last executing test programs: 17m51.494350808s ago: executing program 3 (id=1260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x14, r1, 0x1, 0x51bd2e, 0x25dfcbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20000004) 17m51.144763666s ago: executing program 3 (id=1261): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x5e0, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x5bc, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x434, 0x5, 0x0, 0x1, [{0x428, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x3bc, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xf1f}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x13, 0x14, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x8001}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xfffffffe}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xfffffffffffffe01}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x10001}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x62}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xff}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8e3}]}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x13, 0x13, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x64f}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6}]}]}, @NL80211_PMSR_RESP_ATTR_DATA={0x2c0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x10000}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xfd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0xd0a6}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x3c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xe}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x5}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xf0}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x4b}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x81}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x3}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x6}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x61e}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xc6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3e}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x1c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_BW={0x5}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x3}]}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xeba}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xda3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xffffffffffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x1000}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xc478673}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x6c}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9255}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x2c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x9}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x7f}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x1}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x9d}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x6f4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_LCI={0x13, 0x13, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xffffffffffffff7f}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xe}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x4}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x4}, {0x4}]}, @NL80211_PMSR_ATTR_PEERS={0x184, 0x5, 0x0, 0x1, [{0x17c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x58}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x2}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xc5, 0x1, "d613b9e401624bc61bc0ad03e0ebda5cbde65152965382b1ea19967e82310bda3042c90154646bd1fa369d334279585b274eb513f94382af7d07d9ef771de193afa6771311f477a9371291689bdb54992cb2afc81e76f0b72cfc789af8ae3a6758cfb18f1ffaa8de83222964d7cd0e1d13db6dffbb44e24fed11c0fb9d27cfdd9fb1472b5e342b05f3a99e8d8ee6ca4248598a8b0b7069c24a718c892b609892bace0a7fa2350d784801c6e671daf84926e03e8e7384097b6f8ea5da52c3f794c2"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x77, 0x1, "e1dd4048295dc03b183afb62e622b74c5f147e58570f8393edb697aa593e398ed0e6b6b5365a684c95c837bd1a5e02a235a6e041a5f0aaf17cde10dc3b625bc5c66dfe60a308866a7ca23170224a3e96901aba5943143fea45a3afdc3de927402ff95401d8eeed7759743750802a752aee776b"}]}, {0x4}]}]}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880) socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0xca, &(0x7f0000000280)='U\xfd:\xb5T\x04>2\x04!\xe2\xa2\x00\x00\x00\x00\x00C\xc2\xf3\xff>\x0f8\xdf\xba\x1f\x14\xaf6\x9c\x8bV\xa8\\\x13\x11\x13\xfd]\xf7\xb6\xa6\xf6\xd9>u\x8e9\x98\xacp\xec1\xcb\x15K\xdb*\x1b\xf6;\xbe\xd4\xea\x86', 0x7e) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="ad010000c85263a4be1307a0c28f81ef34d5ca8ee224680ffe75c374d130ffb727f3ccc5", @ANYRES16=0x0, @ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x30302, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x109a00, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0xfffffffffffeffff, 0xfffffffe, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) madvise$auto(0x0, 0x2003f0, 0x15) io_uring_register$auto_IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f00000001c0)="18036b70afd0d22747b9febd8d4dab86664193209a8983dc50a35d2eac6cca44d9cea54f39044159ea1b6741db9df586d914df028c89448907ebfcdc11ff040dbfa899bafbebd243a277cc30580473bbec5af51d4d73f0811e259c659cee28", 0xfffffff0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) 17m50.584384085s ago: executing program 3 (id=1264): close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x4000007f) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x6) pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9) ioctl$auto(0x4000000000000c8, 0x410454cc, r0) 17m50.358189747s ago: executing program 3 (id=1265): mmap$auto(0x0, 0x400004, 0x200000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.kill\x00', 0xa001, 0x0) write$auto(r1, 0x0, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffc, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) rename$auto(&(0x7f00000000c0)=':,\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r2, 0x40044145, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="08004d1c63d656a61e8d954e", @ANYRES32=0x9, @ANYBLOB="0800070000010000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 17m49.62515881s ago: executing program 3 (id=1268): mmap$auto(0x0, 0x400008, 0x1000470, 0x12, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) r0 = socket(0x1e, 0x805, 0x0) connect$auto(r0, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0x180, 0x0) pread64$auto(r1, 0x0, 0x100000001, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/acpi/parameters/acpica_version\x00', 0x400, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)=""/292, 0x124) sendfile$auto(r2, r2, 0x0, 0x1) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44b, 0x7, 0x5, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x800c, 0x80000001, 0x4, 0x200000000001, 0x384, 0xde3, 0x800000000008, 0x0, 0x2, 0x0, 0xffffff38, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44cd98b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfff]}, 0xa, 0xd) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x3, 0x6) socket(0x2, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r5, 0x401c5820, 0x0) 17m48.91426132s ago: executing program 3 (id=1272): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x2, 0xffffffff, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @raw=0xfffffffe}, 0x5c8a, 0x10000005, 0x4, @raw=0x2, @integer={0x5, 0x800, 0x5}, "7a9fc199a16a2311eacf2fc7ae1dc378dc3e8090d70925450ece0bb32777702b07550d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0xf}, 0x7, 0x0, 0x5, 0xe}, 0x5}, 0x1, 0x101) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_uhid_fops_uhid(r2, 0x0, 0xfccd) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xfdef) setsockopt$auto_SO_BROADCAST(r1, 0x0, 0x6, &(0x7f0000000000)='[\x00', 0x8000) io_uring_enter$auto(r1, 0x0, 0x101, 0x7, &(0x7f0000000ac0)="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", 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) 17m33.714487698s ago: executing program 32 (id=1272): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x2, 0xffffffff, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @raw=0xfffffffe}, 0x5c8a, 0x10000005, 0x4, @raw=0x2, @integer={0x5, 0x800, 0x5}, "7a9fc199a16a2311eacf2fc7ae1dc378dc3e8090d70925450ece0bb32777702b07550d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0xf}, 0x7, 0x0, 0x5, 0xe}, 0x5}, 0x1, 0x101) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_uhid_fops_uhid(r2, 0x0, 0xfccd) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xfdef) setsockopt$auto_SO_BROADCAST(r1, 0x0, 0x6, &(0x7f0000000000)='[\x00', 0x8000) io_uring_enter$auto(r1, 0x0, 0x101, 0x7, &(0x7f0000000ac0)="8ca984d3d7744d959f5d26e6d5db1a0feb31fa05d03f820d439fccaaefdac31bfc236f95ea0708232c6c4be2137ecd7768d9543b8f97af4a4ca670ad8cd44652f6297e3f50f6a5b1356905dcf54028c367bf8f8cfd49bc81a0fc4d1d978ffec9428614a2eefeb564fc1106a626dc3769f61371c133469294a5915dcf75621a1de489bee25a35668f695d0e342febb6a88bd5a36fddaaae828d9278d8fecf12e151b6703aefd905eab8171f43ca1d2dbb1e56a35a0e954180aed61194aba799a31dc9e05c32c212602ad6cc6f6fd3302513692d8410a01b3d3eff0326b5d16760ea9bfca15593aadcee0b2c82d2bd2fe1b25292f91ba03fb9faa2dc18c3bede258892ebf7b45a5cad744afdb76dc9e7a9d98b7ecfee8a7f1f6300498c9b341bee0e37217139459eb023af1141ce865208cd4d6b32386434551456278ef9f8685d7afa80dca010e301762ab648716d626395eba59cc39a3018f42a025901d59624f164f2d9372c6b0d6545cdcf87262c489d6e3908fe88b667e764fa0fdcec7edf22a41775243d6312ef696a526bc81f3533c91865cd739913713bbe185d0b93a0d6d96b06a41c1219d267a78e40d414b3de27c93ed8e1a2e9f5e1b1eb395d94fa4de88386fe803feba01fa4b863f8f39b9ddd0939414097f41adcc659a80ddc3975c61db836c9d4c32fcfc077e3ffa843282fa7950db6aef40064bb8dcb5dc462c6c3932eb529a756358f4dd1d421dd6809258b724f9d3f4c7843f3e7f9682ca3f889d1234ebaa7fa8d564efb464391d86c1a1e5c85c92918479e64501948c14125ea76c018ea4d70bccaf47441a8df3382c2729b6fc8eb5ec332824c4ddfeaef0c1abf7c101030cf761a10d7351ce58255eb69c218b93aaeac32efbcaa4a42286c0c04241006ace2d332470d8eaa64e6b976dfa60cd487b0b86017f627b21a155eb209695b7324cf7d7717b35985cefa6066666850609db21520843e1d3f9e5739f3cab73c8e469ffafb87d7c770c68a0ebfa9b6cc9115e47cfdee191a7d15d7245bbf646fa7cf01522910f5455fb6670f1835fb63e44b6156a8a8bf46f6e0fafa996a976f12a1660c1fa785aaf818e3b9691ea2c3f6aa562d4624f8786dc5fa31e982be3561fe692344b262bb2a8e3f0d250de2c36af8e6f9907c03ccaea47c7369bb74f030a518237420360e492a7393b7e4916157a4471298e3b8321fcd67c66db927f5cb7660a8c1eaef153588c47b8aeaad078f3093d0bfa6ac0b510bf3b9775da307b7695d5ebe73bd43fc530f76d73e3c88445cc039fbc14006f607dee0395380b6efd5feda6ea889638a15af01044ecc038b8b18f97fd11989efaac05f52409d95bb6d03f7e2f00b654a883bc673fcc940f2f52e03f40a63c44650e82f2535cef430a3054ee65059e13ab249a03dc18cd708ba413c10416e01d8ff8d417a1fd91775fd1ec9fd36e9935ba9bf22c3d8437811fc9647bd0be0e23ef366cc3cf01d2203e14a75d1ff87f06c0962d73b23c3ffcc561945e99d5b70976303052ade44ab982e27b6ba085f0275f2cdab1bfec92b9e25a67cde01ec94d2abf03727e69abb09aed9d7606ab7d91087d68d51e009c53518eea39ca8e35841d9814d4dae3867ae89bee91ebbedef9d29770dd8d4e36c31cfb1fcc20f8d06053d79f9ec985727d6b5188b2d6f02e9e52a8aa153d5c249a24e98315dbbf6694e7921cac0805edd345b0233095606356e7200acc8155957cf691a36e79f9a56a773f447ca970ccfecd5c9614b02980e282c095e0ecb41a27ce05c6565dc770cfc5011fbaaa61c00fcd737b954c49af4d0d360f3a8e3703ab528133e4d3c542831b3e3b2ec7b14d1bfb0f691cf95d351a9c9012676f3bcae38e85e4864eb1a0406432dbe979f926bcfcda84356dfe3ba27ff721c3b254128f7fa84cf5e794e55e26fec6616b26ddccc0431c62364ace5adb6645a55c9aa916560dc20fb58e3259e0ab8c00f10156bc39e3c3356ff630ee681e6a75b2f71a35f95834e6521889b94199de1c94cc4131249f3261df91dd63079d131dd7efaaecb1ec8b16ee6a121b64df0f75a7acb8ebf03f6591b4dd02bf212f5acb46d88ee0ec72cc2d9b5625740622b770a6c1c10c12cc7d9aaa4e396aab6e9cc86071f512cad0fc4228c098f15070d42b18f8231777abbcb0eee400121ac51154a76aaa88c15d1b78a6d4d8a9f9132b23345782ba8b820f52e59a19eb16c7a56aeb6bb07c7edb4eb9c325919a191f9275b44e8ec523d364499becd54b750e46b7f24779b26100ab984c5e1bbbab440ed3c153db62615c38206480caaffa291b03e592b7fd8624cefd10447ebd91482a14a72ecad73b0d6ae2082494f2e01e2f4e3d30fe2c1dde325d1b170fb72ea8610859fdb09d1874b3d56c524fe8d61c5b8df92776239b8c5d2280a8ef08220b0f9177839035da5f5281c25bfb2a98cdb42d8633f00a7aea79302ffa61204735f425aecd53778ccb14a7dc7a5ff81b870034bedd94edf73298ae837aae8d424b0d665de2ff60645383d332575efba9fa8611874d8257f10ab198605588e7b42761196a853de048e49da0d91a2bbfc9f3efac78c9d4795c3ef0795c8b04812a5b445edbb86a8dd904fffee35408245aaf008f29de664cdafa39c2110cac9a4c94c8e119c2474735dca5e7d1fb9b28e1aa8e8d0ac4ff2de395310be5a713d5ee2547e2b532bea30cef31b84a455f0b5db3bf89506212596d1f83a993a8750925cbf7a94763edfb069203a05b46b97fae506c236c6c8d2045657aab6a51b076d7ac8dc6b4d6e43676a7ee936d5ef3ca6e77b06c2c1099e6439c6f080ff4a5dbd624ceb53edcf039ee3e1fd93660d8d93ea1aba71cb9035ccfb1a166c066339191f9939501001eb98d2994784050eda61a5558e545f8cfa14cef7a723d5472b3cab9703dbe30397287669c66757304aa071ee2a7f1e9761a63050229070e9e21e28174867e49d5e745d9c99ab785e5afffb723b4c0d0cb255ed55718cf7c5568a53eda29775cf5ede887ab28b6112eb75f5df9604bb45b08a441554cbcbaa5843c0ccdc2e48d7f8abfe2f826a60f822aad8380335e65bf2d8e5b9904edebdf681ae02963c7df37462cc1591f8668f3fa177c73f9e0c1264efba22a5ffe66f254c3bd242d7737ceee7c7d95df2c3501aa9ff2a063696cd46a5b35a50ed7ec0c9502988c578af6f7c4e3ae7e672ca4f795ea05630be63d090e18209b2ae03617f771afb9f594cd561bd173971dc9004f09bdfd878ccc7723aa35ea5c25113f590fb129e6d068d62e9a009f713cce287f0b817ee6f671be3aa46d00a6cc50d6935bdffb3481754550f2e577aceea366f6b9b8e2c633640327dd19ee784d15660337eafd1d7197c0312f78e2a899701e67ff632b405166f9a4f6e8aa201b7e3ef8e2dec07753f589a493fd31f22e66e86a7f881bb9469cb906cbb9b06c44a1aa80bc85e1d26bebb8e388327e5a7c58f6003a072b6f53423e1c023066937a2c3303308ed05d8dbc28085c2b919a0c5b899fe3ff524a2ee27665b273ad897b76301aefdfd7e555a6181fd1599cfdef5426e75a48c211ecc9ad4054d47748120fa1ae2d51e1aeaa7fd4280f901bc0e671a9b5b647edc3166211ed9b814c1f017f897726a63bb43c63a0ad9a52247db97414f9c777618612e0f2cc62366fa7813174045530503415d361f818d28cd9dd2d39afc20d8ba2514a78a220b496ee7d44d70898a34c77c73372bcb4f6be56c89df31c2d8d43d2636a67617e1ee364d5fdf2d232b8d3590e81a07c3c6d8510958e82d90ff1b168694d6ba40798ff5b093cf51a5cf10ca2279062a04c95734b23ca975a8063a996a33ca6de425d999719f8be6eb578d144d6a0481c0499eb8f498b5aea629e784099420730acad80ee46b6f11dcbf0cd153ebc61f115a56bd42f7b086ab873501b33cb55459e2cf291dbcb239f024a7225e9bbf0e37d263d86de7af39bb599c5eb8f6b962323a1ca7bcf5d73fe79737c0b3a5e21006a19171b4b367134172956af1da9381b08dff733559570aa0c5003c91119e8c7a010a4c6c4262919fe5a936c1a52ec6000496db7ca0335312171b781472e909473945ba4a77d83e0b6863ad9443e672cf29f52d367f7f6f2dd4774144b3998f1721d9020230e7d0e53b19fd9caccbc44d93d0441716c11deb90b3642ddbeae6e897f45de0e6023aec33fb740063ac83fba2b1dc06089ddcf458d812b3e636dd657350623172850adc1d0b922bbd0553f04aeb9f6fd78843dc92315dc3622e6ab2dde9faf552f2160a5e7ba13b1f7b33dbac611a085da0bb4e0aa55bbf6fcaeed881c776efad1db6d962da9c57817d80323d3b9a7b3018e341a95e753a7b773f25ec53bc6c758ed57fdcbbd9afda0b3e384079292918b416103ff1eac4535b91964a5dde6878c8cdaf2ce71e082be5a4dac2758b6d675d4566beff94ddbfe7aec002c1a542963b8fb890f34dde3691c3c15bfb35d2430f4ba96e24a773ce4ec018f270d0c477cf1be7a3ecd97054e060b37d1b51151a712c23ea3e5a5bd2cb4d5276616d17eab0be3ec34ad878d5650df23105db312d568cc520fb77e8378e77d366871e66e53960b5c896fe48595d4ebf53a99dc1109fa8356a539c7b45c4c819c99cf4f757051843f8a8b8f29a1c6fe341d39a8dc4a497e61b289e1a41497ffd33e11357b2d249c289a40f8f8adcaf13b11a39167a93080d677728075b033dcad0f52f3330dfbe0d292d680a5bee8109fdfb3827dc876b948cae0ec576fa1c998efdbc21d99e609d4640a42679a8b57465747a9b1ab1b8f1564f45bac83a1c773d9ae3731da0199e031cb78b972119e9dca97d9a19d62327ef50a7f2c146976452cdb0e8395651bd3ed816810750ff4e1765a62a1c826fe1e7e07dea0ee05b61bdca889378ac1011cc21ff008999cb51e951dd0d4b3ec2d65a3c5e4a62deac4637ec50530a6b62f528cd8fbbceaa5da0c893be9de55566352d09dab2e2e9746f9956accea8e085e34e68ef48460a125ce90db30bb975f1a8f75cd693dd810406d79fb38090ff90cae28f2801c7c54422af0fe71bf58ec6a19a9b57f6c568412263144bab9b856f2619faa2e50daef388b56f6407bb74bc503e86f1ca38c5a15ff3f8f08b19f391c9102de92d40a9d5c9faa90619c295ed6a42a20013f16780363cdc6327b9d18b1bccf3a6c737496c5ab2d816148c00e2c2fd78563302d647063d9916f329ee5500e2c90082fdff7ed7de7cf6c89d506690ae299c69dd99e749abf6cd1ef3ea319bc805e8a9d0b3ba1dd74938eff1bd12cf1061febfe73859ce138e937449dbf653caa71a94db259f08426cbe93635514d019d0415e0a8fc24f119958366c013c0a2206792e92439cf28aea6bc73fd5036f21a9c4c213945c88be56259ebc78b3b5f3cfd5abf9ea74360cb2d1e1d71dc4b0c55978608f3e99abaacd75cd5555448f3799e4b053142895cb01d65c4b44bbda79b575e8a9d6c8bd24aa67bb0dd4b8b4f9f6798ce7a8a8e3328e86b42fb0daadf1ae482b76c0a708aa0d01b8eb0b57760e52318bf0a07b325175f2debbc1def293f4fa02cb75133c4fe20b47f34a0d0bf06682b12284e0440176c1f27a9483e2aef18e777c1a990dd59a9dd066fdedadd0534f1611920e4dbd2691e7cfacdb88eb0ec0b1e3ed2af8b8babd55900a5c15ebc8ec96e0012136789128ac4a6d02e6a3719adbdb728af2d5f255f8e9b41353a92f5248ae09ddd9b5b7c474b9dce224eaa0f1", 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) 26.713822325s ago: executing program 0 (id=5482): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x1, 0x7, 0x5, 0x100717e, 0xd1, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x864, 0xe, 0x22000, 0x200, 0x0, 0x1, 0x0, 0x0, 0x3, 0x8, 0x0, [0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd) r1 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x111440, 0x0) mmap$auto(0x7, 0x40000000000000, 0x7, 0xeb1, r1, 0x7fff) socket(0x2, 0x801, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x121002, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r2, 0x0, 0xc3) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd01, &(0x7f00000001c0)) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) mmap$auto(0x4e76, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8004) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x9, &(0x7f0000000080)="00f68b2529765208727b02740735200dc22c1210448865896a1b5bb20ddea7c1d3723cff0ef7009dab95bab1bc907e4be1f3af045b341467ef62a66264fae812704188") move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) madvise$auto(0xf0ffffffffffffff, 0xffffffffffff0001, 0x15) 25.536602402s ago: executing program 0 (id=5486): mmap$auto(0x0, 0x10001, 0x3f8d, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r4 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000440)={@siginfo_0_0={0x3, 0x7, 0x0, @_sigpoll={0xfffffffffffffff6}}}, 0x5, &(0x7f00000005c0)={{0xfffffffffffff001, 0x8}, {0x5, 0x7}, 0x7fffffffffffffff, 0x10000, 0x5, 0x5, 0xc00000000, 0x3, 0xbd, 0x9, 0x3, 0xc, 0x0, 0x6, 0xf4, 0x3}) move_pages$auto(r4, 0x1, &(0x7f0000000680)=&(0x7f0000000500)="12695940bf3c626839ef841e1af5fc1b46d4ead32487c5e3b069ecf19ebe3b216400d3a55c783c13942101a366afe742a68adc370cc5ed04ed96e11d8e2e1bea6d96ed39a2ad189a650f927b6d61eca01710abc718fa", &(0x7f00000006c0)=0x8000, &(0x7f0000000700)=0x8001, 0x7fffffff) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = open_by_handle_at$auto(r1, &(0x7f0000000280)={0x39, 0x5ab, "000000000000000000ab0900e8cbaf20c34be8f904aec953e2f3cb74b2c49404cc754717a59dcf3465b09d4d4602ff4a11260ebcd5d292d02b"}, 0x81) r6 = socket(0x2, 0x801, 0x106) setsockopt$auto(r6, 0x6, 0x19, 0x0, 0x9) mmap$auto(0x0, 0x1000, 0xdf, 0x9b72, r6, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/irq/13/smp_affinity_list\x00', 0x82000, 0x0) r7 = socket(0x1d, 0x2, 0x6) socket(0x2, 0xa, 0xfffffffb) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'macvtap0\x00', 0x0}) bind$auto(r6, &(0x7f0000000040)=@can={0x1d, r8}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r10, &(0x7f0000000580)={0x0, 0x1b00, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r9, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) ioctl$auto(r0, 0x4b6a, 0xffffffffffffffff) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04, 0x0) 25.213419639s ago: executing program 0 (id=5487): readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 25.110624665s ago: executing program 0 (id=5488): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) sysfs$auto(0x2, 0x200000001d, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_FS_IOC_SETFLAGS(r0, 0x40086602, 0x3) 25.06873607s ago: executing program 0 (id=5489): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) flock$auto(r0, 0x5) getsockopt$auto_SO_TXREHASH(r0, 0x8, 0x4a, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resolution\x00', &(0x7f0000000040)=0x5) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) uname$auto(0x0) r2 = socket(0xa, 0x3, 0x3a) ioctl$auto(r2, 0x890b, 0x1) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x6) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000180), r2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x100000000000000, 0x40801}, 0x80) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 7.973487764s ago: executing program 1 (id=5534): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000003040)='veth1_to_team\x00', 0x9) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) 7.140454619s ago: executing program 1 (id=5536): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x1, 0x7, 0x5, 0x100717e, 0xd1, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x864, 0xe, 0x22000, 0x200, 0x0, 0x1, 0x0, 0x0, 0x3, 0x8, 0x0, [0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd) r1 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x111440, 0x0) mmap$auto(0x7, 0x40000000000000, 0x7, 0xeb1, r1, 0x7fff) socket(0x2, 0x801, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x121002, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r2, 0x0, 0xc3) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd01, &(0x7f00000001c0)) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) mmap$auto(0x4e76, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8004) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x9, &(0x7f0000000080)="00f68b2529765208727b02740735200dc22c1210448865896a1b5bb20ddea7c1d3723cff0ef7009dab95bab1bc907e4be1f3af045b341467ef62a66264fae812704188") move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) madvise$auto(0xf500000000000000, 0xffffffffffff0001, 0x15) 6.608706412s ago: executing program 4 (id=5539): bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000001800)=@xdp={0x2c, 0xc, 0x0, 0x35}, 0x53) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto_set_tracer_fops_trace(r2, &(0x7f0000000440)="31c3c44bee41f7fb3e24824c2e9eac98997901d5d7d5a665bd4e041def8d83d56668c9d3bcb9949621d24a423ce4cfd2928ef6de00eed0804e89971ef05cca86d2539321fb7c02b48b051597e71c5c8af4170e37a3b9ca5cbfc34133936d12c3e7907f15f55c4200d9dfb7e5bd15c89d7d2aa404d5a7412cd4d00bcccec8ea2bd926f529fdaff46970320729595df31640cfeb0560b917d33af94473ec8aa88f21f0e554a7b021ea6f635f0cf9cb207eb73798fcc362a1d5aebe9d9982a240bfd6050f287506da4b0eb442dc0b7e1c59ae42b259482462b3f12fff752265784d029ec10b954446de7c5d3ad5", 0xec) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/devices\x00', 0x0, 0x0) preadv$auto(r3, &(0x7f00000017c0)={0x0, 0x7}, 0xffffffff, 0x3, 0x8) (async) io_uring_register$auto(0xffffffffffffffff, 0x5, 0x0, 0x2) (async) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001740)={{r1, &(0x7f0000000540)="752e2b5410d53aabc0e6a318404b9d05d316a4ad05d0c3ffdcdd78ef2babdf95a3f3a1ac8a827540633f7e4eca3bc5c2e623ab6bcabfdca2ab0540337d7954c76102dcfb4d8867fc29a282691883b17c3033260dc06b91cbd734d0a17c64a29309c4e44a8329e2398cca7ad3128b468437e1d1628764b1e5952cfe49cfc816a6d59e94ecc9bfaaf97925324c5a39635cf3833f8c49bd4d2e1a3d83721b3368b3247f3b4e44a47a9b5bd6bd94ce31b5bb0945b89b2b926cf10b4c05e506", 0x5, &(0x7f0000000600)="58694d1b79dbb2325f9fb451553d39b06513b7ec838d4a84931bc903abb7360bf94c95f44a372478e4e7d1e12dcf86bd5fab8a9900649768530d33c2b786990209f1f2990a347d482d26bfaeaf33c16529d6aa7e5405731238bc7c69bd99fcbd2d7240cdd33bed", 0x8, &(0x7f0000000680)="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", &(0x7f0000000180)=0x1}, 0x7, &(0x7f00000003c0)={0x7f, 0x4, &(0x7f0000000280)="b52e5a04781c89eb63e06b38ec9ccefcd94b89f314797a354ba46783f476264679180267678687eab14302e458b53805272ffb56b6cef621", &(0x7f0000001680)="1c78f64c9e5735ef1463ee2863fd5aab01576c50f0c6e13ee363aec88cb48e625b34d166915feb84989813a90e76fdfef933f4767db6217057357c801752ff711d4704403eef5f4826de985d2aebf90b194f606ae0f2671156f684631ecc50f50a48e9c677a0a8cdecb2d8b822a84b17009d48840dbce4ffa001ec647a662f85db31c40afb07cea9fb0206860aeacfd6f7403f17a4c751357c4d0cfff93dc01074", 0x80, 0x10001}}) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) (async) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) (async) select$auto(0x9, &(0x7f00000000c0)={[0x400000000eeda, 0x1, 0x100000001, 0x9, 0x9, 0xfffffffffffff801, 0x6, 0x3, 0xd2, 0x8000000000000001, 0x1, 0x42ff, 0x6, 0x9a8c, 0x2, 0x10001]}, 0x0, 0x0, 0x0) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) (async) futex$auto(0x0, 0x0, 0x6, &(0x7f0000000080)={0xfffffffffffffff9}, 0x0, 0x3) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000001840)=ANY=[@ANYBLOB="1c00598f4ae3fef0000000c80008", @ANYRES16=r4, @ANYBLOB="000227bd7000fedbdf254b00000008000c0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) 5.792273158s ago: executing program 1 (id=5541): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x9, 0x800000000df, 0x9b72, 0xea8a, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000100)=&(0x7f0000001ac0)="bb1c0275543a8d4904858fad76de7e200b87ed58dcbe46cddfd2fa6504b413ab50506d2497e485a0a7ac50c6e65a34aebd41fbd54ec788e316e8ed02b97646237d316806c4d5477f05867b57719ac466edcad14aad7b8b2f978762162f946126875efc38143808d92af72cc903fba7ddce2e164e86d37fb5a5985b6962deec257b5013ecb9859057ad6f9306d1631e75bdfabc1b9c5c71f837e774dc7027f43a4d9665c3b017d159d68a96e0b89458ab0de0736c288bce81688d0d4b94920ac9b416fec3ec531b2a6400ca4664ea7ed27beea9adee4b61d424fea7272e35e3e7b8559b75f0219a8160eb285f44a66b184804df4a103fbfa8225c9be8aa710e508b86ec2687c6523363955e8a74dfc965f07c924b8f6e33130ad289c804ba8eaea607f10d6f94f0636e188446243d70829b39b22b1e5dd34a684083f86ab7929214f259661efc5a67396e02e23ec52d11a9fcf62a950f1269f6c9795999a4768162ba5da9eb7bdd0bdab9411705b6af990594ab139c7fd25b927b0df5215936ce7c7113eef2a0f34f103b73d03faf9913e8723b7fe9d78d8e394a315a4133cf02d2a1040411a4d1cc031a23bb9fbd20929ac0519cefb93740526754db24b600e869dabcb98a7a5f44254e9f8b792e086d79ab1acfb5af89520567448ae3e518390b0750e512b9d37abec8ac9b2e62544bf4bd6d888b51c4ff9c233263e6d68f4d5969bc9d8e24fa0c24731c35d42e7e323007baf6011eb9499f650be8d1ba7a837d9c77d6549ff962f7e3782298d89524bea7ebd4659c822d1629190ed08e1206f04d9b516788de86f7ddedfbdcdb250198789b66fef84dd9135d392d531200e82eab724a64225816ef8576f03717c48209501339683249bcded51e46cc1961ffe972b943f821207a08e342f4505507f30f784761b67a840a37fe3e2c4785d216455179ff5431569315b5a2a2f40699bccca3ecb17f9dd468536630525000e3a7f096f865d5f89262377f3057d6cc93ce167f28428c092f04dc81b8026a665384be8c98d455450736c2996d16ee015ad633c723ec4283b10b6233a51cc3239ca1e25a811da05dab9b8a3303ebf73f829d2dcdd6e4285ca5639a32beb0c8dff733482fcba64a1c481d4a69ab70d24f8cf572264a6622b6741d609e0aa7587cbf4e79591ddbf5001de3183f885eb43ba65a0ad097ac90263101e393c5986cea2cb087849f232c502cb16f71e7ae0d1c78f165c0f702b8983663e9794e7babc6c66b89fb5e82ce5895b7d5621b43833d9bfd389c9ed8a0cb6c88ba8bdbacace3e71ce569de655e10e2bd7939e07cf274977c133b7b0e0f669a4d5c8f0e3c476a88fc772a4dd72c5da8af21957d3508ff9ae83c9caa94e5a85425dd457552b10c9a0f3f296e1be3805840405051f8b103793cf6f90b81ace3d44081f4f3ae49bd042d7837cc34911450b52585ee44d9e4b6366234f771d6d89dfd03de0e28a1f827ec77ea86605e87a0cbb13abe38dfd04d70df63ff8055d36e4d858ff48f56eb8997fcc20c5c1ff63033e60c3a3909acc8b40be7e2a82dbaffba074ba26f35448900c4c76d25d08b335674ffc89ac6eb1c5cb8417ba141e59acc167b5ab86888a0f58ddc974ca2b2fa2d46629be65440ea841275cfc31f5086abe1ef70ecd296438c4bd4ed05607f526366a886b787d1e47f9581cfdc5eabe9f51ab267348ef25dc5288686e031677d8ad2d37f46530bed914d8b63b5097519878440db4a4e6afe845bf6dfa2b605225c082039c5a7b900aa87878b2495678a903f7e7d997e841abf8d6ff960b30277eaf52497e7b4e37ad1d164e94bd2657ca41b55d73e45bd8ca6cd5b9acc69693bd47d3336e5f434c63e6ca02c136a8e8c7d4c6a3c289e32540bfd773755c55c0931e7f2a5e391b1c2bc5f1fae4fdfd10192668b29fd5da54eaa0f8c058305d8558aee0a369aaeb7e1b7ce9aab958276eecd8933b0917abd1e658c83e8c5bd8903e436c2eb2d08f57d121cd742b90217cf5bcc5109f362148e64de2f50c5c33d349eeb694e252879f14e5ce3807e2c928136f62c40f3a2b3816c0435a4fb2d8b5c59670260755107e4c2851f883f7867ca6703204e2b0d1a76768dab0d320e9f2defe9a0835f87ea683720f9ce806e238edde7e3cce6a98ed5e61465ece934782503c920fa6f0e15002dfa087e08c74d50d3790460de523cdff1fb1e3c15a87b149e39998be03ddfa6c94277f07f74bd8e191af285e7f28f440668dabc1093c2cfccce9e63ee2c186e4b0509f9e3389a9d8a25daa1eea095de3af42b543f633086271855cf03e214dcb0de06fddc5ba3d65868fd33d792d6a359a154fb0a1d2341a008476b8f61c72efdc88b033e992cd788732a514119918c7ad5283362b0334ab568078b12a02bc99a4bc1d87e80c3f83be98dd98369b27ab515ca0850095fe8f535bfc706debf1039ae7fd6e6e1c75772d4c2bbc9fdf1fd719f1c6c2af1739511c99e07a36bf79e89eb5d6f2d82954a0ede5a8d56f5cb76b30b0eff2fffc186f5856d9b54b78e0e6b68e3424a941e6d3fb6315489626bdb29b481e9af7044d823a7f94bb4e93fce2c7d5fd4468bc20299df15e3da4b3c6301bf221aa7859619963954b82da1f33acb8df3fe52781e520e4a4b37e17346d7fcbaff69ace6af8493aebcc256d11a66af9fde7726a5e0d4a17df09314c06ebba90c78d367459678538c9fe3280c59150fface686599a9a18e0b457009c2b6d32b7500e1c99aa25dbe7a180de3f2db4eec9a83771333b2c6b1419105e8b8eed6d8265144de56d54de6462028883a4b694850c1608bc6f82d7228e65041c4fd249dbd9645946fe4ab8d35bfefc3be7b031948e2d66f41c0ce6262d3926ab7fa5c7db93c22326ab73335782c7fb5cfe61ad3968b8c2bc180f77d21c6613e0738fa12a10ddf6fd6f077d44216a6a590462e60483cc062173bacdb44f52458ce60b65cd78a91e2e5b8b2eb3963746bc5b37383fb8ea289ca1474007a053a62bb77d94e317add33ca9d221c2e45ba46f77474d105390730fa3683fe980f9a1592b10c61cddcf320a1ba7e0d3b09d1d1f36737fe21fcf84824d4af92461287d5b8505f7deab6defb2768766f2c6e339c213101d9356ee31964382d82991b07ae78d0164318eec3da43b9d9df061095e7fd949fb4df242da0812c2eb6e379f7ba5edea50b9c4bcc7dae089936ba9476b209f3fbed28c1d4dec1466c1fb8870108554bf5d9417c4486a28c763669ede533958094a83e91baa2f662f21dc351afe968499c309e9fdc968baa762d3de8cd40fd1872a89277f3c1372d634c97fde0a4968db7cd7db566b1d5ad4c767a4b9990506de9a2b947b8147730c79046c6b969373c677e91fabda24b5109f96e1659f1f0cae2423273c5725137ddd84e82ce1db1d29d2853eee97875d25a2af7e4c3835561de89c1a1227fe3a3535d221fe31c0d5669f7203ca47ddf3e6ae9e6ff3f28c8f21ced70e808561a7a76c0ba6450a6e3f92dbcd89f1bcac9e8cbdc3f5c71d9c8df80b5218f1569bb185b56cf99255555b83eac2db38b7337fa80bb56c6a2031374eea0d905b165265096a47b2a9d3868dc1f70ed0a8a6f811e05e737c66af3e4a337905cb9907738693db7c86ed69e216b59bbf9837011784449383debd9ea34d291edf2fe2ba38fb81c9f148e2a923d22b5303ed70b63a5e2bb990b86c09e1f9aa700b05424a872a40fae490cb6508aaceba2dedc7922cbab663fbdc57c88505110fe0a1e267f2243cf2bc0d054612aeadc834f11e39b62c90c1feff4285e63e033e665135000b322ad9e201c3c92e40bbeb61452840838958f8dc1978aa8d081da6485c2c66e92533ee5ef2161fb9fa2404d674e1bd2f43c97a40575aa481b57cb32f5e0d015014de763ebd971048bd5414e9115afb6233925965fa06a18bd8cb660a826fbb047e78dc7cedd9c5a5473f1d856b800d9ce9cbfc313aec7bf6a6ab554dfd123efa7aea19e033f75e3c4fae7507e2094d430124844c85d55d333c12038df2623f13ea7fb2cb235a638c9dadd2e39be7bdaab28eed7338a4033853810def113b6cca9120173200c8f15e91573e87df4dac734e9db799b2e3f4bd11e542a34997e7085bdc92a906dafe5d2ed82ae9ee6b5b12a99710c138d10527a9d926ffb43d31ac9c615a31ccf99bfec1baeb19bccc526aeff9827e9b9ac8dffcdad77fdcc66fc39ff25d5537a01c2e438ff6c5f426411c09b4dadfb491251c582e473c12dc06d0ad114e527d4925c1bb8801e21de5845e75b78de48af5dc766695e02f0b494935a779748b543bd786f2683d69d4ca4daeeb1d074c60e06644d706162c15f0f1b53445d7a286355aab897268ef3fa9cedd8728be0fa75183dc244b008df948a4fec8b6918ddedb3aa8b726d4eeb6b995aecbe6251f35539baacb77ab633ea24a22a42cc6901d1c3a90fa4a9fee87c8237ebaefa393a8b0074b921a5d0a20e6b133072a1a4e771cc61b72ad94dada4aaf7b5cef607166a58e4b763da74adc989446a4738859a3d1f4d7530cdd14706a678fd845f202adc6db859931c5e05bf7438cbbdade1349f0a363aea708c5377ef32a89f3ee39bd0035114f4360a8a85c287558fc60d7e50aa3c3ca2063485a5c8233617f003da4f32f63d4e9ee53272df0b6795f999fb854141d2241f735474bdcc28ea0458e040ec8ef94a8b089863bb362d2d97bf952709a5078dbdc8b0dd320357ebe963f0d3ab700283ca1b6ec30f9d3bbfd677ba6c7aa4130493421e8f4aad891222c9b94806703741d21674e71be0427985312f8faf8d2e9d90d16f34c3f23fea05df18c9902d14c5f988cf0c6b29e68d4dfd78af6ec46ea07224f137e29c2579b669013d44ff23d863b974d196e99fb0fba93dbca321be9492133229a3356c581e6c10db71a586850ebee4fdd3508bfef8802dbaf257cecd7c9952df86a921a637491074ebdb558e15a526d2e774f071cacf514ab5d53f96a3d5f13f37ec20c69bda9a8ea325d9cf11017858bf91ea4bba0cd2730e1f12ebff39b1f7988d0a00bde352a712400f809c1d3fbb71f6cc4ec058d3e102d1c6f9b6ea4bfc757bd17ada9208a778ce27ec007ff5714a3dd46cd01037832fc62982a2ecfac609f7f8b39e1e261733e10d720683f6b222a525215bd70c77c17696bb17706218c1099212ed4b3f35f4fcfe8f0052317e4f17379d642e436e7349c53a53ec826bfa439c716e487391ed31091ea951b87b86cf288f929457b5e8d07290264e240e2c82a70102effe76774fd9394bc5fd57cbce7739c21f3dd38580493084f73a6734bfff8538320b2e2eac79739e1fa7bef3b71bc24a1fbbddd6a3052fdcc24ad1ca9c43e679e039a92e6c38190a509e7b84a133594c3618badc1855a7a058081fd0bd15496ce4e9402b68b22e4904f9262f634bb8e1f2835dde4c2b800def942eed19960a315c29d63216c6fd0341700d84cb0a988758e3b3e4b5712d218624be948154c56faa5f6a796c15c767d45ed9d1718cf24c99a3675806052de55bf8b47f4a8f2a7a3b17f905bac021c3b0d41e4fef3629d2827348dbfc8abc57b02f6481a70220015401efdf75cd9056c1b09209350273e828b4ed3500359d60c7e1032910e14a584bdd5e26201144a79b3640ee6efc2d33317fad04a5ed6a0abafac1490bb87d19dbe8ce01994642b85303a5901b4c4c82b1e17af29c4deb978f568a5a1931d22c4c5c00ddf97b68e95194e0ba694d3e8fb69ddccbed01cb2d3c") ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x400000b7, 0x400, 0x2}]}) mincore$auto(0x0, 0x8000000000005a, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) capset$auto(0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) io_uring_setup$auto(0x7, 0x0) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x68e42, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm1c/sub0/info\x00', 0x200000, 0x0) read$auto_proc_pid_cmdline_ops_base(r2, &(0x7f0000000040)=""/159, 0x9f) 5.565301189s ago: executing program 2 (id=5542): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fc0700"}, 0x1c) 5.438576858s ago: executing program 4 (id=5543): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x1, 0x7, 0x5, 0x100717e, 0xd1, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x864, 0xe, 0x22000, 0x200, 0x0, 0x1, 0x0, 0x0, 0x3, 0x8, 0x0, [0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd) r1 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x111440, 0x0) mmap$auto(0x7, 0x40000000000000, 0x7, 0xeb1, r1, 0x7fff) socket(0x2, 0x801, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x121002, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r2, 0x0, 0xc3) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd01, &(0x7f00000001c0)) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) mmap$auto(0x4e76, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8004) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x9, &(0x7f0000000080)="00f68b2529765208727b02740735200dc22c1210448865896a1b5bb20ddea7c1d3723cff0ef7009dab95bab1bc907e4be1f3af045b341467ef62a66264fae812704188") move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) madvise$auto(0xf4ffffffffffffff, 0xffffffffffff0001, 0x15) 4.374926566s ago: executing program 2 (id=5544): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000003040)='veth1_to_team\x00', 0x9) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) 3.753801798s ago: executing program 4 (id=5545): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x509840, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8", 0x3d) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) read$auto_proc_sys_file_operations_proc_sysctl(r2, &(0x7f0000000240)=""/87, 0x57) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x408001) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r4, 0x110, 0x4, 0x0, 0x4) write$auto(0x3, 0x0, 0x7fffffff) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0xf, 0x1, 0xfff) madvise$auto(0x192ad524, 0x1, 0x19) listxattrat$auto(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x1000, 0x0, 0x3) kill$auto(0x0, 0x21) 3.622627177s ago: executing program 2 (id=5546): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x0, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0x0) mmap$auto(0x0, 0x2335, 0x0, 0xeb1, 0x401, 0x7ffd) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x4, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x28281, 0x155) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r2, 0x540a, 0x0) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 3.391669502s ago: executing program 2 (id=5547): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0) ioctl$auto(r0, 0x64cb, 0xffffffffffffffff) (async) ioctl$auto(r0, 0x64cb, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) pidfd_open$auto(0x1, 0x0) (async) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) clone$auto(0x12051c, 0x40000006, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') socket(0xa, 0x1, 0x100) (async) socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) write$auto(0x3, 0x0, 0xffd8) (async) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) socket(0xa, 0x2, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x800400b, 0x2000000329, 0x2000000010012, r2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0xa000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0xa000, 0x0) ioctl$auto(0x3, 0x1, 0x90000800000402) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) (async) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x2, 0x0) read$auto(r3, 0x0, 0x2000000000009) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdef) 2.599770403s ago: executing program 4 (id=5548): socket(0xf, 0xa, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="00042abd7000fedbdf25880000000600d40003000000050092000e000000cc004801c5954b1d6aad230dff6a4930166d8ecbedaad84f2c7c8cfaf8ef23a25d5bced7adba43b060c9fc8ef036c7f4e0414edc525bce3f084a1f4bca8097e5f15c1b4152d4133da7edf13945aa3edaf8a6c0cf4de3ec428470c2b10eade27b981f0ee3d6f818ac900aa257a4f2ad0c6883a614f254ee970f742f89b3386f33285f7fc5172a290074e4c0ba78614a4686b738f800fb55c1606d63d85e3d9486c8312f3090576055483ac38d6e6b2ccde61ae91dea7571ba10375737d48e7af2abf24e7c8d702517828c002501274916221a45112e8b77f38151ad60c028b426d7ad6309168f1966927633de46a18adb3c9fd77e3609b8ad054a436aa270c1d90a5265442712af086033c5f2dd0df6f6d1981ff0916bf0c68d5301e62233c28b7d037b231b1f24ce7b82da28094cb11493d52c39747ead1e87fcd8169b2741a79953044d171803eb0528351b81001f3b745868420908006900e8a40000000000"], 0x184}, 0x1, 0x0, 0x0, 0x20000800}, 0x8011) r3 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x120800, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x1, 0x8fd6, 0x400000000000948b, 0xfffffffffffffffd, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000003, 0x2003, 0x1, 0xb, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYRESHEX=0x0, @ANYBLOB="0c00290084660000000000008d1083b7312d58c5ebaf487bb998f3418a8151bb07f2443548e4f835120dabebd9cfacb4df6c09d5c51d5a796dcd884b3e930a755c3e6e9a8bf602ba954dddf50ba937da8e0eb88ee25349d036733e829ade17deaae15e1e9298ffa9cd09d12467d4b27c2248f3edabe64261dd558c1b9e518a124437c3303efdaea14284ea051911d982703916a3f34e0c89480014f473c0ff7dc811d675c55aafeab4d5d79dd93004732cfecf02265e2993274e159f1788f1f775bbefa7dc340bd198fa7cfeb7b5eee7dae5e118a7f160e9e3f016e93bc1cf8d297c2528030dee4f73abb51c22b64bbc744da934cb7396ef4d43cef20800a100", @ANYRES32, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) ioctl$auto(0xffffffffffffffff, 0xab04, 0xffffffffffffffff) ioctl$auto_CEC_DQEVENT(r5, 0xc0506107, &(0x7f0000000380)={0x5, 0xe, 0xec, @lost_msgs={0x5}}) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, 0x0, 0x4044820) msync$auto(0x1ffff000, 0x180000008000000, 0x400000004) 2.011500849s ago: executing program 1 (id=5549): sendmsg$auto_NCSI_CMD_SEND_CMD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="00082bbd7000fedbdf250400000008000800683c00000400060008"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="08009e"], 0x24}}, 0x4000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfdef) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1.938612432s ago: executing program 2 (id=5550): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) mmap$auto(0xfffffffffffffffd, 0x20009, 0x5, 0xffffffffffffff10, 0x40000000000a5, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xc0000000000eb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000003c0), 0x101200, 0x0) poll$auto(&(0x7f0000000400)={r2, 0x4, 0x7}, 0x6, 0x7) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = epoll_create$auto(0x8800001) epoll_ctl$auto(r4, 0x2, r1, 0x0) ioctl$auto_SNDCTL_TMR_SOURCE(r1, 0xc0045406, &(0x7f0000000440)="200f3c006185fe5ccd27baf45b1562e455e7dd09a034e00bf674c37b6a78c9d045b75ae0bb0a85bb3ed193f94755e1a2367719fec88d825801ef2c9d78653ad24f282ad0e00ed41ccdf7f7228d8e8a4845d254131e62a7115e43141fbebe92e8eeecb10aee5db0cdfb1ec76ed600ae2d24709a949894ffb829450daf82bbed2f8165b000442b919c6da090fa22f25bc803567a4924a154f0cfe2b57d") mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="72010000", @ANYRES16], 0x1ac}}, 0x40000) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2020002}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r4, @ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x40008dd}, 0x4008040) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/numa_maps\x00', 0x2, 0x0) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x490c0, 0x0) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYRES16, @ANYBLOB="7f"], 0x1ac}}, 0xc0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = getpid() r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r4) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000126bd7000fddbdf3502000071900021010800a5001ca658f48e67d33e478f000500a3000600"/50], 0x30}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r7) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000840)={{@inferred=r5, 0x4007, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) 1.440231899s ago: executing program 1 (id=5551): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4001400}, 0x0) 1.291918033s ago: executing program 4 (id=5552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7004feb1df25010000000c00030006"], 0x20}, 0x1, 0x300, 0x0, 0x20040880}, 0x4) 863.70032ms ago: executing program 4 (id=5553): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="9bff29bd7088cbf9619f70dc33342e7f86044800f9d3df05f2e50060007643029bec86e60f8ee989e2c9efad49b9ae63a9d69c66179cb6fca33302f01d2cb7ba444d41906e2655da90421d0a556e83c8dfcb9eb4a7c2c70511e145c44ad7557739bd0030a37e8404c63561c7c8f4dbac7e0a2e6c8035ec86ccbee4b98aab138f8bdfe7f2112ba4395d20fb0f8564f179c1bbc027898a8fef19fc7b5d2b7535c4"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x288183, 0x0) select$auto(0x0, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8200000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f00000000c0)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x200005ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f00000003c0)="cdc576166b8d", 0x7, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r4, 0x0, 0x6bc, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40040) readahead$auto(r4, 0x4, 0x4) socket(0x10, 0x2, 0x0) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1, 0xe5e) 807.940172ms ago: executing program 1 (id=5554): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xa0302, 0x0) writev$auto(r0, 0x0, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x38ca40, 0x0) epoll_create$auto(0x3e) (async) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS2(r1, 0xc2604111, &(0x7f0000000080)={0x7, [{[0x7, 0x8, 0x1000, 0x7, 0x40, 0x1, 0xffffffff]}, {[0x4, 0x4, 0xff, 0xffffffff, 0x1f91, 0x1, 0x0, 0x5]}, {[0x400, 0x7fffffff, 0x9, 0x8, 0x8, 0x4, 0xc1, 0x9]}], [{[0x200, 0x3, 0xd, 0x2b6cd525, 0x726ff89d, 0x3, 0x9, 0x1ff]}, {[0x5, 0x5, 0x1, 0x7, 0x2, 0x3, 0x3, 0x73d8ffad]}, {[0xc8, 0x1, 0x80, 0x6, 0x6, 0x6, 0x8, 0x6d705e63]}, {[0xffffffff, 0xfffffeff, 0xefe0, 0x2, 0xcf, 0x7, 0x2, 0x4]}, {[0x1, 0x5, 0x9, 0x9c2b, 0x1, 0x7, 0x1, 0x8]}], [{0x8, 0xffffff81, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x800, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0xfffffeff, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x3, 0xf1c, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x80000000, 0x1, 0x0, 0x0, 0x1}, {0x2, 0xe, 0x0, 0x1, 0x1}, {0x6, 0x8, 0x1}], [{0x7, 0x3}, {0xfffffff9, 0xa, 0x0, 0x1}, {0x7, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x5bd8d493, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x173, 0x7, 0x0, 0x0, 0x1, 0x1}, {0xfa1, 0x7, 0x1, 0x1, 0x0, 0x1}, {0xffff, 0x7, 0x1, 0x1}, {0x24, 0x7ff, 0x0, 0x1, 0x1}], 0x4, 0xfff, 0xe4a, 0xca24, 0x1, 0x2, 0x5, "dad8176ddb5a9fa0b49c688f9554e5da", "716c3dd6eb9860765e5341513724d4250a14ce45fa3177816b9aa97e0bdd5432b81eb4af2fbefbb11b2ae2e7545f1fba"}) open(0x0, 0x22240, 0x154) (async) open(0x0, 0x22240, 0x154) mmap$auto(0x0, 0xbfd, 0x10001, 0xffff, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0xbfd, 0x10001, 0xffff, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xc, 0x0) (async) io_uring_setup$auto(0xc, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) mprotect$auto(0x0, 0x806121, 0x6) (async) mprotect$auto(0x0, 0x806121, 0x6) 800.524601ms ago: executing program 2 (id=5555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) membarrier$auto(0x4, 0x8000000000000000, 0xffffffff) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) gettid() socket$nl_generic(0x10, 0x3, 0x10) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r6, 0x0, 0x1098c7) vmsplice$auto(r5, 0x0, 0x80, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r8 = bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex=r7, 0x0, 0x2, 0x2005, 0xf, @count=0x5, 0x0, 0xb, 0x4, 0x0, 0xd}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x280000, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x7fff, 0x30d}, {0x18000000000000, 0x4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r9, @ANYRESOCT=r6, @ANYRES32=r1, @ANYRES32=r10, @ANYRES16=r8, @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES8=r8, @ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) r11 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r11, &(0x7f0000000280)='\x1c\x91\xb4F\xe2hsF!\xcd\n\xf8dA\x19\b{\xef;\xbdX\xbaCu\xcb\xfc\xd5\xd9\xf4\x1c\xff/x\xbc2\x8a)\x85=\x95\xf4\xbb\x1d\xd2\x1a\xf6\t\xbf\xbd\xbc\xd1\xe7\xc8\x9b\x99\xa7\x9d \x7f\xdd\xfa\"@\xa8\xc6\xa8\xf0A\x00\xaa\x12G\\u\xca\xc0\xd3<\xe5\xaa\xaf\x03\xa8\xc1|?\x0e\xb4)H\xf0\x13:\x98\x9a/\x85\x01\x004s\xabt\x9d\x18S7\x8e\xdc\x85B\xef@&h0m\x16\xa9\xd2\x15\xb5y\xec\x14F\f\xce\xc7\x83\xe8\xb1\xfa\xd0\xa5p^j\xd7', 0x5) 0s ago: executing program 0 (id=5494): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd3/queue/max_hw_sectors_kb\x00', 0x1e1842, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x2e810) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) write$auto(r1, &(0x7f0000000080)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x20000000000, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) r2 = socket(0x2c, 0x3, 0x0) poll$auto(&(0x7f0000000d40)={r2, 0x1, 0xa}, 0x5, 0x3) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) prctl$auto(0x23, 0x3, 0x7fffffffefff, 0x8, 0x0) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              [ 1400.921756][T28365] random: crng reseeded on system resumption [ 1401.012201][T28365] Restarting kernel threads ... [ 1401.071543][T28365] Done restarting kernel threads. [ 1401.164298][T28363] FAULT_INJECTION: forcing a failure. [ 1401.164298][T28363] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.291492][T28363] CPU: 0 UID: 0 PID: 28363 Comm: syz.1.5184 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1401.291559][T28363] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1401.291575][T28363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1401.291594][T28363] Call Trace: [ 1401.291604][T28363] [ 1401.291615][T28363] dump_stack_lvl+0x16c/0x1f0 [ 1401.291653][T28363] should_fail_ex+0x512/0x640 [ 1401.291694][T28363] ? __kmalloc_noprof+0xca/0x880 [ 1401.291740][T28363] should_failslab+0xc2/0x120 [ 1401.291778][T28363] __kmalloc_noprof+0xdd/0x880 [ 1401.291818][T28363] ? sk_prot_alloc+0x1a8/0x2a0 [ 1401.291853][T28363] ? sk_prot_alloc+0x1a8/0x2a0 [ 1401.291891][T28363] sk_prot_alloc+0x1a8/0x2a0 [ 1401.291924][T28363] sk_alloc+0x36/0xc20 [ 1401.291967][T28363] __netlink_create+0x5e/0x2c0 [ 1401.292007][T28363] __netlink_kernel_create+0xed/0x750 [ 1401.292034][T28363] ? _raw_write_unlock+0x28/0x50 [ 1401.292060][T28363] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1401.292089][T28363] ? proc_create_reg+0xe3/0x180 [ 1401.292132][T28363] xfrm_user_net_init+0xc6/0x190 [ 1401.292165][T28363] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 1401.292197][T28363] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 1401.292227][T28363] ? __pfx_tls_init_net+0x10/0x10 [ 1401.292250][T28363] ? tls_proc_init+0x58/0x70 [ 1401.292284][T28363] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 1401.292312][T28363] ops_init+0x1e2/0x5f0 [ 1401.292340][T28363] setup_net+0x100/0x390 [ 1401.292365][T28363] ? __pfx_setup_net+0x10/0x10 [ 1401.292391][T28363] ? debug_mutex_init+0x37/0x70 [ 1401.292422][T28363] copy_net_ns+0x2f8/0x690 [ 1401.292452][T28363] create_new_namespaces+0x3ea/0xa90 [ 1401.292487][T28363] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1401.292524][T28363] ksys_unshare+0x45b/0xa40 [ 1401.292559][T28363] ? __pfx_ksys_unshare+0x10/0x10 [ 1401.292597][T28363] ? xfd_validate_state+0x61/0x180 [ 1401.292645][T28363] __x64_sys_unshare+0x31/0x40 [ 1401.292679][T28363] do_syscall_64+0xcd/0xfa0 [ 1401.292709][T28363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.292735][T28363] RIP: 0033:0x7f8b0638efc9 [ 1401.292755][T28363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1401.292784][T28363] RSP: 002b:00007f8b045f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1401.292812][T28363] RAX: ffffffffffffffda RBX: 00007f8b065e5fa0 RCX: 00007f8b0638efc9 [ 1401.292829][T28363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1401.292844][T28363] RBP: 00007f8b06411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1401.292865][T28363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1401.292880][T28363] R13: 00007f8b065e6038 R14: 00007f8b065e5fa0 R15: 00007ffdf76d2178 [ 1401.292912][T28363] [ 1402.546886][T28385] FAULT_INJECTION: forcing a failure. [ 1402.546886][T28385] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1402.627898][T28385] CPU: 0 UID: 0 PID: 28385 Comm: syz.1.5189 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1402.627952][T28385] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1402.627966][T28385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1402.627981][T28385] Call Trace: [ 1402.627989][T28385] [ 1402.627999][T28385] dump_stack_lvl+0x16c/0x1f0 [ 1402.628030][T28385] should_fail_ex+0x512/0x640 [ 1402.628072][T28385] get_futex_key+0x1d0/0x1560 [ 1402.628108][T28385] ? __pfx_get_futex_key+0x10/0x10 [ 1402.628142][T28385] ? mmap_region+0x1ee/0x3f0 [ 1402.628166][T28385] ? __get_unmapped_area+0x267/0x440 [ 1402.628202][T28385] futex_wake+0xea/0x530 [ 1402.628242][T28385] ? __pfx_futex_wake+0x10/0x10 [ 1402.628286][T28385] ? up_write+0x1b2/0x520 [ 1402.628327][T28385] do_futex+0x1e3/0x350 [ 1402.628360][T28385] ? __pfx_do_futex+0x10/0x10 [ 1402.628395][T28385] ? find_held_lock+0x2b/0x80 [ 1402.628422][T28385] __x64_sys_futex+0x1e0/0x4c0 [ 1402.628459][T28385] ? __pfx___x64_sys_futex+0x10/0x10 [ 1402.628492][T28385] ? ksys_mmap_pgoff+0x85/0x5c0 [ 1402.628521][T28385] ? xfd_validate_state+0x61/0x180 [ 1402.628568][T28385] do_syscall_64+0xcd/0xfa0 [ 1402.628597][T28385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.628622][T28385] RIP: 0033:0x7f8b0638efc9 [ 1402.628640][T28385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1402.628663][T28385] RSP: 002b:00007f8b045d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1402.628686][T28385] RAX: ffffffffffffffda RBX: 00007f8b065e6098 RCX: 00007f8b0638efc9 [ 1402.628702][T28385] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8b065e609c [ 1402.628716][T28385] RBP: 00007f8b065e6090 R08: 00007f8b0711e000 R09: 0000000000000000 [ 1402.628731][T28385] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1402.628756][T28385] R13: 00007f8b065e6128 R14: 00007ffdf76d2090 R15: 00007ffdf76d2178 [ 1402.628788][T28385] [ 1404.297949][T26581] ttyS ttyS0: 4 input overrun(s) [ 1404.820279][T28422] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.5199'. [ 1405.265566][T28430] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5203'. [ 1405.299833][T28430] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5203'. [ 1405.697342][T28444] netlink: 280 bytes leftover after parsing attributes in process `syz.1.5207'. [ 1407.295696][T28473] FAULT_INJECTION: forcing a failure. [ 1407.295696][T28473] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1407.354061][T28473] CPU: 0 UID: 0 PID: 28473 Comm: syz.2.5219 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1407.354126][T28473] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1407.354141][T28473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1407.354157][T28473] Call Trace: [ 1407.354167][T28473] [ 1407.354179][T28473] dump_stack_lvl+0x16c/0x1f0 [ 1407.354216][T28473] should_fail_ex+0x512/0x640 [ 1407.354261][T28473] get_futex_key+0x1d0/0x1560 [ 1407.354301][T28473] ? __pfx_get_futex_key+0x10/0x10 [ 1407.354346][T28473] ? mas_find+0x156/0x6d0 [ 1407.354381][T28473] futex_wait_setup+0x9d/0x550 [ 1407.354431][T28473] __futex_wait+0x193/0x2f0 [ 1407.354474][T28473] ? __pfx___futex_wait+0x10/0x10 [ 1407.354758][T28473] ? __pfx_futex_wake_mark+0x10/0x10 [ 1407.354808][T28473] ? futex_private_hash_put+0x176/0x300 [ 1407.354846][T28473] ? futex_private_hash_put+0x18a/0x300 [ 1407.354885][T28473] futex_wait+0xe8/0x380 [ 1407.354911][T28473] ? __pfx_futex_wait+0x10/0x10 [ 1407.354948][T28473] ? __pfx___up_read+0x10/0x10 [ 1407.354995][T28473] ? madvise_unlock+0x7c/0x220 [ 1407.355041][T28473] do_futex+0x229/0x350 [ 1407.355079][T28473] ? __pfx_do_futex+0x10/0x10 [ 1407.355120][T28473] __x64_sys_futex+0x1e0/0x4c0 [ 1407.355158][T28473] ? __pfx___x64_sys_futex+0x10/0x10 [ 1407.355192][T28473] ? xfd_validate_state+0x61/0x180 [ 1407.355227][T28473] ? __pfx_ksys_write+0x10/0x10 [ 1407.355264][T28473] do_syscall_64+0xcd/0xfa0 [ 1407.355294][T28473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.355319][T28473] RIP: 0033:0x7ffa81d8efc9 [ 1407.355352][T28473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1407.355378][T28473] RSP: 002b:00007ffa82b930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1407.355409][T28473] RAX: ffffffffffffffda RBX: 00007ffa81fe5fa8 RCX: 00007ffa81d8efc9 [ 1407.355426][T28473] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa81fe5fa8 [ 1407.355442][T28473] RBP: 00007ffa81fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1407.355458][T28473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1407.355475][T28473] R13: 00007ffa81fe6038 R14: 00007ffddeb60e00 R15: 00007ffddeb60ee8 [ 1407.355508][T28473] [ 1408.217747][T28489] FAULT_INJECTION: forcing a failure. [ 1408.217747][T28489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1408.270244][T28489] CPU: 0 UID: 0 PID: 28489 Comm: syz.2.5222 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1408.270310][T28489] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1408.270325][T28489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1408.270340][T28489] Call Trace: [ 1408.270349][T28489] [ 1408.270359][T28489] dump_stack_lvl+0x16c/0x1f0 [ 1408.270393][T28489] should_fail_ex+0x512/0x640 [ 1408.270436][T28489] strncpy_from_user+0x3b/0x2e0 [ 1408.270483][T28489] setxattr_copy+0x8a/0x210 [ 1408.270511][T28489] path_setxattrat+0x104/0x2a0 [ 1408.270538][T28489] ? __pfx_path_setxattrat+0x10/0x10 [ 1408.270569][T28489] ? fput+0x9b/0xd0 [ 1408.270631][T28489] ? xfd_validate_state+0x61/0x180 [ 1408.270673][T28489] __x64_sys_fsetxattr+0xc5/0x140 [ 1408.270699][T28489] ? do_syscall_64+0x91/0xfa0 [ 1408.270725][T28489] ? lockdep_hardirqs_on+0x7c/0x110 [ 1408.270752][T28489] do_syscall_64+0xcd/0xfa0 [ 1408.270784][T28489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.270810][T28489] RIP: 0033:0x7ffa81d8efc9 [ 1408.270829][T28489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1408.270853][T28489] RSP: 002b:00007ffa82b93038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1408.270878][T28489] RAX: ffffffffffffffda RBX: 00007ffa81fe5fa0 RCX: 00007ffa81d8efc9 [ 1408.270895][T28489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 1408.270912][T28489] RBP: 00007ffa81e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1408.270927][T28489] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1408.270942][T28489] R13: 00007ffa81fe6038 R14: 00007ffa81fe5fa0 R15: 00007ffddeb60ee8 [ 1408.270974][T28489] [ 1408.685909][T28495] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5223'. [ 1409.694570][ T7643] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 1409.694620][ T7643] Bluetooth: hci0: unexpected subevent 0x03 length: 727 > 9 [ 1412.754105][T28544] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5237'. [ 1412.808502][T28546] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5237'. [ 1412.878237][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880787a1800: rx timeout, send abort [ 1412.886708][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880787a2000: rx timeout, send abort [ 1412.895505][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880787a1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1412.912831][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880787a2000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1413.302869][T28553] FAULT_INJECTION: forcing a failure. [ 1413.302869][T28553] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.382081][T28553] CPU: 0 UID: 0 PID: 28553 Comm: syz.4.5239 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1413.382139][T28553] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1413.382152][T28553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1413.382167][T28553] Call Trace: [ 1413.382176][T28553] [ 1413.382186][T28553] dump_stack_lvl+0x16c/0x1f0 [ 1413.382219][T28553] should_fail_ex+0x512/0x640 [ 1413.382257][T28553] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1413.382301][T28553] should_failslab+0xc2/0x120 [ 1413.382335][T28553] __kmalloc_cache_noprof+0x72/0x780 [ 1413.382375][T28553] ? lockdep_init_map_type+0x5c/0x280 [ 1413.382410][T28553] ? mon_text_open+0x1d9/0x510 [ 1413.382445][T28553] ? __pfx_mon_text_open+0x10/0x10 [ 1413.382471][T28553] ? mon_text_open+0x1d9/0x510 [ 1413.382515][T28553] mon_text_open+0x1d9/0x510 [ 1413.382544][T28553] ? __pfx_mon_text_open+0x10/0x10 [ 1413.382573][T28553] ? __debugfs_file_get+0x1fe/0x840 [ 1413.382605][T28553] ? __pfx___debugfs_file_get+0x10/0x10 [ 1413.382637][T28553] ? __pfx_apparmor_file_open+0x10/0x10 [ 1413.382671][T28553] ? lockdown_is_locked_down+0x3f/0x130 [ 1413.382704][T28553] ? bpf_lsm_locked_down+0x9/0x10 [ 1413.382740][T28553] ? __pfx_mon_text_open+0x10/0x10 [ 1413.382765][T28553] full_proxy_open_regular+0x1b9/0x360 [ 1413.382813][T28553] do_dentry_open+0x982/0x1530 [ 1413.382843][T28553] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1413.382885][T28553] vfs_open+0x82/0x3f0 [ 1413.382923][T28553] path_openat+0x1de4/0x2cb0 [ 1413.382960][T28553] ? __pfx_path_openat+0x10/0x10 [ 1413.382988][T28553] ? __lock_acquire+0xb8a/0x1c90 [ 1413.383024][T28553] do_filp_open+0x20b/0x470 [ 1413.383051][T28553] ? __pfx_do_filp_open+0x10/0x10 [ 1413.383099][T28553] ? alloc_fd+0x471/0x7d0 [ 1413.383131][T28553] do_sys_openat2+0x11b/0x1d0 [ 1413.383166][T28553] ? __pfx_do_sys_openat2+0x10/0x10 [ 1413.383203][T28553] ? find_held_lock+0x2b/0x80 [ 1413.383235][T28553] __x64_sys_openat+0x174/0x210 [ 1413.383271][T28553] ? __pfx___x64_sys_openat+0x10/0x10 [ 1413.383319][T28553] do_syscall_64+0xcd/0xfa0 [ 1413.383348][T28553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.383373][T28553] RIP: 0033:0x7f14d1b8efc9 [ 1413.383392][T28553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1413.383415][T28553] RSP: 002b:00007f14d29b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1413.383439][T28553] RAX: ffffffffffffffda RBX: 00007f14d1de6090 RCX: 00007f14d1b8efc9 [ 1413.383455][T28553] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1413.383470][T28553] RBP: 00007f14d1c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1413.383484][T28553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1413.383499][T28553] R13: 00007f14d1de6128 R14: 00007f14d1de6090 R15: 00007fff0ba5a178 [ 1413.383530][T28553] [ 1415.196066][T28586] random: crng reseeded on system resumption [ 1415.442887][T28591] FAULT_INJECTION: forcing a failure. [ 1415.442887][T28591] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1415.536622][T28591] CPU: 0 UID: 0 PID: 28591 Comm: syz.2.5252 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1415.536684][T28591] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1415.536699][T28591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1415.536714][T28591] Call Trace: [ 1415.536724][T28591] [ 1415.536734][T28591] dump_stack_lvl+0x16c/0x1f0 [ 1415.536768][T28591] should_fail_ex+0x512/0x640 [ 1415.536822][T28591] get_futex_key+0x1d0/0x1560 [ 1415.536864][T28591] ? __pfx_get_futex_key+0x10/0x10 [ 1415.536899][T28591] ? mas_find+0x156/0x6d0 [ 1415.536934][T28591] futex_wait_setup+0x9d/0x550 [ 1415.536982][T28591] __futex_wait+0x193/0x2f0 [ 1415.537021][T28591] ? __pfx___futex_wait+0x10/0x10 [ 1415.537064][T28591] ? __pfx_futex_wake_mark+0x10/0x10 [ 1415.537107][T28591] ? futex_private_hash_put+0x176/0x300 [ 1415.537143][T28591] ? futex_private_hash_put+0x18a/0x300 [ 1415.537176][T28591] futex_wait+0xe8/0x380 [ 1415.537197][T28591] ? __pfx_futex_wait+0x10/0x10 [ 1415.537233][T28591] ? __pfx___up_read+0x10/0x10 [ 1415.537280][T28591] ? madvise_unlock+0x7c/0x220 [ 1415.537321][T28591] do_futex+0x229/0x350 [ 1415.537355][T28591] ? __pfx_do_futex+0x10/0x10 [ 1415.537396][T28591] __x64_sys_futex+0x1e0/0x4c0 [ 1415.537434][T28591] ? __pfx___x64_sys_futex+0x10/0x10 [ 1415.537467][T28591] ? xfd_validate_state+0x61/0x180 [ 1415.537502][T28591] ? __pfx_ksys_write+0x10/0x10 [ 1415.537539][T28591] do_syscall_64+0xcd/0xfa0 [ 1415.537569][T28591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.537604][T28591] RIP: 0033:0x7ffa81d8efc9 [ 1415.537628][T28591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.537655][T28591] RSP: 002b:00007ffa82b930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1415.537682][T28591] RAX: ffffffffffffffda RBX: 00007ffa81fe5fa8 RCX: 00007ffa81d8efc9 [ 1415.537700][T28591] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa81fe5fa8 [ 1415.537718][T28591] RBP: 00007ffa81fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1415.537734][T28591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.537751][T28591] R13: 00007ffa81fe6038 R14: 00007ffddeb60e00 R15: 00007ffddeb60ee8 [ 1415.537786][T28591] [ 1416.056723][T28586] Restarting kernel threads ... [ 1416.085678][T28586] Done restarting kernel threads. [ 1416.645260][T28611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5257'. [ 1417.011693][T28611] veth0_macvtap: left promiscuous mode [ 1417.087021][T28611] macvtap0: entered promiscuous mode [ 1417.104665][T28611] macvtap0: entered allmulticast mode [ 1417.850226][T28627] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.5261'. [ 1419.283133][T28657] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5264'. [ 1420.070044][T28677] FAULT_INJECTION: forcing a failure. [ 1420.070044][T28677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1420.104590][T28677] CPU: 0 UID: 0 PID: 28677 Comm: syz.2.5270 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1420.104649][T28677] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1420.104663][T28677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1420.104680][T28677] Call Trace: [ 1420.104688][T28677] [ 1420.104698][T28677] dump_stack_lvl+0x16c/0x1f0 [ 1420.104732][T28677] should_fail_ex+0x512/0x640 [ 1420.104774][T28677] _copy_to_user+0x32/0xd0 [ 1420.104816][T28677] simple_read_from_buffer+0xcb/0x170 [ 1420.104858][T28677] proc_fail_nth_read+0x197/0x240 [ 1420.104887][T28677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1420.104915][T28677] ? rw_verify_area+0xcf/0x6c0 [ 1420.104938][T28677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1420.104963][T28677] vfs_read+0x1e4/0xcf0 [ 1420.104993][T28677] ? __pfx___mutex_lock+0x10/0x10 [ 1420.105023][T28677] ? __pfx_vfs_read+0x10/0x10 [ 1420.105056][T28677] ? __fget_files+0x20e/0x3c0 [ 1420.105089][T28677] ksys_read+0x12a/0x250 [ 1420.105114][T28677] ? __pfx_ksys_read+0x10/0x10 [ 1420.105148][T28677] do_syscall_64+0xcd/0xfa0 [ 1420.105177][T28677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.105213][T28677] RIP: 0033:0x7ffa81d8d9dc [ 1420.105235][T28677] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1420.105260][T28677] RSP: 002b:00007ffa82b93030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1420.105286][T28677] RAX: ffffffffffffffda RBX: 00007ffa81fe5fa0 RCX: 00007ffa81d8d9dc [ 1420.105302][T28677] RDX: 000000000000000f RSI: 00007ffa82b930a0 RDI: 0000000000000005 [ 1420.105317][T28677] RBP: 00007ffa82b93090 R08: 0000000000000000 R09: 0000000000000000 [ 1420.105331][T28677] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1420.105346][T28677] R13: 00007ffa81fe6038 R14: 00007ffa81fe5fa0 R15: 00007ffddeb60ee8 [ 1420.105376][T28677] [ 1421.867327][T28703] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5279'. [ 1423.137267][T28730] random: crng reseeded on system resumption [ 1423.213015][T28730] Restarting kernel threads ... [ 1423.241897][T28730] Done restarting kernel threads. [ 1424.242345][T28752] FAULT_INJECTION: forcing a failure. [ 1424.242345][T28752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1424.313642][T28752] CPU: 0 UID: 0 PID: 28752 Comm: syz.2.5292 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1424.313703][T28752] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1424.313717][T28752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1424.313732][T28752] Call Trace: [ 1424.313742][T28752] [ 1424.313753][T28752] dump_stack_lvl+0x16c/0x1f0 [ 1424.313789][T28752] should_fail_ex+0x512/0x640 [ 1424.313831][T28752] strncpy_from_user+0x3b/0x2e0 [ 1424.313869][T28752] getname_flags.part.0+0x8f/0x550 [ 1424.313910][T28752] getname_flags+0x93/0xf0 [ 1424.313935][T28752] do_sys_openat2+0xb8/0x1d0 [ 1424.313970][T28752] ? __pfx_do_sys_openat2+0x10/0x10 [ 1424.314006][T28752] ? __fget_files+0x20e/0x3c0 [ 1424.314038][T28752] __x64_sys_creat+0xcc/0x120 [ 1424.314075][T28752] ? __pfx___x64_sys_creat+0x10/0x10 [ 1424.314109][T28752] ? __pfx_ksys_write+0x10/0x10 [ 1424.314139][T28752] ? rcu_is_watching+0x12/0xc0 [ 1424.314165][T28752] ? do_syscall_64+0x91/0xfa0 [ 1424.314199][T28752] do_syscall_64+0xcd/0xfa0 [ 1424.314228][T28752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.314252][T28752] RIP: 0033:0x7ffa81d8efc9 [ 1424.314271][T28752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1424.314294][T28752] RSP: 002b:00007ffa82b93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1424.314318][T28752] RAX: ffffffffffffffda RBX: 00007ffa81fe5fa0 RCX: 00007ffa81d8efc9 [ 1424.314334][T28752] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 1424.314348][T28752] RBP: 00007ffa82b93090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.314363][T28752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1424.314377][T28752] R13: 00007ffa81fe6038 R14: 00007ffa81fe5fa0 R15: 00007ffddeb60ee8 [ 1424.314407][T28752] [ 1424.501349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.788540][T28754] FAULT_INJECTION: forcing a failure. [ 1424.788540][T28754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1424.899745][T28754] CPU: 0 UID: 0 PID: 28754 Comm: syz.4.5293 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1424.899818][T28754] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1424.899834][T28754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1424.899851][T28754] Call Trace: [ 1424.899862][T28754] [ 1424.899873][T28754] dump_stack_lvl+0x16c/0x1f0 [ 1424.899910][T28754] should_fail_ex+0x512/0x640 [ 1424.899957][T28754] should_fail_alloc_page+0xe7/0x130 [ 1424.899999][T28754] prepare_alloc_pages+0x3c2/0x610 [ 1424.900054][T28754] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1424.900086][T28754] ? __lock_acquire+0x622/0x1c90 [ 1424.900131][T28754] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1424.900159][T28754] ? __lock_acquire+0xb8a/0x1c90 [ 1424.900192][T28754] ? look_up_lock_class+0x59/0x150 [ 1424.900221][T28754] ? register_lock_class+0x41/0x4c0 [ 1424.900265][T28754] ? __lock_acquire+0xb8a/0x1c90 [ 1424.900300][T28754] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1424.900364][T28754] ? policy_nodemask+0xea/0x4e0 [ 1424.900401][T28754] alloc_pages_mpol+0x1fb/0x550 [ 1424.900437][T28754] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1424.900480][T28754] alloc_pages_noprof+0x131/0x390 [ 1424.900515][T28754] __pmd_alloc+0x3b/0x8b0 [ 1424.900553][T28754] huge_pte_alloc+0x41d/0x5b0 [ 1424.900582][T28754] hugetlb_fault+0x373/0x2f40 [ 1424.900612][T28754] ? __pfx_hugetlb_fault+0x10/0x10 [ 1424.900650][T28754] ? find_vma+0xbf/0x140 [ 1424.900679][T28754] ? __pfx_find_vma+0x10/0x10 [ 1424.900713][T28754] handle_mm_fault+0xbfa/0xd10 [ 1424.900754][T28754] ? __pkru_allows_pkey+0x11/0xb0 [ 1424.900809][T28754] do_user_addr_fault+0x7a6/0x1370 [ 1424.900839][T28754] ? rcu_is_watching+0x12/0xc0 [ 1424.900874][T28754] exc_page_fault+0x64/0xc0 [ 1424.900902][T28754] asm_exc_page_fault+0x26/0x30 [ 1424.900928][T28754] RIP: 0010:strncpy_from_user+0x147/0x2e0 [ 1424.900965][T28754] Code: 00 00 4d 89 74 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 a7 ed e6 fc 48 83 fd 07 76 22 e8 2c f2 e6 fc 45 31 ff <49> 8b 04 1c 31 ff 44 89 fe 49 89 c6 e8 58 ed e6 fc 45 85 ff 0f 84 [ 1424.900991][T28754] RSP: 0018:ffffc9000410fc50 EFLAGS: 00050246 [ 1424.901014][T28754] RAX: 000000000000000f RBX: 0000000000000000 RCX: ffffc9000da01000 [ 1424.901031][T28754] RDX: 0000000000080000 RSI: ffffffff84d577d4 RDI: 0000000000000007 [ 1424.901047][T28754] RBP: 0000000000000100 R08: 0000000000000007 R09: 0000000000000007 [ 1424.901062][T28754] R10: 0000000000000100 R11: 0000000000000000 R12: 0000000000000000 [ 1424.901078][T28754] R13: ffffc9000410fd48 R14: 0000000000000100 R15: 0000000000000000 [ 1424.901105][T28754] ? strncpy_from_user+0x144/0x2e0 [ 1424.901149][T28754] setxattr_copy+0x8a/0x210 [ 1424.901177][T28754] path_setxattrat+0x104/0x2a0 [ 1424.901202][T28754] ? __pfx_path_setxattrat+0x10/0x10 [ 1424.901233][T28754] ? fput+0x9b/0xd0 [ 1424.901296][T28754] ? xfd_validate_state+0x61/0x180 [ 1424.901340][T28754] __x64_sys_fsetxattr+0xc5/0x140 [ 1424.901369][T28754] ? do_syscall_64+0x91/0xfa0 [ 1424.901396][T28754] ? lockdep_hardirqs_on+0x7c/0x110 [ 1424.901424][T28754] do_syscall_64+0xcd/0xfa0 [ 1424.901454][T28754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.901479][T28754] RIP: 0033:0x7f14d1b8efc9 [ 1424.901501][T28754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1424.901525][T28754] RSP: 002b:00007f14d29d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1424.901549][T28754] RAX: ffffffffffffffda RBX: 00007f14d1de5fa0 RCX: 00007f14d1b8efc9 [ 1424.901566][T28754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 1424.901581][T28754] RBP: 00007f14d1c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1424.901597][T28754] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1424.901614][T28754] R13: 00007f14d1de6038 R14: 00007f14d1de5fa0 R15: 00007fff0ba5a178 [ 1424.901650][T28754] [ 1425.283553][ C0] vkms_vblank_simulate: vblank timer overrun [ 1427.094083][T28770] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1427.113851][T28770] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1427.243204][T28770] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1427.292152][T28770] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1427.323371][T28770] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1427.355639][T28770] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1427.492546][T28787] FAULT_INJECTION: forcing a failure. [ 1427.492546][T28787] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.520185][T28770] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1427.539236][T28770] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1427.564698][T28787] CPU: 0 UID: 0 PID: 28787 Comm: syz.2.5302 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1427.564762][T28787] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1427.564779][T28787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1427.564795][T28787] Call Trace: [ 1427.564806][T28787] [ 1427.564818][T28787] dump_stack_lvl+0x16c/0x1f0 [ 1427.564854][T28787] should_fail_ex+0x512/0x640 [ 1427.564897][T28787] ? __kmalloc_noprof+0xca/0x880 [ 1427.564942][T28787] should_failslab+0xc2/0x120 [ 1427.564977][T28787] __kmalloc_noprof+0xdd/0x880 [ 1427.565017][T28787] ? process_preds+0x46c/0x1c50 [ 1427.565056][T28787] ? process_preds+0x46c/0x1c50 [ 1427.565089][T28787] process_preds+0x46c/0x1c50 [ 1427.565128][T28787] ? create_filter_start.constprop.0+0x56/0x300 [ 1427.565167][T28787] create_filter+0x140/0x210 [ 1427.565203][T28787] ? __pfx_create_filter+0x10/0x10 [ 1427.565239][T28787] ? __pfx___mutex_lock+0x10/0x10 [ 1427.565271][T28787] ? find_held_lock+0x2b/0x80 [ 1427.565301][T28787] apply_event_filter+0x220/0x500 [ 1427.565338][T28787] ? __pfx_apply_event_filter+0x10/0x10 [ 1427.565382][T28787] event_filter_write+0x16d/0x290 [ 1427.565409][T28787] ? __pfx_event_filter_write+0x10/0x10 [ 1427.565436][T28787] vfs_write+0x2a0/0x11d0 [ 1427.565470][T28787] ? __pfx___mutex_lock+0x10/0x10 [ 1427.565499][T28787] ? __pfx_vfs_write+0x10/0x10 [ 1427.565533][T28787] ? __fget_files+0x20e/0x3c0 [ 1427.565579][T28787] ksys_write+0x12a/0x250 [ 1427.565610][T28787] ? __pfx_ksys_write+0x10/0x10 [ 1427.565647][T28787] do_syscall_64+0xcd/0xfa0 [ 1427.565679][T28787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.565705][T28787] RIP: 0033:0x7ffa81d8efc9 [ 1427.565727][T28787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.565753][T28787] RSP: 002b:00007ffa82b93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1427.565780][T28787] RAX: ffffffffffffffda RBX: 00007ffa81fe5fa0 RCX: 00007ffa81d8efc9 [ 1427.565797][T28787] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1427.565812][T28787] RBP: 00007ffa81e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1427.565827][T28787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1427.565841][T28787] R13: 00007ffa81fe6038 R14: 00007ffa81fe5fa0 R15: 00007ffddeb60ee8 [ 1427.565876][T28787] [ 1427.802062][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.174276][T28789] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5303'. [ 1428.248083][T28789] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5303'. [ 1428.371311][T28770] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1428.872834][T25711] Bluetooth: hci2: command 0x0406 tx timeout [ 1429.339962][T25711] Bluetooth: hci3: command 0x0406 tx timeout [ 1429.346248][ T7643] Bluetooth: hci0: command 0x0406 tx timeout [ 1429.576300][T25711] Bluetooth: hci4: command 0x0c1a tx timeout [ 1430.239828][T28811] nbd: must specify a device to reconfigure [ 1430.249302][T28815] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.5309: 7 [ 1430.281305][T28815] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.5309: 7 [ 1430.338106][T28815] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.5309: 7 [ 1430.380167][T28815] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.5309: 7 [ 1430.413178][T28815] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.5309: 7 [ 1430.447811][T28815] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.5309: 7 [ 1430.479908][T28815] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.5309: 7 [ 1430.518351][T28815] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.5309: 7 [ 1430.550177][T28815] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.5309: 7 [ 1430.582009][T28815] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.5309: 7 [ 1430.935795][T25711] Bluetooth: hci2: command 0x0406 tx timeout [ 1431.416839][T25711] Bluetooth: hci3: command 0x0406 tx timeout [ 1431.422937][T25711] Bluetooth: hci0: command 0x0406 tx timeout [ 1431.656661][T25711] Bluetooth: hci4: command 0x0c1a tx timeout [ 1432.223533][T28842] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5318'. [ 1433.458484][T28860] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5320'. [ 1433.735490][T25711] Bluetooth: hci4: command 0x0c1a tx timeout [ 1433.982935][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.989656][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.172194][T28867] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5323'. [ 1434.670237][T28872] netlink: 175 bytes leftover after parsing attributes in process `syz.2.5325'. [ 1435.276276][T28886] FAULT_INJECTION: forcing a failure. [ 1435.276276][T28886] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1435.341914][T28886] CPU: 0 UID: 0 PID: 28886 Comm: syz.4.5329 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1435.341985][T28886] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1435.341999][T28886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1435.342015][T28886] Call Trace: [ 1435.342024][T28886] [ 1435.342034][T28886] dump_stack_lvl+0x16c/0x1f0 [ 1435.342072][T28886] should_fail_ex+0x512/0x640 [ 1435.342117][T28886] get_futex_key+0xff0/0x1560 [ 1435.342155][T28886] ? __pfx_get_futex_key+0x10/0x10 [ 1435.342186][T28886] ? __mutex_trylock_common+0xe9/0x250 [ 1435.342229][T28886] futex_wake+0xea/0x530 [ 1435.342270][T28886] ? __pfx_futex_wake+0x10/0x10 [ 1435.342304][T28886] ? __lock_acquire+0xb8a/0x1c90 [ 1435.342351][T28886] do_futex+0x1e3/0x350 [ 1435.342384][T28886] ? __pfx_do_futex+0x10/0x10 [ 1435.342414][T28886] ? __might_fault+0xe3/0x190 [ 1435.342447][T28886] mm_release+0x24e/0x300 [ 1435.342476][T28886] do_exit+0x68e/0x2bf0 [ 1435.342515][T28886] ? __pfx_do_exit+0x10/0x10 [ 1435.342547][T28886] ? do_raw_spin_lock+0x12c/0x2b0 [ 1435.342595][T28886] ? find_held_lock+0x2b/0x80 [ 1435.342642][T28886] do_group_exit+0xd3/0x2a0 [ 1435.342677][T28886] get_signal+0x2671/0x26d0 [ 1435.342710][T28886] ? __lock_acquire+0x622/0x1c90 [ 1435.342746][T28886] ? __pfx_get_signal+0x10/0x10 [ 1435.342773][T28886] ? do_futex+0x122/0x350 [ 1435.342805][T28886] ? __pfx_do_futex+0x10/0x10 [ 1435.342839][T28886] arch_do_signal_or_restart+0x8f/0x790 [ 1435.342873][T28886] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1435.342910][T28886] ? ksys_write+0x1ac/0x250 [ 1435.342949][T28886] ? __pfx_ksys_write+0x10/0x10 [ 1435.342981][T28886] exit_to_user_mode_loop+0x85/0x130 [ 1435.343022][T28886] do_syscall_64+0x426/0xfa0 [ 1435.343052][T28886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.343077][T28886] RIP: 0033:0x7f14d1b8efc9 [ 1435.343098][T28886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1435.343122][T28886] RSP: 002b:00007f14d29d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1435.343147][T28886] RAX: fffffffffffffe00 RBX: 00007f14d1de5fa8 RCX: 00007f14d1b8efc9 [ 1435.343163][T28886] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f14d1de5fa8 [ 1435.343178][T28886] RBP: 00007f14d1de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1435.343193][T28886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1435.343209][T28886] R13: 00007f14d1de6038 R14: 00007fff0ba5a090 R15: 00007fff0ba5a178 [ 1435.343240][T28886] [ 1440.296937][T28954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5346'. [ 1440.439341][T28961] random: crng reseeded on system resumption [ 1440.522632][T28961] Restarting kernel threads ... [ 1440.572429][T28961] Done restarting kernel threads. [ 1440.610207][T28956] FAULT_INJECTION: forcing a failure. [ 1440.610207][T28956] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.757670][T28956] CPU: 0 UID: 0 PID: 28956 Comm: syz.1.5347 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1440.757734][T28956] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1440.757748][T28956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1440.757766][T28956] Call Trace: [ 1440.757776][T28956] [ 1440.757787][T28956] dump_stack_lvl+0x16c/0x1f0 [ 1440.757824][T28956] should_fail_ex+0x512/0x640 [ 1440.757868][T28956] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1440.757913][T28956] should_failslab+0xc2/0x120 [ 1440.757951][T28956] __kmalloc_cache_noprof+0x72/0x780 [ 1440.758000][T28956] ? do_raw_spin_lock+0x12c/0x2b0 [ 1440.758044][T28956] ? alloc_fdtable+0xbd/0x2d0 [ 1440.758073][T28956] ? alloc_fdtable+0xbd/0x2d0 [ 1440.758093][T28956] alloc_fdtable+0xbd/0x2d0 [ 1440.758118][T28956] dup_fd+0x83b/0xb90 [ 1440.758155][T28956] __do_sys_close_range+0x4ca/0x730 [ 1440.758186][T28956] ? __pfx___do_sys_close_range+0x10/0x10 [ 1440.758222][T28956] do_syscall_64+0xcd/0xfa0 [ 1440.758257][T28956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.758284][T28956] RIP: 0033:0x7f8b0638efc9 [ 1440.758305][T28956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1440.758331][T28956] RSP: 002b:00007f8b045f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1440.758356][T28956] RAX: ffffffffffffffda RBX: 00007f8b065e5fa0 RCX: 00007f8b0638efc9 [ 1440.758372][T28956] RDX: 0000000000000006 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 1440.758388][T28956] RBP: 00007f8b06411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1440.758416][T28956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.758433][T28956] R13: 00007f8b065e6038 R14: 00007f8b065e5fa0 R15: 00007ffdf76d2178 [ 1440.758468][T28956] [ 1441.308698][T28962] netlink: zone id is out of range [ 1446.083888][T25711] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 1446.083935][T25711] Bluetooth: hci2: unexpected subevent 0x03 length: 727 > 9 [ 1446.743998][T29087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5371'. [ 1447.202900][T29104] FAULT_INJECTION: forcing a failure. [ 1447.202900][T29104] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1447.327225][T29104] CPU: 0 UID: 0 PID: 29104 Comm: syz.2.5374 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1447.327287][T29104] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1447.327302][T29104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1447.327319][T29104] Call Trace: [ 1447.327329][T29104] [ 1447.327339][T29104] dump_stack_lvl+0x16c/0x1f0 [ 1447.327373][T29104] should_fail_ex+0x512/0x640 [ 1447.327417][T29104] get_futex_key+0x1d0/0x1560 [ 1447.327457][T29104] ? __pfx_get_futex_key+0x10/0x10 [ 1447.327491][T29104] ? mas_find+0x156/0x6d0 [ 1447.327525][T29104] futex_wait_setup+0x9d/0x550 [ 1447.327572][T29104] __futex_wait+0x193/0x2f0 [ 1447.327612][T29104] ? __pfx___futex_wait+0x10/0x10 [ 1447.327656][T29104] ? __pfx_futex_wake_mark+0x10/0x10 [ 1447.327699][T29104] ? futex_private_hash_put+0x176/0x300 [ 1447.327734][T29104] ? futex_private_hash_put+0x18a/0x300 [ 1447.327767][T29104] futex_wait+0xe8/0x380 [ 1447.327788][T29104] ? __pfx_futex_wait+0x10/0x10 [ 1447.327825][T29104] ? __pfx___up_read+0x10/0x10 [ 1447.327871][T29104] ? madvise_unlock+0x7c/0x220 [ 1447.327922][T29104] do_futex+0x229/0x350 [ 1447.327958][T29104] ? __pfx_do_futex+0x10/0x10 [ 1447.328001][T29104] __x64_sys_futex+0x1e0/0x4c0 [ 1447.328041][T29104] ? __pfx___x64_sys_futex+0x10/0x10 [ 1447.328077][T29104] ? xfd_validate_state+0x61/0x180 [ 1447.328111][T29104] ? __pfx_ksys_write+0x10/0x10 [ 1447.328147][T29104] do_syscall_64+0xcd/0xfa0 [ 1447.328176][T29104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.328201][T29104] RIP: 0033:0x7ffa81d8efc9 [ 1447.328222][T29104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1447.328247][T29104] RSP: 002b:00007ffa82b930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1447.328270][T29104] RAX: ffffffffffffffda RBX: 00007ffa81fe5fa8 RCX: 00007ffa81d8efc9 [ 1447.328287][T29104] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa81fe5fa8 [ 1447.328302][T29104] RBP: 00007ffa81fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1447.328316][T29104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1447.328332][T29104] R13: 00007ffa81fe6038 R14: 00007ffddeb60e00 R15: 00007ffddeb60ee8 [ 1447.328365][T29104] [ 1447.560223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.300400][ T30] audit: type=1326 audit(4294967326.900:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29110 comm="syz.1.5377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b0638efc9 code=0x0 [ 1450.676535][T29158] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5384'. [ 1454.727351][T29228] FAULT_INJECTION: forcing a failure. [ 1454.727351][T29228] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.771408][T29226] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5393'. [ 1454.815547][T29228] CPU: 0 UID: 0 PID: 29228 Comm: syz.4.5394 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1454.815612][T29228] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1454.815627][T29228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1454.815645][T29228] Call Trace: [ 1454.815656][T29228] [ 1454.815667][T29228] dump_stack_lvl+0x16c/0x1f0 [ 1454.815707][T29228] should_fail_ex+0x512/0x640 [ 1454.815749][T29228] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1454.815797][T29228] should_failslab+0xc2/0x120 [ 1454.815836][T29228] __kmalloc_cache_noprof+0x72/0x780 [ 1454.815877][T29228] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 1454.815911][T29228] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 1454.815937][T29228] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 1454.815965][T29228] hugetlb_reserve_pages+0x151/0xf40 [ 1454.816006][T29228] ? __vma_enter_locked+0x163/0x3f0 [ 1454.816046][T29228] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 1454.816087][T29228] ? atime_needs_update+0x8b/0x710 [ 1454.816132][T29228] hugetlbfs_file_mmap+0x4a1/0x730 [ 1454.816165][T29228] __mmap_region+0x1309/0x27a0 [ 1454.816205][T29228] ? __pfx___mmap_region+0x10/0x10 [ 1454.816232][T29228] ? find_held_lock+0x2b/0x80 [ 1454.816263][T29228] ? is_bpf_text_address+0x8a/0x1a0 [ 1454.816304][T29228] ? bpf_ksym_find+0x124/0x1c0 [ 1454.816333][T29228] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1454.816368][T29228] ? is_bpf_text_address+0x94/0x1a0 [ 1454.816423][T29228] ? __pfx_stack_trace_save+0x10/0x10 [ 1454.816488][T29228] ? trace_cap_capable+0x18d/0x200 [ 1454.816535][T29228] mmap_region+0x32b/0x3f0 [ 1454.816564][T29228] do_mmap+0xa3e/0x1210 [ 1454.816602][T29228] ? __pfx_do_mmap+0x10/0x10 [ 1454.816634][T29228] ? __pfx_down_write_killable+0x10/0x10 [ 1454.816674][T29228] vm_mmap_pgoff+0x29e/0x470 [ 1454.816712][T29228] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1454.816742][T29228] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1454.816780][T29228] ? hugetlbfs_get_inode+0x31f/0x730 [ 1454.816817][T29228] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1454.816853][T29228] __x64_sys_mmap+0x125/0x190 [ 1454.816895][T29228] do_syscall_64+0xcd/0xfa0 [ 1454.816925][T29228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.816952][T29228] RIP: 0033:0x7f14d1b8efc9 [ 1454.816974][T29228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1454.817000][T29228] RSP: 002b:00007f14d29d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1454.817025][T29228] RAX: ffffffffffffffda RBX: 00007f14d1de5fa0 RCX: 00007f14d1b8efc9 [ 1454.817041][T29228] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 1454.817058][T29228] RBP: 00007f14d1c11f91 R08: 0000000000000602 R09: 0000300001000000 [ 1454.817075][T29228] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1454.817092][T29228] R13: 00007f14d1de6038 R14: 00007f14d1de5fa0 R15: 00007fff0ba5a178 [ 1454.817128][T29228] [ 1459.488256][T29323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5411'. [ 1460.384172][T29336] FAULT_INJECTION: forcing a failure. [ 1460.384172][T29336] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.443623][T29336] CPU: 0 UID: 0 PID: 29336 Comm: syz.1.5416 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1460.443696][T29336] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1460.443713][T29336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1460.443735][T29336] Call Trace: [ 1460.443745][T29336] [ 1460.443755][T29336] dump_stack_lvl+0x16c/0x1f0 [ 1460.443815][T29336] should_fail_ex+0x512/0x640 [ 1460.443862][T29336] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1460.443912][T29336] should_failslab+0xc2/0x120 [ 1460.443950][T29336] __kmalloc_cache_noprof+0x72/0x780 [ 1460.443991][T29336] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 1460.444024][T29336] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 1460.444050][T29336] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 1460.444079][T29336] hugetlb_reserve_pages+0x151/0xf40 [ 1460.444121][T29336] ? __vma_enter_locked+0x163/0x3f0 [ 1460.444162][T29336] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 1460.444223][T29336] ? atime_needs_update+0x8b/0x710 [ 1460.444268][T29336] hugetlbfs_file_mmap+0x4a1/0x730 [ 1460.444300][T29336] __mmap_region+0x1309/0x27a0 [ 1460.444331][T29336] ? __pfx___mmap_region+0x10/0x10 [ 1460.444354][T29336] ? find_held_lock+0x2b/0x80 [ 1460.444384][T29336] ? is_bpf_text_address+0x8a/0x1a0 [ 1460.444419][T29336] ? bpf_ksym_find+0x124/0x1c0 [ 1460.444448][T29336] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1460.444479][T29336] ? is_bpf_text_address+0x94/0x1a0 [ 1460.444536][T29336] ? __pfx_stack_trace_save+0x10/0x10 [ 1460.444601][T29336] ? trace_cap_capable+0x18d/0x200 [ 1460.444648][T29336] mmap_region+0x32b/0x3f0 [ 1460.444679][T29336] do_mmap+0xa3e/0x1210 [ 1460.444718][T29336] ? __pfx_do_mmap+0x10/0x10 [ 1460.444750][T29336] ? __pfx_down_write_killable+0x10/0x10 [ 1460.444801][T29336] vm_mmap_pgoff+0x29e/0x470 [ 1460.444847][T29336] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1460.444882][T29336] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1460.444922][T29336] ? hugetlbfs_get_inode+0x31f/0x730 [ 1460.444960][T29336] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1460.444997][T29336] __x64_sys_mmap+0x125/0x190 [ 1460.445040][T29336] do_syscall_64+0xcd/0xfa0 [ 1460.445069][T29336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.445095][T29336] RIP: 0033:0x7f8b0638efc9 [ 1460.445117][T29336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1460.445143][T29336] RSP: 002b:00007f8b045f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1460.445169][T29336] RAX: ffffffffffffffda RBX: 00007f8b065e5fa0 RCX: 00007f8b0638efc9 [ 1460.445187][T29336] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 1460.445202][T29336] RBP: 00007f8b06411f91 R08: 0000000000000602 R09: 0000300002000000 [ 1460.445218][T29336] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1460.445233][T29336] R13: 00007f8b065e6038 R14: 00007f8b065e5fa0 R15: 00007ffdf76d2178 [ 1460.445271][T29336] [ 1462.553029][T29373] netlink: zone id is out of range [ 1463.042535][T29377] FAULT_INJECTION: forcing a failure. [ 1463.042535][T29377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1463.159706][T29377] CPU: 0 UID: 0 PID: 29377 Comm: syz.1.5427 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1463.159774][T29377] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1463.159789][T29377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1463.159804][T29377] Call Trace: [ 1463.159812][T29377] [ 1463.159823][T29377] dump_stack_lvl+0x16c/0x1f0 [ 1463.159872][T29377] should_fail_ex+0x512/0x640 [ 1463.159917][T29377] should_fail_alloc_page+0xe7/0x130 [ 1463.159958][T29377] prepare_alloc_pages+0x3c2/0x610 [ 1463.159995][T29377] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1463.160027][T29377] ? find_held_lock+0x2b/0x80 [ 1463.160054][T29377] ? mm_drop_all_locks+0x38e/0x4b0 [ 1463.160082][T29377] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1463.160114][T29377] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1463.160139][T29377] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1463.160199][T29377] ? mm_drop_all_locks+0x38e/0x4b0 [ 1463.160224][T29377] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1463.160269][T29377] ? policy_nodemask+0xea/0x4e0 [ 1463.160305][T29377] alloc_pages_mpol+0x1fb/0x550 [ 1463.160340][T29377] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1463.160380][T29377] alloc_pages_noprof+0x131/0x390 [ 1463.160424][T29377] kvm_coalesced_mmio_init+0x1a/0x170 [ 1463.160469][T29377] kvm_dev_ioctl+0xe08/0x1a80 [ 1463.160509][T29377] ? find_held_lock+0x2b/0x80 [ 1463.160534][T29377] ? hook_file_ioctl_common+0x145/0x410 [ 1463.160564][T29377] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1463.160596][T29377] ? __fget_files+0x20e/0x3c0 [ 1463.160625][T29377] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1463.160656][T29377] __x64_sys_ioctl+0x18e/0x210 [ 1463.160696][T29377] do_syscall_64+0xcd/0xfa0 [ 1463.160726][T29377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.160753][T29377] RIP: 0033:0x7f8b0638efc9 [ 1463.160774][T29377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1463.160800][T29377] RSP: 002b:00007f8b045f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1463.160825][T29377] RAX: ffffffffffffffda RBX: 00007f8b065e5fa0 RCX: 00007f8b0638efc9 [ 1463.160841][T29377] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1463.160856][T29377] RBP: 00007f8b06411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1463.160870][T29377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.160885][T29377] R13: 00007f8b065e6038 R14: 00007f8b065e5fa0 R15: 00007ffdf76d2178 [ 1463.160916][T29377] [ 1465.560322][T29387] zswap: compressor not available [ 1465.836002][T29404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5433'. [ 1466.825896][T29416] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5437'. [ 1466.979233][T29421] FAULT_INJECTION: forcing a failure. [ 1466.979233][T29421] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.085236][T29421] CPU: 0 UID: 0 PID: 29421 Comm: syz.2.5438 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1467.085306][T29421] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1467.085322][T29421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1467.085341][T29421] Call Trace: [ 1467.085350][T29421] [ 1467.085362][T29421] dump_stack_lvl+0x16c/0x1f0 [ 1467.085400][T29421] should_fail_ex+0x512/0x640 [ 1467.085440][T29421] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1467.085470][T29421] should_failslab+0xc2/0x120 [ 1467.085505][T29421] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1467.085530][T29421] ? __proc_create+0x2ce/0x8e0 [ 1467.085572][T29421] ? __proc_create+0x2ce/0x8e0 [ 1467.085605][T29421] __proc_create+0x2ce/0x8e0 [ 1467.085642][T29421] ? __pfx___proc_create+0x10/0x10 [ 1467.085681][T29421] ? _raw_write_unlock+0x28/0x50 [ 1467.085722][T29421] ? proc_register+0x559/0x8b0 [ 1467.085762][T29421] proc_create_reg+0x7d/0x180 [ 1467.085800][T29421] ? __pfx_can_reset_stats_proc_show+0x10/0x10 [ 1467.085832][T29421] proc_create_net_single+0x86/0x180 [ 1467.085870][T29421] ? __pfx_proc_create_net_single+0x10/0x10 [ 1467.085917][T29421] can_init_proc+0x112/0x4d0 [ 1467.085948][T29421] can_pernet_init+0x1e4/0x370 [ 1467.085978][T29421] ? __pfx_can_pernet_init+0x10/0x10 [ 1467.086004][T29421] ops_init+0x1e2/0x5f0 [ 1467.086033][T29421] setup_net+0x100/0x390 [ 1467.086058][T29421] ? __pfx_setup_net+0x10/0x10 [ 1467.086094][T29421] ? debug_mutex_init+0x37/0x70 [ 1467.086129][T29421] copy_net_ns+0x2f8/0x690 [ 1467.086161][T29421] create_new_namespaces+0x3ea/0xa90 [ 1467.086201][T29421] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1467.086235][T29421] ksys_unshare+0x45b/0xa40 [ 1467.086271][T29421] ? __pfx_ksys_unshare+0x10/0x10 [ 1467.086305][T29421] ? xfd_validate_state+0x61/0x180 [ 1467.086350][T29421] __x64_sys_unshare+0x31/0x40 [ 1467.086382][T29421] do_syscall_64+0xcd/0xfa0 [ 1467.086411][T29421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.086437][T29421] RIP: 0033:0x7ffa81d8efc9 [ 1467.086457][T29421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1467.086482][T29421] RSP: 002b:00007ffa82b72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1467.086508][T29421] RAX: ffffffffffffffda RBX: 00007ffa81fe6090 RCX: 00007ffa81d8efc9 [ 1467.086525][T29421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1467.086540][T29421] RBP: 00007ffa81e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1467.086554][T29421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1467.086568][T29421] R13: 00007ffa81fe6128 R14: 00007ffa81fe6090 R15: 00007ffddeb60ee8 [ 1467.086599][T29421] [ 1468.236900][T29432] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1469.204343][T29440] netlink: zone id is out of range [ 1470.314614][T29455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5448'. [ 1471.868253][T29465] zswap: compressor not available [ 1471.894159][T29478] netlink: 268 bytes leftover after parsing attributes in process `syz.4.5451'. [ 1475.331148][T29526] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5463'. [ 1475.418275][T29514] kexec: Could not allocate control_code_buffer [ 1476.574882][T29535] zswap: compressor not available [ 1477.325591][T29551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5470'. [ 1479.709959][T29584] zswap: compressor not available [ 1480.821340][T29602] FAULT_INJECTION: forcing a failure. [ 1480.821340][T29602] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.910998][T29602] CPU: 0 UID: 0 PID: 29602 Comm: syz.2.5483 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1480.911066][T29602] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1480.911083][T29602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1480.911099][T29602] Call Trace: [ 1480.911109][T29602] [ 1480.911122][T29602] dump_stack_lvl+0x16c/0x1f0 [ 1480.911159][T29602] should_fail_ex+0x512/0x640 [ 1480.911202][T29602] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1480.911238][T29602] should_failslab+0xc2/0x120 [ 1480.911273][T29602] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1480.911301][T29602] ? __d_alloc+0x32/0xae0 [ 1480.911334][T29602] ? __d_alloc+0x32/0xae0 [ 1480.911360][T29602] __d_alloc+0x32/0xae0 [ 1480.911391][T29602] d_alloc_pseudo+0x1c/0xc0 [ 1480.911426][T29602] alloc_file_pseudo+0xcf/0x230 [ 1480.911464][T29602] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1480.911501][T29602] ? alloc_fd+0x471/0x7d0 [ 1480.911530][T29602] sock_alloc_file+0x50/0x210 [ 1480.911560][T29602] __sys_socket+0x1c0/0x260 [ 1480.911592][T29602] ? __pfx___sys_socket+0x10/0x10 [ 1480.911625][T29602] ? xfd_validate_state+0x61/0x180 [ 1480.911671][T29602] __x64_sys_socket+0x72/0xb0 [ 1480.911702][T29602] ? lockdep_hardirqs_on+0x7c/0x110 [ 1480.911729][T29602] do_syscall_64+0xcd/0xfa0 [ 1480.911759][T29602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.911785][T29602] RIP: 0033:0x7ffa81d8efc9 [ 1480.911805][T29602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1480.911830][T29602] RSP: 002b:00007ffa82b93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1480.911853][T29602] RAX: ffffffffffffffda RBX: 00007ffa81fe5fa0 RCX: 00007ffa81d8efc9 [ 1480.911869][T29602] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 1480.911883][T29602] RBP: 00007ffa81e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1480.911897][T29602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.911911][T29602] R13: 00007ffa81fe6038 R14: 00007ffa81fe5fa0 R15: 00007ffddeb60ee8 [ 1480.911953][T29602] [ 1481.125829][ C0] vkms_vblank_simulate: vblank timer overrun [ 1482.684051][T29627] zswap: compressor not available [ 1484.028958][ T7643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1484.043486][ T7643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1484.057570][ T7643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1484.084713][ T7643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1484.100769][ T7643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1485.166515][T29675] usbip-vudc usbip-vudc.0: gadget not bound [ 1485.190983][T29677] usbip-vudc usbip-vudc.0: gadget not bound [ 1485.240247][ T8130] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.587855][ T8130] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.784653][T29680] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5504'. [ 1485.814744][ T8130] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.215496][ T7643] Bluetooth: hci1: command tx timeout [ 1486.944503][T29653] chnl_net:caif_netlink_parms(): no params data found [ 1487.369088][ T8130] bridge_slave_1: left allmulticast mode [ 1487.403677][ T8130] bridge_slave_1: left promiscuous mode [ 1487.453346][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.524769][ T8130] bridge_slave_0: left allmulticast mode [ 1487.575224][ T8130] bridge_slave_0: left promiscuous mode [ 1487.615748][ T8130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.296039][ T7643] Bluetooth: hci1: command tx timeout [ 1489.429890][ T8130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1489.446495][ T8130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1489.461062][ T8130] bond0 (unregistering): Released all slaves [ 1489.726448][ T8130] tipc: Left network mode [ 1489.747645][T29653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.754857][T29653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.820749][T29653] bridge_slave_0: entered allmulticast mode [ 1489.842204][T29653] bridge_slave_0: entered promiscuous mode [ 1490.084004][T29653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.145586][T29653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.175509][T29653] bridge_slave_1: entered allmulticast mode [ 1490.183049][T29653] bridge_slave_1: entered promiscuous mode [ 1490.376261][ T7643] Bluetooth: hci1: command tx timeout [ 1490.570163][T29653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.707989][T29653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.062098][T29653] team0: Port device team_slave_0 added [ 1491.144792][T29653] team0: Port device team_slave_1 added [ 1491.635715][T29653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.689676][T29653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.840487][T29653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.909437][T29772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5521'. [ 1491.947825][T29653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.004671][T29653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.124832][T29653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.457894][ T7643] Bluetooth: hci1: command tx timeout [ 1492.541058][ T8130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1492.582839][ T8130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.619315][ T8130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1492.637693][ T8130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1492.784808][T29786] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5524'. [ 1492.797478][ T8130] veth1_macvtap: left promiscuous mode [ 1492.803574][ T8130] veth0_macvtap: left promiscuous mode [ 1492.842242][ T8130] veth1_vlan: left promiscuous mode [ 1492.881737][ T8130] veth0_vlan: left promiscuous mode [ 1494.600743][ T8130] team0 (unregistering): Port device team_slave_1 removed [ 1494.688258][ T8130] team0 (unregistering): Port device team_slave_0 removed [ 1495.427115][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.433471][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.703953][T29786] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1495.769906][T29653] hsr_slave_0: entered promiscuous mode [ 1495.783625][T29786] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1495.797870][T29653] hsr_slave_1: entered promiscuous mode [ 1495.804111][T29653] debugfs: 'hsr0' already exists in 'hsr' [ 1495.810732][T29786] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1495.820076][T29653] Cannot create hsr debugfs directory [ 1497.513009][T29831] FAULT_INJECTION: forcing a failure. [ 1497.513009][T29831] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1497.626066][T29831] CPU: 0 UID: 0 PID: 29831 Comm: syz.1.5531 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1497.626132][T29831] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1497.626149][T29831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1497.626167][T29831] Call Trace: [ 1497.626177][T29831] [ 1497.626189][T29831] dump_stack_lvl+0x16c/0x1f0 [ 1497.626226][T29831] should_fail_ex+0x512/0x640 [ 1497.626275][T29831] get_futex_key+0x1d0/0x1560 [ 1497.626320][T29831] ? __pfx_get_futex_key+0x10/0x10 [ 1497.626365][T29831] futex_wait_setup+0x9d/0x550 [ 1497.626417][T29831] __futex_wait+0x193/0x2f0 [ 1497.626474][T29831] ? __pfx___futex_wait+0x10/0x10 [ 1497.626528][T29831] ? __pfx_futex_wake_mark+0x10/0x10 [ 1497.626579][T29831] ? futex_private_hash_put+0x176/0x300 [ 1497.626620][T29831] ? futex_private_hash_put+0x18a/0x300 [ 1497.626659][T29831] futex_wait+0xe8/0x380 [ 1497.626685][T29831] ? __pfx_futex_wait+0x10/0x10 [ 1497.626739][T29831] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1497.626787][T29831] ? is_valid_madvise+0x34/0xd0 [ 1497.626825][T29831] do_futex+0x229/0x350 [ 1497.626862][T29831] ? __pfx_do_futex+0x10/0x10 [ 1497.626906][T29831] __x64_sys_futex+0x1e0/0x4c0 [ 1497.626946][T29831] ? __pfx___x64_sys_futex+0x10/0x10 [ 1497.626983][T29831] ? xfd_validate_state+0x61/0x180 [ 1497.627020][T29831] ? __pfx_ksys_write+0x10/0x10 [ 1497.627060][T29831] do_syscall_64+0xcd/0xfa0 [ 1497.627092][T29831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.627120][T29831] RIP: 0033:0x7f8b0638efc9 [ 1497.627144][T29831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1497.627170][T29831] RSP: 002b:00007f8b045f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1497.627197][T29831] RAX: ffffffffffffffda RBX: 00007f8b065e5fa8 RCX: 00007f8b0638efc9 [ 1497.627215][T29831] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8b065e5fa8 [ 1497.627231][T29831] RBP: 00007f8b065e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1497.627247][T29831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.627263][T29831] R13: 00007f8b065e6038 R14: 00007ffdf76d2090 R15: 00007ffdf76d2178 [ 1497.627297][T29831] [ 1498.714367][T29850] FAULT_INJECTION: forcing a failure. [ 1498.714367][T29850] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.805988][T29850] CPU: 0 UID: 0 PID: 29850 Comm: syz.1.5534 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1498.806046][T29850] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1498.806062][T29850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1498.806078][T29850] Call Trace: [ 1498.806087][T29850] [ 1498.806098][T29850] dump_stack_lvl+0x16c/0x1f0 [ 1498.806132][T29850] should_fail_ex+0x512/0x640 [ 1498.806172][T29850] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1498.806217][T29850] should_failslab+0xc2/0x120 [ 1498.806251][T29850] __kmalloc_cache_noprof+0x72/0x780 [ 1498.806292][T29850] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 1498.806339][T29850] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 1498.806369][T29850] kvm_dev_ioctl+0xa8a/0x1a80 [ 1498.806403][T29850] ? find_held_lock+0x2b/0x80 [ 1498.806430][T29850] ? hook_file_ioctl_common+0x145/0x410 [ 1498.806457][T29850] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1498.806489][T29850] ? __fget_files+0x20e/0x3c0 [ 1498.806518][T29850] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1498.806548][T29850] __x64_sys_ioctl+0x18e/0x210 [ 1498.806587][T29850] do_syscall_64+0xcd/0xfa0 [ 1498.806616][T29850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.806642][T29850] RIP: 0033:0x7f8b0638efc9 [ 1498.806661][T29850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1498.806685][T29850] RSP: 002b:00007f8b045f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1498.806709][T29850] RAX: ffffffffffffffda RBX: 00007f8b065e5fa0 RCX: 00007f8b0638efc9 [ 1498.806725][T29850] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1498.806740][T29850] RBP: 00007f8b06411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1498.806756][T29850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1498.806771][T29850] R13: 00007f8b065e6038 R14: 00007f8b065e5fa0 R15: 00007ffdf76d2178 [ 1498.806803][T29850] [ 1499.390321][T29859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5537'. [ 1500.799119][T29653] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1500.880354][T29653] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1501.004613][T29653] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1501.063722][T29653] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1501.919447][T29653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.209759][T29653] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.324208][T29911] FAULT_INJECTION: forcing a failure. [ 1502.324208][T29911] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.362980][T26581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.370314][T26581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.413576][T29911] CPU: 0 UID: 0 PID: 29911 Comm: syz.2.5544 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1502.413647][T29911] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1502.413663][T29911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1502.413681][T29911] Call Trace: [ 1502.413692][T29911] [ 1502.413704][T29911] dump_stack_lvl+0x16c/0x1f0 [ 1502.413745][T29911] should_fail_ex+0x512/0x640 [ 1502.413794][T29911] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1502.413847][T29911] should_failslab+0xc2/0x120 [ 1502.413883][T29911] __kmalloc_cache_noprof+0x72/0x780 [ 1502.413926][T29911] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 1502.413963][T29911] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 1502.413993][T29911] kvm_dev_ioctl+0xa8a/0x1a80 [ 1502.414037][T29911] ? find_held_lock+0x2b/0x80 [ 1502.414070][T29911] ? hook_file_ioctl_common+0x145/0x410 [ 1502.414102][T29911] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1502.414139][T29911] ? __fget_files+0x20e/0x3c0 [ 1502.414174][T29911] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1502.414210][T29911] __x64_sys_ioctl+0x18e/0x210 [ 1502.414256][T29911] do_syscall_64+0xcd/0xfa0 [ 1502.414289][T29911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.414316][T29911] RIP: 0033:0x7ffa81d8efc9 [ 1502.414338][T29911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1502.414365][T29911] RSP: 002b:00007ffa82b93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1502.414390][T29911] RAX: ffffffffffffffda RBX: 00007ffa81fe5fa0 RCX: 00007ffa81d8efc9 [ 1502.414407][T29911] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1502.414423][T29911] RBP: 00007ffa81e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1502.414438][T29911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1502.414454][T29911] R13: 00007ffa81fe6038 R14: 00007ffa81fe5fa0 R15: 00007ffddeb60ee8 [ 1502.414487][T29911] [ 1502.630175][T26581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.637436][T26581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1502.788523][T29653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1502.799569][T29653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1503.813013][T29653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1504.183831][T29653] veth0_vlan: entered promiscuous mode [ 1504.272779][T29653] veth1_vlan: entered promiscuous mode [ 1504.487517][T29653] veth0_macvtap: entered promiscuous mode [ 1504.556865][T29653] veth1_macvtap: entered promiscuous mode [ 1504.704149][T29653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1504.814889][T29653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1504.933646][ T8130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.035638][ T8130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.097526][ T8130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.214943][ T8130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.659249][T18605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.715492][T18605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.965220][T26581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.020044][T26581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.669774][T29988] ================================================================== [ 1506.677997][T29988] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 1506.685762][T29988] Read of size 8 at addr ffff8881462a7c18 by task syz.0.5494/29988 [ 1506.693666][T29988] [ 1506.696028][T29988] CPU: 0 UID: 0 PID: 29988 Comm: syz.0.5494 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1506.696082][T29988] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1506.696098][T29988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1506.696116][T29988] Call Trace: [ 1506.696127][T29988] [ 1506.696139][T29988] dump_stack_lvl+0x116/0x1f0 [ 1506.696172][T29988] print_report+0xcd/0x630 [ 1506.696208][T29988] ? __virt_addr_valid+0x81/0x610 [ 1506.696244][T29988] ? __phys_addr+0xe8/0x180 [ 1506.696278][T29988] ? dvb_device_open+0x36a/0x3b0 [ 1506.696309][T29988] kasan_report+0xe0/0x110 [ 1506.696343][T29988] ? dvb_device_open+0x36a/0x3b0 [ 1506.696376][T29988] ? __pfx_dvb_device_open+0x10/0x10 [ 1506.696408][T29988] dvb_device_open+0x36a/0x3b0 [ 1506.696439][T29988] ? __pfx_dvb_device_open+0x10/0x10 [ 1506.696471][T29988] chrdev_open+0x234/0x6a0 [ 1506.696502][T29988] ? __pfx_apparmor_file_open+0x10/0x10 [ 1506.696540][T29988] ? __pfx_chrdev_open+0x10/0x10 [ 1506.696570][T29988] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1506.696602][T29988] do_dentry_open+0x982/0x1530 [ 1506.696631][T29988] ? __pfx_chrdev_open+0x10/0x10 [ 1506.696663][T29988] vfs_open+0x82/0x3f0 [ 1506.696706][T29988] path_openat+0x1de4/0x2cb0 [ 1506.696738][T29988] ? __pfx_path_openat+0x10/0x10 [ 1506.696767][T29988] ? __lock_acquire+0xb8a/0x1c90 [ 1506.696805][T29988] do_filp_open+0x20b/0x470 [ 1506.696832][T29988] ? __pfx_do_filp_open+0x10/0x10 [ 1506.696870][T29988] ? alloc_fd+0x471/0x7d0 [ 1506.696897][T29988] do_sys_openat2+0x11b/0x1d0 [ 1506.696932][T29988] ? __pfx_do_sys_openat2+0x10/0x10 [ 1506.696973][T29988] __x64_sys_openat+0x174/0x210 [ 1506.697010][T29988] ? __pfx___x64_sys_openat+0x10/0x10 [ 1506.697053][T29988] do_syscall_64+0xcd/0xfa0 [ 1506.697081][T29988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.697108][T29988] RIP: 0033:0x7f13e4d8efc9 [ 1506.697131][T29988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1506.697156][T29988] RSP: 002b:00007f13e5bf3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1506.697182][T29988] RAX: ffffffffffffffda RBX: 00007f13e4fe5fa0 RCX: 00007f13e4d8efc9 [ 1506.697200][T29988] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1506.697217][T29988] RBP: 00007f13e4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1506.697234][T29988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1506.697249][T29988] R13: 00007f13e4fe6038 R14: 00007f13e4fe5fa0 R15: 00007ffc0588a6f8 [ 1506.697274][T29988] [ 1506.697284][T29988] [ 1506.954803][T29988] Allocated by task 29653: [ 1506.959229][T29988] kasan_save_stack+0x33/0x60 [ 1506.963938][T29988] kasan_save_track+0x14/0x30 [ 1506.968642][T29988] __kasan_kmalloc+0xaa/0xb0 [ 1506.973265][T29988] __kmalloc_noprof+0x32f/0x880 [ 1506.978153][T29988] fib_create_info+0x53f/0x46b0 [ 1506.983032][T29988] fib_table_insert+0x177/0x1c40 [ 1506.987987][T29988] fib_magic+0x4d4/0x5c0 [ 1506.992254][T29988] fib_add_ifaddr+0x16d/0x580 [ 1506.996969][T29988] fib_netdev_event+0x38a/0x710 [ 1507.001869][T29988] notifier_call_chain+0xbc/0x410 [ 1507.006930][T29988] call_netdevice_notifiers_info+0xbe/0x140 [ 1507.012931][T29988] __dev_notify_flags+0x12c/0x2e0 [ 1507.018000][T29988] netif_change_flags+0x108/0x160 [ 1507.023045][T29988] do_setlink.constprop.0+0xb53/0x4380 [ 1507.028522][T29988] rtnl_newlink+0x1446/0x2000 [ 1507.033228][T29988] rtnetlink_rcv_msg+0x95e/0xe90 [ 1507.038179][T29988] netlink_rcv_skb+0x158/0x420 [ 1507.042957][T29988] netlink_unicast+0x5aa/0x870 [ 1507.047729][T29988] netlink_sendmsg+0x8c8/0xdd0 [ 1507.052527][T29988] __sys_sendto+0x4a3/0x520 [ 1507.057160][T29988] __x64_sys_sendto+0xe0/0x1c0 [ 1507.061983][T29988] do_syscall_64+0xcd/0xfa0 [ 1507.066500][T29988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.072412][T29988] [ 1507.074753][T29988] Freed by task 8130: [ 1507.078740][T29988] kasan_save_stack+0x33/0x60 [ 1507.083441][T29988] kasan_save_track+0x14/0x30 [ 1507.088134][T29988] __kasan_save_free_info+0x3b/0x60 [ 1507.093348][T29988] __kasan_slab_free+0x5f/0x80 [ 1507.098132][T29988] kfree+0x2b8/0x6d0 [ 1507.102044][T29988] rcu_core+0x79c/0x1530 [ 1507.106308][T29988] handle_softirqs+0x219/0x8e0 [ 1507.111093][T29988] do_softirq+0xb2/0xf0 [ 1507.115274][T29988] __local_bh_enable_ip+0x100/0x120 [ 1507.120497][T29988] nsim_dev_trap_report_work+0x8b5/0xcf0 [ 1507.126163][T29988] process_one_work+0x9cf/0x1b70 [ 1507.131133][T29988] worker_thread+0x6c8/0xf10 [ 1507.135752][T29988] kthread+0x3c5/0x780 [ 1507.139848][T29988] ret_from_fork+0x675/0x7d0 [ 1507.144459][T29988] ret_from_fork_asm+0x1a/0x30 [ 1507.149245][T29988] [ 1507.151594][T29988] Last potentially related work creation: [ 1507.157313][T29988] kasan_save_stack+0x33/0x60 [ 1507.162010][T29988] kasan_record_aux_stack+0xa7/0xc0 [ 1507.167247][T29988] __call_rcu_common.constprop.0+0xa5/0xa10 [ 1507.173173][T29988] fib_create_info+0x1a8f/0x46b0 [ 1507.178139][T29988] fib_table_insert+0x177/0x1c40 [ 1507.183097][T29988] fib_magic+0x4d4/0x5c0 [ 1507.187374][T29988] fib_add_ifaddr+0x16d/0x580 [ 1507.192094][T29988] fib_netdev_event+0x38a/0x710 [ 1507.196976][T29988] notifier_call_chain+0xbc/0x410 [ 1507.202304][T29988] call_netdevice_notifiers_info+0xbe/0x140 [ 1507.208230][T29988] __dev_notify_flags+0x12c/0x2e0 [ 1507.213284][T29988] netif_change_flags+0x108/0x160 [ 1507.218327][T29988] do_setlink.constprop.0+0xb53/0x4380 [ 1507.223833][T29988] rtnl_newlink+0x1446/0x2000 [ 1507.228526][T29988] rtnetlink_rcv_msg+0x95e/0xe90 [ 1507.233507][T29988] netlink_rcv_skb+0x158/0x420 [ 1507.238313][T29988] netlink_unicast+0x5aa/0x870 [ 1507.243125][T29988] netlink_sendmsg+0x8c8/0xdd0 [ 1507.247935][T29988] __sys_sendto+0x4a3/0x520 [ 1507.252481][T29988] __x64_sys_sendto+0xe0/0x1c0 [ 1507.257280][T29988] do_syscall_64+0xcd/0xfa0 [ 1507.261808][T29988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.267726][T29988] [ 1507.270079][T29988] The buggy address belongs to the object at ffff8881462a7c00 [ 1507.270079][T29988] which belongs to the cache kmalloc-256 of size 256 [ 1507.284183][T29988] The buggy address is located 24 bytes inside of [ 1507.284183][T29988] freed 256-byte region [ffff8881462a7c00, ffff8881462a7d00) [ 1507.297910][T29988] [ 1507.300241][T29988] The buggy address belongs to the physical page: [ 1507.306659][T29988] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1462a6 [ 1507.315530][T29988] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1507.324044][T29988] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 1507.331697][T29988] page_type: f5(slab) [ 1507.335728][T29988] raw: 057ff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 1507.344331][T29988] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1507.352932][T29988] head: 057ff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 1507.361633][T29988] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1507.370329][T29988] head: 057ff00000000001 ffffea000518a981 00000000ffffffff 00000000ffffffff [ 1507.379027][T29988] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1507.387703][T29988] page dumped because: kasan: bad access detected [ 1507.394144][T29988] page_owner tracks the page as allocated [ 1507.399862][T29988] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 25986245492, free_ts 0 [ 1507.419602][T29988] post_alloc_hook+0x1c0/0x230 [ 1507.424413][T29988] get_page_from_freelist+0x10a3/0x3a30 [ 1507.429972][T29988] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1507.435882][T29988] alloc_pages_mpol+0x1fb/0x550 [ 1507.440760][T29988] new_slab+0x24a/0x360 [ 1507.444947][T29988] ___slab_alloc+0xdc4/0x1ae0 [ 1507.449657][T29988] __slab_alloc.constprop.0+0x63/0x110 [ 1507.455158][T29988] __kmalloc_cache_noprof+0x477/0x780 [ 1507.460656][T29988] bus_add_driver+0x92/0x690 [ 1507.465264][T29988] driver_register+0x15c/0x4b0 [ 1507.470051][T29988] usb_register_driver+0x216/0x4d0 [ 1507.475170][T29988] do_one_initcall+0x123/0x6e0 [ 1507.479956][T29988] kernel_init_freeable+0x5c8/0x920 [ 1507.485173][T29988] kernel_init+0x1c/0x2b0 [ 1507.489550][T29988] ret_from_fork+0x675/0x7d0 [ 1507.494172][T29988] ret_from_fork_asm+0x1a/0x30 [ 1507.498967][T29988] page_owner free stack trace missing [ 1507.504340][T29988] [ 1507.506670][T29988] Memory state around the buggy address: [ 1507.512408][T29988] ffff8881462a7b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1507.520485][T29988] ffff8881462a7b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1507.528577][T29988] >ffff8881462a7c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1507.536685][T29988] ^ [ 1507.541544][T29988] ffff8881462a7c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1507.549636][T29988] ffff8881462a7d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1507.557799][T29988] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1509.634199][T29988] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1509.641556][T29988] CPU: 0 UID: 0 PID: 29988 Comm: syz.0.5494 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1509.652530][T29988] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1509.662587][T29988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1509.672669][T29988] Call Trace: [ 1509.675968][T29988] [ 1509.678908][T29988] dump_stack_lvl+0x3d/0x1f0 [ 1509.683523][T29988] vpanic+0x640/0x6f0 [ 1509.687544][T29988] panic+0xca/0xd0 [ 1509.691300][T29988] ? __pfx_panic+0x10/0x10 [ 1509.695749][T29988] ? dvb_device_open+0x36a/0x3b0 [ 1509.700715][T29988] ? preempt_schedule_common+0x44/0xc0 [ 1509.706190][T29988] ? preempt_schedule_thunk+0x16/0x30 [ 1509.711600][T29988] check_panic_on_warn+0xab/0xb0 [ 1509.716579][T29988] end_report+0x107/0x170 [ 1509.721083][T29988] kasan_report+0xee/0x110 [ 1509.725530][T29988] ? dvb_device_open+0x36a/0x3b0 [ 1509.730506][T29988] ? __pfx_dvb_device_open+0x10/0x10 [ 1509.735818][T29988] dvb_device_open+0x36a/0x3b0 [ 1509.740634][T29988] ? __pfx_dvb_device_open+0x10/0x10 [ 1509.745978][T29988] chrdev_open+0x234/0x6a0 [ 1509.750456][T29988] ? __pfx_apparmor_file_open+0x10/0x10 [ 1509.756038][T29988] ? __pfx_chrdev_open+0x10/0x10 [ 1509.761091][T29988] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1509.767447][T29988] do_dentry_open+0x982/0x1530 [ 1509.772237][T29988] ? __pfx_chrdev_open+0x10/0x10 [ 1509.777202][T29988] vfs_open+0x82/0x3f0 [ 1509.781300][T29988] path_openat+0x1de4/0x2cb0 [ 1509.785918][T29988] ? __pfx_path_openat+0x10/0x10 [ 1509.790900][T29988] ? __lock_acquire+0xb8a/0x1c90 [ 1509.795914][T29988] do_filp_open+0x20b/0x470 [ 1509.800440][T29988] ? __pfx_do_filp_open+0x10/0x10 [ 1509.805494][T29988] ? alloc_fd+0x471/0x7d0 [ 1509.809848][T29988] do_sys_openat2+0x11b/0x1d0 [ 1509.814561][T29988] ? __pfx_do_sys_openat2+0x10/0x10 [ 1509.819795][T29988] __x64_sys_openat+0x174/0x210 [ 1509.824716][T29988] ? __pfx___x64_sys_openat+0x10/0x10 [ 1509.830176][T29988] do_syscall_64+0xcd/0xfa0 [ 1509.834727][T29988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.840654][T29988] RIP: 0033:0x7f13e4d8efc9 [ 1509.845087][T29988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1509.864711][T29988] RSP: 002b:00007f13e5bf3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1509.873146][T29988] RAX: ffffffffffffffda RBX: 00007f13e4fe5fa0 RCX: 00007f13e4d8efc9 [ 1509.881142][T29988] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1509.889136][T29988] RBP: 00007f13e4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1509.897214][T29988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1509.905205][T29988] R13: 00007f13e4fe6038 R14: 00007f13e4fe5fa0 R15: 00007ffc0588a6f8 [ 1509.913219][T29988] [ 1509.916338][T29988] Kernel Offset: disabled [ 1509.920685][T29988] Rebooting in 86400 seconds..