last executing test programs: 10m5.730024657s ago: executing program 1 (id=822): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) ioctl$auto_SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000004040)) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r3, &(0x7f0000000100)={0x0, 0x407114}, 0x8) r4 = gettid() kill$auto(r4, 0x11) fcntl$auto(r3, 0x1, r4) prctl$auto_PR_SET_MM_END_CODE(0x3, 0x2, r4, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)=@enable_stats={0x14b6}, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r8 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x810) 10m4.686389816s ago: executing program 1 (id=829): socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) mmap$auto(0x860, 0x400006, 0x8, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) open(&(0x7f0000000040)='./file0\x00', 0x149042, 0x0) mount$auto(&(0x7f0000000100)='veth0_virt_wifi\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs4\x00', 0x9, 0x0) bpf$auto(0xfffff011, 0x0, 0xa3) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) r1 = socket(0xa, 0x3, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fallocate$auto(r1, 0x0, 0x8, 0x4cbd5d) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) pipe2$auto(0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x102, 0x0) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) statmount$auto(0x0, 0x0, 0x1fe, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd02, &(0x7f00000001c0)) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) keyctl$auto_KEYCTL_PKEY_VERIFY(0x1c, 0x5, 0x8, 0xfffffffffffffff8, 0x81) timer_settime$auto(0x0, 0x8, &(0x7f00000000c0)={{0x8}, {0x0, 0x87}}, 0x0) 10m1.50902803s ago: executing program 1 (id=840): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0x5, 0x0) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r0, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x2000000000000000, 0x1, 0x4}}, 0x92) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r1 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=r1, 0x7, @old_prog_fd=0x13b}, 0xa3) r3 = bpf$auto(0x1, 0x0, 0xc) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000840)="13") ioctl$auto_XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000280)={r3, &(0x7f00000000c0)="8b070855c053f91eeb0004803979ab2f268d140761cd7936d7d11a6849217f20fb80f9b2f2992c3389ae7d04cd76a8c49c1b627fdd7cc53a44d28d37151dcc13cbb3013c98e667fec142973eb472f0f939a48995f0f89354f95bedcc3c79d6b38fe1ded10e093fa57d40cb5d86c77ee0d9500d9aa3be5de9a594", 0x5, &(0x7f0000000140)="02ef416fd8905d6057eca1c50d41614f5d5f663eeae5318a1eb4043a6ca419429b8ca909285ad9bf85f546d4ff09e73748b254069bb29a5fc5743e0b0c59d977e9fa7a0e1165ac1abf32fd3714ff453678e0c3f936f4264257c8a950467bf16c463ac27f7fd699bf09c01ba6e496bcd3d700812792023f1d73bb4c17c638a3472d8ec8acb12f5fcd30a44cab", 0x5, &(0x7f0000000200)="caf2334cabdb8b733da567c0a6bd81043ecc0597b3a3bb91e124b145f1ae674d8ed18d58fb6299a8f2361789bfb24834a66367e3", &(0x7f0000000240)=0x5}) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x5, 0x24a, 0x2c, 0x12, r2, 0x76d) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f000000) 9m59.896213025s ago: executing program 1 (id=851): mmap$auto(0x0, 0x4020009, 0x40000000e1, 0xeb1, 0x401, 0x8000) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c00002aaa, 0xc000}, 0x4) 9m59.519500355s ago: executing program 1 (id=854): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket(0x10, 0x2, 0x4) open(&(0x7f00009e1000)='./file0\x00', 0xc562, 0x0) pipe$auto(&(0x7f0000000780)) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x5, 0x73) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101000, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8881, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x4, 0xfffff000) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x14, 0x0, 0x0) socket(0x10, 0x2, 0x4) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='/dev/sequencer2\x00', &(0x7f0000000100)="dad583626f17d81c06c661d60bce556f0bb57182383343fc798c8bbdcadb1b99bde377b5a473f4551f3f1774346274690763f8717cf646a3b3b0953ffbc181ba18a58d16d60d14981f06d7c219b010d3c00468f9ece321f93b5edc3f4eb8c9acd6f9d7c00a907f638b411cdfb3005c32668173b37de684c02aa690287c3f9bfe8ea66ea1b092129c9355272357b0a1c61f365f0a58ff6edb7aa028963f00f4c242725206", 0x2) close_range$auto(0x2, 0x8, 0x0) 9m59.146844504s ago: executing program 1 (id=855): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x19, 0x0, 0x9, 0x0, 0x1f, 0x3}, 0x4}, 0x7, 0x20020004) write$auto(0x3, 0x0, 0x7fffffff) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x40002, 0x0) sendfile$auto(r1, r1, 0x0, 0x788b) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0xe) mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) socket(0x2, 0x1, 0x106) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) ioctl$auto_I2C_SMBUS(r2, 0x720, &(0x7f0000000080)) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) r3 = socket(0x11, 0xa, 0x9) bind$auto(r3, 0x0, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) listen$auto(0x3, 0x81) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) 9m44.077638412s ago: executing program 32 (id=855): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x19, 0x0, 0x9, 0x0, 0x1f, 0x3}, 0x4}, 0x7, 0x20020004) write$auto(0x3, 0x0, 0x7fffffff) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x40002, 0x0) sendfile$auto(r1, r1, 0x0, 0x788b) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0xe) mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) socket(0x2, 0x1, 0x106) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) ioctl$auto_I2C_SMBUS(r2, 0x720, &(0x7f0000000080)) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) r3 = socket(0x11, 0xa, 0x9) bind$auto(r3, 0x0, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) listen$auto(0x3, 0x81) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) 1m9.447503728s ago: executing program 2 (id=3227): mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x271e, 0xfffffffffffffffc, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pppol2tp\x00', 0x40, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') fremovexattr$auto(r4, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.4/usb5/descriptors\x00') pread64$auto(r3, 0x0, 0x831d, 0xa78) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r5 = socketcall$auto(0xffe, 0x0) mmap$auto(0x0, 0xeb0f, 0xffffffff, 0x1000000eb5, 0xffffffffffffffff, 0x20008000) close_range$auto(0x2, 0xa, 0xfeffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xc008ae67, r5) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r6, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(r2, 0xae3e, r7) ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x8ff, 0x10, 0x1}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xffffffffffffffff, 0x300000000000) 1m8.531374678s ago: executing program 2 (id=3231): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r0, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) unshare$auto(0x40000080) r1 = socket(0x18, 0x800, 0x2) getpeername$auto(r1, &(0x7f0000000040)=@ethernet={0x1, @remote}, &(0x7f0000000080)=0x9) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x29, 0x2, 0x0) setresuid$auto(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0xc0045543, 0xffffffffffffffff) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x86}, 0x4000841) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000ddfc7eef350035b26a8416210a7d13e9a4433c8518", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf251600000005001a0007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8040) socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r2, 0x40789440, &(0x7f00000000c0)={0x3, 0xffffffff, 0xaf7, 0x8, 0x2, 0x4, 0x5800000000000000, 0xeea, 0x8, "57ef0f1414cd3c1c67b49c20aa95bbbfd2b68fae19263df84167c68a423e889e2cbcb6b41dc07aa2dfffe24c19d2b2c3a50f4133f72a36f28bbcf4c8ec369de0"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'pim6reg\x00', 0x0}) accept$auto(0xffffffffffffffff, &(0x7f00000002c0)=@xdp={0x2c, 0x0, r4, 0x4}, &(0x7f0000000300)) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) 1m6.894881818s ago: executing program 2 (id=3240): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) lstat$auto(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4, 0x8000000a041000a, 0x40000402, 0x10000, 0xa, 0xffffffff80000000, 0xe0, 0x400006, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m6.447686172s ago: executing program 2 (id=3242): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mbind$auto(0x0, 0xfaa1, 0x8001, 0x0, 0x400, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x100000010, 0xffffffffffffffff, 0x40000008000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, r0, 0x8) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xfffffffa, 0x0) futex$auto(0x0, 0x6, 0xc, 0x0, 0x0, 0x526) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kill$auto(0x0, 0x11) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), 0xffffffffffffffff) mmap$auto(0x2, 0x35, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22641, 0x0) lseek$auto(0x3, 0x2, 0x4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 1m6.147323265s ago: executing program 2 (id=3245): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) mmap$auto(0x4, 0x8004, 0x4000000000df, 0x100040eb5, 0x401, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001140)=""/4093, 0xffd) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) mremap$auto(0x81, 0x0, 0x5b, 0x80000000, 0x4b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x81085520, r4) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x7, 0x2091d2, 0x8, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) 1m4.571447618s ago: executing program 2 (id=3250): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank2\x00', 0x68542, 0x0) write$auto(r0, &(0x7f0000000100)='\xfa\xb5\x00\x00\x00\x00\x00\x00\x00\x00\x88\x97U\x1b\xae5\by\x02\xc8\xf5\xca\xb2\xdbU\xf5\xc0\xfa&\xed\x88\fm\xfb\x8b\xd4\a\x00\x00\x00\'-\xd1\xd6\x9dq\xc3\x13\x8f\x91dK\xab\x90\xdc\xe7\x15\xe4\xd0\x9c\x8e\x960~\xd4H\x04\x05\xad\x9f\x89/~\xb0\xff\\\xa1d\xe5[k\xae\x90\x87\xbdhl\xbc\xef\x95*(db\x91\xa3$\xc4\x87fu\xc9z\xfd\x01?\xb38MV\xf9\xf63N\n\xbdV5\x1a*\\\x14\xd3\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r1 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) fcntl$auto(0x8000000000000001, 0x25, 0x8) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_to_batadv/router_solicitation_delay\x00', 0x40802, 0x0) sendfile$auto(r3, r3, 0x0, 0x8000000400003) (async) sendfile$auto(0x1, r2, 0x0, 0x400007ffff000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) (async) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r1, &(0x7f00000013c0)={&(0x7f0000000000), 0xc, &(0x7f0000001380)={&(0x7f0000000240)={0x1118, r4, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x3}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x7}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10f4, 0x2b, 0x0, 0x1, [@typed={0xe7, 0x89, 0x0, 0x0, @binary="72937054f4668912efe3a23682b87dcfad53036cb86325650753cca0553a915f062331a214f609e42df10cac2f48ea7485a7fcdb8d01b0f66a43ca2a1dd5b5dee06f15444be9ba1223c5225bd3919ef9c4150fa9702c3735808ccf21e0affab7212d51119f43b458cfae0b7f060c6899136b05f8e7db7d4194cfadb35e6aa6bce44713365288cd56ec2904eaefd086143c55e0e9733d5dcbbf491615ec92cfa28d3ff5552b7ea891e1d2101fe8812395d251be9cb682d2866f10c030892da802dab2118a706e2deec683a22c3695ed7bd4e0d57fb154876ea450d877b8ed05d0006a5d"}, @nested={0x1004, 0x11c, 0x0, 0x1, [@generic="0392ab51d75cb0a4e552fe9eb2fd87b616fec70762618aa95fe9f5c1c5df5c5ba797986f6ffff7d0d13a60fef3fb52a520d451e52b420cc3f189490d3bced35d59cc942c3b0e5462ce0863f8e4590bf7b36bdae3ddca2342354d6720cb730371c1eb62795a1a092be339d2b6c8cb810861b37c5f2a7fd480638ce460387b7e74b08b0fb51c99feddd814dda0f32e0d9a649e46b37bbfc2188b8e9d083f6527568b917084af7efc5e4d9d3f8af7d1e95817de8b91d8695689dc0a02c0210592946e2c469a08f655bb7efd51999107903ddd7d4f6bc18da3f0651d1337474ae7416353022a38715ea613f69567b3eda5f32947ac79a73b3d47c6b046af7ecc4c6d03f0722489f254b88eaa3b345e30d5c06a71b7ec94b8544dfc8b1e90bea447d24566697e524f2bdad21e8c49a722b0d40ca30e8d472d3abfc954e5be82203c84db0441bea008340d00acd0ddca3f6f17e213174851650c6bfb7683082ba376cbdd89568e607ca6e9e162ac614eaee596e116e0c9026d09ecce19bc8a339779d50cce6cdf849086284d04e21ef19882a2a553a005be01c6efe98544258a68b3b4963f2b4763712905e3b5ab72bd1d46976bcfdd593ec2a2c280a870d128f095ff68c14fb8c90de9e359feeab2bad927bfe580cb894e61c604c6fd045d012b1bfc43d5652be80321739e187c7ddd042e2f549aa58bf88f5d87abfee666edc729fbd412baead672fb875ddb9cd87f21598c62581bf1cc1ad427c8ad93bd57f402267f06283abf1b28640e2d154c39c17ff9e3cfd7d7ab4015af7dfe55223623f691a98b556214b5d18b98400cd2c45320a7e1b843dbcef1201c8c2d5ddb0d2f2973aa8e65eea50209f2bdf9153506b35a8ccaa490b9efea2606d3d6247140ab0a8d2d7a854fc8fa3ddb272e18af86863d99aa5db39721915378b196121eedc5f6db6f3a7fdb13136395f74d7d297e955f66207123091286b45e534bd676e6c08e0783ce49377448ee85fb535f399daaf9f7b3e4207a379e8e4d703d5e232d394dd74bf535e8234c3e9f19a39ef88c0ec57f9b8988e1eaaa1cad013c21bbe3045abac0c41e5509f5edaa24eb88dd37d72041da5fa492532dfcd891609cbdde12b5c8b8a9f224e722d552251a4625c4e732e0a4cf71eac7630c8d8222645c962103e34de6fa0f4909e729a61366080fdc1620d95604fc9e52fc973bdef08b9f11c0239753dccdce23aaaec6c762bc0be2f093e5627afaa7f94f067edc8ad3da4e86a0f23423e2081bc5f825601fcb94f17f16313b07cd7d03b9072f0ced9bd0c30a189eec1c549f569f54258174dc5e5dddd8ef8782d141207f5e0c7a56a9ccf5613cef76ff8385b97095c1ffac2425cb56701d63974ba57e34bc9fb7dd93d0168005c61fc4a50abdc6db51525c50bbafdcf32bebfbf4e9e93b27245dc928603fc35cbfc6d0ec5314b0ff63acaeded9299bc68a9e1e5d17abb76e5395bdb1ceccd7890229176da03d1055d67c12569606d19b4884334085ae269c502a784850dfe475b50afa59ede9d6aba6fea04260c450577df271f29fa69193278c7954d039d7ea329340db6f99d95a73d7b770acf89d237cb244a8e8a24a735b5a85b9b10e086f990d9c3a15cf5e5e349329c49559486970c90cce231eca43f77a8256ef8a8228a1869e1c824e8e51483cdfb2eef06aebd0e2c7eb46c0722b82835c810c87d08867547528d34b133d5821b05d5d27812be1802fef6eabbf436ce571eccf2f5983eaa3b36045e3595ceab76763190eaf2a6379b7e5365e36777263714916b18b4b2daac70f084c7f3375a18648bec0a6e3cde2cfe3730773034a3923949f67311f94d3d692a60631b2c1b2ce5a5cc7c48a6d23a44e0b2e8a8093359f4090e4dd1d907e6c568dc34d3f3fee220556165f7ffe3eebe5040996d7e7c7ba8346bb7f111c9c477ae88d51b57eb069b02cf17bb24ad72694086c726bbb0f95968262c055cd6fd62ccabef5708da27f4aa1e3eead3f0bf7649d215de08099f0bfe5993d954f6ad955d80a4870565d83923205aa5b7fa5833d6e7fe6ca3039c77ec3af14023facaf950ef06e38f3e43f6863fc1bb5eae14e1c212252911ae3f58aabe3c7745f0462380b34a3e4a38bb105dd4e458bbff1703064ffea8968d853372624274e1680ce573cd6b35bf8e640cfa6f38a7bd2b07b082f87ab8badcc4a533d1ffc965acd66559ce39d3403f75e4960f6d74e822b1f7b11dbc2d0699f459f70dccd8aa931c8ae0cd10adcd3ef865bf06cd808088c735540c8eb729d081783441a721f46cf2a3ef9b409fa8395a693ace28209af3bfa5f269ffca44b3b62377d037a7edb6144c7d219c148e8ce662c9c54fd09d901b05bdaf15a469a06ead02a8559a4b73a65e44e74cc03df20db518435f0ba88c15d79fb699d6ffccfb254cb0af0ddefbf81f3d748da5aa2e7a9747760d391b4835598385963c993799df1776b6cb5c2871c64ec8081862443a78ae4f34c373e6bd28557d5789b5f26e1a0905f77e7115e0df37ff25132c5488a4228910ff730dd6b1517ae0135de55674c57777bf1cf48d94f5342c504ac5e29a77abe4bde168abcd5005b27091a75e32d78b97ac2f2358b645e6a37ad88d1025fae200630046117ff0d42487c3f44399c0c7cb806b3cf9b7ca2bffb60132350d643eafe3f0216b29e456cb85433a72946fbdd0117dc85cea0655751bd571a95beff418de8a180b04ff55d99547d880ef7117a718e8846573d1f28309a34bc0b41e68a0558e3a21f69eee44bb4cb9aa3210d03470d57d03b45064d1f1c206680de4646bc3ab41654895f49b4956a387d2bd637b5a0008baf20562dc9f16c12c33fd56618abc0b9ebba864960011f15038c2321899ca117c0ab909f46cef8e3b814a63bbbf68c959b7c7266bd816c8dc74df13d934ea4e073790585e7f5191ebdca49722c66d31e65fb72a5d4dfe7a1e8d58a4132aae279c2c70aa440ca95cc7ac17cbe4539b36266ef6448f3a085db082983d56e1db0d2b853d5c09e41628014e08f97f78bb62fd7ca044e4aa92c5e768df54080580c696b4f81e3a1bc4b91f08a3cd32c8442fc01df7b2827bb5c9dba069acccc3719692fbd21ff396d4403e3ff63e983791afb9c97050a9acda34c3f505b58a94b270de0181ef7decf49712e50048f0df649512f61e502f16b58829efde1c1c4989cf8dd26a320919c64d0641a80d3418fa1b0e78a11b17363f856e2edc52e0acfe6259e3a2e534c4021fa6687c214dc115dff90bc142e0f439eab37831e9618aab60e8873c44dc05f6915013eadc5ce48d2fa78abd2694f7a6eb7103536b628eeedef83517bf32cf9238e2ccdc9d7787016b5ff1a9d823fa0f0776c0b21f4a55698c155e5e2b57bb9e80f1e31bb93cd9ffa1be8cf01d6f57d96c9cd6b570b88c6d38f7e2b0dc952f6075606f14c401e97e2c93f6baba8ecbc312fbf6944b6951eb9ce605f4ab3d5b08d5ffc6826a1fdd09831683c006a7c79b27da0f07b1cef3648b5773e57016baef1f422833b5a97ac61daab2685d74b127673b7292e05a6ea7c17f295b936c04985ee409e3f6fa966184c48d3833d750f2472c77594f162c9d5f9ed07b2424ba8200498c878ca86ed72058f8c1e7a0717dac51c748a0a2233e199459709344a2fa91e897dcadad1cdc00a97e7bc79e32a98e641d7756366ced4811acfd89b5bbb8d31f6e59b4f62e8a8d9aa099adbf44b0e261b50ef52731a88d7608fb9e3513783a88b1246dceb32ec343ec84ba036e746af5c106e4ee272806d95ed55e9cc0f9c549417de83715ce5388af0d0e1a83998f02b91327eeb0010a590490feb738288acf03b2889f0498120bec4a83e535b8b9589803d95beada351853efd9eabdef9c65d308772a7a66520807b8ca1aa980c688218c3bcb2a415cd292d09279396a367fdf4fc5a8ae9e67df66ebde0f21de63ff4db6a0ba7c3cf470a69d3bdaab91308722b5f176b7cc47291f3114c0feff56054f4212116aefb521dad83fd4a51890815200397006b8511fb2a9afb9fa3b2481c6b3f8f726dc69e313b084e1647fbfc01c1abb6f2077ebc0b2c804cff5312701fbc14a61e480e4613d85ce71b164675adde64cc63d11a199375bdc926efe3ba2ca9a95f87a24174a703160c009ffd47ed0ad53c97b46cf8196757a5633ac6ac89cacd06725f4c688905e3fddacbc8c4bef468abef02b60fbf2ecb4f8b64f9f5b71230cee0890bd706a17924f73c6aaac644130a34b9c98b218715f31b41a8c731b43b0f397a36e34b8d45df98b2ee1359ce59e153956d5439d4d6f6e3c5c563d041ab927944b846dc412193907f7ce3a71b7c67db40f438840ad44f365c37b3f8ed474e4eb4313cb0e8f47cfb00e317e38f4eb9ce7889a778a384ce10c1c441314326aa827d8278a6b4615a442491f3e65cdbe8f58aba0f71b5787d5e3abac37295b30d7fc8016cc3be6eccf41f57aa3997879b93914d9ed3325364fff6db62e938e887ff456a5fb09da908f9d00e6c38f6847b2c48add95c647cf93798863f1f636d3b0a6b3687c8f102b261f16cbd9124192fef1a38f67224e1d748e8f1e414ad46dcc577d9179f79111d870e0c8408feef1b00ccbd49a05142b00c3eecc7ba3592f57cb4275e797670e102b8963cde1038ad6c1eb3c1d41c6eed1930a31aa48b4d44e2633bfe9e49c049786c71b69ef8cb9bdbfb64770b857f75ee1c150563e4b03b157f91797681a87f2e302394e37f5feff5b3d5b1b83d8a9f1508686530a64b005de345b3d582cb1865b428c2352e9eb09368fa79e6649554772b6386ce516782abc4d2c4794572233672432cefd2ad1e8a443a925fd50b7ebbe97fab9f5ab99d498fe36b4c56309db588fef183ecd0e9f3855665894a9849acab182ad87785f7e8f3e6de1464b3924132958700cb1a6043892742b3493e020673618b79a5ca3878fe614bcfce0bfdee8e5e9fc27979aaade0916d8c5d43380c6ac9392eb15d77bd4141654cb65e424f0986dad18f712aaae9ad40c5d01cd41bc9641f07ac16aa0cb8873cc6b71948b9e1f5610e0c373c469873fb2c6a984cae726129c9cfc6ab24e6d36a1885a977b159c6dc4977efe5f4de0ab2008b74c4c1d6f855491f8f986a2b97213ffd1d2252031bc23389879e96cb387e88ab79aedd2b17f804e0c018f44baed7bb07f826d3f30e0ba14bb943c2a0fd56ce4d95a97f6e253b1a3721fbd3bc80eb7b5451067f9e01623bed138716d3375c0fd025405e79c93035a996526676fdfd1aeaa5dd6d3d9eff86b35f7a82a30258938ce111cdfbf6071db4d99a2944f6eb00221532215d1e9b2300405ec9c59c347e22320bf3caf147d7ab0079ef173f410a36653c081ad6012fb32c8abf6b1b9dcac9b095dad648a63e3fcb7c95e0707632c8837dc58787f64420dc06c544aef961a88f6231abc5090f55e8fdb41fb012743e871f5abbf76927b8ebc777e23073bc5a35b5b59e208111dc6d6b9a1b3d8329716c777c5713d66582ccfbb71dec6b3dadeb3653f51dbf4d81cd6a02d1c9d6c748f5f21b4ee1b6f1cf7b9c1458c2ba5d3a7de642e9f972f05286cec2541a74d777ccc3d9a30309ba792616afa86e392905f4670ee804310986ee716b5b860cdfdae98af4873cff5fd45a2aba61efe461af3e1c08d1c36d50ee350b3f54687b9e06af18831028e5d9cad364de64d756c00ba0d11ca009bdf5dd9e8aeead31e88baec0e793f2bc7434a794f3ff467dc98ca38011e82145af79b5aa157da6"]}, @nested={0x4, 0x12f}]}]}, 0x1118}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008002) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x20202, 0x0) ioctl$auto_IOC_PR_RELEASE(r5, 0x801070cf, 0x0) 49.589849574s ago: executing program 33 (id=3250): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank2\x00', 0x68542, 0x0) write$auto(r0, &(0x7f0000000100)='\xfa\xb5\x00\x00\x00\x00\x00\x00\x00\x00\x88\x97U\x1b\xae5\by\x02\xc8\xf5\xca\xb2\xdbU\xf5\xc0\xfa&\xed\x88\fm\xfb\x8b\xd4\a\x00\x00\x00\'-\xd1\xd6\x9dq\xc3\x13\x8f\x91dK\xab\x90\xdc\xe7\x15\xe4\xd0\x9c\x8e\x960~\xd4H\x04\x05\xad\x9f\x89/~\xb0\xff\\\xa1d\xe5[k\xae\x90\x87\xbdhl\xbc\xef\x95*(db\x91\xa3$\xc4\x87fu\xc9z\xfd\x01?\xb38MV\xf9\xf63N\n\xbdV5\x1a*\\\x14\xd3\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r1 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) fcntl$auto(0x8000000000000001, 0x25, 0x8) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_to_batadv/router_solicitation_delay\x00', 0x40802, 0x0) sendfile$auto(r3, r3, 0x0, 0x8000000400003) (async) sendfile$auto(0x1, r2, 0x0, 0x400007ffff000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) (async) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r1, &(0x7f00000013c0)={&(0x7f0000000000), 0xc, &(0x7f0000001380)={&(0x7f0000000240)={0x1118, r4, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x3}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x7}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10f4, 0x2b, 0x0, 0x1, [@typed={0xe7, 0x89, 0x0, 0x0, @binary="72937054f4668912efe3a23682b87dcfad53036cb86325650753cca0553a915f062331a214f609e42df10cac2f48ea7485a7fcdb8d01b0f66a43ca2a1dd5b5dee06f15444be9ba1223c5225bd3919ef9c4150fa9702c3735808ccf21e0affab7212d51119f43b458cfae0b7f060c6899136b05f8e7db7d4194cfadb35e6aa6bce44713365288cd56ec2904eaefd086143c55e0e9733d5dcbbf491615ec92cfa28d3ff5552b7ea891e1d2101fe8812395d251be9cb682d2866f10c030892da802dab2118a706e2deec683a22c3695ed7bd4e0d57fb154876ea450d877b8ed05d0006a5d"}, @nested={0x1004, 0x11c, 0x0, 0x1, [@generic="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"]}, @nested={0x4, 0x12f}]}]}, 0x1118}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008002) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x20202, 0x0) ioctl$auto_IOC_PR_RELEASE(r5, 0x801070cf, 0x0) 7.096547635s ago: executing program 0 (id=3474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x2000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000240)='LnAY\xef\x1c\xcb\x1c\xae)\x13\xf7J1\xa8\x90<\xb9x\xae\x0e\xbe\x158\x81\xd4\xd0\x81KO./p\xc1\x81\x1d^\b\xb7do\xb0\xc1/\xdct\xd6@\x84\xcfJ\xd6\x90\xb4\xf6\x03\x94@\x1f\xbc\xe9\xf6\x10Pm\xabt\xdcP\xbb}F\x9e\x8f\x9b\r\xe2A\xa73\xccp\xbf\f\xd9\x0e\x10>\xfe\x86\xb9\xa3\xb6\ad\xab\x18\xffc\rD+J^\xea\x01^\xc2\x96{\x81\x7f@\xb8\x0e\x80\x85\x93\x93\x85Y\x06\xf7t\xe1\x02<\xce@\xda=.\xf8S\xd5\xd8[GF\x93\xc7\xaa/#\xe0%\b\x00\x00\x00\x85\xe1*\xdf\xc2\xc6\"\xda \xa7\x1e\xae\x96YH\x87j\xa8\xf1\xed\x0f\xb5)N\xa9\xe8\x8f\xb0vN\x8f\xffv\xa5bTmx\xb1\xf7\xae\xb9\xcc\xcd\n\xf6\x90\x93\x19$F\xa5\xa3\xcf\'\xf3\x9c\xcd\xe3\xc5\xff\x8a\xe6\xd9\x95\x05>\xfc\x87\xf6\x8a\xb5\a\r\xde\x11\x8ay\xfe\x83\xec\xf2I\x13>\xf2\xf5^\x88C\xe5\x12\xea\xdfYi*Q0lN\f\xd9i\xb6\x0f\x13\xb14r\x1e+\x04\xce\x85q\xaa\xec\xb9\xefTv\x1fr2\xff\xaa\xaf\xfa\xdb\xdb\xc5\xa8\xa3\x9a\fP7u\x88j>\xc8\x99\x95\xc5\xad\xaeZ\x01^\xc9\xd4\xb1\x03=\x8b7:6~\xc0\x1f\x03+)\xfd\x11r\xe8\xe8\xd9\xa3#\n.v\x97C\x0f\xb1\xdc\xd5', 0x200082) r4 = socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram13\x00', 0x8202, 0x0) mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_max_time_ms\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x230302, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0x40042, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio15\x00', 0xb8002, 0x0) fsconfig$auto_FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000100)='\'\x00', &(0x7f0000000140)="79772a1364233488b5b276ca04f3eb3f29ba8fbdd8f9b07e4552a8db2b0d96d16b", 0x40) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto_TIOCSTI2(r6, 0x5412, &(0x7f0000000700)="12") socket(0xa, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r7, 0x107, 0x12, 0x0, 0x4) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r8 = socket(0x11, 0x80003, 0x8) setsockopt$auto(r8, 0x107, 0x12, 0x0, 0x4) r9 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r9, 0x107, 0x12, 0x0, 0x4) 6.294359434s ago: executing program 0 (id=3478): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) lstat$auto(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4, 0x8000000a041000a, 0x40000402, 0x10000, 0xa, 0xffffffff80000000, 0xe0, 0x400006, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.57028072s ago: executing program 0 (id=3480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010329bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) read$auto(r0, &(0x7f0000000080)='\x00', 0xff09) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101b00, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x100000000, 0x7f, 0x1, 0x18, r2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(r4, 0x4058534c, 0x38) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r5, &(0x7f00000001c0)={&(0x7f0000000040)="70f9c0d7248b83810e783cefa7f8cf410bf9f41d0f6438d06c989e4dc02d467f340ac0cdb9", 0x200}, 0x10) recvmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x7, &(0x7f0000000080)={0x0, 0x7ffd}, 0x5, 0x0, 0x3, 0x8}, 0x803}, 0xfffffff9, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket(0x10, 0x3, 0x9) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) r7 = socketcall$auto(0xffe, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0300, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0x4008ae61, r7) sendmsg$auto_NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x5f}, 0x1, 0x0, 0x0, 0x400400d4}, 0x40) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r6) 4.638484836s ago: executing program 0 (id=3489): acct$auto(0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x20342, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x15) mmap$auto(0x0, 0x2020009, 0x203, 0xeb5, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x7f, 0x0, 0x0, 0xdd) futex$auto(0x0, 0x7, 0x8, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000100)="307c9b140d", 0x5) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) open(0x0, 0x22240, 0x154) unshare$auto(0x4) open(0x0, 0x161342, 0x1b9) read$auto_uinput_fops_uinput(0xffffffffffffffff, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) madvise$auto(0x0, 0x400053, 0x9) 4.564456961s ago: executing program 4 (id=3490): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = fsopen$auto(0x0, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYRES32=r0], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) close_range$auto(r1, r1, 0x101) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.281675713s ago: executing program 4 (id=3493): openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/saved_tgids\x00', 0x241842, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xf3) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r0 = open(&(0x7f0000000100)='./file0\x00', 0x149443, 0xc8) r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000000c0)={r0, 0x8, 0x2000000, 0x8000}) open(&(0x7f0000000100)='./file0\x00', 0x161302, 0x17f) 4.148241433s ago: executing program 4 (id=3494): r0 = timerfd_create$auto_CLOCK_TAI(0xb, 0x4) mmap$auto(0x0, 0x14020009, 0xdf, 0x12, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd4/trace/start_lba\x00', 0x22062, 0x0) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000100)=@bpf_attr_11={0x8, 0xc4, 0x4, 0x5, 0x8, 0x4, 0x9, r1}, 0x4) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x100400fffd}, 0x400000000000005) 4.005597412s ago: executing program 4 (id=3496): r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) write$auto(0x3, 0x0, 0x400000000000050) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x0, 0x53, 0x0, 0x0) mmap$auto(0xea88, 0x810004, 0xd, 0x18, 0x3, 0xc09) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x29, 0x2, 0x0) socket(0xa, 0x1, 0x84) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config/nullb/features\x00', 0x109103, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x18040, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msgctl$auto_MSG_INFO(0xffff, 0xc, &(0x7f0000000280)={{0x9, 0xee01, 0xee01, 0xb8c, 0x6149, 0x3ca, 0x7}, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0xfb, 0x8, 0xfffffffffffffff7, 0x1, 0x8000000000000001, 0x6, 0x43, 0xffff, 0x6, @raw=0x2}) setfsuid$auto(r4) setfsuid$auto(0xee01) 3.42136726s ago: executing program 0 (id=3498): r0 = getpid() bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={r0, 0xffffffffffffffff, 0x10000, 0x3, 0x8, 0x50, 0xffffffffffffffff, 0x9, 0x4}, 0xf1) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) write$auto(0x3, 0x0, 0x400000000000050) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x53, 0x0, 0x0) mmap$auto(0xea88, 0x810004, 0xd, 0x18, 0x3, 0xc09) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x29, 0x2, 0x0) socket(0xa, 0x1, 0x84) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config/nullb/features\x00', 0x109103, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x18040, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msgctl$auto_MSG_INFO(0xffff, 0xc, &(0x7f0000000280)={{0x9, 0xee01, 0xee01, 0xb8c, 0x6149, 0x3ca, 0x7}, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0xfb, 0x8, 0xfffffffffffffff7, 0x1, 0x8000000000000001, 0x6, 0x43, 0xffff, 0x6, @raw=0x2, @inferred=r1}) setfsuid$auto(r5) setfsuid$auto(0xee01) 3.34919931s ago: executing program 5 (id=3499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010329bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) read$auto(r0, &(0x7f0000000080)='\x00', 0xff09) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101b00, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x100000000, 0x7f, 0x1, 0x18, r2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(r4, 0x4058534c, 0x38) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r5, &(0x7f00000001c0)={&(0x7f0000000040)="70f9c0d7248b83810e783cefa7f8cf410bf9f41d0f6438d06c989e4dc02d467f340ac0cdb9", 0x200}, 0x10) recvmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x7, &(0x7f0000000080)={0x0, 0x7ffd}, 0x5, 0x0, 0x3, 0x8}, 0x803}, 0xfffffff9, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket(0x10, 0x3, 0x9) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) r7 = socketcall$auto(0xffe, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0300, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0x4008ae61, r7) sendmsg$auto_NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x5f}, 0x1, 0x0, 0x0, 0x400400d4}, 0x40) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r6) 2.683913992s ago: executing program 4 (id=3501): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x40842, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x181240, 0x0) connect$auto(0x3, &(0x7f0000000080)=@generic={0x27, "f885445346f2ffc7b2fc3709a7db"}, 0x53) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x40000006, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x5}, {0xfb, 0x1, 0x50001, 0x7, 0xfffffffe, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000e2, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0x12, r3, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x20401, 0x0) mmap$auto(0x57, 0xa55, 0x2, 0x1a, r2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x300080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8001, 0x0) socket(0xf, 0xa, 0x0) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) 2.443610952s ago: executing program 0 (id=3503): mmap$auto(0x0, 0x4020007, 0xdf, 0xebf, 0xffffffffffffffff, 0xa) mmap$auto(0x7, 0x400008, 0xdf, 0x9b71, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mmap$auto(0x5, 0x1bbf, 0x1ff, 0x19, r0, 0x8020000007ffd) close_range$auto(0x2, r0, 0x0) socket(0x2b, 0x4, 0x10000033) socket(0xa, 0x1, 0x84) capset$auto(0x0, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0681, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x1c9c82, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x1bf8c0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x9}, 0x2) mmap$auto(0x0, 0x400008, 0x8000000000000df, 0x9b72, r1, 0x6) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, 0x0) connect$auto(0x3, 0x0, 0x55) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x88c2, 0x0) write$auto(r2, &(0x7f00000000c0)='7\x00\\\x1c\xe7k\x00\x00\x00\x00\x00\x00\x00\x00', 0x8083a) getrandom$auto(&(0x7f0000000200)='+\x00^rp\xcb\" \x81u5z\b\x06m7\x84\xc8\xd8\\\x12GM\x02G\xda(\x7f\xe0\x8b\n\n\a\x9f\xcd\xa9\x97i\xe2\xa0\xdd4/^\x13\xde5\x96j\xf4\xcc\xc6g8\xe5\xf6k\xe4\xa0\xc5XF\xd9R5\x81\xa8\xc5\x11\x1a\x8b\xb3Y\xa4\xa1d\xe0\xbe.&\x7f\xd9o*\"\x1c\xe3\xe9%y\xf7\x8ffm\f\xe5\xb0\x13\x16\xa0\x8b>\x7f\xcea\x9b\xe4\x8e\xd4\xf2\xeb\xa5\xb7\xf4\xef\x90\xea\xd4\xa5$\\\x03\a\xf76\xa6z~,7\xccH\xac,\xb4\x8b\xa5\x8b\xcc\xedRFp[h\x14\rn\x1c\x17\x03\x80:\xcaDS\x8b\x01ssn\xc3a\xa8\xfb\x97\xf4\xb0\f\x99\xe2\x16m\v\x9aa\xb8R', 0x6, 0x3c5f) mmap$auto(0x9000, 0x3fffff, 0x7, 0x11, r1, 0x20000040) 2.33800932s ago: executing program 3 (id=3504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}, 0x1, 0x600000000000000}, 0x20000040) 1.646019805s ago: executing program 5 (id=3505): mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyqd\x00', 0x80, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="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") mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x840, 0xc) r1 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000001180)='/sys/kernel/debug/clk/clk_dump\x00', 0x0, 0x0) fadvise64$auto(r1, 0x0, 0x9, 0x80000000) r2 = socket(0x28, 0x3, 0x5) r3 = getsockopt$auto(r2, 0x84, 0xc, 0x0, 0x0) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000000)='\xe6/\x00', 0x2) utime$auto(&(0x7f0000000080)='\xe6/\x00', 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x5, &(0x7f0000000100)={0x0, 0x96bc}, 0x6, 0x0, 0x7, 0xa502}, 0x9}, 0x6, 0x7f) recvmmsg$auto(r4, 0x0, 0xfffffff9, 0x4e424cf4, 0x0) sysfs$auto(0x2, 0x22, 0x0) ioctl$auto_BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000001140)={0x2, 0x27bf666, [0x2, 0x3ff, 0x5, 0x588, 0xe, 0xf]}) r5 = socket(0x15, 0x5, 0x0) getsockopt$auto(r5, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x4ad03, 0x0) ioctl$auto_MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000080)={0xafa, 0x7}) write$auto(0x1, 0x0, 0x80000000) munmap$auto(0x8000, 0xffffffff) socket(0x11, 0x80003, 0x300) 1.469214501s ago: executing program 4 (id=3506): r0 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0xd7, 0x9, 0x2017) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0xd0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) madvise$auto(0xfffffffffffffff7, 0x7fffffffffffffff, 0x7) mmap$auto(0x0, 0x2020009, 0x7, 0xebf, r0, 0x2) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x40000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_SET_KEY(r1, &(0x7f0000001880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001840)={&(0x7f00000018c0)={0x2dac, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x80}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x2}, @NL80211_ATTR_SCAN_SSIDS={0x2548, 0x2d, 0x0, 0x1, [@generic="be34730a3d0d6140cc32a6953fbf0ecffe027a6cf63fe96d3e6586769f0a7682a08fe2ba530a799c6b546ce338aabded7784afb6dd93e9fc17d883838d6a91383a859081e13aa6c0e99fc96795ee7b01b28546d43c3bda8e0fe50a2128d852265503af6371ffc264782c013ea33b8d31f00724b0e6b691b2e3f45db81e6e170e5a1b06158e1f2bd3e48d91010576322c5ce76dc5ec8869aaf628605c0cddf854e389ec42302ae75e45af960c31acfd8c9738963a74535c82c70a5564dee5341724017d411738f9da5ec5e9e5dcc2b5d92b72d6773c4b1c86cf114ecc0365f9fdf79e2c39d342e9b29749c4d15bf6", @generic="2511833a75d3bfaa35e348fbd384a8aa5a964b305a808ffb1ad700a38888800aefa54eb1a22b1ff3d77af60c77dd05ecb1b92f2200e59ae65324b3d8053621b294cc49ed593e1d7243007f8b063bb4336127e3591e94023cb1453e16b03fc68698aa7d92ed2f30751ef2a2116ca9616a9343bedb2933114533c997737e7310ae79ac3d9514764f55c868924d39c5ebd8474b1ea16e3145867534300d306ab35b73fa7a406bdb5d45f639e5db2563c01126b1c268178ebc98b8e3156019774e77758253d1ee2257d75cfc90098bcb0ab670db5f614230e019047ec0371872", @nested={0x2377, 0xbe, 0x0, 0x1, [@nested={0x2308, 0xd5, 0x0, 0x1, [@nested={0x120, 0xe6, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @uid}, @typed={0x17, 0x53, 0x0, 0x0, @str='/proc/pagetypeinfo\x00'}, @nested={0x4, 0x126}, @generic="3fcde2ff050d940e44c33df540b1bbc48823055822e2f74cf20ad48f5bae29ed99bc4ca592afa2fe4327f2bbe5f1e64dda0334de1158d10f13e8cdca4ead4defc7e236ef74e3f8e95b1e1a3539b47be79174cbb708dd0ce8e7fef3fb8d4030b47d16b3969c550abe26aa9d61536fe25542b60d52b55fed1e7e52a8979b1c586ce3d8d400237b83ae93138afabc92ef34d8206b3bfc059c3ef6b9d49972a187e32d25ce0c20ccc99c38b510a5e0861879f03711a702468b66a903884835472c033f8813f7a54935c24f5083e1bf29d47f8b788a54a61c4ee30061eff628307d3ab0311cdb6969e3ce58bac0ca944d3b023c64cbdf0820d806"]}, @nested={0x107, 0x13a, 0x0, 0x1, [@nested={0x4, 0x22}, @generic="4e4de569e177059e6b065f6efe99e4c0da3086bc90d354c1d2f76d11e0a5a5a5988159ac65cc123488ab852eb415b02b0d84649aa3f4ff13d03cd1226606feee5a663f6f8c4586e3890243eb093ef2", @typed={0xb0, 0xd3, 0x0, 0x0, @binary="2b047b208edc9cfca591dbc8bf1290250ba9a9294740cc12f6698064fe79ece17a5e78aaed01b984c2c7cc208fa5015df51226c2e1c2fd8944681d9b3178d477dddfc6a814afc3cbe855b0b9792927957633c2e9de31f176236c692336f2a2e2ffd7edfe9c65acb3b4535c303a694cfc2668bc4fbe667c149b00f0fbe850a0a0023cf0ddfae6a695872ff2db1df5b46086bc894bbdfcc1baef5129f5017b453eb9153e45f00d628a3a210245"}]}, @nested={0xdc, 0xba, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @uid}, @typed={0xcc, 0x10d, 0x0, 0x0, @binary="8c5d79b4a18640db69ee4b75392d457302b507e676565243de3183591acb33571df1fff7c67de9ca90f0f5460e3a6e0fa8e8c9a626c969022f132b7afd6d6ad55c1ef0c0ea40a0c67a46d694702a2276f07563e047261c30bd5049a8022beeb571ad2465032284b76a4aa5ca4d18d003f7f1ef6b90db9ae879d85879953932ed3deb0a1abec975197e5fcfa3cee9de32332418b141319aa647e2a67109b5ed16ca13d2a8a6d2cfe49cdd2b4c64cbe5d8181302c10d0a5e7380faa548e6a32e5f543d0ce8e5585ac4"}, @nested={0x4, 0xe8}]}, @generic="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", @generic="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"]}, @typed={0x14, 0x138, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x10f}, @generic="2e098d31a0f61df6bb6eb63c61884d0015f7bc744dab9c440b7fc0ac87fef0c658208964694ea66dbc78a2e09667334f71eeebb0d156c7cdb74db8abfd8e68471e02d167fa82f9", @typed={0xc, 0xf1, 0x0, 0x0, @u64=0x8000}]}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x5a5, 0x80, "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"}, @NL80211_ATTR_FRAME_MATCH={0x76, 0x5b, "962c9fc71c750f7a5aa107cc9e3d2d12be815c579a9dfaefd7c03ae16ebb0ab82f42933c78c310c5c5a8fb6db3f75a72c4b15ed91569a205109e979ff999f23f74648e3edabbf658db5d8b07b009c3d0f6f31ea001e3eb4b7aabd24962b85a2578874a9242fc74cb6d94a73319f138191da9"}, @NL80211_ATTR_TID_CONFIG={0x208, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0xdf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x40}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x42}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0xc2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0xd8, 0x5, "4e0ecb32da3ace131af1cfade474fbecaeb949327f9ec07103e085819b83dfb2ff076c1de206d3a18f013d01940d94625c492c43aa8fd623305cd825d14101a3902c34994d9956e76a836053808b51694b700ff3ebed0c7b61aef8c6fd2cd76c0715ba64085601d83bc328b591178e0493475d318297e4f456ac0fc8279723c33a96b5d0444cfff69fda9c30ddfb4fa2d0b5de2d6349c6b4417de097281099ba87a9723748c9afcd50b7091daa4fe234ca9b1813d7ec3124d1a9743409b045555a562780a58fad96659ad7243a74624863f3f4c1"}, @NL80211_TXRATE_HT={0x44, 0x2, "21adfc53a97e6e181c9c20eb5f7c55b3748dc38d087026be1745a0e193d12d2bc5c4a25100f217049fd406da45aba73e1edfea4a49fff586094ddefc011ba464"}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x26}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x38}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfe}]}]}]}, 0x2dac}, 0x1, 0x0, 0x0, 0x45}, 0x80c4) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/178, 0xb2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) r4 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/take_snapshot\x00', 0x101001, 0x0) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0xfffffffa) write$auto(r4, 0x0, 0x0) r5 = prctl$auto(0x3, 0x800000000001, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r5, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) io_setup$auto(0x7ffe, 0x0) syz_clone(0x1044000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbfs/unbind\x00', 0x454502, 0x0) 1.46699335s ago: executing program 5 (id=3507): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x514) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) ioctl$auto_TIOCGPTPEER2(r1, 0x5441, 0x0) sendfile$auto(r0, r0, 0x0, 0x407ffff000) r2 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r2, 0x6a, 0x3, 0x0, 0x100) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r2) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x20000, 0x0) fcntl$auto_F_SETLK(r4, 0x6, 0x1) io_uring_setup$auto(0x401, 0x0) unlink$auto(&(0x7f0000000180)='./file0\x00') getdents64$auto(r3, &(0x7f0000000000)={0x6, 0x0, 0x8, 0x1e, "c5361daf090d2fd7"}, 0xffffffff) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@enable_stats={0x7}, 0x6) 1.466289384s ago: executing program 3 (id=3508): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) lstat$auto(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4, 0x8000000a041000a, 0x40000402, 0x10000, 0xa, 0xffffffff80000000, 0xe0, 0x400006, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.105354565s ago: executing program 3 (id=3509): prctl$auto_PR_SET_CHILD_SUBREAPER(0x24, 0x7, 0x7, 0x4, 0x10000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x80, 0x4007, 0x5, 0x40eb5, 0x401, 0x300000000000) setresuid$auto(0x8, 0x8, 0x0) setuid$auto(0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x103040, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000010c0)=""/22, 0x16) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1003, 0x0, 0x0, 0xc000000000000010) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) eventfd$auto(0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x2800, 0x0) socket(0x840000000002, 0x3, 0xff) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) fsopen$auto(&(0x7f00000000c0)='$\x00', 0x86) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x55) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 752.031789ms ago: executing program 5 (id=3510): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mbind$auto(0x0, 0xfaa1, 0x8001, 0x0, 0x400, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x100000010, 0xffffffffffffffff, 0x40000008000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, r0, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xfffffffa, 0x0) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xffd8) r1 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kill$auto(r1, 0x11) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), 0xffffffffffffffff) mmap$auto(0x2, 0x35, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22641, 0x0) lseek$auto(0x3, 0x2, 0x4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 655.388655ms ago: executing program 3 (id=3511): mmap$auto(0x0, 0x4020009, 0x7, 0x1000000000eb1, 0x401, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) (async) waitid$auto(0x0, 0x594d0417, 0x0, 0x1000004, &(0x7f0000000080)={{0x80000000, 0x4}, {0x80004, 0xfffffffffffffff9}, 0x3ff, 0x281, 0x8000000000000000, 0xffffffffffffffff, 0x3, 0x9, 0x1, 0x0, 0x4, 0x8000, 0x2, 0x6, 0x8, 0x12}) (async) sendfile$auto(r0, r0, 0x0, 0x2) (async) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x5, 0x4) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f4ffffff", @ANYBLOB="01002b"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380), 0x7b2}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x8) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x22b80, 0x0) ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, 0x0) (async) ioctl$auto_FICLONE(r2, 0x40049409, r0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x4, 0x9c07, 0x9b72, 0xffffffffffffffff, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x787b, 0x6fffffc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) getpid() (async, rerun: 64) bpf$auto(0x5, 0x0, 0x7) geteuid() (async, rerun: 32) mmap$auto(0xb04, 0x100, 0x8, 0x8000000000000eb1, 0xffffffffffffffff, 0x8004) (async, rerun: 32) setrlimit$auto(0x9, 0x0) (async, rerun: 64) mremap$auto(0x110c231000, 0x4, 0x4, 0x7, 0x100000000) (rerun: 64) 560.778343ms ago: executing program 5 (id=3512): openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="01012b"], 0x20}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x11, 0x3, 0x9) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram11/ext_range\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, 0x0, 0x6a) ustat$auto(0x801, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) read$auto(r4, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0x4000000000001) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x1ff) r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x6) mmap$auto(0x0, 0xfff, 0x80000000000000df, 0xeb1, 0x401, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(r3, &(0x7f0000000180)={{&(0x7f00000001c0)="dd2f884709", 0x5ac, &(0x7f0000000100)={&(0x7f0000000340), 0x21}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) r6 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000080), r6) sendmsg$auto_NLBL_MGMT_C_ADD(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x40891) 385.903206ms ago: executing program 3 (id=3513): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04\"\x00\x00\x00\x00\xa6\xb8\xd8\xc6\xb05>ha9\x89|d\x00\x00\x00\x00\x00\x00', 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0xba7d, 0x0, 0xc, 0x3ff, 0x3, 0x10, 0x2000000000000002, 0x0, 0x8, 0xb07, 0xa, 0x4, 0xaab, 0x5, 0x9]}, 0x0, 0x0) sendfile$auto(r0, r0, 0x0, 0x400000000003) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40841) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) io_uring_register$auto(0x2, 0x17, &(0x7f00000000c0), 0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x6, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x5) 106.143881ms ago: executing program 3 (id=3514): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x40842, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xa) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x4) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r2, &(0x7f0000000180)="b953e6ca6360e45b4fd8ecccc52782d28ddb740407f4571929f3c0f5962cf000e2d2cac4c602", 0x26) fsync$auto(0xffffffffffffffff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x1f) 0s ago: executing program 5 (id=3515): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x8, 0x7f, 0x100000}, 0x283) kernel console output (not intermixed with test programs): aller #0 PREEMPT(full) [ 709.080787][T17986] Tainted: [L]=SOFTLOCKUP [ 709.080793][T17986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 709.080802][T17986] Call Trace: [ 709.080809][T17986] [ 709.080814][T17986] dump_stack_lvl+0x100/0x190 [ 709.080836][T17986] warn_alloc.cold+0x95/0x1c1 [ 709.080856][T17986] ? __pfx_warn_alloc+0x10/0x10 [ 709.080881][T17986] ? dump_stack_lvl+0x17c/0x190 [ 709.080899][T17986] ? trace_kmalloc+0xe3/0x110 [ 709.080915][T17986] ? __kasan_kmalloc+0x8a/0xb0 [ 709.080930][T17986] ? __kmalloc_node_noprof+0x324/0x850 [ 709.080953][T17986] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 709.080977][T17986] __vmalloc_node_range_noprof+0x1394/0x1630 [ 709.080997][T17986] ? do_raw_spin_unlock+0x145/0x1e0 [ 709.081019][T17986] ? n_tty_open+0x1a/0x170 [ 709.081039][T17986] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 709.081059][T17986] ? __ldsem_down_write_nested+0xfd/0x830 [ 709.081074][T17986] ? __ldsem_down_write_nested+0x10e/0x830 [ 709.081088][T17986] ? is_console_locked+0x9/0x20 [ 709.081113][T17986] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 709.081131][T17986] ? n_tty_open+0x1a/0x170 [ 709.081145][T17986] __vmalloc_node_noprof+0xad/0xf0 [ 709.081164][T17986] ? n_tty_open+0x1a/0x170 [ 709.081179][T17986] ? __pfx_n_tty_open+0x10/0x10 [ 709.081193][T17986] n_tty_open+0x1a/0x170 [ 709.081208][T17986] tty_ldisc_open+0xa2/0x120 [ 709.081227][T17986] tty_ldisc_setup+0x40/0xf0 [ 709.081246][T17986] tty_init_dev.part.0+0x1b5/0x470 [ 709.081271][T17986] tty_open+0xa63/0xfa0 [ 709.081296][T17986] ? __pfx_tty_open+0x10/0x10 [ 709.081316][T17986] ? chrdev_open+0x10b/0x6a0 [ 709.081334][T17986] ? chrdev_open+0x10b/0x6a0 [ 709.081354][T17986] ? __pfx_tty_open+0x10/0x10 [ 709.081375][T17986] chrdev_open+0x234/0x6a0 [ 709.081392][T17986] ? __pfx_apparmor_file_open+0x10/0x10 [ 709.081415][T17986] ? __pfx_chrdev_open+0x10/0x10 [ 709.081434][T17986] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 709.081457][T17986] do_dentry_open+0x6d8/0x1660 [ 709.081474][T17986] ? __pfx_chrdev_open+0x10/0x10 [ 709.081497][T17986] vfs_open+0x82/0x3f0 [ 709.081530][T17986] path_openat+0x208c/0x31a0 [ 709.081558][T17986] ? __pfx_path_openat+0x10/0x10 [ 709.081584][T17986] do_file_open+0x20e/0x430 [ 709.081604][T17986] ? __pfx_do_file_open+0x10/0x10 [ 709.081637][T17986] ? alloc_fd+0x476/0x790 [ 709.081657][T17986] ? do_getname+0x191/0x390 [ 709.081680][T17986] do_sys_openat2+0x10d/0x1e0 [ 709.081702][T17986] ? __pfx_do_sys_openat2+0x10/0x10 [ 709.081724][T17986] ? __x64_sys_close_range+0x2d9/0x5d0 [ 709.081748][T17986] __x64_sys_openat+0x12d/0x210 [ 709.081770][T17986] ? __pfx___x64_sys_openat+0x10/0x10 [ 709.081797][T17986] ? rcu_is_watching+0x12/0xc0 [ 709.081817][T17986] do_syscall_64+0x10b/0xf80 [ 709.081835][T17986] ? clear_bhb_loop+0x40/0x90 [ 709.081853][T17986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.081869][T17986] RIP: 0033:0x7fee30d9cdd9 [ 709.081883][T17986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.081897][T17986] RSP: 002b:00007fee31cdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 709.081911][T17986] RAX: ffffffffffffffda RBX: 00007fee31016090 RCX: 00007fee30d9cdd9 [ 709.081921][T17986] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 709.081931][T17986] RBP: 00007fee30e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 709.081940][T17986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.081949][T17986] R13: 00007fee31016128 R14: 00007fee31016090 R15: 00007ffe6c34cd68 [ 709.081969][T17986] [ 709.082036][T17986] Mem-Info: [ 709.613141][T17986] active_anon:7875 inactive_anon:1 isolated_anon:0 [ 709.613141][T17986] active_file:7182 inactive_file:54888 isolated_file:0 [ 709.613141][T17986] unevictable:768 dirty:778 writeback:0 [ 709.613141][T17986] slab_reclaimable:11536 slab_unreclaimable:96861 [ 709.613141][T17986] mapped:27739 shmem:3268 pagetables:1610 [ 709.613141][T17986] sec_pagetables:0 bounce:0 [ 709.613141][T17986] kernel_misc_reclaimable:0 [ 709.613141][T17986] free:1102094 free_pcp:24759 free_cma:0 [ 709.837606][T17986] Node 0 active_anon:33028kB inactive_anon:4kB active_file:28684kB inactive_file:219424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107156kB dirty:3144kB writeback:0kB shmem:12712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11808kB pagetables:6560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 709.988938][T17986] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 710.128077][T17986] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 710.252439][ T30] audit: type=1800 audit(1777902085.894:47): pid=18000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2866" name="features" dev="configfs" ino=67756 res=0 errno=0 [ 710.286436][T17986] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 710.436519][T17986] Node 0 DMA32 free:529168kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46132kB inactive_anon:4kB active_file:28684kB inactive_file:219424kB unevictable:1536kB writepending:3144kB zspages:96kB present:3129332kB managed:2537392kB mlocked:0kB bounce:0kB free_pcp:1948kB local_pcp:1948kB free_cma:0kB [ 710.574258][T17986] lowmem_reserve[]: 0 0 1 1 1 [ 710.594504][T17986] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1100kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 710.757744][T17986] lowmem_reserve[]: 0 0 0 0 0 [ 710.791112][T17986] Node 1 Normal free:3945876kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 710.913069][T17986] lowmem_reserve[]: 0 0 0 0 0 [ 710.943233][T17986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 711.047336][T17986] Node 0 DMA32: 5646*4kB (UME) 3389*8kB (UE) 2028*16kB (UME) 989*32kB (UME) 696*64kB (UME) 453*128kB (UME) 281*256kB (UME) 137*512kB (UME) 51*1024kB (UM) 13*2048kB (UM) 18*4096kB (M) = 510976kB [ 711.138177][T17986] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 711.198432][T17986] Node 1 Normal: 5*4kB (UM) 6*8kB (UM) 7*16kB (UM) 5*32kB (UM) 7*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 961*4096kB (UM) = 3945876kB [ 711.267740][T17986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.299112][T17986] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 711.327728][T17986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.371679][T17986] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 711.408081][T17986] 75213 total pagecache pages [ 711.427509][T17986] 36 pages in swap cache [ 711.436775][T17986] Free swap = 124852kB [ 711.453024][T17986] Total swap = 124996kB [ 711.470487][T17986] 2097051 pages RAM [ 711.499569][T17986] 0 pages HighMem/MovableOnly [ 711.521596][T17986] 430813 pages reserved [ 711.540352][T17986] 0 pages cma reserved [ 711.569116][T17986] tty tty16: ldisc open failed (-12), clearing slot 15 [ 712.207847][T18033] __nla_validate_parse: 13 callbacks suppressed [ 712.207862][T18033] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2873'. [ 715.884649][T18102] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2884'. [ 715.901822][T18100] phram: not enough arguments [ 716.554240][T18115] FAULT_INJECTION: forcing a failure. [ 716.554240][T18115] name failslab, interval 1, probability 0, space 0, times 0 [ 716.610343][T18115] CPU: 0 UID: 0 PID: 18115 Comm: syz.2.2888 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.610368][T18115] Tainted: [L]=SOFTLOCKUP [ 716.610374][T18115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 716.610382][T18115] Call Trace: [ 716.610387][T18115] [ 716.610393][T18115] dump_stack_lvl+0x100/0x190 [ 716.610414][T18115] should_fail_ex.cold+0x5/0xa [ 716.610432][T18115] ? alloc_pipe_info+0x1ec/0x590 [ 716.610450][T18115] should_failslab+0xc2/0x120 [ 716.610467][T18115] __kmalloc_noprof+0xe0/0x850 [ 716.610493][T18115] alloc_pipe_info+0x1ec/0x590 [ 716.610513][T18115] splice_direct_to_actor+0x78f/0xa30 [ 716.610532][T18115] ? __lock_acquire+0x4a5/0x2630 [ 716.610545][T18115] ? __pfx_direct_splice_actor+0x10/0x10 [ 716.610563][T18115] ? __pfx_aa_file_perm+0x10/0x10 [ 716.610582][T18115] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 716.610605][T18115] do_splice_direct+0x174/0x240 [ 716.610624][T18115] ? __pfx_do_splice_direct+0x10/0x10 [ 716.610642][T18115] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 716.610662][T18115] ? rw_verify_area+0xce/0x6d0 [ 716.610677][T18115] do_sendfile+0xadc/0xe20 [ 716.610695][T18115] ? __pfx_do_sendfile+0x10/0x10 [ 716.610711][T18115] ? __fget_files+0x21f/0x3d0 [ 716.610732][T18115] __x64_sys_sendfile64+0x1d8/0x220 [ 716.610751][T18115] ? ksys_write+0x1ac/0x250 [ 716.610770][T18115] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 716.610791][T18115] ? rcu_is_watching+0x12/0xc0 [ 716.610810][T18115] do_syscall_64+0x10b/0xf80 [ 716.610829][T18115] ? clear_bhb_loop+0x40/0x90 [ 716.610846][T18115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.610861][T18115] RIP: 0033:0x7f45e819cdd9 [ 716.610873][T18115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.610893][T18115] RSP: 002b:00007f45e913d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 716.610907][T18115] RAX: ffffffffffffffda RBX: 00007f45e8415fa0 RCX: 00007f45e819cdd9 [ 716.610917][T18115] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 716.610925][T18115] RBP: 00007f45e913d090 R08: 0000000000000000 R09: 0000000000000000 [ 716.610934][T18115] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 716.610942][T18115] R13: 00007f45e8416038 R14: 00007f45e8415fa0 R15: 00007ffd563397d8 [ 716.610961][T18115] [ 717.163844][ T30] audit: type=1800 audit(1777902092.902:48): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2890" name="features" dev="configfs" ino=68386 res=0 errno=0 [ 717.643057][T18120] netlink: zone id is out of range [ 717.681829][T18120] netlink: zone id is out of range [ 717.725057][T18120] netlink: zone id is out of range [ 717.790821][T18120] netlink: zone id is out of range [ 717.840370][T18120] netlink: zone id is out of range [ 717.903362][T18120] netlink: zone id is out of range [ 717.961609][T18120] netlink: zone id is out of range [ 718.021493][T18130] netlink: zone id is out of range [ 718.046722][T18120] netlink: zone id is out of range [ 718.061177][T18130] netlink: zone id is out of range [ 718.284099][T18138] FAULT_INJECTION: forcing a failure. [ 718.284099][T18138] name fail_futex, interval 1, probability 0, space 0, times 0 [ 718.371167][T18138] CPU: 0 UID: 0 PID: 18138 Comm: syz.2.2891 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.371191][T18138] Tainted: [L]=SOFTLOCKUP [ 718.371196][T18138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 718.371204][T18138] Call Trace: [ 718.371209][T18138] [ 718.371214][T18138] dump_stack_lvl+0x100/0x190 [ 718.371234][T18138] should_fail_ex.cold+0x5/0xa [ 718.371254][T18138] get_futex_key+0x295/0x1510 [ 718.371271][T18138] ? __pfx_get_futex_key+0x10/0x10 [ 718.371284][T18138] ? lock_acquire+0x1b1/0x370 [ 718.371303][T18138] futex_wake+0xea/0x530 [ 718.371322][T18138] ? __pfx_futex_wake+0x10/0x10 [ 718.371340][T18138] ? exit_mm_release+0x19/0x30 [ 718.371366][T18138] do_futex+0x32b/0x350 [ 718.371382][T18138] ? __pfx_do_futex+0x10/0x10 [ 718.371396][T18138] ? __might_fault+0xc5/0x140 [ 718.371422][T18138] mm_release+0x24a/0x2f0 [ 718.371441][T18138] do_exit+0x707/0x2a60 [ 718.371465][T18138] ? __pfx_do_exit+0x10/0x10 [ 718.371486][T18138] ? do_raw_spin_lock+0x128/0x260 [ 718.371502][T18138] ? find_held_lock+0x2b/0x80 [ 718.371520][T18138] ? get_signal+0x7e0/0x21e0 [ 718.371540][T18138] do_group_exit+0xd5/0x2a0 [ 718.371564][T18138] get_signal+0x1ec7/0x21e0 [ 718.371584][T18138] ? ksys_write+0x190/0x250 [ 718.371603][T18138] ? __pfx_get_signal+0x10/0x10 [ 718.371622][T18138] ? do_futex+0x192/0x350 [ 718.371647][T18138] arch_do_signal_or_restart+0x91/0x770 [ 718.371670][T18138] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 718.371697][T18138] ? __pfx___x64_sys_futex+0x10/0x10 [ 718.371713][T18138] ? rcu_is_watching+0x12/0xc0 [ 718.371733][T18138] exit_to_user_mode_loop+0x86/0x4a0 [ 718.371746][T18138] ? do_syscall_64+0x519/0xf80 [ 718.371767][T18138] do_syscall_64+0x6f2/0xf80 [ 718.371784][T18138] ? clear_bhb_loop+0x40/0x90 [ 718.371802][T18138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.371816][T18138] RIP: 0033:0x7f45e819cdd9 [ 718.371828][T18138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.371842][T18138] RSP: 002b:00007f45e911c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 718.371856][T18138] RAX: fffffffffffffe00 RBX: 00007f45e8416098 RCX: 00007f45e819cdd9 [ 718.371865][T18138] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f45e8416098 [ 718.371874][T18138] RBP: 00007f45e8416090 R08: 0000000000000000 R09: 0000000000000000 [ 718.371882][T18138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.371891][T18138] R13: 00007f45e8416128 R14: 00007ffd563396f0 R15: 00007ffd563397d8 [ 718.371909][T18138] [ 718.636244][T18128] random: crng reseeded on system resumption [ 719.353116][T18181] [U] ^R [ 719.723328][ T30] audit: type=1800 audit(1777902095.466:49): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2910" name="features" dev="configfs" ino=68732 res=0 errno=0 [ 720.109137][ T30] audit: type=1800 audit(1777902095.859:50): pid=18187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2919" name="features" dev="configfs" ino=68771 res=0 errno=0 [ 720.204002][ T30] audit: type=1800 audit(1777902095.899:51): pid=18188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2911" name="features" dev="configfs" ino=68771 res=0 errno=0 [ 721.513804][ T30] audit: type=1800 audit(1777902097.266:52): pid=18203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2913" name="features" dev="configfs" ino=68873 res=0 errno=0 [ 722.187303][ T30] audit: type=1800 audit(1777902097.950:53): pid=18214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2916" name="features" dev="configfs" ino=68974 res=0 errno=0 [ 723.314162][T18251] kAFS: unparsable volume name [ 724.649736][T18267] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2929'. [ 727.062710][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2935'. [ 727.108058][ T30] audit: type=1800 audit(1777902102.887:54): pid=18297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2932" name="features" dev="configfs" ino=69207 res=0 errno=0 [ 727.420061][T18325] FAULT_INJECTION: forcing a failure. [ 727.420061][T18325] name failslab, interval 1, probability 0, space 0, times 0 [ 727.496580][T18325] CPU: 0 UID: 0 PID: 18325 Comm: syz.2.2933 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.496606][T18325] Tainted: [L]=SOFTLOCKUP [ 727.496612][T18325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 727.496621][T18325] Call Trace: [ 727.496627][T18325] [ 727.496633][T18325] dump_stack_lvl+0x100/0x190 [ 727.496655][T18325] should_fail_ex.cold+0x5/0xa [ 727.496676][T18325] should_failslab+0xc2/0x120 [ 727.496694][T18325] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 727.496717][T18325] ? ptlock_alloc+0x1f/0x70 [ 727.496738][T18325] ? do_raw_spin_lock+0x128/0x260 [ 727.496757][T18325] ptlock_alloc+0x1f/0x70 [ 727.496777][T18325] pte_alloc_one+0x82/0x3d0 [ 727.496797][T18325] do_fault+0x86c/0x1750 [ 727.496815][T18325] ? __pmd_alloc+0x3fb/0x950 [ 727.496843][T18325] __handle_mm_fault+0x187d/0x2a00 [ 727.496868][T18325] ? mt_find+0x45e/0x8e0 [ 727.496891][T18325] ? __pfx___handle_mm_fault+0x10/0x10 [ 727.496911][T18325] ? __pfx_mt_find+0x10/0x10 [ 727.496940][T18325] ? find_vma+0xbf/0x140 [ 727.496956][T18325] ? __pfx_find_vma+0x10/0x10 [ 727.496974][T18325] handle_mm_fault+0x36d/0xa20 [ 727.497000][T18325] do_user_addr_fault+0x74c/0x12f0 [ 727.497020][T18325] ? trace_page_fault_kernel+0x7a/0x200 [ 727.497039][T18325] exc_page_fault+0x6f/0xd0 [ 727.497058][T18325] asm_exc_page_fault+0x26/0x30 [ 727.497072][T18325] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 727.497097][T18325] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 727.497111][T18325] RSP: 0018:ffffc9000540fbf8 EFLAGS: 00050216 [ 727.497124][T18325] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000014 [ 727.497133][T18325] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000540fd90 [ 727.497142][T18325] RBP: 0000000000000014 R08: 0000000000000001 R09: fffff52000a81fb4 [ 727.497151][T18325] R10: ffffc9000540fda3 R11: 0000000000000000 R12: 0000000000000000 [ 727.497160][T18325] R13: ffffc9000540fd90 R14: 0000000000000014 R15: ffffc9000540fd90 [ 727.497180][T18325] _copy_from_user+0x98/0xd0 [ 727.497204][T18325] __sys_bpf+0x243/0x4b90 [ 727.497222][T18325] ? __pfx___sys_bpf+0x10/0x10 [ 727.497237][T18325] ? __pfx_futex_wait+0x10/0x10 [ 727.497263][T18325] ? ksys_write+0x190/0x250 [ 727.497281][T18325] ? ksys_write+0x190/0x250 [ 727.497301][T18325] ? do_futex+0x192/0x350 [ 727.497327][T18325] ? xfd_validate_state+0x129/0x190 [ 727.497342][T18325] ? ksys_write+0x1ac/0x250 [ 727.497363][T18325] __x64_sys_bpf+0x7b/0xc0 [ 727.497378][T18325] ? lockdep_hardirqs_on+0x78/0x100 [ 727.497396][T18325] do_syscall_64+0x10b/0xf80 [ 727.497414][T18325] ? clear_bhb_loop+0x40/0x90 [ 727.497432][T18325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.497447][T18325] RIP: 0033:0x7f45e819cdd9 [ 727.497459][T18325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.497473][T18325] RSP: 002b:00007f45e913d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 727.497486][T18325] RAX: ffffffffffffffda RBX: 00007f45e8415fa0 RCX: 00007f45e819cdd9 [ 727.497496][T18325] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 727.497504][T18325] RBP: 00007f45e8232d69 R08: 0000000000000000 R09: 0000000000000000 [ 727.497513][T18325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.497522][T18325] R13: 00007f45e8416038 R14: 00007f45e8415fa0 R15: 00007ffd563397d8 [ 727.497541][T18325] [ 728.603169][T18330] WARNING! power/level is deprecated; use power/control instead [ 728.749172][T18337] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2939'. [ 728.749537][T18337] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2939'. [ 728.756060][ T5629] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 728.756118][ T5629] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 730.120029][ T30] audit: type=1800 audit(1777902105.924:55): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2941" name="features" dev="configfs" ino=69479 res=0 errno=0 [ 730.232669][T18356] binder: 18347:18356 ioctl c018620c 200000000300 returned -22 [ 730.566175][T18374] [U] ^R [ 732.448363][ T30] audit: type=1800 audit(1777902108.256:56): pid=18405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2957" name="features" dev="configfs" ino=69844 res=0 errno=0 [ 732.922782][T18429] [U] ^R [ 734.620719][T18476] netlink: 'syz.3.2971': attribute type 2 has an invalid length. [ 736.120209][T18507] [U] ^R [ 736.647591][ T5636] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 737.048326][T18525] random: crng reseeded on system resumption [ 737.109859][T18525] FAULT_INJECTION: forcing a failure. [ 737.109859][T18525] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 737.215635][T18525] CPU: 0 UID: 0 PID: 18525 Comm: syz.3.2984 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.215663][T18525] Tainted: [L]=SOFTLOCKUP [ 737.215669][T18525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 737.215679][T18525] Call Trace: [ 737.215685][T18525] [ 737.215691][T18525] dump_stack_lvl+0x100/0x190 [ 737.215714][T18525] should_fail_ex.cold+0x5/0xa [ 737.215731][T18525] ? prepare_alloc_pages+0x16d/0x5f0 [ 737.215752][T18525] should_fail_alloc_page+0xeb/0x140 [ 737.215771][T18525] prepare_alloc_pages+0x1f0/0x5f0 [ 737.215792][T18525] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 737.215818][T18525] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 737.215847][T18525] ? stack_trace_save+0x8e/0xc0 [ 737.215867][T18525] ? __pfx_stack_trace_save+0x10/0x10 [ 737.215886][T18525] ? arch_stack_walk+0xa6/0xf0 [ 737.215904][T18525] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 737.215929][T18525] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 737.215954][T18525] ? kasan_save_stack+0x30/0x50 [ 737.215967][T18525] ? kasan_save_track+0x14/0x30 [ 737.215980][T18525] ? __kasan_kmalloc+0xaa/0xb0 [ 737.215992][T18525] ? memory_bm_create+0x14d/0xba0 [ 737.216014][T18525] ? do_syscall_64+0x10b/0xf80 [ 737.216032][T18525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.216052][T18525] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 737.216075][T18525] ? policy_nodemask+0xed/0x4f0 [ 737.216093][T18525] alloc_pages_mpol+0x1fb/0x540 [ 737.216112][T18525] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 737.216141][T18525] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 737.216161][T18525] alloc_pages_noprof+0x1a/0x160 [ 737.216181][T18525] get_zeroed_page_noprof+0x18/0xb0 [ 737.216200][T18525] get_image_page+0x18/0x1a0 [ 737.216219][T18525] alloc_rtree_node+0x3c/0xb0 [ 737.216239][T18525] memory_bm_create+0x65e/0xba0 [ 737.216266][T18525] create_basic_memory_bitmaps+0x10b/0x350 [ 737.216293][T18525] snapshot_open+0x230/0x2a0 [ 737.216315][T18525] ? __pfx_snapshot_open+0x10/0x10 [ 737.216337][T18525] misc_open+0x26d/0x450 [ 737.216355][T18525] ? __pfx_misc_open+0x10/0x10 [ 737.216372][T18525] chrdev_open+0x234/0x6a0 [ 737.216390][T18525] ? __pfx_apparmor_file_open+0x10/0x10 [ 737.216413][T18525] ? __pfx_chrdev_open+0x10/0x10 [ 737.216432][T18525] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 737.216455][T18525] do_dentry_open+0x6d8/0x1660 [ 737.216472][T18525] ? __pfx_chrdev_open+0x10/0x10 [ 737.216494][T18525] vfs_open+0x82/0x3f0 [ 737.216518][T18525] path_openat+0x208c/0x31a0 [ 737.216543][T18525] ? __pfx_path_openat+0x10/0x10 [ 737.216567][T18525] do_file_open+0x20e/0x430 [ 737.216587][T18525] ? __pfx_do_file_open+0x10/0x10 [ 737.216618][T18525] ? alloc_fd+0x476/0x790 [ 737.216638][T18525] ? do_getname+0x191/0x390 [ 737.216660][T18525] do_sys_openat2+0x10d/0x1e0 [ 737.216682][T18525] ? __pfx_do_sys_openat2+0x10/0x10 [ 737.216711][T18525] __x64_sys_openat+0x12d/0x210 [ 737.216733][T18525] ? __pfx___x64_sys_openat+0x10/0x10 [ 737.216759][T18525] ? rcu_is_watching+0x12/0xc0 [ 737.216779][T18525] do_syscall_64+0x10b/0xf80 [ 737.216797][T18525] ? clear_bhb_loop+0x40/0x90 [ 737.216815][T18525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.216831][T18525] RIP: 0033:0x7fee30d9cdd9 [ 737.216844][T18525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.216859][T18525] RSP: 002b:00007fee31d00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 737.216875][T18525] RAX: ffffffffffffffda RBX: 00007fee31015fa0 RCX: 00007fee30d9cdd9 [ 737.216885][T18525] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 737.216894][T18525] RBP: 00007fee30e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 737.216903][T18525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.216913][T18525] R13: 00007fee31016038 R14: 00007fee31015fa0 R15: 00007ffe6c34cd68 [ 737.216933][T18525] [ 737.860612][ T30] audit: type=1800 audit(1777902113.656:57): pid=18533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2986" name="discovery_nqn" dev="configfs" ino=70378 res=0 errno=0 [ 738.436458][T18546] [U] ^R [ 738.832496][T18548] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2989'. [ 739.666070][T18561] [U] ^R [ 740.349390][T18587] [U] ^R [ 740.436869][T18586] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3000'. [ 741.053144][T18600] [U] ^R [ 743.181674][T18642] netlink: 186 bytes leftover after parsing attributes in process `syz.0.3012'. [ 744.286808][T18670] bond0: option slaves: interface -Âô does not exist! [ 744.746376][T18674] ima: policy update failed [ 744.795239][ T30] audit: type=1802 audit(1777902120.674:58): pid=18674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3020" res=0 errno=0 [ 745.553821][T18695] netlink: 186 bytes leftover after parsing attributes in process `syz.0.3025'. [ 745.894986][T18707] random: crng reseeded on system resumption [ 746.012084][T18707] FAULT_INJECTION: forcing a failure. [ 746.012084][T18707] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 746.075375][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.088016][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.213288][T18707] CPU: 0 UID: 0 PID: 18707 Comm: syz.4.3028 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.213315][T18707] Tainted: [L]=SOFTLOCKUP [ 746.213320][T18707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 746.213330][T18707] Call Trace: [ 746.213335][T18707] [ 746.213342][T18707] dump_stack_lvl+0x100/0x190 [ 746.213365][T18707] should_fail_ex.cold+0x5/0xa [ 746.213382][T18707] ? prepare_alloc_pages+0x16d/0x5f0 [ 746.213403][T18707] should_fail_alloc_page+0xeb/0x140 [ 746.213423][T18707] prepare_alloc_pages+0x1f0/0x5f0 [ 746.213444][T18707] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 746.213469][T18707] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 746.213499][T18707] ? stack_trace_save+0x8e/0xc0 [ 746.213519][T18707] ? __pfx_stack_trace_save+0x10/0x10 [ 746.213537][T18707] ? arch_stack_walk+0xa6/0xf0 [ 746.213555][T18707] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 746.213580][T18707] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 746.213605][T18707] ? kasan_save_stack+0x30/0x50 [ 746.213618][T18707] ? kasan_save_track+0x14/0x30 [ 746.213631][T18707] ? __kasan_kmalloc+0xaa/0xb0 [ 746.213643][T18707] ? memory_bm_create+0x14d/0xba0 [ 746.213665][T18707] ? do_syscall_64+0x10b/0xf80 [ 746.213683][T18707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.213700][T18707] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 746.213722][T18707] ? policy_nodemask+0xed/0x4f0 [ 746.213741][T18707] alloc_pages_mpol+0x1fb/0x540 [ 746.213759][T18707] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 746.213778][T18707] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 746.213798][T18707] alloc_pages_noprof+0x1a/0x160 [ 746.213818][T18707] get_zeroed_page_noprof+0x18/0xb0 [ 746.213836][T18707] get_image_page+0x18/0x1a0 [ 746.213855][T18707] alloc_rtree_node+0x3c/0xb0 [ 746.213873][T18707] memory_bm_create+0x65e/0xba0 [ 746.213900][T18707] create_basic_memory_bitmaps+0x10b/0x350 [ 746.213924][T18707] snapshot_open+0x230/0x2a0 [ 746.213944][T18707] ? __pfx_snapshot_open+0x10/0x10 [ 746.213966][T18707] misc_open+0x26d/0x450 [ 746.213984][T18707] ? __pfx_misc_open+0x10/0x10 [ 746.214000][T18707] chrdev_open+0x234/0x6a0 [ 746.214018][T18707] ? __pfx_apparmor_file_open+0x10/0x10 [ 746.214041][T18707] ? __pfx_chrdev_open+0x10/0x10 [ 746.214068][T18707] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 746.214092][T18707] do_dentry_open+0x6d8/0x1660 [ 746.214110][T18707] ? __pfx_chrdev_open+0x10/0x10 [ 746.214133][T18707] vfs_open+0x82/0x3f0 [ 746.214156][T18707] path_openat+0x208c/0x31a0 [ 746.214180][T18707] ? __pfx_path_openat+0x10/0x10 [ 746.214205][T18707] do_file_open+0x20e/0x430 [ 746.214225][T18707] ? __pfx_do_file_open+0x10/0x10 [ 746.214256][T18707] ? alloc_fd+0x476/0x790 [ 746.214278][T18707] ? do_getname+0x191/0x390 [ 746.214301][T18707] do_sys_openat2+0x10d/0x1e0 [ 746.214322][T18707] ? __pfx_do_sys_openat2+0x10/0x10 [ 746.214351][T18707] __x64_sys_openat+0x12d/0x210 [ 746.214374][T18707] ? __pfx___x64_sys_openat+0x10/0x10 [ 746.214400][T18707] ? rcu_is_watching+0x12/0xc0 [ 746.214419][T18707] do_syscall_64+0x10b/0xf80 [ 746.214437][T18707] ? clear_bhb_loop+0x40/0x90 [ 746.214455][T18707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.214470][T18707] RIP: 0033:0x7f487c99cdd9 [ 746.214484][T18707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.214498][T18707] RSP: 002b:00007f487d895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 746.214512][T18707] RAX: ffffffffffffffda RBX: 00007f487cc15fa0 RCX: 00007f487c99cdd9 [ 746.214522][T18707] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 746.214531][T18707] RBP: 00007f487ca32d69 R08: 0000000000000000 R09: 0000000000000000 [ 746.214541][T18707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.214551][T18707] R13: 00007f487cc16038 R14: 00007f487cc15fa0 R15: 00007ffdf7931b38 [ 746.214571][T18707] [ 747.321635][T18703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3026'. [ 747.374484][T18715] [U] ^R [ 747.418715][ T30] audit: type=1800 audit(1777902123.188:59): pid=18713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3029" name="features" dev="configfs" ino=71124 res=0 errno=0 [ 748.214247][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 748.558436][T18726] ubi0: attaching mtd0 [ 748.705508][T18726] ubi0: scanning is finished [ 748.906701][T18726] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 749.511141][T18749] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3035'. [ 749.529965][T18750] [U] ^R [ 749.583271][T18726] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 750.941744][T18782] [U] ^R [ 750.963866][T18775] kafs: addr_prefs: Invalid Command [ 751.830129][T18796] [U] ^R [ 752.536668][T18815] ovs_: entered promiscuous mode [ 753.050054][T18821] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3045'. [ 753.291083][T18829] [U] ^R [ 753.848199][T18826] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input23 [ 754.562172][T18848] [U] ^R [ 754.630977][ T30] audit: type=1800 audit(1777902130.568:60): pid=18832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3044" name="sr0" dev="devtmpfs" ino=2825 res=0 errno=0 [ 755.305870][T18860] [U] ^R [ 757.189259][T18895] [U] ^R [ 757.355774][ T30] audit: type=1800 audit(1777902133.313:61): pid=18910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3064" name="lu_gp_id" dev="configfs" ino=71954 res=0 errno=0 [ 757.453291][T18902] [U] ^R [ 758.284925][T18924] netlink: 142 bytes leftover after parsing attributes in process `syz.2.3066'. [ 759.122477][T18936] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 759.960656][ T30] audit: type=1800 audit(1777902135.928:62): pid=18933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3069" name="features" dev="configfs" ino=72180 res=0 errno=0 [ 760.101227][T18948] [U] ^R [ 760.568972][T18960] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.3076: iget: checksum invalid [ 760.690925][T18960] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 760.816829][T18960] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.3076: iget: checksum invalid [ 760.931377][T18959] [U] ^R [ 760.945254][T18960] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 761.077576][T18960] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.3076: iget: checksum invalid [ 761.139088][T18960] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 761.197523][T18960] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.3076: iget: checksum invalid [ 761.275769][T18960] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 761.320050][T18960] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 761.367911][T18960] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 761.422976][T18976] ubi0: attaching mtd0 [ 761.467088][T18976] ubi0: scanning is finished [ 761.541492][T18976] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 761.566288][T18981] FAULT_INJECTION: forcing a failure. [ 761.566288][T18981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.644853][T18981] CPU: 0 UID: 5 PID: 18981 Comm: syz.2.3081 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.644885][T18981] Tainted: [L]=SOFTLOCKUP [ 761.644890][T18981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 761.644898][T18981] Call Trace: [ 761.644904][T18981] [ 761.644909][T18981] dump_stack_lvl+0x100/0x190 [ 761.644931][T18981] should_fail_ex.cold+0x5/0xa [ 761.644950][T18981] _copy_from_user+0x2e/0xd0 [ 761.644975][T18981] kstrtouint_from_user+0xd6/0x1d0 [ 761.644993][T18981] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 761.645010][T18981] ? __lock_acquire+0x4a5/0x2630 [ 761.645027][T18981] ? lock_acquire+0x1b1/0x370 [ 761.645043][T18981] proc_fail_nth_write+0x83/0x220 [ 761.645066][T18981] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 761.645094][T18981] vfs_write+0x2aa/0x1070 [ 761.645112][T18981] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 761.645136][T18981] ? __pfx_vfs_write+0x10/0x10 [ 761.645152][T18981] ? __fget_files+0x215/0x3d0 [ 761.645172][T18981] ? __fget_files+0x21f/0x3d0 [ 761.645194][T18981] ksys_write+0x12a/0x250 [ 761.645210][T18981] ? __pfx_ksys_write+0x10/0x10 [ 761.645227][T18981] ? rcu_is_watching+0x12/0xc0 [ 761.645247][T18981] do_syscall_64+0x10b/0xf80 [ 761.645266][T18981] ? clear_bhb_loop+0x40/0x90 [ 761.645283][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.645298][T18981] RIP: 0033:0x7f45e815d60e [ 761.645309][T18981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 761.645323][T18981] RSP: 002b:00007f45e913cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 761.645337][T18981] RAX: ffffffffffffffda RBX: 00007f45e913d6c0 RCX: 00007f45e815d60e [ 761.645346][T18981] RDX: 0000000000000001 RSI: 00007f45e913d0a0 RDI: 0000000000000003 [ 761.645355][T18981] RBP: 00007f45e913d090 R08: 0000000000000000 R09: 0000000000000000 [ 761.645363][T18981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.645371][T18981] R13: 00007f45e8416038 R14: 00007f45e8415fa0 R15: 00007ffd563397d8 [ 761.645390][T18981] [ 763.410362][T18976] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 763.998833][ T30] audit: type=1800 audit(1777902139.990:63): pid=19006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3086" name="features" dev="configfs" ino=72436 res=0 errno=0 [ 764.620129][T19025] FAULT_INJECTION: forcing a failure. [ 764.620129][T19025] name failslab, interval 1, probability 0, space 0, times 0 [ 764.682732][T19025] CPU: 0 UID: 0 PID: 19025 Comm: syz.2.3090 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.682758][T19025] Tainted: [L]=SOFTLOCKUP [ 764.682763][T19025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.682773][T19025] Call Trace: [ 764.682779][T19025] [ 764.682785][T19025] dump_stack_lvl+0x100/0x190 [ 764.682807][T19025] should_fail_ex.cold+0x5/0xa [ 764.682827][T19025] should_failslab+0xc2/0x120 [ 764.682845][T19025] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 764.682868][T19025] ? ptlock_alloc+0x1f/0x70 [ 764.682893][T19025] ptlock_alloc+0x1f/0x70 [ 764.682914][T19025] pte_alloc_one+0x82/0x3d0 [ 764.682934][T19025] __pte_alloc+0x6d/0x3e0 [ 764.682950][T19025] ? __pfx___pte_alloc+0x10/0x10 [ 764.682966][T19025] ? _raw_spin_unlock+0x28/0x50 [ 764.682982][T19025] ? __pmd_alloc+0x3fb/0x950 [ 764.683002][T19025] move_page_tables+0x257e/0x4500 [ 764.683026][T19025] ? __pfx_copy_vma+0x10/0x10 [ 764.683056][T19025] ? __pfx_move_page_tables+0x10/0x10 [ 764.683093][T19025] copy_vma_and_data+0x25c/0x7c0 [ 764.683118][T19025] ? __pfx_copy_vma_and_data+0x10/0x10 [ 764.683148][T19025] ? __vma_start_write+0x17f/0x280 [ 764.683168][T19025] ? __pfx___vma_start_write+0x10/0x10 [ 764.683194][T19025] move_vma+0x574/0x1920 [ 764.683219][T19025] ? __pfx_move_vma+0x10/0x10 [ 764.683243][T19025] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 764.683262][T19025] ? cap_mmap_addr+0x4b/0x120 [ 764.683283][T19025] ? bpf_lsm_mmap_addr+0x9/0x30 [ 764.683297][T19025] ? security_mmap_addr+0x71/0x1e0 [ 764.683321][T19025] ? __get_unmapped_area+0x255/0x3e0 [ 764.683342][T19025] ? vrm_set_new_addr+0x204/0x290 [ 764.683367][T19025] mremap_to+0x234/0x4c0 [ 764.683389][T19025] ? mas_walk+0x6ef/0x9b0 [ 764.683407][T19025] ? __pfx_mremap_to+0x10/0x10 [ 764.683434][T19025] __do_sys_mremap+0xa7a/0x1850 [ 764.683463][T19025] ? __pfx___do_sys_mremap+0x10/0x10 [ 764.683488][T19025] ? do_futex+0x192/0x350 [ 764.683504][T19025] ? __pfx_do_futex+0x10/0x10 [ 764.683525][T19025] ? __x64_sys_futex+0x34f/0x4d0 [ 764.683548][T19025] ? rcu_is_watching+0x12/0xc0 [ 764.683568][T19025] do_syscall_64+0x10b/0xf80 [ 764.683585][T19025] ? clear_bhb_loop+0x40/0x90 [ 764.683604][T19025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.683619][T19025] RIP: 0033:0x7f45e819cdd9 [ 764.683632][T19025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.683646][T19025] RSP: 002b:00007f45e911c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 764.683662][T19025] RAX: ffffffffffffffda RBX: 00007f45e8416090 RCX: 00007f45e819cdd9 [ 764.683672][T19025] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000000000000000 [ 764.683680][T19025] RBP: 00007f45e8232d69 R08: 0000000100000000 R09: 0000000000000000 [ 764.683692][T19025] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 764.683701][T19025] R13: 00007f45e8416128 R14: 00007f45e8416090 R15: 00007ffd563397d8 [ 764.683721][T19025] [ 766.404533][ T5629] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 766.413349][ T5629] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 766.423438][ T5629] CPU: 0 UID: 0 PID: 5629 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.423461][ T5629] Tainted: [L]=SOFTLOCKUP [ 766.423467][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 766.423483][ T5629] Workqueue: hci1 hci_rx_work [ 766.423505][ T5629] Call Trace: [ 766.423510][ T5629] [ 766.423516][ T5629] dump_stack_lvl+0x100/0x190 [ 766.423535][ T5629] sysfs_warn_dup.cold+0x1c/0x28 [ 766.423557][ T5629] sysfs_create_dir_ns+0x24b/0x2b0 [ 766.423574][ T5629] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 766.423589][ T5629] ? find_held_lock+0x2b/0x80 [ 766.423608][ T5629] ? kobject_add_internal+0x25f/0x930 [ 766.423630][ T5629] ? kobject_add_internal+0x25f/0x930 [ 766.423654][ T5629] ? do_raw_spin_unlock+0x145/0x1e0 [ 766.423672][ T5629] kobject_add_internal+0x2c8/0x930 [ 766.423697][ T5629] kobject_add+0x16a/0x1e0 [ 766.423718][ T5629] ? __pfx_kobject_add+0x10/0x10 [ 766.423739][ T5629] ? class_to_subsys+0x10f/0x150 [ 766.423761][ T5629] ? kobject_put+0xb9/0x640 [ 766.423780][ T5629] ? _raw_spin_unlock+0x28/0x50 [ 766.423801][ T5629] device_add+0x294/0x1950 [ 766.423819][ T5629] ? __pfx_dev_set_name+0x10/0x10 [ 766.423840][ T5629] ? __pfx_device_add+0x10/0x10 [ 766.423858][ T5629] ? mgmt_send_event_skb+0x2fb/0x460 [ 766.423880][ T5629] hci_conn_add_sysfs+0x1a3/0x260 [ 766.423901][ T5629] le_conn_complete_evt+0x11eb/0x1f60 [ 766.423924][ T5629] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 766.423941][ T5629] ? __pfx_bt_warn+0x10/0x10 [ 766.423968][ T5629] hci_le_conn_complete_evt+0x23c/0x3a0 [ 766.423986][ T5629] ? skb_pull_data+0x15f/0x1e0 [ 766.424008][ T5629] hci_le_meta_evt+0x34a/0x5f0 [ 766.424027][ T5629] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 766.424047][ T5629] hci_event_packet+0x51c/0xcd0 [ 766.424065][ T5629] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 766.424084][ T5629] ? __pfx_hci_event_packet+0x10/0x10 [ 766.424104][ T5629] ? kcov_remote_start+0x374/0x660 [ 766.424128][ T5629] ? lockdep_hardirqs_on+0x78/0x100 [ 766.424159][ T5629] hci_rx_work+0x451/0xfc0 [ 766.424180][ T5629] process_one_work+0xa0e/0x1980 [ 766.424204][ T5629] ? __pfx_process_one_work+0x10/0x10 [ 766.424224][ T5629] ? __pfx_hci_rx_work+0x10/0x10 [ 766.424243][ T5629] worker_thread+0x5ef/0xe50 [ 766.424265][ T5629] ? kthread+0x13a/0x450 [ 766.424276][ T5629] ? __pfx_worker_thread+0x10/0x10 [ 766.424290][ T5629] kthread+0x370/0x450 [ 766.424302][ T5629] ? __pfx_kthread+0x10/0x10 [ 766.424316][ T5629] ret_from_fork+0x72b/0xd50 [ 766.424334][ T5629] ? __pfx_ret_from_fork+0x10/0x10 [ 766.424350][ T5629] ? __switch_to+0x800/0x1100 [ 766.424370][ T5629] ? __switch_to_asm+0x39/0x70 [ 766.424389][ T5629] ? __pfx_kthread+0x10/0x10 [ 766.424403][ T5629] ret_from_fork_asm+0x1a/0x30 [ 766.424432][ T5629] [ 766.424460][ T5629] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 766.740137][ T5629] Bluetooth: hci1: failed to register connection device [ 768.098887][T19092] binder: 19091:19092 ioctl c0306201 0 returned -14 [ 768.443664][ T30] audit: type=1800 audit(1777902144.454:64): pid=19069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3100" name="features" dev="configfs" ino=72797 res=0 errno=0 [ 768.781474][ T30] audit: type=1800 audit(1777902144.796:65): pid=19097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3108" name="features" dev="configfs" ino=72816 res=0 errno=0 [ 768.819810][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 768.927182][T19109] FAULT_INJECTION: forcing a failure. [ 768.927182][T19109] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 768.987090][T19109] CPU: 0 UID: 0 PID: 19109 Comm: syz.2.3111 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.987117][T19109] Tainted: [L]=SOFTLOCKUP [ 768.987123][T19109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 768.987132][T19109] Call Trace: [ 768.987137][T19109] [ 768.987143][T19109] dump_stack_lvl+0x100/0x190 [ 768.987166][T19109] should_fail_ex.cold+0x5/0xa [ 768.987183][T19109] ? prepare_alloc_pages+0x16d/0x5f0 [ 768.987203][T19109] should_fail_alloc_page+0xeb/0x140 [ 768.987222][T19109] prepare_alloc_pages+0x1f0/0x5f0 [ 768.987243][T19109] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 768.987268][T19109] ? do_raw_spin_lock+0x128/0x260 [ 768.987286][T19109] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 768.987306][T19109] ? find_held_lock+0x2b/0x80 [ 768.987325][T19109] ? rcu_is_watching+0x12/0xc0 [ 768.987343][T19109] ? trace_hrtimer_start+0x79/0x230 [ 768.987362][T19109] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 768.987389][T19109] ? __lock_acquire+0x4a5/0x2630 [ 768.987402][T19109] ? __lock_acquire+0x4a5/0x2630 [ 768.987415][T19109] ? css_rstat_updated+0x1ce/0x5a0 [ 768.987443][T19109] ? lock_acquire+0x1b1/0x370 [ 768.987456][T19109] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 768.987478][T19109] ? policy_nodemask+0xed/0x4f0 [ 768.987497][T19109] alloc_pages_mpol+0x1fb/0x540 [ 768.987514][T19109] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 768.987533][T19109] ? __lock_acquire+0x4a5/0x2630 [ 768.987548][T19109] folio_alloc_mpol_noprof+0x36/0x260 [ 768.987569][T19109] vma_alloc_folio_noprof+0xed/0x1d0 [ 768.987588][T19109] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 768.987613][T19109] do_anonymous_page+0xb46/0x2050 [ 768.987635][T19109] ? rcu_read_unlock+0x2d/0xb0 [ 768.987661][T19109] __handle_mm_fault+0x1d2c/0x2a00 [ 768.987684][T19109] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 768.987703][T19109] ? __pfx___handle_mm_fault+0x10/0x10 [ 768.987726][T19109] ? pte_offset_map_lock+0x174/0x320 [ 768.987743][T19109] ? find_held_lock+0x2b/0x80 [ 768.987767][T19109] ? follow_page_pte+0x4d0/0x13f0 [ 768.987788][T19109] handle_mm_fault+0x36d/0xa20 [ 768.987813][T19109] __get_user_pages+0x1178/0x32a0 [ 768.987837][T19109] ? __pfx___get_user_pages+0x10/0x10 [ 768.987861][T19109] populate_vma_page_range+0x267/0x3f0 [ 768.987881][T19109] ? __pfx_populate_vma_page_range+0x10/0x10 [ 768.987900][T19109] ? __pfx_find_vma_intersection+0x10/0x10 [ 768.987918][T19109] ? do_mmap+0x93f/0x12f0 [ 768.987937][T19109] __mm_populate+0x107/0x3a0 [ 768.987965][T19109] ? __pfx___mm_populate+0x10/0x10 [ 768.987986][T19109] ? up_write+0x28c/0x4f0 [ 768.988004][T19109] vm_mmap_pgoff+0x37f/0x470 [ 768.988026][T19109] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 768.988046][T19109] ? do_futex+0x192/0x350 [ 768.988062][T19109] ? __pfx_do_futex+0x10/0x10 [ 768.988081][T19109] ksys_mmap_pgoff+0xe4/0x610 [ 768.988099][T19109] ? __x64_sys_futex+0x358/0x4d0 [ 768.988115][T19109] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 768.988132][T19109] ? xfd_validate_state+0x129/0x190 [ 768.988151][T19109] __x64_sys_mmap+0x125/0x190 [ 768.988169][T19109] do_syscall_64+0x10b/0xf80 [ 768.988188][T19109] ? clear_bhb_loop+0x40/0x90 [ 768.988206][T19109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.988221][T19109] RIP: 0033:0x7f45e819cdd9 [ 768.988234][T19109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.988249][T19109] RSP: 002b:00007f45e913d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 768.988264][T19109] RAX: ffffffffffffffda RBX: 00007f45e8415fa0 RCX: 00007f45e819cdd9 [ 768.988274][T19109] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 768.988284][T19109] RBP: 00007f45e8232d69 R08: 0000000000000007 R09: 0000000000028000 [ 768.988293][T19109] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 768.988303][T19109] R13: 00007f45e8416038 R14: 00007f45e8415fa0 R15: 00007ffd563397d8 [ 768.988323][T19109] [ 769.801552][T19075] random: crng reseeded on system resumption [ 770.275582][T19121] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input24 [ 770.907052][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 770.921482][ T30] audit: type=1800 audit(1777902146.928:66): pid=19114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3112" name="sr0" dev="devtmpfs" ino=2825 res=0 errno=0 [ 773.330825][ T30] audit: type=1800 audit(1777902149.371:67): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3120" name="features" dev="configfs" ino=73038 res=0 errno=0 [ 774.336419][T19175] [U] ^R [ 775.737447][T19207] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.3132: iget: checksum invalid [ 775.777233][T19207] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 775.828381][T19207] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.3132: iget: checksum invalid [ 775.954469][T19207] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 776.095498][T19207] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.3132: iget: checksum invalid [ 776.236216][T19207] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 776.352763][T19207] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.3132: iget: checksum invalid [ 776.436401][T19207] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 776.539850][T19207] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 776.671117][T19207] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 776.809857][ T30] audit: type=1800 audit(1777902152.870:68): pid=19204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3131" name="features" dev="configfs" ino=73386 res=0 errno=0 [ 777.312947][ T5636] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 777.336928][ T5636] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 777.346797][ T5636] CPU: 0 UID: 0 PID: 5636 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.346828][ T5636] Tainted: [L]=SOFTLOCKUP [ 777.346833][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 777.346844][ T5636] Workqueue: hci2 hci_rx_work [ 777.346866][ T5636] Call Trace: [ 777.346871][ T5636] [ 777.346877][ T5636] dump_stack_lvl+0x100/0x190 [ 777.346896][ T5636] sysfs_warn_dup.cold+0x1c/0x28 [ 777.346919][ T5636] sysfs_create_dir_ns+0x24b/0x2b0 [ 777.346935][ T5636] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 777.346950][ T5636] ? find_held_lock+0x2b/0x80 [ 777.346969][ T5636] ? kobject_add_internal+0x25f/0x930 [ 777.346994][ T5636] ? kobject_add_internal+0x25f/0x930 [ 777.347018][ T5636] ? do_raw_spin_unlock+0x145/0x1e0 [ 777.347036][ T5636] kobject_add_internal+0x2c8/0x930 [ 777.347061][ T5636] kobject_add+0x16a/0x1e0 [ 777.347106][ T5636] ? __pfx_kobject_add+0x10/0x10 [ 777.347128][ T5636] ? class_to_subsys+0x10f/0x150 [ 777.347151][ T5636] ? kobject_put+0xb9/0x640 [ 777.347171][ T5636] ? _raw_spin_unlock+0x28/0x50 [ 777.347193][ T5636] device_add+0x294/0x1950 [ 777.347211][ T5636] ? __pfx_dev_set_name+0x10/0x10 [ 777.347232][ T5636] ? __pfx_device_add+0x10/0x10 [ 777.347251][ T5636] ? mgmt_send_event_skb+0x2fb/0x460 [ 777.347274][ T5636] hci_conn_add_sysfs+0x1a3/0x260 [ 777.347295][ T5636] le_conn_complete_evt+0x11eb/0x1f60 [ 777.347318][ T5636] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 777.347334][ T5636] ? __pfx_bt_warn+0x10/0x10 [ 777.347361][ T5636] hci_le_conn_complete_evt+0x23c/0x3a0 [ 777.347380][ T5636] ? skb_pull_data+0x15f/0x1e0 [ 777.347401][ T5636] hci_le_meta_evt+0x34a/0x5f0 [ 777.347420][ T5636] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 777.347440][ T5636] hci_event_packet+0x51c/0xcd0 [ 777.347457][ T5636] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 777.347476][ T5636] ? __pfx_hci_event_packet+0x10/0x10 [ 777.347496][ T5636] ? kcov_remote_start+0x374/0x660 [ 777.347517][ T5636] ? lockdep_hardirqs_on+0x78/0x100 [ 777.347539][ T5636] hci_rx_work+0x451/0xfc0 [ 777.347560][ T5636] process_one_work+0xa0e/0x1980 [ 777.347584][ T5636] ? __pfx_process_one_work+0x10/0x10 [ 777.347605][ T5636] ? __pfx_hci_rx_work+0x10/0x10 [ 777.347623][ T5636] worker_thread+0x5ef/0xe50 [ 777.347643][ T5636] ? __pfx_worker_thread+0x10/0x10 [ 777.347658][ T5636] ? kthread+0x13a/0x450 [ 777.347670][ T5636] ? __pfx_worker_thread+0x10/0x10 [ 777.347684][ T5636] kthread+0x370/0x450 [ 777.347696][ T5636] ? __pfx_kthread+0x10/0x10 [ 777.347710][ T5636] ret_from_fork+0x72b/0xd50 [ 777.347727][ T5636] ? __pfx_ret_from_fork+0x10/0x10 [ 777.347744][ T5636] ? __switch_to+0x800/0x1100 [ 777.347763][ T5636] ? __switch_to_asm+0x39/0x70 [ 777.347782][ T5636] ? __pfx_kthread+0x10/0x10 [ 777.347796][ T5636] ret_from_fork_asm+0x1a/0x30 [ 777.347825][ T5636] [ 777.348795][ T5636] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 777.657141][ T5636] Bluetooth: hci2: failed to register connection device [ 777.900981][T19237] [U] ^R [ 779.019146][T19240] random: crng reseeded on system resumption [ 779.718413][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 780.046794][T19266] [U] ^R [ 780.383960][T19254] kexec: Could not allocate control_code_buffer [ 781.078180][T19272] FAULT_INJECTION: forcing a failure. [ 781.078180][T19272] name failslab, interval 1, probability 0, space 0, times 0 [ 781.194070][T19277] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.3148: iget: checksum invalid [ 781.321842][T19272] CPU: 0 UID: 0 PID: 19272 Comm: syz.3.3144 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.321869][T19272] Tainted: [L]=SOFTLOCKUP [ 781.321874][T19272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 781.321884][T19272] Call Trace: [ 781.321889][T19272] [ 781.321895][T19272] dump_stack_lvl+0x100/0x190 [ 781.321917][T19272] should_fail_ex.cold+0x5/0xa [ 781.321938][T19272] should_failslab+0xc2/0x120 [ 781.321956][T19272] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 781.321978][T19272] ? __pmd_alloc+0xbf/0x950 [ 781.322000][T19272] __pmd_alloc+0xbf/0x950 [ 781.322020][T19272] move_page_tables+0x3224/0x4500 [ 781.322044][T19272] ? __pfx_copy_vma+0x10/0x10 [ 781.322073][T19272] ? __pfx_move_page_tables+0x10/0x10 [ 781.322109][T19272] copy_vma_and_data+0x25c/0x7c0 [ 781.322134][T19272] ? __pfx_copy_vma_and_data+0x10/0x10 [ 781.322164][T19272] ? __vma_start_write+0x17f/0x280 [ 781.322185][T19272] ? __pfx___vma_start_write+0x10/0x10 [ 781.322210][T19272] move_vma+0x574/0x1920 [ 781.322235][T19272] ? __pfx_move_vma+0x10/0x10 [ 781.322260][T19272] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 781.322278][T19272] ? cap_mmap_addr+0x4b/0x120 [ 781.322299][T19272] ? bpf_lsm_mmap_addr+0x9/0x30 [ 781.322313][T19272] ? security_mmap_addr+0x71/0x1e0 [ 781.322329][T19272] ? __get_unmapped_area+0x255/0x3e0 [ 781.322349][T19272] ? vrm_set_new_addr+0x204/0x290 [ 781.322373][T19272] mremap_to+0x234/0x4c0 [ 781.322394][T19272] ? mas_walk+0x6ef/0x9b0 [ 781.322412][T19272] ? __pfx_mremap_to+0x10/0x10 [ 781.322439][T19272] __do_sys_mremap+0xa7a/0x1850 [ 781.322467][T19272] ? __pfx___do_sys_mremap+0x10/0x10 [ 781.322493][T19272] ? do_futex+0x192/0x350 [ 781.322509][T19272] ? __pfx_do_futex+0x10/0x10 [ 781.322530][T19272] ? __x64_sys_futex+0x34f/0x4d0 [ 781.322553][T19272] ? rcu_is_watching+0x12/0xc0 [ 781.322573][T19272] do_syscall_64+0x10b/0xf80 [ 781.322591][T19272] ? clear_bhb_loop+0x40/0x90 [ 781.322608][T19272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.322623][T19272] RIP: 0033:0x7fee30d9cdd9 [ 781.322637][T19272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.322651][T19272] RSP: 002b:00007fee31cdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 781.322666][T19272] RAX: ffffffffffffffda RBX: 00007fee31016090 RCX: 00007fee30d9cdd9 [ 781.322677][T19272] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000000000000000 [ 781.322686][T19272] RBP: 00007fee30e32d69 R08: 0000000100000000 R09: 0000000000000000 [ 781.322695][T19272] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 781.322705][T19272] R13: 00007fee31016128 R14: 00007fee31016090 R15: 00007ffe6c34cd68 [ 781.322733][T19272] [ 781.967792][T19277] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 782.080519][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 782.173798][T19277] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.3148: iget: checksum invalid [ 782.355742][T19277] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 782.510394][T19277] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.3148: iget: checksum invalid [ 782.648718][T19277] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 782.764379][T19277] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.3148: iget: checksum invalid [ 782.916201][T19277] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 783.041647][T19277] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 783.177757][T19277] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 783.276464][T19298] [U] ^R [ 783.574497][T19305] program syz.4.3154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 783.673797][T19306] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 784.568594][ T30] audit: type=1800 audit(1777902160.673:69): pid=19311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3155" name="features" dev="configfs" ino=73711 res=0 errno=0 [ 785.479219][T19325] FAULT_INJECTION: forcing a failure. [ 785.479219][T19325] name failslab, interval 1, probability 0, space 0, times 0 [ 785.580992][T19325] CPU: 0 UID: 0 PID: 19325 Comm: syz.2.3159 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.581018][T19325] Tainted: [L]=SOFTLOCKUP [ 785.581024][T19325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 785.581034][T19325] Call Trace: [ 785.581039][T19325] [ 785.581045][T19325] dump_stack_lvl+0x100/0x190 [ 785.581067][T19325] should_fail_ex.cold+0x5/0xa [ 785.581088][T19325] should_failslab+0xc2/0x120 [ 785.581105][T19325] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 785.581128][T19325] ? seq_open+0x55/0x170 [ 785.581154][T19325] seq_open+0x55/0x170 [ 785.581176][T19325] __seq_open_private+0x3e/0xd0 [ 785.581191][T19325] seq_open_net+0x1ab/0x2a0 [ 785.581210][T19325] ? __pfx_seq_open_net+0x10/0x10 [ 785.581231][T19325] proc_reg_open+0x2ab/0x5f0 [ 785.581250][T19325] do_dentry_open+0x6d8/0x1660 [ 785.581268][T19325] ? __pfx_proc_reg_open+0x10/0x10 [ 785.581292][T19325] vfs_open+0x82/0x3f0 [ 785.581315][T19325] path_openat+0x208c/0x31a0 [ 785.581339][T19325] ? __pfx_path_openat+0x10/0x10 [ 785.581369][T19325] do_file_open+0x20e/0x430 [ 785.581388][T19325] ? __pfx_do_file_open+0x10/0x10 [ 785.581413][T19325] ? __pfx_kfree_link+0x10/0x10 [ 785.581433][T19325] ? alloc_fd+0x476/0x790 [ 785.581454][T19325] ? do_getname+0x191/0x390 [ 785.581477][T19325] do_sys_openat2+0x10d/0x1e0 [ 785.581499][T19325] ? __pfx_do_sys_openat2+0x10/0x10 [ 785.581522][T19325] ? __fget_files+0x21f/0x3d0 [ 785.581542][T19325] __x64_sys_openat+0x12d/0x210 [ 785.581564][T19325] ? __pfx___x64_sys_openat+0x10/0x10 [ 785.581589][T19325] ? rcu_is_watching+0x12/0xc0 [ 785.581609][T19325] do_syscall_64+0x10b/0xf80 [ 785.581627][T19325] ? clear_bhb_loop+0x40/0x90 [ 785.581645][T19325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.581660][T19325] RIP: 0033:0x7f45e819cdd9 [ 785.581674][T19325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.581688][T19325] RSP: 002b:00007f45e913d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 785.581703][T19325] RAX: ffffffffffffffda RBX: 00007f45e8415fa0 RCX: 00007f45e819cdd9 [ 785.581713][T19325] RDX: 0000000000000800 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 785.581722][T19325] RBP: 00007f45e8232d69 R08: 0000000000000000 R09: 0000000000000000 [ 785.581731][T19325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.581740][T19325] R13: 00007f45e8416038 R14: 00007f45e8415fa0 R15: 00007ffd563397d8 [ 785.581760][T19325] [ 786.179610][T19337] netlink: 'syz.3.3161': attribute type 12 has an invalid length. [ 786.242844][T19341] random: crng reseeded on system resumption [ 786.916188][T19349] [U] ^R [ 787.270551][T19359] [U] ^R [ 787.543395][T19364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3167'. [ 787.652581][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3167'. [ 787.870893][T19371] netlink: 350 bytes leftover after parsing attributes in process `syz.4.3169'. [ 787.998301][T19376] [U] ^R [ 789.384707][T18984] syz.3.3080 (18984) used greatest stack depth: 18784 bytes left [ 790.656172][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3180'. [ 790.705506][T19417] netlink: 28905 bytes leftover after parsing attributes in process `syz.0.3180'. [ 792.034803][ T5636] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 792.274264][ T30] audit: type=1800 audit(1777902168.415:70): pid=19448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3189" name="features" dev="configfs" ino=74229 res=0 errno=0 [ 792.744036][T19461] [U] ^R [ 792.958520][T19464] [U] ^R [ 792.978248][T19471] [U] ^R [ 793.585337][T19489] FAULT_INJECTION: forcing a failure. [ 793.585337][T19489] name fail_futex, interval 1, probability 0, space 0, times 0 [ 793.646390][T19489] CPU: 0 UID: 0 PID: 19489 Comm: syz.0.3199 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.646416][T19489] Tainted: [L]=SOFTLOCKUP [ 793.646422][T19489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 793.646431][T19489] Call Trace: [ 793.646436][T19489] [ 793.646442][T19489] dump_stack_lvl+0x100/0x190 [ 793.646464][T19489] should_fail_ex.cold+0x5/0xa [ 793.646484][T19489] get_futex_key+0x295/0x1510 [ 793.646502][T19489] ? __pfx_get_futex_key+0x10/0x10 [ 793.646518][T19489] ? get_futex_key+0x4e8/0x1510 [ 793.646536][T19489] futex_wait_setup+0x83/0x510 [ 793.646560][T19489] futex_wait_requeue_pi+0x240/0x890 [ 793.646582][T19489] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 793.646608][T19489] ? __futex_wait+0x256/0x300 [ 793.646629][T19489] ? __pfx___futex_wait+0x10/0x10 [ 793.646648][T19489] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 793.646682][T19489] ? __pfx_futex_wake_mark+0x10/0x10 [ 793.646705][T19489] ? ksys_write+0x190/0x250 [ 793.646721][T19489] ? ksys_write+0x190/0x250 [ 793.646742][T19489] do_futex+0x24f/0x350 [ 793.646758][T19489] ? __pfx_do_futex+0x10/0x10 [ 793.646779][T19489] __x64_sys_futex+0x34f/0x4d0 [ 793.646797][T19489] ? __pfx___x64_sys_futex+0x10/0x10 [ 793.646812][T19489] ? ksys_write+0x1ac/0x250 [ 793.646831][T19489] ? rcu_is_watching+0x12/0xc0 [ 793.646851][T19489] do_syscall_64+0x10b/0xf80 [ 793.646868][T19489] ? clear_bhb_loop+0x40/0x90 [ 793.646886][T19489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.646901][T19489] RIP: 0033:0x7f7c49f9cdd9 [ 793.646914][T19489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.646929][T19489] RSP: 002b:00007f7c4aeab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 793.646944][T19489] RAX: ffffffffffffffda RBX: 00007f7c4a215fa0 RCX: 00007f7c49f9cdd9 [ 793.646954][T19489] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000200000000080 [ 793.646963][T19489] RBP: 00007f7c4a032d69 R08: 0000000000000000 R09: 00000000fffffffa [ 793.646972][T19489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.646980][T19489] R13: 00007f7c4a216038 R14: 00007f7c4a215fa0 R15: 00007ffcafb58868 [ 793.646999][T19489] [ 793.905618][T19477] [U] ^R [ 794.131032][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 794.140656][ T30] audit: type=1800 audit(1777902170.235:71): pid=19493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3200" name="features" dev="configfs" ino=74441 res=0 errno=0 [ 794.170793][T19495] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 794.676923][T19506] [U] ^R [ 794.902829][T19508] kafs: addr_prefs: Invalid Command [ 795.029065][T19515] FAULT_INJECTION: forcing a failure. [ 795.029065][T19515] name failslab, interval 1, probability 0, space 0, times 0 [ 795.101050][T19515] CPU: 0 UID: 0 PID: 19515 Comm: syz.2.3207 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.101076][T19515] Tainted: [L]=SOFTLOCKUP [ 795.101080][T19515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 795.101089][T19515] Call Trace: [ 795.101094][T19515] [ 795.101100][T19515] dump_stack_lvl+0x100/0x190 [ 795.101121][T19515] should_fail_ex.cold+0x5/0xa [ 795.101140][T19515] ? tomoyo_realpath_from_path+0xb6/0x690 [ 795.101158][T19515] should_failslab+0xc2/0x120 [ 795.101178][T19515] __kmalloc_noprof+0xe0/0x850 [ 795.101200][T19515] ? kfree+0x1dd/0x6c0 [ 795.101223][T19515] tomoyo_realpath_from_path+0xb6/0x690 [ 795.101245][T19515] tomoyo_check_open_permission+0x2af/0x3c0 [ 795.101261][T19515] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 795.101282][T19515] ? hook_file_open+0x24e/0x7a0 [ 795.101306][T19515] ? lock_acquire+0x1b1/0x370 [ 795.101326][T19515] tomoyo_file_open+0x6b/0x90 [ 795.101347][T19515] security_file_open+0xb5/0x1e0 [ 795.101364][T19515] do_dentry_open+0x5aa/0x1660 [ 795.101387][T19515] vfs_open+0x82/0x3f0 [ 795.101410][T19515] path_openat+0x208c/0x31a0 [ 795.101441][T19515] ? __pfx_path_openat+0x10/0x10 [ 795.101465][T19515] do_file_open+0x20e/0x430 [ 795.101485][T19515] ? __pfx_do_file_open+0x10/0x10 [ 795.101509][T19515] ? __pfx_kfree_link+0x10/0x10 [ 795.101529][T19515] ? alloc_fd+0x476/0x790 [ 795.101548][T19515] ? do_getname+0x191/0x390 [ 795.101571][T19515] do_sys_openat2+0x10d/0x1e0 [ 795.101593][T19515] ? __pfx_do_sys_openat2+0x10/0x10 [ 795.101621][T19515] __x64_sys_openat+0x12d/0x210 [ 795.101644][T19515] ? __pfx___x64_sys_openat+0x10/0x10 [ 795.101665][T19515] ? ksys_write+0x1ac/0x250 [ 795.101684][T19515] ? rcu_is_watching+0x12/0xc0 [ 795.101704][T19515] do_syscall_64+0x10b/0xf80 [ 795.101722][T19515] ? clear_bhb_loop+0x40/0x90 [ 795.101740][T19515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.101754][T19515] RIP: 0033:0x7f45e815d60e [ 795.101766][T19515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 795.101779][T19515] RSP: 002b:00007f45e913cf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 795.101793][T19515] RAX: ffffffffffffffda RBX: 00007f45e913d6c0 RCX: 00007f45e815d60e [ 795.101803][T19515] RDX: 0000000000000002 RSI: 00007f45e8232670 RDI: ffffffffffffff9c [ 795.101811][T19515] RBP: 00007f45e8232d69 R08: 0000000000000000 R09: 0000000000000000 [ 795.101820][T19515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 795.101828][T19515] R13: 00007f45e8416038 R14: 00007f45e8415fa0 R15: 00007ffd563397d8 [ 795.101846][T19515] [ 795.363195][T19515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 795.371048][T19515] FAULT_INJECTION: forcing a failure. [ 795.371048][T19515] name fail_futex, interval 1, probability 0, space 0, times 0 [ 795.384934][T19515] CPU: 0 UID: 0 PID: 19515 Comm: syz.2.3207 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.384956][T19515] Tainted: [L]=SOFTLOCKUP [ 795.384961][T19515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 795.384969][T19515] Call Trace: [ 795.384974][T19515] [ 795.384980][T19515] dump_stack_lvl+0x100/0x190 [ 795.385000][T19515] should_fail_ex.cold+0x5/0xa [ 795.385019][T19515] get_futex_key+0x1d2/0x1510 [ 795.385036][T19515] ? __pfx_get_futex_key+0x10/0x10 [ 795.385050][T19515] ? get_futex_key+0x4e8/0x1510 [ 795.385068][T19515] futex_wait_setup+0x83/0x510 [ 795.385091][T19515] futex_wait_requeue_pi+0x240/0x890 [ 795.385112][T19515] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 795.385151][T19515] ? __pfx_futex_wake_mark+0x10/0x10 [ 795.385172][T19515] ? find_held_lock+0x2b/0x80 [ 795.385191][T19515] ? ksys_write+0x190/0x250 [ 795.385207][T19515] ? ksys_write+0x190/0x250 [ 795.385226][T19515] do_futex+0x24f/0x350 [ 795.385241][T19515] ? __pfx_do_futex+0x10/0x10 [ 795.385261][T19515] __x64_sys_futex+0x34f/0x4d0 [ 795.385278][T19515] ? fput+0x79/0x100 [ 795.385296][T19515] ? __pfx___x64_sys_futex+0x10/0x10 [ 795.385311][T19515] ? ksys_write+0x1ac/0x250 [ 795.385327][T19515] ? __pfx_ksys_write+0x10/0x10 [ 795.385344][T19515] ? rcu_is_watching+0x12/0xc0 [ 795.385363][T19515] do_syscall_64+0x10b/0xf80 [ 795.385382][T19515] ? clear_bhb_loop+0x40/0x90 [ 795.385405][T19515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.385420][T19515] RIP: 0033:0x7f45e819cdd9 [ 795.385432][T19515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.385445][T19515] RSP: 002b:00007f45e913d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 795.385458][T19515] RAX: ffffffffffffffda RBX: 00007f45e8415fa0 RCX: 00007f45e819cdd9 [ 795.385468][T19515] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000200000000080 [ 795.385476][T19515] RBP: 00007f45e913d090 R08: 0000000000000000 R09: 00000000fffffffa [ 795.385485][T19515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.385493][T19515] R13: 00007f45e8416038 R14: 00007f45e8415fa0 R15: 00007ffd563397d8 [ 795.385514][T19515] [ 796.123404][T19518] netlink: 'syz.3.3208': attribute type 19 has an invalid length. [ 796.163647][T19518] netlink: 314 bytes leftover after parsing attributes in process `syz.3.3208'. [ 796.239131][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 797.045072][ T30] audit: type=1800 audit(1777902173.222:72): pid=19528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3211" name="features" dev="configfs" ino=74733 res=0 errno=0 [ 797.880797][T19550] [U] ^R [ 798.099670][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 798.130691][T19561] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.3220: iget: checksum invalid [ 798.144556][T19566] FAULT_INJECTION: forcing a failure. [ 798.144556][T19566] name failslab, interval 1, probability 0, space 0, times 0 [ 798.193069][T19561] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 798.208004][T19566] CPU: 0 UID: 0 PID: 19566 Comm: syz.2.3222 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.208029][T19566] Tainted: [L]=SOFTLOCKUP [ 798.208035][T19566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 798.208045][T19566] Call Trace: [ 798.208051][T19566] [ 798.208057][T19566] dump_stack_lvl+0x100/0x190 [ 798.208080][T19566] should_fail_ex.cold+0x5/0xa [ 798.208101][T19566] should_failslab+0xc2/0x120 [ 798.208119][T19566] __kmalloc_cache_noprof+0x7a/0x6f0 [ 798.208148][T19566] ? subflow_create_ctx+0x9b/0x2e0 [ 798.208174][T19566] subflow_create_ctx+0x9b/0x2e0 [ 798.208196][T19566] subflow_ulp_init+0xc3/0x4f0 [ 798.208218][T19566] tcp_set_ulp+0x32e/0x7f0 [ 798.208239][T19566] mptcp_subflow_create_socket+0x385/0xa30 [ 798.208264][T19566] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 798.208293][T19566] __mptcp_nmpc_sk+0x17f/0x880 [ 798.208309][T19566] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 798.208326][T19566] ? __local_bh_enable_ip+0x9e/0x120 [ 798.208347][T19566] mptcp_bind+0xa3/0x1e0 [ 798.208363][T19566] __sys_bind+0x1a9/0x260 [ 798.208385][T19566] ? __pfx___sys_bind+0x10/0x10 [ 798.208418][T19566] __x64_sys_bind+0x72/0xb0 [ 798.208438][T19566] ? lockdep_hardirqs_on+0x78/0x100 [ 798.208456][T19566] do_syscall_64+0x10b/0xf80 [ 798.208474][T19566] ? clear_bhb_loop+0x40/0x90 [ 798.208492][T19566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.208507][T19566] RIP: 0033:0x7f45e819cdd9 [ 798.208520][T19566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.208534][T19566] RSP: 002b:00007f45e913d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 798.208549][T19566] RAX: ffffffffffffffda RBX: 00007f45e8415fa0 RCX: 00007f45e819cdd9 [ 798.208559][T19566] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000006 [ 798.208568][T19566] RBP: 00007f45e8232d69 R08: 0000000000000000 R09: 0000000000000000 [ 798.208577][T19566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.208585][T19566] R13: 00007f45e8416038 R14: 00007f45e8415fa0 R15: 00007ffd563397d8 [ 798.208606][T19566] [ 798.443426][T19561] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.3220: iget: checksum invalid [ 798.454576][T19561] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 798.464894][T19561] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.3220: iget: checksum invalid [ 798.475961][T19561] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 798.486397][T19561] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.3220: iget: checksum invalid [ 798.497534][T19561] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 798.506994][T19561] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 798.516700][T19561] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 799.165010][T19567] kafs: addr_prefs: Invalid Command [ 799.366249][T19585] random: crng reseeded on system resumption [ 799.489867][ T30] audit: type=1800 audit(1777902175.665:73): pid=19580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3226" name="features" dev="configfs" ino=75137 res=0 errno=0 [ 799.820443][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3229'. [ 800.606261][T19610] [U] ^R [ 801.539974][T19629] kafs: addr_prefs: Invalid Command [ 802.883676][T19655] FAULT_INJECTION: forcing a failure. [ 802.883676][T19655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.985053][T19655] CPU: 0 UID: 0 PID: 19655 Comm: syz.3.3244 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.985079][T19655] Tainted: [L]=SOFTLOCKUP [ 802.985084][T19655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 802.985093][T19655] Call Trace: [ 802.985098][T19655] [ 802.985104][T19655] dump_stack_lvl+0x100/0x190 [ 802.985125][T19655] should_fail_ex.cold+0x5/0xa [ 802.985144][T19655] _copy_from_user+0x2e/0xd0 [ 802.985168][T19655] memdup_user_nul+0x6c/0x120 [ 802.985186][T19655] event_filter_write+0x47/0x290 [ 802.985202][T19655] vfs_write+0x2aa/0x1070 [ 802.985219][T19655] ? __pfx_event_filter_write+0x10/0x10 [ 802.985235][T19655] ? __pfx_vfs_write+0x10/0x10 [ 802.985251][T19655] ? __fget_files+0x215/0x3d0 [ 802.985271][T19655] ? __fget_files+0x21f/0x3d0 [ 802.985293][T19655] ksys_write+0x12a/0x250 [ 802.985309][T19655] ? __pfx_ksys_write+0x10/0x10 [ 802.985323][T19655] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 802.985346][T19655] ? syscall_user_dispatch+0x76/0x130 [ 802.985364][T19655] do_syscall_64+0x10b/0xf80 [ 802.985383][T19655] ? clear_bhb_loop+0x40/0x90 [ 802.985401][T19655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.985416][T19655] RIP: 0033:0x7fee30d9cdd9 [ 802.985428][T19655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.985442][T19655] RSP: 002b:00007fee31cdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 802.985456][T19655] RAX: ffffffffffffffda RBX: 00007fee31016090 RCX: 00007fee30d9cdd9 [ 802.985465][T19655] RDX: 000000000000000d RSI: 000020000000ac80 RDI: 0000000000000004 [ 802.985474][T19655] RBP: 00007fee31cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 802.985482][T19655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.985490][T19655] R13: 00007fee31016128 R14: 00007fee31016090 R15: 00007ffe6c34cd68 [ 802.985509][T19655] [ 803.576408][T19676] [U] ^R [ 805.328426][ T30] audit: type=1800 audit(1777902181.547:74): pid=19697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3251" name="features" dev="configfs" ino=75829 res=0 errno=0 [ 805.425350][T19723] __vm_enough_memory: pid: 19723, comm: syz.3.3257, bytes: 4398046457856 not enough memory for the allocation [ 805.537095][T19723] zram: Cannot change disksize for initialized device [ 806.977034][T19759] FAULT_INJECTION: forcing a failure. [ 806.977034][T19759] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 807.052087][T19759] CPU: 0 UID: 0 PID: 19759 Comm: syz.0.3262 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.052113][T19759] Tainted: [L]=SOFTLOCKUP [ 807.052118][T19759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 807.052128][T19759] Call Trace: [ 807.052133][T19759] [ 807.052139][T19759] dump_stack_lvl+0x100/0x190 [ 807.052162][T19759] should_fail_ex.cold+0x5/0xa [ 807.052179][T19759] ? prepare_alloc_pages+0x16d/0x5f0 [ 807.052200][T19759] should_fail_alloc_page+0xeb/0x140 [ 807.052218][T19759] prepare_alloc_pages+0x1f0/0x5f0 [ 807.052240][T19759] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 807.052266][T19759] ? __pfx___up_read+0x10/0x10 [ 807.052281][T19759] ? validate_mm+0x261/0x4e0 [ 807.052308][T19759] ? validate_mm+0x261/0x4e0 [ 807.052331][T19759] ? mas_find+0x2dd/0x740 [ 807.052353][T19759] ? validate_mm+0x392/0x4e0 [ 807.052374][T19759] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 807.052406][T19759] ? vma_iter_store_overwrite+0x392/0x650 [ 807.052431][T19759] ? vma_link+0x5ee/0x8d0 [ 807.052451][T19759] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 807.052474][T19759] ? policy_nodemask+0xed/0x4f0 [ 807.052491][T19759] alloc_pages_mpol+0x1fb/0x540 [ 807.052512][T19759] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 807.052534][T19759] alloc_pages_noprof+0x1a/0x160 [ 807.052554][T19759] __pmd_alloc+0x3b/0x950 [ 807.052574][T19759] move_page_tables+0x3224/0x4500 [ 807.052599][T19759] ? __pfx_copy_vma+0x10/0x10 [ 807.052627][T19759] ? __pfx_move_page_tables+0x10/0x10 [ 807.052664][T19759] copy_vma_and_data+0x25c/0x7c0 [ 807.052688][T19759] ? __pfx_copy_vma_and_data+0x10/0x10 [ 807.052718][T19759] ? __vma_start_write+0x17f/0x280 [ 807.052738][T19759] ? __pfx___vma_start_write+0x10/0x10 [ 807.052763][T19759] move_vma+0x574/0x1920 [ 807.052788][T19759] ? __pfx_move_vma+0x10/0x10 [ 807.052812][T19759] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 807.052835][T19759] ? cap_mmap_addr+0x4b/0x120 [ 807.052855][T19759] ? bpf_lsm_mmap_addr+0x9/0x30 [ 807.052869][T19759] ? security_mmap_addr+0x71/0x1e0 [ 807.052885][T19759] ? __get_unmapped_area+0x255/0x3e0 [ 807.052906][T19759] ? vrm_set_new_addr+0x204/0x290 [ 807.052930][T19759] mremap_to+0x234/0x4c0 [ 807.052952][T19759] ? mas_walk+0x6ef/0x9b0 [ 807.052968][T19759] ? __pfx_mremap_to+0x10/0x10 [ 807.052995][T19759] __do_sys_mremap+0xa7a/0x1850 [ 807.053024][T19759] ? __pfx___do_sys_mremap+0x10/0x10 [ 807.053056][T19759] ? do_futex+0x192/0x350 [ 807.053073][T19759] ? __pfx_do_futex+0x10/0x10 [ 807.053094][T19759] ? __x64_sys_futex+0x34f/0x4d0 [ 807.053119][T19759] ? rcu_is_watching+0x12/0xc0 [ 807.053140][T19759] do_syscall_64+0x10b/0xf80 [ 807.053158][T19759] ? clear_bhb_loop+0x40/0x90 [ 807.053176][T19759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.053192][T19759] RIP: 0033:0x7f7c49f9cdd9 [ 807.053205][T19759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.053219][T19759] RSP: 002b:00007f7c4ae8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 807.053234][T19759] RAX: ffffffffffffffda RBX: 00007f7c4a216090 RCX: 00007f7c49f9cdd9 [ 807.053245][T19759] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000000000000000 [ 807.053253][T19759] RBP: 00007f7c4a032d69 R08: 0000000100000000 R09: 0000000000000000 [ 807.053263][T19759] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 807.053272][T19759] R13: 00007f7c4a216128 R14: 00007f7c4a216090 R15: 00007ffcafb58868 [ 807.053292][T19759] [ 807.841121][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.851613][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.431511][T19785] kafs: addr_prefs: Invalid Command [ 809.524918][ T30] audit: type=1800 audit(1777902185.770:75): pid=19779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3267" name="features" dev="configfs" ino=76171 res=0 errno=0 [ 810.245521][T19798] [U] ^R [ 810.329097][T19803] [U] ^R [ 812.206418][T19835] vivid-008: ================= START STATUS ================= [ 812.321281][T19835] vivid-008: ================== END STATUS ================== [ 812.730009][T19845] FAULT_INJECTION: forcing a failure. [ 812.730009][T19845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.790354][T19845] CPU: 0 UID: 0 PID: 19845 Comm: syz.4.3280 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.790379][T19845] Tainted: [L]=SOFTLOCKUP [ 812.790384][T19845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 812.790393][T19845] Call Trace: [ 812.790398][T19845] [ 812.790404][T19845] dump_stack_lvl+0x100/0x190 [ 812.790425][T19845] should_fail_ex.cold+0x5/0xa [ 812.790444][T19845] _copy_to_user+0x32/0xd0 [ 812.790470][T19845] simple_read_from_buffer+0xcb/0x170 [ 812.790488][T19845] proc_fail_nth_read+0x1af/0x230 [ 812.790512][T19845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.790536][T19845] ? rw_verify_area+0xce/0x6d0 [ 812.790549][T19845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.790571][T19845] vfs_read+0x1e4/0xb30 [ 812.790589][T19845] ? __pfx_vfs_read+0x10/0x10 [ 812.790604][T19845] ? __fget_files+0x215/0x3d0 [ 812.790625][T19845] ? __fget_files+0x21f/0x3d0 [ 812.790646][T19845] ksys_read+0x12a/0x250 [ 812.790662][T19845] ? __pfx_ksys_read+0x10/0x10 [ 812.790679][T19845] ? rcu_is_watching+0x12/0xc0 [ 812.790698][T19845] do_syscall_64+0x10b/0xf80 [ 812.790717][T19845] ? clear_bhb_loop+0x40/0x90 [ 812.790735][T19845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.790783][T19845] RIP: 0033:0x7f487c95d60e [ 812.790796][T19845] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 812.790809][T19845] RSP: 002b:00007f487d894fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 812.790823][T19845] RAX: ffffffffffffffda RBX: 00007f487d8956c0 RCX: 00007f487c95d60e [ 812.790832][T19845] RDX: 000000000000000f RSI: 00007f487d8950a0 RDI: 0000000000000004 [ 812.790841][T19845] RBP: 00007f487d895090 R08: 0000000000000000 R09: 0000000000000000 [ 812.790852][T19845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.790860][T19845] R13: 00007f487cc16038 R14: 00007f487cc15fa0 R15: 00007ffdf7931b38 [ 812.790878][T19845] [ 813.528139][T19847] [U] ^R [ 813.633813][T19851] [U] ^R [ 814.422532][T19859] [U] ^R [ 816.121420][T19889] kafs: addr_prefs: Invalid Command [ 817.088614][T19907] futex_wake_op: syz.3.3297 tries to shift op by -2048; fix this program [ 817.180839][T19907] futex_wake_op: syz.3.3297 tries to shift op by -2048; fix this program [ 818.364742][T19925] kafs: addr_prefs: Invalid Command [ 819.313304][T19945] [U] ^R [ 820.068557][T19951] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 820.090544][T19951] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 820.165340][T19951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 820.191286][T19951] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 820.210907][ T30] audit: type=1800 audit(1777902196.509:76): pid=19960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3313" name="features" dev="configfs" ino=76898 res=0 errno=0 [ 820.251276][T19951] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 820.276265][T19951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 820.298000][T19951] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 820.316456][T19951] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 820.339736][T19951] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 820.372823][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 820.388737][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 820.398280][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 820.408411][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 820.416018][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 820.931483][T10834] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.388279][T10834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.489012][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout [ 821.687343][T10834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.834924][T10834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.975258][T19995] [U] ^R [ 822.024336][T10834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.204772][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 822.284594][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 822.522656][ T5636] Bluetooth: hci0: command tx timeout [ 823.076648][T10834] bridge_slave_1: left allmulticast mode [ 823.110557][T10834] bridge_slave_1: left promiscuous mode [ 823.143493][T10834] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.206406][T10834] bridge_slave_0: left allmulticast mode [ 823.243542][T10834] bridge_slave_0: left promiscuous mode [ 823.267980][T10834] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.534376][ T30] audit: type=1800 audit(1777902199.847:77): pid=20024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3324" name="features" dev="configfs" ino=77360 res=0 errno=0 [ 823.563495][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout [ 823.993781][T10834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.037006][T10834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.037980][T10834] bond0 (unregistering): Released all slaves [ 824.159546][T20042] FAULT_INJECTION: forcing a failure. [ 824.159546][T20042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.205739][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 824.236684][T20042] CPU: 0 UID: 0 PID: 20042 Comm: syz.4.3325 Tainted: G L syzkaller #0 PREEMPT(full) [ 824.236709][T20042] Tainted: [L]=SOFTLOCKUP [ 824.236714][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 824.236731][T20042] Call Trace: [ 824.236737][T20042] [ 824.236743][T20042] dump_stack_lvl+0x100/0x190 [ 824.236765][T20042] should_fail_ex.cold+0x5/0xa [ 824.236785][T20042] _copy_from_user+0x2e/0xd0 [ 824.236810][T20042] tipc_setsockopt+0x927/0xe30 [ 824.236835][T20042] ? __pfx_tipc_setsockopt+0x10/0x10 [ 824.236862][T20042] ? aa_sock_opt_perm+0xfe/0x1b0 [ 824.236884][T20042] ? __pfx_tipc_setsockopt+0x10/0x10 [ 824.236907][T20042] do_sock_setsockopt+0xf3/0x1d0 [ 824.236928][T20042] __sys_setsockopt+0x119/0x190 [ 824.236946][T20042] __x64_sys_setsockopt+0xbd/0x160 [ 824.236959][T20042] ? do_syscall_64+0x90/0xf80 [ 824.236978][T20042] ? lockdep_hardirqs_on+0x78/0x100 [ 824.236996][T20042] do_syscall_64+0x10b/0xf80 [ 824.237013][T20042] ? clear_bhb_loop+0x40/0x90 [ 824.237031][T20042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.237046][T20042] RIP: 0033:0x7f487c99cdd9 [ 824.237060][T20042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.237073][T20042] RSP: 002b:00007f487d895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 824.237088][T20042] RAX: ffffffffffffffda RBX: 00007f487cc15fa0 RCX: 00007f487c99cdd9 [ 824.237098][T20042] RDX: 000000000000008a RSI: 000000000000010f RDI: 0000000000000003 [ 824.237106][T20042] RBP: 00007f487d895090 R08: 0000000000000014 R09: 0000000000000000 [ 824.237115][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.237123][T20042] R13: 00007f487cc16038 R14: 00007f487cc15fa0 R15: 00007ffdf7931b38 [ 824.237141][T20042] [ 824.440989][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 824.447048][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 824.527490][T20046] can: request_module (can-proto-5) failed. [ 824.623003][ T5629] Bluetooth: hci0: command tx timeout [ 825.017517][T19950] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.045818][T19950] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.073463][T19950] bridge_slave_0: entered allmulticast mode [ 825.098946][T19950] bridge_slave_0: entered promiscuous mode [ 825.207087][T19950] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.257559][T19950] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.263155][T19950] bridge_slave_1: entered allmulticast mode [ 825.265880][T19950] bridge_slave_1: entered promiscuous mode [ 825.553570][T19950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.616590][T19950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.898789][T20069] [U] ^R [ 826.054584][T19950] team0: Port device team_slave_0 added [ 826.106172][T19950] team0: Port device team_slave_1 added [ 826.269306][T10834] hsr_slave_0: left promiscuous mode [ 826.306799][T10834] hsr_slave_1: left promiscuous mode [ 826.339733][T10834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.355614][T20079] [U] ^R [ 826.373776][T10834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.408994][T10834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.444323][T10834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.503059][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 826.509097][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 826.517171][T10834] veth1_macvtap: left promiscuous mode [ 826.544880][T10834] veth0_macvtap: left promiscuous mode [ 826.567631][T10834] veth1_vlan: left promiscuous mode [ 826.591295][T10834] veth0_vlan: left promiscuous mode [ 826.662416][ T5636] Bluetooth: hci0: command tx timeout [ 827.065903][T10834] team0 (unregistering): Port device team_slave_1 removed [ 827.094243][T10834] team0 (unregistering): Port device team_slave_0 removed [ 827.356239][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6 [ 827.392160][T19950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.430327][T19950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.598763][T19950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.667236][T19950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.694411][T19950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.806706][T19950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.461693][T19950] hsr_slave_0: entered promiscuous mode [ 828.486619][T19950] hsr_slave_1: entered promiscuous mode [ 828.505279][T19950] debugfs: 'hsr0' already exists in 'hsr' [ 828.527718][T19950] Cannot create hsr debugfs directory [ 828.569871][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 828.730496][ T5636] Bluetooth: hci0: command tx timeout [ 829.567284][ T5286] 8021q: adding VLAN 0 to HW filter on device eth7 [ 830.316722][T20121] FAULT_INJECTION: forcing a failure. [ 830.316722][T20121] name fail_futex, interval 1, probability 0, space 0, times 0 [ 830.375453][T20117] kafs: addr_prefs: Invalid Command [ 830.397225][T20121] CPU: 0 UID: 0 PID: 20121 Comm: syz.4.3336 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.397254][T20121] Tainted: [L]=SOFTLOCKUP [ 830.397259][T20121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 830.397269][T20121] Call Trace: [ 830.397276][T20121] [ 830.397282][T20121] dump_stack_lvl+0x100/0x190 [ 830.397304][T20121] should_fail_ex.cold+0x5/0xa [ 830.397325][T20121] get_futex_key+0x1d2/0x1510 [ 830.397342][T20121] ? __pfx_get_futex_key+0x10/0x10 [ 830.397355][T20121] ? futex_hash+0x2ad/0x370 [ 830.397371][T20121] ? futex_hash+0x141/0x370 [ 830.397388][T20121] futex_wake+0xea/0x530 [ 830.397407][T20121] ? __pfx_futex_wait+0x10/0x10 [ 830.397427][T20121] ? __pfx_futex_wake+0x10/0x10 [ 830.397448][T20121] ? ksys_write+0x190/0x250 [ 830.397465][T20121] ? ksys_write+0x190/0x250 [ 830.397485][T20121] do_futex+0x32b/0x350 [ 830.397501][T20121] ? __pfx_do_futex+0x10/0x10 [ 830.397522][T20121] __x64_sys_futex+0x34f/0x4d0 [ 830.397541][T20121] ? __pfx___x64_sys_futex+0x10/0x10 [ 830.397560][T20121] ? rcu_is_watching+0x12/0xc0 [ 830.397580][T20121] do_syscall_64+0x10b/0xf80 [ 830.397599][T20121] ? clear_bhb_loop+0x40/0x90 [ 830.397617][T20121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.397632][T20121] RIP: 0033:0x7f487c99cdd9 [ 830.397646][T20121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.397661][T20121] RSP: 002b:00007f487d8950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 830.397676][T20121] RAX: ffffffffffffffda RBX: 00007f487cc15fa8 RCX: 00007f487c99cdd9 [ 830.397686][T20121] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f487cc15fac [ 830.397695][T20121] RBP: 00007f487cc15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 830.397705][T20121] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 830.397714][T20121] R13: 00007f487cc16038 R14: 00007ffdf7931a50 R15: 00007ffdf7931b38 [ 830.397734][T20121] [ 830.611171][T19950] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 830.694125][T19950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 830.735133][T19950] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 830.819932][T19950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 830.861620][T19950] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 830.911949][T19950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 830.963015][T19950] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 831.007866][T20138] [U] ^R [ 831.052730][T19950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 831.191128][T20145] FAULT_INJECTION: forcing a failure. [ 831.191128][T20145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 831.272987][T20145] CPU: 0 UID: 0 PID: 20145 Comm: syz.0.3342 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.273015][T20145] Tainted: [L]=SOFTLOCKUP [ 831.273020][T20145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 831.273030][T20145] Call Trace: [ 831.273036][T20145] [ 831.273043][T20145] dump_stack_lvl+0x100/0x190 [ 831.273066][T20145] should_fail_ex.cold+0x5/0xa [ 831.273084][T20145] ? prepare_alloc_pages+0x16d/0x5f0 [ 831.273104][T20145] should_fail_alloc_page+0xeb/0x140 [ 831.273124][T20145] prepare_alloc_pages+0x1f0/0x5f0 [ 831.273146][T20145] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 831.273171][T20145] ? vma_set_page_prot+0xb1/0x120 [ 831.273190][T20145] ? __mmap_region+0xc85/0x2da0 [ 831.273216][T20145] ? __pfx___mmap_region+0x10/0x10 [ 831.273238][T20145] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 831.273267][T20145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 831.273304][T20145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 831.273327][T20145] ? policy_nodemask+0xed/0x4f0 [ 831.273347][T20145] alloc_pages_mpol+0x1fb/0x540 [ 831.273366][T20145] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 831.273388][T20145] alloc_pages_noprof+0x1a/0x160 [ 831.273409][T20145] __pmd_alloc+0x3b/0x950 [ 831.273429][T20145] __handle_mm_fault+0xa9c/0x2a00 [ 831.273454][T20145] ? mt_find+0x45e/0x8e0 [ 831.273475][T20145] ? __pfx___handle_mm_fault+0x10/0x10 [ 831.273495][T20145] ? __pfx_mt_find+0x10/0x10 [ 831.273529][T20145] handle_mm_fault+0x36d/0xa20 [ 831.273554][T20145] __get_user_pages+0x1178/0x32a0 [ 831.273580][T20145] ? __pfx___get_user_pages+0x10/0x10 [ 831.273603][T20145] populate_vma_page_range+0x267/0x3f0 [ 831.273624][T20145] ? __pfx_populate_vma_page_range+0x10/0x10 [ 831.273643][T20145] ? __pfx_find_vma_intersection+0x10/0x10 [ 831.273661][T20145] ? do_mmap+0x93f/0x12f0 [ 831.273681][T20145] __mm_populate+0x107/0x3a0 [ 831.273700][T20145] ? __pfx___mm_populate+0x10/0x10 [ 831.273721][T20145] ? up_write+0x28c/0x4f0 [ 831.273739][T20145] vm_mmap_pgoff+0x37f/0x470 [ 831.273760][T20145] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 831.273780][T20145] ? do_futex+0x192/0x350 [ 831.273796][T20145] ? __pfx_do_futex+0x10/0x10 [ 831.273829][T20145] ksys_mmap_pgoff+0xe4/0x610 [ 831.273848][T20145] ? __x64_sys_futex+0x358/0x4d0 [ 831.273865][T20145] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 831.273883][T20145] ? xfd_validate_state+0x129/0x190 [ 831.273904][T20145] __x64_sys_mmap+0x125/0x190 [ 831.273923][T20145] do_syscall_64+0x10b/0xf80 [ 831.273941][T20145] ? clear_bhb_loop+0x40/0x90 [ 831.273959][T20145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.273975][T20145] RIP: 0033:0x7f7c49f9cdd9 [ 831.273989][T20145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.274003][T20145] RSP: 002b:00007f7c4aeab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 831.274018][T20145] RAX: ffffffffffffffda RBX: 00007f7c4a215fa0 RCX: 00007f7c49f9cdd9 [ 831.274029][T20145] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 831.274039][T20145] RBP: 00007f7c4a032d69 R08: 0000000000000002 R09: 0000000000008000 [ 831.274049][T20145] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 831.274058][T20145] R13: 00007f7c4a216038 R14: 00007f7c4a215fa0 R15: 00007ffcafb58868 [ 831.274078][T20145] [ 832.307147][T20178] kafs: addr_prefs: Invalid Command [ 832.383579][ T5286] 8021q: adding VLAN 0 to HW filter on device eth8 [ 832.545617][T19950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.595510][T20188] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 832.631923][T19950] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.675377][ T757] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.682529][ T757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.753813][ T757] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.760975][ T757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.866379][T19950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.375715][ T30] audit: type=1800 audit(1777902210.747:78): pid=20234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3357" name="features" dev="configfs" ino=78428 res=0 errno=0 [ 834.657762][T19950] veth0_vlan: entered promiscuous mode [ 834.715231][T19950] veth1_vlan: entered promiscuous mode [ 834.810516][T20250] [U] ^R [ 834.817549][T19950] veth0_macvtap: entered promiscuous mode [ 834.866000][T19950] veth1_macvtap: entered promiscuous mode [ 834.884102][ T30] audit: type=1107 audit(1777902211.250:79): pid=20243 uid=2 auid=4294967295 ses=4294967295 subj=unconfined msg='€' [ 834.938867][T19950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.995244][T19950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.058005][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.091882][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.150119][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.188787][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.389509][ T125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.449242][ T125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.548877][ T125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.589419][ T125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.205484][T20288] FAULT_INJECTION: forcing a failure. [ 836.205484][T20288] name failslab, interval 1, probability 0, space 0, times 0 [ 836.268140][T20288] CPU: 0 UID: 0 PID: 20288 Comm: syz.4.3369 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.268168][T20288] Tainted: [L]=SOFTLOCKUP [ 836.268174][T20288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 836.268184][T20288] Call Trace: [ 836.268190][T20288] [ 836.268197][T20288] dump_stack_lvl+0x100/0x190 [ 836.268218][T20288] should_fail_ex.cold+0x5/0xa [ 836.268238][T20288] ? udp_init_sock+0x24e/0x450 [ 836.268253][T20288] should_failslab+0xc2/0x120 [ 836.268270][T20288] __kmalloc_noprof+0xe0/0x850 [ 836.268293][T20288] ? lockdep_init_map_type+0x5c/0x250 [ 836.268312][T20288] udp_init_sock+0x24e/0x450 [ 836.268326][T20288] ? __pfx_udp_init_sock+0x10/0x10 [ 836.268342][T20288] inet_create+0x94c/0x1060 [ 836.268367][T20288] ? inet_create+0x94/0x1060 [ 836.268391][T20288] __sock_create+0x339/0x860 [ 836.268415][T20288] __sys_socket+0x14d/0x260 [ 836.268436][T20288] ? __pfx___sys_socket+0x10/0x10 [ 836.268456][T20288] ? ksys_write+0x1ac/0x250 [ 836.268477][T20288] __x64_sys_socket+0x72/0xb0 [ 836.268497][T20288] ? lockdep_hardirqs_on+0x78/0x100 [ 836.268517][T20288] do_syscall_64+0x10b/0xf80 [ 836.268535][T20288] ? clear_bhb_loop+0x40/0x90 [ 836.268562][T20288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.268578][T20288] RIP: 0033:0x7f487c99cdd9 [ 836.268592][T20288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.268607][T20288] RSP: 002b:00007f487d895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 836.268622][T20288] RAX: ffffffffffffffda RBX: 00007f487cc15fa0 RCX: 00007f487c99cdd9 [ 836.268632][T20288] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 836.268642][T20288] RBP: 00007f487ca32d69 R08: 0000000000000000 R09: 0000000000000000 [ 836.268651][T20288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.268660][T20288] R13: 00007f487cc16038 R14: 00007f487cc15fa0 R15: 00007ffdf7931b38 [ 836.268681][T20288] [ 836.979871][T20299] kafs: addr_prefs: Invalid Command [ 837.079965][ T5636] Bluetooth: hci1: ACL packet too small [ 837.488842][T20269] kexec: Could not allocate control_code_buffer [ 838.031225][T20336] [U] ^R [ 838.543941][T20340] net_ratelimit: 104 callbacks suppressed [ 838.543956][T20340] netlink: zone id is out of range [ 838.622729][T20340] netlink: zone id is out of range [ 838.635188][T20350] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3385'. [ 838.652622][T20340] netlink: zone id is out of range [ 838.693341][T20340] netlink: zone id is out of range [ 838.735219][T20340] netlink: zone id is out of range [ 838.770497][T20340] netlink: zone id is out of range [ 838.807113][T20340] netlink: zone id is out of range [ 838.841153][T20340] netlink: zone id is out of range [ 838.870535][T20340] netlink: zone id is out of range [ 838.904262][T20340] netlink: zone id is out of range [ 838.992344][T20352] FAULT_INJECTION: forcing a failure. [ 838.992344][T20352] name fail_futex, interval 1, probability 0, space 0, times 0 [ 839.070531][T20352] CPU: 0 UID: 0 PID: 20352 Comm: syz.5.3383 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.070557][T20352] Tainted: [L]=SOFTLOCKUP [ 839.070562][T20352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 839.070572][T20352] Call Trace: [ 839.070577][T20352] [ 839.070583][T20352] dump_stack_lvl+0x100/0x190 [ 839.070603][T20352] should_fail_ex.cold+0x5/0xa [ 839.070623][T20352] get_futex_key+0xf78/0x1510 [ 839.070639][T20352] ? __pfx_get_futex_key+0x10/0x10 [ 839.070653][T20352] ? lock_acquire+0x1b1/0x370 [ 839.070672][T20352] futex_wake+0xea/0x530 [ 839.070692][T20352] ? __pfx_futex_wake+0x10/0x10 [ 839.070711][T20352] ? exit_mm_release+0x19/0x30 [ 839.070737][T20352] do_futex+0x32b/0x350 [ 839.070753][T20352] ? __pfx_do_futex+0x10/0x10 [ 839.070768][T20352] ? __might_fault+0xc5/0x140 [ 839.070795][T20352] mm_release+0x24a/0x2f0 [ 839.070813][T20352] do_exit+0x707/0x2a60 [ 839.070838][T20352] ? __pfx_do_exit+0x10/0x10 [ 839.070863][T20352] ? do_raw_spin_lock+0x128/0x260 [ 839.070879][T20352] ? find_held_lock+0x2b/0x80 [ 839.070898][T20352] ? get_signal+0x7e0/0x21e0 [ 839.070918][T20352] do_group_exit+0xd5/0x2a0 [ 839.070942][T20352] get_signal+0x1ec7/0x21e0 [ 839.070964][T20352] ? ksys_write+0x190/0x250 [ 839.070983][T20352] ? __pfx_get_signal+0x10/0x10 [ 839.071002][T20352] ? do_futex+0x192/0x350 [ 839.071019][T20352] arch_do_signal_or_restart+0x91/0x770 [ 839.071043][T20352] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 839.071070][T20352] ? __pfx___x64_sys_futex+0x10/0x10 [ 839.071086][T20352] ? rcu_is_watching+0x12/0xc0 [ 839.071106][T20352] exit_to_user_mode_loop+0x86/0x4a0 [ 839.071119][T20352] ? do_syscall_64+0x519/0xf80 [ 839.071140][T20352] do_syscall_64+0x6f2/0xf80 [ 839.071171][T20352] ? clear_bhb_loop+0x40/0x90 [ 839.071190][T20352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.071205][T20352] RIP: 0033:0x7f924459cdd9 [ 839.071217][T20352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.071231][T20352] RSP: 002b:00007f924537c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 839.071245][T20352] RAX: fffffffffffffe00 RBX: 00007f9244816188 RCX: 00007f924459cdd9 [ 839.071255][T20352] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9244816188 [ 839.071263][T20352] RBP: 00007f9244816180 R08: 0000000000000000 R09: 0000000000000000 [ 839.071272][T20352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.071281][T20352] R13: 00007f9244816218 R14: 00007ffcb4c989a0 R15: 00007ffcb4c98a88 [ 839.071299][T20352] [ 839.952077][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 840.019285][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 840.061010][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 840.123402][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 840.142394][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 840.383937][T20378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3392'. [ 840.937839][T10834] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.956719][T20395] netlink: 'syz.5.3397': attribute type 1 has an invalid length. [ 841.225169][T10834] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.386416][T10834] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.617368][T10834] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.803567][T20412] kafs: addr_prefs: Invalid Command [ 842.256345][ T5629] Bluetooth: hci3: command tx timeout [ 842.338866][T10834] bridge_slave_1: left allmulticast mode [ 842.373350][T10834] bridge_slave_1: left promiscuous mode [ 842.411715][T10834] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.526971][T10834] bridge_slave_0: left allmulticast mode [ 842.553891][T10834] bridge_slave_0: left promiscuous mode [ 842.578910][T10834] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.273993][T10834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.335477][T10834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.381406][T10834] bond0 (unregistering): Released all slaves [ 843.514897][T10834] HfR: left promiscuous mode [ 843.662800][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9 [ 843.700597][T10834] ovs_: left promiscuous mode [ 843.819197][ T30] audit: type=1800 audit(1777902220.239:80): pid=20451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3405" name="features" dev="configfs" ino=79756 res=0 errno=0 [ 843.872614][T10834] tipc: Left network mode [ 844.216345][T20365] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.224777][T20467] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3408'. [ 844.259525][T20365] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.290866][T20365] bridge_slave_0: entered allmulticast mode [ 844.323463][ T5629] Bluetooth: hci3: command tx timeout [ 844.337915][T20365] bridge_slave_0: entered promiscuous mode [ 844.476665][T20365] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.518643][T20365] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.575513][T20365] bridge_slave_1: entered allmulticast mode [ 844.614527][T20365] bridge_slave_1: entered promiscuous mode [ 845.048678][T10834] hsr_slave_0: left promiscuous mode [ 845.066864][T20479] [U] ^R [ 845.086978][T10834] hsr_slave_1: left promiscuous mode [ 845.158684][T10834] veth1_macvtap: left promiscuous mode [ 845.196953][T10834] veth0_macvtap: left promiscuous mode [ 845.234247][T10834] veth1_vlan: left promiscuous mode [ 845.265926][T10834] veth0_vlan: left promiscuous mode [ 845.905960][T10834] team0 (unregistering): Port device team_slave_1 removed [ 845.968101][T10834] team0 (unregistering): Port device team_slave_0 removed [ 846.235569][T20365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.290200][T20365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.393835][ T5629] Bluetooth: hci3: command tx timeout [ 846.464650][T20365] team0: Port device team_slave_0 added [ 846.514212][T20365] team0: Port device team_slave_1 added [ 846.570003][T20491] kexec: Could not allocate control_code_buffer [ 846.651291][T20365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.706204][T20365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.881890][T20365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.957203][T20365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.014769][T20365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.181376][T20365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.302969][T20520] kAFS: unparsable volume name [ 847.420005][T20365] hsr_slave_0: entered promiscuous mode [ 847.454887][T20365] hsr_slave_1: entered promiscuous mode [ 847.504974][T20526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3417'. [ 848.460227][ T5629] Bluetooth: hci3: command tx timeout [ 849.083643][T20560] [U] ^R [ 850.089362][T20365] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 850.107349][T20365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 850.107931][T20365] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 850.120024][T20365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 850.140036][T20365] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 850.148355][T20365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 850.149127][T20365] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 850.159733][T20365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 850.770051][T20365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.874912][T20365] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.968874][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.976039][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.064189][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.071358][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.976868][T20623] [U] ^R [ 852.725205][T20365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.443298][T20365] veth0_vlan: entered promiscuous mode [ 853.482928][T20365] veth1_vlan: entered promiscuous mode [ 853.514355][ T30] audit: type=1800 audit(1777902230.002:81): pid=20652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3432" name="features" dev="configfs" ino=80679 res=0 errno=0 [ 853.584691][T20365] veth0_macvtap: entered promiscuous mode [ 853.615565][T20365] veth1_macvtap: entered promiscuous mode [ 853.668888][T20365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.712360][T20365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.769561][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.819128][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.994875][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.050016][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.389267][T20374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.451667][T20374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.565648][ T1346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.603393][ T1346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.815710][T20719] [U] ^R [ 856.289963][ T30] audit: type=1800 audit(1777902232.788:82): pid=20717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3441" name="features" dev="configfs" ino=81169 res=0 errno=0 [ 857.414990][T20759] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 858.114929][T20774] kafs: addr_prefs: Invalid Command [ 858.571884][T20781] kafs: addr_prefs: Invalid Command [ 858.829489][T20790] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3458'. [ 858.898384][T20790] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3458: iget: checksum invalid [ 858.967428][T20790] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 859.058292][T20790] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3458: iget: checksum invalid [ 859.115305][T20790] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 859.188825][T20790] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3458: iget: checksum invalid [ 859.266691][T20790] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 859.332009][T20802] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 859.345059][T20790] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3458: iget: checksum invalid [ 859.411916][T20790] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 859.474145][T20790] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 859.530655][T20790] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 860.175508][T20824] kafs: addr_prefs: Invalid Command [ 860.225668][ T30] audit: type=1107 audit(1777902236.739:83): pid=20820 uid=2 auid=4294967295 ses=4294967295 subj=unconfined msg='€' [ 861.198440][T20849] [U] ^R [ 861.645524][T20857] [U] ^R [ 862.362918][T20869] FAULT_INJECTION: forcing a failure. [ 862.362918][T20869] name failslab, interval 1, probability 0, space 0, times 0 [ 862.429484][T20869] CPU: 0 UID: 0 PID: 20869 Comm: syz.4.3479 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.429512][T20869] Tainted: [L]=SOFTLOCKUP [ 862.429518][T20869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 862.429528][T20869] Call Trace: [ 862.429535][T20869] [ 862.429542][T20869] dump_stack_lvl+0x100/0x190 [ 862.429564][T20869] should_fail_ex.cold+0x5/0xa [ 862.429585][T20869] ? tomoyo_encode2+0xfb/0x3c0 [ 862.429603][T20869] should_failslab+0xc2/0x120 [ 862.429621][T20869] __kmalloc_noprof+0xe0/0x850 [ 862.429644][T20869] ? d_absolute_path+0x136/0x1b0 [ 862.429662][T20869] tomoyo_encode2+0xfb/0x3c0 [ 862.429683][T20869] tomoyo_encode+0x29/0x50 [ 862.429700][T20869] tomoyo_realpath_from_path+0x18c/0x690 [ 862.429723][T20869] tomoyo_path_number_perm+0x23c/0x580 [ 862.429738][T20869] ? tomoyo_path_number_perm+0x22e/0x580 [ 862.429755][T20869] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 862.429778][T20869] ? do_raw_spin_lock+0x128/0x260 [ 862.429805][T20869] ? find_held_lock+0x2b/0x80 [ 862.429824][T20869] ? current_check_access_path+0x269/0x430 [ 862.429843][T20869] ? __pfx_current_check_access_path+0x10/0x10 [ 862.429860][T20869] ? do_raw_spin_unlock+0x145/0x1e0 [ 862.429879][T20869] ? simple_lookup+0x105/0x1d0 [ 862.429900][T20869] tomoyo_path_mknod+0x164/0x190 [ 862.429921][T20869] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 862.429943][T20869] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 862.429967][T20869] security_path_mknod+0x161/0x300 [ 862.429988][T20869] filename_mknodat+0x241/0x7f0 [ 862.430011][T20869] ? __pfx_filename_mknodat+0x10/0x10 [ 862.430030][T20869] ? strncpy_from_user+0x19d/0x2d0 [ 862.430048][T20869] ? do_getname+0x191/0x390 [ 862.430071][T20869] __x64_sys_mknod+0x8f/0xc0 [ 862.430091][T20869] do_syscall_64+0x10b/0xf80 [ 862.430111][T20869] ? clear_bhb_loop+0x40/0x90 [ 862.430129][T20869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.430154][T20869] RIP: 0033:0x7f428bd9cdd9 [ 862.430168][T20869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.430183][T20869] RSP: 002b:00007f428cc99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 862.430200][T20869] RAX: ffffffffffffffda RBX: 00007f428c015fa0 RCX: 00007f428bd9cdd9 [ 862.430210][T20869] RDX: 0000000000000044 RSI: 0000000000001001 RDI: 0000200000000040 [ 862.430220][T20869] RBP: 00007f428be32d69 R08: 0000000000000000 R09: 0000000000000000 [ 862.430230][T20869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.430242][T20869] R13: 00007f428c016038 R14: 00007f428c015fa0 R15: 00007ffe86ff7b48 [ 862.430262][T20869] [ 862.430290][T20869] ERROR: Out of memory at tomoyo_realpath_from_path. [ 863.173304][T20877] kafs: addr_prefs: Invalid Command [ 863.240479][ T30] audit: type=1107 audit(1777902239.756:84): pid=20873 uid=2 auid=4294967295 ses=4294967295 subj=unconfined msg='€' [ 863.322793][T20887] [U] ^R [ 865.472526][T20939] kafs: addr_prefs: Invalid Command [ 865.493252][ T30] audit: type=1800 audit(1777902242.038:85): pid=20925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3496" name="features" dev="configfs" ino=82038 res=0 errno=0 [ 865.591749][ T30] audit: type=1107 audit(1777902242.098:86): pid=20936 uid=2 auid=4294967295 ses=4294967295 subj=unconfined msg='€' [ 865.664231][ T30] audit: type=1800 audit(1777902242.108:87): pid=20934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3498" name="features" dev="configfs" ino=82038 res=0 errno=0 [ 865.996421][T20953] FAULT_INJECTION: forcing a failure. [ 865.996421][T20953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 866.091251][T20953] CPU: 0 UID: 0 PID: 20953 Comm: syz.4.3501 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.091278][T20953] Tainted: [L]=SOFTLOCKUP [ 866.091284][T20953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 866.091294][T20953] Call Trace: [ 866.091300][T20953] [ 866.091307][T20953] dump_stack_lvl+0x100/0x190 [ 866.091330][T20953] should_fail_ex.cold+0x5/0xa [ 866.091348][T20953] ? prepare_alloc_pages+0x16d/0x5f0 [ 866.091371][T20953] should_fail_alloc_page+0xeb/0x140 [ 866.091391][T20953] prepare_alloc_pages+0x1f0/0x5f0 [ 866.091414][T20953] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 866.091439][T20953] ? lru_gen_add_folio+0x20f/0x13d0 [ 866.091458][T20953] ? folios_put_refs+0x716/0xa90 [ 866.091476][T20953] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 866.091503][T20953] ? __lock_acquire+0x4a5/0x2630 [ 866.091517][T20953] ? __lock_acquire+0x4a5/0x2630 [ 866.091531][T20953] ? css_rstat_updated+0x1ce/0x5a0 [ 866.091559][T20953] ? lock_acquire+0x1b1/0x370 [ 866.091573][T20953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 866.091595][T20953] ? policy_nodemask+0xed/0x4f0 [ 866.091614][T20953] alloc_pages_mpol+0x1fb/0x540 [ 866.091633][T20953] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 866.091652][T20953] ? __lock_acquire+0x4a5/0x2630 [ 866.091668][T20953] folio_alloc_mpol_noprof+0x36/0x260 [ 866.091689][T20953] vma_alloc_folio_noprof+0xed/0x1d0 [ 866.091708][T20953] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 866.091734][T20953] do_anonymous_page+0xb46/0x2050 [ 866.091764][T20953] ? rcu_read_unlock+0x2d/0xb0 [ 866.091793][T20953] __handle_mm_fault+0x1d2c/0x2a00 [ 866.091818][T20953] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 866.091837][T20953] ? __pfx___handle_mm_fault+0x10/0x10 [ 866.091861][T20953] ? pte_offset_map_lock+0x174/0x320 [ 866.091879][T20953] ? find_held_lock+0x2b/0x80 [ 866.091904][T20953] ? follow_page_pte+0x4d0/0x13f0 [ 866.091925][T20953] handle_mm_fault+0x36d/0xa20 [ 866.091950][T20953] __get_user_pages+0x1178/0x32a0 [ 866.091976][T20953] ? __pfx___get_user_pages+0x10/0x10 [ 866.091999][T20953] populate_vma_page_range+0x267/0x3f0 [ 866.092020][T20953] ? __pfx_populate_vma_page_range+0x10/0x10 [ 866.092039][T20953] ? __pfx_find_vma_intersection+0x10/0x10 [ 866.092057][T20953] ? do_mmap+0x93f/0x12f0 [ 866.092077][T20953] __mm_populate+0x107/0x3a0 [ 866.092097][T20953] ? __pfx___mm_populate+0x10/0x10 [ 866.092117][T20953] ? up_write+0x28c/0x4f0 [ 866.092136][T20953] vm_mmap_pgoff+0x37f/0x470 [ 866.092156][T20953] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 866.092176][T20953] ? do_futex+0x192/0x350 [ 866.092192][T20953] ? __pfx_do_futex+0x10/0x10 [ 866.092212][T20953] ksys_mmap_pgoff+0xe4/0x610 [ 866.092230][T20953] ? __x64_sys_futex+0x358/0x4d0 [ 866.092246][T20953] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 866.092264][T20953] ? xfd_validate_state+0x129/0x190 [ 866.092284][T20953] __x64_sys_mmap+0x125/0x190 [ 866.092303][T20953] do_syscall_64+0x10b/0xf80 [ 866.092322][T20953] ? clear_bhb_loop+0x40/0x90 [ 866.092341][T20953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.092358][T20953] RIP: 0033:0x7f428bd9cdd9 [ 866.092371][T20953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.092386][T20953] RSP: 002b:00007f428cc99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 866.092402][T20953] RAX: ffffffffffffffda RBX: 00007f428c015fa0 RCX: 00007f428bd9cdd9 [ 866.092413][T20953] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 866.092422][T20953] RBP: 00007f428be32d69 R08: 0000000000000002 R09: 0000000000000000 [ 866.092431][T20953] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 866.092441][T20953] R13: 00007f428c016038 R14: 00007f428c015fa0 R15: 00007ffe86ff7b48 [ 866.092461][T20953] [ 868.031438][T20991] Console: switching to colour VGA+ 80x25 [ 868.274693][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.274734][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.424875][T20997] ================================================================== [ 868.424892][T20997] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 868.424917][T20997] Read of size 26 at addr ffff888032daf2ea by task syz.0.3503/20997 [ 868.424931][T20997] [ 868.424942][T20997] CPU: 0 UID: 0 PID: 20997 Comm: syz.0.3503 Tainted: G L syzkaller #0 PREEMPT(full) [ 868.424963][T20997] Tainted: [L]=SOFTLOCKUP [ 868.424969][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 868.424979][T20997] Call Trace: [ 868.424985][T20997] [ 868.424992][T20997] dump_stack_lvl+0x100/0x190 [ 868.425008][T20997] print_report+0x13d/0x4b0 [ 868.425031][T20997] ? __virt_addr_valid+0x239/0x430 [ 868.425055][T20997] ? fbcon_prepare_logo+0x94e/0xc60 [ 868.425075][T20997] kasan_report+0xdf/0x1d0 [ 868.425092][T20997] ? fbcon_prepare_logo+0x94e/0xc60 [ 868.425110][T20997] kasan_check_range+0x10f/0x1e0 [ 868.425129][T20997] __asan_memcpy+0x23/0x60 [ 868.425152][T20997] fbcon_prepare_logo+0x94e/0xc60 [ 868.425171][T20997] fbcon_init+0x1065/0x1830 [ 868.425188][T20997] visual_init+0x320/0x620 [ 868.425206][T20997] do_bind_con_driver.isra.0+0x636/0x9c0 [ 868.425228][T20997] store_bind+0x609/0x730 [ 868.425249][T20997] ? __pfx_store_bind+0x10/0x10 [ 868.425267][T20997] dev_attr_store+0x58/0x80 [ 868.425285][T20997] ? __pfx_dev_attr_store+0x10/0x10 [ 868.425302][T20997] sysfs_kf_write+0xf2/0x150 [ 868.425326][T20997] kernfs_fop_write_iter+0x3e0/0x5f0 [ 868.425346][T20997] ? __pfx_sysfs_kf_write+0x10/0x10 [ 868.425370][T20997] vfs_write+0x6ac/0x1070 [ 868.425386][T20997] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 868.425407][T20997] ? __pfx_vfs_write+0x10/0x10 [ 868.425428][T20997] ksys_write+0x12a/0x250 [ 868.425444][T20997] ? __pfx_ksys_write+0x10/0x10 [ 868.425460][T20997] ? rcu_is_watching+0x12/0xc0 [ 868.425479][T20997] do_syscall_64+0x10b/0xf80 [ 868.425497][T20997] ? clear_bhb_loop+0x40/0x90 [ 868.425514][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.425530][T20997] RIP: 0033:0x7f7c49f9cdd9 [ 868.425542][T20997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.425558][T20997] RSP: 002b:00007f7c4ae69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.425579][T20997] RAX: ffffffffffffffda RBX: 00007f7c4a216180 RCX: 00007f7c49f9cdd9 [ 868.425591][T20997] RDX: 000000000008083a RSI: 00002000000000c0 RDI: 0000000000000002 [ 868.425601][T20997] RBP: 00007f7c4a032d69 R08: 0000000000000000 R09: 0000000000000000 [ 868.425611][T20997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.425621][T20997] R13: 00007f7c4a216218 R14: 00007f7c4a216180 R15: 00007ffcafb58868 [ 868.425636][T20997] [ 868.425642][T20997] [ 868.425646][T20997] Allocated by task 19950: [ 868.425659][T20997] kasan_save_stack+0x30/0x50 [ 868.425673][T20997] kasan_save_track+0x14/0x30 [ 868.425687][T20997] __kasan_kmalloc+0xaa/0xb0 [ 868.425700][T20997] __kmalloc_node_track_caller_noprof+0x304/0x850 [ 868.425715][T20997] kmemdup_noprof+0x29/0x60 [ 868.425729][T20997] neigh_parms_alloc+0x85/0x5e0 [ 868.425745][T20997] inetdev_init+0x13c/0x570 [ 868.425761][T20997] inetdev_event+0x7fa/0x17f0 [ 868.425778][T20997] notifier_call_chain+0x99/0x400 [ 868.425800][T20997] call_netdevice_notifiers_info+0xbe/0x110 [ 868.425817][T20997] register_netdevice+0x18fe/0x24b0 [ 868.425832][T20997] veth_newlink+0x316/0xa00 [ 868.425846][T20997] rtnl_newlink+0x1499/0x2380 [ 868.425861][T20997] rtnetlink_rcv_msg+0x95e/0xe90 [ 868.425876][T20997] netlink_rcv_skb+0x159/0x420 [ 868.425894][T20997] netlink_unicast+0x585/0x850 [ 868.425912][T20997] netlink_sendmsg+0x8b0/0xda0 [ 868.425929][T20997] __sys_sendto+0x468/0x4b0 [ 868.425950][T20997] __x64_sys_sendto+0xe0/0x1c0 [ 868.425963][T20997] do_syscall_64+0x10b/0xf80 [ 868.425980][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.425994][T20997] [ 868.425998][T20997] The buggy address belongs to the object at ffff888032daf200 [ 868.425998][T20997] which belongs to the cache kmalloc-192 of size 192 [ 868.426010][T20997] The buggy address is located 74 bytes to the right of [ 868.426010][T20997] allocated 160-byte region [ffff888032daf200, ffff888032daf2a0) [ 868.426026][T20997] [ 868.426033][T20997] The buggy address belongs to the physical page: [ 868.426040][T20997] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32daf [ 868.426054][T20997] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 868.426069][T20997] page_type: f5(slab) [ 868.426083][T20997] raw: 00fff00000000000 ffff88813fe2e3c0 dead000000000100 dead000000000122 [ 868.426100][T20997] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 868.426109][T20997] page dumped because: kasan: bad access detected [ 868.426122][T20997] page_owner tracks the page as allocated [ 868.426127][T20997] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18315207522, free_ts 18286590204 [ 868.426154][T20997] post_alloc_hook+0x153/0x170 [ 868.426175][T20997] get_page_from_freelist+0x11a6/0x33b0 [ 868.426197][T20997] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 868.426220][T20997] new_slab+0xa6/0x6c0 [ 868.426238][T20997] refill_objects+0x277/0x420 [ 868.426258][T20997] __pcs_replace_empty_main+0x375/0x650 [ 868.426279][T20997] __kmalloc_noprof+0x688/0x850 [ 868.426300][T20997] snd_ctl_new+0x56/0x1a0 [ 868.426315][T20997] snd_ctl_new1+0x142/0x6d0 [ 868.426329][T20997] loopback_probe+0x672/0x11a0 [ 868.426343][T20997] platform_probe+0x106/0x1d0 [ 868.426363][T20997] really_probe+0x241/0xa60 [ 868.426376][T20997] __driver_probe_device+0x22e/0x480 [ 868.426390][T20997] driver_probe_device+0x4c/0x1b0 [ 868.426403][T20997] __device_attach_driver+0x1df/0x340 [ 868.426418][T20997] bus_for_each_drv+0x159/0x1e0 [ 868.426437][T20997] page last free pid 24 tgid 24 stack trace: [ 868.426445][T20997] __free_frozen_pages+0x747/0x1040 [ 868.426463][T20997] vfree+0x15f/0x8d0 [ 868.426479][T20997] delayed_vfree_work+0x56/0x80 [ 868.426495][T20997] process_one_work+0xa0e/0x1980 [ 868.426509][T20997] worker_thread+0x5ef/0xe50 [ 868.426522][T20997] kthread+0x370/0x450 [ 868.426534][T20997] ret_from_fork+0x72b/0xd50 [ 868.426549][T20997] ret_from_fork_asm+0x1a/0x30 [ 868.426567][T20997] [ 868.426571][T20997] Memory state around the buggy address: [ 868.426585][T20997] ffff888032daf180: 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc fc [ 868.426596][T20997] ffff888032daf200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 868.426607][T20997] >ffff888032daf280: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 868.426616][T20997] ^ [ 868.426625][T20997] ffff888032daf300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 868.426637][T20997] ffff888032daf380: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc [ 868.426645][T20997] ================================================================== [ 868.463561][T20997] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 868.463585][T20997] CPU: 0 UID: 0 PID: 20997 Comm: syz.0.3503 Tainted: G L syzkaller #0 PREEMPT(full) [ 868.463609][T20997] Tainted: [L]=SOFTLOCKUP [ 868.463615][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 868.463625][T20997] Call Trace: [ 868.463631][T20997] [ 868.463638][T20997] dump_stack_lvl+0x100/0x190 [ 868.463658][T20997] vpanic+0x552/0x970 [ 868.463674][T20997] ? __pfx_vpanic+0x10/0x10 [ 868.463690][T20997] ? fbcon_prepare_logo+0x94e/0xc60 [ 868.463707][T20997] panic+0xd1/0xe0 [ 868.463721][T20997] ? __pfx_panic+0x10/0x10 [ 868.463735][T20997] ? fbcon_prepare_logo+0x94e/0xc60 [ 868.463750][T20997] ? preempt_schedule_common+0x42/0xc0 [ 868.463772][T20997] check_panic_on_warn.cold+0x19/0x34 [ 868.463788][T20997] end_report.part.0+0x3a/0x90 [ 868.463808][T20997] kasan_report.cold+0xe/0x18 [ 868.463830][T20997] ? fbcon_prepare_logo+0x94e/0xc60 [ 868.463848][T20997] kasan_check_range+0x10f/0x1e0 [ 868.463867][T20997] __asan_memcpy+0x23/0x60 [ 868.463889][T20997] fbcon_prepare_logo+0x94e/0xc60 [ 868.463908][T20997] fbcon_init+0x1065/0x1830 [ 868.463926][T20997] visual_init+0x320/0x620 [ 868.463943][T20997] do_bind_con_driver.isra.0+0x636/0x9c0 [ 868.463966][T20997] store_bind+0x609/0x730 [ 868.463987][T20997] ? __pfx_store_bind+0x10/0x10 [ 868.464007][T20997] dev_attr_store+0x58/0x80 [ 868.464024][T20997] ? __pfx_dev_attr_store+0x10/0x10 [ 868.464041][T20997] sysfs_kf_write+0xf2/0x150 [ 868.464065][T20997] kernfs_fop_write_iter+0x3e0/0x5f0 [ 868.464085][T20997] ? __pfx_sysfs_kf_write+0x10/0x10 [ 868.464108][T20997] vfs_write+0x6ac/0x1070 [ 868.464125][T20997] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 868.464146][T20997] ? __pfx_vfs_write+0x10/0x10 [ 868.464168][T20997] ksys_write+0x12a/0x250 [ 868.464184][T20997] ? __pfx_ksys_write+0x10/0x10 [ 868.464201][T20997] ? rcu_is_watching+0x12/0xc0 [ 868.464220][T20997] do_syscall_64+0x10b/0xf80 [ 868.464238][T20997] ? clear_bhb_loop+0x40/0x90 [ 868.464255][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.464270][T20997] RIP: 0033:0x7f7c49f9cdd9 [ 868.464283][T20997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.464298][T20997] RSP: 002b:00007f7c4ae69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.464314][T20997] RAX: ffffffffffffffda RBX: 00007f7c4a216180 RCX: 00007f7c49f9cdd9 [ 868.464325][T20997] RDX: 000000000008083a RSI: 00002000000000c0 RDI: 0000000000000002 [ 868.464335][T20997] RBP: 00007f7c4a032d69 R08: 0000000000000000 R09: 0000000000000000 [ 868.464346][T20997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.464355][T20997] R13: 00007f7c4a216218 R14: 00007f7c4a216180 R15: 00007ffcafb58868 [ 868.464370][T20997] [ 868.464439][T20997] Kernel Offset: disabled