last executing test programs: 8m12.470142553s ago: executing program 1 (id=796): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = socket(0x1e, 0x2, 0x0) getsockopt$auto(r1, 0x10f, 0x83, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/tty/ptyt1/uevent\x00', 0x123a42, 0x0) sendfile$auto(r0, r2, 0x0, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) sendfile$auto(r3, r3, 0x0, 0xb2d) (fail_nth: 3) 8m11.524503781s ago: executing program 1 (id=798): mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x83}, {0x2, 0x800000000000006}, 0x4, 0x8, 0x1, 0xb, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) poll$auto(&(0x7f0000000040)={r1, 0x0, 0x1}, 0x8000, 0xff) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r3 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x480, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x5) io_uring_setup$auto(0x89, 0x0) mmap$auto(0x80, 0xbb0a, 0x2000000df, 0x18, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendfile$auto(0x1, r3, 0x0, 0x7ffff000) epoll_create$auto(0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r2, 0x0, 0x9a6, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) 8m8.165221117s ago: executing program 1 (id=809): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x23, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r1, 0x10e, 0x1, 0x0, 0xe) close_range$auto(0x2, 0x8, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="205c2020027e0dc0023af10e9bfa1babfa203753ca9a202d0a", 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/platform/drivers/mt6360-tcpc/uevent\x00', 0x64c303, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x12042, 0x0) r11 = ioctl$auto_TUNSETGROUP(r10, 0x400454ce, &(0x7f0000000240)=0x374) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000003780)={0x1870, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1b0, 0x2, 0x0, 0x1, [@nested={0x28, 0x30, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0xd1}, @nested={0x4, 0x13}, @typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@private0}]}, @generic="7b543a2288e807eb7762955da5ab9678afde7ab70d0bf61baea12915f6917890b13c3ad5ea8cf910622d2f94a524cbd2", @typed={0xc, 0x6b, 0x0, 0x0, @u64=0xa}, @nested={0xfb, 0xc, 0x0, 0x1, [@generic="a6a0b4e761dd34b693f6d9dccfa34ac00076588d3abeecd191797ff61aca28da0ae595439be36563dffdfc601369dfed3aad7303408e65f906acd74c45ec353f392abf7de1f2d8e4953975d3995588a4b6ba3db2470a946d1aae031a8aa030514cc57277e45ae71523771a101a6433f087c06476139dfbc25478111e7469f74881e508b37efe1e55b95c05264f09645a5e5bbee1c6f3d09624f8803994bd944dce4ff01e7b9f2b673b49ca3500d57511a8b17587522204d8f9d0ee4b0df717910a8db5a7e6a6a1c8aff8636e80a4b0f6f08ede56f123e93a2e753e06d685d0c1f4a5eda587d593df00f7c005c0976f434e5441e6029f28"]}, @typed={0x4, 0x73}, @generic="700283e7751b321c5fde2cbf8ddc04d0a7b6872051aae350a946c2f6275fd11bbb4289df18796fcf4d161392d2ba071242791d803d6be4b249e29b3944852011b04ddb51dadbe358"]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x153f, 0x2, 0x0, 0x1, [@generic="d3096835a2124565", @generic="611b2a49467f66a79b7cf061b5e487eca39fb55eede05af846feb4bb3ac9bf8ed3e271579ace4453365c6e1d6c9059", @typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@local}, @generic="75e80d96273b4aa4ab10bcdc35987205bd3d01a631314f1a38a5b439c0a7b1ccf9a59b35066a5583c84da70da2808379e999b5863a5757ed5cae0e7c5ed18c1095ef0d87de5a3a61cba7bfd397e18d20b2abcb3d59e3cc98d2207f49e09d17e3227301e58198e0b459e17de9721e853d4541dacd71a6f5161463a435ee7234954d393c8476525b945e36c603f1d2f87b8fcbbac4b9d584c4104aa30d15e896f27976", @nested={0x96, 0x5f, 0x0, 0x1, [@nested={0x4, 0xe6}, @nested={0x4, 0x6d}, @typed={0x8, 0x11e, 0x0, 0x0, @fd=r3}, @generic="1153f3", @generic="f53a40f00495176f213a34ae3322789be47582e72e0507ff3c36732dca877b11e9556e9b905fa52cf4d0481dda9768db36cdff251c85cd86aa29660bb57df5a6aad260c54190f7cec39e04f577c856489a723a72cd0d7501bd17203a606ea59f4efe4d7c82b42834ee71ebd78b125027dca7bb0594efdc1ac63cd6b329a609"]}, @typed={0x8, 0x12b, 0x0, 0x0, @fd=r11}, @nested={0x11c, 0x6c, 0x0, 0x1, [@generic="d7796198d8745fa11558b66dd97e2b4379f6fbb859ccbbe10b73dbddf32680dd7436ef1717dccf394aeb67ee2b97efaae68347b28895b8012a2d67927a4223bc140aa9a07926acaef41d06ec4cdf59e0b9bd995472e2762f6de7047e99932223ab6a4f89fac8efcfc3505681c70c3f893144c1464d535e05688681b7008877cfa3c5c693edeb583a1ab9597a8f098398aab89cbfd14de63c9316c4c4e2fb967653f0e4009d7d491365d0a71f53b60c449155fcfc5b4d464e5027f7747ebb673eb95364a9b040e170ee2d07d6358f91fa9291fa3deaf3855bbc9aef4482696e70c1ebed37ffb399cdf85135915202d3d3fdef734bb5438116", @typed={0x14, 0xeb, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x8, 0xb4, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x2b}]}, @nested={0x122a, 0xe, 0x0, 0x1, [@generic="bf9ca3d12b7887a0d6632d03ca50e084a81401e1c8444ab5ed44093dadeb5df95aa4952013a244318dba265260b3b069d587ab1de01c99cbd3cfa799fdc5e4e7318ff3c19649d21193c7034307c9855798f66b1b501d733076db8b51e46dd283595695288d95698559afae5e44236df3869c4e03a6cba49e230bc78156ca9b401f66488f0ab35b7756c76037a0347bf2968e3753e53e6796b8ef1572dccc008d25c3c89ff43507126c03bfc4190d0c263f6121ec1b3f1b3952b18c4b5853c96dcdb3bfea7e1ebb3c7b69df887ae519f687a34658edf3c5562d5ef6269677be48bc22", @nested={0x4, 0x135}, @generic="99eff8bd101dc75e0c3d912176c5bdc3e0cc2eba1ab2afb9e83162d8a3151ce600275ffc9386a973535497dc92b75d9f181b8359011b7ee91b829f45c4d258fcb9eed6807bc35dd1341d4d190c7c24b6931ff9be10c04cb144dd8815dcc1b76ad9de2884746a003dad868ab9511b0f99219983", @generic="5432ef96fb84e7f930074bb32f7ae149df3a696cf898954f69b60a3508246538c146b631d0e0c46330ef2999e58b7b68b6e0f8a4f8e782cf509bf7bdd49c3fef0e8892db386fbaece560de81f86ec4119604ad7761d8de590d7bf537b0e02217d0c8047c2f59f146b6e1188f919d727148bffa34847741673cd6f36e4f627280be6b184a8a3f28ff292c112be79b565bbd9d15395aadd260b9bb3033de3d3f798c3720f72bc821295f8abc3102c00c1c8682b6d8a5", @generic="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", @nested={0x4, 0x8}, @nested={0x4, 0x81}, @nested={0x4, 0x3}, @typed={0xc, 0x101, 0x0, 0x0, @u64=0x100}]}, @generic="c7810c2725899cc60469b24489a4eea13cbec47a7df0ab04a9588f8175e367cd80ef668556f8460c4a08ed265d38ad1e332b7fb5b2ca0b1fdc05496e1c8fe09c185b5d9f205fc4c90d4087f3742e2cd0653ae0fadf9d46255f3b5d0ca597081b437e080000000000004e0721a72734eced6a"]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb6, 0x2, 0x0, 0x1, [@typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}, @generic="a3ab044ba966901e033968d85232808ee135968b274564f1a14ddec8601d2b7510dc93309148a2e473d353ea6ef698e7c85ed19c1090d5a8493a47993b5d64bfa384deb01cc3e7c7f8c2f466e1ba8d0e9b5fe8356b520b7e3ce2f5ec293e0d2d024cea86e1fb0fdabda91df286a60cc2da94adec95bb68647a8e9f33d573d2a144b6ad5467a965a1c847", @nested={0x14, 0xf6, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @u32=0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x1870}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r2, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r12 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r12, &(0x7f0000000d40)=""/16, 0x10) 8m4.791207651s ago: executing program 1 (id=824): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x4ac02, 0x0) read$auto(r0, 0x0, 0x1f40) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000014c0)={0x3, 0x3000005, 0x1, 0xffffefff, 0x3}) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) 8m2.365617622s ago: executing program 1 (id=830): r0 = socket(0x10, 0x2, 0x4) mmap$auto(0xffffffffffffffff, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x7fff) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = inotify_init1$auto(0x3000000000000) r2 = socketpair$auto(0x3, 0x5, 0xfffffffc, 0x0) close_range$auto(r2, r2, 0x0) (async) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2af01, 0x0) ioctl$auto(r3, 0xc0585611, r3) (async) r4 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mmap$auto(0x0, 0x40, 0x1, 0x13, r4, 0xfffffffffffffd06) close_range$auto(0x2, 0x8, 0xfffffffe) (async) write$auto(0x3, 0x0, 0x81) socket(0x9, 0x4, 0x2ed) (async) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async) msgctl$auto(0x6, 0x944, &(0x7f0000000440)={{0xe025, 0x0, 0x0, 0xef5, 0x0, 0x5, 0x56a}, 0x0, 0x0, 0x200000000d, 0x4, 0x541c, 0x6, 0x1, 0xfff7, 0x4, 0x7, @inferred=0x0, @raw=0xa6}) r6 = socket(0x10, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYBLOB='R'], 0x1ac}}, 0x40040) recvmmsg$auto(r6, &(0x7f0000000000)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f00000002c0)="93776ad494997e7e17000000001777b8f0b54240ade0481930b3dd2337560631de90f9e78673317f2ab47b96d24ccfbd61da480243a073f8cb090e606f40c571c927fd5289ce3177363d48deaef61220773037a921b27a3dcbe19b30245af56e504cf1c02a32932b820e881cb4d53460a2bc3826d686cea56c0e716c33fd0e3a4b1d1396959fb90066652726ed1ba27b6b67ee0ac9c0884bd767321ccd349c4cd03c3d468109a421e96c582190431e500b6813e7bfd14f54951ebabc71feeaa7f2363f436b507764625bfa304f420873e9cf29436c08e015cee24b3541c90ce73513722d607db1cbf6e1330d0e18fe54fb1dea723243f94152e0dbcc236c379ba7", 0x40cc}, 0x3, 0x0, 0x80000000, 0x80000001}, 0x9}, 0x7, 0x8, 0x0) (async) r8 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0) ioctl$auto_BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)) (async) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/module/kvm/parameters/pi_inject_timer\x00', 0x10b142, 0x0) sendfile$auto(r9, r9, 0x0, 0x200) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4004814}, 0x800) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r7, @ANYRES16, @ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x24004050) (async) bpf$auto(0x3, &(0x7f0000000580)=@test={r6, 0x99e, 0x2, 0x8, 0x0, 0x8, 0xd800000, 0x4, 0x8000, 0x7, 0x6, 0x2, 0x4, 0x1, 0x8001}, 0x6f0) 8m1.935444948s ago: executing program 1 (id=833): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="04001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) read$auto(r1, 0x0, 0x7ff) write$auto(0x3, 0x0, 0x200) write$auto(0x3, 0x0, 0x5c8) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x18b202, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D1\x00', 0x226240, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x2020009, 0x401, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r4, 0xc0306201, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000000)={0x0, 0xc4}, 0xf, 0x0, 0xffffffffffffffff, 0x7}, 0x7}, 0x7, 0x0) unshare$auto(0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 7m46.864137316s ago: executing program 32 (id=833): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="04001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) read$auto(r1, 0x0, 0x7ff) write$auto(0x3, 0x0, 0x200) write$auto(0x3, 0x0, 0x5c8) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x18b202, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D1\x00', 0x226240, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x2020009, 0x401, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r4, 0xc0306201, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000000)={0x0, 0xc4}, 0xf, 0x0, 0xffffffffffffffff, 0x7}, 0x7}, 0x7, 0x0) unshare$auto(0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 6m0.282136605s ago: executing program 2 (id=1125): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x5, 0x0, 0x0, 0x0, 0xf) ioctl$auto(0x3, 0xff08, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x0, 0x300) r0 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$auto(0x3, 0x0, 0x15, 0xfffffff9, &(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x22) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r1 = open(&(0x7f0000000100)='./cgroup\x00', 0x50800, 0x412) getdents$auto(r1, 0x0, 0xde) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250300000004000800100001800c001080050008801a000000"], 0x28}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) ioctl$auto(0x3, 0xc048aec8, r2) 5m58.937530195s ago: executing program 2 (id=1128): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0xaf62, 0x0) write$auto(r0, &(0x7f0000000400)='3\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x9b\xcf\x1a@4\x1d>\x9b\xb8\xe7\t\x88\xe0\x85\x97\x1a\a-T\xf8\xcfHx|j\xa0\n\xc7q\x93\x8e\bOp\xd8\x05\x94\xb77\x8d.\xb3t\xbd\x15\xfdR\xfd3\xa0\xe4\xecz8\x1a\xa1V8\xa4\xe3O\xc8w|\xd4\x7f\xea\xa2X\x86\xa0\xec\xd7\x91\xb1B\xcdd9\x1a[\x96\xf7=\x9aU\xeb\r\xb5\x8e\x8b\xaeq\xa12\xc9\\\xb2\xd5\xfd\xf5\xfb\x88R\xa7\xb5\xfd\xe3\xf9\x10\xf2f\xe7\t}\xe61\xcb\x14\x88\xa2\x0f\xfa\xb5T%\xc6 \\\xa3\xa1\x10@y\xbd\x16\xe1\xdfh\xee\xde\xaa\xa2U\xd7\xf4\xa8\xd6\xc1\xe0X\x8f{m\'(\xfb\xab\x8bXW\x9a>Hl\x9d\xcb\xa3T\x9a%\x1e\x92|a\x9f\xbc\xe4\xd0\xa7\xeb\xb1\xe6\x8e\xae\x02\x964q#u\x8c\x19\x17\xeb\xfc\x16\xab\xb7\b_\xdfh\r\f\xa8/N\xc6\f\xef\xda\xaay\xf8fm\f\xabH\x9f\f\xd1\xc2fZ8\xcd\xb61\xcd\xd8\xcc|p:7\x15\xb2\xcb\xf5\x13\xcc\xb6\x97\x18=[\x8a\x92f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x810, r2, 0x6534) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)=';') pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0xc, 0xfffffffffffffffd, 0x0, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/maps\x00', 0x2000, 0x0) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f0000000980)=""/4098, 0x1002) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) 5m54.656674701s ago: executing program 2 (id=1141): ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000000)={0x4, 0x5, 0x35, 0x5, 0x1, 0xffffffffffffffff}) r1 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000040)=0xd88f) rt_sigqueueinfo$auto_SIGCONT(r0, 0x12, &(0x7f0000000080)={@siginfo_0_0={0x1, 0x2, 0x1fb, @_sigpoll={0x4, r1}}}) ioctl$auto_XFS_IOC_RTGROUP_GEOMETRY(r2, 0xc0805841, &(0x7f0000000100)={0xd6, 0x3, 0x2, 0xe254, 0x3}) r3 = ioctl$auto_SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000180)=0xb940b9d) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000200), r2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000001b80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b40)={&(0x7f0000000240)={0x18dc, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@OVS_PACKET_ATTR_ACTIONS={0x1618, 0x3, 0x0, 0x1, [@nested={0x100, 0xe6, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @u32=0x9}, @typed={0xed, 0xe4, 0x0, 0x0, @binary="0839205645c293c62030b2f0974203127a60d57110723fb1ab806d8fa8b9e8d3e48ee0d86569b2d3afe933f6ea2604ea88e3c85df5e48ba53bbde360572782892ba91de3c00b43237cd835317d7fa9e8adbb0e9df405f509cc10808e06d68064c16e1427901a364e4216f90ca6fcf17d5bb6447bbe54b21c62940fed78c13eec468dc3ee8b0f1c113751b56e39fed5cde555a1ea2c4bb0a260950d6a86281f0b5e38de1737a22594d99934634ec1eb0026d4dbe241cfb3c22355e70e698b8334f567736371ee3c53150fe848bc96996af48ddab8201cc0cb46e570a515cb69be19286fe6cbab4f1ed5"}, @nested={0x4, 0xa1}]}, @nested={0x71, 0xc3, 0x0, 0x1, [@typed={0x4, 0xca}, @generic="f8cebd34e50703eea4f52c95bb8b01b8d367ccdf726a669a666516bcac039b1ebd15bade9931e2b78fa90b5ef7e9554fc72ee80e197ef4cbba68ed1bdc2e7fec97c2fb69f8d173f44f8d22535ca34da39195b5017eff1dc65d21f0751fcf3ca48b3255b47c", @nested={0x4, 0xa2}]}, @nested={0x2be, 0x91, 0x0, 0x1, [@nested={0x4, 0x9b}, @typed={0x8, 0x5e, 0x0, 0x0, @ipv4=@empty}, @generic="495da73e6bea6724e985d524b8f592f31325b3a499939378c3358fef23a55366c0fd6bd7654e13ae9c8d4316f20e1d0607a6fb06c1a5c41679ff753e82b37669b1c83063873f48c426c7559abe13c0261571a5ddd219b966eba8eb0f119d048c41793fd67a6f2ec8b642899ed7b425a1eee36e76c2112f3c5ff7e481b709afa56e01b3abd5dd928799f725faee35b5c6c930dfbb3c95296300351e1b7956acd9022d06365c9906ad17ec8f35a7b451f655fd84c5af2a891b99abc10a37529f9db331145e16d1466182eb8fc58046f5d403ffa7a10d3e06059eaf55b0dd", @generic="2643ba5684678860ac597578157d1a7ba6488b22e5148999d9d5b7d1a2179e78242385211f41f23b73b12a5aab530bc94c5d843859a238aa3ae3917b21aa73eea958a072f84cb0f50cd32207b162919af484ebf7e6815f4a0051fb7d14c7db035ca9902852714825ab8769fb66a1bfd4a190df6805add4215d5a2aa35ba914e6faf054e6ac86dcddbbd2b6549b94d2f9f3b4dcb1c5b7c244d89e8b4634701f1a2fc99c8e9382dd7522cf9dfa4c21c7c9cddee87f5624fc677a913ba33f38e4b1b6529f7b1f73e2350a1c2792927f8a9e57e2e05134647bb8dbe02360e28446bf6e5c", @nested={0x4, 0x5f}, @generic="5a28b5e9e8c6e3b0b9cce885f62a9702a1d89e1e64b6c71da0368067e55ae92bbccb7b9382846d75a1dfa12530e10299f7a9263523e5e17e826b4dca065ec56afa1b71c717b6d543713b9078887c9bc92a988801106aae57b409009a5a557aecee4b09f87b541e3b250b2dc11d98015fbd43575ebd5d048200d054756933df30f0ea89c3dc12c1d479c1005c3da26e7e083249cf4b526dd2bea7327fe399ed9c270bae95ee7a40fea0124bc1daf9effb92f65f8c41ffd8665ed21cb57e54527727c02bd05d3458995675970e20adc38b7891fe4170be9fe8232fcf2bf9b7ff5ffa235b307295d8", @nested={0x4, 0x11b}]}, @nested={0x1dd, 0x50, 0x0, 0x1, [@nested={0x4, 0x5}, @nested={0x4, 0xdc}, @nested={0x4, 0xef}, @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x1}, @generic="f42eece44e6ffc182d2c570159fe621e2c30d0dee8fd37c55cca56f8ce7170cc2940290f4f70b3f5645fb178271a5c1332055f7de3dc7fe87e80a5d69bb37d0506cf7944d2e79d5bd587251780d25754146faae31e05fd472beb5b0790ad38cb65b78128ee8b180da139aea08d0cdb4680ac208e3a2a350b743552733c8b89f016e25772c25f2366b0ce99c9463056d4d0505323cf7c7d45dede9375c26c972c087067471e92c1467d5a7387a2cbe659ea7742ddf971b695a09449c7cd0290ff80f3477e1282a705cf86abb36c342255fe3f6b67a76c39cc8e05026b733678d634455bb8e3c2c0e5dceb9422ac1092", @generic="3378cddc15353afce72e60c5a51911ca22e6549743f66db1ceb8502bf2684b57ac8051aedf20b5c793586541598ad3151896c299b603ade2c0818fd013486b48a4e0d76c10ea75cb440b6252d6288ec588e4eb587e5e89a4b086d935aa262c3bf25f25506a08a8a08e84ddebcd73c6dc86", @generic="7638d8a374d7a25ad7d05367c7ebd74540220e3c93041b7afb264f792875ac764f40383653eb749b48cc47749fb4774560f3ba2538cca87621405d942d65e4a3f63e453a1b35e34175c975d8bcbab4f0506879fc3d0c753ff3f2077f65bc1df712"]}, @generic="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"]}, @OVS_PACKET_ATTR_ACTIONS={0x118, 0x3, 0x0, 0x1, [@generic="3ce640919600fd5f3c2e2aecb3240c4ee1e596ef778e0ada9be2fd1a887a4e497e81e9fbb8929e2d197853d9e8fc4a00957de95b87dcf673d2ba1baaaa4a5076590d8ff9b079e874f1dccf6fae0c83f060fc4813e6667009acf25d58be6bfb8b3e0d86b393e25034ae33cf89c9da80e1c890f73ef6a1ee8661a44b5caaefc15955fb0e5a0ccb7e91e9eb43bc", @typed={0x8, 0xd, 0x0, 0x0, @pid=r0}, @generic="79073696da9a939ae514ac7b422a59e8c7d6bd8248f00348f00539a066ddcfc5d30c152abb6eaea3b36573345093ee19e04e841dfc7cef9ca1fd08aacd8562d32dd225829197f27b2dc2f6623f9228f10409c1c217b105fee30ef8cf9aa2c45edc37c4a8427e6c30b362454daa96a9018e9957d3e151a8dd32752cd4cdf32944"]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "0ad31ece118734d70ba19d0083a7"}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "660c75a4c72ebf3d915620cffb47"}, @OVS_PACKET_ATTR_KEY={0x150, 0x2, 0x0, 0x1, [@typed={0x5, 0xd2, 0x0, 0x0, @str='\x00'}, @typed={0x60, 0x92, 0x0, 0x0, @binary="d683aba05f797a85c4ce4f8c0a3abe6b5ff33b2aad504c0217b22dbff2f1a90ef89ebf4579573ca9125db694b286bf2c7fb23fbd677e3899ff6a376960e9c5606715a0c38aa3d365b1f5b200b3798d9c0e408eca771d3c2ee12088b3"}, @generic="eaa0535cbc5fcddeff3d686bd39fc15ab3f73ff17a5686226b89cc78d71cf5b9d6592a867300f0279f9c158a7075e00260678f0b6eb7fd51140d380d5e7e62eff77468ceebbae2477611eb1675eb1acd12fea892afcb76ba97710a571894856d3618ee8405b72b1de528633afa45c9cc2d58c6ccce6f9b8aa40665817604d540616425b7f9bbe83ae35cb63cd88d279b3812aa179588343aad2fed2020dd5149f7951c9e4ef9ce217db62e99d7abee74b1c418b35262810ecee509f496454855670de4c8fbf64c672886cc81ea5a87e013b12149c7ebb5954e1790fb9aa693f0bcecb0c4"]}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x4}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0xff}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x18dc}, 0x1, 0x0, 0x0, 0x40091}, 0x20040081) read$auto_nsim_dev_max_vfs_fops_dev(r3, &(0x7f0000001bc0)=""/99, 0x63) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001c80), r2) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x2c, r5, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x27, 0x3}}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008001) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001d80)='/proc/asound/card1/pcm1c/sub4/xrun_injection\x00', 0x2000, 0x0) io_uring_register$auto_IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000001dc0)="3b6c5f8103f98958cc995a531963ce6e8601d87a00320739dfa9fc52bdf92e3ca4068d4d6c3724cec3a887335d5d005af559f54a029ed748f7bed9c38c2a5d202219aa2a3da8a6526a4473dcee58aac970e0f16b8ebee0b54f17177879277440bbc592984a626cce", 0x101) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000001e40)="bc05f0fc43b1845cd11df564") r7 = socketcall$auto(0x0, &(0x7f0000001e80)=0x8185) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000003640)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003600)={&(0x7f0000001f00)={0x16e0, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x262, 0x3, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @pid=r0}, @nested={0x13e, 0x5b, 0x0, 0x1, [@typed={0x5, 0x30, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x15, 0x0, 0x0, @pid=r0}, @nested={0x4, 0x154}, @nested={0x4, 0x42}, @generic="9b3df69c621f069788afe37e3db3211fe6365feec830c9ed60a750d0226c6f0718ef7d8e30f7328bf868", @nested={0x4, 0xfa}, @generic="d63f291633e88eb3715e1cd361003973c7d54b955f6cdf870b3d3cb211fac1d12feeb8b2d09bbffbfa39f2b3f5c0b4f9abfe70429fadc2dcac08887c62cc136bdc43721f76cecee74a3241aee316ba6facdfb776c653fb3d0a41417be1c8a9833e8704ef8dcbe3f7fd8810ec59954e598f7e3918899ac9ced9bf72ccb91c77f187bc91e5ef03a26db4ca6ba6f3860f1cbd47aa91a1adc5663af57cb9ab9d10f82bcc33ca5479acd8eee3a2234c55c56d810995f3224436301792424d85b64156384bc62ef366aa55400901d5e955c23e59c9be0e6eddf8adad005fdb00d9b022e934cece29d1ea4539a7e37dc66dac15b43df453"]}, @generic="5d59d3b694e9abc4bd4542f28cbc8a8368ce9debc4314ca3d983694c4c5d21f75ff44e623241ada6", @typed={0x8, 0x6, 0x0, 0x0, @u32=0x2}, @generic="2df9c055ef92e7fdf85e8c41a2bc49052cd81ffccf2132a6a074b9bd4688e6fc652778b1bb12331a72d49b25fcf6cfee407a707dc506d3132c2a155297d0bf9bd7a4d422c5c93b533ab0512e2a8bf51e79960d7f5e1b44e9ae81d3c74ff0a76987577b81c56e508ae8a2431dafd001c5ef48432dcfb9a2e8512d5d3a0dcf6c3878ea9dcfd210b2225709646946e2f1e0bdd132d0308e64c88a3c2a39af443983efdb358ef9ba6d647eb01da0f8ac9ace2cc059e5578d21cc1f2437322a4f76dc6799ffa53deac40da3fd7c101478a2cd40c1522aa714187ec04f03333e920790e5ece543f876"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x198, 0x2, 0x0, 0x1, [@typed={0x4, 0xe0}, @typed={0x89, 0x2d, 0x0, 0x0, @binary="f4fa0f32912f471f4647436663529d00d8456d2018f52aea84a978cc6bbf4e1f1b6bea09fd4f944bf9e65dbbce8a1898d6cd8e743353e69c707091553bcec786adb97717cdd5fe5a030a4aa05b5bd29e0d1478befc07335b4f9f6d2ba3e056421607da7e10fd1a5d17396f6776386ea2adc374526645574f22d4259654c12c52846e4a9a6b"}, @typed={0x8, 0x106, 0x0, 0x0, @u32=0x1}, @typed={0x4, 0xe6}, @typed={0xf8, 0x143, 0x0, 0x0, @binary="739b6d644b8a4e479392fa4f621138bfdc184f0366f5a4ef893f87e248603719d2107f85a6079ae60370d8e56df499cfbf17884ef96c856d3b3a2dee44ce5f560d4271eab3ad231aa2986b77573aefd4078f51ff972cb3ce6fe1782dd878d59f3d45fb5c3a9b03b0c9d55129369f41d7acdfd6af42efbabef87cd9a2843987f4c280e1eed36ac7081ae7399035c2ddd766959443efb97973a2dc8b36f1837696ffba9e4c9a4b30ce541b278e9ffb76b75a9475fe0ce872587b0053113839801e85b7d7a49f1f6bcc9db11f5ec0f68ec53be07c4b19a414d6cf31aa178a415ec696a72703b4fd9934dcf091aeef1b12a4f8c2dec3"}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x7235}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x10001}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x29d, 0x2, 0x0, 0x1, [@generic="4c4f3d90d7bfca0804f989ed39525dd3d22d1cda260f5af3fa838e233679c56898e857b835410873d1bd230bea50379333f07549", @typed={0x80, 0x4c, 0x0, 0x0, @binary="4fdafb7dc30479060ef83fc27c4e0e091a676f86b6179c85799db95510d5dd6844711cfff93e4e1d0126b0121441497fa0abddbfd21884848b0be37580a40f13b2c691df987e31194a3f315ef1cdec3e15b228d086452314a6dd1e00e59001ae836b54f46cfcc0136be145191e76d85432a69a1bbefc4237cfb3d1b0"}, @generic="3687eded352ae2acd751eddc6fdfe29e56de638fa20f33c4f0ab324d5558f4067afda527ae181ad853117e30993b5d3c65ce11e38b98e3115f2b7b8340e8372a374fa1cac0b06fede5d98d43cba11069e25b2d14a2708c5e581e905a300a498bc34def195d42f43ebb191c25d42492e264268405bb52fe9fcfd11bccc77016d2d970c2c657a6a679748f2df3e5960fe2d54adfd43c39e32748432971f2fe925aef51ce164eb658891c3ffb186fc46cb549016ceed81ddd18afff0c81c7b7badad8cc03a078db92cd7cce292ec729b54a320837d26d0521da9130f61d80bbaef62a56a8fe1b", @generic="d87b3b8093b17858bd7e2a0c3d97c04ab7f45b0d31974dae803da0f78436f95094c08328c96308dd1fc6bdafca0d9078401a40a656e282be2a8ccfe706380eee623d467d7e24ac0f2e099da19d6573ae4d511e67a3f2b65d8f77074b64a91e9ae903ca9bef0c86e84a9510985986eb506a30f33157a2704214fae66f72690633855bd38ef364e7391d713d0b2b023ab61d7f87b4a2ba464aed6d330cebb35412e1e3a98dcb8204b8b12fde0df1ee3c5d3291c47a432326e7a29f53e4cec6261c79a516fc9f0fd9b86a4945c89addd98e03e1a79300c77da1f652753dabfc29c769e7923f723d012ba3ff76b5", @nested={0x8, 0x69, 0x0, 0x1, [@generic="b1c8f50d"]}, @nested={0xc, 0xe, 0x0, 0x1, [@typed={0x8, 0x155, 0x0, 0x0, @str=')([\x00'}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x1010, 0x2, 0x0, 0x1, [@nested={0x100c, 0x61, 0x0, 0x1, [@nested={0x4, 0x21}, @typed={0x1004, 0x154, 0x0, 0x0, @binary="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"}]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x3}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x3}]}, 0x16e0}, 0x1, 0x0, 0x0, 0x840}, 0x10) ioctl$auto_FS_IOC_SETFLAGS(r2, 0x40086602, 0xff) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000037c0)={&(0x7f00000036c0)={0xec, r5, 0xa31, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x3}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xc4, 0xbb, "85d5cae6fcf42270001967bc0488300fd243f8350ba3619a6ee25510b825f320eca613528a2f999c2e29d6b374c6316b7691a1792de5652565831ad1d0340fb94ad76a21dba2ac05addb0ba7a14c1cd1ababa8d109f621230efb90525565c31d96d4ccabd195db940fd6599f8a6e7c5e6609c72398e7d643b621b87c7c5f1c49b848a84296bd4567bdbcb15cc3db8014a6dd98b63271dd371b477271f19bd011b0e6c5a09010e5266f375f4cb7eba991b0aeedc075dd0f59ad8abfce374692bc"}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0xfffffff9}]}, 0xec}, 0x1, 0x0, 0x0, 0x404c801}, 0x800) r8 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000003880), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_GET_LGR_SMCD(r3, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x38, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, "e34288aa25b808a6d6a19778652b761b024d990d24815ccba1e3ca51457237ccc87c7cf2"}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003980)={'batadv_slave_0\x00'}) r9 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x6, 0x3, r0, 0x20000000000000, 0x7) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r9, &(0x7f0000003fc0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003f80)={&(0x7f0000003a00)={0x544, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_FLAGS2={0x9b, 0x43, "167a256206f98f1cb7c66c5ee0bd184390fd43e308d898ade3f196238680f31240d2ce67e816bf135d0aff26fe6b9af6f889a09cbcab8d7c7c24bc47c88cee8b53ef8411e235444dfc643014c4f28f998fa43dc826bd311558918359de9f2c1ebf624f4d135ce8f3afd4e8b5e400cc2fef61980c11bc495eaf214d05bc09cb97d82e64b05bc150ed0dd18af3a4f7b1af8a9d5f5d5e40b3"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0xaf, 0x129, "c65efa066cbe60eaeebd085de45f36c946232629492dfb49cefd4903840c2d7e57345e021b4bc20cc60714de96b5d4ee8f009c1c66170f20a4a35e983cd54f3f7a145a442e6f328edfe7164220e82b375ca96cca199febafb32bae1d5469e949c999fe204149faeecfd2d2d87ee9db40d962fcd9a68679c61dff6aa0a2f3e6620107b91d6a849959f3f62ea47c71189a3caba6df4e412ccd91b4ebb48308feb4357f3c02dd4486c0459efb"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x101}, @NL80211_ATTR_STA_FLAGS={0x3c5, 0x11, 0x0, 0x1, [@generic="f89cbb1448b98760afbf2aa6f01c9989c3d83d8492f6ab48ca2ece3d0114d1be587329491ecf08fca0436872c5ee5a76cf79f756693e0f3a1ea98368687527", @typed={0x10, 0x125, 0x0, 0x0, @binary="d88c1db42ca7c7c9d7056bc9"}, @typed={0x5, 0xa7, 0x0, 0x0, @str='\x00'}, @generic="aff9736505d2a53ba3d99029a4ff151451383ee0a71331c624294ad80634d2b651a939cbaf606b9e683d89e39975fc54285a7565c0c43b2e71dee0473a33d44cca8dd807d60c90b2313b14d0b668aadd9d2a4fb6dc386922921e5ef10d247e1776da31994e965129119a8d574603425d613b86", @nested={0xa1, 0x104, 0x0, 0x1, [@nested={0x4, 0x15}, @generic="65e33e16dcfd6468e504bb654e164acf5bf951159c479b58ebc6798fce541a88ef48c57e3d03fa1cc0882e72337d1b96480576bb4aba25d01887e462b59d0d531adfd688b66e2a1e6e3ac20991e50d7cd860dcdb99c1f9f9805d8d24c52bbac87b", @typed={0x8, 0xee, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x9d, 0x0, 0x0, @fd=r7}, @typed={0x14, 0xf3, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0xfd, 0x0, 0x0, @u32=0x8}, @typed={0xc, 0xe6, 0x0, 0x0, @u64=0xfff}]}, @generic="a24a13915d13048be8e6903d2f1b797571e5b208e56cb126f8222f3ac4091d4422bbd4736e6e9dd5cb3e6bdebbc678912144787ea7ada785664ddcfb113ae519ccee1bf6031efda81fd34a6d3bab60d20de8afd5e351c04495c74aeff055d5bf6f1407e73e4bd2287b968872850d88a2b9746ca8768dd9226a1eda5c6a", @generic="076f366fa9d9173b1ae1f1a0ea98a09f1b26b1f54e1dbb4547551c5dfef6554f3f855a8938f21c18a26c7eb31b773a8036df1d21ebc9414e2d26ef72aece046e7c7f8db3e872a62779d148cf292fc1c420da501641ced2a21fbf2a3eb10d3085a83081a8f6f5c94a4b49f10fdc9300facf3ceb37f3ddbc94e436692cd279d61591f2df5ef880acd87b807d64071539a92c9cbd79972fb83f2fc176bae22f318dc7a92493aff99e784b226d0741f9dbd495cbf49f22ceda3b3e08c84f7731c2cdba7bbadd3f6be8d5f6442e2336440e32e359", @nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x3e}]}, @generic="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"]}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x544}, 0x1, 0x0, 0x0, 0x20008000}, 0x4010) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004040), r1) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r9, &(0x7f0000004280)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f0000004240)={&(0x7f0000004080)={0x1c0, r10, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x4}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x7}, @NL802154_ATTR_SEC_KEY={0x19c, 0x30, 0x0, 0x1, [@generic="07ab5e2f864d2fefa74f37e3ab71eaceb7ca348aa721702c84528c41c2d8325063cb9d6b62299179f2626d456c255a8f2a1f31c6b259cf187889bae353b2767d1d4c3b06e035d41c26056c361e29319812d63da327e3295bffa88aa4", @typed={0x8, 0x10d, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0xab, 0x0, 0x0, @u64=0x200}, @nested={0x118, 0x5, 0x0, 0x1, [@typed={0x13, 0xbd, 0x0, 0x0, @str='batadv_slave_0\x00'}, @generic="257a47682ae17047b4f01771", @typed={0xf3, 0xae, 0x0, 0x0, @binary="c19caae082e90fe87203f46b1069ffd4ece459b30ec7a04142f992ce6cbf6dd017ee7ca333b8318ba80dedf8bc54a3101cd792a08b267d6d210d1b4aa6147bec01c393a3349b4361fc664e229563120aec295c05155d3828fee8d25e7f4f68c52d4edb2b57663533d8c622bc980a41243afc465ea565615636d13c1cc3e5d54eb0b22b6661daf2531ce295ce836e7f7093a8515afcb297d55db703d80080c69a6d7a7bf276c43efb401034fcde43eda2712eca85251b80171e9cfbb3fb5d7e89805596196ba41bae9add9cc6ca84f22517657ef28a8ea10f69e00fd091f11d1595bdb9da2244ae5fb797b2d4b83020"}]}, @typed={0xf, 0x55, 0x0, 0x0, @str='ovs_packet\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) sendmsg$auto_NL80211_CMD_DEL_KEY(r9, &(0x7f0000005240)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005200)={&(0x7f0000004300)={0xed0, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7f}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x10001}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4}, @NL80211_ATTR_IE_RIC={0x11c, 0xb2, "b45a05acdd202239eee150296cb1f83cd3493584627dac799c53411e122aad88c134c286efa9fa8a65ae9b75f9181691146a326563620886cdf68914c9b2d5213529c9f7db688686655dcef68156c6e7f3b2688168991e5e870f0272b8035fd8c9763ec5fccd8c7cddc13d90ee38d5de41188d872c4ad67227f132bbc32510406edff8c96def77df134a7bd75e81e6a865cd91c77ae6d8c9ce8dde19a99546e212daaff628a1128994741d59dad0904f1c39ea58defbae63c4b89e0a4b8d49f77b1c6cc1e4bffd501cbe24398567a0869ca8d41bbb6d8bbfb78b0ee64c0cd7df5caef6813fdb8252efccc0a09ef98c86c77781fb5c565f5384c021df13da0370a09dfc2a647c41063d257d9ba8a59ede945d68f2a49a74c6"}, @NL80211_ATTR_IE={0x74f, 0x2a, "76aaf55751cf089227659d17d5c246c5f0e9be9b11a8840c0c9451d7f77b0e754eb9135305c3e2b2704bfb44653f21190b550defecb47373c7aaa05a145426bc283d2a84a49e2b7ef4ac37c22ed919de512be658d4937f3c0ced716a8feaeaeb6db39fd0915f2ccb9d0c946badae39ea4f3baef02cc54b3264828578465d839d67c0846a8d7a754457524ee2753215396290adb74cbcf22504aeacd99b4b655f325e8619fa2870edcb795a7557e46dd2f75733b41e959cef1d71f4741a7b49b49ec2c73847811923ee83e01c82ff90fbd8ab163e37919eb02fe3f82188df6c5782ce513644e13af8763245e01adafce23537702c4e559faab2f00527904d1d75eea68a9e8e1639708f8c7b67ae48cdc5b0f91e044fb233089d4b5c5c8f783925ca6ef0afe106fc34e1491ab1a4334b6ed05251aa63875c4ebfff6affb64aec2acd655ab9cd0cd6ad61a9fac9c6c64d628f7273afe7224aa51a47ee56d45887a2a086ed6c477d8d0aa1ba88e763a7007c00d8e60433f367b2999396a9355f835b1f7905a5cb954cd297c2507bf99d246a91192805d22698d3cc6655c19b7991ee02d8cf72b419496f03c6eb3cc8d42143a04aeb0d4644fee214bdab16397df5ae40d74ffd210d0d7c0368ecccd29c62f11a6c548eb22e5ae3f17b62f9c61746720eb35b0c67d8a32744a30051fb5870bb73bbb9a914408f9ebd2ed04f2ca824f45e52a431110d52efc770143eadf8eea412967ba559fba2f8271b9b61b4ba1fad225fef9f442b3586f86a0bfcfb8804bfec41f0eb0c37654fb8a16bf9c47f36bb0f6d4e7b0edfc9638be47d06a75be8cbbe2bce4d5e67819cf66c62dc93be9dc30d84c9c47ef0b4710bb85fc3181a1e778c5e21fe15cc8a9a9ef2928063721c4f36132becc816a5d8fe94d8fbe956788fb02d68f1593f08147c371c65d020594ca8bc9ecca3fea48c800329849ab557e319e930a3053456565c75307a27b3c08ff7401b7c6d72109cefa92958c4726745e9eec77cc36d4072fe89e033295539c9b19ed6e1082873b136405ed72cdc50a903bb6aa7c95afea7d6f17d9c9d60b8a21afad5b3d1842e5b1717a32834997a1c4b9106c2c7aefd7060bce42fbaf6ac8d67d9cfc327731e907c07371d6144b6f759389e2730e2db6469f08b94dc67df878d3e7835cd4630db81fe8285d4c1616cf37f9a9cd0ae8a7b54910c0e54c4d1d67248c95c6397d7112972d3102561844ebc2b891877b1f952bd6714ef3c513fe9e67d0e020511006be3b8a337b3aee0eca187be8e74256565d868948e45d68046f50be736fe30ec6abd7601e22b1d83e9be1b6b85efeda4bfd46e59fddd2157f76907557820933ef710e55c9422282fc067dd444f70d525a92f86525fb848cd87bfee9492110f3fd8344f05dad04ec0cbe3d9a3a907a1fc40188c01f950beca5381d22e1fc113c9016ec12d4671bfa458ed06071bf8d0674219c22edda52a47bbf39b8e27d0d42a01d84d88b7cc1ce7c6fabb6882f28156100cde00fe34a8b6c5abb44505ffd40a20086a4187ec4c22534247e78c765de4ed0a524eae2df9b5bfbe97b1aba9239d51ec69d0ba064269e36cedee23570590fe2cc5d388cb440ea6adaccbce44ac38f1bcc9630f7841102c2bd7681b3a6a60b90d4eb268b6e96af05af002cd6e3d88f04a556f3bea2ea13f72c358459d80cde3d71f5394a0c9e0906e88dfe976a45faf7734327218fc99e4568a056b44ab2ddceaa365c0063e7766d492ca0c6516ad233e07823bb531d77eb427e0eed21a24bb1051b5d5fb2a9b688782a646a8ab2d7c4341109bafa8a1e33cb2753453176926779e3c54f9314e9b980983758e086c57eb431bf24f0d7031aabb1751951147298ab980b20d06e69964d09c71aa66338c506ab52cdb8551b981165c0e5ffe7ce0118606dfe8a5ef3c4d18fab911a4b9fc05ae7a8348a8150151c45a7859a694fe0dd1988ab0b2d0d0bd3bb1159676960c0564e235cc823c67de4bd3fbb11f11a2e1475d407657c89d6aa30c36616a46e2b78fd4872918565e6ff48cd37bf8b9dd825764c300bb0413883c1fbcdd7592f755ab3078f524189dbcf7a0579b6ff61c168b236ec357e68061648c0b7c451611958eda186fe62b19ee92213e31ca7b868cd296c8113678cc899b5ede1ebe85e1321133e1f37e135a84f20896344c6a02eb9d3fedbd079f0aeb922b96c7910f7a0bd3325e7c29f1b579dd58f34ab3b29cdd3ea2d33b1d942f203e4e2961d5e97b7990945100cdd1ca730879a312a7a64b19526406eba5d8d38caf351d2229ffeaa23fcc779e8cfddd435533f28a79e7d2bf348b20ae9063099cdfec2b4d84a86c4b968864a79879ca8b26bea397ed86a2ea066317dd8247e71c2451d3d0bb401a0c23ce4a8c99ab0be45230829346585034053e0180ded814f6209f36f61949a54652116a06699f7001765f77c26d73bebc2933fbbd04cac54a87c6e403d460b2e67a9b9bafd3841157ca7fc775ddfe246048f69002dad68609f05f8f7bbabbc5dbfc0d80f6b375ea8fe1e1fb5feca15c0185a6d4abd40f81e264db7e3a93fbe2361e1057ea57ebf595f1fd6f41f56ef91d7194399df48fc54843eabd09f8d7f0a45f7a"}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_MNTR_FLAGS={0x9f, 0x17, "36584c1a4f214f4024ea8d29ee13ae8c89158501e388348b4f7688df93c5a8ed2796e6c6cbc1fbf7d0d315da26da2d1ec10dc5b431813c94ae3226cc48956b8e31de9b27976909ca7ad70da0333e9d2f3cc8fd7832b0d14c9c52a01302b6ef7cd6f923df0b42274c435efeaf8887aa96e029d85199f9dd8a175776dfdcc11dd7395dacb28bf5ed587979239f5eff7ef96ca9111e837704157641f9"}, @NL80211_ATTR_BEACON_HEAD={0x57c, 0xe, "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"}]}, 0xed0}, 0x1, 0x0, 0x0, 0x60000c0}, 0x4000) io_cancel$auto(0x72, &(0x7f0000005280)={0xfffffffffffffffb, 0xcdb, 0x6, 0xe5e, 0x3, r6, 0x8, 0x6, 0x7, 0x0, 0x5, r1}, &(0x7f00000052c0)={0x5, 0x6, 0x2, 0xf27}) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000005300)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x6c4040, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000005340), 0x80002, 0x0) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000005380), 0x480903, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000053c0)='/dev/ptyq5\x00', 0x0, 0x0) 5m54.141248343s ago: executing program 2 (id=1144): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r3, 0x2) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) io_uring_register$auto(0x2, 0x1d, 0x0, 0x0) 5m51.591753038s ago: executing program 2 (id=1148): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000140)="77523018a0ff9857095d185ec1381f9834bc77f3420432435ab0b10d4f337a5989a44a59769925b3b46de7ec3c685886a15d31e97bc5acfedbc02a3b91b0b9e4a5e1d6e696e8980ce1f6e537584739a61a3eddfb580dec27f2020b4a8381dfee98abe3111b66b79bf542195ec8b60ca40ea69ec45af669e503e906001024daa15b5eea67c20c95e9dd49db949a3075afad34de509648015a744f400000000000000000b32509844e2f9362a59b", 0xffffff0f) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x80480, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000003c0)=""/4089, 0xff9) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d904a3836d61c9100fefbba06a6ef9368c7996e841f3f1561d4992f726bf26b36b0b2fd1678e816201cf562367fe6596824588a2c3d84ba125f00", 0xa}) socket(0xa, 0x1, 0xfffffefe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, 0x0) r4 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pread64$auto(r4, 0x0, 0x2, 0x3) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) writev$auto(r2, &(0x7f0000000340)={0x0, 0x500000}, 0x9) mmap$auto(0xffff, 0xffffffffffffffff, 0x5, 0x10, r2, 0xd) 5m36.5337123s ago: executing program 33 (id=1148): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000140)="77523018a0ff9857095d185ec1381f9834bc77f3420432435ab0b10d4f337a5989a44a59769925b3b46de7ec3c685886a15d31e97bc5acfedbc02a3b91b0b9e4a5e1d6e696e8980ce1f6e537584739a61a3eddfb580dec27f2020b4a8381dfee98abe3111b66b79bf542195ec8b60ca40ea69ec45af669e503e906001024daa15b5eea67c20c95e9dd49db949a3075afad34de509648015a744f400000000000000000b32509844e2f9362a59b", 0xffffff0f) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x80480, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000003c0)=""/4089, 0xff9) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d904a3836d61c9100fefbba06a6ef9368c7996e841f3f1561d4992f726bf26b36b0b2fd1678e816201cf562367fe6596824588a2c3d84ba125f00", 0xa}) socket(0xa, 0x1, 0xfffffefe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, 0x0) r4 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pread64$auto(r4, 0x0, 0x2, 0x3) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) writev$auto(r2, &(0x7f0000000340)={0x0, 0x500000}, 0x9) mmap$auto(0xffff, 0xffffffffffffffff, 0x5, 0x10, r2, 0xd) 17.371450543s ago: executing program 3 (id=1981): syslog$auto_SYSLOG_ACTION_CLOSE(0x0, &(0x7f0000000040)='(:&\x00', 0x51) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) 16.522868479s ago: executing program 3 (id=1986): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$auto_TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000000c0)=0x3) close_range$auto(0x2, 0x8, 0x0) r1 = bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000140)=@bpf_attr_11={0xfff, 0x14000000000000, 0x6, 0x8, 0x2, 0x1400, 0x9}, 0x3) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000080)="da00b028f36f6096b8866f570f357c796688278772c0e47a6b02922a90192f79c527b868fc96654ebd34c39a22335bc6b5f5b1bdbb69feda184fc8c8909c2674a4ed") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0) ioctl$auto(0x4000000000000c8, 0x400454da, 0x3) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) socket(0xf, 0x9, 0x4002) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) fsconfig$auto(0xffffffffffffffff, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+$', 0x0) ioctl$auto_USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000040)={0xff, 0x0, 0x4, &(0x7f0000000240)="0b8f0e0cf70208832a5a133cfd711cd05cd3502af0e1c9850b4a5db894e644a4c0d958456d5541730f5279158d68ad030056e353784094bb0e571ccaede4a4aeab78082f70605b76ed6f9436cb432ec8d9fca2116cb74315abbcf1a23f05bb28dbe14475916ac2d6fb0f065d48fd1a83ca0ce97422e897a5ca187f13e7bde31988b4045c69179d8cc1bd668f287ea2f8ac77c2699313cd7c288940f47882f40f6810c0b277bf9648cd6286b58907b5731a0dfccadc4890fb699dcb3bfe7442655ac4f0fc7813578dd42ed82491a385bc1726a4663c"}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r4, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) set_mempolicy$auto(0x6, 0x0, 0x21) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x0) 12.122904029s ago: executing program 3 (id=2004): mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') read$auto(r0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f1e) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x103841, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0xf67, 0x1, "669cbbd9e9756f22fdffa199e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x101}, 0x0, @integer=@value=[0x2, 0x0, 0x5, 0x80, 0xfffffffffffffffe, 0x7, 0x4, 0x8000000000000001, 0x100000000000004, 0x2090, 0xf7a, 0x6, 0x3, 0x1, 0x0, 0x7fffffffffffffff, 0x9, 0x3, 0x6, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x6, 0x2, 0x8, 0x10, 0xfffffffffffffffe, 0x3, 0x7, 0x6d, 0x3, 0xfffffffffffffff7, 0x10000, 0x5, 0x6, 0x3ff, 0x5, 0x6, 0x7, 0x200000000a78, 0x100000000000000, 0x100000004, 0x1, 0x0, 0x29, 0x81, 0x50, 0x5, 0x6, 0x8, 0x2afb, 0x803, 0x80, 0x4, 0x0, 0x4572, 0x9, 0xce13, 0x0, 0x80000000004, 0x6, 0xd, 0x0, 0xfff, 0xc, 0xfffffffffffffffe, 0x6, 0xff, 0x10001, 0x0, 0x9, 0x9, 0x3, 0xd3ad, 0x9, 0x5, 0x7, 0x100000001, 0xffffffffffffffdc, 0x5, 0x1, 0x1000, 0x100000001, 0x100, 0x80000001, 0x8, 0x7, 0x4, 0x8, 0x6, 0xff, 0x6, 0xff8000000, 0x9, 0x800, 0x18, 0x200000000000007, 0x4, 0x57, 0x1, 0x6, 0x7fffffffffffffff, 0x119af68c, 0x3, 0x4, 0x7, 0x6, 0x0, 0x8000000000000001, 0x5, 0x8, 0xc8d, 0x7, 0x7, 0x2, 0x9, 0xfffffffffffffff8, 0x4, 0xc, 0x6, 0xa, 0x10001, 0x4bb2, 0x2, 0x400, 0x401, 0x8, 0x7], "282f77b07e718e117c9a346177741dc252158a585e18e00008e2c8e50de501951d8fcdc4f791a196aad5faffffff9927e606f70b23a13735a4fe845c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e18171985b6534b171d7608000000a608b818600a6c850000000000200000d000"}) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$auto(0x409, 0x5, 0xffffffff, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x5) ioctl$auto_EVIOCGRAB(r2, 0x40044590, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) 8.508301345s ago: executing program 3 (id=2015): ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x8, 0x0, [{0x392840be, 0x0, 0x74db}, {0x6, 0x8001, 0x6}, {0x3ff, 0xd, 0xa9f}, {0x7, 0x1, 0x7}, {0x6, 0x5, 0x8001}, {0x39, 0x5f3, 0xfffffffffffffffb}, {0xaeda, 0x200, 0x4}]}) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cec15\x00', 0x10f181, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0x9, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xfffffffffffffff8, 0x1, 0xced80000000000, 0x9, 0x6, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) fsconfig$auto_HIDEPID_NO_ACCESS(0xffffffffffffffff, 0xffff0000, 0x0, &(0x7f0000000080)="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", 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r0, r1, 0xa2b) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01009b0100220000000000002f87c8067482000c0001ffffffffffffff7f913da7b4895bf548d098ea59134934b103bd63e78b4881367790afc2970e156b642fcac3990bf2a3df5af3f94fda625528b312a0293426f2c3dca81a7e41cc467d76b20d97137a948a495418e495c716ff2fbb8945ea03864c72487a05af70ecbeaf82"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044000) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x5, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b3d, 0xffffffffffffffff) ioctl$auto_TIOCSWINSZ2(0xffffffffffffffff, 0x5414, 0x0) syslog$auto(0x4, 0xfffffffffffffffc, 0x3) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) dup3$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) 7.974704947s ago: executing program 4 (id=2016): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x59, 0x0) (async) socket(0xf, 0x3, 0x2) (async) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_DISCOVERY={0x24, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x1}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x4}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x6}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x30f82b06}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200680c0}, 0x881) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0x4) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)="3318cb") (async) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x80040, 0x40}, 0x18) (async) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x3b9ac9ff}) (async) adjtimex$auto(&(0x7f0000000280)={0xf, 0x0, 0xfffffffffffffffc, 0x100000001, 0x400000007f, 0x0, 0x2, 0x0, 0xe, 0x0, 0x10001, {0x200000000000007}, 0x7fffffffffffffff, 0x4, 0x5, 0x1, 0x0, 0x9, 0x400000000, 0x7, 0x40000000000d, 0x6, 0x1015c8}) (async) adjtimex$auto(&(0x7f0000000540)={0x72, 0x0, 0xff, 0x800, 0x5, 0x5, 0x72, 0x0, 0x101, 0x9533, 0x2, {0x200, 0x40000000000002}, 0x80, 0x100000001, 0x5, 0x6, 0x0, 0x100000004, 0x40000021, 0x18d, 0x6, 0x100000001, 0x2015}) (async) setgroups$auto(0x10, &(0x7f0000000000)=0x80) (async) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram3/queue/iostats_passthrough\x00', 0x80202, 0x0) sendfile$auto(r2, r2, 0x0, 0x100000003) (async) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) (async) write$auto(r1, 0x0, 0xfffffdef) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)='-', 0x1) 7.596162252s ago: executing program 4 (id=2017): socket(0x29, 0x80000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x6a) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f00000002c0)="1100000001000000000000000051865759ede6a30e2ab11c6332cc6a0000000056299cf48e290b15d8fb4df19b596e9e60aa17aab8a8966fac671fd0af708b26fc86b8584b0b4cf3149165eade4bcc2b2f9cbccaf60efe67d47369619e760655054206dd7b69b93c6f4965cd24dae36a1c37440922d754ce2fec5d26a3530a37306b930c018b2214d776c553423d8d28a864b4def1142fcf9608f73a8741f4eb5dcf14f29bab7778de6fe2c68512a3be", 0xb0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) ioctl$auto(r1, 0x40104d14, r1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, 0xffffffffffffffff, 0x4}, 0x7) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getpid() syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) getrlimit$auto(0xc, 0x0) fdatasync$auto(r2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) open(&(0x7f0000000800)='./file1\x00', 0x163ac1, 0x82) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) 6.319054753s ago: executing program 0 (id=2022): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x541b, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x810) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x20008810) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = socket(0x10, 0x2, 0x0) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_id=0x4, 0x400000000005}, 0x3fc) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x803}, 0x2004, 0x8) statmount$auto(&(0x7f0000000000)={0xbd, @raw=0x3, 0x3, 0xffffffffffffd4f2}, &(0x7f00000002c0)={0x2, 0x1, 0x6, 0x8, 0x1, 0x5d9, 0xfff, 0x3, 0x80, 0x1, 0x2, 0x9, 0x8000000000000001, 0x7, 0xfffffffffffff134, 0xc, 0x7, 0x9, 0x6, 0x1, 0x9, 0xa, 0x7, 0x7, 0x92c5, 0x9, 0x4, 0x1, 0x7, 0x2, 0x81, [0x6, 0x4, 0x7, 0x6, 0x6, 0xffff, 0x81, 0x1, 0xfffffffeffffffff, 0x80, 0xa, 0x69, 0x53d, 0xffffffffffffffff, 0x26, 0x1, 0x0, 0x5, 0x4, 0x1, 0x7, 0x7, 0x80, 0xffffffffffffffcc, 0x7fff, 0xc, 0x3, 0x7, 0xc488, 0xc286, 0x7fffffff, 0xf, 0x3, 0x0, 0x3ff, 0x6, 0xff, 0x85c, 0x100000001, 0x9, 0x20000000000, 0x1, 0x6], "f167256b4b90c6ca1a52dfcde084aef550f6ad8ed18caa4cf4b2e5c04b2ad7b9b34c7c7a3e9d117a7526a2c99af5108387b9161b2e5b1961a6adde788a98e241b6ae690547f0e0782cc4440e7f15fd8b8644179711a54a6254befc070dcfcc5e1d3aa61a829494222aca115d1213d1ab835cb429cc3b7491dde055783dd0f3d556d9804e59f8a493471f0f9633763322e113529d8e402401fa9115e92fe44b2a3dd3f240c42e5442c8daa6c8f3bb5b774e98b2ff1f5116351013598b8c4194e0"}, 0x8, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x0, 0x10, 0x6, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x5, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/notes\x00', 0x101700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/4096, 0x1000) keyctl$auto(0xa, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffb) 5.543865748s ago: executing program 0 (id=2024): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x24000000) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000340)={0x734, 0x0, 0x46d5d89b86dd8d14, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24a, 0x25, 0x0, 0x1, [@generic="7b7a5c72be361025fdf2305a732c2830c09841c2f27c4200df8e3ef5629ed8848a7c69bd1b4cb5cd813df0e131decc90048353068590487bb2ed2ec7b4acb5083f6011af693c8f7918c17e033e9547b9314160983d4161cd1703a6ee962cc04c008d6ff4509abf4994e6c01f72c06f5ad32f53eb3194ebf5c826fb5784ceeda55e6273d38a052413181c40f785794e3eab", @generic="ed64615191c3f6ae25824f323a25315e327a2ee15aa0d3231ba0c5b84e7f8537c74685450a8328c5114386607d5eb69a868f8e4f39881db6d46acf0ca069ea4e2e867764a94877bbfbead38bef7d78574399a118c7bb908dcf48a072a78a7f53fb901378df8f9a57094e7989059d2113c120b665bc0272882689ede7d93482b0dcf2730714ccd982e29eaffea151b2e01ad5dc23c5823428d8b5d6d76bd609ddfc76e6c7d4068f608f4ae6183781ea29bbfd94e5a98e72a59352326f990c831982635aa01b562beccdb884903738f95c02a5061b458a96bc4e4b4ea7eb", @nested={0xc, 0x147, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}]}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="64ee2c79a42338096ba5188e5a90bcdec6f972912f581466e82593c479d67bce9f643d264208d163e99cbbf40c3b2ef467af941b3161a4cfd4c149698aa9ff642cb14446b6858a86b009b107ce03dec5f4b62ee9bbf14166f8e5cdf0cbb322213f8b61cdd457bb79f78bba74307c5aec0712ca7db00e4f56839f7e68606bcbe6dc74c2a303984ec07bcbb4d94a792bae17282aa38a177caa2264368061f02a82c0177466c3b8734feb3b303e26d0abe81cd6e7c76901e4ad"]}, @NL80211_ATTR_CSA_IES={0x4d1, 0xb9, 0x0, 0x1, [@nested={0x1c, 0x87, 0x0, 0x1, [@nested={0x4, 0x43}, @nested={0x4, 0x20}, @nested={0x4, 0x7c}, @nested={0x4, 0xce}, @nested={0x4, 0xda}, @nested={0x4, 0x8b}]}, @generic="cea5cd70bb0addc3a6", @typed={0x14, 0x100, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x11}}, @nested={0x62, 0x112, 0x0, 0x1, [@generic="c2f530ad30c55c6f45f9314f4710a7a71a947f9f509a9d9e36cdecfa9028235f69c806b8c5abe267e381fde43966c8da4a8a81a98fe67d1d943751f92da5675072115bb738d7ae264003bfcc937424c99fe87f1bf0bf6eeeacefd7d0742e"]}, @typed={0xfa, 0xed, 0x0, 0x0, @binary="9f5d06c5184a8a4a8a6b7eecced433c11ed528eb50525b6d12d05191dd9efdafd4c012fb51c62c0ef40b5b108fd8f1ea85330ddbf3fd0e8f88ea4d3a09b540a5dd1d41733846019d961a5731b9e415d8769337d186a19f7abc2281b26729e13626a45f7e559d038d010f236bc470c1743ddbab32d85a09a39ee892b57a42966ab3209892e38e937be2bfa1d592a3337c32b33343083ffa008d4ff0b108d77955ee3cfd26739ae743185dd448effbf2fb50b186a8999171eb2d908109029383e63397a895722843d570b63904a7817e6db9c93c7ab50d0f1ca0ad6c5d60d506c600a97711e60fd32c8d8871564ab5a28eec6580949282"}, @typed={0x6, 0x2, 0x0, 0x0, @str='{\x00'}, @typed={0xc, 0xdb, 0x0, 0x0, @u64=0x100000000}, @typed={0xcd, 0x58, 0x0, 0x0, @binary="774356ba69967c4a2154decc2fb1a4a422fd38638a31485453d0c9c1b93b9403c0b80114c4e66a2f9efd82756513e317a94ae60bb89e5e3b30df941506c3ac70f887049760695c184367fc3aa5fe052e99db4d8e9f324bbeaca856867ecec63e9bfa35f714344da584c4291285fe44d89c64cb79c4dbeb22d47aa0ddea8d503fa565507f642085dd62edfbde09b6b0d37defe08a174e83e31cf395bd77ff2697cad4e0613c10e6e5399f8ca98ee82be8843e3a4c3d604454f58f38906dda4c0dc5de9675d7cb41a49d"}, @nested={0x24e, 0x9a, 0x0, 0x1, [@nested={0x4, 0xda}, @generic="eea9d60285f79778d3fcdc561b1b0a72093bbb310c75ec1ac11bc546e660e69ad444312d3346e1ecd422a28a2eacc2214842d4f85253197b5ce4342f54d15b4771b644fe8fab3c7d7253aaf95f1507d9dc30f57a2868006133e717d8c8200ef708f0baa842afe5a7e462aa20cd471692b23088273773584b35d6f7181e0e5b6a93305a4d3492a4c1888307e47818776a4d7a4f431ade81443ee25ab113f8034b4b7d8a9d919c218f51b73176cb0aaffdbabd896a63fd1f49cd267247bbca8cbcf0a88d87", @generic="72f141bc027df579f31f9f79611c5e2e7e218b5f64b6f26e9046a03f5482df284276b1c562b31a", @generic="6528e7b6082414b6616c3e793fa68768b9bc769cf17b571358dbfef2a192563717ecab733b319c20547b4a0fe4578527174ad7d1bae14a7a97228b468fd8f780e4175dbbbbb837378ac431", @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x2c, 0x97, 0x0, 0x0, @str='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00'}, @nested={0x4, 0xff}, @nested={0x4, 0x14f}, @generic="af34add9ed7687b1ac0efd52dc0503a209efd9f9f55182998cb3e7832b17f64be0568b43bfe68cdc5dd57d184dc590449428568ca4971eb0a1aa86ad6a32a6a3e53cc2afb97a626b195ad300f1669ea31d4ffbbf4d954a6abf08ae5535dd4059f53930dcb637750aad41c5233e8a2fe32cc3f928c33030b64a7c6975b9f460c9b592b6572ab3337fb42028c816e39511dbc58ade5b1f0357f50b4cd5b00b59687a7dab22b0de53dd", @typed={0x2c, 0xd4, 0x0, 0x0, @str='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00'}]}]}]}, 0x734}, 0x1, 0x0, 0x0, 0x40}, 0x800) socketpair$auto(0x1, 0x1, 0x2a340, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0x8cfb7, 0x9, 0x6]}, 0x0) wait4$auto(r3, 0x0, 0x80000001, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x10b142, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) r7 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x12, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8, 0x5, 0x1000, 0x42, 0x8001, 0x1, 0x60, 0x40000102}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) fcntl$auto(r7, 0x400, 0x1) close_range$auto(0x2, 0x8, 0x0) 4.841153973s ago: executing program 4 (id=2026): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0x9, 0x8, 0x5, 0x5, 0x1ff, 0xf, 0x1000, 0xb, 0x2, 0xced80000000001, 0x9, 0x3, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x4b8681, 0x0) readv$auto(r0, &(0x7f0000000240)={&(0x7f0000000200)="2f36287139474c0a12000000000000", 0xffff}, 0x8) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$auto(0x0, 0x1400008, 0x200, 0x9b72, 0x2, 0x8000) setresuid$auto(0xee01, 0x1000, 0x607) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x20000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x108000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) 4.796941212s ago: executing program 3 (id=2027): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/oom_adj\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000540)=ANY=[@ANYBLOB="00000100b400e39a7c69b1e45ffed54b384c8e98d9792e8a8ed6415d0c032c2b93575117b9f9d2fe3e6511841c3e41ce28d3e1d4bfe86125a3009f0fdbc0625d272c588525e34d37d09634047542bf594116fef98cb85aedd59418de36bb4e4942d5731e9a62ba7597006b93c3bb6f573dde16d49b9ebb1705b935731bde486e6de0e98a3bb5613bb72daead1da2cb953dcf5b71c75eaada6c879e", @ANYRESOCT=r0, @ANYBLOB="010026bd7000fedbdf25020000001800048008001400", @ANYRES32=0x0, @ANYBLOB="0a00a8007b2a177b2f000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40040801}, 0x4010) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0xc, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0xffff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0xffff, 0x7, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xfffffffffffffffe, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x44c781, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000881) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r2, 0x0, 0xa2b0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) 4.407870685s ago: executing program 4 (id=2028): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x20000], {0x6, 0x8, 0x1, 0x8000001f, 0x100, 0x4, 0x101, 0x7, 0x8000000000000003}, {0x100, 0x1, 0x2, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) 4.23176278s ago: executing program 5 (id=2029): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.prio.class\x00', 0x183042, 0x0) sendfile$auto(r1, r1, 0x0, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) sendmmsg$auto(0x3, 0x0, 0x7, 0x3f00) write$auto(0x3, 0x0, 0x5c8) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec17\x00', 0x2200, 0x0) ioctl$auto_CEC_TRANSMIT(r3, 0xc0386105, &(0x7f00000000c0)={0x0, 0xb751, 0x10, 0x34, 0x3000, 0x5, "94b1ca1dd24e275d5c54284b005048f9", 0x1c, 0x1, 0x3, 0x9, 0xff, 0x1, 0x8}) r4 = io_uring_setup$auto(0x89, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYBLOB="3a80"], 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon17\x00', 0x40002, 0x0) ioctl$auto_MON_IOCH_MFLUSH(r6, 0x9208, 0x0) 3.510613632s ago: executing program 4 (id=2030): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) r1 = socket(0x11, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r2) sendmsg$auto_HWSIM_CMD_REGISTER(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x5d, r0}) sendmmsg$auto(r4, &(0x7f0000000300)={{&(0x7f0000000080)="1dea14ddc87ff60c8babba324fce8ed32e6c3c8428c7e6571cbff01cb7c1d3cc7f6ab7f40a64159ebb91152173193f7f2bcca90ea8023791dbe09922036c35e8827ba48512f5ca323e31028f837d035ed9a7c6864dd5cf76f14ecec2ef4d164566131af9b73cdc7234c6a7f4f271213da9930eb152", 0xa65, &(0x7f0000000200)={&(0x7f0000000140)="e7feb2e89ac446cb18ab766789b3c997c286f40ecef98491da3013894bcfb5a607c061a95f018f29fddb60ee8ea72b20b951466a805f6ecf2e64a3e2649d3eb8cafe29d81e0cfa38144bad", 0x6}, 0x3, &(0x7f0000000240)="d7dcf7c8ab1a0c6d58d5cf", 0x80000000, 0x3}, 0x4}, 0xffffffff, 0x9509) 3.275906506s ago: executing program 5 (id=2031): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/fail-nth\x00', 0x80000, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x8000001f, 0x100, 0x4, 0x101, 0x7, 0x8000000000000003}, {0x100, 0x1, 0x2, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) 2.997106111s ago: executing program 5 (id=2032): mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) 2.931297915s ago: executing program 0 (id=2033): clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x3b9ac9ff}) adjtimex$auto(&(0x7f0000000280)={0xf, 0x0, 0xfffffffffffffffc, 0x100000001, 0x400000007f, 0x0, 0x4, 0x0, 0xe, 0x0, 0xfffe, {0x200000000000007}, 0x7fffffffffffffff, 0x80000001, 0x5, 0x1, 0x0, 0x6, 0x400000000, 0x7, 0x40000000000d, 0x2, 0x1015c8}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) 2.683935812s ago: executing program 0 (id=2034): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x110c230000, 0x1, 0x9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r0, 0x8, 0xba11, &(0x7f0000000040)='\x00', 0xffffffa9) (async) openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000180), 0x82002, 0x0) (async) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) io_uring_setup$auto(0x406, 0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) (async) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) (async) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) (async) socket(0x1d, 0x1, 0x7fff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x4e4800, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 2.681618022s ago: executing program 5 (id=2035): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x5cd6, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) write$auto(0x3, 0x0, 0xffd8) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto_SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000180)={0x106, 0x1, 0x7, 0x7, "b2b91bf733ae4120ae1fc7fa3a24d88321241c2ba794cc6b5a8ad10e1941314fbccfcf17d4f0071ec1b2790bb9732955347e807818b784674c4389b60bf734e3", "0e3adcac79a07d381a584a21a9f81171fc5e0bd7dbc7241c5cfad31611b4daea178d4de24eebf4c757f2c63778aa34c455fe16fd5cee77d3e3dd1bf2e03d34ffd62853c6acf86098663da740e3350bea", "701f0fdd7c2e52d2c2d670e93ec083d7cd90d088988aace308ecaee976f54716", 0x7fffffff, 0x7, 0x3, 0x7, '\x00', "ccb0aa76568016ab86f7c0ea886a93b7f082e033ef70df212a356f661a52e18745b09f75b0de75f9437401f2cb147f98858f179233b8a3ec71428f5fa1080d40"}) unshare$auto(0x40000080) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) listen$auto(0x3, 0x81) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) mmap$auto(0x5cd6, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) (async) ioctl$auto_SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000180)={0x106, 0x1, 0x7, 0x7, "b2b91bf733ae4120ae1fc7fa3a24d88321241c2ba794cc6b5a8ad10e1941314fbccfcf17d4f0071ec1b2790bb9732955347e807818b784674c4389b60bf734e3", "0e3adcac79a07d381a584a21a9f81171fc5e0bd7dbc7241c5cfad31611b4daea178d4de24eebf4c757f2c63778aa34c455fe16fd5cee77d3e3dd1bf2e03d34ffd62853c6acf86098663da740e3350bea", "701f0fdd7c2e52d2c2d670e93ec083d7cd90d088988aace308ecaee976f54716", 0x7fffffff, 0x7, 0x3, 0x7, '\x00', "ccb0aa76568016ab86f7c0ea886a93b7f082e033ef70df212a356f661a52e18745b09f75b0de75f9437401f2cb147f98858f179233b8a3ec71428f5fa1080d40"}) (async) 1.483844932s ago: executing program 5 (id=2036): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x20400, 0x0) ioctl$auto_SNDCTL_SEQ_RESET(r1, 0x5100, &(0x7f0000000440)="e5d5022ce8cd43347014f66a9488d1140b608076ada7ed238bfd03c7827211d0b312ae18ba264caeb770d7116f379aedfb2c881e37d94ec779faed9640a223d964796bf03ccaddce84a2e4957948658a9bae299cdc4d63061d3021c5b3b68be5e96da47359e98bafe9baabb6e51f09fe2c6e09e362de0c3326dcc97384d47ab8753812987a3552d1685c9f7a85b590ddf876db4305d8abbedccbf0705552d0a71817d69155e7d3318cd000333952c35b385ebadaebe56333f4b60fdb663db0866bfb5dd899e359d8919e2ca4b610d6a68ecac3c77e91dd") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/bpq2/statistics/rx_missed_errors\x00', 0x48500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4090, 0xffa) socket(0x2, 0x1, 0x106) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0xffffffffffffffff, 0x10000) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES16=r6, @ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24048004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) 718.187615ms ago: executing program 0 (id=2037): close_range$auto(0x2, 0x8, 0x0) kexec_load$auto(0x2, 0x4, &(0x7f0000000040)={@buf=&(0x7f0000000180)="51d7b67e9f0cb451", 0x3, 0x8000000000000001, 0x8000000000000001}, 0x1) r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) read$auto_media_devnode_fops_mc_devnode(r0, 0x0, 0x0) r1 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2}, 0x6) r2 = socket(0x11, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a903, 0x0) socket(0x23, 0x2, 0x0) r4 = open_tree_attr$auto(r1, &(0x7f00000002c0)='./file0\x00', 0x1000, &(0x7f0000000300)={0x4, 0x4, 0x4, @raw=0x3}, 0x10a) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000280), r4) r5 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_VDPA_CMD_DEV_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01003667eaf976bd030000000000000003000000080300000000002100fe0c00010400000800"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x24040041) sendmsg$auto_VDPA_CMD_DEV_DEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRES16=r5, @ANYBLOB="000828bd7000fedbdf25040000000d00eaff2e6465762f6b766d000000001ec37cba776cb4aad4790e45861c0756ff4386c3216cd5c3b46e339ee57f5576a1683da930dec5ac1b4bb03c5af77887b1f6fb8e352b9bb0a564fbc8528c48b2d7af47f86aef9f1a826d1801a3bb3c658c6abb8cf875fa6089de66aaf96f8bd2d093c4890ab9f2a03b931985a2a260f5147518a6996f3ad49d46a0b6cad8cece2438cb4cb99faaa0fcc4f5b6bdb3f8dc9cec4695b3c23ff244af0ea86c8ff5695797a14a0d6f163c22d180b6595b40675e"], 0x24}, 0x1, 0x0, 0x0, 0x636edc0ff3edc231}, 0x4081) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x3, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2) close_range$auto(r6, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 424.455808ms ago: executing program 5 (id=2038): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x2cb8, 0x401, 0x300000000000) r0 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) fallocate$auto(r0, 0x0, 0x7, 0xb) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, &(0x7f0000000000)=""/153, 0x99) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x2440, 0x0) read$auto(r1, 0x0, 0x20) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0x0, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x20000000000003, 0x8000400, 0x7, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r4 = signalfd$auto(r3, 0x0, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r6, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x4000000) sendmsg$auto_ILA_CMD_ADD(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x54, r2, 0x10, 0x70bd28, 0x25dfdc03, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1c}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x9}, @ILA_ATTR_IFINDEX={0x8, 0x4, r7}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x9}, @ILA_ATTR_IFINDEX={0x8, 0x4, r7}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x38) socket(0xa, 0x1, 0x84) unshare$auto(0x40000080) socket(0x22, 0x6, 0x8) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x2}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x200000}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xab}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x4c}}, 0x20008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x5, 0x40002020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0xb) r8 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r8, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r8, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff014}}) 201.579786ms ago: executing program 0 (id=2039): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r1) (async) rt_sigqueueinfo$auto(0x0, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={0x0, 0x0, @sival_ptr=0x0}}}) (async) mmap$auto(0x800, 0x4020009, 0xdf, 0xeb9, 0x401, 0x8000) (async) recvmsg$auto(0x4, 0x0, 0x33c) (async) r2 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0xfffffff7, "8f42b1"}, 0x7d) fcntl$auto_F_GETLEASE(r2, 0x401, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) (async) r3 = socket(0x2, 0x3, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) open(0x0, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40008000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) r4 = epoll_create$auto(0x4) (async) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vbi16\x00', 0x100240, 0x0) epoll_ctl$auto(r4, 0x1, r5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0p\x00', 0x84240, 0x0) (async) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x8) 200.242053ms ago: executing program 3 (id=2040): socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) recvmmsg$auto(r0, &(0x7f0000000380)={{0x0, 0x2, 0x0, 0x7fff, &(0x7f00000002c0)="0d3b75fb378838e090604b871c9618361b4d", 0xbe, 0x1}, 0x9d30}, 0x7, 0xb, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 0s ago: executing program 4 (id=2041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd09000000000000abe93189c6306143cd94e51300000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) r5 = getpgrp(0xffffffffffffffff) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x3, 0x3, r5, 0xffffffff, 0xc) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130026bd7000fcdbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="0c0002000000000000df1900"], 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x3, 0x2, 0x3) fsopen$auto(0x0, 0x1) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/amidi2\x00', 0x8c2, 0x0) write$auto(r6, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c@\v&\xa3\x14y\xcb\xe6\xc5\r\xff\x82|lT2^\xc9\x9c\xa9\x99\bo]\xd5\f=\xe8\x8d\x05\xfa\x03\xb0\trz\x01\xbf\xcc\x1a\x0e', 0x82) r7 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r7, @ANYRES16=r9, @ANYRESDEC=r2], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r7, 0x8, 0x0) brk$auto(0x40008000) syslog$auto(0x10000, &(0x7f0000000180)='/dev/snapshot\x00', 0xc0) r10 = fanotify_init$auto(0x5, 0x2000000000002) r11 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r10, 0x9, 0x5, r11, 0x0) ioctl$auto_KVM_CREATE_VM(r11, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) kernel console output (not intermixed with test programs): 7f [ 628.073068][T13630] RIP: 0033:0x7f64b479aeb9 [ 628.073092][T13630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.073124][T13630] RSP: 002b:00007f64b29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 628.073155][T13630] RAX: ffffffffffffffda RBX: 00007f64b4a15fa0 RCX: 00007f64b479aeb9 [ 628.073176][T13630] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 628.073194][T13630] RBP: 00007f64b4808c1f R08: 0000000000000000 R09: 0000000000000000 [ 628.073214][T13630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.073232][T13630] R13: 00007f64b4a16038 R14: 00007f64b4a15fa0 R15: 00007ffe34b22e68 [ 628.073275][T13630] [ 633.341178][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.347958][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.538668][T13713] nvme_fabrics: unknown parameter or missing value '10' in ctrl creation request [ 638.236644][T13758] zram: Removed device: zram0 [ 639.095918][T13771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1430'. [ 639.364136][T13771] veth1_macvtap: left promiscuous mode [ 639.789856][T13767] program syz.4.1429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 639.882000][ T30] audit: type=1807 audit(4294967338.587:21): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 639.961967][ T30] audit: type=1802 audit(4294967338.637:22): pid=13781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1429" res=0 errno=0 [ 640.049767][T13754] ima: policy update failed [ 640.054545][ T30] audit: type=1802 audit(4294967338.768:23): pid=13754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1429" res=0 errno=0 [ 640.089531][T13776] random: crng reseeded on system resumption [ 640.973914][T13793] netlink: 'syz.5.1432': attribute type 8 has an invalid length. [ 641.679153][T13805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1434'. [ 641.971137][T13805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.981032][T13805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.150664][T13805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.158075][T13805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.262088][T13835] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7fe00 [ 644.299501][T13835] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 644.327406][T13835] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 644.336148][T13835] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 644.418678][T13835] page dumped because: unmovable page [ 644.468161][T13835] page_owner tracks the page as allocated [ 644.473974][T13835] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 8848, tgid 8848 (kworker/u10:35), ts 495982289540, free_ts 495394680697 [ 644.647211][T13835] post_alloc_hook+0x1e1/0x250 [ 644.710073][T13835] get_page_from_freelist+0xe3d/0x2e10 [ 644.785919][T13835] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 644.792331][T13835] alloc_pages_mpol+0x1fb/0x550 [ 644.843719][T13835] alloc_pages_noprof+0x131/0x390 [ 644.885768][T13835] brd_submit_bio+0x116a/0x20d0 [ 644.890744][T13835] __submit_bio+0x32f/0x6c0 [ 644.924229][T13835] submit_bio_noacct_nocheck+0x6fc/0xbb0 [ 644.950431][T13835] submit_bio_noacct+0xb5c/0x1e80 [ 645.023629][T13835] __block_write_full_folio+0x77f/0xee0 [ 645.029398][T13835] block_write_full_folio+0x3b5/0x4e0 [ 645.064907][T13835] blkdev_writepages+0xc7/0x150 [ 645.069894][T13835] do_writepages+0x278/0x600 [ 645.137908][T13835] __writeback_single_inode+0x164/0x13c0 [ 645.172913][T13835] writeback_sb_inodes+0x72e/0x1b90 [ 645.178255][T13835] __writeback_inodes_wb+0xf8/0x2d0 [ 645.218120][T13835] page last free pid 15 tgid 15 stack trace: [ 645.242464][T13835] __free_frozen_pages+0x822/0x1130 [ 645.301633][T13835] tlb_remove_table_rcu+0x2b2/0x390 [ 645.311817][T13835] rcu_core+0x7c0/0x15c0 [ 645.316229][T13835] handle_softirqs+0x1ea/0x910 [ 645.321021][T13835] run_ksoftirqd+0x38/0x60 [ 645.415839][T13835] smpboot_thread_fn+0x3d3/0xaa0 [ 645.420904][T13835] kthread+0x3b3/0x730 [ 645.491399][T13835] ret_from_fork+0x754/0xaf0 [ 645.496149][T13835] ret_from_fork_asm+0x1a/0x30 [ 649.350517][T13908] syz.0.1450(13908): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 652.022345][T13940] FAULT_INJECTION: forcing a failure. [ 652.022345][T13940] name failslab, interval 1, probability 0, space 0, times 0 [ 652.073587][T13940] CPU: 1 UID: 0 PID: 13940 Comm: syz.0.1458 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 652.073654][T13940] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 652.073670][T13940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 652.073690][T13940] Call Trace: [ 652.073701][T13940] [ 652.073713][T13940] dump_stack_lvl+0x100/0x190 [ 652.073768][T13940] should_fail_ex.cold+0x5/0xa [ 652.073826][T13940] should_failslab+0xc2/0x120 [ 652.073875][T13940] kmem_cache_alloc_noprof+0x83/0x780 [ 652.073919][T13940] ? security_file_alloc+0x34/0x2c0 [ 652.073981][T13940] ? security_file_alloc+0x34/0x2c0 [ 652.074034][T13940] security_file_alloc+0x34/0x2c0 [ 652.074087][T13940] init_file+0x93/0x4c0 [ 652.074134][T13940] alloc_empty_file+0x73/0x1c0 [ 652.074186][T13940] dentry_open+0x46/0xd0 [ 652.074236][T13940] pidfs_alloc_file+0x18f/0x290 [ 652.074273][T13940] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 652.074322][T13940] pidfd_prepare+0x129/0x200 [ 652.074372][T13940] __x64_sys_pidfd_open+0x105/0x1a0 [ 652.074424][T13940] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 652.074499][T13940] ? rcu_is_watching+0x12/0xc0 [ 652.074538][T13940] do_syscall_64+0xc9/0xf80 [ 652.074588][T13940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.074623][T13940] RIP: 0033:0x7f64b479aeb9 [ 652.074651][T13940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.074687][T13940] RSP: 002b:00007f64b29f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 652.074719][T13940] RAX: ffffffffffffffda RBX: 00007f64b4a15fa0 RCX: 00007f64b479aeb9 [ 652.074742][T13940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 652.074768][T13940] RBP: 00007f64b4808c1f R08: 0000000000000000 R09: 0000000000000000 [ 652.074789][T13940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.074809][T13940] R13: 00007f64b4a16038 R14: 00007f64b4a15fa0 R15: 00007ffe34b22e68 [ 652.074853][T13940] [ 653.902050][T13975] Console: switching to colour VGA+ 80x25 [ 655.514244][ T5828] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 655.604162][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor Tainted: G U I L syzkaller #0 PREEMPT(full) [ 655.604233][ T5828] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 655.604249][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 655.604269][ T5828] Call Trace: [ 655.604280][ T5828] [ 655.604292][ T5828] dump_stack_lvl+0x100/0x190 [ 655.604337][ T5828] dump_header+0xfb/0x606 [ 655.604371][ T5828] oom_kill_process.cold+0xd/0x321 [ 655.604407][ T5828] out_of_memory+0x340/0x14f0 [ 655.604458][ T5828] ? __pfx_out_of_memory+0x10/0x10 [ 655.604513][ T5828] mem_cgroup_out_of_memory+0xc6/0x130 [ 655.604548][ T5828] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 655.604579][ T5828] ? find_held_lock+0x2b/0x80 [ 655.604619][ T5828] ? do_raw_spin_unlock+0x145/0x1e0 [ 655.604668][ T5828] ? _raw_spin_unlock+0x28/0x50 [ 655.604705][ T5828] try_charge_memcg+0x652/0xc90 [ 655.604756][ T5828] ? __pfx_try_charge_memcg+0x10/0x10 [ 655.604809][ T5828] ? find_held_lock+0x2b/0x80 [ 655.604839][ T5828] ? rcu_read_unlock+0x17/0x60 [ 655.604887][ T5828] ? rcu_read_unlock+0x17/0x60 [ 655.604937][ T5828] charge_memcg+0xa6/0x280 [ 655.604980][ T5828] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 655.605035][ T5828] __read_swap_cache_async+0x449/0x610 [ 655.605078][ T5828] ? __pfx___read_swap_cache_async+0x10/0x10 [ 655.605112][ T5828] ? __lock_acquire+0x4a5/0x2630 [ 655.605156][ T5828] ? __xa_erase+0xec/0x150 [ 655.605202][ T5828] ? __pfx___xa_erase+0x10/0x10 [ 655.605249][ T5828] swap_cluster_readahead+0x414/0x770 [ 655.605297][ T5828] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 655.605333][ T5828] ? rcu_is_watching+0x12/0xc0 [ 655.605389][ T5828] ? get_vma_policy+0x23f/0x3b0 [ 655.605442][ T5828] swapin_readahead+0x14b/0x12e0 [ 655.605493][ T5828] ? __pfx_swapin_readahead+0x10/0x10 [ 655.605531][ T5828] ? find_held_lock+0x2b/0x80 [ 655.605564][ T5828] ? swap_cache_get_folio+0x272/0x920 [ 655.605603][ T5828] ? swap_cache_get_folio+0x272/0x920 [ 655.605635][ T5828] ? swap_cache_get_folio+0x1f/0x920 [ 655.605666][ T5828] ? swap_cache_get_folio+0x2a2/0x920 [ 655.605703][ T5828] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 655.605736][ T5828] ? __pfx_get_swap_device+0x10/0x10 [ 655.605790][ T5828] ? do_swap_page+0x9ba/0x6810 [ 655.605821][ T5828] do_swap_page+0x9ba/0x6810 [ 655.605861][ T5828] ? __lock_acquire+0x4a5/0x2630 [ 655.605914][ T5828] ? __pfx_do_swap_page+0x10/0x10 [ 655.605952][ T5828] ? __pfx_default_wake_function+0x10/0x10 [ 655.605991][ T5828] ? rcu_is_watching+0x12/0xc0 [ 655.606021][ T5828] ? __free_object+0x2a8/0x400 [ 655.606063][ T5828] ? rcu_is_watching+0x12/0xc0 [ 655.606093][ T5828] ? ___pte_offset_map+0x179/0x310 [ 655.606145][ T5828] __handle_mm_fault+0x18b9/0x2b50 [ 655.606195][ T5828] ? reacquire_held_locks+0xce/0x1e0 [ 655.606240][ T5828] ? __pfx___handle_mm_fault+0x10/0x10 [ 655.606284][ T5828] ? lock_vma_under_rcu+0x17c/0x5a0 [ 655.606331][ T5828] ? get_timespec64+0x136/0x1b0 [ 655.606380][ T5828] handle_mm_fault+0x36d/0xa20 [ 655.606424][ T5828] do_user_addr_fault+0x5a3/0x12f0 [ 655.606473][ T5828] exc_page_fault+0x6f/0xd0 [ 655.606511][ T5828] asm_exc_page_fault+0x26/0x30 [ 655.606542][ T5828] RIP: 0033:0x7f3e0115b78e [ 655.606568][ T5828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 655.606598][ T5828] RSP: 002b:00007fff19ec3bc8 EFLAGS: 00010246 [ 655.606624][ T5828] RAX: 0000000000000000 RBX: 000055555d98a500 RCX: 00007f3e0115b78e [ 655.606644][ T5828] RDX: 00007fff19ec3c20 RSI: 0000000000000000 RDI: 0000000000000000 [ 655.606663][ T5828] RBP: 00007fff19ec3c8c R08: 0000000000000000 R09: 0000000000000000 [ 655.606681][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 655.606701][ T5828] R13: 00000000000927c0 R14: 00000000000a00c2 R15: 00007fff19ec3ce0 [ 655.606744][ T5828] [ 655.606756][ T5828] memory: usage 3072kB, limit 3072kB, failcnt 137935 [ 656.068271][ T5828] memory+swap: usage 101820kB, limit 9007199254740988kB, failcnt 0 [ 656.076559][ T5828] kmem: usage 2852kB, limit 9007199254740988kB, failcnt 0 [ 656.083847][ T5828] Memory cgroup stats for /syz3: [ 656.084056][ T5828] cache 0 [ 656.106469][ T5828] rss 0 [ 656.109407][ T5828] rss_huge 0 [ 656.112685][ T5828] shmem 0 [ 656.135333][ T5828] mapped_file 0 [ 656.165455][ T5828] dirty 0 [ 656.192056][ T5828] writeback 0 [ 656.196319][ T5828] workingset_refault_anon 23872 [ 656.201839][ T5828] workingset_refault_file 34794 [ 656.215279][ T5828] swap 101117952 [ 656.228346][ T5828] swapcached 225280 [ 656.232249][ T5828] pgpgin 387433 [ 656.254482][ T5828] pgpgout 389933 [ 656.284892][ T5828] pgfault 290770 [ 656.288540][ T5828] pgmajfault 8464 [ 656.292215][ T5828] inactive_anon 94208 [ 656.306065][ T5828] active_anon 0 [ 656.309652][ T5828] inactive_file 0 [ 656.313381][ T5828] active_file 0 [ 656.326471][ T5828] unevictable 0 [ 656.330016][ T5828] hierarchical_memory_limit 3145728 [ 656.384512][ T5828] hierarchical_memsw_limit 9223372036854771712 [ 656.390843][ T5828] total_cache 0 [ 656.424169][ T5828] total_rss 0 [ 656.427595][ T5828] total_rss_huge 0 [ 656.431352][ T5828] total_shmem 0 [ 656.434940][ T5828] total_mapped_file 0 [ 656.438967][ T5828] total_dirty 0 [ 656.465309][ T5828] total_writeback 0 [ 656.469203][ T5828] total_workingset_refault_anon 23872 [ 656.486868][ T5828] total_workingset_refault_file 34794 [ 656.492414][ T5828] total_swap 101117952 [ 656.507056][ T5828] total_swapcached 225280 [ 656.511573][ T5828] total_pgpgin 387433 [ 656.539934][ T5828] total_pgpgout 389933 [ 656.571357][ T5828] total_pgfault 290770 [ 656.594490][ T5828] total_pgmajfault 8464 [ 656.599065][ T5828] total_inactive_anon 94208 [ 656.633059][ T5828] total_active_anon 0 [ 656.637532][ T5828] total_inactive_file 0 [ 656.641743][ T5828] total_active_file 0 [ 656.665543][ T5828] total_unevictable 0 [ 656.669700][ T5828] anon_cost 23 [ 656.689186][ T5828] file_cost 0 [ 656.702657][ T5828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1223,pid=12611,uid=0 [ 656.734538][ T5828] Memory cgroup out of memory: Killed process 12611 (syz.3.1223) total-vm:135096kB, anon-rss:1204kB, file-rss:57628kB, shmem-rss:4kB, UID:0 pgtables:288kB oom_score_adj:1000 [ 658.980580][ T32] oom_reaper: reaped process 12611 (syz.3.1223), now anon-rss:0kB, file-rss:54872kB, shmem-rss:4kB [ 659.217481][T12611] syz.3.1223 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 659.388929][T12611] CPU: 0 UID: 0 PID: 12611 Comm: syz.3.1223 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 659.388987][T12611] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 659.389001][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 659.389019][T12611] Call Trace: [ 659.389030][T12611] [ 659.389042][T12611] dump_stack_lvl+0x100/0x190 [ 659.389086][T12611] dump_header+0xfb/0x606 [ 659.389120][T12611] oom_kill_process.cold+0xd/0x321 [ 659.389157][T12611] out_of_memory+0x340/0x14f0 [ 659.389206][T12611] ? __pfx_out_of_memory+0x10/0x10 [ 659.389270][T12611] mem_cgroup_out_of_memory+0xc6/0x130 [ 659.389305][T12611] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 659.389336][T12611] ? find_held_lock+0x2b/0x80 [ 659.389376][T12611] ? do_raw_spin_unlock+0x145/0x1e0 [ 659.389430][T12611] ? _raw_spin_unlock+0x28/0x50 [ 659.389467][T12611] try_charge_memcg+0x652/0xc90 [ 659.389521][T12611] ? __pfx_try_charge_memcg+0x10/0x10 [ 659.389576][T12611] ? find_held_lock+0x2b/0x80 [ 659.389607][T12611] ? rcu_read_unlock+0x17/0x60 [ 659.389653][T12611] ? rcu_read_unlock+0x17/0x60 [ 659.389705][T12611] charge_memcg+0xa6/0x280 [ 659.389750][T12611] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 659.389808][T12611] __read_swap_cache_async+0x449/0x610 [ 659.389851][T12611] ? __pfx___read_swap_cache_async+0x10/0x10 [ 659.389896][T12611] ? get_page_from_freelist+0xe3d/0x2e10 [ 659.389942][T12611] swap_cluster_readahead+0x414/0x770 [ 659.389990][T12611] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 659.390033][T12611] ? rcu_is_watching+0x12/0xc0 [ 659.390065][T12611] ? trace_mm_page_alloc+0x10e/0x160 [ 659.390121][T12611] ? __lock_acquire+0x4a5/0x2630 [ 659.390168][T12611] ? get_vma_policy+0x23f/0x3b0 [ 659.390220][T12611] swapin_readahead+0x14b/0x12e0 [ 659.390275][T12611] ? __pfx_swapin_readahead+0x10/0x10 [ 659.390311][T12611] ? find_held_lock+0x2b/0x80 [ 659.390345][T12611] ? swap_cache_get_folio+0x272/0x920 [ 659.390385][T12611] ? swap_cache_get_folio+0x272/0x920 [ 659.390417][T12611] ? swap_cache_get_folio+0x1f/0x920 [ 659.390448][T12611] ? swap_cache_get_folio+0x2a2/0x920 [ 659.390484][T12611] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 659.390517][T12611] ? __pfx_get_swap_device+0x10/0x10 [ 659.390570][T12611] ? do_swap_page+0x9ba/0x6810 [ 659.390600][T12611] do_swap_page+0x9ba/0x6810 [ 659.390637][T12611] ? __lock_acquire+0x4a5/0x2630 [ 659.390678][T12611] ? __folio_batch_add_and_move+0x464/0xc60 [ 659.390721][T12611] ? __pfx_lru_add+0x10/0x10 [ 659.390767][T12611] ? __pfx_do_swap_page+0x10/0x10 [ 659.390805][T12611] ? __pfx_default_wake_function+0x10/0x10 [ 659.390846][T12611] ? __lock_acquire+0x4a5/0x2630 [ 659.390889][T12611] ? rcu_is_watching+0x12/0xc0 [ 659.390916][T12611] ? ___pte_offset_map+0x179/0x310 [ 659.390959][T12611] __handle_mm_fault+0x18b9/0x2b50 [ 659.391000][T12611] ? __pfx___handle_mm_fault+0x10/0x10 [ 659.391033][T12611] ? __pte_offset_map_lock+0x174/0x320 [ 659.391073][T12611] ? find_held_lock+0x2b/0x80 [ 659.391110][T12611] ? follow_page_pte+0x5b4/0x1410 [ 659.391159][T12611] handle_mm_fault+0x36d/0xa20 [ 659.391195][T12611] __get_user_pages+0xf9c/0x34d0 [ 659.391258][T12611] ? __pfx___get_user_pages+0x10/0x10 [ 659.391309][T12611] get_dump_page+0x27e/0x3d0 [ 659.391354][T12611] ? __pfx_get_dump_page+0x10/0x10 [ 659.391397][T12611] ? dump_user_range+0x73b/0xb50 [ 659.391435][T12611] dump_user_range+0x18d/0xb50 [ 659.391472][T12611] ? __pfx_dump_user_range+0x10/0x10 [ 659.391513][T12611] ? __pfx_writenote+0x10/0x10 [ 659.391553][T12611] elf_core_dump+0x2d16/0x3c60 [ 659.391604][T12611] ? __pfx_elf_core_dump+0x10/0x10 [ 659.391635][T12611] ? kasan_save_stack+0x30/0x50 [ 659.391667][T12611] ? kasan_save_track+0x14/0x30 [ 659.391699][T12611] ? __kasan_kmalloc+0xaa/0xb0 [ 659.391730][T12611] ? __kvmalloc_node_noprof+0x34d/0xac0 [ 659.391761][T12611] ? vfs_coredump+0x1f01/0x5530 [ 659.391788][T12611] ? arch_do_signal_or_restart+0x91/0x770 [ 659.391826][T12611] ? irqentry_exit+0x1f8/0x670 [ 659.391857][T12611] ? asm_exc_page_fault+0x26/0x30 [ 659.391891][T12611] ? 0xffffffffff600000 [ 659.391974][T12611] ? vfs_coredump+0x276c/0x5530 [ 659.392003][T12611] vfs_coredump+0x276c/0x5530 [ 659.392045][T12611] ? __pfx_vfs_coredump+0x10/0x10 [ 659.392073][T12611] ? __lock_acquire+0x4a5/0x2630 [ 659.392117][T12611] ? __lock_acquire+0x4a5/0x2630 [ 659.392157][T12611] ? lock_acquire+0x17c/0x330 [ 659.392199][T12611] ? lock_acquire+0x17c/0x330 [ 659.392246][T12611] ? bpf_ksym_find+0x124/0x1c0 [ 659.392282][T12611] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 659.392325][T12611] ? arch_stack_walk+0xa6/0xf0 [ 659.392370][T12611] ? stack_trace_save+0x8e/0xc0 [ 659.392400][T12611] ? __pfx_stack_trace_save+0x10/0x10 [ 659.392432][T12611] ? stack_depot_save_flags+0x27/0x9c0 [ 659.392476][T12611] ? __lock_acquire+0x4a5/0x2630 [ 659.392569][T12611] ? proc_coredump_connector+0x2d3/0x4f0 [ 659.392616][T12611] ? __pfx_proc_coredump_connector+0x10/0x10 [ 659.392670][T12611] ? rcu_is_watching+0x12/0xc0 [ 659.392701][T12611] get_signal+0x1f2a/0x21e0 [ 659.392748][T12611] ? __pfx_get_signal+0x10/0x10 [ 659.392780][T12611] ? bad_area_access_error+0xab/0x1d0 [ 659.392809][T12611] ? fixup_vdso_exception+0x2d1/0x370 [ 659.392861][T12611] arch_do_signal_or_restart+0x91/0x770 [ 659.392900][T12611] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 659.392949][T12611] ? do_user_addr_fault+0x8d6/0x12f0 [ 659.392988][T12611] irqentry_exit+0x1f8/0x670 [ 659.393023][T12611] asm_exc_page_fault+0x26/0x30 [ 659.393049][T12611] RIP: 0033:0x0 [ 659.393066][T12611] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 659.393079][T12611] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 659.393100][T12611] RAX: 0000000000000000 RBX: 00007f3e01415fa0 RCX: 00007f3e0119aeb9 [ 659.393117][T12611] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 659.393133][T12611] RBP: 00007f3e01208c1f R08: 0000000000000002 R09: 0000000000000000 [ 659.393150][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.393166][T12611] R13: 00007f3e01416038 R14: 00007f3e01415fa0 R15: 00007fff19ec38e8 [ 659.393201][T12611] [ 660.087051][T12611] memory: usage 3072kB, limit 3072kB, failcnt 138443 [ 660.093782][T12611] memory+swap: usage 101648kB, limit 9007199254740988kB, failcnt 0 [ 660.102080][T12611] kmem: usage 2856kB, limit 9007199254740988kB, failcnt 0 [ 660.109329][T12611] Memory cgroup stats for /syz3: [ 660.112129][T12611] cache 0 [ 660.120113][T12611] rss 4096 [ 660.123144][T12611] rss_huge 0 [ 660.126402][T12611] shmem 0 [ 660.129350][T12611] mapped_file 0 [ 660.132892][T12611] dirty 0 [ 660.135927][T12611] writeback 0 [ 660.139256][T12611] workingset_refault_anon 23873 [ 660.144122][T12611] workingset_refault_file 34794 [ 660.149182][T12611] swap 100937728 [ 660.152750][T12611] swapcached 221184 [ 660.157164][T12611] pgpgin 387434 [ 660.160649][T12611] pgpgout 389934 [ 660.164205][T12611] pgfault 290772 [ 660.167832][T12611] pgmajfault 8465 [ 660.171476][T12611] inactive_anon 28672 [ 660.175526][T12611] active_anon 0 [ 660.178996][T12611] inactive_file 0 [ 660.182670][T12611] active_file 0 [ 660.186203][T12611] unevictable 0 [ 660.189675][T12611] hierarchical_memory_limit 3145728 [ 660.194946][T12611] hierarchical_memsw_limit 9223372036854771712 [ 660.201124][T12611] total_cache 0 [ 660.204685][T12611] total_rss 4096 [ 660.208246][T12611] total_rss_huge 0 [ 660.213941][T12611] total_shmem 0 [ 660.217515][T12611] total_mapped_file 0 [ 660.221509][T12611] total_dirty 0 [ 660.225040][T12611] total_writeback 0 [ 660.228855][T12611] total_workingset_refault_anon 23873 [ 660.234939][T12611] total_workingset_refault_file 34794 [ 660.240337][T12611] total_swap 100937728 [ 660.244485][T12611] total_swapcached 221184 [ 660.248830][T12611] total_pgpgin 387434 [ 660.252853][T12611] total_pgpgout 389934 [ 660.257024][T12611] total_pgfault 290772 [ 660.261105][T12611] total_pgmajfault 8465 [ 660.265346][T12611] total_inactive_anon 28672 [ 660.269949][T12611] total_active_anon 0 [ 660.273953][T12611] total_inactive_file 0 [ 660.278270][T12611] total_active_file 0 [ 660.282261][T12611] total_unevictable 0 [ 660.286334][T12611] anon_cost 21 [ 660.289722][T12611] file_cost 0 [ 660.293017][T12611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1459,pid=13950,uid=0 [ 660.308391][T12611] Memory cgroup out of memory: Killed process 13950 (syz.3.1459) total-vm:135360kB, anon-rss:1412kB, file-rss:22448kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 660.919050][T12611] Process accounting resumed [ 661.273978][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 661.344566][T14043] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1473'. [ 662.405724][ T32] oom_reaper: reaped process 13950 (syz.3.1459), now anon-rss:104kB, file-rss:21268kB, shmem-rss:0kB [ 665.317370][T14084] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1481'. [ 665.459803][ C0] sd 0:0:1:0: [sda] tag#7528 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 665.470367][ C0] sd 0:0:1:0: [sda] tag#7528 CDB: Read(6) 08 00 00 00 09 00 00 00 f2 ff ff ff [ 668.622905][T14135] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1487'. [ 669.895071][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 671.074995][T14165] kvm: kvm [14164]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 672.335312][T14184] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 672.363996][T14184] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 674.084410][T14216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1504'. [ 680.145410][ T8031] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 680.155010][ T8031] Bluetooth: hci5: Invalid handle: 0x3a4a > 0x0eff [ 686.580125][ T30] audit: type=1800 audit(4294967301.543:24): pid=14369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1533" name="dbroot" dev="configfs" ino=54651 res=0 errno=0 [ 687.487396][T14382] zswap: compressor û not available [ 689.021203][T14413] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 689.475346][T14427] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1541'. [ 690.933260][T14419] Process accounting paused [ 691.490397][T14457] nvme_fabrics: missing parameter 'transport=%s' [ 691.499603][T14457] nvme_fabrics: missing parameter 'nqn=%s' [ 692.287502][T14475] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1553'. [ 692.878658][T14491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1554'. [ 694.476978][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.483330][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.919447][T14548] NFSD: Failed to start, no listeners configured. [ 697.522631][T14559] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 697.571197][T14559] CIFS mount error: No usable UNC path provided in device string! [ 697.571197][T14559] [ 697.663748][T14559] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 698.546255][T14567] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 700.648262][T14607] ubi0: attaching mtd0 [ 700.677409][T14607] ubi0: scanning is finished [ 701.027627][T14607] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 701.097198][T14607] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 701.144989][T14607] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 701.177768][T14607] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 701.226122][T14607] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 701.257728][T14607] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 701.380421][T14607] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 346241231 [ 701.512470][T14607] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 701.586444][T14617] ubi0: background thread "ubi_bgt0d" started, PID 14617 [ 701.596572][T14610] ubi0: detaching mtd0 [ 701.722094][T14610] ubi0: mtd0 is detached [ 703.574999][T14643] futex_wake_op: syz.3.1577 tries to shift op by -2048; fix this program [ 703.599599][T14643] futex_wake_op: syz.3.1577 tries to shift op by -2048; fix this program [ 703.620332][T14642] 0x000000000001-0x000000020000 : "" [ 704.132471][T14642] ftl_cs: FTL header corrupt! [ 705.068563][T14664] Invalid ELF header magic: != ELF [ 705.078987][T14667] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 705.359944][T14670] FAULT_INJECTION: forcing a failure. [ 705.359944][T14670] name failslab, interval 1, probability 0, space 0, times 0 [ 705.374008][T14670] CPU: 1 UID: 0 PID: 14670 Comm: syz.5.1581 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 705.374070][T14670] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 705.374087][T14670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 705.374108][T14670] Call Trace: [ 705.374119][T14670] [ 705.374130][T14670] dump_stack_lvl+0x100/0x190 [ 705.374178][T14670] should_fail_ex.cold+0x5/0xa [ 705.374234][T14670] should_failslab+0xc2/0x120 [ 705.374283][T14670] kmem_cache_alloc_noprof+0x83/0x780 [ 705.374328][T14670] ? d_instantiate+0x90/0xb0 [ 705.374372][T14670] ? alloc_empty_file+0x55/0x1c0 [ 705.374430][T14670] ? alloc_empty_file+0x55/0x1c0 [ 705.374477][T14670] alloc_empty_file+0x55/0x1c0 [ 705.374526][T14670] alloc_file_pseudo+0x13a/0x230 [ 705.374579][T14670] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 705.374631][T14670] ? alloc_fd+0x476/0x790 [ 705.374676][T14670] sock_alloc_file+0x50/0x210 [ 705.374733][T14670] __sys_socket+0x1c0/0x260 [ 705.374772][T14670] ? fput+0x79/0x100 [ 705.374817][T14670] ? __pfx___sys_socket+0x10/0x10 [ 705.374854][T14670] ? xfd_validate_state+0x129/0x190 [ 705.374918][T14670] __x64_sys_socket+0x72/0xb0 [ 705.374957][T14670] ? lockdep_hardirqs_on+0x78/0x100 [ 705.375005][T14670] do_syscall_64+0xc9/0xf80 [ 705.375051][T14670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.375085][T14670] RIP: 0033:0x7f922bf9aeb9 [ 705.375112][T14670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.375145][T14670] RSP: 002b:00007f922cd81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 705.375177][T14670] RAX: ffffffffffffffda RBX: 00007f922c215fa0 RCX: 00007f922bf9aeb9 [ 705.375199][T14670] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 705.375219][T14670] RBP: 00007f922c008c1f R08: 0000000000000000 R09: 0000000000000000 [ 705.375238][T14670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.375259][T14670] R13: 00007f922c216038 R14: 00007f922c215fa0 R15: 00007ffc5189a8c8 [ 705.375302][T14670] [ 706.581513][T14689] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7fe00 [ 706.662792][T14689] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 706.752416][T14689] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 706.761239][T14689] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 706.864418][T14689] page dumped because: unmovable page [ 706.885320][T14689] page_owner tracks the page as allocated [ 706.891172][T14689] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 8848, tgid 8848 (kworker/u10:35), ts 495982289540, free_ts 495394680697 [ 706.941600][T14689] post_alloc_hook+0x1e1/0x250 [ 706.946489][T14689] get_page_from_freelist+0xe3d/0x2e10 [ 706.991050][T14689] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 706.997082][T14689] alloc_pages_mpol+0x1fb/0x550 [ 707.010943][T14689] alloc_pages_noprof+0x131/0x390 [ 707.016196][T14689] brd_submit_bio+0x116a/0x20d0 [ 707.031985][T14689] __submit_bio+0x32f/0x6c0 [ 707.036694][T14689] submit_bio_noacct_nocheck+0x6fc/0xbb0 [ 707.075241][T14689] submit_bio_noacct+0xb5c/0x1e80 [ 707.080394][T14689] __block_write_full_folio+0x77f/0xee0 [ 707.103163][T14689] block_write_full_folio+0x3b5/0x4e0 [ 707.108701][T14689] blkdev_writepages+0xc7/0x150 [ 707.143500][T14689] do_writepages+0x278/0x600 [ 707.160446][T14689] __writeback_single_inode+0x164/0x13c0 [ 707.166301][T14689] writeback_sb_inodes+0x72e/0x1b90 [ 707.210194][T14689] __writeback_inodes_wb+0xf8/0x2d0 [ 707.215529][T14689] page last free pid 15 tgid 15 stack trace: [ 707.259613][T14689] __free_frozen_pages+0x822/0x1130 [ 707.265060][T14689] tlb_remove_table_rcu+0x2b2/0x390 [ 707.287537][T14689] rcu_core+0x7c0/0x15c0 [ 707.339194][T14689] handle_softirqs+0x1ea/0x910 [ 707.352053][T14689] run_ksoftirqd+0x38/0x60 [ 707.366947][T14689] smpboot_thread_fn+0x3d3/0xaa0 [ 707.384105][T14689] kthread+0x3b3/0x730 [ 707.408395][T14689] ret_from_fork+0x754/0xaf0 [ 707.432911][T14689] ret_from_fork_asm+0x1a/0x30 [ 707.562842][T14701] FAULT_INJECTION: forcing a failure. [ 707.562842][T14701] name failslab, interval 1, probability 0, space 0, times 0 [ 707.671966][T14701] CPU: 0 UID: 0 PID: 14701 Comm: syz.4.1587 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 707.672022][T14701] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 707.672036][T14701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 707.672054][T14701] Call Trace: [ 707.672064][T14701] [ 707.672076][T14701] dump_stack_lvl+0x100/0x190 [ 707.672118][T14701] should_fail_ex.cold+0x5/0xa [ 707.672170][T14701] should_failslab+0xc2/0x120 [ 707.672214][T14701] kmem_cache_alloc_noprof+0x83/0x780 [ 707.672254][T14701] ? __proc_create+0xc2/0x8c0 [ 707.672300][T14701] ? __proc_create+0x2cb/0x8c0 [ 707.672354][T14701] ? __proc_create+0x2cb/0x8c0 [ 707.672401][T14701] __proc_create+0x2cb/0x8c0 [ 707.672450][T14701] ? __pfx___proc_create+0x10/0x10 [ 707.672503][T14701] ? _raw_write_unlock+0x28/0x50 [ 707.672537][T14701] ? proc_register+0x559/0x8a0 [ 707.672569][T14701] proc_create_reg+0x75/0x170 [ 707.672602][T14701] proc_create_data+0x86/0x110 [ 707.672631][T14701] ? __pfx_proc_create_data+0x10/0x10 [ 707.672660][T14701] ? cache_register_net+0x137/0x5e0 [ 707.672707][T14701] ? cache_register_net+0x137/0x5e0 [ 707.672760][T14701] cache_register_net+0x2d6/0x5e0 [ 707.672819][T14701] nfsd_idmap_init+0x16e/0x250 [ 707.672854][T14701] ? __pfx_nfsd_net_init+0x10/0x10 [ 707.672901][T14701] nfsd_net_init+0x69/0x3d0 [ 707.672946][T14701] ? __pfx_nfsd_net_init+0x10/0x10 [ 707.672992][T14701] ops_init+0x1e2/0x5f0 [ 707.673045][T14701] setup_net+0x118/0x3a0 [ 707.673073][T14701] ? __pfx_setup_net+0x10/0x10 [ 707.673098][T14701] ? lockdep_init_map_type+0x5c/0x250 [ 707.673141][T14701] ? mutex_init_lockep+0x110/0x150 [ 707.673190][T14701] copy_net_ns+0x46f/0x7c0 [ 707.673226][T14701] create_new_namespaces+0x3ea/0xab0 [ 707.673270][T14701] copy_namespaces+0x468/0x5e0 [ 707.673307][T14701] copy_process+0x32d5/0x7890 [ 707.673366][T14701] ? __pfx_copy_process+0x10/0x10 [ 707.673406][T14701] ? find_held_lock+0x2b/0x80 [ 707.673451][T14701] kernel_clone+0xfc/0x930 [ 707.673489][T14701] ? __pfx_futex_wait+0x10/0x10 [ 707.673520][T14701] ? __pfx_kernel_clone+0x10/0x10 [ 707.673583][T14701] __do_sys_clone+0xd9/0x120 [ 707.673625][T14701] ? __pfx___do_sys_clone+0x10/0x10 [ 707.673667][T14701] ? __fget_files+0x21f/0x3d0 [ 707.673715][T14701] ? xfd_validate_state+0x129/0x190 [ 707.673784][T14701] do_syscall_64+0xc9/0xf80 [ 707.673825][T14701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.673855][T14701] RIP: 0033:0x7fa46419aeb9 [ 707.673880][T14701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.673911][T14701] RSP: 002b:00007fa4623d4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 707.673941][T14701] RAX: ffffffffffffffda RBX: 00007fa464416180 RCX: 00007fa46419aeb9 [ 707.673961][T14701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 707.673979][T14701] RBP: 00007fa464208c1f R08: 0000000000000000 R09: 0000000000000000 [ 707.673997][T14701] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 707.674016][T14701] R13: 00007fa464416218 R14: 00007fa464416180 R15: 00007fffe4c428a8 [ 707.674057][T14701] [ 711.988878][T14785] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 712.213787][T14800] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1607'. [ 712.868405][T14806] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 712.952802][T14806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 713.050528][T14806] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 713.069332][T14806] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 713.092882][T14806] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 713.650149][T14826] netlink: 'syz.5.1610': attribute type 4 has an invalid length. [ 713.684134][T14826] netlink: 'syz.5.1610': attribute type 32 has an invalid length. [ 713.692097][T14826] netlink: 46 bytes leftover after parsing attributes in process `syz.5.1610'. [ 714.739690][T14835] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1613'. [ 714.908300][ T8054] Bluetooth: hci1: command 0x0406 tx timeout [ 714.989073][ T8054] Bluetooth: hci2: command 0x0406 tx timeout [ 715.066160][ T8054] Bluetooth: hci4: command 0x0c1a tx timeout [ 715.072378][ T8054] Bluetooth: hci3: command 0x0406 tx timeout [ 715.145337][ T8054] Bluetooth: hci5: command 0x0c1a tx timeout [ 716.258942][T14871] nvme_fcloop: unknown parameter or missing value 'ªproc/sel' [ 716.297813][T14869] futex_wake_op: syz.0.1619 tries to shift op by -2048; fix this program [ 716.337664][T14869] futex_wake_op: syz.0.1619 tries to shift op by -2048; fix this program [ 716.583974][T14869] 0x000000000001-0x000000020000 : "" [ 716.654039][T14869] ftl_cs: FTL header corrupt! [ 719.095359][T14920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1630'. [ 722.930812][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1640'. [ 723.156867][T14896] Process accounting resumed [ 723.808939][T15000] FAULT_INJECTION: forcing a failure. [ 723.808939][T15000] name failslab, interval 1, probability 0, space 0, times 0 [ 723.809038][T15000] CPU: 0 UID: 0 PID: 15000 Comm: syz.5.1646 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 723.809094][T15000] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 723.809111][T15000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 723.809131][T15000] Call Trace: [ 723.809142][T15000] [ 723.809154][T15000] dump_stack_lvl+0x100/0x190 [ 723.809203][T15000] should_fail_ex.cold+0x5/0xa [ 723.809259][T15000] should_failslab+0xc2/0x120 [ 723.809308][T15000] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 723.809358][T15000] ? smc_sysctl_net_init+0x42/0x450 [ 723.809414][T15000] ? __pfx_smc_net_init+0x10/0x10 [ 723.809448][T15000] ? kmemdup_noprof+0x29/0x60 [ 723.809490][T15000] ? timer_init_key+0x14c/0x2c0 [ 723.809531][T15000] kmemdup_noprof+0x29/0x60 [ 723.809574][T15000] smc_sysctl_net_init+0x42/0x450 [ 723.809635][T15000] ? __pfx_smc_net_init+0x10/0x10 [ 723.809666][T15000] smc_net_init+0x16/0x50 [ 723.809696][T15000] ops_init+0x1e2/0x5f0 [ 723.809769][T15000] setup_net+0x118/0x3a0 [ 723.809801][T15000] ? __pfx_setup_net+0x10/0x10 [ 723.809829][T15000] ? lockdep_init_map_type+0x5c/0x250 [ 723.809876][T15000] ? mutex_init_lockep+0x110/0x150 [ 723.809931][T15000] copy_net_ns+0x46f/0x7c0 [ 723.809975][T15000] create_new_namespaces+0x3ea/0xab0 [ 723.810024][T15000] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 723.810067][T15000] ksys_unshare+0x455/0xab0 [ 723.810116][T15000] ? __pfx_ksys_unshare+0x10/0x10 [ 723.810167][T15000] ? xfd_validate_state+0x129/0x190 [ 723.810234][T15000] __x64_sys_unshare+0x31/0x40 [ 723.810282][T15000] do_syscall_64+0xc9/0xf80 [ 723.810328][T15000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.810362][T15000] RIP: 0033:0x7f922bf9aeb9 [ 723.810393][T15000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.810426][T15000] RSP: 002b:00007f922cd81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 723.810458][T15000] RAX: ffffffffffffffda RBX: 00007f922c215fa0 RCX: 00007f922bf9aeb9 [ 723.810479][T15000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 723.810499][T15000] RBP: 00007f922c008c1f R08: 0000000000000000 R09: 0000000000000000 [ 723.810518][T15000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.810537][T15000] R13: 00007f922c216038 R14: 00007f922c215fa0 R15: 00007ffc5189a8c8 [ 723.810580][T15000] [ 727.481603][ T8054] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 727.847760][ T30] audit: type=1800 audit(4294967310.710:25): pid=15061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1657" name="lu_gp_id" dev="configfs" ino=58778 res=0 errno=0 [ 730.276028][T15092] netlink: 'syz.5.1665': attribute type 28 has an invalid length. [ 730.336391][T15092] netlink: 'syz.5.1665': attribute type 3 has an invalid length. [ 730.362505][T15092] netlink: 306 bytes leftover after parsing attributes in process `syz.5.1665'. [ 730.781645][T15100] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1668'. [ 730.964426][T15109] FAULT_INJECTION: forcing a failure. [ 730.964426][T15109] name failslab, interval 1, probability 0, space 0, times 0 [ 731.059438][T15108] rtc_cmos 00:00: Alarms can be up to one day in the future [ 731.070074][T15109] CPU: 0 UID: 0 PID: 15109 Comm: syz.0.1667 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 731.070140][T15109] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 731.070155][T15109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 731.070175][T15109] Call Trace: [ 731.070184][T15109] [ 731.070196][T15109] dump_stack_lvl+0x100/0x190 [ 731.070237][T15109] should_fail_ex.cold+0x5/0xa [ 731.070286][T15109] should_failslab+0xc2/0x120 [ 731.070327][T15109] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 731.070366][T15109] ? lockdep_init_map_type+0x5c/0x250 [ 731.070408][T15109] ? __d_alloc+0x34/0xa80 [ 731.070451][T15109] ? __d_alloc+0x34/0xa80 [ 731.070483][T15109] __d_alloc+0x34/0xa80 [ 731.070522][T15109] d_alloc_pseudo+0x1c/0xc0 [ 731.070566][T15109] alloc_file_pseudo+0xcf/0x230 [ 731.070625][T15109] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 731.070671][T15109] ? alloc_fd+0x476/0x790 [ 731.070709][T15109] sock_alloc_file+0x50/0x210 [ 731.070761][T15109] __sys_socket+0x1c0/0x260 [ 731.070794][T15109] ? fput+0x79/0x100 [ 731.070833][T15109] ? __pfx___sys_socket+0x10/0x10 [ 731.070865][T15109] ? ksys_write+0x1ac/0x250 [ 731.070896][T15109] ? __pfx_ksys_write+0x10/0x10 [ 731.070935][T15109] __x64_sys_socket+0x72/0xb0 [ 731.070967][T15109] ? lockdep_hardirqs_on+0x78/0x100 [ 731.071001][T15109] do_syscall_64+0xc9/0xf80 [ 731.071038][T15109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.071068][T15109] RIP: 0033:0x7f64b479aeb9 [ 731.071097][T15109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.071129][T15109] RSP: 002b:00007f64b29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 731.071160][T15109] RAX: ffffffffffffffda RBX: 00007f64b4a15fa0 RCX: 00007f64b479aeb9 [ 731.071179][T15109] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 731.071197][T15109] RBP: 00007f64b4808c1f R08: 0000000000000000 R09: 0000000000000000 [ 731.071215][T15109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.071233][T15109] R13: 00007f64b4a16038 R14: 00007f64b4a15fa0 R15: 00007ffe34b22e68 [ 731.071269][T15109] [ 731.332955][T15108] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1669'. [ 731.861229][ T5901] rtc_cmos 00:00: Alarms can be up to one day in the future [ 731.889398][ T5901] rtc_cmos 00:00: Alarms can be up to one day in the future [ 731.929991][ T5901] rtc_cmos 00:00: Alarms can be up to one day in the future [ 731.937789][ T5901] rtc_cmos 00:00: Alarms can be up to one day in the future [ 731.956465][ T5901] rtc rtc0: __rtc_set_alarm: err=-22 [ 732.446494][T15128] sd 0:0:1:0: PR command failed: 1026 [ 732.451954][T15128] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 732.494819][T15128] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 733.325173][T15140] Invalid ELF header magic: != ELF [ 733.722888][T15151] nvme_fcloop: unknown parameter or missing value 'ªproc/sel' [ 734.774139][T15168] FAULT_INJECTION: forcing a failure. [ 734.774139][T15168] name failslab, interval 1, probability 0, space 0, times 0 [ 734.870878][T15168] CPU: 1 UID: 0 PID: 15168 Comm: syz.0.1681 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 734.870933][T15168] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 734.870946][T15168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 734.870963][T15168] Call Trace: [ 734.870972][T15168] [ 734.870983][T15168] dump_stack_lvl+0x100/0x190 [ 734.871023][T15168] should_fail_ex.cold+0x5/0xa [ 734.871071][T15168] should_failslab+0xc2/0x120 [ 734.871113][T15168] kmem_cache_alloc_noprof+0x83/0x780 [ 734.871152][T15168] ? alloc_empty_file+0x55/0x1c0 [ 734.871202][T15168] ? alloc_empty_file+0x55/0x1c0 [ 734.871241][T15168] alloc_empty_file+0x55/0x1c0 [ 734.871284][T15168] path_openat+0xe8/0x3120 [ 734.871316][T15168] ? getname_flags+0x93/0xf0 [ 734.871343][T15168] ? do_sys_openat2+0xc5/0x220 [ 734.871383][T15168] ? __x64_sys_openat+0x12d/0x210 [ 734.871439][T15168] ? do_syscall_64+0xc9/0xf80 [ 734.871472][T15168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.871511][T15168] ? __pfx_path_openat+0x10/0x10 [ 734.871559][T15168] do_filp_open+0x1f7/0x420 [ 734.871597][T15168] ? __pfx_do_filp_open+0x10/0x10 [ 734.871656][T15168] ? _raw_spin_unlock+0x28/0x50 [ 734.871687][T15168] ? alloc_fd+0x476/0x790 [ 734.871730][T15168] do_sys_openat2+0x12e/0x220 [ 734.871774][T15168] ? __pfx_do_sys_openat2+0x10/0x10 [ 734.871833][T15168] __x64_sys_openat+0x12d/0x210 [ 734.871878][T15168] ? __pfx___x64_sys_openat+0x10/0x10 [ 734.871921][T15168] ? xfd_validate_state+0x129/0x190 [ 734.871980][T15168] do_syscall_64+0xc9/0xf80 [ 734.872019][T15168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.872047][T15168] RIP: 0033:0x7f64b479aeb9 [ 734.872071][T15168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.872100][T15168] RSP: 002b:00007f64b29d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 734.872128][T15168] RAX: ffffffffffffffda RBX: 00007f64b4a16090 RCX: 00007f64b479aeb9 [ 734.872147][T15168] RDX: 0000000000010002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 734.872165][T15168] RBP: 00007f64b4808c1f R08: 0000000000000000 R09: 0000000000000000 [ 734.872183][T15168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.872200][T15168] R13: 00007f64b4a16128 R14: 00007f64b4a16090 R15: 00007ffe34b22e68 [ 734.872238][T15168] [ 735.771226][T15183] random: crng reseeded on system resumption [ 738.068671][T15222] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 741.459031][T15252] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 743.062171][T15270] kernel read not supported for file /dynamic_events (pid: 15270 comm: syz.4.1703) [ 743.090488][ T30] audit: type=1800 audit(4294967326.030:26): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1703" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 743.592452][T15285] FAULT_INJECTION: forcing a failure. [ 743.592452][T15285] name failslab, interval 1, probability 0, space 0, times 0 [ 743.627512][T15285] CPU: 1 UID: 0 PID: 15285 Comm: syz.4.1706 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 743.627573][T15285] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 743.627588][T15285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 743.627609][T15285] Call Trace: [ 743.627619][T15285] [ 743.627631][T15285] dump_stack_lvl+0x100/0x190 [ 743.627679][T15285] should_fail_ex.cold+0x5/0xa [ 743.627742][T15285] should_failslab+0xc2/0x120 [ 743.627791][T15285] kmem_cache_alloc_noprof+0x83/0x780 [ 743.627838][T15285] ? __proc_create+0xc2/0x8c0 [ 743.627885][T15285] ? __proc_create+0x2cb/0x8c0 [ 743.627941][T15285] ? __proc_create+0x2cb/0x8c0 [ 743.627990][T15285] __proc_create+0x2cb/0x8c0 [ 743.628043][T15285] ? __pfx___proc_create+0x10/0x10 [ 743.628114][T15285] proc_mkdir+0x81/0x170 [ 743.628145][T15285] ? __pfx_proc_mkdir+0x10/0x10 [ 743.628180][T15285] ? __pfx_sunrpc_init_net+0x10/0x10 [ 743.628227][T15285] ? __pfx_sunrpc_init_net+0x10/0x10 [ 743.628268][T15285] rpc_proc_init+0x7e/0xf0 [ 743.628313][T15285] sunrpc_init_net+0x29/0x190 [ 743.628356][T15285] ops_init+0x1e2/0x5f0 [ 743.628414][T15285] setup_net+0x118/0x3a0 [ 743.628446][T15285] ? __pfx_setup_net+0x10/0x10 [ 743.628474][T15285] ? lockdep_init_map_type+0x5c/0x250 [ 743.628523][T15285] ? mutex_init_lockep+0x110/0x150 [ 743.628579][T15285] copy_net_ns+0x46f/0x7c0 [ 743.628617][T15285] create_new_namespaces+0x3ea/0xab0 [ 743.628665][T15285] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 743.628721][T15285] ksys_unshare+0x455/0xab0 [ 743.628775][T15285] ? __pfx_ksys_unshare+0x10/0x10 [ 743.628824][T15285] ? xfd_validate_state+0x129/0x190 [ 743.628876][T15285] ? __sys_setsockopt+0x139/0x190 [ 743.628935][T15285] __x64_sys_unshare+0x31/0x40 [ 743.628983][T15285] do_syscall_64+0xc9/0xf80 [ 743.629029][T15285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.629063][T15285] RIP: 0033:0x7fa46419aeb9 [ 743.629092][T15285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.629126][T15285] RSP: 002b:00007fa464f7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 743.629160][T15285] RAX: ffffffffffffffda RBX: 00007fa464415fa0 RCX: 00007fa46419aeb9 [ 743.629182][T15285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 743.629202][T15285] RBP: 00007fa464208c1f R08: 0000000000000000 R09: 0000000000000000 [ 743.629222][T15285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.629242][T15285] R13: 00007fa464416038 R14: 00007fa464415fa0 R15: 00007fffe4c428a8 [ 743.629287][T15285] [ 745.437643][T15313] FAULT_INJECTION: forcing a failure. [ 745.437643][T15313] name failslab, interval 1, probability 0, space 0, times 0 [ 745.488529][T15313] CPU: 1 UID: 0 PID: 15313 Comm: syz.4.1712 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 745.488585][T15313] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 745.488599][T15313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 745.488617][T15313] Call Trace: [ 745.488627][T15313] [ 745.488638][T15313] dump_stack_lvl+0x100/0x190 [ 745.488682][T15313] should_fail_ex.cold+0x5/0xa [ 745.488733][T15313] should_failslab+0xc2/0x120 [ 745.488777][T15313] ? tomoyo_realpath_from_path+0xb6/0x690 [ 745.488808][T15313] __kmalloc_noprof+0xf6/0x9c0 [ 745.488851][T15313] ? tomoyo_realpath_from_path+0xb6/0x690 [ 745.488888][T15313] tomoyo_realpath_from_path+0xb6/0x690 [ 745.488945][T15313] tomoyo_path_number_perm+0x23c/0x580 [ 745.488990][T15313] ? tomoyo_path_number_perm+0x22e/0x580 [ 745.489039][T15313] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 745.489124][T15313] ? find_held_lock+0x2b/0x80 [ 745.489155][T15313] ? hook_file_ioctl_common+0x146/0x410 [ 745.489202][T15313] ? __fget_files+0x215/0x3d0 [ 745.489244][T15313] ? __fget_files+0x21f/0x3d0 [ 745.489284][T15313] security_file_ioctl+0xd3/0x230 [ 745.489332][T15313] __x64_sys_ioctl+0xb7/0x210 [ 745.489385][T15313] do_syscall_64+0xc9/0xf80 [ 745.489427][T15313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.489460][T15313] RIP: 0033:0x7fa46419aeb9 [ 745.489485][T15313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.489517][T15313] RSP: 002b:00007fa464f7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.489552][T15313] RAX: ffffffffffffffda RBX: 00007fa464415fa0 RCX: 00007fa46419aeb9 [ 745.489573][T15313] RDX: 0000200000004bc0 RSI: 00000000405c5503 RDI: 0000000000000003 [ 745.489593][T15313] RBP: 00007fa464f7c090 R08: 0000000000000000 R09: 0000000000000000 [ 745.489611][T15313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.489630][T15313] R13: 00007fa464416038 R14: 00007fa464415fa0 R15: 00007fffe4c428a8 [ 745.489672][T15313] [ 745.489757][T15313] ERROR: Out of memory at tomoyo_realpath_from_path. [ 749.487802][T15362] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7fe00 [ 749.559608][T15362] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 749.695467][T15362] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 749.798691][T15362] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 749.848603][T15362] page dumped because: unmovable page [ 749.922815][T15362] page_owner tracks the page as allocated [ 750.044938][T15362] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 8848, tgid 8848 (kworker/u10:35), ts 495982289540, free_ts 495394680697 [ 750.375693][T15373] Process accounting resumed [ 750.417923][T15362] post_alloc_hook+0x1e1/0x250 [ 750.456336][T15362] get_page_from_freelist+0xe3d/0x2e10 [ 750.531389][T15362] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 750.581129][T15362] alloc_pages_mpol+0x1fb/0x550 [ 750.586208][T15362] alloc_pages_noprof+0x131/0x390 [ 750.640814][T15362] brd_submit_bio+0x116a/0x20d0 [ 750.645841][T15362] __submit_bio+0x32f/0x6c0 [ 750.650439][T15362] submit_bio_noacct_nocheck+0x6fc/0xbb0 [ 750.733417][T15362] submit_bio_noacct+0xb5c/0x1e80 [ 750.738565][T15362] __block_write_full_folio+0x77f/0xee0 [ 750.800657][T15362] block_write_full_folio+0x3b5/0x4e0 [ 750.806135][T15362] blkdev_writepages+0xc7/0x150 [ 750.872023][T15384] nvme_fcloop: unknown parameter or missing value 'ªproc/sel' [ 750.879721][T15362] do_writepages+0x278/0x600 [ 750.919408][T15362] __writeback_single_inode+0x164/0x13c0 [ 750.940757][T15362] writeback_sb_inodes+0x72e/0x1b90 [ 750.946105][T15362] __writeback_inodes_wb+0xf8/0x2d0 [ 751.033251][T15362] page last free pid 15 tgid 15 stack trace: [ 751.043380][T15362] __free_frozen_pages+0x822/0x1130 [ 751.097754][T15362] tlb_remove_table_rcu+0x2b2/0x390 [ 751.128233][T15362] rcu_core+0x7c0/0x15c0 [ 751.132608][T15362] handle_softirqs+0x1ea/0x910 [ 751.137457][T15362] run_ksoftirqd+0x38/0x60 [ 751.283273][T15362] smpboot_thread_fn+0x3d3/0xaa0 [ 751.309818][T15362] kthread+0x3b3/0x730 [ 751.327460][T15362] ret_from_fork+0x754/0xaf0 [ 751.332218][T15362] ret_from_fork_asm+0x1a/0x30 [ 755.580863][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.587628][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.723568][T15435] Process accounting paused [ 758.440775][ T8054] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 759.375860][T15463] kernel read not supported for file /dynamic_events (pid: 15463 comm: syz.5.1740) [ 759.564885][ T30] audit: type=1800 audit(4294967342.605:27): pid=15463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1740" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 761.983646][T15499] nvme_fcloop: unknown parameter or missing value 'ªproc/sel' [ 762.835735][T15508] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1750'. [ 762.869263][T15509] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1750'. [ 762.978650][T15488] syz.3.1746 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 763.130450][T15488] CPU: 1 UID: 0 PID: 15488 Comm: syz.3.1746 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 763.130506][T15488] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 763.130521][T15488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 763.130538][T15488] Call Trace: [ 763.130549][T15488] [ 763.130561][T15488] dump_stack_lvl+0x100/0x190 [ 763.130601][T15488] dump_header+0xfb/0x606 [ 763.130630][T15488] oom_kill_process.cold+0xd/0x321 [ 763.130661][T15488] out_of_memory+0x340/0x14f0 [ 763.130702][T15488] ? __pfx_out_of_memory+0x10/0x10 [ 763.130746][T15488] mem_cgroup_out_of_memory+0xc6/0x130 [ 763.130775][T15488] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 763.130803][T15488] ? find_held_lock+0x2b/0x80 [ 763.130836][T15488] ? do_raw_spin_unlock+0x145/0x1e0 [ 763.130879][T15488] ? _raw_spin_unlock+0x28/0x50 [ 763.130910][T15488] try_charge_memcg+0x652/0xc90 [ 763.130955][T15488] ? __pfx_try_charge_memcg+0x10/0x10 [ 763.131000][T15488] ? find_held_lock+0x2b/0x80 [ 763.131025][T15488] ? rcu_read_unlock+0x17/0x60 [ 763.131065][T15488] ? rcu_read_unlock+0x17/0x60 [ 763.131109][T15488] charge_memcg+0xa6/0x280 [ 763.131146][T15488] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 763.131194][T15488] __read_swap_cache_async+0x449/0x610 [ 763.131230][T15488] ? __pfx___read_swap_cache_async+0x10/0x10 [ 763.131259][T15488] ? __lock_acquire+0x4a5/0x2630 [ 763.131304][T15488] ? __xa_erase+0xec/0x150 [ 763.131338][T15488] ? __pfx___xa_erase+0x10/0x10 [ 763.131376][T15488] swap_cluster_readahead+0x541/0x770 [ 763.131415][T15488] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 763.131447][T15488] ? __lock_acquire+0x4a5/0x2630 [ 763.131483][T15488] ? _raw_spin_unlock+0x28/0x50 [ 763.131508][T15488] ? move_cluster+0x1f7/0x570 [ 763.131551][T15488] ? get_vma_policy+0x23f/0x3b0 [ 763.131595][T15488] swapin_readahead+0x14b/0x12e0 [ 763.131636][T15488] ? __pfx_swapin_readahead+0x10/0x10 [ 763.131667][T15488] ? find_held_lock+0x2b/0x80 [ 763.131694][T15488] ? swap_cache_get_folio+0x272/0x920 [ 763.131727][T15488] ? swap_cache_get_folio+0x272/0x920 [ 763.131753][T15488] ? swap_cache_get_folio+0x1f/0x920 [ 763.131779][T15488] ? swap_cache_get_folio+0x2a2/0x920 [ 763.131810][T15488] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 763.131837][T15488] ? __pfx_get_swap_device+0x10/0x10 [ 763.131882][T15488] ? do_swap_page+0x9ba/0x6810 [ 763.131908][T15488] do_swap_page+0x9ba/0x6810 [ 763.131941][T15488] ? __lock_acquire+0x4a5/0x2630 [ 763.131984][T15488] ? __pfx_do_swap_page+0x10/0x10 [ 763.132015][T15488] ? __pfx_default_wake_function+0x10/0x10 [ 763.132056][T15488] ? rcu_is_watching+0x12/0xc0 [ 763.132082][T15488] ? ___pte_offset_map+0x179/0x310 [ 763.132126][T15488] __handle_mm_fault+0x18b9/0x2b50 [ 763.132162][T15488] ? reacquire_held_locks+0xce/0x1e0 [ 763.132199][T15488] ? __pfx___handle_mm_fault+0x10/0x10 [ 763.132234][T15488] ? lock_vma_under_rcu+0x17c/0x5a0 [ 763.132282][T15488] handle_mm_fault+0x36d/0xa20 [ 763.132324][T15488] do_user_addr_fault+0x5a3/0x12f0 [ 763.132364][T15488] exc_page_fault+0x6f/0xd0 [ 763.132397][T15488] asm_exc_page_fault+0x26/0x30 [ 763.132423][T15488] RIP: 0033:0x7f3e01157049 [ 763.132444][T15488] Code: 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 41 56 41 55 41 54 49 89 d4 55 48 89 f5 53 48 89 fb 48 83 ec 70 48 8b 46 28 <64> 4c 8b 34 25 28 00 00 00 4c 89 74 24 68 4d 89 ce 48 85 c0 74 49 [ 763.132471][T15488] RSP: 002b:00007fff19ec37f0 EFLAGS: 00010206 [ 763.132492][T15488] RAX: 0000000000000000 RBX: 00007f3e020166c0 RCX: 00007f3e01ff6000 [ 763.132509][T15488] RDX: 00007fff19ec38e6 RSI: 00007fff19ec39e0 RDI: 00007f3e020166c0 [ 763.132526][T15488] RBP: 00007fff19ec39e0 R08: 00000000000201c0 R09: 00007fff19ec38e7 [ 763.132543][T15488] R10: 0000000000000008 R11: 0000000000000246 R12: 00007fff19ec38e6 [ 763.132559][T15488] R13: 00007f3e01ff6000 R14: 00007f3e020166c0 R15: 00007fff19ec38e8 [ 763.132594][T15488] [ 763.586377][T15488] memory: usage 3072kB, limit 3072kB, failcnt 173743 [ 763.593161][T15488] memory+swap: usage 65836kB, limit 9007199254740988kB, failcnt 0 [ 763.601104][T15488] kmem: usage 2480kB, limit 9007199254740988kB, failcnt 0 [ 763.608291][T15488] Memory cgroup stats for /syz3: [ 763.608503][T15488] cache 4096 [ 763.616855][T15488] rss 0 [ 763.619663][T15488] rss_huge 0 [ 763.622905][T15488] shmem 0 [ 763.625948][T15488] mapped_file 0 [ 763.629548][T15488] dirty 0 [ 763.632574][T15488] writeback 0 [ 763.635967][T15488] workingset_refault_anon 27980 [ 763.640955][T15488] workingset_refault_file 44661 [ 763.646000][T15488] swap 64270336 [ 763.649540][T15488] swapcached 602112 [ 763.653440][T15488] pgpgin 440318 [ 763.656960][T15488] pgpgout 442725 [ 763.660552][T15488] pgfault 327316 [ 763.664212][T15488] pgmajfault 10278 [ 763.667975][T15488] inactive_anon 229376 [ 763.672083][T15488] active_anon 372736 [ 763.676072][T15488] inactive_file 4096 [ 763.680053][T15488] active_file 0 [ 763.684833][T15488] unevictable 0 [ 763.688371][T15488] hierarchical_memory_limit 3145728 [ 763.693658][T15488] hierarchical_memsw_limit 9223372036854771712 [ 763.699890][T15488] total_cache 4096 [ 763.703700][T15488] total_rss 0 [ 763.707023][T15488] total_rss_huge 0 [ 763.710791][T15488] total_shmem 0 [ 763.714389][T15488] total_mapped_file 0 [ 763.718412][T15488] total_dirty 0 [ 763.721916][T15488] total_writeback 0 [ 763.725825][T15488] total_workingset_refault_anon 27980 [ 763.731283][T15488] total_workingset_refault_file 44661 [ 763.736743][T15488] total_swap 64270336 [ 763.740762][T15488] total_swapcached 602112 [ 763.745173][T15488] total_pgpgin 440318 [ 763.749222][T15488] total_pgpgout 442725 [ 763.753359][T15488] total_pgfault 327316 [ 763.757465][T15488] total_pgmajfault 10278 [ 763.761837][T15488] total_inactive_anon 229376 [ 763.766550][T15488] total_active_anon 372736 [ 763.771006][T15488] total_inactive_file 4096 [ 763.775543][T15488] total_active_file 0 [ 763.779607][T15488] total_unevictable 0 [ 763.783675][T15488] anon_cost 27 [ 763.787176][T15488] file_cost 0 [ 763.790829][T15488] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1595,pid=14744,uid=0 [ 763.806074][T15488] Memory cgroup out of memory: Killed process 14744 (syz.3.1595) total-vm:104508kB, anon-rss:1236kB, file-rss:54988kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 [ 767.082706][T15545] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1760'. [ 770.449338][T15597] kernel read not supported for file /dynamic_events (pid: 15597 comm: syz.0.1769) [ 770.482089][ T30] audit: type=1800 audit(4294967353.562:28): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1769" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 770.512840][ T8054] Bluetooth: hci2: Malformed Event: 0x2f [ 771.132156][T15614] kernel read not supported for file /dynamic_events (pid: 15614 comm: syz.3.1773) [ 771.152519][ T30] audit: type=1800 audit(4294967354.246:29): pid=15614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1773" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 771.414140][T15619] kernel read not supported for file /dynamic_events (pid: 15619 comm: syz.4.1775) [ 771.444530][ T30] audit: type=1800 audit(4294967354.527:30): pid=15619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1775" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 772.154779][T15626] zswap: compressor not available [ 773.711006][T15648] blktrace: Concurrent blktraces are not allowed on sda1 [ 774.335405][T15657] kvm_intel: kvm [15656]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 776.122658][T15682] kernel read not supported for file /dynamic_events (pid: 15682 comm: syz.5.1787) [ 776.135134][ T30] audit: type=1800 audit(4294967359.252:31): pid=15682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1787" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 779.026493][T15704] random: crng reseeded on system resumption [ 779.715104][T15708] __vm_enough_memory: pid: 15708, comm: syz.4.1793, bytes: 4398046511104 not enough memory for the allocation [ 782.224292][T15713] Process accounting paused [ 782.519088][T15739] FAULT_INJECTION: forcing a failure. [ 782.519088][T15739] name failslab, interval 1, probability 0, space 0, times 0 [ 782.594241][T15743] FAULT_INJECTION: forcing a failure. [ 782.594241][T15743] name failslab, interval 1, probability 0, space 0, times 0 [ 782.617637][T15739] CPU: 1 UID: 0 PID: 15739 Comm: syz.3.1800 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 782.617697][T15739] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 782.617713][T15739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 782.617733][T15739] Call Trace: [ 782.617743][T15739] [ 782.617756][T15739] dump_stack_lvl+0x100/0x190 [ 782.617803][T15739] should_fail_ex.cold+0x5/0xa [ 782.617858][T15739] should_failslab+0xc2/0x120 [ 782.617906][T15739] ? tomoyo_encode2+0xfb/0x3c0 [ 782.617937][T15739] __kmalloc_noprof+0xf6/0x9c0 [ 782.617984][T15739] ? tomoyo_encode2+0xfb/0x3c0 [ 782.618015][T15739] tomoyo_encode2+0xfb/0x3c0 [ 782.618054][T15739] tomoyo_encode+0x29/0x50 [ 782.618085][T15739] tomoyo_realpath_from_path+0x18c/0x690 [ 782.618130][T15739] tomoyo_check_open_permission+0x2af/0x3c0 [ 782.618185][T15739] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 782.618280][T15739] ? do_raw_spin_lock+0x128/0x260 [ 782.618335][T15739] ? path_get+0x61/0x80 [ 782.618383][T15739] tomoyo_file_open+0x6b/0x90 [ 782.618425][T15739] security_file_open+0xb5/0x1e0 [ 782.618467][T15739] do_dentry_open+0x58c/0x1570 [ 782.618512][T15739] ? security_inode_permission+0xbf/0x250 [ 782.618571][T15739] vfs_open+0x82/0x3f0 [ 782.618625][T15739] path_openat+0x21dc/0x3120 [ 782.618678][T15739] ? __pfx_path_openat+0x10/0x10 [ 782.618733][T15739] do_filp_open+0x1f7/0x420 [ 782.618776][T15739] ? __pfx_do_filp_open+0x10/0x10 [ 782.618843][T15739] ? _raw_spin_unlock+0x28/0x50 [ 782.618876][T15739] ? alloc_fd+0x476/0x790 [ 782.618926][T15739] do_sys_openat2+0x12e/0x220 [ 782.618978][T15739] ? __pfx_do_sys_openat2+0x10/0x10 [ 782.619033][T15739] ? __sys_sendmsg+0x18f/0x220 [ 782.619091][T15739] __x64_sys_openat+0x12d/0x210 [ 782.619145][T15739] ? __pfx___x64_sys_openat+0x10/0x10 [ 782.619196][T15739] ? xfd_validate_state+0x129/0x190 [ 782.619263][T15739] do_syscall_64+0xc9/0xf80 [ 782.619304][T15739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.619336][T15739] RIP: 0033:0x7f3e0119aeb9 [ 782.619361][T15739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.619393][T15739] RSP: 002b:00007f3e02037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 782.619424][T15739] RAX: ffffffffffffffda RBX: 00007f3e01416090 RCX: 00007f3e0119aeb9 [ 782.619455][T15739] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 782.619476][T15739] RBP: 00007f3e01208c1f R08: 0000000000000000 R09: 0000000000000000 [ 782.619496][T15739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.619515][T15739] R13: 00007f3e01416128 R14: 00007f3e01416090 R15: 00007fff19ec38e8 [ 782.619556][T15739] [ 782.619585][T15739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 782.952283][T15743] CPU: 1 UID: 0 PID: 15743 Comm: syz.0.1801 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 782.952339][T15743] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 782.952353][T15743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 782.952370][T15743] Call Trace: [ 782.952380][T15743] [ 782.952391][T15743] dump_stack_lvl+0x100/0x190 [ 782.952434][T15743] should_fail_ex.cold+0x5/0xa [ 782.952487][T15743] should_failslab+0xc2/0x120 [ 782.952530][T15743] kmem_cache_alloc_noprof+0x83/0x780 [ 782.952584][T15743] ? security_file_alloc+0x34/0x2c0 [ 782.952640][T15743] ? security_file_alloc+0x34/0x2c0 [ 782.952690][T15743] security_file_alloc+0x34/0x2c0 [ 782.952743][T15743] init_file+0x93/0x4c0 [ 782.952790][T15743] alloc_empty_file+0x73/0x1c0 [ 782.952837][T15743] path_openat+0xe8/0x3120 [ 782.952872][T15743] ? getname_flags+0x93/0xf0 [ 782.952901][T15743] ? do_sys_openat2+0xc5/0x220 [ 782.952947][T15743] ? __x64_sys_openat+0x12d/0x210 [ 782.952993][T15743] ? do_syscall_64+0xc9/0xf80 [ 782.953028][T15743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.953069][T15743] ? __pfx_path_openat+0x10/0x10 [ 782.953119][T15743] do_filp_open+0x1f7/0x420 [ 782.953160][T15743] ? __pfx_do_filp_open+0x10/0x10 [ 782.953222][T15743] ? _raw_spin_unlock+0x28/0x50 [ 782.953253][T15743] ? alloc_fd+0x476/0x790 [ 782.953298][T15743] do_sys_openat2+0x12e/0x220 [ 782.953348][T15743] ? __pfx_do_sys_openat2+0x10/0x10 [ 782.953393][T15743] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 782.953439][T15743] ? __fget_files+0x21f/0x3d0 [ 782.953480][T15743] __x64_sys_openat+0x12d/0x210 [ 782.953529][T15743] ? __pfx___x64_sys_openat+0x10/0x10 [ 782.953584][T15743] ? ksys_write+0x1ac/0x250 [ 782.953621][T15743] ? do_user_addr_fault+0x8d6/0x12f0 [ 782.953667][T15743] do_syscall_64+0xc9/0xf80 [ 782.953707][T15743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.953740][T15743] RIP: 0033:0x7f64b479aeb9 [ 782.953764][T15743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.953794][T15743] RSP: 002b:00007f64b29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 782.953824][T15743] RAX: ffffffffffffffda RBX: 00007f64b4a15fa0 RCX: 00007f64b479aeb9 [ 782.953846][T15743] RDX: 0000000000000542 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 782.953866][T15743] RBP: 00007f64b29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 782.953886][T15743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.953906][T15743] R13: 00007f64b4a16038 R14: 00007f64b4a15fa0 R15: 00007ffe34b22e68 [ 782.953947][T15743] [ 783.611015][T15746] FAULT_INJECTION: forcing a failure. [ 783.611015][T15746] name failslab, interval 1, probability 0, space 0, times 0 [ 783.659205][T15746] CPU: 0 UID: 0 PID: 15746 Comm: syz.4.1803 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 783.659267][T15746] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 783.659283][T15746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 783.659303][T15746] Call Trace: [ 783.659314][T15746] [ 783.659336][T15746] dump_stack_lvl+0x100/0x190 [ 783.659383][T15746] should_fail_ex.cold+0x5/0xa [ 783.659437][T15746] should_failslab+0xc2/0x120 [ 783.659484][T15746] __kvmalloc_node_noprof+0x101/0xac0 [ 783.659529][T15746] ? io_alloc_cache_init+0x38/0x170 [ 783.659581][T15746] ? io_alloc_cache_init+0x38/0x170 [ 783.659625][T15746] io_alloc_cache_init+0x38/0x170 [ 783.659673][T15746] io_uring_setup.cold+0x3cd/0x1a89 [ 783.659725][T15746] ? __pfx_io_uring_setup+0x10/0x10 [ 783.659767][T15746] ? do_futex+0x192/0x350 [ 783.659813][T15746] ? __pfx_do_futex+0x10/0x10 [ 783.659875][T15746] ? fput+0x79/0x100 [ 783.659919][T15746] ? xfd_validate_state+0x129/0x190 [ 783.659980][T15746] __x64_sys_io_uring_setup+0xc2/0x170 [ 783.660022][T15746] do_syscall_64+0xc9/0xf80 [ 783.660066][T15746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.660100][T15746] RIP: 0033:0x7fa46419aeb9 [ 783.660127][T15746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.660160][T15746] RSP: 002b:00007fa464f7c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 783.660192][T15746] RAX: ffffffffffffffda RBX: 00007fa464415fa0 RCX: 00007fa46419aeb9 [ 783.660214][T15746] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000001d48 [ 783.660237][T15746] RBP: 00007fa464208c1f R08: 0000000000000000 R09: 0000000000000000 [ 783.660258][T15746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.660279][T15746] R13: 00007fa464416038 R14: 00007fa464415fa0 R15: 00007fffe4c428a8 [ 783.660331][T15746] [ 783.908484][T15746] netlink: 'syz.4.1803': attribute type 11 has an invalid length. [ 784.179729][T15746] kernel read not supported for file /dynamic_events (pid: 15746 comm: syz.4.1803) [ 784.218139][ T30] audit: type=1800 audit(4294967367.384:32): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1803" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 785.437594][ T798] usb usb40-port2: attempt power cycle [ 786.019315][ T798] usb usb40-port2: unable to enumerate USB device [ 786.151111][T15782] kernel read not supported for file /dynamic_events (pid: 15782 comm: syz.5.1812) [ 786.175586][ T30] audit: type=1800 audit(4294967369.344:33): pid=15782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1812" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 786.616637][T15790] FAULT_INJECTION: forcing a failure. [ 786.616637][T15790] name failslab, interval 1, probability 0, space 0, times 0 [ 786.703410][T15790] CPU: 1 UID: 0 PID: 15790 Comm: syz.5.1815 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 786.703475][T15790] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 786.703492][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 786.703512][T15790] Call Trace: [ 786.703524][T15790] [ 786.703537][T15790] dump_stack_lvl+0x100/0x190 [ 786.703585][T15790] should_fail_ex.cold+0x5/0xa [ 786.703642][T15790] should_failslab+0xc2/0x120 [ 786.703692][T15790] __kvmalloc_node_noprof+0x101/0xac0 [ 786.703738][T15790] ? io_alloc_cache_init+0x38/0x170 [ 786.703792][T15790] ? io_alloc_cache_init+0x38/0x170 [ 786.703836][T15790] io_alloc_cache_init+0x38/0x170 [ 786.703885][T15790] io_uring_setup.cold+0x3eb/0x1a89 [ 786.703937][T15790] ? __pfx_io_uring_setup+0x10/0x10 [ 786.703982][T15790] ? do_futex+0x192/0x350 [ 786.704030][T15790] ? __pfx_do_futex+0x10/0x10 [ 786.704095][T15790] ? fput+0x79/0x100 [ 786.704141][T15790] ? xfd_validate_state+0x129/0x190 [ 786.704205][T15790] __x64_sys_io_uring_setup+0xc2/0x170 [ 786.704259][T15790] do_syscall_64+0xc9/0xf80 [ 786.704307][T15790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.704344][T15790] RIP: 0033:0x7f922bf9aeb9 [ 786.704371][T15790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.704407][T15790] RSP: 002b:00007f922cd81028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 786.704444][T15790] RAX: ffffffffffffffda RBX: 00007f922c215fa0 RCX: 00007f922bf9aeb9 [ 786.704468][T15790] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000001d48 [ 786.704490][T15790] RBP: 00007f922c008c1f R08: 0000000000000000 R09: 0000000000000000 [ 786.704511][T15790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.704531][T15790] R13: 00007f922c216038 R14: 00007f922c215fa0 R15: 00007ffc5189a8c8 [ 786.704570][T15790] [ 787.832069][ T30] audit: type=1800 audit(4294967297.070:34): pid=15807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1821" name="members" dev="configfs" ino=62428 res=0 errno=0 [ 788.365079][T15814] usb usb3: usbfs: interface 0 claimed by hub while 'syz.5.1824' sets config #0 [ 789.361809][T15838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1831'. [ 790.496720][T15802] Process accounting resumed [ 792.691297][T15889] kernel read not supported for file /dynamic_events (pid: 15889 comm: syz.4.1844) [ 792.756640][ T30] audit: type=1800 audit(4294967302.026:35): pid=15889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1844" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 793.099202][T15885] FAULT_INJECTION: forcing a failure. [ 793.099202][T15885] name failslab, interval 1, probability 0, space 0, times 0 [ 793.159173][T15885] CPU: 1 UID: 0 PID: 15885 Comm: syz.3.1842 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 793.159239][T15885] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 793.159259][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 793.159280][T15885] Call Trace: [ 793.159292][T15885] [ 793.159305][T15885] dump_stack_lvl+0x100/0x190 [ 793.159354][T15885] should_fail_ex.cold+0x5/0xa [ 793.159408][T15885] should_failslab+0xc2/0x120 [ 793.159466][T15885] kmem_cache_alloc_noprof+0x83/0x780 [ 793.159513][T15885] ? getname_flags.part.0+0x4c/0x540 [ 793.159569][T15885] ? getname_flags.part.0+0x4c/0x540 [ 793.159619][T15885] getname_flags.part.0+0x4c/0x540 [ 793.159681][T15885] getname_flags+0x93/0xf0 [ 793.159716][T15885] do_sys_openat2+0xc5/0x220 [ 793.159767][T15885] ? __pfx_do_sys_openat2+0x10/0x10 [ 793.159831][T15885] __x64_sys_openat+0x12d/0x210 [ 793.159883][T15885] ? __pfx___x64_sys_openat+0x10/0x10 [ 793.159932][T15885] ? xfd_validate_state+0x129/0x190 [ 793.159999][T15885] do_syscall_64+0xc9/0xf80 [ 793.160045][T15885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.160078][T15885] RIP: 0033:0x7f3e0119aeb9 [ 793.160105][T15885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.160137][T15885] RSP: 002b:00007f3e02058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 793.160170][T15885] RAX: ffffffffffffffda RBX: 00007f3e01415fa0 RCX: 00007f3e0119aeb9 [ 793.160192][T15885] RDX: 0000000000080080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 793.160213][T15885] RBP: 00007f3e01208c1f R08: 0000000000000000 R09: 0000000000000000 [ 793.160234][T15885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.160254][T15885] R13: 00007f3e01416038 R14: 00007f3e01415fa0 R15: 00007fff19ec38e8 [ 793.160298][T15885] [ 793.560297][T15902] kernel read not supported for file /dynamic_events (pid: 15902 comm: syz.4.1845) [ 793.570336][ T30] audit: type=1800 audit(4294967302.840:36): pid=15902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1845" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 798.489464][T15992] kernel read not supported for file /dynamic_events (pid: 15992 comm: syz.4.1866) [ 798.502104][ T30] audit: type=1800 audit(4294967300.307:37): pid=15992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1866" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 799.080740][T16004] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1869'. [ 799.112777][T16002] FAULT_INJECTION: forcing a failure. [ 799.112777][T16002] name failslab, interval 1, probability 0, space 0, times 0 [ 799.287736][T16002] CPU: 1 UID: 0 PID: 16002 Comm: syz.5.1870 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 799.287797][T16002] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 799.287814][T16002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 799.287834][T16002] Call Trace: [ 799.287845][T16002] [ 799.287862][T16002] dump_stack_lvl+0x100/0x190 [ 799.287913][T16002] should_fail_ex.cold+0x5/0xa [ 799.287972][T16002] should_failslab+0xc2/0x120 [ 799.288023][T16002] kmem_cache_alloc_noprof+0x83/0x780 [ 799.288071][T16002] ? __kernfs_new_node+0xd2/0x960 [ 799.288128][T16002] ? __kernfs_new_node+0xd2/0x960 [ 799.288184][T16002] __kernfs_new_node+0xd2/0x960 [ 799.288239][T16002] ? __pfx___kernfs_new_node+0x10/0x10 [ 799.288294][T16002] ? find_held_lock+0x2b/0x80 [ 799.288327][T16002] ? kernfs_root+0xee/0x2a0 [ 799.288370][T16002] ? kernfs_root+0xee/0x2a0 [ 799.288423][T16002] kernfs_new_node+0x11b/0x1a0 [ 799.288480][T16002] __kernfs_create_file+0x53/0x350 [ 799.288522][T16002] sysfs_add_file_mode_ns+0x207/0x3c0 [ 799.288575][T16002] internal_create_group+0x593/0xf40 [ 799.288632][T16002] ? __pfx_internal_create_group+0x10/0x10 [ 799.288687][T16002] ? kernfs_create_link+0x1bd/0x240 [ 799.288731][T16002] internal_create_groups+0x9d/0x150 [ 799.288783][T16002] device_add+0x71a/0x1950 [ 799.288831][T16002] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 799.288867][T16002] ? __pfx_device_add+0x10/0x10 [ 799.288913][T16002] ? lockdep_init_map_type+0x5c/0x250 [ 799.288960][T16002] ? __init_waitqueue_head+0xca/0x150 [ 799.289020][T16002] netdev_register_kobject+0x1a9/0x3d0 [ 799.289062][T16002] register_netdevice+0x12b3/0x21d0 [ 799.289101][T16002] ? __pfx_register_netdevice+0x10/0x10 [ 799.289153][T16002] __ip_tunnel_create+0x52b/0x670 [ 799.289210][T16002] ? __pfx___ip_tunnel_create+0x10/0x10 [ 799.289262][T16002] ? net_generic+0xea/0x2a0 [ 799.289302][T16002] ip_tunnel_init_net+0x230/0x780 [ 799.289341][T16002] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 799.289394][T16002] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 799.289443][T16002] ops_init+0x1e2/0x5f0 [ 799.289502][T16002] setup_net+0x118/0x3a0 [ 799.289535][T16002] ? __pfx_setup_net+0x10/0x10 [ 799.289563][T16002] ? lockdep_init_map_type+0x5c/0x250 [ 799.289611][T16002] ? mutex_init_lockep+0x110/0x150 [ 799.289666][T16002] copy_net_ns+0x46f/0x7c0 [ 799.289707][T16002] create_new_namespaces+0x3ea/0xab0 [ 799.289759][T16002] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 799.289804][T16002] ksys_unshare+0x455/0xab0 [ 799.289858][T16002] ? __pfx_ksys_unshare+0x10/0x10 [ 799.289908][T16002] ? xfd_validate_state+0x129/0x190 [ 799.289978][T16002] __x64_sys_unshare+0x31/0x40 [ 799.290029][T16002] do_syscall_64+0xc9/0xf80 [ 799.290076][T16002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.290113][T16002] RIP: 0033:0x7f922bf9aeb9 [ 799.290154][T16002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.290192][T16002] RSP: 002b:00007f922cd81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 799.290228][T16002] RAX: ffffffffffffffda RBX: 00007f922c215fa0 RCX: 00007f922bf9aeb9 [ 799.290251][T16002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 799.290273][T16002] RBP: 00007f922c008c1f R08: 0000000000000000 R09: 0000000000000000 [ 799.290293][T16002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.290312][T16002] R13: 00007f922c216038 R14: 00007f922c215fa0 R15: 00007ffc5189a8c8 [ 799.290357][T16002] [ 799.751235][T16007] raw_sendmsg: syz.0.1871 forgot to set AF_INET. Fix it! [ 803.522232][T16059] kernel read not supported for file /dynamic_events (pid: 16059 comm: syz.5.1886) [ 803.588198][ T30] audit: type=1800 audit(4294967297.432:38): pid=16059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1886" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 804.349230][T16076] Invalid ELF header magic: != ELF [ 805.376854][T16053] syz.3.1883 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 805.515376][T16053] CPU: 1 UID: 0 PID: 16053 Comm: syz.3.1883 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 805.515433][T16053] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 805.515449][T16053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 805.515468][T16053] Call Trace: [ 805.515479][T16053] [ 805.515492][T16053] dump_stack_lvl+0x100/0x190 [ 805.515537][T16053] dump_header+0xfb/0x606 [ 805.515572][T16053] oom_kill_process.cold+0xd/0x321 [ 805.515613][T16053] out_of_memory+0x340/0x14f0 [ 805.515695][T16053] ? __pfx_out_of_memory+0x10/0x10 [ 805.515747][T16053] mem_cgroup_out_of_memory+0xc6/0x130 [ 805.515782][T16053] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 805.515815][T16053] ? find_held_lock+0x2b/0x80 [ 805.515856][T16053] ? do_raw_spin_unlock+0x145/0x1e0 [ 805.515907][T16053] ? _raw_spin_unlock+0x28/0x50 [ 805.515945][T16053] try_charge_memcg+0x652/0xc90 [ 805.515999][T16053] ? __pfx_try_charge_memcg+0x10/0x10 [ 805.516052][T16053] ? find_held_lock+0x2b/0x80 [ 805.516083][T16053] ? rcu_read_unlock+0x17/0x60 [ 805.516129][T16053] ? rcu_read_unlock+0x17/0x60 [ 805.516179][T16053] charge_memcg+0xa6/0x280 [ 805.516222][T16053] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 805.516278][T16053] __read_swap_cache_async+0x449/0x610 [ 805.516322][T16053] ? __pfx___read_swap_cache_async+0x10/0x10 [ 805.516364][T16053] ? __xa_erase+0xec/0x150 [ 805.516404][T16053] ? __pfx___xa_erase+0x10/0x10 [ 805.516450][T16053] swap_cluster_readahead+0x414/0x770 [ 805.516497][T16053] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 805.516536][T16053] ? __lock_acquire+0x4a5/0x2630 [ 805.516599][T16053] ? get_vma_policy+0x23f/0x3b0 [ 805.516659][T16053] swapin_readahead+0x14b/0x12e0 [ 805.516710][T16053] ? __pfx_swapin_readahead+0x10/0x10 [ 805.516747][T16053] ? find_held_lock+0x2b/0x80 [ 805.516780][T16053] ? swap_cache_get_folio+0x272/0x920 [ 805.516820][T16053] ? swap_cache_get_folio+0x272/0x920 [ 805.516851][T16053] ? swap_cache_get_folio+0x1f/0x920 [ 805.516883][T16053] ? swap_cache_get_folio+0x2a2/0x920 [ 805.516921][T16053] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 805.516954][T16053] ? __pfx_get_swap_device+0x10/0x10 [ 805.517006][T16053] ? do_swap_page+0x9ba/0x6810 [ 805.517038][T16053] do_swap_page+0x9ba/0x6810 [ 805.517078][T16053] ? __lock_acquire+0x4a5/0x2630 [ 805.517132][T16053] ? __pfx_do_swap_page+0x10/0x10 [ 805.517170][T16053] ? __pfx_default_wake_function+0x10/0x10 [ 805.517219][T16053] ? rcu_is_watching+0x12/0xc0 [ 805.517252][T16053] ? ___pte_offset_map+0x179/0x310 [ 805.517310][T16053] __handle_mm_fault+0x18b9/0x2b50 [ 805.517364][T16053] ? reacquire_held_locks+0xce/0x1e0 [ 805.517436][T16053] ? __pfx___handle_mm_fault+0x10/0x10 [ 805.517479][T16053] ? lock_vma_under_rcu+0x17c/0x5a0 [ 805.517537][T16053] handle_mm_fault+0x36d/0xa20 [ 805.517581][T16053] do_user_addr_fault+0x5a3/0x12f0 [ 805.517630][T16053] exc_page_fault+0x6f/0xd0 [ 805.517683][T16053] asm_exc_page_fault+0x26/0x30 [ 805.517714][T16053] RIP: 0033:0x7f3e0104ff5e [ 805.517740][T16053] Code: f6 31 c0 e8 84 9e 14 00 48 81 c4 90 00 00 00 48 98 5b c3 66 0f 1f 84 00 00 00 00 00 41 54 55 53 48 89 fb 48 81 ec d0 00 00 00 <48> 89 74 24 28 48 89 54 24 30 48 89 4c 24 38 4c 89 44 24 40 4c 89 [ 805.517772][T16053] RSP: 002b:00007f3e02057f60 EFLAGS: 00010206 [ 805.517797][T16053] RAX: 0000000000000000 RBX: 00007f3e01208d14 RCX: 00007f3e01211c09 [ 805.517818][T16053] RDX: 00000000000ad9a0 RSI: 0000000000000018 RDI: 00007f3e01208d14 [ 805.517839][T16053] RBP: 00007f3e01211c09 R08: ffffffffffffffff R09: 0000000000000000 [ 805.517860][T16053] R10: 00007f3e02059000 R11: 00000000000263f6 R12: 0000000000000000 [ 805.517880][T16053] R13: 00007f3e01416038 R14: 00007f3e01415fa0 R15: 00007fff19ec38e8 [ 805.517923][T16053] [ 805.906997][T16053] memory: usage 3072kB, limit 3072kB, failcnt 191195 [ 805.913835][T16053] memory+swap: usage 42560kB, limit 9007199254740988kB, failcnt 0 [ 805.921699][T16053] kmem: usage 2860kB, limit 9007199254740988kB, failcnt 0 [ 805.929023][T16053] Memory cgroup stats for /syz3: [ 805.929243][T16053] cache 8192 [ 805.937496][T16053] rss 0 [ 805.940300][T16053] rss_huge 0 [ 805.943571][T16053] shmem 0 [ 805.946566][T16053] mapped_file 0 [ 805.950064][T16053] dirty 4096 [ 805.953340][T16053] writeback 0 [ 805.956678][T16053] workingset_refault_anon 30238 [ 805.961568][T16053] workingset_refault_file 47449 [ 805.966507][T16053] swap 40435712 [ 805.970007][T16053] swapcached 208896 [ 805.973908][T16053] pgpgin 466893 [ 805.977412][T16053] pgpgout 469395 [ 805.980994][T16053] pgfault 343180 [ 805.985053][T16053] pgmajfault 11060 [ 805.988818][T16053] inactive_anon 28672 [ 805.992964][T16053] active_anon 180224 [ 805.996917][T16053] inactive_file 4096 [ 806.000859][T16053] active_file 0 [ 806.004400][T16053] unevictable 0 [ 806.007978][T16053] hierarchical_memory_limit 3145728 [ 806.013250][T16053] hierarchical_memsw_limit 9223372036854771712 [ 806.019535][T16053] total_cache 8192 [ 806.023512][T16053] total_rss 0 [ 806.026941][T16053] total_rss_huge 0 [ 806.030722][T16053] total_shmem 0 [ 806.040564][T16053] total_mapped_file 0 [ 806.044842][T16053] total_dirty 4096 [ 806.048616][T16053] total_writeback 0 [ 806.052520][T16053] total_workingset_refault_anon 30238 [ 806.057948][T16053] total_workingset_refault_file 47449 [ 806.063405][T16053] total_swap 40435712 [ 806.067894][T16053] total_swapcached 208896 [ 806.072280][T16053] total_pgpgin 466893 [ 806.076448][T16053] total_pgpgout 469395 [ 806.080559][T16053] total_pgfault 343180 [ 806.084813][T16053] total_pgmajfault 11060 [ 806.089115][T16053] total_inactive_anon 28672 [ 806.094002][T16053] total_active_anon 180224 [ 806.098574][T16053] total_inactive_file 4096 [ 806.103091][T16053] total_active_file 0 [ 806.107131][T16053] total_unevictable 0 [ 806.111245][T16053] anon_cost 428 [ 806.114802][T16053] file_cost 0 [ 806.118186][T16053] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1804,pid=15754,uid=0 [ 806.133208][T16053] Memory cgroup out of memory: Killed process 15754 (syz.3.1804) total-vm:106556kB, anon-rss:1312kB, file-rss:55060kB, shmem-rss:128kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 807.362161][T16104] FAULT_INJECTION: forcing a failure. [ 807.362161][T16104] name failslab, interval 1, probability 0, space 0, times 0 [ 807.433862][T16104] CPU: 1 UID: 0 PID: 16104 Comm: syz.3.1894 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 807.433923][T16104] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 807.433939][T16104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 807.433959][T16104] Call Trace: [ 807.433972][T16104] [ 807.433984][T16104] dump_stack_lvl+0x100/0x190 [ 807.434032][T16104] should_fail_ex.cold+0x5/0xa [ 807.434087][T16104] should_failslab+0xc2/0x120 [ 807.434136][T16104] __kmalloc_cache_noprof+0x80/0x810 [ 807.434180][T16104] ? __do_sys_fanotify_init+0x690/0xe50 [ 807.434221][T16104] ? __do_sys_fanotify_init+0x690/0xe50 [ 807.434253][T16104] __do_sys_fanotify_init+0x690/0xe50 [ 807.434303][T16104] do_syscall_64+0xc9/0xf80 [ 807.434348][T16104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.434382][T16104] RIP: 0033:0x7f3e0119aeb9 [ 807.434409][T16104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.434443][T16104] RSP: 002b:00007f3e02058028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 807.434474][T16104] RAX: ffffffffffffffda RBX: 00007f3e01415fa0 RCX: 00007f3e0119aeb9 [ 807.434496][T16104] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 807.434516][T16104] RBP: 00007f3e01208c1f R08: 0000000000000000 R09: 0000000000000000 [ 807.434536][T16104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.434556][T16104] R13: 00007f3e01416038 R14: 00007f3e01415fa0 R15: 00007fff19ec38e8 [ 807.434599][T16104] [ 808.855007][T16118] KVM: debugfs: duplicate directory 16118-3 [ 808.894465][T16118] KVM: debugfs: duplicate directory 16118-5 [ 808.960526][T16118] KVM: debugfs: duplicate directory 16118-6 [ 808.997099][T16118] KVM: debugfs: duplicate directory 16118-7 [ 809.004212][T16118] KVM: debugfs: duplicate directory 16118-8 [ 809.037936][T16118] KVM: debugfs: duplicate directory 16118-9 [ 809.138469][T16118] KVM: debugfs: duplicate directory 16118-10 [ 809.177325][T16118] KVM: debugfs: duplicate directory 16118-11 [ 810.801389][T16151] FAULT_INJECTION: forcing a failure. [ 810.801389][T16151] name failslab, interval 1, probability 0, space 0, times 0 [ 810.901096][T16151] CPU: 1 UID: 0 PID: 16151 Comm: syz.0.1908 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 810.901158][T16151] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 810.901175][T16151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 810.901195][T16151] Call Trace: [ 810.901207][T16151] [ 810.901220][T16151] dump_stack_lvl+0x100/0x190 [ 810.901266][T16151] should_fail_ex.cold+0x5/0xa [ 810.901321][T16151] should_failslab+0xc2/0x120 [ 810.901368][T16151] ? alloc_pipe_info+0x1ec/0x590 [ 810.901406][T16151] __kmalloc_noprof+0xf6/0x9c0 [ 810.901452][T16151] ? alloc_pipe_info+0x1ec/0x590 [ 810.901491][T16151] alloc_pipe_info+0x1ec/0x590 [ 810.901537][T16151] splice_direct_to_actor+0x78f/0xa30 [ 810.901577][T16151] ? __pfx_direct_splice_actor+0x10/0x10 [ 810.901614][T16151] ? __pfx_aa_file_perm+0x10/0x10 [ 810.901655][T16151] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 810.901705][T16151] do_splice_direct+0x174/0x240 [ 810.901744][T16151] ? __pfx_do_splice_direct+0x10/0x10 [ 810.901778][T16151] ? common_file_perm+0x1ab/0x4f0 [ 810.901828][T16151] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 810.901871][T16151] ? rw_verify_area+0xce/0x6d0 [ 810.901909][T16151] do_sendfile+0xadc/0xe20 [ 810.901952][T16151] ? __pfx_do_sendfile+0x10/0x10 [ 810.901995][T16151] ? __pfx_load_fixmap_gdt+0x10/0x10 [ 810.902052][T16151] __x64_sys_sendfile64+0x1d8/0x220 [ 810.902096][T16151] ? xfd_validate_state+0x129/0x190 [ 810.902152][T16151] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 810.902209][T16151] do_syscall_64+0xc9/0xf80 [ 810.902253][T16151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.902286][T16151] RIP: 0033:0x7f64b479aeb9 [ 810.902312][T16151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.902344][T16151] RSP: 002b:00007f64b29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 810.902375][T16151] RAX: ffffffffffffffda RBX: 00007f64b4a15fa0 RCX: 00007f64b479aeb9 [ 810.902397][T16151] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 810.902417][T16151] RBP: 00007f64b4808c1f R08: 0000000000000000 R09: 0000000000000000 [ 810.902438][T16151] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 810.902457][T16151] R13: 00007f64b4a16038 R14: 00007f64b4a15fa0 R15: 00007ffe34b22e68 [ 810.902500][T16151] [ 812.345744][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 812.969648][T16176] Process accounting resumed [ 812.981931][T16188] Invalid ELF header magic: != ELF [ 814.721212][T16216] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7fe00 [ 814.840003][T16216] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 814.925548][T16216] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 814.948357][T16216] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 815.021193][T16216] page dumped because: unmovable page [ 815.065747][T16216] page_owner tracks the page as allocated [ 815.095894][T16216] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 8848, tgid 8848 (kworker/u10:35), ts 495982289540, free_ts 495394680697 [ 815.233123][T16216] post_alloc_hook+0x1e1/0x250 [ 815.261860][T16216] get_page_from_freelist+0xe3d/0x2e10 [ 815.304389][T16216] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 815.343916][T16216] alloc_pages_mpol+0x1fb/0x550 [ 815.354557][T16216] alloc_pages_noprof+0x131/0x390 [ 815.359974][T16216] brd_submit_bio+0x116a/0x20d0 [ 815.416269][T16216] __submit_bio+0x32f/0x6c0 [ 815.445737][T16216] submit_bio_noacct_nocheck+0x6fc/0xbb0 [ 815.453105][T16216] submit_bio_noacct+0xb5c/0x1e80 [ 815.476402][T16216] __block_write_full_folio+0x77f/0xee0 [ 815.486502][T16216] block_write_full_folio+0x3b5/0x4e0 [ 815.642689][T16216] blkdev_writepages+0xc7/0x150 [ 815.647662][T16216] do_writepages+0x278/0x600 [ 815.652323][T16216] __writeback_single_inode+0x164/0x13c0 [ 815.771766][T16216] writeback_sb_inodes+0x72e/0x1b90 [ 815.777757][T16216] __writeback_inodes_wb+0xf8/0x2d0 [ 815.792252][T16216] page last free pid 15 tgid 15 stack trace: [ 815.809123][T16216] __free_frozen_pages+0x822/0x1130 [ 815.821743][T16216] tlb_remove_table_rcu+0x2b2/0x390 [ 815.853665][T16216] rcu_core+0x7c0/0x15c0 [ 815.858106][T16216] handle_softirqs+0x1ea/0x910 [ 815.872091][T16216] run_ksoftirqd+0x38/0x60 [ 815.876641][T16216] smpboot_thread_fn+0x3d3/0xaa0 [ 815.911801][T16216] kthread+0x3b3/0x730 [ 815.916357][T16216] ret_from_fork+0x754/0xaf0 [ 815.932605][T16216] ret_from_fork_asm+0x1a/0x30 [ 816.332612][T16228] kernel read not supported for file /dynamic_events (pid: 16228 comm: syz.0.1926) [ 816.384209][ T30] audit: type=1800 audit(4294967306.599:39): pid=16228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1926" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 816.703647][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.716917][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.321310][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1931'. [ 817.643527][T16257] FAULT_INJECTION: forcing a failure. [ 817.643527][T16257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 817.701264][T16257] CPU: 0 UID: 0 PID: 16257 Comm: syz.3.1933 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 817.701325][T16257] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 817.701341][T16257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 817.701360][T16257] Call Trace: [ 817.701371][T16257] [ 817.701384][T16257] dump_stack_lvl+0x100/0x190 [ 817.701427][T16257] should_fail_ex.cold+0x5/0xa [ 817.701473][T16257] ? prepare_alloc_pages+0x16d/0x5f0 [ 817.701525][T16257] should_fail_alloc_page+0xeb/0x140 [ 817.701580][T16257] prepare_alloc_pages+0x1f0/0x5f0 [ 817.701635][T16257] __alloc_frozen_pages_noprof+0x193/0x2410 [ 817.701685][T16257] ? kasan_save_stack+0x3f/0x50 [ 817.701723][T16257] ? kasan_save_stack+0x30/0x50 [ 817.701759][T16257] ? kasan_save_track+0x14/0x30 [ 817.701795][T16257] ? __kasan_slab_alloc+0x89/0x90 [ 817.701835][T16257] ? kmem_cache_alloc_noprof+0x2ad/0x780 [ 817.701880][T16257] ? __pmd_alloc+0xbf/0x9c0 [ 817.701926][T16257] ? __handle_mm_fault+0xa99/0x2b50 [ 817.701957][T16257] ? handle_mm_fault+0x36d/0xa20 [ 817.701988][T16257] ? do_user_addr_fault+0x74c/0x12f0 [ 817.702025][T16257] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 817.702063][T16257] ? _copy_from_user+0x98/0xd0 [ 817.702109][T16257] ? __x64_sys_ioctl+0x18e/0x210 [ 817.702161][T16257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.702215][T16257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 817.702254][T16257] ? policy_nodemask+0xed/0x4f0 [ 817.702303][T16257] alloc_pages_mpol+0x1fb/0x550 [ 817.702353][T16257] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 817.702410][T16257] alloc_pages_noprof+0x131/0x390 [ 817.702458][T16257] pte_alloc_one+0x1e/0x3e0 [ 817.702500][T16257] do_fault+0x8cc/0x1990 [ 817.702546][T16257] ? __pmd_alloc+0x6aa/0x9c0 [ 817.702607][T16257] __handle_mm_fault+0x1807/0x2b50 [ 817.702645][T16257] ? mt_find+0x45e/0x8e0 [ 817.702689][T16257] ? __pfx___handle_mm_fault+0x10/0x10 [ 817.702723][T16257] ? __pfx_mt_find+0x10/0x10 [ 817.702785][T16257] ? find_vma+0xbf/0x140 [ 817.702829][T16257] ? __pfx_find_vma+0x10/0x10 [ 817.702878][T16257] handle_mm_fault+0x36d/0xa20 [ 817.702923][T16257] do_user_addr_fault+0x74c/0x12f0 [ 817.702970][T16257] exc_page_fault+0x6f/0xd0 [ 817.703010][T16257] asm_exc_page_fault+0x26/0x30 [ 817.703041][T16257] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 817.703090][T16257] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 817.703121][T16257] RSP: 0018:ffffc9000c287d18 EFLAGS: 00050202 [ 817.703147][T16257] RAX: 0000000000000001 RBX: 0000000000000038 RCX: 000000000000008c [ 817.703167][T16257] RDX: 0000000000000001 RSI: 0000000000000038 RDI: ffffc9000c287d80 [ 817.703187][T16257] RBP: 000000000000008c R08: 0000000000000001 R09: fffff52001850fc1 [ 817.703206][T16257] R10: ffffc9000c287e0b R11: 0000000000000000 R12: 0000000000000000 [ 817.703226][T16257] R13: ffffc9000c287d80 R14: ffffc9000c287d80 R15: ffff88807f3d4800 [ 817.703269][T16257] _copy_from_user+0x98/0xd0 [ 817.703318][T16257] snd_seq_ioctl+0x1bf/0x430 [ 817.703352][T16257] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 817.703404][T16257] ? __fget_files+0x21f/0x3d0 [ 817.703445][T16257] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 817.703478][T16257] __x64_sys_ioctl+0x18e/0x210 [ 817.703531][T16257] do_syscall_64+0xc9/0xf80 [ 817.703581][T16257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.703613][T16257] RIP: 0033:0x7f3e0119aeb9 [ 817.703638][T16257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.703669][T16257] RSP: 002b:00007f3e02058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 817.703697][T16257] RAX: ffffffffffffffda RBX: 00007f3e01415fa0 RCX: 00007f3e0119aeb9 [ 817.703717][T16257] RDX: 0000000000000038 RSI: 00000000c08c5334 RDI: 0000000000000003 [ 817.703736][T16257] RBP: 00007f3e02058090 R08: 0000000000000000 R09: 0000000000000000 [ 817.703754][T16257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.703773][T16257] R13: 00007f3e01416038 R14: 00007f3e01415fa0 R15: 00007fff19ec38e8 [ 817.703814][T16257] [ 819.876914][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 820.445195][T16301] FAULT_INJECTION: forcing a failure. [ 820.445195][T16301] name failslab, interval 1, probability 0, space 0, times 0 [ 820.507545][T16301] CPU: 0 UID: 0 PID: 16301 Comm: syz.0.1944 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 820.507604][T16301] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 820.507618][T16301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 820.507635][T16301] Call Trace: [ 820.507646][T16301] [ 820.507658][T16301] dump_stack_lvl+0x100/0x190 [ 820.507702][T16301] should_fail_ex.cold+0x5/0xa [ 820.507754][T16301] should_failslab+0xc2/0x120 [ 820.507801][T16301] kmem_cache_alloc_noprof+0x83/0x780 [ 820.507847][T16301] ? ptlock_alloc+0x1f/0x70 [ 820.507888][T16301] ? ptlock_alloc+0x1f/0x70 [ 820.507918][T16301] ptlock_alloc+0x1f/0x70 [ 820.507952][T16301] pte_alloc_one+0x84/0x3e0 [ 820.507998][T16301] do_fault+0x8cc/0x1990 [ 820.508049][T16301] ? __pmd_alloc+0x6aa/0x9c0 [ 820.508104][T16301] __handle_mm_fault+0x1807/0x2b50 [ 820.508144][T16301] ? mt_find+0x45e/0x8e0 [ 820.508188][T16301] ? __pfx___handle_mm_fault+0x10/0x10 [ 820.508222][T16301] ? __pfx_mt_find+0x10/0x10 [ 820.508283][T16301] ? find_vma+0xbf/0x140 [ 820.508329][T16301] ? __pfx_find_vma+0x10/0x10 [ 820.508380][T16301] handle_mm_fault+0x36d/0xa20 [ 820.508436][T16301] do_user_addr_fault+0x74c/0x12f0 [ 820.508486][T16301] exc_page_fault+0x6f/0xd0 [ 820.508526][T16301] asm_exc_page_fault+0x26/0x30 [ 820.508558][T16301] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 820.508610][T16301] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 820.508643][T16301] RSP: 0018:ffffc9000bd57d18 EFLAGS: 00050202 [ 820.508669][T16301] RAX: 0000000000000001 RBX: 0000000000000038 RCX: 000000000000008c [ 820.508690][T16301] RDX: 0000000000000001 RSI: 0000000000000038 RDI: ffffc9000bd57d80 [ 820.508710][T16301] RBP: 000000000000008c R08: 0000000000000001 R09: fffff520017aafc1 [ 820.508729][T16301] R10: ffffc9000bd57e0b R11: 0000000000000000 R12: 0000000000000000 [ 820.508749][T16301] R13: ffffc9000bd57d80 R14: ffffc9000bd57d80 R15: ffff888053bf6000 [ 820.508791][T16301] _copy_from_user+0x98/0xd0 [ 820.508843][T16301] snd_seq_ioctl+0x1bf/0x430 [ 820.508877][T16301] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 820.508932][T16301] ? __fget_files+0x21f/0x3d0 [ 820.508975][T16301] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 820.509009][T16301] __x64_sys_ioctl+0x18e/0x210 [ 820.509066][T16301] do_syscall_64+0xc9/0xf80 [ 820.509109][T16301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.509141][T16301] RIP: 0033:0x7f64b479aeb9 [ 820.509168][T16301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.509199][T16301] RSP: 002b:00007f64b29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.509229][T16301] RAX: ffffffffffffffda RBX: 00007f64b4a15fa0 RCX: 00007f64b479aeb9 [ 820.509251][T16301] RDX: 0000000000000038 RSI: 00000000c08c5334 RDI: 0000000000000003 [ 820.509271][T16301] RBP: 00007f64b29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 820.509320][T16301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.509340][T16301] R13: 00007f64b4a16038 R14: 00007f64b4a15fa0 R15: 00007ffe34b22e68 [ 820.509384][T16301] [ 820.836962][T16298] Process accounting paused [ 821.239484][T16308] Process accounting resumed [ 821.390721][T16317] ptp ptp0: delete virtual clock ptp3 [ 821.448825][T16317] ptp ptp0: delete virtual clock ptp2 [ 821.491874][ T30] audit: type=1326 audit(4294967311.726:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16316 comm="syz.5.1949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f922bf9aeb9 code=0x0 [ 821.516711][T16317] ptp ptp0: delete virtual clock ptp1 [ 821.662033][T16317] ptp ptp0: only physical clock in use now [ 823.309318][T16350] FAULT_INJECTION: forcing a failure. [ 823.309318][T16350] name failslab, interval 1, probability 0, space 0, times 0 [ 823.322490][T16350] CPU: 1 UID: 0 PID: 16350 Comm: syz.4.1957 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 823.322552][T16350] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 823.322569][T16350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 823.322590][T16350] Call Trace: [ 823.322601][T16350] [ 823.322619][T16350] dump_stack_lvl+0x100/0x190 [ 823.322665][T16350] should_fail_ex.cold+0x5/0xa [ 823.322723][T16350] should_failslab+0xc2/0x120 [ 823.322772][T16350] kmem_cache_alloc_noprof+0x83/0x780 [ 823.322815][T16350] ? __pfx_map_id_range_down+0x10/0x10 [ 823.322851][T16350] ? security_inode_alloc+0x3b/0x2c0 [ 823.322906][T16350] ? security_inode_alloc+0x3b/0x2c0 [ 823.322962][T16350] security_inode_alloc+0x3b/0x2c0 [ 823.323012][T16350] inode_init_always_gfp+0xced/0x1040 [ 823.323061][T16350] alloc_inode+0x8e/0x250 [ 823.323111][T16350] path_from_stashed+0x25b/0x750 [ 823.323152][T16350] ? do_raw_spin_unlock+0x145/0x1e0 [ 823.323216][T16350] ns_get_path+0x60/0x80 [ 823.323255][T16350] proc_ns_get_link+0x121/0x230 [ 823.323301][T16350] ? __pfx_proc_ns_get_link+0x10/0x10 [ 823.323353][T16350] ? atime_needs_update+0x8b/0x6b0 [ 823.323411][T16350] pick_link+0xd17/0x13c0 [ 823.323443][T16350] ? __pfx_proc_ns_get_link+0x10/0x10 [ 823.323495][T16350] step_into_slowpath+0x6c2/0xf50 [ 823.323538][T16350] ? __pfx_step_into_slowpath+0x10/0x10 [ 823.323573][T16350] ? find_held_lock+0x2b/0x80 [ 823.323621][T16350] path_openat+0xf95/0x3120 [ 823.323677][T16350] ? __pfx_path_openat+0x10/0x10 [ 823.323732][T16350] do_filp_open+0x1f7/0x420 [ 823.323777][T16350] ? __pfx_do_filp_open+0x10/0x10 [ 823.323848][T16350] ? _raw_spin_unlock+0x28/0x50 [ 823.323884][T16350] ? alloc_fd+0x476/0x790 [ 823.323935][T16350] do_sys_openat2+0x12e/0x220 [ 823.323998][T16350] ? __pfx_do_sys_openat2+0x10/0x10 [ 823.324054][T16350] ? __fget_files+0x21f/0x3d0 [ 823.324101][T16350] __x64_sys_openat+0x12d/0x210 [ 823.324153][T16350] ? __pfx___x64_sys_openat+0x10/0x10 [ 823.324203][T16350] ? xfd_validate_state+0x129/0x190 [ 823.324271][T16350] do_syscall_64+0xc9/0xf80 [ 823.324314][T16350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.324348][T16350] RIP: 0033:0x7fa46415b78e [ 823.324376][T16350] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 823.324411][T16350] RSP: 002b:00007fa464f7bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 823.324443][T16350] RAX: ffffffffffffffda RBX: 00007fa464f7c6c0 RCX: 00007fa46415b78e [ 823.324466][T16350] RDX: 0000000000000002 RSI: 00007fa464f7bf90 RDI: ffffffffffffff9c [ 823.324486][T16350] RBP: 00007fa464208c1f R08: 0000000000000000 R09: 0000000000000000 [ 823.324508][T16350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.324528][T16350] R13: 00007fa464416038 R14: 00007fa464415fa0 R15: 00007fffe4c428a8 [ 823.324572][T16350] [ 824.317964][ T30] audit: type=1800 audit(4294967314.530:41): pid=16361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1960" name="dbroot" dev="configfs" ino=70834 res=0 errno=0 [ 825.145245][ T30] audit: type=1800 audit(4294967315.405:42): pid=16377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=70882 res=0 errno=0 [ 826.989579][T16406] FAULT_INJECTION: forcing a failure. [ 826.989579][T16406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.033922][T16406] CPU: 0 UID: 0 PID: 16406 Comm: syz.5.1969 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 827.033979][T16406] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 827.033994][T16406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 827.034013][T16406] Call Trace: [ 827.034024][T16406] [ 827.034036][T16406] dump_stack_lvl+0x100/0x190 [ 827.034080][T16406] should_fail_ex.cold+0x5/0xa [ 827.034132][T16406] _copy_to_user+0x32/0xd0 [ 827.034184][T16406] simple_read_from_buffer+0xcb/0x170 [ 827.034220][T16406] proc_fail_nth_read+0x1af/0x230 [ 827.034259][T16406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.034300][T16406] ? rw_verify_area+0xce/0x6d0 [ 827.034331][T16406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.034369][T16406] vfs_read+0x1e4/0xb30 [ 827.034409][T16406] ? __pfx_vfs_read+0x10/0x10 [ 827.034441][T16406] ? find_held_lock+0x2b/0x80 [ 827.034474][T16406] ? __fget_files+0x215/0x3d0 [ 827.034516][T16406] ? __fget_files+0x21f/0x3d0 [ 827.034563][T16406] ksys_read+0x12a/0x250 [ 827.034598][T16406] ? __pfx_ksys_read+0x10/0x10 [ 827.034635][T16406] ? fput+0x79/0x100 [ 827.034687][T16406] do_syscall_64+0xc9/0xf80 [ 827.034729][T16406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.034761][T16406] RIP: 0033:0x7f922bf5b78e [ 827.034787][T16406] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 827.034826][T16406] RSP: 002b:00007f922cd80fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 827.034857][T16406] RAX: ffffffffffffffda RBX: 00007f922cd816c0 RCX: 00007f922bf5b78e [ 827.034878][T16406] RDX: 000000000000000f RSI: 00007f922cd810a0 RDI: 0000000000000004 [ 827.034896][T16406] RBP: 00007f922cd81090 R08: 0000000000000000 R09: 0000000000000000 [ 827.034916][T16406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.034935][T16406] R13: 00007f922c216038 R14: 00007f922c215fa0 R15: 00007ffc5189a8c8 [ 827.034977][T16406] [ 830.934987][T16461] FAULT_INJECTION: forcing a failure. [ 830.934987][T16461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.973032][T16461] CPU: 0 UID: 0 PID: 16461 Comm: syz.4.1980 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 830.973091][T16461] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 830.973107][T16461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 830.973128][T16461] Call Trace: [ 830.973140][T16461] [ 830.973154][T16461] dump_stack_lvl+0x100/0x190 [ 830.973210][T16461] should_fail_ex.cold+0x5/0xa [ 830.973264][T16461] ? __pfx_oom_adj_write+0x10/0x10 [ 830.973302][T16461] _copy_from_user+0x2e/0xd0 [ 830.973355][T16461] oom_adj_write+0xb4/0x260 [ 830.973396][T16461] ? __pfx_oom_adj_write+0x10/0x10 [ 830.973451][T16461] ? __pfx_oom_adj_write+0x10/0x10 [ 830.973490][T16461] vfs_writev+0x5ea/0xe10 [ 830.973538][T16461] ? __pfx_vfs_writev+0x10/0x10 [ 830.973571][T16461] ? fdget_pos+0x2aa/0x380 [ 830.973612][T16461] ? find_held_lock+0x2b/0x80 [ 830.973672][T16461] ? __fget_files+0x21f/0x3d0 [ 830.973719][T16461] ? do_writev+0x13e/0x340 [ 830.973749][T16461] do_writev+0x13e/0x340 [ 830.973784][T16461] ? __pfx_do_writev+0x10/0x10 [ 830.973831][T16461] do_syscall_64+0xc9/0xf80 [ 830.973874][T16461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.973907][T16461] RIP: 0033:0x7fa46419aeb9 [ 830.973934][T16461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.973966][T16461] RSP: 002b:00007fa464f7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 830.973998][T16461] RAX: ffffffffffffffda RBX: 00007fa464415fa0 RCX: 00007fa46419aeb9 [ 830.974019][T16461] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 830.974039][T16461] RBP: 00007fa464f7c090 R08: 0000000000000000 R09: 0000000000000000 [ 830.974059][T16461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.974078][T16461] R13: 00007fa464416038 R14: 00007fa464415fa0 R15: 00007fffe4c428a8 [ 830.974123][T16461] [ 831.482000][T16470] kernel read not supported for file /dynamic_events (pid: 16470 comm: syz.3.1981) [ 831.542927][ T30] audit: type=1800 audit(4294967321.828:43): pid=16470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1981" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 832.588945][T16491] No such timeout policy "" [ 832.594083][T16491] netlink: Failed to associated timeout policy '' [ 833.375760][T16512] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 833.377328][T16512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 833.377479][T16512] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 833.377615][T16512] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 833.377765][T16512] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 833.510082][T16520] kernel read not supported for file /dynamic_events (pid: 16520 comm: syz.4.1994) [ 833.510442][ T30] audit: type=1800 audit(4294967323.818:44): pid=16520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1994" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 834.532545][T16541] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 835.400110][ T8031] Bluetooth: hci5: command 0x0c1a tx timeout [ 835.410021][ T8031] Bluetooth: hci4: command 0x0c1a tx timeout [ 835.417299][ T8031] Bluetooth: hci3: command 0x0406 tx timeout [ 835.424044][ T8054] Bluetooth: hci2: command 0x0406 tx timeout [ 835.438930][ T8054] Bluetooth: hci1: command 0x0406 tx timeout [ 835.678968][T16553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2002'. [ 835.727076][T16553] bridge_slave_1: left allmulticast mode [ 835.763391][T16553] bridge_slave_1: left promiscuous mode [ 835.783930][T16553] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.905427][T16553] bridge_slave_0: left allmulticast mode [ 835.922266][T16553] bridge_slave_0: left promiscuous mode [ 835.940832][T16553] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.631706][T16560] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2004'. [ 837.391696][T16576] FAULT_INJECTION: forcing a failure. [ 837.391696][T16576] name failslab, interval 1, probability 0, space 0, times 0 [ 837.450941][T16576] CPU: 0 UID: 0 PID: 16576 Comm: syz.4.2008 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 837.451006][T16576] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 837.451022][T16576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 837.451041][T16576] Call Trace: [ 837.451052][T16576] [ 837.451064][T16576] dump_stack_lvl+0x100/0x190 [ 837.451105][T16576] should_fail_ex.cold+0x5/0xa [ 837.451155][T16576] should_failslab+0xc2/0x120 [ 837.451198][T16576] __kvmalloc_node_noprof+0x101/0xac0 [ 837.451240][T16576] ? io_alloc_cache_init+0x38/0x170 [ 837.451287][T16576] ? io_alloc_cache_init+0x38/0x170 [ 837.451325][T16576] io_alloc_cache_init+0x38/0x170 [ 837.451366][T16576] io_uring_setup.cold+0x3eb/0x1a89 [ 837.451409][T16576] ? __pfx_io_uring_setup+0x10/0x10 [ 837.451447][T16576] ? do_futex+0x192/0x350 [ 837.451488][T16576] ? __pfx_do_futex+0x10/0x10 [ 837.451542][T16576] ? fput+0x79/0x100 [ 837.451581][T16576] ? xfd_validate_state+0x129/0x190 [ 837.451637][T16576] __x64_sys_io_uring_setup+0xc2/0x170 [ 837.451674][T16576] do_syscall_64+0xc9/0xf80 [ 837.451713][T16576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.451760][T16576] RIP: 0033:0x7fa46419aeb9 [ 837.451787][T16576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.451816][T16576] RSP: 002b:00007fa464f7c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 837.451845][T16576] RAX: ffffffffffffffda RBX: 00007fa464415fa0 RCX: 00007fa46419aeb9 [ 837.451864][T16576] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000001d48 [ 837.451882][T16576] RBP: 00007fa464208c1f R08: 0000000000000000 R09: 0000000000000000 [ 837.451900][T16576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.451918][T16576] R13: 00007fa464416038 R14: 00007fa464415fa0 R15: 00007fffe4c428a8 [ 837.451953][T16576] [ 838.617447][T16588] kernel read not supported for file /dynamic_events (pid: 16588 comm: syz.5.2010) [ 838.754836][ T30] audit: type=1800 audit(4294967329.085:45): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2010" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 841.559277][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2020'. [ 841.746145][T16632] kernel read not supported for file /dynamic_events (pid: 16632 comm: syz.0.2021) [ 841.787125][ T30] audit: type=1800 audit(4294967298.357:46): pid=16632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2021" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 842.059072][T16639] [U]  [ 842.062402][T16639] [U] [ 842.065173][T16639] [U] [ 842.067939][T16639] [U] [ 842.080587][T16639] [U] [ 842.083394][T16639] [U] [ 842.086162][T16639] [U] [ 842.089057][T16639] [U] [ 842.108765][T16639] [U] [ 842.111571][T16639] [U] [ 842.114336][T16639] [U] [ 842.117093][T16639] [U] [ 842.138789][T16639] [U] [ 842.141633][T16639] [U] [ 842.144405][T16639] [U] [ 842.147174][T16639] [U] [ 842.229377][T16639] [U] [ 842.726449][T16644] kernel read not supported for file /dynamic_events (pid: 16644 comm: syz.5.2023) [ 842.772175][ T30] audit: type=1800 audit(4294967299.352:47): pid=16644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2023" name="dynamic_events" dev="tracefs" ino=1076 res=0 errno=0 [ 842.796419][T16644] FAULT_INJECTION: forcing a failure. [ 842.796419][T16644] name failslab, interval 1, probability 0, space 0, times 0 [ 842.831337][T16644] CPU: 1 UID: 0 PID: 16644 Comm: syz.5.2023 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 842.831398][T16644] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 842.831415][T16644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 842.831436][T16644] Call Trace: [ 842.831448][T16644] [ 842.831460][T16644] dump_stack_lvl+0x100/0x190 [ 842.831552][T16644] should_fail_ex.cold+0x5/0xa [ 842.831608][T16644] should_failslab+0xc2/0x120 [ 842.831655][T16644] kmem_cache_alloc_noprof+0x83/0x780 [ 842.831701][T16644] ? __pfx_map_id_range_down+0x10/0x10 [ 842.831725][T16644] ? security_inode_alloc+0x3b/0x2c0 [ 842.831763][T16644] ? security_inode_alloc+0x3b/0x2c0 [ 842.831796][T16644] security_inode_alloc+0x3b/0x2c0 [ 842.831830][T16644] inode_init_always_gfp+0xced/0x1040 [ 842.831878][T16644] alloc_inode+0x8e/0x250 [ 842.831915][T16644] alloc_anon_inode+0x2a/0x3e0 [ 842.831947][T16644] anon_inode_make_secure_inode+0x2f/0x140 [ 842.831985][T16644] __do_sys_memfd_secret+0xd7/0x3d0 [ 842.832019][T16644] do_syscall_64+0xc9/0xf80 [ 842.832053][T16644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.832079][T16644] RIP: 0033:0x7f922bf9aeb9 [ 842.832100][T16644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.832125][T16644] RSP: 002b:00007f922cd81028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 842.832148][T16644] RAX: ffffffffffffffda RBX: 00007f922c215fa0 RCX: 00007f922bf9aeb9 [ 842.832165][T16644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 842.832179][T16644] RBP: 00007f922c008c1f R08: 0000000000000000 R09: 0000000000000000 [ 842.832195][T16644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.832210][T16644] R13: 00007f922c216038 R14: 00007f922c215fa0 R15: 00007ffc5189a8c8 [ 842.832241][T16644] [ 843.383070][T16661] Process accounting paused [ 844.038799][T16671] FAULT_INJECTION: forcing a failure. [ 844.038799][T16671] name fail_futex, interval 1, probability 0, space 0, times 0 [ 844.085050][T16671] CPU: 1 UID: 0 PID: 16671 Comm: syz.4.2028 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 844.085110][T16671] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 844.085125][T16671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 844.085146][T16671] Call Trace: [ 844.085167][T16671] [ 844.085180][T16671] dump_stack_lvl+0x100/0x190 [ 844.085224][T16671] should_fail_ex.cold+0x5/0xa [ 844.085278][T16671] get_futex_key+0x1d2/0x1620 [ 844.085325][T16671] ? __pfx_get_futex_key+0x10/0x10 [ 844.085381][T16671] futex_wake+0xea/0x530 [ 844.085437][T16671] ? __pfx_futex_wake+0x10/0x10 [ 844.085488][T16671] ? exit_mm_release+0x19/0x30 [ 844.085545][T16671] do_futex+0x32b/0x350 [ 844.085588][T16671] ? __pfx_do_futex+0x10/0x10 [ 844.085629][T16671] ? __might_fault+0xc5/0x140 [ 844.085678][T16671] mm_release+0x24a/0x2f0 [ 844.085716][T16671] do_exit+0x675/0x2a30 [ 844.085769][T16671] ? __pfx_do_exit+0x10/0x10 [ 844.085817][T16671] ? do_raw_spin_lock+0x128/0x260 [ 844.085863][T16671] ? find_held_lock+0x2b/0x80 [ 844.085895][T16671] ? get_signal+0x7e0/0x21e0 [ 844.085937][T16671] do_group_exit+0xd5/0x2a0 [ 844.085988][T16671] get_signal+0x1ec7/0x21e0 [ 844.086030][T16671] ? io_uring_setup+0xd7/0x160 [ 844.086067][T16671] ? ksys_write+0x190/0x250 [ 844.086105][T16671] ? __pfx_get_signal+0x10/0x10 [ 844.086145][T16671] ? do_futex+0x192/0x350 [ 844.086203][T16671] arch_do_signal_or_restart+0x91/0x770 [ 844.086250][T16671] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 844.086312][T16671] ? __pfx___x64_sys_futex+0x10/0x10 [ 844.086356][T16671] ? xfd_validate_state+0x129/0x190 [ 844.086413][T16671] exit_to_user_mode_loop+0x86/0x4b0 [ 844.086460][T16671] ? rcu_is_watching+0x12/0xc0 [ 844.086494][T16671] do_syscall_64+0x4ea/0xf80 [ 844.086537][T16671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.086569][T16671] RIP: 0033:0x7fa46419aeb9 [ 844.086596][T16671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.086628][T16671] RSP: 002b:00007fa464f7c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 844.086660][T16671] RAX: fffffffffffffe00 RBX: 00007fa464415fa8 RCX: 00007fa46419aeb9 [ 844.086681][T16671] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa464415fa8 [ 844.086702][T16671] RBP: 00007fa464415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 844.086722][T16671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.086741][T16671] R13: 00007fa464416038 R14: 00007fffe4c427c0 R15: 00007fffe4c428a8 [ 844.086783][T16671] [ 846.850969][T16704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.459588][T16736] FAULT_INJECTION: forcing a failure. [ 848.459588][T16736] name failslab, interval 1, probability 0, space 0, times 0 [ 848.495659][T16736] CPU: 1 UID: 0 PID: 16736 Comm: syz.4.2041 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 848.495728][T16736] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 848.495746][T16736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 848.495768][T16736] Call Trace: [ 848.495780][T16736] [ 848.495794][T16736] dump_stack_lvl+0x100/0x190 [ 848.495844][T16736] should_fail_ex.cold+0x5/0xa [ 848.495900][T16736] should_failslab+0xc2/0x120 [ 848.495955][T16736] ? tomoyo_realpath_from_path+0xb6/0x690 [ 848.495991][T16736] __kmalloc_noprof+0xf6/0x9c0 [ 848.496025][T16736] ? kfree+0x2a9/0x690 [ 848.496069][T16736] ? tomoyo_realpath_from_path+0xb6/0x690 [ 848.496104][T16736] tomoyo_realpath_from_path+0xb6/0x690 [ 848.496150][T16736] tomoyo_check_open_permission+0x2af/0x3c0 [ 848.496202][T16736] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 848.496295][T16736] ? do_raw_spin_lock+0x128/0x260 [ 848.496352][T16736] ? path_get+0x61/0x80 [ 848.496400][T16736] tomoyo_file_open+0x6b/0x90 [ 848.496439][T16736] security_file_open+0xb5/0x1e0 [ 848.496473][T16736] do_dentry_open+0x58c/0x1570 [ 848.496518][T16736] ? security_inode_permission+0xbf/0x250 [ 848.496577][T16736] vfs_open+0x82/0x3f0 [ 848.496632][T16736] path_openat+0x21dc/0x3120 [ 848.496689][T16736] ? __pfx_path_openat+0x10/0x10 [ 848.496746][T16736] do_filp_open+0x1f7/0x420 [ 848.496791][T16736] ? __pfx_do_filp_open+0x10/0x10 [ 848.496862][T16736] ? _raw_spin_unlock+0x28/0x50 [ 848.496898][T16736] ? alloc_fd+0x476/0x790 [ 848.496957][T16736] do_sys_openat2+0x12e/0x220 [ 848.497012][T16736] ? __pfx_do_sys_openat2+0x10/0x10 [ 848.497077][T16736] __x64_sys_openat+0x12d/0x210 [ 848.497130][T16736] ? __pfx___x64_sys_openat+0x10/0x10 [ 848.497181][T16736] ? xfd_validate_state+0x129/0x190 [ 848.497250][T16736] do_syscall_64+0xc9/0xf80 [ 848.497295][T16736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.497329][T16736] RIP: 0033:0x7fa46419aeb9 [ 848.497362][T16736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.497396][T16736] RSP: 002b:00007fa4623f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 848.497431][T16736] RAX: ffffffffffffffda RBX: 00007fa464416090 RCX: 00007fa46419aeb9 [ 848.497453][T16736] RDX: 0000000000121000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 848.497476][T16736] RBP: 00007fa464208c1f R08: 0000000000000000 R09: 0000000000000000 [ 848.497498][T16736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.497519][T16736] R13: 00007fa464416128 R14: 00007fa464416090 R15: 00007fffe4c428a8 [ 848.497565][T16736] [ 848.764392][T16736] ERROR: Out of memory at tomoyo_realpath_from_path. [ 849.072723][T16731] ================================================================== [ 849.072753][T16731] BUG: KASAN: slab-out-of-bounds in do_con_write+0x3874/0x8550 [ 849.072814][T16731] Write of size 2 at addr ffff888066f93fd4 by task syz.3.2040/16731 [ 849.072845][T16731] [ 849.072865][T16731] CPU: 1 UID: 0 PID: 16731 Comm: syz.3.2040 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 849.072930][T16731] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 849.072947][T16731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 849.072969][T16731] Call Trace: [ 849.072981][T16731] [ 849.072994][T16731] dump_stack_lvl+0x100/0x190 [ 849.073034][T16731] print_report+0x156/0x4c9 [ 849.073079][T16731] ? __virt_addr_valid+0x81/0x620 [ 849.073129][T16731] ? __phys_addr+0xe8/0x180 [ 849.073179][T16731] ? do_con_write+0x3874/0x8550 [ 849.073226][T16731] kasan_report+0xdf/0x1a0 [ 849.073273][T16731] ? do_con_write+0x3874/0x8550 [ 849.073328][T16731] do_con_write+0x3874/0x8550 [ 849.073378][T16731] ? __schedule+0x28c0/0x5e10 [ 849.073421][T16731] ? __pfx_do_con_write+0x10/0x10 [ 849.073492][T16731] con_write+0x23/0xb0 [ 849.073542][T16731] n_tty_write+0x44f/0x12d0 [ 849.073587][T16731] ? __pfx_n_tty_write+0x10/0x10 [ 849.073623][T16731] ? __pfx_woken_wake_function+0x10/0x10 [ 849.073678][T16731] ? file_tty_write.isra.0+0x64e/0x890 [ 849.073738][T16731] ? __pfx_n_tty_write+0x10/0x10 [ 849.073775][T16731] file_tty_write.isra.0+0x4d2/0x890 [ 849.073832][T16731] redirected_tty_write+0xd4/0x120 [ 849.073881][T16731] vfs_write+0x6ac/0x1070 [ 849.073919][T16731] ? __pfx_redirected_tty_write+0x10/0x10 [ 849.073975][T16731] ? __pfx_vfs_write+0x10/0x10 [ 849.074011][T16731] ? find_held_lock+0x2b/0x80 [ 849.074073][T16731] ksys_write+0x12a/0x250 [ 849.074112][T16731] ? __pfx_ksys_write+0x10/0x10 [ 849.074165][T16731] do_syscall_64+0xc9/0xf80 [ 849.074210][T16731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.074247][T16731] RIP: 0033:0x7f3e0119aeb9 [ 849.074275][T16731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.074310][T16731] RSP: 002b:00007f3e02058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 849.074343][T16731] RAX: ffffffffffffffda RBX: 00007f3e01415fa0 RCX: 00007f3e0119aeb9 [ 849.074364][T16731] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 849.074386][T16731] RBP: 00007f3e01208c1f R08: 0000000000000000 R09: 0000000000000000 [ 849.074408][T16731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.074429][T16731] R13: 00007f3e01416038 R14: 00007f3e01415fa0 R15: 00007fff19ec38e8 [ 849.074463][T16731] [ 849.074475][T16731] [ 849.074485][T16731] Allocated by task 16526: [ 849.074503][T16731] kasan_save_stack+0x30/0x50 [ 849.074544][T16731] kasan_save_track+0x14/0x30 [ 849.074585][T16731] __kasan_kmalloc+0xaa/0xb0 [ 849.074624][T16731] __kmalloc_noprof+0x347/0x9c0 [ 849.074656][T16731] ops_init+0x77/0x5f0 [ 849.074714][T16731] setup_net+0x118/0x3a0 [ 849.074740][T16731] copy_net_ns+0x46f/0x7c0 [ 849.074771][T16731] create_new_namespaces+0x3ea/0xab0 [ 849.074807][T16731] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 849.074844][T16731] ksys_unshare+0x455/0xab0 [ 849.074887][T16731] __x64_sys_unshare+0x31/0x40 [ 849.074934][T16731] do_syscall_64+0xc9/0xf80 [ 849.074973][T16731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.075007][T16731] [ 849.075016][T16731] Freed by task 8164: [ 849.075032][T16731] kasan_save_stack+0x30/0x50 [ 849.075072][T16731] kasan_save_track+0x14/0x30 [ 849.075112][T16731] kasan_save_free_info+0x3b/0x70 [ 849.075144][T16731] __kasan_slab_free+0x5f/0x80 [ 849.075187][T16731] kfree+0x1c7/0x690 [ 849.075214][T16731] ops_undo_list+0x4c2/0xab0 [ 849.075262][T16731] cleanup_net+0x419/0x830 [ 849.075290][T16731] process_one_work+0x9c2/0x1840 [ 849.075340][T16731] worker_thread+0x5da/0xe40 [ 849.075388][T16731] kthread+0x3b3/0x730 [ 849.075432][T16731] ret_from_fork+0x754/0xaf0 [ 849.075462][T16731] ret_from_fork_asm+0x1a/0x30 [ 849.075510][T16731] [ 849.075518][T16731] The buggy address belongs to the object at ffff888066f90000 [ 849.075518][T16731] which belongs to the cache kmalloc-8k of size 8192 [ 849.075546][T16731] The buggy address is located 8148 bytes to the right of [ 849.075546][T16731] allocated 8192-byte region [ffff888066f90000, ffff888066f92000) [ 849.075582][T16731] [ 849.075591][T16731] The buggy address belongs to the physical page: [ 849.075606][T16731] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x66f90 [ 849.075638][T16731] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 849.075666][T16731] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 849.075706][T16731] page_type: f5(slab) [ 849.075735][T16731] raw: 00fff00000000040 ffff88813ff27280 ffffea0001e66e00 dead000000000004 [ 849.075766][T16731] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 849.075799][T16731] head: 00fff00000000040 ffff88813ff27280 ffffea0001e66e00 dead000000000004 [ 849.075830][T16731] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 849.075863][T16731] head: 00fff00000000003 ffffea00019be401 00000000ffffffff 00000000ffffffff [ 849.075894][T16731] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 849.075914][T16731] page dumped because: kasan: bad access detected [ 849.075931][T16731] page_owner tracks the page as allocated [ 849.075943][T16731] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13896, tgid 13894 (syz.0.1447), ts 648414537471, free_ts 648407996215 [ 849.076001][T16731] post_alloc_hook+0x1e1/0x250 [ 849.076034][T16731] get_page_from_freelist+0xe3d/0x2e10 [ 849.076072][T16731] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 849.076111][T16731] alloc_pages_mpol+0x1fb/0x550 [ 849.076156][T16731] new_slab+0x2c4/0x440 [ 849.076183][T16731] ___slab_alloc+0xda3/0x1ca0 [ 849.076213][T16731] __slab_alloc.isra.0+0x63/0x110 [ 849.076244][T16731] __kmalloc_noprof+0x618/0x9c0 [ 849.076274][T16731] ops_init+0x77/0x5f0 [ 849.076321][T16731] setup_net+0x118/0x3a0 [ 849.076346][T16731] copy_net_ns+0x46f/0x7c0 [ 849.076375][T16731] create_new_namespaces+0x3ea/0xab0 [ 849.076410][T16731] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 849.076447][T16731] ksys_unshare+0x455/0xab0 [ 849.076491][T16731] __x64_sys_unshare+0x31/0x40 [ 849.076536][T16731] do_syscall_64+0xc9/0xf80 [ 849.076574][T16731] page last free pid 13902 tgid 13895 stack trace: [ 849.076592][T16731] __free_frozen_pages+0x822/0x1130 [ 849.076621][T16731] __put_partials+0x127/0x160 [ 849.076652][T16731] qlist_free_all+0x47/0xe0 [ 849.076782][T16731] kasan_quarantine_reduce+0x1a0/0x1f0 [ 849.076822][T16731] __kasan_slab_alloc+0x69/0x90 [ 849.076864][T16731] __kmalloc_cache_noprof+0x2e1/0x810 [ 849.076895][T16731] snd_card_file_add+0x52/0x340 [ 849.076938][T16731] snd_rawmidi_open+0x2c5/0xba0 [ 849.076981][T16731] snd_open+0x22d/0x4c0 [ 849.077012][T16731] chrdev_open+0x234/0x6a0 [ 849.077049][T16731] do_dentry_open+0x73e/0x1570 [ 849.077086][T16731] vfs_open+0x82/0x3f0 [ 849.077130][T16731] path_openat+0x21dc/0x3120 [ 849.077166][T16731] do_filp_open+0x1f7/0x420 [ 849.077202][T16731] do_sys_openat2+0x12e/0x220 [ 849.077247][T16731] __x64_sys_openat+0x12d/0x210 [ 849.077296][T16731] [ 849.077304][T16731] Memory state around the buggy address: [ 849.077322][T16731] ffff888066f93e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 849.077347][T16731] ffff888066f93f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 849.077371][T16731] >ffff888066f93f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 849.077390][T16731] ^ [ 849.077410][T16731] ffff888066f94000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 849.077434][T16731] ffff888066f94080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 849.077454][T16731] ================================================================== [ 849.077891][T16731] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 849.077919][T16731] CPU: 1 UID: 0 PID: 16731 Comm: syz.3.2040 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 849.077975][T16731] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 849.077992][T16731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 849.078014][T16731] Call Trace: [ 849.078025][T16731] [ 849.078039][T16731] dump_stack_lvl+0x100/0x190 [ 849.078081][T16731] vpanic+0x20d/0x630 [ 849.078114][T16731] panic+0xd1/0xd1 [ 849.078143][T16731] ? __pfx_panic+0x10/0x10 [ 849.078175][T16731] ? do_con_write+0x3874/0x8550 [ 849.078226][T16731] ? preempt_schedule_common+0x42/0xc0 [ 849.078269][T16731] check_panic_on_warn.cold+0x19/0x34 [ 849.078304][T16731] end_report.part.0+0x3a/0x90 [ 849.078349][T16731] kasan_report.cold+0xe/0x18 [ 849.078394][T16731] ? do_con_write+0x3874/0x8550 [ 849.078447][T16731] do_con_write+0x3874/0x8550 [ 849.078518][T16731] ? __schedule+0x28c0/0x5e10 [ 849.078563][T16731] ? __pfx_do_con_write+0x10/0x10 [ 849.078623][T16731] con_write+0x23/0xb0 [ 849.078672][T16731] n_tty_write+0x44f/0x12d0 [ 849.078728][T16731] ? __pfx_n_tty_write+0x10/0x10 [ 849.078766][T16731] ? __pfx_woken_wake_function+0x10/0x10 [ 849.078822][T16731] ? file_tty_write.isra.0+0x64e/0x890 [ 849.078876][T16731] ? __pfx_n_tty_write+0x10/0x10 [ 849.078914][T16731] file_tty_write.isra.0+0x4d2/0x890 [ 849.078973][T16731] redirected_tty_write+0xd4/0x120 [ 849.079026][T16731] vfs_write+0x6ac/0x1070 [ 849.079066][T16731] ? __pfx_redirected_tty_write+0x10/0x10 [ 849.079120][T16731] ? __pfx_vfs_write+0x10/0x10 [ 849.079157][T16731] ? find_held_lock+0x2b/0x80 [ 849.079202][T16731] ksys_write+0x12a/0x250 [ 849.079240][T16731] ? __pfx_ksys_write+0x10/0x10 [ 849.079282][T16731] do_syscall_64+0xc9/0xf80 [ 849.079324][T16731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.079357][T16731] RIP: 0033:0x7f3e0119aeb9 [ 849.079384][T16731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.079418][T16731] RSP: 002b:00007f3e02058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 849.079452][T16731] RAX: ffffffffffffffda RBX: 00007f3e01415fa0 RCX: 00007f3e0119aeb9 [ 849.079475][T16731] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 849.079497][T16731] RBP: 00007f3e01208c1f R08: 0000000000000000 R09: 0000000000000000 [ 849.079519][T16731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.079541][T16731] R13: 00007f3e01416038 R14: 00007f3e01415fa0 R15: 00007fff19ec38e8 [ 849.079574][T16731] [ 849.080174][T16731] Kernel Offset: disabled