auto(0x59, 0x0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)="a2e2ec19a96e87f8e3e85b40c3c951810b4dab6c7840255ab6e97da6d1e22b38fb4590cfd8b489a2ea9d16d0bfda088b215794b5c5a07ddfc79307eb9183860547768a2b3dd234e40641a4beaa2b0f6078346a2cbffd67ad365e8ba6242e8774c2aa946c4e3b02a1cfafaafccd39b1d97a0367328f4b634bbd9f8d36bab40953405ba3d2b60384b7c14800f4481b0000000000000015f93288d2e1b0f24afcbe21dcf7cbec2587e1a959ba92a606") (async) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)="a2e2ec19a96e87f8e3e85b40c3c951810b4dab6c7840255ab6e97da6d1e22b38fb4590cfd8b489a2ea9d16d0bfda088b215794b5c5a07ddfc79307eb9183860547768a2b3dd234e40641a4beaa2b0f6078346a2cbffd67ad365e8ba6242e8774c2aa946c4e3b02a1cfafaafccd39b1d97a0367328f4b634bbd9f8d36bab40953405ba3d2b60384b7c14800f4481b0000000000000015f93288d2e1b0f24afcbe21dcf7cbec2587e1a959ba92a606") mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) (async) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) (async) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x7c, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e0054c9e474be535fd29da000000", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"}) (async) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x7c, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e0054c9e474be535fd29da000000", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto(0x3, 0x40086203, 0xffffffffffffffff) setresuid$auto(0x2, 0x7, 0x8080) r3 = clone$auto(0x6fc, 0x4dbb2, 0x0, 0x0, 0x4000c1a) tkill$auto(r3, 0x9) fsconfig$auto(r1, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r2) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) (async) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) process_mrelease$auto(0xffffffffffffffff, 0xa) (async) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) 6m37.444464735s ago: executing program 3 (id=1064): unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x480008, 0xde, 0x9b72, 0x7, 0x800008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0x80045300, 0x38) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 6m35.766005947s ago: executing program 3 (id=1068): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x10000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x10) socket(0x15, 0x5, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000380)=' U\x15\xa2t\xe0\x1b\xb0\xff\xe8\x91@\x88\n\x92\xf1rL\x9c\rg-\xcc]\x0e\x06\x03\a0k\x85&YS\xb0;\xfd\xd6\x0eH\xb3 \xc2`\xbc\xec\f\xd0\x97\x19\xa6Y\xb0\x15Z/\xe2\xc3\x8e\xc1\xa7v\xe3\xc3\xb0d\x86\x8f\x86\x14S\xdc\xe2G\xb5\x8dN%\x84\xa3\xb4\xb8!\xf9\x01=4T\xb2\xff\xb6\x9dx\x1e\x8dU\xbe*\xa5\xe4q\xd23\xdf\xcce\x17\xc1WX\x0e\xb5\x16\xe6>R\x1b\xf6', 0x6) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x89e0, 0x38) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x70) r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x40000, 0x0) getsockopt$auto_SO_LINGER(r1, 0x4, 0xd, &(0x7f00000000c0)='*}\x00', &(0x7f0000000180)=0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_mr_cache\x00', 0x0, 0x0) pread64$auto(r4, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x5) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) 6m34.756517531s ago: executing program 3 (id=1075): bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x882, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_register$auto_IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x401) io_uring_setup$auto(0x3, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0xa, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 6m34.523210924s ago: executing program 3 (id=1077): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2c, 0x5, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) (async, rerun: 32) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x7) (async, rerun: 32) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (rerun: 32) writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x5) (async) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1\x00'}) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) (async, rerun: 64) r8 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x12042, 0x0) (rerun: 64) ioctl$auto_TUNSETGROUP(r8, 0x400454ce, &(0x7f0000000240)=0x374) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 6m32.254900338s ago: executing program 1 (id=1088): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x70080, 0x0) bpf$auto(0x5, &(0x7f0000000080)=@batch={0x9, 0xfffffffffffff800, 0x39, 0xb, 0x2, 0xffffffffffffffff, 0x0, 0x100000001}, 0x5) mmap$auto(0x0, 0x7fffffff, 0x3, 0xeb1, r0, 0x8000) madvise$auto(0x8, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) prctl$auto(0x3c, 0x2, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x80001) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200000000002000e, 0x8, 0x8011, 0x404, 0x3) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) r4 = socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_prog_fd=r2}, 0xa3) bpf$auto(0x4, &(0x7f0000000040)=@link_update={r5, @new_prog_fd=r6, 0x1, @old_prog_fd=r3}, 0x9) 6m31.912121565s ago: executing program 1 (id=1089): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pimreg0\x00'}) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$auto(0x3, &(0x7f00000001c0)=@bpf_attr_1={0xffffffffffffffff, 0x5, @value=0x6}, 0xc) r1 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010329bd700002dcdf25050000000c0001cce55a8800000000000c00010000000100000000000c0098d60e00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008810}, 0x880) socket(0x18, 0x2, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0x2, 0x6) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f0000000800"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) getsockopt$auto_SO_NETNS_COOKIE(r1, 0x8, 0x47, &(0x7f0000000280)='\x00', &(0x7f0000000300)=0x6) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x80805, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x100, 0x81) select$auto(0x4, 0x0, 0x0, 0x0, 0x0) sendto$auto(r0, 0x0, 0x402, 0xfffffffe, &(0x7f0000000000)=@llc={0x1a, 0x323, 0xa, 0x2, 0x2, 0x4}, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@token_create={0x1}, 0x6f6) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) 6m31.270378949s ago: executing program 3 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x84) getsockopt$auto(r4, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x81, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f0000000100)=""/147, 0x93) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80a40, 0x99) read$auto(r6, 0x0, 0x8004000000) write$auto(r5, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fe5ae78fb32c220029bd7000ffdbdf25050000000c", @ANYRES32=r7, @ANYBLOB="180001801400020073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) 6m30.896750801s ago: executing program 32 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x84) getsockopt$auto(r4, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x81, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f0000000100)=""/147, 0x93) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80a40, 0x99) read$auto(r6, 0x0, 0x8004000000) write$auto(r5, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fe5ae78fb32c220029bd7000ffdbdf25050000000c", @ANYRES32=r7, @ANYBLOB="180001801400020073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) 6m30.887175761s ago: executing program 1 (id=1095): bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x882, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_register$auto_IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x401) io_uring_setup$auto(0x3, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0xa, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 6m30.762015767s ago: executing program 1 (id=1096): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x4802, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) mbind$auto(0x7, 0x8, 0xfffffffffffffff7, &(0x7f0000000040)=0x8, 0x2, 0x4) (rerun: 64) r2 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000000c0)={0xb, 0x0, [{0x9, 0x264, 0x521}, {0xb0fb, 0x2d1d, 0x8}, {0x5, 0x9, 0x80}]}) mbind$auto(0x5, 0xc8e, 0x0, &(0x7f0000000100)=0x6, 0x7, 0x6) (async) mbind$auto(0x0, 0xac8, 0x8, &(0x7f0000000140)=0xa, 0x3, 0x0) (async) getsockopt$auto_SO_DONTROUTE(r0, 0x0, 0x5, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x101) (async) r3 = socket(0x5, 0x2, 0xd) ioctl$auto_EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000200)=0xfffffff9) (async) ioctl$auto_EXT4_IOC_GETVERSION_OLD(r1, 0x80087601, &(0x7f0000000240)="cd56cd8933ae608fb16381d319471304d19cea171a31c8fd364547d2f1440ff5a4afa5a66585f406ce55d9c173ace8b23214a9d994312647a1f3f94a847ceea02b1576a798cb") (async) ioctl$auto_EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000002c0)=0x17a) (async) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000340), r3) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) (async) r5 = bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000440)=@bpf_attr_5={@target_fd=r3, r3, 0x3, 0x7, r0, @relative_id=0x401, 0x5}, 0x7) (async, rerun: 32) r8 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/tracing/dynamic_events\x00', 0x4, 0x0) (rerun: 32) r9 = bpf$auto(0x9, &(0x7f0000000540)=@info={r8, 0xfffffff5, 0x4}, 0x10001) ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r10, 0x7b9, 0x0) (async) setsockopt$auto_SO_SNDBUFFORCE(r6, 0x7ff, 0x20, &(0x7f0000000600)='^-\x00', 0x7) (async, rerun: 64) r11 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/virtual/bluetooth/hci5/rfkill10/power/autosuspend_delay_ms\x00', 0x121002, 0x0) (rerun: 64) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r11, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x98, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffff0a}, @NL80211_ATTR_FILS_NONCES={0x6a, 0xf3, "ab62c3861bd35c8c15299b557128852f2e2ca690a684b9820b1f4edf63ffc57704bc08c876e69f3e6288e53a6493b5e40ef66e0079ba140d3669702937b43eb54217486e0f90369548b2b0d0d0db15c4010751c1e83f12cd7216f29a6903319a9c4c17cdeab7"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x32f2}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6cdf}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x2804) (async) sendmmsg$auto(r7, &(0x7f0000000ac0)={{&(0x7f0000000840)="f8e11e3bc280444dddb1a6aa542555dbcf103619179e46db3ce279bd77c295a65ef65b9dfbda9a21b95ad28b366f96842360df0320ac17d3f11dcc2b6c76e5feacd46f46b3221ca8f5e95b96217e930df931e1c856650c63a2a2610d2abb6bc78b9a3ab190c3dafdf310605cac95c648f7811084f6f5ac6375508660ad184412549ba6d6c47214debe15af3e4fb1993bbb57ca113ba4fdfd09200bf256e90b492e2ac1c3a5ade78f38c17748eb09de686b49882c03d5d938b2ac9e999b5827651d627ab7071f5f9e0d111cf1", 0x7, &(0x7f0000000a40)={&(0x7f0000000940)="184cedd51793f62e1e5ba9f2a0e6b3d5ea5c7f85db564809a191c4c07e5496192269f0e4fcdd2894295448c8aa6d4f1e0b2917496c433a9e286c5ac65a9a015e8eb9fa9e0038f0d6cce8491e7557491ace0863d4b2e853f0e9988703fdb6332d2053dc3cba2a16fb6d1d82b95b6f6f827f47e2a5257d1b19adc3ae0fde71a246b058c940af57264c172e2784f8585a27c5c1ddb9eb51b957f3ed312df39caa33752233523ccedb508d5e66e3ccfb6aeada6bdf395ac715644a66f7c2b4111b1a91ddb69ab7811de6be58d92e326d93fe56a1105a17445882", 0x800}, 0x9, &(0x7f0000000a80)="d3fa602682ce4acf16ac4cb21ea936c4c7d539ef0d", 0xd, 0xd}, 0x2}, 0x7, 0x0) getdents64$auto(r2, &(0x7f0000000b00)={0x7, 0x6, 0x509, 0x8, "6bde8732fa267a4490d865fa2f5d8cac74a0dff4682a17de5a2d3892708b60f7e6182c78703a422d4f777869087aeb7a5126dc4f72221a7ec006c4d57cf92a6d99271010a468f9eaf772ad0fe86ee26247f692cc1225a5e9112da2c18fa7f0fcad65c6f4a5a6f156017b716c09f6942f7272c60c9c199c650f301988938f244e3aa50d1044ecac0f5a12c023e28a43abff8b96f13fd05626f381db2f65a4962458cf3dad86ab8412173f645166d3601335e9646204b2fd7852823eb8f05b921a"}, 0x0) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xbc, r4, 0x902, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL_PAGE_LIST={0x84, 0x1e, "4f550a5aabc21141b14cffec6fb4616aacd218de2c318c604dc006637cc03f92753b33cf0194db4017bf96d0ff651a4e88ce395b6ed3215ca9609e503b825bd44e78638862978996fa4dc087bc9100f4a046217f21c6f5d793db32805320aa167e69df883999fc88e942f25b3b1ec192a5dfe22cce63ba8b7f4ede49407b29e1"}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5ce5e2d2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x95}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xae}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) (async) r12 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000d80)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/dormant_links\x00', 0x50801, 0x0) write$auto_fops_x16_ro_(r12, &(0x7f0000000dc0)="ca750f2097dce69bb072e94af6d4e66356b43049f644e44db615d8f699789051ee13ccf2f9a28106a2ba9b956cac57de981b1fa15f08", 0x36) ioctl$auto_EXT4_IOC_RESIZE_FS(r7, 0x40086610, &(0x7f0000000e00)=0x166) (async) madvise$auto(0x8, 0x4, 0x4) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/platform/vhci_hcd.15/usb39/39-0:1.0/usb39-port6/quirks\x00', 0x60500, 0x0) (rerun: 32) sendfile$auto(r5, r3, &(0x7f0000000ec0), 0x5) 6m30.532724618s ago: executing program 1 (id=1098): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppol2tp\x00', 0x40280, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/num_ps_buf_frames\x00', 0x80180, 0x0) readv$auto(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0x1}, 0x4) sendmsg$auto_SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000440)={0x0, 0xf000, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r2, 0x323, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x20008804) mmap$auto(0x0, 0x400000400008, 0xdf, 0x9b72, 0x2, 0x8) r4 = socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) capget$auto(0x0, &(0x7f0000000140)={0xffffff81, 0x6, 0x3}) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r6, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xc, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000300)=""/251, 0xfb) r7 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r7, 0x400, 0x1) 6m30.403633945s ago: executing program 1 (id=1099): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/queues/tx-3/xps_cpus\x00', 0x181482, 0x0) read$auto(r1, 0x0, 0x5) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto_TUNGETVNETBE2(r2, 0x800454df, &(0x7f0000000100)=0x2) sysfs$auto(0x2, 0x42, 0x0) capset$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdf3) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x802}, 0x4000000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) mmap$auto(0x0, 0x66e, 0x80, 0x20eb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) set_mempolicy$auto(0x6, &(0x7f00000000c0)=0x3, 0x3085) unshare$auto(0x40000000002003) r3 = open(0x0, 0x2b95fb4f060bd621, 0x45) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d9) socket(0x2, 0x1, 0x0) prctl$auto(0x6, 0x4, 0x0, 0x1, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={"6c00cf81000300ffffffffffffff291d00", 0x3f7, 0x408, 0xffc, 0x400004, 0x200000000040000b}) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) pread64$auto(0xffffffffffffffff, 0x0, 0x40000000f42c, 0x80002) madvise$auto(0x0, 0x8, 0x19) 6m14.515266269s ago: executing program 33 (id=1099): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/queues/tx-3/xps_cpus\x00', 0x181482, 0x0) read$auto(r1, 0x0, 0x5) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto_TUNGETVNETBE2(r2, 0x800454df, &(0x7f0000000100)=0x2) sysfs$auto(0x2, 0x42, 0x0) capset$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdf3) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002cbd7000fddbdf251900000004000180040007808735813d0bd25aa039b92bbe156e2b1fbd33cb2d0429e1d7b4b94cef02dec9a53a4c0f0e4f91d93bb879c3d55684a44dc8381b9e706dcf957718448a8b79ecfdc3204cfe27d0008487b5a1e5840ed53712ae59bdba64a96a4ec8e25d3605ce0ab0044f90b32716c499df392d7d2a3e3c08f5798b6ef9006fc8d63432a7d6880218d4747d0c36f976165025b69a3cfba8eaabee553dcd302aaf6885aabe6828308f79b06bd4132de5f5f1e8bd67af3dff47386fe686ad0b4256553defe3f774b68cb9173d0370fa5f3c0f7136f65eda0f1620e988810b255c3552c66be35fd485d0b6e0fc4e7bfa332a26ab21ef07d736352d4a"], 0x1c}, 0x1, 0x0, 0x0, 0x802}, 0x4000000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) mmap$auto(0x0, 0x66e, 0x80, 0x20eb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) set_mempolicy$auto(0x6, &(0x7f00000000c0)=0x3, 0x3085) unshare$auto(0x40000000002003) r3 = open(0x0, 0x2b95fb4f060bd621, 0x45) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d9) socket(0x2, 0x1, 0x0) prctl$auto(0x6, 0x4, 0x0, 0x1, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={"6c00cf81000300ffffffffffffff291d00", 0x3f7, 0x408, 0xffc, 0x400004, 0x200000000040000b}) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) pread64$auto(0xffffffffffffffff, 0x0, 0x40000000f42c, 0x80002) madvise$auto(0x0, 0x8, 0x19) 1m29.471705016s ago: executing program 4 (id=1966): r0 = prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) shmdt$auto(&(0x7f0000000000)='(\x00') mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2181, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000100)=0x3d2) r3 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000080), 0x48102, 0x0) writev$auto(r3, &(0x7f0000005ec0)={&(0x7f0000005e40), 0x5}, 0x6) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x201, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x5}, 0xa) getsockopt$auto_SO_REUSEADDR(r0, 0x8000, 0x2, &(0x7f0000000040)='^\x92[\x00', &(0x7f00000000c0)=0x6) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/failslab/probability\x00', 0x22042, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto(0xffffffffffffffff, &(0x7f0000000100)='!}*[\\@:[\xd5\xe5\xc5/\xa5', 0xc) write$auto(0x3, 0x0, 0x100082) getrlimit$auto(0x8, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000f7dbdf6503000010180001801400020077797a5f74756ee5ffffff000000000005000300000000000500000101000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) ioctl$auto_BLKZEROOUT(r5, 0x127f, 0x0) 1m27.068567472s ago: executing program 4 (id=1974): r0 = prctl$auto_PR_SET_VMA_ANON_NAME(0xa8f, 0x0, 0xffffffffffffffff, 0x6, 0x2000) ioctl$auto_BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0x7, 0xe71, 0x2, 0x3, @compress_type=0x80000001}) (async) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x100, 0x0) (async) r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/buffer_percent\x00', 0x389900, 0x0) close_range$auto(r2, r1, 0x897) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) r3 = socket(0xa, 0x801, 0x84) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) setsockopt$auto(r3, 0x10000000084, 0x0, 0x0, 0x10) (async) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x147cc3, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400007, 0x10000000de, 0x9b72, 0xffffffffffffffff, 0x100000) unshare$auto(0x40000080) (async) unshare$auto(0x21) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/bdi/252:0/min_ratio_fine\x00', 0xc0082, 0x0) sendfile$auto(r6, r6, 0x0, 0xef3) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) close_range$auto(0x2, 0xa, 0x0) setgroups$auto(0xe32, 0x0) (async) mmap$auto(0x8000, 0x2, 0x5, 0xb058, r5, 0xfffffffffffffffc) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) clone3$auto(&(0x7f0000000400)={0x100008000, 0x980, 0x4, 0x6, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3}, 0x40) 1m24.780693915s ago: executing program 4 (id=1984): mmap$auto(0xfffffffffffffffe, 0x200006, 0x3, 0x40eb1, 0xffffffffffffffff, 0x300000000000) socket(0xf, 0x3, 0x2) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd07, &(0x7f00000001c0)) io_uring_enter$auto(r0, 0xe, 0xc3, 0x8, &(0x7f0000000240)="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", 0x3) r1 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0xa0800, 0x0) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)=@test={r1, 0x4, 0x4, 0x2, 0x5, 0x104, 0x2, 0x0, 0x9, 0x0, 0x9, 0x1, 0x8, 0x82, 0x5}, 0x9) ioctl$auto_FIOCLEX(r0, 0x5451, 0x5) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a6, 0x7000020) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) mmap$auto(0x1, 0x9, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x29, 0x800, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() mremap$auto(0xf2a, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x7) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m23.645090292s ago: executing program 4 (id=1986): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB='i\x00Q'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/mounts\x00', 0x408200, 0x0) fsconfig$auto_SHMEM_HUGE_FORCE(r1, 0x9e, &(0x7f0000000340)='/dev/input/event0\x00', &(0x7f0000000380)="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", 0xfffffffffffffffe) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r2 = openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/zswap/written_back_pages\x00', 0x6142, 0x0) close_range$auto(r2, r2, 0xfffffff9) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r3 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001380), 0x40, 0x0) fallocate$auto(r3, 0x57, 0x7, 0x1a6) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) write$auto(0x3, 0x0, 0xfffffdef) read$auto(0x3, 0x0, 0x7fffffff) socket(0x2, 0x5, 0x0) clock_nanosleep$auto(0x1, 0x200, &(0x7f0000000140)={0x0, 0x2800000a}, 0x0) io_uring_setup$auto(0x1, 0x0) socket(0x28, 0xa, 0x7fff) r4 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x0, 0x29f, 0x100, 0x7f, 0xffffffff, 0x6, 0x2}, {0x8000100, 0x1, 0x8000052, 0x5, 0x1, 0x40, 0x76c5, 0x9a, 0x100000000}}) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r6, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0xffffffffffffff95}) socket(0x2, 0x80002, 0x73) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000280)=0x401) r7 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), r5) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xdd}, @SEG6_ATTR_SECRET={0xd0, 0x4, "3ab16e3820d50cb55266fba62dd778cd8f3c058ef4caa4523f041ad54086619fa2e26b3a37cf3ae13fab4607c1314a30ffd5d9d798d944ab34abd3720a8f57199b3c87d588b5b60ea64b8a7cc061a3cd26cd2d1b3708a01a20529103f8dccdd8dee1cfc788dbcce6999dcfa6e9b4c87dcef065cd646f7edd150ba3e153616e428fd4d16f3e400ce4dda58adebdb968052090f8c0ea4c7c9299a0f20017db5995a7dbb63afec926abaa5fd8f60c0d1e287e2fa4982c6c2f0dd682e2d7c0b5c18fbb643ce172afee4733b2df20"}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x100}, 0x1, 0x0, 0x0, 0x48801}, 0x20044011) setsockopt$auto(0x3, 0x0, 0x1a, 0x0, 0x28) 1m22.323574692s ago: executing program 4 (id=1992): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80802, 0x6) (async) r0 = socket(0x2b, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, 0x0, 0x40) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2a, 0x2, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getsockopt$auto(0x6, 0x1, 0x4d, 0xfffffffffffffffe, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) pwrite64$auto(r1, 0x0, 0x4, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000003fc0), 0xffffffffffffffff) (async) sendmsg$auto_OVS_VPORT_CMD_GET(r2, &(0x7f0000004540)={0x0, 0xfffffffffffffdcf, &(0x7f0000004500)={0x0, 0x1d}, 0x1, 0x0, 0x0, 0x40081}, 0x20000c50) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x804) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmmsg$auto(r0, 0x0, 0x7, 0x20000000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x480e03, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r3 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x8, 0x0) (async) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e25, @remote}, 0x6d) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24000464}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x80009, 0x0, 0x1, 0x0, 0x4, 0x9}, 0x3}, 0x3, 0x9) 1m21.606906704s ago: executing program 4 (id=1997): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x4020009, 0xdb, 0x2000000000eb1, 0x401, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x8f}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000440)="13a550", 0x40000000001243}, 0xa, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) pread64$auto(r2, 0x0, 0x10000000d, 0x5) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfdf3) close_range$auto(0xffffffffffffffff, r2, 0x9) r3 = socket(0xa, 0x3, 0x3c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r4, 0x0, 0x8880) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0xffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pidfd_open$auto(0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0x101001, 0x0) 1m6.386360862s ago: executing program 34 (id=1997): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x4020009, 0xdb, 0x2000000000eb1, 0x401, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x8f}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000440)="13a550", 0x40000000001243}, 0xa, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) pread64$auto(r2, 0x0, 0x10000000d, 0x5) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfdf3) close_range$auto(0xffffffffffffffff, r2, 0x9) r3 = socket(0xa, 0x3, 0x3c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r4, 0x0, 0x8880) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0xffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pidfd_open$auto(0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0x101001, 0x0) 8.343577825s ago: executing program 2 (id=2215): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event2\x00', 0x101003, 0x0) r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x5c0, 0x0) mmap$auto(0x8, 0x0, 0x4000000000df, 0x4006b8, r0, 0x1) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x38, 0x3, 0xfff7ffff) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r2, 0x6) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x20401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) r4 = socket(0x10, 0x2, 0xf) r5 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r4, 0xffffffff}, 0xd) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r5, @new_prog_fd, 0x403, @old_prog_fd=r5}, 0x8) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) 7.416787493s ago: executing program 2 (id=2222): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x1c1041, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7ffff000) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r0, 0x5, &(0x7f0000000000)='\\*$@^\x00', &(0x7f0000000040)="243980ca2e415a98d88a11829a9a7b2ffe2f2abb567d8d4097d479", 0x80) 7.308117979s ago: executing program 6 (id=2223): close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x80000001, 0x4, 0x0, 0x0, 0x80800005) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r0, 0x1269, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8740, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r1, 0x0, 0x2004c081) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(0xffffffffffffffff, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, 0x0, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, 0x0) ioctl$auto_MEMGETINFO(r0, 0x80204d01, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) 6.451237529s ago: executing program 2 (id=2227): mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r0, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/lock_policy\x00', 0x82, 0x0) sendfile$auto(r1, r1, 0x0, 0x5) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) r3 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(r3, 0x1, 0x3e, 0x0, 0x23) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0xa, 0x300) socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) r4 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x121200, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-8/tx_timeout\x00', 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub0/sw_params\x00', 0x400, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0xa8246, 0x0) pread64$auto(r4, &(0x7f0000000140)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1a/sun\x00', 0x4, 0xc) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) timer_settime$auto(0x7fff, 0x188cb0f0, &(0x7f0000000000)={{0x800, 0x5}, {0x8, 0x3}}, &(0x7f00000000c0)={{0x5, 0x8000000000000001}, {0x8, 0x80008001}}) mmap$auto(0x0, 0x20009, 0x1, 0xeb1, r2, 0x7) 5.844199003s ago: executing program 6 (id=2229): openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x15, 0x5, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)={0xa, 0x4ccc0000000, 0x3, 0x9}) setsockopt$auto_SO_WIFI_STATUS(r0, 0x6, 0x29, &(0x7f0000000080)='&&%&\x00', 0xfff) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="0c00347d08001304e0cd2400"], 0x28}}, 0x400c080) sendmsg$auto_IEEE802154_LLSEC_ADD_KEY(r2, 0x0, 0x4000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7100f97bf53b7200000408000300", @ANYRES32=r7, @ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r9 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/lockdep\x00', 0xa60440, 0x0) pread64$auto(r9, 0x0, 0x100, 0xaee9) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5522, 0xf15) r10 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/035/001\x00', 0x2000, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto(r10, 0x5522, 0xf15) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000011c0)={r10, &(0x7f0000000100)="1fd1554ceffdbb59ae08029597d8023c932884af553bdf30026caa411f68147e65ed4d33396ae898ae3dbacc96f94210b5", 0xfffffffb, &(0x7f0000000480)="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", 0x400, &(0x7f0000001380)="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", &(0x7f0000001180)=0x4}) 5.734624139s ago: executing program 0 (id=2230): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) remap_file_pages$auto(0x6, 0x19, 0x2fe, 0x5, 0x1) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) tgkill$auto(0x0, 0x0, 0x11) readv$auto(0x3, 0x0, 0x7) r0 = gettid() r1 = fcntl$auto_F_DUPFD_CLOEXEC(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x40440, 0x0) read$auto(r4, 0x0, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, 0x0, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r2) sendmsg$auto_NL80211_CMD_DEL_STATION(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x132800e}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="0104000049b575c38bf88ddd65334f5a23a40237f85ab8b660eed8185ccbfd8c06f8748bb3677f56a088fbccf1567f1f0d38b42e4e81e2c2b1d2f58aa2a0eb43", @ANYRES16=r5, @ANYBLOB="04002bbd7000fddbdf25140000000600120081000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20008001) close_range$auto(0x2, 0x8, 0x0) r6 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) r7 = socket(0x10, 0x2, 0x4) write$auto(r7, &(0x7f0000000000)='-\x00', 0x2fb) r8 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000100), 0xffffffffffffffff) r9 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/README\x00', 0x0, 0x0) (async) r10 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) read$auto(r10, 0x0, 0x1f42) sendmsg$auto_IPVS_CMD_FLUSH(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="80010000", @ANYRES16=r8, @ANYBLOB="00012abd7000fddbdf2511000000b00003806be99972948932aa49be2a8bb86e95ec08009f003200000008000200030000000b009200235e2f28265b00007e003f8004009b0097b9dedd390b9effd19b61f732fa4138edbf70b26443cc52750400380004003e80674c87386dfe09b5eae994a0bf9d3fb2e1b8da9885997f2c64eb1697100800f400", @ANYRES32=r6, @ANYBLOB="2e001d00d76176603b7706bbf37c919b19eedb45c327773ccf4bbe7495e5f311d374d5908a46b70a38622bf778610000000008000400c8030000b100038056339c0b4a4b19ffc294d90bd849f1a008521bdb960cd2c071518aedac54600fa11635f2cc4a5ff47107574fd2b3af48f68681c48db87a9be049143c383d3077add9fbdd852e301536299badbef3d158825e900860c9099490380eb4934db463f466ec1360e814630ebb15510fa2c149849c6f564b19c305ccd42e0cf85cc4635e60503ab5f7d1d4b2362df4bcb2feab67deaac391618c306d936c6c550b454e1e0c00c68008002f00", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00'], 0x180}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) kill$auto(r6, 0x11) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) kill$auto(r0, 0x11) 5.707937028s ago: executing program 2 (id=2231): close_range$auto(0x2, 0x8, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x1000000000000006, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x40000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r0, &(0x7f0000000100)='/surit\x8b\xafR\xf2y/integrity?iqa/policy\x00\xa2\xf4\x92_\xe8\xaeD\xca/ \xe5\xed`\xa4\xb5b\xff\x8c\xcf8\x00\xd5s\xb36\"\'\xb0\x84k\x98\xd7\xca\x06O\xd8Y\x15{W\f=XM\xb7\xf4\xca\xdf\x8fe\xe2\x91>`D{\x9e\xfe\x92\x9f|#5P\x8b\xdd\xd2/\b\xb5g\x18\xed\xaa \x9fs\xe0\x04\x84\x04\x02\x89\x84%d\xc1@\x91W\xf8\xf65\xa8\x1d\xde\alUZ\xab\x17\xba\xf8\x02\x12\x94\xdc\xcb\xc3\x06\x82\xc8G4>J\x83\xd3^\x8d', 0x2000000000c5) ioctl$auto(r0, 0x2a, 0xffffffffffffffff) (async) ioctl$auto(r0, 0x2a, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) (async) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) write$auto(r0, 0x0, 0x6) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket(0x11, 0x80003, 0x300) (async) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0xdf, 0x1000fe, 0x6fb3, 0x8, 0x4, 0xffffffffffffffff, [0x100, 0x3, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0x200000, 0x5, 0x5, 0x4, 0xf08a2b3}, {0x8, 0xfc, 0x5, 0x0, 0x0, 0x20, 0x9, 0x837, 0x8}}) (async) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0xdf, 0x1000fe, 0x6fb3, 0x8, 0x4, 0xffffffffffffffff, [0x100, 0x3, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0x200000, 0x5, 0x5, 0x4, 0xf08a2b3}, {0x8, 0xfc, 0x5, 0x0, 0x0, 0x20, 0x9, 0x837, 0x8}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) mmap$auto(0x0, 0x4004020009, 0xdf, 0xeb1, 0x401, 0x8800) r4 = socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f0000000000)='\xbe\xf2\x82\xe7\x14g\xb5\xeeMQ\x13\xa2_g\xbf\t\xfa\xf2_N\xb0{\xf9\xb57v\xeeG\xd9l\xbf\x86q w\x96\xd9\xe9\xa8\xe1\xf0\xc7\x1f\x1e\xc4\xc4\x89u\x83\xe8}\xbd\x7fO\x91\xc1UVW.\xb6\xad\x04u\x02w.\xec`O\xc1\x0e\x15\xe7:\xc9\x1bK\xcddY\x03\x95\xd1\xae\xc1\x9b\x96\x9faj\xd2\xfc\xfc\x1f7\xaf\xcan\xf6\xc0wK\xce\xe7Q\xae\xc9Hg\x01\xef\xda[\xe5\xa3\xa3%\'\x8f\xcf\x96X:\x04Dkt\x7f\xde\x80\x01\xddX\x91\x88\xa1\t\xc3\xf1\xfe[\x93$O8 b\xb4\x92\xf4\xbc\xc5\xb9\x989\xfcF\xec\xdc@\xdd\xdaeM\xe0U\xc8;\xf5\xe7$Q8\xd2\x87\xdd\xc5\x9d\xc5\xe8\xb5\xb5\xb8\xdfD\xd0\xe8t\x8aS\xaa\xbe\xaa\xba\x9e^0\x1a\xf8Y\xf5Jp\bu\xba\x98\x00\xf0H5\xa9u\x0e\xc4\x04\x13\xf58p\x9f\x11\xc07\xefS*|\xd87\x12\xd8\xce\xde0\xd82;\xcd\x18\r\xccI\x99\n\xd2\x86', 0xdd1, 0x8, 0x0) (async) mq_open$auto(&(0x7f0000000000)='\xbe\xf2\x82\xe7\x14g\xb5\xeeMQ\x13\xa2_g\xbf\t\xfa\xf2_N\xb0{\xf9\xb57v\xeeG\xd9l\xbf\x86q w\x96\xd9\xe9\xa8\xe1\xf0\xc7\x1f\x1e\xc4\xc4\x89u\x83\xe8}\xbd\x7fO\x91\xc1UVW.\xb6\xad\x04u\x02w.\xec`O\xc1\x0e\x15\xe7:\xc9\x1bK\xcddY\x03\x95\xd1\xae\xc1\x9b\x96\x9faj\xd2\xfc\xfc\x1f7\xaf\xcan\xf6\xc0wK\xce\xe7Q\xae\xc9Hg\x01\xef\xda[\xe5\xa3\xa3%\'\x8f\xcf\x96X:\x04Dkt\x7f\xde\x80\x01\xddX\x91\x88\xa1\t\xc3\xf1\xfe[\x93$O8 b\xb4\x92\xf4\xbc\xc5\xb9\x989\xfcF\xec\xdc@\xdd\xdaeM\xe0U\xc8;\xf5\xe7$Q8\xd2\x87\xdd\xc5\x9d\xc5\xe8\xb5\xb5\xb8\xdfD\xd0\xe8t\x8aS\xaa\xbe\xaa\xba\x9e^0\x1a\xf8Y\xf5Jp\bu\xba\x98\x00\xf0H5\xa9u\x0e\xc4\x04\x13\xf58p\x9f\x11\xc07\xefS*|\xd87\x12\xd8\xce\xde0\xd82;\xcd\x18\r\xccI\x99\n\xd2\x86', 0xdd1, 0x8, 0x0) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred=r4, 0x2}) (async) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred=r4, 0x2}) mq_timedsend$auto(0x4, 0x0, 0x0, 0x7fff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000f4b856e1f2a0d7b589679e0000000000f88e3aebd3c8755285", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250400000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000080) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') 5.690806343s ago: executing program 6 (id=2232): openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = gettid() rt_sigqueueinfo$auto_SIGCONT(r0, 0x12, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x2, 0xffff7bfc) prctl$auto(0x23, 0xd, 0x8, 0x0, 0x0) 5.478997828s ago: executing program 6 (id=2234): open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x400) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) ioctl$auto(r0, 0x8923, 0x24) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pcmcia/drivers/sl811_cs/new_id\x00', 0x149b01, 0x0) write$auto_fops_init_pkru_pkeys(r2, &(0x7f0000000080)='4', 0x1) 5.203800097s ago: executing program 2 (id=2235): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf0102000000000000000400000008001c"], 0x24}, 0x1, 0x0, 0x0, 0x4044c11}, 0xc0804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8003) socket(0x2, 0x3, 0x100) fstat$auto(0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) fcntl$auto(0x0, 0x407, 0x1) r1 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r1, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.464229652s ago: executing program 6 (id=2237): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r0 = socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/ad_num_ports\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) socket(0xa, 0x1, 0x84) socket(0x10, 0x0, 0x3914) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x106) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x106) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x1, 0x80000000000006, 0x0, 0x0, 0x10001fb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) ioctl$auto(r2, 0x541c, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="0e008000fec977ccefb9c217fc92fe66fbbe0fc26edb7c2dcd099718f9fcbbbf9f072606f9abd15f16a0db5e26d375bf3aba5cddcec96d464bec0860bc0533705379a3e9c5c861b06c8bf1ad6f7b7c115b5cde3794d0ed536588c28cab4884fb54473688d5a90da5fba6c5a887a11ab820413c0001d1df071744def2175d9de879f9c2d4395f9d9866339bad5c16a3e6d724b36ed47dbc9cd7dd98407a1b38d1b3337035e4f43c6757d2a53e56154913c91a246d72c0d36760798707ef5c23e108c52cc3c72b0bfb942dfe89672184c1af5ca5057b08eb68455877650accae8030a8192eea4206ced52eb0fd18d111a39a2109a5ec4a7a6bdd309b704286da6e7dd2404eea620fc9069ae418d574e04ef4eb2bc9f0716348059513fad8e47ed5c89201b81abed2c796436beca5b893f75e6a7b3f77de62b244997162483d1afecf6b6c7fe309964a13f2261dd58f3beb40ad4e36c1c5e5a988a0509c0ae5e43f88f9a6d19314e56ec0043260bf39d22601dcb618cde41ba1b37ea7debd46ef95ac5b01fc74c06926ddb01b6975347be36da4ea01148d0154dd6138a3639c2023add960fecf7b29860f8f923d1b1a6d", @ANYRES16=r1, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r6, @ANYRES8=r4], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 4.27459749s ago: executing program 5 (id=2238): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x23103, 0x0) ioctl$auto_RTC_IRQP_READ(r0, 0x8008700b, 0x0) r1 = ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000080)=0x2) bind$auto(0x3, 0x0, 0x6a) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x400000, 0x0) setresuid$auto(0x8, 0x8, 0x0) ioctl$auto(r2, 0x5608, 0x0) getsockopt$auto_SO_RCVTIMEO_OLD(0xffffffffffffffff, 0xffffffff, 0x14, 0x0, 0x0) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) recvfrom$auto(r3, 0x0, 0xfffffefffffffffa, 0x6, 0x0, 0xfffffffffffffffd) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) settimeofday$auto(&(0x7f0000000180)={0xfffffffffffffffd, 0x31}, 0x0) r4 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x32001, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(r5) bpf$auto(0x5, 0x0, 0x7) setresuid$auto(r5, r6, r5) write$auto(r4, 0x0, 0x881) r7 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x18000, 0x0) writev$auto(r7, &(0x7f0000000140)={&(0x7f0000000040), 0x5}, 0x5) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x400c1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c02, 0x0) write$auto(0x3, 0x0, 0xfdf3) 4.200388744s ago: executing program 0 (id=2239): unshare$auto(0x40000080) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) (async) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r0, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) (async) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x7, 0x4) (async) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1000000000000001, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) futex$auto(&(0x7f0000000100)=0x58, 0x6, 0x100, &(0x7f0000000140)={0x7, 0x2}, &(0x7f0000000180)=0xfe3, 0x5) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (rerun: 32) request_key$auto_KEY_SPEC_GROUP_KEYRING(0x0, 0x0, 0x0, 0xfffffffffffffffa) (async, rerun: 32) ioctl$auto(0x3, 0x8905, 0x38) (async, rerun: 32) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 4.156566841s ago: executing program 2 (id=2240): close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) open(&(0x7f0000000000)='./file0\x00', 0x161642, 0x8) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x9) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) io_uring_setup$auto(0xc, 0x0) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x80, 0xffff, 0x9, 0x14, r0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/017/001\x00', 0x802, 0x0) r4 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sg0\x00', 0x100e42, 0x0) mq_open$auto(&(0x7f0000000c00)='*\x00', 0xfffffff8, 0x8001, &(0x7f0000000c40)={0xf, 0xffffffff, 0x1, 0x8}) ioctl$auto_SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000040)) mmap$auto_sg_fops_sg(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x1) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0xffffffffffffff, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0xa, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="0e002dbd7000fcdbbc250300000006001b004e230000080011000500000006001c000500000005000400400000008467388bc211be2ec230897a1a87f38c74f99da5302adddee6ee226df09a7d"], 0x34}}, 0x40d0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) ioctl$auto_FS_IOC_GETFSUUID(r4, 0x80111500, 0x8) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 4.089910398s ago: executing program 6 (id=2241): sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="a9fa5001", @ANYRESHEX=0x0, @ANYBLOB="050328bd7000fbdbdf2506000000080032000000000008000300", @ANYRES32=0x0, @ANYBLOB="e075a8aa954211ab7769f7193fcf90bc136b95cb1c58207b0daab9328a60261c63eee913098bb80017a953605ec8119f57c3c847bb24fa295d0c282ff35a7ef2a96f4972ff25daaf0b6cf934ef9d0be008306f4f815e8c82516f9a5c9c62c403"], 0x24}, 0x1, 0x0, 0x0, 0x40008}, 0x0) mknod$auto(0x0, 0x1001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0xe) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x7}, 0x5, 0x20000000) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x2, 0x0, 0xdf) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x0, 0x0) ioctl$auto(r0, 0x401070cd, 0x5) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x8000, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x10000000000003, 0x0) read$auto(0x3, 0x0, 0x200) mmap$auto(0x0, 0x20009, 0x4000000000, 0xd9e, 0xffffffffffffffff, 0x7) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) write$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, &(0x7f0000000000)="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", 0x28f) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, &(0x7f00000001c0)) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) 4.031463384s ago: executing program 5 (id=2242): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8004) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@bpf_attr_3={0x2b, 0xffff, 0x6, 0x5, 0x9, 0x21, 0x4, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x200, 0x0, 0x3, 0x8, 0x9, 0x6, 0x2, @attach_prog_fd, 0x0, 0x3, 0x5b, 0x6, 0x6}, 0x40) r4 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r4, 0xa22, 0x70bd29, 0x25dfdbfd, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x8001) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x64, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x2}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x3}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x85}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x7dc}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x4e57}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0xfffffffc}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0xb}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x4}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x7f}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004844) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) 3.880031163s ago: executing program 5 (id=2243): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/msg_next_id\x00', 0xc0082, 0x0) io_uring_setup$auto(0x1d48, &(0x7f0000000180)={0x7fffefff, 0x5, 0x2, 0x6, 0x6, 0x8, r0, [0x0, 0x0, 0x3], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x79, 0x67, 0x7fff, 0x8000000400000001}, {0x100, 0x1, 0x10000052, 0x7, 0x11, 0x101, 0x0, 0x2, 0x3}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="68595bbe75a7ecf8ff874f777f820c35141900", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf25020000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004081) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffc) (async) openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/uprobe_profile\x00', 0x2e49d6d91c37f263, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.usage_all\x00', 0x101800, 0x0) (async, rerun: 32) recvfrom$auto(r1, &(0x7f00000004c0)="e3ad1ddf15c124d86748e0cfb7e854fc1448e7e0b0117dadfcd817b1d9b17d9987d0265774d79d6ec59cf0a9c4baf40373017b7d56929cb1bad65adc2a5213451f357e856557916a27a73a4537cf413a3a288a5ba8ed93f13bf7987dcf0ef0309aa7ec042cbaf1efa281ac1aee70a0e8d3537ac7a428fae311400ae71e5882dc3810d9340a99e993badd9901d000cb75538b0393639eef803ec1c355adc1b57f0bcf7b18ad23f6456dc6aa5b693adb09d0de93198fa5048eaf0be77963cf19ce26e3a77d4ce990db89ded5bde88e04f77899d107ee67396321a58bd1dd28c14eb44e3d09a208e21780bcd63907769b5027197e11447a50138d3ca51bc82aeaf0c131382d7a6f87de13cd1059ad4aafa565f4dca870a29f9870159128236792077cdcfd20a74c684859d55b735f7cad2e7579cd0eeaf19d331edab85cfdf562a5304ddd641a43bc360558697d8cd2ad8ba4c85ab16d51fc903be5df659caf45e82632a00addb522a90afca97fc45c51268657575ca31fd2f176f19c66f732ab1c987079bad2175f4cb8c0682046a57122312e73b3a4fe0b65cce71faffd941ba698ac83d744634798b920873e365350beadcfec49325a7ab5a114dcd66a5d50cdedfe96498428d586acec97ac5a1a65bee05b4246393ad2539eb9f8fcbcb0111d5e6b617fab01ec56cdaa815cc87c39068bfc2afcded18b56ec799bce112b959d3f589d999d91423f00d3c094eeede917ea2f376eaad4f76cc597e2fbb8a751fea28fd30153d6348a33669a9e7173dc62eebcbb85ab0e71ebca252e368ef48d2c6903080e3a5edbef649c2b5dca21c5ea773e1ac99f0e48c56ad6176279890d9139c1a76f72922a63d81cb4964ef1ac59300e13511b5a621e8121ad823041f6d8f7acafcc33408d988e679b6021eb361f1e14edd04c6fc81922139c937259ea9157afb4d90b3568320d072d567e3ece55cf22082cc4d7548390529e574d2683ea669ad3190324491d364d2fca470a46242168c53b727e0ce7c6b7d3b605ddf79ecfb9904de023ce8d3038bac9fc882565a861fec41d9b822a1891ff2e1d7dfb45d50714d820d517f91c96d40509ed35657bd2712d3fa120f14be74d246307bb0ffb92ad83583ab0804a9b55ca89bd9fc9977396c1688c39552fbf3878c733c190b02bc55e8d8d25f1a7a05f35ac2945b445e8154d898a72692b09b8f388b512861cb06b953926ed5b937b2fc5ad292f7385166a1812122b9b796a45d8fde0f829362d2fba9d84a3bcf3dd950dfedd706b52c4bb99bdd174ac7246c399568390666cfc79081409a6cd728b9029651fe58e59b160212b07c6a417ec6dca06c426f5886f2ce5e1e7815f7f39d162b49e4d0a42bdf67738d615c00fd3b426fdf227de959a229852d1cac5a72ed7195b76ff28cc426c344beb899b7450e7b85d182ebd122c39422865343c4b9fcf35826d3ca914c25047329b8ab90df86d3f635abb2364111cf5561527cddde294a73ec9c69b6b3dd9e6be2a8d4e394397127b9bdafe34f8f242c354e307ffb01b00f400394d8cda28a33019e4116b436f716141c6840ce282b3dfcbca723ceb9ea7e171ccfdb6541f15693093b3f37576e86dfe28d1025817bdee469c5f021309b74bda43e6e5f2b3dac80f6f6de2221323028b09d96f5ad3f6f899c0d9499da48eba1c6e08a486c618175ccf11a48aee0ab273b11e500021d3b4556b9fc1cb82bbbbb31d57039bc04840430502802dbb02a4aa7644b6f2892ab8c56fa328aa34d511341145f3836b6f081aebedd844c14973450756d8801c776ab41e96a2a2a666f62c6dfde01a59fe1a7ce8c48fe9f71c5b0658a243e7db546b7cb8c0063cc3b44aa97edc8b294d8e7462fdee84b198998435679555fb8bb90a8cb7bd86f40c949aa001835f33bd10de467ffb98fedf397eef450f55a1b24879471300a84049785e97a742577e10c254ffbc155a8a0f01ae9d81c88f64d8774f19b1de4e484000a50cc7bf44991a7f4a289ccb1e3a8bd0ea0d6af312ab504167ee01170e4158c04c47404fc185a85c806a02ebe202912d44cda38ab9101bff3f04b8638cd44f9b33e1e63635ba1834e5dff0e40906a4809cb3dc538532565ecce4fff9e0163ab9df1416c809728b47fb2d72e1eaeb438a59a29b7e426c8b7f78afe85e79686d276958d4610839a2477f30583582106cad2a1d21f66d0d003ae59cdb68fe604babbaa9109b603a5e142b803cc893bb63c1a671881477adc29f603e27a41d5ccbf410835e33d8c230d6a593272c0d6eac6aacc85e13af9976e5751383ca9b683461a6bb995ad2a6e8e5e4030021f9157facd31aba0b54737466d77ccc9af7ef314ecb7539ec06684a96a2dc68eb21e65bbb9b7f0bfcb837dcded42d2f9c7c3a3a7fd1245bf7ce3a4e815a4b006c5a7db3ba0213cb4d31443887284add3fd781a9739f11ca5adfd825852fd2b7abd803bcbd9a5cb3e98f4c77077b823ef2f812bdef5be09ac245380c1e6e3c51e21cf4393c45e9ed8623dc6884e0bc06bb7f8f79fea7c7ab40040884a3dc48c08ce96772209a1a7724612a0c569ceacf190105cb2760477424922d56407eeb9e5c95b963ef5631edc78dea6517d99a236472c79175f5b8b77b97e21ccab94c2cffe9dfa63e3a18da36b3f43a9a8bc329caceb4d4a3961ac53f2d089791625ed712b392849068ff5edd41aefa53619cc4075ebccaca5552f64535a101e8c8d56a514c9089b684320a8ee8912255225a9aefdf2e7bf55b9c026a2f7647ba245328c79b5b73b96f1634b0998183c8c86d4ca8aca3f61251a95622cb41068d87e56038c9e782571020d95abeb750759ee1b006f4180361ca621bf782aaccc12f174e5d2c84e3a7fdc6d4ac6d9679740d6f535f2374b486838538af0ccb39e9efe3a7e9bd11bcbecc4a5264502007c3a794ab4d603903a6028151acdf7a5ef2368dcfd920a58668db3d9bf957e88c22247ee57f72cf7343046dfaf73a193160444b7c0e50b652ea179136f9e72362957aa1aaa668560610960e79e370563cb9cbe4f9abda3b62fec0b711324d2d437d2d3ec6d673ff3e3f39799bbe17a0c226d39e6458c3c17d713cde666ef3f7406227f07a88ae1785993ae266e3501868c7e84a86a85d8c9928bebab0b204a65cbdcda81dc32fcfbd1a7409700656816767cbc98e45be2c50c92c0bb4aa953fa8dd09537f5827fb354ecc490ddfc2094df25207ccd1ec4fd49fe0d55ed42f5f88a1ef5fb4ca986704b4cc58bda2e7bc17d4c00ddbaedcd72eb6994fd36af444536134cc227f6a66855bcf96a4313c76a637965f4083501df69e02b56be1f85681d974747fc8ecdd95e14976ffe1326407fa5f76600173ac0cb92cf2f31ed4a29d121c4a07fc9dcab5f9b2c3d13b026cc63fdd3a2e930eda77a12b0d33db0d7cacd9a49bfefab1a663c24635dca360a36ec268cc9b5b8fd6ee9571274028a87db79cc1f703d72054367329f359fd5110c2faae53ef63675455bfb115191ad78ab2f38b1114555c312f2f4284f9deba9b37be1ca5bad155b45f261ad3e6b2b451d4c80490d1ec0288f6a61b2251e94b972870b374a5cce8b0b2ba80d7d8f570e55e704decf6ac0067452f3ce2408e4a7719adf417274f260c2174cb000957246a84e0420cb58852d2e9805fef729eacfad2da469405ec67edbe957ca8f163e88deb44184665349c537ec0001eadee8cc518b1f1c3d1ac4cd08592a71d226d78acd81469b2d584762832903f65a1ffea0d8c8cf5c433c40e5a8881440427225c09306ed488878fcd118179237dba12556c6fe26674751ea0370e3effe22f338cedc693414d4b0e2b0319f2026b1e7a42daddfbe83e06538d733f4e0460ed4021b3a53c9c59f957ba6e64eccd2bf8897014447ed785bdee90be30f0e754b7460cfe1864fde27b2dd094f4999fb591fe537777a86768e995ae80fa3284829145e18cf94f602dfd53e36e4aec9ce6ba290dd8ad46bad4945338998f03eaec954434a634e65512da571fe427957d3c065fd88bd150aad15274b4a29c168c149a08de54d8dc2ec6ec2ce79d3b8adf8987b46c36803d4be418518470f35f955ff2dc4d15660810a58d6913518451ea65bf0929908099214561b25ca5dfcbe012d096443d6fc05918449e2a93b65718e93564980241c6cd140cd8acc3b0832f8e5eb269d645e457e63c61fc351958b5ffc4619793e82509a14fbfba38bc46e5f68af21ddfedfa46ef3aa31e426df111d69bf0ade7f38377caed073231108ffa010605061dede819d57f6f94f3817625c4f718ea7ac08130983e0a04bf2965c0dfde3a7b0b1338a06a4009eae4f32326dd80e256a386a8a2509064a8392dfc01b60092b4c0cc3858cf29f18467c9d288e3ca50e06c64518b10e3300b7f0a416963eebbb1ad54d5e07cbe54fdaa49b739defee69f06c58b51d492d5dd9957bc62b87ff899caa6cd2a419018b9caa02f42d5ed3c5466c35b1f37f5b47634c54f52f3bce473ad71c3a6d7cdb38545253fbb52b07c901617b6555e04ab8be92932ff094c1ef18446590c3349a92b2b83b1a2dd7ceb78828837a72992893182c7c175d76c3c0d70a852d8df26c6e8ecc8fbab87f674ffa96ce2bf7ab349fda6c4b1f639f8f7f9dd56c70bff5aba19b3ab330cb4135b717500535c8ef41fa7a332815854f78305b00e02cf7ca66a0e1eb22bd1de5a20145907fb76a6bece7c2933f883141ea195fce023029ca84ad30c25fb27fa4071a6f83ea3bd16bdbab0b558b1263f2ad74ef9d06234073eb4c50018aaf7fa6242322855bc3ec9116cd4f7ddcd3aca23df72995526b84e2776432786f4a21ce18cd1461161a1bf95c9b248ce8b1bd71922e2894c196dfa8e14999dca428c5953956f45fd1b94f84b8156215cb154565a8fd168f3467d428beb48c77308bc87bdb85472c2923e2484cd1a1e8a181094bac900de8a98dd3593a5dab6d4b22735e195cd8e09ca973991826bc7b8a80d7c1d3ab26f6ac6fa0318dedcb3fddc9a2b9e91f93ba323db18d7077dca37dbc26b677d32b75a573999f0f055c0fbe7801db68f17eed617a41f3c60a2ca6497215cd0780001544deab14adc11e91b45ce1f04cb89887f57edefa3da7be39c20fc2dff468e94e157793d8552ae312b7d751e5715510f7a01fa72124273ee66d88ad535dd4d4561f5267fd3fb51c81b03abbaac7a83f942f87748b3d0af712388aaa3af954d9d7f6a30cbb11a317c1b566fe627f98e47dad829512b9a94a4de33a67a140542c41bde98524d482ca0d99590523cf99697f3441a0f176985a083d6c03b805683fb3fedd4ce3d3d97ba4ecceefdd00e2fc439aad0d3ea09da9f0526a6e41955433e51afa165ed17c8910773fabef9ad51ca25bf25ffafa3c705e6fde5e64990154094af5624c10332017bd9b83e56dfffbaef0181cc2222721c8270bfed59c400c040aef7cae5244d6bc6101e18d0d0226ce413c79efa4882d59b117ec716fea9df508b5748aabd8e2717a8d5108971bc8fe83de66d5d2cf5e1b284d26da25dc56011497ea1dd2060251a37b7e4f649375440d89ce54d502584c09f17ca5b4276631c44941f9387dcd46c4b82ea15558e8b413c80ee8661cf892d419599bd75f25fa90ee06705f09aac4ed62e09bd472e98805aa8a9bf213f096d135fb431af93ebbdab9242855b910c9426f3a2c8519d955de1ac6a98f08666466aa40720b3977cdda7a45fe883a6a5e2917ff979889a415ae6a8ede7443924435bca554eca", 0x12, 0x2, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x1, 0x5}, &(0x7f0000000300)=0x8) (rerun: 32) unshare$auto(0x200) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r4 = socket(0x10, 0x2, 0x0) (async, rerun: 32) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x403, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2]}, 0x1fe, 0x81) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram9\x00', 0x14f602, 0x0) (rerun: 32) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x6c8702, 0x0) (async, rerun: 32) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000003c0), 0x48300, 0x0) (async, rerun: 32) socket(0xa, 0x801, 0x84) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1e41, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) (async) unshare$auto(0x8000400) (async) socket(0x2c, 0x3, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async, rerun: 32) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x6, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) (async, rerun: 32) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x2, 0x8) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x2a0080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) (rerun: 64) 3.823997755s ago: executing program 0 (id=2244): r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) fcntl$auto_F_OFD_GETLK(r0, 0x24, 0x39f5) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x2100, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x12042, 0x0) ioctl$auto_TUNSETGROUP(r6, 0x400454ce, &(0x7f0000000240)=0x374) (async) ioctl$auto_TUNSETGROUP(r6, 0x400454ce, &(0x7f0000000240)=0x374) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0, 0x1878}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x78b2, 0x8, 0x1f, 0x6, 0x7, 0x400b, 0xffffffffffffffff, [], {0x6, 0x9, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x100, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x78b2, 0x8, 0x1f, 0x6, 0x7, 0x400b, 0xffffffffffffffff, [], {0x6, 0x9, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x100, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r7 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r7, &(0x7f0000000d40)=""/16, 0x10) (async) read$auto_vhci_fops_hci_vhci(r7, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 2.881160606s ago: executing program 0 (id=2245): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x8, 0x2, 0x40000000de, 0x100000eb1, 0x401, 0x7fff) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x3, 0x7, 0xe29d, 0x11, r0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x6, 0xfffffffffffffffe, 0x5, 0xfffffffffffff9fe) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0x1, 0x22, 0x940, 0x1ffde, 0x0, 0x4, 0x7, 0xa, 0x6, 0xfffffffffffffffe, 0x8000000000000001, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0xfffff7fe, 0x5, 0x2, 0x1000, 0x7, 0x9, 0x0, 0x6c, 0x4, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffeffa, 0x400000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x7, 0xffffffffff, 0x1, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x5757, 0x80000000000000, 0x2, 0x1, 0x8000000000000, 0x53d, 0x0, 0x0, 0x2]}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0x4}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x407, 0x4008) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x2201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x216641, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000840)={0x8, 0x1, 0x9, 0x100000a, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x401, 0x4005, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40085, 0x1, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x4, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6]}, 0x1fe, 0x200c) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) 2.880787832s ago: executing program 5 (id=2246): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa1\x00', 0x101041, 0x0) lseek$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r2}, 0x18) write$auto(0x3, 0x0, 0x5c8) r3 = setfsuid$auto(0x0) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1, 0xfffffffffffffff9, 0x7, r3, 0xffffffffffffffff, 0x6, 0x0, 0x80000401, 0x1, 0x5, 0x1fc, {0x80000001, 0xfb44}, {0x5, 0x28}, {0xffffffffffffffff, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x4, 0x8, 0x5, 0xb6a, 0xdfc, [0xe32, 0x2, 0x10000080000001, 0x4, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffa, 0xe, 0x3]}) setpriority$auto(0x4, r3, 0x5) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000100)={0x101, 0xee00, 0xdfe, 0x326f}) statx$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xfffffffc, 0x10, &(0x7f0000000140)={0x2, 0x5d, 0x21, 0x2, r3, r4, 0xa46, 0x3, 0x1ff, 0x9, 0x5, 0x2, {0x3, 0x3}, {0x1ff, 0xfffffffc}, {0x100000000, 0x100}, {0x0, 0x40}, 0x0, 0xfe, 0x4a0f, 0x2, 0x6, 0x8, 0x80, 0x2, 0x481a, 0x6, 0x7, 0xc5, [0xfffffffffffff4ef, 0x80000000, 0x100000001, 0xfffffffffffffff8, 0x3, 0xfffffffffffff961, 0x2, 0xa4757860000000, 0x5]}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = socket(0x2, 0x2, 0x1) close_range$auto(r5, 0xffffffffffffffff, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x1b, r5, 0x10000, 0xffffffffffffffff}, 0x10) bpf$auto(0x15, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x9b) ioctl$auto_MEMLOCK(r6, 0x40084d05, &(0x7f0000000240)={0xffff, 0x5}) 2.359474916s ago: executing program 5 (id=2247): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 32) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) (async, rerun: 32) prctl$auto(0xfee, 0x8, 0x0, 0x1, 0x0) (rerun: 32) madvise$auto(0x108000, 0x800032, 0x4) unshare$auto(0x40000080) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) (async) rt_sigsuspend$auto(&(0x7f00000000c0)={0x4}, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) (async) ioctl$auto(0x3, 0x80004509, 0x10000000000402) (async) ioctl$auto(0x3, 0x800005411, 0x38) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 64) socket(0x2, 0xa, 0xe) (async, rerun: 64) ioctl$auto(0x1, 0x890b, 0x8) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x2000000000009, 0x1, 0x7, 0xfffffffffffff715, 0x22e3cb73, 0x7fff, 0x2000000000010006, 0x0, 0x7, 0x8, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x8001, 0x6, 0x0, 0xa920, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0xe9e]}, 0x200, 0x4) (async, rerun: 32) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS1\x00', 0x20000, 0x0) (rerun: 32) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, &(0x7f0000000080)="2819d0aba4e51624c62df4a4452820755125e364fe994c2cd3af630b4ab0f2e964b4e505d38d31c10c5e0f5e82981024af8dd00734250e06cf0a1ad0522d6355690eecb21e88855fa9597732bdb03bcca63f854c") (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) 244.043071ms ago: executing program 0 (id=2248): r0 = socket(0x1e, 0x1, 0x0) r1 = socket(0x2b, 0x800, 0x0) r2 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x65, 0x1, 0x0, 0x4) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r4 = fcntl$auto(r3, 0x402, 0x2) (async, rerun: 32) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) (async, rerun: 32) close_range$auto(0x2, 0xa, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x6, 0x80dc, 0xeb1, 0x401, 0x8006) (rerun: 32) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000003c0)={{@inferred, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00"}, 0x4, 0x968, 0x3, @inferred, @integer={0x4, 0x0, 0xffffffffffffff00}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) (async, rerun: 32) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000001900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000580)={0x1320, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x11a1, 0x2d, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @uid}, @generic="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", @generic="d9c56c3953b28af4b5b14f9bf4ee46f635407011f913a93ee3c27c7647cc3e1ac9ae622f4d7ca0166749fb3a3beee48d5792b4b20f17aba0e1157b434893f372ae9e6c05fa506d8ae1ab7490c61f9c4361bd0ce2ddd7f0e45e49f233f22d9ca4cc9a433fc7d32141c12ad59dbd1791dba97a84e5261178a3bb80763177c28decd56b5e8fde32cf7f9db693552913cf22287fb6c10325269edc1e959a6a8b89949921847e7a62b6e348b83a4476a7fd49976c45caab099465e5f23b5975889338c5c56b141c3092ca53504840703654", @typed={0x8, 0xee, 0x0, 0x0, @fd=r0}, @generic="07593d0bb7e2cf60c8e78a661c33181997301e9546a468edd42e1de30ebad54a921d3d11f05675364a9570fdb6e5e4d1af306ad3683274f4791ea95ffcf1e4e74c79e5f84c85e3ea0ae630f6643b629e2f9ad1d0a385f37bd34627b784dcfc57d404db553d377e936c616c54bd5bc178ed26217b2dd3", @typed={0x4, 0xeb}, @nested={0x1f, 0x10a, 0x0, 0x1, [@generic="9250d968c6c1a1ed2250b908b94001c07d10368c9025bbf7ff9323"]}, @generic="0568ed8d91e1822b525d1414e36462f981f2ff14c4dcd249a467e370baa7e083f8b95651"]}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_SEC_LEVEL={0x130, 0x2d, 0x0, 0x1, [@typed={0x8, 0xb1, 0x0, 0x0, @uid}, @nested={0x108, 0x102, 0x0, 0x1, [@nested={0x4, 0xdd}, @typed={0xfd, 0xf1, 0x0, 0x0, @binary="c9feb8d1f3ca47aa28ae5f29cd8fa7343d653ae30936ee0b3dfd3bf14c328f643386a0e2965db9c5a25188a87eb3b93f67cc0b594e005d96d59314a6e0fb332a3615afca6e40a34ce7f8ff384aeb8428551985fc4088f19c1b78f87e2355c571c3841226553e285b78c3666d488838e0f98ba007a0f8de91aa0b86cb4e484d261f105a0c819e4101034dfcb684a8699f0342ca39a47596684c545273abf5a534d8bc63f4c9f73a116925b7d4d1a4cd3e219ed47dc0ce2f87755a160509b4a5d19fb92571081d7c76afbb09fb77e498847ce5559d5507275427d4bddc78763033943743ff64f98f32bc02fd394b48dc6310708469c3490931f3"}]}, @typed={0x14, 0x99, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x8f, 0x0, 0x0, @pid}]}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1320}, 0x1, 0x0, 0x0, 0x4000}, 0x240088c4) (async, rerun: 32) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="e200360000", @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x25, 0x5, 0x2) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) io_uring_setup$auto(0x946, 0x0) (async) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) (rerun: 32) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 350.295µs ago: executing program 5 (id=2249): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x389082, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0x782, 0x0) write$auto(0x3, 0x0, 0x4fffffdf2) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0xc0384707, 0x0) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x801, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) 0s ago: executing program 0 (id=2250): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x6) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) r0 = socket(0xa, 0x5, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x18}}, 0x800) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x60080, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, &(0x7f0000000080)="d82acbd815") getsockopt$auto(r0, 0x84, 0x24, 0x0, 0x0) kernel console output (not intermixed with test programs): 00004][T13975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.900017][T13975] RSP: 002b:00007f902d685038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 542.900031][T13975] RAX: ffffffffffffffda RBX: 00007f902c9e5fa0 RCX: 00007f902c78f7c9 [ 542.900039][T13975] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000007 [ 542.900048][T13975] RBP: 00007f902c813f91 R08: 0000000000000400 R09: 000000000000002f [ 542.900056][T13975] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 542.900064][T13975] R13: 00007f902c9e6038 R14: 00007f902c9e5fa0 R15: 00007ffcab898898 [ 542.900083][T13975] [ 542.900101][T13975] memory: usage 3072kB, limit 3072kB, failcnt 192460 [ 543.733876][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 543.739935][T11461] Bluetooth: hci0: command 0x0c1a tx timeout [ 543.985376][T14007] FAULT_INJECTION: forcing a failure. [ 543.985376][T14007] name failslab, interval 1, probability 0, space 0, times 0 [ 544.000497][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 544.006535][T11461] Bluetooth: hci4: command 0x0c1a tx timeout [ 544.020581][T14007] CPU: 0 UID: 0 PID: 14007 Comm: syz.4.1621 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.020604][T14007] Tainted: [L]=SOFTLOCKUP [ 544.020609][T14007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 544.020618][T14007] Call Trace: [ 544.020623][T14007] [ 544.020629][T14007] dump_stack_lvl+0x16c/0x1f0 [ 544.020656][T14007] should_fail_ex+0x512/0x640 [ 544.020673][T14007] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 544.020693][T14007] should_failslab+0xc2/0x120 [ 544.020714][T14007] kmem_cache_alloc_node_noprof+0x86/0x800 [ 544.020730][T14007] ? tcp_event_new_data_sent+0x2b6/0x3f0 [ 544.020746][T14007] ? __alloc_skb+0x156/0x410 [ 544.020766][T14007] ? __alloc_skb+0x156/0x410 [ 544.020780][T14007] __alloc_skb+0x156/0x410 [ 544.020795][T14007] ? __pfx___alloc_skb+0x10/0x10 [ 544.020818][T14007] tcp_stream_alloc_skb+0x34/0x670 [ 544.020836][T14007] tcp_sendmsg_locked+0x12d5/0x42a0 [ 544.020864][T14007] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 544.020882][T14007] ? do_raw_spin_lock+0x12c/0x2b0 [ 544.020898][T14007] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 544.020917][T14007] ? __local_bh_enable_ip+0xa4/0x120 [ 544.020938][T14007] tcp_sendmsg+0x2e/0x50 [ 544.020953][T14007] ? __pfx_tcp_sendmsg+0x10/0x10 [ 544.020968][T14007] inet_sendmsg+0xb9/0x140 [ 544.020986][T14007] sock_write_iter+0x509/0x610 [ 544.021000][T14007] ? __pfx_sock_write_iter+0x10/0x10 [ 544.021019][T14007] ? bpf_lsm_file_permission+0x9/0x10 [ 544.021035][T14007] ? security_file_permission+0x71/0x210 [ 544.021053][T14007] ? rw_verify_area+0xcf/0x6c0 [ 544.021073][T14007] vfs_write+0x7d3/0x11d0 [ 544.021092][T14007] ? __pfx_sock_write_iter+0x10/0x10 [ 544.021107][T14007] ? __pfx_vfs_write+0x10/0x10 [ 544.021124][T14007] ? find_held_lock+0x2b/0x80 [ 544.021152][T14007] ksys_write+0x1f8/0x250 [ 544.021170][T14007] ? __pfx_ksys_write+0x10/0x10 [ 544.021193][T14007] do_syscall_64+0xcd/0xf80 [ 544.021207][T14007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.021221][T14007] RIP: 0033:0x7f73e1d8f7c9 [ 544.021233][T14007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.021253][T14007] RSP: 002b:00007f73e2c9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 544.021269][T14007] RAX: ffffffffffffffda RBX: 00007f73e1fe6090 RCX: 00007f73e1d8f7c9 [ 544.021278][T14007] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 544.021286][T14007] RBP: 00007f73e1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 544.021294][T14007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.021302][T14007] R13: 00007f73e1fe6128 R14: 00007f73e1fe6090 R15: 00007ffda74e9228 [ 544.021321][T14007] [ 544.936702][T11461] Bluetooth: hci3: unexpected event 0x2c length: 42 > 17 [ 545.072535][T11461] Bluetooth: hci3: unexpected subevent 0x01 length: 3 < 18 [ 545.149487][T13975] memory+swap: usage 3600kB, limit 9007199254740988kB, failcnt 0 [ 545.170126][T14010] zswap: compressor not available [ 545.189923][T13975] kmem: usage 1336kB, limit 9007199254740988kB, failcnt 0 [ 545.230735][T13975] Memory cgroup stats for /syz2: [ 545.230836][T13975] cache 0 [ 545.249624][T13975] rss 1667072 [ 545.265976][T13975] rss_huge 0 [ 545.291231][T13975] shmem 0 [ 545.300417][T13975] mapped_file 0 [ 545.308154][T13975] dirty 0 [ 545.320393][T13975] writeback 8192 [ 545.342003][T13975] workingset_refault_anon 14882 [ 545.358553][T13975] workingset_refault_file 62717 [ 545.382873][T13975] swap 540672 [ 545.391922][T13975] swapcached 118784 [ 545.410951][T13975] pgpgin 424904 [ 545.422840][T13975] pgpgout 426514 [ 545.438035][T13975] pgfault 291013 [ 545.446603][T13975] pgmajfault 6794 [ 545.460516][T13975] inactive_anon 94208 [ 545.476894][T13975] active_anon 24576 [ 545.503020][T13975] inactive_file 827392 [ 545.532319][T13975] active_file 831488 [ 545.550405][T13975] unevictable 0 [ 545.570866][T13975] hierarchical_memory_limit 3145728 [ 545.583976][T13975] hierarchical_memsw_limit 9223372036854771712 [ 545.630455][T13975] total_cache 0 [ 545.650695][T13975] total_rss 1667072 [ 545.674912][T13975] total_rss_huge 0 [ 545.690315][T13975] total_shmem 0 [ 545.708632][T13975] total_mapped_file 0 [ 545.718839][T14033] zswap: compressor not available [ 545.728775][T13975] total_dirty 0 [ 545.732533][T13975] total_writeback 8192 [ 545.761469][T13975] total_workingset_refault_anon 14882 [ 545.782482][T13975] total_workingset_refault_file 62717 [ 545.807154][T13975] total_swap 540672 [ 545.815351][T13975] total_swapcached 118784 [ 545.827509][T13975] total_pgpgin 424904 [ 545.847795][T13975] total_pgpgout 426514 [ 545.890512][T13975] total_pgfault 291013 [ 545.894669][T13975] total_pgmajfault 6794 [ 545.906525][T13975] total_inactive_anon 94208 [ 545.924839][T13975] total_active_anon 24576 [ 545.934734][T13975] total_inactive_file 827392 [ 545.944839][T13975] total_active_file 831488 [ 545.953666][T13975] total_unevictable 0 [ 545.962912][T13975] anon_cost 72 [ 545.969616][T13975] file_cost 58 [ 545.978614][T13975] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1614,pid=13974,uid=0 [ 546.012348][T13975] Memory cgroup out of memory: Killed process 13974 (syz.2.1614) total-vm:136980kB, anon-rss:2676kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 551.053758][T14082] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 551.701223][T14073] syz.2.1636 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 551.782435][T14073] CPU: 0 UID: 0 PID: 14073 Comm: syz.2.1636 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.782459][T14073] Tainted: [L]=SOFTLOCKUP [ 551.782464][T14073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.782472][T14073] Call Trace: [ 551.782477][T14073] [ 551.782483][T14073] dump_stack_lvl+0x16c/0x1f0 [ 551.782510][T14073] dump_header+0x101/0x960 [ 551.782534][T14073] oom_kill_process+0x176/0x910 [ 551.782551][T14073] out_of_memory+0x350/0x1700 [ 551.782566][T14073] ? __lock_acquire+0x436/0x2890 [ 551.782582][T14073] ? __pfx_out_of_memory+0x10/0x10 [ 551.782603][T14073] mem_cgroup_out_of_memory+0x118/0x130 [ 551.782620][T14073] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 551.782640][T14073] ? do_raw_spin_unlock+0x172/0x230 [ 551.782659][T14073] try_charge_memcg+0x695/0xd30 [ 551.782683][T14073] ? __pfx_try_charge_memcg+0x10/0x10 [ 551.782704][T14073] ? __pfx_find_held_lock+0x1/0x10 [ 551.782722][T14073] ? rcu_read_unlock+0x17/0x60 [ 551.782739][T14073] charge_memcg+0x8a/0x230 [ 551.782760][T14073] __mem_cgroup_charge+0x2b/0x1e0 [ 551.782775][T14073] shmem_alloc_and_add_folio+0x50c/0xc20 [ 551.782796][T14073] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 551.782813][T14073] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 551.782833][T14073] shmem_get_folio_gfp+0x67f/0x1610 [ 551.782853][T14073] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 551.782874][T14073] shmem_write_begin+0x1a4/0x3b0 [ 551.782891][T14073] ? __pfx_shmem_write_begin+0x10/0x10 [ 551.782907][T14073] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 551.782928][T14073] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.782943][T14073] generic_perform_write+0x3c4/0x900 [ 551.782963][T14073] ? __pfx_generic_perform_write+0x10/0x10 [ 551.782982][T14073] ? file_update_time_flags+0x35c/0x520 [ 551.782999][T14073] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 551.783017][T14073] shmem_file_write_iter+0x10e/0x140 [ 551.783036][T14073] __kernel_write_iter+0x31a/0xb10 [ 551.783058][T14073] ? __pfx___kernel_write_iter+0x10/0x10 [ 551.783077][T14073] ? __up_read+0x2d1/0x700 [ 551.783094][T14073] ? dump_user_range+0x756/0xb70 [ 551.783119][T14073] dump_user_range+0x413/0xb70 [ 551.783143][T14073] ? __pfx_dump_user_range+0x10/0x10 [ 551.783164][T14073] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 551.783182][T14073] ? __pfx_writenote+0x10/0x10 [ 551.783200][T14073] elf_core_dump+0x29c3/0x3c10 [ 551.783223][T14073] ? __pfx_elf_core_dump+0x10/0x10 [ 551.783234][T14073] ? kasan_save_stack+0x33/0x60 [ 551.783251][T14073] ? kasan_save_track+0x14/0x30 [ 551.783268][T14073] ? __kasan_kmalloc+0xaa/0xb0 [ 551.783284][T14073] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 551.783302][T14073] ? vfs_coredump+0x1dd9/0x55e0 [ 551.783320][T14073] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 551.783338][T14073] ? irqentry_exit+0x38a/0x8c0 [ 551.783349][T14073] ? asm_exc_general_protection+0x26/0x30 [ 551.783367][T14073] ? 0xffffffffff600000 [ 551.783410][T14073] ? vfs_coredump+0x2b85/0x55e0 [ 551.783428][T14073] vfs_coredump+0x2b85/0x55e0 [ 551.783455][T14073] ? __pfx_vfs_coredump+0x10/0x10 [ 551.783475][T14073] ? __lock_acquire+0x436/0x2890 [ 551.783488][T14073] ? is_bpf_text_address+0x8a/0x1a0 [ 551.783506][T14073] ? bpf_ksym_find+0x124/0x1c0 [ 551.783525][T14073] ? __pfx_css_rstat_updated+0x10/0x10 [ 551.783560][T14073] ? __lock_acquire+0x436/0x2890 [ 551.783574][T14073] ? lock_acquire+0x179/0x330 [ 551.783591][T14073] ? lock_acquire+0x179/0x330 [ 551.783604][T14073] ? find_held_lock+0x2b/0x80 [ 551.783621][T14073] ? is_bpf_text_address+0x8a/0x1a0 [ 551.783638][T14073] ? bpf_ksym_find+0x124/0x1c0 [ 551.783659][T14073] ? __lock_acquire+0x436/0x2890 [ 551.783672][T14073] ? lookup_address+0x108/0x170 [ 551.783688][T14073] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 551.783708][T14073] ? do_raw_spin_lock+0x12c/0x2b0 [ 551.783724][T14073] ? find_held_lock+0x2b/0x80 [ 551.783741][T14073] ? kfence_guarded_free+0x2fd/0x5c0 [ 551.783763][T14073] ? do_raw_spin_unlock+0x172/0x230 [ 551.783780][T14073] ? kfence_guarded_free+0x327/0x5c0 [ 551.783802][T14073] ? proc_coredump_connector+0x2d1/0x4f0 [ 551.783816][T14073] ? __pfx_proc_coredump_connector+0x10/0x10 [ 551.783834][T14073] ? rcu_is_watching+0x12/0xc0 [ 551.783856][T14073] get_signal+0x22e1/0x26d0 [ 551.783881][T14073] ? __pfx_get_signal+0x10/0x10 [ 551.783905][T14073] arch_do_signal_or_restart+0x8f/0x7a0 [ 551.783923][T14073] ? fixup_iopl_exception+0xaf/0x2e0 [ 551.783942][T14073] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 551.783966][T14073] ? cond_local_irq_disable.isra.0+0x4b/0x60 [ 551.783987][T14073] ? exc_general_protection+0x198/0x230 [ 551.784008][T14073] irqentry_exit+0x38a/0x8c0 [ 551.784024][T14073] asm_exc_general_protection+0x26/0x30 [ 551.784037][T14073] RIP: 0033:0x7f902c78f7d1 [ 551.784049][T14073] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 551.784062][T14073] RSP: 002b:0000200000000460 EFLAGS: 00010217 [ 551.784074][T14073] RAX: 0000000000000000 RBX: 00007f902c9e5fa0 RCX: 00007f902c78f7c9 [ 551.784083][T14073] RDX: 0000200000000480 RSI: 0000200000000460 RDI: 0000000000800000 [ 551.784092][T14073] RBP: 00007f902c813f91 R08: 0000200000000500 R09: 0000200000000500 [ 551.784100][T14073] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000 [ 551.784108][T14073] R13: 00007f902c9e6038 R14: 00007f902c9e5fa0 R15: 00007ffcab898898 [ 551.784127][T14073] [ 553.484255][T14073] memory: usage 3072kB, limit 3072kB, failcnt 195030 [ 553.495663][T14073] memory+swap: usage 15376kB, limit 9007199254740988kB, failcnt 0 [ 553.506741][T14073] kmem: usage 2228kB, limit 9007199254740988kB, failcnt 0 [ 553.534941][T14073] Memory cgroup stats for /syz2: [ 553.535036][T14073] cache 716800 [ 553.554127][T14073] rss 40960 [ 553.561394][T14073] rss_huge 0 [ 553.568597][T14073] shmem 716800 [ 553.576536][T14073] mapped_file 176128 [ 553.585866][T14073] dirty 0 [ 553.593247][T14073] writeback 0 [ 553.603833][T14073] workingset_refault_anon 14969 [ 553.616784][T14073] workingset_refault_file 62717 [ 553.628083][T14073] swap 12599296 [ 553.635995][T14073] swapcached 106496 [ 553.644876][T14073] pgpgin 429463 [ 553.652593][T14073] pgpgout 431296 [ 553.660173][T14073] pgfault 292939 [ 553.668869][T14073] pgmajfault 6865 [ 553.676774][T14073] inactive_anon 700416 [ 553.686629][T14073] active_anon 163840 [ 553.699475][T14073] inactive_file 0 [ 553.708415][T14073] active_file 0 [ 553.716400][T14073] unevictable 0 [ 553.726591][T14073] hierarchical_memory_limit 3145728 [ 553.737904][T14073] hierarchical_memsw_limit 9223372036854771712 [ 553.752372][T14073] total_cache 716800 [ 553.761578][T14073] total_rss 40960 [ 553.769594][T14073] total_rss_huge 0 [ 553.778157][T14073] total_shmem 716800 [ 553.787182][T14073] total_mapped_file 176128 [ 553.797686][T14073] total_dirty 0 [ 553.808967][T14073] total_writeback 0 [ 553.818000][T14073] total_workingset_refault_anon 14969 [ 553.832315][T14073] total_workingset_refault_file 62717 [ 553.844253][T14073] total_swap 12599296 [ 553.852630][T14073] total_swapcached 106496 [ 553.862719][T14073] total_pgpgin 429463 [ 553.873278][T14073] total_pgpgout 431296 [ 553.886922][T14073] total_pgfault 292939 [ 553.905782][T14073] total_pgmajfault 6865 [ 553.926208][T14073] total_inactive_anon 700416 [ 553.946728][T14073] total_active_anon 163840 [ 553.960341][T14073] total_inactive_file 0 [ 553.969680][T14073] total_active_file 0 [ 553.974353][T14073] total_unevictable 0 [ 553.978424][T14073] anon_cost 512 [ 553.982140][T14073] file_cost 0 [ 553.985464][T14073] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1636,pid=14073,uid=0 [ 554.001025][T14073] Memory cgroup out of memory: Killed process 14073 (syz.2.1636) total-vm:104080kB, anon-rss:1140kB, file-rss:20992kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 554.025040][T13689] syz.0.1584 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 554.045027][T13689] CPU: 0 UID: 0 PID: 13689 Comm: syz.0.1584 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.045051][T13689] Tainted: [L]=SOFTLOCKUP [ 554.045056][T13689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.045064][T13689] Call Trace: [ 554.045069][T13689] [ 554.045075][T13689] dump_stack_lvl+0x16c/0x1f0 [ 554.045101][T13689] dump_header+0x101/0x960 [ 554.045120][T13689] oom_kill_process+0x176/0x910 [ 554.045137][T13689] out_of_memory+0x350/0x1700 [ 554.045153][T13689] ? __lock_acquire+0x436/0x2890 [ 554.045169][T13689] ? __pfx_out_of_memory+0x10/0x10 [ 554.045190][T13689] mem_cgroup_out_of_memory+0x118/0x130 [ 554.045207][T13689] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 554.045228][T13689] ? do_raw_spin_unlock+0x172/0x230 [ 554.045247][T13689] try_charge_memcg+0x695/0xd30 [ 554.045272][T13689] ? __pfx_try_charge_memcg+0x10/0x10 [ 554.045298][T13689] ? __pfx_find_held_lock+0x1/0x10 [ 554.045316][T13689] ? rcu_read_unlock+0x17/0x60 [ 554.045335][T13689] charge_memcg+0x8a/0x230 [ 554.045355][T13689] __mem_cgroup_charge+0x2b/0x1e0 [ 554.045370][T13689] shmem_alloc_and_add_folio+0x50c/0xc20 [ 554.045391][T13689] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 554.045409][T13689] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 554.045429][T13689] shmem_get_folio_gfp+0x67f/0x1610 [ 554.045449][T13689] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 554.045470][T13689] shmem_write_begin+0x1a4/0x3b0 [ 554.045488][T13689] ? __pfx_shmem_write_begin+0x10/0x10 [ 554.045505][T13689] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 554.045525][T13689] ? lockdep_hardirqs_on+0x7c/0x110 [ 554.045540][T13689] generic_perform_write+0x3c4/0x900 [ 554.045561][T13689] ? __pfx_generic_perform_write+0x10/0x10 [ 554.045577][T13689] ? file_update_time_flags+0x35c/0x520 [ 554.045595][T13689] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 554.045613][T13689] shmem_file_write_iter+0x10e/0x140 [ 554.045632][T13689] __kernel_write_iter+0x31a/0xb10 [ 554.045654][T13689] ? __pfx___kernel_write_iter+0x10/0x10 [ 554.045673][T13689] ? __up_read+0x2d1/0x700 [ 554.045691][T13689] ? dump_user_range+0x756/0xb70 [ 554.045711][T13689] ? dump_user_range+0x423/0xb70 [ 554.045733][T13689] dump_user_range+0x413/0xb70 [ 554.045758][T13689] ? __pfx_dump_user_range+0x10/0x10 [ 554.045779][T13689] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 554.045798][T13689] ? __pfx_writenote+0x10/0x10 [ 554.045816][T13689] elf_core_dump+0x29c3/0x3c10 [ 554.045840][T13689] ? __pfx_elf_core_dump+0x10/0x10 [ 554.045853][T13689] ? finish_task_switch.isra.0+0x202/0xbd0 [ 554.045874][T13689] ? rcu_is_watching+0x12/0xc0 [ 554.045896][T13689] ? finish_task_switch.isra.0+0x207/0xbd0 [ 554.045915][T13689] ? 0xffffffffff600000 [ 554.045928][T13689] ? __schedule+0x114b/0x5ee0 [ 554.045947][T13689] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 554.045997][T13689] ? vfs_coredump+0x2b85/0x55e0 [ 554.046016][T13689] vfs_coredump+0x2b85/0x55e0 [ 554.046043][T13689] ? __pfx_vfs_coredump+0x10/0x10 [ 554.046062][T13689] ? __lock_acquire+0x436/0x2890 [ 554.046079][T13689] ? __lock_acquire+0x436/0x2890 [ 554.046094][T13689] ? lock_acquire+0x179/0x330 [ 554.046111][T13689] ? lock_acquire+0x179/0x330 [ 554.046137][T13689] ? arch_stack_walk+0xa6/0x100 [ 554.046161][T13689] ? stack_trace_save+0x8e/0xc0 [ 554.046181][T13689] ? __pfx_stack_trace_save+0x10/0x10 [ 554.046203][T13689] ? stack_depot_save_flags+0x29/0x9b0 [ 554.046220][T13689] ? __lock_acquire+0x436/0x2890 [ 554.046235][T13689] ? kasan_save_stack+0x42/0x60 [ 554.046288][T13689] ? proc_coredump_connector+0x2d1/0x4f0 [ 554.046303][T13689] ? __pfx_proc_coredump_connector+0x10/0x10 [ 554.046322][T13689] ? rcu_is_watching+0x12/0xc0 [ 554.046342][T13689] get_signal+0x22e1/0x26d0 [ 554.046368][T13689] ? __pfx_get_signal+0x10/0x10 [ 554.046386][T13689] ? find_held_lock+0x2b/0x80 [ 554.046402][T13689] ? fixup_vdso_exception+0x34b/0x400 [ 554.046428][T13689] arch_do_signal_or_restart+0x8f/0x7a0 [ 554.046448][T13689] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 554.046474][T13689] ? do_user_addr_fault+0xa62/0x1370 [ 554.046494][T13689] irqentry_exit+0x38a/0x8c0 [ 554.046510][T13689] asm_exc_page_fault+0x26/0x30 [ 554.046523][T13689] RIP: 0033:0xf000 [ 554.046535][T13689] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.046548][T13689] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 554.046559][T13689] RAX: 0000000000000000 RBX: 00007f1afebe5fa0 RCX: 00007f1afe98f7c9 [ 554.046569][T13689] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b4a [ 554.046577][T13689] RBP: 00007f1afea13f91 R08: 0000000000000002 R09: 0000000000000000 [ 554.046585][T13689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.046593][T13689] R13: 00007f1afebe6038 R14: 00007f1afebe5fa0 R15: 00007ffcc91ab078 [ 554.046612][T13689] [ 554.048709][T13689] memory: usage 307200kB, limit 307200kB, failcnt 28578 [ 555.293792][T13689] memory+swap: usage 417168kB, limit 9007199254740988kB, failcnt 0 [ 555.373516][T13689] kmem: usage 4576kB, limit 9007199254740988kB, failcnt 0 [ 555.415049][T13689] Memory cgroup stats for /syz0: [ 555.415154][T13689] cache 304992256 [ 555.449952][T13689] rss 4169728 [ 555.478533][T13689] rss_huge 2097152 [ 555.499690][T13689] shmem 304992256 [ 555.509797][T13689] mapped_file 27475968 [ 555.535225][T13689] dirty 0 [ 555.538188][T13689] writeback 0 [ 555.564734][T13689] workingset_refault_anon 10045 [ 555.582569][T13689] workingset_refault_file 5019 [ 555.600880][T13689] swap 113139712 [ 555.617713][T13689] swapcached 65536 [ 555.627807][T13689] pgpgin 485760 [ 555.639829][T13689] pgpgout 429386 [ 555.661603][T13689] pgfault 250023 [ 555.665163][T13689] pgmajfault 729 [ 555.681120][T13689] inactive_anon 307957760 [ 555.700522][T13689] active_anon 1269760 [ 555.704521][T13689] inactive_file 0 [ 555.728436][T13689] active_file 0 [ 555.737561][T13689] unevictable 0 [ 555.751620][T13689] hierarchical_memory_limit 314572800 [ 555.771099][T13689] hierarchical_memsw_limit 9223372036854771712 [ 555.787463][T13689] total_cache 304992256 [ 555.799193][T13689] total_rss 4169728 [ 555.809596][T14123] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1651'. [ 555.821546][T13689] total_rss_huge 2097152 [ 555.825808][T13689] total_shmem 304992256 [ 555.849738][T13689] total_mapped_file 27475968 [ 555.867131][T13689] total_dirty 0 [ 555.880833][T13689] total_writeback 0 [ 555.897428][T13689] total_workingset_refault_anon 10045 [ 555.922429][T13689] total_workingset_refault_file 5019 [ 555.941469][T13689] total_swap 113139712 [ 555.945562][T13689] total_swapcached 65536 [ 555.967643][T13689] total_pgpgin 485760 [ 555.981185][T13689] total_pgpgout 429386 [ 555.995439][T13689] total_pgfault 250023 [ 556.005527][T13689] total_pgmajfault 729 [ 556.017775][T13689] total_inactive_anon 307957760 [ 556.034213][T13689] total_active_anon 1269760 [ 556.041842][T13689] total_inactive_file 0 [ 556.050757][T13689] total_active_file 0 [ 556.066720][T13689] total_unevictable 0 [ 556.317454][T13689] anon_cost 0 [ 556.327556][T13689] file_cost 9662 [ 556.543504][T13689] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1584,pid=13702,uid=0 [ 556.847499][T13689] Memory cgroup out of memory: Killed process 13702 (syz.0.1584) total-vm:131620kB, anon-rss:3316kB, file-rss:43296kB, shmem-rss:26752kB, UID:0 pgtables:244kB oom_score_adj:1000 [ 556.953747][T14141] FAULT_INJECTION: forcing a failure. [ 556.953747][T14141] name failslab, interval 1, probability 0, space 0, times 0 [ 557.022768][T14141] CPU: 0 UID: 0 PID: 14141 Comm: syz.5.1655 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.022791][T14141] Tainted: [L]=SOFTLOCKUP [ 557.022796][T14141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 557.022805][T14141] Call Trace: [ 557.022810][T14141] [ 557.022816][T14141] dump_stack_lvl+0x16c/0x1f0 [ 557.022843][T14141] should_fail_ex+0x512/0x640 [ 557.022860][T14141] ? fs_reclaim_acquire+0xae/0x150 [ 557.022883][T14141] should_failslab+0xc2/0x120 [ 557.022904][T14141] kmem_cache_alloc_noprof+0x83/0x770 [ 557.022921][T14141] ? __pfx_map_id_range_down+0x10/0x10 [ 557.022941][T14141] ? security_inode_alloc+0x3b/0x2b0 [ 557.022960][T14141] ? security_inode_alloc+0x3b/0x2b0 [ 557.022974][T14141] security_inode_alloc+0x3b/0x2b0 [ 557.022990][T14141] inode_init_always_gfp+0xced/0x1040 [ 557.023019][T14141] alloc_inode+0x86/0x240 [ 557.023034][T14141] sock_alloc+0x40/0x280 [ 557.023055][T14141] __sock_create+0xc2/0x8a0 [ 557.023072][T14141] __sys_socket+0x14d/0x260 [ 557.023087][T14141] ? __pfx___sys_socket+0x10/0x10 [ 557.023101][T14141] ? xfd_validate_state+0x61/0x180 [ 557.023119][T14141] __x64_sys_socket+0x72/0xb0 [ 557.023132][T14141] ? lockdep_hardirqs_on+0x7c/0x110 [ 557.023146][T14141] do_syscall_64+0xcd/0xf80 [ 557.023161][T14141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.023175][T14141] RIP: 0033:0x7f0580d8f7c9 [ 557.023187][T14141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.023200][T14141] RSP: 002b:00007f0581b55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 557.023213][T14141] RAX: ffffffffffffffda RBX: 00007f0580fe5fa0 RCX: 00007f0580d8f7c9 [ 557.023223][T14141] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 557.023231][T14141] RBP: 00007f0580e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 557.023239][T14141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.023247][T14141] R13: 00007f0580fe6038 R14: 00007f0580fe5fa0 R15: 00007fffe6fe6308 [ 557.023267][T14141] [ 557.023298][T14141] socket: no more sockets [ 557.386086][T14054] syz.2.1632 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 557.430262][T14054] CPU: 0 UID: 0 PID: 14054 Comm: syz.2.1632 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.430286][T14054] Tainted: [L]=SOFTLOCKUP [ 557.430290][T14054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 557.430298][T14054] Call Trace: [ 557.430304][T14054] [ 557.430310][T14054] dump_stack_lvl+0x16c/0x1f0 [ 557.430337][T14054] dump_header+0x101/0x960 [ 557.430356][T14054] oom_kill_process+0x176/0x910 [ 557.430373][T14054] out_of_memory+0x350/0x1700 [ 557.430389][T14054] ? __lock_acquire+0x436/0x2890 [ 557.430406][T14054] ? __pfx_out_of_memory+0x10/0x10 [ 557.430429][T14054] mem_cgroup_out_of_memory+0x118/0x130 [ 557.430446][T14054] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 557.430467][T14054] ? do_raw_spin_unlock+0x172/0x230 [ 557.430487][T14054] try_charge_memcg+0x695/0xd30 [ 557.430512][T14054] ? __pfx_try_charge_memcg+0x10/0x10 [ 557.430533][T14054] ? __pfx_find_held_lock+0x1/0x10 [ 557.430553][T14054] ? rcu_read_unlock+0x17/0x60 [ 557.430571][T14054] charge_memcg+0x8a/0x230 [ 557.430592][T14054] __mem_cgroup_charge+0x2b/0x1e0 [ 557.430607][T14054] shmem_alloc_and_add_folio+0x50c/0xc20 [ 557.430628][T14054] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 557.430645][T14054] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 557.430666][T14054] shmem_get_folio_gfp+0x67f/0x1610 [ 557.430685][T14054] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 557.430702][T14054] ? filemap_map_pages+0x12dd/0x1e00 [ 557.430721][T14054] shmem_fault+0x1fe/0xa00 [ 557.430738][T14054] ? __pfx_shmem_fault+0x10/0x10 [ 557.430752][T14054] ? __pfx_lru_add+0x10/0x10 [ 557.430771][T14054] ? __pfx_filemap_map_pages+0x10/0x10 [ 557.430792][T14054] ? __pfx_filemap_map_pages+0x10/0x10 [ 557.430806][T14054] __do_fault+0x10d/0x490 [ 557.430824][T14054] ? __pfx_filemap_map_pages+0x10/0x10 [ 557.430838][T14054] do_fault+0xae4/0x1ad0 [ 557.430858][T14054] ? __pfx_filemap_map_pages+0x10/0x10 [ 557.430877][T14054] __handle_mm_fault+0x1919/0x2bb0 [ 557.430897][T14054] ? __pfx___handle_mm_fault+0x10/0x10 [ 557.430913][T14054] ? __pte_offset_map_lock+0x174/0x310 [ 557.430933][T14054] ? find_held_lock+0x2b/0x80 [ 557.430956][T14054] ? follow_page_pte+0x5cf/0x1390 [ 557.430985][T14054] handle_mm_fault+0x3fe/0xad0 [ 557.431004][T14054] __get_user_pages+0x54e/0x3590 [ 557.431032][T14054] ? __pfx___get_user_pages+0x10/0x10 [ 557.431053][T14054] ? __kernel_write_iter+0x5a5/0xb10 [ 557.431077][T14054] get_dump_page+0x257/0x3d0 [ 557.431089][T14054] ? __pfx_get_dump_page+0x10/0x10 [ 557.431102][T14054] ? dump_user_range+0x756/0xb70 [ 557.431127][T14054] dump_user_range+0x195/0xb70 [ 557.431151][T14054] ? __pfx_dump_user_range+0x10/0x10 [ 557.431173][T14054] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 557.431192][T14054] ? __pfx_writenote+0x10/0x10 [ 557.431210][T14054] elf_core_dump+0x29c3/0x3c10 [ 557.431233][T14054] ? __pfx_elf_core_dump+0x10/0x10 [ 557.431246][T14054] ? finish_task_switch.isra.0+0x202/0xbd0 [ 557.431267][T14054] ? rcu_is_watching+0x12/0xc0 [ 557.431289][T14054] ? finish_task_switch.isra.0+0x207/0xbd0 [ 557.431308][T14054] ? 0xffffffffff600000 [ 557.431321][T14054] ? __schedule+0x114b/0x5ee0 [ 557.431341][T14054] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 557.431390][T14054] ? vfs_coredump+0x2b85/0x55e0 [ 557.431409][T14054] vfs_coredump+0x2b85/0x55e0 [ 557.431436][T14054] ? __pfx_vfs_coredump+0x10/0x10 [ 557.431456][T14054] ? __lock_acquire+0x436/0x2890 [ 557.431473][T14054] ? __lock_acquire+0x436/0x2890 [ 557.431487][T14054] ? lock_acquire+0x179/0x330 [ 557.431504][T14054] ? lock_acquire+0x179/0x330 [ 557.431530][T14054] ? arch_stack_walk+0xa6/0x100 [ 557.431554][T14054] ? stack_trace_save+0x8e/0xc0 [ 557.431574][T14054] ? __pfx_stack_trace_save+0x10/0x10 [ 557.431596][T14054] ? stack_depot_save_flags+0x29/0x9b0 [ 557.431613][T14054] ? __lock_acquire+0x436/0x2890 [ 557.431628][T14054] ? kasan_save_stack+0x42/0x60 [ 557.431678][T14054] ? proc_coredump_connector+0x2d1/0x4f0 [ 557.431692][T14054] ? __pfx_proc_coredump_connector+0x10/0x10 [ 557.431711][T14054] ? rcu_is_watching+0x12/0xc0 [ 557.431732][T14054] get_signal+0x22e1/0x26d0 [ 557.431758][T14054] ? __pfx_get_signal+0x10/0x10 [ 557.431776][T14054] ? find_held_lock+0x2b/0x80 [ 557.431792][T14054] ? fixup_vdso_exception+0x34b/0x400 [ 557.431818][T14054] arch_do_signal_or_restart+0x8f/0x7a0 [ 557.431838][T14054] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 557.431864][T14054] ? do_user_addr_fault+0xa62/0x1370 [ 557.431885][T14054] irqentry_exit+0x38a/0x8c0 [ 557.431900][T14054] asm_exc_page_fault+0x26/0x30 [ 557.431914][T14054] RIP: 0033:0x0 [ 557.431924][T14054] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 557.431931][T14054] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 557.431942][T14054] RAX: 0000000000000000 RBX: 00007f902c9e5fa0 RCX: 00007f902c78f7c9 [ 557.431951][T14054] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 557.431960][T14054] RBP: 00007f902c813f91 R08: 0000000000000002 R09: 0000000000000000 [ 557.431972][T14054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.431980][T14054] R13: 00007f902c9e6038 R14: 00007f902c9e5fa0 R15: 00007ffcab898898 [ 557.432000][T14054] [ 557.432023][T14054] memory: usage 3072kB, limit 3072kB, failcnt 197184 [ 558.960764][ T30] audit: type=1804 audit(4294967321.260:27): pid=14181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1663" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/format" dev="tracefs" ino=19680823 res=1 errno=0 [ 558.994955][T14181] FAULT_INJECTION: forcing a failure. [ 558.994955][T14181] name failslab, interval 1, probability 0, space 0, times 0 [ 559.045864][T14181] CPU: 0 UID: 0 PID: 14181 Comm: syz.2.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.045887][T14181] Tainted: [L]=SOFTLOCKUP [ 559.045893][T14181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 559.045901][T14181] Call Trace: [ 559.045906][T14181] [ 559.045913][T14181] dump_stack_lvl+0x16c/0x1f0 [ 559.045939][T14181] should_fail_ex+0x512/0x640 [ 559.045956][T14181] ? fs_reclaim_acquire+0xae/0x150 [ 559.045979][T14181] should_failslab+0xc2/0x120 [ 559.046000][T14181] kmem_cache_alloc_noprof+0x83/0x770 [ 559.046016][T14181] ? __pfx_map_id_range_down+0x10/0x10 [ 559.046036][T14181] ? rcu_is_watching+0x12/0xc0 [ 559.046053][T14181] ? security_inode_alloc+0x3b/0x2b0 [ 559.046071][T14181] ? security_inode_alloc+0x3b/0x2b0 [ 559.046085][T14181] security_inode_alloc+0x3b/0x2b0 [ 559.046100][T14181] inode_init_always_gfp+0xced/0x1040 [ 559.046123][T14181] alloc_inode+0x86/0x240 [ 559.046138][T14181] new_inode+0x22/0x1c0 [ 559.046155][T14181] hugetlbfs_get_inode+0x354/0x700 [ 559.046172][T14181] hugetlb_file_setup+0x15b/0x620 [ 559.046188][T14181] ksys_mmap_pgoff+0x189/0x5c0 [ 559.046210][T14181] __x64_sys_mmap+0x125/0x190 [ 559.046227][T14181] do_syscall_64+0xcd/0xf80 [ 559.046241][T14181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.046255][T14181] RIP: 0033:0x7f902c78f7c9 [ 559.046270][T14181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.046284][T14181] RSP: 002b:00007f902d685038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 559.046298][T14181] RAX: ffffffffffffffda RBX: 00007f902c9e5fa0 RCX: 00007f902c78f7c9 [ 559.046308][T14181] RDX: ffffffffffffffff RSI: 0000000000000002 RDI: 0000000000000000 [ 559.046316][T14181] RBP: 00007f902c813f91 R08: 0000000000000602 R09: 0000300000000000 [ 559.046325][T14181] R10: 0000000000044eb1 R11: 0000000000000246 R12: 0000000000000000 [ 559.046335][T14181] R13: 00007f902c9e6038 R14: 00007f902c9e5fa0 R15: 00007ffcab898898 [ 559.046353][T14181] [ 559.046435][T14054] memory+swap: usage 15032kB, limit 9007199254740988kB, failcnt 0 [ 559.934798][T14054] kmem: usage 1796kB, limit 9007199254740988kB, failcnt 0 [ 559.995610][T14054] Memory cgroup stats for /syz2: [ 559.995718][T14054] cache 8192 [ 560.470279][T14054] rss 1171456 [ 560.473600][T14054] rss_huge 0 [ 560.476791][T14054] shmem 8192 [ 561.010252][T14054] mapped_file 0 [ 561.013763][T14054] dirty 0 [ 561.122725][T14054] writeback 0 [ 561.126049][T14054] workingset_refault_anon 14987 [ 561.190116][T14054] workingset_refault_file 62717 [ 561.217573][T14054] swap 12881920 [ 561.243244][T14054] swapcached 106496 [ 561.270411][T14054] pgpgin 433436 [ 561.290539][T14054] pgpgout 435166 [ 561.323492][T14054] pgfault 295366 [ 561.379037][T14054] pgmajfault 6882 [ 561.397908][T14054] inactive_anon 909312 [ 561.428155][T14054] active_anon 376832 [ 561.454976][T14054] inactive_file 0 [ 561.479656][T14054] active_file 0 [ 561.557979][T14054] unevictable 0 [ 561.584406][T14054] hierarchical_memory_limit 3145728 [ 561.642125][T14054] hierarchical_memsw_limit 9223372036854771712 [ 561.648322][T14054] total_cache 8192 [ 561.710579][T14054] total_rss 1171456 [ 561.714421][T14054] total_rss_huge 0 [ 561.718134][T14054] total_shmem 8192 [ 561.781959][T14054] total_mapped_file 0 [ 561.785964][T14054] total_dirty 0 [ 561.802519][T14054] total_writeback 0 [ 561.806346][T14054] total_workingset_refault_anon 14987 [ 561.840370][T14054] total_workingset_refault_file 62717 [ 561.856183][T14054] total_swap 12881920 [ 561.860181][T14054] total_swapcached 106496 [ 561.990592][T14054] total_pgpgin 433436 [ 562.017385][T14054] total_pgpgout 435166 [ 562.040555][T14054] total_pgfault 295366 [ 562.066188][T14054] total_pgmajfault 6882 [ 562.137193][T14054] total_inactive_anon 909312 [ 562.171483][T14054] total_active_anon 376832 [ 562.202147][T14054] total_inactive_file 0 [ 562.230137][T14054] total_active_file 0 [ 562.264095][T14054] total_unevictable 0 [ 562.268112][T14054] anon_cost 307 [ 562.337011][T14054] file_cost 0 [ 562.360451][T14054] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1632,pid=14054,uid=0 [ 562.494401][T14054] Memory cgroup out of memory: Killed process 14054 (syz.2.1632) total-vm:134932kB, anon-rss:1268kB, file-rss:22096kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 562.897593][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.906362][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.104728][T14233] Invalid ELF header magic: != ELF [ 565.727276][T14264] FAULT_INJECTION: forcing a failure. [ 565.727276][T14264] name fail_futex, interval 1, probability 0, space 0, times 0 [ 565.930036][T14264] CPU: 0 UID: 0 PID: 14264 Comm: syz.0.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.930059][T14264] Tainted: [L]=SOFTLOCKUP [ 565.930064][T14264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.930072][T14264] Call Trace: [ 565.930077][T14264] [ 565.930083][T14264] dump_stack_lvl+0x16c/0x1f0 [ 565.930110][T14264] should_fail_ex+0x512/0x640 [ 565.930133][T14264] ? arch_stack_walk+0xa6/0x100 [ 565.930152][T14264] get_futex_key+0x1d0/0x15f0 [ 565.930169][T14264] ? __pfx_get_futex_key+0x10/0x10 [ 565.930186][T14264] ? stack_trace_save+0x8e/0xc0 [ 565.930207][T14264] ? __pfx_stack_trace_save+0x10/0x10 [ 565.930228][T14264] ? stack_depot_save_flags+0x29/0x9b0 [ 565.930248][T14264] futex_wait_setup+0x9d/0x570 [ 565.930272][T14264] __futex_wait+0x193/0x2f0 [ 565.930291][T14264] ? __pfx___futex_wait+0x10/0x10 [ 565.930312][T14264] ? __pfx_futex_wake_mark+0x10/0x10 [ 565.930333][T14264] ? futex_hash+0x2c5/0x380 [ 565.930349][T14264] ? futex_private_hash_put+0x160/0x1b0 [ 565.930365][T14264] futex_wait+0xe8/0x380 [ 565.930383][T14264] ? __pfx_futex_wait+0x10/0x10 [ 565.930405][T14264] ? putname+0xf5/0x1a0 [ 565.930424][T14264] do_futex+0x229/0x350 [ 565.930441][T14264] ? __pfx_do_futex+0x10/0x10 [ 565.930462][T14264] __x64_sys_futex+0x1e0/0x4c0 [ 565.930479][T14264] ? __x64_sys_openat+0x174/0x210 [ 565.930495][T14264] ? __pfx___x64_sys_futex+0x10/0x10 [ 565.930518][T14264] do_syscall_64+0xcd/0xf80 [ 565.930533][T14264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.930547][T14264] RIP: 0033:0x7f1afe98f7c9 [ 565.930559][T14264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.930572][T14264] RSP: 002b:00007f1aff8c50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 565.930586][T14264] RAX: ffffffffffffffda RBX: 00007f1afebe5fa8 RCX: 00007f1afe98f7c9 [ 565.930595][T14264] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1afebe5fa8 [ 565.930604][T14264] RBP: 00007f1afebe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 565.930612][T14264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.930620][T14264] R13: 00007f1afebe6038 R14: 00007ffcc91aaf90 R15: 00007ffcc91ab078 [ 565.930638][T14264] [ 567.154093][T14288] netlink: 'syz.2.1687': attribute type 4 has an invalid length. [ 567.183030][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1687'. [ 569.814932][T14323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1694'. [ 570.410326][T11461] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 573.807758][T14360] Line length is too long: Should be less than 4094 [ 576.929017][T14363] Process accounting resumed [ 580.394751][T14385] vhci_hcd vhci_hcd.2: Wrong hub descriptor type for USB 3.0 roothub. [ 580.764431][T14404] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1709'. [ 587.607357][T14444] Line length is too long: Should be less than 4094 [ 588.874648][T14471] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1724'. [ 590.609716][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1734'. [ 593.210689][T14517] binder: 14516:14517 ioctl 0 9 returned -22 [ 593.464847][T14531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1736'. [ 594.304799][T14555] syz.4.1741 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 594.686200][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1745'. [ 594.869913][T14569] bridge0: port 4(bond0) entered blocking state [ 594.912244][T14569] bridge0: port 4(bond0) entered disabled state [ 594.950463][T14569] bond0: entered allmulticast mode [ 594.985709][T14569] bond_slave_0: entered allmulticast mode [ 595.011803][T14569] bond_slave_1: entered allmulticast mode [ 595.042041][T14569] bond0: entered promiscuous mode [ 595.063875][T14569] bond_slave_0: entered promiscuous mode [ 595.103598][T14569] bond_slave_1: entered promiscuous mode [ 595.123809][T14569] bridge0: port 4(bond0) entered blocking state [ 595.130156][T14569] bridge0: port 4(bond0) entered forwarding state [ 595.216459][T14578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1750'. [ 598.650245][T11461] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 601.070723][T14613] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.1757: iget: checksum invalid [ 601.083106][T14621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1758'. [ 601.814818][T14613] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 602.058519][T14613] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.1757: iget: checksum invalid [ 602.162132][T14613] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 602.268485][T14613] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.1757: iget: checksum invalid [ 602.359352][T14613] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 602.461585][T14613] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.1757: iget: checksum invalid [ 602.581026][T14613] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 602.665741][T14613] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 602.704843][T11461] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13 [ 602.923490][T14635] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1761'. [ 602.946102][T14613] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 603.465241][T11461] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 603.677008][T14639] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1758'. [ 605.149086][T14621] bond0: (slave bond_slave_1): Releasing backup interface [ 605.172136][T14621] bond_slave_1 (unregistering): left promiscuous mode [ 605.193057][T14621] bond_slave_1 (unregistering): left allmulticast mode [ 606.850088][T14653] HSR: entered promiscuous mode [ 607.174731][T14646] Process accounting paused [ 607.403541][T14678] bcache: register_bcache() error : failed to open device [ 607.437952][T14677] bcache: register_bcache() error : failed to open device [ 608.533014][T14698] Unable to find swap-space signature [ 609.945476][T14718] FAULT_INJECTION: forcing a failure. [ 609.945476][T14718] name fail_futex, interval 1, probability 0, space 0, times 0 [ 609.984504][T14718] CPU: 0 UID: 0 PID: 14718 Comm: syz.4.1779 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.984527][T14718] Tainted: [L]=SOFTLOCKUP [ 609.984533][T14718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.984541][T14718] Call Trace: [ 609.984546][T14718] [ 609.984552][T14718] dump_stack_lvl+0x16c/0x1f0 [ 609.984579][T14718] should_fail_ex+0x512/0x640 [ 609.984598][T14718] get_futex_key+0x1d0/0x15f0 [ 609.984615][T14718] ? do_raw_spin_lock+0x12c/0x2b0 [ 609.984631][T14718] ? __pfx_get_futex_key+0x10/0x10 [ 609.984646][T14718] ? proc_sys_call_handler+0x2b4/0x5b0 [ 609.984666][T14718] ? do_raw_spin_unlock+0x172/0x230 [ 609.984685][T14718] futex_wake+0xea/0x530 [ 609.984707][T14718] ? __pfx_futex_wake+0x10/0x10 [ 609.984728][T14718] ? ksys_write+0x190/0x250 [ 609.984748][T14718] ? __pfx_proc_sys_write+0x10/0x10 [ 609.984768][T14718] do_futex+0x1e3/0x350 [ 609.984784][T14718] ? __pfx_do_futex+0x10/0x10 [ 609.984804][T14718] __x64_sys_futex+0x1e0/0x4c0 [ 609.984820][T14718] ? fput+0x70/0xf0 [ 609.984833][T14718] ? __pfx___x64_sys_futex+0x10/0x10 [ 609.984849][T14718] ? syscall_user_dispatch+0x78/0x140 [ 609.984872][T14718] do_syscall_64+0xcd/0xf80 [ 609.984895][T14718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.984910][T14718] RIP: 0033:0x7f73e1d8f7c9 [ 609.984922][T14718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.984936][T14718] RSP: 002b:00007f73e2cbb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 609.984950][T14718] RAX: ffffffffffffffda RBX: 00007f73e1fe5fa8 RCX: 00007f73e1d8f7c9 [ 609.984960][T14718] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f73e1fe5fac [ 609.984968][T14718] RBP: 00007f73e1fe5fa0 R08: 00007f73e2cbc000 R09: 0000000000000000 [ 609.984977][T14718] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 609.984985][T14718] R13: 00007f73e1fe6038 R14: 00007ffda74e9140 R15: 00007ffda74e9228 [ 609.985003][T14718] [ 610.414546][ T30] audit: type=1800 audit(4294967372.720:28): pid=14732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1780" name=04 dev="tmpfs" ino=2016 res=0 errno=0 [ 610.466346][ T30] audit: type=1800 audit(4294967372.720:29): pid=14733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1780" name=04 dev="tmpfs" ino=2016 res=0 errno=0 [ 610.728484][T14738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1783'. [ 610.806496][T14738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1783'. [ 611.180987][T14755] bdi 1:6: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 611.914834][T14769] binder: 14767:14769 ioctl c018620c 0 returned -1 [ 612.082608][T14769] FAULT_INJECTION: forcing a failure. [ 612.082608][T14769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.221010][T14769] CPU: 0 UID: 0 PID: 14769 Comm: syz.2.1790 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.221035][T14769] Tainted: [L]=SOFTLOCKUP [ 612.221041][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.221050][T14769] Call Trace: [ 612.221055][T14769] [ 612.221061][T14769] dump_stack_lvl+0x16c/0x1f0 [ 612.221088][T14769] should_fail_ex+0x512/0x640 [ 612.221108][T14769] _copy_from_user+0x2e/0xd0 [ 612.221124][T14769] do_pages_stat+0x240/0x7b0 [ 612.221152][T14769] ? __pfx_do_pages_stat+0x10/0x10 [ 612.221191][T14769] ? do_raw_spin_unlock+0x172/0x230 [ 612.221210][T14769] kernel_move_pages+0xfc8/0x12f0 [ 612.221226][T14769] ? do_futex+0x122/0x350 [ 612.221242][T14769] ? __pfx_do_futex+0x10/0x10 [ 612.221263][T14769] ? __pfx_kernel_move_pages+0x10/0x10 [ 612.221280][T14769] ? __x64_sys_futex+0x1e0/0x4c0 [ 612.221295][T14769] ? __x64_sys_futex+0x1e9/0x4c0 [ 612.221311][T14769] ? fput+0x70/0xf0 [ 612.221327][T14769] ? xfd_validate_state+0x61/0x180 [ 612.221340][T14769] ? __pfx_ksys_write+0x10/0x10 [ 612.221361][T14769] __x64_sys_move_pages+0xe0/0x1c0 [ 612.221375][T14769] ? do_syscall_64+0x91/0xf80 [ 612.221388][T14769] ? lockdep_hardirqs_on+0x7c/0x110 [ 612.221401][T14769] do_syscall_64+0xcd/0xf80 [ 612.221415][T14769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.221429][T14769] RIP: 0033:0x7f902c78f7c9 [ 612.221441][T14769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.221454][T14769] RSP: 002b:00007f902d664038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 612.221468][T14769] RAX: ffffffffffffffda RBX: 00007f902c9e6090 RCX: 00007f902c78f7c9 [ 612.221477][T14769] RDX: 0000000000000000 RSI: 0000000000020007 RDI: 0000000000000001 [ 612.221485][T14769] RBP: 00007f902c813f91 R08: 0000000000000000 R09: 8000000000000000 [ 612.221494][T14769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.221502][T14769] R13: 00007f902c9e6128 R14: 00007f902c9e6090 R15: 00007ffcab898898 [ 612.221519][T14769] [ 614.518474][T14794] hub 3-0:1.0: USB hub found [ 614.572015][T14794] hub 3-0:1.0: 1 port detected [ 614.668770][T14794] usb usb3: authorized to connect [ 614.791405][T14792] zswap: compressor not available [ 615.030040][T14810] program syz.5.1800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.244861][T14824] zswap: compressor not available [ 617.430914][T14848] netlink: 'syz.0.1806': attribute type 11 has an invalid length. [ 617.699307][T14849] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 618.667822][T14855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1808'. [ 618.783348][T14855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1808'. [ 618.809783][T14857] tipc: Can't bind to reserved service type 0 [ 624.189052][T14898] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1815: iget: checksum invalid [ 624.303176][T14898] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 624.341882][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.348888][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.431920][T14898] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1815: iget: checksum invalid [ 624.519645][T14898] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 624.574310][T14898] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1815: iget: checksum invalid [ 624.615280][T14898] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 624.651200][T14898] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1815: iget: checksum invalid [ 624.693814][T14898] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 624.737222][T14898] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 624.850475][T14898] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 624.928104][T14917] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1818'. [ 625.043352][T14921] hub 1-0:1.0: USB hub found [ 625.080108][T14921] hub 1-0:1.0: 1 port detected [ 625.361742][T14937] FAULT_INJECTION: forcing a failure. [ 625.361742][T14937] name failslab, interval 1, probability 0, space 0, times 0 [ 625.443298][T14937] CPU: 0 UID: 0 PID: 14937 Comm: syz.0.1822 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.443322][T14937] Tainted: [L]=SOFTLOCKUP [ 625.443327][T14937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.443336][T14937] Call Trace: [ 625.443342][T14937] [ 625.443348][T14937] dump_stack_lvl+0x16c/0x1f0 [ 625.443383][T14937] should_fail_ex+0x512/0x640 [ 625.443400][T14937] ? kmem_cache_alloc_noprof+0x62/0x770 [ 625.443419][T14937] should_failslab+0xc2/0x120 [ 625.443441][T14937] kmem_cache_alloc_noprof+0x83/0x770 [ 625.443457][T14937] ? prepare_creds+0x2c/0x940 [ 625.443476][T14937] ? prepare_creds+0x2c/0x940 [ 625.443491][T14937] prepare_creds+0x2c/0x940 [ 625.443507][T14937] __sys_setfsuid+0xda/0x350 [ 625.443524][T14937] ? rcu_is_watching+0x12/0xc0 [ 625.443545][T14937] do_syscall_64+0xcd/0xf80 [ 625.443560][T14937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.443574][T14937] RIP: 0033:0x7f1afe98f7c9 [ 625.443585][T14937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.443599][T14937] RSP: 002b:00007f1aff8a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 625.443612][T14937] RAX: ffffffffffffffda RBX: 00007f1afebe6090 RCX: 00007f1afe98f7c9 [ 625.443621][T14937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 625.443629][T14937] RBP: 00007f1afea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 625.443637][T14937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.443645][T14937] R13: 00007f1afebe6128 R14: 00007f1afebe6090 R15: 00007ffcc91ab078 [ 625.443663][T14937] [ 625.932012][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'. [ 626.727212][T14959] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1835'. [ 627.091810][T14974] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1829: iget: checksum invalid [ 627.212314][T14974] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 627.328577][T14974] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1829: iget: checksum invalid [ 627.396692][T14974] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 627.439597][T14974] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1829: iget: checksum invalid [ 627.531879][T14974] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 627.947933][T14974] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1829: iget: checksum invalid [ 628.227835][T14974] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 628.311315][T14974] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 628.363749][T14974] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 630.509949][T15035] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.1844: iget: checksum invalid [ 630.602452][T15035] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 630.719292][T15035] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.1844: iget: checksum invalid [ 630.808399][T15035] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 630.903764][T15035] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.1844: iget: checksum invalid [ 630.950624][T15035] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 631.010658][T15035] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.1844: iget: checksum invalid [ 631.052861][T15035] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 631.096344][T15035] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 631.153167][T15035] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 632.966774][T15067] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1851'. [ 633.009886][T15067] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1851'. [ 633.073283][T15077] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1851'. [ 633.116125][T15078] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1851'. [ 633.475624][T15087] random: crng reseeded on system resumption [ 633.571220][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1855'. [ 634.917003][T15109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1858'. [ 634.980133][ T5835] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 635.190307][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 635.190332][ T5835] Tainted: [L]=SOFTLOCKUP [ 635.190337][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 635.190346][ T5835] Call Trace: [ 635.190351][ T5835] [ 635.190357][ T5835] dump_stack_lvl+0x16c/0x1f0 [ 635.190387][ T5835] dump_header+0x101/0x960 [ 635.190406][ T5835] oom_kill_process+0x176/0x910 [ 635.190432][ T5835] out_of_memory+0x350/0x1700 [ 635.190447][ T5835] ? __lock_acquire+0x436/0x2890 [ 635.190464][ T5835] ? __pfx_out_of_memory+0x10/0x10 [ 635.190485][ T5835] mem_cgroup_out_of_memory+0x118/0x130 [ 635.190502][ T5835] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 635.190523][ T5835] ? do_raw_spin_unlock+0x172/0x230 [ 635.190542][ T5835] try_charge_memcg+0x695/0xd30 [ 635.190567][ T5835] ? __pfx_try_charge_memcg+0x10/0x10 [ 635.190592][ T5835] ? find_held_lock+0x2b/0x80 [ 635.190613][ T5835] charge_memcg+0x8a/0x230 [ 635.190634][ T5835] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 635.190651][ T5835] __read_swap_cache_async+0x397/0x500 [ 635.190671][ T5835] ? __pfx___read_swap_cache_async+0x10/0x10 [ 635.190690][ T5835] ? __lock_acquire+0x436/0x2890 [ 635.190707][ T5835] swap_cluster_readahead+0x528/0x770 [ 635.190729][ T5835] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 635.190748][ T5835] ? __lock_acquire+0x436/0x2890 [ 635.190762][ T5835] ? _raw_spin_unlock+0x28/0x50 [ 635.190788][ T5835] ? get_vma_policy+0x242/0x3c0 [ 635.190803][ T5835] swapin_readahead+0x160/0x1220 [ 635.190827][ T5835] ? __pfx_swapin_readahead+0x10/0x10 [ 635.190845][ T5835] ? find_held_lock+0x2b/0x80 [ 635.190861][ T5835] ? swap_cache_get_folio+0x267/0x8e0 [ 635.190876][ T5835] ? swap_cache_get_folio+0x267/0x8e0 [ 635.190891][ T5835] ? swap_cache_get_folio+0x267/0x8e0 [ 635.190908][ T5835] ? swap_cache_get_folio+0x267/0x8e0 [ 635.190923][ T5835] ? swap_cache_get_folio+0x293/0x8e0 [ 635.190940][ T5835] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 635.190955][ T5835] ? __pfx_get_swap_device+0x10/0x10 [ 635.190975][ T5835] ? rcu_read_unlock+0x2d/0xb0 [ 635.190994][ T5835] ? do_swap_page+0x962/0x64a0 [ 635.191007][ T5835] do_swap_page+0x962/0x64a0 [ 635.191024][ T5835] ? __lock_acquire+0x436/0x2890 [ 635.191042][ T5835] ? __pfx_do_swap_page+0x10/0x10 [ 635.191058][ T5835] ? __pfx_default_wake_function+0x10/0x10 [ 635.191078][ T5835] ? rcu_is_watching+0x12/0xc0 [ 635.191097][ T5835] ? __free_object+0x286/0x410 [ 635.191119][ T5835] ? rcu_is_watching+0x12/0xc0 [ 635.191137][ T5835] ? ___pte_offset_map+0x175/0x380 [ 635.191159][ T5835] __handle_mm_fault+0x19cb/0x2bb0 [ 635.191177][ T5835] ? reacquire_held_locks+0xcd/0x1f0 [ 635.191191][ T5835] ? __pfx___handle_mm_fault+0x10/0x10 [ 635.191209][ T5835] ? lock_vma_under_rcu+0x176/0x580 [ 635.191229][ T5835] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 635.191253][ T5835] handle_mm_fault+0x3fe/0xad0 [ 635.191272][ T5835] do_user_addr_fault+0x60c/0x1370 [ 635.191291][ T5835] ? rcu_is_watching+0x12/0xc0 [ 635.191311][ T5835] exc_page_fault+0x64/0xc0 [ 635.191334][ T5835] asm_exc_page_fault+0x26/0x30 [ 635.191347][ T5835] RIP: 0033:0x7f902c7b75f0 [ 635.191359][ T5835] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 635.191373][ T5835] RSP: 002b:00007ffcab898ba8 EFLAGS: 00010246 [ 635.191385][ T5835] RAX: 0000000000000000 RBX: 0000000000000633 RCX: 00007f902c7c2085 [ 635.191394][ T5835] RDX: 00007ffcab898bf0 RSI: 0000000000000000 RDI: 0000000000000000 [ 635.191402][ T5835] RBP: 00007ffcab898c5c R08: 0000000000000000 R09: 0000000000000000 [ 635.191413][ T5835] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 635.191422][ T5835] R13: 00000000000927c0 R14: 000000000009a677 R15: 00007ffcab898cb0 [ 635.191441][ T5835] [ 635.575846][ T5835] memory: usage 3072kB, limit 3072kB, failcnt 208992 [ 635.582654][ T5835] memory+swap: usage 7820kB, limit 9007199254740988kB, failcnt 0 [ 635.590458][ T5835] kmem: usage 1860kB, limit 9007199254740988kB, failcnt 0 [ 635.597602][ T5835] Memory cgroup stats for /syz2: [ 635.597691][ T5835] cache 1040384 [ 635.606098][ T5835] rss 0 [ 635.608857][ T5835] rss_huge 0 [ 635.612310][ T5835] shmem 1040384 [ 635.615776][ T5835] mapped_file 0 [ 635.619750][ T5835] dirty 0 [ 635.622754][ T5835] writeback 0 [ 635.626574][ T5835] workingset_refault_anon 16949 [ 635.631467][ T5835] workingset_refault_file 62717 [ 635.636323][ T5835] swap 4861952 [ 635.639689][ T5835] swapcached 200704 [ 635.643517][ T5835] pgpgin 453832 [ 635.646981][ T5835] pgpgout 455573 [ 635.650555][ T5835] pgfault 320372 [ 635.654101][ T5835] pgmajfault 8020 [ 635.657738][ T5835] inactive_anon 1212416 [ 635.661952][ T5835] active_anon 28672 [ 635.665784][ T5835] inactive_file 0 [ 635.669425][ T5835] active_file 0 [ 635.672978][ T5835] unevictable 0 [ 635.676441][ T5835] hierarchical_memory_limit 3145728 [ 635.681702][ T5835] hierarchical_memsw_limit 9223372036854771712 [ 635.687895][ T5835] total_cache 1040384 [ 635.692137][ T5835] total_rss 0 [ 635.695432][ T5835] total_rss_huge 0 [ 635.699156][ T5835] total_shmem 1040384 [ 635.703169][ T5835] total_mapped_file 0 [ 635.707149][ T5835] total_dirty 0 [ 635.710637][ T5835] total_writeback 0 [ 635.714452][ T5835] total_workingset_refault_anon 16949 [ 635.719826][ T5835] total_workingset_refault_file 62717 [ 635.725756][ T5835] total_swap 4861952 [ 635.730107][ T5835] total_swapcached 200704 [ 635.734485][ T5835] total_pgpgin 453832 [ 635.738489][ T5835] total_pgpgout 455573 [ 635.742610][ T5835] total_pgfault 320372 [ 635.746683][ T5835] total_pgmajfault 8020 [ 635.750881][ T5835] total_inactive_anon 1212416 [ 635.755574][ T5835] total_active_anon 28672 [ 635.759911][ T5835] total_inactive_file 0 [ 635.764115][ T5835] total_active_file 0 [ 635.768101][ T5835] total_unevictable 0 [ 635.772146][ T5835] anon_cost 115 [ 635.775606][ T5835] file_cost 0 [ 635.778889][ T5835] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1848,pid=15056,uid=0 [ 635.793847][ T5835] Memory cgroup out of memory: Killed process 15056 (syz.2.1848) total-vm:135196kB, anon-rss:1268kB, file-rss:22096kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 637.419286][T15133] input: jJǸ-9%v as /devices/virtual/input/input36 [ 637.791354][T15135] bridge0: port 4(gretap0) entered blocking state [ 637.797939][T15135] bridge0: port 4(gretap0) entered disabled state [ 637.899821][T15135] gretap0: entered allmulticast mode [ 637.939104][T15135] gretap0: entered promiscuous mode [ 638.001542][T15135] bridge0: port 4(gretap0) entered blocking state [ 638.008074][T15135] bridge0: port 4(gretap0) entered forwarding state [ 638.060021][T15138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1866'. [ 639.259678][T15182] input: f as /devices/virtual/input/input37 [ 640.092091][T15192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1879'. [ 640.714069][T15205] netlink: 'syz.5.1884': attribute type 1 has an invalid length. [ 640.746151][T15206] __vm_enough_memory: pid: 15206, comm: syz.0.1883, bytes: 8589938688 not enough memory for the allocation [ 641.219971][T15229] netlink: zone id is out of range [ 642.237595][ T7687] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 9 with max blocks 6 with error 117 [ 642.317169][ T7687] EXT4-fs (sda1): This should not happen!! Data will be lost [ 642.317169][ T7687] [ 643.025076][T15268] netlink: zone id is out of range [ 643.994832][T15301] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1910'. [ 644.752013][T15300] syz.2.1910 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 644.818117][T15300] CPU: 0 UID: 0 PID: 15300 Comm: syz.2.1910 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.818141][T15300] Tainted: [L]=SOFTLOCKUP [ 644.818146][T15300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 644.818154][T15300] Call Trace: [ 644.818159][T15300] [ 644.818165][T15300] dump_stack_lvl+0x16c/0x1f0 [ 644.818192][T15300] dump_header+0x101/0x960 [ 644.818211][T15300] oom_kill_process+0x176/0x910 [ 644.818228][T15300] out_of_memory+0x350/0x1700 [ 644.818244][T15300] ? __lock_acquire+0x436/0x2890 [ 644.818263][T15300] ? __pfx_out_of_memory+0x10/0x10 [ 644.818283][T15300] mem_cgroup_out_of_memory+0x118/0x130 [ 644.818301][T15300] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 644.818322][T15300] ? do_raw_spin_unlock+0x172/0x230 [ 644.818341][T15300] try_charge_memcg+0x695/0xd30 [ 644.818366][T15300] ? __pfx_try_charge_memcg+0x10/0x10 [ 644.818391][T15300] ? find_held_lock+0x2b/0x80 [ 644.818411][T15300] charge_memcg+0x8a/0x230 [ 644.818432][T15300] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 644.818449][T15300] __read_swap_cache_async+0x397/0x500 [ 644.818469][T15300] ? __pfx___read_swap_cache_async+0x10/0x10 [ 644.818493][T15300] ? mlock_drain_local+0x130/0x4e0 [ 644.818516][T15300] swap_cluster_readahead+0x432/0x770 [ 644.818537][T15300] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 644.818556][T15300] ? __lock_acquire+0x436/0x2890 [ 644.818578][T15300] ? get_vma_policy+0x242/0x3c0 [ 644.818592][T15300] swapin_readahead+0x160/0x1220 [ 644.818616][T15300] ? __pfx_swapin_readahead+0x10/0x10 [ 644.818634][T15300] ? find_held_lock+0x2b/0x80 [ 644.818650][T15300] ? swap_cache_get_folio+0x267/0x8e0 [ 644.818665][T15300] ? swap_cache_get_folio+0x267/0x8e0 [ 644.818680][T15300] ? swap_cache_get_folio+0x267/0x8e0 [ 644.818697][T15300] ? swap_cache_get_folio+0x267/0x8e0 [ 644.818713][T15300] ? swap_cache_get_folio+0x293/0x8e0 [ 644.818730][T15300] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 644.818745][T15300] ? __pfx_get_swap_device+0x10/0x10 [ 644.818764][T15300] ? rcu_read_unlock+0x2d/0xb0 [ 644.818783][T15300] ? do_swap_page+0x962/0x64a0 [ 644.818795][T15300] do_swap_page+0x962/0x64a0 [ 644.818812][T15300] ? __lock_acquire+0x436/0x2890 [ 644.818828][T15300] ? find_held_lock+0x2b/0x80 [ 644.818845][T15300] ? __pfx_do_swap_page+0x10/0x10 [ 644.818861][T15300] ? __pfx_default_wake_function+0x10/0x10 [ 644.818881][T15300] ? finish_task_switch.isra.0+0x207/0xbd0 [ 644.818903][T15300] ? rcu_is_watching+0x12/0xc0 [ 644.818923][T15300] ? ___pte_offset_map+0x175/0x380 [ 644.818945][T15300] __handle_mm_fault+0x19cb/0x2bb0 [ 644.818963][T15300] ? reacquire_held_locks+0xcd/0x1f0 [ 644.818977][T15300] ? __pfx___handle_mm_fault+0x10/0x10 [ 644.818994][T15300] ? lock_vma_under_rcu+0x176/0x580 [ 644.819015][T15300] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 644.819039][T15300] handle_mm_fault+0x3fe/0xad0 [ 644.819057][T15300] do_user_addr_fault+0x60c/0x1370 [ 644.819076][T15300] ? rcu_is_watching+0x12/0xc0 [ 644.819096][T15300] exc_page_fault+0x64/0xc0 [ 644.819118][T15300] asm_exc_page_fault+0x26/0x30 [ 644.819131][T15300] RIP: 0033:0x7f902c64f7fb [ 644.819144][T15300] Code: 74 5f 80 3d de 28 39 00 00 8b 73 20 75 31 8b 43 20 48 89 6b 18 48 c7 43 40 00 00 00 00 48 01 c5 80 3d b1 85 39 00 01 48 19 c0 <48> 89 6b 28 48 83 e0 fc 48 83 c0 08 48 89 43 38 5b 5d 41 5c c3 b9 [ 644.819157][T15300] RSP: 002b:00007ffcab898960 EFLAGS: 00010246 [ 644.819168][T15300] RAX: 0000000000000000 RBX: 00007f902c9e63f8 RCX: 00007f902c78f803 [ 644.819177][T15300] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f902a1f4000 [ 644.819185][T15300] RBP: 00007f902a5f4000 R08: 00000000000000dc R09: 0000000000000000 [ 644.819194][T15300] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000003 [ 644.819202][T15300] R13: 00007f902c9e6360 R14: 0000000000001361 R15: 0000000000000005 [ 644.819221][T15300] [ 645.188313][T15300] memory: usage 3072kB, limit 3072kB, failcnt 211998 [ 645.197753][T15300] memory+swap: usage 3748kB, limit 9007199254740988kB, failcnt 0 [ 645.205541][T15300] kmem: usage 2896kB, limit 9007199254740988kB, failcnt 0 [ 645.212690][T15300] Memory cgroup stats for /syz2: [ 645.212779][T15300] cache 0 [ 645.220669][T15300] rss 0 [ 645.223432][T15300] rss_huge 0 [ 645.226741][T15300] shmem 0 [ 645.229683][T15300] mapped_file 0 [ 645.233172][T15300] dirty 0 [ 645.236108][T15300] writeback 0 [ 645.239394][T15300] workingset_refault_anon 17136 [ 645.244802][T15300] workingset_refault_file 62717 [ 645.250104][T15300] swap 692224 [ 645.253427][T15300] swapcached 180224 [ 645.257242][T15300] pgpgin 457914 [ 645.260812][T15300] pgpgout 459914 [ 645.264359][T15300] pgfault 326293 [ 645.267905][T15300] pgmajfault 8134 [ 645.271600][T15300] inactive_anon 110592 [ 645.275678][T15300] active_anon 69632 [ 645.279497][T15300] inactive_file 0 [ 645.283146][T15300] active_file 0 [ 645.286607][T15300] unevictable 0 [ 645.290062][T15300] hierarchical_memory_limit 3145728 [ 645.295388][T15300] hierarchical_memsw_limit 9223372036854771712 [ 645.301570][T15300] total_cache 0 [ 645.305025][T15300] total_rss 0 [ 645.308311][T15300] total_rss_huge 0 [ 645.312065][T15300] total_shmem 0 [ 645.315527][T15300] total_mapped_file 0 [ 645.319505][T15300] total_dirty 0 [ 645.322981][T15300] total_writeback 0 [ 645.326796][T15300] total_workingset_refault_anon 17136 [ 645.332182][T15300] total_workingset_refault_file 62717 [ 645.337561][T15300] total_swap 692224 [ 645.341385][T15300] total_swapcached 180224 [ 645.346215][T15300] total_pgpgin 457914 [ 645.350226][T15300] total_pgpgout 459914 [ 645.354753][T15300] total_pgfault 326293 [ 645.358821][T15300] total_pgmajfault 8134 [ 645.363012][T15300] total_inactive_anon 110592 [ 645.367605][T15300] total_active_anon 69632 [ 645.372045][T15300] total_inactive_file 0 [ 645.376207][T15300] total_active_file 0 [ 645.380228][T15300] total_unevictable 0 [ 645.384208][T15300] anon_cost 83 [ 645.387576][T15300] file_cost 0 [ 645.390869][T15300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1910,pid=15300,uid=0 [ 645.405988][T15300] Memory cgroup out of memory: Killed process 15300 (syz.2.1910) total-vm:176304kB, anon-rss:1268kB, file-rss:30284kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 645.827635][T15301] ieee80211 !PjE r҄y*"l-|O 18 [ 653.923491][T15582] openvswitch: netlink: IP tunnel dst address not specified [ 655.090076][T15610] FAULT_INJECTION: forcing a failure. [ 655.090076][T15610] name failslab, interval 1, probability 0, space 0, times 0 [ 655.192073][T15610] CPU: 0 UID: 0 PID: 15610 Comm: syz.4.1956 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.192101][T15610] Tainted: [L]=SOFTLOCKUP [ 655.192107][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.192116][T15610] Call Trace: [ 655.192121][T15610] [ 655.192128][T15610] dump_stack_lvl+0x16c/0x1f0 [ 655.192155][T15610] should_fail_ex+0x512/0x640 [ 655.192172][T15610] ? __kmalloc_cache_noprof+0x5f/0x800 [ 655.192190][T15610] should_failslab+0xc2/0x120 [ 655.192212][T15610] __kmalloc_cache_noprof+0x80/0x800 [ 655.192228][T15610] ? __do_sys_fanotify_init+0x5e7/0xed0 [ 655.192252][T15610] ? __do_sys_fanotify_init+0x5e7/0xed0 [ 655.192270][T15610] __do_sys_fanotify_init+0x5e7/0xed0 [ 655.192290][T15610] do_syscall_64+0xcd/0xf80 [ 655.192305][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.192320][T15610] RIP: 0033:0x7f73e1d8f7c9 [ 655.192332][T15610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.192345][T15610] RSP: 002b:00007f73e2cbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 655.192358][T15610] RAX: ffffffffffffffda RBX: 00007f73e1fe5fa0 RCX: 00007f73e1d8f7c9 [ 655.192367][T15610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 655.192375][T15610] RBP: 00007f73e1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 655.192383][T15610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.192391][T15610] R13: 00007f73e1fe6038 R14: 00007f73e1fe5fa0 R15: 00007ffda74e9228 [ 655.192410][T15610] [ 655.600470][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 657.693888][T11461] Bluetooth: hci0: command 0x0c1a tx timeout [ 658.631646][T15772] netlink: 'syz.0.1971': attribute type 11 has an invalid length. [ 658.740355][T15772] netlink: 'syz.0.1971': attribute type 11 has an invalid length. [ 658.906085][T15772] netlink: 'syz.0.1971': attribute type 11 has an invalid length. [ 659.044701][T15772] netlink: 'syz.0.1971': attribute type 11 has an invalid length. [ 662.405990][T15982] futex_wake_op: syz.5.1982 tries to shift op by -2048; fix this program [ 662.507385][T15993] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 664.347825][T16032] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1989'. [ 664.444232][T16033] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1989'. [ 664.516521][T16035] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1989'. [ 664.584904][T16037] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1989'. [ 665.215600][T16052] ima: policy update failed [ 665.265984][ T30] audit: type=1802 audit(4294967427.569:30): pid=16052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1992" res=0 errno=0 [ 668.098690][T16237] netlink: 178 bytes leftover after parsing attributes in process `syz.2.2005'. [ 668.194304][T16242] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2007: iget: checksum invalid [ 668.237655][T16242] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 668.282522][T16242] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2007: iget: checksum invalid [ 668.325770][T16242] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 668.357638][T16242] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2007: iget: checksum invalid [ 668.393024][T16243] futex_wake_op: syz.0.2006 tries to shift op by -2048; fix this program [ 668.411949][T16242] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 668.454332][T16242] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2007: iget: checksum invalid [ 668.483487][T16242] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 668.516330][T16242] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 668.539331][T16242] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 669.011238][T16249] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 669.057142][ T30] audit: type=1806 audit(4294967431.359:31): xattr="" res=-22 [ 676.105716][T16403] netlink: 'syz.0.2028': attribute type 27 has an invalid length. [ 676.137717][T16403] netlink: 'syz.0.2028': attribute type 28 has an invalid length. [ 676.167636][T16403] netlink: 'syz.0.2028': attribute type 29 has an invalid length. [ 676.196623][T16403] netlink: 'syz.0.2028': attribute type 30 has an invalid length. [ 676.238286][T16403] netlink: 'syz.0.2028': attribute type 31 has an invalid length. [ 676.268035][T16403] netlink: 'syz.0.2028': attribute type 32 has an invalid length. [ 676.296072][T16403] netlink: 'syz.0.2028': attribute type 33 has an invalid length. [ 676.326175][T16403] netlink: 'syz.0.2028': attribute type 35 has an invalid length. [ 676.353036][T16403] netlink: 'syz.0.2028': attribute type 37 has an invalid length. [ 676.378416][T16403] netlink: 18 bytes leftover after parsing attributes in process `syz.0.2028'. [ 677.521104][ T51] Bluetooth: hci0: unexpected event 0x3e length: 0 < 1 [ 677.550470][ T51] Bluetooth: hci0: unexpected event 0x3e length: 0 < 1 [ 678.459674][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2038'. [ 679.009022][ T30] audit: type=1800 audit(4294975241.310:32): pid=16574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2040" name="lu_gp_id" dev="configfs" ino=65974 res=0 errno=0 [ 679.303491][T16579] can: request_module (can-proto-0) failed. [ 679.590916][T16602] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2045: iget: checksum invalid [ 679.663124][T16602] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 679.757476][T16602] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2045: iget: checksum invalid [ 679.807062][T16602] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 679.849056][T16602] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2045: iget: checksum invalid [ 679.877753][T16546] syz.2.2040 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 679.895546][T16602] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 679.923444][T16602] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2045: iget: checksum invalid [ 679.960160][T16602] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 679.993975][T16602] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 680.028207][T16602] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 680.040977][T16546] CPU: 0 UID: 0 PID: 16546 Comm: syz.2.2040 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.040999][T16546] Tainted: [L]=SOFTLOCKUP [ 680.041005][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 680.041013][T16546] Call Trace: [ 680.041019][T16546] [ 680.041024][T16546] dump_stack_lvl+0x16c/0x1f0 [ 680.041052][T16546] dump_header+0x101/0x960 [ 680.041071][T16546] oom_kill_process+0x176/0x910 [ 680.041089][T16546] out_of_memory+0x350/0x1700 [ 680.041105][T16546] ? __lock_acquire+0x436/0x2890 [ 680.041121][T16546] ? __pfx_out_of_memory+0x10/0x10 [ 680.041143][T16546] mem_cgroup_out_of_memory+0x118/0x130 [ 680.041160][T16546] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 680.041181][T16546] ? do_raw_spin_unlock+0x172/0x230 [ 680.041201][T16546] try_charge_memcg+0x695/0xd30 [ 680.041226][T16546] ? __pfx_try_charge_memcg+0x10/0x10 [ 680.041248][T16546] ? memory_min_write+0x71/0xe0 [ 680.041267][T16546] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 680.041288][T16546] obj_cgroup_charge_account+0x336/0x670 [ 680.041312][T16546] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 680.041338][T16546] __kmalloc_node_track_caller_noprof+0x6e3/0x930 [ 680.041359][T16546] ? neigh_sysctl_register+0xb2/0x670 [ 680.041383][T16546] ? kmemdup_noprof+0x29/0x60 [ 680.041398][T16546] ? lockdep_hardirqs_on+0x7c/0x110 [ 680.041410][T16546] kmemdup_noprof+0x29/0x60 [ 680.041427][T16546] neigh_sysctl_register+0xb2/0x670 [ 680.041448][T16546] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 680.041466][T16546] ? inetdev_init+0x245/0x580 [ 680.041480][T16546] ? inetdev_event+0xc32/0x1870 [ 680.041492][T16546] ? notifier_call_chain+0xbc/0x3e0 [ 680.041516][T16546] ? setup_net+0x11d/0x3a0 [ 680.041535][T16546] ? copy_net_ns+0x351/0x7c0 [ 680.041546][T16546] ? create_new_namespaces+0x3ea/0xab0 [ 680.041563][T16546] ? copy_namespaces+0x468/0x570 [ 680.041579][T16546] ? copy_process+0x2a70/0x7430 [ 680.041598][T16546] ? kernel_clone+0xfc/0x910 [ 680.041615][T16546] ? __do_sys_clone+0xce/0x120 [ 680.041637][T16546] devinet_sysctl_register+0xb6/0x200 [ 680.041655][T16546] inetdev_init+0x2b8/0x580 [ 680.041670][T16546] inetdev_event+0xc32/0x1870 [ 680.041687][T16546] ? ib_netdevice_event+0xfc/0x330 [ 680.041706][T16546] ? __pfx_inetdev_event+0x10/0x10 [ 680.041722][T16546] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 680.041746][T16546] notifier_call_chain+0xbc/0x3e0 [ 680.041766][T16546] ? __pfx_inetdev_event+0x10/0x10 [ 680.041785][T16546] call_netdevice_notifiers_info+0xbe/0x110 [ 680.041802][T16546] register_netdevice+0x17a7/0x21e0 [ 680.041828][T16546] ? __pfx_register_netdevice+0x10/0x10 [ 680.041854][T16546] __ip_tunnel_create+0x540/0x6b0 [ 680.041870][T16546] ? __pfx___ip_tunnel_create+0x10/0x10 [ 680.041891][T16546] ip_tunnel_init_net+0x22f/0x7d0 [ 680.041908][T16546] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 680.041928][T16546] ? trace_kmalloc+0x2b/0xb0 [ 680.041946][T16546] ? __kmalloc_noprof+0x35d/0x910 [ 680.041963][T16546] ? __pfx_vti_init_net+0x10/0x10 [ 680.041980][T16546] vti_init_net+0x2e/0x140 [ 680.041996][T16546] ops_init+0x1e2/0x5f0 [ 680.042018][T16546] setup_net+0x11d/0x3a0 [ 680.042038][T16546] ? __pfx_setup_net+0x10/0x10 [ 680.042056][T16546] ? lockdep_init_map_type+0x5c/0x270 [ 680.042071][T16546] ? mutex_init_lockep+0x110/0x150 [ 680.042089][T16546] copy_net_ns+0x351/0x7c0 [ 680.042104][T16546] create_new_namespaces+0x3ea/0xab0 [ 680.042128][T16546] copy_namespaces+0x468/0x570 [ 680.042147][T16546] copy_process+0x2a70/0x7430 [ 680.042176][T16546] ? __pfx_copy_process+0x10/0x10 [ 680.042196][T16546] ? do_anonymous_page+0xb04/0x2190 [ 680.042220][T16546] kernel_clone+0xfc/0x910 [ 680.042242][T16546] ? __pfx_kernel_clone+0x10/0x10 [ 680.042273][T16546] __do_sys_clone+0xce/0x120 [ 680.042293][T16546] ? __pfx___do_sys_clone+0x10/0x10 [ 680.042313][T16546] ? count_memcg_events+0x122/0x290 [ 680.042346][T16546] ? do_user_addr_fault+0x843/0x1370 [ 680.042368][T16546] do_syscall_64+0xcd/0xf80 [ 680.042382][T16546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.042397][T16546] RIP: 0033:0x7f902c78f7c9 [ 680.042410][T16546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.042423][T16546] RSP: 002b:00007f902d684fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 680.042437][T16546] RAX: ffffffffffffffda RBX: 00007f902c9e5fa0 RCX: 00007f902c78f7c9 [ 680.042447][T16546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020011 [ 680.042455][T16546] RBP: 00007f902c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 680.042463][T16546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 680.042471][T16546] R13: 00007f902c9e6038 R14: 00007f902c9e5fa0 R15: 00007ffcab898898 [ 680.042490][T16546] [ 680.045862][T16546] memory: usage 3072kB, limit 3072kB, failcnt 226002 [ 681.029913][T11461] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 681.041925][T11461] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 681.049667][T11461] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 681.057942][T11461] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 681.070560][T11461] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 681.242111][T16546] memory+swap: usage 3828kB, limit 9007199254740988kB, failcnt 0 [ 681.249894][T16546] kmem: usage 2916kB, limit 9007199254740988kB, failcnt 0 [ 681.277302][T16546] Memory cgroup stats for /syz2: [ 681.277400][T16546] cache 0 [ 681.285873][T16546] rss 0 [ 681.294881][T16546] rss_huge 0 [ 681.308239][T16546] shmem 0 [ 681.311501][T16546] mapped_file 0 [ 681.314964][T16546] dirty 0 [ 681.317896][T16546] writeback 0 [ 681.330359][T16546] workingset_refault_anon 21250 [ 681.340905][T16546] workingset_refault_file 63100 [ 681.351822][T16546] swap 774144 [ 681.355119][T16546] swapcached 159744 [ 681.369290][T16546] pgpgin 478401 [ 681.372976][T16546] pgpgout 480406 [ 681.376527][T16546] pgfault 348383 [ 681.391076][T16546] pgmajfault 9573 [ 681.394729][T16546] inactive_anon 40960 [ 681.410459][T16546] active_anon 118784 [ 681.414442][T16546] inactive_file 0 [ 681.418072][T16546] active_file 0 [ 681.430275][T16546] unevictable 0 [ 681.433747][T16546] hierarchical_memory_limit 3145728 [ 681.449319][T16546] hierarchical_memsw_limit 9223372036854771712 [ 681.462141][T16546] total_cache 0 [ 681.465623][T16546] total_rss 0 [ 681.468902][T16546] total_rss_huge 0 [ 681.488848][T16546] total_shmem 0 [ 681.493585][T16546] total_mapped_file 0 [ 681.507747][T16546] total_dirty 0 [ 681.511732][T16546] total_writeback 0 [ 681.515546][T16546] total_workingset_refault_anon 21250 [ 681.530888][T16546] total_workingset_refault_file 63100 [ 681.540399][T16546] total_swap 774144 [ 681.544218][T16546] total_swapcached 159744 [ 681.559039][T16546] total_pgpgin 478401 [ 681.568806][T16546] total_pgpgout 480406 [ 681.578900][T16546] total_pgfault 348383 [ 681.588992][T16546] total_pgmajfault 9573 [ 681.593955][T16546] total_inactive_anon 40960 [ 681.609238][T16546] total_active_anon 118784 [ 681.619328][T16546] total_inactive_file 0 [ 681.629419][T16546] total_active_file 0 [ 681.639514][T16546] total_unevictable 0 [ 681.643677][T16546] anon_cost 654 [ 681.647136][T16546] file_cost 0 [ 681.660349][T16546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2040,pid=16543,uid=0 [ 681.696438][T16546] Memory cgroup out of memory: Killed process 16543 (syz.2.2040) total-vm:106664kB, anon-rss:1268kB, file-rss:26292kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 682.396844][T16643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2047'. [ 683.210960][ T51] Bluetooth: hci1: command tx timeout [ 683.293822][T16611] chnl_net:caif_netlink_parms(): no params data found [ 683.665238][T16611] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.722976][T16611] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.756636][T16611] bridge_slave_0: entered allmulticast mode [ 683.798231][T16611] bridge_slave_0: entered promiscuous mode [ 683.837232][T16611] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.896061][T16611] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.915976][T16818] Invalid ELF header magic: != ELF [ 683.930064][T16611] bridge_slave_1: entered allmulticast mode [ 683.968619][T16611] bridge_slave_1: entered promiscuous mode [ 684.083105][T16818] Invalid ELF header magic: != ELF [ 684.106621][T16611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.154768][T16818] Invalid ELF header magic: != ELF [ 684.164693][T16611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.194495][T16818] Invalid ELF header magic: != ELF [ 684.235246][T16818] Invalid ELF header magic: != ELF [ 684.276459][T16818] Invalid ELF header magic: != ELF [ 684.284113][T16611] team0: Port device team_slave_0 added [ 684.312381][T16818] Invalid ELF header magic: != ELF [ 684.319716][T16611] team0: Port device team_slave_1 added [ 684.351590][T16818] Invalid ELF header magic: != ELF [ 684.392346][T16818] Invalid ELF header magic: != ELF [ 684.436850][T16611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.475102][T16611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.610056][T16611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.657052][T16611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.698194][T16611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.790835][T16895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'. [ 684.828698][T16611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.049024][T16611] hsr_slave_0: entered promiscuous mode [ 685.076611][T16611] hsr_slave_1: entered promiscuous mode [ 685.106095][T16611] debugfs: 'hsr0' already exists in 'hsr' [ 685.135534][T16611] Cannot create hsr debugfs directory [ 685.170646][T16929] mmap: syz.5.2055 (16929): VmData 37597184 exceed data ulimit 1025. Update limits or use boot option ignore_rlimit_data. [ 685.290833][ T51] Bluetooth: hci1: command tx timeout [ 685.629191][T17001] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2056'. [ 685.776461][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.787098][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.583976][T16611] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 686.969421][T16611] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 687.370296][ T51] Bluetooth: hci1: command tx timeout [ 687.381939][T16611] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 687.439446][T16611] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 687.886469][T16611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.968742][T16611] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.031190][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.038346][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.132990][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.140158][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.866110][T16611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.450400][ T51] Bluetooth: hci1: command tx timeout [ 689.865573][T16611] veth0_vlan: entered promiscuous mode [ 689.945019][T16611] veth1_vlan: entered promiscuous mode [ 690.172409][T16611] veth0_macvtap: entered promiscuous mode [ 690.229811][T16611] veth1_macvtap: entered promiscuous mode [ 690.398455][T16611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.485764][T16611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.508867][ T7693] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.510789][ T7693] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.511177][ T7693] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.511203][ T7693] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.773536][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.773558][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.882937][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.882956][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.624678][T17353] ubi31: attaching mtd0 [ 692.625750][T17353] ubi31: scanning is finished [ 692.625790][T17353] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 692.946680][T17353] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 693.486667][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'. [ 695.654144][T17488] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 697.568246][T17586] FAULT_INJECTION: forcing a failure. [ 697.568246][T17586] name failslab, interval 1, probability 0, space 0, times 0 [ 697.694571][T17586] CPU: 0 UID: 0 PID: 17586 Comm: syz.6.2099 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.694597][T17586] Tainted: [L]=SOFTLOCKUP [ 697.694603][T17586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.694612][T17586] Call Trace: [ 697.694617][T17586] [ 697.694624][T17586] dump_stack_lvl+0x16c/0x1f0 [ 697.694651][T17586] should_fail_ex+0x512/0x640 [ 697.694667][T17586] ? __kmalloc_cache_noprof+0x5f/0x800 [ 697.694689][T17586] should_failslab+0xc2/0x120 [ 697.694711][T17586] __kmalloc_cache_noprof+0x80/0x800 [ 697.694727][T17586] ? ring_buffer_read_start+0x149/0x500 [ 697.694749][T17586] ? ring_buffer_read_start+0x149/0x500 [ 697.694765][T17586] ring_buffer_read_start+0x149/0x500 [ 697.694785][T17586] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 697.694802][T17586] ? lockdep_init_map_type+0x5c/0x270 [ 697.694816][T17586] ? ring_buffer_overruns+0x195/0x1f0 [ 697.694834][T17586] tracing_open+0x93f/0xe10 [ 697.694853][T17586] do_dentry_open+0x748/0x1590 [ 697.694873][T17586] ? __pfx_tracing_open+0x10/0x10 [ 697.694893][T17586] vfs_open+0x82/0x3f0 [ 697.694911][T17586] path_openat+0x2078/0x3140 [ 697.694937][T17586] ? __pfx_path_openat+0x10/0x10 [ 697.694964][T17586] do_filp_open+0x20b/0x470 [ 697.694985][T17586] ? __pfx_do_filp_open+0x10/0x10 [ 697.695018][T17586] ? alloc_fd+0x471/0x7d0 [ 697.695042][T17586] do_sys_openat2+0x121/0x290 [ 697.695057][T17586] ? __pfx_do_sys_openat2+0x10/0x10 [ 697.695080][T17586] __x64_sys_openat+0x174/0x210 [ 697.695095][T17586] ? __pfx___x64_sys_openat+0x10/0x10 [ 697.695119][T17586] do_syscall_64+0xcd/0xf80 [ 697.695133][T17586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.695147][T17586] RIP: 0033:0x7f2ac9b8f7c9 [ 697.695159][T17586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.695173][T17586] RSP: 002b:00007f2acaa21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 697.695186][T17586] RAX: ffffffffffffffda RBX: 00007f2ac9de6090 RCX: 00007f2ac9b8f7c9 [ 697.695196][T17586] RDX: 1a6b75d638828712 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 697.695205][T17586] RBP: 00007f2ac9c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 697.695214][T17586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.695223][T17586] R13: 00007f2ac9de6128 R14: 00007f2ac9de6090 R15: 00007ffd1bf84de8 [ 697.695243][T17586] [ 698.240983][T17597] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2099: iget: checksum invalid [ 698.342050][T17597] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 698.380560][T17597] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2099: iget: checksum invalid [ 698.503435][T17597] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 698.571888][T17597] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2099: iget: checksum invalid [ 698.651998][T17597] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 698.686047][T17597] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2099: iget: checksum invalid [ 698.794122][T17597] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 698.841658][T17597] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 698.902789][T17597] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 700.567767][ T5835] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 701.854035][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 701.854060][ T5835] Tainted: [L]=SOFTLOCKUP [ 701.854065][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 701.854074][ T5835] Call Trace: [ 701.854079][ T5835] [ 701.854084][ T5835] dump_stack_lvl+0x16c/0x1f0 [ 701.854111][ T5835] dump_header+0x101/0x960 [ 701.854130][ T5835] oom_kill_process+0x176/0x910 [ 701.854147][ T5835] out_of_memory+0x350/0x1700 [ 701.854162][ T5835] ? __lock_acquire+0x436/0x2890 [ 701.854179][ T5835] ? __pfx_out_of_memory+0x10/0x10 [ 701.854200][ T5835] mem_cgroup_out_of_memory+0x118/0x130 [ 701.854217][ T5835] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 701.854239][ T5835] ? do_raw_spin_unlock+0x172/0x230 [ 701.854261][ T5835] try_charge_memcg+0x695/0xd30 [ 701.854286][ T5835] ? __pfx_try_charge_memcg+0x10/0x10 [ 701.854311][ T5835] ? find_held_lock+0x2b/0x80 [ 701.854332][ T5835] charge_memcg+0x8a/0x230 [ 701.854353][ T5835] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 701.854370][ T5835] __read_swap_cache_async+0x397/0x500 [ 701.854390][ T5835] ? __pfx___read_swap_cache_async+0x10/0x10 [ 701.854408][ T5835] ? __lock_acquire+0x436/0x2890 [ 701.854426][ T5835] swap_cluster_readahead+0x528/0x770 [ 701.854448][ T5835] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 701.854467][ T5835] ? trace_pelt_se_tp+0xed/0x130 [ 701.854481][ T5835] ? __update_load_avg_se+0x3fb/0x940 [ 701.854508][ T5835] ? get_vma_policy+0x242/0x3c0 [ 701.854522][ T5835] swapin_readahead+0x160/0x1220 [ 701.854547][ T5835] ? __pfx_swapin_readahead+0x10/0x10 [ 701.854564][ T5835] ? find_held_lock+0x2b/0x80 [ 701.854580][ T5835] ? swap_cache_get_folio+0x267/0x8e0 [ 701.854595][ T5835] ? swap_cache_get_folio+0x267/0x8e0 [ 701.854610][ T5835] ? swap_cache_get_folio+0x267/0x8e0 [ 701.854627][ T5835] ? swap_cache_get_folio+0x267/0x8e0 [ 701.854643][ T5835] ? swap_cache_get_folio+0x293/0x8e0 [ 701.854660][ T5835] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 701.854675][ T5835] ? __pfx_get_swap_device+0x10/0x10 [ 701.854694][ T5835] ? rcu_read_unlock+0x2d/0xb0 [ 701.854714][ T5835] ? do_swap_page+0x962/0x64a0 [ 701.854727][ T5835] do_swap_page+0x962/0x64a0 [ 701.854744][ T5835] ? __lock_acquire+0x436/0x2890 [ 701.854759][ T5835] ? irqentry_exit+0x1dd/0x8c0 [ 701.854772][ T5835] ? lockdep_hardirqs_on+0x7c/0x110 [ 701.854785][ T5835] ? __pfx_do_swap_page+0x10/0x10 [ 701.854801][ T5835] ? __pfx_default_wake_function+0x10/0x10 [ 701.854821][ T5835] ? rcu_is_watching+0x12/0xc0 [ 701.854840][ T5835] ? __free_object+0x286/0x410 [ 701.854861][ T5835] ? rcu_is_watching+0x12/0xc0 [ 701.854880][ T5835] ? ___pte_offset_map+0x175/0x380 [ 701.854902][ T5835] __handle_mm_fault+0x19cb/0x2bb0 [ 701.854920][ T5835] ? reacquire_held_locks+0xcd/0x1f0 [ 701.854934][ T5835] ? __pfx___handle_mm_fault+0x10/0x10 [ 701.854951][ T5835] ? lock_vma_under_rcu+0x176/0x580 [ 701.854977][ T5835] ? get_timespec64+0x136/0x1b0 [ 701.854995][ T5835] handle_mm_fault+0x3fe/0xad0 [ 701.855013][ T5835] do_user_addr_fault+0x60c/0x1370 [ 701.855033][ T5835] ? rcu_is_watching+0x12/0xc0 [ 701.855054][ T5835] exc_page_fault+0x64/0xc0 [ 701.855076][ T5835] asm_exc_page_fault+0x26/0x30 [ 701.855090][ T5835] RIP: 0033:0x7f902c7c2088 [ 701.855102][ T5835] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 701.855116][ T5835] RSP: 002b:00007ffcab898bb0 EFLAGS: 00010293 [ 701.855127][ T5835] RAX: 0000000000000000 RBX: 00000000000006fc RCX: 00007f902c7c2085 [ 701.855137][ T5835] RDX: 00007ffcab898bf0 RSI: 0000000000000000 RDI: 0000000000000000 [ 701.855145][ T5835] RBP: 00007ffcab898c5c R08: 0000000000000000 R09: 0000000000000000 [ 701.855153][ T5835] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 701.855161][ T5835] R13: 00000000000927c0 R14: 00000000000aa9ee R15: 00007ffcab898cb0 [ 701.855180][ T5835] [ 701.855198][ T5835] memory: usage 3072kB, limit 3072kB, failcnt 234321 [ 703.600374][ T5835] memory+swap: usage 3732kB, limit 9007199254740988kB, failcnt 0 [ 703.705475][ T5835] kmem: usage 2576kB, limit 9007199254740988kB, failcnt 0 [ 703.840373][ T5835] Memory cgroup stats for /syz2: [ 703.840481][ T5835] cache 0 [ 703.848381][ T5835] rss 0 [ 703.889775][T17711] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 703.947698][T17703] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 703.957778][ T5835] rss_huge 0 [ 704.113647][ T5835] shmem 0 [ 704.116624][ T5835] mapped_file 0 [ 704.120077][ T5835] dirty 0 [ 704.335717][ T5835] writeback 0 [ 704.339048][ T5835] workingset_refault_anon 23240 [ 704.697132][ T5835] workingset_refault_file 63100 [ 704.753461][ T5835] swap 679936 [ 704.756792][ T5835] swapcached 204800 [ 704.860354][ T5835] pgpgin 490520 [ 704.863853][ T5835] pgpgout 492514 [ 704.937720][ T5835] pgfault 361056 [ 704.991110][ T5835] pgmajfault 10162 [ 705.089964][ T5835] inactive_anon 81920 [ 705.204563][ T5835] active_anon 122880 [ 705.208501][ T5835] inactive_file 0 [ 705.280604][ T5835] active_file 0 [ 705.400497][ T5835] unevictable 0 [ 705.403994][ T5835] hierarchical_memory_limit 3145728 [ 705.409193][ T5835] hierarchical_memsw_limit 9223372036854771712 [ 705.698293][ T5835] total_cache 0 [ 705.746009][ T5835] total_rss 0 [ 705.749333][ T5835] total_rss_huge 0 [ 705.925815][ T5835] total_shmem 0 [ 705.929315][ T5835] total_mapped_file 0 [ 706.155960][ T5835] total_dirty 0 [ 706.159471][ T5835] total_writeback 0 [ 706.387196][ T5835] total_workingset_refault_anon 23240 [ 706.505415][ T5835] total_workingset_refault_file 63100 [ 706.600265][ T5835] total_swap 679936 [ 706.604106][ T5835] total_swapcached 204800 [ 706.608435][ T5835] total_pgpgin 490520 [ 706.875220][ T5835] total_pgpgout 492514 [ 706.999790][ T5835] total_pgfault 361056 [ 707.042598][ T5835] total_pgmajfault 10162 [ 707.119266][ T5835] total_inactive_anon 81920 [ 707.188756][ T5835] total_active_anon 122880 [ 707.264107][ T5835] total_inactive_file 0 [ 707.316393][ T5835] total_active_file 0 [ 707.374149][ T5835] total_unevictable 0 [ 707.428281][ T5835] anon_cost 658 [ 707.538519][ T5835] file_cost 0 [ 707.598773][ T5835] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2100,pid=17603,uid=0 [ 707.857743][ T5835] Memory cgroup out of memory: Killed process 17603 (syz.2.2100) total-vm:143668kB, anon-rss:1268kB, file-rss:30548kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 710.499849][ T3573] bridge_slave_0: left allmulticast mode [ 710.677166][ T3573] bridge_slave_0: left promiscuous mode [ 710.830386][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.386092][ T3573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.396446][ T3573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.408084][ T3573] bond0 (unregistering): Released all slaves [ 714.186707][ T3573] hsr_slave_0: left promiscuous mode [ 714.232648][ T3573] hsr_slave_1: left promiscuous mode [ 714.252849][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.274413][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.290138][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.308810][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.347841][ T3573] veth0_macvtap: left promiscuous mode [ 714.368011][ T3573] veth1_vlan: left promiscuous mode [ 714.393420][ T3573] veth0_vlan: left promiscuous mode [ 715.276535][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2131'. [ 715.521357][ T3573] team0 (unregistering): Port device team_slave_1 removed [ 715.651647][ T3573] team0 (unregistering): Port device team_slave_0 removed [ 716.495637][T18114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2134'. [ 717.052954][T18146] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 717.509900][T11461] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 717.521190][T11461] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 717.529429][T11461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 717.543552][T11461] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 717.552237][T11461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 717.976094][ T7897] gretap0: left allmulticast mode [ 717.982049][ T7897] gretap0: left promiscuous mode [ 717.997328][ T7897] bridge0: port 4(gretap0) entered disabled state [ 718.014310][ T7897] dummy0: left allmulticast mode [ 718.022149][ T7897] dummy0: left promiscuous mode [ 718.027148][ T7897] bridge0: port 3(dummy0) entered disabled state [ 718.035335][ T7897] bridge_slave_1: left allmulticast mode [ 718.041699][ T7897] bridge_slave_1: left promiscuous mode [ 718.047778][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.061326][ T7897] bridge_slave_0: left allmulticast mode [ 718.066981][ T7897] bridge_slave_0: left promiscuous mode [ 718.073008][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.353011][ T7897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.365793][ T7897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.376337][ T7897] bond0 (unregistering): Released all slaves [ 719.610997][T11461] Bluetooth: hci3: command tx timeout [ 720.327724][T18348] netlink: 146 bytes leftover after parsing attributes in process `syz.5.2141'. [ 720.362075][T18194] chnl_net:caif_netlink_parms(): no params data found [ 720.984364][T18194] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.026182][T18194] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.101803][T18194] bridge_slave_0: entered allmulticast mode [ 721.138153][T18194] bridge_slave_0: entered promiscuous mode [ 721.172315][T18194] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.219021][T18194] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.252653][T18194] bridge_slave_1: entered allmulticast mode [ 721.284572][T18194] bridge_slave_1: entered promiscuous mode [ 721.497281][T18194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.556417][T18194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.690317][T11461] Bluetooth: hci3: command tx timeout [ 721.793184][T18477] input: f as /devices/virtual/input/input40 [ 721.817854][T18194] team0: Port device team_slave_0 added [ 721.859453][T18194] team0: Port device team_slave_1 added [ 721.937624][ T7897] hsr_slave_0: left promiscuous mode [ 721.956329][ T7897] hsr_slave_1: left promiscuous mode [ 721.976960][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.999789][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.027664][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.051525][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.099634][ T7897] veth1_macvtap: left promiscuous mode [ 722.119511][ T7897] veth0_macvtap: left promiscuous mode [ 723.122684][ T7897] team0 (unregistering): Port device team_slave_1 removed [ 723.204393][ T7897] team0 (unregistering): Port device team_slave_0 removed [ 723.775803][T11461] Bluetooth: hci3: command tx timeout [ 723.929438][T18194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.942841][T18522] FAULT_INJECTION: forcing a failure. [ 723.942841][T18522] name failslab, interval 1, probability 0, space 0, times 0 [ 723.955764][T18194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.002308][T18194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.057176][T18194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.064722][T18522] CPU: 0 UID: 0 PID: 18522 Comm: syz.2.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.064745][T18522] Tainted: [L]=SOFTLOCKUP [ 724.064751][T18522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 724.064760][T18522] Call Trace: [ 724.064765][T18522] [ 724.064771][T18522] dump_stack_lvl+0x16c/0x1f0 [ 724.064798][T18522] should_fail_ex+0x512/0x640 [ 724.064822][T18522] ? __kmalloc_noprof+0xca/0x910 [ 724.064841][T18522] should_failslab+0xc2/0x120 [ 724.064863][T18522] __kmalloc_noprof+0xeb/0x910 [ 724.064879][T18522] ? udp_init_sock+0x24e/0x450 [ 724.064902][T18522] ? udp_init_sock+0x24e/0x450 [ 724.064920][T18522] udp_init_sock+0x24e/0x450 [ 724.064937][T18522] ? __pfx_udp_init_sock+0x10/0x10 [ 724.064958][T18522] inet_create+0x939/0x1040 [ 724.064975][T18522] ? inet_create+0x93/0x1040 [ 724.064995][T18522] __sock_create+0x339/0x8a0 [ 724.065014][T18522] inet_ctl_sock_create+0x94/0x230 [ 724.065030][T18522] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 724.065046][T18522] ? lockdep_init_map_type+0x5c/0x270 [ 724.065062][T18522] ? lockdep_init_map_type+0x5c/0x270 [ 724.065077][T18522] ? __pfx_igmp_net_init+0x10/0x10 [ 724.065095][T18522] igmp_net_init+0xd0/0x1a0 [ 724.065113][T18522] ops_init+0x1e2/0x5f0 [ 724.065138][T18522] setup_net+0x11d/0x3a0 [ 724.065157][T18522] ? __pfx_setup_net+0x10/0x10 [ 724.065175][T18522] ? lockdep_init_map_type+0x5c/0x270 [ 724.065189][T18522] ? mutex_init_lockep+0x110/0x150 [ 724.065208][T18522] copy_net_ns+0x351/0x7c0 [ 724.065223][T18522] create_new_namespaces+0x3ea/0xab0 [ 724.065246][T18522] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 724.065266][T18522] ksys_unshare+0x45b/0xa40 [ 724.065279][T18522] ? __pfx_ksys_unshare+0x10/0x10 [ 724.065292][T18522] ? xfd_validate_state+0x61/0x180 [ 724.065311][T18522] __x64_sys_unshare+0x31/0x40 [ 724.065323][T18522] do_syscall_64+0xcd/0xf80 [ 724.065337][T18522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.065352][T18522] RIP: 0033:0x7f902c78f7c9 [ 724.065364][T18522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.065378][T18522] RSP: 002b:00007f902d685038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 724.065391][T18522] RAX: ffffffffffffffda RBX: 00007f902c9e5fa0 RCX: 00007f902c78f7c9 [ 724.065400][T18522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 724.065408][T18522] RBP: 00007f902c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 724.065416][T18522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.065424][T18522] R13: 00007f902c9e6038 R14: 00007f902c9e5fa0 R15: 00007ffcab898898 [ 724.065443][T18522] [ 724.338647][T18522] Failed to initialize the IGMP autojoin socket (err -12) [ 724.610222][T18194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.669648][T18194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.907009][T18194] hsr_slave_0: entered promiscuous mode [ 724.934640][T18194] hsr_slave_1: entered promiscuous mode [ 725.031080][T18590] FAULT_INJECTION: forcing a failure. [ 725.031080][T18590] name failslab, interval 1, probability 0, space 0, times 0 [ 725.072794][T18590] CPU: 0 UID: 0 PID: 18590 Comm: syz.6.2157 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.072820][T18590] Tainted: [L]=SOFTLOCKUP [ 725.072825][T18590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 725.072834][T18590] Call Trace: [ 725.072840][T18590] [ 725.072847][T18590] dump_stack_lvl+0x16c/0x1f0 [ 725.072873][T18590] should_fail_ex+0x512/0x640 [ 725.072889][T18590] ? kmem_cache_alloc_noprof+0x62/0x770 [ 725.072909][T18590] should_failslab+0xc2/0x120 [ 725.072932][T18590] kmem_cache_alloc_noprof+0x83/0x770 [ 725.072948][T18590] ? acpi_ut_create_control_state+0x6a/0x100 [ 725.072971][T18590] ? acpi_ut_create_control_state+0x6a/0x100 [ 725.072995][T18590] acpi_ut_create_control_state+0x6a/0x100 [ 725.073012][T18590] acpi_ds_exec_begin_control_op+0x180/0x520 [ 725.073035][T18590] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 725.073058][T18590] acpi_ds_exec_begin_op+0x209/0x9c0 [ 725.073076][T18590] acpi_ps_create_op+0x7cb/0xd30 [ 725.073096][T18590] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 725.073112][T18590] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 725.073130][T18590] ? acpi_ut_value_exit+0xff/0x180 [ 725.073152][T18590] acpi_ps_parse_loop+0xf06/0x2470 [ 725.073171][T18590] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 725.073195][T18590] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 725.073211][T18590] ? acpi_ut_status_exit+0x103/0x1c0 [ 725.073230][T18590] ? acpi_ds_call_control_method+0x435/0xab0 [ 725.073250][T18590] acpi_ps_parse_aml+0x817/0x1170 [ 725.073271][T18590] acpi_ps_execute_method+0x5c4/0xe90 [ 725.073294][T18590] acpi_ns_evaluate+0x98c/0x16d0 [ 725.073319][T18590] acpi_evaluate_object+0x4ca/0xdf0 [ 725.073335][T18590] ? ksys_read+0x12a/0x250 [ 725.073356][T18590] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 725.073374][T18590] ? __pfx___might_resched+0x10/0x10 [ 725.073395][T18590] acpi_evaluate_integer+0xdd/0x230 [ 725.073416][T18590] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 725.073445][T18590] ? __pfx_status_show+0x10/0x10 [ 725.073459][T18590] status_show+0xa0/0x120 [ 725.073474][T18590] ? __pfx_status_show+0x10/0x10 [ 725.073494][T18590] dev_attr_show+0x56/0xe0 [ 725.073514][T18590] ? __pfx_dev_attr_show+0x10/0x10 [ 725.073531][T18590] sysfs_kf_seq_show+0x216/0x3e0 [ 725.073550][T18590] seq_read_iter+0x50e/0x12d0 [ 725.073579][T18590] kernfs_fop_read_iter+0x46c/0x610 [ 725.073600][T18590] ? rw_verify_area+0xcf/0x6c0 [ 725.073618][T18590] vfs_read+0x8bf/0xcf0 [ 725.073641][T18590] ? __pfx_vfs_read+0x10/0x10 [ 725.073672][T18590] ksys_read+0x12a/0x250 [ 725.073691][T18590] ? __pfx_ksys_read+0x10/0x10 [ 725.073715][T18590] do_syscall_64+0xcd/0xf80 [ 725.073730][T18590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.073745][T18590] RIP: 0033:0x7f2ac9b8f7c9 [ 725.073758][T18590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.073771][T18590] RSP: 002b:00007f2acaa21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 725.073786][T18590] RAX: ffffffffffffffda RBX: 00007f2ac9de6090 RCX: 00007f2ac9b8f7c9 [ 725.073796][T18590] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 725.073805][T18590] RBP: 00007f2ac9c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 725.073814][T18590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.073823][T18590] R13: 00007f2ac9de6128 R14: 00007f2ac9de6090 R15: 00007ffd1bf84de8 [ 725.073843][T18590] [ 725.073894][T18590] ACPI Error: [ 725.900426][T11461] Bluetooth: hci3: command tx timeout [ 725.910651][T18667] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 725.964392][T18667] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 726.058243][T18194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 726.081822][T18194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 726.112453][T18194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 726.153841][T18194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 726.331724][T18590] Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 726.386760][T18590] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 726.586318][T18194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.745723][T18194] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.786089][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.793263][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.858502][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.865664][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.399263][T18194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.641858][T18194] veth0_vlan: entered promiscuous mode [ 727.747757][T18194] veth1_vlan: entered promiscuous mode [ 727.904995][T18194] veth0_macvtap: entered promiscuous mode [ 727.973158][T18194] veth1_macvtap: entered promiscuous mode [ 728.032809][T18194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.069771][T18194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.109696][ T7898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.154312][ T7898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.212236][ T7898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.264103][ T7898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.512519][ T7898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.567824][ T7898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.628423][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.649423][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.004214][T18872] warn_alloc: 1 callbacks suppressed [ 730.004226][T18872] syz.0.2173: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 730.192422][T18872] CPU: 0 UID: 0 PID: 18872 Comm: syz.0.2173 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.192447][T18872] Tainted: [L]=SOFTLOCKUP [ 730.192453][T18872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 730.192466][T18872] Call Trace: [ 730.192472][T18872] [ 730.192478][T18872] dump_stack_lvl+0x16c/0x1f0 [ 730.192505][T18872] warn_alloc+0x248/0x3a0 [ 730.192524][T18872] ? __pfx_warn_alloc+0x10/0x10 [ 730.192541][T18872] ? __lock_acquire+0x436/0x2890 [ 730.192564][T18872] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 730.192579][T18872] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 730.192593][T18872] ? __pfx___might_resched+0x10/0x10 [ 730.192613][T18872] ? rcu_is_watching+0x12/0xc0 [ 730.192634][T18872] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 730.192648][T18872] ? find_held_lock+0x2b/0x80 [ 730.192664][T18872] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 730.192678][T18872] ? tomoyo_path_number_perm+0x295/0x580 [ 730.192697][T18872] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 730.192710][T18872] ? __pfx___mutex_lock+0x10/0x10 [ 730.192724][T18872] ? tomoyo_path_number_perm+0x18d/0x580 [ 730.192741][T18872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 730.192761][T18872] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 730.192774][T18872] __vmalloc_node_noprof+0xad/0xf0 [ 730.192788][T18872] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 730.192804][T18872] dvb_dvr_do_ioctl+0x15d/0x290 [ 730.192821][T18872] dvb_usercopy+0x167/0x340 [ 730.192834][T18872] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 730.192850][T18872] ? __pfx_dvb_usercopy+0x10/0x10 [ 730.192870][T18872] ? __fget_files+0x20e/0x3c0 [ 730.192893][T18872] dvb_dvr_ioctl+0x29/0x40 [ 730.192906][T18872] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 730.192920][T18872] __x64_sys_ioctl+0x18e/0x210 [ 730.192939][T18872] do_syscall_64+0xcd/0xf80 [ 730.192953][T18872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.192968][T18872] RIP: 0033:0x7f6c19d8f7c9 [ 730.192981][T18872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.192994][T18872] RSP: 002b:00007f6c1aca5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.193008][T18872] RAX: ffffffffffffffda RBX: 00007f6c19fe5fa0 RCX: 00007f6c19d8f7c9 [ 730.193017][T18872] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000007 [ 730.193026][T18872] RBP: 00007f6c19e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 730.193035][T18872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.193044][T18872] R13: 00007f6c19fe6038 R14: 00007f6c19fe5fa0 R15: 00007ffeb6394668 [ 730.193063][T18872] [ 730.193069][T18872] Mem-Info: [ 731.382664][T18872] active_anon:4329 inactive_anon:18910 isolated_anon:0 [ 731.382664][T18872] active_file:19243 inactive_file:37809 isolated_file:0 [ 731.382664][T18872] unevictable:768 dirty:699 writeback:0 [ 731.382664][T18872] slab_reclaimable:12320 slab_unreclaimable:97106 [ 731.382664][T18872] mapped:33385 shmem:5024 pagetables:1521 [ 731.382664][T18872] sec_pagetables:0 bounce:0 [ 731.382664][T18872] kernel_misc_reclaimable:0 [ 731.382664][T18872] free:1301174 free_pcp:9322 free_cma:0 [ 732.385832][T18872] Node 0 active_anon:17188kB inactive_anon:78936kB active_file:76964kB inactive_file:151536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133520kB dirty:2808kB writeback:0kB shmem:21696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:53248kB kernel_stack:13056kB pagetables:6044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 732.638536][T18872] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 732.776409][T18872] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 732.909464][T18872] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 732.936811][T18872] Node 0 DMA32 free:1282852kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17196kB inactive_anon:75960kB active_file:76964kB inactive_file:151360kB unevictable:1536kB writepending:2876kB zspages:1008kB present:3129332kB managed:2540988kB mlocked:0kB bounce:0kB free_pcp:42472kB local_pcp:42472kB free_cma:0kB [ 732.984406][T19027] : renamed from bond0 (while UP) [ 733.044715][T18872] lowmem_reserve[]: 0 0 1 1 1 [ 733.064092][T18872] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 733.192648][T18872] lowmem_reserve[]: 0 0 0 0 0 [ 733.216224][T18872] Node 1 Normal free:3902708kB boost:0kB min:55548kB low:69432kB high:83316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:128kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 733.346455][T18872] lowmem_reserve[]: 0 0 0 0 0 [ 733.391350][T18872] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 733.494978][T18872] Node 0 DMA32: 9969*4kB (UME) 6887*8kB (UME) 4226*16kB (UME) 1515*32kB (UME) 1122*64kB (UME) 640*128kB (UME) 476*256kB (UME) 317*512kB (UM) 113*1024kB (UME) 7*2048kB (UM) 124*4096kB (UM) = 1286908kB [ 733.612959][T18872] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 733.688752][T18872] Node 1 Normal: 177*4kB (UM) 56*8kB (UME) 35*16kB (UME) 218*32kB (UME) 118*64kB (UME) 29*128kB (UM) 17*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 5*2048kB (UME) 943*4096kB (M) = 3902708kB [ 733.799827][T18872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 733.859798][T18872] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 733.919189][T18872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 733.972325][T18872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 734.028692][T18872] 62157 total pagecache pages [ 734.056095][T18872] 63 pages in swap cache [ 734.095734][T18872] Free swap = 81104kB [ 734.119586][T18872] Total swap = 124996kB [ 734.137315][T18872] 2097051 pages RAM [ 734.159871][T18872] 0 pages HighMem/MovableOnly [ 734.177514][T18872] 429778 pages reserved [ 734.198028][T18872] 0 pages cma reserved [ 736.410456][T19134] zswap: compressor not available [ 736.750742][ T7897] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 9 with max blocks 1 with error 117 [ 736.979507][ T7897] EXT4-fs (sda1): This should not happen!! Data will be lost [ 736.979507][ T7897] [ 737.053543][T19113] netlink: zone id is out of range [ 737.093769][T19113] netlink: zone id is out of range [ 737.448588][T19113] netlink: set zone limit has 8 unknown bytes [ 739.175740][T19239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2217'. [ 739.405008][T19239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.834313][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2223'. [ 740.028816][T19258] zswap: compressor  not available [ 741.302301][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2229'. [ 741.618137][T19343] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 741.674686][T19348] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2233'. [ 741.688766][T19349] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 741.772942][T11461] Bluetooth: hci4: unexpected event 0x23 length: 127 > 13 [ 741.792878][T19355] : renamed from bond0 (while UP) [ 741.824679][T19346] ima: policy update failed [ 741.884203][ T30] audit: type=1802 audit(4294975304.190:33): pid=19346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2231" res=0 errno=0 [ 742.433222][T19379] misc userio: No port type given on /dev/userio [ 742.476776][T19379] netlink: 'syz.2.2235': attribute type 28 has an invalid length. [ 742.609634][T19379] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2235'. [ 742.748070][T19339] kexec: Could not allocate control_code_buffer [ 743.510129][T19436] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 13 [ 746.463492][T19514] bond0: (slave bond_slave_1): Releasing backup interface [ 747.223474][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.229791][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.243264][ T1301] ------------[ cut here ]------------ [ 747.249143][ T1301] WARNING: ./include/linux/skbuff.h:3227 at lowpan_xmit+0xea9/0x1210, CPU#0: aoe_tx0/1301 [ 747.259118][ T1301] Modules linked in: [ 747.263292][ T1301] CPU: 0 UID: 0 PID: 1301 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.273921][ T1301] Tainted: [L]=SOFTLOCKUP [ 747.278258][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.288356][ T1301] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 747.293671][ T1301] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 76 30 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 68 30 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 5a 30 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 747.313399][ T1301] RSP: 0018:ffffc9000457f860 EFLAGS: 00010293 [ 747.319479][ T1301] RAX: 0000000000000000 RBX: ffffc9000457f8e0 RCX: ffffffff8b2f27dc [ 747.327482][ T1301] RDX: ffff888028491e80 RSI: ffffffff8b2f3158 RDI: 0000000000000003 [ 747.335483][ T1301] RBP: ffffc9000457f9f0 R08: 0000000000000003 R09: 000000000000ffff [ 747.343488][ T1301] R10: 000000000000ffff R11: 0000000000000000 R12: ffff888079f78836 [ 747.351489][ T1301] R13: 000000000000ffff R14: ffff888028130d90 R15: ffff888079f78780 [ 747.359480][ T1301] FS: 0000000000000000(0000) GS:ffff8881248f8000(0000) knlGS:0000000000000000 [ 747.368447][ T1301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.375052][ T1301] CR2: ffffffffffffffff CR3: 000000000e184000 CR4: 00000000003526f0 [ 747.383055][ T1301] Call Trace: [ 747.386340][ T1301] [ 747.389275][ T1301] ? __pfx_lowpan_xmit+0x10/0x10 [ 747.394239][ T1301] ? lockdep_unlock+0x64/0xd0 [ 747.398936][ T1301] ? __lock_acquire+0x12c2/0x2890 [ 747.403983][ T1301] ? __pfx_netif_skb_features+0x10/0x10 [ 747.409556][ T1301] ? dev_hard_start_xmit+0x97/0x6e0 [ 747.414772][ T1301] dev_hard_start_xmit+0x97/0x6e0 [ 747.419810][ T1301] __dev_queue_xmit+0x6d7/0x46c0 [ 747.424772][ T1301] ? rcu_is_watching+0x12/0xc0 [ 747.429554][ T1301] ? finish_task_switch.isra.0+0x207/0xbd0 [ 747.435390][ T1301] ? __pfx___dev_queue_xmit+0x10/0x10 [ 747.440786][ T1301] ? __lock_acquire+0x436/0x2890 [ 747.445732][ T1301] ? ref_tracker_free+0x37c/0x830 [ 747.450784][ T1301] ? do_raw_spin_lock+0x12c/0x2b0 [ 747.455822][ T1301] ? find_held_lock+0x2b/0x80 [ 747.460523][ T1301] ? skb_dequeue+0x126/0x180 [ 747.465122][ T1301] ? find_held_lock+0x2b/0x80 [ 747.469811][ T1301] ? rcu_is_watching+0x12/0xc0 [ 747.474601][ T1301] tx+0xcc/0x190 [ 747.478152][ T1301] ? __pfx_tx+0x10/0x10 [ 747.482322][ T1301] kthread+0x1e4/0x3e0 [ 747.486478][ T1301] ? find_held_lock+0x2b/0x80 [ 747.491175][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.495780][ T1301] ? __pfx_default_wake_function+0x10/0x10 [ 747.501620][ T1301] ? lockdep_hardirqs_on+0x7c/0x110 [ 747.506828][ T1301] ? __kthread_parkme+0x19e/0x250 [ 747.511875][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.516477][ T1301] kthread+0x3c5/0x780 [ 747.520571][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.525168][ T1301] ? rcu_is_watching+0x12/0xc0 [ 747.529943][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.534557][ T1301] ret_from_fork+0x983/0xb10 [ 747.539154][ T1301] ? __pfx_ret_from_fork+0x10/0x10 [ 747.544289][ T1301] ? __switch_to+0x7af/0x10d0 [ 747.548974][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.553587][ T1301] ret_from_fork_asm+0x1a/0x30 [ 747.558378][ T1301] [ 747.561408][ T1301] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 747.568668][ T1301] CPU: 0 UID: 0 PID: 1301 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.579230][ T1301] Tainted: [L]=SOFTLOCKUP [ 747.583528][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.593563][ T1301] Call Trace: [ 747.596820][ T1301] [ 747.599730][ T1301] dump_stack_lvl+0x3d/0x1f0 [ 747.604306][ T1301] vpanic+0x640/0x6f0 [ 747.608267][ T1301] ? lowpan_xmit+0xea9/0x1210 [ 747.612921][ T1301] panic+0xca/0xd0 [ 747.616619][ T1301] ? __pfx_panic+0x10/0x10 [ 747.621016][ T1301] ? check_panic_on_warn+0x1f/0xb0 [ 747.626105][ T1301] check_panic_on_warn+0xab/0xb0 [ 747.631021][ T1301] __warn+0x108/0x3c0 [ 747.634982][ T1301] __report_bug+0x2a0/0x520 [ 747.639466][ T1301] ? lowpan_xmit+0xea9/0x1210 [ 747.644122][ T1301] ? __pfx___report_bug+0x10/0x10 [ 747.649131][ T1301] ? stack_trace_save+0x8e/0xc0 [ 747.653966][ T1301] ? __pfx_stack_trace_save+0x10/0x10 [ 747.659326][ T1301] ? lowpan_xmit+0xea9/0x1210 [ 747.663981][ T1301] report_bug+0xb2/0x220 [ 747.668205][ T1301] ? lowpan_xmit+0xea9/0x1210 [ 747.672858][ T1301] handle_bug+0x127/0x260 [ 747.677168][ T1301] exc_invalid_op+0x17/0x50 [ 747.681649][ T1301] asm_exc_invalid_op+0x1a/0x20 [ 747.686478][ T1301] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 747.691744][ T1301] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 76 30 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 68 30 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 5a 30 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 747.711337][ T1301] RSP: 0018:ffffc9000457f860 EFLAGS: 00010293 [ 747.717389][ T1301] RAX: 0000000000000000 RBX: ffffc9000457f8e0 RCX: ffffffff8b2f27dc [ 747.725340][ T1301] RDX: ffff888028491e80 RSI: ffffffff8b2f3158 RDI: 0000000000000003 [ 747.733287][ T1301] RBP: ffffc9000457f9f0 R08: 0000000000000003 R09: 000000000000ffff [ 747.741236][ T1301] R10: 000000000000ffff R11: 0000000000000000 R12: ffff888079f78836 [ 747.749185][ T1301] R13: 000000000000ffff R14: ffff888028130d90 R15: ffff888079f78780 [ 747.757138][ T1301] ? lowpan_xmit+0x52c/0x1210 [ 747.761802][ T1301] ? lowpan_xmit+0xea8/0x1210 [ 747.766465][ T1301] ? __pfx_lowpan_xmit+0x10/0x10 [ 747.771383][ T1301] ? lockdep_unlock+0x64/0xd0 [ 747.776041][ T1301] ? __lock_acquire+0x12c2/0x2890 [ 747.781049][ T1301] ? __pfx_netif_skb_features+0x10/0x10 [ 747.786586][ T1301] ? dev_hard_start_xmit+0x97/0x6e0 [ 747.791763][ T1301] dev_hard_start_xmit+0x97/0x6e0 [ 747.796773][ T1301] __dev_queue_xmit+0x6d7/0x46c0 [ 747.801696][ T1301] ? rcu_is_watching+0x12/0xc0 [ 747.806443][ T1301] ? finish_task_switch.isra.0+0x207/0xbd0 [ 747.812235][ T1301] ? __pfx___dev_queue_xmit+0x10/0x10 [ 747.817594][ T1301] ? __lock_acquire+0x436/0x2890 [ 747.822511][ T1301] ? ref_tracker_free+0x37c/0x830 [ 747.827519][ T1301] ? do_raw_spin_lock+0x12c/0x2b0 [ 747.832528][ T1301] ? find_held_lock+0x2b/0x80 [ 747.837188][ T1301] ? skb_dequeue+0x126/0x180 [ 747.841757][ T1301] ? find_held_lock+0x2b/0x80 [ 747.846416][ T1301] ? rcu_is_watching+0x12/0xc0 [ 747.851166][ T1301] tx+0xcc/0x190 [ 747.854695][ T1301] ? __pfx_tx+0x10/0x10 [ 747.858829][ T1301] kthread+0x1e4/0x3e0 [ 747.862888][ T1301] ? find_held_lock+0x2b/0x80 [ 747.867546][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.872125][ T1301] ? __pfx_default_wake_function+0x10/0x10 [ 747.877915][ T1301] ? lockdep_hardirqs_on+0x7c/0x110 [ 747.883095][ T1301] ? __kthread_parkme+0x19e/0x250 [ 747.888105][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.892680][ T1301] kthread+0x3c5/0x780 [ 747.896730][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.901302][ T1301] ? rcu_is_watching+0x12/0xc0 [ 747.906049][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.910619][ T1301] ret_from_fork+0x983/0xb10 [ 747.915189][ T1301] ? __pfx_ret_from_fork+0x10/0x10 [ 747.920280][ T1301] ? __switch_to+0x7af/0x10d0 [ 747.924941][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.929513][ T1301] ret_from_fork_asm+0x1a/0x30 [ 747.934273][ T1301] [ 747.937332][ T1301] Kernel Offset: disabled [ 747.941644][ T1301] Rebooting in 86400 seconds..