last executing test programs: 5m9.88119584s ago: executing program 0 (id=1203): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x37, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x600, 0x8, 0x7, 0x0, 0x7, 0x8, 0x5, {0x3ff, 0x7}, 0xfffffffffffffffa, 0xa5, 0xa, 0x13c, 0x0, 0xc3, 0x1000, 0x800000000000007, 0x2, 0x90, 0xfffffff5}) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) write$auto(r1, 0x0, 0x100000a3d9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x600, 0x8, 0x7, 0x0, 0x7, 0x8, 0x5, {0x3ff, 0x7}, 0xfffffffffffffffa, 0xa5, 0xa, 0x13c, 0x0, 0xc3, 0x1000, 0x800000000000007, 0x1, 0x90, 0xfffffff5}) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x531300, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)='4', 0x1) unshare$auto(0x40000080) r3 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto(r3, 0x8982, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 5m7.592178661s ago: executing program 0 (id=1212): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x4000, 0x2000000000002) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0x33, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open$auto(&(0x7f00000004c0)='\\*)A\x008\x92\xa6\x18?5\xae\x9eD/\xcb\x8f\xae\xc86\x9e\xf5h4\x14\x1c\x82s|?\n\xf0GZ\xad\x1ch\xd3\xdd[v\xa4\xc4\ah\x95\xb5\x06\x167\x9b%w]\xf4\x97lo\xbdQ\x14}L\xad\x1a\x97\x1fV\xb1\x01\xe6jh1\xea\xad+\xfd\xd7\xc5\\\x8c\xef\xc9\x9fd\bt\x85\x97@\xfa&\x85\xe4\x93W\xae\x9f\xe1\x0f\xd7\xf3\x97>\xea55f\xbb\x1b\x1a\x8eA|-\xaaZ\xa0\x00\x00\x00\x00\x00\x00\x11\xe3\xe7w\xbe\xeen\x8a\x12\xda\xae\xfe\r|\x8f\xd1\xa0\xb64\x86\x14\x9c,!\x8a\xd9\xa7\xc5\x12Y\a\xe7^,\xc5+\xf0\xb9_vD\xffr\nz\xd9>\x1a.\f\x1d\x81\x8f\x84\xa89\x92\xe4\x1en\xe9\xa0\rV3f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc&\xcd\xffBz\x1f/\xd6\xa0\xed\xadU\x85H&\x92\xae\xfa\x1et8\xf3j\"\xe1\x9cn\x97\x90)Tq\xd5\xdc\xc8\xf0j{}U\xdf\xe6W\x9a\x905\xc9\xb6\x1b\x9a\xa2%\xc6\xe1\xd7\xdb\xe0\x93\xabJ\"~\xbb\xa2|A\xe1\xae\x90h\xf7\x15a@\x89\xa9$\xcbyR\x06L\x82\xbb\xce\xdcG\x9d*\xc5\x83\x1b\x1a\xd6 \x9f\xc8\xb9AN2\xcc#6c!i\v\xf9\"\xf11', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 5m5.41783059s ago: executing program 0 (id=1217): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = io_uring_setup$auto(0xfffffffa, 0x0) personality$auto(0x40004010410ffc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@generic={0x15, "2149382e15b04bd76b55a0da48cc"}, 0x8) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x79, 0x0, 0x8) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2101, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYRESHEX=r1], 0x2c}, 0x1, 0x0, 0x0, 0x24040010}, 0x800) io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0xb3) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) 5m4.160685176s ago: executing program 0 (id=1222): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x2) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x106) r2 = socket(0x2, 0x3, 0x0) (async) setsockopt$auto(r1, 0x6, 0xc, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) r3 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x110) read$auto_vcs_fops_vc_screen(r3, &(0x7f0000000100)=""/74, 0x4a) (async) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000000000)={@sival_int=0x10000001, @inferred=r2, 0x0, @_tid}, &(0x7f0000001200)=0x83) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(r4, r4, 0x259) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r5, 0x10f, 0x9, 0x0, 0x14) (async, rerun: 32) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (rerun: 32) recvmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x6}, 0x1000}, 0xffffffff, 0x4, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) (async) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x8000000000000c4}, 0x1, 0x0, 0x0, 0x96a0}, 0x7}, 0x800, 0xfffffffc) (async, rerun: 32) fsetxattr$auto(r0, &(0x7f00000000c0)='*){\x85,\x00', &(0x7f0000000180), 0x8, 0x0) (async, rerun: 32) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x5, 0x2) (async) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) 5m3.041328227s ago: executing program 0 (id=1229): mmap$auto(0x2, 0x1, 0x80000000df, 0x16, 0x401, 0x8000) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x290040, 0x18c) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x600000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty55\x00', 0x2, 0x0) ioctl$auto_FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) move_pages$auto(0x0, 0x8000000000005, 0x0, 0x0, 0x0, 0x2) (async) sendmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0x3}, 0x1000000000027, 0x0, 0x1, 0xd}, 0x800}, 0x4, 0x4008) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) (async) bind$auto(r1, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x67) r3 = getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101181, 0x0) (async) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x9, 0x0, 0x8, 0x7ff}, 0x800}, 0xffffffff, 0x5, 0x0) (async) setsockopt$auto(r2, 0x29, 0x7b9, 0x0, 0x567) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x16a41, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptywe\x00', 0x202800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty20\x00', 0xea1, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) socket(0x23, 0x80805, 0x0) (async) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0) ioctl$auto_BLKRRPART(r6, 0x125f, 0x0) 4m48.023828259s ago: executing program 32 (id=1229): mmap$auto(0x2, 0x1, 0x80000000df, 0x16, 0x401, 0x8000) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x290040, 0x18c) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x600000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty55\x00', 0x2, 0x0) ioctl$auto_FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) move_pages$auto(0x0, 0x8000000000005, 0x0, 0x0, 0x0, 0x2) (async) sendmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0x3}, 0x1000000000027, 0x0, 0x1, 0xd}, 0x800}, 0x4, 0x4008) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) (async) bind$auto(r1, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x67) r3 = getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101181, 0x0) (async) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x9, 0x0, 0x8, 0x7ff}, 0x800}, 0xffffffff, 0x5, 0x0) (async) setsockopt$auto(r2, 0x29, 0x7b9, 0x0, 0x567) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x16a41, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptywe\x00', 0x202800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty20\x00', 0xea1, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) socket(0x23, 0x80805, 0x0) (async) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0) ioctl$auto_BLKRRPART(r6, 0x125f, 0x0) 3m50.054027054s ago: executing program 3 (id=1480): setreuid$auto(0x7, 0x806) r0 = getpgid(0x0) prlimit64$auto(r0, 0xa3d, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x98082, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xc040aed4, r1) 3m49.873709239s ago: executing program 3 (id=1481): madvise$auto(0x108000, 0x800032, 0x4) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fb\x00', 0x101000, 0x0) preadv$auto(r0, &(0x7f00000002c0)={0x0, 0x8010000}, 0x5, 0xfb, 0x8100000001) mmap$auto(0x9, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/7/affinity_hint\x00', 0x28000, 0x0) dup3$auto(r1, r1, 0x400) pread64$auto(r1, 0x0, 0x800003, 0x270) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0x3, &(0x7f0000000040)={0x9, 0x9, 0x7ff, 0x4, 0xff, 0x3, r0, [0x3, 0x400, 0x64b0], {0x9445, 0x5, 0xf939b1fd, 0xb, 0x3, 0x613, 0x0, 0x7, 0xa4a4}, {0x6, 0x864, 0x3ff, 0x400, 0x8, 0x9, 0xc, 0x3e2, 0x3}}) chmod$auto(0x0, 0x116) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r2, 0x0, 0x39b8) 3m49.631389134s ago: executing program 3 (id=1483): mmap$auto(0x0, 0x400008, 0x3a, 0x200000001009b72, 0x2, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) linkat$auto(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) fsetxattr$auto(r0, &(0x7f0000000000)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9/@\x81\x15\xceA\x87T\xb3\xcf\xfc\xc7;*\xe1\tO\xec\rG; k\xa7i\x95-\x04}=\x11j\xfb\xb2\xe06\xd6)\xfdW\xc7W\x93C\xad\xc9\xc3\xa0-Y\xa1\x9f\x1c1\x8b/\xda\xb1P:3\nG\x82.ya@mi\x8aH6\xd0\x1d\f\xbd\xbeQ\xf4\x8a.\xb6\xd2', 0x0, 0x7bf, 0x3) 3m49.282219091s ago: executing program 3 (id=1485): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/threads-max\x00', 0x20202, 0x0) sendfile$auto(r0, r1, 0x0, 0x4) lseek$auto(r0, 0x7fffffffffffffff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x220, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_SAR_SPEC={0x1fc, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3ff}, @NL80211_SAR_ATTR_SPECS={0x12c, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xc3}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffff1b}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80ef}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2fb}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5adf5c0a}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5b0}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80000001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x81d6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffbe3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}]}, @NL80211_SAR_ATTR_SPECS={0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x800}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1206}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x101}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xcc7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x200}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x58}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}]}]}]}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc}]}, 0x220}, 0x1, 0x0, 0x0, 0x90}, 0x40000) 3m48.961369227s ago: executing program 3 (id=1487): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x7f, 0x0, 0x0, 0x504}, 0x1}, 0x2, 0x0) read$auto(r0, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 3m48.696513356s ago: executing program 3 (id=1489): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon8\x00', 0x881, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x11, 0x3, 0x2) getsockopt$auto(r1, 0x107, 0xf, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), r2) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000400)={0x2c, r3, 0x5478eaaa3686070b, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004805}, 0x20004884) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) ioctl$auto(0x3, 0x5402, r4) ioctl$auto_MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0, 0x4}) 3m32.942277682s ago: executing program 33 (id=1489): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon8\x00', 0x881, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x11, 0x3, 0x2) getsockopt$auto(r1, 0x107, 0xf, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), r2) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000400)={0x2c, r3, 0x5478eaaa3686070b, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004805}, 0x20004884) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) ioctl$auto(0x3, 0x5402, r4) ioctl$auto_MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0, 0x4}) 25.869025099s ago: executing program 5 (id=2141): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = getegid() setfsgid$auto(r1) fsconfig$auto_FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='.%\x00', &(0x7f0000000040)="5a1ddba496026b9ac237611d2462fee574176ccc2034b8507bd177e32c4af05c58b23e09793791f3619306243c41fef5f6d6", r1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8300, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x4c, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback={0x700000000000000}}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000884}, 0xc800) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1000, 0x47, 0x5, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x10, 0xff, 0x2, 0x3]}, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000300)={0xf8000000, 0x7, 0xa6, 0x800000e, 0x9, "938ea2d173ab8e40fe6f763339cb35e64d09000000000000009e26168eeb6c1e333da4c61f57ff1d133fc67c2e1d00"}) 24.846901845s ago: executing program 5 (id=2145): keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0x80, 0x9, 0xda3, 0x6) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0x185, 0x8, 0x3, 0x0) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0x2, 0x58, 0x81, 0x7) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0xf, 0x1, 0x6, 0x83) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0x9, 0x4647, 0x80000001, 0x5) r0 = signalfd$auto(0xffffffffffffffff, &(0x7f0000000000)={0xe727}, 0x5) getsockopt$auto_SO_ERROR(r0, 0x5, 0x4, &(0x7f0000000040)='$-/[-^-*]\\\\\x00', &(0x7f0000000080)=0x3) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0x4, 0x8000000000000000, 0x3, 0x703e) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0xc000000000000, 0x100000000, 0xc, 0x3) r1 = bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f00000000c0)=@enable_stats={0x2}, 0x800) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0x21a33f8d, 0x5, 0x80000001, 0x7) r2 = getsid$auto(0x0) r3 = prctl$auto(0x9, 0x101, r2, 0x1ff, 0xd1dd) writev$auto(r1, &(0x7f0000000280)={&(0x7f0000000180)="6a95114f5fea1fad5bf996ce75f05adc2333fd6927ed9dd7b99d0b64e574df87abd9dd628d7055fbd84744c18732280f7166bc0e36de7098e17259139ecedf9bcd8ed8227d0f69590916a480132667b8a7534cca3dffc5bc181ea61c14210542014ca009b65ca648ba06a2667ebc0893b02eb411540a9f6054e396c503da8a8905c315fb45756fd9503ba8b4c3f607d9b11f3aae15b77c56086de172fedd7ce7434a41498d97c805b532152d31a27e7dc0bf2746ddb069656c5493bb3acb5a3a8dd7ac32489a8357", 0xf14}, 0x7) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0x1, 0x800, 0xf, 0xb16c) setsockopt$auto_SO_LINGER(r0, 0x1, 0xd, &(0x7f00000002c0)='.\x00', 0x1) ioctl$auto_MEMREADOOB(r1, 0xc0104d04, &(0x7f0000000340)={0xa, 0x3, &(0x7f0000000300)='\x00'}) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0xc77e, 0x5, 0x8, 0x9) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0x3, 0x8, 0x2, 0x464) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0x7, 0x8, 0x9, 0xfa2) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0x5, 0x8, 0x4, 0x1) fcntl$auto_F_CREATED_QUERY(r0, 0x404, 0x8) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cec16\x00', 0x80000, 0x0) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0x7fff, 0x3fff800000000, 0x2, 0x81) keyctl$auto_KEYCTL_SET_TIMEOUT(0xf, 0x9, 0x10001, 0x0, 0x2) recvmmsg$auto(r3, &(0x7f0000000640)={{&(0x7f00000003c0)="5ccbea0f5d57fd50bdd53865dfbb7f1c7628c305743ea507ff73e9f5c7a3491e678cd36c390e2660151669bfb2cfadf44cb20633cdba41edc1401e8904aba192915240bc3f4deb77140f02048f27e27913762afcbd2223f3fb8880aa78b3f044193305cb259c3ea4658a252d004348fe727e1b43fdae070e6b5516ac9d7900442a43945f01f3b991e39526b10bbc3ce96c3d2c61a2c06b", 0xfffffffd, &(0x7f0000000580)={&(0x7f0000000480)="a013243276b255ec63b13341886ab5bd55d84ccfce709f57a18de49b8409e7c251bf163a19837806c15ebadef2c11170983ab9eaed6eb05eb0f7742e3abef45196e0241666f67222d0ad636180f967e1f57a881ac9ff5b594b59fedfceef64fc660211135fb8f7ea018ae964dd4de4d12b0cfa9e21b2629db011b8cf2ae3950aa57bebd801b9b415e14fae91aa8b9950f819ab0d1b4ec5a2b71d834a32b1ad29db8ffd477c5b520af3777334b7354e1f10521167031cfd54dd806396c0c9f23cb4a14dd72e06bda64b6939007bb01f51004227bb21f58a52a9aeea51b581fb415c5ef31896", 0x87}, 0x1, &(0x7f00000005c0)="a1485eddc42c9d3d89328fe288648bfee4f109673ae03deb7aee0828999db96c22787585c8ebf4e886adc10a493782a49e31e82f294f98ba31a6556c9deaedfb321c6e75851523b1db00f4b9c049f3ecdfc080ab8564106fac68969ddfb607778233adc95c7b675827e4721dfac6ded1cc83c92fa0db782252b1b878", 0x753c8000000, 0x8}, 0x802}, 0x15, 0xb1, &(0x7f0000000680)={0x9, 0xfaf}) r4 = bpf$auto(0x6, &(0x7f00000006c0)=@link_update={r3, @new_prog_fd=r3, 0x1, @old_map_fd=r0}, 0x2) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000780)) ioctl$auto_XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f00000007c0)={0x1, @inferred=r3, @raw=0x9, 0x10, 0x86d8, '\x00', {0x3ff, 0xfff9, 0x0, 0xee01, 0xffffffffffffffff, 0x9, 0x5, 0xdff4, {0x0, 0x1000}, {0x2, 0xffff8000}, {0xb, 0x21d2}, 0x7fffffffffffffff, 0x6, 0x0, 0x2c, 0x1ff, 0x3, 0x9b9, 0x9, 0x5da6, 0x6, '\x00', 0x3, 0x80000000, 0x1, 0x3}}) shmctl$auto_IPC_RMID(0x9ef7, 0x0, &(0x7f0000000cc0)={{0x5, r6, 0x0, 0x7f, 0x71, 0x80000001, 0x1}, 0x8, 0xa, 0xd6e, 0xe88e, @raw=0x562e, @inferred=r2, 0x5, 0x0, &(0x7f0000000ac0)="a22b6338d0140d66547919f2c9385ce10457c84e4619721f1a3ea2b22c7bd5ce5dc40fa3aefc3e920e687334212c14deb086d2d556957cb82a01650950547b50c5997919ad69c70f3a40aa29138d2dedd530108fa76e99661080b8f5ecce2a98dfee5d2f7aff01a7667a47f4a62c6f0b1f76449eaf9df247ed040d4fee9ae9ba967b69a35f2894e46a4c4da9922ad5b49be0fde624e7de94b4bc38f0093598e430be3d48f714305b75cbc4c92d454495a8b79f26e4fef1bf405a96b10697a1cba5666fe5fab0", &(0x7f0000000bc0)="479b28ca0abaa693507fd34ae0c81d0d20d8056618e4dbcd245048eecd8bf50f069033edc3d027cf61de292ef2294c87e50fcabc2f6c9235680a00882ef2f92f208791a576b6c2130e1238a240200306b1631662427cf965ec43c7c6324e514ab6425c086b23794f04d603c9fa2c2d8b1703c734eb82c2b7bedc8ab021b816d8f6f54489d3b3587d4c65a4a9e9e62017b27b269633b5e2ee2d2f9454851bfd9d0628bdcd8ff27a9d4b4d5b9a827b55dbbe83fa5ca08860700ded9541c7a685338740af56a87595be2664d84614b4f78f8d99da06f1c40107437b8a9f1c3257224a29377d54216107ad39dc"}) 24.64893348s ago: executing program 5 (id=2146): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x7, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0xed1, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0xfffffffc}}) io_uring_register$auto(r2, 0xca, &(0x7f0000000180), 0x400084) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f000000ce80)=ANY=[@ANYBLOB="48943700", @ANYRES16=r3, @ANYRES32=r0], 0xb048}, 0x1, 0x0, 0x0, 0x220040d1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x100, 0x9e) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.stat\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)=""/163, 0xa3) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) r5 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r5, 0x11) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0) sendfile$auto(r6, r7, 0x0, 0x1000200) r8 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000100), 0x591c41, 0x0) read$auto_evm_xattr_ops_evm_secfs(r8, &(0x7f0000000140)=""/4, 0x4) 23.644441371s ago: executing program 5 (id=2150): mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/max_vfs\x00', 0x800, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x85, 0x0, 0x0) ioctl$auto(r0, 0x4, r1) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 23.003679706s ago: executing program 5 (id=2152): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) 22.737533174s ago: executing program 5 (id=2153): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x141100, 0x0) writev$auto(r0, 0x0, 0x1) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x803e, 0x5, 0x0, 0xa, 0x0) mmap$auto(0x88, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) r2 = gettid() tkill$auto(r2, 0x7) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x6) open(&(0x7f0000000140)='./file1\x00', 0x2a4c0, 0x11) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, 0x0, 0x442640, 0x0) mmap$auto(0x0, 0x60009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_tx\x00', 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) 10.469326629s ago: executing program 2 (id=2187): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) sendfile$auto(r1, r1, 0x0, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r2, 0x0, 0x2) getrlimit$auto(0x3, 0x0) (async) getrlimit$auto(0x3, 0x0) fdatasync$auto(r2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) (async) madvise$auto(0x0, 0x2000000080000001, 0x3) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) write$auto(r0, &(0x7f0000000500)='%[\x05\x00`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa31T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\x00\x00E\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x7) (async) write$auto(r0, &(0x7f0000000500)='%[\x05\x00`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa31T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\x00\x00E\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x7) 9.515534168s ago: executing program 4 (id=2188): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/63, 0x3f) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x52cb, 0x9, 0xdf, 0x9b72, 0x2, 0x7ffe) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2d, 0x2, 0x0) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TCFLSH2(r1, 0x8925, 0x0) socket(0x2, 0x3, 0x100) unshare$auto(0x40000080) r2 = socket(0xa, 0x5, 0x0) mmap$auto(0x6, 0xa020009, 0x3, 0x14, r2, 0x8002) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) r4 = prctl$auto(0x3e, 0x8000000000000001, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) close_range$auto(0x2, r4, 0x401) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) socket(0x2, 0x3, 0xa) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 8.222841994s ago: executing program 2 (id=2190): mmap$auto(0x0, 0x400008, 0x8, 0xc00000010, 0xffffffffffffffff, 0x8004) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r0, &(0x7f0000000280)='\adev/audio\x921\r$D\xa8g\xe8$n\xeep\xd9\xdbU\x87M\xe3}\x1a\xdf\xec\x94Y\xc3\xcf\xb0\xa4\x90\xdat\x16\x03\xf16\x16W\xff\x03\xd2^\x00p\xb3\xfc\x9e&FZ\x1b\aFr\xc6\x92', 0x2) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x0, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8002) ioctl$auto_IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffff9, 0x80, 0xd0bc}) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) setsockopt$auto_SO_LOCK_FILTER(r3, 0xffff, 0x2c, &(0x7f0000000000)='/dev/raw-gadget\x00', 0x2f17) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r4, 0x4004550d, 0x0) 7.924240392s ago: executing program 2 (id=2192): shmctl$auto_SHM_LOCK(0x2, 0xb, 0x0) unshare$auto(0x40000080) mmap$auto(0x100007fffffff, 0x1000000002020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) set_mempolicy_home_node$auto(0x6, 0x8000, 0x9, 0x5) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r1 = openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f00000000c0), 0x113400, 0x0) close_range$auto(0xffffffffffffffff, r1, 0x4) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7e) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'pim6reg\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dvmrp1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'pim6reg\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r12) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="2f212cbd35878085d3b27171ee9aadc77000fcdbdf25dda08eb3859389ef", @ANYRES32=r14, @ANYBLOB="04007d80"], 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x118, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEC_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x40}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xbf2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEC_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3ff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc61}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xac}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000001}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x118}}, 0x40) 7.528602409s ago: executing program 34 (id=2153): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x141100, 0x0) writev$auto(r0, 0x0, 0x1) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x803e, 0x5, 0x0, 0xa, 0x0) mmap$auto(0x88, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) r2 = gettid() tkill$auto(r2, 0x7) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x6) open(&(0x7f0000000140)='./file1\x00', 0x2a4c0, 0x11) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, 0x0, 0x442640, 0x0) mmap$auto(0x0, 0x60009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_tx\x00', 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) 7.173099979s ago: executing program 1 (id=2194): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/nbd13/hctx0/cpu1/default_rq_list\x00', 0x169100, 0x0) pread64$auto(r0, 0x0, 0x1000f42d, 0x100) select$auto(0x8, &(0x7f0000000080)={[0xffffffffffffb07f, 0x8000000000000000, 0xa, 0x9b0, 0x7, 0xfffffffffffffffa, 0x1, 0x9, 0x2, 0x3, 0x101, 0xd, 0x0, 0x1, 0x9, 0x4]}, &(0x7f0000000140)={[0x280000000, 0x100000000, 0x0, 0x6, 0x9, 0x8, 0x300, 0x5, 0x6, 0x7, 0x5, 0x7, 0x4d1e, 0x61, 0x200, 0x2c0]}, &(0x7f0000000300)={[0x1, 0x2, 0x5, 0xca3, 0x80000001, 0xffff, 0x9, 0x7, 0x9, 0x3, 0x1000, 0x2, 0x123a8804, 0x4, 0x2, 0x4]}, &(0x7f0000000000)={0x8, 0xec9}) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F0xffffffffffffffff, 0xee01, @sival_ptr=&(0x7f0000000140)="174678b089e72c834bbe70707cc68442bbef82853698"}}}, 0x4, &(0x7f0000000080)={{0x9, 0x5}, {0x7, 0xf8}, 0xef, 0x808, 0xd0, 0x30690c57, 0x0, 0x4, 0xaaa2, 0x8, 0x1ff, 0x3, 0xffffffffffff9956, 0x4, 0x0, 0x5}) ptrace$auto_PTRACE_GETSIGINFO(0x4202, r1, 0x1000, 0x1) 6.71045487s ago: executing program 1 (id=2196): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002ebd7000dddb6f3469dd000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r4, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/105, 0x69) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) ioctl$auto(r5, 0x5606, r5) r6 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy12/hwflags\x00', 0x305a80, 0x0) read$auto_hwflags_ops_debugfs(r6, 0x0, 0x0) mremap$auto(0x7, 0x2, 0x96, 0x7, 0x0) 6.275026625s ago: executing program 4 (id=2197): clock_getres$auto(0x4, &(0x7f0000000340)={0x6, 0x81}) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x0, 0x0) ioctl$auto_EVIOCGID(r0, 0x80084502, &(0x7f0000000140)={0x6, 0x8fc2, 0x8, 0x9}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0xca400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r1) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) readahead$auto(r2, 0x2, 0x10001) r3 = socket(0x29, 0x1, 0x0) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0xc0101, 0x0) ioctl$auto_SOUND_PCM_WRITE_FILTER(r2, 0xc0045007, &(0x7f0000000180)="231146e607f1ad83c37d01fea9b11ba32f675cfa500e049d5c4c9384b2e69e79f33397a057e3fc475374d6102c16fac0a65d4592f7924eff09b1ab5f6d384ebdf234a9eb79d640077c3f4b627d78bac6f7d8a9babe50f871fea724fa49d8123121e3da055e3339cc46a655b40fa75dfd3596180e894c8c39e8558de5cfb0fea2f22d0e50f7c12c0cfd92a050903689c7a1e3a9edc7041926511d4d6d43be2ffcce9ed4aab855647df47d6b94951614c9a74e049d85a58c8d7b5ed0d48bda4e17ac5a041014d72846dd8a77d3a79a69ef") write$auto(r4, &(0x7f0000000300)='//\xf2\x02\xaa\xf3npn\xbdu\xa2\xbd\xb2\xc1\xf7c5\xcf\x93\x14\x1b\xca\xbd\x1e\x93\xe5\xf5\x166\x00\xe0\xe2]\x82\xfa\xe3_\'\xcfys\x92$,Ag\xca\xa77\x8b\x05\x15\x8b\x15\xb5%\xf5\"\x13\xc8s\xaa\x00\x00\x00\x00\x00\x00\x00\x00\xd1\x98e7\xb3]v\ae~\xed\xc1v\xc6\xde\xca%\xcf\x00', 0x80000002) setsockopt$auto(r3, 0x104000000000010e, 0x9, 0x0, 0x16) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 5.78652653s ago: executing program 2 (id=2198): setsockopt$auto(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000180)='\x0ez1\xf02\xc6\n\xf2\x87\x1d\xfeD!\xa8^J9\xaab\x84\xf6\xf7\x93\xa2\x8f\x0e\x1b\xa4\x0fwG]\t\xcd7\f\t\x87\'%\xaf\x80\xdc\x90\x8c\x9cU\a\x00\x00\x00\x00\x00\x80\x00\x0f\x88P\xebJ\xfdlS!\xc8\x1c\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92\xed/\"\x92\xf7#{\xa3\xf0\xbe\xc2\xe5\xb5\xc4($\xa4\xfb\a\xe0;b\x16\xfb\xaa\xbf\xc9\xc3DfG\xe5', 0x8) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = signalfd4$auto(0xffffffffffffffff, &(0x7f0000000000)={0x6}, 0x0, 0xfffffff9) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000004c0)="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", 0x8, &(0x7f00000000c0)="bbd24ab30c7629e5b3db3d5abc53b293f7b2e0f6579cbbd9e5b3750c410e55fa6313688ac8e5c1d6ca971ae49d71f870226877ff05821a60fcfc5805cae76355485081d708ba1f7e529f3e16814df744d417053c30b38bba850cace565c74ab39636b022928e4e8d35465b5cc041b82325516a26bc8bd80b7094a26523308a1377f0872f33d3a978e433dc94c35126362f37bedec5a88507f84257f50b506f602b139ace57ff3a5c3aac7d7ab33f68", 0xb, 0x0, &(0x7f0000000280)=0x800}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001500), r3) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000015c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00022ece06d564e34475d1bb5fd42b0000000000000008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x810) r5 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000014c0), 0x2000, 0x0) sendmmsg$auto(r5, 0x0, 0x9a6, 0xe000) sendmmsg$auto(r0, 0x0, 0x10002, 0x7000003) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sysfs$auto(0x2, 0xf, 0x0) r7 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001640), r3) sendmsg$auto_KSMBD_EVENT_STARTING_UP(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x845) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x2001, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) 5.043512529s ago: executing program 4 (id=2199): mmap$auto(0xfffffffffffffffa, 0x1, 0xdf, 0xeb1, 0x401, 0x8003) rseq$auto(0x0, 0x1a, 0xffff, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) sendfile$auto(r0, r0, 0x0, 0x1ff) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x800, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vidtv.0/i2c-0/name\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/114, 0x72) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$auto_nfc(0x0, r3) sendmsg$auto_NFC_CMD_DISABLE_SE(r1, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x103041, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) r4 = socket(0x15, 0x80000, 0x80) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r4, 0x84, 0x18, 0x0, &(0x7f0000000000)=0x7ffe) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r5, 0x4b67, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.938522172s ago: executing program 1 (id=2200): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x50425fea}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) 4.500928525s ago: executing program 1 (id=2201): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = prctl$auto_PR_SET_MM_BRK(0x1, 0x7, 0x0, 0x7, 0x1000) fcntl$getown(r0, 0x9) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, 0x0, 0x24084005) 4.158315199s ago: executing program 2 (id=2202): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x2, 0x80002, 0x73) (async) socket(0x23, 0x80805, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) connect$auto(0x3, 0x0, 0x54) write$auto(0xca, 0x0, 0x2b) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 32) finit_module$auto(0xffffffffffffffff, 0x0, 0x3) mbind$auto(0x0, 0xd9, 0x4, 0x0, 0x6, 0x2) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) (async) landlock_add_rule$auto(r1, 0x2, &(0x7f00000003c0)="ea17f457", 0x0) (async) munmap$auto(0x10000, 0xffff) 4.101789305s ago: executing program 1 (id=2203): syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioperm$auto(0x4, 0xbc6, 0x81) r0 = socket(0xa, 0x1, 0x84) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x4e23, @rand_addr=0x64010100}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x191102, 0x0) mmap$auto(0x6, 0x20009, 0x4000000000e3, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x404c534a, 0x38) ioctl$auto(0x3, 0xae41, r1) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000010c0)=""/4096, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002abd23198aff0d4c3441000008e5060007000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc534a615517ad33d}, 0x40) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r6, &(0x7f0000000400)={0x0, 0x40}, 0x6) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r2, 0x4010744d, &(0x7f00000001c0)={0x0, 0x8, 0x80}) 3.898432282s ago: executing program 4 (id=2204): msgrcv$auto(0x0, 0x0, 0xf55c, 0x3, 0x4a4d) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r1 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x2, 0x0) getdents64$auto(r1, &(0x7f0000000200)={0x1ff, 0x2, 0x7, 0x4, "1378056e0b8d3b0532438779c56ae73dea25a56dc2e4ebf0c0d6c7402777655011468c04b1d16774f683766467522825a436d6024e90d33d352fe0b3eb1fb2c472cd91d763fbe1e34cb2df2ac7a30c870277cf13a3e9ea950fdccdb06de84565c145342e0c6cc7ceae7a1f77d5f1957d023275379138e00a273813c802812050f1cf29b821288f29cfd4a813af9e4e2de809f62957e05b63dc666b010b625481fe48635d51610a9c06f82b072ced922e0ce6a0"}, 0x95) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x6c, 0x59}, 0x18) faccessat2$auto(r2, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x600, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0) readv$auto(r3, &(0x7f0000000400)={&(0x7f00000003c0), 0x40}, 0x3) utime$auto(&(0x7f0000000040)='./file0\x00', 0x0) futex_wait$auto(0x0, 0x80000000, 0x21b1, 0x80, 0x0, 0x3) r4 = gettid() r5 = epoll_create$auto(0x2) epoll_pwait2$auto(r5, 0x0, 0x8, 0x0, 0x0, 0x8) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x40, 0x0) ioctl$auto(r6, 0x9000643f, 0xc35) kill$auto(r4, 0x11) unshare$auto(0x40000080) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r8 = clone3$auto(&(0x7f0000000180)={0x0, 0x7, 0xa5e7, 0xfffe, 0x3, 0x8000000000000000, 0x10, 0x6, 0x10000, 0x1ff, 0x3}, 0x3ff) prctl$auto(0x3e, 0x1, r8, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r7, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0x101000, 0x0) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) 2.208947964s ago: executing program 2 (id=2205): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x4) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x8000000000002, 0x0, 0x10000000, 0x3) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2?', 0x80000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r2) sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010a27bd7000fddbdf2501000000080001007c"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20000840) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) socket(0x7, 0x3, 0x2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)="fb", 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/apparmor/parameters/debug\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) read$auto(0xffffffffffffffff, 0x0, 0x20) set_mempolicy$auto(0x6, 0x0, 0x21) unshare$auto(0x40000080) chdir$auto(&(0x7f0000000340)='./file1\x00') prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) waitid$auto_P_PID(0x1, 0x0, 0x0, 0xc, &(0x7f0000000440)={{0x7, 0x24}, {0x929a, 0x1ff}, 0x9, 0x3, 0x4032, 0xfffffffffffffff4, 0x4df, 0x0, 0x8, 0x8fb000, 0x0, 0x100, 0x4, 0x3, 0xd, 0x1}) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) socket(0x1d, 0x4, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) 1.862820695s ago: executing program 4 (id=2206): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x5, 0xffffffffffffffff, 0x0, 0x101, 0x80) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@nested={0x7, 0x1, 0x0, 0x1, [@generic="32bf00"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x40044) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYRES16=r3], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) 0s ago: executing program 1 (id=2207): select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x2480, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) r0 = syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0be4f2597d8b11ed14dfa636bad65cae9c0d21", 0x16, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r1, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) sendfile$auto(r1, r1, &(0x7f0000000000)=0x3, 0xad6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x6ca, 0x3, 0xeb1, 0xffffffffffffffff, 0x4) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r5 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={r0, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r5}, 0xe) read$auto(r4, 0x0, 0x20) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48043, 0x0) write$auto(r6, 0x0, 0x6) unshare$auto(0x40000080) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000000)="b2", 0x1) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x103400, 0x0) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) sendfile$auto(r9, r8, 0x0, 0x1448) r10 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r2, r10, 0x0, 0x1) kernel console output (not intermixed with test programs): UID: 0 PID: 10156 Comm: syz.0.1091 Tainted: G U L syzkaller #0 PREEMPT(full) [ 353.387456][T10156] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 353.387466][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.387483][T10156] Call Trace: [ 353.387491][T10156] [ 353.387501][T10156] dump_stack_lvl+0x100/0x190 [ 353.387546][T10156] should_fail_ex.cold+0x5/0xa [ 353.387577][T10156] should_failslab+0xc2/0x120 [ 353.387604][T10156] __kmalloc_cache_noprof+0x7a/0x6f0 [ 353.387637][T10156] ? syslog_print_all+0xed/0x3f0 [ 353.387678][T10156] syslog_print_all+0xed/0x3f0 [ 353.387711][T10156] ? futex_wait+0x125/0x380 [ 353.387760][T10156] ? __pfx_syslog_print_all+0x10/0x10 [ 353.387811][T10156] ? bpf_lsm_capable+0x9/0x10 [ 353.387836][T10156] ? security_capable+0x80/0x260 [ 353.387874][T10156] do_syslog+0x350/0x6d0 [ 353.387913][T10156] ? __pfx_do_syslog+0x10/0x10 [ 353.387972][T10156] __x64_sys_syslog+0x74/0xb0 [ 353.388009][T10156] ? lockdep_hardirqs_on+0x78/0x100 [ 353.388039][T10156] do_syscall_64+0x106/0xf80 [ 353.388067][T10156] ? clear_bhb_loop+0x40/0x90 [ 353.388099][T10156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.388127][T10156] RIP: 0033:0x7f0b5c99c629 [ 353.388149][T10156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.388175][T10156] RSP: 002b:00007f0b5d85f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 353.388200][T10156] RAX: ffffffffffffffda RBX: 00007f0b5cc15fa0 RCX: 00007f0b5c99c629 [ 353.388218][T10156] RDX: 00000000000000f4 RSI: 0000200000000040 RDI: 0000000000000004 [ 353.388234][T10156] RBP: 00007f0b5ca32b39 R08: 0000000000000000 R09: 0000000000000000 [ 353.388250][T10156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.388266][T10156] R13: 00007f0b5cc16038 R14: 00007f0b5cc15fa0 R15: 00007fff90029a88 [ 353.388300][T10156] [ 353.594878][T10157] QAT: Stopping all acceleration devices. [ 353.967181][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1095'. [ 354.972135][T10175] Process accounting paused [ 355.205134][T10183] Invalid ELF header magic: != ELF [ 355.336717][T10186] QAT: Device 0 not found [ 355.779900][T10187] Process accounting resumed [ 355.928538][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 356.100012][T10211] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1105'. [ 356.135680][T10206] Invalid ELF header magic: != ELF [ 356.687673][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 356.939031][T10200] Process accounting resumed [ 357.218927][T10234] Invalid ELF header magic: != ELF [ 358.253062][T10257] Invalid ELF header magic: != ELF [ 359.256741][T10286] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 359.310376][T10282] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 359.585002][T10291] Invalid ELF header magic: != ELF [ 361.992875][T10345] Invalid ELF header magic: != ELF [ 364.968203][T10390] futex_wake_op: syz.2.1140 tries to shift op by -2048; fix this program [ 366.711188][T10419] Invalid ELF header magic: != ELF [ 367.398895][T10436] Invalid ELF header magic: != ELF [ 367.552432][T10435] Invalid ELF header magic: != ELF [ 368.503032][T10446] random: crng reseeded on system resumption [ 368.547631][T10446] FAULT_INJECTION: forcing a failure. [ 368.547631][T10446] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 368.644696][T10446] CPU: 0 UID: 0 PID: 10446 Comm: syz.3.1157 Tainted: G U L syzkaller #0 PREEMPT(full) [ 368.644736][T10446] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 368.644745][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.644758][T10446] Call Trace: [ 368.644766][T10446] [ 368.644774][T10446] dump_stack_lvl+0x100/0x190 [ 368.644813][T10446] should_fail_ex.cold+0x5/0xa [ 368.644835][T10446] ? prepare_alloc_pages+0x16d/0x5f0 [ 368.644863][T10446] should_fail_alloc_page+0xeb/0x140 [ 368.644886][T10446] prepare_alloc_pages+0x1f0/0x5f0 [ 368.644916][T10446] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 368.644952][T10446] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 368.644996][T10446] ? stack_trace_save+0x8e/0xc0 [ 368.645019][T10446] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 368.645053][T10446] ? stack_depot_save_flags+0x27/0x9d0 [ 368.645092][T10446] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 368.645130][T10446] ? kasan_save_stack+0x3f/0x50 [ 368.645162][T10446] ? kasan_save_stack+0x30/0x50 [ 368.645194][T10446] ? kasan_save_track+0x14/0x30 [ 368.645233][T10446] ? do_sys_openat2+0x10d/0x1e0 [ 368.645260][T10446] ? __x64_sys_openat+0x12d/0x210 [ 368.645287][T10446] ? do_syscall_64+0x106/0xf80 [ 368.645312][T10446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.645345][T10446] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 368.645385][T10446] ? policy_nodemask+0xed/0x4f0 [ 368.645410][T10446] alloc_pages_mpol+0x1fb/0x550 [ 368.645433][T10446] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 368.645457][T10446] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 368.645483][T10446] alloc_pages_noprof+0x131/0x390 [ 368.645508][T10446] get_zeroed_page_noprof+0x18/0xb0 [ 368.645531][T10446] get_image_page+0x18/0x1a0 [ 368.645568][T10446] alloc_rtree_node+0x3c/0xb0 [ 368.645604][T10446] memory_bm_create+0x65e/0xba0 [ 368.645654][T10446] create_basic_memory_bitmaps+0xbd/0x350 [ 368.645682][T10446] snapshot_open+0x230/0x2a0 [ 368.645707][T10446] ? __pfx_snapshot_open+0x10/0x10 [ 368.645734][T10446] misc_open+0x26d/0x450 [ 368.645769][T10446] ? __pfx_misc_open+0x10/0x10 [ 368.645804][T10446] chrdev_open+0x234/0x6a0 [ 368.645825][T10446] ? __pfx_apparmor_file_open+0x10/0x10 [ 368.645857][T10446] ? __pfx_chrdev_open+0x10/0x10 [ 368.645879][T10446] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 368.645924][T10446] do_dentry_open+0x6d8/0x1660 [ 368.645959][T10446] ? __pfx_chrdev_open+0x10/0x10 [ 368.645987][T10446] vfs_open+0x82/0x3f0 [ 368.646017][T10446] path_openat+0x208c/0x31a0 [ 368.646049][T10446] ? __pfx_path_openat+0x10/0x10 [ 368.646080][T10446] do_file_open+0x20e/0x430 [ 368.646104][T10446] ? __pfx_do_file_open+0x10/0x10 [ 368.646146][T10446] ? alloc_fd+0x476/0x790 [ 368.646185][T10446] ? do_getname+0x191/0x390 [ 368.646215][T10446] do_sys_openat2+0x10d/0x1e0 [ 368.646243][T10446] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.646281][T10446] __x64_sys_openat+0x12d/0x210 [ 368.646311][T10446] ? __pfx___x64_sys_openat+0x10/0x10 [ 368.646357][T10446] do_syscall_64+0x106/0xf80 [ 368.646381][T10446] ? clear_bhb_loop+0x40/0x90 [ 368.646409][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.646433][T10446] RIP: 0033:0x7fa48679c629 [ 368.646451][T10446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.646474][T10446] RSP: 002b:00007fa4849f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.646496][T10446] RAX: ffffffffffffffda RBX: 00007fa486a15fa0 RCX: 00007fa48679c629 [ 368.646512][T10446] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 368.646526][T10446] RBP: 00007fa486832b39 R08: 0000000000000000 R09: 0000000000000000 [ 368.646540][T10446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.646554][T10446] R13: 00007fa486a16038 R14: 00007fa486a15fa0 R15: 00007ffeb1bbab08 [ 368.646584][T10446] [ 369.432227][T10446] random: crng reseeded on system resumption [ 369.726772][T10457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1160'. [ 369.789711][ T29] audit: type=1800 audit(2147483845.850:39): pid=10457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1160" name="dbroot" dev="configfs" ino=40400 res=0 errno=0 [ 369.975099][T10457] team0: Port device team_slave_1 removed [ 370.316496][T10465] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1162'. [ 371.019148][T10477] Invalid ELF header magic: != ELF [ 371.828453][T10474] kexec: Could not allocate control_code_buffer [ 372.088198][T10489] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1167'. [ 372.363292][T10493] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1168'. [ 372.844510][T10495] zswap: compressor not available [ 373.394583][T10515] bond0: invalid ARP target specified [ 373.459126][T10515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1175'. [ 373.503524][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.545857][T10515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.613476][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.645085][T10515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.793600][T10535] FAULT_INJECTION: forcing a failure. [ 374.793600][T10535] name failslab, interval 1, probability 0, space 0, times 0 [ 374.989570][T10535] CPU: 0 UID: 0 PID: 10535 Comm: syz.3.1178 Tainted: G U L syzkaller #0 PREEMPT(full) [ 374.989613][T10535] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 374.989622][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.989636][T10535] Call Trace: [ 374.989644][T10535] [ 374.989653][T10535] dump_stack_lvl+0x100/0x190 [ 374.989694][T10535] should_fail_ex.cold+0x5/0xa [ 374.989721][T10535] ? kobject_get_path+0xcf/0x2c0 [ 374.989751][T10535] should_failslab+0xc2/0x120 [ 374.989774][T10535] __kmalloc_noprof+0xe0/0x850 [ 374.989814][T10535] kobject_get_path+0xcf/0x2c0 [ 374.989849][T10535] kobject_uevent_env+0x287/0x18b0 [ 374.989886][T10535] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 374.989924][T10535] ? kfree+0x1f6/0x6b0 [ 374.989958][T10535] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 374.989991][T10535] ? __pfx_kvm_vm_release+0x10/0x10 [ 374.990017][T10535] kvm_put_kvm+0xe4/0xb10 [ 374.990042][T10535] ? lockdep_hardirqs_on+0x78/0x100 [ 374.990068][T10535] ? _raw_spin_unlock_irq+0x2e/0x50 [ 374.990092][T10535] ? __pfx_kvm_vm_release+0x10/0x10 [ 374.990118][T10535] kvm_vm_release+0x3c/0x50 [ 374.990142][T10535] __fput+0x3ff/0xb40 [ 374.990170][T10535] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.990195][T10535] task_work_run+0x150/0x240 [ 374.990230][T10535] ? __pfx_task_work_run+0x10/0x10 [ 374.990273][T10535] exit_to_user_mode_loop+0x100/0x4a0 [ 374.990307][T10535] do_syscall_64+0x668/0xf80 [ 374.990332][T10535] ? clear_bhb_loop+0x40/0x90 [ 374.990361][T10535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.990385][T10535] RIP: 0033:0x7fa48679c629 [ 374.990405][T10535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.990429][T10535] RSP: 002b:00007fa484591028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 374.990456][T10535] RAX: 0000000000000000 RBX: 00007fa486a16270 RCX: 00007fa48679c629 [ 374.990471][T10535] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 374.990485][T10535] RBP: 00007fa486832b39 R08: 0000000000000000 R09: 0000000000000000 [ 374.990500][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.990514][T10535] R13: 00007fa486a16308 R14: 00007fa486a16270 R15: 00007ffeb1bbab08 [ 374.990545][T10535] [ 375.600450][T10548] FAULT_INJECTION: forcing a failure. [ 375.600450][T10548] name failslab, interval 1, probability 0, space 0, times 0 [ 375.628612][T10548] CPU: 0 UID: 0 PID: 10548 Comm: syz.2.1182 Tainted: G U L syzkaller #0 PREEMPT(full) [ 375.628654][T10548] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 375.628663][T10548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.628677][T10548] Call Trace: [ 375.628684][T10548] [ 375.628693][T10548] dump_stack_lvl+0x100/0x190 [ 375.628733][T10548] should_fail_ex.cold+0x5/0xa [ 375.628760][T10548] ? security_inode_init_security+0x113/0x370 [ 375.628794][T10548] should_failslab+0xc2/0x120 [ 375.628816][T10548] __kmalloc_noprof+0xe0/0x850 [ 375.628856][T10548] security_inode_init_security+0x113/0x370 [ 375.628885][T10548] ? __pfx_shmem_initxattrs+0x10/0x10 [ 375.628911][T10548] ? __pfx_security_inode_init_security+0x10/0x10 [ 375.628941][T10548] ? __pfx_make_vfsuid+0x10/0x10 [ 375.628975][T10548] shmem_symlink+0x15f/0xa00 [ 375.629009][T10548] ? generic_permission+0xae/0x800 [ 375.629037][T10548] ? __pfx_shmem_symlink+0x10/0x10 [ 375.629070][T10548] ? security_inode_permission+0xbf/0x250 [ 375.629106][T10548] ? inode_permission+0x374/0x620 [ 375.629133][T10548] ? tomoyo_path_symlink+0x97/0xe0 [ 375.629168][T10548] vfs_symlink+0x178/0x4d0 [ 375.629200][T10548] filename_symlinkat+0x2a6/0x560 [ 375.629228][T10548] ? __pfx_filename_symlinkat+0x10/0x10 [ 375.629254][T10548] ? strncpy_from_user+0x19d/0x2d0 [ 375.629292][T10548] ? do_getname+0x191/0x390 [ 375.629321][T10548] __x64_sys_symlink+0x79/0xb0 [ 375.629347][T10548] do_syscall_64+0x106/0xf80 [ 375.629372][T10548] ? clear_bhb_loop+0x40/0x90 [ 375.629400][T10548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.629424][T10548] RIP: 0033:0x7faa77f9c629 [ 375.629443][T10548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.629466][T10548] RSP: 002b:00007faa78f44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 375.629488][T10548] RAX: ffffffffffffffda RBX: 00007faa78215fa0 RCX: 00007faa77f9c629 [ 375.629503][T10548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.629517][T10548] RBP: 00007faa78032b39 R08: 0000000000000000 R09: 0000000000000000 [ 375.629531][T10548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.629545][T10548] R13: 00007faa78216038 R14: 00007faa78215fa0 R15: 00007ffe1e353f68 [ 375.629575][T10548] [ 376.491019][T10555] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1183'. [ 377.866413][T10571] zswap: compressor not available [ 379.820500][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.828509][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.533196][T10578] kexec: Could not allocate control_code_buffer [ 381.437913][T10646] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1205'. [ 381.594895][T10650] Process accounting paused [ 381.898029][T10656] Invalid ELF header magic: != ELF [ 382.923100][T10675] FAULT_INJECTION: forcing a failure. [ 382.923100][T10675] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 382.999809][T10675] CPU: 0 UID: 0 PID: 10675 Comm: syz.0.1212 Tainted: G U L syzkaller #0 PREEMPT(full) [ 382.999851][T10675] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 382.999860][T10675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.999875][T10675] Call Trace: [ 382.999882][T10675] [ 382.999892][T10675] dump_stack_lvl+0x100/0x190 [ 382.999933][T10675] should_fail_ex.cold+0x5/0xa [ 382.999956][T10675] ? prepare_alloc_pages+0x16d/0x5f0 [ 382.999985][T10675] should_fail_alloc_page+0xeb/0x140 [ 383.000010][T10675] prepare_alloc_pages+0x1f0/0x5f0 [ 383.000040][T10675] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 383.000077][T10675] ? __pfx_css_rstat_updated+0x10/0x10 [ 383.000106][T10675] ? lock_acquire+0x1cf/0x380 [ 383.000142][T10675] ? rcu_is_watching+0x12/0xc0 [ 383.000178][T10675] ? mod_memcg_lruvec_state+0x1a6/0x630 [ 383.000225][T10675] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 383.000261][T10675] ? rcu_read_unlock+0x17/0x60 [ 383.000295][T10675] ? folio_remove_rmap_pmd+0x69c/0xed0 [ 383.000331][T10675] ? split_huge_pmd_locked+0x3ba/0x3cf0 [ 383.000363][T10675] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 383.000404][T10675] ? policy_nodemask+0xed/0x4f0 [ 383.000430][T10675] alloc_pages_mpol+0x1fb/0x550 [ 383.000454][T10675] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 383.000475][T10675] ? __split_huge_pmd+0x203/0x350 [ 383.000503][T10675] ? __split_huge_pmd+0x203/0x350 [ 383.000538][T10675] alloc_pages_noprof+0x131/0x390 [ 383.000563][T10675] pte_alloc_one+0x1e/0x3e0 [ 383.000590][T10675] __pte_alloc+0x6d/0x3f0 [ 383.000612][T10675] ? __pfx___pte_alloc+0x10/0x10 [ 383.000634][T10675] ? _raw_spin_unlock+0x28/0x50 [ 383.000673][T10675] ? __pmd_alloc+0x6aa/0x9c0 [ 383.000701][T10675] move_page_tables+0x257e/0x4500 [ 383.000737][T10675] ? __pfx_copy_vma+0x10/0x10 [ 383.000780][T10675] ? __pfx_move_page_tables+0x10/0x10 [ 383.000830][T10675] ? finish_task_switch.isra.0+0x200/0xb80 [ 383.000859][T10675] copy_vma_and_data+0x25c/0x7c0 [ 383.000895][T10675] ? __pfx_copy_vma_and_data+0x10/0x10 [ 383.000941][T10675] ? __vma_start_write+0x17f/0x280 [ 383.000969][T10675] ? __pfx___vma_start_write+0x10/0x10 [ 383.001007][T10675] move_vma+0x51b/0x1890 [ 383.001044][T10675] ? __pfx_move_vma+0x10/0x10 [ 383.001079][T10675] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 383.001104][T10675] ? cap_mmap_addr+0x4b/0x120 [ 383.001134][T10675] ? bpf_lsm_mmap_addr+0x9/0x30 [ 383.001169][T10675] ? security_mmap_addr+0x71/0x1e0 [ 383.001215][T10675] ? __get_unmapped_area+0x255/0x3e0 [ 383.001243][T10675] ? vrm_set_new_addr+0x204/0x290 [ 383.001279][T10675] mremap_to+0x1b7/0x450 [ 383.001312][T10675] do_mremap+0xb76/0x2130 [ 383.001358][T10675] ? __pfx_do_mremap+0x10/0x10 [ 383.001397][T10675] ? vfs_write+0x15d/0x1070 [ 383.001433][T10675] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 383.001466][T10675] __do_sys_mremap+0x126/0x170 [ 383.001508][T10675] ? __pfx___do_sys_mremap+0x10/0x10 [ 383.001549][T10675] ? __x64_sys_futex+0x34f/0x4d0 [ 383.001598][T10675] do_syscall_64+0x106/0xf80 [ 383.001624][T10675] ? clear_bhb_loop+0x40/0x90 [ 383.001653][T10675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.001677][T10675] RIP: 0033:0x7f0b5c99c629 [ 383.001697][T10675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.001722][T10675] RSP: 002b:00007f0b5d85f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 383.001745][T10675] RAX: ffffffffffffffda RBX: 00007f0b5cc15fa0 RCX: 00007f0b5c99c629 [ 383.001761][T10675] RDX: 0000000000000013 RSI: 0000000000000004 RDI: 0000200000000000 [ 383.001776][T10675] RBP: 00007f0b5ca32b39 R08: 0000000100000000 R09: 0000000000000000 [ 383.001791][T10675] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 383.001806][T10675] R13: 00007f0b5cc16038 R14: 00007f0b5cc15fa0 R15: 00007fff90029a88 [ 383.001837][T10675] [ 384.728227][T10699] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 385.339164][T10683] Process accounting resumed [ 386.152705][T10705] Process accounting paused [ 386.317673][T10711] Process accounting resumed [ 387.441141][T10741] Process accounting paused [ 387.573599][T10757] Unable to find swap-space signature [ 390.030038][T10788] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1237'. [ 391.479213][T10803] Invalid ELF header magic: != ELF [ 392.268239][T10810] Invalid ELF header magic: != ELF [ 393.403267][T10832] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 393.772685][T10838] Invalid ELF header magic: != ELF [ 394.336735][T10849] Invalid ELF header magic: != ELF [ 395.566414][T10869] futex_wake_op: syz.2.1257 tries to shift op by -2048; fix this program [ 395.623728][T10869] futex_wake_op: syz.2.1257 tries to shift op by -2048; fix this program [ 395.752557][T10869] futex_wake_op: syz.2.1257 tries to shift op by -2048; fix this program [ 395.873468][T10869] futex_wake_op: syz.2.1257 tries to shift op by -2048; fix this program [ 395.912719][T10869] futex_wake_op: syz.2.1257 tries to shift op by -2048; fix this program [ 395.964335][T10869] futex_wake_op: syz.2.1257 tries to shift op by -2048; fix this program [ 396.022084][T10869] futex_wake_op: syz.2.1257 tries to shift op by -2048; fix this program [ 396.069579][T10869] futex_wake_op: syz.2.1257 tries to shift op by -2048; fix this program [ 396.104343][T10869] futex_wake_op: syz.2.1257 tries to shift op by -2048; fix this program [ 396.147312][T10869] futex_wake_op: syz.2.1257 tries to shift op by -2048; fix this program [ 397.065639][T10897] can: request_module (can-proto-0) failed. [ 398.571245][T10933] netlink: 'syz.3.1269': attribute type 4 has an invalid length. [ 398.626900][T10933] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1269'. [ 398.702340][T10935] FAULT_INJECTION: forcing a failure. [ 398.702340][T10935] name failslab, interval 1, probability 0, space 0, times 0 [ 398.726562][T10933] IPv6: NLM_F_CREATE should be specified when creating new route [ 398.771504][T10935] CPU: 0 UID: 0 PID: 10935 Comm: syz.2.1270 Tainted: G U L syzkaller #0 PREEMPT(full) [ 398.771543][T10935] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 398.771552][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.771565][T10935] Call Trace: [ 398.771573][T10935] [ 398.771581][T10935] dump_stack_lvl+0x100/0x190 [ 398.771620][T10935] should_fail_ex.cold+0x5/0xa [ 398.771647][T10935] should_failslab+0xc2/0x120 [ 398.771669][T10935] __kmalloc_cache_noprof+0x7a/0x6f0 [ 398.771698][T10935] ? do_kimage_alloc_init+0x40/0x320 [ 398.771727][T10935] do_kimage_alloc_init+0x40/0x320 [ 398.771749][T10935] do_kexec_load+0x11b/0x810 [ 398.771775][T10935] ? __pfx_do_kexec_load+0x10/0x10 [ 398.771802][T10935] ? _copy_from_user+0x59/0xd0 [ 398.771842][T10935] __x64_sys_kexec_load+0x1bf/0x230 [ 398.771869][T10935] do_syscall_64+0x106/0xf80 [ 398.771894][T10935] ? clear_bhb_loop+0x40/0x90 [ 398.771940][T10935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.771964][T10935] RIP: 0033:0x7faa77f9c629 [ 398.771983][T10935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.772006][T10935] RSP: 002b:00007faa78f44028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 398.772027][T10935] RAX: ffffffffffffffda RBX: 00007faa78215fa0 RCX: 00007faa77f9c629 [ 398.772043][T10935] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 398.772057][T10935] RBP: 00007faa78032b39 R08: 0000000000000000 R09: 0000000000000000 [ 398.772070][T10935] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 398.772084][T10935] R13: 00007faa78216038 R14: 00007faa78215fa0 R15: 00007ffe1e353f68 [ 398.772118][T10935] [ 400.714583][T10960] batman_adv: Routing algorithm '' is not supported [ 402.067921][T10974] can: request_module (can-proto-0) failed. [ 402.530943][T10984] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 402.639330][T10984] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 402.781115][T10984] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 403.587952][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.598049][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.606224][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.614323][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.621901][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 404.811996][ T5841] Bluetooth: hci3: Malformed LE Event: 0x1b [ 405.147020][T11007] chnl_net:caif_netlink_parms(): no params data found [ 405.309939][T11047] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1296'. [ 405.664257][ T5841] Bluetooth: hci4: command tx timeout [ 405.841320][T11007] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.866778][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.895066][T11007] bridge_slave_0: entered allmulticast mode [ 405.917907][T11007] bridge_slave_0: entered promiscuous mode [ 405.949384][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.004139][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.054337][T11007] bridge_slave_1: entered allmulticast mode [ 406.107861][T11007] bridge_slave_1: entered promiscuous mode [ 406.285993][T11007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.360465][T11007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.442587][T11055] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 406.521161][T11007] team0: Port device team_slave_0 added [ 406.547308][T11007] team0: Port device team_slave_1 added [ 406.689262][T11007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.719615][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.834819][T11007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.937209][T11007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.966987][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.089588][T11007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.589912][T11007] hsr_slave_0: entered promiscuous mode [ 407.627194][T11007] hsr_slave_1: entered promiscuous mode [ 407.677977][T11007] debugfs: 'hsr0' already exists in 'hsr' [ 407.706074][T11007] Cannot create hsr debugfs directory [ 407.744694][ T5841] Bluetooth: hci4: command tx timeout [ 409.407312][T11007] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.530721][T11007] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.568742][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 409.605639][T11007] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.669891][T11007] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.826174][ T5841] Bluetooth: hci4: command tx timeout [ 410.593868][T11101] Invalid ELF header magic: != ELF [ 410.657305][T11007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.735224][T11007] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.822475][T11084] Process accounting resumed [ 411.032413][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.039606][ T8078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.204909][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.212183][ T8093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.453678][T11007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.460873][T11109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1312'. [ 411.501177][T11109] team0 (unregistering): Port device team_slave_0 removed [ 411.907570][ T5841] Bluetooth: hci4: command tx timeout [ 412.318376][T11007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.920302][T11007] veth0_vlan: entered promiscuous mode [ 414.086787][T11007] veth1_vlan: entered promiscuous mode [ 414.233447][T11007] veth0_macvtap: entered promiscuous mode [ 414.292720][T11007] veth1_macvtap: entered promiscuous mode [ 414.321969][T11161] Invalid ELF header magic: != ELF [ 414.385971][T11007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.490788][T11007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.567021][ T8078] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.632512][ T8078] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.688747][ T8078] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.801936][ T8078] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.206318][ T8078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.240787][ T8078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.531242][ T8078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.576297][ T8078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.228957][T11203] Invalid ELF header magic: != ELF [ 417.731355][T11199] Process accounting paused [ 418.220164][T11214] Invalid ELF header magic: != ELF [ 418.245507][T11198] Process accounting resumed [ 418.312949][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 418.370998][T11219] netlink: 98 bytes leftover after parsing attributes in process `syz.4.1337'. [ 418.561397][T11225] FAULT_INJECTION: forcing a failure. [ 418.561397][T11225] name failslab, interval 1, probability 0, space 0, times 0 [ 418.689797][T11225] CPU: 0 UID: 0 PID: 11225 Comm: syz.2.1338 Tainted: G U L syzkaller #0 PREEMPT(full) [ 418.689839][T11225] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 418.689849][T11225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.689863][T11225] Call Trace: [ 418.689871][T11225] [ 418.689880][T11225] dump_stack_lvl+0x100/0x190 [ 418.689920][T11225] should_fail_ex.cold+0x5/0xa [ 418.689948][T11225] should_failslab+0xc2/0x120 [ 418.689975][T11225] __kmalloc_cache_noprof+0x7a/0x6f0 [ 418.690005][T11225] ? vidtv_psi_eit_table_init+0x4c/0x320 [ 418.690031][T11225] ? vidtv_psi_nit_table_update_sec_len+0x38c/0x4a0 [ 418.690070][T11225] ? vidtv_psi_set_sec_len+0xa5/0x160 [ 418.690111][T11225] vidtv_psi_eit_table_init+0x4c/0x320 [ 418.690139][T11225] vidtv_channel_si_init+0xdee/0x18d0 [ 418.690177][T11225] vidtv_mux_init+0x526/0xbf0 [ 418.690209][T11225] vidtv_start_feed+0x33e/0x4c0 [ 418.690245][T11225] ? __pfx_vidtv_start_feed+0x10/0x10 [ 418.690281][T11225] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 418.690324][T11225] ? mark_held_locks+0x40/0x70 [ 418.690358][T11225] ? __pfx_vidtv_start_feed+0x10/0x10 [ 418.690394][T11225] dmx_ts_feed_start_filtering+0xf6/0x220 [ 418.690457][T11225] dvb_dmxdev_start_feed+0x273/0x3f0 [ 418.690494][T11225] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 418.690532][T11225] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 418.690569][T11225] dvb_demux_do_ioctl+0xe64/0x1200 [ 418.690617][T11225] dvb_usercopy+0x167/0x340 [ 418.690647][T11225] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 418.690684][T11225] ? __pfx_dvb_usercopy+0x10/0x10 [ 418.690726][T11225] ? __fget_files+0x21f/0x3d0 [ 418.690769][T11225] dvb_demux_ioctl+0x29/0x40 [ 418.690800][T11225] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 418.690832][T11225] __x64_sys_ioctl+0x18e/0x210 [ 418.690869][T11225] do_syscall_64+0x106/0xf80 [ 418.690894][T11225] ? clear_bhb_loop+0x40/0x90 [ 418.690923][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.690948][T11225] RIP: 0033:0x7faa77f9c629 [ 418.690968][T11225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.690991][T11225] RSP: 002b:00007faa78f23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.691014][T11225] RAX: ffffffffffffffda RBX: 00007faa78216090 RCX: 00007faa77f9c629 [ 418.691030][T11225] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 418.691044][T11225] RBP: 00007faa78032b39 R08: 0000000000000000 R09: 0000000000000000 [ 418.691059][T11225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.691073][T11225] R13: 00007faa78216128 R14: 00007faa78216090 R15: 00007ffe1e353f68 [ 418.691104][T11225] [ 420.504271][T11221] zswap: compressor not available [ 420.881189][T11246] can: request_module (can-proto-0) failed. [ 420.942935][T11252] hub 1-0:1.0: USB hub found [ 420.979954][T11252] hub 1-0:1.0: 1 port detected [ 422.829121][T11270] rtc_cmos 00:00: Alarms can be up to one day in the future [ 423.210622][ T5917] rtc_cmos 00:00: Alarms can be up to one day in the future [ 423.250055][ T5917] rtc_cmos 00:00: Alarms can be up to one day in the future [ 423.325960][ T5917] rtc_cmos 00:00: Alarms can be up to one day in the future [ 423.387854][ T5917] rtc_cmos 00:00: Alarms can be up to one day in the future [ 423.452046][ T5917] rtc rtc0: __rtc_set_alarm: err=-22 [ 423.537389][T11298] FAULT_INJECTION: forcing a failure. [ 423.537389][T11298] name failslab, interval 1, probability 0, space 0, times 0 [ 423.568606][T11296] Invalid ELF header magic: != ELF [ 423.622908][T11298] CPU: 0 UID: 0 PID: 11298 Comm: syz.3.1356 Tainted: G U L syzkaller #0 PREEMPT(full) [ 423.622948][T11298] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 423.622957][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 423.622971][T11298] Call Trace: [ 423.622978][T11298] [ 423.622987][T11298] dump_stack_lvl+0x100/0x190 [ 423.623027][T11298] should_fail_ex.cold+0x5/0xa [ 423.623053][T11298] ? tomoyo_realpath_from_path+0xb6/0x690 [ 423.623078][T11298] should_failslab+0xc2/0x120 [ 423.623100][T11298] __kmalloc_noprof+0xe0/0x850 [ 423.623139][T11298] tomoyo_realpath_from_path+0xb6/0x690 [ 423.623176][T11298] tomoyo_path_number_perm+0x23c/0x580 [ 423.623211][T11298] ? tomoyo_path_number_perm+0x22e/0x580 [ 423.623249][T11298] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 423.623294][T11298] ? rcu_read_lock_any_held+0x6a/0xa0 [ 423.623350][T11298] ? hook_file_ioctl_common+0x146/0x410 [ 423.623399][T11298] security_file_ioctl+0xd3/0x230 [ 423.623436][T11298] __x64_sys_ioctl+0xb7/0x210 [ 423.623470][T11298] do_syscall_64+0x106/0xf80 [ 423.623494][T11298] ? clear_bhb_loop+0x40/0x90 [ 423.623522][T11298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.623545][T11298] RIP: 0033:0x7fa48679c629 [ 423.623564][T11298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.623586][T11298] RSP: 002b:00007fa4849f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.623608][T11298] RAX: ffffffffffffffda RBX: 00007fa486a15fa0 RCX: 00007fa48679c629 [ 423.623624][T11298] RDX: 0000000000000002 RSI: 00000000c040aed4 RDI: 0000000000000003 [ 423.623638][T11298] RBP: 00007fa4849f6090 R08: 0000000000000000 R09: 0000000000000000 [ 423.623651][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.623665][T11298] R13: 00007fa486a16038 R14: 00007fa486a15fa0 R15: 00007ffeb1bbab08 [ 423.623695][T11298] [ 423.623715][T11298] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.282714][T11355] usb usb16: usbfs: process 11355 (syz.2.1366) did not claim interface 0 before use [ 428.190683][T11362] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1369'. [ 428.858280][T11372] zswap: compressor not available [ 432.723340][T11408] syz.2.1380 (11408) used greatest stack depth: 19672 bytes left [ 433.779510][T11444] [ 436.703386][T11481] tipc: Started in network mode [ 436.730119][T11481] tipc: Node identity ee00, cluster identity 4711 [ 436.769542][T11481] tipc: Node number set to 60928 [ 437.148156][T11493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1401'. [ 437.180368][T11488] Invalid ELF header magic: != ELF [ 438.680829][T11514] Invalid ELF header magic: != ELF [ 439.967793][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 440.128206][T11532] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 441.306303][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.321237][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.577388][ T5841] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 441.597409][T11546] Invalid ELF header magic: != ELF [ 441.667869][T11526] Process accounting paused [ 444.083563][T11595] Invalid ELF header magic: != ELF [ 446.483694][T11641] input: f as /devices/virtual/input/input6 [ 447.800429][ T29] audit: type=1800 audit(2147485969.894:40): pid=11660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1425" name="members" dev="configfs" ino=50317 res=0 errno=0 [ 448.153254][T11646] Process accounting resumed [ 448.595570][T11675] Invalid ELF header magic: != ELF [ 448.893167][T11662] Process accounting paused [ 448.978640][T10750] Process accounting resumed [ 449.759318][T11695] Invalid ELF header magic: != ELF [ 450.446252][T11708] FAULT_INJECTION: forcing a failure. [ 450.446252][T11708] name failslab, interval 1, probability 0, space 0, times 0 [ 450.517775][T11708] CPU: 0 UID: 0 PID: 11708 Comm: syz.3.1436 Tainted: G U L syzkaller #0 PREEMPT(full) [ 450.517817][T11708] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 450.517826][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.517841][T11708] Call Trace: [ 450.517848][T11708] [ 450.517858][T11708] dump_stack_lvl+0x100/0x190 [ 450.517900][T11708] should_fail_ex.cold+0x5/0xa [ 450.517928][T11708] should_failslab+0xc2/0x120 [ 450.517952][T11708] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 450.517991][T11708] ? kstrdup_const+0x63/0x80 [ 450.518033][T11708] kstrdup+0x51/0xe0 [ 450.518070][T11708] kstrdup_const+0x63/0x80 [ 450.518106][T11708] __kernfs_new_node+0x9b/0x960 [ 450.518143][T11708] ? __pfx___kernfs_new_node+0x10/0x10 [ 450.518182][T11708] ? find_held_lock+0x2b/0x80 [ 450.518213][T11708] ? kernfs_root+0xee/0x2a0 [ 450.518243][T11708] ? kernfs_root+0xee/0x2a0 [ 450.518281][T11708] kernfs_new_node+0x11b/0x1a0 [ 450.518322][T11708] kernfs_create_link+0xcc/0x240 [ 450.518351][T11708] sysfs_do_create_link_sd+0x90/0x140 [ 450.518385][T11708] sysfs_create_link+0x61/0xc0 [ 450.518416][T11708] __add_disk+0x619/0xe40 [ 450.518451][T11708] ? find_held_lock+0x2b/0x80 [ 450.518475][T11708] add_disk_fwnode+0x3d4/0x5c0 [ 450.518513][T11708] zram_add+0x4d2/0x610 [ 450.518537][T11708] ? __pfx_zram_add+0x10/0x10 [ 450.518579][T11708] ? find_held_lock+0x2b/0x80 [ 450.518600][T11708] ? sysfs_file_kobj+0xe4/0x290 [ 450.518631][T11708] ? __pfx_hot_add_show+0x10/0x10 [ 450.518655][T11708] hot_add_show+0x21/0x80 [ 450.518679][T11708] class_attr_show+0x72/0xa0 [ 450.518716][T11708] ? __pfx_class_attr_show+0x10/0x10 [ 450.518756][T11708] sysfs_kf_seq_show+0x217/0x3a0 [ 450.518790][T11708] seq_read_iter+0x32f/0x1270 [ 450.518839][T11708] kernfs_fop_read_iter+0x46c/0x610 [ 450.518864][T11708] ? rw_verify_area+0xce/0x6d0 [ 450.518897][T11708] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 450.518924][T11708] vfs_read+0x825/0xb30 [ 450.518964][T11708] ? __pfx_vfs_read+0x10/0x10 [ 450.519019][T11708] ksys_read+0x12a/0x250 [ 450.519054][T11708] ? __pfx_ksys_read+0x10/0x10 [ 450.519099][T11708] do_syscall_64+0x106/0xf80 [ 450.519125][T11708] ? clear_bhb_loop+0x40/0x90 [ 450.519155][T11708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.519180][T11708] RIP: 0033:0x7fa48679c629 [ 450.519201][T11708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.519230][T11708] RSP: 002b:00007fa4849f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.519254][T11708] RAX: ffffffffffffffda RBX: 00007fa486a15fa0 RCX: 00007fa48679c629 [ 450.519270][T11708] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 450.519285][T11708] RBP: 00007fa486832b39 R08: 0000000000000000 R09: 0000000000000000 [ 450.519300][T11708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.519314][T11708] R13: 00007fa486a16038 R14: 00007fa486a15fa0 R15: 00007ffeb1bbab08 [ 450.519347][T11708] [ 453.318437][T11742] Invalid ELF header magic: != ELF [ 453.515776][T11746] random: crng reseeded on system resumption [ 453.594468][T11746] hub 1-0:1.0: USB hub found [ 453.645162][T11746] hub 1-0:1.0: 1 port detected [ 455.378549][T11788] Invalid ELF header magic: != ELF [ 456.030617][T11812] FAULT_INJECTION: forcing a failure. [ 456.030617][T11812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.103556][T11812] CPU: 0 UID: 0 PID: 11812 Comm: syz.2.1461 Tainted: G U L syzkaller #0 PREEMPT(full) [ 456.103595][T11812] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 456.103604][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.103618][T11812] Call Trace: [ 456.103625][T11812] [ 456.103634][T11812] dump_stack_lvl+0x100/0x190 [ 456.103673][T11812] should_fail_ex.cold+0x5/0xa [ 456.103699][T11812] _copy_from_user+0x2e/0xd0 [ 456.103737][T11812] cifs_security_flags_proc_write+0xd8/0x6b0 [ 456.103763][T11812] ? __pfx_cifs_security_flags_proc_write+0x10/0x10 [ 456.103797][T11812] ? __pfx_cifs_security_flags_proc_write+0x10/0x10 [ 456.103838][T11812] proc_reg_write+0x240/0x330 [ 456.103874][T11812] ? __pfx_proc_reg_write+0x10/0x10 [ 456.103906][T11812] vfs_writev+0x5ea/0xe10 [ 456.103943][T11812] ? rcu_is_watching+0x12/0xc0 [ 456.103986][T11812] ? __pfx_vfs_writev+0x10/0x10 [ 456.104017][T11812] ? fdget_pos+0x2aa/0x380 [ 456.104040][T11812] ? find_held_lock+0x2b/0x80 [ 456.104078][T11812] ? __fget_files+0x21f/0x3d0 [ 456.104120][T11812] ? do_writev+0x13e/0x340 [ 456.104150][T11812] do_writev+0x13e/0x340 [ 456.104184][T11812] ? __pfx_do_writev+0x10/0x10 [ 456.104225][T11812] do_syscall_64+0x106/0xf80 [ 456.104250][T11812] ? clear_bhb_loop+0x40/0x90 [ 456.104279][T11812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.104303][T11812] RIP: 0033:0x7faa77f9c629 [ 456.104322][T11812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.104345][T11812] RSP: 002b:00007faa78f44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 456.104367][T11812] RAX: ffffffffffffffda RBX: 00007faa78215fa0 RCX: 00007faa77f9c629 [ 456.104383][T11812] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 456.104397][T11812] RBP: 00007faa78f44090 R08: 0000000000000000 R09: 0000000000000000 [ 456.104411][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.104425][T11812] R13: 00007faa78216038 R14: 00007faa78215fa0 R15: 00007ffe1e353f68 [ 456.104454][T11812] [ 458.218798][T11848] Invalid ELF header magic: != ELF [ 458.689432][T11860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1470'. [ 458.766927][T11862] Invalid ELF header magic: != ELF [ 460.117035][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 461.067645][T11908] Invalid ELF header magic: != ELF [ 461.513107][T11923] FAULT_INJECTION: forcing a failure. [ 461.513107][T11923] name failslab, interval 1, probability 0, space 0, times 0 [ 461.677042][T11923] CPU: 0 UID: 0 PID: 11923 Comm: syz.1.1486 Tainted: G U L syzkaller #0 PREEMPT(full) [ 461.677085][T11923] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 461.677095][T11923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.677109][T11923] Call Trace: [ 461.677116][T11923] [ 461.677125][T11923] dump_stack_lvl+0x100/0x190 [ 461.677165][T11923] should_fail_ex.cold+0x5/0xa [ 461.677193][T11923] should_failslab+0xc2/0x120 [ 461.677217][T11923] __kmalloc_cache_noprof+0x7a/0x6f0 [ 461.677246][T11923] ? kobject_uevent_env+0x263/0x18b0 [ 461.677287][T11923] kobject_uevent_env+0x263/0x18b0 [ 461.677324][T11923] ? find_held_lock+0x2b/0x80 [ 461.677345][T11923] ? xprt_switch_put.part.0+0x102/0x1c0 [ 461.677379][T11923] ? xprt_switch_put.part.0+0x102/0x1c0 [ 461.677417][T11923] rpc_sysfs_xprt_switch_destroy+0x4c/0xa0 [ 461.677447][T11923] xprt_switch_put.part.0+0x10a/0x1c0 [ 461.677482][T11923] xprt_iter_destroy+0x37/0x50 [ 461.677517][T11923] rpc_release_client+0x217/0x600 [ 461.677554][T11923] rpc_shutdown_client+0x218/0x690 [ 461.677596][T11923] ? __pfx_rpc_shutdown_client+0x10/0x10 [ 461.677642][T11923] ? do_raw_spin_lock+0x128/0x260 [ 461.677676][T11923] ? find_held_lock+0x2b/0x80 [ 461.677697][T11923] ? rpcb_put_local+0x19a/0x220 [ 461.677726][T11923] ? rpcb_put_local+0x19a/0x220 [ 461.677761][T11923] rpcb_put_local+0x1cb/0x220 [ 461.677794][T11923] svc_xprt_destroy_all+0x455/0x4e0 [ 461.677827][T11923] ? __pfx_autoremove_wake_function+0x10/0x10 [ 461.677872][T11923] ? __pfx_svc_xprt_destroy_all+0x10/0x10 [ 461.677900][T11923] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 461.677939][T11923] nfsd_destroy_serv+0x1a8/0x4e0 [ 461.677970][T11923] ? __pfx_nfsd_destroy_serv+0x10/0x10 [ 461.678003][T11923] ? __nla_parse+0x40/0x60 [ 461.678033][T11923] nfsd_nl_listener_set_doit+0x81f/0x1b20 [ 461.678080][T11923] ? rcu_is_watching+0x12/0xc0 [ 461.678118][T11923] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 461.678158][T11923] ? __nla_parse+0x40/0x60 [ 461.678187][T11923] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 461.678221][T11923] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 461.678261][T11923] genl_family_rcv_msg_doit+0x214/0x300 [ 461.678296][T11923] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 461.678335][T11923] ? genl_get_cmd+0x3ef/0x720 [ 461.678393][T11923] ? bpf_lsm_capable+0x9/0x10 [ 461.678415][T11923] ? security_capable+0x80/0x260 [ 461.678451][T11923] genl_rcv_msg+0x560/0x800 [ 461.678488][T11923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.678521][T11923] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 461.678571][T11923] netlink_rcv_skb+0x159/0x420 [ 461.678600][T11923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.678642][T11923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.678683][T11923] ? netlink_deliver_tap+0x1ae/0xcc0 [ 461.678714][T11923] genl_rcv+0x28/0x40 [ 461.678743][T11923] netlink_unicast+0x5aa/0x870 [ 461.678776][T11923] ? __pfx_netlink_unicast+0x10/0x10 [ 461.678815][T11923] netlink_sendmsg+0x8b0/0xda0 [ 461.678850][T11923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.678877][T11923] ? __import_iovec+0x1d2/0x640 [ 461.678917][T11923] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 461.678952][T11923] ____sys_sendmsg+0xa54/0xc30 [ 461.678988][T11923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.679027][T11923] ? __pfx_futex_wake_mark+0x10/0x10 [ 461.679068][T11923] ___sys_sendmsg+0x190/0x1e0 [ 461.679105][T11923] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.679175][T11923] __sys_sendmsg+0x170/0x220 [ 461.679202][T11923] ? __pfx___sys_sendmsg+0x10/0x10 [ 461.679228][T11923] ? __x64_sys_futex+0x34f/0x4d0 [ 461.679276][T11923] do_syscall_64+0x106/0xf80 [ 461.679301][T11923] ? clear_bhb_loop+0x40/0x90 [ 461.679330][T11923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.679355][T11923] RIP: 0033:0x7f1aa099c629 [ 461.679375][T11923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.679399][T11923] RSP: 002b:00007f1aa179d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.679423][T11923] RAX: ffffffffffffffda RBX: 00007f1aa0c15fa0 RCX: 00007f1aa099c629 [ 461.679439][T11923] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000004 [ 461.679455][T11923] RBP: 00007f1aa0a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 461.679470][T11923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.679485][T11923] R13: 00007f1aa0c16038 R14: 00007f1aa0c15fa0 R15: 00007ffc8d3467e8 [ 461.679516][T11923] [ 464.038311][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1495'. [ 464.079331][T11971] team0 (unregistering): Port device team_slave_0 removed [ 464.100641][T11971] team0 (unregistering): Port device team_slave_1 removed [ 467.561265][T12026] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[12026] [ 467.625551][T12027] warning: `syz.1.1504' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 470.099492][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1511'. [ 473.640795][T12083] ovs_: entered promiscuous mode [ 474.804206][T12099] Invalid ELF header magic: != ELF [ 476.205524][T12109] zswap: compressor 000 not available [ 476.977080][T12128] hub 1-0:1.0: USB hub found [ 477.031916][T12128] hub 1-0:1.0: 1 port detected [ 477.460381][ T5828] Process accounting resumed [ 477.994581][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.005182][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 478.019546][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 478.028597][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 478.037415][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.073953][T12138] Process accounting resumed [ 479.262966][T12147] FAULT_INJECTION: forcing a failure. [ 479.262966][T12147] name failslab, interval 1, probability 0, space 0, times 0 [ 479.330401][T12147] CPU: 0 UID: 0 PID: 12147 Comm: syz.2.1535 Tainted: G U L syzkaller #0 PREEMPT(full) [ 479.330443][T12147] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 479.330452][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.330467][T12147] Call Trace: [ 479.330475][T12147] [ 479.330484][T12147] dump_stack_lvl+0x100/0x190 [ 479.330523][T12147] should_fail_ex.cold+0x5/0xa [ 479.330551][T12147] ? lsm_blob_alloc+0x68/0x90 [ 479.330577][T12147] should_failslab+0xc2/0x120 [ 479.330599][T12147] __kmalloc_noprof+0xe0/0x850 [ 479.330633][T12147] ? trace_kmem_cache_alloc+0xf3/0x120 [ 479.330661][T12147] lsm_blob_alloc+0x68/0x90 [ 479.330688][T12147] security_sk_alloc+0x2d/0x290 [ 479.330722][T12147] sk_prot_alloc+0x1d1/0x2a0 [ 479.330757][T12147] sk_alloc+0x36/0xe80 [ 479.330781][T12147] inet6_create+0x385/0x12b0 [ 479.330809][T12147] ? inet6_create+0x7f/0x12b0 [ 479.330838][T12147] __sock_create+0x339/0x860 [ 479.330877][T12147] smc_create+0x163/0x290 [ 479.330917][T12147] __sock_create+0x339/0x860 [ 479.330956][T12147] __sys_socket+0x14d/0x260 [ 479.330991][T12147] ? __pfx___sys_socket+0x10/0x10 [ 479.331035][T12147] __x64_sys_socket+0x72/0xb0 [ 479.331072][T12147] ? lockdep_hardirqs_on+0x78/0x100 [ 479.331099][T12147] do_syscall_64+0x106/0xf80 [ 479.331124][T12147] ? clear_bhb_loop+0x40/0x90 [ 479.331153][T12147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.331177][T12147] RIP: 0033:0x7faa77f9c629 [ 479.331196][T12147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.331220][T12147] RSP: 002b:00007faa78f44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 479.331243][T12147] RAX: ffffffffffffffda RBX: 00007faa78215fa0 RCX: 00007faa77f9c629 [ 479.331267][T12147] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 479.331281][T12147] RBP: 00007faa78032b39 R08: 0000000000000000 R09: 0000000000000000 [ 479.331296][T12147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.331311][T12147] R13: 00007faa78216038 R14: 00007faa78215fa0 R15: 00007ffe1e353f68 [ 479.331341][T12147] [ 480.211931][ T5831] Bluetooth: hci1: command tx timeout [ 480.463834][T12136] chnl_net:caif_netlink_parms(): no params data found [ 480.494872][T12150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1536'. [ 480.684023][T12120] Process accounting paused [ 480.920576][T12136] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.971338][T12136] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.004240][T12136] bridge_slave_0: entered allmulticast mode [ 481.048560][T12136] bridge_slave_0: entered promiscuous mode [ 481.102175][T12136] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.110019][T12136] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.197863][T12136] bridge_slave_1: entered allmulticast mode [ 481.242533][T12136] bridge_slave_1: entered promiscuous mode [ 481.537471][T12136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.605226][T12136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.855753][T12136] team0: Port device team_slave_0 added [ 481.936932][T12136] team0: Port device team_slave_1 added [ 482.084752][T12136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.142724][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.265963][ T5831] Bluetooth: hci1: command tx timeout [ 482.297218][T12136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.498536][T12136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.561000][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.712088][T12136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.729463][T12173] FAULT_INJECTION: forcing a failure. [ 482.729463][T12173] name failslab, interval 1, probability 0, space 0, times 0 [ 482.785885][T12173] CPU: 0 UID: 0 PID: 12173 Comm: syz.1.1541 Tainted: G U L syzkaller #0 PREEMPT(full) [ 482.785928][T12173] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 482.785938][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 482.785952][T12173] Call Trace: [ 482.785960][T12173] [ 482.785969][T12173] dump_stack_lvl+0x100/0x190 [ 482.786009][T12173] should_fail_ex.cold+0x5/0xa [ 482.786037][T12173] should_failslab+0xc2/0x120 [ 482.786060][T12173] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 482.786094][T12173] ? __kernfs_new_node+0xd2/0x960 [ 482.786131][T12173] __kernfs_new_node+0xd2/0x960 [ 482.786164][T12173] ? kernfs_add_one+0x214/0x850 [ 482.786199][T12173] ? __pfx___kernfs_new_node+0x10/0x10 [ 482.786238][T12173] ? find_held_lock+0x2b/0x80 [ 482.786260][T12173] ? kernfs_root+0xee/0x2a0 [ 482.786289][T12173] ? kernfs_root+0xee/0x2a0 [ 482.786327][T12173] kernfs_new_node+0x11b/0x1a0 [ 482.786368][T12173] kernfs_create_link+0xcc/0x240 [ 482.786397][T12173] sysfs_do_create_link_sd+0x90/0x140 [ 482.786430][T12173] sysfs_create_link+0x61/0xc0 [ 482.786461][T12173] device_add+0x553/0x1950 [ 482.786500][T12173] ? kfree_const+0x5a/0x70 [ 482.786536][T12173] ? __pfx_device_add+0x10/0x10 [ 482.786571][T12173] ? kfree_const+0x5a/0x70 [ 482.786604][T12173] ? kfree+0x2ec/0x6b0 [ 482.786641][T12173] device_create_groups_vargs+0x1f8/0x270 [ 482.786684][T12173] device_create+0xed/0x130 [ 482.786723][T12173] ? __pfx_device_create+0x10/0x10 [ 482.786767][T12173] ? lockdep_init_map_type+0x5c/0x250 [ 482.786799][T12173] ? timer_init_key+0x150/0x340 [ 482.786829][T12173] ? ieee80211_roc_setup+0x136/0x270 [ 482.786869][T12173] ? ieee80211_alloc_hw_nm+0x19c3/0x22a0 [ 482.786909][T12173] mac80211_hwsim_new_radio+0x37f/0x57d0 [ 482.786955][T12173] ? __asan_memset+0x23/0x50 [ 482.786987][T12173] ? __nla_validate_parse+0x1e7/0x28b0 [ 482.787018][T12173] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 482.787059][T12173] hwsim_new_radio_nl+0xc1f/0x1340 [ 482.787093][T12173] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 482.787133][T12173] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 482.787169][T12173] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 482.787210][T12173] genl_family_rcv_msg_doit+0x214/0x300 [ 482.787247][T12173] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 482.787281][T12173] ? genl_get_cmd+0x3ef/0x720 [ 482.787319][T12173] ? bpf_lsm_capable+0x9/0x10 [ 482.787342][T12173] ? security_capable+0x80/0x260 [ 482.787373][T12173] ? ns_capable+0xd2/0xf0 [ 482.787398][T12173] genl_rcv_msg+0x560/0x800 [ 482.787434][T12173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.787468][T12173] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 482.787510][T12173] netlink_rcv_skb+0x159/0x420 [ 482.787539][T12173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.787574][T12173] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.787616][T12173] ? netlink_deliver_tap+0x1ae/0xcc0 [ 482.787647][T12173] genl_rcv+0x28/0x40 [ 482.787677][T12173] netlink_unicast+0x5aa/0x870 [ 482.787710][T12173] ? __pfx_netlink_unicast+0x10/0x10 [ 482.787755][T12173] netlink_sendmsg+0x8b0/0xda0 [ 482.787790][T12173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.787819][T12173] ? __import_iovec+0x1d2/0x640 [ 482.787861][T12173] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 482.787897][T12173] ____sys_sendmsg+0xa54/0xc30 [ 482.787934][T12173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.787973][T12173] ? try_to_wake_up+0x644/0x1a80 [ 482.788001][T12173] ___sys_sendmsg+0x190/0x1e0 [ 482.788038][T12173] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.788073][T12173] ? futex_private_hash_put+0x107/0x1c0 [ 482.788135][T12173] __sys_sendmsg+0x170/0x220 [ 482.788161][T12173] ? __pfx___sys_sendmsg+0x10/0x10 [ 482.788190][T12173] ? __x64_sys_futex+0x34f/0x4d0 [ 482.788238][T12173] do_syscall_64+0x106/0xf80 [ 482.788264][T12173] ? clear_bhb_loop+0x40/0x90 [ 482.788293][T12173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.788318][T12173] RIP: 0033:0x7f1aa099c629 [ 482.788338][T12173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.788362][T12173] RSP: 002b:00007f1aa179d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.788385][T12173] RAX: ffffffffffffffda RBX: 00007f1aa0c15fa0 RCX: 00007f1aa099c629 [ 482.788401][T12173] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 000000000000000b [ 482.788416][T12173] RBP: 00007f1aa0a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 482.788431][T12173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.788446][T12173] R13: 00007f1aa0c16038 R14: 00007f1aa0c15fa0 R15: 00007ffc8d3467e8 [ 482.788477][T12173] [ 483.391097][T12136] hsr_slave_0: entered promiscuous mode [ 483.397565][T12136] hsr_slave_1: entered promiscuous mode [ 483.404028][T12136] debugfs: 'hsr0' already exists in 'hsr' [ 483.409798][T12136] Cannot create hsr debugfs directory [ 483.655190][T12136] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 484.121553][T12136] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 484.249391][T12136] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 484.316881][T12190] FAULT_INJECTION: forcing a failure. [ 484.316881][T12190] name failslab, interval 1, probability 0, space 0, times 0 [ 484.353380][ T5841] Bluetooth: hci1: command tx timeout [ 484.365320][T12190] CPU: 0 UID: 0 PID: 12190 Comm: syz.1.1543 Tainted: G U L syzkaller #0 PREEMPT(full) [ 484.365361][T12190] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 484.365371][T12190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 484.365386][T12190] Call Trace: [ 484.365393][T12190] [ 484.365402][T12190] dump_stack_lvl+0x100/0x190 [ 484.365442][T12190] should_fail_ex.cold+0x5/0xa [ 484.365470][T12190] should_failslab+0xc2/0x120 [ 484.365513][T12190] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 484.365551][T12190] ? fib_rules_register+0x30/0x500 [ 484.365586][T12190] kmemdup_noprof+0x29/0x60 [ 484.365623][T12190] fib_rules_register+0x30/0x500 [ 484.365661][T12190] fib4_rules_init+0x1f/0x1c0 [ 484.365699][T12190] fib_net_init+0x1dc/0x3f0 [ 484.365725][T12190] ? is_module_address+0x69/0xf0 [ 484.365755][T12190] ? __pfx_fib_net_init+0x10/0x10 [ 484.365790][T12190] ? timer_init_key+0x150/0x340 [ 484.365820][T12190] ? devinet_init_net+0x56c/0x8d0 [ 484.365855][T12190] ? __pfx_fib_net_init+0x10/0x10 [ 484.365881][T12190] ops_init+0x1e2/0x5f0 [ 484.365911][T12190] setup_net+0x118/0x3a0 [ 484.365940][T12190] ? __pfx_setup_net+0x10/0x10 [ 484.365966][T12190] ? lockdep_init_map_type+0x5c/0x250 [ 484.365998][T12190] ? mutex_init_lockep+0x110/0x150 [ 484.366035][T12190] copy_net_ns+0x46f/0x7c0 [ 484.366068][T12190] create_new_namespaces+0x3ea/0xac0 [ 484.366099][T12190] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 484.366126][T12190] ksys_unshare+0x455/0xab0 [ 484.366158][T12190] ? __pfx_ksys_unshare+0x10/0x10 [ 484.366198][T12190] __x64_sys_unshare+0x31/0x40 [ 484.366230][T12190] do_syscall_64+0x106/0xf80 [ 484.366256][T12190] ? clear_bhb_loop+0x40/0x90 [ 484.366285][T12190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.366309][T12190] RIP: 0033:0x7f1aa099c629 [ 484.366334][T12190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.366358][T12190] RSP: 002b:00007f1aa177c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 484.366381][T12190] RAX: ffffffffffffffda RBX: 00007f1aa0c16090 RCX: 00007f1aa099c629 [ 484.366398][T12190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 484.366412][T12190] RBP: 00007f1aa0a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 484.366427][T12190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.366441][T12190] R13: 00007f1aa0c16128 R14: 00007f1aa0c16090 R15: 00007ffc8d3467e8 [ 484.366472][T12190] [ 484.708060][T12196] kvm: kvm [12194]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x2 [ 485.360468][T12136] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 486.027751][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 486.424291][ T5841] Bluetooth: hci1: command tx timeout [ 486.839548][T12136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.984147][T12136] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.071785][ T6387] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.078991][ T6387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.175663][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.182841][ T6387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.917871][T12136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.636271][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'. [ 490.128896][T12136] veth0_vlan: entered promiscuous mode [ 490.228412][T12136] veth1_vlan: entered promiscuous mode [ 490.377843][T12136] veth0_macvtap: entered promiscuous mode [ 490.435112][T12136] veth1_macvtap: entered promiscuous mode [ 490.544500][T12136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.605258][T12136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.689549][ T8064] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.728111][ T8064] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.812029][T12280] Invalid ELF header magic: != ELF [ 490.861452][ T8064] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.914006][ T8064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.315806][ T6387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.368457][ T6387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.506368][ T6387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.552543][ T6387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.203097][T12289] vivid-007: ================= START STATUS ================= [ 492.243851][T12289] vivid-007: Generate PTS: true [ 492.292896][T12289] vivid-007: Generate SCR: true [ 492.308779][T12289] tpg source WxH: 320x240 (Y'CbCr) [ 492.385390][T12289] tpg field: 1 [ 492.388799][T12289] tpg crop: (0,0)/320x240 [ 492.393144][T12289] tpg compose: (0,0)/320x240 [ 492.508328][T12289] tpg colorspace: 8 [ 492.543187][T12289] tpg transfer function: 0/0 [ 492.574438][T12289] tpg Y'CbCr encoding: 0/0 [ 492.603725][T12289] tpg quantization: 0/0 [ 492.629123][T12289] tpg RGB range: 0/2 [ 492.648341][T12297] Invalid ELF header magic: != ELF [ 492.661072][T12289] vivid-007: ================== END STATUS ================== [ 494.023378][T12315] Invalid ELF header magic: != ELF [ 495.243003][T12327] hub 1-0:1.0: USB hub found [ 495.287659][T12327] hub 1-0:1.0: 1 port detected [ 495.974657][T12334] Invalid ELF header magic: != ELF [ 496.841523][T12343] Invalid ELF header magic: != ELF [ 496.873106][T12345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1573'. [ 497.600630][T12363] [U]  [ 497.603738][T12363] [U] [ 497.606458][T12363] [U] [ 497.609163][T12363] [U] [ 497.692268][T12363] [U] [ 497.695026][T12363] [U] [ 497.697751][T12363] [U] [ 497.700459][T12363] [U] [ 497.728924][T12365] FAULT_INJECTION: forcing a failure. [ 497.728924][T12365] name failslab, interval 1, probability 0, space 0, times 0 [ 497.838432][T12363] [U] [ 497.841271][T12363] [U] [ 497.843983][T12363] [U] [ 497.846694][T12363] [U] [ 497.874057][T12365] CPU: 0 UID: 0 PID: 12365 Comm: syz.4.1577 Tainted: G U L syzkaller #0 PREEMPT(full) [ 497.874099][T12365] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 497.874108][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.874123][T12365] Call Trace: [ 497.874130][T12365] [ 497.874139][T12365] dump_stack_lvl+0x100/0x190 [ 497.874180][T12365] should_fail_ex.cold+0x5/0xa [ 497.874208][T12365] should_failslab+0xc2/0x120 [ 497.874231][T12365] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 497.874267][T12365] ? __alloc_skb+0x140/0x710 [ 497.874297][T12365] __alloc_skb+0x140/0x710 [ 497.874322][T12365] ? __alloc_skb+0x5b7/0x710 [ 497.874345][T12365] ? __pfx___alloc_skb+0x10/0x10 [ 497.874373][T12365] ? sk_page_frag_refill+0x6c/0x340 [ 497.874413][T12365] kcm_sendmsg+0x1482/0x2fe0 [ 497.874452][T12365] ? __pfx_kcm_sendmsg+0x10/0x10 [ 497.874478][T12365] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 497.874515][T12365] sock_sendmsg+0x3a1/0x430 [ 497.874550][T12365] ? __pfx_sock_sendmsg+0x10/0x10 [ 497.874602][T12365] splice_to_socket+0xb4c/0x11b0 [ 497.874640][T12365] ? touch_atime+0xa5/0x7a0 [ 497.874691][T12365] ? __pfx_splice_to_socket+0x10/0x10 [ 497.874765][T12365] ? trace_kmalloc+0x101/0x130 [ 497.874787][T12365] ? lockdep_init_map_type+0x5c/0x250 [ 497.874821][T12365] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 497.874857][T12365] ? __pfx_splice_to_socket+0x10/0x10 [ 497.874898][T12365] direct_splice_actor+0x192/0x6c0 [ 497.874940][T12365] splice_direct_to_actor+0x345/0xa30 [ 497.874980][T12365] ? __pfx_direct_splice_actor+0x10/0x10 [ 497.875023][T12365] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 497.875070][T12365] do_splice_direct+0x174/0x240 [ 497.875109][T12365] ? __pfx_do_splice_direct+0x10/0x10 [ 497.875148][T12365] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 497.875187][T12365] ? bpf_lsm_file_permission+0x9/0x10 [ 497.875223][T12365] ? security_file_permission+0x76/0x210 [ 497.875263][T12365] ? rw_verify_area+0xce/0x6d0 [ 497.875297][T12365] do_sendfile+0xadc/0xe20 [ 497.875337][T12365] ? __pfx_do_sendfile+0x10/0x10 [ 497.875376][T12365] ? __x64_sys_futex+0x34f/0x4d0 [ 497.875406][T12365] ? __x64_sys_futex+0x358/0x4d0 [ 497.875439][T12365] __x64_sys_sendfile64+0x1d8/0x220 [ 497.875465][T12365] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 497.875499][T12365] do_syscall_64+0x106/0xf80 [ 497.875524][T12365] ? clear_bhb_loop+0x40/0x90 [ 497.875554][T12365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.875578][T12365] RIP: 0033:0x7f3b6359c629 [ 497.875598][T12365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.875622][T12365] RSP: 002b:00007f3b617f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 497.875644][T12365] RAX: ffffffffffffffda RBX: 00007f3b63815fa0 RCX: 00007f3b6359c629 [ 497.875669][T12365] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 497.875683][T12365] RBP: 00007f3b63632b39 R08: 0000000000000000 R09: 0000000000000000 [ 497.875697][T12365] R10: 000000007ffff011 R11: 0000000000000246 R12: 0000000000000000 [ 497.875712][T12365] R13: 00007f3b63816038 R14: 00007f3b63815fa0 R15: 00007ffeb460a548 [ 497.875743][T12365] [ 498.584171][T12363] [U] [ 498.586925][T12363] [U] [ 498.589646][T12363] [U] [ 498.592356][T12363] [U] [ 498.618933][T12363] [U] [ 498.621682][T12363] [U] [ 498.624391][T12363] [U] [ 498.627112][T12363] [U] [ 498.672904][T12363] [U] [ 498.675739][T12363] [U] [ 498.678445][T12363] [U] [ 498.681150][T12363] [U] [ 498.719965][T12363] [U] [ 498.722712][T12363] [U] [ 498.725421][T12363] [U] [ 498.728126][T12363] [U] [ 498.753915][T12363] [U] [ 498.756665][T12363] [U] [ 498.759398][T12363] [U] [ 498.762106][T12363] [U] [ 498.793913][T12363] [U] [ 498.796666][T12363] [U] [ 498.799377][T12363] [U] [ 498.802087][T12363] [U] [ 498.833907][T12363] [U] [ 498.836651][T12363] [U] [ 498.839358][T12363] [U] [ 498.842068][T12363] [U] [ 498.864515][T12363] [U] [ 498.867300][T12363] [U] [ 498.870010][T12363] [U] [ 498.872720][T12363] [U] [ 498.897183][T12363] [U] [ 498.900014][T12363] [U] [ 498.902722][T12363] [U] [ 498.905425][T12363] [U] [ 498.939417][T12363] [U] [ 498.942165][T12363] [U] [ 498.944905][T12363] [U] [ 498.947609][T12363] [U] [ 498.994046][T12363] [U] [ 498.996790][T12363] [U] [ 498.999497][T12363] [U] [ 499.002202][T12363] [U] [ 499.087890][T12363] [U] [ 499.090662][T12363] [U] [ 499.093371][T12363] [U] [ 499.096088][T12363] [U] [ 499.125709][T12363] [U] [ 499.128463][T12363] [U] [ 499.131179][T12363] [U] [ 499.133888][T12363] [U] [ 499.161463][T12363] [U] [ 499.164214][T12363] [U] [ 499.166915][T12363] [U] [ 499.169619][T12363] [U] [ 499.186065][T12375] Invalid ELF header magic: != ELF [ 499.199449][T12363] [U] [ 499.202194][T12363] [U] [ 499.204988][T12363] [U] [ 499.207701][T12363] [U] [ 499.243902][T12363] [U] [ 499.246654][T12363] [U] [ 499.249367][T12363] [U] [ 499.252071][T12363] [U] [ 499.295020][T12363] [U] [ 500.790347][T12378] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 502.748116][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.768979][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.915266][T12387] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 506.871992][T12442] Invalid ELF header magic: != ELF [ 508.932628][T12469] Invalid ELF header magic: != ELF [ 509.111086][T12448] rtc_cmos 00:00: Alarms can be up to one day in the future [ 509.206957][T12036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 509.247419][T12036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 509.292534][T12036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 509.329638][T12036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 509.365223][T12036] rtc rtc0: __rtc_set_alarm: err=-22 [ 510.060918][T12489] Invalid ELF header magic: != ELF [ 510.136619][T12394] Process accounting paused [ 510.668935][T12493] Invalid ELF header magic: != ELF [ 511.367972][T12477] Process accounting resumed [ 511.759793][T12509] Invalid ELF header magic: != ELF [ 512.032223][T12513] Invalid ELF header magic: != ELF [ 512.724476][T12519] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1613'. [ 512.796277][T12518] Invalid ELF header magic: != ELF [ 512.822270][T12522] ICMPv6: process `syz.5.1615' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 513.331379][T12534] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1616'. [ 513.458913][T12531] program syz.2.1616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.016143][T12555] i2c i2c-0: delete_device: Extra parameters [ 514.738140][T12576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1628'. [ 516.342378][T12602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1633'. [ 516.363235][T12598] Invalid ELF header magic: != ELF [ 516.662931][T12609] FAULT_INJECTION: forcing a failure. [ 516.662931][T12609] name failslab, interval 1, probability 0, space 0, times 0 [ 516.744175][T12609] CPU: 0 UID: 0 PID: 12609 Comm: syz.1.1635 Tainted: G U L syzkaller #0 PREEMPT(full) [ 516.744214][T12609] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 516.744223][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.744236][T12609] Call Trace: [ 516.744243][T12609] [ 516.744252][T12609] dump_stack_lvl+0x100/0x190 [ 516.744298][T12609] should_fail_ex.cold+0x5/0xa [ 516.744325][T12609] should_failslab+0xc2/0x120 [ 516.744348][T12609] __kmalloc_cache_noprof+0x7a/0x6f0 [ 516.744376][T12609] ? proc_thread_self_get_link+0x1a6/0x210 [ 516.744414][T12609] proc_thread_self_get_link+0x1a6/0x210 [ 516.744448][T12609] pick_link+0xac2/0x13c0 [ 516.744478][T12609] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 516.744514][T12609] step_into_slowpath+0x9ba/0xf90 [ 516.744552][T12609] ? __pfx_step_into_slowpath+0x10/0x10 [ 516.744589][T12609] ? lookup_fast+0x2da/0x600 [ 516.744617][T12609] ? inode_permission+0x374/0x620 [ 516.744648][T12609] link_path_walk+0xf28/0x1cc0 [ 516.744690][T12609] path_openat+0x1be/0x31a0 [ 516.744709][T12609] ? kasan_save_stack+0x3f/0x50 [ 516.744742][T12609] ? kasan_save_stack+0x30/0x50 [ 516.744773][T12609] ? kasan_save_track+0x14/0x30 [ 516.744805][T12609] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 516.744851][T12609] ? __pfx_path_openat+0x10/0x10 [ 516.744883][T12609] do_file_open+0x20e/0x430 [ 516.744917][T12609] ? __pfx_do_file_open+0x10/0x10 [ 516.744959][T12609] ? alloc_fd+0x476/0x790 [ 516.744998][T12609] ? do_getname+0x191/0x390 [ 516.745026][T12609] do_sys_openat2+0x10d/0x1e0 [ 516.745054][T12609] ? __pfx_do_sys_openat2+0x10/0x10 [ 516.745092][T12609] __x64_sys_openat+0x12d/0x210 [ 516.745121][T12609] ? __pfx___x64_sys_openat+0x10/0x10 [ 516.745160][T12609] do_syscall_64+0x106/0xf80 [ 516.745185][T12609] ? clear_bhb_loop+0x40/0x90 [ 516.745213][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.745236][T12609] RIP: 0033:0x7f1aa095cece [ 516.745254][T12609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 516.745282][T12609] RSP: 002b:00007f1a9ebf5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 516.745304][T12609] RAX: ffffffffffffffda RBX: 00007f1a9ebf66c0 RCX: 00007f1aa095cece [ 516.745320][T12609] RDX: 0000000000000002 RSI: 00007f1aa0a32440 RDI: ffffffffffffff9c [ 516.745334][T12609] RBP: 00007f1aa0a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 516.745349][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.745362][T12609] R13: 00007f1aa0c16218 R14: 00007f1aa0c16180 R15: 00007ffc8d3467e8 [ 516.745392][T12609] [ 517.371230][T12616] Invalid ELF header magic: != ELF [ 519.298293][T12645] netlink: 'syz.5.1644': attribute type 1 has an invalid length. [ 519.542825][T12651] Invalid ELF header magic: != ELF [ 520.267943][T12661] Invalid ELF header magic: != ELF [ 520.301120][T12664] FAULT_INJECTION: forcing a failure. [ 520.301120][T12664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.389710][T12664] CPU: 0 UID: 0 PID: 12664 Comm: syz.4.1647 Tainted: G U L syzkaller #0 PREEMPT(full) [ 520.389749][T12664] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 520.389758][T12664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.389772][T12664] Call Trace: [ 520.389779][T12664] [ 520.389788][T12664] dump_stack_lvl+0x100/0x190 [ 520.389827][T12664] should_fail_ex.cold+0x5/0xa [ 520.389854][T12664] _copy_from_user+0x2e/0xd0 [ 520.389892][T12664] kstrtouint_from_user+0xd6/0x1d0 [ 520.389919][T12664] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 520.389945][T12664] ? __lock_acquire+0x4a5/0x2630 [ 520.389986][T12664] ? lock_acquire+0x1cf/0x380 [ 520.390021][T12664] proc_fail_nth_write+0x83/0x220 [ 520.390048][T12664] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 520.390082][T12664] vfs_write+0x2aa/0x1070 [ 520.390118][T12664] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 520.390147][T12664] ? __pfx_vfs_write+0x10/0x10 [ 520.390181][T12664] ? __fget_files+0x215/0x3d0 [ 520.390222][T12664] ? __fget_files+0x21f/0x3d0 [ 520.390264][T12664] ksys_write+0x12a/0x250 [ 520.390298][T12664] ? __pfx_ksys_write+0x10/0x10 [ 520.390341][T12664] do_syscall_64+0x106/0xf80 [ 520.390373][T12664] ? clear_bhb_loop+0x40/0x90 [ 520.390401][T12664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.390424][T12664] RIP: 0033:0x7f3b6355cece [ 520.390442][T12664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 520.390465][T12664] RSP: 002b:00007f3b617d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 520.390490][T12664] RAX: ffffffffffffffda RBX: 00007f3b617d56c0 RCX: 00007f3b6355cece [ 520.390506][T12664] RDX: 0000000000000001 RSI: 00007f3b617d50a0 RDI: 0000000000000008 [ 520.390520][T12664] RBP: 00007f3b617d5090 R08: 0000000000000000 R09: 0000000000000000 [ 520.390533][T12664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.390547][T12664] R13: 00007f3b63816128 R14: 00007f3b63816090 R15: 00007ffeb460a548 [ 520.390577][T12664] [ 523.742147][T12714] random: crng reseeded on system resumption [ 524.102781][T12722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1660'. [ 524.674990][T12728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1662'. [ 525.178096][T12731] Invalid ELF header magic: != ELF [ 525.414268][T12741] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1666'. [ 525.703992][ T5841] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 526.588379][T12755] FAULT_INJECTION: forcing a failure. [ 526.588379][T12755] name failslab, interval 1, probability 0, space 0, times 0 [ 526.653347][T12755] CPU: 0 UID: 0 PID: 12755 Comm: syz.1.1671 Tainted: G U L syzkaller #0 PREEMPT(full) [ 526.653390][T12755] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 526.653399][T12755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.653414][T12755] Call Trace: [ 526.653422][T12755] [ 526.653431][T12755] dump_stack_lvl+0x100/0x190 [ 526.653471][T12755] should_fail_ex.cold+0x5/0xa [ 526.653500][T12755] should_failslab+0xc2/0x120 [ 526.653524][T12755] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 526.653577][T12755] ? __ksm_enter+0x3c/0x650 [ 526.653616][T12755] __ksm_enter+0x3c/0x650 [ 526.653653][T12755] ksm_enable_merge_any+0xbf/0x120 [ 526.653688][T12755] __do_sys_prctl+0xef9/0x2330 [ 526.653725][T12755] ? __pfx___do_sys_prctl+0x10/0x10 [ 526.653768][T12755] do_syscall_64+0x106/0xf80 [ 526.653794][T12755] ? clear_bhb_loop+0x40/0x90 [ 526.653823][T12755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.653848][T12755] RIP: 0033:0x7f1aa099c629 [ 526.653867][T12755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.653891][T12755] RSP: 002b:00007f1aa179d028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 526.653914][T12755] RAX: ffffffffffffffda RBX: 00007f1aa0c15fa0 RCX: 00007f1aa099c629 [ 526.653930][T12755] RDX: 0000000000000000 RSI: 0000000000000017 RDI: 0000000000000043 [ 526.653944][T12755] RBP: 00007f1aa0a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 526.653959][T12755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.653973][T12755] R13: 00007f1aa0c16038 R14: 00007f1aa0c15fa0 R15: 00007ffc8d3467e8 [ 526.654005][T12755] [ 527.147235][T12756] FAULT_INJECTION: forcing a failure. [ 527.147235][T12756] name failslab, interval 1, probability 0, space 0, times 0 [ 527.202701][T12756] CPU: 0 UID: 0 PID: 12756 Comm: syz.2.1668 Tainted: G U L syzkaller #0 PREEMPT(full) [ 527.202740][T12756] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 527.202749][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.202762][T12756] Call Trace: [ 527.202769][T12756] [ 527.202777][T12756] dump_stack_lvl+0x100/0x190 [ 527.202820][T12756] should_fail_ex.cold+0x5/0xa [ 527.202847][T12756] should_failslab+0xc2/0x120 [ 527.202868][T12756] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 527.202901][T12756] ? taskstats_exit+0x650/0xbd0 [ 527.202942][T12756] taskstats_exit+0x650/0xbd0 [ 527.202977][T12756] ? __pfx_acct_update_integrals+0x10/0x10 [ 527.203015][T12756] ? __pfx_taskstats_exit+0x10/0x10 [ 527.203053][T12756] ? rcu_read_lock_any_held+0x6a/0xa0 [ 527.203090][T12756] ? exit_signals+0x395/0xaf0 [ 527.203116][T12756] do_exit+0x5ca/0x2aa0 [ 527.203149][T12756] ? __pfx_do_exit+0x10/0x10 [ 527.203178][T12756] ? do_raw_spin_lock+0x128/0x260 [ 527.203210][T12756] ? find_held_lock+0x2b/0x80 [ 527.203230][T12756] ? get_signal+0x7e0/0x21e0 [ 527.203255][T12756] do_group_exit+0xd5/0x2a0 [ 527.203287][T12756] get_signal+0x1ec7/0x21e0 [ 527.203320][T12756] ? __pfx_get_signal+0x10/0x10 [ 527.203344][T12756] ? do_futex+0x192/0x350 [ 527.203381][T12756] arch_do_signal_or_restart+0x91/0x770 [ 527.203411][T12756] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 527.203452][T12756] ? __pfx___x64_sys_futex+0x10/0x10 [ 527.203489][T12756] exit_to_user_mode_loop+0x86/0x4a0 [ 527.203521][T12756] do_syscall_64+0x668/0xf80 [ 527.203546][T12756] ? clear_bhb_loop+0x40/0x90 [ 527.203574][T12756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.203597][T12756] RIP: 0033:0x7faa77f9c629 [ 527.203616][T12756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.203640][T12756] RSP: 002b:00007faa78f230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 527.203662][T12756] RAX: fffffffffffffe00 RBX: 00007faa78216098 RCX: 00007faa77f9c629 [ 527.203677][T12756] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa78216098 [ 527.203691][T12756] RBP: 00007faa78216090 R08: 0000000000000000 R09: 0000000000000000 [ 527.203705][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.203718][T12756] R13: 00007faa78216128 R14: 00007ffe1e353e80 R15: 00007ffe1e353f68 [ 527.203748][T12756] [ 527.714503][T12767] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 528.432536][T12782] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1676'. [ 528.487437][T12782] team0 (unregistering): Port device team_slave_0 removed [ 528.518972][T12785] netlink: 'syz.2.1677': attribute type 2 has an invalid length. [ 528.550963][T12782] team0 (unregistering): Port device team_slave_1 removed [ 529.164305][T12795] Invalid ELF header magic: != ELF [ 529.198789][T12798] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 530.428887][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 530.695046][T12821] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 531.750840][T12834] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 531.789814][T12834] netlink: 230 bytes leftover after parsing attributes in process `syz.2.1689'. [ 533.167744][T12715] block nbd5: Receive control failed (result -32) [ 534.690268][T12894] netlink: 'syz.2.1706': attribute type 4 has an invalid length. [ 538.647668][T12931] zswap: compressor not available [ 539.148797][T12931] netlink: set zone limit has 8 unknown bytes [ 540.085737][T12963] Invalid ELF header magic: != ELF [ 540.907463][T12962] Process accounting resumed [ 542.235085][T12997] FAULT_INJECTION: forcing a failure. [ 542.235085][T12997] name failslab, interval 1, probability 0, space 0, times 0 [ 542.313706][T12997] CPU: 0 UID: 0 PID: 12997 Comm: syz.2.1731 Tainted: G U L syzkaller #0 PREEMPT(full) [ 542.313744][T12997] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 542.313753][T12997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 542.313767][T12997] Call Trace: [ 542.313774][T12997] [ 542.313782][T12997] dump_stack_lvl+0x100/0x190 [ 542.313821][T12997] should_fail_ex.cold+0x5/0xa [ 542.313848][T12997] should_failslab+0xc2/0x120 [ 542.313871][T12997] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 542.313903][T12997] ? alloc_empty_file+0x55/0x1c0 [ 542.313929][T12997] ? __pfx_stack_trace_save+0x10/0x10 [ 542.313956][T12997] alloc_empty_file+0x55/0x1c0 [ 542.313983][T12997] path_openat+0xe8/0x31a0 [ 542.314003][T12997] ? kasan_save_stack+0x3f/0x50 [ 542.314036][T12997] ? kasan_save_stack+0x30/0x50 [ 542.314072][T12997] ? kasan_save_track+0x14/0x30 [ 542.314104][T12997] ? __kasan_slab_alloc+0x89/0x90 [ 542.314138][T12997] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 542.314170][T12997] ? do_getname+0x35/0x390 [ 542.314195][T12997] ? do_sys_openat2+0xc5/0x1e0 [ 542.314222][T12997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.314249][T12997] ? __pfx_path_openat+0x10/0x10 [ 542.314281][T12997] do_file_open+0x20e/0x430 [ 542.314305][T12997] ? __pfx_do_file_open+0x10/0x10 [ 542.314364][T12997] ? alloc_fd+0x476/0x790 [ 542.314402][T12997] ? do_getname+0x191/0x390 [ 542.314429][T12997] do_sys_openat2+0x10d/0x1e0 [ 542.314457][T12997] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.314502][T12997] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 542.314533][T12997] ? __fget_files+0x21f/0x3d0 [ 542.314573][T12997] __x64_sys_openat+0x12d/0x210 [ 542.314602][T12997] ? __pfx___x64_sys_openat+0x10/0x10 [ 542.314630][T12997] ? ksys_write+0x1ac/0x250 [ 542.314713][T12997] do_syscall_64+0x106/0xf80 [ 542.314738][T12997] ? clear_bhb_loop+0x40/0x90 [ 542.314766][T12997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.314790][T12997] RIP: 0033:0x7faa77f9c629 [ 542.314809][T12997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.314841][T12997] RSP: 002b:00007faa78f44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 542.314863][T12997] RAX: ffffffffffffffda RBX: 00007faa78215fa0 RCX: 00007faa77f9c629 [ 542.314879][T12997] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 542.314894][T12997] RBP: 00007faa78f44090 R08: 0000000000000000 R09: 0000000000000000 [ 542.314908][T12997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.314921][T12997] R13: 00007faa78216038 R14: 00007faa78215fa0 R15: 00007ffe1e353f68 [ 542.314958][T12997] [ 543.229484][T12941] Process accounting paused [ 545.895625][T13035] zswap: compressor not available [ 546.956050][T13050] Invalid ELF header magic: != ELF [ 547.161357][T13045] delete_channel: no stack [ 548.112381][T13054] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.5.1743: bg 2: bad block bitmap checksum [ 548.299893][T13054] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6685: Filesystem failed CRC [ 548.870509][T13067] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1750'. [ 549.323955][T13078] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 551.556995][T13083] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 552.926525][T12715] block nbd6: Receive control failed (result -32) [ 553.477818][T13142] random: crng reseeded on system resumption [ 554.147260][T13153] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 554.412594][T13163] Console: switching to colour VGA+ 80x25 [ 555.391973][T13169] FAULT_INJECTION: forcing a failure. [ 555.391973][T13169] name fail_futex, interval 1, probability 0, space 0, times 0 [ 555.461704][T13169] CPU: 0 UID: 0 PID: 13169 Comm: syz.2.1773 Tainted: G U L syzkaller #0 PREEMPT(full) [ 555.461744][T13169] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 555.461753][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.461766][T13169] Call Trace: [ 555.461773][T13169] [ 555.461782][T13169] dump_stack_lvl+0x100/0x190 [ 555.461820][T13169] should_fail_ex.cold+0x5/0xa [ 555.461847][T13169] get_futex_key+0x106f/0x1620 [ 555.461878][T13169] ? __pfx_get_futex_key+0x10/0x10 [ 555.461903][T13169] ? lock_acquire+0x1cf/0x380 [ 555.461941][T13169] futex_wake+0xea/0x530 [ 555.461978][T13169] ? __pfx_futex_wake+0x10/0x10 [ 555.462013][T13169] ? exit_mm_release+0x19/0x30 [ 555.462049][T13169] do_futex+0x32b/0x350 [ 555.462079][T13169] ? __pfx_do_futex+0x10/0x10 [ 555.462106][T13169] ? __might_fault+0xc5/0x140 [ 555.462145][T13169] mm_release+0x24a/0x2f0 [ 555.462168][T13169] do_exit+0x675/0x2aa0 [ 555.462202][T13169] ? __pfx_do_exit+0x10/0x10 [ 555.462232][T13169] ? do_raw_spin_lock+0x128/0x260 [ 555.462265][T13169] ? find_held_lock+0x2b/0x80 [ 555.462284][T13169] ? get_signal+0x7e0/0x21e0 [ 555.462319][T13169] do_group_exit+0xd5/0x2a0 [ 555.462351][T13169] get_signal+0x1ec7/0x21e0 [ 555.462385][T13169] ? __pfx_get_signal+0x10/0x10 [ 555.462409][T13169] ? do_futex+0x192/0x350 [ 555.462442][T13169] arch_do_signal_or_restart+0x91/0x770 [ 555.462472][T13169] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 555.462508][T13169] ? __pfx___x64_sys_futex+0x10/0x10 [ 555.462537][T13169] ? ksys_write+0x1ac/0x250 [ 555.462577][T13169] exit_to_user_mode_loop+0x86/0x4a0 [ 555.462609][T13169] do_syscall_64+0x668/0xf80 [ 555.462634][T13169] ? clear_bhb_loop+0x40/0x90 [ 555.462662][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.462685][T13169] RIP: 0033:0x7faa77f9c629 [ 555.462704][T13169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.462727][T13169] RSP: 002b:00007faa78f440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 555.462750][T13169] RAX: fffffffffffffe00 RBX: 00007faa78215fa8 RCX: 00007faa77f9c629 [ 555.462765][T13169] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa78215fa8 [ 555.462778][T13169] RBP: 00007faa78215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 555.462792][T13169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.462805][T13169] R13: 00007faa78216038 R14: 00007ffe1e353e80 R15: 00007ffe1e353f68 [ 555.462835][T13169] [ 556.658735][T13187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1777'. [ 557.441130][T13194] Invalid ELF header magic: != ELF [ 557.881284][T13203] Invalid ELF header magic: != ELF [ 559.490834][T13235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1790'. [ 560.471343][T13243] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 561.769785][T13260] Invalid ELF header magic: != ELF [ 562.219760][T13270] FAULT_INJECTION: forcing a failure. [ 562.219760][T13270] name failslab, interval 1, probability 0, space 0, times 0 [ 562.325447][T13270] CPU: 0 UID: 0 PID: 13270 Comm: syz.4.1800 Tainted: G U L syzkaller #0 PREEMPT(full) [ 562.325487][T13270] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 562.325496][T13270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.325510][T13270] Call Trace: [ 562.325517][T13270] [ 562.325526][T13270] dump_stack_lvl+0x100/0x190 [ 562.325564][T13270] should_fail_ex.cold+0x5/0xa [ 562.325590][T13270] ? udp_init_sock+0x24e/0x450 [ 562.325625][T13270] should_failslab+0xc2/0x120 [ 562.325647][T13270] __kmalloc_noprof+0xe0/0x850 [ 562.325679][T13270] ? lockdep_init_map_type+0x5c/0x250 [ 562.325714][T13270] udp_init_sock+0x24e/0x450 [ 562.325748][T13270] ? __pfx_udp_init_sock+0x10/0x10 [ 562.325785][T13270] inet_create+0x94c/0x1060 [ 562.325831][T13270] ? inet_create+0x94/0x1060 [ 562.325868][T13270] __sock_create+0x339/0x860 [ 562.325906][T13270] __sys_socket+0x14d/0x260 [ 562.325941][T13270] ? __pfx___sys_socket+0x10/0x10 [ 562.325983][T13270] __x64_sys_socket+0x72/0xb0 [ 562.326016][T13270] ? lockdep_hardirqs_on+0x78/0x100 [ 562.326042][T13270] do_syscall_64+0x106/0xf80 [ 562.326066][T13270] ? clear_bhb_loop+0x40/0x90 [ 562.326094][T13270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.326118][T13270] RIP: 0033:0x7f3b6359c629 [ 562.326136][T13270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.326158][T13270] RSP: 002b:00007f3b617f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 562.326180][T13270] RAX: ffffffffffffffda RBX: 00007f3b63815fa0 RCX: 00007f3b6359c629 [ 562.326195][T13270] RDX: 0000000000000011 RSI: 0000000000000002 RDI: 0000000000000002 [ 562.326209][T13270] RBP: 00007f3b63632b39 R08: 0000000000000000 R09: 0000000000000000 [ 562.326223][T13270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.326236][T13270] R13: 00007f3b63816038 R14: 00007f3b63815fa0 R15: 00007ffeb460a548 [ 562.326266][T13270] [ 562.327832][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 564.190138][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.196564][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.814770][T13359] Invalid ELF header magic: != ELF [ 571.333111][T13389] Process accounting paused [ 571.548404][T13377] Invalid ELF header magic: != ELF [ 572.106312][T13377] Invalid ELF header magic: != ELF [ 572.259422][T13416] FAULT_INJECTION: forcing a failure. [ 572.259422][T13416] name failslab, interval 1, probability 0, space 0, times 0 [ 572.406220][T13416] CPU: 0 UID: 0 PID: 13416 Comm: syz.1.1826 Tainted: G U L syzkaller #0 PREEMPT(full) [ 572.406261][T13416] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 572.406270][T13416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 572.406284][T13416] Call Trace: [ 572.406291][T13416] [ 572.406300][T13416] dump_stack_lvl+0x100/0x190 [ 572.406340][T13416] should_fail_ex.cold+0x5/0xa [ 572.406367][T13416] should_failslab+0xc2/0x120 [ 572.406390][T13416] __kmalloc_cache_noprof+0x7a/0x6f0 [ 572.406418][T13416] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 572.406462][T13416] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 572.406498][T13416] ? trace_contention_end+0x125/0x180 [ 572.406531][T13416] ? __mutex_lock+0x26a/0x1b90 [ 572.406560][T13416] ? snd_pcm_oss_make_ready+0xcb/0x1b0 [ 572.406594][T13416] ? _raw_spin_unlock_irq+0x23/0x50 [ 572.406615][T13416] ? find_held_lock+0x2b/0x80 [ 572.406636][T13416] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 572.406672][T13416] ? __pfx___mutex_lock+0x10/0x10 [ 572.406707][T13416] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 572.406737][T13416] ? __pfx_default_wake_function+0x10/0x10 [ 572.406766][T13416] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 572.406803][T13416] snd_pcm_oss_sync+0x1de/0x840 [ 572.406843][T13416] snd_pcm_oss_ioctl+0x19ce/0x3720 [ 572.406878][T13416] ? find_held_lock+0x2b/0x80 [ 572.406898][T13416] ? __fget_files+0x215/0x3d0 [ 572.406931][T13416] ? hook_file_ioctl_common+0x146/0x410 [ 572.406969][T13416] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 572.407007][T13416] ? __fget_files+0x21f/0x3d0 [ 572.407046][T13416] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 572.407090][T13416] __x64_sys_ioctl+0x18e/0x210 [ 572.407124][T13416] do_syscall_64+0x106/0xf80 [ 572.407148][T13416] ? clear_bhb_loop+0x40/0x90 [ 572.407176][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.407199][T13416] RIP: 0033:0x7f1aa099c629 [ 572.407218][T13416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.407241][T13416] RSP: 002b:00007f1aa177c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.407266][T13416] RAX: ffffffffffffffda RBX: 00007f1aa0c16090 RCX: 00007f1aa099c629 [ 572.407282][T13416] RDX: 0000000000000000 RSI: 0000000000005001 RDI: 0000000000000003 [ 572.407296][T13416] RBP: 00007f1aa177c090 R08: 0000000000000000 R09: 0000000000000000 [ 572.407310][T13416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.407323][T13416] R13: 00007f1aa0c16128 R14: 00007f1aa0c16090 R15: 00007ffc8d3467e8 [ 572.407354][T13416] [ 574.151803][T13423] Process accounting resumed [ 575.454212][T13442] kvm_intel: kvm [13441]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xfffffffffffffffe [ 575.551145][T13444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1831'. [ 575.640079][T13444] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.729124][T13444] bridge_slave_1 (unregistering): left allmulticast mode [ 575.764444][T13444] bridge_slave_1 (unregistering): left promiscuous mode [ 575.784040][T13444] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.273848][T13451] Invalid ELF header magic: != ELF [ 576.801321][T13463] kstrtoul() returned -22 for lu_gp_id [ 576.808162][ T29] audit: type=1800 audit(2147483670.940:41): pid=13463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1838" name="lu_gp_id" dev="configfs" ino=63122 res=0 errno=0 [ 576.853816][T13466] kstrtoul() returned -22 for lu_gp_id [ 579.051749][T13498] ======================================================= [ 579.051749][T13498] WARNING: The mand mount option has been deprecated and [ 579.051749][T13498] and is ignored by this kernel. Remove the mand [ 579.051749][T13498] option from the mount to silence this warning. [ 579.051749][T13498] ======================================================= [ 579.671820][T13504] zswap: compressor not available [ 579.733972][ T29] audit: type=1800 audit(2147483673.860:42): pid=13515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1849" name="lu_gp_id" dev="configfs" ino=63348 res=0 errno=0 [ 580.736622][T12715] Bluetooth: hci0: Zero size dump init pkt [ 582.340936][T13548] pim6reg: entered allmulticast mode [ 583.958650][T13576] Invalid ELF header magic: != ELF [ 584.599942][T13586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1866'. [ 585.898628][T13611] Invalid ELF header magic: != ELF [ 586.876289][T13619] Invalid ELF header magic: != ELF [ 587.661500][T13632] Invalid ELF header magic: != ELF [ 587.805409][T13635] FAULT_INJECTION: forcing a failure. [ 587.805409][T13635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.962548][T13635] CPU: 0 UID: 0 PID: 13635 Comm: syz.4.1875 Tainted: G U L syzkaller #0 PREEMPT(full) [ 587.962587][T13635] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 587.962596][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.962610][T13635] Call Trace: [ 587.962617][T13635] [ 587.962626][T13635] dump_stack_lvl+0x100/0x190 [ 587.962663][T13635] should_fail_ex.cold+0x5/0xa [ 587.962689][T13635] _copy_from_user+0x2e/0xd0 [ 587.962726][T13635] kstrtouint_from_user+0xd6/0x1d0 [ 587.962752][T13635] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 587.962778][T13635] ? __lock_acquire+0x4a5/0x2630 [ 587.962809][T13635] ? lock_acquire+0x1cf/0x380 [ 587.962843][T13635] proc_fail_nth_write+0x83/0x220 [ 587.962876][T13635] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 587.962910][T13635] vfs_write+0x2aa/0x1070 [ 587.962945][T13635] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 587.962973][T13635] ? __pfx_vfs_write+0x10/0x10 [ 587.963006][T13635] ? __fget_files+0x215/0x3d0 [ 587.963046][T13635] ? __fget_files+0x21f/0x3d0 [ 587.963087][T13635] ksys_write+0x12a/0x250 [ 587.963120][T13635] ? __pfx_ksys_write+0x10/0x10 [ 587.963162][T13635] do_syscall_64+0x106/0xf80 [ 587.963187][T13635] ? clear_bhb_loop+0x40/0x90 [ 587.963215][T13635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.963239][T13635] RIP: 0033:0x7f3b6355cece [ 587.963256][T13635] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 587.963279][T13635] RSP: 002b:00007f3b617b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 587.963300][T13635] RAX: ffffffffffffffda RBX: 00007f3b617b46c0 RCX: 00007f3b6355cece [ 587.963315][T13635] RDX: 0000000000000001 RSI: 00007f3b617b40a0 RDI: 0000000000000009 [ 587.963328][T13635] RBP: 00007f3b617b4090 R08: 0000000000000000 R09: 0000000000000000 [ 587.963341][T13635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.963354][T13635] R13: 00007f3b63816218 R14: 00007f3b63816180 R15: 00007ffeb460a548 [ 587.963383][T13635] [ 589.372798][T13656] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 590.135605][T13667] Invalid ELF header magic: != ELF [ 590.169028][T13664] Invalid ELF header magic: != ELF [ 590.465231][T12715] block nbd7: Receive control failed (result -32) [ 593.861410][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035f70000: rx timeout, send abort [ 593.869848][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d93a400: rx timeout, send abort [ 593.878412][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035f70000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 593.892831][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d93a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 594.424469][T13702] Invalid ELF header magic: != ELF [ 594.741723][T13710] Invalid ELF header magic: != ELF [ 597.066788][T12715] block nbd8: Receive control failed (result -32) [ 597.458580][T13758] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 597.633081][T13758] FAULT_INJECTION: forcing a failure. [ 597.633081][T13758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.730420][T13758] CPU: 0 UID: 0 PID: 13758 Comm: syz.1.1907 Tainted: G U L syzkaller #0 PREEMPT(full) [ 597.730459][T13758] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 597.730469][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.730483][T13758] Call Trace: [ 597.730490][T13758] [ 597.730499][T13758] dump_stack_lvl+0x100/0x190 [ 597.730540][T13758] should_fail_ex.cold+0x5/0xa [ 597.730567][T13758] _copy_from_iter+0x1f4/0x1690 [ 597.730612][T13758] ? __pfx__copy_from_iter+0x10/0x10 [ 597.730655][T13758] ? __pfx___might_resched+0x10/0x10 [ 597.730696][T13758] file_tty_write.isra.0+0x45b/0x890 [ 597.730732][T13758] redirected_tty_write+0xd4/0x120 [ 597.730761][T13758] vfs_write+0x6ac/0x1070 [ 597.730797][T13758] ? __pfx_redirected_tty_write+0x10/0x10 [ 597.730827][T13758] ? __pfx_vfs_write+0x10/0x10 [ 597.730860][T13758] ? find_held_lock+0x2b/0x80 [ 597.730899][T13758] ksys_write+0x12a/0x250 [ 597.730934][T13758] ? __pfx_ksys_write+0x10/0x10 [ 597.730978][T13758] do_syscall_64+0x106/0xf80 [ 597.731015][T13758] ? clear_bhb_loop+0x40/0x90 [ 597.731043][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.731065][T13758] RIP: 0033:0x7f1aa099c629 [ 597.731084][T13758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.731106][T13758] RSP: 002b:00007f1aa179d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 597.731128][T13758] RAX: ffffffffffffffda RBX: 00007f1aa0c15fa0 RCX: 00007f1aa099c629 [ 597.731142][T13758] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000008 [ 597.731156][T13758] RBP: 00007f1aa0a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 597.731169][T13758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.731182][T13758] R13: 00007f1aa0c16038 R14: 00007f1aa0c15fa0 R15: 00007ffc8d3467e8 [ 597.731217][T13758] [ 600.467957][T13803] nfs: Unknown parameter 'V' [ 601.933046][T13808] Process accounting resumed [ 602.106382][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 604.213750][T13849] Process accounting paused [ 604.860912][T13864] Invalid ELF header magic: != ELF [ 605.472398][T13839] rtc_cmos 00:00: Alarms can be up to one day in the future [ 606.196694][ T5916] rtc_cmos 00:00: Alarms can be up to one day in the future [ 606.241555][ T5916] rtc_cmos 00:00: Alarms can be up to one day in the future [ 606.289312][ T5916] rtc_cmos 00:00: Alarms can be up to one day in the future [ 606.337369][ T5916] rtc_cmos 00:00: Alarms can be up to one day in the future [ 606.386517][ T5916] rtc rtc0: __rtc_set_alarm: err=-22 [ 607.508519][T13888] Invalid ELF header magic: != ELF [ 608.234271][T13894] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 608.388635][T13894] FAULT_INJECTION: forcing a failure. [ 608.388635][T13894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.469431][T13894] CPU: 0 UID: 0 PID: 13894 Comm: syz.2.1936 Tainted: G U L syzkaller #0 PREEMPT(full) [ 608.469473][T13894] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 608.469482][T13894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 608.469496][T13894] Call Trace: [ 608.469504][T13894] [ 608.469513][T13894] dump_stack_lvl+0x100/0x190 [ 608.469553][T13894] should_fail_ex.cold+0x5/0xa [ 608.469581][T13894] _copy_from_iter+0x1f4/0x1690 [ 608.469625][T13894] ? __pfx__copy_from_iter+0x10/0x10 [ 608.469668][T13894] ? __pfx___might_resched+0x10/0x10 [ 608.469709][T13894] file_tty_write.isra.0+0x45b/0x890 [ 608.469744][T13894] redirected_tty_write+0xd4/0x120 [ 608.469773][T13894] vfs_write+0x6ac/0x1070 [ 608.469810][T13894] ? __pfx_redirected_tty_write+0x10/0x10 [ 608.469841][T13894] ? __pfx_vfs_write+0x10/0x10 [ 608.469874][T13894] ? find_held_lock+0x2b/0x80 [ 608.469913][T13894] ksys_write+0x12a/0x250 [ 608.469948][T13894] ? __pfx_ksys_write+0x10/0x10 [ 608.469992][T13894] do_syscall_64+0x106/0xf80 [ 608.470017][T13894] ? clear_bhb_loop+0x40/0x90 [ 608.470046][T13894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.470070][T13894] RIP: 0033:0x7faa77f9c629 [ 608.470089][T13894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.470112][T13894] RSP: 002b:00007faa78f44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 608.470134][T13894] RAX: ffffffffffffffda RBX: 00007faa78215fa0 RCX: 00007faa77f9c629 [ 608.470150][T13894] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000008 [ 608.470164][T13894] RBP: 00007faa78032b39 R08: 0000000000000000 R09: 0000000000000000 [ 608.470178][T13894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.470192][T13894] R13: 00007faa78216038 R14: 00007faa78215fa0 R15: 00007ffe1e353f68 [ 608.470222][T13894] [ 612.170605][T12715] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 612.498010][T13941] Invalid ELF header magic: != ELF [ 613.234599][T13945] kexec: Could not allocate control_code_buffer [ 613.971033][T13968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1952'. [ 615.422726][T13990] Invalid ELF header magic: != ELF [ 616.223901][ T6387] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.660039][T14007] Invalid ELF header magic: != ELF [ 616.672649][T14004] Invalid ELF header magic: != ELF [ 618.273128][T14035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 618.296294][T14035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 618.319608][T14035] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 618.383106][T14035] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 618.419001][T14035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 618.443768][T14035] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 619.377374][T14055] Invalid ELF header magic: != ELF [ 620.184019][T12715] Bluetooth: hci0: command 0x0c1a tx timeout [ 620.344366][T12715] Bluetooth: hci4: command 0x0406 tx timeout [ 620.350445][T12715] Bluetooth: hci2: command 0x0c1a tx timeout [ 620.428229][T12715] Bluetooth: hci1: command 0x0406 tx timeout [ 620.618799][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1979'. [ 622.424359][T12715] Bluetooth: hci4: command 0x0406 tx timeout [ 622.504816][T12715] Bluetooth: hci1: command 0x0406 tx timeout [ 622.961347][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1984'. [ 623.027165][T14114] random: crng reseeded on system resumption [ 623.467450][T14110] Invalid ELF header magic: != ELF [ 625.643011][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.655926][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.971946][T14172] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2002'. [ 626.136743][T14159] Invalid ELF header magic: != ELF [ 626.541325][T14179] Invalid ELF header magic: != ELF [ 628.120815][T14197] Invalid ELF header magic: != ELF [ 628.136810][T14201] Invalid ELF header magic: != ELF [ 630.762131][T14237] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1347 with max blocks 1 with error 117 [ 630.959935][T14237] EXT4-fs (sda1): This should not happen!! Data will be lost [ 630.959935][T14237] [ 632.448829][T14263] Invalid ELF header magic: != ELF [ 632.533850][T14251] Invalid ELF header magic: != ELF [ 632.858931][T14259] Process accounting paused [ 635.088340][T14292] Process accounting resumed [ 635.452186][T14299] netlink: 'syz.5.2029': attribute type 2 has an invalid length. [ 637.868736][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2036'. [ 638.465206][T14336] Invalid ELF header magic: != ELF [ 638.903125][T12715] Bluetooth: hci4: unexpected event 0x36 length: 123 > 7 [ 641.749329][T14379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2049'. [ 643.057189][T14408] random: crng reseeded on system resumption [ 644.442362][T14423] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2060'. [ 645.327655][T14438] syz.5.2062(14438): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 646.022891][T14440] zswap: compressor not available [ 646.134090][T14440] netlink: set zone limit has 8 unknown bytes [ 648.806579][T14478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2070'. [ 653.104555][T14554] Invalid ELF header magic: != ELF [ 653.424051][T14560] sd 0:0:1:0: PR command failed: 1026 [ 653.453111][T14560] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 653.517104][T14560] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 653.850705][T14568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2093'. [ 653.950353][T14572] FAULT_INJECTION: forcing a failure. [ 653.950353][T14572] name fail_futex, interval 1, probability 0, space 0, times 0 [ 654.023461][T14568] veth1_macvtap: left promiscuous mode [ 654.052825][T14572] CPU: 0 UID: 0 PID: 14572 Comm: syz.1.2092 Tainted: G U L syzkaller #0 PREEMPT(full) [ 654.052867][T14572] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 654.052876][T14572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.052891][T14572] Call Trace: [ 654.052898][T14572] [ 654.052913][T14572] dump_stack_lvl+0x100/0x190 [ 654.052954][T14572] should_fail_ex.cold+0x5/0xa [ 654.052982][T14572] get_futex_key+0x1d2/0x1620 [ 654.053014][T14572] ? __pfx_get_futex_key+0x10/0x10 [ 654.053041][T14572] ? find_held_lock+0x2b/0x80 [ 654.053062][T14572] ? futex_wake+0x456/0x530 [ 654.053104][T14572] futex_wake+0xea/0x530 [ 654.053142][T14572] ? __pfx_futex_wake+0x10/0x10 [ 654.053177][T14572] ? __do_sys_fsconfig+0x564/0xcb0 [ 654.053213][T14572] ? __mutex_unlock_slowpath+0x15c/0x790 [ 654.053248][T14572] do_futex+0x32b/0x350 [ 654.053279][T14572] ? __pfx_do_futex+0x10/0x10 [ 654.053310][T14572] ? cap_task_prctl+0x104/0xa50 [ 654.053347][T14572] __x64_sys_futex+0x34f/0x4d0 [ 654.053382][T14572] ? __pfx___x64_sys_futex+0x10/0x10 [ 654.053414][T14572] ? __pfx___do_sys_prctl+0x10/0x10 [ 654.053458][T14572] do_syscall_64+0x106/0xf80 [ 654.053484][T14572] ? clear_bhb_loop+0x40/0x90 [ 654.053513][T14572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.053537][T14572] RIP: 0033:0x7f1aa099c629 [ 654.053556][T14572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.053581][T14572] RSP: 002b:00007f1a9ebf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 654.053605][T14572] RAX: ffffffffffffffda RBX: 00007f1aa0c16188 RCX: 00007f1aa099c629 [ 654.053621][T14572] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1aa0c1618c [ 654.053636][T14572] RBP: 00007f1aa0c16180 R08: 0000000000000000 R09: 0000000000000000 [ 654.053651][T14572] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 654.053665][T14572] R13: 00007f1aa0c16218 R14: 00007ffc8d346700 R15: 00007ffc8d3467e8 [ 654.053695][T14572] [ 656.015904][T14597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2106'. [ 656.326598][T12715] block nbd9: Receive control failed (result -32) [ 656.484451][T12715] block nbd10: Receive control failed (result -32) [ 656.705927][T14608] FAULT_INJECTION: forcing a failure. [ 656.705927][T14608] name failslab, interval 1, probability 0, space 0, times 0 [ 656.780840][T14608] CPU: 0 UID: 0 PID: 14608 Comm: syz.1.2102 Tainted: G U L syzkaller #0 PREEMPT(full) [ 656.780881][T14608] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 656.780891][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 656.780905][T14608] Call Trace: [ 656.780913][T14608] [ 656.780921][T14608] dump_stack_lvl+0x100/0x190 [ 656.780966][T14608] should_fail_ex.cold+0x5/0xa [ 656.780994][T14608] should_failslab+0xc2/0x120 [ 656.781017][T14608] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 656.781057][T14608] ? __kernfs_new_node+0xd2/0x960 [ 656.781095][T14608] __kernfs_new_node+0xd2/0x960 [ 656.781131][T14608] ? __pfx___kernfs_new_node+0x10/0x10 [ 656.781170][T14608] ? find_held_lock+0x2b/0x80 [ 656.781191][T14608] ? kernfs_root+0xee/0x2a0 [ 656.781221][T14608] ? kernfs_root+0xee/0x2a0 [ 656.781258][T14608] kernfs_new_node+0x11b/0x1a0 [ 656.781298][T14608] __kernfs_create_file+0x53/0x350 [ 656.781327][T14608] sysfs_add_file_mode_ns+0x207/0x3c0 [ 656.781366][T14608] internal_create_group+0x593/0xf40 [ 656.781408][T14608] ? __pfx_internal_create_group+0x10/0x10 [ 656.781446][T14608] ? kernfs_create_link+0x1bd/0x240 [ 656.781475][T14608] internal_create_groups+0x9d/0x150 [ 656.781511][T14608] device_add+0x71a/0x1950 [ 656.781550][T14608] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 656.781595][T14608] ? __pfx_device_add+0x10/0x10 [ 656.781632][T14608] ? lockdep_init_map_type+0x5c/0x250 [ 656.781669][T14608] ? __init_waitqueue_head+0xca/0x150 [ 656.781711][T14608] netdev_register_kobject+0x1a9/0x3d0 [ 656.781754][T14608] register_netdevice+0x12e0/0x2210 [ 656.781790][T14608] ? __pfx_register_netdevice+0x10/0x10 [ 656.781826][T14608] ? __pfx_loopback_net_init+0x10/0x10 [ 656.781860][T14608] register_netdev+0x34/0x50 [ 656.781888][T14608] loopback_net_init+0x7a/0x170 [ 656.781923][T14608] ? __pfx_loopback_net_init+0x10/0x10 [ 656.781955][T14608] ops_init+0x1e2/0x5f0 [ 656.781987][T14608] setup_net+0x118/0x3a0 [ 656.782015][T14608] ? __pfx_setup_net+0x10/0x10 [ 656.782042][T14608] ? lockdep_init_map_type+0x5c/0x250 [ 656.782074][T14608] ? mutex_init_lockep+0x110/0x150 [ 656.782111][T14608] copy_net_ns+0x46f/0x7c0 [ 656.782145][T14608] create_new_namespaces+0x3ea/0xac0 [ 656.782177][T14608] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 656.782205][T14608] ksys_unshare+0x455/0xab0 [ 656.782237][T14608] ? __pfx_ksys_unshare+0x10/0x10 [ 656.782278][T14608] __x64_sys_unshare+0x31/0x40 [ 656.782307][T14608] do_syscall_64+0x106/0xf80 [ 656.782333][T14608] ? clear_bhb_loop+0x40/0x90 [ 656.782363][T14608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.782387][T14608] RIP: 0033:0x7f1aa099c629 [ 656.782408][T14608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.782432][T14608] RSP: 002b:00007f1aa179d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 656.782455][T14608] RAX: ffffffffffffffda RBX: 00007f1aa0c15fa0 RCX: 00007f1aa099c629 [ 656.782471][T14608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 656.782486][T14608] RBP: 00007f1aa0a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 656.782500][T14608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.782513][T14608] R13: 00007f1aa0c16038 R14: 00007f1aa0c15fa0 R15: 00007ffc8d3467e8 [ 656.782550][T14608] [ 657.641408][T14605] delete_channel: no stack [ 658.215314][T14634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2110'. [ 659.784579][T14655] zswap: compressor not available [ 659.937204][T14676] Invalid ELF header magic: != ELF [ 662.602122][T14718] Invalid ELF header magic: != ELF [ 663.132033][T14716] Process accounting resumed [ 663.422616][T14733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2135'. [ 664.004784][T14741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2137'. [ 664.200711][T14744] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2138'. [ 664.234399][T14741] veth1_macvtap: left promiscuous mode [ 664.308102][T14744] bond_slave_0: entered allmulticast mode [ 664.633908][T14754] FAULT_INJECTION: forcing a failure. [ 664.633908][T14754] name fail_futex, interval 1, probability 0, space 0, times 0 [ 664.701383][T14754] CPU: 0 UID: 0 PID: 14754 Comm: syz.5.2141 Tainted: G U L syzkaller #0 PREEMPT(full) [ 664.701423][T14754] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 664.701432][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 664.701446][T14754] Call Trace: [ 664.701454][T14754] [ 664.701463][T14754] dump_stack_lvl+0x100/0x190 [ 664.701504][T14754] should_fail_ex.cold+0x5/0xa [ 664.701532][T14754] get_futex_key+0x1d2/0x1620 [ 664.701565][T14754] ? __pfx_get_futex_key+0x10/0x10 [ 664.701595][T14754] ? kasan_save_stack+0x3f/0x50 [ 664.701642][T14754] ? kasan_save_stack+0x30/0x50 [ 664.701674][T14754] ? kasan_record_aux_stack+0xa7/0xc0 [ 664.701701][T14754] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 664.701732][T14754] ? __put_cred+0x10c/0x180 [ 664.701767][T14754] futex_wake+0xea/0x530 [ 664.701804][T14754] ? __pfx_futex_wake+0x10/0x10 [ 664.701851][T14754] do_futex+0x32b/0x350 [ 664.701881][T14754] ? __pfx_do_futex+0x10/0x10 [ 664.701917][T14754] __x64_sys_futex+0x34f/0x4d0 [ 664.701951][T14754] ? __pfx___x64_sys_futex+0x10/0x10 [ 664.701992][T14754] do_syscall_64+0x106/0xf80 [ 664.702017][T14754] ? clear_bhb_loop+0x40/0x90 [ 664.702045][T14754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.702068][T14754] RIP: 0033:0x7f366859c629 [ 664.702086][T14754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.702109][T14754] RSP: 002b:00007f36694680e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 664.702237][T14754] RAX: ffffffffffffffda RBX: 00007f3668815fa8 RCX: 00007f366859c629 [ 664.702254][T14754] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3668815fac [ 664.702268][T14754] RBP: 00007f3668815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 664.702283][T14754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.702297][T14754] R13: 00007f3668816038 R14: 00007ffc1d64f1c0 R15: 00007ffc1d64f2a8 [ 664.702330][T14754] [ 665.474037][T14759] Process accounting paused [ 666.424980][T14769] Invalid ELF header magic: != ELF [ 668.519881][T14811] misc userio: Invalid payload size [ 668.773941][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 670.031101][T14834] lo: entered allmulticast mode [ 670.430824][T14834] zswap: compressor not available [ 670.472006][T14835] Setting dangerous option i915.mitigations - tainting kernel [ 670.559744][T14829] lo: left allmulticast mode [ 670.934579][T14842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2160'. [ 673.360676][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 673.512487][T14874] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2166'. [ 674.736482][T14885] Invalid ELF header magic: != ELF [ 676.790517][T14911] random: crng reseeded on system resumption [ 676.894112][T14918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2176'. [ 677.242609][T14918] veth1_macvtap: left promiscuous mode [ 679.477313][T12715] block nbd11: Receive control failed (result -32) [ 680.470995][T14962] Invalid ELF header magic: != ELF [ 681.024597][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2189'. [ 682.912232][T14993] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 683.364446][T14996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2194'. [ 683.578326][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.593263][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.601612][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.610131][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.622038][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.655545][T15001] Debayer A: ================= START STATUS ================= [ 683.762046][T15001] Debayer A: Debayer Mean Window Size: 3 [ 683.793028][T15001] Debayer A: ================== END STATUS ================== [ 683.866851][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 684.446339][T15006] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 684.580835][T15006] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 684.687471][T15006] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 684.768119][T15006] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 684.909266][T15006] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 685.075796][T15006] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 685.825343][T12715] block nbd12: Receive control failed (result -32) [ 686.007574][T14999] chnl_net:caif_netlink_parms(): no params data found [ 686.465200][T12715] Bluetooth: hci0: command 0x0c1a tx timeout [ 686.494271][T14999] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.539575][T14999] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.566874][T14999] bridge_slave_0: entered allmulticast mode [ 686.616957][T12715] Bluetooth: hci2: command 0x0c1a tx timeout [ 686.624347][T14999] bridge_slave_0: entered promiscuous mode [ 686.669635][T14999] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.696506][T12715] Bluetooth: hci4: command 0x0406 tx timeout [ 686.718758][T14999] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.761472][T14999] bridge_slave_1: entered allmulticast mode [ 686.777574][T12715] Bluetooth: hci3: command 0x041b tx timeout [ 686.822915][T14999] bridge_slave_1: entered promiscuous mode [ 687.022974][T14999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.107114][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.113435][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.217669][T14999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.552830][T14999] team0: Port device team_slave_0 added [ 687.588013][T14999] team0: Port device team_slave_1 added [ 687.798053][T14999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.841827][T14999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.955143][T14999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.025087][T14999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.038677][T14999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.161526][T14999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.329395][T15054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2205'. [ 688.438275][T14999] hsr_slave_0: entered promiscuous mode [ 688.461905][T14999] hsr_slave_1: entered promiscuous mode [ 688.502892][T14999] debugfs: 'hsr0' already exists in 'hsr' [ 688.555050][T14999] Cannot create hsr debugfs directory [ 688.855822][T12715] Bluetooth: hci3: command 0x041b tx timeout [ 689.672316][T15053] zswap: compressor not available [ 689.699698][T15059] can: request_module (can-proto-3) failed. [ 689.967730][T14999] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 690.105434][T14999] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 690.202130][T14999] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 690.508189][T14999] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 690.935928][T12715] Bluetooth: hci3: command 0x041b tx timeout [ 691.380326][T14999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.437665][T15071] ================================================================== [ 691.437694][T15071] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 691.437739][T15071] Read of size 256 at addr ffff88804c2c7fa0 by task syz.1.2207/15071 [ 691.437761][T15071] [ 691.437776][T15071] CPU: 0 UID: 0 PID: 15071 Comm: syz.1.2207 Tainted: G U L syzkaller #0 PREEMPT(full) [ 691.437813][T15071] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 691.437823][T15071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.437839][T15071] Call Trace: [ 691.437847][T15071] [ 691.437857][T15071] dump_stack_lvl+0x100/0x190 [ 691.437893][T15071] print_report+0x156/0x4c9 [ 691.437929][T15071] ? __virt_addr_valid+0x81/0x620 [ 691.437959][T15071] ? __phys_addr+0xe8/0x180 [ 691.437989][T15071] ? fbcon_prepare_logo+0x94e/0xc60 [ 691.438024][T15071] kasan_report+0xdf/0x1e0 [ 691.438047][T15071] ? fbcon_prepare_logo+0x94e/0xc60 [ 691.438086][T15071] kasan_check_range+0x10f/0x1e0 [ 691.438163][T15071] __asan_memcpy+0x23/0x60 [ 691.438195][T15071] fbcon_prepare_logo+0x94e/0xc60 [ 691.438237][T15071] fbcon_init+0x10a0/0x1820 [ 691.438276][T15071] visual_init+0x320/0x620 [ 691.438314][T15071] do_bind_con_driver.isra.0+0x636/0x9c0 [ 691.438350][T15071] store_bind+0x609/0x730 [ 691.438378][T15071] ? __pfx_store_bind+0x10/0x10 [ 691.438402][T15071] dev_attr_store+0x58/0x80 [ 691.438438][T15071] ? __pfx_dev_attr_store+0x10/0x10 [ 691.438475][T15071] sysfs_kf_write+0xf2/0x150 [ 691.438503][T15071] kernfs_fop_write_iter+0x3e0/0x5f0 [ 691.438525][T15071] ? __pfx_sysfs_kf_write+0x10/0x10 [ 691.438554][T15071] iter_file_splice_write+0x830/0x10a0 [ 691.438601][T15071] ? __pfx_iter_file_splice_write+0x10/0x10 [ 691.438643][T15071] ? __pfx_copy_splice_read+0x10/0x10 [ 691.438688][T15071] ? __pfx_iter_file_splice_write+0x10/0x10 [ 691.438729][T15071] direct_splice_actor+0x192/0x6c0 [ 691.438768][T15071] splice_direct_to_actor+0x345/0xa30 [ 691.438807][T15071] ? __pfx_direct_splice_actor+0x10/0x10 [ 691.438847][T15071] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 691.438890][T15071] do_splice_direct+0x174/0x240 [ 691.438928][T15071] ? __pfx_do_splice_direct+0x10/0x10 [ 691.438966][T15071] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 691.439006][T15071] ? rw_verify_area+0xce/0x6d0 [ 691.439039][T15071] do_sendfile+0xadc/0xe20 [ 691.439075][T15071] ? __pfx_do_sendfile+0x10/0x10 [ 691.439118][T15071] ? __x64_sys_futex+0x34f/0x4d0 [ 691.439150][T15071] ? __x64_sys_futex+0x358/0x4d0 [ 691.439183][T15071] __x64_sys_sendfile64+0x1d8/0x220 [ 691.439209][T15071] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 691.439239][T15071] do_syscall_64+0x106/0xf80 [ 691.439265][T15071] ? clear_bhb_loop+0x40/0x90 [ 691.439294][T15071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.439319][T15071] RIP: 0033:0x7f1aa099c629 [ 691.439339][T15071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.439364][T15071] RSP: 002b:00007f1a9ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 691.439389][T15071] RAX: ffffffffffffffda RBX: 00007f1aa0c16180 RCX: 00007f1aa099c629 [ 691.439406][T15071] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000006 [ 691.439420][T15071] RBP: 00007f1aa0a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 691.439436][T15071] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 691.439451][T15071] R13: 00007f1aa0c16218 R14: 00007f1aa0c16180 R15: 00007ffc8d3467e8 [ 691.439476][T15071] [ 691.439484][T15071] [ 691.439491][T15071] Allocated by task 15071: [ 691.439510][T15071] kasan_save_stack+0x30/0x50 [ 691.439545][T15071] kasan_save_track+0x14/0x30 [ 691.439579][T15071] __kasan_kmalloc+0xaa/0xb0 [ 691.439612][T15071] __kmalloc_noprof+0x301/0x850 [ 691.439644][T15071] vc_do_resize+0x1da/0x10f0 [ 691.439666][T15071] fbcon_init+0x10ba/0x1820 [ 691.439698][T15071] visual_init+0x320/0x620 [ 691.439731][T15071] do_bind_con_driver.isra.0+0x636/0x9c0 [ 691.439756][T15071] store_bind+0x609/0x730 [ 691.439777][T15071] dev_attr_store+0x58/0x80 [ 691.439811][T15071] sysfs_kf_write+0xf2/0x150 [ 691.439836][T15071] kernfs_fop_write_iter+0x3e0/0x5f0 [ 691.439857][T15071] iter_file_splice_write+0x830/0x10a0 [ 691.439893][T15071] direct_splice_actor+0x192/0x6c0 [ 691.439928][T15071] splice_direct_to_actor+0x345/0xa30 [ 691.439965][T15071] do_splice_direct+0x174/0x240 [ 691.440001][T15071] do_sendfile+0xadc/0xe20 [ 691.440033][T15071] __x64_sys_sendfile64+0x1d8/0x220 [ 691.440056][T15071] do_syscall_64+0x106/0xf80 [ 691.440080][T15071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.440109][T15071] [ 691.440115][T15071] The buggy address belongs to the object at ffff88804c2c7000 [ 691.440115][T15071] which belongs to the cache kmalloc-2k of size 2048 [ 691.440136][T15071] The buggy address is located 2464 bytes to the right of [ 691.440136][T15071] allocated 1536-byte region [ffff88804c2c7000, ffff88804c2c7600) [ 691.440162][T15071] [ 691.440169][T15071] The buggy address belongs to the physical page: [ 691.440180][T15071] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c2c0 [ 691.440202][T15071] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 691.440223][T15071] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 691.440246][T15071] page_type: f5(slab) [ 691.440267][T15071] raw: 00fff00000000040 ffff88813fe3c000 dead000000000100 dead000000000122 [ 691.440289][T15071] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 691.440312][T15071] head: 00fff00000000040 ffff88813fe3c000 dead000000000100 dead000000000122 [ 691.440334][T15071] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 691.440356][T15071] head: 00fff00000000003 ffffea000130b001 00000000ffffffff 00000000ffffffff [ 691.440378][T15071] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 691.440405][T15071] page dumped because: kasan: bad access detected [ 691.440417][T15071] page_owner tracks the page as allocated [ 691.440426][T15071] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10659, tgid 10658 (syz.2.1208), ts 382084798801, free_ts 382016804741 [ 691.440468][T15071] post_alloc_hook+0x153/0x170 [ 691.440496][T15071] get_page_from_freelist+0x111d/0x3140 [ 691.440526][T15071] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 691.440558][T15071] new_slab+0xa6/0x6d0 [ 691.440582][T15071] refill_objects+0x26b/0x400 [ 691.440609][T15071] __pcs_replace_empty_main+0x19f/0x600 [ 691.440660][T15071] __kmalloc_noprof+0x688/0x850 [ 691.440691][T15071] cache_create_net+0xa2/0x1f0 [ 691.440714][T15071] unix_gid_cache_create+0x60/0x130 [ 691.440740][T15071] sunrpc_init_net+0x71/0x190 [ 691.440760][T15071] ops_init+0x1e2/0x5f0 [ 691.440784][T15071] setup_net+0x118/0x3a0 [ 691.440809][T15071] copy_net_ns+0x46f/0x7c0 [ 691.440836][T15071] create_new_namespaces+0x3ea/0xac0 [ 691.440858][T15071] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 691.440881][T15071] ksys_unshare+0x455/0xab0 [ 691.440909][T15071] page last free pid 10633 tgid 10631 stack trace: [ 691.440922][T15071] __free_frozen_pages+0x7e1/0x10d0 [ 691.440949][T15071] qlist_free_all+0x47/0xe0 [ 691.440979][T15071] kasan_quarantine_reduce+0x1a0/0x1f0 [ 691.441012][T15071] __kasan_slab_alloc+0x69/0x90 [ 691.441047][T15071] __kmalloc_cache_noprof+0x243/0x6f0 [ 691.441075][T15071] kobject_uevent_env+0x263/0x18b0 [ 691.441115][T15071] device_del+0x605/0x9b0 [ 691.441143][T15071] unregister_netdevice_many_notify+0x1817/0x2580 [ 691.441173][T15071] ops_undo_list+0x8ff/0xab0 [ 691.441199][T15071] setup_net+0x1fa/0x3a0 [ 691.441224][T15071] copy_net_ns+0x46f/0x7c0 [ 691.441252][T15071] create_new_namespaces+0x3ea/0xac0 [ 691.441274][T15071] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 691.441298][T15071] ksys_unshare+0x455/0xab0 [ 691.441325][T15071] __x64_sys_unshare+0x31/0x40 [ 691.441353][T15071] do_syscall_64+0x106/0xf80 [ 691.441377][T15071] [ 691.441383][T15071] Memory state around the buggy address: [ 691.441396][T15071] ffff88804c2c7e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 691.441414][T15071] ffff88804c2c7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 691.441432][T15071] >ffff88804c2c7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 691.441446][T15071] ^ [ 691.441459][T15071] ffff88804c2c8000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.441476][T15071] ffff88804c2c8080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.441490][T15071] ================================================================== [ 691.478184][T14999] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.497803][ T8072] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.497920][ T8072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.499651][ T8072] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.499735][ T8072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.629857][T15071] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 691.629883][T15071] CPU: 0 UID: 0 PID: 15071 Comm: syz.1.2207 Tainted: G U L syzkaller #0 PREEMPT(full) [ 691.629923][T15071] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 691.629933][T15071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.629967][T15071] Call Trace: [ 691.629976][T15071] [ 691.629986][T15071] dump_stack_lvl+0x100/0x190 [ 691.630026][T15071] vpanic+0x552/0x970 [ 691.630050][T15071] ? __pfx_vpanic+0x10/0x10 [ 691.630083][T15071] ? fbcon_prepare_logo+0x94e/0xc60 [ 691.630120][T15071] panic+0xd1/0xe0 [ 691.630142][T15071] ? __pfx_panic+0x10/0x10 [ 691.630167][T15071] ? fbcon_prepare_logo+0x94e/0xc60 [ 691.630203][T15071] ? preempt_schedule_common+0x42/0xc0 [ 691.630233][T15071] check_panic_on_warn.cold+0x19/0x34 [ 691.630260][T15071] end_report.part.0+0x3a/0x90 [ 691.630295][T15071] kasan_report.cold+0xe/0x18 [ 691.630330][T15071] ? fbcon_prepare_logo+0x94e/0xc60 [ 691.630369][T15071] kasan_check_range+0x10f/0x1e0 [ 691.630398][T15071] __asan_memcpy+0x23/0x60 [ 691.630429][T15071] fbcon_prepare_logo+0x94e/0xc60 [ 691.630471][T15071] fbcon_init+0x10a0/0x1820 [ 691.630510][T15071] visual_init+0x320/0x620 [ 691.630548][T15071] do_bind_con_driver.isra.0+0x636/0x9c0 [ 691.630579][T15071] store_bind+0x609/0x730 [ 691.630607][T15071] ? __pfx_store_bind+0x10/0x10 [ 691.630632][T15071] dev_attr_store+0x58/0x80 [ 691.630668][T15071] ? __pfx_dev_attr_store+0x10/0x10 [ 691.630711][T15071] sysfs_kf_write+0xf2/0x150 [ 691.630746][T15071] kernfs_fop_write_iter+0x3e0/0x5f0 [ 691.630770][T15071] ? __pfx_sysfs_kf_write+0x10/0x10 [ 691.630800][T15071] iter_file_splice_write+0x830/0x10a0 [ 691.630849][T15071] ? __pfx_iter_file_splice_write+0x10/0x10 [ 691.630892][T15071] ? __pfx_copy_splice_read+0x10/0x10 [ 691.630938][T15071] ? __pfx_iter_file_splice_write+0x10/0x10 [ 691.630979][T15071] direct_splice_actor+0x192/0x6c0 [ 691.631019][T15071] splice_direct_to_actor+0x345/0xa30 [ 691.631059][T15071] ? __pfx_direct_splice_actor+0x10/0x10 [ 691.631107][T15071] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 691.631151][T15071] do_splice_direct+0x174/0x240 [ 691.631190][T15071] ? __pfx_do_splice_direct+0x10/0x10 [ 691.631230][T15071] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 691.631269][T15071] ? rw_verify_area+0xce/0x6d0 [ 691.631304][T15071] do_sendfile+0xadc/0xe20 [ 691.631341][T15071] ? __pfx_do_sendfile+0x10/0x10 [ 691.631379][T15071] ? __x64_sys_futex+0x34f/0x4d0 [ 691.631410][T15071] ? __x64_sys_futex+0x358/0x4d0 [ 691.631443][T15071] __x64_sys_sendfile64+0x1d8/0x220 [ 691.631471][T15071] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 691.631501][T15071] do_syscall_64+0x106/0xf80 [ 691.631528][T15071] ? clear_bhb_loop+0x40/0x90 [ 691.631556][T15071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.631581][T15071] RIP: 0033:0x7f1aa099c629 [ 691.631602][T15071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.631627][T15071] RSP: 002b:00007f1a9ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 691.631651][T15071] RAX: ffffffffffffffda RBX: 00007f1aa0c16180 RCX: 00007f1aa099c629 [ 691.631669][T15071] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000006 [ 691.631685][T15071] RBP: 00007f1aa0a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 691.631701][T15071] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 691.631717][T15071] R13: 00007f1aa0c16218 R14: 00007f1aa0c16180 R15: 00007ffc8d3467e8 [ 691.631742][T15071] [ 691.631808][T15071] Kernel Offset: disabled