last executing test programs: 10m45.737096206s ago: executing program 2 (id=1078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r1, 0x311, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 10m45.522798015s ago: executing program 2 (id=1079): mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) rename$auto(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file1/file0\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x44, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x503040, 0x10) r1 = open$dir(&(0x7f0000000340)='./file1\x00', 0x1, 0x110) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c0016"], 0x28}}, 0x4c810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd96502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) linkat$auto(r0, &(0x7f0000000300)='./file1/file1\x00', r1, &(0x7f0000000380)='./file1\x00', 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d000000060006"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) setsockopt$auto_SO_TYPE(r0, 0xee2, 0x3, &(0x7f00000003c0)='$&\x00', 0x4) sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="2494a6d210080632f4e4001200", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250f00000008000300", @ANYRES32=r5, @ANYBLOB="0800340000000200"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080f4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 10m44.979195867s ago: executing program 2 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) futimesat$auto(0xffffffffffffffff, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r2}, 0x6f4) mmap$auto(0x0, 0x4020006, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r3, &(0x7f0000002740)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002700)={&(0x7f00000013c0)={0x1330, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x4}, @NL80211_ATTR_REG_RULES={0x12fd, 0x22, 0x0, 0x1, [@generic="1cc94093fea648b1857736f568bebffd963b7ade3aa5c8ca00dec676f0fadbe1e05b3abf97b652d75605ce5e8784195afe35183b6a80d427f3798f6ef1c8c203b5f80b9bf25c2408cda34de751a7091214a869a2d0a74db84a0c21b68b978535c9c8", @typed={0xe4, 0xe1, 0x0, 0x0, @binary="4804cb0007a2819a70e893d4ea1968a85721eee88e8bfcae068de5e7cd2a5534146ce4cbccaa21893732a513e10524720a1e4e0f502841138b47172c361d80c45fc0397b820957b60df35538a8c5cfb5a75418f1047ffc709e8a6dabaed116911cef6f8379809159de327cf322cc1c7dc3fc81c6d7ce215083433c9e81717dd030117d33e2ba76621c87dbe18d70f1e2954e8306e8a9a067e0993c72a4174e3b57d8c7200273f1a3af4d1cbc5927df887750b742d9900c1e989a016e630aa5f2f5ebb375870041feec771ad84e0cba91903403c436b56caf79f71a080c67192c"}, @nested={0xb9, 0x14a, 0x0, 0x1, [@generic="81972bc9fe2c139f441466124c27659cf48b5f1e15fd57aeba54593520b87a6baa19d99d42402a727f38bd9c02c3fa31ec93ace2d43fd2d841171eb336722c326a977e84027a981763f3394491191435ce449e199449041f2ef0a0e3", @nested={0x4, 0x5d}, @nested={0x4, 0x46}, @nested={0x4, 0x105}, @nested={0x4, 0xcf}, @generic="1d450f247102e7a9aa670569df5ad01cb7b7a87d902cebb3bf8e6d2e493864658a4d697be2cd298396918763a7c59f728a", @typed={0x13, 0xea6, 0x0, 0x0, @str='/dev/snd/timer\x00'}, @nested={0x4, 0x31}]}, @typed={0x8, 0x14, 0x0, 0x0, @fd=r0}, @generic="a068082245a48a91298fcdb66223fe841a1230cb37571941723e239d2311dd904e8f3a52e956eac795678e7d7eba2edc4d052b12e4853b00f659916e520aac0d76bd49c9319df2f7417543aeeab892c3f53c8a9fde5b6fe58938dd73337442bc03157919bb3e8896162202b9339a86fddb2636eb5adc234e5e1161987b924fe61d3fef4956518366e3c367f3debc21ea438e5928fb587543ef86a8ac5202ca82a10dd1cee1c46b593fb298d0dbfed631271548e30c06f7bab72eaaf3e61833e3edc5fd548babed3a117685ff4657bbc3f62e4b98757e9c8896065f176429e0350f57a4f6338b25", @typed={0x8, 0x15c, 0x0, 0x0, @pid=r4}, @generic="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"]}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}]}, 0x1330}}, 0x4000) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r8 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) write$auto(0x3, 0x0, 0x100082) readv$auto(r8, &(0x7f00000000c0)={0x0, 0x4c786f70}, 0x2) r9 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r1) sendmsg$auto_TIPC_NL_MEDIA_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000002780)={0x1610, r9, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x119b, 0x3, 0x0, 0x1, [@generic="a89e53c204a0d183b151a4ec1d61b19e703d6e2d900ed4cd37b4b61ef0df3c4c1e1212dc36adf5191db4469fc725ca8d0d93ada18ad9b2d7c0ac25fd7c8ad88a62fd47739cbc9375f2e37d2fc23fa39e60ceb10ed60c363c1d0bd5d6b7640e5f23464d5b96d954ac0e3e9e1869557f347825de1a119129fedfc5d072df4450bf11972066317885cdf385e723a343408679077368ae504299af8ff099b2bc188e4bd30a0769ad5ef39dacc15ab38356a4e12b7b04a33bb1fced727ee54eb17f8a2b61160327e2f194aed9a397f199220eec72dacdf2ad9822fcda4cfb8cefb388488289bf8cf64457d8316eae113800c1f14088448b461302fc7f8aa29d397d34f340a33371df03fe9da3191f47bfb33563ffd9e0a1b77ae7351e60807ca4658d3ef6041f03536faf92b4432a9a00f72b76c13a307632bb0645547ac0a41b648ea04157f415e5f5998f538824234bdd1b7d7a8eee39494b6972842bf38b8642acb4721205ce1b4c84738cb7cacebd1f8d45ca61b3ac56b5fa8caeb9fdefb60178cd373b232d30d75b7e54291a278cba9dc6c40313017c92de3ae4e39c07f6cba1f70bdf8b7beb8056a171786bf4e45b6eb8116d04f42ed633478f3fe2b5f17d689c3720842eea784057dd8096267a46a0d8225f9b142868300572651f5a0b55a6c19b33d02fe24e1c4728995dea8317065e34c0323b6e330e8d7389df4c9bf02c0474703f1323a29e0f000a28139dee9a942db4c505e2c1994b52834bfac3278f6ec4d346aade37e653db0000a199a3843647005b38bb8f8d6497453291ba67c825807fc589bed3f1ee097e6b848638867ceba3a84328a9fcc4e618ca12d05b85b9d13d938e0bccfdba177049543d25b2e923a0a313a3e883392aaaa7a90a093d9f58a79860a16fd3aed24d8022ba440f0c7ad9c5fcdf089708a451a5a400161d9a0e389fd095f285c1b814a6dcab942b70a919b698b2279e62764830d003447fb4056c03dd48dae571e5a7a8373425f58d7a51311657e8570527505fdb77395837f889911499f65bb6ec9508629a91ceae3403e220727bfeab38c24b19021263da693c2ae09962d0bb4ecd3c63a240d1587f79137ac51f8f108de559da92281afcab31dba8f6767073eee975e51cd214014992c5f4430134c1a0d68def5421eb06bf078c517d1268bed345576a917b5908adc50b0c9cc0d07178ac1ca402bb2bc7201e15874727479fde056089c506be8493b1df4a08f2021b1b98ededbacb64a9ee43a4f683527a377c5445a8a1367fffd9891dcb1ba7b5282893f29b8748e450636eeeabf27997eb91c875f0811b949729fc71e91bfe6409edaba02d1f57499e82aee8d1e4379b2a194116edf090894a16b81959934266932be3975f39adf32cc99d7e62edb367ac2f4177ec9614001c3a0c8b0da778314099899dff2e3c89da8ec07fcda0c91d7023a3b6307571ca74476d3058b7cda95ffa30822de00bdc097803a7fdf305766d90240bd32033003d5b46450410277ce2d80d44803ac393b03519c1a8425f495c5afdc111075b801fc7f242fb848b9fdc47b392f25abe7fce79edd82eae3acfd07ca1bfb9929d50597ce623f849e07299232a0024b154758357d95cbd82ef46de1c1b3987903e01aca9497c5f8610b7117dafe6ff0f695b007e9f12dc9e0d96bea6931879d30dc5cff40bb21755ee3e7d045cda464c06d565d5bc8b7db618b87c7a37ffdd53d1416c3f26c28cb96771c6d5c0ea21f72e30e1f1af19bbc967f139e1ab0551a348b96d068f9a5e6a84bb0bfed5e67702b3af0e55dadc20ff2c3ae9544065499359ac32f3445832f53e2b94b85374ba74f526d0e14b4a78339c3f8f07a368b753d599565aaa19fee64b0b9dbdf000830d796af8c7ec5bdffb6cdd6978e170de110972c8b418393324410a811ea617c4236a36e95bf2d2dc5d5546eea9841635322c16fe478d689d4d3e4b5db5d57b52e2ad99fb8a578e1a6fb9546083980f1cf6c556be151dce9fbeb6b0e7b4a90b8ea87c45c1b3359bf972efcf8b57d419787b697209c589acae9c6f7e0f6bc2381a34ffd5e5ee0a93f93e9d8e1c8364e5a04d0b8b6816b407946fb834d4146825baa8b87b30afe31c45de349fee1b1a688c58772d0a6b0f7a34627e8f1accd4468c9a88991cdcf53a8cd7026f4dd473c56793964bd80bc6c3f71e64352894f46e84a1ddf72fe1dc153d6a916944d5cf41644bfe3f3c89faa5debb992f6a729e02a164460262f4d90c06b14ef73adf35dc97970d95a50452fa02582cac77f216e19e1b9be3008834e6dafc41b12e25d5d68d35eede7d578c4a89a907b5411e2cb1f7400e358e02ee8b5ba3c4abdb82c1a89c85e2eaf542cf5c9f42eb9c2d6ec71949e08a758cd7d7c511ff08130ae576ba12ea289b0db3f5311f8412cb173ee9c77436fa37ebf69eb85ae96c3ffab02a7ccab8855851cb1202dcdab037b246838997f5c38fe34273718983b69651ef4eefb6f8a96424792b42a35596461c9d011a78f5b377aca97deb1942f93d35aee54d1a9a5f588e288f0c907b158074a9afba126e68fb209596447910d7e1b06094d2c156e3493655a368cea4dc583e04c0f138927bdf31eca2b56e45add3111578f0a6ea1db408f18e37768b6d5af50fc5acdf4b461cea80e172fa2e921601b7585f74f8c8ced744e166dc1827d56a8199904a825bbebfc8a2047d26e897bce487e304ccda6590381ced71a7af6269cc8344b515f0dbb2e29daf570b1f54150fdea62b53525229a4110bea520a8932b0fc3ade7c2012f7ff85d28e75cb00759b551ff9a14cf97f785e3b069834caf5cf2b7c5e785180e2a95a2d72962f11ba4b56a07f5d4c81a50010133040349d4bfafbdc97323e6a185a1424b49324219df1b77995e267bd3d36552c8888c008a8f8e6ff811a70454699bb894b2d093203d98f50071dfad112d49c2bb33245abf518854e7a79d213f91a72e9460243ca73596d4c49afc0854a4066d718edd4c7a0e55c058a2e833a91fd2c1b0f79fbba2e69d52d4075961f27b144d9915f64bbaaf626dd0151eff7afb35a1ed16d826caa39c2fedb48c19847ba6d80c0175553095ae628484bcf3d596945239fc09fea419ea91bdcc3aa95e004dda00784b797472bf07dc2c63653db5d8beb082b0438ae0887896fcc5b9e69834a0f7b962a0c1fa14d4c6008d7dbfb6e03badfca44104db777c701416347c3b206f96f5d335c7f82649f8009d2d8597cc6221238543f82c1b40ec7c0ce4b1e0e8b34a9c65f3b6087b82bb0901953b3dbeeb015f5c8bab8d374b1b70773c210599b9863fc64bb7986622645cbaddd14854626af6ac9969b43073b4724def68d255c163edd4860687574e641fd276c2fc82c8019112a0a758532779fea861263200abd9625f96f63de23e89ca870b7b5bef6beea6940151b3fc8e734e49b264d531b28c3aec5c1716b2bfb915628f384ea70dcc56deb6769824a8c1266ffd72fe8a1bcae0d1a95fa074b886623e09516c177d7ce999ab94fa08b65758a940d98bdc4670430016eba4898d10ccb8b1b670c88c835642de6f0a68552193a6e6713185b75618e2caeddd1fc2ddcf11c152961615d048fb2486b5e298ff2d35cfc7d6b88b0741cc286f07ffc938ae7d3c64ba3e01aa975c6d4d7b5a6b1ccfc8998cb1217f4494ac0bd8ae34fd3290987566b6a860e2f920d1f06cf27e183924d52dd25987767e307149197209f6e868ef651a14a11a963fee6511fef0ac8a9ba64a385f4b508d91ad3035b85b492102fcdab1ea955eaa057fc48f22e2b06967a838c51eaa9f02f14362da08e426006f89440bf3c622b0679391bdeb774aa51dc7333ebc188c99a358c4cc687d5bb96a090d55c04b035aac849fed0358bfdfd4308475a9a0937335545af757d8cb7658243c0f2db96d4879caca87c46731acd63d3d6d58c49df8bb73741d7cfcd9de878c7d1593bfb3501786e4d86ecd8f08787fd1a060168e2bc26f9745bdbeb562927375a085790dc7854718e77096c5fe6863c4995b35cb0d382e676240106baa3d78506cfccf6bf8d5a0d7501ab51148c514b087164f56b62ef8da26b6fa8eb566aa7cfa447abafbb228ad646a5e7603cd2ad04dcd6f3d8089f5e6e094b9f9ae1fc6e3f91350aaad094d2a6770d3dbb06d2402647b70d514f5cd083aa1974f7b3738e09d3789914b9c6b07935dcd5663efd85ba9dd67b3f7467e1af90c5f972d1be0b3c606bda9af4a5aa117f3d27bf41a804b0df199bd52e192c2722b8d1346eb4f8c63d18847278487084775cb271528bcf97db1b9f449a480d17d378d8ca43c0e8bd46b152b6cbf321b98b63e2339cc0a7b07315e90850967376980e52fcd01d9ebe91ded0027c757699ffc15076ea36bff51f6f5bc0dee60eb926491537eb02ed49d25de9c0ddba738cfb761b41280beb9d62452e85eb3c37df712f884331a27aac6acf68851dab5bebcbfb627c4752e8125754bbc872411209d3d930cf33031d50e4f77f699fdd771415bb189c247ac88056867e546b8e1eb6f64b3647435c3dabac55e6a05f6f639faa8c9c06440551b3a14adf7c1cce58479ad54a5cf5354e2604af7fde3e5ab8019e9a8da22c356190301574b4b4c8a8069733d037ee0e53225a35043b2d2a621f564ebe68aef24149b0e709b486ae761012b9bdb869e7cc8fd33d46a6bdd463eccf472229a6b7f4d37fce7bedeb573fe741611e78d42c9503b5234a94d1999443ab240c503fd865f8599a160357c224eb178c78b5f82ef7b2d1b544e25d8a8e8b009a63e29bbed8c2d51b3d757814fb4a5cc81403b9f0dd44d85e7a2ffe5a89becb4a200fcb2ebc81aed3b224ab171fb7c7b7518ba37fadf069e731341ce3d08a123f381655704cb20440a753eb85539b161b76bc73a981974d4d450caf780320624760c3988e65af0fa1c0488fed11ce0f5377f371ebd4f5fa4dfa9b9fa6a59eec8236872ea2392bfdf787887e9cc9c24c3e356f9e9b75f3c53bbf4549876f2013d4efd6092f349ad967865497fdae0d38ca4571db3cfb14c249fcc27b3728abede81ffcb5eea16a654e7dbb0d9f83f3b1c8b9f4e8b2f3543f596970929669be2568206021d8dd741d50f979aefdc1b7fb7c597b05379fa311dd0d8e4cc7469b48c9fdcb41c7c5d3cd70fadf2b6ba26203d864a7a3837c1e7428d2086899cd87ae3efcb0c361a1505ac267cac671d022cc1e46f02d69ed4d607ed52f9a22b01f78182d3bc26374cc60c5a80f1a2b9cf6d32776241942b91f10ee01840e5e124e12315d9ec75f46e4dc7cd23148e757754fea8b9165123bd07f7827def3ead8ddc971cfbf4659fd2c4ab6156cdcb2b078771c52698a4cf31e227d612665f5b1de7e65da59ea661ccc7944902ad4683d656b4a1b323347dae1efbf08e6c3fa9d599ad5d189772df09d5ea2c61891d37ec381374515310415a519e52dbb15c5a0228e3e6ae62a49422469b30e1e383a9c00f2f5a00f6f75fb37a9218b27a4101c1705bae5076d4681508b1a92933dc2d85954058266b20e5699111416b8b38f5771a926020b5e9857fbedef15be60a8810fe8cdb7d0dc59645674a55638645bb47b46d96e85c9926246e876822cf1be0dc7abf0cd256ab9154682a5a80699a9b79d91370a11e3f1058f3b4d647a9809a96e172635168ea4a41f4257acd08bd2a523bf6ff956c02194eaa3329dd2f513a1a0951bfc723ef34a67137bea324fac3cc3b7b033a7dad7fef85fc9d04dacb891c7f9f4214d026bfe", @generic="503fa3d8889fadcc0db4c198f7e983b00897d3d5c8adac12c842744b22eaea593d66be36716b45b7bf73b76b2f129da16dac58de88ed60c3ae08819f3d085f29f958a5a75bb0d5e1cca93ea40fd59f30752225521e55e24b2bc044685b439a87dd0dcb666ec542740237555479bce78ecf235737830939631aeabd51ec96555760a855c967a677092dd8a9bace82a66d1e04352612b0f89f5473bc69357424f505cef4385a5591a8bb0fed308ce3b67c84d3713c0bbb75f6deae945f1079b8", @generic="14669057ac13d7f8772ff5fee1a92272425cf47242056026c0ad6ff469786137f4a6321ab8c256bfd6b3c0ab2dbc8a055eeca310eb2dd44cea94f70ee6614ddeacbe06a4f85793e9ad494fdbe6ecf19926fb4dd889385d72c6fd687761aa8efc82acb2921e7bd10e9c72776da0ffc519186faee988972149bfab8a528fffc8d2a209bd07523b1c986f9d6cb74cef54cdc0e20dc6faf114fff11985ff95a717391dc3abb82ab4d4a3ee3405b9e5619f6fe14a29effd878a333c6af993a11549e5e9f8591148a34a4534007556", @typed={0xc, 0x0, 0x0, 0x0, @binary="b84279e6bc35b06d"}]}, @TIPC_NLA_NAME_TABLE={0x45d, 0x8, 0x0, 0x1, [@nested={0xa0, 0x6, 0x0, 0x1, [@typed={0x77, 0x1, 0x0, 0x0, @binary="3f41c04237ff22050600019a488de7bc455a7ddd07d5997e2fc7a46b7b9b49c6a7d5d4fe85ec310500ebb69bc297c46faaff7cafe0616fe0f1cef642c28fcfb64903a8e860ce95cbc2dabab7bbdab966791ce62f75242cbcf60ff79116adb36917167c8b00"/115}, @generic="239664a88940d0c525787b7c26a83eed8fc4d487412b424b", @nested={0x4, 0x48}, @typed={0x8, 0x12f, 0x0, 0x0, @pid=r4}]}, @nested={0x147, 0xef, 0x0, 0x1, [@nested={0x4, 0xa2}, @typed={0x4, 0x2d}, @nested={0x4, 0x43}, @typed={0xbe, 0x145, 0x0, 0x0, @binary="a9af3edd69a3acec02cd2ebec3c336523b4abdeeffa142a1cbc415164fb8427016b9d7fcdd3b257a19b1e8ff03cbc07a3a1e614b50a795cd27c86bd49bf3fd95a6aa5342a747a99571ca24da6e09395ec470f0455088a27e7b38e683443b0681ffd8555da603a403703f7440dbc1ddc42b0d54481ed96dfee9a23f3489e81efe73d37207318cfdfb884a3284d47db364e1b11ee6f9e585ea54fb5f6decb6b42b92640fd51705bcb6df212e850decf326d42c51a079668614a32f"}, @generic="220c0fc59efc11e0f7ae468ca726168d522ba695ba4c628ce331f01859fd3312a89f212534a25009f0f91c996594a1ab6426678393628f6695f1364956dd4dc545e876f68f9f370a207b4367ad911fb76620d2d4fb785976f90e83b5f1630b4e08e4f3dfe977c55207ba4e8bd1998a", @typed={0x8, 0xf2, 0x0, 0x0, @fd=r10}]}, @nested={0x20, 0x19, 0x0, 0x1, [@nested={0x4, 0x2e}, @nested={0x4, 0x11d}, @typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@private2}]}, @typed={0x14, 0x15d, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x21e, 0xe4, 0x0, 0x1, [@generic="cc478a3b6184de30b3e1b48cc3adf750ca2d542375a7b5a9424bf51677704f01604d7edcedd85bdfbdcd0bd8dd69d5d4453eb6366efe1a2716350806696230eff7b2ce198eabf929b54a384ae943bc8e36c5380e", @generic, @nested={0x4, 0x41}, @nested={0x4, 0x7f}, @generic="67ca74e3967cf939c7ea446424cc6bba4604a6706f489676c87243d51cf4dd0dd9e5e6243b853eb50b84ae1138ff0b871c48302a528e8ec928dc2dc37b56014adfcfd7498343fea3a78fbfd16f98a8083ce02c41757f1aa7761fd2d71d6aff3027bc53bfc486099fc8591a48a048fb81e8407b709fc446ef640e8877b95b943114bee3f4d968dfedd13daabc261b5a1d88b3f2816f849980bb525a86262ed0c69bcd9c62ffd0f1cce0983590f459df55e6576875859c4316b792e34603a1b328451cf8", @nested={0x4, 0x6b}, @generic="bd2f70461a1dc975b740f8f48f916c331bdf086267a07ac187a2c059c8d7e4db290043b1ee15ee41a479ffd7347a6d6fa8e7828fcc21d61906cb3f09447b9d9da9769ba28afb978342f0e66b67305930822f386bfedf6d96da702f803c4f726da9610fee4fe42c8c5ca109a14741d1f5ebf9e461ccb84d2e604848dd0cc5dbec09626afd2dcbb9c4103cfe4d0991035de13b1853efecb1ffa9fcfaba5ade2f4eb515370ad2cddafc55ecb3c4de108e4c0bfa1166781a75ddc1c1e0e5c099af6f182272c1f8155b4d", @generic="815c1ba1b413e92a6a046f86314d9be9ca098df244033faf9ad236c3fcab324436e7fd97da35df84b09519f9431cd8"]}, @typed={0x16, 0xee, 0x0, 0x0, @binary="2208772ed9834ca8f8e2e54496459d794cc1"}, @generic="36a8077bc9"]}]}, 0x1610}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x1b, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8000, 0x0) mbind$auto(0x9, 0x0, 0x8, &(0x7f0000001340)=0x3e5d, 0x8, 0x8) sysfs$auto(0x4, 0x7f, 0xa2) 10m44.041079111s ago: executing program 2 (id=1085): mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) rename$auto(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file1/file0\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x44, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x503040, 0x10) r1 = open$dir(&(0x7f0000000340)='./file1\x00', 0x1, 0x110) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c0016"], 0x28}}, 0x4c810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd96502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) linkat$auto(r0, &(0x7f0000000300)='./file1/file1\x00', r1, &(0x7f0000000380)='./file1\x00', 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a00010000000000000000000600"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) setsockopt$auto_SO_TYPE(r0, 0xee2, 0x3, &(0x7f00000003c0)='$&\x00', 0x4) sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="2494a6d210080632f4e4001200", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250f00000008000300", @ANYRES32=r5, @ANYBLOB="0800340000000200"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080f4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 10m43.428824397s ago: executing program 2 (id=1088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r1, 0x311, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 10m43.170509482s ago: executing program 2 (id=1090): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_swap\x00', 0x115280, 0x0) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000340)='/dev/binderfs/features/oneway_spam_detection\x00', 0x450002, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x9, 0x1, 0x400) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) connect$auto(r1, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x1) r2 = pipe$auto(&(0x7f0000000500)=0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2c, 0x1, 0x0) mmap$auto(0x0, 0x10000000000004, 0x7, 0x8000000000040eb1, 0x401, 0x300000000000) r4 = socket(0x29, 0xe7ede78b4d5d8d2a, 0x3) sendmsg$auto_IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="ffa7feab", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16=r2], 0x1810}, 0x1, 0x0, 0x0, 0x90}, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), r4) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00012bbd7000fbdbdf2503000000080022a2ac14141e"], 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24004800) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/thermal/cooling_device0/cur_state\x00', 0x2262, 0x0) write$auto(r6, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) read$auto(0xffffffffffffffff, &(0x7f0000000000)='\x16o\xfa\x99\x04\x00', 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x1ac}}, 0x40000) recvmmsg$auto(r4, 0x0, 0x10a, 0x8, 0x0) ioctl$auto_EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) 10m35.925516924s ago: executing program 3 (id=1107): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) mbind$auto(0xb0, 0x800, 0x2, &(0x7f0000000000)=0x3, 0x7, 0x4) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0xfff, 0xedc0]) r0 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r0, 0x0, 0x3, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0xffff, &(0x7f0000000580)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) newfstatat$auto(r1, 0x0, 0x0, 0xfffffffe) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0x1, 0xfffffffffffffffb}, {0x5}}) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x1, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) 10m34.593948481s ago: executing program 3 (id=1112): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x103b02, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000d5) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3552, 0x0) ioctl$auto_BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000025, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) mmap$auto(0x0, 0x28009, 0x4000000000df, 0xeb2, 0x401, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_bm_entry_operations_binfmt_misc(r1, &(0x7f0000000080)=""/221, 0xdd) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x822, 0x4, 0x0, 0x4) 10m28.04911512s ago: executing program 32 (id=1090): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_swap\x00', 0x115280, 0x0) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000340)='/dev/binderfs/features/oneway_spam_detection\x00', 0x450002, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x9, 0x1, 0x400) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) connect$auto(r1, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x1) r2 = pipe$auto(&(0x7f0000000500)=0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2c, 0x1, 0x0) mmap$auto(0x0, 0x10000000000004, 0x7, 0x8000000000040eb1, 0x401, 0x300000000000) r4 = socket(0x29, 0xe7ede78b4d5d8d2a, 0x3) sendmsg$auto_IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="ffa7feab", @ANYRES16=0x0, @ANYBLOB="040027bd7040fcdbdf2504000000f91703801400530000000000000000000000ffffe000000194aec91d7127b0187b358bf012ea3fa85e5dfb5696fa9a381344040d45085a8a69adc822fc599870c78bc48a261e88c2a8e4252f5b6377ca9894d967bd8b9851c65c955619334a13fa37f8c8f55e0adcef50410800a900ac1e0101cae6daa2115d5475b94546c1a59eb39aa676883a2aa6b28fb3062af542826e47735db20ad80a46b2bedeb984cb2ea98aec410d3937eff248eb127beba633e6ba620688ef86fbda6596882640df248bcfad5c84ade6a9c8107745e7f4916025aaaa278c6c4553ac98a49d6f97a073288f824e828ba570fd93804c341cab6751e8e9022b70b6cf6ee367a5d79157bed4df7f15d1b07c73864e8cc252d672e4a54f46aa28f0b2de5621025ed47436d20b3e393a1b6f2ff6168339708bbc16498004042380b41636808d00b8801400fe0000000000000000000000ffff0a01010104006e80040085807b2876790de819996d0bae314ac3b6988f4d1cc8ba44ffff000000000000c6608e2e7da2e2829c490a9e589e926aa4bc18efa0d44f083ad4797904f5ad5091e8cefb93264a2f17c4390f340e429362a9406e793e452a51aaa5e12aa5376ad64a84a1fb9b47e2345dff000000000000001d162980e8102f800110c8001f59827e0133b997ba93e2bffbc738a17432a9a46a2d7b5383af04c39a3d56d1abecba6b2e9a04dcb6cc121971f2b0d612d93c75a1cf45f6d3ed2043c2412d9037e6106a2ddeb45cf49fc8df9c53a07662a4a1598a6db0962d36f2999a99df598a81c33e0d2ff499754af6f2ffc93a8f0883727d347c13090be77a533e9d2da7309bb6b58ea73226b9e5caf39355670292c0d7fa9375b6c1e6ccdbcd360c56ad2f80780428126df2385c48f10a6b0f020c7bc938c1b5610f6ce60b2d8bbfc10397230284afadeaccfce4597199fa0e40224dd84fd1d0ce3a35cea34679bf77b8c43ad000c6023fd8e31db686553e1e5e83ad0a4e0a12cc3554887f6f9ff3cfbff06ec6d7f253532d1bfc6bf0fee332e6795ddf067edbe89622f9641ef31aa84ce468ca8e1fb9159507391e73d5ccb4893dae6b635746c82d07e392f0aed72b0f261f3c957bb994b8a46e20298438582fb6e5cb8214629250798fb5edc8c2d27a0a3dff271c0619092205caa2adb560265b94dcf6062dc9e8afe9fd5e38663a9a7ccd84ba71997031852a4885da211e46a06cb4a2e82f50c6e77e0614277b2fe14aa17f41516289583733f302246d48f417114513d24ca9e6fa4183c23708be9d9de55d891f2519f6d2485f1693bbd7f79a0992dd81bc99dc4b940b044adedb087acb9ecef7c1ebb615e5e3201cea3bbcecae80c21f4fef35aa963e10af710cb470aa0fa685571c1b3910b55da534d6816b7e3865bc0a90ff47b5519e6ea221e004cf16db0453d725462867c400df3b84c24c8f990d492ec9cc4fb80ea4ad26e758b534f8430c84671a6002d79a7c47684be133ab87f83a604f4765f265d34778883963ccb6cdf94ce35b4fb1b4016447adb4e16a5597599db826c865e003870c1216000a900a0a7fb4c2026e51e93c4d74b842268ab690441fa56e0bc707b2552cb0d7e2809c8b4466af5ea368c8f19186ebfa09af01f9b78f2acd8e9c03c6d375db4f5243c7e51f30f133828c7298c62010639105332e24dd4c9c9eb3c162079350bf2084b3e252c115889f5ab2e06dc951c63143ad83d183f1b3192d72986b3c64b2a8d48c422791f287497bbe73183039e3d05ce7678802453d411c67376da46e02e813a7d68de3a026ea997ce2442edc1ee7acd38d0df4ea6ee1837897ffbf934c559b4c2212e783d50d4dc20ba99462033e0a1041d9ef9ad0a2cb6a3c37d712b826ffdb25565dbb3763d697b9c1d56840e2a89e631b46477a43cb5d4d48b0784301246a2d61d6d69a9e32958cc4bb7e7957515838116347b2b1467cf8636cb14ebee01e6e34b33fcef3431f36693bf733eb4412ec05d41c9d26663a43fcce86131610c80a1bbc5acc7a43fd2a226852d2557f0daf95082e506ce8c60d1593a5cbd42a7665b34f25d277c0d207037448f3a750d47ac9d0c82ab01a8a942a0e49931793cd06bb0576f3d7867667af7c827785f57e723c6915b5bf513a5411fe8dc303f575dd3ad1625bd1fcf45fd277374b83a4ac832222efa571c975855d10ccaa15a99789a2f3d70a8bcbbe3584ae3f566ca58a81cca82593847e59767c53a3088996262c7beaa5f775d6a1eba7b50f77753090da6c0bae5aa606f878bd90eb4444357fc4aa43ad0c7b2207e110953f11504a5233f9b08fe43e4b587ce579ef76bd63d5c05371651f4d2e8de54445a05cd5b61b7fbe7b183233c68a97bfa29fc4eab93d5fd06123cd5227ca82f1b0b0f069ae6a66c34285c0ac7dca093d38685c6260898c64570b9ca155251381ced6cc558bbbba8458be30997e722734b44c2a7343db19e0792f6b93780c1b1a16095342188d8495e5d2058fdb4d49dd8bcbd4bb4cda9ea32e9d974132e9007c22611ec937249aba876e000f925ffcf3233658cf3787ff4537aa8e0023a9e24fafd6fdeec32c690c94a6f138fe632a71e861e82af8e7b213bf306e0e43f271a7b537746570feaf2fc027e614dd0d0f9016b8f88b1c071ebe0d3199f323e93da6", @ANYRES16=r2], 0x1810}, 0x1, 0x0, 0x0, 0x90}, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), r4) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00012bbd7000fbdbdf2503000000080022a2ac14141e"], 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24004800) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/thermal/cooling_device0/cur_state\x00', 0x2262, 0x0) write$auto(r6, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) read$auto(0xffffffffffffffff, &(0x7f0000000000)='\x16o\xfa\x99\x04\x00', 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x1ac}}, 0x40000) recvmmsg$auto(r4, 0x0, 0x10a, 0x8, 0x0) ioctl$auto_EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) 10m22.217955017s ago: executing program 3 (id=1145): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 10m21.916680341s ago: executing program 3 (id=1147): r0 = getpid() gettid() mmap$auto(0xfffffffffffffffe, 0x100000400008, 0xdf, 0x9b72, 0x2, 0x9) r1 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) ptrace$auto_ARCH_SHSTK_ENABLE(0x3ff, r0, 0x4, 0x5001) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000200)="fe0dfcbb9eb4c32b279ecfd785ce376b40c38258db4854a6204acc4588e9b73df2a1d18c689e11499e7a5526953ffcfbb12057e3f5efd9fd4d6f3cd8e079af6d4588e7f90434feff5700c044857a4064acca22899ed08d42e319886d18610bfaf0c9308b725d6b1f904472c9df982691970b2ff4f7dd6fa7b481d78c16db58a8ad9d56a1ee3aaae26b90e346a0125779db3885f087f0e5bede57b27c3fc014cae6117978fde7ebe104278c6e4e7046bee05d3a2026dacd662744742fd40efb4fb29b530d0aaa5cc781211f8e95e49de0058d69edf8c689b883f62f5252a3e584452ba4d45c5d18bcb3941c892ff0ec0a921c1a931a71527b23da82331dc8b4affbf4953c7dfde5a503bb9645a56e085b028acf81053e1f353a20eada6ee4806591eeb94d936df91de39139d3dc384437", 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0xc}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000004) sendfile$auto(0x1, 0x3, 0x0, 0x74c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x40000106) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) write$auto(r2, &(0x7f0000000180)='\xc5\x95\x1d\x1c/audii\xdb?\x0eHuw.[.\x8b\x9c\xec\xa3\t\xf7\x8d\"xi\x19\x9f\xb9\xe4#\x97\x9fT\xe6\n\x7f\x17zk\x99,\x99lBw\xaa)\x7f8\xa7\xea\xdc\xd3\x0fb\xb1\x9b\xfa\xbf\xb5X=X\x82\x94_\xd8\xcdC\xa9\xa8\xda\x8cc\x8b\xff\x00\x00\x00*Ug\xe9\\M7\xf1\xfa\xf0wk\xda\xa7\x00\x00\x00\x00', 0x100000a1d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r3, r3, 0x0, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') 10m21.560888457s ago: executing program 3 (id=1150): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x2008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x55) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) io_uring_setup$auto(0x7, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x71, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 10m20.490985117s ago: executing program 3 (id=1152): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0003"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc7c, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 10m19.694666728s ago: executing program 33 (id=1152): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0003"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc7c, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 3m49.344729578s ago: executing program 1 (id=2137): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/io\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f00000051c0)=""/103, 0x67) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4a, r2) ioctl$auto(0xffffffffffffffff, 0x89f3, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="14", @ANYRES16=r3, @ANYBLOB="00042d2ab3c60d9447acec9703a36dbd7000fbdbdf2521000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x20004004) socket$nl_generic(0x10, 0x3, 0x10) r4 = mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5\x01\xd4\x14', 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mprotect$auto(0x0, 0x8000000000000001, 0x8) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x64096fff) write$auto(0xca, 0x0, 0x7d) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x143382, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r4, @ANYBLOB="13002ebd7000dddbdf250200000008000300", @ANYRES32=r5, @ANYBLOB="05003d005c"], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r6 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC1D1c\x00', 0x40001, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(r6, 0x40084146, &(0x7f0000000040)=0x80000001) 3m43.05358454s ago: executing program 1 (id=2159): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid$auto(0x4, 0x8) tkill$auto(0x80000000000001, 0x7) r0 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r0, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) ioctl$auto_RTC_PIE_ON(r0, 0x7005, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x29, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x891b, 0x24) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m41.781309684s ago: executing program 1 (id=2164): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/cpu/cpu0/topology/die_cpus\x00', 0x41200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000010c0)=""/4096, 0x1000) write$auto_trace_clock_fops_trace(r0, &(0x7f0000000080)="f1622c7707f28644774bfa8128d7a7b22ba7c1c07c15b7b26c95118345203706e6726ba13c99c74c3286ee23694ed03581c45ee96d005146904c40e092570defe3003482b1", 0x45) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f00000001c0)="2c2a87a67a150dbe68f4e47ccb3697e3ed40ddd2b57b103594276d2294e01ecc48946464e7e062b334fee1efdaf79783e184b520850671d649e8545fb887b4154bcc175d8c1bc06ae4af51edefa4fde163a5876ad908ac85e3f00b516ccca2a1a580c1e9ae1a81552e49b798808792b51267656eed7e542593ddd84154a712305e8baa8f47f741c8095483f04a1c", 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xad5}, 0x8, 0x2000004, 0x8000000006, 0x15) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0x0) prctl$auto(0x8000, 0x2, 0x0, 0x8001, 0x20000a) unshare$auto(0x40000080) 3m40.991856833s ago: executing program 34 (id=2164): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/cpu/cpu0/topology/die_cpus\x00', 0x41200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000010c0)=""/4096, 0x1000) write$auto_trace_clock_fops_trace(r0, &(0x7f0000000080)="f1622c7707f28644774bfa8128d7a7b22ba7c1c07c15b7b26c95118345203706e6726ba13c99c74c3286ee23694ed03581c45ee96d005146904c40e092570defe3003482b1", 0x45) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f00000001c0)="2c2a87a67a150dbe68f4e47ccb3697e3ed40ddd2b57b103594276d2294e01ecc48946464e7e062b334fee1efdaf79783e184b520850671d649e8545fb887b4154bcc175d8c1bc06ae4af51edefa4fde163a5876ad908ac85e3f00b516ccca2a1a580c1e9ae1a81552e49b798808792b51267656eed7e542593ddd84154a712305e8baa8f47f741c8095483f04a1c", 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xad5}, 0x8, 0x2000004, 0x8000000006, 0x15) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0x0) prctl$auto(0x8000, 0x2, 0x0, 0x8001, 0x20000a) unshare$auto(0x40000080) 10.361716142s ago: executing program 6 (id=2684): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/io_timeout\x00', 0x129882, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) pwrite64$auto(r0, &(0x7f0000000180)='-+}U\x00', 0x8, 0x8) fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/projid_map\x00', 0x101002, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0xf87, 0x20009, 0xdf, 0xeb1, r2, 0xfc) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = waitid$auto(0xffff, 0xffffffffffffffff, &(0x7f0000000340)={@siginfo_0_0={0xffff, 0x3, 0xc6b6, @_sigsys={&(0x7f0000000240)="eb74b5f25389f63f22e757a3456edca80084c79e57f3d4c8d71fe627289689cd8b491226d6fa2d61be6f587ce072d8df54a94ca27cc6a6748bf941f4a331574cb63f1d670923edae1edf07c1f281ce32e8fab775378ddd3e2389256047b663fac501ab407291d8f925eb6b876ec1110fde7425354c5b03a477e7ae3a2e46729db098caf6103ca7f6b5857c3446444b3dae3c2ffe7998b3d6f01583339c2d129e1519f4685a3e675fa90a32a4d8796fc3ec5adeabc58fa1a7067321baac89dec7b900ae", 0x7, 0x9}}}, 0xfffffffc, &(0x7f00000003c0)={{0x9, 0x27d}, {0x8, 0x401}, 0x5, 0xd45, 0x1, 0x9, 0x0, 0x19, 0x2, 0x9, 0x1, 0x2, 0x8, 0x6, 0x2, 0x9}) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @empty}, 0x6b) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000480)='ns/time\x00') r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000000)=""/65, 0x41) getdents$auto(r4, 0x0, 0x401) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) read$auto_rtc_dev_fops_dev(r6, &(0x7f0000000040)=""/21, 0x15) r7 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r1) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r7, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) r8 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/bonding/bond0\x00', 0x18b000, 0x0) pread64$auto(r8, &(0x7f0000000000)='/proc-NesH\x1fk\xdd\x00\x00\x00\x00\x88\x00\x00\x00\x00\x00:\x19\xf4\xe2\xb7:\x81\xf8\xedl\x9d\x9a\'\xf8D,\xc0x\x1d\xf5JE\xcd7\xc3^\xbc2\xc7\xbf\xe5\x7f\xb93 \xcd${!\x9a`\x96\x86\x96D|\xf0H\x8c\x05:\xae\xa6\x88x@\x97E\x92f\xe3h\x05\x0f9\x9e\v\t\x18\x8b\xec\xd7\xe81\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0x5, 0x4000000000009b72, r2, 0x8000) brk$auto(0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r3) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="17a9e6190ee9485ee1488b03d6727d", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf25030000000400"], 0x18}, 0x1, 0x0, 0x0, 0x20008041}, 0x2000c040) r5 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r5, 0x0, 0x80000001, 0x0) prctl$auto(0x9, 0x287b, r5, 0x4, 0x2) getuid() waitid$auto_P_PID(0x1, 0xffffffffffffffff, 0x0, 0x8, 0x0) 6.049363676s ago: executing program 5 (id=2698): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x4) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2040}, 0x51001) ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, 0x0, 0x121002, 0x0) read$auto_transaction_log_fops_(r5, &(0x7f0000000100)=""/3, 0x3) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) sysfs$auto(0x2, 0x23, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0x0, 0xcbf, 0x7) write$auto(r6, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) ioctl$auto_NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) mseal$auto(0xd, 0xe751, 0x200) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) 4.862547693s ago: executing program 6 (id=2699): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x4) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2040}, 0x51001) ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, 0x0, 0x121002, 0x0) read$auto_transaction_log_fops_(r5, &(0x7f0000000100)=""/3, 0x3) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) sysfs$auto(0x2, 0x23, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0x0, 0xcbf, 0x7) write$auto(r6, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) ioctl$auto_NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) mseal$auto(0xd, 0xe751, 0x200) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) 4.456156781s ago: executing program 0 (id=2700): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) fsconfig$auto_HIDEPID_INVISIBLE(r0, 0x2, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0), 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) pwrite64$auto(r1, &(0x7f00000000c0)='/dev/virtual_nci\x00', 0x7, 0xc) pwrite64$auto(r2, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x2) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram1\x00', 0x20001, 0x0) ioctl$auto_BLKRRPART(r3, 0x801070cf, 0x700000000000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$auto_F_GETFD(r0, 0x1, 0x6) r4 = socket(0xa, 0x3, 0x3a) close$auto(r4) io_uring_register$auto(r4, 0x8, 0x0, 0x0) epoll_pwait2$auto(0x3, 0x0, 0x4, &(0x7f0000000040)={0x400000001, 0x7ffffffffffffffe}, 0x0, 0x7ff6) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x801, 0x4f46, 0x6) 4.377479078s ago: executing program 4 (id=2701): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) fsconfig$auto_HIDEPID_INVISIBLE(r0, 0x2, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0), 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) pwrite64$auto(r1, &(0x7f00000000c0)='/dev/virtual_nci\x00', 0x7, 0xc) pwrite64$auto(r2, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x2) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram1\x00', 0x20001, 0x0) ioctl$auto_BLKRRPART(r3, 0x801070cf, 0x700000000000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$auto_F_GETFD(r0, 0x1, 0x6) r4 = socket(0xa, 0x3, 0x3a) close$auto(r4) io_uring_register$auto(r4, 0x8, 0x0, 0x0) epoll_pwait2$auto(0x3, 0x0, 0x4, &(0x7f0000000040)={0x400000001, 0x7ffffffffffffffe}, 0x0, 0x7ff6) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 3.894425909s ago: executing program 5 (id=2702): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async, rerun: 32) socket(0x2, 0x801, 0x106) (rerun: 32) r0 = socket(0xa, 0x1, 0x84) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x2140, 0x0) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0) (async) r1 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) (async) unshare$auto(0x40000080) (async) setsockopt$auto(r1, 0x200084, 0x7b, 0x0, 0x13) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) (async, rerun: 64) getsockopt$auto(r0, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) mremap$auto(0x4000, 0x4, 0x13fd7, 0x3, 0xfffff000) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket(0x1d, 0x3, 0x1) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80802, 0x0) 3.109106185s ago: executing program 0 (id=2703): acct$auto(&(0x7f0000000400)='E\xee\x05\xee!#\x0e\x01V\x146Z\xac\x17\xb7\xa8\xb3\x02\nZ\"\x1d\xfeF\xaa\xf8\xb6\xa6@\x91\'/:\xd0-\xb6Q\xf4\xae\x1b]\xf2~1\x06j\x8c;\xf6\xcdY\x80\x00v\x00|\xcd\xffAK\x84\x05.\x00\x80\x89T;\x02~\xba\x15f.\x05\xd6\xa2\xd3\x99$\x9e\x16P\xdd\xb9\xc75\xaf)\xbf/\xb9\t|\xd5_\xd5o\x0f\xb6.\xb4\xa2\x85\x9c\x83N\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb0\x8d\xd3\x16+$\xb0\xf2d\\\xffI\x8d\x88\x04\xcd&E\x81<3\xc4kL\xd2Zg\xaa\fUp\xd0\x1fs\a\xa1\x18\x11\xd4\xbc\f\x844\xadf') mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040810}, 0x4010) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r2 = socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) 2.675715194s ago: executing program 0 (id=2704): socket(0x2, 0x1, 0x106) madvise$auto(0x0, 0xffffffffffff0003, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x11, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x0, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r2, 0x40044620, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3d076b8d81e9638199ee2cd10f574bb1c9e8fc56902159a8ee747edcb1f3170cc316a92dad317e4ab4e30eb330c722df8be430f8", @ANYRES16=r4, @ANYRES32=r0], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) mmap$auto(0x800, 0x2000d, 0x4000000000de, 0xeb1, 0x401, 0x8000) r5 = socket(0xa, 0x801, 0x84) getsockopt$auto(r5, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r7) close_range$auto(0xffffffffffffffff, r3, 0x7fffe) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x3, 0x0, 0x3) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf257a00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x2400c815}, 0x804) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000300)={@_si_pad}, 0xdf, &(0x7f0000000380)={{0x9}, {0x80000001, 0xfff}, 0x1, 0x9, 0xffff, 0x68c80, 0x4ec9724d, 0x6, 0x3, 0x6, 0x2, 0x1, 0x1, 0x1d56, 0x7, 0x5}) 2.176347254s ago: executing program 4 (id=2705): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x149402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000)={0x1}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/use_zero_pages\x00', 0x101082, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) write$auto_bm_register_operations_binfmt_misc(r1, &(0x7f0000000080)="cdb859", 0x3) close_range$auto(0x2, r0, 0x9) socket(0x29, 0x2, 0x0) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xd, 0x9816}, 0x7f, 0x0) ioctl$auto(0x4000000000000c8, 0x401054d6, r3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptya9\x00', 0x181400, 0x0) mmap$auto(0x200000000000004, 0xffffffffffffffde, 0x3, 0xeb1, r1, 0x18008000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0) getsockopt$auto_SO_BUSY_POLL(r4, 0x29, 0x3a, 0x0, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r4, 0x0, 0x20000810) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(0xffffffffffffffff, 0x0, 0x4000010) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) r5 = epoll_create$auto(0x2) epoll_pwait2$auto(r5, 0x0, 0x8, 0x0, 0x0, 0x8) epoll_pwait$auto(r5, 0x0, 0x9, 0x1, 0x0, 0x8) r6 = gettid() rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) rt_sigtimedwait$auto(&(0x7f0000000100)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) kill$auto(r6, 0x45) 1.570328725s ago: executing program 0 (id=2706): r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0x2002, 0x0) mmap$auto(0x0, 0xfffffffffffff800, 0x4000000000cf, 0xeb1, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mbind$auto(0xf4000000, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) write$auto(r1, &(0x7f0000000240)='802\x00C\x00', 0x3) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x10, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/ip_mr_vif\x00', 0x10800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) mmap$auto(0xffffffffffffffff, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8001) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xa800, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000200), 0x4d0d40, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x1, "231d0e8059209f6bd4aaface0400db9c791daf044ae6ff16ec30def80ce28999", @inferred=r1}) ppoll$auto(&(0x7f0000000180)={r2, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x8) close_range$auto(r3, r0, 0xfffffffc) fanotify_init$auto(0xa, 0x420a) pipe$auto(0x0) dup2$auto(0x5, 0x4) openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x928c2, 0x0) 1.569335624s ago: executing program 5 (id=2707): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x28c83, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) ioctl$auto_NS_GET_USERNS(r2, 0xb701, 0x0) ptrace$auto(0xf, r1, 0x1, 0x4053) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{@inferred, 0x0, 0x7, 0x9, "86362c746689ae16423d49e2a5fac50222481f59df3b96ecafc32c611fb62b6a5bf25912cc9eef3b7eecb84e", @inferred=r1}, 0xfffffff8, 0x0, 0x8, @inferred, @enumerated={0x0, 0xe, "063c3f8c31bd55e86cf2db8ad963f8acde068a5d66b9161c0c0e45a531cfd4466ec74dca749cb5dbee3aa6411af4226fea81fed17eb5c3fa4a3fdfef2115a1cc", 0x7, 0x3}, "64308865bdb8fe205493f2f3569408bb7d10494bf8fc846ceedb75db3060a310a150948a4f3363f2b46b45d914b5f8bb0ef5f2140011508bb0bc88e4d72c9001"}) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r0, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x0, 0x0) timer_create$auto(0x3, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) 1.417544097s ago: executing program 6 (id=2708): r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0x0, 0x0) mmap$auto(0x0, 0xfffffffffffff800, 0x4000000000cf, 0xeb1, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) write$auto(r1, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/ip_mr_vif\x00', 0x10800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1b, 0x7, 0x1}, 0x0, 0x10002) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999", @raw=0xfffffff9}) ppoll$auto(&(0x7f0000000180)={r2, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x8) 1.001652181s ago: executing program 4 (id=2709): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) (async) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x26040, 0x0) getsockopt$auto_SO_MEMINFO(r1, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x10) (async) setresuid$auto(0x0, 0x7, 0x8080) r3 = setfsuid$auto(0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) ioctl$auto(r4, 0x541c, r2) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = socket(0x10, 0x2, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r8 = getpid() process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0xffd}, 0x3fffffffffe, &(0x7f0000000180)={&(0x7f0000000040), 0x40000000001243}, 0x4, 0x0) (async) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000140), r5) (async) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f0000002980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002940)={&(0x7f00000029c0)=ANY=[@ANYBLOB="201700001dc43fb611de50202a0f106480835748cf199638127fbad2a14994b9cc0182d5ebdb1bb84eb79edb93f1f64ada", @ANYRES16=0x0, @ANYBLOB="00082cbd7000ffdbdf257a000000200126800800010002000000d10003002114e618ad143b063189e014ef00622da902972c3a02b7197691ed87840f0fc58b003c83b53963b4482bf03a893a4698ab8c49bedb49c279f5d9b1f14390092f1e998ad32c7c0c2ce24723cf50e194d79f8c49e2492e3a5038975af046793d9c93fe695f6ff085c708ed51e23417da310f2a719feacab65e247e07a212ce622089e2239a97dcfb0c1bf372aeddddef1b141f81a91fccdb473b47f1ab7448f2196c1e519ebc5718862f1a03d1aa0fce1a264674364eda9e7d7ab88e6e605ae3fb7d1e22c3c818da0d18808de95f0000000800020002000000080001000080000008000200ffffff7f08000200020000000800020003000000080001003f030000080001000900000008000100ffff00000600650003000000d2154580ebd4bb3b913fc7330ba8608d452c003477e406de03d59f533eb32ba95e6cf80c00f8000000000000000000302b5e6c0a033ed0f541292fbd5b62ab3294fc985ffd7a85f7e2c17dd8da2ef00ba494a86e6a00365831cec37a61e0a0b5a45cd4b45bafdc48ab90b47936eaee8ff90e09e362ce7b1be1c9e265f9be442cee7f2a90828e77c4fbf49a8a959206f2b4bb63e72f4e10e9d4cb9012aae8c10a1a26a3db01d3bdf2957f321d79eea637da5842e498e0c946ed3807242856a1b5e87b0089ec431f3e4a73937b692508b09f147ffe23d1c68bf4e8a2daaa314b11ddd79938667670fecc60d58ae40aac2c60e9740c9a01b8766c9ca1441e2f3b1380d5f23164b50edf8839c95f9dc13e249b7070a3fa43943e68947cf4d7394d7ae0cc66d8298f1c0053800f0094002f6465762f7474793132000007001600232d00000800eb00", @ANYRES32=r8, @ANYRES8=r3], 0x1720}, 0x1, 0x0, 0x0, 0x4000005}, 0x40) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x501c0, 0x0) r10 = ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r9) (async) r11 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0x42, 0x0) write$auto(r11, &(0x7f0000000180)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\xe5\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\xb2^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dT\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xdc*\x1dV', 0x5) ioctl$auto_KVM_GET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x400000f1, 0x400, 0x9}]}) (async) mmap$auto(0x1, 0xff, 0x5f, 0x9b72, 0x2, 0x0) io_uring_setup$auto(0x59, 0x0) (async) ioctl$auto_EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612, 0x0) (async) r12 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [0x0, 0xfffffffe], {0xd74c, 0x1, 0x2, 0x29f, 0x7, 0x7f, 0x101, 0x6, 0x5}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r12, 0x9, 0x820e, 0x8b, 0x0, 0x18) (async) write$auto(r0, &(0x7f0000000080)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6\xba\x00\x00\x00x\xb3;c\tP\x03\x84\x97,WM\xca\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\x00\x00\xafD\x01\n\x00B', 0x9) 976.936302ms ago: executing program 5 (id=2710): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) fsconfig$auto_HIDEPID_INVISIBLE(r0, 0x2, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0), 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) pwrite64$auto(r1, &(0x7f00000000c0)='/dev/virtual_nci\x00', 0x7, 0xc) pwrite64$auto(r2, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x2) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram1\x00', 0x20001, 0x0) ioctl$auto_BLKRRPART(r3, 0x801070cf, 0x700000000000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$auto_F_GETFD(r0, 0x1, 0x6) r4 = socket(0xa, 0x3, 0x3a) close$auto(r4) io_uring_register$auto(r4, 0x8, 0x0, 0x0) epoll_pwait2$auto(0x3, 0x0, 0x4, &(0x7f0000000040)={0x400000001, 0x7ffffffffffffffe}, 0x0, 0x7ff6) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 858.865375ms ago: executing program 5 (id=2711): r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x7fffffffffffffff, 0x0) r1 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x1007ff, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940800002000076cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x800000e5, 0x3}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) pwrite64$auto(0xc8, 0x0, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x0, 0x4b, 0x0, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) read$auto(0x3, 0x0, 0x80) connect$auto(0xffffffffffffffff, 0x0, 0x53) write$auto(0x3, 0x0, 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r2) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) write$auto(r3, 0x0, 0x6) write$auto(0x3, 0x0, 0xfffffdef) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x0, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r1}, 0x92) 715.360475ms ago: executing program 4 (id=2712): mmap$auto(0x0, 0x20009, 0x3c00000000000, 0x12, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xffffffffffff10d6, 0xeb1, 0xffffffffffffffff, 0x80000000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="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") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r3, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x6}, 0xd9d, 0x966, 0x3, @raw=0x404, @enumerated={0x8008, 0x80000000, "033beddd1805dc258af41c3905ba65603854aabf973f037f0896c0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd496600e0ff00", 0x44, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1e61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) waitid$auto_P_ALL(0x0, 0xa44e, &(0x7f0000000200)={@_si_pad}, 0x9, &(0x7f0000000480)={{0xb4a, 0xffffffff}, {0x1, 0x6}, 0x8, 0x2, 0x7, 0xfff, 0x4, 0xfff, 0xfffffffffffffff9, 0x3, 0x1, 0x8, 0xf, 0x1, 0x3, 0xfffffffffffffffd}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 502.238525ms ago: executing program 0 (id=2713): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x1) r1 = getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0x24084005) write$auto_nsim_pp_hold_fops_netdev(r1, &(0x7f0000000200)="0b320dfa7185611e6b4412b5eeff19e3d5221be2af479a690c2175e72639dc17b4558eb6fefc19f9ad408bf0960bb3b06ad408932caccd355e0e2272624cfc07b35a4ebdf1a719dcc26abee5a879d099b77e52b1397ade27e6f11050736eec41077a0f2ae9d47d38c8240961ba0eccc1884092724c40a59be6f0ff4368f9acb7210bc9500ecd300afbc044017dadb6640b27a23a981ce6704b8bf0398f7cac9658b2e75a5d32881f858095dc6a79a7e683abd8a9c1ba9bb6f2b482063d8eb4a281cb160e8a37249b22", 0xc9) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) getsockopt$auto_SO_TIMESTAMP_OLD(0xffffffffffffffff, 0xd, 0x1d, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x4a83d047) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003800)=""/168, 0xa8) 364.743648ms ago: executing program 6 (id=2714): mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000080), r4) msgctl$auto_IPC_INFO(0x10, 0x3, &(0x7f0000000180)={{0x6, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0x6, 0x1}, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x7, 0x7, 0xffff, 0x5, 0xfffffffffffff800, 0x7, 0xc, 0x0, 0x6de, @raw=0x5}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_MM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) io_cancel$auto(0xa, &(0x7f0000000200)={0x4, 0x8001, 0x1c42, 0xac2, 0x800, r4, 0x2, 0x3, 0x9, 0x0, 0x2, r4}, &(0x7f0000000240)={0x5, 0x3, 0xfffffffffffffffd, 0xf}) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe928c4b17fffe371}, 0xc, &(0x7f0000000780)={&(0x7f0000000280)={0x4f4, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x5}, @NLBL_CIPSOV4_A_MLSLVL={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @uid=r6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4bb, 0xc, 0x0, 0x1, [@nested={0xfd, 0x10d, 0x0, 0x1, [@generic="492d1e1be23638dcffc6ed2268d64d12b1fe4b738b2f62735eb307fab87632cf03655128fbb147ad115a4b44419585437ed8e9175a8336b424886233e6f03c1370f3213e9f9a391a5927c0f494f2ebfe3dae2b5d501f3e78b39cc23110c427a656d4962417c4652330e7ff529c172f56f3fbbbfd30a70d454826d228160d883208c65e12fb3c6c2330536bbe5fdd5d21dfcbb75a38e3e12dff74a1f50a62436ccd585d2ee33c8e760c5490fb042422364a494b094d63dcb8dab4cb218e6217473b5597b3abf2b6a5e86a3c885dc34993f026d6498d00ea1fed2b7fd9c8b24b794b285359330c6646ac71392258c4ef552231ccffcd265e7e53"]}, @nested={0x18, 0x103, 0x0, 0x1, [@typed={0x14, 0xea, 0x0, 0x0, @ipv6=@mcast2}]}, @nested={0x2b7, 0x98, 0x0, 0x1, [@typed={0x4, 0x14f}, @generic="a1cad58d90104c51515940566d059dcafb80be5e2bfee5c5949a3815ce5dddedf5223629e86148b7087ada33e5d51f72d683aff124b5845e0b0a082d25bb45c9f9cd6c23d50f951938e1e511a17373c1ae3098b9197e1236d5e390c1981f32b4db4f691227f02bccfa635e09ca8d0e2c85b903aaab9a9f091421456b56764a31dcd3269d4a66a51c8451b9b3792639eaea61b48f53dc683b82820bc43e22995db8a41271e1ca77245409e567c7fabf18d981431d9b99f829cbf14528c76b", @generic="01873f3ff6b51c0c982519ac5af48959cfc7db0698158bf4919ed9caf2c0e7ec74db7bc61539ecc2ef3a2b8a61b7a8ecb2b9d438fd", @nested={0x4, 0x93}, @generic="e03d707bdfdcd747a045f24012f321a6e5ee371e7ec1d4acce0715e77f6fd924b407df0ec2b954f80495baedbb0f5891bfaf5b6807c64ebe143793d08a8aa9aa9be75462715c3028d603f3db5418b0646a95d89810cbfc6c25a927e53793cba00abb25a7c905cf6033584c0d03105ea71adb290aa88ebc59e9cb86e0227b35bb6fc14560e9b86a831adb6e62c4d378396296fb0f7f0db7e421337f321134dda561659b4449e01ec07a8ebc8e0c0fd1d0be2799031fc040a0abdced184d223928fedc65f7234f730b04fad70c899183436418ec6655e32e660f37ac630e9be86969af5cc749285284bca865cf57b163d889", @typed={0x4, 0x138}, @generic="bec8574fc8719e9497ce59a4b6d09292acabdba56efec34607174bb3420f1dd2f6acb391e539ae265c96c265d3d921e1d86e1a361566fe44f70acfc79da304c115a1073ba9e28f4aa5e5dc702387fb8d2e0b79ac1595a5beb0e1a8c1b0bbe732d86639020aefa5a8a495beca85cf50bfe0ded42d3e204e6f442cf9c0efd2e4a4e5dc7491795ca20a8f13a0ea40cdcd506816dd26c8e4d53bcee7a888cf7cceddf491ae2a57e2e1afcbcb4e5cb8983b7fd50a793df32f6a", @nested={0x4, 0x13c}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}]}, @nested={0xd8, 0x133, 0x0, 0x1, [@typed={0x14, 0x164, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}}, @typed={0x96, 0x101, 0x0, 0x0, @binary="2e50aeb3d6c2508d7f78a32457d935cd2c9514145efde690c3b1c8a69f1bd60e4f5ad2dc2ab8c6583699f758920de21ee3c8cd04af71cf77a552cc262201d75cd89fbf9b101c04f97cedbd52b0fdcb43cdba0a3a78c0325d129391092481f0d7bdad9303db6906531af107d5b7b1d2878dafe7da66f4ac1207091fd724177dba72d264de127935d6d8c2f80d097f9cbeb96f"}, @typed={0x8, 0xe0, 0x0, 0x0, @fd=r7}, @typed={0x8, 0xb4, 0x0, 0x0, @fd=r9}, @nested={0x4, 0x13c}, @nested={0x4, 0x55}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0xdf}, @nested={0x4, 0x136}]}, @generic="90b23a7886898f0021df87039e46f1"]}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80000000}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x44800}, 0x41) ioctl$auto(r1, 0x4048aec9, r2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 225.144574ms ago: executing program 5 (id=2715): mmap$auto(0xfffffffffffffffd, 0x400006, 0xdd, 0x1d, 0x2, 0x8000) (async) socket(0x27, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x6) (async, rerun: 32) getcwd$auto(0x0, 0xffffffffffffffff) (async, rerun: 32) r1 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r1, 0x0, 0x20000e6e) (async) open(0x0, 0x0, 0x57e) (async) r2 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r2, 0x205, 0xa, 0x4, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="130027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) (async, rerun: 64) socketpair$auto(0x1, 0x8, 0x7, 0x0) (rerun: 64) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x3496c2, 0x0) socket(0xa, 0x5, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0xae41, r4) (async, rerun: 32) ioctl$auto_KVM_GET_MSRS(r3, 0x4140aecd, &(0x7f0000000180)={0x7}) (async) socket(0x2b, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/aql_pending\x00', 0x3c3e40, 0x0) 0s ago: executing program 4 (id=2716): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) kernel console output (not intermixed with test programs): 67.763564][T15582] copy_net_ns+0x46f/0x7c0 [ 767.763606][T15582] create_new_namespaces+0x3ea/0xac0 [ 767.763657][T15582] unshare_nsproxy_namespaces+0xf2/0x220 [ 767.763702][T15582] ksys_unshare+0x438/0xab0 [ 767.763751][T15582] ? __pfx_ksys_unshare+0x10/0x10 [ 767.763794][T15582] ? xfd_validate_state+0x129/0x190 [ 767.763840][T15582] __x64_sys_unshare+0x31/0x40 [ 767.763885][T15582] do_syscall_64+0x115/0x840 [ 767.763929][T15582] ? clear_bhb_loop+0x40/0x90 [ 767.763969][T15582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.764001][T15582] RIP: 0033:0x7f878199ce59 [ 767.764027][T15582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.764057][T15582] RSP: 002b:00007f877fbb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 767.764086][T15582] RAX: ffffffffffffffda RBX: 00007f8781c16180 RCX: 00007f878199ce59 [ 767.764106][T15582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 767.764130][T15582] RBP: 00007f8781a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 767.764149][T15582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.764168][T15582] R13: 00007f8781c16218 R14: 00007f8781c16180 R15: 00007ffc035a6da8 [ 767.764209][T15582] [ 767.765733][T15582] sysctl could not get directory: /net/sctp -12 [ 768.582363][T15606] vivid-011: ================= START STATUS ================= [ 768.601295][T15606] vivid-011: Radio HW Seek Mode: Bounded [ 768.616965][T15606] vivid-011: Radio Programmable HW Seek: false [ 768.627068][T15605] netlink: 'syz.0.1931': attribute type 22 has an invalid length. [ 768.642481][T15606] vivid-011: RDS Rx I/O Mode: Block I/O [ 768.662033][T15605] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1931'. [ 768.683378][T15606] vivid-011: Generate RBDS Instead of RDS: false [ 768.701149][T15606] vivid-011: RDS Reception: true [ 768.730201][T15606] vivid-011: RDS Program Type: 0 inactive [ 768.739248][T15605] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1931'. [ 768.744731][T15606] vivid-011: RDS PS Name: inactive [ 768.765617][T15606] vivid-011: RDS Radio Text: inactive [ 768.774570][T15606] vivid-011: RDS Traffic Announcement: false inactive [ 768.784300][T15606] vivid-011: RDS Traffic Program: false inactive [ 768.812187][T15606] vivid-011: RDS Music: false inactive [ 768.846503][T15606] vivid-011: ================== END STATUS ================== [ 769.052477][T13656] Bluetooth: hci3: command 0x0406 tx timeout [ 770.141620][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'. [ 771.268971][T15646] random: crng reseeded on system resumption [ 771.647949][T15665] serio: Serial port ttyS0 [ 772.412684][T15681] FAULT_INJECTION: forcing a failure. [ 772.412684][T15681] name failslab, interval 1, probability 0, space 0, times 0 [ 772.463968][T15681] CPU: 0 UID: 0 PID: 15681 Comm: syz.4.1944 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.464020][T15681] Tainted: [L]=SOFTLOCKUP [ 772.464031][T15681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 772.464050][T15681] Call Trace: [ 772.464059][T15681] [ 772.464071][T15681] dump_stack_lvl+0x100/0x190 [ 772.464110][T15681] should_fail_ex.cold+0x5/0xa [ 772.464153][T15681] should_failslab+0xc2/0x120 [ 772.464195][T15681] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 772.464248][T15681] ? alloc_uid+0x13d/0x4c0 [ 772.464293][T15681] ? rcu_is_watching+0x12/0xc0 [ 772.464337][T15681] alloc_uid+0x13d/0x4c0 [ 772.464385][T15681] ? __pfx_alloc_uid+0x10/0x10 [ 772.464431][T15681] ? bpf_lsm_cred_prepare+0x9/0x10 [ 772.464502][T15681] ? security_prepare_creds+0xa8/0x290 [ 772.464561][T15681] __sys_setresuid+0x4f2/0x1280 [ 772.464619][T15681] do_syscall_64+0x115/0x840 [ 772.464667][T15681] ? clear_bhb_loop+0x40/0x90 [ 772.464708][T15681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.464743][T15681] RIP: 0033:0x7f878199ce59 [ 772.464770][T15681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.464804][T15681] RSP: 002b:00007f877fbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 772.464837][T15681] RAX: ffffffffffffffda RBX: 00007f8781c15fa0 RCX: 00007f878199ce59 [ 772.464859][T15681] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000002 [ 772.464879][T15681] RBP: 00007f8781a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 772.464898][T15681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.464918][T15681] R13: 00007f8781c16038 R14: 00007f8781c15fa0 R15: 00007ffc035a6da8 [ 772.464961][T15681] [ 777.051210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 777.399360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 777.588371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 778.166847][T15743] random: crng reseeded on system resumption [ 779.195336][T15759] FAULT_INJECTION: forcing a failure. [ 779.195336][T15759] name failslab, interval 1, probability 0, space 0, times 0 [ 779.242300][T15759] CPU: 0 UID: 7 PID: 15759 Comm: syz.1.1961 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.242341][T15759] Tainted: [L]=SOFTLOCKUP [ 779.242350][T15759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 779.242366][T15759] Call Trace: [ 779.242373][T15759] [ 779.242383][T15759] dump_stack_lvl+0x100/0x190 [ 779.242421][T15759] should_fail_ex.cold+0x5/0xa [ 779.242477][T15759] should_failslab+0xc2/0x120 [ 779.242520][T15759] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 779.242561][T15759] ? vm_area_dup+0x27/0x8e0 [ 779.242604][T15759] vm_area_dup+0x27/0x8e0 [ 779.242642][T15759] __split_vma+0x18c/0xda0 [ 779.242684][T15759] ? __pfx___split_vma+0x10/0x10 [ 779.242729][T15759] ? __pfx_mas_prev+0x10/0x10 [ 779.242775][T15759] vms_gather_munmap_vmas+0x3a5/0x1720 [ 779.242817][T15759] ? validate_mm+0x392/0x4e0 [ 779.242856][T15759] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 779.242896][T15759] ? __pfx_validate_mm+0x10/0x10 [ 779.242955][T15759] do_vmi_align_munmap+0x287/0x5f0 [ 779.243000][T15759] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 779.243040][T15759] ? cap_mmap_addr+0x4b/0x120 [ 779.243103][T15759] do_vmi_munmap+0x1f8/0x3e0 [ 779.243146][T15759] __vm_munmap+0x196/0x390 [ 779.243172][T15759] ? __pfx___vm_munmap+0x10/0x10 [ 779.243246][T15759] __x64_sys_munmap+0x59/0x80 [ 779.243293][T15759] do_syscall_64+0x115/0x840 [ 779.243340][T15759] ? clear_bhb_loop+0x40/0x90 [ 779.243382][T15759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.243503][T15759] RIP: 0033:0x7f0ef619cc87 [ 779.243531][T15759] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.243566][T15759] RSP: 002b:00007f0ef70e6d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 779.243596][T15759] RAX: ffffffffffffffda RBX: 00007f0ef0000000 RCX: 00007f0ef619cc87 [ 779.243619][T15759] RDX: 0000000000000000 RSI: 0000000003e00000 RDI: 00007f0eec200000 [ 779.243640][T15759] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 779.243660][T15759] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 779.243684][T15759] R13: 0000000000001000 R14: 00007f0ef4000000 R15: 0000000003e00000 [ 779.243726][T15759] [ 779.580328][T10004] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:0: bg 2: bad block bitmap checksum [ 779.596978][T10004] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 4 with max blocks 2 with error 74 [ 779.614147][T10004] EXT4-fs (sda1): This should not happen!! Data will be lost [ 779.614147][T10004] [ 779.754091][T15769] FAULT_INJECTION: forcing a failure. [ 779.754091][T15769] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 779.777082][T15769] CPU: 0 UID: 0 PID: 15769 Comm: syz.5.1965 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.777133][T15769] Tainted: [L]=SOFTLOCKUP [ 779.777144][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 779.777163][T15769] Call Trace: [ 779.777173][T15769] [ 779.777185][T15769] dump_stack_lvl+0x100/0x190 [ 779.777228][T15769] should_fail_ex.cold+0x5/0xa [ 779.777263][T15769] ? prepare_alloc_pages+0x16d/0x5f0 [ 779.777308][T15769] should_fail_alloc_page+0xeb/0x140 [ 779.777349][T15769] prepare_alloc_pages+0x1f0/0x5f0 [ 779.777398][T15769] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 779.777462][T15769] ? __lock_acquire+0x4a5/0x2630 [ 779.777521][T15769] ? __lock_acquire+0x4a5/0x2630 [ 779.777573][T15769] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 779.777647][T15769] ? find_held_lock+0x2b/0x80 [ 779.777687][T15769] ? is_bpf_text_address+0x8a/0x1a0 [ 779.777771][T15769] ? is_bpf_text_address+0x8a/0x1a0 [ 779.777815][T15769] ? bpf_ksym_find+0x124/0x1c0 [ 779.777850][T15769] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 779.777895][T15769] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 779.777945][T15769] ? policy_nodemask+0xed/0x4f0 [ 779.777998][T15769] alloc_pages_mpol+0x1fb/0x540 [ 779.778040][T15769] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 779.778093][T15769] folio_alloc_mpol_noprof+0x36/0x260 [ 779.778144][T15769] shmem_alloc_folio+0x135/0x160 [ 779.778196][T15769] shmem_alloc_and_add_folio+0x371/0xd40 [ 779.778262][T15769] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 779.778320][T15769] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 779.778362][T15769] shmem_get_folio_gfp+0x6ab/0x1900 [ 779.778405][T15769] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 779.778450][T15769] shmem_fault+0x1f9/0xa20 [ 779.778484][T15769] ? rcu_is_watching+0x12/0xc0 [ 779.778524][T15769] ? __pfx_shmem_fault+0x10/0x10 [ 779.778558][T15769] ? rcu_read_unlock+0x17/0x60 [ 779.778599][T15769] ? find_held_lock+0x2b/0x80 [ 779.778639][T15769] ? rcu_read_unlock+0x17/0x60 [ 779.778681][T15769] ? rcu_read_unlock+0x17/0x60 [ 779.778735][T15769] ? __pfx_filemap_map_pages+0x10/0x10 [ 779.778788][T15769] __do_fault+0x10b/0x440 [ 779.778827][T15769] do_fault+0x2db/0x1750 [ 779.778868][T15769] ? __pmd_alloc+0x3fb/0x950 [ 779.778913][T15769] __handle_mm_fault+0x187d/0x2a00 [ 779.778977][T15769] ? mt_find+0x45e/0x8e0 [ 779.779027][T15769] ? __pfx___handle_mm_fault+0x10/0x10 [ 779.779073][T15769] ? __pfx_mt_find+0x10/0x10 [ 779.779142][T15769] ? find_vma+0xbf/0x140 [ 779.779177][T15769] ? __pfx_find_vma+0x10/0x10 [ 779.779216][T15769] handle_mm_fault+0x37b/0xa30 [ 779.779271][T15769] do_user_addr_fault+0x74c/0x12f0 [ 779.779315][T15769] ? trace_page_fault_kernel+0x7a/0x200 [ 779.779354][T15769] exc_page_fault+0x6f/0xd0 [ 779.779398][T15769] asm_exc_page_fault+0x26/0x30 [ 779.779429][T15769] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 779.779464][T15769] Code: e9 04 9d 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f [ 779.779495][T15769] RSP: 0018:ffffc90003d07b08 EFLAGS: 00050206 [ 779.779521][T15769] RAX: 000000000000005f RBX: 0000000000000000 RCX: 0000000000000006 [ 779.779539][T15769] RDX: 0000000000000001 RSI: ffff88807e420003 RDI: 0000000000000000 [ 779.779558][T15769] RBP: ffffc90003d07d78 R08: 0000000000000000 R09: ffffed100fc84001 [ 779.779577][T15769] R10: ffff88807e420008 R11: 0000000000000000 R12: 0000000000000006 [ 779.779596][T15769] R13: 00007ffffffff000 R14: ffff88807e420003 R15: 0000000000000006 [ 779.779636][T15769] _copy_to_iter+0x391/0x1720 [ 779.779684][T15769] ? traverse.part.0.constprop.0+0x260/0x650 [ 779.779721][T15769] ? traverse.part.0.constprop.0+0x2c0/0x650 [ 779.779757][T15769] ? kfree+0x223/0x6c0 [ 779.779799][T15769] ? __pfx__copy_to_iter+0x10/0x10 [ 779.779845][T15769] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 779.779895][T15769] seq_read_iter+0x691/0x1270 [ 779.779947][T15769] proc_reg_read_iter+0x220/0x310 [ 779.779992][T15769] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 779.780030][T15769] vfs_read+0x825/0xb30 [ 779.780072][T15769] ? __pfx_vfs_read+0x10/0x10 [ 779.780104][T15769] ? find_held_lock+0x2b/0x80 [ 779.780169][T15769] __x64_sys_pread64+0x1eb/0x250 [ 779.780209][T15769] ? __pfx___x64_sys_pread64+0x10/0x10 [ 779.780252][T15769] ? rcu_is_watching+0x12/0xc0 [ 779.780293][T15769] do_syscall_64+0x115/0x840 [ 779.780336][T15769] ? clear_bhb_loop+0x40/0x90 [ 779.780373][T15769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.780404][T15769] RIP: 0033:0x7fbb4d99ce59 [ 779.780428][T15769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.780459][T15769] RSP: 002b:00007fbb4e902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 779.780484][T15769] RAX: ffffffffffffffda RBX: 00007fbb4dc15fa0 RCX: 00007fbb4d99ce59 [ 779.780503][T15769] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000007 [ 779.780519][T15769] RBP: 00007fbb4e902090 R08: 0000000000000000 R09: 0000000000000000 [ 779.780535][T15769] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 779.780553][T15769] R13: 00007fbb4dc16038 R14: 00007fbb4dc15fa0 R15: 00007ffe94a8f978 [ 779.780597][T15769] [ 780.681193][T15757] random: crng reseeded on system resumption [ 781.766113][T15788] random: crng reseeded on system resumption [ 783.950641][T15813] random: crng reseeded on system resumption [ 787.947859][T15889] blktrace: Concurrent blktraces are not allowed on loop2 [ 788.508158][T15888] random: crng reseeded on system resumption [ 789.240688][T15908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1994'. [ 792.641827][T15961] netlink: 'syz.4.2005': attribute type 22 has an invalid length. [ 792.670574][T15950] zswap: compressor û not available [ 792.680906][T15961] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2005'. [ 792.808183][T15961] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2005'. [ 795.470721][T15996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2011'. [ 795.518983][T15986] Process accounting resumed [ 795.543633][T15998] netlink: 'syz.1.2012': attribute type 22 has an invalid length. [ 795.587501][T15998] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2012'. [ 795.648291][T15998] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2012'. [ 795.908890][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'. [ 795.950853][T16001] netlink: 54021 bytes leftover after parsing attributes in process `syz.0.2013'. [ 796.375227][T16018] nvme_fcloop: unknown parameter or missing value '7' [ 797.111208][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2021'. [ 797.624606][T16033] random: crng reseeded on system resumption [ 797.896925][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2022'. [ 798.089770][T16049] &#$@\]\-: entered promiscuous mode [ 798.939286][T16058] Process accounting resumed [ 802.478172][T16131] ubi0: attaching mtd0 [ 802.507482][T16131] ubi0: scanning is finished [ 802.525280][T16131] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 802.714137][T16131] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 804.351044][T16145] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2048'. [ 805.722456][T16156] random: crng reseeded on system resumption [ 807.731511][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.738440][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.786896][T16198] &#$@\]\-: entered promiscuous mode [ 807.833244][T16197] ima: policy update failed [ 807.865077][ T30] audit: type=1802 audit(4294970004.447:20): pid=16197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2058" res=0 errno=0 [ 808.969261][T16220] tipc: Started in network mode [ 808.999642][T16220] tipc: Node identity ee00, cluster identity 4711 [ 809.036689][T16220] tipc: Node number set to 60928 [ 810.682737][ T30] audit: type=1804 audit(4294970007.282:21): pid=16247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2069" name="/newroot/543/file0" dev="tmpfs" ino=2911 res=1 errno=0 [ 811.109438][T16250] openvswitch: &#$@\]\-: Dropping previously announced user features [ 811.267034][T16253] FAULT_INJECTION: forcing a failure. [ 811.267034][T16253] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 811.297670][T16253] CPU: 1 UID: 0 PID: 16253 Comm: syz.1.2071 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.297722][T16253] Tainted: [L]=SOFTLOCKUP [ 811.297732][T16253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 811.297750][T16253] Call Trace: [ 811.297761][T16253] [ 811.297773][T16253] dump_stack_lvl+0x100/0x190 [ 811.297810][T16253] should_fail_ex.cold+0x5/0xa [ 811.297844][T16253] ? prepare_alloc_pages+0x16d/0x5f0 [ 811.297885][T16253] should_fail_alloc_page+0xeb/0x140 [ 811.297923][T16253] prepare_alloc_pages+0x1f0/0x5f0 [ 811.297962][T16253] ? __pfx___might_resched+0x10/0x10 [ 811.297996][T16253] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 811.298047][T16253] ? change_protection+0x575/0x52f0 [ 811.298153][T16253] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 811.298212][T16253] ? perf_event_mmap+0xbb/0xe60 [ 811.298279][T16253] ? __pfx_perf_event_mmap+0x10/0x10 [ 811.298312][T16253] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 811.298358][T16253] ? policy_nodemask+0xed/0x4f0 [ 811.298396][T16253] alloc_pages_mpol+0x1fb/0x540 [ 811.298432][T16253] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 811.298468][T16253] ? mprotect_fixup+0x51f/0xe30 [ 811.298516][T16253] alloc_pages_noprof+0x1a/0x160 [ 811.298556][T16253] pte_alloc_one+0x1c/0x3d0 [ 811.298597][T16253] __pte_alloc+0x6d/0x380 [ 811.298630][T16253] ? __pfx___pte_alloc+0x10/0x10 [ 811.298665][T16253] ? __lock_acquire+0x4a5/0x2630 [ 811.298712][T16253] do_anonymous_page+0x13c6/0x2050 [ 811.298757][T16253] ? __pfx_pgd_none+0x10/0x10 [ 811.298800][T16253] ? __lock_acquire+0x4a5/0x2630 [ 811.298847][T16253] __handle_mm_fault+0x1d2c/0x2a00 [ 811.298897][T16253] ? reacquire_held_locks+0xce/0x1e0 [ 811.298943][T16253] ? __pfx___handle_mm_fault+0x10/0x10 [ 811.298992][T16253] ? lock_vma_under_rcu+0x17c/0x590 [ 811.299054][T16253] handle_mm_fault+0x37b/0xa30 [ 811.299118][T16253] do_user_addr_fault+0x5a3/0x12f0 [ 811.299166][T16253] exc_page_fault+0x6f/0xd0 [ 811.299211][T16253] asm_exc_page_fault+0x26/0x30 [ 811.299239][T16253] RIP: 0033:0x7f0ef615ed82 [ 811.299263][T16253] Code: 8d 15 9e 05 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 f0 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 811.299291][T16253] RSP: 002b:00007f0ef70e6d20 EFLAGS: 00010286 [ 811.299315][T16253] RAX: ffffffffffffffff RBX: 00007f0ef0000000 RCX: 00007f0ef619cc57 [ 811.299335][T16253] RDX: 00007f0ef624f2fc RSI: 0000000000021000 RDI: 00007f0ef0000000 [ 811.299353][T16253] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 811.299371][T16253] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 811.299388][T16253] R13: 0000000000001000 R14: 00007f0ef4000000 R15: 0000000003e00000 [ 811.299424][T16253] [ 811.577474][T16253] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 812.384129][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2076'. [ 812.537000][T16275] vivid-011: ================= START STATUS ================= [ 812.595737][T16275] vivid-011: Radio HW Seek Mode: Bounded [ 812.656474][T16275] vivid-011: Radio Programmable HW Seek: false [ 812.711632][T16275] vivid-011: RDS Rx I/O Mode: Block I/O [ 812.744548][T16275] vivid-011: Generate RBDS Instead of RDS: false [ 812.761416][T16275] vivid-011: RDS Reception: true [ 812.775531][T16275] vivid-011: RDS Program Type: 0 inactive [ 812.801254][T16275] vivid-011: RDS PS Name: inactive [ 812.815481][T16275] vivid-011: RDS Radio Text: inactive [ 812.845147][T16275] vivid-011: RDS Traffic Announcement: false inactive [ 812.870312][T16275] vivid-011: RDS Traffic Program: false inactive [ 812.910974][T16275] vivid-011: RDS Music: false inactive [ 812.928162][T16275] vivid-011: ================== END STATUS ================== [ 815.754350][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2090'. [ 816.528981][T16336] FAULT_INJECTION: forcing a failure. [ 816.528981][T16336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 816.594944][T16336] CPU: 1 UID: 7 PID: 16336 Comm: syz.1.2092 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.594999][T16336] Tainted: [L]=SOFTLOCKUP [ 816.595011][T16336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 816.595031][T16336] Call Trace: [ 816.595042][T16336] [ 816.595054][T16336] dump_stack_lvl+0x100/0x190 [ 816.595096][T16336] should_fail_ex.cold+0x5/0xa [ 816.595135][T16336] ? prepare_alloc_pages+0x16d/0x5f0 [ 816.595185][T16336] should_fail_alloc_page+0xeb/0x140 [ 816.595244][T16336] prepare_alloc_pages+0x1f0/0x5f0 [ 816.595297][T16336] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 816.595364][T16336] ? __pfx_stack_trace_save+0x10/0x10 [ 816.595414][T16336] ? stack_depot_save_flags+0x27/0x9d0 [ 816.595471][T16336] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 816.595523][T16336] ? kasan_save_stack+0x30/0x50 [ 816.595559][T16336] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 816.595615][T16336] ? __lock_acquire+0x4a5/0x2630 [ 816.595685][T16336] ? __lock_acquire+0x4a5/0x2630 [ 816.595744][T16336] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 816.595795][T16336] ? policy_nodemask+0xed/0x4f0 [ 816.595840][T16336] alloc_pages_mpol+0x1fb/0x540 [ 816.595894][T16336] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 816.595936][T16336] ? __anon_vma_prepare+0x2db/0x5e0 [ 816.595989][T16336] ? __anon_vma_prepare+0x2db/0x5e0 [ 816.596047][T16336] folio_alloc_mpol_noprof+0x36/0x260 [ 816.596099][T16336] vma_alloc_folio_noprof+0xed/0x1d0 [ 816.596145][T16336] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 816.596207][T16336] do_anonymous_page+0xb46/0x2050 [ 816.596272][T16336] ? __pfx_pgd_none+0x10/0x10 [ 816.596334][T16336] __handle_mm_fault+0x1d2c/0x2a00 [ 816.596396][T16336] ? reacquire_held_locks+0xce/0x1e0 [ 816.596453][T16336] ? __pfx___handle_mm_fault+0x10/0x10 [ 816.596513][T16336] ? lock_vma_under_rcu+0x17c/0x590 [ 816.596590][T16336] handle_mm_fault+0x37b/0xa30 [ 816.596651][T16336] do_user_addr_fault+0x5a3/0x12f0 [ 816.596704][T16336] exc_page_fault+0x6f/0xd0 [ 816.596753][T16336] asm_exc_page_fault+0x26/0x30 [ 816.596787][T16336] RIP: 0033:0x7f0ef615ed82 [ 816.596815][T16336] Code: 8d 15 9e 05 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 f0 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 816.596849][T16336] RSP: 002b:00007f0ef70e6d20 EFLAGS: 00010286 [ 816.596884][T16336] RAX: ffffffffffffffff RBX: 00007f0ef0000000 RCX: 00007f0ef619cc57 [ 816.596907][T16336] RDX: 00007f0ef624f2fc RSI: 0000000000021000 RDI: 00007f0ef0000000 [ 816.596927][T16336] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 816.596947][T16336] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 816.596967][T16336] R13: 0000000000001000 R14: 00007f0ef4000000 R15: 0000000003e00000 [ 816.597010][T16336] [ 816.923660][T16336] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 817.444329][T16347] netlink: 'syz.1.2096': attribute type 22 has an invalid length. [ 817.461098][T16347] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2096'. [ 817.534666][T16347] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2096'. [ 817.757662][T16353] vivid-011: ================= START STATUS ================= [ 817.808199][T16353] vivid-011: Radio HW Seek Mode: Bounded [ 817.834134][T16353] vivid-011: Radio Programmable HW Seek: false [ 817.868069][T16353] vivid-011: RDS Rx I/O Mode: Block I/O [ 817.892931][T16353] vivid-011: Generate RBDS Instead of RDS: false [ 817.917175][T16353] vivid-011: RDS Reception: true [ 817.931043][T16353] vivid-011: RDS Program Type: 0 inactive [ 817.954431][T16353] vivid-011: RDS PS Name: inactive [ 817.979426][T16353] vivid-011: RDS Radio Text: inactive [ 818.008265][T16353] vivid-011: RDS Traffic Announcement: false inactive [ 818.025475][T16353] vivid-011: RDS Traffic Program: false inactive [ 818.043739][T16353] vivid-011: RDS Music: false inactive [ 818.058055][T16353] vivid-011: ================== END STATUS ================== [ 819.718446][T16383] netlink: zone id is out of range [ 819.763993][T16383] netlink: zone id is out of range [ 819.787198][T16383] netlink: zone id is out of range [ 819.848804][T16383] netlink: zone id is out of range [ 819.859053][T16383] netlink: zone id is out of range [ 819.884586][T16383] netlink: zone id is out of range [ 819.890713][T16383] netlink: zone id is out of range [ 819.897930][T16383] netlink: zone id is out of range [ 819.971729][T16383] netlink: zone id is out of range [ 819.988261][T16383] netlink: zone id is out of range [ 820.751822][T16398] vivid-011: ================= START STATUS ================= [ 820.780453][T16398] vivid-011: Radio HW Seek Mode: Bounded [ 820.799479][T16398] vivid-011: Radio Programmable HW Seek: false [ 820.824541][T16398] vivid-011: RDS Rx I/O Mode: Block I/O [ 820.858630][T16398] vivid-011: Generate RBDS Instead of RDS: false [ 820.888158][T16398] vivid-011: RDS Reception: true [ 820.907578][T16398] vivid-011: RDS Program Type: 0 inactive [ 820.929322][T16398] vivid-011: RDS PS Name: inactive [ 820.949600][T16398] vivid-011: RDS Radio Text: inactive [ 820.971787][T16398] vivid-011: RDS Traffic Announcement: false inactive [ 820.997424][T16398] vivid-011: RDS Traffic Program: false inactive [ 821.020052][T16398] vivid-011: RDS Music: false inactive [ 821.036772][T16398] vivid-011: ================== END STATUS ================== [ 821.824051][T16416] netlink: 'syz.4.2111': attribute type 33 has an invalid length. [ 821.867245][T16416] netlink: 322 bytes leftover after parsing attributes in process `syz.4.2111'. [ 822.990944][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 824.020748][T16449] vivid-011: ================= START STATUS ================= [ 824.028857][T16449] vivid-011: Radio HW Seek Mode: Bounded [ 824.034609][T16449] vivid-011: Radio Programmable HW Seek: false [ 824.042997][T16449] vivid-011: RDS Rx I/O Mode: Block I/O [ 824.054027][T16449] vivid-011: Generate RBDS Instead of RDS: false [ 824.061323][T16449] vivid-011: RDS Reception: true [ 824.066450][T16449] vivid-011: RDS Program Type: 0 inactive [ 824.072897][T16449] vivid-011: RDS PS Name: inactive [ 824.079613][T16449] vivid-011: RDS Radio Text: inactive [ 824.088726][T16449] vivid-011: RDS Traffic Announcement: false inactive [ 824.095728][T16449] vivid-011: RDS Traffic Program: false inactive [ 824.102826][T16449] vivid-011: RDS Music: false inactive [ 824.108849][T16449] vivid-011: ================== END STATUS ================== [ 825.942957][T16501] vivid-011: ================= START STATUS ================= [ 825.965290][T16501] vivid-011: Radio HW Seek Mode: Bounded [ 825.975362][T16501] vivid-011: Radio Programmable HW Seek: false [ 825.993207][T16501] vivid-011: RDS Rx I/O Mode: Block I/O [ 826.025166][T16501] vivid-011: Generate RBDS Instead of RDS: false [ 826.043786][T16501] vivid-011: RDS Reception: true [ 826.059225][T16501] vivid-011: RDS Program Type: 0 inactive [ 826.074561][T16501] vivid-011: RDS PS Name: inactive [ 826.093231][T16501] vivid-011: RDS Radio Text: inactive [ 826.103803][T16501] vivid-011: RDS Traffic Announcement: false inactive [ 826.132729][T16501] vivid-011: RDS Traffic Program: false inactive [ 826.143142][T16501] vivid-011: RDS Music: false inactive [ 826.157225][T16501] vivid-011: ================== END STATUS ================== [ 826.758951][T16487] Process accounting paused [ 828.658530][T16560] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2140'. [ 829.379680][T16546] Process accounting paused [ 830.342755][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2145'. [ 831.577890][T16613] openvswitch: &#$@\]\-: Dropping previously announced user features [ 834.981456][T16674] netlink: 'syz.0.2160': attribute type 22 has an invalid length. [ 835.014534][T16674] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2160'. [ 835.063062][T16677] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2160'. [ 835.511051][T16682] netlink: 'syz.0.2163': attribute type 22 has an invalid length. [ 835.537631][T16682] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2163'. [ 835.612597][T16684] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2163'. [ 836.085975][T16687] : entered promiscuous mode [ 836.341920][T10039] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.670234][T16690] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 836.728293][T10039] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.749722][T16690] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 836.816127][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2168'. [ 836.827340][T16690] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 837.049443][T16699] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 837.104123][T10039] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.313239][T10039] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.429799][T16708] vivid-011: ================= START STATUS ================= [ 837.455899][T16708] vivid-011: Radio HW Seek Mode: Bounded [ 837.474668][T16708] vivid-011: Radio Programmable HW Seek: false [ 837.493302][T16708] vivid-011: RDS Rx I/O Mode: Block I/O [ 837.525927][T16708] vivid-011: Generate RBDS Instead of RDS: false [ 837.544904][T16708] vivid-011: RDS Reception: true [ 837.562565][T16708] vivid-011: RDS Program Type: 0 inactive [ 837.580324][T16708] vivid-011: RDS PS Name: inactive [ 837.600280][T16708] vivid-011: RDS Radio Text: inactive [ 837.624142][T16708] vivid-011: RDS Traffic Announcement: false inactive [ 837.649908][T16708] vivid-011: RDS Traffic Program: false inactive [ 837.655718][T13656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 837.677166][T16708] vivid-011: RDS Music: false inactive [ 837.683214][T13656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 837.692768][T13656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 837.704315][T16708] vivid-011: ================== END STATUS ================== [ 837.722797][T13656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 837.739616][T13656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 838.120993][T10039] bridge_slave_1: left allmulticast mode [ 838.146452][T10039] bridge_slave_1: left promiscuous mode [ 838.172823][T10039] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.191502][T10039] bridge_slave_0: left allmulticast mode [ 838.205372][T10039] bridge_slave_0: left promiscuous mode [ 838.232299][T10039] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.079053][T10039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.107652][T10039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.145142][T10039] bond0 (unregistering): Released all slaves [ 839.572120][T10039] HfR: left promiscuous mode [ 839.795465][T11269] Bluetooth: hci1: command tx timeout [ 840.112251][T10039] tipc: Left network mode [ 840.591811][T16775] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 4 with max blocks 4 with error 117 [ 840.646708][T16775] EXT4-fs (sda1): This should not happen!! Data will be lost [ 840.646708][T16775] [ 841.371289][T10039] hsr_slave_0: left promiscuous mode [ 841.407828][T10039] hsr_slave_1: left promiscuous mode [ 841.443495][T10039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.476850][T10039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.525782][T10039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.560705][T10039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.630942][T10039] veth1_macvtap: left promiscuous mode [ 841.651883][T10039] veth0_macvtap: left promiscuous mode [ 841.674269][T10039] veth1_vlan: left promiscuous mode [ 841.696509][T10039] veth0_vlan: left promiscuous mode [ 841.864876][T11269] Bluetooth: hci1: command tx timeout [ 842.346875][T10039] team0 (unregistering): Port device team_slave_1 removed [ 842.380590][T10039] team0 (unregistering): Port device team_slave_0 removed [ 842.570591][T10039] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 842.612736][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 843.940380][T11269] Bluetooth: hci1: command tx timeout [ 844.201720][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 844.238493][T11269] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 844.282296][T16710] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.290082][T16710] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.297539][T16710] bridge_slave_0: entered allmulticast mode [ 844.306110][T16710] bridge_slave_0: entered promiscuous mode [ 844.320687][T16710] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.328488][T16710] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.336313][T16710] bridge_slave_1: entered allmulticast mode [ 844.344424][T16710] bridge_slave_1: entered promiscuous mode [ 844.428795][T16710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.444621][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 844.458435][T16710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.613622][T16710] team0: Port device team_slave_0 added [ 844.718011][T16710] team0: Port device team_slave_1 added [ 844.896722][T16710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.917268][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.002508][T16710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.030234][T16710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.049788][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.108875][T16710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.639643][T16710] hsr_slave_0: entered promiscuous mode [ 845.667476][T16710] hsr_slave_1: entered promiscuous mode [ 846.002898][T13656] Bluetooth: hci1: command tx timeout [ 846.300096][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 846.321095][T13656] Bluetooth: hci3: command 0x0406 tx timeout [ 846.520899][T16710] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 846.567923][T16710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 846.590186][T16710] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 846.598158][T16873] netlink: 'syz.5.2187': attribute type 3 has an invalid length. [ 846.665057][T16710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 846.783534][T16710] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 846.820427][T16710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 846.979985][T16710] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 847.023540][T16710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 848.079132][T16710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.108548][T16911] openvswitch: &#$@\]\-: Dropping previously announced user features [ 848.160669][T16710] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.205683][T10551] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.213250][T10551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.333728][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 848.390545][T11269] Bluetooth: hci3: command 0x0406 tx timeout [ 848.424192][T16775] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.431532][T16775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.946349][T16929] vivid-011: ================= START STATUS ================= [ 848.965544][T16929] vivid-011: Radio HW Seek Mode: Bounded [ 848.983735][T16929] vivid-011: Radio Programmable HW Seek: false [ 849.003961][T16929] vivid-011: RDS Rx I/O Mode: Block I/O [ 849.053731][T16929] vivid-011: Generate RBDS Instead of RDS: false [ 849.088820][T16929] vivid-011: RDS Reception: true [ 849.099500][T16929] vivid-011: RDS Program Type: 0 inactive [ 849.125824][T16929] vivid-011: RDS PS Name: inactive [ 849.140543][T16929] vivid-011: RDS Radio Text: inactive [ 849.162286][T16929] vivid-011: RDS Traffic Announcement: false inactive [ 849.195201][T16929] vivid-011: RDS Traffic Program: false inactive [ 849.213929][T16929] vivid-011: RDS Music: false inactive [ 849.225944][T16929] vivid-011: ================== END STATUS ================== [ 850.140837][T16710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.661874][T16710] veth0_vlan: entered promiscuous mode [ 851.687015][T16710] veth1_vlan: entered promiscuous mode [ 851.790563][T16710] veth0_macvtap: entered promiscuous mode [ 851.826649][T16710] veth1_macvtap: entered promiscuous mode [ 851.905471][T16710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.958220][T16710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.025341][T16780] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.058519][T16780] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.114893][T16780] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.150920][T16780] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.410102][T16781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.430189][T16781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.513133][T10551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.525406][T10551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.796613][T16992] FAULT_INJECTION: forcing a failure. [ 852.796613][T16992] name failslab, interval 1, probability 0, space 0, times 0 [ 852.828896][T16992] CPU: 0 UID: 7 PID: 16992 Comm: syz.6.2166 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.828946][T16992] Tainted: [L]=SOFTLOCKUP [ 852.828958][T16992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.828977][T16992] Call Trace: [ 852.828988][T16992] [ 852.829001][T16992] dump_stack_lvl+0x100/0x190 [ 852.829051][T16992] should_fail_ex.cold+0x5/0xa [ 852.829094][T16992] should_failslab+0xc2/0x120 [ 852.829135][T16992] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 852.829188][T16992] ? mas_preallocate+0x1105/0x14a0 [ 852.829229][T16992] mas_preallocate+0x1105/0x14a0 [ 852.829269][T16992] ? __pfx_mas_preallocate+0x10/0x10 [ 852.829314][T16992] ? anon_vma_name+0x5a/0x250 [ 852.829369][T16992] __split_vma+0x33d/0xda0 [ 852.829426][T16992] ? __pfx___split_vma+0x10/0x10 [ 852.829486][T16992] ? __pfx_mas_prev+0x10/0x10 [ 852.829547][T16992] vms_gather_munmap_vmas+0x3a5/0x1720 [ 852.829603][T16992] ? validate_mm+0x392/0x4e0 [ 852.829654][T16992] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 852.829706][T16992] ? __pfx_validate_mm+0x10/0x10 [ 852.829783][T16992] do_vmi_align_munmap+0x287/0x5f0 [ 852.829841][T16992] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 852.829899][T16992] ? cap_mmap_addr+0x4b/0x120 [ 852.829985][T16992] do_vmi_munmap+0x1f8/0x3e0 [ 852.830050][T16992] __vm_munmap+0x196/0x390 [ 852.830084][T16992] ? __pfx___vm_munmap+0x10/0x10 [ 852.830144][T16992] __x64_sys_munmap+0x59/0x80 [ 852.830190][T16992] do_syscall_64+0x115/0x840 [ 852.830236][T16992] ? clear_bhb_loop+0x40/0x90 [ 852.830277][T16992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.830311][T16992] RIP: 0033:0x7f3294b9cc87 [ 852.830339][T16992] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.830372][T16992] RSP: 002b:00007f32959e2d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 852.830404][T16992] RAX: ffffffffffffffda RBX: 00007f328c000000 RCX: 00007f3294b9cc87 [ 852.830425][T16992] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 00007f328ac00000 [ 852.830444][T16992] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 852.830464][T16992] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 852.830483][T16992] R13: 0000000000001000 R14: 00007f3290000000 R15: 0000000001400000 [ 852.830525][T16992] [ 854.544667][T17021] vivid-011: ================= START STATUS ================= [ 854.561632][T17021] vivid-011: Radio HW Seek Mode: Bounded [ 854.573700][T17021] vivid-011: Radio Programmable HW Seek: false [ 854.587842][T17021] vivid-011: RDS Rx I/O Mode: Block I/O [ 854.600878][T17021] vivid-011: Generate RBDS Instead of RDS: false [ 854.623863][T17021] vivid-011: RDS Reception: true [ 854.646501][T17021] vivid-011: RDS Program Type: 0 inactive [ 854.664110][T17021] vivid-011: RDS PS Name: inactive [ 854.680162][T17021] vivid-011: RDS Radio Text: inactive [ 854.696535][T17021] vivid-011: RDS Traffic Announcement: false inactive [ 854.715357][T17021] vivid-011: RDS Traffic Program: false inactive [ 854.733769][T17021] vivid-011: RDS Music: false inactive [ 854.755921][T17021] vivid-011: ================== END STATUS ================== [ 855.186260][T17028] &#$@\]\-: entered promiscuous mode [ 855.289447][T17028] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 855.755703][T17027] ima: policy update failed [ 855.767511][ T30] audit: type=1802 audit(4294970052.596:22): pid=17027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2211" res=0 errno=0 [ 856.001228][T17048] vivid-011: ================= START STATUS ================= [ 856.016967][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2212'. [ 856.026344][T17048] vivid-011: Radio HW Seek Mode: Bounded [ 856.039429][T17048] vivid-011: Radio Programmable HW Seek: false [ 856.063786][T17048] vivid-011: RDS Rx I/O Mode: Block I/O [ 856.092285][T17048] vivid-011: Generate RBDS Instead of RDS: false [ 856.124592][T17048] vivid-011: RDS Reception: true [ 856.163287][T17048] vivid-011: RDS Program Type: 0 inactive [ 856.213522][T17048] vivid-011: RDS PS Name: inactive [ 856.260023][T17048] vivid-011: RDS Radio Text: inactive [ 856.296308][T17048] vivid-011: RDS Traffic Announcement: false inactive [ 856.344266][T17048] vivid-011: RDS Traffic Program: false inactive [ 856.386923][T17048] vivid-011: RDS Music: false inactive [ 856.417712][T17048] vivid-011: ================== END STATUS ================== [ 856.468815][T17048] netlink: 'syz.0.2215': attribute type 11 has an invalid length. [ 856.648732][T17049] Process accounting resumed [ 857.097501][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d00a400: rx timeout, send abort [ 857.110311][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d00a400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 859.935460][T17094] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 861.751465][T17135] &#$@\]\-: entered promiscuous mode [ 861.837375][T17135] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 862.455746][T17133] ima: policy update failed [ 862.496227][ T30] audit: type=1802 audit(4294970059.361:23): pid=17133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2228" res=0 errno=0 [ 864.677042][T17191] openvswitch: &#$@\]\-: Dropping previously announced user features [ 864.961978][T11269] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 867.016756][T13656] Bluetooth: hci1: command 0x2016 tx timeout [ 868.075029][T17240] openvswitch: &#$@\]\-: Dropping previously announced user features [ 868.402913][T17247] openvswitch: &#$@\]\-: Dropping previously announced user features [ 868.465182][T17247] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 868.845308][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.856576][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.912851][T17245] ima: policy update failed [ 868.936091][ T30] audit: type=1802 audit(4294970065.825:24): pid=17245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2244" res=0 errno=0 [ 869.087057][T13656] Bluetooth: hci1: command 0x2016 tx timeout [ 870.451062][T17273] ubi0: attaching mtd0 [ 870.472135][T17273] ubi0: scanning is finished [ 870.492398][T17273] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 870.779530][T17273] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 872.336155][T17307] FAULT_INJECTION: forcing a failure. [ 872.336155][T17307] name failslab, interval 1, probability 0, space 0, times 0 [ 872.370252][T17307] CPU: 0 UID: 7 PID: 17307 Comm: syz.6.2256 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.370305][T17307] Tainted: [L]=SOFTLOCKUP [ 872.370316][T17307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.370336][T17307] Call Trace: [ 872.370347][T17307] [ 872.370359][T17307] dump_stack_lvl+0x100/0x190 [ 872.370402][T17307] should_fail_ex.cold+0x5/0xa [ 872.370447][T17307] should_failslab+0xc2/0x120 [ 872.370489][T17307] __kmalloc_cache_noprof+0x7a/0x6f0 [ 872.370560][T17307] ? nfc_genl_rcv_nl_event+0xc1/0x300 [ 872.370628][T17307] nfc_genl_rcv_nl_event+0xc1/0x300 [ 872.370684][T17307] notifier_call_chain+0x99/0x400 [ 872.370773][T17307] blocking_notifier_call_chain+0x69/0xa0 [ 872.370830][T17307] netlink_release+0x167a/0x2030 [ 872.370885][T17307] ? netlink_release+0x1e0/0x2030 [ 872.370932][T17307] ? __pfx_netlink_release+0x10/0x10 [ 872.370980][T17307] ? __pfx_locks_remove_file+0x10/0x10 [ 872.371041][T17307] __sock_release+0xb3/0x260 [ 872.371078][T17307] ? __pfx_sock_close+0x10/0x10 [ 872.371114][T17307] sock_close+0x1c/0x30 [ 872.371147][T17307] __fput+0x3ff/0xb50 [ 872.371205][T17307] fput_close_sync+0x118/0x250 [ 872.371257][T17307] ? __pfx_fput_close_sync+0x10/0x10 [ 872.371320][T17307] __x64_sys_close+0x8b/0x120 [ 872.371352][T17307] do_syscall_64+0x115/0x840 [ 872.371398][T17307] ? clear_bhb_loop+0x40/0x90 [ 872.371440][T17307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.371474][T17307] RIP: 0033:0x7f3294b5d68e [ 872.371501][T17307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 872.371533][T17307] RSP: 002b:00007f32959e2f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 872.371563][T17307] RAX: ffffffffffffffda RBX: 00007f32959e46c0 RCX: 00007f3294b5d68e [ 872.371585][T17307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 872.371603][T17307] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 872.371621][T17307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.371640][T17307] R13: 00007f3294e16038 R14: 00007f3294e15fa0 R15: 00007ffe1ed457a8 [ 872.371682][T17307] [ 873.029317][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2257'. [ 875.286693][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 876.543263][T17363] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 876.931291][T17359] openvswitch: &#$@\]\-: Dropping previously announced user features [ 877.201124][T17358] ima: policy update failed [ 877.229479][ T30] audit: type=1802 audit(4294970074.168:25): pid=17358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2266" res=0 errno=0 [ 877.590440][T17371] vivid-011: ================= START STATUS ================= [ 877.631944][T17371] vivid-011: Radio HW Seek Mode: Bounded [ 877.654561][T17371] vivid-011: Radio Programmable HW Seek: false [ 877.698341][T17371] vivid-011: RDS Rx I/O Mode: Block I/O [ 877.741599][T17371] vivid-011: Generate RBDS Instead of RDS: false [ 877.806677][T17371] vivid-011: RDS Reception: true [ 877.838531][T17371] vivid-011: RDS Program Type: 0 inactive [ 877.877971][T17371] vivid-011: RDS PS Name: inactive [ 877.897228][T17371] vivid-011: RDS Radio Text: inactive [ 877.937261][T17371] vivid-011: RDS Traffic Announcement: false inactive [ 877.960240][T17371] vivid-011: RDS Traffic Program: false inactive [ 878.032529][T17371] vivid-011: RDS Music: false inactive [ 878.066981][T17371] vivid-011: ================== END STATUS ================== [ 879.414449][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 881.208332][T17412] FAULT_INJECTION: forcing a failure. [ 881.208332][T17412] name failslab, interval 1, probability 0, space 0, times 0 [ 881.239142][T17412] CPU: 1 UID: 7 PID: 17412 Comm: syz.0.2274 Tainted: G L syzkaller #0 PREEMPT(full) [ 881.239200][T17412] Tainted: [L]=SOFTLOCKUP [ 881.239212][T17412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 881.239232][T17412] Call Trace: [ 881.239244][T17412] [ 881.239257][T17412] dump_stack_lvl+0x100/0x190 [ 881.239303][T17412] should_fail_ex.cold+0x5/0xa [ 881.239345][T17412] should_failslab+0xc2/0x120 [ 881.239386][T17412] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 881.239438][T17412] ? vm_area_dup+0x27/0x8e0 [ 881.239507][T17412] vm_area_dup+0x27/0x8e0 [ 881.239559][T17412] __split_vma+0x18c/0xda0 [ 881.239614][T17412] ? __pfx___split_vma+0x10/0x10 [ 881.239661][T17412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 881.239730][T17412] vma_modify+0x12ad/0x25c0 [ 881.239796][T17412] ? __pfx_vma_modify+0x10/0x10 [ 881.239846][T17412] ? validate_mm+0x392/0x4e0 [ 881.239900][T17412] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 881.239969][T17412] vma_modify_flags+0x257/0x3d0 [ 881.240024][T17412] ? __pfx_vma_modify_flags+0x10/0x10 [ 881.240094][T17412] ? rcu_is_watching+0x12/0xc0 [ 881.240129][T17412] ? percpu_counter_add_batch+0xb9/0x230 [ 881.240214][T17412] mprotect_fixup+0x27a/0xe30 [ 881.240275][T17412] ? __pfx_mprotect_fixup+0x10/0x10 [ 881.240353][T17412] ? __pfx_mas_prev+0x10/0x10 [ 881.240415][T17412] do_mprotect_pkey+0xa4b/0xef0 [ 881.240484][T17412] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 881.240550][T17412] ? __vm_munmap+0x1d2/0x390 [ 881.240584][T17412] ? __pfx___vm_munmap+0x10/0x10 [ 881.240649][T17412] __x64_sys_mprotect+0x78/0xc0 [ 881.240697][T17412] ? lockdep_hardirqs_on+0x78/0x100 [ 881.240744][T17412] do_syscall_64+0x115/0x840 [ 881.240789][T17412] ? clear_bhb_loop+0x40/0x90 [ 881.240830][T17412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.240864][T17412] RIP: 0033:0x7f07a8d9cc57 [ 881.240891][T17412] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.240924][T17412] RSP: 002b:00007f07a9c43d18 EFLAGS: 00000217 ORIG_RAX: 000000000000000a [ 881.240956][T17412] RAX: ffffffffffffffda RBX: 00007f07a0000000 RCX: 00007f07a8d9cc57 [ 881.240978][T17412] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f07a0000000 [ 881.240998][T17412] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 881.241018][T17412] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 881.241038][T17412] R13: 0000000000001000 R14: 00007f07a4000000 R15: 0000000001200000 [ 881.241078][T17412] [ 883.444226][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 885.892212][ T1572] Process accounting resumed [ 886.037956][ T5639] Process accounting resumed [ 886.060249][ T5639] Process accounting resumed [ 886.076987][ T5639] Process accounting resumed [ 886.097890][ T5639] Process accounting resumed [ 886.137626][ T5639] Process accounting resumed [ 886.157970][ T5639] Process accounting resumed [ 886.175434][ T5639] Process accounting resumed [ 886.191376][ T5639] Process accounting resumed [ 886.199606][ T5639] Process accounting resumed [ 886.211986][ T5639] Process accounting resumed [ 886.243718][ T5639] Process accounting resumed [ 886.268630][ T24] Process accounting resumed [ 886.299484][ T24] Process accounting resumed [ 886.336222][ T24] Process accounting resumed [ 886.354075][ T24] Process accounting resumed [ 886.373955][ T24] Process accounting resumed [ 886.395837][ T24] Process accounting resumed [ 886.413879][ T24] Process accounting resumed [ 886.437280][ T24] Process accounting resumed [ 886.569686][T17474] Process accounting resumed [ 887.285854][T17461] Process accounting paused [ 889.744055][T17521] net_ratelimit: 47 callbacks suppressed [ 889.744084][T17521] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 889.937406][T17535] vivid-011: ================= START STATUS ================= [ 889.964670][T17535] vivid-011: Radio HW Seek Mode: Bounded [ 889.975624][T17531] openvswitch: &#$@\]\-: Dropping previously announced user features [ 889.986980][T17535] vivid-011: Radio Programmable HW Seek: false [ 890.009044][T17535] vivid-011: RDS Rx I/O Mode: Block I/O [ 890.035240][T17535] vivid-011: Generate RBDS Instead of RDS: false [ 890.055787][T17535] vivid-011: RDS Reception: true [ 890.075075][T17535] vivid-011: RDS Program Type: 0 inactive [ 890.098826][T17535] vivid-011: RDS PS Name: inactive [ 890.116704][T17535] vivid-011: RDS Radio Text: inactive [ 890.136138][T17535] vivid-011: RDS Traffic Announcement: false inactive [ 890.157231][T17535] vivid-011: RDS Traffic Program: false inactive [ 890.172973][T17535] vivid-011: RDS Music: false inactive [ 890.188833][T17535] vivid-011: ================== END STATUS ================== [ 890.690612][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2301'. [ 891.528137][T17551] FAULT_INJECTION: forcing a failure. [ 891.528137][T17551] name failslab, interval 1, probability 0, space 0, times 0 [ 891.655085][T17551] CPU: 0 UID: 7 PID: 17551 Comm: syz.4.2302 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.655142][T17551] Tainted: [L]=SOFTLOCKUP [ 891.655153][T17551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 891.655172][T17551] Call Trace: [ 891.655183][T17551] [ 891.655195][T17551] dump_stack_lvl+0x100/0x190 [ 891.655249][T17551] should_fail_ex.cold+0x5/0xa [ 891.655305][T17551] should_failslab+0xc2/0x120 [ 891.655349][T17551] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 891.655404][T17551] ? ptlock_alloc+0x1f/0x70 [ 891.655452][T17551] ? mprotect_fixup+0x51f/0xe30 [ 891.655511][T17551] ptlock_alloc+0x1f/0x70 [ 891.655560][T17551] pte_alloc_one+0x82/0x3d0 [ 891.655607][T17551] __pte_alloc+0x6d/0x380 [ 891.655646][T17551] ? __pfx___pte_alloc+0x10/0x10 [ 891.655697][T17551] ? __lock_acquire+0x4a5/0x2630 [ 891.655755][T17551] do_anonymous_page+0x13c6/0x2050 [ 891.655810][T17551] ? __pfx_pgd_none+0x10/0x10 [ 891.655864][T17551] ? __lock_acquire+0x4a5/0x2630 [ 891.655920][T17551] __handle_mm_fault+0x1d2c/0x2a00 [ 891.655980][T17551] ? reacquire_held_locks+0xce/0x1e0 [ 891.656034][T17551] ? __pfx___handle_mm_fault+0x10/0x10 [ 891.656091][T17551] ? lock_vma_under_rcu+0x17c/0x590 [ 891.656164][T17551] handle_mm_fault+0x37b/0xa30 [ 891.656224][T17551] do_user_addr_fault+0x5a3/0x12f0 [ 891.656275][T17551] exc_page_fault+0x6f/0xd0 [ 891.656323][T17551] asm_exc_page_fault+0x26/0x30 [ 891.656356][T17551] RIP: 0033:0x7f878195ed82 [ 891.656383][T17551] Code: 8d 15 9e 05 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 f0 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 891.656415][T17551] RSP: 002b:00007f877fbf4d20 EFLAGS: 00010286 [ 891.656441][T17551] RAX: ffffffffffffffff RBX: 00007f8778000000 RCX: 00007f878199cc57 [ 891.656462][T17551] RDX: 00007f8781a4f2fc RSI: 0000000000021000 RDI: 00007f8778000000 [ 891.656482][T17551] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 891.656502][T17551] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 891.656521][T17551] R13: 0000000000001000 R14: 00007f877c000000 R15: 0000000000600000 [ 891.656562][T17551] [ 892.037996][T17551] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 893.151896][T17575] Setting dangerous option i915.mitigations - tainting kernel [ 894.100608][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'. [ 894.183199][T17588] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2309'. [ 895.240424][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2312'. [ 895.768363][T17610] openvswitch: &#$@\]\-: Dropping previously announced user features [ 896.387699][T17620] FAULT_INJECTION: forcing a failure. [ 896.387699][T17620] name failslab, interval 1, probability 0, space 0, times 0 [ 896.412669][T17620] CPU: 0 UID: 0 PID: 17620 Comm: syz.0.2317 Tainted: G U L syzkaller #0 PREEMPT(full) [ 896.412729][T17620] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 896.412743][T17620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 896.412763][T17620] Call Trace: [ 896.412775][T17620] [ 896.412787][T17620] dump_stack_lvl+0x100/0x190 [ 896.412837][T17620] should_fail_ex.cold+0x5/0xa [ 896.412881][T17620] should_failslab+0xc2/0x120 [ 896.412923][T17620] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 896.412979][T17620] ? sock_alloc_inode+0x26/0x290 [ 896.413025][T17620] ? __pfx_sock_alloc_inode+0x10/0x10 [ 896.413067][T17620] sock_alloc_inode+0x26/0x290 [ 896.413107][T17620] ? __pfx_sock_alloc_inode+0x10/0x10 [ 896.413145][T17620] alloc_inode+0x68/0x250 [ 896.413197][T17620] sock_alloc+0x44/0x280 [ 896.413232][T17620] ? security_socket_create+0x7f/0x250 [ 896.413339][T17620] __sock_create+0xc2/0x860 [ 896.413390][T17620] __sys_socket+0x14d/0x260 [ 896.413438][T17620] ? __pfx___sys_socket+0x10/0x10 [ 896.413481][T17620] ? ksys_write+0x1ac/0x250 [ 896.413552][T17620] __x64_sys_socket+0x72/0xb0 [ 896.413598][T17620] ? lockdep_hardirqs_on+0x78/0x100 [ 896.413654][T17620] do_syscall_64+0x115/0x840 [ 896.413700][T17620] ? clear_bhb_loop+0x40/0x90 [ 896.413741][T17620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.413774][T17620] RIP: 0033:0x7f07a8d9ce59 [ 896.413801][T17620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.413833][T17620] RSP: 002b:00007f07a9c45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 896.413864][T17620] RAX: ffffffffffffffda RBX: 00007f07a9015fa0 RCX: 00007f07a8d9ce59 [ 896.413885][T17620] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 896.413903][T17620] RBP: 00007f07a8e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 896.413923][T17620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.413941][T17620] R13: 00007f07a9016038 R14: 00007f07a9015fa0 R15: 00007ffde5c8c778 [ 896.413983][T17620] [ 896.414902][T17620] socket: no more sockets [ 897.514051][T17640] FAULT_INJECTION: forcing a failure. [ 897.514051][T17640] name failslab, interval 1, probability 0, space 0, times 0 [ 897.569508][T17646] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2321'. [ 897.624246][T17640] CPU: 1 UID: 7 PID: 17640 Comm: syz.4.2319 Tainted: G U L syzkaller #0 PREEMPT(full) [ 897.624314][T17640] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 897.624329][T17640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 897.624351][T17640] Call Trace: [ 897.624363][T17640] [ 897.624378][T17640] dump_stack_lvl+0x100/0x190 [ 897.624424][T17640] should_fail_ex.cold+0x5/0xa [ 897.624472][T17640] should_failslab+0xc2/0x120 [ 897.624522][T17640] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 897.624583][T17640] ? mas_preallocate+0x1105/0x14a0 [ 897.624631][T17640] mas_preallocate+0x1105/0x14a0 [ 897.624686][T17640] ? __pfx_mas_preallocate+0x10/0x10 [ 897.624737][T17640] ? anon_vma_name+0x5a/0x250 [ 897.624797][T17640] __split_vma+0x33d/0xda0 [ 897.624862][T17640] ? __pfx___split_vma+0x10/0x10 [ 897.624920][T17640] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 897.624997][T17640] vma_modify+0x12ad/0x25c0 [ 897.625074][T17640] ? __pfx_vma_modify+0x10/0x10 [ 897.625132][T17640] ? validate_mm+0x392/0x4e0 [ 897.625199][T17640] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 897.625281][T17640] vma_modify_flags+0x257/0x3d0 [ 897.625344][T17640] ? __pfx_vma_modify_flags+0x10/0x10 [ 897.625425][T17640] ? rcu_is_watching+0x12/0xc0 [ 897.625475][T17640] ? percpu_counter_add_batch+0xb9/0x230 [ 897.625549][T17640] mprotect_fixup+0x27a/0xe30 [ 897.625619][T17640] ? __pfx_mprotect_fixup+0x10/0x10 [ 897.625721][T17640] ? __pfx_mas_prev+0x10/0x10 [ 897.625793][T17640] do_mprotect_pkey+0xa4b/0xef0 [ 897.625864][T17640] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 897.625948][T17640] ? __vm_munmap+0x1d2/0x390 [ 897.625988][T17640] ? __pfx___vm_munmap+0x10/0x10 [ 897.626054][T17640] __x64_sys_mprotect+0x78/0xc0 [ 897.626103][T17640] ? lockdep_hardirqs_on+0x78/0x100 [ 897.626147][T17640] do_syscall_64+0x115/0x840 [ 897.626188][T17640] ? clear_bhb_loop+0x40/0x90 [ 897.626226][T17640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.626256][T17640] RIP: 0033:0x7f878199cc57 [ 897.626281][T17640] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.626313][T17640] RSP: 002b:00007f877fbf4d18 EFLAGS: 00000217 ORIG_RAX: 000000000000000a [ 897.626342][T17640] RAX: ffffffffffffffda RBX: 00007f8778000000 RCX: 00007f878199cc57 [ 897.626362][T17640] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f8778000000 [ 897.626382][T17640] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 897.626399][T17640] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 897.626417][T17640] R13: 0000000000001000 R14: 00007f877c000000 R15: 0000000000600000 [ 897.626454][T17640] [ 898.761003][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2322'. [ 901.903461][T17686] vivid-011: ================= START STATUS ================= [ 901.933727][T17686] vivid-011: Radio HW Seek Mode: Bounded [ 901.955073][T17686] vivid-011: Radio Programmable HW Seek: false [ 902.009835][T17686] vivid-011: RDS Rx I/O Mode: Block I/O [ 902.029130][T17686] vivid-011: Generate RBDS Instead of RDS: false [ 902.049923][T17686] vivid-011: RDS Reception: true [ 902.073455][T17686] vivid-011: RDS Program Type: 0 inactive [ 902.098208][T17686] vivid-011: RDS PS Name: inactive [ 902.118853][T17686] vivid-011: RDS Radio Text: inactive [ 902.142147][T17686] vivid-011: RDS Traffic Announcement: false inactive [ 902.164252][T17686] vivid-011: RDS Traffic Program: false inactive [ 902.182482][T17686] vivid-011: RDS Music: false inactive [ 902.198838][T17686] vivid-011: ================== END STATUS ================== [ 908.263139][T17734] openvswitch: &#$@\]\-: Dropping previously announced user features [ 908.309347][T17734] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 908.591941][T17732] ima: policy update failed [ 908.604700][ T30] audit: type=1802 audit(4294970105.711:26): pid=17732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2337" res=0 errno=0 [ 909.250735][T17753] openvswitch: &#$@\]\-: Dropping previously announced user features [ 909.291554][T17753] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 909.551070][T17752] ima: policy update failed [ 909.581525][ T30] audit: type=1802 audit(4294970106.676:27): pid=17752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2341" res=0 errno=0 [ 909.767543][T17744] netlink: 186 bytes leftover after parsing attributes in process `syz.6.2339'. [ 911.419966][T17785] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 911.434033][T17783] openvswitch: &#$@\]\-: Dropping previously announced user features [ 911.499098][T17782] ima: policy update failed [ 911.560108][ T30] audit: type=1802 audit(4294970108.666:28): pid=17782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2346" res=0 errno=0 [ 913.169345][T17805] FAULT_INJECTION: forcing a failure. [ 913.169345][T17805] name failslab, interval 1, probability 0, space 0, times 0 [ 913.207805][T17805] CPU: 0 UID: 0 PID: 17805 Comm: syz.6.2351 Tainted: G U L syzkaller #0 PREEMPT(full) [ 913.207865][T17805] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 913.207879][T17805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 913.207900][T17805] Call Trace: [ 913.207911][T17805] [ 913.207924][T17805] dump_stack_lvl+0x100/0x190 [ 913.207966][T17805] should_fail_ex.cold+0x5/0xa [ 913.208012][T17805] should_failslab+0xc2/0x120 [ 913.208055][T17805] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 913.208113][T17805] ? vm_area_alloc+0x1f/0x160 [ 913.208167][T17805] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 913.208225][T17805] vm_area_alloc+0x1f/0x160 [ 913.208276][T17805] __mmap_region+0x104d/0x2dd0 [ 913.208333][T17805] ? kasan_save_stack+0x3f/0x50 [ 913.208368][T17805] ? kasan_save_stack+0x30/0x50 [ 913.208403][T17805] ? __pfx___mmap_region+0x10/0x10 [ 913.208484][T17805] ? do_raw_spin_lock+0x128/0x260 [ 913.208529][T17805] ? __lock_acquire+0x4a5/0x2630 [ 913.208584][T17805] ? do_raw_spin_unlock+0x145/0x1e0 [ 913.208647][T17805] ? rcu_is_watching+0x12/0xc0 [ 913.208716][T17805] ? mark_held_locks+0x40/0x70 [ 913.208770][T17805] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 913.208870][T17805] ? rcu_is_watching+0x12/0xc0 [ 913.208909][T17805] mmap_region+0x35d/0x620 [ 913.208936][T17805] ? rcu_is_watching+0x12/0xc0 [ 913.208971][T17805] ? __pfx_mmap_region+0x10/0x10 [ 913.208999][T17805] ? cap_mmap_addr+0x4b/0x120 [ 913.209029][T17805] ? bpf_lsm_mmap_addr+0x9/0x30 [ 913.209057][T17805] ? security_mmap_addr+0x71/0x1e0 [ 913.209098][T17805] ? __get_unmapped_area+0x255/0x3e0 [ 913.209139][T17805] do_mmap+0xc63/0x12f0 [ 913.209187][T17805] ? __pfx_do_mmap+0x10/0x10 [ 913.209229][T17805] ? __pfx_down_write_killable+0x10/0x10 [ 913.209293][T17805] vm_mmap_pgoff+0x29e/0x470 [ 913.209343][T17805] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 913.209391][T17805] ? do_futex+0x192/0x350 [ 913.209426][T17805] ? __pfx_do_futex+0x10/0x10 [ 913.209468][T17805] ksys_mmap_pgoff+0xe4/0x610 [ 913.209510][T17805] ? __x64_sys_futex+0x358/0x4d0 [ 913.209546][T17805] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 913.209587][T17805] ? xfd_validate_state+0x129/0x190 [ 913.209630][T17805] __x64_sys_mmap+0x125/0x190 [ 913.209678][T17805] do_syscall_64+0x115/0x840 [ 913.209722][T17805] ? clear_bhb_loop+0x40/0x90 [ 913.209762][T17805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.209797][T17805] RIP: 0033:0x7f3294b9ce59 [ 913.209824][T17805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.209860][T17805] RSP: 002b:00007f32959c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 913.209892][T17805] RAX: ffffffffffffffda RBX: 00007f3294e16090 RCX: 00007f3294b9ce59 [ 913.209913][T17805] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 913.209933][T17805] RBP: 00007f3294c32d6f R08: fffffffffffffffa R09: 0000000000008000 [ 913.209954][T17805] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 913.209973][T17805] R13: 00007f3294e16128 R14: 00007f3294e16090 R15: 00007ffe1ed457a8 [ 913.210015][T17805] [ 915.550223][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'. [ 916.738548][T17842] Process accounting paused [ 917.555285][T17866] FAULT_INJECTION: forcing a failure. [ 917.555285][T17866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 917.594581][T17866] CPU: 0 UID: 7 PID: 17866 Comm: syz.6.2362 Tainted: G U L syzkaller #0 PREEMPT(full) [ 917.594638][T17866] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 917.594651][T17866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 917.594671][T17866] Call Trace: [ 917.594682][T17866] [ 917.594694][T17866] dump_stack_lvl+0x100/0x190 [ 917.594737][T17866] should_fail_ex.cold+0x5/0xa [ 917.594775][T17866] ? prepare_alloc_pages+0x16d/0x5f0 [ 917.594818][T17866] should_fail_alloc_page+0xeb/0x140 [ 917.594861][T17866] prepare_alloc_pages+0x1f0/0x5f0 [ 917.594905][T17866] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 917.594962][T17866] ? __pfx_stack_trace_save+0x10/0x10 [ 917.595001][T17866] ? stack_depot_save_flags+0x27/0x9d0 [ 917.595048][T17866] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 917.595094][T17866] ? kasan_save_stack+0x30/0x50 [ 917.595126][T17866] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 917.595174][T17866] ? __lock_acquire+0x4a5/0x2630 [ 917.595231][T17866] ? __lock_acquire+0x4a5/0x2630 [ 917.595277][T17866] ? find_held_lock+0x2b/0x80 [ 917.595312][T17866] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 917.595354][T17866] ? policy_nodemask+0xed/0x4f0 [ 917.595390][T17866] alloc_pages_mpol+0x1fb/0x540 [ 917.595434][T17866] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 917.595469][T17866] ? __anon_vma_prepare+0x2db/0x5e0 [ 917.595512][T17866] ? __anon_vma_prepare+0x2db/0x5e0 [ 917.595560][T17866] folio_alloc_mpol_noprof+0x36/0x260 [ 917.595602][T17866] vma_alloc_folio_noprof+0xed/0x1d0 [ 917.595642][T17866] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 917.595703][T17866] do_anonymous_page+0xb46/0x2050 [ 917.595748][T17866] ? __pfx_pgd_none+0x10/0x10 [ 917.595798][T17866] __handle_mm_fault+0x1d2c/0x2a00 [ 917.595849][T17866] ? reacquire_held_locks+0xce/0x1e0 [ 917.595894][T17866] ? __pfx___handle_mm_fault+0x10/0x10 [ 917.595948][T17866] ? lock_vma_under_rcu+0x17c/0x590 [ 917.596011][T17866] handle_mm_fault+0x37b/0xa30 [ 917.596063][T17866] do_user_addr_fault+0x5a3/0x12f0 [ 917.596108][T17866] exc_page_fault+0x6f/0xd0 [ 917.596148][T17866] asm_exc_page_fault+0x26/0x30 [ 917.596178][T17866] RIP: 0033:0x7f3294b5ed82 [ 917.596201][T17866] Code: 8d 15 9e 05 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 f0 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 917.596233][T17866] RSP: 002b:00007f32959e2d20 EFLAGS: 00010286 [ 917.596261][T17866] RAX: ffffffffffffffff RBX: 00007f328c000000 RCX: 00007f3294b9cc57 [ 917.596282][T17866] RDX: 00007f3294c4f2fc RSI: 0000000000021000 RDI: 00007f328c000000 [ 917.596302][T17866] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 917.596321][T17866] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 917.596340][T17866] R13: 0000000000001000 R14: 00007f3290000000 R15: 0000000001400000 [ 917.596382][T17866] [ 917.599754][T17866] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 918.356839][T17853] Process accounting resumed [ 918.383846][T17873] openvswitch: &#$@\]\-: Dropping previously announced user features [ 918.435685][T17872] ima: policy update failed [ 918.448808][ T30] audit: type=1802 audit(4294970115.612:29): pid=17872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2363" res=0 errno=0 [ 920.638675][ T30] audit: type=1326 audit(4294970117.803:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.0.2369" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07a8d9ce59 code=0x0 [ 922.062641][T17917] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 922.224591][T17912] openvswitch: &#$@\]\-: Dropping previously announced user features [ 922.471777][T17910] ima: policy update failed [ 922.524459][ T30] audit: type=1802 audit(4294970119.693:31): pid=17910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2370" res=0 errno=0 [ 923.464436][T17921] openvswitch: &#$@\]\-: Dropping previously announced user features [ 924.614193][T17939] openvswitch: &#$@\]\-: Dropping previously announced user features [ 924.752112][T17941] FAULT_INJECTION: forcing a failure. [ 924.752112][T17941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 924.785696][T17941] CPU: 1 UID: 7 PID: 17941 Comm: syz.0.2379 Tainted: G U L syzkaller #0 PREEMPT(full) [ 924.785753][T17941] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 924.785765][T17941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 924.785785][T17941] Call Trace: [ 924.785796][T17941] [ 924.785809][T17941] dump_stack_lvl+0x100/0x190 [ 924.785852][T17941] should_fail_ex.cold+0x5/0xa [ 924.785889][T17941] ? prepare_alloc_pages+0x16d/0x5f0 [ 924.785940][T17941] should_fail_alloc_page+0xeb/0x140 [ 924.785985][T17941] prepare_alloc_pages+0x1f0/0x5f0 [ 924.786037][T17941] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 924.786099][T17941] ? __pfx_stack_trace_save+0x10/0x10 [ 924.786169][T17941] ? stack_depot_save_flags+0x27/0x9d0 [ 924.786230][T17941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 924.786288][T17941] ? kasan_save_stack+0x30/0x50 [ 924.786325][T17941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 924.786410][T17941] ? look_up_lock_class+0x55/0x120 [ 924.786462][T17941] ? register_lock_class+0x40/0x560 [ 924.786533][T17941] ? __lock_acquire+0x4a5/0x2630 [ 924.786594][T17941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 924.786645][T17941] ? policy_nodemask+0xed/0x4f0 [ 924.786685][T17941] alloc_pages_mpol+0x1fb/0x540 [ 924.786728][T17941] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 924.786774][T17941] ? __anon_vma_prepare+0x2db/0x5e0 [ 924.786823][T17941] ? __anon_vma_prepare+0x2db/0x5e0 [ 924.786881][T17941] folio_alloc_mpol_noprof+0x36/0x260 [ 924.786934][T17941] vma_alloc_folio_noprof+0xed/0x1d0 [ 924.786983][T17941] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 924.787046][T17941] do_anonymous_page+0xb46/0x2050 [ 924.787101][T17941] ? __pfx_pgd_none+0x10/0x10 [ 924.787172][T17941] __handle_mm_fault+0x1d2c/0x2a00 [ 924.787235][T17941] ? reacquire_held_locks+0xce/0x1e0 [ 924.787290][T17941] ? __pfx___handle_mm_fault+0x10/0x10 [ 924.787349][T17941] ? lock_vma_under_rcu+0x17c/0x590 [ 924.787422][T17941] handle_mm_fault+0x37b/0xa30 [ 924.787482][T17941] do_user_addr_fault+0x5a3/0x12f0 [ 924.787534][T17941] exc_page_fault+0x6f/0xd0 [ 924.787582][T17941] asm_exc_page_fault+0x26/0x30 [ 924.787616][T17941] RIP: 0033:0x7f07a8d5ed82 [ 924.787643][T17941] Code: 8d 15 9e 05 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 f0 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 924.787676][T17941] RSP: 002b:00007f07a9c43d20 EFLAGS: 00010286 [ 924.787703][T17941] RAX: ffffffffffffffff RBX: 00007f07a0000000 RCX: 00007f07a8d9cc57 [ 924.787724][T17941] RDX: 00007f07a8e4f2fc RSI: 0000000000021000 RDI: 00007f07a0000000 [ 924.787744][T17941] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 924.787763][T17941] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 924.787782][T17941] R13: 0000000000001000 R14: 00007f07a4000000 R15: 0000000001200000 [ 924.787824][T17941] [ 925.420837][T17941] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 926.236975][T17953] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 926.258839][T17953] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 926.270475][T17953] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 926.286264][T17953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 926.294735][T17953] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 927.675084][T17952] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.704312][T17952] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.747806][T17952] bridge_slave_0: entered allmulticast mode [ 927.774603][T17952] bridge_slave_0: entered promiscuous mode [ 927.813363][T17952] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.840634][T17952] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.870295][T17952] bridge_slave_1: entered allmulticast mode [ 927.909242][T17952] bridge_slave_1: entered promiscuous mode [ 928.044249][T17974] openvswitch: &#$@\]\-: Dropping previously announced user features [ 928.073997][T17952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.123760][T17952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.146981][T17974] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 928.191612][T17973] ima: policy update failed [ 928.247621][ T30] audit: type=1802 audit(4294970125.453:32): pid=17973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2383" res=0 errno=0 [ 928.371315][T17952] team0: Port device team_slave_0 added [ 928.375776][T17953] Bluetooth: hci5: command tx timeout [ 928.517410][T17952] team0: Port device team_slave_1 added [ 928.955706][T17952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.979863][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.065013][T17952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.184636][T17987] openvswitch: &#$@\]\-: Dropping previously announced user features [ 929.194508][T17952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.212464][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.284426][T17952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.319845][T17986] ima: policy update failed [ 929.342884][ T30] audit: type=1802 audit(4294970126.559:33): pid=17986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2385" res=0 errno=0 [ 929.972876][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.980032][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.181854][T17952] hsr_slave_0: entered promiscuous mode [ 930.196269][T17952] hsr_slave_1: entered promiscuous mode [ 930.214356][T17952] debugfs: 'hsr0' already exists in 'hsr' [ 930.226221][T17952] Cannot create hsr debugfs directory [ 930.443578][T17953] Bluetooth: hci5: command tx timeout [ 931.235387][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2388'. [ 932.472476][T17952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.513600][T17953] Bluetooth: hci5: command tx timeout [ 932.943417][T17952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.332958][T17952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.540562][T18027] ubi0: attaching mtd0 [ 933.571622][T18027] ubi0: scanning is finished [ 933.586546][T18027] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 933.930978][T18027] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 934.350621][T17952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 934.385160][T17952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 934.544361][T17952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 934.584352][T17953] Bluetooth: hci5: command tx timeout [ 934.620108][T17952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 934.737516][T17952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 934.770762][T17952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 934.932972][T17952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 934.973075][T17952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 935.923024][T17952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.971764][T17952] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.016019][T16780] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.023232][T16780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.507238][T16780] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.514537][T16780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.282675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 938.548346][T17952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.014753][T17952] veth0_vlan: entered promiscuous mode [ 939.055503][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2401'. [ 939.070401][T17952] veth1_vlan: entered promiscuous mode [ 939.161267][T17952] veth0_macvtap: entered promiscuous mode [ 939.201383][T17952] veth1_macvtap: entered promiscuous mode [ 939.334004][T17952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.473474][T17952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.539625][T16778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.539705][T16778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.539761][T16778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.539826][T16778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.616771][T16776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.636451][T16776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.871955][T16781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.884217][T16781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.048874][T18101] FAULT_INJECTION: forcing a failure. [ 941.048874][T18101] name failslab, interval 1, probability 0, space 0, times 0 [ 941.119794][T18101] CPU: 1 UID: 0 PID: 18101 Comm: syz.4.2403 Tainted: G U L syzkaller #0 PREEMPT(full) [ 941.119851][T18101] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 941.119865][T18101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 941.119885][T18101] Call Trace: [ 941.119895][T18101] [ 941.119907][T18101] dump_stack_lvl+0x100/0x190 [ 941.119946][T18101] should_fail_ex.cold+0x5/0xa [ 941.119985][T18101] ? tomoyo_encode2+0xfb/0x3c0 [ 941.120020][T18101] should_failslab+0xc2/0x120 [ 941.120051][T18101] __kmalloc_noprof+0xe0/0x850 [ 941.120072][T18101] ? d_absolute_path+0x136/0x1b0 [ 941.120101][T18101] tomoyo_encode2+0xfb/0x3c0 [ 941.120141][T18101] tomoyo_encode+0x29/0x50 [ 941.120176][T18101] tomoyo_realpath_from_path+0x18c/0x690 [ 941.120267][T18101] tomoyo_mount_acl+0x1b6/0x8b0 [ 941.120314][T18101] ? is_bpf_text_address+0x8a/0x1a0 [ 941.120350][T18101] ? bpf_ksym_find+0x124/0x1c0 [ 941.120376][T18101] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 941.120414][T18101] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 941.120446][T18101] ? kernel_text_address+0x8d/0x100 [ 941.120472][T18101] ? unwind_get_return_address+0x59/0xa0 [ 941.120532][T18101] ? tomoyo_domain+0xb2/0x150 [ 941.120613][T18101] ? tomoyo_profile+0x47/0x60 [ 941.120660][T18101] tomoyo_mount_permission+0x214/0x460 [ 941.120694][T18101] ? tomoyo_mount_permission+0x1f6/0x460 [ 941.120732][T18101] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 941.120784][T18101] security_sb_mount+0xdd/0x270 [ 941.120813][T18101] path_mount+0x158/0x23d0 [ 941.120853][T18101] ? __pfx_path_mount+0x10/0x10 [ 941.120886][T18101] ? lockdep_hardirqs_on+0x78/0x100 [ 941.120926][T18101] ? putname+0xb1/0x110 [ 941.120957][T18101] ? kmem_cache_free+0x127/0x6c0 [ 941.121006][T18101] ? __x64_sys_mount+0x293/0x310 [ 941.121040][T18101] __x64_sys_mount+0x293/0x310 [ 941.121077][T18101] ? __pfx___x64_sys_mount+0x10/0x10 [ 941.121115][T18101] ? rcu_is_watching+0x12/0xc0 [ 941.121148][T18101] do_syscall_64+0x115/0x840 [ 941.121186][T18101] ? clear_bhb_loop+0x40/0x90 [ 941.121216][T18101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.121248][T18101] RIP: 0033:0x7f878199ce59 [ 941.121267][T18101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.121292][T18101] RSP: 002b:00007f877fbd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 941.121316][T18101] RAX: ffffffffffffffda RBX: 00007f8781c16090 RCX: 00007f878199ce59 [ 941.121333][T18101] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 941.121377][T18101] RBP: 00007f8781a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 941.121398][T18101] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 941.121417][T18101] R13: 00007f8781c16128 R14: 00007f8781c16090 R15: 00007ffc035a6da8 [ 941.121458][T18101] [ 941.168376][T18101] ERROR: Out of memory at tomoyo_realpath_from_path. [ 942.567617][T18119] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 942.613606][T18127] Process accounting resumed [ 943.051979][T18134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2406'. [ 945.437069][T18164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2412'. [ 945.501682][T18165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2412'. [ 946.497102][T18174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.670148][T18174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.753976][ T30] audit: type=1800 audit(4294970144.059:34): pid=18184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2414" name="dbroot" dev="configfs" ino=79214 res=0 errno=0 [ 953.013687][T18245] can: request_module (can-proto-0) failed. [ 955.084819][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2434'. [ 955.116341][T18285] netlink: 'syz.5.2434': attribute type 1 has an invalid length. [ 955.138318][T18285] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2434'. [ 957.052995][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 958.299147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 958.620216][T18322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.640107][T18322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.233966][T18340] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 960.257019][T18339] ima: policy update failed [ 960.291452][ T30] audit: type=1802 audit(4294970157.660:35): pid=18339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2447" res=0 errno=0 [ 961.195579][T18361] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[16710] was attempted by ""[18361] [ 961.418530][T18364] FAULT_INJECTION: forcing a failure. [ 961.418530][T18364] name failslab, interval 1, probability 0, space 0, times 0 [ 961.434877][T18364] CPU: 0 UID: 7 PID: 18364 Comm: syz.0.2452 Tainted: G U L syzkaller #0 PREEMPT(full) [ 961.434932][T18364] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 961.434954][T18364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 961.434978][T18364] Call Trace: [ 961.434989][T18364] [ 961.435003][T18364] dump_stack_lvl+0x100/0x190 [ 961.435048][T18364] should_fail_ex.cold+0x5/0xa [ 961.435095][T18364] should_failslab+0xc2/0x120 [ 961.435139][T18364] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 961.435196][T18364] ? mas_preallocate+0x1105/0x14a0 [ 961.435240][T18364] mas_preallocate+0x1105/0x14a0 [ 961.435283][T18364] ? __pfx_mas_preallocate+0x10/0x10 [ 961.435331][T18364] ? anon_vma_name+0x5a/0x250 [ 961.435386][T18364] __split_vma+0x33d/0xda0 [ 961.435445][T18364] ? __pfx___split_vma+0x10/0x10 [ 961.435508][T18364] ? __pfx_mas_prev+0x10/0x10 [ 961.435572][T18364] vms_gather_munmap_vmas+0x3a5/0x1720 [ 961.435632][T18364] ? validate_mm+0x392/0x4e0 [ 961.435686][T18364] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 961.435742][T18364] ? __pfx_validate_mm+0x10/0x10 [ 961.435823][T18364] do_vmi_align_munmap+0x287/0x5f0 [ 961.435887][T18364] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 961.435950][T18364] ? cap_mmap_addr+0x4b/0x120 [ 961.436047][T18364] do_vmi_munmap+0x1f8/0x3e0 [ 961.436110][T18364] __vm_munmap+0x196/0x390 [ 961.436149][T18364] ? __pfx___vm_munmap+0x10/0x10 [ 961.436212][T18364] __x64_sys_munmap+0x59/0x80 [ 961.436256][T18364] do_syscall_64+0x115/0x840 [ 961.436305][T18364] ? clear_bhb_loop+0x40/0x90 [ 961.436349][T18364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.436385][T18364] RIP: 0033:0x7f3278f9cc87 [ 961.436413][T18364] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.436447][T18364] RSP: 002b:00007f3279d6dd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 961.436481][T18364] RAX: ffffffffffffffda RBX: 00007f3270000000 RCX: 00007f3278f9cc87 [ 961.436504][T18364] RDX: 0000000000000000 RSI: 0000000001000000 RDI: 00007f326f000000 [ 961.436524][T18364] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 961.436544][T18364] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 961.436563][T18364] R13: 0000000000001000 R14: 00007f3274000000 R15: 0000000001000000 [ 961.436607][T18364] [ 962.600174][T17953] Bluetooth: hci1: command 0x2016 tx timeout [ 968.459816][T18452] bridge0: port 3(netdevsim3) entered blocking state [ 968.493427][T18452] bridge0: port 3(netdevsim3) entered disabled state [ 968.504133][T18452] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 968.558227][T18452] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 969.262428][T18468] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 969.306136][T18468] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 969.319338][T18468] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 969.328600][T18468] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 969.482338][T18468] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 969.496449][T18468] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 969.729493][T18468] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 969.748461][T18468] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 969.847378][T18468] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 971.192934][T17953] Bluetooth: hci0: command 0x0c1a tx timeout [ 971.353261][T17953] Bluetooth: hci3: command 0x0406 tx timeout [ 971.359787][T17953] Bluetooth: hci4: command 0x0c1a tx timeout [ 971.510194][T18492] Bluetooth: hci1: command 0x2016 tx timeout [ 971.749025][T18492] Bluetooth: hci5: command 0x0c1a tx timeout [ 971.988442][T11269] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 973.153702][T18501] Process accounting paused [ 973.420278][T18492] Bluetooth: hci3: command 0x0406 tx timeout [ 973.579389][T18492] Bluetooth: hci1: command 0x2016 tx timeout [ 973.818283][T18492] Bluetooth: hci5: command 0x0c1a tx timeout [ 975.887599][T18492] Bluetooth: hci5: command 0x0c1a tx timeout [ 976.247531][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2493'. [ 981.864556][T18626] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 981.883384][T18625] ima: policy update failed [ 981.919950][ T30] audit: type=1802 audit(4294970179.412:36): pid=18625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2506" res=0 errno=0 [ 989.027214][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 989.996592][T18727] FAULT_INJECTION: forcing a failure. [ 989.996592][T18727] name failslab, interval 1, probability 0, space 0, times 0 [ 990.058660][T18727] CPU: 0 UID: 0 PID: 18727 Comm: syz.6.2528 Tainted: G U L syzkaller #0 PREEMPT(full) [ 990.058716][T18727] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 990.058730][T18727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 990.058752][T18727] Call Trace: [ 990.058764][T18727] [ 990.058777][T18727] dump_stack_lvl+0x100/0x190 [ 990.058823][T18727] should_fail_ex.cold+0x5/0xa [ 990.058866][T18727] ? x509_fabricate_name.isra.0+0x5ea/0xa10 [ 990.058994][T18727] should_failslab+0xc2/0x120 [ 990.059049][T18727] __kmalloc_noprof+0xe0/0x850 [ 990.059082][T18727] ? __kmalloc_noprof+0x320/0x850 [ 990.059121][T18727] x509_fabricate_name.isra.0+0x5ea/0xa10 [ 990.059182][T18727] x509_note_issuer+0xf9/0x210 [ 990.059235][T18727] asn1_ber_decoder+0xd0c/0x2170 [ 990.059288][T18727] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 990.059352][T18727] x509_cert_parse+0x1c9/0x910 [ 990.059400][T18727] ? kasan_save_stack+0x3f/0x50 [ 990.059434][T18727] ? kasan_save_stack+0x30/0x50 [ 990.059464][T18727] ? kasan_save_track+0x14/0x30 [ 990.059501][T18727] pkcs7_extract_cert+0xa4/0x380 [ 990.059561][T18727] asn1_ber_decoder+0x12b3/0x2170 [ 990.059613][T18727] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 990.059678][T18727] pkcs7_parse_message+0x289/0x870 [ 990.059740][T18727] verify_pkcs7_signature+0x30/0xa0 [ 990.059782][T18727] valid_regdb+0x211/0x590 [ 990.059850][T18727] ? __pfx_valid_regdb+0x10/0x10 [ 990.059897][T18727] reg_reload_regdb+0x11a/0x460 [ 990.059941][T18727] ? __pfx_reg_reload_regdb+0x10/0x10 [ 990.059986][T18727] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 990.060050][T18727] ? nl80211_pre_doit+0x19a/0xae0 [ 990.060107][T18727] genl_family_rcv_msg_doit+0x214/0x300 [ 990.060166][T18727] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 990.060217][T18727] ? genl_get_cmd+0x3e7/0x760 [ 990.060273][T18727] ? bpf_lsm_capable+0x9/0x10 [ 990.060310][T18727] ? security_capable+0x80/0x260 [ 990.060352][T18727] genl_rcv_msg+0x560/0x800 [ 990.060407][T18727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 990.060457][T18727] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 990.060505][T18727] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 990.060544][T18727] ? __pfx_nl80211_post_doit+0x10/0x10 [ 990.060610][T18727] netlink_rcv_skb+0x159/0x420 [ 990.060654][T18727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 990.060715][T18727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 990.060779][T18727] ? netlink_deliver_tap+0x1ae/0xcc0 [ 990.060830][T18727] genl_rcv+0x28/0x40 [ 990.060874][T18727] netlink_unicast+0x585/0x850 [ 990.060925][T18727] ? __pfx_netlink_unicast+0x10/0x10 [ 990.060984][T18727] netlink_sendmsg+0x8b0/0xda0 [ 990.061046][T18727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.061089][T18727] ? __import_iovec+0x1d2/0x640 [ 990.061143][T18727] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 990.061186][T18727] ____sys_sendmsg+0x9e1/0xb70 [ 990.061232][T18727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.061282][T18727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 990.061334][T18727] ? __pfx_futex_wake_mark+0x10/0x10 [ 990.061384][T18727] ___sys_sendmsg+0x190/0x1e0 [ 990.061435][T18727] ? __pfx____sys_sendmsg+0x10/0x10 [ 990.061534][T18727] __sys_sendmsg+0x170/0x220 [ 990.061571][T18727] ? __pfx___sys_sendmsg+0x10/0x10 [ 990.061607][T18727] ? __x64_sys_futex+0x34f/0x4d0 [ 990.061659][T18727] ? rcu_is_watching+0x12/0xc0 [ 990.061705][T18727] do_syscall_64+0x115/0x840 [ 990.061754][T18727] ? clear_bhb_loop+0x40/0x90 [ 990.061796][T18727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.061830][T18727] RIP: 0033:0x7f3294b9ce59 [ 990.061857][T18727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.061891][T18727] RSP: 002b:00007f32959c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.061923][T18727] RAX: ffffffffffffffda RBX: 00007f3294e16090 RCX: 00007f3294b9ce59 [ 990.061944][T18727] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 990.061963][T18727] RBP: 00007f3294c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 990.061983][T18727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.062002][T18727] R13: 00007f3294e16128 R14: 00007f3294e16090 R15: 00007ffe1ed457a8 [ 990.062055][T18727] [ 991.094266][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 991.101002][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 991.372580][T18741] &#$@\]\-: entered promiscuous mode [ 991.412723][T18743] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 991.465166][T18740] ima: policy update failed [ 991.501392][ T30] audit: type=1802 audit(4294970189.042:37): pid=18740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2531" res=0 errno=0 [ 993.963492][T18790] openvswitch: &#$@\]\-: Dropping previously announced user features [ 994.277552][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2540'. [ 994.728734][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 995.109890][T18806] openvswitch: &#$@\]\-: Dropping previously announced user features [ 995.951367][T18829] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1000.223484][T16776] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 16 with max blocks 31 with error 117 [ 1000.239665][T16776] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1000.239665][T16776] [ 1000.449648][T18882] openvswitch: &#$@\]\-: Dropping previously announced user features [ 1003.288247][T18886] Process accounting resumed [ 1010.036173][T11269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1010.048149][T11269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1010.064133][T11269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1010.076421][T11269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1010.087539][T11269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1012.180835][T18492] Bluetooth: hci2: command tx timeout [ 1012.234787][T19016] FAULT_INJECTION: forcing a failure. [ 1012.234787][T19016] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.418676][T19016] CPU: 1 UID: 0 PID: 19016 Comm: syz.0.2581 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1012.418739][T19016] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1012.418754][T19016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1012.418776][T19016] Call Trace: [ 1012.418789][T19016] [ 1012.418803][T19016] dump_stack_lvl+0x100/0x190 [ 1012.418850][T19016] should_fail_ex.cold+0x5/0xa [ 1012.418898][T19016] ? get_callchain_buffers+0x123/0x380 [ 1012.418949][T19016] should_failslab+0xc2/0x120 [ 1012.419007][T19016] __kmalloc_noprof+0xe0/0x850 [ 1012.419045][T19016] ? __pfx_rcu_is_watching+0x10/0x10 [ 1012.419101][T19016] get_callchain_buffers+0x123/0x380 [ 1012.419152][T19016] ? bpf_lsm_capable+0x9/0x10 [ 1012.419193][T19016] ? security_capable+0x80/0x260 [ 1012.419236][T19016] stack_map_alloc+0x316/0x610 [ 1012.419283][T19016] ? __pfx_stack_map_mem_usage+0x10/0x10 [ 1012.419342][T19016] map_create+0x84e/0x2bc0 [ 1012.419398][T19016] ? futex_unqueue+0x13d/0x2c0 [ 1012.419438][T19016] ? __futex_wait+0x256/0x300 [ 1012.419498][T19016] ? __pfx_map_create+0x10/0x10 [ 1012.419558][T19016] ? __might_fault+0xc5/0x140 [ 1012.419618][T19016] ? __might_fault+0xc5/0x140 [ 1012.419698][T19016] __sys_bpf+0x2091/0x4b90 [ 1012.419742][T19016] ? __pfx___sys_bpf+0x10/0x10 [ 1012.419778][T19016] ? __pfx_futex_wait+0x10/0x10 [ 1012.419839][T19016] ? ksys_write+0x190/0x250 [ 1012.419898][T19016] ? do_futex+0x192/0x350 [ 1012.419965][T19016] ? xfd_validate_state+0x129/0x190 [ 1012.420026][T19016] __x64_sys_bpf+0x7b/0xc0 [ 1012.420070][T19016] ? lockdep_hardirqs_on+0x78/0x100 [ 1012.420129][T19016] do_syscall_64+0x115/0x840 [ 1012.420183][T19016] ? clear_bhb_loop+0x40/0x90 [ 1012.420233][T19016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.420273][T19016] RIP: 0033:0x7f3278f9ce59 [ 1012.420306][T19016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.420343][T19016] RSP: 002b:00007f32771d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1012.420380][T19016] RAX: ffffffffffffffda RBX: 00007f3279216180 RCX: 00007f3278f9ce59 [ 1012.420403][T19016] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 1012.420425][T19016] RBP: 00007f3279032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1012.420454][T19016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.420480][T19016] R13: 00007f3279216218 R14: 00007f3279216180 R15: 00007ffe31420558 [ 1012.420524][T19016] [ 1013.782565][T18986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.820146][T18986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.827477][T18986] bridge_slave_0: entered allmulticast mode [ 1013.842886][T18986] bridge_slave_0: entered promiscuous mode [ 1013.880672][T18986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.899660][T18986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.907236][T18986] bridge_slave_1: entered allmulticast mode [ 1013.934566][T18986] bridge_slave_1: entered promiscuous mode [ 1014.040046][T18986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.053725][T18986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.166204][T18986] team0: Port device team_slave_0 added [ 1014.189222][T18986] team0: Port device team_slave_1 added [ 1014.248175][T18492] Bluetooth: hci2: command tx timeout [ 1014.324601][T18986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.350376][T18986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.407383][T18986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.439212][T18986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.456600][T18986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.506418][T18986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.594625][T18492] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1014.697756][T18986] hsr_slave_0: entered promiscuous mode [ 1014.725004][T19029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.735601][T18986] hsr_slave_1: entered promiscuous mode [ 1014.763158][T18986] debugfs: 'hsr0' already exists in 'hsr' [ 1014.771659][T19029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.788892][T18986] Cannot create hsr debugfs directory [ 1014.801515][ T30] audit: type=1800 audit(4294970212.453:38): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2584" name="dbroot" dev="configfs" ino=85182 res=0 errno=0 [ 1015.122666][T19048] FAULT_INJECTION: forcing a failure. [ 1015.122666][T19048] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.150755][T19048] CPU: 0 UID: 0 PID: 19048 Comm: syz.6.2586 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1015.150810][T19048] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1015.150822][T19048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1015.150843][T19048] Call Trace: [ 1015.150854][T19048] [ 1015.150867][T19048] dump_stack_lvl+0x100/0x190 [ 1015.150908][T19048] should_fail_ex.cold+0x5/0xa [ 1015.150949][T19048] should_failslab+0xc2/0x120 [ 1015.150992][T19048] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1015.151047][T19048] ? do_getname+0x35/0x390 [ 1015.151097][T19048] ? ksys_write+0x190/0x250 [ 1015.151141][T19048] do_getname+0x35/0x390 [ 1015.151198][T19048] do_sys_openat2+0xc5/0x1e0 [ 1015.151250][T19048] ? __pfx_do_sys_openat2+0x10/0x10 [ 1015.151304][T19048] ? map_id_range_down+0x2bc/0x3b0 [ 1015.151360][T19048] __x64_sys_openat+0x12d/0x210 [ 1015.151425][T19048] ? __pfx___x64_sys_openat+0x10/0x10 [ 1015.151490][T19048] ? rcu_is_watching+0x12/0xc0 [ 1015.151537][T19048] do_syscall_64+0x115/0x840 [ 1015.151588][T19048] ? clear_bhb_loop+0x40/0x90 [ 1015.151631][T19048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.151668][T19048] RIP: 0033:0x7f3294b9ce59 [ 1015.151696][T19048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.151731][T19048] RSP: 002b:00007f32959c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1015.151782][T19048] RAX: ffffffffffffffda RBX: 00007f3294e16090 RCX: 00007f3294b9ce59 [ 1015.151806][T19048] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 1015.151828][T19048] RBP: 00007f3294c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1015.151849][T19048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.151875][T19048] R13: 00007f3294e16128 R14: 00007f3294e16090 R15: 00007ffe1ed457a8 [ 1015.151925][T19048] [ 1016.237038][T18986] netdevsim netdevsim4 netdevsim3 (unregistering): left allmulticast mode [ 1016.257392][T18986] netdevsim netdevsim4 netdevsim3 (unregistering): left promiscuous mode [ 1016.281091][T18986] bridge0: port 3(netdevsim3) entered disabled state [ 1016.318863][T11269] Bluetooth: hci2: command tx timeout [ 1016.349658][T18986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.429696][T19063] random: crng reseeded on system resumption [ 1016.636658][T11269] Bluetooth: hci3: command 0x0406 tx timeout [ 1016.667003][T18986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.917566][T18986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.196705][T18986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.386522][T18492] Bluetooth: hci2: command tx timeout [ 1018.537552][T18986] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1018.594549][T18986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1018.606676][T18986] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1018.651400][T18986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1018.702178][T18986] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1018.709738][T18492] Bluetooth: hci3: command 0x0406 tx timeout [ 1018.780228][T18986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1018.832294][T18986] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1018.910152][T18986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1018.948943][T19102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'. [ 1019.477562][T18986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.549012][T18986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.606668][T18789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.613962][T18789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.658523][T18789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.665835][T18789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.145705][T19116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.187476][T19116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.202361][ T30] audit: type=1800 audit(4294970217.891:39): pid=19121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2597" name="dbroot" dev="configfs" ino=85552 res=0 errno=0 [ 1020.533168][T19120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.560514][T19120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.604709][ T30] audit: type=1800 audit(4294970218.283:40): pid=19120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2598" name="dbroot" dev="configfs" ino=85552 res=0 errno=0 [ 1020.970089][T18986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.954684][T18986] veth0_vlan: entered promiscuous mode [ 1021.994910][T18986] veth1_vlan: entered promiscuous mode [ 1022.119899][T18986] veth0_macvtap: entered promiscuous mode [ 1022.182260][T18986] veth1_macvtap: entered promiscuous mode [ 1022.292132][T18986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.376969][T18986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.442358][T16765] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.475184][T16765] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.499243][T16765] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.527492][T16765] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.932244][T18793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.975683][T18793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.096488][T18793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.127257][T18793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.493076][T19183] FAULT_INJECTION: forcing a failure. [ 1023.493076][T19183] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.529818][T19183] CPU: 1 UID: 0 PID: 19183 Comm: syz.4.2577 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1023.529878][T19183] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1023.529891][T19183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1023.529912][T19183] Call Trace: [ 1023.529923][T19183] [ 1023.529936][T19183] dump_stack_lvl+0x100/0x190 [ 1023.529978][T19183] should_fail_ex.cold+0x5/0xa [ 1023.530024][T19183] should_failslab+0xc2/0x120 [ 1023.530071][T19183] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1023.530128][T19183] ? do_getname+0x35/0x390 [ 1023.530259][T19183] ? ksys_write+0x190/0x250 [ 1023.530303][T19183] do_getname+0x35/0x390 [ 1023.530359][T19183] do_sys_openat2+0xc5/0x1e0 [ 1023.530413][T19183] ? __pfx_do_sys_openat2+0x10/0x10 [ 1023.530470][T19183] ? map_id_range_down+0x2bc/0x3b0 [ 1023.530526][T19183] __x64_sys_openat+0x12d/0x210 [ 1023.530579][T19183] ? __pfx___x64_sys_openat+0x10/0x10 [ 1023.530641][T19183] ? rcu_is_watching+0x12/0xc0 [ 1023.530688][T19183] do_syscall_64+0x115/0x840 [ 1023.530737][T19183] ? clear_bhb_loop+0x40/0x90 [ 1023.530780][T19183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.530816][T19183] RIP: 0033:0x7f3b19d9ce59 [ 1023.530843][T19183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.530879][T19183] RSP: 002b:00007f3b1ad1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1023.530911][T19183] RAX: ffffffffffffffda RBX: 00007f3b1a016090 RCX: 00007f3b19d9ce59 [ 1023.530939][T19183] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 1023.530960][T19183] RBP: 00007f3b19e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1023.530980][T19183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.531000][T19183] R13: 00007f3b1a016128 R14: 00007f3b1a016090 R15: 00007ffd76fac578 [ 1023.531043][T19183] [ 1024.022292][T19189] openvswitch: &#$@\]\-: Dropping previously announced user features [ 1024.057781][T19189] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 1024.074841][T19186] ima: policy update failed [ 1024.138554][ T30] audit: type=1802 audit(4294970221.852:41): pid=19186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2608" res=0 errno=0 [ 1027.584987][T19241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.608696][T19241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.772965][ T30] audit: type=1800 audit(4294970225.501:42): pid=19246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2618" name="dbroot" dev="configfs" ino=85821 res=0 errno=0 [ 1029.610974][T19272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2624'. [ 1029.705533][T19275] ACPI: button: Initial lid state set to 'ignore' [ 1029.741112][T19257] binder: 19255:19257 unknown command 0 [ 1029.753943][T19257] binder: 19255:19257 ioctl c0306201 0 returned -22 [ 1030.502173][T16776] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1311 with max blocks 18 with error 117 [ 1030.534600][T16776] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1030.534600][T16776] [ 1030.877721][T19284] FAULT_INJECTION: forcing a failure. [ 1030.877721][T19284] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.919265][T19284] CPU: 0 UID: 0 PID: 19284 Comm: syz.0.2627 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1030.919323][T19284] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1030.919335][T19284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.919355][T19284] Call Trace: [ 1030.919366][T19284] [ 1030.919379][T19284] dump_stack_lvl+0x100/0x190 [ 1030.919422][T19284] should_fail_ex.cold+0x5/0xa [ 1030.919465][T19284] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1030.919520][T19284] should_failslab+0xc2/0x120 [ 1030.919560][T19284] __kmalloc_noprof+0xe0/0x850 [ 1030.919590][T19284] ? kfree+0x1dd/0x6c0 [ 1030.919643][T19284] tomoyo_realpath_from_path+0xb6/0x690 [ 1030.919703][T19284] tomoyo_check_open_permission+0x2af/0x3c0 [ 1030.919748][T19284] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1030.919806][T19284] ? hook_file_open+0x24e/0x7a0 [ 1030.919876][T19284] ? path_get+0x61/0x80 [ 1030.919926][T19284] tomoyo_file_open+0x6b/0x90 [ 1030.919959][T19284] security_file_open+0xb5/0x1e0 [ 1030.920015][T19284] do_dentry_open+0x588/0x14d0 [ 1030.920067][T19284] vfs_open+0x82/0x3f0 [ 1030.920147][T19284] path_openat+0x208c/0x31a0 [ 1030.920215][T19284] ? __pfx_path_openat+0x10/0x10 [ 1030.920285][T19284] do_file_open+0x20e/0x430 [ 1030.920332][T19284] ? __pfx_do_file_open+0x10/0x10 [ 1030.920405][T19284] ? alloc_fd+0x476/0x790 [ 1030.920462][T19284] ? do_getname+0x191/0x390 [ 1030.920517][T19284] do_sys_openat2+0x10d/0x1e0 [ 1030.920569][T19284] ? __pfx_do_sys_openat2+0x10/0x10 [ 1030.920655][T19284] __x64_sys_openat+0x12d/0x210 [ 1030.920710][T19284] ? __pfx___x64_sys_openat+0x10/0x10 [ 1030.920762][T19284] ? ksys_write+0x1ac/0x250 [ 1030.920806][T19284] ? rcu_is_watching+0x12/0xc0 [ 1030.920850][T19284] do_syscall_64+0x115/0x840 [ 1030.920897][T19284] ? clear_bhb_loop+0x40/0x90 [ 1030.920939][T19284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.920974][T19284] RIP: 0033:0x7f3278f9ce59 [ 1030.921009][T19284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.921042][T19284] RSP: 002b:00007f3279d6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1030.921075][T19284] RAX: ffffffffffffffda RBX: 00007f3279215fa0 RCX: 00007f3278f9ce59 [ 1030.921098][T19284] RDX: 00000000000c8042 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1030.921119][T19284] RBP: 00007f3279032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1030.921139][T19284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.921158][T19284] R13: 00007f3279216038 R14: 00007f3279215fa0 R15: 00007ffe31420558 [ 1030.921203][T19284] [ 1031.271339][T19284] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1031.784274][T19300] FAULT_INJECTION: forcing a failure. [ 1031.784274][T19300] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.811910][T19300] CPU: 1 UID: 0 PID: 19300 Comm: syz.4.2629 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1031.811970][T19300] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1031.811983][T19300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1031.812004][T19300] Call Trace: [ 1031.812015][T19300] [ 1031.812028][T19300] dump_stack_lvl+0x100/0x190 [ 1031.812075][T19300] should_fail_ex.cold+0x5/0xa [ 1031.812121][T19300] should_failslab+0xc2/0x120 [ 1031.812165][T19300] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1031.812221][T19300] ? vm_area_alloc+0x1f/0x160 [ 1031.812271][T19300] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1031.812327][T19300] vm_area_alloc+0x1f/0x160 [ 1031.812384][T19300] __mmap_region+0x104d/0x2dd0 [ 1031.812444][T19300] ? kasan_save_stack+0x3f/0x50 [ 1031.812485][T19300] ? kasan_save_stack+0x30/0x50 [ 1031.812521][T19300] ? __pfx___mmap_region+0x10/0x10 [ 1031.812585][T19300] ? trace_pelt_se_tp+0x13b/0x190 [ 1031.812651][T19300] ? do_raw_spin_lock+0x128/0x260 [ 1031.812692][T19300] ? find_held_lock+0x2b/0x80 [ 1031.812733][T19300] ? debug_object_activate+0x331/0x490 [ 1031.812784][T19300] ? debug_object_activate+0x331/0x490 [ 1031.812828][T19300] ? do_raw_spin_unlock+0x145/0x1e0 [ 1031.812901][T19300] ? mark_held_locks+0x40/0x70 [ 1031.812950][T19300] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1031.813024][T19300] ? rcu_is_watching+0x12/0xc0 [ 1031.813062][T19300] mmap_region+0x35d/0x620 [ 1031.813089][T19300] ? rcu_is_watching+0x12/0xc0 [ 1031.813121][T19300] ? __pfx_mmap_region+0x10/0x10 [ 1031.813151][T19300] ? cap_mmap_addr+0x4b/0x120 [ 1031.813177][T19300] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1031.813203][T19300] ? security_mmap_addr+0x71/0x1e0 [ 1031.813243][T19300] ? __get_unmapped_area+0x255/0x3e0 [ 1031.813281][T19300] do_mmap+0xc63/0x12f0 [ 1031.813321][T19300] ? __pfx_do_mmap+0x10/0x10 [ 1031.813357][T19300] ? __pfx_down_write_killable+0x10/0x10 [ 1031.813421][T19300] vm_mmap_pgoff+0x29e/0x470 [ 1031.813462][T19300] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1031.813499][T19300] ? do_futex+0x192/0x350 [ 1031.813529][T19300] ? __pfx_do_futex+0x10/0x10 [ 1031.813563][T19300] ksys_mmap_pgoff+0xe4/0x610 [ 1031.813597][T19300] ? __x64_sys_futex+0x358/0x4d0 [ 1031.813627][T19300] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1031.813662][T19300] ? xfd_validate_state+0x129/0x190 [ 1031.813697][T19300] __x64_sys_mmap+0x125/0x190 [ 1031.813732][T19300] do_syscall_64+0x115/0x840 [ 1031.813773][T19300] ? clear_bhb_loop+0x40/0x90 [ 1031.813809][T19300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.813839][T19300] RIP: 0033:0x7f3b19d9ce59 [ 1031.813865][T19300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.813894][T19300] RSP: 002b:00007f3b1ad1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1031.813923][T19300] RAX: ffffffffffffffda RBX: 00007f3b1a016090 RCX: 00007f3b19d9ce59 [ 1031.813943][T19300] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1031.813961][T19300] RBP: 00007f3b19e32d6f R08: fffffffffffffffa R09: 0000000000008000 [ 1031.813981][T19300] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1031.813999][T19300] R13: 00007f3b1a016128 R14: 00007f3b1a016090 R15: 00007ffd76fac578 [ 1031.814038][T19300] [ 1033.398798][T19304] Process accounting paused [ 1033.751966][T19344] can: request_module (can-proto-3) failed. [ 1037.721537][T19415] kafs: addr_prefs: Too many elements in string [ 1040.298006][T19449] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1040.307162][T19449] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1041.676305][T19464] FAULT_INJECTION: forcing a failure. [ 1041.676305][T19464] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.726358][T19464] CPU: 1 UID: 0 PID: 19464 Comm: syz.0.2663 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1041.726416][T19464] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1041.726429][T19464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1041.726450][T19464] Call Trace: [ 1041.726461][T19464] [ 1041.726474][T19464] dump_stack_lvl+0x100/0x190 [ 1041.726514][T19464] should_fail_ex.cold+0x5/0xa [ 1041.726558][T19464] should_failslab+0xc2/0x120 [ 1041.726598][T19464] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1041.726652][T19464] ? vm_area_alloc+0x1f/0x160 [ 1041.726700][T19464] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1041.726755][T19464] vm_area_alloc+0x1f/0x160 [ 1041.726803][T19464] __mmap_region+0x104d/0x2dd0 [ 1041.726860][T19464] ? kasan_save_stack+0x3f/0x50 [ 1041.726903][T19464] ? kasan_save_stack+0x30/0x50 [ 1041.726937][T19464] ? __pfx___mmap_region+0x10/0x10 [ 1041.726995][T19464] ? rcu_is_watching+0x12/0xc0 [ 1041.727033][T19464] ? trace_pelt_se_tp+0x13b/0x190 [ 1041.727096][T19464] ? do_raw_spin_lock+0x128/0x260 [ 1041.727139][T19464] ? __lock_acquire+0x4a5/0x2630 [ 1041.727194][T19464] ? do_raw_spin_unlock+0x145/0x1e0 [ 1041.727256][T19464] ? rcu_is_watching+0x12/0xc0 [ 1041.727316][T19464] ? mark_held_locks+0x40/0x70 [ 1041.727365][T19464] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1041.727471][T19464] ? rcu_is_watching+0x12/0xc0 [ 1041.727518][T19464] mmap_region+0x35d/0x620 [ 1041.727552][T19464] ? rcu_is_watching+0x12/0xc0 [ 1041.727590][T19464] ? __pfx_mmap_region+0x10/0x10 [ 1041.727627][T19464] ? cap_mmap_addr+0x4b/0x120 [ 1041.727658][T19464] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1041.727688][T19464] ? security_mmap_addr+0x71/0x1e0 [ 1041.727733][T19464] ? __get_unmapped_area+0x255/0x3e0 [ 1041.727780][T19464] do_mmap+0xc63/0x12f0 [ 1041.727829][T19464] ? __pfx_do_mmap+0x10/0x10 [ 1041.727871][T19464] ? __pfx_down_write_killable+0x10/0x10 [ 1041.727946][T19464] vm_mmap_pgoff+0x29e/0x470 [ 1041.727997][T19464] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1041.728042][T19464] ? do_futex+0x192/0x350 [ 1041.728080][T19464] ? __pfx_do_futex+0x10/0x10 [ 1041.728123][T19464] ksys_mmap_pgoff+0xe4/0x610 [ 1041.728166][T19464] ? __x64_sys_futex+0x358/0x4d0 [ 1041.728202][T19464] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1041.728242][T19464] ? xfd_validate_state+0x129/0x190 [ 1041.728275][T19464] ? ksys_write+0x1ac/0x250 [ 1041.728319][T19464] __x64_sys_mmap+0x125/0x190 [ 1041.728361][T19464] do_syscall_64+0x115/0x840 [ 1041.728409][T19464] ? clear_bhb_loop+0x40/0x90 [ 1041.728451][T19464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.728486][T19464] RIP: 0033:0x7f3278f9ce59 [ 1041.728514][T19464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.728548][T19464] RSP: 002b:00007f32771f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1041.728580][T19464] RAX: ffffffffffffffda RBX: 00007f3279216090 RCX: 00007f3278f9ce59 [ 1041.728602][T19464] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1041.728622][T19464] RBP: 00007f3279032d6f R08: fffffffffffffffa R09: 0000000000008000 [ 1041.728644][T19464] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1041.728665][T19464] R13: 00007f3279216128 R14: 00007f3279216090 R15: 00007ffe31420558 [ 1041.728709][T19464] [ 1042.224856][T19467] openvswitch: &#$@\]\-: Dropping previously announced user features [ 1042.564920][T19471] openvswitch: &#$@\]\-: Dropping previously announced user features [ 1042.612645][T19471] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 1042.635190][T19470] ima: policy update failed [ 1042.681177][ T30] audit: type=1802 audit(4294970240.488:43): pid=19470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2666" res=0 errno=0 [ 1044.995199][T19509] ecryptfs_miscdev_write: Error while inspecting packet size [ 1045.194161][ T30] audit: type=1806 audit(4294970243.011:44): xattr="" res=-22 [ 1047.951691][T19547] &#$@\]\-: entered promiscuous mode [ 1047.966409][T19551] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 1048.008721][T19546] ima: policy update failed [ 1048.055218][ T30] audit: type=1802 audit(4294970245.886:45): pid=19546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2685" res=0 errno=0 [ 1049.826476][T19581] ima: policy update failed [ 1049.837780][ T30] audit: type=1802 audit(4294970247.675:46): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2691" res=0 errno=0 [ 1052.216331][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1052.222927][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.486709][T19669] could not allocate digest TFM handle [ 1056.979713][T19689] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1057.600392][T19698] ================================================================== [ 1057.608576][T19698] BUG: KASAN: use-after-free in kvm_xen_shared_info_init+0x3c6/0x440 [ 1057.616899][T19698] Read of size 4 at addr ffff88809ca64900 by task syz.6.2714/19698 [ 1057.624931][T19698] [ 1057.627300][T19698] CPU: 1 UID: 0 PID: 19698 Comm: syz.6.2714 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1057.627353][T19698] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1057.627367][T19698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1057.627387][T19698] Call Trace: [ 1057.627398][T19698] [ 1057.627410][T19698] dump_stack_lvl+0x100/0x190 [ 1057.627447][T19698] print_report+0x13d/0x4b0 [ 1057.627496][T19698] ? __virt_addr_valid+0x239/0x430 [ 1057.627580][T19698] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 1057.627633][T19698] kasan_report+0xdf/0x1d0 [ 1057.627672][T19698] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 1057.627730][T19698] kvm_xen_shared_info_init+0x3c6/0x440 [ 1057.627785][T19698] kvm_xen_hvm_set_attr+0xcef/0x16a0 [ 1057.627836][T19698] ? __might_fault+0xc5/0x140 [ 1057.627888][T19698] ? __pfx_kvm_xen_hvm_set_attr+0x10/0x10 [ 1057.627947][T19698] kvm_arch_vm_ioctl+0x2a0/0x18d0 [ 1057.627998][T19698] ? arch_stack_walk+0xa6/0xf0 [ 1057.628035][T19698] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1057.628084][T19698] ? __lock_acquire+0x4a5/0x2630 [ 1057.628145][T19698] ? __lock_acquire+0x4a5/0x2630 [ 1057.628199][T19698] ? __lock_acquire+0x4a5/0x2630 [ 1057.628254][T19698] ? __lock_acquire+0x4a5/0x2630 [ 1057.628318][T19698] ? is_bpf_text_address+0x8a/0x1a0 [ 1057.628363][T19698] ? bpf_ksym_find+0x124/0x1c0 [ 1057.628395][T19698] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1057.628442][T19698] ? is_bpf_text_address+0x94/0x1a0 [ 1057.628486][T19698] ? kernel_text_address+0x8d/0x100 [ 1057.628525][T19698] ? __pfx_widen_string+0x10/0x10 [ 1057.628561][T19698] ? __kernel_text_address+0xd/0x30 [ 1057.628593][T19698] ? unwind_get_return_address+0x59/0xa0 [ 1057.628637][T19698] ? arch_stack_walk+0xa6/0xf0 [ 1057.628681][T19698] ? tomoyo_path_number_perm+0x46d/0x580 [ 1057.628723][T19698] ? stack_trace_save+0x8e/0xc0 [ 1057.628764][T19698] ? __pfx_stack_trace_save+0x10/0x10 [ 1057.628807][T19698] ? stack_depot_save_flags+0x27/0x9d0 [ 1057.628859][T19698] ? __lock_acquire+0x4a5/0x2630 [ 1057.628911][T19698] ? tomoyo_path_number_perm+0x46d/0x580 [ 1057.628951][T19698] ? kasan_save_stack+0x3f/0x50 [ 1057.628983][T19698] ? kasan_save_stack+0x30/0x50 [ 1057.629013][T19698] ? kasan_save_track+0x14/0x30 [ 1057.629045][T19698] ? kasan_save_free_info+0x3b/0x70 [ 1057.629094][T19698] kvm_vm_ioctl+0x1564/0x4050 [ 1057.629143][T19698] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1057.629200][T19698] ? kasan_quarantine_put+0x104/0x240 [ 1057.629231][T19698] ? lockdep_hardirqs_on+0x78/0x100 [ 1057.629278][T19698] ? find_held_lock+0x2b/0x80 [ 1057.629318][T19698] ? tomoyo_path_number_perm+0x28f/0x580 [ 1057.629357][T19698] ? tomoyo_path_number_perm+0x28f/0x580 [ 1057.629401][T19698] ? tomoyo_path_number_perm+0x188/0x580 [ 1057.629443][T19698] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1057.629483][T19698] ? futex_wait+0x11e/0x370 [ 1057.629535][T19698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1057.629583][T19698] ? do_vfs_ioctl+0x226/0x13e0 [ 1057.629615][T19698] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1057.629653][T19698] ? find_held_lock+0x2b/0x80 [ 1057.629693][T19698] ? __fget_files+0x215/0x3d0 [ 1057.629729][T19698] ? hook_file_ioctl_common+0x149/0x410 [ 1057.629776][T19698] ? __fget_files+0x21f/0x3d0 [ 1057.629817][T19698] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1057.629860][T19698] __x64_sys_ioctl+0x18e/0x210 [ 1057.629893][T19698] do_syscall_64+0x115/0x840 [ 1057.629939][T19698] ? clear_bhb_loop+0x40/0x90 [ 1057.629976][T19698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.630010][T19698] RIP: 0033:0x7f3294b9ce59 [ 1057.630037][T19698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.630072][T19698] RSP: 002b:00007f32959e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1057.630104][T19698] RAX: ffffffffffffffda RBX: 00007f3294e15fa0 RCX: 00007f3294b9ce59 [ 1057.630127][T19698] RDX: 0000000000000004 RSI: 000000004048aec9 RDI: 0000000000000003 [ 1057.630147][T19698] RBP: 00007f3294c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1057.630167][T19698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.630186][T19698] R13: 00007f3294e16038 R14: 00007f3294e15fa0 R15: 00007ffe1ed457a8 [ 1057.630218][T19698] [ 1057.630229][T19698] [ 1058.040857][T19698] The buggy address belongs to the physical page: [ 1058.047316][T19698] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x9ca64 [ 1058.056121][T19698] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1058.063278][T19698] raw: 00fff00000000000 ffffea0001f68fc8 ffff8880b8541330 0000000000000000 [ 1058.071908][T19698] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 1058.080525][T19698] page dumped because: kasan: bad access detected [ 1058.086975][T19698] page_owner tracks the page as freed [ 1058.092453][T19698] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 19698, tgid 19696 (syz.6.2714), ts 1057499728941, free_ts 1057600289814 [ 1058.110757][T19698] post_alloc_hook+0xfd/0x120 [ 1058.115515][T19698] get_page_from_freelist+0x11a6/0x3410 [ 1058.121122][T19698] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1058.127094][T19698] alloc_pages_mpol+0x1fb/0x540 [ 1058.131986][T19698] folio_alloc_mpol_noprof+0x36/0x260 [ 1058.137429][T19698] shmem_alloc_folio+0x135/0x160 [ 1058.142418][T19698] shmem_alloc_and_add_folio+0x371/0xd40 [ 1058.148106][T19698] shmem_get_folio_gfp+0x6ab/0x1900 [ 1058.153341][T19698] shmem_fault+0x1f9/0xa20 [ 1058.157829][T19698] __do_fault+0x10b/0x440 [ 1058.162195][T19698] do_fault+0x2db/0x1750 [ 1058.166483][T19698] __handle_mm_fault+0x187d/0x2a00 [ 1058.171647][T19698] handle_mm_fault+0x37b/0xa30 [ 1058.176458][T19698] __get_user_pages+0x1178/0x32a0 [ 1058.181528][T19698] get_user_pages_unlocked+0x1cb/0x7d0 [ 1058.187025][T19698] hva_to_pfn+0x871/0xd60 [ 1058.191418][T19698] page last free pid 19698 tgid 19696 stack trace: [ 1058.197942][T19698] __free_frozen_pages+0x794/0x10a0 [ 1058.203198][T19698] __folio_put+0x3b4/0x5f0 [ 1058.207663][T19698] kvm_release_page_clean+0x1dc/0x250 [ 1058.213086][T19698] __kvm_gpc_refresh+0x195d/0x22c0 [ 1058.218240][T19698] __kvm_gpc_activate+0x2ab/0x490 [ 1058.223301][T19698] kvm_gpc_activate_hva+0x73/0xa0 [ 1058.228370][T19698] kvm_xen_hvm_set_attr+0x395/0x16a0 [ 1058.233707][T19698] kvm_arch_vm_ioctl+0x2a0/0x18d0 [ 1058.238806][T19698] kvm_vm_ioctl+0x1564/0x4050 [ 1058.243621][T19698] __x64_sys_ioctl+0x18e/0x210 [ 1058.248423][T19698] do_syscall_64+0x115/0x840 [ 1058.253062][T19698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.258997][T19698] [ 1058.261377][T19698] Memory state around the buggy address: [ 1058.267056][T19698] ffff88809ca64800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1058.275148][T19698] ffff88809ca64880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1058.283291][T19698] >ffff88809ca64900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1058.291421][T19698] ^ [ 1058.295543][T19698] ffff88809ca64980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1058.303658][T19698] ffff88809ca64a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1058.311781][T19698] ================================================================== [ 1058.320054][T19698] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1058.327392][T19698] CPU: 1 UID: 0 PID: 19698 Comm: syz.6.2714 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1058.338388][T19698] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1058.343976][T19698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1058.354630][T19698] Call Trace: [ 1058.357948][T19698] [ 1058.360913][T19698] dump_stack_lvl+0x100/0x190 [ 1058.365662][T19698] vpanic+0x552/0x970 [ 1058.369678][T19698] ? __pfx_vpanic+0x10/0x10 [ 1058.374475][T19698] ? __pfx_vprintk_emit+0x10/0x10 [ 1058.379634][T19698] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 1058.385407][T19698] panic+0xd1/0xe0 [ 1058.389161][T19698] ? __pfx_panic+0x10/0x10 [ 1058.393637][T19698] ? end_report.part.0+0x23/0x90 [ 1058.398637][T19698] ? rcu_is_watching+0x12/0xc0 [ 1058.403460][T19698] ? end_report.part.0+0x23/0x90 [ 1058.408454][T19698] check_panic_on_warn.cold+0x19/0x34 [ 1058.413880][T19698] end_report.part.0+0x3a/0x90 [ 1058.418700][T19698] kasan_report.cold+0xe/0x18 [ 1058.423427][T19698] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 1058.429200][T19698] kvm_xen_shared_info_init+0x3c6/0x440 [ 1058.434801][T19698] kvm_xen_hvm_set_attr+0xcef/0x16a0 [ 1058.440143][T19698] ? __might_fault+0xc5/0x140 [ 1058.444868][T19698] ? __pfx_kvm_xen_hvm_set_attr+0x10/0x10 [ 1058.450649][T19698] kvm_arch_vm_ioctl+0x2a0/0x18d0 [ 1058.455730][T19698] ? arch_stack_walk+0xa6/0xf0 [ 1058.460569][T19698] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1058.466099][T19698] ? __lock_acquire+0x4a5/0x2630 [ 1058.471100][T19698] ? __lock_acquire+0x4a5/0x2630 [ 1058.476124][T19698] ? __lock_acquire+0x4a5/0x2630 [ 1058.481215][T19698] ? __lock_acquire+0x4a5/0x2630 [ 1058.486483][T19698] ? is_bpf_text_address+0x8a/0x1a0 [ 1058.491747][T19698] ? bpf_ksym_find+0x124/0x1c0 [ 1058.496578][T19698] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1058.502776][T19698] ? is_bpf_text_address+0x94/0x1a0 [ 1058.508023][T19698] ? kernel_text_address+0x8d/0x100 [ 1058.513255][T19698] ? __pfx_widen_string+0x10/0x10 [ 1058.518324][T19698] ? __kernel_text_address+0xd/0x30 [ 1058.523557][T19698] ? unwind_get_return_address+0x59/0xa0 [ 1058.529233][T19698] ? arch_stack_walk+0xa6/0xf0 [ 1058.534126][T19698] ? tomoyo_path_number_perm+0x46d/0x580 [ 1058.539801][T19698] ? stack_trace_save+0x8e/0xc0 [ 1058.544695][T19698] ? __pfx_stack_trace_save+0x10/0x10 [ 1058.550111][T19698] ? stack_depot_save_flags+0x27/0x9d0 [ 1058.555622][T19698] ? __lock_acquire+0x4a5/0x2630 [ 1058.560613][T19698] ? tomoyo_path_number_perm+0x46d/0x580 [ 1058.566291][T19698] ? kasan_save_stack+0x3f/0x50 [ 1058.571176][T19698] ? kasan_save_stack+0x30/0x50 [ 1058.576061][T19698] ? kasan_save_track+0x14/0x30 [ 1058.580942][T19698] ? kasan_save_free_info+0x3b/0x70 [ 1058.586194][T19698] kvm_vm_ioctl+0x1564/0x4050 [ 1058.590924][T19698] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1058.596018][T19698] ? kasan_quarantine_put+0x104/0x240 [ 1058.601432][T19698] ? lockdep_hardirqs_on+0x78/0x100 [ 1058.606691][T19698] ? find_held_lock+0x2b/0x80 [ 1058.611409][T19698] ? tomoyo_path_number_perm+0x28f/0x580 [ 1058.617091][T19698] ? tomoyo_path_number_perm+0x28f/0x580 [ 1058.622768][T19698] ? tomoyo_path_number_perm+0x188/0x580 [ 1058.628445][T19698] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1058.634463][T19698] ? futex_wait+0x11e/0x370 [ 1058.639007][T19698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1058.644948][T19698] ? do_vfs_ioctl+0x226/0x13e0 [ 1058.649752][T19698] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1058.654810][T19698] ? find_held_lock+0x2b/0x80 [ 1058.659525][T19698] ? __fget_files+0x215/0x3d0 [ 1058.664244][T19698] ? hook_file_ioctl_common+0x149/0x410 [ 1058.670009][T19698] ? __fget_files+0x21f/0x3d0 [ 1058.674734][T19698] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1058.679883][T19698] __x64_sys_ioctl+0x18e/0x210 [ 1058.684679][T19698] do_syscall_64+0x115/0x840 [ 1058.689315][T19698] ? clear_bhb_loop+0x40/0x90 [ 1058.694031][T19698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.699975][T19698] RIP: 0033:0x7f3294b9ce59 [ 1058.704424][T19698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.724066][T19698] RSP: 002b:00007f32959e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.732519][T19698] RAX: ffffffffffffffda RBX: 00007f3294e15fa0 RCX: 00007f3294b9ce59 [ 1058.740525][T19698] RDX: 0000000000000004 RSI: 000000004048aec9 RDI: 0000000000000003 [ 1058.748532][T19698] RBP: 00007f3294c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1058.756539][T19698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.764542][T19698] R13: 00007f3294e16038 R14: 00007f3294e15fa0 R15: 00007ffe1ed457a8 [ 1058.772569][T19698] [ 1058.775774][T19698] Kernel Offset: disabled [ 1058.780120][T19698] Rebooting in 86400 seconds..