last executing test programs: 22m26.062485313s ago: executing program 1 (id=763): close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x6, 0x1) r0 = socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) ustat$auto(0x801, 0x0) close_range$auto(r0, 0x8, 0x0) open(0x0, 0x58901, 0x155) socket(0x2, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000000200), 0x2}, 0x6) r2 = socket(0x2, 0x1, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0) write$auto(r3, &(0x7f0000000180)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x9f\xe2\xc7cOM\xb6\xa3,!oc.\xe7\x1d$\x9a`\xd8/g\xd3\x1a\xcd\x8e\x1d\xbb\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xa9O\x00\x00\x00\x00\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xb6\xb0N\x99\x04z\xd0I>\x8f\x00\xe5\x1c*\xedE\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xa3\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\f\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\xac\x92\x7f]|\x04\x96\xce\xab\xd5\xe4+\xeaF\x06Y\xe9\xa1`\xb1\x8d\x85\xe0w+\x1e\x8b+\xd67IH\xff\x80\xf6\x8b\x92 ;\xe0\xda\x9a\xbf\x19d\xa9\x01\xa0N\xd1E8\xb7\xff\xa7\xff\x80\xd0y\x0f\x1d(!\x99\xab\xdf\x01\x00\x00\x00\x00\x00\x00\x00\xcdd\x87\x06\xfbK\xb9/\x19\xe5\x8b\x10P\xe7i8\xbe\x02Uy\xb1\xf9\xf2U\v\x80\x19N]\xf2\x9c\x1bA.eC\x8bcg\x15B5xt\x85\x8a/\xb6\x8e\xf7\xfcj\x92\xb0\x9eOW\xcc\x13\x1e\xdfP\x11\\\x0ef\x0e\xaeU\\\x83o,us\x12\xca;\xef\xc3s\x0f\x10\xfaA', 0x7) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x7e, 0x20000000000e31, r1, 0x4caf) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) sendmmsg$auto(r2, 0x0, 0x2, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) sendmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xc}, 0x800009}, 0x5, 0x20000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) 22m25.118956759s ago: executing program 1 (id=767): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xfa}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000001c0), 0x707141, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram11/ext_range\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/sound/ctl-led/speaker/card2/reset\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, 0x0, 0x6, 0x1ff) open(0x0, 0x161342, 0x130) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x101001, 0x0) write$auto(r0, &(0x7f0000000140)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d\xbcs!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85C /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\x9bA\xac\x9c\x8e\r(\x1d\x98\x84\x98\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 22m24.962795376s ago: executing program 1 (id=770): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)={0x3fd, 0x0, [{0x0, 0xffff5a9a, 0x7fffffff, 0x0, 0xf, 0x8, 0x6000}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$auto(0x76d7, 0xf9f7, 0x0, 0x12, r1, 0x951f) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22c02, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)=0x6) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000100)=0x643) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x6, 0x103, 0xcb2, 0x7, 0x80000000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f00000002c0)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000040)='//\xf2\x00', 0x80000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) r6 = socket(0xa, 0x3, 0x3b) io_uring_setup$auto(0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) epoll_ctl$auto(r6, 0x3, r6, 0x0) 22m23.877611737s ago: executing program 1 (id=778): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xfa}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000001c0), 0x707141, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram11/ext_range\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/sound/ctl-led/speaker/card2/reset\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, 0x0, 0x6, 0x1ff) open(0x0, 0x161342, 0x130) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x101001, 0x0) write$auto(r0, &(0x7f0000000140)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d\xbcs!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85C /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\x9bA\xac\x9c\x8e\r(\x1d\x98\x84\x98\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 22m23.688644118s ago: executing program 1 (id=780): clock_adjtime$auto(0x0, &(0x7f0000000240)={0xdbd, 0x0, 0x7, 0xfffffffffffffffe, 0x600, 0xf4, 0xb, 0x0, 0x100000000, 0x8, 0x3, {0x403, 0xd05}, 0xfffffffffffffff8, 0xa5, 0x9, 0xb87f, 0x0, 0xc7, 0x80, 0xb, 0x5, 0x5, 0xfffffff5, 0x0, 0x17000000}) 22m23.482855925s ago: executing program 1 (id=783): pread64$auto(0xffffffffffffffff, 0x0, 0x101fb, 0x8800000005) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), 0xffffffffffffffff) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(0x0, 0x9) rename$auto(0x0, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x40) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0x100000072, 0x8b72, 0x2, 0x8000) sysfs$auto(0x2, 0x1f, 0x0) socket(0x2, 0x801, 0x106) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r1) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r3 = bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@link_detach={r1}, 0xfffffff9) unshare$auto(0xfffffffffffffff8) fsconfig$auto_FSCONFIG_CMD_CREATE(r3, 0x6, &(0x7f0000000000)='.\x00', &(0x7f00000001c0)="420587f190f13ba63dda5f080fd57a74a84d3bee961e22cee65aad1f2f07129c4a7ad0f6179652768da95db3adcb6af219ffc3b86d1925398eda9135a97be718edd176bbc0d258b63682b6a6e0f90b0b792fdb494adc0f5b76514c92fb15b8762479d1c0", 0x7) getrlimit$auto(0x3, 0x0) openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) 22m8.047222097s ago: executing program 32 (id=783): pread64$auto(0xffffffffffffffff, 0x0, 0x101fb, 0x8800000005) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), 0xffffffffffffffff) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(0x0, 0x9) rename$auto(0x0, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x40) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0x100000072, 0x8b72, 0x2, 0x8000) sysfs$auto(0x2, 0x1f, 0x0) socket(0x2, 0x801, 0x106) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r1) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r3 = bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@link_detach={r1}, 0xfffffff9) unshare$auto(0xfffffffffffffff8) fsconfig$auto_FSCONFIG_CMD_CREATE(r3, 0x6, &(0x7f0000000000)='.\x00', &(0x7f00000001c0)="420587f190f13ba63dda5f080fd57a74a84d3bee961e22cee65aad1f2f07129c4a7ad0f6179652768da95db3adcb6af219ffc3b86d1925398eda9135a97be718edd176bbc0d258b63682b6a6e0f90b0b792fdb494adc0f5b76514c92fb15b8762479d1c0", 0x7) getrlimit$auto(0x3, 0x0) openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) 18m43.657574352s ago: executing program 3 (id=1670): mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x1a, 0x2, 0x7ffc) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000900), r3) sendmsg$auto_OVS_VPORT_CMD_SET(r3, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000001240)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0xa6fa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x4) write$auto(r2, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x400) socket(0x2, 0x3, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, r0, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x1000f42d, 0x100) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) close_range$auto(0x2, 0x8, 0xff0f0000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x12, 0xfffffffffffffffa, 0xe4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000280)=""/175, 0xaf) 18m42.671949442s ago: executing program 3 (id=1677): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, 0x0, 0x21) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130026bd7000ffffffff0200000008000300", @ANYRES32=r3, @ANYBLOB="08000c01"], 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x20040894) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000040)='\x00', 0xca7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), r0) sendmsg$auto_IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4cf70a1c7eecdcbf}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x8001}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0x7}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "ef018f2dc53f0ac500d3041a1e9188417b8e9c4157347c0e5518c7"}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xcd}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 18m40.477741291s ago: executing program 3 (id=1684): mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x1a, 0x2, 0x7ffc) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000900), r3) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) setsockopt$auto(0x3, 0x0, 0x11, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) sendmsg$auto_OVS_VPORT_CMD_SET(r3, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000001240)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0xa6fa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x4) write$auto(r2, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x400) socket(0x2, 0x3, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, r0, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x1000f42d, 0x100) write$auto(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x12, 0xfffffffffffffffa, 0xe4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 18m38.357233358s ago: executing program 3 (id=1688): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x401870cb, 0xffffffffffffffff) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x43, @local}, 0x51) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) close_range$auto(0xffffffffffffffff, 0x8, 0x0) ioperm$auto(0x80, 0xfff, 0x54b) socket(0x2, 0x801, 0x106) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) socket(0x28, 0x1, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000f9", @ANYRES16=r4, @ANYBLOB="f50128bd7000fbdbdf250a00000a"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) 18m37.062632987s ago: executing program 3 (id=1693): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sg0\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x2, 0x88) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xfdf3}, 0x1da) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto_MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8002) ioctl$auto(r1, 0x5605, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r2 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x65, 0x6, 0x0, 0x4) setsockopt$auto(r0, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x80000e) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfdf3) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, r3) prctl$auto(0x1, 0x6, 0x0, 0xb117, 0x9) sendmsg$auto_TIPC_NL_BEARER_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) 18m36.760803503s ago: executing program 3 (id=1694): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@l2={0x1f, 0x800f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240, 0x2}, 0x6a) getpeername$auto(r0, &(0x7f0000000000)=@qipcrtr={0x2a, 0xc03a00ba87c695bd, 0xfffffffe}, &(0x7f0000000080)=0x4) shutdown$auto(0x200000003, 0xfffffffe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) writev$auto(r1, 0x0, 0x8) bind$auto(0x3, 0x0, 0x9) (async) bind$auto(0x3, 0x0, 0x9) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, 0x0, 0x24000080) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(r3, 0x0, 0x5) mmap$auto(0x0, 0x20014, 0x7, 0xeb1, 0x404, 0xf) (async) mmap$auto(0x0, 0x20014, 0x7, 0xeb1, 0x404, 0xf) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r4, 0x0, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 18m21.518137635s ago: executing program 33 (id=1694): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@l2={0x1f, 0x800f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240, 0x2}, 0x6a) getpeername$auto(r0, &(0x7f0000000000)=@qipcrtr={0x2a, 0xc03a00ba87c695bd, 0xfffffffe}, &(0x7f0000000080)=0x4) shutdown$auto(0x200000003, 0xfffffffe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) writev$auto(r1, 0x0, 0x8) bind$auto(0x3, 0x0, 0x9) (async) bind$auto(0x3, 0x0, 0x9) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, 0x0, 0x24000080) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(r3, 0x0, 0x5) mmap$auto(0x0, 0x20014, 0x7, 0xeb1, 0x404, 0xf) (async) mmap$auto(0x0, 0x20014, 0x7, 0xeb1, 0x404, 0xf) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r4, 0x0, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 9m42.406328667s ago: executing program 4 (id=3374): r0 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x2201, 0x0) getpeername$auto(r0, &(0x7f0000000040)=@llc={0x1a, 0x33a, 0xf, 0x2, 0x10, 0x7, @local}, &(0x7f0000000080)=0xbbc) close_range$auto(r0, r0, 0x4) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video60\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000100)=""/118, 0x76) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D1\x00', 0x4200, 0x0) r2 = getsid$auto(0x0) syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/net\x00') r3 = prctl$auto(0xff, 0xb8d, r2, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) r5 = bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)=@link_update={r3, @new_map_fd=r1, 0x2, @old_prog_fd=r3}, 0x800) r8 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000300), 0xa080, 0x0) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000340)=@bpf_attr_0={0x4, 0x1, 0x1, 0x8, 0xffffff81, r3, 0xfffffffd, "bd3c096ead0c30b0259337f5a09bca0f", r4, r6, 0x2, 0x8, 0x25, 0xffffffff89931de4, r8, r3}, 0xe) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000400), r5) ioctl$auto_USB_RAW_IOCTL_EP_DISABLE(r7, 0x40045506, &(0x7f0000000440)=0x5) r10 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r11 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/tracing/set_event_pid\x00', 0x606000, 0x0) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000500)=@prog_bind_map={r9, r11, 0x3}, 0x1) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/oom_adj\x00', 0x202, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000600)='/proc/asound/card1/pcm0c/sub2/hw_params\x00', 0x280800, 0x0) prctl$auto(0x8, 0x7, r2, 0x1, 0x8) io_uring_setup$auto(0x7fff, &(0x7f0000000640)={0x8000, 0xe, 0x6, 0x0, 0x98, 0x5, r10, [0xfffffbff, 0x9], {0xa1, 0x6, 0xd5e, 0x6, 0x0, 0x2, 0x5, 0x3, 0x8}, {0x7fff, 0x7, 0x9, 0x8, 0x5, 0x8, 0xe2, 0x675, 0xffff}}) r12 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/ieee80211/phy15/hwsim/group\x00', 0x400000, 0x0) msgctl$auto(0x0, 0x10000, &(0x7f0000000800)={{0x8, 0xee01, 0x0, 0x2, 0x4, 0x3, 0x7}, &(0x7f0000000780)=0x3, &(0x7f00000007c0)=0x90, 0xa2, 0x2, 0x7, 0xaf8, 0x772d, 0x5a4, 0x3, 0x7, @inferred=r2, @inferred=r2}) fsconfig$auto(r12, 0x9, &(0x7f0000000700)='ns/net\x00', &(0x7f0000000740)="e3ae9453b168b65908bd59df6f2b6ce500dd30039dcf6ed514c7", r14) shmctl$auto_SHM_LOCK(0xacd, 0xb, &(0x7f0000000980)={{0xde, r13, r14, 0x10001, 0x7, 0x6, 0x6}, 0x9, 0x2, 0x3, 0x9, @inferred=r15, @inferred=r15, 0x6, 0x0, &(0x7f0000000880)="369159a7282fe9d9508cab1df63dc85799d6696b7791963ae3570b4fdf3e32fef70b7b3c0fbeeda5f6dbe5535dfb2810a17f0fe68fcd489d300a4a20fd64771e5ad33a", &(0x7f0000000900)="3ad7b5d01be554491b5dbd5091dbbaf59b690a38aa248134a3f8a3d203a8122673c1b35fed16b0ccb5df0cea676cc06eee845e636cb629b37fb3544290a44ba5f831bf016d0b8d3fc2191689d5205d3f5a16380b6d1f2df4547dee7f"}) shmctl$auto_SHM_INFO(0x8, 0xe, &(0x7f0000001a40)={{0xfff, r13, r14, 0x1000, 0x0, 0x3}, 0x453, 0x9, 0x101, 0xffffffffffffff8d, @inferred=r2, @raw=0x2, 0x100, 0x0, &(0x7f0000000a00)="ac3169ec7fd6e0cfc61482e4dc0c8a6b807d991435", &(0x7f0000000a40)="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"}) msgctl$auto_MSG_INFO(0x1ff, 0xc, &(0x7f0000001b40)={{0x4, 0xffffffffffffffff, r14, 0x80000001, 0x3ff, 0x9}, &(0x7f0000001ac0)=0xf7, &(0x7f0000001b00)=0x70, 0x134b, 0x10000, 0x8001, 0x3, 0x6, 0x2, 0x81, 0x3, @raw=0x5, @raw=0x9}) stat$auto(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)={0x1, 0x6000000, 0x80000001, 0x0, r13, r14, 0x0, 0x39, 0x3, 0xc0000000, 0xffffffff, 0x6, 0x0, 0x5, 0x8e59, 0xffffffffffffffff, 0x8000000000000000}) ioctl$auto_XFS_IOC_BULKSTAT(r6, 0x8040587f, &(0x7f0000001dc0)={{0x2, 0x5, 0xe, 0x7, 0xfff, [0x7, 0x7d, 0x42c6, 0xb3, 0x2]}, [{0x4000000000000, 0xffffffff, 0x6, 0x7fffffff, 0x9, 0x282e, 0xffffffffffffffff, 0x9, 0x2, 0xee01, r16, @inferred=r14, 0x5, 0x2, 0x9, 0x8, 0xea32, 0x6, 0x2, 0x8, 0x0, 0x1, 0x8, 0x10, 0x3, 0x4187, 0x3, 0x83d, 0x0, 0xbc}, {0x0, 0x2, 0x5, 0x0, 0xfffffffffffffffd, 0x8, 0x5e10, 0x4e, 0xa, r13, r14, @inferred=r17, 0x4, 0x9, 0x3, 0x1, 0x5, 0x6b98790e, 0x101, 0x3, 0x1, 0x0, 0x8, 0x0, 0x687, 0x1, 0x2, 0x7f, 0x0, 0x8}, {0xecbf, 0x9, 0xfff, 0xa, 0x3, 0xd6, 0x0, 0x1, 0x4, r18, r14, @raw=0x8, 0x7, 0x7, 0xbd, 0x2, 0x8, 0x3, 0x8, 0x5, 0x4, 0x1, 0x0, 0x5, 0x7, 0x8001, 0x6, 0xff01, 0x0, 0x7fffffffffffffff}, {0xfffffffffffffc01, 0x10001, 0x7ff, 0x26, 0x3, 0xb539, 0x4, 0x4, 0x9, r13, r19, @inferred=r14, 0x7, 0x9, 0x8, 0x3ff, 0x5, 0x6, 0x200, 0x7, 0x7, 0x8, 0xb, 0x3, 0x1, 0x9, 0xb9, 0x401, 0x0, 0xab}, {0x8, 0x71, 0x0, 0x1, 0x1, 0x6, 0x8, 0x5, 0xa, r13, r14, @inferred, 0x2, 0x7, 0x4, 0x5, 0x7, 0x4c7, 0x9, 0x0, 0x3a3, 0xdd, 0x3ff, 0x1, 0x8, 0x401, 0x81, 0x1, 0x0, 0x5}]}) 9m42.141016591s ago: executing program 4 (id=3376): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim7/fail_trap_policer_set\x00', 0x400, 0x0) signalfd$auto(r0, &(0x7f0000000140)={0x9}, 0xfffffffffffffff2) capget$auto(0x0, 0xfffffffffffffffe) r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) getsockopt$auto_SO_MEMINFO(r1, 0x8, 0x37, 0x0, 0x0) read$auto_clk_dump_fops_(r1, &(0x7f0000000000)=""/196, 0xc4) r2 = socket(0x2, 0x801, 0x106) getsockopt$auto(r2, 0x11c, 0x2, 0x0, 0x0) 9m41.958162128s ago: executing program 4 (id=3377): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8282, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) io_uring_register$auto_IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000040)="6cd02f40e0176bf493e247f3af55d503ae1ad4c093606efbe684a9b411c85de8808167149a17200d5535b1a5a9d35ba374aaa862f8bb162fb60efc331cc2220d143d94c8920b793fa7732ef64c843567d85813db8f2f0f55c49cedc0e32a6e3dc73d9d331e8a565cf652eb2af075a25ef951614fcc1a084f7938ad22c02f4ee10ff8c18f77004ad6bb54578493dad1f625b8fbee734a592dbd5eb5dcc2a3eeda88c962a5ae59e23bd4b406908833c0a5336feba00dbf32c01ba7316a21d849424ac16ec90bae411d587969dafc641f", 0x86) write$auto(0x3, 0x0, 0x7) close_range$auto(0x2, 0xa, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000200df, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xbf) setsockopt$auto(0x3, 0x0, 0x12, 0x0, 0x28) 9m41.952137213s ago: executing program 0 (id=3378): rseq$auto(&(0x7f0000000000)={0x401, 0x80000401, 0x8000000000000000, 0x6, 0xfffffffe, 0x2, "2a9dd64827c6e0c8f3a61a732c3dcc83edd6ccf75c12471234c6708465783995423542a40801c8e9e152e1c219843abda4"}, 0x4000008, 0x0, 0x6) poll$auto(0x0, 0x0, 0x9f) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_max_time_ms\x00', 0xb480, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto_kernfs_file_fops_kernfs_internal(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x11, r0, 0xfff) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/etherd/err\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) close_range$auto(0x2, r1, 0x7) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0xbd, 0x22020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x161a82, 0x0) tee$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xf) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) ioctl$auto(0x3, 0x5309, 0x38) write$auto_nsim_psample_enable_fops_psample(r2, &(0x7f00000005c0)="59c91998", 0x4) sysfs$auto(0x2, 0x1e, 0x0) r3 = fsopen$auto(0x0, 0x1) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) fsconfig$auto_SHMEM_HUGE_ADVISE(r3, 0x2, &(0x7f00000000c0)=',%!/\xd4\t\xfa\xe932\x1fn\xcd/q\x82\x0e-%,\x00', &(0x7f0000000180)="1db7b0499831b6253140ee308fd21e717e141b67bc326b6881cd5f489ac606b81406932804d8e23723efb38df37ee4e0643d95327c484bf8fbe21c2df07989a79b4cc032402a1e866e31bbfd8f61e13d7932bf8b8d8d1a0c841efc8372a5f1f2efc130c8eabf21da2e35a48ff1d49f29fe627b49803d650c6c9d555e83845e56b347", 0x3) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0xa, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x23, 0x5, 0x0) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 9m41.32819076s ago: executing program 4 (id=3381): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2, 0x1ff, 0xfffffffffffffffe, 0x2, 0x8000) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/oom_adj\x00', 0xa402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/virtual/net/nr8/queues/rx-0/rps_flow_cnt\x00', 0xc2061, 0x0) write$auto(r1, 0x0, 0x80) mlock$auto(0xfbea, 0x10004) madvise$auto(0x8000, 0x87fff, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f0000000040)='/dev/kvm\x00', 0xfffffffc) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r2 = setfsuid$auto(0x0) setuid$auto(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) kcmp$auto(0x0, 0x0, 0x7, 0xffffffffffffffff, r3) sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80c0) mkdir$auto(0x0, 0x0) mmap$auto(0x80000, 0x4020009, 0xdf, 0x14, 0x401, 0x7fff) 9m40.827241886s ago: executing program 0 (id=3383): socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) unshare$auto(0x40000080) write$auto(0xca, 0x0, 0x7f) futex$auto(&(0x7f00000001c0), 0x3, 0x8002948, 0x0, 0x0, 0x405) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x28, 0x9, 0x1000) (async) socket(0x28, 0x9, 0x1000) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x11, 0x3, 0x9) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) (async) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r1, 0x0, 0x18) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af03, r0) (async) ioctl$auto(r2, 0x4008af03, r0) ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) 9m40.787211711s ago: executing program 4 (id=3384): rseq$auto(0x0, 0x6, 0x6, 0xc80e) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioperm$auto(0x1, 0x1004, 0x7f) iopl$auto(0x2) write$auto_event_trigger_fops_trace(0xffffffffffffffff, &(0x7f0000000240)='!', 0x1) r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181841, 0x0) write$auto(r0, 0x0, 0x1) madvise$auto(0x0, 0xfffffeffffff0004, 0x16) prctl$auto_PR_SET_MM_START_BRK(0x9, 0x6, 0x0, 0x4, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x200006, 0x5, 0x40eb1, 0xffffffffffffffff, 0x308000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x12a004080, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) sysfs$auto(0x4002, 0x9, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x23, 0x80805, 0x0) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) 9m39.844833194s ago: executing program 0 (id=3387): write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCGIDLE32(r0, 0x8008743f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket(0x11, 0x80003, 0x300) sendmmsg$auto(r1, &(0x7f0000000400)={{0x0, 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) 9m39.5592683s ago: executing program 0 (id=3388): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_REMOVE_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x2, 0x3, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x400005, 0x25, 0x4, @raw=0x6, @integer={0xe7, 0xfffffffffffffffc, 0x81}, "7a9fc199a16a8c11eacf2fc7ae5d908350fa55d4f0007884a16f7ce8c57c0eb327ac702b8d7c2d00"}) rt_sigqueueinfo$auto(0x0, 0x4004, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x1d48, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) io_uring_register$auto(r0, 0x15, 0x0, 0x9) r2 = socket(0x11, 0x3, 0x9) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pim6reg0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x11, 0x3, 0x80000000) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYRES8=r0, @ANYRES32=r12, @ANYBLOB="08002b0001040000"], 0x24}, 0x1, 0x0, 0x0, 0x24040415}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'pim6reg\x00', 0x0}) r14 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r15, 0xffffffffffffffff, 0x4, 0x401, r14, @relative_id=0x13, 0xe600}, 0xf) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="090d2cbd7000fcdbdf250b00000014000180080003000400000008000300000000006c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="14000200697036746e6c3000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000001", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="1400020076657468305f766972745f776966690008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4040}, 0x40001) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5b0, &(0x7f0000000100)={&(0x7f0000000200), 0xf}, 0x7, 0x0, 0x3, 0x1000000e}, 0x45}, 0x1, 0xfd) 9m38.977684519s ago: executing program 0 (id=3389): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x4001, 0x0, 0x5, 0x25) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x0, r0, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) read$auto_uprobe_events_ops_trace_uprobe(r1, 0x0, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x05\x00\x04\x00!\x00\xb6', 0x7f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r3 = socket(0xa, 0x1, 0x84) setsockopt$auto(r3, 0x0, 0x40, 0x0, 0x6f7250c4) socket(0x21, 0x2, 0x2) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) personality$auto(0xffffffffffffffff) mmap$auto(0x0, 0x300000, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r4, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 9m38.069504805s ago: executing program 0 (id=3390): unshare$auto(0x40000080) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) socket(0x2b, 0x1, 0x0) (rerun: 64) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) semget$auto(0x0, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) semctl$auto_GETALL(0x0, 0x0, 0xd, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x3) (async) madvise$auto(0x0, 0x2003f2, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010031bd700502cabf7c914b53f3d7cd5e051744734aa78a672912a5d699630452377fdcd800fddbdf250c00000033ced447db3e72b62544e0fcd529838c4a861c2d13c5264ebeae33fe4fe91dd631dd2a7af56978dd38a496407b633542"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/pagemap\x00', 0x107003, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socket(0x2, 0x1, 0x106) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async, rerun: 64) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async, rerun: 64) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 64) ioctl$auto(0x3, 0x404c534a, 0x38) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) 9m36.337652531s ago: executing program 4 (id=3393): io_setup$auto(0x7ffe, &(0x7f0000000000)) shmget$auto(0xe1, 0xe, 0x1) io_setup$auto(0x6, &(0x7f0000000100)=0x7) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x28000, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0) read$auto(r0, &(0x7f00000000c0)='N\xd5\f\xb9GC*(,\x80\xc4bAL\xa3`\xb1\xf2\xe7\xc0/\xff', 0x100000001) shmctl$auto_SHM_UNLOCK(0x9, 0xc, 0x0) waitid$auto_P_ALL(0x0, 0xff, 0x0, 0x5, &(0x7f0000000b40)={{0x6, 0x6}, {0xfffffffffffff4c8, 0x6}, 0x6, 0xc, 0x3, 0x83, 0x2, 0x0, 0x3, 0x3, 0x5, 0x5, 0x8001, 0x1, 0xffffffffffffff11, 0xbf0}) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) fcntl$auto_F_WRLCK(r1, 0x3ff, 0x1) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r2, 0x64c6, 0xffffffffffffffff) close_range$auto(0x2, r2, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) r3 = gettid() kill$auto(r3, 0x11) mmap$auto(0xfffffffffffffffd, 0x2000a, 0x100000004, 0xebd, r1, 0x1) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x8e051, r5, 0x9) mmap$auto(0x100000000000000, 0x800000000202001c, 0x3, 0xeb1, r2, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) write$auto(r6, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x40) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 9m22.558089844s ago: executing program 34 (id=3390): unshare$auto(0x40000080) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) socket(0x2b, 0x1, 0x0) (rerun: 64) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) semget$auto(0x0, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) semctl$auto_GETALL(0x0, 0x0, 0xd, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x3) (async) madvise$auto(0x0, 0x2003f2, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010031bd700502cabf7c914b53f3d7cd5e051744734aa78a672912a5d699630452377fdcd800fddbdf250c00000033ced447db3e72b62544e0fcd529838c4a861c2d13c5264ebeae33fe4fe91dd631dd2a7af56978dd38a496407b633542"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/pagemap\x00', 0x107003, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socket(0x2, 0x1, 0x106) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async, rerun: 64) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async, rerun: 64) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 64) ioctl$auto(0x3, 0x404c534a, 0x38) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) 9m21.227336313s ago: executing program 35 (id=3393): io_setup$auto(0x7ffe, &(0x7f0000000000)) shmget$auto(0xe1, 0xe, 0x1) io_setup$auto(0x6, &(0x7f0000000100)=0x7) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x28000, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0) read$auto(r0, &(0x7f00000000c0)='N\xd5\f\xb9GC*(,\x80\xc4bAL\xa3`\xb1\xf2\xe7\xc0/\xff', 0x100000001) shmctl$auto_SHM_UNLOCK(0x9, 0xc, 0x0) waitid$auto_P_ALL(0x0, 0xff, 0x0, 0x5, &(0x7f0000000b40)={{0x6, 0x6}, {0xfffffffffffff4c8, 0x6}, 0x6, 0xc, 0x3, 0x83, 0x2, 0x0, 0x3, 0x3, 0x5, 0x5, 0x8001, 0x1, 0xffffffffffffff11, 0xbf0}) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) fcntl$auto_F_WRLCK(r1, 0x3ff, 0x1) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r2, 0x64c6, 0xffffffffffffffff) close_range$auto(0x2, r2, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) r3 = gettid() kill$auto(r3, 0x11) mmap$auto(0xfffffffffffffffd, 0x2000a, 0x100000004, 0xebd, r1, 0x1) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x8e051, r5, 0x9) mmap$auto(0x100000000000000, 0x800000000202001c, 0x3, 0xeb1, r2, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) write$auto(r6, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x40) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 7.909717948s ago: executing program 5 (id=5432): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x2, 0x5) socket(0xa, 0x1, 0x106) unshare$auto(0x5) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x4c2641, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x40000c, 0xdf, 0x11, 0xffffffffffffffff, 0x7ffd) socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_MSG_INFO(0x0, 0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000005480)='/dev/snd/pcmC0D0p\x00', 0x62080, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, 0x0) mmap$auto(0x8, 0xe982, 0xdf, 0x20000000000eb1, r0, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x4802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0xa}, 0x4) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x3, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x6100, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(0xffffffffffffffff, 0x10008, 0x0, 0x0, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) unshare$auto(0x40000080) socket(0x11, 0x80808, 0x100) 7.774834273s ago: executing program 7 (id=5433): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r1 = socket(0x10, 0x2, 0x14) mmap$auto(0x400, 0x5, 0x3, 0xf0, r0, 0x8000) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) socket(0x2, 0x1, 0x0) read$auto(r2, 0x0, 0x7fff) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x710f}, 0x5) rseq$auto(&(0x7f00000001c0)={0x0, 0x9, 0x8, 0x40, 0xffffffff, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4fad3b3291bdf5db06cb73d067f728b"}, 0x9, 0x3, 0x2af3) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_MM_ENV_END(0xfffffffa, 0xb, 0x0, 0x79, 0x5) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r3 = pipe$auto(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r4, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000001", @ANYRES16=r5, @ANYBLOB="79a327bd7000fbdbdf252000000006000f00500d0000"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r3, 0x0, 0x80000001, 0x9) 6.771528546s ago: executing program 7 (id=5434): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0x7, 0x9, 0x9, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2080, 0x203, 0x20000000, 0x20e9d17d, 0x400300000000000, 0xd9, 0x0, 0x6, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x2, 0x6, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x91, 0x10000, 0x8000000, 0x7, 0x0, 0x1, 0xfffffffefffffffd, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffffb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000003, 0x1, 0x4]}, 0x2, 0xd) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r2, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) ioctl$auto_RNDADDENTROPY(r1, 0x40085203, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000500)=0x3) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000380)={0x3b02, 0x6, 0x9}) socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x6a) umount2$auto(&(0x7f0000000300)='/proc/bus/pci/001.3\x00', 0x1) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080)) close_range$auto(0x2, 0x8, 0x0) write$auto_dfs_global_fops_debug(r0, 0x0, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) waitid$auto(0xffffffcc, r0, &(0x7f00000003c0)={@_si_pad}, 0x10001, &(0x7f0000000440)={{0x4, 0x3}, {0x9, 0x8}, 0x3, 0x296, 0x8, 0x5, 0x9, 0x7fffffff, 0x2, 0x6, 0xe, 0x75, 0x7, 0x1, 0x4, 0x7f}) 6.770147608s ago: executing program 5 (id=5437): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) bind$auto(0x3, 0x0, 0x69) connect$auto(0x3, 0x0, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "1200a9800300"}, 0x55) 6.619298877s ago: executing program 5 (id=5438): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000000)={0x5, 0x9, 0x4dd749a7, 0x9, 0x2, 0xffffffffffffffff}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r1, 0x7, 0xfffffffffffffff2) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}, 0x1, 0x0, 0x0, 0xa00}, 0x40000) socket(0x2, 0x80802, 0x0) socket(0x25, 0x1, 0x5) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103280, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x14f, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x2000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x5, 0x84) socket(0xa, 0x5, 0x84) 6.484664932s ago: executing program 5 (id=5439): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) chmod$auto(0x0, 0x116) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_random_fops_random(0xffffffffffffff9c, 0x0, 0x2002, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x11, 0x80003, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0xe, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 5.806577954s ago: executing program 7 (id=5441): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r0 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) mmap$auto(0x0, 0x6, 0x4, 0x40009b7f, r0, 0x8000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000]}, 0x1fe, 0x81) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x8}, 0x3, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 64) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (rerun: 64) r1 = socket(0x2, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) io_uring_setup$auto(0x89, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async, rerun: 32) write$auto(0x3, 0x0, 0x7fffffff) (async, rerun: 32) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r2, 0x0, 0x20000000001, 0x7fff) (async) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) (async, rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000680)=""/249, 0xf9) (rerun: 64) mmap$auto(0x0, 0xf569, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x6, 0x6, 0x6) (async) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) 4.236950304s ago: executing program 6 (id=5445): socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = setfsuid$auto(0xee00) statx$auto(r0, &(0x7f0000000040)=':,\x00', 0x7, 0x7b7, &(0x7f00000001c0)={0x947, 0x6, 0x9, 0xacb, r2, 0xee00, 0x81, 0x7, 0x1, 0x5, 0xfffffffffffffffb, 0x170d, {0x100000001, 0x8000}, {0x1ff, 0x2}, {0xa, 0x6}, {0xc}, 0x5, 0x94a, 0x6, 0x5, 0x10001, 0x0, 0x6, 0x8, 0x0, 0x1, 0x4f, 0x5, [0xdc, 0x7, 0x9, 0x0, 0x6, 0x776, 0xfffffffffffffffd, 0x3, 0x10]}) r4 = setfsuid$auto(r3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/notify_on_release\x00', 0x101042, 0x0) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) setresuid$auto(r2, r4, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x800058, 0x2, 0x420000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc3, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x9) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) listen$auto(0x3, 0x81) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40000, 0x0) 3.956108438s ago: executing program 2 (id=5447): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/platform/dummy_hcd.7/usb8/serial\x00', 0xa2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) 3.952582515s ago: executing program 6 (id=5448): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/platform/dummy_hcd.7/usb8/serial\x00', 0xa2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) (fail_nth: 1) 3.573029042s ago: executing program 6 (id=5449): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0xc2481, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye6\x00', 0x40202, 0x0) ioctl$auto(0x3, 0x540f, 0xffffffffffffffff) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0) r3 = socket(0x2, 0x1, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r3) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/122, 0x7a) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) fsetxattr$auto(0x1, 0x0, 0x0, 0x0, 0x2) write$auto(r4, 0x0, 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000002c0), r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/platform/vivid.0/video4linux/radio6/power/control\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) inotify_init1$auto(0x800) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.565620781s ago: executing program 2 (id=5450): socket(0xa, 0x801, 0x84) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x121000, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/wchan\x00', 0x2000, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000900), 0xffffffffffffffff) prctl$auto(0x39, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r0 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r0, 0x29, 0x6, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x400) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)={0x3c, r4, 0x789, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x5}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xdc}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x9}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0xb}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004840) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/gss_krb5_enctypes\x00', 0x1c9180, 0x0) read$auto_tracing_stats_fops_trace(r5, 0x0, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc0) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x8f, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a001, 0x0) 3.533890402s ago: executing program 7 (id=5451): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2b, 0x1, 0x0) listen$auto(r1, 0x7ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="feff31bd7000fddbdf250c0000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/thread-self/gid_map\x00', 0x802, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 2.860594389s ago: executing program 2 (id=5452): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440)="e63a35181bd6ece9691b0ffd7ce9114363a5ffb52c0cd7b991024d475b", 0x1d) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) r1 = socket(0x28, 0x2, 0x10000000000002) ioctl$auto_RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x2, 0x6, 0x0, 0x1, 0x177d, 0x1, 0x7fffffff, 0x1fb, 0x9}) mmap$auto(0xa, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x4) finit_module$auto(0xffffffffffffffff, &(0x7f0000000080)='/+\x00', 0x9) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/lowpan0/flags\x00', 0xa8002, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) setitimer$auto(0x2, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto_RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000040)=0x7c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0x20, 0x1, &(0x7f00000002c0)={{0x6, 0xee00, 0xee00, 0x9, 0x4de4, 0x7, 0x10b}, 0x101, 0xf, 0x4d, 0xf0f, @inferred, @raw=0x8, 0x1, 0x0, &(0x7f0000000100)="956d39861f2d7d663151dcbdf8558228f64babb751e0309251e0eff4b7fd8a619705bbffa98e0bef64caf37cabd2bbc9975cd580812dee2dbccf95915d050783374ec5a48bb6f43e5cf52abc568d98c37dd99cc8ef8982cf0bd6ba0da4679c7835173416", &(0x7f00000001c0)="c3e97ac7eb311c0206e671e3d91fabfeb3bd203148592d497bb5a1451b80d2ac3a6b9a75d7e9071a487ae5f223d02fed2cb389d91cfa148cdcf4a00a36942ad7f8f78dd726ea1e247ed53df53b841e38544f7b31a41dba916cf2f66bb6fb3ac8e00a3c3cc22999854f3643c1d0c9f327a39715cbf5f392558054bf044caa5ad39d7ef27da708017d43ef6202a4dba8b5676fa34a88de2552ae8e1b4e3a401893d2270f104ccabf052027fba9b1175ddd8474ad232994c3df60e08f609fa55831115dffc2e9ed0a32ed387b526a4a6a1cc9c1bf26bb695a2723252952801bb87dc469f4631677d2a942ea4c9a"}) r4 = setfsuid$auto(0x0) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1, 0xfffffffffffffff9, 0x7, r4, 0xffffffffffffffff, 0x6, 0x0, 0x80000401, 0x1, 0x5, 0x1fc, {0x80000001, 0xfb44}, {0x5, 0x28}, {0xffffffffffffffff, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x4, 0x8, 0x5, 0xb6a, 0xdfc, [0xe32, 0x2, 0x10000080000001, 0x4, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffa, 0xe, 0x3]}) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r1, &(0x7f0000001880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f00000018c0)=ANY=[@ANYBLOB="c8130000", @ANYRES16=0x0, @ANYBLOB="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"], 0x13c8}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100fe) io_submit$auto(0x0, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.663205125s ago: executing program 6 (id=5453): openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000028c0), 0x100, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208150}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2404c014}, 0x24004881) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x7, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu2\x00', 0x101800, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/udplite\x00', 0x2b2d43, 0x0) socket(0x15, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) setresgid$auto(0x0, 0xee00, 0xffffffffffffffff) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x30, r1, 0x7) mmap$auto(0x8000000c4d0, 0xe, 0x7, 0xeb1, 0xfffffffffffffffa, 0x7fff) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x100, 0x8e8, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x301881, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0xffffffffffffffff, 0xbee, 0x2) 2.62663644s ago: executing program 2 (id=5454): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x0, 0x14, 0x0, 0x7) socket(0xa, 0x1, 0x84) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000240)={0x59fe, 0x0, [{0xc, 0xffff, 0x6}]}) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_SE(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x44110}, 0x8000) sendmsg$auto_NFC_CMD_SE_IO(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08fcdbdf251b00000008020e00020001000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x4010) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x9, 0x0, 0x106, 0x0, 0x6c, 0x5}, 0x5}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000400), r1) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(0xffffffffffffffff, 0x0, 0x4000000) 1.32778807s ago: executing program 7 (id=5455): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f00000003c0)="352c8efa610c0bcf83a4ebdb040000000000000021cb9c8f9cf0e6244b19a48bb5e0d12df98a5b745b9554dfb0ad21bde470f2eed1ee4f0c23f56b8a5b77bb7e15e4beb28af7047be061932e1ca5004e0b136eb4bc296861b683d4992905460e4e6949da7133368cf242ccc1e03a20d9d8fe910ebe6bcef26a7aedf1ed8cc40823faab2950d375cc231119af539b3258", 0x90) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020006, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x1000000fffd}, 0x1) capget$auto(0x0, 0xfffffffffffffffe) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) write$auto(r3, &(0x7f0000000080)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\xc8K\xdd\x89;T@d\xa3y\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xc1}\xfcD\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\x1f\x06D\x04B]\xf0R=\x14vKD\x88&\xbfSL_\x81\xb9`-\x9eXS\xbb{\xea\xd6\x0em-\x9f!\xba\xe9\xb0b\x84\\X\xedfM\xa2D\xd8\v\x01Hj\x7f\xd8\xf1\x8b_ol?\xcb\xf9\xb3\x11\xc7Jr)\x17\xe0h\xa3\xee]w=+\xe6\xa1\xe7\xbcqT\xbczr\fR-\x1a\xa0\x94\"\x1e\x0e', 0xfeffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000029, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) sendmsg$auto_IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf25270000000cbec662f5bfada8aeff00000c000f00090000000000000005001a0009000000"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x40040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x14, r6, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r7 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r7, 0x2, &(0x7f00000000c0), 0x1) arch_prctl$auto_ARCH_SHSTK_DISABLE(0x5002, 0x0) io_uring_register$auto(0x2, 0x3, 0x0, 0x0) 1.327084757s ago: executing program 2 (id=5456): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, r1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000005c75fd6fcf7c0d55393fcc4aa20288a36093850186c10a9210b4873cec01875bad77c8c3c4bd9cd593b7630b4a720cc5ecbe0cec2baedf8fdb10ad7b8277c718a39c6dc5b19c1e20709c6026701036964b556cdadbe04b73ab", @ANYBLOB="1b0026bd7000fddbdf25030000000400080008000380"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x2}) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x9, &(0x7f0000000000)={0xc, 0xf1, 0xb0, @raw=0x43}}) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/13/effective_affinity_list\x00', 0x2000, 0x0) pread64$auto(r5, 0x0, 0x1, 0xff) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/fail_over_mac\x00', 0x103b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x8080000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) r7 = socket(0x18, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x80047453, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x340000000000) 1.006750728s ago: executing program 6 (id=5457): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/platform/dummy_hcd.7/usb8/serial\x00', 0xa2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) (fail_nth: 2) 497.860908ms ago: executing program 5 (id=5458): r0 = socket(0x10, 0x2, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x192b00, 0x0) write$auto(r1, &(0x7f0000000340)=',02.15.4 ]\x98\x0f76Rl\xf2AC\x04\xecQ=\xa2\xce\nO}\x1d\xd7\xb5\x92\xf7\xb2\xc2\xddm\xfbR\xfb\x92x\xd8\xb2\x8a&\xda\\\xa1}&^\x03\x02\xf28\xfd|\xed~\a\xaf\x14\xb5.\x92\"-6.\xb2$\x88\xeb\xdc\x0f\xba$?c\x8b\xcb\xf4q\r\xf5>}4\x99(\xb8D\x15\xb8\xc9U\x14\xd6r\xc9\x81\xbbI\xc9+^\x00\xf6\xb5\xd9\x1e\x89G?/\xc5\x86\xd0\xab\xb3\xfd\xc9?\xa7B\x1b\xdc\xff\xab\xb6~\x96\xd6\x9f\x1d\xfb\xa1dg\x9d\x8d]\xdek\x9c0\xea\xb3\nV\x1d\x10g\xaa\xf9\xf0\xc9\n\x8c\xf25G\x9c\x19\xe5\xd8\xa3\xee\x11\x12f\xd5o\x00\xeaY\n\xe0\x9f\r\xd4\x8e9G\x01\x04\xb2j\xbfYX\x9a)OQ\xedk\xb9\x85\x03c\xf3\x80\x10eG(\x94m81PL\x8d\xa47\x1a\x16\x89\x80\xed\xb3\x02\xe5tx\x90\xbe\x12\x85V\xeb\x8d\x97\xf0\x9c!\x86:\xe8\x8b\xa7@l', 0x3) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x40, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x430c00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init$auto(0xc00, 0x2000000000002) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x8, 0x4, 0xfdf3) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000000)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r5}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x687ca0b, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0xb}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400088c}, 0x8010) 397.578449ms ago: executing program 6 (id=5459): mmap$auto(0x0, 0x3, 0x200000005, 0xeb1, 0xfffffffffffffffa, 0x9) (async) r0 = socket(0x1d, 0x2, 0x6) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd05, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) (async) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fc2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x800) (async) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6e) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) 257.793941ms ago: executing program 5 (id=5460): r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen_full\x00', 0x8200, 0x0) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setreuid$auto(0x0, 0x7) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0xc000000) fcntl$auto_F_GETOWNER_UIDS(r0, 0x11, 0x400) r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x1000000fffd}, 0x1) socket(0xa, 0x5, 0x5) timer_gettime$auto(0x8, &(0x7f0000000080)={{0x4, 0x4}, {0x800, 0x25}}) inotify_init1$auto(0x981) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen_full\x00', 0x8200, 0x0) (async) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) setreuid$auto(0x0, 0x7) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) (async) read$auto(r1, 0x0, 0x1f40) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) unshare$auto(0xc000000) (async) fcntl$auto_F_GETOWNER_UIDS(r0, 0x11, 0x400) (async) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) (async) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x1000000fffd}, 0x1) (async) socket(0xa, 0x5, 0x5) (async) timer_gettime$auto(0x8, &(0x7f0000000080)={{0x4, 0x4}, {0x800, 0x25}}) (async) inotify_init1$auto(0x981) (async) 177.642416ms ago: executing program 7 (id=5461): socket(0xa, 0x801, 0x84) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x121000, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/wchan\x00', 0x2000, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000900), 0xffffffffffffffff) prctl$auto(0x39, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r0 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r0, 0x29, 0x6, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x400) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)={0x3c, r4, 0x789, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x5}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xdc}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x9}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0xb}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004840) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/gss_krb5_enctypes\x00', 0x1c9180, 0x0) read$auto_tracing_stats_fops_trace(r5, 0x0, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc0) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x8f, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a001, 0x0) 0s ago: executing program 2 (id=5462): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop5/queue/atomic_write_unit_min_bytes\x00', 0x8600, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000500)=""/204, 0xcc) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0x8010, r0, 0x8000) timer_create$auto(0x3, 0x0, 0x0) exit$auto(0x2) timer_gettime$auto(0x0, 0x0) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) bind$auto(0x3, 0x0, 0x69) connect$auto(0x3, 0x0, 0x54) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/tracing/tracing_cpumask\x00', 0x8900, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000540)={0x40}) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "1200a9800300"}, 0x55) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) r3 = openat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x5, 0x4b, 0x4}, 0x8) mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, r3, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r3, 0xc1004110, &(0x7f00000000c0)={0x9, [0xfffffffd, 0x9, 0x7], [{0x7, 0xf, 0x0, 0x1, 0x1}, {0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8, 0xa90, 0x0, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1, 0x1}, {0x5, 0x8, 0x0, 0x0, 0x1}, {0xf28c, 0xd1, 0x1, 0x1, 0x1, 0x1}, {0xa1cc, 0x200747e, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x280, 0x1, 0x1, 0x1}, {0x4, 0xae65, 0x1}, {0xfff, 0xfff, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {0xffffac4f, 0x8, 0x0, 0x0, 0x1, 0x1}], 0x9, 0x4, 0x1ff, 0x2400000, 0x8000, 0x1, 0xeb, "393b40e54ee346c759e0d073d77baed7014ab572e509faa1693e5947c89a393def370e3de53b9905f25fed3a48a711e0c8330dd514388af221e23ad307f4f0bc"}) mprotect$auto(0x0, 0x806121, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) kernel console output (not intermixed with test programs): +0x2220/0x38d0 [ 1417.564618][T26831] do_one_initcall+0x123/0x680 [ 1417.575155][T26831] kernel_init_freeable+0x5c8/0x920 [ 1417.587438][T26831] kernel_init+0x1c/0x2b0 [ 1417.596436][T26831] ret_from_fork+0x983/0xb10 [ 1417.605668][T26831] ret_from_fork_asm+0x1a/0x30 [ 1417.772984][T26836] FAULT_INJECTION: forcing a failure. [ 1417.772984][T26836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1417.886029][T26836] CPU: 1 UID: 0 PID: 26836 Comm: syz.7.4469 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1417.886082][T26836] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1417.886100][T26836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1417.886119][T26836] Call Trace: [ 1417.886129][T26836] [ 1417.886140][T26836] dump_stack_lvl+0x16c/0x1f0 [ 1417.886195][T26836] should_fail_ex+0x512/0x640 [ 1417.886250][T26836] should_fail_alloc_page+0xe7/0x130 [ 1417.886302][T26836] prepare_alloc_pages+0x401/0x670 [ 1417.886360][T26836] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1417.886401][T26836] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 1417.886455][T26836] ? __lock_acquire+0x436/0x2890 [ 1417.886494][T26836] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1417.886534][T26836] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1417.886602][T26836] ? __lock_acquire+0x436/0x2890 [ 1417.886629][T26836] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1417.886680][T26836] ? policy_nodemask+0xea/0x4e0 [ 1417.886733][T26836] alloc_pages_mpol+0x1fb/0x550 [ 1417.886786][T26836] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1417.886832][T26836] ? do_raw_spin_lock+0x12c/0x2b0 [ 1417.886869][T26836] ? find_held_lock+0x2b/0x80 [ 1417.886917][T26836] alloc_pages_noprof+0x131/0x390 [ 1417.886969][T26836] __pmd_alloc+0x3b/0x9c0 [ 1417.887016][T26836] ? __pud_alloc+0x57a/0x760 [ 1417.887069][T26836] copy_page_range+0x4620/0x6780 [ 1417.887109][T26836] ? __lock_acquire+0x436/0x2890 [ 1417.887147][T26836] ? __lock_acquire+0x436/0x2890 [ 1417.887192][T26836] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1417.887258][T26836] ? __pfx_copy_page_range+0x10/0x10 [ 1417.887296][T26836] ? mas_store+0xb4b/0x12f0 [ 1417.887333][T26836] ? __vma_enter_locked+0x1dc/0x770 [ 1417.887369][T26836] ? __pfx_mas_store+0x10/0x10 [ 1417.887427][T26836] dup_mmap+0xbea/0x20e0 [ 1417.887468][T26836] ? __pfx_dup_mmap+0x10/0x10 [ 1417.887523][T26836] copy_process+0x3b9f/0x7430 [ 1417.887573][T26836] ? __pfx___futex_wait+0x10/0x10 [ 1417.887635][T26836] ? __pfx_copy_process+0x10/0x10 [ 1417.887695][T26836] ? futex_private_hash_put+0x160/0x1b0 [ 1417.887738][T26836] kernel_clone+0xfc/0x910 [ 1417.887789][T26836] ? __pfx_kernel_clone+0x10/0x10 [ 1417.887864][T26836] __do_sys_clone+0xce/0x120 [ 1417.887912][T26836] ? __pfx___do_sys_clone+0x10/0x10 [ 1417.887983][T26836] ? xfd_validate_state+0x61/0x180 [ 1417.888013][T26836] ? __pfx_do_writev+0x10/0x10 [ 1417.888071][T26836] do_syscall_64+0xcd/0xf80 [ 1417.888105][T26836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.888137][T26836] RIP: 0033:0x7f67a138f7c9 [ 1417.888163][T26836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1417.888196][T26836] RSP: 002b:00007f67a2170fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1417.888283][T26836] RAX: ffffffffffffffda RBX: 00007f67a15e5fa0 RCX: 00007f67a138f7c9 [ 1417.888305][T26836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1417.888326][T26836] RBP: 00007f67a1413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1417.888347][T26836] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1417.888367][T26836] R13: 00007f67a15e6038 R14: 00007f67a15e5fa0 R15: 00007ffde5785e38 [ 1417.888413][T26836] [ 1418.356623][T26851] FAULT_INJECTION: forcing a failure. [ 1418.356623][T26851] name failslab, interval 1, probability 0, space 0, times 0 [ 1418.398689][T26837] zswap: compressor not available [ 1418.427419][T26851] CPU: 0 UID: 0 PID: 26851 Comm: syz.6.4470 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1418.427461][T26851] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1418.427471][T26851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1418.427494][T26851] Call Trace: [ 1418.427503][T26851] [ 1418.427513][T26851] dump_stack_lvl+0x16c/0x1f0 [ 1418.427562][T26851] should_fail_ex+0x512/0x640 [ 1418.427590][T26851] ? __kmalloc_noprof+0xca/0x910 [ 1418.427619][T26851] should_failslab+0xc2/0x120 [ 1418.427656][T26851] __kmalloc_noprof+0xeb/0x910 [ 1418.427682][T26851] ? sk_prot_alloc+0x1a8/0x2a0 [ 1418.427708][T26851] ? sk_prot_alloc+0x1a8/0x2a0 [ 1418.427728][T26851] sk_prot_alloc+0x1a8/0x2a0 [ 1418.427752][T26851] sk_alloc+0x36/0xe30 [ 1418.427782][T26851] __netlink_create+0x5e/0x2c0 [ 1418.427812][T26851] ? __wake_up+0x3f/0x60 [ 1418.427847][T26851] netlink_create+0x39e/0x620 [ 1418.427879][T26851] ? __pfx_genl_bind+0x10/0x10 [ 1418.427899][T26851] ? __pfx_genl_unbind+0x10/0x10 [ 1418.427919][T26851] ? __pfx_genl_release+0x10/0x10 [ 1418.427945][T26851] __sock_create+0x339/0x8a0 [ 1418.427974][T26851] __sys_socket+0x14d/0x260 [ 1418.427999][T26851] ? __pfx___sys_socket+0x10/0x10 [ 1418.428023][T26851] ? xfd_validate_state+0x61/0x180 [ 1418.428052][T26851] __x64_sys_socket+0x72/0xb0 [ 1418.428076][T26851] ? lockdep_hardirqs_on+0x7c/0x110 [ 1418.428097][T26851] do_syscall_64+0xcd/0xf80 [ 1418.428121][T26851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.428145][T26851] RIP: 0033:0x7f8594f8f7c9 [ 1418.428163][T26851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1418.428186][T26851] RSP: 002b:00007f8595dac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1418.428208][T26851] RAX: ffffffffffffffda RBX: 00007f85951e6090 RCX: 00007f8594f8f7c9 [ 1418.428224][T26851] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1418.428238][T26851] RBP: 00007f8595013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1418.428253][T26851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1418.428267][T26851] R13: 00007f85951e6128 R14: 00007f85951e6090 R15: 00007ffe16a7d998 [ 1418.428298][T26851] [ 1419.401623][T26869] Invalid ELF header magic: != ELF [ 1419.743790][T26875] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1419.787784][T26873] nvme_fabrics: missing parameter 'transport=%s' [ 1419.814412][T26873] nvme_fabrics: missing parameter 'nqn=%s' [ 1420.082262][T26876] FAULT_INJECTION: forcing a failure. [ 1420.082262][T26876] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1420.115791][T26876] CPU: 0 UID: 0 PID: 26876 Comm: syz.2.4479 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1420.115845][T26876] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1420.115858][T26876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1420.115877][T26876] Call Trace: [ 1420.115889][T26876] [ 1420.115901][T26876] dump_stack_lvl+0x16c/0x1f0 [ 1420.115958][T26876] should_fail_ex+0x512/0x640 [ 1420.116003][T26876] get_futex_key+0x1d0/0x15f0 [ 1420.116041][T26876] ? __lock_acquire+0x436/0x2890 [ 1420.116070][T26876] ? __pfx_get_futex_key+0x10/0x10 [ 1420.116106][T26876] ? __lock_acquire+0x436/0x2890 [ 1420.116142][T26876] futex_wait_setup+0x9d/0x570 [ 1420.116207][T26876] __futex_wait+0x193/0x2f0 [ 1420.116247][T26876] ? __pfx___futex_wait+0x10/0x10 [ 1420.116299][T26876] ? __pfx_futex_wake_mark+0x10/0x10 [ 1420.116341][T26876] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1420.116374][T26876] ? __hrtimer_setup+0x176/0x280 [ 1420.116411][T26876] ? ktime_add_safe+0x60/0x70 [ 1420.116448][T26876] futex_wait+0xe8/0x380 [ 1420.116486][T26876] ? __pfx_futex_wait+0x10/0x10 [ 1420.116526][T26876] ? __lock_acquire+0x436/0x2890 [ 1420.116560][T26876] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1420.116615][T26876] do_futex+0x229/0x350 [ 1420.116652][T26876] ? __pfx_do_futex+0x10/0x10 [ 1420.116686][T26876] ? rcu_is_watching+0x12/0xc0 [ 1420.116728][T26876] ? ktime_get+0x200/0x310 [ 1420.116757][T26876] ? lockdep_hardirqs_on+0x7c/0x110 [ 1420.116786][T26876] ? read_tsc+0x9/0x20 [ 1420.116833][T26876] __x64_sys_futex+0x1e0/0x4c0 [ 1420.116876][T26876] ? __pfx___x64_sys_futex+0x10/0x10 [ 1420.116930][T26876] do_syscall_64+0xcd/0xf80 [ 1420.116968][T26876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.117001][T26876] RIP: 0033:0x7f8cd638f7c9 [ 1420.117026][T26876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1420.117058][T26876] RSP: 002b:00007ffd456460b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1420.117089][T26876] RAX: ffffffffffffffda RBX: 000000000015c135 RCX: 00007f8cd638f7c9 [ 1420.117110][T26876] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8cd65e5fac [ 1420.117130][T26876] RBP: 0000000000000032 R08: 00007f8cd7250000 R09: 00000019456463af [ 1420.117149][T26876] R10: 00007ffd456461b0 R11: 0000000000000246 R12: 00007f8cd65e5fac [ 1420.117167][T26876] R13: 00007ffd456461b0 R14: 000000000015c167 R15: 00007ffd456461d0 [ 1420.117208][T26876] [ 1420.185594][ T30] audit: type=1107 audit(4294967298.035:35): pid=26877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0' [ 1420.536590][T26888] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1420.631132][ T30] audit: type=1107 audit(4294967298.417:36): pid=26877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0' [ 1420.644519][T26888] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1420.732361][T26869] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input44 [ 1420.756883][T26890] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1421.637264][T26902] zswap: compressor not available [ 1422.056446][T26919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4481'. [ 1423.406867][T26932] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1425.277979][T26964] FAULT_INJECTION: forcing a failure. [ 1425.277979][T26964] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.358875][T26964] CPU: 1 UID: 0 PID: 26964 Comm: syz.2.4493 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1425.358933][T26964] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1425.358947][T26964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1425.358968][T26964] Call Trace: [ 1425.358980][T26964] [ 1425.358994][T26964] dump_stack_lvl+0x16c/0x1f0 [ 1425.359055][T26964] should_fail_ex+0x512/0x640 [ 1425.359095][T26964] ? fs_reclaim_acquire+0xae/0x150 [ 1425.359152][T26964] should_failslab+0xc2/0x120 [ 1425.359203][T26964] __kmalloc_noprof+0xeb/0x910 [ 1425.359238][T26964] ? tomoyo_encode2+0x100/0x3e0 [ 1425.359288][T26964] ? tomoyo_encode2+0x100/0x3e0 [ 1425.359329][T26964] tomoyo_encode2+0x100/0x3e0 [ 1425.359380][T26964] tomoyo_encode+0x29/0x50 [ 1425.359425][T26964] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1425.359484][T26964] tomoyo_mkdev_perm+0x22b/0x570 [ 1425.359523][T26964] ? tomoyo_mkdev_perm+0x217/0x570 [ 1425.359566][T26964] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 1425.359625][T26964] ? do_raw_spin_lock+0x12c/0x2b0 [ 1425.359673][T26964] ? do_raw_spin_unlock+0x172/0x230 [ 1425.359727][T26964] ? __pfx_current_check_access_path+0x10/0x10 [ 1425.359772][T26964] ? simple_lookup+0x105/0x1d0 [ 1425.359823][T26964] tomoyo_path_mknod+0x12a/0x190 [ 1425.359851][T26964] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1425.359883][T26964] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1425.359934][T26964] security_path_mknod+0x161/0x310 [ 1425.359970][T26964] do_mknodat+0x24e/0x6f0 [ 1425.360016][T26964] ? __pfx_do_mknodat+0x10/0x10 [ 1425.360061][T26964] ? getname_flags.part.0+0x1c5/0x550 [ 1425.360106][T26964] __x64_sys_mknod+0x87/0xb0 [ 1425.360155][T26964] do_syscall_64+0xcd/0xf80 [ 1425.360187][T26964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.360219][T26964] RIP: 0033:0x7f8cd638f7c9 [ 1425.360246][T26964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1425.360277][T26964] RSP: 002b:00007f8cd724f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1425.360306][T26964] RAX: ffffffffffffffda RBX: 00007f8cd65e5fa0 RCX: 00007f8cd638f7c9 [ 1425.360328][T26964] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 1425.360347][T26964] RBP: 00007f8cd6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1425.360367][T26964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1425.360385][T26964] R13: 00007f8cd65e6038 R14: 00007f8cd65e5fa0 R15: 00007ffd45645f58 [ 1425.360430][T26964] [ 1425.360462][T26964] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1427.225046][T27001] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4500'. [ 1427.362091][ T30] audit: type=1800 audit(4294967305.302:37): pid=27005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4500" name="lu_gp_id" dev="configfs" ino=124715 res=0 errno=0 [ 1427.507298][T27005] FAULT_INJECTION: forcing a failure. [ 1427.507298][T27005] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.529851][T27005] CPU: 0 UID: 0 PID: 27005 Comm: syz.7.4500 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1427.529908][T27005] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1427.529921][T27005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1427.529940][T27005] Call Trace: [ 1427.529950][T27005] [ 1427.529962][T27005] dump_stack_lvl+0x16c/0x1f0 [ 1427.530023][T27005] should_fail_ex+0x512/0x640 [ 1427.530062][T27005] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 1427.530112][T27005] should_failslab+0xc2/0x120 [ 1427.530164][T27005] __kmalloc_cache_node_noprof+0x83/0x830 [ 1427.530213][T27005] ? sched_setaffinity+0x265/0x400 [ 1427.530268][T27005] ? sched_setaffinity+0x265/0x400 [ 1427.530312][T27005] sched_setaffinity+0x265/0x400 [ 1427.530392][T27005] ? __pfx_sched_setaffinity+0x10/0x10 [ 1427.530442][T27005] ? _copy_from_user+0x59/0xd0 [ 1427.530486][T27005] __x64_sys_sched_setaffinity+0x116/0x140 [ 1427.530532][T27005] ? xfd_validate_state+0x61/0x180 [ 1427.530563][T27005] ? __pfx___x64_sys_sched_setaffinity+0x10/0x10 [ 1427.530613][T27005] ? rcu_is_watching+0x12/0xc0 [ 1427.530664][T27005] do_syscall_64+0xcd/0xf80 [ 1427.530700][T27005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.530734][T27005] RIP: 0033:0x7f67a138f7c9 [ 1427.530761][T27005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.530794][T27005] RSP: 002b:00007f679f5f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000cb [ 1427.530826][T27005] RAX: ffffffffffffffda RBX: 00007f67a15e6180 RCX: 00007f67a138f7c9 [ 1427.530848][T27005] RDX: 0000000000000000 RSI: 0000000000009899 RDI: 0000000000000000 [ 1427.530869][T27005] RBP: 00007f67a1413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1427.530890][T27005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1427.530910][T27005] R13: 00007f67a15e6218 R14: 00007f67a15e6180 R15: 00007ffde5785e38 [ 1427.530955][T27005] [ 1427.855605][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.862107][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.301527][T27008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4501'. [ 1430.603848][T27049] futex_wake_op: syz.7.4510 tries to shift op by -2048; fix this program [ 1430.634755][T27049] futex_wake_op: syz.7.4510 tries to shift op by -2048; fix this program [ 1431.206781][T26796] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1432.206790][T27065] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1432.432587][T27069] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1432.695712][T27079] netlink: 'syz.7.4516': attribute type 1 has an invalid length. [ 1433.056640][T27093] vivid-007: ================= START STATUS ================= [ 1433.089055][T27093] vivid-007: Generate PTS: true [ 1433.123070][T27093] vivid-007: Generate SCR: true [ 1433.171571][T27093] tpg source WxH: 320x240 (Y'CbCr) [ 1433.245779][T27093] tpg field: 1 [ 1433.256957][T27093] tpg crop: (0,0)/320x240 [ 1433.281358][T27093] tpg compose: (0,0)/320x240 [ 1433.286154][T27093] tpg colorspace: 8 [ 1433.365900][T27093] tpg transfer function: 0/0 [ 1433.403834][T27093] tpg Y'CbCr encoding: 0/0 [ 1433.415704][T27093] tpg quantization: 0/0 [ 1433.428459][T27093] tpg RGB range: 0/2 [ 1433.432426][T27093] vivid-007: ================== END STATUS ================== [ 1434.343559][T27112] netlink: zone id is out of range [ 1434.355239][T27112] netlink: zone id is out of range [ 1434.468092][T27112] netlink: set zone limit has 8 unknown bytes [ 1434.689757][ T30] audit: type=1800 audit(4294967312.650:38): pid=27112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4523" name="dbroot" dev="configfs" ino=125813 res=0 errno=0 [ 1435.176854][T27142] futex_wake_op: syz.7.4530 tries to shift op by -2048; fix this program [ 1435.197868][T27142] futex_wake_op: syz.7.4530 tries to shift op by -2048; fix this program [ 1435.342887][T27142] 0x000000000001-0x000000020000 : "" [ 1435.426764][T27142] ftl_cs: FTL header corrupt! [ 1435.483119][T27144] netlink: 74 bytes leftover after parsing attributes in process `syz.5.4531'. [ 1435.616895][T27151] FAULT_INJECTION: forcing a failure. [ 1435.616895][T27151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1435.685495][T27151] CPU: 1 UID: 0 PID: 27151 Comm: syz.6.4532 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1435.685551][T27151] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1435.685565][T27151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1435.685585][T27151] Call Trace: [ 1435.685597][T27151] [ 1435.685610][T27151] dump_stack_lvl+0x16c/0x1f0 [ 1435.685668][T27151] should_fail_ex+0x512/0x640 [ 1435.685713][T27151] should_fail_alloc_page+0xe7/0x130 [ 1435.685769][T27151] prepare_alloc_pages+0x401/0x670 [ 1435.685822][T27151] ? rcu_is_watching+0x12/0xc0 [ 1435.685872][T27151] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1435.685927][T27151] ? stack_trace_save+0x8e/0xc0 [ 1435.685976][T27151] ? __pfx_stack_trace_save+0x10/0x10 [ 1435.686028][T27151] ? stack_depot_save_flags+0x29/0x9b0 [ 1435.686068][T27151] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1435.686115][T27151] ? kasan_save_stack+0x42/0x60 [ 1435.686157][T27151] ? kasan_save_stack+0x33/0x60 [ 1435.686198][T27151] ? kasan_save_track+0x14/0x30 [ 1435.686241][T27151] ? __kasan_kmalloc+0xaa/0xb0 [ 1435.686291][T27151] ? mon_bin_open+0x1a8/0x4a0 [ 1435.686346][T27151] ? do_sys_openat2+0x121/0x290 [ 1435.686382][T27151] ? __x64_sys_openat+0x174/0x210 [ 1435.686418][T27151] ? do_syscall_64+0xcd/0xf80 [ 1435.686447][T27151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.686487][T27151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1435.686540][T27151] ? policy_nodemask+0xea/0x4e0 [ 1435.686594][T27151] alloc_pages_mpol+0x1fb/0x550 [ 1435.686645][T27151] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1435.686707][T27151] alloc_pages_noprof+0x131/0x390 [ 1435.686758][T27151] get_zeroed_page_noprof+0x18/0xb0 [ 1435.686809][T27151] mon_alloc_buff+0xce/0x1b0 [ 1435.686858][T27151] ? kasan_save_track+0x14/0x30 [ 1435.686905][T27151] mon_bin_open+0x207/0x4a0 [ 1435.686957][T27151] ? __pfx_mon_bin_open+0x10/0x10 [ 1435.687007][T27151] chrdev_open+0x234/0x6a0 [ 1435.687057][T27151] ? __pfx_chrdev_open+0x10/0x10 [ 1435.687110][T27151] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1435.687154][T27151] do_dentry_open+0x748/0x1590 [ 1435.687189][T27151] ? __pfx_chrdev_open+0x10/0x10 [ 1435.687233][T27151] vfs_open+0x82/0x3f0 [ 1435.687262][T27151] path_openat+0x2078/0x3140 [ 1435.687312][T27151] ? __pfx_path_openat+0x10/0x10 [ 1435.687358][T27151] do_filp_open+0x20b/0x470 [ 1435.687395][T27151] ? __pfx_do_filp_open+0x10/0x10 [ 1435.687458][T27151] ? alloc_fd+0x471/0x7d0 [ 1435.687501][T27151] do_sys_openat2+0x121/0x290 [ 1435.687527][T27151] ? __pfx_do_sys_openat2+0x10/0x10 [ 1435.687564][T27151] __x64_sys_openat+0x174/0x210 [ 1435.687592][T27151] ? __pfx___x64_sys_openat+0x10/0x10 [ 1435.687632][T27151] do_syscall_64+0xcd/0xf80 [ 1435.687656][T27151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.687680][T27151] RIP: 0033:0x7f8594f8f7c9 [ 1435.687699][T27151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1435.687722][T27151] RSP: 002b:00007f8595dac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1435.687744][T27151] RAX: ffffffffffffffda RBX: 00007f85951e6090 RCX: 00007f8594f8f7c9 [ 1435.687761][T27151] RDX: 0000000000086202 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1435.687776][T27151] RBP: 00007f8595013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1435.687791][T27151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1435.687805][T27151] R13: 00007f85951e6128 R14: 00007f85951e6090 R15: 00007ffe16a7d998 [ 1435.687837][T27151] [ 1438.876163][T27188] FAULT_INJECTION: forcing a failure. [ 1438.876163][T27188] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.026237][T27188] CPU: 0 UID: 0 PID: 27188 Comm: syz.6.4540 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1439.026294][T27188] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1439.026306][T27188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1439.026325][T27188] Call Trace: [ 1439.026336][T27188] [ 1439.026350][T27188] dump_stack_lvl+0x16c/0x1f0 [ 1439.026407][T27188] should_fail_ex+0x512/0x640 [ 1439.026447][T27188] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1439.026501][T27188] should_failslab+0xc2/0x120 [ 1439.026552][T27188] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1439.026602][T27188] ? kstrdup_const+0x63/0x80 [ 1439.026649][T27188] ? kstrdup+0x53/0x100 [ 1439.026683][T27188] kstrdup+0x53/0x100 [ 1439.026730][T27188] kstrdup_const+0x63/0x80 [ 1439.026769][T27188] alloc_vfsmnt+0xea/0x6b0 [ 1439.026802][T27188] ? getname_flags.part.0+0x1c5/0x550 [ 1439.026840][T27188] mnt_clone_internal+0x81/0x250 [ 1439.026892][T27188] acct_on+0xfb/0xa00 [ 1439.026939][T27188] ? __pfx_acct_on+0x10/0x10 [ 1439.026985][T27188] ? bpf_lsm_capable+0x9/0x10 [ 1439.027047][T27188] __x64_sys_acct+0x81/0x1e0 [ 1439.027091][T27188] ? lockdep_hardirqs_on+0x7c/0x110 [ 1439.027121][T27188] do_syscall_64+0xcd/0xf80 [ 1439.027155][T27188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.027187][T27188] RIP: 0033:0x7f8594f8f7c9 [ 1439.027214][T27188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1439.027248][T27188] RSP: 002b:00007f8595dcd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1439.027281][T27188] RAX: ffffffffffffffda RBX: 00007f85951e5fa0 RCX: 00007f8594f8f7c9 [ 1439.027303][T27188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1439.027323][T27188] RBP: 00007f8595013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1439.027344][T27188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1439.027363][T27188] R13: 00007f85951e6038 R14: 00007f85951e5fa0 R15: 00007ffe16a7d998 [ 1439.027406][T27188] [ 1439.672816][T27199] netlink: 'syz.2.4541': attribute type 1 has an invalid length. [ 1439.713107][T27199] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4541'. [ 1440.962818][T27225] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4544'. [ 1440.981962][T27226] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4544'. [ 1442.676267][T27254] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1442.807648][T27254] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1442.816246][T27254] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1443.175578][T27254] page_type: f5(slab) [ 1443.344556][T27254] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 1443.353218][T27254] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 1443.682040][T27254] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 1443.871642][T27254] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 1444.108070][T27254] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1444.293602][T27254] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1444.436829][T27254] page dumped because: unmovable page [ 1444.498563][T27254] page_owner tracks the page as allocated [ 1444.504463][T27254] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5209, tgid 5209 (udevadm), ts 46128682355, free_ts 37732284978 [ 1444.805879][T27254] post_alloc_hook+0x1af/0x220 [ 1444.883781][T27254] get_page_from_freelist+0xd0b/0x31a0 [ 1444.928852][T27254] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1444.962476][T27254] alloc_pages_mpol+0x1fb/0x550 [ 1444.999643][T27254] new_slab+0x2c3/0x430 [ 1445.003999][T27254] ___slab_alloc+0xe18/0x1c90 [ 1445.017841][T27301] random: crng reseeded on system resumption [ 1445.304267][T27254] __slab_alloc.constprop.0+0x63/0x110 [ 1445.361555][T27254] kmem_cache_alloc_lru_noprof+0x451/0x770 [ 1445.433747][T27254] alloc_inode+0xc3/0x240 [ 1445.467432][T27254] iget_locked+0x1d9/0x6d0 [ 1445.482171][T27254] kernfs_get_inode+0x46/0x470 [ 1445.503177][T27254] kernfs_iop_lookup+0x1a7/0x2d0 [ 1445.541903][T27254] __lookup_slow+0x251/0x460 [ 1445.552023][T27254] lookup_slow+0x50/0x70 [ 1445.562139][T27254] path_lookupat+0x5e9/0xc40 [ 1445.584345][T27254] filename_lookup+0x224/0x5f0 [ 1445.589307][T27254] page last free pid 1 tgid 1 stack trace: [ 1445.691308][T27254] __free_frozen_pages+0x7df/0x1170 [ 1445.697725][T27254] free_contig_range+0x183/0x4a0 [ 1445.707375][T27254] destroy_args+0xb95/0x14e0 [ 1445.727755][T27254] debug_vm_pgtable+0x2220/0x38d0 [ 1445.739912][T27254] do_one_initcall+0x123/0x680 [ 1445.761893][T27254] kernel_init_freeable+0x5c8/0x920 [ 1445.790299][T27254] kernel_init+0x1c/0x2b0 [ 1445.871338][T27254] ret_from_fork+0x983/0xb10 [ 1445.876030][T27254] ret_from_fork_asm+0x1a/0x30 [ 1446.747471][T27323] ptrace attach of "./syz-executor exec"[21840] was attempted by ""[27323] [ 1448.172545][T27338] Device name cannot be null; rc = [-22] [ 1453.975909][T27405] netlink: 330 bytes leftover after parsing attributes in process `syz.5.4571'. [ 1454.788743][T27419] netlink: 15128 bytes leftover after parsing attributes in process `syz.5.4573'. [ 1454.816704][T27419] openvswitch: netlink: Flow key attr not present in new flow. [ 1456.870704][T27441] netlink: zone id is out of range [ 1457.515895][T27455] Invalid ELF header magic: != ELF [ 1461.931977][T27476] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1462.468006][T27500] binder: 27499:27500 ioctl 8008563f 38 returned -22 [ 1464.275749][T27523] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4597'. [ 1464.344552][T27526] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4597'. [ 1464.369727][T26811] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 1464.876483][T27533] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4599'. [ 1465.021754][T27531] sd 0:0:1:0: PR command failed: 1026 [ 1465.027464][T27531] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1465.061135][T27531] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1465.098881][T27523] bond0: (slave bond_slave_1): Releasing backup interface [ 1466.491256][T27565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4606'. [ 1468.477961][T27624] netlink: 'syz.5.4616': attribute type 1 has an invalid length. [ 1468.846737][T27639] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1468.902145][ T30] audit: type=1800 audit(4294967347.048:39): pid=27639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4618" name="trace_pipe" dev="tracefs" ino=235 res=0 errno=0 [ 1471.442981][T27700] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1471.555324][T27700] GUP no longer grows the stack in syz.2.4629 (27700): 5000-401000 (4000) [ 1471.610697][T27700] CPU: 1 UID: 0 PID: 27700 Comm: syz.2.4629 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1471.610755][T27700] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1471.610769][T27700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1471.610790][T27700] Call Trace: [ 1471.610802][T27700] [ 1471.610816][T27700] dump_stack_lvl+0x16c/0x1f0 [ 1471.610877][T27700] gup_vma_lookup+0x1d2/0x220 [ 1471.610929][T27700] __get_user_pages+0x241/0x3590 [ 1471.611000][T27700] ? find_held_lock+0x2b/0x80 [ 1471.611046][T27700] ? __pfx___get_user_pages+0x10/0x10 [ 1471.611109][T27700] get_user_pages_remote+0x243/0xab0 [ 1471.611168][T27700] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1471.611222][T27700] ? __pfx___might_resched+0x10/0x10 [ 1471.611272][T27700] ? noop_dirty_folio+0x5e/0xb0 [ 1471.611327][T27700] __access_remote_vm+0x24d/0x850 [ 1471.611384][T27700] ? __pfx___access_remote_vm+0x10/0x10 [ 1471.611443][T27700] mem_rw+0x20e/0x640 [ 1471.611500][T27700] ? __pfx_mem_write+0x10/0x10 [ 1471.611554][T27700] vfs_writev+0x5df/0xde0 [ 1471.611614][T27700] ? __pfx_vfs_writev+0x10/0x10 [ 1471.611659][T27700] ? fdget_pos+0x2a2/0x370 [ 1471.611741][T27700] ? __fget_files+0x20e/0x3c0 [ 1471.611798][T27700] ? do_writev+0x132/0x340 [ 1471.611841][T27700] do_writev+0x132/0x340 [ 1471.611888][T27700] ? __pfx_do_writev+0x10/0x10 [ 1471.611947][T27700] do_syscall_64+0xcd/0xf80 [ 1471.611984][T27700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.612018][T27700] RIP: 0033:0x7f8cd638f7c9 [ 1471.612045][T27700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1471.612079][T27700] RSP: 002b:00007f8cd724f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1471.612110][T27700] RAX: ffffffffffffffda RBX: 00007f8cd65e5fa0 RCX: 00007f8cd638f7c9 [ 1471.612133][T27700] RDX: 0000000000000008 RSI: 0000200000000180 RDI: 0000000000000003 [ 1471.612155][T27700] RBP: 00007f8cd6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1471.612176][T27700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1471.612197][T27700] R13: 00007f8cd65e6038 R14: 00007f8cd65e5fa0 R15: 00007ffd45645f58 [ 1471.612244][T27700] [ 1473.287781][T27742] device-mapper: ioctl: only supply one of name or uuid, cmd(8) [ 1473.329681][T27741] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4639'. [ 1474.976265][T27799] openvswitch: netlink: Flow key attribute not present in set flow. [ 1475.427836][T27802] netlink: 350 bytes leftover after parsing attributes in process `syz.5.4654'. [ 1475.770544][T27809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4656'. [ 1477.039685][T27827] netlink: set zone limit has 8 unknown bytes [ 1480.501284][T27899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4675'. [ 1480.606288][T27899] bridge_slave_1: left allmulticast mode [ 1480.659113][T27899] bridge_slave_1: left promiscuous mode [ 1480.686872][T27899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.818251][T27899] bridge_slave_0: left allmulticast mode [ 1480.863501][T27899] bridge_slave_0: left promiscuous mode [ 1480.887580][T27899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.125462][T27912] input: f as /devices/virtual/input/input45 [ 1481.171701][T27912] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4678'. [ 1482.487146][T27929] zswap: compressor 000 not available [ 1483.265327][T27955] vivid-007: ================= START STATUS ================= [ 1483.274354][T27955] vivid-007: Generate PTS: true [ 1483.290079][T27955] vivid-007: Generate SCR: true [ 1483.296209][T27955] tpg source WxH: 320x240 (Y'CbCr) [ 1483.310702][T27955] tpg field: 1 [ 1483.319658][T27955] tpg crop: (0,0)/320x240 [ 1483.324589][T27956] futex_wake_op: syz.5.4688 tries to shift op by -2048; fix this program [ 1483.339697][T27955] tpg compose: (0,0)/320x240 [ 1483.344851][T27955] tpg colorspace: 8 [ 1483.351652][T27955] tpg transfer function: 0/0 [ 1483.358168][T27955] tpg Y'CbCr encoding: 0/0 [ 1483.363180][T27955] tpg quantization: 0/0 [ 1483.378898][T27955] tpg RGB range: 0/2 [ 1483.383562][T27955] vivid-007: ================== END STATUS ================== [ 1484.178910][ T30] audit: type=1107 audit(4294967362.418:40): pid=27966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1484.380994][T27977] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1486.040150][T28009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4700'. [ 1486.064816][T28009] netlink: 'syz.2.4700': attribute type 1 has an invalid length. [ 1486.102688][T28009] netlink: 'syz.2.4700': attribute type 6 has an invalid length. [ 1486.826848][T28039] vhci_hcd vhci_hcd.2: invalid port number 255 [ 1486.950488][T28038] mkiss: ax0: crc mode is auto. [ 1486.960991][T28043] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1487.006666][T28045] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1487.060536][T28051] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4711'. [ 1487.198198][T28053] futex_wake_op: syz.2.4711 tries to shift op by -2048; fix this program [ 1487.233565][T28053] futex_wake_op: syz.2.4711 tries to shift op by -2048; fix this program [ 1487.675489][T28064] FAULT_INJECTION: forcing a failure. [ 1487.675489][T28064] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1487.748271][T28064] CPU: 1 UID: 0 PID: 28064 Comm: syz.7.4713 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1487.748322][T28064] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1487.748334][T28064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1487.748352][T28064] Call Trace: [ 1487.748363][T28064] [ 1487.748375][T28064] dump_stack_lvl+0x16c/0x1f0 [ 1487.748433][T28064] should_fail_ex+0x512/0x640 [ 1487.748477][T28064] should_fail_futex+0x4c/0x60 [ 1487.748511][T28064] __x64_sys_futex+0x25e/0x4c0 [ 1487.748554][T28064] ? __pfx___x64_sys_futex+0x10/0x10 [ 1487.748592][T28064] ? xfd_validate_state+0x61/0x180 [ 1487.748635][T28064] do_syscall_64+0xcd/0xf80 [ 1487.748668][T28064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.748701][T28064] RIP: 0033:0x7f67a138f7c9 [ 1487.748727][T28064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1487.748758][T28064] RSP: 002b:00007ffde5785f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1487.748788][T28064] RAX: ffffffffffffffda RBX: 000000000016ca9d RCX: 00007f67a138f7c9 [ 1487.748809][T28064] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f67a15e5fac [ 1487.748829][T28064] RBP: 0000000000000032 R08: 00007f67a2172000 R09: 00000009e578628f [ 1487.748850][T28064] R10: 00007ffde5786090 R11: 0000000000000246 R12: 00007f67a15e5fac [ 1487.748871][T28064] R13: 00007ffde5786090 R14: 000000000016cacf R15: 00007ffde57860b0 [ 1487.748912][T28064] [ 1488.197641][T28066] FAULT_INJECTION: forcing a failure. [ 1488.197641][T28066] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.232756][T28066] CPU: 1 UID: 0 PID: 28066 Comm: syz.7.4713 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1488.232797][T28066] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1488.232809][T28066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1488.232823][T28066] Call Trace: [ 1488.232832][T28066] [ 1488.232841][T28066] dump_stack_lvl+0x16c/0x1f0 [ 1488.232884][T28066] should_fail_ex+0x512/0x640 [ 1488.232913][T28066] ? __kmalloc_noprof+0xca/0x910 [ 1488.232941][T28066] should_failslab+0xc2/0x120 [ 1488.232978][T28066] __kmalloc_noprof+0xeb/0x910 [ 1488.233005][T28066] ? process_preds+0x46c/0x1c50 [ 1488.233040][T28066] ? process_preds+0x46c/0x1c50 [ 1488.233076][T28066] process_preds+0x46c/0x1c50 [ 1488.233113][T28066] ? create_filter_start.constprop.0+0x56/0x300 [ 1488.233150][T28066] create_filter+0x140/0x210 [ 1488.233182][T28066] ? __pfx_create_filter+0x10/0x10 [ 1488.233217][T28066] ? find_held_lock+0x2b/0x80 [ 1488.233251][T28066] apply_event_filter+0x220/0x500 [ 1488.233284][T28066] ? __pfx_apply_event_filter+0x10/0x10 [ 1488.233324][T28066] ? __pfx_event_filter_write+0x10/0x10 [ 1488.233346][T28066] event_filter_write+0x16d/0x290 [ 1488.233370][T28066] vfs_writev+0x5df/0xde0 [ 1488.233410][T28066] ? __pfx_vfs_writev+0x10/0x10 [ 1488.233440][T28066] ? fdget_pos+0x2a2/0x370 [ 1488.233495][T28066] ? __fget_files+0x20e/0x3c0 [ 1488.233536][T28066] ? do_writev+0x132/0x340 [ 1488.233564][T28066] do_writev+0x132/0x340 [ 1488.233596][T28066] ? __pfx_do_writev+0x10/0x10 [ 1488.233636][T28066] do_syscall_64+0xcd/0xf80 [ 1488.233660][T28066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.233684][T28066] RIP: 0033:0x7f67a138f7c9 [ 1488.233703][T28066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1488.233727][T28066] RSP: 002b:00007f67a2171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1488.233749][T28066] RAX: ffffffffffffffda RBX: 00007f67a15e5fa0 RCX: 00007f67a138f7c9 [ 1488.233765][T28066] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1488.233780][T28066] RBP: 00007f67a1413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1488.233794][T28066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.233810][T28066] R13: 00007f67a15e6038 R14: 00007f67a15e5fa0 R15: 00007ffde5785e38 [ 1488.233841][T28066] [ 1488.918496][T28068] zswap: compressor not available [ 1488.972713][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1488.979308][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.100436][T28107] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1491.158413][T28107] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1491.232842][T28107] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1491.286215][T28107] page_type: f5(slab) [ 1491.305151][T28107] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 1491.313843][T28107] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 1491.395425][T28107] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 1491.476631][T28107] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 1491.542682][T28107] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1491.599205][T28107] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1491.679627][T28107] page dumped because: unmovable page [ 1491.731236][T28107] page_owner tracks the page as allocated [ 1491.816982][T28107] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5209, tgid 5209 (udevadm), ts 46128682355, free_ts 37732284978 [ 1491.989261][T28107] post_alloc_hook+0x1af/0x220 [ 1492.071090][T28107] get_page_from_freelist+0xd0b/0x31a0 [ 1492.107590][T28107] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1492.185889][T28107] alloc_pages_mpol+0x1fb/0x550 [ 1492.211537][T28131] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4725'. [ 1492.230590][T28107] new_slab+0x2c3/0x430 [ 1492.240454][T28107] ___slab_alloc+0xe18/0x1c90 [ 1492.266198][T28107] __slab_alloc.constprop.0+0x63/0x110 [ 1492.324791][T28107] kmem_cache_alloc_lru_noprof+0x451/0x770 [ 1492.349123][T28107] alloc_inode+0xc3/0x240 [ 1492.407125][T28107] iget_locked+0x1d9/0x6d0 [ 1492.426197][T28107] kernfs_get_inode+0x46/0x470 [ 1492.456459][T28107] kernfs_iop_lookup+0x1a7/0x2d0 [ 1492.482096][T28107] __lookup_slow+0x251/0x460 [ 1492.503017][T28107] lookup_slow+0x50/0x70 [ 1492.537957][T28107] path_lookupat+0x5e9/0xc40 [ 1492.543543][T28107] filename_lookup+0x224/0x5f0 [ 1492.578513][T28107] page last free pid 1 tgid 1 stack trace: [ 1492.595872][T28107] __free_frozen_pages+0x7df/0x1170 [ 1492.617496][T28107] free_contig_range+0x183/0x4a0 [ 1492.645785][T28107] destroy_args+0xb95/0x14e0 [ 1492.654422][T28107] debug_vm_pgtable+0x2220/0x38d0 [ 1492.688062][T28107] do_one_initcall+0x123/0x680 [ 1492.703399][T28107] kernel_init_freeable+0x5c8/0x920 [ 1492.724603][T28107] kernel_init+0x1c/0x2b0 [ 1492.744048][T28107] ret_from_fork+0x983/0xb10 [ 1492.764443][T28107] ret_from_fork_asm+0x1a/0x30 [ 1494.499854][T28157] futex_wake_op: syz.2.4736 tries to shift op by -2048; fix this program [ 1494.547719][T28157] futex_wake_op: syz.2.4736 tries to shift op by -2048; fix this program [ 1494.557768][T28158] 0x000000000001-0x000000020000 : "" [ 1494.653741][T28158] ftl_cs: FTL header corrupt! [ 1495.710128][T28192] FAULT_INJECTION: forcing a failure. [ 1495.710128][T28192] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.710189][T28192] CPU: 1 UID: 0 PID: 28192 Comm: syz.2.4743 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1495.710238][T28192] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1495.710252][T28192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1495.710271][T28192] Call Trace: [ 1495.710282][T28192] [ 1495.710295][T28192] dump_stack_lvl+0x16c/0x1f0 [ 1495.710350][T28192] should_fail_ex+0x512/0x640 [ 1495.710389][T28192] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1495.710434][T28192] should_failslab+0xc2/0x120 [ 1495.710485][T28192] kmem_cache_alloc_noprof+0x83/0x770 [ 1495.710525][T28192] ? alloc_empty_file+0x55/0x1e0 [ 1495.710567][T28192] ? alloc_empty_file+0x55/0x1e0 [ 1495.710600][T28192] alloc_empty_file+0x55/0x1e0 [ 1495.710636][T28192] alloc_file_pseudo+0x13a/0x230 [ 1495.710675][T28192] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1495.710716][T28192] ? alloc_fd+0x471/0x7d0 [ 1495.710771][T28192] sock_alloc_file+0x50/0x210 [ 1495.710821][T28192] __sys_socket+0x1c0/0x260 [ 1495.710873][T28192] ? fput+0x70/0xf0 [ 1495.710904][T28192] ? __pfx___sys_socket+0x10/0x10 [ 1495.710938][T28192] ? xfd_validate_state+0x61/0x180 [ 1495.710968][T28192] ? __pfx_ksys_write+0x10/0x10 [ 1495.711024][T28192] __x64_sys_socket+0x72/0xb0 [ 1495.711058][T28192] ? lockdep_hardirqs_on+0x7c/0x110 [ 1495.711175][T28192] do_syscall_64+0xcd/0xf80 [ 1495.711242][T28192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.711372][T28192] RIP: 0033:0x7f8cd638f7c9 [ 1495.711445][T28192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1495.711522][T28192] RSP: 002b:00007f8cd724f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1495.711616][T28192] RAX: ffffffffffffffda RBX: 00007f8cd65e5fa0 RCX: 00007f8cd638f7c9 [ 1495.711671][T28192] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000018 [ 1495.711727][T28192] RBP: 00007f8cd6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1495.711784][T28192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1495.711837][T28192] R13: 00007f8cd65e6038 R14: 00007f8cd65e5fa0 R15: 00007ffd45645f58 [ 1495.711945][T28192] [ 1497.260479][T28220] FAULT_INJECTION: forcing a failure. [ 1497.260479][T28220] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.314592][T28220] CPU: 0 UID: 0 PID: 28220 Comm: syz.2.4748 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1497.314644][T28220] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1497.314657][T28220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1497.314677][T28220] Call Trace: [ 1497.314698][T28220] [ 1497.314710][T28220] dump_stack_lvl+0x16c/0x1f0 [ 1497.314768][T28220] should_fail_ex+0x512/0x640 [ 1497.314805][T28220] ? fs_reclaim_acquire+0xae/0x150 [ 1497.314860][T28220] should_failslab+0xc2/0x120 [ 1497.314912][T28220] __kmalloc_noprof+0xeb/0x910 [ 1497.314949][T28220] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1497.315005][T28220] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1497.315050][T28220] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1497.315109][T28220] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1497.315161][T28220] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1497.315245][T28220] ? do_raw_spin_lock+0x12c/0x2b0 [ 1497.315294][T28220] tomoyo_file_open+0x6b/0x90 [ 1497.315328][T28220] security_file_open+0x84/0x1e0 [ 1497.315374][T28220] do_dentry_open+0x597/0x1590 [ 1497.315426][T28220] ? security_inode_permission+0xbf/0x260 [ 1497.315471][T28220] vfs_open+0x82/0x3f0 [ 1497.315510][T28220] path_openat+0x2078/0x3140 [ 1497.315573][T28220] ? __pfx_path_openat+0x10/0x10 [ 1497.315637][T28220] do_filp_open+0x20b/0x470 [ 1497.315688][T28220] ? __pfx_do_filp_open+0x10/0x10 [ 1497.315765][T28220] ? alloc_fd+0x471/0x7d0 [ 1497.315815][T28220] do_sys_openat2+0x121/0x290 [ 1497.315851][T28220] ? __pfx_do_sys_openat2+0x10/0x10 [ 1497.315904][T28220] __x64_sys_openat+0x174/0x210 [ 1497.315943][T28220] ? __pfx___x64_sys_openat+0x10/0x10 [ 1497.315999][T28220] do_syscall_64+0xcd/0xf80 [ 1497.316031][T28220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.316077][T28220] RIP: 0033:0x7f8cd638f7c9 [ 1497.316101][T28220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1497.316134][T28220] RSP: 002b:00007f8cd724f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1497.316171][T28220] RAX: ffffffffffffffda RBX: 00007f8cd65e5fa0 RCX: 00007f8cd638f7c9 [ 1497.316193][T28220] RDX: 0000000000080100 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1497.316220][T28220] RBP: 00007f8cd6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1497.316238][T28220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.316256][T28220] R13: 00007f8cd65e6038 R14: 00007f8cd65e5fa0 R15: 00007ffd45645f58 [ 1497.316299][T28220] [ 1497.316312][T28220] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1498.223544][T28232] FAULT_INJECTION: forcing a failure. [ 1498.223544][T28232] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.273371][T28232] CPU: 1 UID: 0 PID: 28232 Comm: syz.2.4750 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1498.273428][T28232] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1498.273441][T28232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1498.273461][T28232] Call Trace: [ 1498.273472][T28232] [ 1498.273485][T28232] dump_stack_lvl+0x16c/0x1f0 [ 1498.273544][T28232] should_fail_ex+0x512/0x640 [ 1498.273585][T28232] ? __kmalloc_noprof+0xca/0x910 [ 1498.273625][T28232] should_failslab+0xc2/0x120 [ 1498.273675][T28232] __kmalloc_noprof+0xeb/0x910 [ 1498.273711][T28232] ? lsm_blob_alloc+0x68/0x90 [ 1498.273769][T28232] ? lsm_blob_alloc+0x68/0x90 [ 1498.273817][T28232] lsm_blob_alloc+0x68/0x90 [ 1498.273867][T28232] security_sk_alloc+0x2f/0x270 [ 1498.273904][T28232] sk_prot_alloc+0xfb/0x2a0 [ 1498.273939][T28232] sk_alloc+0x36/0xe30 [ 1498.273989][T28232] inet_create+0x3a1/0x1040 [ 1498.274032][T28232] ? inet_create+0x93/0x1040 [ 1498.274076][T28232] __sock_create+0x339/0x8a0 [ 1498.274117][T28232] __sys_socket+0x14d/0x260 [ 1498.274152][T28232] ? __pfx___sys_socket+0x10/0x10 [ 1498.274188][T28232] ? xfd_validate_state+0x61/0x180 [ 1498.274229][T28232] __x64_sys_socket+0x72/0xb0 [ 1498.274262][T28232] ? lockdep_hardirqs_on+0x7c/0x110 [ 1498.274294][T28232] do_syscall_64+0xcd/0xf80 [ 1498.274328][T28232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.274362][T28232] RIP: 0033:0x7f8cd638f7c9 [ 1498.274389][T28232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1498.274422][T28232] RSP: 002b:00007f8cd720d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1498.274454][T28232] RAX: ffffffffffffffda RBX: 00007f8cd65e6180 RCX: 00007f8cd638f7c9 [ 1498.274476][T28232] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 1498.274496][T28232] RBP: 00007f8cd6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1498.274517][T28232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1498.274537][T28232] R13: 00007f8cd65e6218 R14: 00007f8cd65e6180 R15: 00007ffd45645f58 [ 1498.274580][T28232] [ 1498.558542][T28243] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1499.121907][T28255] netlink: 222 bytes leftover after parsing attributes in process `syz.5.4757'. [ 1499.862999][T28256] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1500.852786][T28288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4764'. [ 1500.867470][T28290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4764'. [ 1502.353423][ T30] audit: type=1800 audit(4294968407.684:41): pid=28325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4773" name="dbroot" dev="configfs" ino=133147 res=0 errno=0 [ 1504.042372][T28339] netlink: 'syz.7.4777': attribute type 1 has an invalid length. [ 1504.058795][T28339] netlink: 13 bytes leftover after parsing attributes in process `syz.7.4777'. [ 1506.958377][T28380] NFSD: Failed to start, no listeners configured. [ 1513.839822][T28476] mmap: syz.2.4807 (28476): VmData 37597184 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 1513.884040][T28480] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1515.580365][T28510] FAULT_INJECTION: forcing a failure. [ 1515.580365][T28510] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.615323][T28510] CPU: 0 UID: 0 PID: 28510 Comm: syz.6.4816 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1515.615363][T28510] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1515.615372][T28510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1515.615387][T28510] Call Trace: [ 1515.615395][T28510] [ 1515.615404][T28510] dump_stack_lvl+0x16c/0x1f0 [ 1515.615447][T28510] should_fail_ex+0x512/0x640 [ 1515.615474][T28510] ? __kmalloc_noprof+0xca/0x910 [ 1515.615503][T28510] should_failslab+0xc2/0x120 [ 1515.615539][T28510] __kmalloc_noprof+0xeb/0x910 [ 1515.615564][T28510] ? string_escape_mem+0x6c8/0xde0 [ 1515.615593][T28510] ? kstrdup_quotable+0xc2/0x190 [ 1515.615628][T28510] ? kstrdup_quotable+0xc2/0x190 [ 1515.615658][T28510] kstrdup_quotable+0xc2/0x190 [ 1515.615689][T28510] ? __pfx_kstrdup_quotable+0x10/0x10 [ 1515.615721][T28510] ? get_cmdline+0x86/0x380 [ 1515.615759][T28510] kstrdup_quotable_cmdline+0x127/0x210 [ 1515.615795][T28510] __report_access+0x4b/0x370 [ 1515.615827][T28510] ? _raw_spin_unlock_irq+0x23/0x50 [ 1515.615864][T28510] task_work_run+0x150/0x240 [ 1515.615891][T28510] ? __pfx_task_work_run+0x10/0x10 [ 1515.615925][T28510] exit_to_user_mode_loop+0xfb/0x540 [ 1515.615957][T28510] do_syscall_64+0x4ee/0xf80 [ 1515.615981][T28510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.616005][T28510] RIP: 0033:0x7f8594f8f7c9 [ 1515.616023][T28510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1515.616047][T28510] RSP: 002b:00007f8595dac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1515.616069][T28510] RAX: ffffffffffffffff RBX: 00007f85951e6090 RCX: 00007f8594f8f7c9 [ 1515.616086][T28510] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000004206 [ 1515.616099][T28510] RBP: 00007f8595013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1515.616114][T28510] R10: 0000000000200005 R11: 0000000000000246 R12: 0000000000000000 [ 1515.616127][T28510] R13: 00007f85951e6128 R14: 00007f85951e6090 R15: 00007ffe16a7d998 [ 1515.616157][T28510] [ 1515.616870][T28510] ptrace attach of "(null)"[21840] was attempted by "./syz-executor exec"[28510] [ 1521.294779][T28638] openvswitch: netlink: Key type 281 is out of range max 32 [ 1521.357283][T28642] block nbd2: not configured, cannot reconfigure [ 1521.614097][T26811] Bluetooth: hci3: command 0x0406 tx timeout [ 1522.329299][T28661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1522.343156][T28661] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1522.400184][T28661] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1522.425316][T28661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1522.443419][T28661] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1522.458092][T28661] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1522.479155][T28661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1522.504818][T28661] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1522.860687][T28675] ptrace attach of "./syz-executor exec"[24606] was attempted by ""[28675] [ 1523.285254][T28692] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1524.393414][T26796] Bluetooth: hci0: command 0x0c1a tx timeout [ 1524.462977][T26811] Bluetooth: hci5: command 0x0c1a tx timeout [ 1524.469142][T26796] Bluetooth: hci2: command 0x0406 tx timeout [ 1524.544793][T26796] Bluetooth: hci3: command 0x0406 tx timeout [ 1525.902889][T28733] Invalid ELF header magic: != ELF [ 1526.013763][T28745] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 1526.464606][T26796] Bluetooth: hci0: command 0x0c1a tx timeout [ 1526.532220][T26796] Bluetooth: hci2: command 0x0406 tx timeout [ 1526.611620][T26796] Bluetooth: hci3: command 0x0406 tx timeout [ 1528.217446][T28788] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1528.413341][T28797] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1528.605413][T26796] Bluetooth: hci2: command 0x0406 tx timeout [ 1530.298235][T28824] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 1531.616213][T28849] overlayfs: missing 'lowerdir' [ 1532.912803][T28870] netlink: 448 bytes leftover after parsing attributes in process `syz.6.4892'. [ 1533.879296][T28882] netlink: 346 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1534.254191][T28899] Invalid ELF header magic: != ELF [ 1534.872042][T28910] overlayfs: missing 'lowerdir' [ 1537.119939][T28948] netlink: 448 bytes leftover after parsing attributes in process `syz.5.4907'. [ 1538.893884][T28976] overlayfs: missing 'lowerdir' [ 1539.561955][T28988] netlink: 330 bytes leftover after parsing attributes in process `syz.7.4916'. [ 1539.595868][T28988] mac80211_hwsim hwsim60 : renamed from wlan0 (while UP) [ 1539.657845][T28993] netlink: 'syz.5.4917': attribute type 64 has an invalid length. [ 1539.739916][T28993] netlink: 74 bytes leftover after parsing attributes in process `syz.5.4917'. [ 1540.391080][T26796] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 1542.062319][T29044] netlink: 'syz.6.4928': attribute type 2 has an invalid length. [ 1542.183687][T29044] FAULT_INJECTION: forcing a failure. [ 1542.183687][T29044] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.222325][T29044] CPU: 1 UID: 0 PID: 29044 Comm: syz.6.4928 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1542.222378][T29044] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1542.222387][T29044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1542.222402][T29044] Call Trace: [ 1542.222410][T29044] [ 1542.222420][T29044] dump_stack_lvl+0x16c/0x1f0 [ 1542.222465][T29044] should_fail_ex+0x512/0x640 [ 1542.222493][T29044] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1542.222526][T29044] should_failslab+0xc2/0x120 [ 1542.222563][T29044] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1542.222595][T29044] ? alloc_inode+0x64/0x240 [ 1542.222626][T29044] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1542.222648][T29044] ? alloc_inode+0x64/0x240 [ 1542.222673][T29044] alloc_inode+0x64/0x240 [ 1542.222701][T29044] new_inode+0x22/0x1c0 [ 1542.222734][T29044] __debugfs_create_file+0x105/0x530 [ 1542.222765][T29044] debugfs_create_file_full+0x41/0x60 [ 1542.222793][T29044] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 1542.222824][T29044] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1542.222884][T29044] ? lockdep_init_map_type+0x5c/0x270 [ 1542.222913][T29044] preinit_net.part.0+0x24e/0x8f0 [ 1542.222949][T29044] copy_net_ns+0x4cd/0x7c0 [ 1542.222973][T29044] create_new_namespaces+0x3ea/0xab0 [ 1542.223012][T29044] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1542.223052][T29044] ksys_unshare+0x45b/0xa40 [ 1542.223073][T29044] ? __pfx_ksys_unshare+0x10/0x10 [ 1542.223114][T29044] ? xfd_validate_state+0x61/0x180 [ 1542.223145][T29044] __x64_sys_unshare+0x31/0x40 [ 1542.223166][T29044] do_syscall_64+0xcd/0xf80 [ 1542.223196][T29044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.223224][T29044] RIP: 0033:0x7f8594f8f7c9 [ 1542.223244][T29044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1542.223270][T29044] RSP: 002b:00007f8595dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1542.223293][T29044] RAX: ffffffffffffffda RBX: 00007f85951e5fa0 RCX: 00007f8594f8f7c9 [ 1542.223310][T29044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1542.223326][T29044] RBP: 00007f8595013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1542.223341][T29044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1542.223356][T29044] R13: 00007f85951e6038 R14: 00007f85951e5fa0 R15: 00007ffe16a7d998 [ 1542.223388][T29044] [ 1542.227953][T29044] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888034a24d98' [ 1542.905576][T29056] __vm_enough_memory: pid: 29056, comm: syz.5.4932, bytes: 4398046511104 not enough memory for the allocation [ 1543.552439][T29073] NFSD: Failed to start, no listeners configured. [ 1544.678650][T29094] Invalid ELF header magic: != ELF [ 1545.692118][T29128] random: crng reseeded on system resumption [ 1546.960439][T29145] netlink: 'syz.2.4946': attribute type 2 has an invalid length. [ 1547.037779][T29145] FAULT_INJECTION: forcing a failure. [ 1547.037779][T29145] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.168661][T29145] CPU: 1 UID: 0 PID: 29145 Comm: syz.2.4946 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1547.168702][T29145] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1547.168711][T29145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1547.168726][T29145] Call Trace: [ 1547.168734][T29145] [ 1547.168744][T29145] dump_stack_lvl+0x16c/0x1f0 [ 1547.168788][T29145] should_fail_ex+0x512/0x640 [ 1547.168817][T29145] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1547.168863][T29145] should_failslab+0xc2/0x120 [ 1547.168901][T29145] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1547.168930][T29145] ? __d_lookup+0x25c/0x4a0 [ 1547.168958][T29145] ? __d_alloc+0x35/0xa80 [ 1547.168984][T29145] ? __d_alloc+0x35/0xa80 [ 1547.169002][T29145] __d_alloc+0x35/0xa80 [ 1547.169026][T29145] d_alloc+0x4a/0x1e0 [ 1547.169048][T29145] lookup_one_qstr_excl+0x175/0x250 [ 1547.169078][T29145] start_dirop+0x59/0xb0 [ 1547.169111][T29145] simple_start_creating+0xf4/0x100 [ 1547.169144][T29145] ? __pfx_simple_start_creating+0x10/0x10 [ 1547.169176][T29145] ? do_raw_spin_unlock+0x172/0x230 [ 1547.169206][T29145] ? simple_pin_fs+0xa3/0x190 [ 1547.169236][T29145] debugfs_start_creating.part.0+0x86/0x1c0 [ 1547.169262][T29145] __debugfs_create_file+0xb3/0x530 [ 1547.169290][T29145] debugfs_create_file_full+0x41/0x60 [ 1547.169317][T29145] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 1547.169348][T29145] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1547.169404][T29145] ? lockdep_init_map_type+0x5c/0x270 [ 1547.169432][T29145] preinit_net.part.0+0x24e/0x8f0 [ 1547.169469][T29145] copy_net_ns+0x4cd/0x7c0 [ 1547.169492][T29145] create_new_namespaces+0x3ea/0xab0 [ 1547.169536][T29145] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1547.169571][T29145] ksys_unshare+0x45b/0xa40 [ 1547.169593][T29145] ? __pfx_ksys_unshare+0x10/0x10 [ 1547.169632][T29145] ? xfd_validate_state+0x61/0x180 [ 1547.169663][T29145] __x64_sys_unshare+0x31/0x40 [ 1547.169683][T29145] do_syscall_64+0xcd/0xf80 [ 1547.169708][T29145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.169732][T29145] RIP: 0033:0x7f8cd638f7c9 [ 1547.169751][T29145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1547.169775][T29145] RSP: 002b:00007f8cd724f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1547.169797][T29145] RAX: ffffffffffffffda RBX: 00007f8cd65e5fa0 RCX: 00007f8cd638f7c9 [ 1547.169813][T29145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1547.169827][T29145] RBP: 00007f8cd6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1547.169847][T29145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1547.169862][T29145] R13: 00007f8cd65e6038 R14: 00007f8cd65e5fa0 R15: 00007ffd45645f58 [ 1547.169893][T29145] [ 1548.484558][T29163] FAULT_INJECTION: forcing a failure. [ 1548.484558][T29163] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.547378][T29163] CPU: 0 UID: 0 PID: 29163 Comm: syz.6.4949 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1548.547437][T29163] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1548.547452][T29163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1548.547472][T29163] Call Trace: [ 1548.547484][T29163] [ 1548.547497][T29163] dump_stack_lvl+0x16c/0x1f0 [ 1548.547557][T29163] should_fail_ex+0x512/0x640 [ 1548.547597][T29163] ? fs_reclaim_acquire+0xae/0x150 [ 1548.547654][T29163] should_failslab+0xc2/0x120 [ 1548.547706][T29163] __kmalloc_noprof+0xeb/0x910 [ 1548.547744][T29163] ? tomoyo_encode2+0x100/0x3e0 [ 1548.547807][T29163] ? tomoyo_encode2+0x100/0x3e0 [ 1548.547860][T29163] tomoyo_encode2+0x100/0x3e0 [ 1548.547914][T29163] tomoyo_encode+0x29/0x50 [ 1548.547960][T29163] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1548.548022][T29163] tomoyo_mkdev_perm+0x22b/0x570 [ 1548.548060][T29163] ? tomoyo_mkdev_perm+0x217/0x570 [ 1548.548103][T29163] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 1548.548156][T29163] ? do_raw_spin_lock+0x12c/0x2b0 [ 1548.548205][T29163] ? do_raw_spin_unlock+0x172/0x230 [ 1548.548266][T29163] ? __pfx_current_check_access_path+0x10/0x10 [ 1548.548316][T29163] ? simple_lookup+0x105/0x1d0 [ 1548.548371][T29163] tomoyo_path_mknod+0x12a/0x190 [ 1548.548410][T29163] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1548.548446][T29163] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1548.548505][T29163] security_path_mknod+0x161/0x310 [ 1548.548549][T29163] do_mknodat+0x24e/0x6f0 [ 1548.548605][T29163] ? __pfx_do_mknodat+0x10/0x10 [ 1548.548669][T29163] ? getname_flags.part.0+0x1c5/0x550 [ 1548.548717][T29163] __x64_sys_mknod+0x87/0xb0 [ 1548.548771][T29163] do_syscall_64+0xcd/0xf80 [ 1548.548813][T29163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.548846][T29163] RIP: 0033:0x7f8594f8f7c9 [ 1548.548874][T29163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1548.548907][T29163] RSP: 002b:00007f8595dac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1548.548939][T29163] RAX: ffffffffffffffda RBX: 00007f85951e6090 RCX: 00007f8594f8f7c9 [ 1548.548962][T29163] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 1548.548984][T29163] RBP: 00007f8595013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1548.549005][T29163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1548.549025][T29163] R13: 00007f85951e6128 R14: 00007f85951e6090 R15: 00007ffe16a7d998 [ 1548.549071][T29163] [ 1548.549105][T29163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1549.206810][T29176] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4952'. [ 1549.226093][T29177] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4952'. [ 1549.322236][T29176] netlink: 290 bytes leftover after parsing attributes in process `syz.5.4952'. [ 1549.815277][T29186] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4955'. [ 1550.107861][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.115247][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.784954][T29218] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 1553.670134][T29252] FAULT_INJECTION: forcing a failure. [ 1553.670134][T29252] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.683870][T29252] CPU: 1 UID: 0 PID: 29252 Comm: syz.6.4972 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1553.683910][T29252] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1553.683918][T29252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1553.683933][T29252] Call Trace: [ 1553.683941][T29252] [ 1553.683950][T29252] dump_stack_lvl+0x16c/0x1f0 [ 1553.683996][T29252] should_fail_ex+0x512/0x640 [ 1553.684029][T29252] should_failslab+0xc2/0x120 [ 1553.684065][T29252] __kmalloc_cache_noprof+0x80/0x800 [ 1553.684093][T29252] ? tipc_nametbl_insert_publ+0x5a/0x1740 [ 1553.684124][T29252] ? tipc_nametbl_insert_publ+0x5a/0x1740 [ 1553.684148][T29252] tipc_nametbl_insert_publ+0x5a/0x1740 [ 1553.684173][T29252] ? do_raw_spin_lock+0x12c/0x2b0 [ 1553.684202][T29252] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1553.684227][T29252] ? net_generic+0xea/0x2a0 [ 1553.684262][T29252] tipc_nametbl_publish+0x137/0x280 [ 1553.684292][T29252] tipc_sk_publish+0x1d8/0x430 [ 1553.684319][T29252] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1553.684347][T29252] ? __local_bh_enable_ip+0xa4/0x120 [ 1553.684385][T29252] tipc_sk_bind+0x16f/0x380 [ 1553.684412][T29252] tipc_bind+0x190/0x2a0 [ 1553.684440][T29252] __sys_bind+0x1a7/0x260 [ 1553.684467][T29252] ? __pfx___sys_bind+0x10/0x10 [ 1553.684503][T29252] ? xfd_validate_state+0x61/0x180 [ 1553.684523][T29252] ? __pfx_ksys_write+0x10/0x10 [ 1553.684565][T29252] __x64_sys_bind+0x72/0xb0 [ 1553.684589][T29252] ? lockdep_hardirqs_on+0x7c/0x110 [ 1553.684612][T29252] do_syscall_64+0xcd/0xf80 [ 1553.684635][T29252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.684659][T29252] RIP: 0033:0x7f8594f8f7c9 [ 1553.684678][T29252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1553.684702][T29252] RSP: 002b:00007f8595dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1553.684724][T29252] RAX: ffffffffffffffda RBX: 00007f85951e5fa0 RCX: 00007f8594f8f7c9 [ 1553.684740][T29252] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000002 [ 1553.684755][T29252] RBP: 00007f8595013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1553.684786][T29252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1553.684801][T29252] R13: 00007f85951e6038 R14: 00007f85951e5fa0 R15: 00007ffe16a7d998 [ 1553.684832][T29252] [ 1554.229834][T29258] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1554.256638][T29256] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4975'. [ 1554.584703][T29271] netlink: 'syz.5.4979': attribute type 1 has an invalid length. [ 1555.380379][T29287] FAULT_INJECTION: forcing a failure. [ 1555.380379][T29287] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.393318][T29287] CPU: 1 UID: 0 PID: 29287 Comm: syz.7.4983 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1555.393374][T29287] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1555.393388][T29287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1555.393409][T29287] Call Trace: [ 1555.393421][T29287] [ 1555.393435][T29287] dump_stack_lvl+0x16c/0x1f0 [ 1555.393494][T29287] should_fail_ex+0x512/0x640 [ 1555.393547][T29287] should_failslab+0xc2/0x120 [ 1555.393601][T29287] __kmalloc_cache_noprof+0x80/0x800 [ 1555.393648][T29287] ? net_generic+0xea/0x2a0 [ 1555.393679][T29287] ? tipc_service_create+0xb1/0x350 [ 1555.393719][T29287] ? tipc_service_create+0xb1/0x350 [ 1555.393750][T29287] tipc_service_create+0xb1/0x350 [ 1555.393791][T29287] ? tipc_service_find+0x161/0x1c0 [ 1555.393827][T29287] tipc_nametbl_insert_publ+0xf78/0x1740 [ 1555.393868][T29287] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1555.393905][T29287] ? net_generic+0xea/0x2a0 [ 1555.393954][T29287] tipc_nametbl_publish+0x137/0x280 [ 1555.393997][T29287] tipc_sk_publish+0x1d8/0x430 [ 1555.394034][T29287] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1555.394075][T29287] ? __local_bh_enable_ip+0xa4/0x120 [ 1555.394131][T29287] tipc_sk_bind+0x16f/0x380 [ 1555.394159][T29287] tipc_bind+0x190/0x2a0 [ 1555.394186][T29287] __sys_bind+0x1a7/0x260 [ 1555.394214][T29287] ? __pfx___sys_bind+0x10/0x10 [ 1555.394250][T29287] ? xfd_validate_state+0x61/0x180 [ 1555.394272][T29287] ? __pfx_ksys_write+0x10/0x10 [ 1555.394352][T29287] __x64_sys_bind+0x72/0xb0 [ 1555.394386][T29287] ? lockdep_hardirqs_on+0x7c/0x110 [ 1555.394409][T29287] do_syscall_64+0xcd/0xf80 [ 1555.394433][T29287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.394457][T29287] RIP: 0033:0x7f67a138f7c9 [ 1555.394476][T29287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1555.394499][T29287] RSP: 002b:00007f67a2171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1555.394521][T29287] RAX: ffffffffffffffda RBX: 00007f67a15e5fa0 RCX: 00007f67a138f7c9 [ 1555.394537][T29287] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000002 [ 1555.394551][T29287] RBP: 00007f67a1413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1555.394566][T29287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1555.394580][T29287] R13: 00007f67a15e6038 R14: 00007f67a15e5fa0 R15: 00007ffde5785e38 [ 1555.394611][T29287] [ 1555.394621][T29287] tipc: Service creation failed, no memory [ 1556.493440][T29299] FAULT_INJECTION: forcing a failure. [ 1556.493440][T29299] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.538411][T29299] CPU: 1 UID: 0 PID: 29299 Comm: syz.6.4986 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1556.538468][T29299] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1556.538482][T29299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1556.538501][T29299] Call Trace: [ 1556.538512][T29299] [ 1556.538524][T29299] dump_stack_lvl+0x16c/0x1f0 [ 1556.538582][T29299] should_fail_ex+0x512/0x640 [ 1556.538620][T29299] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1556.538665][T29299] should_failslab+0xc2/0x120 [ 1556.538726][T29299] kmem_cache_alloc_noprof+0x83/0x770 [ 1556.538767][T29299] ? vm_area_dup+0x27/0x8d0 [ 1556.538809][T29299] ? vm_area_dup+0x27/0x8d0 [ 1556.538842][T29299] vm_area_dup+0x27/0x8d0 [ 1556.538880][T29299] __split_vma+0x18e/0x1050 [ 1556.538924][T29299] ? __pfx___split_vma+0x10/0x10 [ 1556.538972][T29299] ? __pfx_mas_prev+0x10/0x10 [ 1556.539016][T29299] vms_gather_munmap_vmas+0x3aa/0x1340 [ 1556.539064][T29299] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1556.539111][T29299] ? mas_walk+0x6f5/0x980 [ 1556.539174][T29299] __mmap_region+0x47c/0x2a00 [ 1556.539220][T29299] ? __pfx___mmap_region+0x10/0x10 [ 1556.539255][T29299] ? __lock_acquire+0x436/0x2890 [ 1556.539300][T29299] ? lock_acquire+0x179/0x330 [ 1556.539330][T29299] ? find_held_lock+0x2b/0x80 [ 1556.539374][T29299] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1556.539422][T29299] ? rcu_is_watching+0x12/0xc0 [ 1556.539468][T29299] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1556.539514][T29299] ? lockdep_hardirqs_on+0x7c/0x110 [ 1556.539545][T29299] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1556.539671][T29299] ? rcu_is_watching+0x12/0xc0 [ 1556.539737][T29299] mmap_region+0x1ab/0x3f0 [ 1556.539778][T29299] ? __get_unmapped_area+0x267/0x3f0 [ 1556.539832][T29299] do_mmap+0xa3e/0x1210 [ 1556.539888][T29299] ? __pfx_do_mmap+0x10/0x10 [ 1556.539937][T29299] ? __pfx_down_write_killable+0x10/0x10 [ 1556.539981][T29299] vm_mmap_pgoff+0x29e/0x470 [ 1556.540034][T29299] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1556.540078][T29299] ? find_held_lock+0x2b/0x80 [ 1556.540123][T29299] ? __x64_sys_futex+0x1e0/0x4c0 [ 1556.540156][T29299] ? __x64_sys_futex+0x1e9/0x4c0 [ 1556.540196][T29299] ksys_mmap_pgoff+0x7d/0x5c0 [ 1556.540239][T29299] ? xfd_validate_state+0x61/0x180 [ 1556.540276][T29299] __x64_sys_mmap+0x125/0x190 [ 1556.540315][T29299] do_syscall_64+0xcd/0xf80 [ 1556.540349][T29299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.540384][T29299] RIP: 0033:0x7f8594f8f7c9 [ 1556.540411][T29299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1556.540444][T29299] RSP: 002b:00007f8595dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1556.540476][T29299] RAX: ffffffffffffffda RBX: 00007f85951e5fa0 RCX: 00007f8594f8f7c9 [ 1556.540498][T29299] RDX: 0000000000000005 RSI: 0000000000020009 RDI: 0000000000000000 [ 1556.540520][T29299] RBP: 00007f8595013f91 R08: 0000000000000008 R09: 0000000001008000 [ 1556.540542][T29299] R10: 0000000000000eb2 R11: 0000000000000246 R12: 0000000000000000 [ 1556.540563][T29299] R13: 00007f85951e6038 R14: 00007f85951e5fa0 R15: 00007ffe16a7d998 [ 1556.540608][T29299] [ 1556.993945][T29299] kafs: addr_prefs: Invalid Command [ 1557.155719][T29309] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4986'. [ 1557.247519][T29309] veth0_macvtap: left promiscuous mode [ 1557.267012][T29309] macvtap0: entered promiscuous mode [ 1557.348830][T29309] macvtap0: entered allmulticast mode [ 1557.700176][T29316] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1557.843980][T29314] bridge0: port 3(gretap0) entered blocking state [ 1557.850935][T29314] bridge0: port 3(gretap0) entered disabled state [ 1557.857632][T29314] gretap0: entered allmulticast mode [ 1557.881405][T29314] gretap0: entered promiscuous mode [ 1557.887419][T29314] bridge0: port 3(gretap0) entered blocking state [ 1557.894114][T29314] bridge0: port 3(gretap0) entered forwarding state [ 1560.107520][T29397] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1560.657823][T29409] netlink: 334 bytes leftover after parsing attributes in process `syz.2.5006'. [ 1560.693520][T29412] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5008'. [ 1562.030775][T29446] FAULT_INJECTION: forcing a failure. [ 1562.030775][T29446] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.083442][T29446] CPU: 1 UID: 0 PID: 29446 Comm: syz.7.5016 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1562.083505][T29446] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1562.083515][T29446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1562.083530][T29446] Call Trace: [ 1562.083538][T29446] [ 1562.083548][T29446] dump_stack_lvl+0x16c/0x1f0 [ 1562.083592][T29446] should_fail_ex+0x512/0x640 [ 1562.083620][T29446] ? fs_reclaim_acquire+0xae/0x150 [ 1562.083660][T29446] should_failslab+0xc2/0x120 [ 1562.083696][T29446] __kmalloc_noprof+0xeb/0x910 [ 1562.083722][T29446] ? tomoyo_encode2+0x100/0x3e0 [ 1562.083760][T29446] ? tomoyo_encode2+0x100/0x3e0 [ 1562.083792][T29446] tomoyo_encode2+0x100/0x3e0 [ 1562.083829][T29446] tomoyo_encode+0x29/0x50 [ 1562.083860][T29446] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1562.083921][T29446] tomoyo_mkdev_perm+0x22b/0x570 [ 1562.083949][T29446] ? tomoyo_mkdev_perm+0x217/0x570 [ 1562.083979][T29446] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 1562.084009][T29446] ? do_raw_spin_lock+0x12c/0x2b0 [ 1562.084043][T29446] ? do_raw_spin_unlock+0x172/0x230 [ 1562.084086][T29446] ? __pfx_current_check_access_path+0x10/0x10 [ 1562.084126][T29446] ? simple_lookup+0x105/0x1d0 [ 1562.084165][T29446] tomoyo_path_mknod+0x12a/0x190 [ 1562.084188][T29446] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1562.084212][T29446] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1562.084252][T29446] security_path_mknod+0x161/0x310 [ 1562.084290][T29446] do_mknodat+0x24e/0x6f0 [ 1562.084326][T29446] ? __pfx_do_mknodat+0x10/0x10 [ 1562.084359][T29446] ? getname_flags.part.0+0x1c5/0x550 [ 1562.084392][T29446] __x64_sys_mknod+0x87/0xb0 [ 1562.084429][T29446] do_syscall_64+0xcd/0xf80 [ 1562.084454][T29446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.084478][T29446] RIP: 0033:0x7f67a138f7c9 [ 1562.084497][T29446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.084521][T29446] RSP: 002b:00007f67a2171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1562.084543][T29446] RAX: ffffffffffffffda RBX: 00007f67a15e5fa0 RCX: 00007f67a138f7c9 [ 1562.084559][T29446] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 1562.084574][T29446] RBP: 00007f67a1413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1562.084589][T29446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1562.084604][T29446] R13: 00007f67a15e6038 R14: 00007f67a15e5fa0 R15: 00007ffde5785e38 [ 1562.084635][T29446] [ 1562.405385][T29446] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1562.672418][T29448] FAULT_INJECTION: forcing a failure. [ 1562.672418][T29448] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.687587][T29448] CPU: 1 UID: 0 PID: 29448 Comm: syz.6.5017 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1562.687645][T29448] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1562.687659][T29448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1562.687679][T29448] Call Trace: [ 1562.687689][T29448] [ 1562.687702][T29448] dump_stack_lvl+0x16c/0x1f0 [ 1562.687764][T29448] should_fail_ex+0x512/0x640 [ 1562.687803][T29448] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1562.687849][T29448] should_failslab+0xc2/0x120 [ 1562.687899][T29448] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1562.687940][T29448] ? __d_lookup+0x25c/0x4a0 [ 1562.687980][T29448] ? __d_alloc+0x35/0xa80 [ 1562.688016][T29448] ? __d_alloc+0x35/0xa80 [ 1562.688055][T29448] __d_alloc+0x35/0xa80 [ 1562.688090][T29448] d_alloc+0x4a/0x1e0 [ 1562.688123][T29448] lookup_one_qstr_excl+0x175/0x250 [ 1562.688166][T29448] start_dirop+0x59/0xb0 [ 1562.688214][T29448] simple_start_creating+0xf4/0x100 [ 1562.688262][T29448] ? __pfx_simple_start_creating+0x10/0x10 [ 1562.688306][T29448] ? do_raw_spin_unlock+0x172/0x230 [ 1562.688348][T29448] ? simple_pin_fs+0xa3/0x190 [ 1562.688392][T29448] debugfs_start_creating.part.0+0x86/0x1c0 [ 1562.688429][T29448] debugfs_create_dir+0x72/0x470 [ 1562.688465][T29448] blk_trace_setup_prepare+0x25a/0x700 [ 1562.688510][T29448] blk_trace_setup+0x1c5/0x3b0 [ 1562.688554][T29448] ? __pfx_blk_trace_setup+0x10/0x10 [ 1562.688594][T29448] ? vsnprintf+0x331/0x11e0 [ 1562.688652][T29448] ? __pfx_vsnprintf+0x10/0x10 [ 1562.688724][T29448] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1562.688777][T29448] ? do_vfs_ioctl+0x128/0x14f0 [ 1562.688822][T29448] blk_trace_ioctl+0x2ce/0x300 [ 1562.688865][T29448] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1562.688912][T29448] ? find_held_lock+0x2b/0x80 [ 1562.688953][T29448] ? hook_file_ioctl_common+0x144/0x410 [ 1562.689000][T29448] blkdev_ioctl+0x1fa/0x6e0 [ 1562.689052][T29448] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1562.689100][T29448] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1562.689144][T29448] __x64_sys_ioctl+0x18e/0x210 [ 1562.689188][T29448] do_syscall_64+0xcd/0xf80 [ 1562.689223][T29448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.689256][T29448] RIP: 0033:0x7f8594f8f7c9 [ 1562.689283][T29448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.689318][T29448] RSP: 002b:00007f8595dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1562.689352][T29448] RAX: ffffffffffffffda RBX: 00007f85951e5fa0 RCX: 00007f8594f8f7c9 [ 1562.689374][T29448] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000008 [ 1562.689395][T29448] RBP: 00007f8595013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1562.689417][T29448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1562.689437][T29448] R13: 00007f85951e6038 R14: 00007f85951e5fa0 R15: 00007ffe16a7d998 [ 1562.689484][T29448] [ 1562.689505][T29448] blktrace: debugfs_dir not present for sda1 so skipping [ 1566.934180][T29568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5053'. [ 1569.785827][T29623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5063'. [ 1569.937272][T29627] hub 1-0:1.0: USB hub found [ 1569.943159][T29627] hub 1-0:1.0: 1 port detected [ 1570.008640][T29628] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1573.539792][T29682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5076'. [ 1574.871343][T29710] aoe: invalid device specification [ 1575.294329][T29719] netlink: 74 bytes leftover after parsing attributes in process `syz.6.5085'. [ 1577.312361][T29751] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input47 [ 1577.898810][T29759] netlink: 74 bytes leftover after parsing attributes in process `syz.7.5096'. [ 1581.092038][T29807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1581.105201][T29807] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1581.125603][T29807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1581.151092][T29807] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1582.164126][T29836] openvswitch: netlink: IP tunnel dst address not specified [ 1582.278266][T29841] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1582.500939][T26796] Bluetooth: hci0: command 0x0c1a tx timeout [ 1583.117692][T26811] Bluetooth: hci5: command 0x0c1a tx timeout [ 1583.127874][T26796] Bluetooth: hci2: command 0x0406 tx timeout [ 1583.201653][T26811] Bluetooth: hci3: command 0x0406 tx timeout [ 1583.250324][T29863] futex_wake_op: syz.5.5121 tries to shift op by -2048; fix this program [ 1583.388624][T29863] futex_wake_op: syz.5.5121 tries to shift op by -2048; fix this program [ 1583.401515][T29865] random: crng reseeded on system resumption [ 1587.500237][T29929] futex_wake_op: syz.6.5133 tries to shift op by -2048; fix this program [ 1587.545206][T29929] futex_wake_op: syz.6.5133 tries to shift op by -2048; fix this program [ 1587.608552][T29929] 0x000000000001-0x000000020000 : "" [ 1587.709606][T29929] ftl_cs: FTL header corrupt! [ 1588.846191][T29957] vivid-009: ================= START STATUS ================= [ 1588.875140][T29957] vivid-009: Radio HW Seek Mode: Bounded [ 1588.897510][T29957] vivid-009: Radio Programmable HW Seek: false [ 1588.937665][T29957] vivid-009: RDS Rx I/O Mode: Block I/O [ 1588.969452][T29957] vivid-009: Generate RBDS Instead of RDS: false [ 1588.998034][T29957] vivid-009: RDS Reception: true [ 1589.041642][T29957] vivid-009: RDS Program Type: 0 inactive [ 1589.406524][T29957] vivid-009: RDS PS Name: inactive [ 1589.411844][T29957] vivid-009: RDS Radio Text: inactive [ 1589.466192][T29957] vivid-009: RDS Traffic Announcement: false inactive [ 1589.473450][T29957] vivid-009: RDS Traffic Program: false inactive [ 1589.613290][T29957] vivid-009: RDS Music: false inactive [ 1589.647887][T29957] vivid-009: ================== END STATUS ================== [ 1590.061546][T29965] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1590.067691][T29965] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1590.138859][T29965] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1590.147495][T29965] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1590.363545][T29985] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 1590.734311][T29987] ptrace attach of "./syz-executor exec"[24606] was attempted by ""[29987] [ 1591.069806][T29991] zswap: compressor not available [ 1591.786597][T30002] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1592.113020][T26796] Bluetooth: hci5: command 0x0c1a tx timeout [ 1592.119157][T26811] Bluetooth: hci0: command 0x0c1a tx timeout [ 1592.190586][T26796] Bluetooth: hci3: command 0x0406 tx timeout [ 1592.196804][T26811] Bluetooth: hci2: command 0x0406 tx timeout [ 1595.569622][T30040] ptrace attach of "./syz-executor exec"[21847] was attempted by ""[30040] [ 1597.662270][ T30] audit: type=1800 audit(4294967336.479:42): pid=30054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5162" name="lu_gp_id" dev="configfs" ino=142280 res=0 errno=0 [ 1597.822534][T30060] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5164'. [ 1598.975345][T30067] zswap: compressor not available [ 1600.850646][T30095] vivid-009: ================= START STATUS ================= [ 1600.859535][T30095] vivid-009: Radio HW Seek Mode: Bounded [ 1600.865805][T30095] vivid-009: Radio Programmable HW Seek: false [ 1600.872308][T30095] vivid-009: RDS Rx I/O Mode: Block I/O [ 1600.900328][T30095] vivid-009: Generate RBDS Instead of RDS: false [ 1600.915989][T30095] vivid-009: RDS Reception: true [ 1600.921021][T30095] vivid-009: RDS Program Type: 0 inactive [ 1600.928095][T30095] vivid-009: RDS PS Name: inactive [ 1600.933372][T30095] vivid-009: RDS Radio Text: inactive [ 1600.948745][T30095] vivid-009: RDS Traffic Announcement: false inactive [ 1601.007485][T30099] futex_wake_op: syz.2.5170 tries to shift op by -2048; fix this program [ 1601.045599][T30096] FAULT_INJECTION: forcing a failure. [ 1601.045599][T30096] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.066332][T30095] vivid-009: RDS Traffic Program: false inactive [ 1601.073076][T30095] vivid-009: RDS Music: false inactive [ 1601.084119][T30096] CPU: 1 UID: 0 PID: 30096 Comm: syz.7.5172 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1601.084175][T30096] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1601.084188][T30096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1601.084213][T30096] Call Trace: [ 1601.084224][T30096] [ 1601.084236][T30096] dump_stack_lvl+0x16c/0x1f0 [ 1601.084297][T30096] should_fail_ex+0x512/0x640 [ 1601.084335][T30096] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1601.084379][T30096] should_failslab+0xc2/0x120 [ 1601.084429][T30096] kmem_cache_alloc_noprof+0x83/0x770 [ 1601.084466][T30096] ? process_measurement+0x7f8/0x22d0 [ 1601.084496][T30096] ? ima_d_path+0xbd/0x2a0 [ 1601.084537][T30096] ? ima_d_path+0xbd/0x2a0 [ 1601.084572][T30096] ima_d_path+0xbd/0x2a0 [ 1601.084611][T30096] ? __pfx_ima_d_path+0x10/0x10 [ 1601.084654][T30096] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1601.084718][T30096] process_measurement+0x1a59/0x22d0 [ 1601.084766][T30096] ? __pfx_process_measurement+0x10/0x10 [ 1601.084796][T30096] ? kasan_save_stack+0x42/0x60 [ 1601.084838][T30096] ? kasan_save_track+0x14/0x30 [ 1601.084881][T30096] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1601.084930][T30096] ? find_held_lock+0x2b/0x80 [ 1601.084975][T30096] ? aa_file_perm+0x29e/0x1560 [ 1601.085078][T30096] ima_file_mmap+0x1b6/0x1e0 [ 1601.085112][T30096] ? __pfx_ima_file_mmap+0x10/0x10 [ 1601.085155][T30096] security_mmap_file+0x88c/0x990 [ 1601.085201][T30096] vm_mmap_pgoff+0xec/0x470 [ 1601.085250][T30096] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1601.085294][T30096] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1601.085335][T30096] ? hugetlbfs_get_inode+0x31f/0x700 [ 1601.085380][T30096] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1601.085435][T30096] __x64_sys_mmap+0x125/0x190 [ 1601.085472][T30096] do_syscall_64+0xcd/0xf80 [ 1601.085507][T30096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.085540][T30096] RIP: 0033:0x7f67a138f7c9 [ 1601.085569][T30096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1601.085600][T30096] RSP: 002b:00007f67a2171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1601.085630][T30096] RAX: ffffffffffffffda RBX: 00007f67a15e5fa0 RCX: 00007f67a138f7c9 [ 1601.085653][T30096] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1601.085673][T30096] RBP: 00007f67a1413f91 R08: 0000000000000401 R09: 0000300000000000 [ 1601.085694][T30096] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1601.085713][T30096] R13: 00007f67a15e6038 R14: 00007f67a15e5fa0 R15: 00007ffde5785e38 [ 1601.085757][T30096] [ 1601.114858][T30099] futex_wake_op: syz.2.5170 tries to shift op by -2048; fix this program [ 1601.303526][T30095] vivid-009: ================== END STATUS ================== [ 1601.371789][T30099] futex_wake_op: syz.2.5170 tries to shift op by -2048; fix this program [ 1601.864250][T30107] netlink: 330 bytes leftover after parsing attributes in process `syz.6.5175'. [ 1605.797286][T30174] ima: policy update failed [ 1605.805893][ T30] audit: type=1802 audit(4294967344.691:43): pid=30174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.5185" res=0 errno=0 [ 1605.841596][T30168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5183'. [ 1605.852958][T30168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5183'. [ 1607.831751][T30201] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 1607.831751][T30201] M' is too long [ 1607.853142][T30201] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 1607.853142][T30201] W ' is too long [ 1607.930927][T30203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5192'. [ 1608.194726][T30207] FAULT_INJECTION: forcing a failure. [ 1608.194726][T30207] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.235156][T30207] CPU: 1 UID: 0 PID: 30207 Comm: syz.6.5203 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1608.235212][T30207] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1608.235225][T30207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1608.235244][T30207] Call Trace: [ 1608.235256][T30207] [ 1608.235270][T30207] dump_stack_lvl+0x16c/0x1f0 [ 1608.235323][T30207] should_fail_ex+0x512/0x640 [ 1608.235351][T30207] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1608.235389][T30207] should_failslab+0xc2/0x120 [ 1608.235426][T30207] kmem_cache_alloc_noprof+0x83/0x770 [ 1608.235459][T30207] ? process_measurement+0x7f8/0x22d0 [ 1608.235483][T30207] ? ima_d_path+0xbd/0x2a0 [ 1608.235514][T30207] ? ima_d_path+0xbd/0x2a0 [ 1608.235538][T30207] ima_d_path+0xbd/0x2a0 [ 1608.235565][T30207] ? __pfx_ima_d_path+0x10/0x10 [ 1608.235596][T30207] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1608.235641][T30207] process_measurement+0x1a59/0x22d0 [ 1608.235674][T30207] ? __pfx_process_measurement+0x10/0x10 [ 1608.235695][T30207] ? kasan_save_stack+0x42/0x60 [ 1608.235726][T30207] ? kasan_save_track+0x14/0x30 [ 1608.235757][T30207] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1608.235792][T30207] ? find_held_lock+0x2b/0x80 [ 1608.235823][T30207] ? aa_file_perm+0x29e/0x1560 [ 1608.235900][T30207] ima_file_mmap+0x1b6/0x1e0 [ 1608.235924][T30207] ? __pfx_ima_file_mmap+0x10/0x10 [ 1608.235954][T30207] security_mmap_file+0x88c/0x990 [ 1608.235988][T30207] vm_mmap_pgoff+0xec/0x470 [ 1608.236025][T30207] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1608.236056][T30207] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1608.236084][T30207] ? hugetlbfs_get_inode+0x31f/0x700 [ 1608.236117][T30207] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1608.236156][T30207] __x64_sys_mmap+0x125/0x190 [ 1608.236184][T30207] do_syscall_64+0xcd/0xf80 [ 1608.236211][T30207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.236236][T30207] RIP: 0033:0x7f8594f8f7c9 [ 1608.236255][T30207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1608.236278][T30207] RSP: 002b:00007f8595dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1608.236300][T30207] RAX: ffffffffffffffda RBX: 00007f85951e5fa0 RCX: 00007f8594f8f7c9 [ 1608.236316][T30207] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1608.236338][T30207] RBP: 00007f8595013f91 R08: 0000000000000401 R09: 0000300000000000 [ 1608.236353][T30207] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1608.236368][T30207] R13: 00007f85951e6038 R14: 00007f85951e5fa0 R15: 00007ffe16a7d998 [ 1608.236399][T30207] [ 1609.344615][T30230] Invalid ELF header magic: != ELF [ 1609.623374][T30250] Invalid ELF header magic: != ELF [ 1610.645869][T30271] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1610.866079][T30269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5206'. [ 1611.215818][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1611.248569][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.892621][T30309] Line length is too long: Should be less than 4094 [ 1611.965068][T30305] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5213'. [ 1612.081283][T26811] Bluetooth: hci5: unexpected event 0x23 length: 127 > 13 [ 1612.342272][T30318] netlink: 342 bytes leftover after parsing attributes in process `syz.7.5213'. [ 1613.302194][T30305] bond0: (slave bond_slave_1): Releasing backup interface [ 1613.685284][T30347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5222'. [ 1614.561939][T30359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5224'. [ 1616.223578][T30398] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 1616.223578][T30398] M' is too long [ 1616.238312][T30398] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 1616.238312][T30398] W ' is too long [ 1617.642696][T30435] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1618.018656][T30428] delete_channel: no stack [ 1618.331170][T30457] program syz.2.5244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1618.356287][ T30] audit: type=1807 audit(4294967357.296:44): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 1618.376516][ T30] audit: type=1802 audit(4294967357.306:45): pid=30457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.5244" res=0 errno=0 [ 1619.071046][T30453] ima: policy update failed [ 1619.078123][ T30] audit: type=1802 audit(4294967358.030:46): pid=30453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5244" res=0 errno=0 [ 1619.718439][T30469] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5254'. [ 1619.814270][T26811] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13 [ 1620.144117][T30469] bond0: (slave bond_slave_1): Releasing backup interface [ 1620.211696][T30478] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5254'. [ 1621.242123][T30510] program syz.6.5255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1621.293854][ T30] audit: type=1807 audit(4294967360.262:47): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 1621.327833][ T30] audit: type=1802 audit(4294967360.272:48): pid=30510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.5255" res=0 errno=0 [ 1621.682353][T30515] delete_channel: no stack [ 1621.819054][T30504] ima: policy update failed [ 1621.830682][ T30] audit: type=1802 audit(4294967360.794:49): pid=30504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.5255" res=0 errno=0 [ 1621.926263][T30517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5259'. [ 1622.365978][T30527] Invalid ELF header magic: != ELF [ 1624.640853][T30566] batman_adv: Routing algorithm '' is not supported [ 1624.838102][T30571] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1624.988937][T30574] Invalid ELF header magic: != ELF [ 1625.703328][T30580] netlink: set zone limit has 8 unknown bytes [ 1627.527588][T30598] futex_wake_op: syz.2.5281 tries to shift op by -2048; fix this program [ 1627.966268][T30604] FAULT_INJECTION: forcing a failure. [ 1627.966268][T30604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1627.990415][T30604] CPU: 0 UID: 0 PID: 30604 Comm: syz.2.5282 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1627.990460][T30604] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1627.990469][T30604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1627.990483][T30604] Call Trace: [ 1627.990492][T30604] [ 1627.990502][T30604] dump_stack_lvl+0x16c/0x1f0 [ 1627.990562][T30604] should_fail_ex+0x512/0x640 [ 1627.990607][T30604] _copy_to_user+0x32/0xd0 [ 1627.990648][T30604] simple_read_from_buffer+0xcb/0x170 [ 1627.990705][T30604] proc_fail_nth_read+0x197/0x240 [ 1627.990771][T30604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1627.990829][T30604] ? rw_verify_area+0xcf/0x6c0 [ 1627.990870][T30604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1627.990924][T30604] vfs_read+0x1e4/0xcf0 [ 1627.990971][T30604] ? __pfx___mutex_lock+0x10/0x10 [ 1627.991008][T30604] ? __pfx_vfs_read+0x10/0x10 [ 1627.991065][T30604] ? __fget_files+0x20e/0x3c0 [ 1627.991122][T30604] ksys_read+0x12a/0x250 [ 1627.991175][T30604] ? __pfx_ksys_read+0x10/0x10 [ 1627.991233][T30604] do_syscall_64+0xcd/0xf80 [ 1627.991268][T30604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.991306][T30604] RIP: 0033:0x7f8cd638e1dc [ 1627.991334][T30604] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1627.991366][T30604] RSP: 002b:00007f8cd724f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1627.991404][T30604] RAX: ffffffffffffffda RBX: 00007f8cd65e5fa0 RCX: 00007f8cd638e1dc [ 1627.991425][T30604] RDX: 000000000000000f RSI: 00007f8cd724f0a0 RDI: 0000000000000003 [ 1627.991461][T30604] RBP: 00007f8cd724f090 R08: 0000000000000000 R09: 0000000000000000 [ 1627.991480][T30604] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1627.991500][T30604] R13: 00007f8cd65e6038 R14: 00007f8cd65e5fa0 R15: 00007ffd45645f58 [ 1627.991544][T30604] [ 1629.954058][T30646] openvswitch: netlink: Flow key attribute not present in set flow. [ 1632.084685][T30667] binder: 30666:30667 ioctl 4018620d ffffffffffffffff returned -22 [ 1632.413045][T30674] __vm_enough_memory: pid: 30674, comm: syz.5.5296, bytes: 4398046511104 not enough memory for the allocation [ 1632.959184][T30685] __vm_enough_memory: pid: 30685, comm: syz.5.5296, bytes: 4398046511104 not enough memory for the allocation [ 1633.616939][T30690] openvswitch: netlink: Flow key attribute not present in set flow. [ 1634.904220][T30693] netlink: 342 bytes leftover after parsing attributes in process `syz.7.5301'. [ 1635.549224][T30704] zswap: compressor 000 not available [ 1636.878720][T30729] zswap: compressor not available [ 1638.427901][T30761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5313'. [ 1639.997468][T30791] FAULT_INJECTION: forcing a failure. [ 1639.997468][T30791] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.010225][T30791] CPU: 1 UID: 0 PID: 30791 Comm: syz.6.5321 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1640.010277][T30791] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1640.010290][T30791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1640.010311][T30791] Call Trace: [ 1640.010322][T30791] [ 1640.010335][T30791] dump_stack_lvl+0x16c/0x1f0 [ 1640.010394][T30791] should_fail_ex+0x512/0x640 [ 1640.010433][T30791] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1640.010486][T30791] should_failslab+0xc2/0x120 [ 1640.010538][T30791] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1640.010586][T30791] ? fib_rules_register+0x30/0x500 [ 1640.010645][T30791] ? kmemdup_noprof+0x29/0x60 [ 1640.010681][T30791] kmemdup_noprof+0x29/0x60 [ 1640.010721][T30791] fib_rules_register+0x30/0x500 [ 1640.010775][T30791] fib4_rules_init+0x1f/0x1c0 [ 1640.010821][T30791] fib_net_init+0x1dc/0x3f0 [ 1640.010853][T30791] ? __pfx___register_sysctl_table+0x10/0x10 [ 1640.010899][T30791] ? __pfx_fib_net_init+0x10/0x10 [ 1640.010932][T30791] ? lockdep_init_map_type+0x5c/0x270 [ 1640.010967][T30791] ? do_init_timer+0xc9/0x110 [ 1640.011022][T30791] ? devinet_init_net+0x5c2/0x910 [ 1640.011064][T30791] ? __pfx_fib_net_init+0x10/0x10 [ 1640.011095][T30791] ops_init+0x1e2/0x5f0 [ 1640.011156][T30791] setup_net+0x11d/0x3a0 [ 1640.011208][T30791] ? __pfx_setup_net+0x10/0x10 [ 1640.011255][T30791] ? lockdep_init_map_type+0x5c/0x270 [ 1640.011290][T30791] ? mutex_init_lockep+0x110/0x150 [ 1640.011331][T30791] copy_net_ns+0x351/0x7c0 [ 1640.011366][T30791] create_new_namespaces+0x3ea/0xab0 [ 1640.011423][T30791] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1640.011472][T30791] ksys_unshare+0x45b/0xa40 [ 1640.011506][T30791] ? __pfx_ksys_unshare+0x10/0x10 [ 1640.011560][T30791] ? xfd_validate_state+0x61/0x180 [ 1640.011601][T30791] __x64_sys_unshare+0x31/0x40 [ 1640.011632][T30791] do_syscall_64+0xcd/0xf80 [ 1640.011667][T30791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.011702][T30791] RIP: 0033:0x7f8594f8f7c9 [ 1640.011729][T30791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1640.011763][T30791] RSP: 002b:00007f8595d49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1640.011794][T30791] RAX: ffffffffffffffda RBX: 00007f85951e6360 RCX: 00007f8594f8f7c9 [ 1640.011816][T30791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1640.011837][T30791] RBP: 00007f8595013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1640.011858][T30791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1640.011878][T30791] R13: 00007f85951e63f8 R14: 00007f85951e6360 R15: 00007ffe16a7d998 [ 1640.011923][T30791] [ 1642.197165][T30822] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1642.267165][T30822] ovs_?: entered promiscuous mode [ 1642.653114][T26796] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1642.768825][T26796] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1642.877708][T30836] netlink: 'syz.6.5332': attribute type 33 has an invalid length. [ 1642.918829][T30836] netlink: 322 bytes leftover after parsing attributes in process `syz.6.5332'. [ 1643.216140][T30844] bonding: unable to delete non-existent 1 [ 1643.474789][T30844] zram: Added device: zram0 [ 1643.560004][T26796] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1643.654470][T26796] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 1644.653037][T30868] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5339'. [ 1647.760852][T30920] FAULT_INJECTION: forcing a failure. [ 1647.760852][T30920] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.784773][T30920] CPU: 0 UID: 0 PID: 30920 Comm: syz.2.5351 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1647.784827][T30920] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1647.784840][T30920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1647.784859][T30920] Call Trace: [ 1647.784870][T30920] [ 1647.784883][T30920] dump_stack_lvl+0x16c/0x1f0 [ 1647.784940][T30920] should_fail_ex+0x512/0x640 [ 1647.784978][T30920] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1647.785025][T30920] should_failslab+0xc2/0x120 [ 1647.785076][T30920] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1647.785117][T30920] ? __alloc_skb+0x156/0x410 [ 1647.785154][T30920] ? __alloc_skb+0x35d/0x410 [ 1647.785200][T30920] ? __alloc_skb+0x156/0x410 [ 1647.785236][T30920] __alloc_skb+0x156/0x410 [ 1647.785270][T30920] ? __alloc_skb+0x35d/0x410 [ 1647.785316][T30920] ? __pfx___alloc_skb+0x10/0x10 [ 1647.785358][T30920] ? netlink_autobind.isra.0+0x158/0x370 [ 1647.785419][T30920] netlink_alloc_large_skb+0x69/0x140 [ 1647.785473][T30920] netlink_sendmsg+0x698/0xdd0 [ 1647.785531][T30920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1647.785588][T30920] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1647.785631][T30920] __sys_sendto+0x4a3/0x520 [ 1647.785674][T30920] ? __pfx___sys_sendto+0x10/0x10 [ 1647.785729][T30920] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1647.785780][T30920] ? count_memcg_events+0x122/0x290 [ 1647.785851][T30920] __x64_sys_sendto+0xe0/0x1c0 [ 1647.785891][T30920] ? do_syscall_64+0x91/0xf80 [ 1647.785921][T30920] ? lockdep_hardirqs_on+0x7c/0x110 [ 1647.785951][T30920] do_syscall_64+0xcd/0xf80 [ 1647.785985][T30920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.786018][T30920] RIP: 0033:0x7f8cd639165c [ 1647.786044][T30920] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1647.786076][T30920] RSP: 002b:00007f8cd722cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1647.786107][T30920] RAX: ffffffffffffffda RBX: 00007f8cd722cfc0 RCX: 00007f8cd639165c [ 1647.786129][T30920] RDX: 000000000000001c RSI: 00007f8cd722d010 RDI: 0000000000000048 [ 1647.786149][T30920] RBP: 0000000000000000 R08: 00007f8cd722cf14 R09: 000000000000000c [ 1647.786170][T30920] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000048 [ 1647.786190][T30920] R13: 00007f8cd722cf68 R14: 00007f8cd722d010 R15: 0000000000000000 [ 1647.786233][T30920] [ 1648.140137][T26796] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1648.429006][T30929] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1649.670210][T30954] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1649.700200][T30954] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1649.723229][T30954] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1649.766630][T30954] page_type: f5(slab) [ 1649.778174][T30954] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 1649.840677][T30954] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 1649.871556][T30954] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 1649.903700][T30954] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 1649.923094][T30958] blktrace: Concurrent blktraces are not allowed on sda1 [ 1649.933088][T30954] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1649.959114][T30954] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1649.982948][T30954] page dumped because: unmovable page [ 1649.994603][T30954] page_owner tracks the page as allocated [ 1650.025983][T30954] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5209, tgid 5209 (udevadm), ts 46128682355, free_ts 37732284978 [ 1650.072920][T30954] post_alloc_hook+0x1af/0x220 [ 1650.078019][T30954] get_page_from_freelist+0xd0b/0x31a0 [ 1650.091896][T30954] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1650.098231][T30954] alloc_pages_mpol+0x1fb/0x550 [ 1650.104716][T30954] new_slab+0x2c3/0x430 [ 1650.114944][T30954] ___slab_alloc+0xe18/0x1c90 [ 1650.120942][T30954] __slab_alloc.constprop.0+0x63/0x110 [ 1650.126637][T30954] kmem_cache_alloc_lru_noprof+0x451/0x770 [ 1650.134222][T30954] alloc_inode+0xc3/0x240 [ 1650.145226][T30954] iget_locked+0x1d9/0x6d0 [ 1650.150482][T30954] kernfs_get_inode+0x46/0x470 [ 1650.155492][T30954] kernfs_iop_lookup+0x1a7/0x2d0 [ 1650.164054][T30954] __lookup_slow+0x251/0x460 [ 1650.170831][T30954] lookup_slow+0x50/0x70 [ 1650.175788][T30954] path_lookupat+0x5e9/0xc40 [ 1650.184433][T30954] filename_lookup+0x224/0x5f0 [ 1650.192012][T30954] page last free pid 1 tgid 1 stack trace: [ 1650.198161][T30954] __free_frozen_pages+0x7df/0x1170 [ 1650.206681][T30954] free_contig_range+0x183/0x4a0 [ 1650.212605][T30954] destroy_args+0xb95/0x14e0 [ 1650.217378][T30954] debug_vm_pgtable+0x2220/0x38d0 [ 1650.223376][T30954] do_one_initcall+0x123/0x680 [ 1650.228329][T30954] kernel_init_freeable+0x5c8/0x920 [ 1650.234627][T30954] kernel_init+0x1c/0x2b0 [ 1650.239512][T30954] ret_from_fork+0x983/0xb10 [ 1650.244416][T30954] ret_from_fork_asm+0x1a/0x30 [ 1650.390669][T30958] FAULT_INJECTION: forcing a failure. [ 1650.390669][T30958] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1650.438229][T30958] CPU: 1 UID: 0 PID: 30958 Comm: syz.6.5361 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1650.438284][T30958] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1650.438297][T30958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1650.438317][T30958] Call Trace: [ 1650.438328][T30958] [ 1650.438340][T30958] dump_stack_lvl+0x16c/0x1f0 [ 1650.438398][T30958] should_fail_ex+0x512/0x640 [ 1650.438441][T30958] get_futex_key+0x293/0x15f0 [ 1650.438481][T30958] ? __pfx_get_futex_key+0x10/0x10 [ 1650.438530][T30958] futex_wake+0xea/0x530 [ 1650.438578][T30958] ? __pfx_futex_wake+0x10/0x10 [ 1650.438639][T30958] do_futex+0x1e3/0x350 [ 1650.438677][T30958] ? __pfx_do_futex+0x10/0x10 [ 1650.438711][T30958] ? __might_fault+0xe3/0x190 [ 1650.438760][T30958] mm_release+0x24e/0x300 [ 1650.438805][T30958] do_exit+0x69e/0x2bd0 [ 1650.438845][T30958] ? __pfx_do_exit+0x10/0x10 [ 1650.438875][T30958] ? do_raw_spin_lock+0x12c/0x2b0 [ 1650.438912][T30958] ? find_held_lock+0x2b/0x80 [ 1650.438961][T30958] do_group_exit+0xd3/0x2a0 [ 1650.438996][T30958] get_signal+0x2671/0x26d0 [ 1650.439067][T30958] ? __pfx_get_signal+0x10/0x10 [ 1650.439116][T30958] ? do_futex+0x122/0x350 [ 1650.439155][T30958] arch_do_signal_or_restart+0x8f/0x7a0 [ 1650.439203][T30958] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1650.439259][T30958] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1650.439300][T30958] ? __pfx___x64_sys_futex+0x10/0x10 [ 1650.439346][T30958] exit_to_user_mode_loop+0x8c/0x540 [ 1650.439391][T30958] do_syscall_64+0x4ee/0xf80 [ 1650.439426][T30958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.439457][T30958] RIP: 0033:0x7f8594f8f7c9 [ 1650.439484][T30958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1650.439516][T30958] RSP: 002b:00007f8595dcd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1650.439547][T30958] RAX: fffffffffffffe00 RBX: 00007f85951e5fa8 RCX: 00007f8594f8f7c9 [ 1650.439568][T30958] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f85951e5fa8 [ 1650.439589][T30958] RBP: 00007f85951e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.439610][T30958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1650.439629][T30958] R13: 00007f85951e6038 R14: 00007ffe16a7d8b0 R15: 00007ffe16a7d998 [ 1650.439682][T30958] [ 1650.827598][T30973] netlink: 342 bytes leftover after parsing attributes in process `syz.5.5364'. [ 1651.583339][T30981] NFSD: Failed to start, no listeners configured. [ 1652.950549][T31003] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5376'. [ 1654.190347][T26796] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1654.248316][T31012] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1654.833223][T31031] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5375'. [ 1654.924508][T31035] ptrace attach of "./syz-executor exec"[21840] was attempted by "./syz-executor exec"[31035] [ 1656.453880][T31067] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5385'. [ 1656.540320][T31067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1656.564759][T31067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.616664][T31067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1656.654412][T31067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1657.571443][T31090] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 1657.772031][T31105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5395'. [ 1659.546615][T31137] ptrace attach of "./syz-executor exec"[21847] was attempted by "./syz-executor exec"[31137] [ 1660.362925][T31165] openvswitch: netlink: Key 15 has unexpected len 16 expected 4 [ 1660.544408][T31167] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1660.588962][T31167] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1660.670159][T31178] program syz.7.5410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1660.768906][T31167] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1660.792001][T31167] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1660.827792][T31167] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1660.906971][T31180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5411'. [ 1660.934439][T31180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1660.949616][T31180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.991905][T31180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.000120][ T30] audit: type=1800 audit(4294967400.158:50): pid=31186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5412" name="nullb0" dev="tmpfs" ino=707 res=0 errno=0 [ 1661.030742][T31180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.269539][T31189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5414'. [ 1662.466245][T26796] Bluetooth: hci0: command 0x0c1a tx timeout [ 1662.783620][T28590] Bluetooth: hci5: command 0x0c1a tx timeout [ 1662.789919][T26796] Bluetooth: hci2: command 0x0406 tx timeout [ 1662.862945][T26796] Bluetooth: hci3: command 0x0406 tx timeout [ 1662.875925][T31229] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1663.579915][T31244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5427'. [ 1664.534278][T26796] Bluetooth: hci0: command 0x0c1a tx timeout [ 1665.488026][T31281] netlink: 138 bytes leftover after parsing attributes in process `syz.5.5438'. [ 1667.205584][T31314] FAULT_INJECTION: forcing a failure. [ 1667.205584][T31314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1667.266010][T31314] CPU: 0 UID: 0 PID: 31314 Comm: syz.6.5444 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1667.266067][T31314] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1667.266090][T31314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1667.266111][T31314] Call Trace: [ 1667.266122][T31314] [ 1667.266136][T31314] dump_stack_lvl+0x16c/0x1f0 [ 1667.266195][T31314] should_fail_ex+0x512/0x640 [ 1667.266242][T31314] _copy_to_iter+0x29f/0x1710 [ 1667.266284][T31314] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 1667.266327][T31314] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1667.266373][T31314] ? __pfx__copy_to_iter+0x10/0x10 [ 1667.266417][T31314] ? __skb_recv_datagram+0x1b2/0x220 [ 1667.266467][T31314] simple_copy_to_iter+0x46/0x90 [ 1667.266506][T31314] __skb_datagram_iter+0x129/0x900 [ 1667.266543][T31314] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1667.266584][T31314] ? skb_recv_datagram+0x88/0xc0 [ 1667.266630][T31314] skb_copy_datagram_iter+0xa6/0x220 [ 1667.266672][T31314] netlink_recvmsg+0x27e/0xa90 [ 1667.266725][T31314] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1667.266773][T31314] ? __fget_files+0x204/0x3c0 [ 1667.266824][T31314] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1667.266867][T31314] sock_recvmsg+0x1f9/0x250 [ 1667.266901][T31314] __sys_recvfrom+0x203/0x310 [ 1667.266946][T31314] ? __pfx___sys_recvfrom+0x10/0x10 [ 1667.267002][T31314] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1667.267049][T31314] ? count_memcg_events+0x122/0x290 [ 1667.267124][T31314] ? xfd_validate_state+0x61/0x180 [ 1667.267164][T31314] __x64_sys_recvfrom+0xe0/0x1c0 [ 1667.267204][T31314] ? do_syscall_64+0x91/0xf80 [ 1667.267234][T31314] ? lockdep_hardirqs_on+0x7c/0x110 [ 1667.267262][T31314] do_syscall_64+0xcd/0xf80 [ 1667.267295][T31314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.267324][T31314] RIP: 0033:0x7f8594f91594 [ 1667.267348][T31314] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 1667.267382][T31314] RSP: 002b:00007f8595dcbed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1667.267414][T31314] RAX: ffffffffffffffda RBX: 00007f8595dcbfc0 RCX: 00007f8594f91594 [ 1667.267437][T31314] RDX: 0000000000001000 RSI: 00007f8595dcc010 RDI: 0000000000000006 [ 1667.267458][T31314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1667.267478][T31314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1667.267498][T31314] R13: 00007f8595dcbf68 R14: 00007f8595dcc010 R15: 0000000000000000 [ 1667.267541][T31314] [ 1668.170978][T31328] FAULT_INJECTION: forcing a failure. [ 1668.170978][T31328] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.191362][T31328] CPU: 0 UID: 0 PID: 31328 Comm: syz.6.5448 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1668.191414][T31328] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1668.191427][T31328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1668.191446][T31328] Call Trace: [ 1668.191458][T31328] [ 1668.191469][T31328] dump_stack_lvl+0x16c/0x1f0 [ 1668.191527][T31328] should_fail_ex+0x512/0x640 [ 1668.191564][T31328] ? __kvmalloc_node_noprof+0x129/0xa40 [ 1668.191614][T31328] should_failslab+0xc2/0x120 [ 1668.191663][T31328] __kvmalloc_node_noprof+0x14a/0xa40 [ 1668.191712][T31328] ? seq_read_iter+0x830/0x12d0 [ 1668.191764][T31328] ? seq_read_iter+0x830/0x12d0 [ 1668.191805][T31328] seq_read_iter+0x830/0x12d0 [ 1668.191863][T31328] kernfs_fop_read_iter+0x46c/0x610 [ 1668.191914][T31328] ? rw_verify_area+0xcf/0x6c0 [ 1668.191968][T31328] vfs_read+0x8bf/0xcf0 [ 1668.192019][T31328] ? __pfx_vfs_read+0x10/0x10 [ 1668.192095][T31328] ksys_read+0x12a/0x250 [ 1668.192140][T31328] ? __pfx_ksys_read+0x10/0x10 [ 1668.192199][T31328] do_syscall_64+0xcd/0xf80 [ 1668.192235][T31328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.192269][T31328] RIP: 0033:0x7f8594f8f7c9 [ 1668.192294][T31328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1668.192326][T31328] RSP: 002b:00007f8595dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1668.192356][T31328] RAX: ffffffffffffffda RBX: 00007f85951e5fa0 RCX: 00007f8594f8f7c9 [ 1668.192378][T31328] RDX: 000000000000100a RSI: 0000200000001100 RDI: 0000000000000003 [ 1668.192399][T31328] RBP: 00007f8595dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 1668.192418][T31328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1668.192438][T31328] R13: 00007f85951e6038 R14: 00007f85951e5fa0 R15: 00007ffe16a7d998 [ 1668.192488][T31328] [ 1668.563799][T31331] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1668.570025][T31331] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1668.587249][T31331] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1668.594207][T31331] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1668.607372][T31336] FAULT_INJECTION: forcing a failure. [ 1668.607372][T31336] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.625374][T31336] CPU: 1 UID: 0 PID: 31336 Comm: syz.2.5450 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1668.625431][T31336] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1668.625444][T31336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1668.625463][T31336] Call Trace: [ 1668.625474][T31336] [ 1668.625488][T31336] dump_stack_lvl+0x16c/0x1f0 [ 1668.625549][T31336] should_fail_ex+0x512/0x640 [ 1668.625588][T31336] ? __kmalloc_noprof+0xca/0x910 [ 1668.625631][T31336] should_failslab+0xc2/0x120 [ 1668.625684][T31336] __kmalloc_noprof+0xeb/0x910 [ 1668.625720][T31336] ? rcu_is_watching+0x12/0xc0 [ 1668.625765][T31336] ? eeprom_prepare_data+0x1ce/0x920 [ 1668.625823][T31336] ? eeprom_prepare_data+0x1ce/0x920 [ 1668.625872][T31336] eeprom_prepare_data+0x1ce/0x920 [ 1668.625932][T31336] ? __pfx_eeprom_prepare_data+0x10/0x10 [ 1668.625984][T31336] ? __pfx___mutex_lock+0x10/0x10 [ 1668.626021][T31336] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1668.626074][T31336] ? skb_put+0x138/0x1b0 [ 1668.626128][T31336] ethnl_default_dump_one+0x29b/0xa20 [ 1668.626184][T31336] ethnl_default_dumpit+0x28d/0x6c0 [ 1668.626250][T31336] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1668.626312][T31336] genl_dumpit+0x125/0x230 [ 1668.626348][T31336] netlink_dump+0x539/0xd30 [ 1668.626403][T31336] ? __pfx_netlink_dump+0x10/0x10 [ 1668.626450][T31336] ? __pfx_eeprom_parse_request+0x10/0x10 [ 1668.626521][T31336] ? __pfx_ethnl_default_start+0x10/0x10 [ 1668.626567][T31336] ? genl_start+0x67f/0x980 [ 1668.626606][T31336] __netlink_dump_start+0x6d6/0x990 [ 1668.626664][T31336] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1668.626705][T31336] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1668.626741][T31336] ? consume_skb+0xcc/0x100 [ 1668.626801][T31336] ? __pfx_genl_start+0x10/0x10 [ 1668.626832][T31336] ? __pfx_genl_dumpit+0x10/0x10 [ 1668.626864][T31336] ? __pfx_genl_done+0x10/0x10 [ 1668.626900][T31336] ? bpf_lsm_capable+0x9/0x10 [ 1668.626944][T31336] ? security_capable+0x7e/0x260 [ 1668.626979][T31336] ? ns_capable+0xd7/0x110 [ 1668.627025][T31336] genl_rcv_msg+0x46e/0x800 [ 1668.627065][T31336] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1668.627100][T31336] ? __pfx_ethnl_default_start+0x10/0x10 [ 1668.627146][T31336] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1668.627193][T31336] ? __pfx_ethnl_default_done+0x10/0x10 [ 1668.627266][T31336] netlink_rcv_skb+0x158/0x420 [ 1668.627320][T31336] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1668.627359][T31336] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1668.627431][T31336] ? netlink_deliver_tap+0x1ae/0xd30 [ 1668.627488][T31336] genl_rcv+0x28/0x40 [ 1668.627519][T31336] netlink_unicast+0x5aa/0x870 [ 1668.627577][T31336] ? __pfx_netlink_unicast+0x10/0x10 [ 1668.627646][T31336] netlink_sendmsg+0x8c8/0xdd0 [ 1668.627707][T31336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1668.627766][T31336] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1668.627807][T31336] ____sys_sendmsg+0xa5d/0xc30 [ 1668.627842][T31336] ? copy_msghdr_from_user+0x10a/0x160 [ 1668.627887][T31336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1668.627915][T31336] ? preempt_schedule_thunk+0x16/0x30 [ 1668.627955][T31336] ? try_to_wake_up+0xa67/0x1860 [ 1668.628003][T31336] ___sys_sendmsg+0x134/0x1d0 [ 1668.628050][T31336] ? __pfx____sys_sendmsg+0x10/0x10 [ 1668.628092][T31336] ? futex_private_hash_put+0x160/0x1b0 [ 1668.628165][T31336] __sys_sendmsg+0x16d/0x220 [ 1668.628198][T31336] ? __pfx___sys_sendmsg+0x10/0x10 [ 1668.628246][T31336] ? __x64_sys_futex+0x1e0/0x4c0 [ 1668.628293][T31336] do_syscall_64+0xcd/0xf80 [ 1668.628318][T31336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.628343][T31336] RIP: 0033:0x7f8cd638f7c9 [ 1668.628363][T31336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1668.628386][T31336] RSP: 002b:00007f8cd724f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1668.628408][T31336] RAX: ffffffffffffffda RBX: 00007f8cd65e5fa0 RCX: 00007f8cd638f7c9 [ 1668.628424][T31336] RDX: 0000000004004840 RSI: 0000200000001780 RDI: 0000000000000009 [ 1668.628438][T31336] RBP: 00007f8cd6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1668.628453][T31336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1668.628467][T31336] R13: 00007f8cd65e6038 R14: 00007f8cd65e5fa0 R15: 00007ffd45645f58 [ 1668.628498][T31336] [ 1669.545319][T31352] Invalid ELF header magic: != ELF [ 1670.583629][T28590] Bluetooth: hci5: command 0x0c1a tx timeout [ 1670.589998][T28590] Bluetooth: hci0: command 0x0c1a tx timeout [ 1670.596378][T26796] Bluetooth: hci2: command 0x0406 tx timeout [ 1670.662481][T28590] Bluetooth: hci3: command 0x0406 tx timeout [ 1671.117530][T31370] FAULT_INJECTION: forcing a failure. [ 1671.117530][T31370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1671.176803][T31370] CPU: 1 UID: 0 PID: 31370 Comm: syz.6.5457 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1671.176843][T31370] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1671.176852][T31370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1671.176867][T31370] Call Trace: [ 1671.176875][T31370] [ 1671.176884][T31370] dump_stack_lvl+0x16c/0x1f0 [ 1671.176926][T31370] should_fail_ex+0x512/0x640 [ 1671.176958][T31370] _copy_to_iter+0x29f/0x1710 [ 1671.176987][T31370] ? __mutex_unlock_slowpath+0x161/0x790 [ 1671.177014][T31370] ? __pfx__copy_to_iter+0x10/0x10 [ 1671.177041][T31370] ? kernfs_seq_stop+0xcd/0x120 [ 1671.177079][T31370] ? kernfs_put_active+0x86/0xe0 [ 1671.177112][T31370] seq_read_iter+0xd02/0x12d0 [ 1671.177159][T31370] kernfs_fop_read_iter+0x46c/0x610 [ 1671.177196][T31370] ? rw_verify_area+0xcf/0x6c0 [ 1671.177230][T31370] vfs_read+0x8bf/0xcf0 [ 1671.177267][T31370] ? __pfx_vfs_read+0x10/0x10 [ 1671.177319][T31370] ksys_read+0x12a/0x250 [ 1671.177351][T31370] ? __pfx_ksys_read+0x10/0x10 [ 1671.177392][T31370] do_syscall_64+0xcd/0xf80 [ 1671.177416][T31370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.177440][T31370] RIP: 0033:0x7f8594f8f7c9 [ 1671.177458][T31370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1671.177481][T31370] RSP: 002b:00007f8595dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1671.177502][T31370] RAX: ffffffffffffffda RBX: 00007f85951e5fa0 RCX: 00007f8594f8f7c9 [ 1671.177518][T31370] RDX: 000000000000100a RSI: 0000200000001100 RDI: 0000000000000003 [ 1671.177532][T31370] RBP: 00007f8595dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.177547][T31370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1671.177560][T31370] R13: 00007f85951e6038 R14: 00007f85951e5fa0 R15: 00007ffe16a7d998 [ 1671.177591][T31370] [ 1672.090376][T31384] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1672.338864][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1672.346103][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.357255][ T1300] ------------[ cut here ]------------ [ 1672.363676][ T1300] WARNING: ./include/linux/skbuff.h:3227 at lowpan_xmit+0xea9/0x1210, CPU#1: aoe_tx0/1300 [ 1672.373852][ T1300] Modules linked in: [ 1672.378667][ T1300] CPU: 1 UID: 0 PID: 1300 Comm: aoe_tx0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1672.390543][ T1300] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1672.396009][ T1300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1672.406151][ T1300] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 1672.411549][ T1300] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 66 32 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 58 32 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 4a 32 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 1672.431486][ T1300] RSP: 0018:ffffc9000481f860 EFLAGS: 00010293 [ 1672.437658][ T1300] RAX: 0000000000000000 RBX: ffffc9000481f8e0 RCX: ffffffff8b2f22ac [ 1672.445719][ T1300] RDX: ffff888028640000 RSI: ffffffff8b2f2c28 RDI: 0000000000000003 [ 1672.453859][ T1300] RBP: ffffc9000481f9f0 R08: 0000000000000003 R09: 000000000000ffff [ 1672.461889][ T1300] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88804f71cab6 [ 1672.469993][ T1300] R13: 000000000000ffff R14: ffff888142f28d90 R15: ffff88804f71ca00 [ 1672.478165][ T1300] FS: 0000000000000000(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 1672.487220][ T1300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1672.494078][ T1300] CR2: 0000001b2ed18ff8 CR3: 0000000029b54000 CR4: 00000000003526f0 [ 1672.502112][ T1300] Call Trace: [ 1672.505514][ T1300] [ 1672.508512][ T1300] ? __pfx_lowpan_xmit+0x10/0x10 [ 1672.513621][ T1300] ? lockdep_unlock+0x64/0xd0 [ 1672.518379][ T1300] ? __lock_acquire+0x12c2/0x2890 [ 1672.523519][ T1300] ? __pfx_netif_skb_features+0x10/0x10 [ 1672.529146][ T1300] ? dev_hard_start_xmit+0x97/0x6e0 [ 1672.534463][ T1300] dev_hard_start_xmit+0x97/0x6e0 [ 1672.539693][ T1300] __dev_queue_xmit+0x6d7/0x46c0 [ 1672.544780][ T1300] ? rcu_is_watching+0x12/0xc0 [ 1672.549636][ T1300] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1672.555592][ T1300] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1672.561052][ T1300] ? __lock_acquire+0x436/0x2890 [ 1672.566119][ T1300] ? ref_tracker_free+0x37c/0x830 [ 1672.571229][ T1300] ? do_raw_spin_lock+0x12c/0x2b0 [ 1672.576360][ T1300] ? find_held_lock+0x2b/0x80 [ 1672.581108][ T1300] ? skb_dequeue+0x126/0x180 [ 1672.585789][ T1300] ? find_held_lock+0x2b/0x80 [ 1672.590551][ T1300] ? rcu_is_watching+0x12/0xc0 [ 1672.595460][ T1300] tx+0xcc/0x190 [ 1672.599076][ T1300] ? __pfx_tx+0x10/0x10 [ 1672.603325][ T1300] kthread+0x1e4/0x3e0 [ 1672.607483][ T1300] ? find_held_lock+0x2b/0x80 [ 1672.612278][ T1300] ? __pfx_kthread+0x10/0x10 [ 1672.616973][ T1300] ? __pfx_default_wake_function+0x10/0x10 [ 1672.622932][ T1300] ? lockdep_hardirqs_on+0x7c/0x110 [ 1672.628203][ T1300] ? __kthread_parkme+0x19e/0x250 [ 1672.633344][ T1300] ? __pfx_kthread+0x10/0x10 [ 1672.638015][ T1300] kthread+0x3c5/0x780 [ 1672.642198][ T1300] ? __pfx_kthread+0x10/0x10 [ 1672.646855][ T1300] ? rcu_is_watching+0x12/0xc0 [ 1672.651704][ T1300] ? __pfx_kthread+0x10/0x10 [ 1672.656522][ T1300] ret_from_fork+0x983/0xb10 [ 1672.661358][ T1300] ? __pfx_ret_from_fork+0x10/0x10 [ 1672.666857][ T1300] ? __switch_to+0x7af/0x10d0 [ 1672.671617][ T1300] ? __pfx_kthread+0x10/0x10 [ 1672.676359][ T1300] ret_from_fork_asm+0x1a/0x30 [ 1672.681758][ T1300] [ 1672.684842][ T1300] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1672.692184][ T1300] CPU: 1 UID: 0 PID: 1300 Comm: aoe_tx0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1672.703106][ T1300] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1672.708358][ T1300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1672.718517][ T1300] Call Trace: [ 1672.722034][ T1300] [ 1672.725109][ T1300] dump_stack_lvl+0x3d/0x1f0 [ 1672.729955][ T1300] vpanic+0x640/0x6f0 [ 1672.734396][ T1300] ? lowpan_xmit+0xea9/0x1210 [ 1672.739243][ T1300] panic+0xca/0xd0 [ 1672.743101][ T1300] ? __pfx_panic+0x10/0x10 [ 1672.747590][ T1300] ? check_panic_on_warn+0x1f/0xb0 [ 1672.753032][ T1300] check_panic_on_warn+0xab/0xb0 [ 1672.758581][ T1300] __warn+0x108/0x3c0 [ 1672.762743][ T1300] __report_bug+0x2a0/0x520 [ 1672.767316][ T1300] ? lowpan_xmit+0xea9/0x1210 [ 1672.772341][ T1300] ? __pfx___report_bug+0x10/0x10 [ 1672.777667][ T1300] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1672.784071][ T1300] ? arch_stack_walk+0x94/0x100 [ 1672.788978][ T1300] ? lowpan_xmit+0xea9/0x1210 [ 1672.793713][ T1300] report_bug+0xb2/0x220 [ 1672.798190][ T1300] ? lowpan_xmit+0xea9/0x1210 [ 1672.803003][ T1300] handle_bug+0x127/0x260 [ 1672.807467][ T1300] exc_invalid_op+0x17/0x50 [ 1672.812045][ T1300] asm_exc_invalid_op+0x1a/0x20 [ 1672.817025][ T1300] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 1672.822355][ T1300] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 66 32 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 58 32 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 4a 32 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 1672.842020][ T1300] RSP: 0018:ffffc9000481f860 EFLAGS: 00010293 [ 1672.848122][ T1300] RAX: 0000000000000000 RBX: ffffc9000481f8e0 RCX: ffffffff8b2f22ac [ 1672.856391][ T1300] RDX: ffff888028640000 RSI: ffffffff8b2f2c28 RDI: 0000000000000003 [ 1672.864395][ T1300] RBP: ffffc9000481f9f0 R08: 0000000000000003 R09: 000000000000ffff [ 1672.872405][ T1300] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88804f71cab6 [ 1672.880426][ T1300] R13: 000000000000ffff R14: ffff888142f28d90 R15: ffff88804f71ca00 [ 1672.888446][ T1300] ? lowpan_xmit+0x52c/0x1210 [ 1672.893788][ T1300] ? lowpan_xmit+0xea8/0x1210 [ 1672.898561][ T1300] ? __pfx_lowpan_xmit+0x10/0x10 [ 1672.903547][ T1300] ? lockdep_unlock+0x64/0xd0 [ 1672.908270][ T1300] ? __lock_acquire+0x12c2/0x2890 [ 1672.913344][ T1300] ? __pfx_netif_skb_features+0x10/0x10 [ 1672.919040][ T1300] ? dev_hard_start_xmit+0x97/0x6e0 [ 1672.924277][ T1300] dev_hard_start_xmit+0x97/0x6e0 [ 1672.929350][ T1300] __dev_queue_xmit+0x6d7/0x46c0 [ 1672.934348][ T1300] ? rcu_is_watching+0x12/0xc0 [ 1672.939160][ T1300] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1672.945059][ T1300] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1672.950486][ T1300] ? __lock_acquire+0x436/0x2890 [ 1672.955472][ T1300] ? ref_tracker_free+0x37c/0x830 [ 1672.960548][ T1300] ? do_raw_spin_lock+0x12c/0x2b0 [ 1672.965616][ T1300] ? find_held_lock+0x2b/0x80 [ 1672.970434][ T1300] ? skb_dequeue+0x126/0x180 [ 1672.975069][ T1300] ? find_held_lock+0x2b/0x80 [ 1672.979794][ T1300] ? rcu_is_watching+0x12/0xc0 [ 1672.984786][ T1300] tx+0xcc/0x190 [ 1672.988398][ T1300] ? __pfx_tx+0x10/0x10 [ 1672.992733][ T1300] kthread+0x1e4/0x3e0 [ 1672.997233][ T1300] ? find_held_lock+0x2b/0x80 [ 1673.002067][ T1300] ? __pfx_kthread+0x10/0x10 [ 1673.006711][ T1300] ? __pfx_default_wake_function+0x10/0x10 [ 1673.012657][ T1300] ? lockdep_hardirqs_on+0x7c/0x110 [ 1673.017898][ T1300] ? __kthread_parkme+0x19e/0x250 [ 1673.022970][ T1300] ? __pfx_kthread+0x10/0x10 [ 1673.027613][ T1300] kthread+0x3c5/0x780 [ 1673.031727][ T1300] ? __pfx_kthread+0x10/0x10 [ 1673.036359][ T1300] ? rcu_is_watching+0x12/0xc0 [ 1673.041173][ T1300] ? __pfx_kthread+0x10/0x10 [ 1673.045892][ T1300] ret_from_fork+0x983/0xb10 [ 1673.050528][ T1300] ? __pfx_ret_from_fork+0x10/0x10 [ 1673.055771][ T1300] ? __switch_to+0x7af/0x10d0 [ 1673.060497][ T1300] ? __pfx_kthread+0x10/0x10 [ 1673.065132][ T1300] ret_from_fork_asm+0x1a/0x30 [ 1673.070051][ T1300] [ 1673.073246][ T1300] Kernel Offset: disabled [ 1673.077613][ T1300] Rebooting in 86400 seconds..