last executing test programs: 4m14.963258217s ago: executing program 2 (id=2865): setrlimit$auto(0x6, &(0x7f0000000080)={0x6, 0x7}) socket(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 4m14.670331799s ago: executing program 2 (id=2867): openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r1, 0xae03, 0xd0) socket$nl_generic(0x10, 0x3, 0x10) setpriority$auto(0x2, 0x0, 0x80000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x2, 0x0) unshare$auto(0x40000080) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) ioctl$auto(0x3, 0x89ed, 0x74) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto(0x3, 0x40605346, 0x38) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x10, 0x2, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) 4m12.329989836s ago: executing program 2 (id=2882): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = fcntl$auto_F_DUPFD_CLOEXEC(r0, 0x406, r0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0xff800000, 0x144, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x400000008, 0x20000000000000da, 0x9b76, 0xffffffffffffffff, 0x20008000) read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x24, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0x2, 0x7, 0x6, 0x7f, 0x3ff, 0x2, 0x7, 0x1004, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x4, 0xfffffffc, [0x2, 0x0, 0x10000000000200, 0x4000401, 0x0, 0x7, 0x9, 0xffffffff80000000, 0x0, 0x42, 0x1, 0x3, 0x0, 0x80000000000000, 0x8, 0x4, 0x400, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x1, 0x668, 0x0, 0x9, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x1000000000000000, 0xfffffffffffffffc, 0x83, 0x400, 0x6, 0x0, 0x0, 0xb457195, 0x6, 0xffffffffffffffff, 0x2]}, 0x1fe, 0xd) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2200, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4000, 0x0) close_range$auto(0x0, 0x5, 0x0) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101080, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r4, 0x5420, 0x0) socket(0x1d, 0x2, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/45, 0x2d) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/fb0\x00', 0x8502, 0x0) ioctl$auto_FBIO_CURSOR(r5, 0xc0684608, 0x0) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd01, &(0x7f00000001c0)) 4m11.889669529s ago: executing program 2 (id=2884): r0 = socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000001240), 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(r0, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) getsockopt$auto_SO_PASSCRED(r0, 0x6, 0x10, &(0x7f0000000140)='./cgroup/cgroup.threads\x00', &(0x7f0000000180)=0x7ff) (async) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)="6c5c5321237032f416f982d90e75a36b4c1425b7cbb9e35dc73edc4381483c045b5b22942b191240f50e88a29729a791ba3404525bfe57e54557defb98c96d0c0c0e1d15dda7341022e60c000c0c32364876faf92daf70d35b0c944ecb5edc9305a3bf3a142a1a4bc96377e34df955abe6532b1253c6c0d785e7a7") (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC=r5], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) socket(0x10, 0x2, 0x0) (async) open(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, r7, 0xf25, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYBLOB='T'], 0x1ac}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 4m10.596473757s ago: executing program 2 (id=2887): unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x400) lstat$auto(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ppoll$auto(0x0, 0x2, &(0x7f0000000040)={0x2, 0xfffffffffffffff8}, 0x0, 0x8) mmap$auto(0x7, 0x100000008, 0x0, 0xebf, 0xfffffffffffffffa, 0x8000) madvise$auto(0xfffdfffffffffffc, 0x6, 0x17) setsockopt$auto(r0, 0x1, 0xd, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x9) listen$auto(0x3, 0x81) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/block/nullb0/queue/rq_affinity\x00', 0x4a001, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x155802, 0x0) ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)="94fc32998660d954e548b4d028ef9b7b6d2ad00edb70dfa1609324dd8bfb66e2a042ad6ee55e4c1d568e388453721127144217d99bb3e0e92479fb24f5ee578556420d86fd5909938dd7cafc2e92c7d7eba4b2e5fa68feb3ca69bddd96f88b6c8b96") write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)="12", 0x1) prctl$auto(0xa3a, 0x1, 0x0, 0x8, 0x3) madvise$auto(0x6, 0xffffffffffff0003, 0x8001) unshare$auto(0x4) personality$auto(0xc) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x40}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8b4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc010) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd7\x00', 0x40900, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) keyctl$auto(0x4, 0xffffffffffffffff, r4, 0x4, 0x7a) memfd_create$auto(0x0, 0x9) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)='1', 0x1) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 4m9.544662585s ago: executing program 2 (id=2894): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = getsockopt$auto(r0, 0x0, 0x80000484, 0x0, 0x0) r2 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @private=0xa010101}, 0x2006a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, 0x0, 0x84800, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, &(0x7f0000000040)=0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x2480, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) r6 = pipe$auto(&(0x7f0000000080)=r2) pread64$auto(r6, 0x0, 0x2, 0x104) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$auto_IEEE802154_LIST_IFACE(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="001aec12d0ad363f4b46ec2782a5ef8246d11630e94210f44196ec19798bae893f595420ae1ff47afebc766269cba0a31730e3ad41310000c305d3707c79dab8432e9dd9558d308619b76a19c0606a83fa157e5771227041c811b8f6531ea48da15d2b269ff277de063ce1e4f6620b9f1f907e426ef2a41789583827b283bea71c9fd3c30f0d51c034291567faf34d8c9902c1a1b62692086bf3a924cfe6f3b281131a206e5c7681db1f3499028aab9de3f946b5b94a8d3c2d44f0978135832ab0b6b2a9e7d63a4db0b69c818343fbfd7debbc21bd03213afe00", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf251f00000005001900000000000c000c00018000000000000006000e00b00a0000050011000200000008000200", @ANYRES32=r5, @ANYBLOB="0500170001000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) 3m54.378159266s ago: executing program 32 (id=2894): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = getsockopt$auto(r0, 0x0, 0x80000484, 0x0, 0x0) r2 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @private=0xa010101}, 0x2006a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, 0x0, 0x84800, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, &(0x7f0000000040)=0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x2480, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) r6 = pipe$auto(&(0x7f0000000080)=r2) pread64$auto(r6, 0x0, 0x2, 0x104) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$auto_IEEE802154_LIST_IFACE(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="001aec12d0ad363f4b46ec2782a5ef8246d11630e94210f44196ec19798bae893f595420ae1ff47afebc766269cba0a31730e3ad41310000c305d3707c79dab8432e9dd9558d308619b76a19c0606a83fa157e5771227041c811b8f6531ea48da15d2b269ff277de063ce1e4f6620b9f1f907e426ef2a41789583827b283bea71c9fd3c30f0d51c034291567faf34d8c9902c1a1b62692086bf3a924cfe6f3b281131a206e5c7681db1f3499028aab9de3f946b5b94a8d3c2d44f0978135832ab0b6b2a9e7d63a4db0b69c818343fbfd7debbc21bd03213afe00", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf251f00000005001900000000000c000c00018000000000000006000e00b00a0000050011000200000008000200", @ANYRES32=r5, @ANYBLOB="0500170001000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) 5.879106469s ago: executing program 0 (id=3758): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x7ffe) (async) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r1 = socket(0x10, 0x2, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x151401, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x10, &(0x7f0000000000)={0x0, 0xd6c6}, 0x2, 0x0, 0xe, 0x4}, 0x3}, 0x200, 0xb07e) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) r2 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) (async) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x20100, 0x0) setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8) (async) socket(0x10, 0x2, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, 0x8, 0x0) (async) r4 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) (async) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="18000000", @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) (async) write$auto(r4, &(0x7f0000000000)='-\x00', 0x30) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES8=r0], 0x1ac}}, 0x40000) 5.708077537s ago: executing program 1 (id=3759): mmap$auto(0x0, 0x2020005, 0x3, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x20000001005}, 0x1, &(0x7f0000000040)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) io_uring_setup$auto(0x59, 0x0) memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) ioctl$auto(0x3, 0xc0205647, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) 5.55745755s ago: executing program 0 (id=3762): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) cachestat$auto(r0, 0x0, 0x0, 0x5e43d222) mmap$auto(0x0, 0x400008, 0x8001, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi22\x00', 0x1, 0x0) ioctl$auto(0x3, 0xc058565d, r1) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon36\x00', 0x40000, 0x0) 5.329247427s ago: executing program 1 (id=3764): setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) socket(0xa, 0x2, 0x88) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ptype\x00', 0x101800, 0x0) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) bpf$auto(0x15, 0x0, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x147) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') sysfs$auto(0x2, 0x2000000000040, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x3ff, 0x2, 0x8000) move_pages$auto(0x1, 0x20008, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0xa, 0x801, 0x84) setsockopt$auto(r3, 0x10000000084, 0x0, 0x0, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x440, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1) sendmsg$auto_NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000580)=ANY=[@ANYBLOB='0 \x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x11e0}, 0x1, 0x0, 0x0, 0x4000800}, 0x840) r5 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r6, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f000000a580)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000abd7000fddbdffb56eec97beb3b694100002008009a0001040000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008080) pread64$auto(r5, 0x0, 0x4, 0x6) 4.263487125s ago: executing program 0 (id=3767): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x6}, 0x8) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) ioctl$auto_SNDRV_PCM_IOCTL_READI_FRAMES2(r0, 0x80184151, &(0x7f00000002c0)={0xd, &(0x7f00000001c0)="064c693c9a09fda3c16acac80b8287878711e7697e834a358fb17bc3f08170dd99da7a9db2485c3b76d188833c846de08f2558b4ed31f7ad2e932055147971831ae5d61d346ef473924bb7c54fd28760e94435c36ffb67488c4ffd2cf185fc9ee03ce9d841ec", 0x10001}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000000080)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20048811) r2 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x1242, 0x0) lseek$auto(r3, 0x4, 0x0) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop9/queue/discard_zeroes_data\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000008c0)=""/61, 0x3d) read$auto(r4, 0x0, 0x39b8) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x0, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8003) r6 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0x169a02, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x2, 0x3, 0xe, 0x1, 0x2, 0x9, &(0x7f0000000100)="335afa2d5ac5660ee23dc2c00aa4ad362fc2"}) write$auto_nsim_psample_enable_fops_psample(r6, &(0x7f00000005c0)='Y', 0x1) socket(0x23, 0x0, 0xffffffff) 4.186496489s ago: executing program 1 (id=3768): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2b, 0x1, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1a, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/bNumEndpoints\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) seccomp$auto(0x3, 0x0, 0x0) munmap$auto(0x1, 0x9) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) 3.506398085s ago: executing program 0 (id=3771): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, r1, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x200408d4) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) ioctl$auto(r6, 0xab03, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) write$auto(r8, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) sendmsg$auto_SMC_PNETID_ADD(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_IBNAME={0xb, 0x3, '\'[\':]%\x00'}, @SMC_PNETID_NAME={0x7, 0x1, '\xf8/\x00'}, @SMC_PNETID_ETHNAME={0x6, 0x2, '$\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x801) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0) r9 = epoll_create$auto(0x3e) epoll_ctl$auto(r9, 0x1, r0, 0x0) r10 = socket(0x2, 0x3, 0x100) getsockopt$auto_SO_NO_CHECK(r10, 0x0, 0xb, &(0x7f0000000040)='/dev/usbmon7\x00', &(0x7f0000000080)=0x2) write$auto(0x3, 0x0, 0xffd8) 3.378144375s ago: executing program 3 (id=3772): sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000001880)=ANY=[@ANYBLOB="00190000", @ANYRESHEX, @ANYBLOB="000226bd7000fedbdf2583000000ef0833000197a4668edc6b1c90f38719f47a0b65ac0ccc0417cfd66b2d8ba16246feab540a49ac6034e869bb95e26e4368a63e315ab11b6e60632557b6194edbb032678a5d8c1e678b787e4d6b7395248e3b5344ffebe08ae75baf8acb5af68331a144c3ce19c4391cc5397f79ca1e09e00a58abe5729fa0348f5d638efdb3248c005acabc370bfebf45de70a682d1133ac3f223452c3dd1233423f91a941619bbb31597e02f9d582283b326383ce71230001ced5ae84f50ba618cd7aad310fa70e26c43eca95696253a26cecc6401a4e9fd1a8c2c0f572de1a55617087fa6404274a89aa64e681918d9e2243653a8a093670beb5566d66704c931c0d6ac55b5fc606efb50024ef2d92d243d5e6c791a2bfce81313768189f34580b0ed75428b1c9961e86c360dc7ffcf2fb59e8ff41f63ced58b8698c62d5ae4a0da8dd55bb84efef58a62901c6d81968aad132765cd6291d1f8fbfbaec8d27b9f0ff2db945f347cc783457d3c024088a6855e9ad1afdeab75d9b97802e9a6debb7f0d27b6880dc1914c406886ce3692378b42b943892b0679e8b5987962bfa3a615a103a070b71d13f55638267eb7f8087e872d89419243928ac70a9b1db25d1805a480821590eabea9c27fa6ca08a33ee0565946c6e5ed11da5f2b4f4625b6861110e659b11ba70dc56ea69a20abce33e86e37c41adec82683a89d8254f83c6b3f707849bd49fe0cb995c26a5dc579901eb8d1459b5301a3b8c0ba2c4a64e9a829d4766b1c14c7f475939bed96a50957957030258f7271fe8680044c6691c0235e39a8d8343e04731b628c0e91162d5f0fd61d094c1c174431c7c77cae1d5a19a82871f7279c5c70d28fa0613da53d9830037af588da3fe17390118153d216f4d311fffd17ad8aff802266d837d10f9a51617b6a1f2e4cf3ebfe5bd7e6325ceaeea49195f3bb9390d775d30004db3ef0128837272eac0a6113e037c20dda6683d4d87eb1bae3d60660a38c44b7e2ecdd92d0c38a6220e996a31c621fda596606ccdd097ed2c73fb7cd116b2a0f8c04272d94e1fa93750dcb53f2ab77be55cec74d7d845180cef35f07b246f6a4d7ac63a47b578a7abe66ec67a1e51224be52503bf1c8ccb67ec0448f62175151858ab8758dd61a54192f542184eac9cf3bfc205f15167067041b0ba4d5e91e644073e55ab1e2486b9b49f0c88139f3125a47ed35bb2bd205ac8b13953415ba56db41977815a18b2324857083491129558225ed86a6450511223b284eaa9dd9802201cc9263061f60e682158619e994331c71e92726bc34b91d23d6557c1bc9597dbd09fd150a5ef8858c8b8bd2249cd2807b4ee3ed1d965bab738da7901c3a039680ece26fa92d906559b0bfd8a675eb969e6beaba864b9824b136d70ca230566d91f249862093aad840286d668bceeab2321ac8303552b1b08802228b182a2eb75d4c4f7b07c6e3c3607d27124e63a801f0b20724fe6d1b657c10afe648b01bc7fc33a695378eb1a48f9aa4bbb15d77080b9bc85ce78736fc27f4c2c71f0b749d6fe58f97d9314e2f2a9fb441573e16a1acb255d2fb9f926aa802858aec97b88ceb66a50701c726064f44d450605f1e3f846a6cef80bea0eb18fb031e36a7ce5edabb5eb6cbd5788320c2a852f6046a414660053b3c3a5e65599e7812277aaa607b80c0452f0850d162559d1df9c9e7b39765316e0d31fb54f55f1b2b3361411019ab515de3a5709b8de71db811700c198a54fde26cc1da1a65d9d225b1dd46fb30f0cd6625a679e4179d3432e38963b2578096da1c144e3d69179e406790a928a245a3ff5864febb129ce3594e2604953b3225cd2cc1aabacac021b357054695de8382caaf618d05fb202c1206220981cec911b0130a56f15c5dac10e6c1e97b2f3930aa567afc43c77be66e3fde604364bc6314e85aff428f3252fa37fc16c304502eac5c765df9570fa46a9d11550bdc26576dd3b845e64bdfa6eba1b2e5a8f7faf8420ad5d7cf3f397feee705e3cb7f3ad0752633d9948ec49792705b45de26a012e784a7d6a755211fb1053ad5f24eb13ceb1735b5dbe4f789b3d74fa5284b0f7bd3fa315680c578a82c5589e467fe9f529763f5c7acc3dc91bb9192920ee61db70302cda75d2febf3bcb9e4f9b8e45816899adec39dbb6d194ffc3c0620bb5496a1391499dbc9f5e9c2dc3a1025768532c096b40f7249b92d009451bd85811da1cefabc27036a"], 0x1900}}, 0x20000005) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0) sendfile$auto(r0, r0, 0x0, 0x43) socket(0x10, 0x2, 0x14) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x4080) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x48102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) 2.875894452s ago: executing program 3 (id=3774): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x1f, 0xfffffffffffffffa, 0x7ffc) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x7, &(0x7f0000000040)="023b8829afee0f9e18cde2ff58df8494cbbde0acb819dfe8") socket(0x10, 0x2, 0x4) socket(0x2, 0x3, 0x4) ioperm$auto(0x3, 0xe, 0x2000000000000149) clock_getres$auto(0x8, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000540)=""/150, 0x96) write$auto(r0, &(0x7f0000000380)=' U\x15\xa2t\xe0\x1b\xb0\xff\xe8\x91@\x88\n\x92\xf1rL\x9c\rg-\xcc]\x0e\x06\x03\a0k\x85&YS\xb0;\xfd\xd6\x0eH\xb3 \xc2`\xbc\xec\f\xd0\x97\x19\xa6Y\xb0\x15Z/\xe2\xc3\x8e\xc1\xa7v\xe3\xc3\xb0d\x86\x8f\x86\x14S\xdc\xe2G\xb5\x8dN%\x84\xa3\xb4\xb8!\xf9\x01=4T\xb2\xff\xb6\x9dx\x1e\x8dU\xbe*\xa5\xe4q\xd23\xdf\xcce\x17\xc1WX\x0e\xb5\x16\xe6>R\x1b\xf6', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) statmount$auto(0x0, 0x0, 0x6, 0x7fffffff) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x3d00, 0x0) socketpair$auto(0x1, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) r1 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1e/\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9gj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xfe\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000200)={0x0, 0x6}, 0x0, 0x1001) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) write$auto(0x3, 0x0, 0xffd8) 2.569553755s ago: executing program 3 (id=3775): r0 = epoll_create$auto(0x3e) r1 = socket(0x1e, 0x4, 0x0) epoll_ctl$auto(r0, 0x1, r1, 0x0) move_pages$auto(0x0, 0x100000001, &(0x7f00000001c0)=&(0x7f0000000140)="3a1bb07ae79948572ba8d50510fa7dae8ea86f8a517088e7ee711ed94094dfad36f4112bad", &(0x7f0000000200)=0x4, &(0x7f0000000340)=0x800, 0xfffffe01) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000240)="7122a0", 0x40000000001243}, 0x1, 0x0) ioctl$auto_XFS_IOC_FREESP(r0, 0x4030580b, &(0x7f0000000040)={0x101, 0x1, 0x8, 0x8, 0x800, r2}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000001480)={r3, &(0x7f0000000080)="b1a3fca1ab6a38f4d437c0b981903a7291f27c8e5f69c14ae5e9a9543a4afbb38e3b6f06bc449880bbeb8c9a7b336e7e41a4203f7f5119b3861d1be30e1b3e8404d4f5752e8b18959b56668f7afbfadd75f71702ba3b2d28c93931c5090705f3bbabfdeafc9b7099f1a4913426b801f320f67c3134b91ce2c79bf193a5a5082cfcd43b996658b5ef7890ea12836efb9fd5c00a06f5baee323416a23c199bdf91bbcf7c460d3f84dadcb6e5c581a7aff1cd748c910e45e445271df15da0", 0x1ff, &(0x7f0000000280)="77c8cdf5b75a6385f6c78098b55807ba038d844dbaf1290a74bcd55817020bd8ef0cb06ba6806fade719356c3b35dc220b695fd9bc4db6c8c33345d9bc54a0c62c88bf4b98b22a48d80a71190f75becdc542a6b0137d8f0d6f63aa7ee1a88b0a774375142c6fa5b9ec4e024093927818d38bf48eeffaf75a78ce3ab496d083e378640fb3170e71c80b80ee8bf2c8203e1ffc8a6d260cbfdf1c97f5b153186b815ca35c8235031851eacf3448331c34080aa0950eb0fd209099b2c6db", 0x5, &(0x7f0000000440)="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", &(0x7f0000001440)=0x3}) pread64$auto(r4, 0x0, 0x8, 0xf) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r6, r6, 0x0, 0x10000800000003) 2.135118288s ago: executing program 1 (id=3777): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card2/oss_mixer\x00', 0xe0182, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000480)="f21a9a3c5c3e006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c76eed1672bb713aca465c9bbc23b50000000000000004c635fcd1410f37152ad1f7fa09270ce98f867fefbe147095e2928c0a", 0x58) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000000c0)=0x8) r1 = socket(0xa, 0x1, 0x84) r2 = getsockopt$auto(r1, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x24800, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) futex$auto(0x0, 0x8, 0x3d, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1, 0x0) ioctl$auto_FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000040)) r5 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000, 0x0) ioctl$auto_RNDADDTOENTCNT2(r5, 0x40045201, &(0x7f0000000880)=0x80000001) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x63ad42, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0xffffffffffffffc0, 0x304) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000280)="fabfa5016bcf10e0a50c40a03d9e2b88948104ab873436949a2f0cf55ef318e0f45c2f9453f4f4850bcafd52961ce33024258d3b5be89cac0e48e5677f85d2cebec03b8201583d6406e5d877669d02af67a15d2da7c672fa3137dfc2606f5d856fe76be6679b41b885ee434da3d4ad83e9859375972c9ca980effadb061e434be4a5112ef5a573e8de0105e9bd908bfa1190ef4e91f8df22df8a36b5c0802cdf532c59536c24f3e862f2ed64c2a274435ca795aaebcf70d61148dd249ae2b1d574b18ac5e65c812de03c1b65192397f416") set_mempolicy$auto(0x80, 0x0, 0x200008) getsockopt$auto_SO_BSDCOMPAT(0xffffffffffffffff, 0x78, 0xe, &(0x7f00000000c0)='/sys/bus/netdevsim/del_device\x00', &(0x7f0000000100)=0xff) pread64$auto(0xffffffffffffffff, 0x0, 0x5, 0x1000000000005) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) 1.54127209s ago: executing program 3 (id=3778): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x1f, 0xfffffffffffffffa, 0x7ffc) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x7, &(0x7f0000000040)="023b8829afee0f9e18cde2ff58df8494cbbde0acb819dfe8") socket(0x10, 0x2, 0x4) socket(0x2, 0x3, 0x4) ioperm$auto(0x3, 0xe, 0x2000000000000149) clock_getres$auto(0x8, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000540)=""/150, 0x96) write$auto(r0, &(0x7f0000000380)=' U\x15\xa2t\xe0\x1b\xb0\xff\xe8\x91@\x88\n\x92\xf1rL\x9c\rg-\xcc]\x0e\x06\x03\a0k\x85&YS\xb0;\xfd\xd6\x0eH\xb3 \xc2`\xbc\xec\f\xd0\x97\x19\xa6Y\xb0\x15Z/\xe2\xc3\x8e\xc1\xa7v\xe3\xc3\xb0d\x86\x8f\x86\x14S\xdc\xe2G\xb5\x8dN%\x84\xa3\xb4\xb8!\xf9\x01=4T\xb2\xff\xb6\x9dx\x1e\x8dU\xbe*\xa5\xe4q\xd23\xdf\xcce\x17\xc1WX\x0e\xb5\x16\xe6>R\x1b\xf6', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) statmount$auto(0x0, 0x0, 0x6, 0x7fffffff) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x3d00, 0x0) socketpair$auto(0x1, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) r1 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1e/\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9gj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xfe\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000200)={0x0, 0x6}, 0x0, 0x1001) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7e00fddbdf250400000014001a80100004800c0001800800060001000100"], 0x28}, 0x1, 0x0, 0x0, 0x48041}, 0x10) write$auto(0x3, 0x0, 0xfdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) epoll_create$auto(0x3e) write$auto(0x3, 0x0, 0xffd8) 1.039653067s ago: executing program 4 (id=3780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x12, 0x1, "5e1f970f497f9f23d63e72850177"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$auto_proc_pagemap_operations_internal(0xffffffffffffffff, &(0x7f0000001540)=""/209, 0xd1) mremap$auto(0x3, 0xe, 0x9, 0xb, 0x4000000000000000) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) ioctl$auto(0x3, 0x4020565b, 0x38) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/028/001\x00', 0x86100, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a16", 0x19) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x7f47, r3}) pipe2$auto(&(0x7f0000000000)=r5, 0xda1) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0xa201, 0x0) 1.005063617s ago: executing program 1 (id=3781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x12, 0x1, "5e1f970f497f9f23d63e72850177"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$auto_proc_pagemap_operations_internal(0xffffffffffffffff, &(0x7f0000001540)=""/209, 0xd1) mremap$auto(0x3, 0xe, 0x9, 0xb, 0x4000000000000000) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) r3 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x800) r5 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r5, 0x0, 0x10000, 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto(r6, &(0x7f0000000480)='7\x00\\\xa0\x04\x9c\"\xa9Nd_\xff\xa0k\xd8\xc9\xba\x00\xb5\x89\x8cg\xa84\xd8D)\xfdcR8\xdb\x98\xc5\xd7\x94\x94\xda\xc0r\x8f)\xbb_r\xac\x98\xa2k\x9bu=>\xce\x8d\xa2\fZ\xfa\x0f\x87R\xf7\x05OA\xfak\xba0\xab\xe1\xffm\xf9t\x012A\xc8%H\x88\xaej\xda\xae\x1dO\xd7\x88?\x19\xf3\x068\xb4e\xb5\x93\x9a\xb9|Kh\xc2d\xda\xb7\xe5\x1fb~8\xf2q\x0e\x98A[\xbb\xa9\xdc[8\xfc\xc6\x9f\xa3\xb5\xdf\x1a', 0x84) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) lstat$auto(0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r3) sendmsg$auto_NFC_CMD_SE_IO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x8880) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) 825.675189ms ago: executing program 4 (id=3782): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) mlock$auto(0x1004, 0x6) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x1f00000000000000, 0x20040011}, 0x20000000) capset$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) 697.128105ms ago: executing program 4 (id=3783): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x1f, 0xfffffffffffffffa, 0x7ffc) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x7, &(0x7f0000000040)="023b8829afee0f9e18cde2ff58df8494cbbde0acb819dfe8") socket(0x10, 0x2, 0x4) socket(0x2, 0x3, 0x4) ioperm$auto(0x3, 0xe, 0x2000000000000149) clock_getres$auto(0x8, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000540)=""/150, 0x96) write$auto(r0, &(0x7f0000000380)=' U\x15\xa2t\xe0\x1b\xb0\xff\xe8\x91@\x88\n\x92\xf1rL\x9c\rg-\xcc]\x0e\x06\x03\a0k\x85&YS\xb0;\xfd\xd6\x0eH\xb3 \xc2`\xbc\xec\f\xd0\x97\x19\xa6Y\xb0\x15Z/\xe2\xc3\x8e\xc1\xa7v\xe3\xc3\xb0d\x86\x8f\x86\x14S\xdc\xe2G\xb5\x8dN%\x84\xa3\xb4\xb8!\xf9\x01=4T\xb2\xff\xb6\x9dx\x1e\x8dU\xbe*\xa5\xe4q\xd23\xdf\xcce\x17\xc1WX\x0e\xb5\x16\xe6>R\x1b\xf6', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) statmount$auto(0x0, 0x0, 0x6, 0x7fffffff) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x3d00, 0x0) socketpair$auto(0x1, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) r1 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1e/\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9gj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xfe\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000200)={0x0, 0x6}, 0x0, 0x1001) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) write$auto(0x3, 0x0, 0xffd8) 626.049499ms ago: executing program 4 (id=3784): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/adsp1\x00', 0x40000, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000280)="ed4ee1d3d63149c10f70af74bac3c19cd391200231eaa0d8b876b07ebda83dd1f43cba9a4dee075bfaa716d98cc4a134a178c9d0862050f6fdfb0dbaa42907c3f63e312a93c0119cce41df8d6ebbbef73a906886e6e3eedf21a997e53ed8eb94e187bb45638402a694ddac41d2b86628bcb18830c11f81180d5c784de96e3de021ea0d3607617c954cd21fa36e06e2d7fa0c3df1de225b03cc06e3240467d9aed1307244e5e5f07551a74da6a4088551663a2442f60253bea43d000a12407003148c56da346d206df540325864a38322951132d57835b13d77aea588f9884cfb13cc95d6889267ec916396b7ad") (async) sendmmsg$auto(r2, &(0x7f0000000600)={{&(0x7f0000000380)="0fa12585bd391eec8f500717cd5ba5a7fc63e7aee9ff40c5a9b035eca85f7576dc422f246ed553bb1a5d59abbc15776d751cfaf3b6737ca81120f5416b65c9af2aa1d71d23534657f048b1a7e2e4506005c3f565edd19b330d195501b16a27efc713215538cf60503d9422bfd1c0fb7837a2e458dbfcaa8ce3f905e5b14a12e0180ab01581f31d8f27c6ffdf7de6ebe7e7c4f51b05408307d9c2e4df4ffdcd4b14ed30d171faf2eccc3a51593994370883c446ea44b7f224a619b20bc4a1ecf398f12f56d3276e99d2304d7246019e58a3c47c8170a79982d4951f53d3a60d2d6afa0783db", 0x400, &(0x7f00000004c0)={&(0x7f0000000480)="200afe9015045882c7ddb04bdff715d6850638121ac32f5174acdebe6e071ada61294de283ebb8edec1ff10db2f19cabce590c3818e2de3121fda097", 0x7}, 0x2, &(0x7f0000000500)="0903f3d557d383af6e18dc773cdf119a6e43598e11d6950afad2dc12d2c9c03e3181ea87bc5a0bad27f3dd8a71d1ee03d788205bfb29d7e2b4e9fe37c2960ffc90fd24cfb525f1bc61d430ae536216843a7b811fb4a032a0526edbc0218aa246955230a090d0659d37e2e4e2d1b0bf2f4746fe17f30e730f0e691a56ccbe402cb8ea275da3d8401d82162a2c5c2c291ca387062dd4f76e49a49287759e70288b8d965683b87e336582b766ff3cca6adfe47aa3bfa2565b3523a37a3d19aaf2e20d72888c84ab50716d3fec11e1b51a6c3231980e2290c4dd064cd6", 0x9, 0x10001}, 0x7}, 0x4, 0x7) (async) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r0, 0x5, &(0x7f0000000640)='.\xb6\x00', &(0x7f0000000680), 0x4) (async) r3 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x200002, 0x0) close_range$auto(r3, r2, 0x1) (async) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000780), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x184, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x16e, 0x1, 0x0, 0x1, [@typed={0x6, 0x12f, 0x0, 0x0, @str='.\x00'}, @nested={0xa3, 0x55, 0x0, 0x1, [@typed={0x8, 0x11d, 0x0, 0x0, @u32=0x8a}, @typed={0x8, 0x9f, 0x0, 0x0, @ipv4=@loopback}, @generic="983b95bab90e843829d4a986810c128642812abc9d388b1f63461ab55d566235641f4d6a7b5c1b420aeee7bd3c879ff25328813890aa0e8ba4e5cfdaacd9e6be3f887af10433fc266d0d91d84a4b19e631b0d09e3e050459e02d6587d2285949010463105d82e9be942faefd8620ff1c8ef58c2613", @generic="bc1612e29b7081217f3fd6dffd0038ff67710606b4629f624333"]}, @typed={0xc, 0x71, 0x0, 0x0, @u64=0xd44e}, @generic="dea49126607fae2f8edc1b390150c621d0e1c7c74a46cde6b222120c7465ab7fb250fd20a981064e2c0ab2a443d685d9ae4df62900ce2c8fe27d9e830e69870d573c5320dca9dbc717aa37c258e483b05b7df0872d84fc0c3fd2bb011e9da1c5346e0e31f90fc6680d719bbc63502aa635ac452694ef057cbfc22d65f8994b55ed26c8d29b01314d4c0cda715134e5d52f96120161919b8e5d694eb85dcff63750b226dcc29fa41d60602642109597051f42"]}]}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x4044885) r5 = io_uring_setup$auto(0x4b5d, &(0x7f0000000a00)={0x13994d2e, 0x1bb, 0x10, 0x401, 0x6, 0x2, r0, [0x3, 0x10001], {0x3, 0x10001, 0xb, 0x200, 0x6, 0x2, 0x4, 0x1, 0x8000}, {0x7, 0x6, 0x10, 0x2, 0x4, 0x8, 0x6, 0x401, 0x3ff}}) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r1, 0xfc099f5ad81f03d1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xa353}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x8}]}, 0x24}}, 0x20048004) (async) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000bc0), r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'pimreg0\x00', 0x0}) (async) r9 = waitid$auto(0xe, r6, &(0x7f0000000c40)={@_si_pad}, 0x3, &(0x7f0000000cc0)={{0x1000, 0x94b6}, {0xc278, 0x9}, 0x6000000000000, 0x7fffffff, 0x1ff, 0x100000000, 0xffffffffffffffff, 0x7, 0x1, 0x118a, 0x0, 0x26, 0x5, 0x8, 0x4, 0x3}) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000e00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0xe}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r8}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) (async) r10 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x244200, 0x0) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE2(r10, 0x8010661b, &(0x7f0000000e80)="3b8232064da8776c0c166f6f1c2b146e") (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f00000011c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000f00)={0x260, r1, 0xb00, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x493c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x39}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffa}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x7f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}]}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa9, 0xf5, "cc14042f4b71de2c9a53659f7de00e33ca0c3a8fb3b3bd488c38fa9c96c87158ea2aced89f996ad648aea3cd1231ff8987da8b89ad2ed23bf14634e071a06d544a2dc241eeef84b687270d592c90de4c3514e17cc2f5849d551e97f024b5ffca7c4aaadf2f643162cd94391b6bb31bbc9bba02e393362babf35ad8d4298b466ec4c0348008e8c390dfe0f1c96a4ee123ec58dedb80adfdff53ef0d47a7910be27cf1ab96ff"}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0xd957}, @NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_MLD_ADDR={0xe0, 0x13a, "ace9adbc26ed0db90ca2eca24473273a97968125316498f0acd4b433a027ab3af670ae24d1a4431fb6afe5cdda4e632ba364eddecbe508edccdd101f15ee9d5da55779a5fd5ddb46bc4e18a570eea74d263e7ce697b49343b650657fba8addd3cc584807588bed80cdb6a89cd84e6af79c7ea56438060f324118048330d5d360da76f594f0fbf8ca59e6a96acd4ea1e219321825b3e9bca90e7e68840c646d74c4d5e3ac210f31b0f0dc0652b886ee7c7b0887e629389c0abda9e06fca14d86e03106ec84b6632fb3d462d61145e4cb0323ebcb0d0c8aab19167a64b"}]}, 0x260}, 0x1, 0x0, 0x0, 0x20004014}, 0x4c000) (async) sendmsg$auto_NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001980)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)={&(0x7f0000001240)={0x6d0, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0xd9}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x79, 0x2}}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x19}, @NL80211_ATTR_EHT_CAPABILITY={0x4d, 0x136, "13688fff4cf88e8dc2f9aec0067c424e5beebf207ba61ac496c16f3d54bf95108229829b8fdb7a15e6bc09ef1cb7605287e6461d55ff5b9bd6a9d2cd2389447ba78ee11d3cd5c2eff8"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_PROBE_RESP={0x644, 0x91, "57833cdd45d8f78bebf952f99404372f8c624186ffba057d6c7ef1beb82f68198eb4a534ef2505471bfbb81fa5cfab707cb765c522ff3b294c500a269f3d10054e1f989477758dd633d9ff10ecf55251d91a5cb1f0e6e4e73ddb57b53a51dafd86ce5594b8b317d91a742dd9697fe943f307a3557fc76c5bb6091fc51069188296ea400b3d2d9c8f23f51191abf377fd6eba277923cbb96622b79801a9269c705a73b27a696d50eb2af6d6d8b1ba434afe64b71973ebb9c28c61a39018453ca8c6890f6aa8e5b249cd8b058494e7a1a7e0842bf21d3b67fbce80f86b223763fe617adec405879003ccded2e94211eb3b288c57005d11d4f0963aa82a558fa5a019ed4e5a46ebde7bc96b5ccffa131fe58a8859103d1f4eec1fdcf54bc3eeebe1995ab0e36818ec1ea31f68ae68c6aed09d9a1813a9b4fae8f43d0be9cf95abb1c3343d53419d08c3107588a6305de7f075183471037b85fc9f7f40320c2a3c80b2ed78a9622325a0970ea30267ccb881498d2d9c4ccabb3115772378e684dc09b89473a4c62cc91286ad442b734923feffbfaf99dd79a772ab9facdb380972b985f61fc8ef46485f3dcf09254bc7cb79fc84dd856e552fe63d83b257c2a1be3ca7ac5273a352b0184a52754c6ecfba3d605db815450908d33ae5c34882776ca6059ecb4ac2d6a1f7a6c16f1264a6f0933db4a8b37e6f8c55740d9fe058d8dcafcb96c44d49707963efe33237b8188954611f6991a8a1d99e9b4511779391d48e23df48ee20bf48d188afb77060a9aaf4d0b6121135f0ff333cf91ec3493f70809ec1245c8e5143dc063113cdd8c812c0b2b2838cb317033b19d03e5aae11633f74b1f67949fb0770f5f278d5364359c9e2f474786368a0911f89cd5c32d0e54636eec21dc25212d62dcd96c94791f458c11d5995a30155166290d3e368844f711e9853270e6b4fdb4cabb098d18b5a4bd4e2a710aed32e863b9585447626c4514751189539862f495a6b5c1cd6abe4b2434a02d13b0fae6722691786b686525127a068f642e1992bc94b776e3cf975da612d17ef157b3dc3af3fc2183900174a07f02e1220ce5ab64b4ae6519b9b23da1382b03739033206c592734a7cf4c04fdd718911765beaa62aa1c9a65f3539b5134ed1652987bb1751811adaa8c4a80c6fae7b1798c6f3cb110fe261d5357a980df6c1826d6241d916ae5b685d7e692cad010dc9779292cca7769f396ecdf6edc7cdc1339998e8264ceb3d3bc32224f32393d7dd90508744b187373523e1a083e14e016cd2bc3b061438b6665ff343b78dff719b33acc5658cea3703405075c48a520957a39367ef5a8dddbcc20d0b0d394c8c0a34d474c694df98ec102fa80ddf75ee655ff4b844c17ee343a0b3b59d46b7eec8fd0421351467948bcfd9845110d739456fe95445cb7527af77aeb2fbd081f507355ddb7a93b8650ee0047913cfe4769d6750b59839fda2a9f259d8ca8665f6548ae91b7d583adfe11a373221ac9587cf1b7f2e248cede94b1ecbdb3f54df99933cca7f62d9c1947f809857e6c11761f986241c68d9b1f03a39b1e5462fd1440bf2e7c631bc49e51381e6d2ca4b1692b56b51312d12b9ed32cb435c19cc0fbce2f3e26970d6045c9ee56e17f4aa36a40dce8f83c33dd04b817493613f4405ab90bd1599413727068f2e72b3f56a118c24b236e8de35ca45e515a38fe97680cc5352aa045ce1d36214ff1cd6ed01aec4ef72d565944f613bcbbcf675defca293b0b871cbe51258482bd5950c76ba9f4c92ca531a84c5e84afd101f4aa2e964fe48b0bec5a1f07b0ef83ad2fa87de7891a4db63e4161018fddc35a455c165e879af23979a0f0396197954d70c1c158837316438503ee770c095686c885ac1158bcab0b5aaf770035c264593a63d6c6cceae0e798e2ea19cdacd7f97e25ed7ef2982c8e1db67b3c0028bd65d8bf8c8e0097d0e25ed8bc4309462084236af3cd528091055f75bcedc5f4d6705f870689d75e569aff9bbf2f0de04628e7b86a3254d3dd3c15b95d21f3120b6ef2b6f36068719f3ffefb0f09390630d979e60f677db03b745028f54d403b4b30b9056b738b466eb3ad151481e0f2636240ffa81d88b5540f919171b87975fac5d79562dfd0e656df378e01ec9bea71f184d9a752b3b803f8fb9a76ffdec8b4d85e3d5f4f3bba1dc17ae1f2ecd37d10646df33d36a83c5784f2978f5a9050d0bddb23537534dd9a4dbdb5b8ee7daba2c0a7452"}, @NL80211_ATTR_ROAM_SUPPORT={0x4}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000001a80)={{0x3, 0xffffffffffffffff, 0xee00, 0x3ff, 0x6, 0x1, 0x9}, &(0x7f0000001a00)=0x8, &(0x7f0000001a40)=0x1, 0x29b0762c, 0xf, 0xfff, 0xa, 0x0, 0x5, 0x2, 0xd, @raw=0x8, @inferred=r9}) sendmsg$auto_NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000021c0)={&(0x7f0000001b00)={0x6a4, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_VENDOR_DATA={0xb2, 0xc5, "993a63e245c3a444883f7a8348b8287d1943444c500131b1b0e911d27d866f5f9cba743c9e051ed462f02a3546c25a6ad19b355b407a117a00b931acf9d6a61149df62ea77882d4655e87215494207cff710255d66731aa74855aba755a4bdf4944d18ba3125e659e5c4bd56e766080bf20e9dbe5cd88ecb7b0635af072558ed19d20eb8ab0150eeb6276def71b4e3012fdd6f5a55c0470e4ce0748ff390e137eddd34e0e1985af59bdee379d931"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4a}, @NL80211_ATTR_IE_ASSOC_RESP={0x50f, 0x80, "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"}, @NL80211_ATTR_STA_FLAGS={0xb4, 0x11, 0x0, 0x1, [@nested={0xb0, 0x70, 0x0, 0x1, [@typed={0x4, 0x12d}, @nested={0x4, 0xb2}, @typed={0x8, 0x5b, 0x0, 0x0, @uid=r11}, @generic="aef542598a34ae7526f8702fbc2636708c046ff7b53abbf3f24533a0b3ccd342cfe004e291e141e64d53e43d13709a0bcd63aa91b7bcbee0d01d40fa4de9941af57513ad94a1fa48f4dd7152ce8365ddd929c16e5777f1b0e5a4c4dc1e06ad478dbfbf0e94e37e2503629f4b4ede4595daa9018f4397edac60ea05cd3c0509a592527ee0c32061c4a0c46c06390020f7", @typed={0x8, 0x28, 0x0, 0x0, @pid=r9}, @nested={0x4, 0x86}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x44e6}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x2}]}, 0x6a4}}, 0x8000) (async) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002380)={&(0x7f0000002280)={0xdc, r1, 0xa, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc3, 0xbe, "ddaca14d6aabe04579dc93a3bba9048428a482fd95c3a625558f0716ac01cf1deb66adc4211e80768b5ad57b0530e668018852e5162ac6fa0df37c2b716e7517a3f9da1d05487b9a7182fe4305eb222a68b9a8ca916c3c0535bde6b91982eccdb4fca6980e9d971a6a5e20c50e99d247a03803942f15d0826db8c0e4ca0a07ee974bfe05b8bff6ada201ca6a51646027eb89fec7a31b54517189bede7b891b9b6c4e653e4b8f7cd933550a6a5f68218facf729a4a37080219f2659298de98e"}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc041}, 0x8048010) r14 = waitid$auto_P_PGID(0x2, r13, &(0x7f00000024c0)={@siginfo_0_0={0x0, 0x9, 0x0, @_rt={r9, r11, @sival_ptr=&(0x7f0000002400)="e1732de46c0f1c1f4e9072655569c3b4a7c32fccc5bfd36f1a212cfefa50330dd967b0cea1d7a85043feb9aa5798b86fcf0a5a19dfa2759bbdd6a0ddb801912989f987cf5f953e8de56281d42edaf82b92714364fe5df7e4654d55cbd0564cdbd93f1eb482394646f99631497c2567a7437b25ce7e637aafad47df306f7836056b3a48"}}}, 0xfff, &(0x7f0000002540)={{0x10, 0x3}, {0x9, 0x9bf0}, 0x80000001, 0x9, 0x2, 0x2, 0x6, 0x9, 0x3, 0x3, 0x3, 0xe, 0x8, 0xc, 0xffffffff, 0xfffffffffffffff3}) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xbed}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20040004) (async) msgctl$auto_IPC_STAT(0x8000, 0x2, &(0x7f0000002780)={{0x8, r15, r12, 0x9, 0x2, 0xffffffff, 0x1}, &(0x7f0000002700)=0x1, &(0x7f0000002740)=0x7, 0x29694b3b, 0x200, 0x2, 0xaf70, 0x2, 0x6, 0xd, 0x200, @raw=0x7, @inferred=r14}) (async) fcntl$auto_F_GETSIG(r5, 0xb, 0xfffffffffffffffd) (async) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000003080)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003040)={&(0x7f0000002840)={0x7d4, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_IE_ASSOC_RESP={0x6ff, 0x80, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x85, 0xba, "5da02ae53c1b97374d691cedc334c5cb339349d231ef0b8f7bdf3b8c79bea9899c56f664ca437767a537c5a6ba4241dc62d07120bcaab2b5db80cfef00454150295e9e2d5d59e2417810e929a60c116f3830381253966f7f7ab64db746b74abd0a7fd66eed59e9b2521e3bab4ecb2d22fd397634bdd355852bc7777c60646e3b4e"}, @NL80211_ATTR_KEY_DATA={0x1d, 0x7, "d0b16a62cdf8fbb17c21ccaba921f2897d62c8c83d41bee64e"}]}, 0x7d4}, 0x1, 0x0, 0x0, 0x4002}, 0x4010) 577.45802ms ago: executing program 3 (id=3785): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) pwritev2$auto(r0, &(0x7f0000001040)={&(0x7f0000000040), 0x1}, 0x8000000000000001, 0x100020001, 0x7, 0x4) (fail_nth: 2) 497.933818ms ago: executing program 4 (id=3786): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) write$auto(r0, &(0x7f0000000040)='0\x00\\9(\xba\xea\x99\xfc|U\x1c\xc7k', 0x81) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000080), 0x7112}, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/iorequest_cnt\x00', 0x44d00, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/fcloop/ctl/add_remote_port\x00', 0x80801, 0x0) write$auto_ppp_device_fops_ppp_generic(r3, &(0x7f00000002c0)="d9", 0x1) 450.320241ms ago: executing program 3 (id=3787): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000180)=0x1) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x8001) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(r1, 0xfffffffffffffffd, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000300)={0x6f8, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x6d9, 0xe, "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"}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x81}]}, 0x6f8}}, 0x40080) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r5, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11) 390.145036ms ago: executing program 0 (id=3788): mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x7) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700fdef) (async) write$auto(r1, 0x0, 0x81) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 350.06119ms ago: executing program 4 (id=3789): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card2/oss_mixer\x00', 0xe0182, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000480)="f21a9a3c5c3e006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c76eed1672bb713aca465c9bbc23b50000000000000004c635fcd1410f37152ad1f7fa09270ce98f867fefbe147095e2928c0a", 0x58) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000000c0)=0x8) r1 = socket(0xa, 0x1, 0x84) r2 = getsockopt$auto(r1, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x24800, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) futex$auto(0x0, 0x8, 0x3d, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1, 0x0) ioctl$auto_FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000040)) r5 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000, 0x0) ioctl$auto_RNDADDTOENTCNT2(r5, 0x40045201, &(0x7f0000000880)=0x80000001) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x63ad42, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0xffffffffffffffc0, 0x304) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000280)="fabfa5016bcf10e0a50c40a03d9e2b88948104ab873436949a2f0cf55ef318e0f45c2f9453f4f4850bcafd52961ce33024258d3b5be89cac0e48e5677f85d2cebec03b8201583d6406e5d877669d02af67a15d2da7c672fa3137dfc2606f5d856fe76be6679b41b885ee434da3d4ad83e9859375972c9ca980effadb061e434be4a5112ef5a573e8de0105e9bd908bfa1190ef4e91f8df22df8a36b5c0802cdf532c59536c24f3e862f2ed64c2a274435ca795aaebcf70d61148dd249ae2b1d574b18ac5e65c812de03c1b65192397f416") set_mempolicy$auto(0x80, 0x0, 0x200008) getsockopt$auto_SO_BSDCOMPAT(0xffffffffffffffff, 0x78, 0xe, &(0x7f00000000c0)='/sys/bus/netdevsim/del_device\x00', &(0x7f0000000100)=0xff) pread64$auto(0xffffffffffffffff, 0x0, 0x5, 0x1000000000005) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) 98.320873ms ago: executing program 0 (id=3790): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/clockevents/clockevent1/uevent\x00', 0x206143, 0x0) socket(0xa, 0x3, 0x3a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sg0\x00', 0x141040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r0 = eventfd$auto(0x3) pidfd_open$auto(0x1, 0x0) socket(0x1e, 0x4, 0x0) r1 = socket(0xa, 0x3, 0x88) bpf$auto(0x2, &(0x7f0000000000)=@link_update={r1, @new_map_fd, 0x0, @old_prog_fd=r0}, 0xa3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) mmap$auto(0x0, 0x2, 0x2, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x0, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) r4 = getsid$auto(0x0) fcntl$auto(r2, 0x1, r4) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000180)="ec6ce3961ddd8dafa09c0a1aa58326cfae5dcc29c2f013b336915336f328083b5afedf77a2c75e46a5f744b33bd011af9d3ffb682e7eb23c8571ee4ff72cbf81e23d4b4c7732996ec6f0bc45c572ab7b3354222a1d95257271a7f3b6c081ca32cb2f3a752c6e812fb1ca486d343a72989173384cd333206a039315f9bfc977eedd1e4b00b9d2d686aa5a45c9c62a93b34a63f4a355e44e6716de449cfbd9acd8afd799a4035c5c6ff9f491bfce3a64b9") ioctl$auto_FBIOPAN_DISPLAY(r3, 0x4606, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r3, 0x40044620, 0x0) epoll_create$auto(0x4) 0s ago: executing program 1 (id=3791): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = epoll_create$auto(0x3e) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceClass\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/214, 0xd6) mmap$auto(0x0, 0x40, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xc8, 0x800454d3, 0x5c8d) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x9a28) ioctl$auto(0xffffffffffffffff, 0x400454cc, 0xffffffffffffffff) r4 = socket(0x2, 0x1, 0x106) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r4) r6 = getpgid(0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x110, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x34, 0x19, 0x0, 0x1, [@generic="fe299241fa553feeac4e5eff22e525ca52fb2e3433f687c02078af4871ce672ca5ced5b9a624e6c970b3fe0badd977b7"]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5e}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xa8, 0x19, 0x0, 0x1, [@nested={0x9c, 0xc9, 0x0, 0x1, [@typed={0x4, 0x151}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r6}, @generic="a2ed79076256ccbf2f31aacfd32ca9a8005456fa9bb7d8", @generic, @nested={0x4, 0x60}, @nested={0x4, 0x3f}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@remote}, @generic="26f292b007b4f086e248ea9a393d5f28d136fec95027752c7414a5697dbb8e278261e9ec5770d610bef233d22608bc97fe9dc1bcc6542f194a40266a0882da110a7ad5d2cf750b5219e5cf8e27", @nested={0x4, 0x113}]}, @typed={0x8, 0xab, 0x0, 0x0, @uid=0xee01}]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xcc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x8800}, 0x4040080) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xe688}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f0000000100)={0x0, 0x4dcf3887}, 0x7) r8 = socket(0x10, 0x1, 0x106) getsockopt$auto(r8, 0x11c, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) epoll_ctl$auto(r1, 0x1, r0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x14, r10, 0x1, 0x48000, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4004060}, 0x140000e4) r11 = socket(0x2, 0x1, 0x106) connect$auto(r11, &(0x7f00000001c0)=@in={0x2, 0x7, @private=0xa010101}, 0x55) mmap$auto(0x80, 0x2105, 0x4000000000dd, 0xeb1, 0x401, 0x80000000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) write$auto(0x3, 0x0, 0xffd8) kernel console output (not intermixed with test programs): R13: 00007ff01f816038 R14: 00007ff01f815fa0 R15: 00007ffe8de330b8 [ 776.638483][T19927] [ 776.894329][T19927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'. [ 777.704428][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2805'. [ 777.781946][T19943] HfR: entered promiscuous mode [ 777.805621][T19944] HfR: left promiscuous mode [ 778.256918][ T30] audit: type=1800 audit(1780549695.688:101): pid=19950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2806" name="file0" dev="tmpfs" ino=295 res=0 errno=0 [ 781.011273][T19986] FAULT_INJECTION: forcing a failure. [ 781.011273][T19986] name fail_futex, interval 1, probability 0, space 0, times 0 [ 781.011303][T19986] CPU: 0 UID: 0 PID: 19986 Comm: syz.2.2814 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.011326][T19986] Tainted: [L]=SOFTLOCKUP [ 781.011331][T19986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 781.011341][T19986] Call Trace: [ 781.011346][T19986] [ 781.011353][T19986] dump_stack_lvl+0x100/0x190 [ 781.011373][T19986] should_fail_ex.cold+0x5/0xa [ 781.011394][T19986] get_futex_key+0x1d2/0x1510 [ 781.011420][T19986] ? __pfx_get_futex_key+0x10/0x10 [ 781.011450][T19986] futex_wait_setup+0x83/0x510 [ 781.011472][T19986] __futex_wait+0x19f/0x300 [ 781.011492][T19986] ? __pfx___futex_wait+0x10/0x10 [ 781.011509][T19986] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 781.011534][T19986] ? __pfx_futex_wake_mark+0x10/0x10 [ 781.011554][T19986] ? futex_hash+0x2ad/0x370 [ 781.011577][T19986] ? futex_hash+0x141/0x370 [ 781.011610][T19986] futex_wait+0xe6/0x370 [ 781.011629][T19986] ? __pfx_futex_wait+0x10/0x10 [ 781.011651][T19986] ? __pfx___do_sys_futex_requeue+0x10/0x10 [ 781.011668][T19986] ? vfs_read+0x243/0xb30 [ 781.011690][T19986] do_futex+0x1ef/0x350 [ 781.011705][T19986] ? __pfx_do_futex+0x10/0x10 [ 781.011725][T19986] __x64_sys_futex+0x34f/0x4d0 [ 781.011742][T19986] ? __pfx___x64_sys_futex+0x10/0x10 [ 781.011761][T19986] ? rcu_is_watching+0x12/0xc0 [ 781.011780][T19986] do_syscall_64+0x115/0x840 [ 781.011804][T19986] ? clear_bhb_loop+0x40/0x90 [ 781.011821][T19986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.011836][T19986] RIP: 0033:0x7f9615d9ce59 [ 781.011849][T19986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.011863][T19986] RSP: 002b:00007f9616b810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 781.011877][T19986] RAX: ffffffffffffffda RBX: 00007f9616015fa8 RCX: 00007f9615d9ce59 [ 781.011887][T19986] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9616015fa8 [ 781.011896][T19986] RBP: 00007f9616015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 781.011905][T19986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.011914][T19986] R13: 00007f9616016038 R14: 00007ffdc52e6850 R15: 00007ffdc52e6938 [ 781.011934][T19986] [ 781.283081][T20008] vhci_hcd vhci_hcd.2: invalid port number 16 [ 781.283154][T20008] vhci_hcd vhci_hcd.2: invalid port number 16 [ 782.935884][T20048] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2826'. [ 783.487449][T20058] bonding: no command found in bonding_masters - use +ifname or -ifname [ 783.573259][T20058] futex_wake_op: syz.1.2829 tries to shift op by -2048; fix this program [ 783.636840][T20062] 0x2000300000001-0x2020900000071 : "" [ 783.664064][T20062] mtd: partition "" is out of reach -- disabled [ 783.750008][T20062] ftl_cs: FTL header not found. [ 785.148049][T20092] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2835'. [ 785.193362][T20097] usbip-vudc usbip-vudc.0: gadget not bound [ 787.919933][ T7938] Bluetooth: hci4: ACL packet too small [ 788.105750][T20161] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2849'. [ 788.745953][T20180] HfR: entered promiscuous mode [ 788.818806][T20180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2853'. [ 788.893673][T20180] HfR: left promiscuous mode [ 788.903257][T20183] random: crng reseeded on system resumption [ 789.739422][T20213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2861'. [ 789.797870][T20213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.849433][T20213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.128104][T20285] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2875'. [ 793.290609][T20304] hub 1-0:1.0: USB hub found [ 793.360261][T20304] hub 1-0:1.0: 1 port detected [ 794.069975][T20327] FAULT_INJECTION: forcing a failure. [ 794.069975][T20327] name fail_futex, interval 1, probability 0, space 0, times 0 [ 794.188778][T20327] CPU: 0 UID: 0 PID: 20327 Comm: syz.3.2885 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.188805][T20327] Tainted: [L]=SOFTLOCKUP [ 794.188810][T20327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.188818][T20327] Call Trace: [ 794.188824][T20327] [ 794.188830][T20327] dump_stack_lvl+0x100/0x190 [ 794.188849][T20327] should_fail_ex.cold+0x5/0xa [ 794.188869][T20327] get_futex_key+0x295/0x1510 [ 794.188895][T20327] ? __pfx_get_futex_key+0x10/0x10 [ 794.188917][T20327] ? lock_acquire+0x1b1/0x370 [ 794.188946][T20327] futex_wake+0xea/0x530 [ 794.188965][T20327] ? __pfx_futex_wake+0x10/0x10 [ 794.188982][T20327] ? exit_mm_release+0x19/0x30 [ 794.189009][T20327] do_futex+0x32b/0x350 [ 794.189024][T20327] ? __pfx_do_futex+0x10/0x10 [ 794.189038][T20327] ? __might_fault+0xc5/0x140 [ 794.189065][T20327] mm_release+0x24a/0x2f0 [ 794.189083][T20327] do_exit+0x707/0x2af0 [ 794.189107][T20327] ? __pfx_do_exit+0x10/0x10 [ 794.189128][T20327] ? do_raw_spin_lock+0x128/0x260 [ 794.189143][T20327] ? find_held_lock+0x2b/0x80 [ 794.189160][T20327] ? get_signal+0x7e5/0x2210 [ 794.189180][T20327] do_group_exit+0xd5/0x2a0 [ 794.189203][T20327] get_signal+0x20ff/0x2210 [ 794.189225][T20327] ? audit_watch_handle_event+0x9c3/0xb20 [ 794.189243][T20327] ? __pfx_get_signal+0x10/0x10 [ 794.189262][T20327] ? do_futex+0x192/0x350 [ 794.189278][T20327] arch_do_signal_or_restart+0x91/0x7a0 [ 794.189327][T20327] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 794.189355][T20327] ? rcu_is_watching+0x12/0xc0 [ 794.189374][T20327] exit_to_user_mode_loop+0x98/0x670 [ 794.189397][T20327] ? rcu_is_watching+0x12/0xc0 [ 794.189415][T20327] do_syscall_64+0x652/0x840 [ 794.189437][T20327] ? clear_bhb_loop+0x40/0x90 [ 794.189455][T20327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.189471][T20327] RIP: 0033:0x7f077659ce59 [ 794.189484][T20327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.189498][T20327] RSP: 002b:00007f07773950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 794.189512][T20327] RAX: fffffffffffffe00 RBX: 00007f0776815fa8 RCX: 00007f077659ce59 [ 794.189527][T20327] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0776815fa8 [ 794.189536][T20327] RBP: 00007f0776815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 794.189545][T20327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.189554][T20327] R13: 00007f0776816038 R14: 00007ffcd43ab470 R15: 00007ffcd43ab558 [ 794.189573][T20327] [ 796.053338][T20369] futex_wake_op: syz.1.2893 tries to shift op by -2048; fix this program [ 796.113808][T20369] 0x000000000001-0x000000020001 : "" [ 796.147660][T20369] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffff [ 796.236495][T20369] ftl_cs: FTL header corrupt! [ 799.382793][T20407] openvswitch: netlink: IPv4 tunnel dst address is zero [ 800.121571][T20423] futex_wake_op: syz.0.2905 tries to shift op by -2048; fix this program [ 800.234771][T20420] 0x000000000001-0x000000020000 : "" [ 800.315100][T20420] ftl_cs: FTL header corrupt! [ 800.632295][T20423] ubi1: attaching mtd0 [ 800.634457][T20423] ubi1: scanning is finished [ 800.634490][T20423] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 800.899231][T20423] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 801.950088][T20445] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2911'. [ 802.108762][ T7938] Bluetooth: hci5: unexpected subevent 0x01 length: 3 < 18 [ 802.886555][T20468] HfR: entered promiscuous mode [ 802.933959][ T30] audit: type=1800 audit(1780549720.486:102): pid=20462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2913" name="file0" dev="tmpfs" ino=583 res=0 errno=0 [ 802.981959][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2915'. [ 803.090775][T20469] HfR: left promiscuous mode [ 806.014117][T20515] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2925'. [ 806.437839][T20519] openvswitch: netlink: IP tunnel dst address not specified [ 806.849513][T20526] FAULT_INJECTION: forcing a failure. [ 806.849513][T20526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.952911][T20526] CPU: 0 UID: 0 PID: 20526 Comm: syz.3.2928 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.952936][T20526] Tainted: [L]=SOFTLOCKUP [ 806.952942][T20526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 806.952950][T20526] Call Trace: [ 806.952955][T20526] [ 806.952961][T20526] dump_stack_lvl+0x100/0x190 [ 806.952982][T20526] should_fail_ex.cold+0x5/0xa [ 806.953001][T20526] _copy_from_iter+0x1f4/0x1690 [ 806.953026][T20526] ? __asan_memset+0x23/0x50 [ 806.953049][T20526] ? __pfx__copy_from_iter+0x10/0x10 [ 806.953069][T20526] ? __pfx___alloc_skb+0x10/0x10 [ 806.953083][T20526] ? __pfx___might_resched+0x10/0x10 [ 806.953100][T20526] ? __lock_acquire+0x4a5/0x2630 [ 806.953127][T20526] netlink_sendmsg+0x808/0xda0 [ 806.953152][T20526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.953170][T20526] ? __import_iovec+0x1d2/0x640 [ 806.953197][T20526] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 806.953216][T20526] ____sys_sendmsg+0x9e1/0xb70 [ 806.953234][T20526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.953255][T20526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.953282][T20526] ___sys_sendmsg+0x190/0x1e0 [ 806.953303][T20526] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.953344][T20526] __sys_sendmsg+0x170/0x220 [ 806.953359][T20526] ? __pfx___sys_sendmsg+0x10/0x10 [ 806.953382][T20526] ? rcu_is_watching+0x12/0xc0 [ 806.953401][T20526] do_syscall_64+0x115/0x840 [ 806.953422][T20526] ? clear_bhb_loop+0x40/0x90 [ 806.953440][T20526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.953455][T20526] RIP: 0033:0x7f077659ce59 [ 806.953467][T20526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.953481][T20526] RSP: 002b:00007f0777395028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 806.953496][T20526] RAX: ffffffffffffffda RBX: 00007f0776815fa0 RCX: 00007f077659ce59 [ 806.953506][T20526] RDX: 00000000200008d0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 806.953515][T20526] RBP: 00007f0777395090 R08: 0000000000000000 R09: 0000000000000000 [ 806.953524][T20526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.953532][T20526] R13: 00007f0776816038 R14: 00007f0776815fa0 R15: 00007ffcd43ab558 [ 806.953551][T20526] [ 807.637621][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.647570][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.416769][ T30] audit: type=1800 audit(1780549725.995:103): pid=20540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2932" name="file0" dev="tmpfs" ino=856 res=0 errno=0 [ 809.745481][T20557] random: crng reseeded on system resumption [ 811.600987][T18123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 811.616494][T18123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 811.626723][T18123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 811.642510][T18123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 811.651461][T18123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 811.745829][T20595] random: crng reseeded on system resumption [ 812.034575][T18123] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 812.253225][T20606] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2947'. [ 813.700892][T18123] Bluetooth: hci1: command tx timeout [ 814.100136][ T7938] Bluetooth: hci3: command 0x041b tx timeout [ 814.890121][T20590] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.932054][T20590] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.977190][T20590] bridge_slave_0: entered allmulticast mode [ 815.029251][T20590] bridge_slave_0: entered promiscuous mode [ 815.080143][T20590] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.122047][T20590] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.165606][T20590] bridge_slave_1: entered allmulticast mode [ 815.201809][T20590] bridge_slave_1: entered promiscuous mode [ 815.365135][T20590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.419211][T20590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.564613][T20590] team0: Port device team_slave_0 added [ 815.613302][T20590] team0: Port device team_slave_1 added [ 815.734004][T20590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.772085][T18123] Bluetooth: hci1: command tx timeout [ 815.784798][T20590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.916704][T20590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.990705][T20590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.021216][T20590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.137918][T20590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.172787][T18123] Bluetooth: hci3: command 0x041b tx timeout [ 816.588883][T20590] hsr_slave_0: entered promiscuous mode [ 816.619945][T20590] hsr_slave_1: entered promiscuous mode [ 816.645928][T20590] debugfs: 'hsr0' already exists in 'hsr' [ 816.673050][T20590] Cannot create hsr debugfs directory [ 817.838608][ T7938] Bluetooth: hci1: command tx timeout [ 818.393309][T20590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 818.450523][T20590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 818.493393][T20590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 818.569862][T20590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 818.731123][T20590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 818.775794][T20590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.806616][T20590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 818.828813][T20590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 819.235408][T20590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.302449][T20698] futex_wake_op: syz.1.2962 tries to shift op by -2048; fix this program [ 819.326147][T20590] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.341355][T20698] futex_wake_op: syz.1.2962 tries to shift op by -2048; fix this program [ 819.361736][T20271] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.368862][T20271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.456973][T20698] FAULT_INJECTION: forcing a failure. [ 819.456973][T20698] name failslab, interval 1, probability 0, space 0, times 0 [ 819.487394][T20271] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.494556][T20271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.551385][T20698] CPU: 0 UID: 0 PID: 20698 Comm: syz.1.2962 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.551413][T20698] Tainted: [L]=SOFTLOCKUP [ 819.551418][T20698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 819.551427][T20698] Call Trace: [ 819.551433][T20698] [ 819.551439][T20698] dump_stack_lvl+0x100/0x190 [ 819.551460][T20698] should_fail_ex.cold+0x5/0xa [ 819.551480][T20698] should_failslab+0xc2/0x120 [ 819.551499][T20698] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 819.551524][T20698] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 819.551582][T20698] ext4_alloc_io_end_vec+0x2b/0x1c0 [ 819.551605][T20698] ext4_do_writepages+0x1765/0x3f20 [ 819.551621][T20698] ? do_raw_spin_lock+0x128/0x260 [ 819.551647][T20698] ? find_held_lock+0x2b/0x80 [ 819.551671][T20698] ? hrtimer_start_range_ns+0x860/0x1a50 [ 819.551695][T20698] ? __pfx_ext4_do_writepages+0x10/0x10 [ 819.551721][T20698] ? ext4_writepages+0x347/0x790 [ 819.551736][T20698] ext4_writepages+0x347/0x790 [ 819.551753][T20698] ? __pfx_ext4_writepages+0x10/0x10 [ 819.551775][T20698] ? do_writepages+0x4b5/0x600 [ 819.551793][T20698] ? do_writepages+0x4b5/0x600 [ 819.551812][T20698] ? __pfx_ext4_writepages+0x10/0x10 [ 819.551830][T20698] do_writepages+0x278/0x600 [ 819.551850][T20698] ? __pfx_do_writepages+0x10/0x10 [ 819.551867][T20698] ? do_raw_spin_unlock+0x145/0x1e0 [ 819.551884][T20698] ? _raw_spin_unlock+0x28/0x50 [ 819.551904][T20698] filemap_writeback+0x22d/0x2e0 [ 819.551925][T20698] ? __pfx_filemap_writeback+0x10/0x10 [ 819.551966][T20698] ? mt_find+0x45e/0x8e0 [ 819.551990][T20698] ? __pfx_mt_find+0x10/0x10 [ 819.552013][T20698] file_write_and_wait_range+0xcd/0x140 [ 819.552036][T20698] ext4_sync_file+0x358/0xb90 [ 819.552052][T20698] ? __pfx_ext4_sync_file+0x10/0x10 [ 819.552066][T20698] ? __up_read+0x1d0/0x6e0 [ 819.552081][T20698] ? __pfx___up_read+0x10/0x10 [ 819.552095][T20698] ? __do_sys_msync+0x39b/0x590 [ 819.552110][T20698] ? __pfx_ext4_sync_file+0x10/0x10 [ 819.552124][T20698] vfs_fsync_range+0x9b/0x190 [ 819.552145][T20698] __do_sys_msync+0x3ca/0x590 [ 819.552164][T20698] do_syscall_64+0x115/0x840 [ 819.552183][T20698] ? clear_bhb_loop+0x40/0x90 [ 819.552201][T20698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.552216][T20698] RIP: 0033:0x7f62b019ce59 [ 819.552229][T20698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.552244][T20698] RSP: 002b:00007f62b111b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 819.552258][T20698] RAX: ffffffffffffffda RBX: 00007f62b0415fa0 RCX: 00007f62b019ce59 [ 819.552268][T20698] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 819.552279][T20698] RBP: 00007f62b0232d6f R08: 0000000000000000 R09: 0000000000000000 [ 819.552288][T20698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.552297][T20698] R13: 00007f62b0416038 R14: 00007f62b0415fa0 R15: 00007fff58d09b18 [ 819.552316][T20698] [ 819.922275][T20590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 819.932740][T20590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 819.970647][ T7938] Bluetooth: hci1: command tx timeout [ 821.323381][T20590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.610384][T20764] random: crng reseeded on system resumption [ 822.309507][T20590] veth0_vlan: entered promiscuous mode [ 822.367550][T20590] veth1_vlan: entered promiscuous mode [ 822.468635][T20590] veth0_macvtap: entered promiscuous mode [ 822.605856][ T30] audit: type=1800 audit(1780549740.269:104): pid=20780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2973" name="file0" dev="tmpfs" ino=666 res=0 errno=0 [ 822.751432][T20590] veth1_macvtap: entered promiscuous mode [ 822.925698][T20590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.043928][T20590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.199029][T20279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.225749][T20279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.290221][T20279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.325562][T20279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.574054][T20797] capability: warning: `syz.1.2977' uses 32-bit capabilities (legacy support in use) [ 823.699880][T20797] blktrace: Concurrent blktraces are not allowed on loop2 [ 824.004578][T20279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.069518][T20279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.249082][ T9385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.296270][ T9385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.411218][T20809] FAULT_INJECTION: forcing a failure. [ 824.411218][T20809] name failslab, interval 1, probability 0, space 0, times 0 [ 824.538734][T20809] CPU: 0 UID: 0 PID: 20809 Comm: syz.1.2979 Tainted: G L syzkaller #0 PREEMPT(full) [ 824.538761][T20809] Tainted: [L]=SOFTLOCKUP [ 824.538766][T20809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 824.538775][T20809] Call Trace: [ 824.538781][T20809] [ 824.538787][T20809] dump_stack_lvl+0x100/0x190 [ 824.538809][T20809] should_fail_ex.cold+0x5/0xa [ 824.538829][T20809] should_failslab+0xc2/0x120 [ 824.538848][T20809] __kmalloc_cache_noprof+0x7a/0x6f0 [ 824.538869][T20809] ? nbd_alloc_and_init_config+0x97/0x2a0 [ 824.538885][T20809] ? find_held_lock+0x2b/0x80 [ 824.538902][T20809] ? find_held_lock+0x2b/0x80 [ 824.538926][T20809] nbd_alloc_and_init_config+0x97/0x2a0 [ 824.538945][T20809] nbd_open+0x4cc/0x700 [ 824.538963][T20809] ? __pfx_nbd_open+0x10/0x10 [ 824.538981][T20809] ? __pfx_nbd_open+0x10/0x10 [ 824.538997][T20809] blkdev_get_whole+0x99/0x290 [ 824.539084][T20809] bdev_open+0x2c7/0xe40 [ 824.539110][T20809] blkdev_open+0x34e/0x4f0 [ 824.539135][T20809] do_dentry_open+0x6ab/0x14d0 [ 824.539154][T20809] ? __pfx_blkdev_open+0x10/0x10 [ 824.539180][T20809] vfs_open+0x82/0x3f0 [ 824.539203][T20809] path_openat+0x208c/0x31a0 [ 824.539228][T20809] ? __pfx_path_openat+0x10/0x10 [ 824.539254][T20809] do_file_open+0x20e/0x430 [ 824.539283][T20809] ? __pfx_do_file_open+0x10/0x10 [ 824.539317][T20809] ? alloc_fd+0x476/0x790 [ 824.539337][T20809] ? do_getname+0x191/0x390 [ 824.539361][T20809] do_sys_openat2+0x10d/0x1e0 [ 824.539383][T20809] ? __pfx_do_sys_openat2+0x10/0x10 [ 824.539407][T20809] ? do_raw_spin_lock+0x128/0x260 [ 824.539428][T20809] __x64_sys_openat+0x12d/0x210 [ 824.539450][T20809] ? __pfx___x64_sys_openat+0x10/0x10 [ 824.539475][T20809] ? rcu_is_watching+0x12/0xc0 [ 824.539495][T20809] do_syscall_64+0x115/0x840 [ 824.539515][T20809] ? clear_bhb_loop+0x40/0x90 [ 824.539534][T20809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.539550][T20809] RIP: 0033:0x7f62b019ce59 [ 824.539564][T20809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.539579][T20809] RSP: 002b:00007f62b10fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 824.539593][T20809] RAX: ffffffffffffffda RBX: 00007f62b0416090 RCX: 00007f62b019ce59 [ 824.539603][T20809] RDX: 000000000004ea02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 824.539613][T20809] RBP: 00007f62b0232d6f R08: 0000000000000000 R09: 0000000000000000 [ 824.539622][T20809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.539631][T20809] R13: 00007f62b0416128 R14: 00007f62b0416090 R15: 00007fff58d09b18 [ 824.539651][T20809] [ 825.154500][T18123] Bluetooth: hci2: command 0x0406 tx timeout [ 827.419334][T20851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2987'. [ 827.466971][T20849] FAULT_INJECTION: forcing a failure. [ 827.466971][T20849] name failslab, interval 1, probability 0, space 0, times 0 [ 827.515547][T20849] CPU: 0 UID: 0 PID: 20849 Comm: syz.0.2986 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.515573][T20849] Tainted: [L]=SOFTLOCKUP [ 827.515578][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 827.515587][T20849] Call Trace: [ 827.515592][T20849] [ 827.515598][T20849] dump_stack_lvl+0x100/0x190 [ 827.515618][T20849] should_fail_ex.cold+0x5/0xa [ 827.515637][T20849] should_failslab+0xc2/0x120 [ 827.515655][T20849] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 827.515680][T20849] ? __alloc_skb+0x140/0x710 [ 827.515698][T20849] __alloc_skb+0x140/0x710 [ 827.515709][T20849] ? __alloc_skb+0x5b7/0x710 [ 827.515722][T20849] ? __pfx___alloc_skb+0x10/0x10 [ 827.515737][T20849] ? genl_rcv_msg+0x4be/0x800 [ 827.515764][T20849] netlink_ack+0x117/0xb80 [ 827.515789][T20849] netlink_rcv_skb+0x333/0x420 [ 827.515808][T20849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 827.515830][T20849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 827.515857][T20849] ? netlink_deliver_tap+0x1ae/0xcc0 [ 827.515878][T20849] genl_rcv+0x28/0x40 [ 827.515897][T20849] netlink_unicast+0x585/0x850 [ 827.515919][T20849] ? __pfx_netlink_unicast+0x10/0x10 [ 827.515944][T20849] netlink_sendmsg+0x8b0/0xda0 [ 827.515966][T20849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 827.515984][T20849] ? __import_iovec+0x1d2/0x640 [ 827.516008][T20849] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 827.516027][T20849] ____sys_sendmsg+0x9e1/0xb70 [ 827.516046][T20849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 827.516072][T20849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 827.516100][T20849] ___sys_sendmsg+0x190/0x1e0 [ 827.516121][T20849] ? __pfx____sys_sendmsg+0x10/0x10 [ 827.516164][T20849] __sys_sendmsg+0x170/0x220 [ 827.516180][T20849] ? __pfx___sys_sendmsg+0x10/0x10 [ 827.516203][T20849] ? rcu_is_watching+0x12/0xc0 [ 827.516223][T20849] do_syscall_64+0x115/0x840 [ 827.516244][T20849] ? clear_bhb_loop+0x40/0x90 [ 827.516262][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.516278][T20849] RIP: 0033:0x7ff01f59ce59 [ 827.516291][T20849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.516305][T20849] RSP: 002b:00007ff02039e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.516320][T20849] RAX: ffffffffffffffda RBX: 00007ff01f815fa0 RCX: 00007ff01f59ce59 [ 827.516329][T20849] RDX: 00000000200008d0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 827.516338][T20849] RBP: 00007ff02039e090 R08: 0000000000000000 R09: 0000000000000000 [ 827.516346][T20849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.516355][T20849] R13: 00007ff01f816038 R14: 00007ff01f815fa0 R15: 00007ffe8de330b8 [ 827.516374][T20849] [ 829.183273][T20868] random: crng reseeded on system resumption [ 829.661689][T20878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2993'. [ 829.889932][T20857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.101573][T20877] HfR: entered promiscuous mode [ 830.142716][T20878] HfR: left promiscuous mode [ 830.788332][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2994'. [ 830.837058][T20893] FAULT_INJECTION: forcing a failure. [ 830.837058][T20893] name failslab, interval 1, probability 0, space 0, times 0 [ 830.918411][T20893] CPU: 0 UID: 0 PID: 20893 Comm: syz.4.2997 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.918436][T20893] Tainted: [L]=SOFTLOCKUP [ 830.918445][T20893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 830.918454][T20893] Call Trace: [ 830.918459][T20893] [ 830.918465][T20893] dump_stack_lvl+0x100/0x190 [ 830.918492][T20893] should_fail_ex.cold+0x5/0xa [ 830.918512][T20893] should_failslab+0xc2/0x120 [ 830.918530][T20893] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 830.918553][T20893] ? skb_clone+0x190/0x400 [ 830.918572][T20893] skb_clone+0x190/0x400 [ 830.918588][T20893] netlink_deliver_tap+0xaed/0xcc0 [ 830.918611][T20893] netlink_unicast+0x6a5/0x850 [ 830.918633][T20893] ? __pfx_netlink_unicast+0x10/0x10 [ 830.918651][T20893] ? genl_rcv_msg+0x4be/0x800 [ 830.918677][T20893] netlink_ack+0x655/0xb80 [ 830.918701][T20893] netlink_rcv_skb+0x333/0x420 [ 830.918720][T20893] ? __pfx_genl_rcv_msg+0x10/0x10 [ 830.918742][T20893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 830.918769][T20893] ? netlink_deliver_tap+0x1ae/0xcc0 [ 830.918789][T20893] genl_rcv+0x28/0x40 [ 830.918816][T20893] netlink_unicast+0x585/0x850 [ 830.918838][T20893] ? __pfx_netlink_unicast+0x10/0x10 [ 830.918862][T20893] netlink_sendmsg+0x8b0/0xda0 [ 830.918885][T20893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.918903][T20893] ? __import_iovec+0x1d2/0x640 [ 830.918926][T20893] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 830.918945][T20893] ____sys_sendmsg+0x9e1/0xb70 [ 830.918963][T20893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.918984][T20893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.919012][T20893] ___sys_sendmsg+0x190/0x1e0 [ 830.919033][T20893] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.919075][T20893] __sys_sendmsg+0x170/0x220 [ 830.919091][T20893] ? __pfx___sys_sendmsg+0x10/0x10 [ 830.919114][T20893] ? rcu_is_watching+0x12/0xc0 [ 830.919134][T20893] do_syscall_64+0x115/0x840 [ 830.919154][T20893] ? clear_bhb_loop+0x40/0x90 [ 830.919172][T20893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.919187][T20893] RIP: 0033:0x7fc90939ce59 [ 830.919199][T20893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.919213][T20893] RSP: 002b:00007fc90a211028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.919228][T20893] RAX: ffffffffffffffda RBX: 00007fc909615fa0 RCX: 00007fc90939ce59 [ 830.919238][T20893] RDX: 00000000200008d0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 830.919246][T20893] RBP: 00007fc90a211090 R08: 0000000000000000 R09: 0000000000000000 [ 830.919255][T20893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.919263][T20893] R13: 00007fc909616038 R14: 00007fc909615fa0 R15: 00007fff8bd2f5f8 [ 830.919282][T20893] [ 831.809635][T20891] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 831.896325][T20891] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 831.943483][T20891] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 833.778266][T20940] random: crng reseeded on system resumption [ 833.928722][T20939] hub 1-0:1.0: USB hub found [ 833.988026][T20939] hub 1-0:1.0: 1 port detected [ 835.001157][T20955] FAULT_INJECTION: forcing a failure. [ 835.001157][T20955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.091867][T20955] CPU: 0 UID: 0 PID: 20955 Comm: syz.3.3008 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.091894][T20955] Tainted: [L]=SOFTLOCKUP [ 835.091899][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 835.091908][T20955] Call Trace: [ 835.091913][T20955] [ 835.091919][T20955] dump_stack_lvl+0x100/0x190 [ 835.091939][T20955] should_fail_ex.cold+0x5/0xa [ 835.091960][T20955] _copy_to_user+0x32/0xd0 [ 835.091982][T20955] simple_read_from_buffer+0xcb/0x170 [ 835.092001][T20955] proc_fail_nth_read+0x1af/0x230 [ 835.092025][T20955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 835.092049][T20955] ? rw_verify_area+0xce/0x6d0 [ 835.092063][T20955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 835.092086][T20955] vfs_read+0x1e4/0xb30 [ 835.092105][T20955] ? __pfx_vfs_read+0x10/0x10 [ 835.092120][T20955] ? __fget_files+0x215/0x3d0 [ 835.092142][T20955] ? __fget_files+0x21f/0x3d0 [ 835.092164][T20955] ksys_read+0x12a/0x250 [ 835.092180][T20955] ? __pfx_ksys_read+0x10/0x10 [ 835.092198][T20955] ? rcu_is_watching+0x12/0xc0 [ 835.092217][T20955] do_syscall_64+0x115/0x840 [ 835.092238][T20955] ? clear_bhb_loop+0x40/0x90 [ 835.092256][T20955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.092271][T20955] RIP: 0033:0x7f077655d68e [ 835.092284][T20955] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 835.092298][T20955] RSP: 002b:00007f0777394fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 835.092312][T20955] RAX: ffffffffffffffda RBX: 00007f07773956c0 RCX: 00007f077655d68e [ 835.092322][T20955] RDX: 000000000000000f RSI: 00007f07773950a0 RDI: 0000000000000004 [ 835.092330][T20955] RBP: 00007f0777395090 R08: 0000000000000000 R09: 0000000000000000 [ 835.092339][T20955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 835.092347][T20955] R13: 00007f0776816038 R14: 00007f0776815fa0 R15: 00007ffcd43ab558 [ 835.092366][T20955] [ 835.695366][ T30] audit: type=1800 audit(1780549753.316:105): pid=20966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3009" name="file0" dev="tmpfs" ino=44 res=0 errno=0 [ 835.906113][T20963] FAULT_INJECTION: forcing a failure. [ 835.906113][T20963] name fail_futex, interval 1, probability 0, space 0, times 0 [ 836.048286][T20963] CPU: 0 UID: 0 PID: 20963 Comm: syz.1.3010 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.048312][T20963] Tainted: [L]=SOFTLOCKUP [ 836.048317][T20963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 836.048326][T20963] Call Trace: [ 836.048331][T20963] [ 836.048337][T20963] dump_stack_lvl+0x100/0x190 [ 836.048357][T20963] should_fail_ex.cold+0x5/0xa [ 836.048376][T20963] get_futex_key+0xf78/0x1510 [ 836.048403][T20963] ? __pfx_get_futex_key+0x10/0x10 [ 836.048425][T20963] ? lock_acquire+0x1b1/0x370 [ 836.048453][T20963] futex_wake+0xea/0x530 [ 836.048472][T20963] ? __pfx_futex_wake+0x10/0x10 [ 836.048489][T20963] ? exit_mm_release+0x19/0x30 [ 836.048520][T20963] do_futex+0x32b/0x350 [ 836.048536][T20963] ? __pfx_do_futex+0x10/0x10 [ 836.048549][T20963] ? __might_fault+0xc5/0x140 [ 836.048577][T20963] mm_release+0x24a/0x2f0 [ 836.048594][T20963] do_exit+0x707/0x2af0 [ 836.048618][T20963] ? __pfx_do_exit+0x10/0x10 [ 836.048639][T20963] ? do_raw_spin_lock+0x128/0x260 [ 836.048655][T20963] ? find_held_lock+0x2b/0x80 [ 836.048672][T20963] ? get_signal+0x7e5/0x2210 [ 836.048692][T20963] do_group_exit+0xd5/0x2a0 [ 836.048714][T20963] get_signal+0x20ff/0x2210 [ 836.048736][T20963] ? __pfx___do_sys_futex_requeue+0x10/0x10 [ 836.048754][T20963] ? __pfx_get_signal+0x10/0x10 [ 836.048773][T20963] ? do_futex+0x192/0x350 [ 836.048789][T20963] arch_do_signal_or_restart+0x91/0x7a0 [ 836.048811][T20963] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 836.048839][T20963] ? rcu_is_watching+0x12/0xc0 [ 836.048858][T20963] exit_to_user_mode_loop+0x98/0x670 [ 836.048881][T20963] ? rcu_is_watching+0x12/0xc0 [ 836.048901][T20963] do_syscall_64+0x652/0x840 [ 836.048922][T20963] ? clear_bhb_loop+0x40/0x90 [ 836.048940][T20963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.048955][T20963] RIP: 0033:0x7f62b019ce59 [ 836.048968][T20963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.048982][T20963] RSP: 002b:00007f62b10d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 836.048996][T20963] RAX: fffffffffffffe00 RBX: 00007f62b0416188 RCX: 00007f62b019ce59 [ 836.049006][T20963] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f62b0416188 [ 836.049015][T20963] RBP: 00007f62b0416180 R08: 0000000000000000 R09: 0000000000000000 [ 836.049024][T20963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.049032][T20963] R13: 00007f62b0416218 R14: 00007fff58d09a30 R15: 00007fff58d09b18 [ 836.049051][T20963] [ 836.908805][T20979] random: crng reseeded on system resumption [ 837.341370][T20987] random: crng reseeded on system resumption [ 838.124337][ T30] audit: type=1800 audit(1780549755.869:106): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3015" name="file0" dev="tmpfs" ino=820 res=0 errno=0 [ 838.838263][T21005] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3018'. [ 840.129396][T21023] vivid-007: ================= START STATUS ================= [ 840.200982][T21023] vivid-007: Enable Output Cropping: true grabbed [ 840.251513][T21023] vivid-007: Enable Output Composing: true grabbed [ 840.307206][T21023] vivid-007: Enable Output Scaler: true grabbed [ 840.345605][T21023] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 840.401249][T21023] vivid-007: Transmit Mode: HDMI grabbed [ 840.444685][T21023] vivid-007: Hotplug Present: 0x00000000 [ 840.492798][T21023] vivid-007: RxSense Present: 0x00000000 [ 840.539052][T13161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.562889][T21023] vivid-007: EDID Present: 0x00000000 [ 840.622692][T21023] vivid-007: ================== END STATUS ================== [ 841.273604][T13161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.583552][T13161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.827977][T13161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.111975][T13161] bridge_slave_1: left allmulticast mode [ 844.130185][T13161] bridge_slave_1: left promiscuous mode [ 844.154080][T13161] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.208824][T13161] bridge_slave_0: left allmulticast mode [ 844.236769][T13161] bridge_slave_0: left promiscuous mode [ 844.269407][T13161] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.758162][T13161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.803763][T13161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.838260][T13161] bond0 (unregistering): Released all slaves [ 844.887097][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 845.780345][ T30] audit: type=1800 audit(1780549763.559:107): pid=21096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3032" name="file0" dev="tmpfs" ino=842 res=0 errno=0 [ 846.309702][T21110] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3033'. [ 846.487065][T13161] hsr_slave_0: left promiscuous mode [ 846.580327][T13161] hsr_slave_1: left promiscuous mode [ 846.619649][T13161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.675007][T13161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.752284][T13161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.813197][T13161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.965712][T13161] veth1_macvtap: left promiscuous mode [ 847.000039][T13161] veth0_macvtap: left promiscuous mode [ 847.044726][T13161] veth1_vlan: left promiscuous mode [ 847.076175][T13161] veth0_vlan: left promiscuous mode [ 847.958395][T21136] FAULT_INJECTION: forcing a failure. [ 847.958395][T21136] name failslab, interval 1, probability 0, space 0, times 0 [ 848.032252][T21136] CPU: 0 UID: 0 PID: 21136 Comm: syz.3.3039 Tainted: G L syzkaller #0 PREEMPT(full) [ 848.032278][T21136] Tainted: [L]=SOFTLOCKUP [ 848.032283][T21136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 848.032292][T21136] Call Trace: [ 848.032297][T21136] [ 848.032302][T21136] dump_stack_lvl+0x100/0x190 [ 848.032323][T21136] should_fail_ex.cold+0x5/0xa [ 848.032342][T21136] should_failslab+0xc2/0x120 [ 848.032361][T21136] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 848.032385][T21136] ? __anon_vma_prepare+0xae/0x5e0 [ 848.032410][T21136] __anon_vma_prepare+0xae/0x5e0 [ 848.032431][T21136] ? __pfx___pte_alloc+0x10/0x10 [ 848.032449][T21136] __vmf_anon_prepare+0x11f/0x250 [ 848.032469][T21136] do_anonymous_page+0x536/0x2050 [ 848.032497][T21136] __handle_mm_fault+0x1d2c/0x2a00 [ 848.032522][T21136] ? mt_find+0x45e/0x8e0 [ 848.032553][T21136] ? __pfx___handle_mm_fault+0x10/0x10 [ 848.032574][T21136] ? __pfx_mt_find+0x10/0x10 [ 848.032610][T21136] handle_mm_fault+0x37b/0xa30 [ 848.032635][T21136] __get_user_pages+0x1178/0x32a0 [ 848.032661][T21136] ? __pfx___get_user_pages+0x10/0x10 [ 848.032687][T21136] populate_vma_page_range+0x267/0x3f0 [ 848.032708][T21136] ? __pfx_populate_vma_page_range+0x10/0x10 [ 848.032726][T21136] ? __pfx_find_vma_intersection+0x10/0x10 [ 848.032745][T21136] ? do_mmap+0x93f/0x12f0 [ 848.032765][T21136] __mm_populate+0x107/0x3a0 [ 848.032785][T21136] ? __pfx___mm_populate+0x10/0x10 [ 848.032805][T21136] ? up_write+0x28c/0x4f0 [ 848.032823][T21136] vm_mmap_pgoff+0x37f/0x470 [ 848.032844][T21136] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 848.032864][T21136] ? do_futex+0x192/0x350 [ 848.032880][T21136] ? __pfx_do_futex+0x10/0x10 [ 848.032893][T21136] ? __pfx_do_sys_openat2+0x10/0x10 [ 848.032919][T21136] ksys_mmap_pgoff+0xe4/0x610 [ 848.032937][T21136] ? __x64_sys_futex+0x358/0x4d0 [ 848.032952][T21136] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 848.032969][T21136] ? xfd_validate_state+0x129/0x190 [ 848.032988][T21136] __x64_sys_mmap+0x125/0x190 [ 848.033005][T21136] do_syscall_64+0x115/0x840 [ 848.033025][T21136] ? clear_bhb_loop+0x40/0x90 [ 848.033044][T21136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.033058][T21136] RIP: 0033:0x7f077659ce59 [ 848.033071][T21136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.033086][T21136] RSP: 002b:00007f0777374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 848.033100][T21136] RAX: ffffffffffffffda RBX: 00007f0776816090 RCX: 00007f077659ce59 [ 848.033110][T21136] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000000000000 [ 848.033118][T21136] RBP: 00007f0776632d6f R08: 0000000000000002 R09: 0000000000008000 [ 848.033127][T21136] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 848.033135][T21136] R13: 00007f0776816128 R14: 00007f0776816090 R15: 00007ffcd43ab558 [ 848.033154][T21136] [ 848.924339][T13161] team0 (unregistering): Port device team_slave_1 removed [ 849.075277][T13161] team0 (unregistering): Port device team_slave_0 removed [ 849.512867][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 850.688231][T21158] futex_wake_op: syz.3.3041 tries to shift op by -2048; fix this program [ 850.738888][T21158] futex_wake_op: syz.3.3041 tries to shift op by -2048; fix this program [ 850.780237][T21158] 0x000000000001-0x000000020000 : "" [ 850.922171][T21158] ftl_cs: FTL header corrupt! [ 851.793144][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 852.812740][T21191] random: crng reseeded on system resumption [ 853.691496][T21210] futex_wake_op: syz.4.3047 tries to shift op by -2048; fix this program [ 853.749756][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 853.818850][T21210] futex_wake_op: syz.4.3047 tries to shift op by -2048; fix this program [ 854.339553][T21219] HfR: entered promiscuous mode [ 854.373603][T21219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3049'. [ 854.373670][T21219] HfR: left promiscuous mode [ 856.114825][T21223] FAULT_INJECTION: forcing a failure. [ 856.114825][T21223] name fail_futex, interval 1, probability 0, space 0, times 0 [ 856.114855][T21223] CPU: 0 UID: 0 PID: 21223 Comm: syz.4.3047 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.114876][T21223] Tainted: [L]=SOFTLOCKUP [ 856.114881][T21223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 856.114890][T21223] Call Trace: [ 856.114895][T21223] [ 856.114900][T21223] dump_stack_lvl+0x100/0x190 [ 856.114920][T21223] should_fail_ex.cold+0x5/0xa [ 856.114939][T21223] get_futex_key+0x295/0x1510 [ 856.114976][T21223] ? __pfx_get_futex_key+0x10/0x10 [ 856.114998][T21223] ? lock_acquire+0x1b1/0x370 [ 856.115027][T21223] futex_wake+0xea/0x530 [ 856.115046][T21223] ? __pfx_futex_wake+0x10/0x10 [ 856.115064][T21223] ? exit_mm_release+0x19/0x30 [ 856.115089][T21223] do_futex+0x32b/0x350 [ 856.115105][T21223] ? __pfx_do_futex+0x10/0x10 [ 856.115118][T21223] ? __might_fault+0xc5/0x140 [ 856.115145][T21223] mm_release+0x24a/0x2f0 [ 856.115163][T21223] do_exit+0x707/0x2af0 [ 856.115186][T21223] ? __pfx_do_exit+0x10/0x10 [ 856.115207][T21223] ? do_raw_spin_lock+0x128/0x260 [ 856.115222][T21223] ? find_held_lock+0x2b/0x80 [ 856.115240][T21223] ? get_signal+0x7e5/0x2210 [ 856.115259][T21223] do_group_exit+0xd5/0x2a0 [ 856.115281][T21223] get_signal+0x20ff/0x2210 [ 856.115305][T21223] ? __pfx_get_signal+0x10/0x10 [ 856.115324][T21223] ? do_futex+0x192/0x350 [ 856.115340][T21223] arch_do_signal_or_restart+0x91/0x7a0 [ 856.115363][T21223] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 856.115389][T21223] ? fput+0x79/0x100 [ 856.115409][T21223] ? rcu_is_watching+0x12/0xc0 [ 856.115428][T21223] exit_to_user_mode_loop+0x98/0x670 [ 856.115450][T21223] ? rcu_is_watching+0x12/0xc0 [ 856.115468][T21223] do_syscall_64+0x652/0x840 [ 856.115489][T21223] ? clear_bhb_loop+0x40/0x90 [ 856.115506][T21223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.115521][T21223] RIP: 0033:0x7fc90939ce59 [ 856.115534][T21223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.115547][T21223] RSP: 002b:00007fc90a18d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 856.115562][T21223] RAX: fffffffffffffe00 RBX: 00007fc909616368 RCX: 00007fc90939ce59 [ 856.115571][T21223] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc909616368 [ 856.115580][T21223] RBP: 00007fc909616360 R08: 0000000000000000 R09: 0000000000000000 [ 856.115589][T21223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.115597][T21223] R13: 00007fc9096163f8 R14: 00007fff8bd2f510 R15: 00007fff8bd2f5f8 [ 856.115616][T21223] [ 857.632011][T21275] random: crng reseeded on system resumption [ 858.040416][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3060'. [ 859.558312][T21288] bonding: unable to delete non-existent ) [ 860.644168][ T30] audit: type=1800 audit(1780549778.496:108): pid=21327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3070" name="file0" dev="tmpfs" ino=804 res=0 errno=0 [ 862.529213][T21348] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3073'. [ 862.632513][T21357] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3073'. [ 863.167911][T21366] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3077'. [ 863.833669][T21384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3081'. [ 864.008458][T21384] virt_wifi0: entered allmulticast mode [ 868.124537][T21469] ceph: Failed to parse sending metrics switch value 'P^' [ 868.696655][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.696725][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.772918][T21500] program syz.0.3100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.315684][T21504] random: crng reseeded on system resumption [ 870.872859][T21562] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 873.517645][T21607] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3118'. [ 875.311967][ T30] audit: type=1800 audit(1780549793.243:109): pid=21626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3122" name="file0" dev="tmpfs" ino=189 res=0 errno=0 [ 876.039040][T21638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3123'. [ 877.230460][T21655] FAULT_INJECTION: forcing a failure. [ 877.230460][T21655] name failslab, interval 1, probability 0, space 0, times 0 [ 877.357472][T21655] CPU: 0 UID: 0 PID: 21655 Comm: syz.4.3127 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.357500][T21655] Tainted: [L]=SOFTLOCKUP [ 877.357506][T21655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 877.357516][T21655] Call Trace: [ 877.357522][T21655] [ 877.357529][T21655] dump_stack_lvl+0x100/0x190 [ 877.357551][T21655] should_fail_ex.cold+0x5/0xa [ 877.357573][T21655] should_failslab+0xc2/0x120 [ 877.357592][T21655] __kmalloc_cache_noprof+0x7a/0x6f0 [ 877.357613][T21655] ? percpu_ref_init+0xec/0x3f0 [ 877.357633][T21655] ? __pfx_obj_cgroup_release+0x10/0x10 [ 877.357650][T21655] percpu_ref_init+0xec/0x3f0 [ 877.357666][T21655] ? kasan_save_track+0x14/0x30 [ 877.357685][T21655] mem_cgroup_css_online+0x177/0xbf0 [ 877.357711][T21655] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 877.357735][T21655] online_css+0xb2/0x350 [ 877.357752][T21655] cgroup_apply_control_enable+0xa8d/0xdd0 [ 877.357782][T21655] cgroup_mkdir+0x59c/0x1310 [ 877.357805][T21655] ? __pfx_cgroup_mkdir+0x10/0x10 [ 877.357826][T21655] kernfs_iop_mkdir+0x111/0x190 [ 877.357844][T21655] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 877.357867][T21655] vfs_mkdir+0x361/0x850 [ 877.357893][T21655] filename_mkdirat+0x48b/0x5e0 [ 877.357914][T21655] ? __pfx_filename_mkdirat+0x10/0x10 [ 877.357934][T21655] ? strncpy_from_user+0x19d/0x2d0 [ 877.357958][T21655] ? do_getname+0x191/0x390 [ 877.357980][T21655] __x64_sys_mkdir+0x6b/0x90 [ 877.358000][T21655] do_syscall_64+0x115/0x840 [ 877.358021][T21655] ? clear_bhb_loop+0x40/0x90 [ 877.358045][T21655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.358061][T21655] RIP: 0033:0x7fc90939ce59 [ 877.358075][T21655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.358091][T21655] RSP: 002b:00007fc90a211028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 877.358108][T21655] RAX: ffffffffffffffda RBX: 00007fc909615fa0 RCX: 00007fc90939ce59 [ 877.358118][T21655] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 877.358127][T21655] RBP: 00007fc909432d6f R08: 0000000000000000 R09: 0000000000000000 [ 877.358136][T21655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.358145][T21655] R13: 00007fc909616038 R14: 00007fc909615fa0 R15: 00007fff8bd2f5f8 [ 877.358165][T21655] [ 878.197477][ T30] audit: type=1800 audit(1780549796.097:110): pid=21667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3130" name="file0" dev="tmpfs" ino=200 res=0 errno=0 [ 881.126591][T21734] nfs: Unknown parameter 'ethtool' [ 882.031601][T21758] kAFS: unparsable volume name [ 882.656360][ T30] audit: type=1800 audit(1780549800.631:111): pid=21771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3146" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 883.166539][T21778] bond0: option arp_interval: invalid value () [ 883.248533][T21778] bond0: option arp_interval: allowed values 0 - 2147483647 [ 883.992835][T21787] FAULT_INJECTION: forcing a failure. [ 883.992835][T21787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 884.094903][T21787] CPU: 0 UID: 0 PID: 21787 Comm: syz.3.3150 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.094930][T21787] Tainted: [L]=SOFTLOCKUP [ 884.094936][T21787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.094945][T21787] Call Trace: [ 884.094951][T21787] [ 884.094958][T21787] dump_stack_lvl+0x100/0x190 [ 884.094982][T21787] should_fail_ex.cold+0x5/0xa [ 884.095000][T21787] ? prepare_alloc_pages+0x16d/0x5f0 [ 884.095022][T21787] should_fail_alloc_page+0xeb/0x140 [ 884.095043][T21787] prepare_alloc_pages+0x1f0/0x5f0 [ 884.095065][T21787] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 884.095095][T21787] ? __lock_acquire+0x4a5/0x2630 [ 884.095121][T21787] ? __lock_acquire+0x4a5/0x2630 [ 884.095143][T21787] ? __css_rstat_updated+0x1ce/0x5a0 [ 884.095166][T21787] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 884.095193][T21787] ? do_raw_spin_lock+0x128/0x260 [ 884.095210][T21787] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 884.095226][T21787] ? find_held_lock+0x2b/0x80 [ 884.095250][T21787] ? __lock_acquire+0x4a5/0x2630 [ 884.095273][T21787] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 884.095296][T21787] ? policy_nodemask+0xed/0x4f0 [ 884.095315][T21787] alloc_pages_mpol+0x1fb/0x540 [ 884.095335][T21787] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 884.095353][T21787] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 884.095369][T21787] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 884.095387][T21787] folio_alloc_mpol_noprof+0x36/0x260 [ 884.095409][T21787] shmem_alloc_folio+0x135/0x160 [ 884.095431][T21787] shmem_alloc_and_add_folio+0x371/0xd40 [ 884.095460][T21787] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 884.095486][T21787] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 884.095506][T21787] shmem_get_folio_gfp+0x6ab/0x1900 [ 884.095525][T21787] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 884.095541][T21787] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 884.095557][T21787] ? lockdep_hardirqs_on+0x78/0x100 [ 884.095582][T21787] shmem_fault+0x1f9/0xa20 [ 884.095596][T21787] ? __lock_acquire+0x4a5/0x2630 [ 884.095619][T21787] ? __pfx_shmem_fault+0x10/0x10 [ 884.095635][T21787] ? __up_read+0x2c1/0x6e0 [ 884.095658][T21787] ? __pfx_filemap_map_pages+0x10/0x10 [ 884.095681][T21787] __do_fault+0x10b/0x440 [ 884.095696][T21787] ? find_held_lock+0x2b/0x80 [ 884.095715][T21787] do_fault+0x2db/0x1750 [ 884.095737][T21787] __handle_mm_fault+0x187d/0x2a00 [ 884.095761][T21787] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 884.095780][T21787] ? __pfx___handle_mm_fault+0x10/0x10 [ 884.095804][T21787] ? pte_offset_map_lock+0x174/0x320 [ 884.095822][T21787] ? find_held_lock+0x2b/0x80 [ 884.095852][T21787] ? follow_page_pte+0x4d0/0x13f0 [ 884.095874][T21787] handle_mm_fault+0x37b/0xa30 [ 884.095900][T21787] __get_user_pages+0x1178/0x32a0 [ 884.095923][T21787] ? down_read_killable+0x307/0x4b0 [ 884.095939][T21787] ? __pfx___get_user_pages+0x10/0x10 [ 884.095963][T21787] faultin_page_range+0x1f1/0x9e0 [ 884.095987][T21787] madvise_do_behavior+0x354/0x510 [ 884.096010][T21787] ? __pfx_madvise_do_behavior+0x10/0x10 [ 884.096041][T21787] do_madvise+0x195/0x240 [ 884.096060][T21787] ? __pfx_do_madvise+0x10/0x10 [ 884.096079][T21787] ? do_futex+0x192/0x350 [ 884.096112][T21787] __x64_sys_madvise+0xa9/0x110 [ 884.096132][T21787] ? lockdep_hardirqs_on+0x78/0x100 [ 884.096152][T21787] do_syscall_64+0x115/0x840 [ 884.096172][T21787] ? clear_bhb_loop+0x40/0x90 [ 884.096192][T21787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.096207][T21787] RIP: 0033:0x7f077659ce59 [ 884.096221][T21787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.096236][T21787] RSP: 002b:00007f0777395028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 884.096252][T21787] RAX: ffffffffffffffda RBX: 00007f0776815fa0 RCX: 00007f077659ce59 [ 884.096262][T21787] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 884.096272][T21787] RBP: 00007f0776632d6f R08: 0000000000000000 R09: 0000000000000000 [ 884.096281][T21787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.096290][T21787] R13: 00007f0776816038 R14: 00007f0776815fa0 R15: 00007ffcd43ab558 [ 884.096310][T21787] [ 884.421658][T21795] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 886.389725][T21835] Process accounting resumed [ 886.807939][T21852] FAULT_INJECTION: forcing a failure. [ 886.807939][T21852] name failslab, interval 1, probability 0, space 0, times 0 [ 886.874446][T21852] CPU: 0 UID: 0 PID: 21852 Comm: syz.4.3162 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.874475][T21852] Tainted: [L]=SOFTLOCKUP [ 886.874481][T21852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 886.874491][T21852] Call Trace: [ 886.874496][T21852] [ 886.874503][T21852] dump_stack_lvl+0x100/0x190 [ 886.874526][T21852] should_fail_ex.cold+0x5/0xa [ 886.874547][T21852] should_failslab+0xc2/0x120 [ 886.874566][T21852] __kmalloc_cache_noprof+0x7a/0x6f0 [ 886.874588][T21852] ? proc_thread_self_get_link+0x1a6/0x210 [ 886.874610][T21852] proc_thread_self_get_link+0x1a6/0x210 [ 886.874629][T21852] pick_link+0xac2/0x13c0 [ 886.874644][T21852] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 886.874665][T21852] step_into_slowpath+0x9ba/0xf90 [ 886.874685][T21852] ? __pfx_step_into_slowpath+0x10/0x10 [ 886.874704][T21852] ? lookup_fast+0x2da/0x600 [ 886.874717][T21852] ? inode_permission+0x374/0x620 [ 886.874741][T21852] link_path_walk+0xf28/0x1cc0 [ 886.874764][T21852] path_openat+0x1be/0x31a0 [ 886.874782][T21852] ? kasan_save_stack+0x3f/0x50 [ 886.874796][T21852] ? kasan_save_stack+0x30/0x50 [ 886.874810][T21852] ? kasan_save_track+0x14/0x30 [ 886.874825][T21852] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 886.874881][T21852] ? __pfx_path_openat+0x10/0x10 [ 886.874910][T21852] do_file_open+0x20e/0x430 [ 886.874931][T21852] ? __pfx_do_file_open+0x10/0x10 [ 886.874964][T21852] ? alloc_fd+0x476/0x790 [ 886.874983][T21852] ? do_getname+0x191/0x390 [ 886.875006][T21852] do_sys_openat2+0x10d/0x1e0 [ 886.875029][T21852] ? __pfx_do_sys_openat2+0x10/0x10 [ 886.875058][T21852] __x64_sys_openat+0x12d/0x210 [ 886.875082][T21852] ? __pfx___x64_sys_openat+0x10/0x10 [ 886.875103][T21852] ? ksys_write+0x1ac/0x250 [ 886.875123][T21852] ? rcu_is_watching+0x12/0xc0 [ 886.875143][T21852] do_syscall_64+0x115/0x840 [ 886.875164][T21852] ? clear_bhb_loop+0x40/0x90 [ 886.875188][T21852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.875204][T21852] RIP: 0033:0x7fc90935d68e [ 886.875218][T21852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 886.875241][T21852] RSP: 002b:00007fc90a210ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 886.875257][T21852] RAX: ffffffffffffffda RBX: 00007fc90a2116c0 RCX: 00007fc90935d68e [ 886.875268][T21852] RDX: 0000000000000002 RSI: 00007fc90a210f90 RDI: ffffffffffffff9c [ 886.875279][T21852] RBP: 00007fc909432d6f R08: 0000000000000000 R09: 0000000000000000 [ 886.875289][T21852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.875298][T21852] R13: 00007fc909616038 R14: 00007fc909615fa0 R15: 00007fff8bd2f5f8 [ 886.875318][T21852] [ 887.651670][T21854] can: request_module (can-proto-4) failed. [ 891.870242][T21915] FAULT_INJECTION: forcing a failure. [ 891.870242][T21915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.993128][T21915] CPU: 0 UID: 0 PID: 21915 Comm: syz.3.3175 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.993153][T21915] Tainted: [L]=SOFTLOCKUP [ 891.993159][T21915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 891.993168][T21915] Call Trace: [ 891.993173][T21915] [ 891.993179][T21915] dump_stack_lvl+0x100/0x190 [ 891.993201][T21915] should_fail_ex.cold+0x5/0xa [ 891.993220][T21915] _copy_from_user+0x2e/0xd0 [ 891.993242][T21915] move_addr_to_kernel+0x65/0x170 [ 891.993265][T21915] __sys_connect+0xb5/0x170 [ 891.993286][T21915] ? __pfx___sys_connect+0x10/0x10 [ 891.993307][T21915] ? __fget_files+0x21f/0x3d0 [ 891.993332][T21915] ? __pfx_ksys_write+0x10/0x10 [ 891.993352][T21915] __x64_sys_connect+0x72/0xb0 [ 891.993376][T21915] ? lockdep_hardirqs_on+0x78/0x100 [ 891.993405][T21915] do_syscall_64+0x115/0x840 [ 891.993425][T21915] ? clear_bhb_loop+0x40/0x90 [ 891.993443][T21915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.993459][T21915] RIP: 0033:0x7f077659ce59 [ 891.993472][T21915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.993487][T21915] RSP: 002b:00007f07747b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 891.993501][T21915] RAX: ffffffffffffffda RBX: 00007f0776816360 RCX: 00007f077659ce59 [ 891.993511][T21915] RDX: 0000000000000055 RSI: 00002000000018c0 RDI: 0000000000000003 [ 891.993521][T21915] RBP: 00007f07747b4090 R08: 0000000000000000 R09: 0000000000000000 [ 891.993530][T21915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.993538][T21915] R13: 00007f07768163f8 R14: 00007f0776816360 R15: 00007ffcd43ab558 [ 891.993558][T21915] [ 892.954045][ T30] audit: type=1806 audit(1780549810.964:112): xattr="." res=0 [ 898.573086][T22035] vcan0: tx drop: invalid da for name 0x000000000000efff [ 898.934028][T22047] random: crng reseeded on system resumption [ 900.017417][T22061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3208'. [ 900.126332][T22060] HfR: entered promiscuous mode [ 900.165612][T22061] HfR: left promiscuous mode [ 901.400830][T22085] FAULT_INJECTION: forcing a failure. [ 901.400830][T22085] name failslab, interval 1, probability 0, space 0, times 0 [ 901.460559][T22085] CPU: 0 UID: 0 PID: 22085 Comm: syz.4.3214 Tainted: G L syzkaller #0 PREEMPT(full) [ 901.460592][T22085] Tainted: [L]=SOFTLOCKUP [ 901.460598][T22085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 901.460607][T22085] Call Trace: [ 901.460613][T22085] [ 901.460619][T22085] dump_stack_lvl+0x100/0x190 [ 901.460643][T22085] should_fail_ex.cold+0x5/0xa [ 901.460665][T22085] should_failslab+0xc2/0x120 [ 901.460685][T22085] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 901.460709][T22085] ? taskstats_exit+0x67b/0xc10 [ 901.460730][T22085] ? rcu_is_watching+0x12/0xc0 [ 901.460751][T22085] taskstats_exit+0x67b/0xc10 [ 901.460771][T22085] ? __pfx_acct_update_integrals+0x10/0x10 [ 901.460792][T22085] ? __pfx_taskstats_exit+0x10/0x10 [ 901.460813][T22085] ? rcu_read_lock_any_held+0x6a/0xa0 [ 901.460832][T22085] ? exit_signals+0x395/0xaf0 [ 901.460853][T22085] do_exit+0x65c/0x2af0 [ 901.460878][T22085] ? __pfx_do_exit+0x10/0x10 [ 901.460899][T22085] ? do_raw_spin_lock+0x128/0x260 [ 901.460916][T22085] ? find_held_lock+0x2b/0x80 [ 901.460934][T22085] ? get_signal+0x7e5/0x2210 [ 901.460953][T22085] do_group_exit+0xd5/0x2a0 [ 901.460976][T22085] get_signal+0x20ff/0x2210 [ 901.461000][T22085] ? __pfx_get_signal+0x10/0x10 [ 901.461020][T22085] ? do_futex+0x192/0x350 [ 901.461037][T22085] arch_do_signal_or_restart+0x91/0x7a0 [ 901.461061][T22085] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 901.461090][T22085] ? __sys_socket+0xac/0x260 [ 901.461118][T22085] ? rcu_is_watching+0x12/0xc0 [ 901.461137][T22085] exit_to_user_mode_loop+0x98/0x670 [ 901.461166][T22085] ? rcu_is_watching+0x12/0xc0 [ 901.461184][T22085] do_syscall_64+0x652/0x840 [ 901.461206][T22085] ? clear_bhb_loop+0x40/0x90 [ 901.461224][T22085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.461240][T22085] RIP: 0033:0x7fc90939ce59 [ 901.461253][T22085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.461268][T22085] RSP: 002b:00007fc90a2110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 901.461283][T22085] RAX: fffffffffffffe00 RBX: 00007fc909615fa8 RCX: 00007fc90939ce59 [ 901.461293][T22085] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc909615fa8 [ 901.461302][T22085] RBP: 00007fc909615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 901.461311][T22085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.461320][T22085] R13: 00007fc909616038 R14: 00007fff8bd2f510 R15: 00007fff8bd2f5f8 [ 901.461339][T22085] [ 902.245909][T22089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3215'. [ 902.909323][T22092] FAULT_INJECTION: forcing a failure. [ 902.909323][T22092] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 902.961267][T22087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.048350][T22092] CPU: 0 UID: 0 PID: 22092 Comm: syz.0.3216 Tainted: G L syzkaller #0 PREEMPT(full) [ 903.048378][T22092] Tainted: [L]=SOFTLOCKUP [ 903.048385][T22092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 903.048394][T22092] Call Trace: [ 903.048399][T22092] [ 903.048406][T22092] dump_stack_lvl+0x100/0x190 [ 903.048428][T22092] should_fail_ex.cold+0x5/0xa [ 903.048445][T22092] ? prepare_alloc_pages+0x16d/0x5f0 [ 903.048498][T22092] should_fail_alloc_page+0xeb/0x140 [ 903.048519][T22092] prepare_alloc_pages+0x1f0/0x5f0 [ 903.048542][T22092] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 903.048566][T22092] ? stack_trace_save+0x8e/0xc0 [ 903.048585][T22092] ? __pfx_stack_trace_save+0x10/0x10 [ 903.048603][T22092] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 903.048630][T22092] ? stack_depot_save_flags+0x27/0x9d0 [ 903.048655][T22092] ? find_held_lock+0x2b/0x80 [ 903.048673][T22092] ? is_bpf_text_address+0x8a/0x1a0 [ 903.048726][T22092] ? kasan_save_stack+0x3f/0x50 [ 903.048741][T22092] ? kasan_save_stack+0x30/0x50 [ 903.048756][T22092] ? kasan_save_track+0x14/0x30 [ 903.048771][T22092] ? __kasan_slab_alloc+0x89/0x90 [ 903.048787][T22092] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 903.048810][T22092] ? __pmd_alloc+0xbf/0x950 [ 903.048831][T22092] ? walk_to_pmd+0x3a3/0x4c0 [ 903.048852][T22092] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 903.048876][T22092] ? kcov_mmap+0xca/0x130 [ 903.048900][T22092] ? __mmap_region+0x13e1/0x2dd0 [ 903.048921][T22092] ? mmap_region+0x527/0x620 [ 903.048934][T22092] ? vm_mmap_pgoff+0x29e/0x470 [ 903.048953][T22092] ? __x64_sys_mmap+0x125/0x190 [ 903.048968][T22092] ? do_syscall_64+0x115/0x840 [ 903.048989][T22092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.049011][T22092] ? __lock_acquire+0x4a5/0x2630 [ 903.049036][T22092] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 903.049063][T22092] ? policy_nodemask+0xed/0x4f0 [ 903.049082][T22092] alloc_pages_mpol+0x1fb/0x540 [ 903.049101][T22092] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 903.049120][T22092] ? do_raw_spin_lock+0x128/0x260 [ 903.049138][T22092] ? find_held_lock+0x2b/0x80 [ 903.049159][T22092] alloc_pages_noprof+0x1a/0x160 [ 903.049179][T22092] pte_alloc_one+0x1c/0x3d0 [ 903.049199][T22092] __pte_alloc+0x6d/0x380 [ 903.049216][T22092] ? __pfx___pte_alloc+0x10/0x10 [ 903.049233][T22092] ? walk_to_pmd+0x302/0x4c0 [ 903.049256][T22092] get_locked_pte+0xa1/0xc0 [ 903.049276][T22092] insert_page+0xcc/0x220 [ 903.049296][T22092] ? __pfx_insert_page+0x10/0x10 [ 903.049314][T22092] ? __pfx_down_read_trylock+0x10/0x10 [ 903.049336][T22092] vm_insert_page+0x2c0/0x400 [ 903.049357][T22092] kcov_mmap+0xca/0x130 [ 903.049378][T22092] __mmap_region+0x13e1/0x2dd0 [ 903.049405][T22092] ? __pfx___mmap_region+0x10/0x10 [ 903.049444][T22092] ? find_held_lock+0x2b/0x80 [ 903.049471][T22092] ? ima_match_policy+0x8c4/0x2350 [ 903.049544][T22092] ? ima_match_policy+0x8c4/0x2350 [ 903.049582][T22092] ? process_measurement+0x4c8/0x2350 [ 903.049631][T22092] mmap_region+0x527/0x620 [ 903.049649][T22092] ? __pfx_mmap_region+0x10/0x10 [ 903.049670][T22092] ? cap_mmap_addr+0x4b/0x120 [ 903.049684][T22092] ? bpf_lsm_mmap_addr+0x9/0x30 [ 903.049699][T22092] ? security_mmap_addr+0x71/0x1e0 [ 903.049719][T22092] ? __get_unmapped_area+0x255/0x3e0 [ 903.049741][T22092] do_mmap+0xc63/0x12f0 [ 903.049763][T22092] ? __pfx_do_mmap+0x10/0x10 [ 903.049782][T22092] ? __pfx_down_write_killable+0x10/0x10 [ 903.049809][T22092] vm_mmap_pgoff+0x29e/0x470 [ 903.049832][T22092] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 903.049849][T22092] ? __fget_files+0x215/0x3d0 [ 903.049871][T22092] ? __fget_files+0x21f/0x3d0 [ 903.049891][T22092] ksys_mmap_pgoff+0x3cb/0x610 [ 903.049910][T22092] ? __x64_sys_futex+0x358/0x4d0 [ 903.049926][T22092] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 903.049943][T22092] ? xfd_validate_state+0x129/0x190 [ 903.049958][T22092] ? ksys_write+0x1ac/0x250 [ 903.049978][T22092] __x64_sys_mmap+0x125/0x190 [ 903.049997][T22092] do_syscall_64+0x115/0x840 [ 903.050017][T22092] ? clear_bhb_loop+0x40/0x90 [ 903.050035][T22092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.050051][T22092] RIP: 0033:0x7ff01f59ce59 [ 903.050066][T22092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.050081][T22092] RSP: 002b:00007ff02039e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 903.050097][T22092] RAX: ffffffffffffffda RBX: 00007ff01f815fa0 RCX: 00007ff01f59ce59 [ 903.050108][T22092] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 903.050119][T22092] RBP: 00007ff01f632d6f R08: 00000000000000dd R09: 0000000000000000 [ 903.050128][T22092] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 903.050138][T22092] R13: 00007ff01f816038 R14: 00007ff01f815fa0 R15: 00007ffe8de330b8 [ 903.050157][T22092] [ 904.974053][T22092] kcov: kcov: vm_insert_page() failed [ 906.268134][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3232'. [ 906.526696][T22169] kafs: addr_prefs: Invalid Command [ 906.570423][T22169] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 906.636105][T22169] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 906.857125][T22171] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 907.025932][T22173] HfR: entered promiscuous mode [ 907.076753][T22175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3235'. [ 907.203813][T22175] HfR: left promiscuous mode [ 908.123478][T22179] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 908.154873][T22179] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 908.208567][T22179] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 908.311840][T22179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 908.325389][T22187] FAULT_INJECTION: forcing a failure. [ 908.325389][T22187] name failslab, interval 1, probability 0, space 0, times 0 [ 908.369191][T22179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 908.403345][T22179] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 908.419942][T22187] CPU: 0 UID: 0 PID: 22187 Comm: syz.4.3238 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.419968][T22187] Tainted: [L]=SOFTLOCKUP [ 908.419974][T22187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 908.419984][T22187] Call Trace: [ 908.419989][T22187] [ 908.419995][T22187] dump_stack_lvl+0x100/0x190 [ 908.420024][T22187] should_fail_ex.cold+0x5/0xa [ 908.420045][T22187] should_failslab+0xc2/0x120 [ 908.420064][T22187] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 908.420089][T22187] ? sk_prot_alloc+0x60/0x2a0 [ 908.420112][T22187] sk_prot_alloc+0x60/0x2a0 [ 908.420131][T22187] sk_alloc+0x36/0xe80 [ 908.420146][T22187] smc_create+0x11a/0x290 [ 908.420259][T22187] __sock_create+0x339/0x860 [ 908.420283][T22187] __sys_socket+0x14d/0x260 [ 908.420304][T22187] ? __pfx___sys_socket+0x10/0x10 [ 908.420330][T22187] __x64_sys_socket+0x72/0xb0 [ 908.420349][T22187] ? lockdep_hardirqs_on+0x78/0x100 [ 908.420370][T22187] do_syscall_64+0x115/0x840 [ 908.420390][T22187] ? clear_bhb_loop+0x40/0x90 [ 908.420408][T22187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.420423][T22187] RIP: 0033:0x7fc90939ce59 [ 908.420437][T22187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.420452][T22187] RSP: 002b:00007fc90a211028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 908.420467][T22187] RAX: ffffffffffffffda RBX: 00007fc909615fa0 RCX: 00007fc90939ce59 [ 908.420477][T22187] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 908.420486][T22187] RBP: 00007fc909432d6f R08: 0000000000000000 R09: 0000000000000000 [ 908.420495][T22187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.420504][T22187] R13: 00007fc909616038 R14: 00007fc909615fa0 R15: 00007fff8bd2f5f8 [ 908.420524][T22187] [ 909.150705][T22179] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 909.445756][ T7938] Bluetooth: hci4: command 0x0c1a tx timeout [ 909.837913][T22213] netlink: 408 bytes leftover after parsing attributes in process `syz.4.3244'. [ 910.158569][ T7938] Bluetooth: hci5: command 0x0c1a tx timeout [ 910.318001][ T7938] Bluetooth: hci3: command 0x041b tx timeout [ 910.361986][T22203] Process accounting resumed [ 910.397140][ T7938] Bluetooth: hci1: command 0x0c1a tx timeout [ 910.513443][T22218] netlink: 'syz.1.3245': attribute type 4 has an invalid length. [ 911.787257][ T30] audit: type=1800 audit(1780549829.912:113): pid=22242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3251" name="members" dev="configfs" ino=101214 res=0 errno=0 [ 911.977532][T22248] random: crng reseeded on system resumption [ 912.227664][ T7938] Bluetooth: hci5: command 0x0c1a tx timeout [ 912.466199][ T7938] Bluetooth: hci1: command 0x0c1a tx timeout [ 912.581791][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'. [ 913.296873][T22272] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0e02a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 913.312579][T22272] Call Trace: [ 913.315878][T22272] [ 913.318805][T22272] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 913.325485][T22272] ? __pfx___schedule+0x10/0x10 [ 913.330329][T22272] ? irqentry_exit+0x24d/0x970 [ 913.335088][T22272] mce_cpu_restart+0xd5/0x1f0 [ 913.339753][T22272] ? __pfx_mce_cpu_restart+0x10/0x10 [ 913.345024][T22272] smp_call_function_many_cond+0x13d4/0x1700 [ 913.351002][T22272] ? __pfx_mce_cpu_restart+0x10/0x10 [ 913.356278][T22272] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 913.362073][T22272] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 913.368391][T22272] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 913.374367][T22272] ? __timer_delete_sync+0x151/0x1c0 [ 913.379642][T22272] ? __pfx_mce_cpu_restart+0x10/0x10 [ 913.384910][T22272] on_each_cpu_cond_mask+0x40/0x90 [ 913.390017][T22272] set_bank+0x240/0x3a0 [ 913.394157][T22272] ? __pfx_set_bank+0x10/0x10 [ 913.398817][T22272] ? find_held_lock+0x2b/0x80 [ 913.403488][T22272] ? sysfs_file_kobj+0xe4/0x290 [ 913.408330][T22272] ? sysfs_file_kobj+0xe4/0x290 [ 913.413176][T22272] ? __pfx_set_bank+0x10/0x10 [ 913.417841][T22272] dev_attr_store+0x58/0x80 [ 913.422332][T22272] ? __pfx_dev_attr_store+0x10/0x10 [ 913.427512][T22272] sysfs_kf_write+0xf2/0x150 [ 913.432100][T22272] kernfs_fop_write_iter+0x3e0/0x5f0 [ 913.437372][T22272] ? __pfx_sysfs_kf_write+0x10/0x10 [ 913.442564][T22272] vfs_write+0x6ac/0x1070 [ 913.446876][T22272] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 913.452671][T22272] ? __pfx_vfs_write+0x10/0x10 [ 913.457435][T22272] ksys_write+0x12a/0x250 [ 913.461752][T22272] ? __pfx_ksys_write+0x10/0x10 [ 913.466590][T22272] ? rcu_is_watching+0x12/0xc0 [ 913.471354][T22272] do_syscall_64+0x115/0x840 [ 913.475934][T22272] ? clear_bhb_loop+0x40/0x90 [ 913.480598][T22272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.486475][T22272] RIP: 0033:0x7f62b019ce59 [ 913.490877][T22272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.510469][T22272] RSP: 002b:00007f62b111b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 913.518870][T22272] RAX: ffffffffffffffda RBX: 00007f62b0415fa0 RCX: 00007f62b019ce59 [ 913.526829][T22272] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 913.534781][T22272] RBP: 00007f62b0232d6f R08: 0000000000000000 R09: 0000000000000000 [ 913.542733][T22272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.550686][T22272] R13: 00007f62b0416038 R14: 00007f62b0415fa0 R15: 00007fff58d09b18 [ 913.558652][T22272] [ 914.113339][T22296] ICMPv6: process `syz.0.3263' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 914.537180][ T7938] Bluetooth: hci1: command 0x0c1a tx timeout [ 916.430867][T22326] Process accounting resumed [ 916.582061][T22356] FAULT_INJECTION: forcing a failure. [ 916.582061][T22356] name failslab, interval 1, probability 0, space 0, times 0 [ 916.690346][T22356] CPU: 0 UID: 0 PID: 22356 Comm: syz.4.3273 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.690373][T22356] Tainted: [L]=SOFTLOCKUP [ 916.690379][T22356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 916.690389][T22356] Call Trace: [ 916.690394][T22356] [ 916.690401][T22356] dump_stack_lvl+0x100/0x190 [ 916.690422][T22356] should_fail_ex.cold+0x5/0xa [ 916.690459][T22356] ? tomoyo_supervisor+0x65d/0x1340 [ 916.690484][T22356] should_failslab+0xc2/0x120 [ 916.690503][T22356] __kmalloc_noprof+0xe0/0x850 [ 916.690522][T22356] tomoyo_supervisor+0x65d/0x1340 [ 916.690549][T22356] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 916.690585][T22356] ? tomoyo_check_path_acl+0x141/0x210 [ 916.690604][T22356] ? tomoyo_check_acl+0x1f7/0x410 [ 916.690622][T22356] tomoyo_path_permission+0x270/0x3b0 [ 916.690642][T22356] tomoyo_check_open_permission+0x34d/0x3c0 [ 916.690662][T22356] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 916.690688][T22356] ? hook_file_open+0x24e/0x7a0 [ 916.690720][T22356] ? path_get+0x61/0x80 [ 916.690742][T22356] tomoyo_file_open+0x6b/0x90 [ 916.690758][T22356] security_file_open+0xb5/0x1e0 [ 916.690778][T22356] do_dentry_open+0x588/0x14d0 [ 916.690801][T22356] vfs_open+0x82/0x3f0 [ 916.690825][T22356] path_openat+0x208c/0x31a0 [ 916.690850][T22356] ? __pfx_path_openat+0x10/0x10 [ 916.690875][T22356] do_file_open+0x20e/0x430 [ 916.690895][T22356] ? __pfx_do_file_open+0x10/0x10 [ 916.690927][T22356] ? alloc_fd+0x476/0x790 [ 916.690947][T22356] ? do_getname+0x191/0x390 [ 916.690970][T22356] do_sys_openat2+0x10d/0x1e0 [ 916.690992][T22356] ? __pfx_do_sys_openat2+0x10/0x10 [ 916.691021][T22356] __x64_sys_openat+0x12d/0x210 [ 916.691044][T22356] ? __pfx___x64_sys_openat+0x10/0x10 [ 916.691070][T22356] ? rcu_is_watching+0x12/0xc0 [ 916.691090][T22356] do_syscall_64+0x115/0x840 [ 916.691113][T22356] ? clear_bhb_loop+0x40/0x90 [ 916.691131][T22356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.691147][T22356] RIP: 0033:0x7fc90939ce59 [ 916.691160][T22356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.691176][T22356] RSP: 002b:00007fc90a1cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 916.691192][T22356] RAX: ffffffffffffffda RBX: 00007fc909616180 RCX: 00007fc90939ce59 [ 916.691202][T22356] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 916.691212][T22356] RBP: 00007fc909432d6f R08: 0000000000000000 R09: 0000000000000000 [ 916.691221][T22356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.691231][T22356] R13: 00007fc909616218 R14: 00007fc909616180 R15: 00007fff8bd2f5f8 [ 916.691251][T22356] [ 917.090316][T22365] random: crng reseeded on system resumption [ 917.171283][T22366] random: crng reseeded on system resumption [ 917.971591][ T30] audit: type=1804 audit(1780549836.124:114): pid=22382 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3276" name="/newroot/203/file0" dev="tmpfs" ino=1065 res=1 errno=0 [ 918.142931][ T30] audit: type=1804 audit(1780549836.195:115): pid=22388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3276" name="/newroot/203/file0" dev="tmpfs" ino=1065 res=1 errno=0 [ 918.197874][T22392] random: crng reseeded on system resumption [ 919.557007][T22429] random: crng reseeded on system resumption [ 920.769545][T22473] random: crng reseeded on system resumption [ 922.924651][T22518] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3302'. [ 926.341965][T22588] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3313'. [ 926.629521][T22595] FAULT_INJECTION: forcing a failure. [ 926.629521][T22595] name failslab, interval 1, probability 0, space 0, times 0 [ 926.693992][T22595] CPU: 0 UID: 0 PID: 22595 Comm: syz.0.3315 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.694018][T22595] Tainted: [L]=SOFTLOCKUP [ 926.694025][T22595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 926.694034][T22595] Call Trace: [ 926.694040][T22595] [ 926.694046][T22595] dump_stack_lvl+0x100/0x190 [ 926.694068][T22595] should_fail_ex.cold+0x5/0xa [ 926.694092][T22595] should_failslab+0xc2/0x120 [ 926.694112][T22595] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 926.694128][T22595] ? register_pidns_sysctls+0x48/0x1c0 [ 926.694152][T22595] ? rcu_is_watching+0x12/0xc0 [ 926.694173][T22595] kmemdup_noprof+0x29/0x60 [ 926.694188][T22595] register_pidns_sysctls+0x48/0x1c0 [ 926.694211][T22595] ? __ns_common_init+0x299/0x4b0 [ 926.694232][T22595] copy_pid_ns+0x680/0x10a0 [ 926.694257][T22595] ? __pfx_copy_pid_ns+0x10/0x10 [ 926.694280][T22595] ? __pfx_copy_mnt_ns+0x10/0x10 [ 926.694303][T22595] ? create_new_namespaces+0x30/0xac0 [ 926.694325][T22595] create_new_namespaces+0x2aa/0xac0 [ 926.694347][T22595] unshare_nsproxy_namespaces+0xf2/0x220 [ 926.694367][T22595] ksys_unshare+0x438/0xab0 [ 926.694389][T22595] ? __pfx_ksys_unshare+0x10/0x10 [ 926.694409][T22595] ? xfd_validate_state+0x129/0x190 [ 926.694424][T22595] ? ksys_write+0x1ac/0x250 [ 926.694446][T22595] __x64_sys_unshare+0x31/0x40 [ 926.694466][T22595] do_syscall_64+0x115/0x840 [ 926.694487][T22595] ? clear_bhb_loop+0x40/0x90 [ 926.694506][T22595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.694521][T22595] RIP: 0033:0x7ff01f59ce59 [ 926.694535][T22595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.694550][T22595] RSP: 002b:00007ff02039e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 926.694565][T22595] RAX: ffffffffffffffda RBX: 00007ff01f815fa0 RCX: 00007ff01f59ce59 [ 926.694575][T22595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 926.694584][T22595] RBP: 00007ff01f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 926.694593][T22595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.694602][T22595] R13: 00007ff01f816038 R14: 00007ff01f815fa0 R15: 00007ffe8de330b8 [ 926.694621][T22595] [ 926.997307][T22598] random: crng reseeded on system resumption [ 927.505224][T22606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3315'. [ 929.820185][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.827634][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.876476][T22662] random: crng reseeded on system resumption [ 931.247789][T22669] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3330'. [ 933.927427][T22714] HfR: entered promiscuous mode [ 934.262038][T22722] hub 3-0:1.0: USB hub found [ 934.309627][T22722] hub 3-0:1.0: 1 port detected [ 934.486742][T22723] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 934.663047][T22722] usb usb3: authorized to connect [ 937.555429][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 938.159613][T22768] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 938.531331][T22783] FAULT_INJECTION: forcing a failure. [ 938.531331][T22783] name failslab, interval 1, probability 0, space 0, times 0 [ 938.649153][T22783] CPU: 0 UID: 0 PID: 22783 Comm: syz.3.3358 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.649180][T22783] Tainted: [L]=SOFTLOCKUP [ 938.649186][T22783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 938.649195][T22783] Call Trace: [ 938.649201][T22783] [ 938.649207][T22783] dump_stack_lvl+0x100/0x190 [ 938.649229][T22783] should_fail_ex.cold+0x5/0xa [ 938.649249][T22783] ? tomoyo_encode2+0xfb/0x3c0 [ 938.649270][T22783] should_failslab+0xc2/0x120 [ 938.649289][T22783] __kmalloc_noprof+0xe0/0x850 [ 938.649302][T22783] ? d_absolute_path+0x136/0x1b0 [ 938.649321][T22783] tomoyo_encode2+0xfb/0x3c0 [ 938.649344][T22783] tomoyo_encode+0x29/0x50 [ 938.649364][T22783] tomoyo_realpath_from_path+0x18c/0x690 [ 938.649390][T22783] tomoyo_path_number_perm+0x23c/0x580 [ 938.649408][T22783] ? tomoyo_path_number_perm+0x22e/0x580 [ 938.649427][T22783] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 938.649464][T22783] ? find_held_lock+0x2b/0x80 [ 938.649483][T22783] ? __fget_files+0x215/0x3d0 [ 938.649499][T22783] ? hook_file_ioctl_common+0x149/0x410 [ 938.649524][T22783] ? __fget_files+0x215/0x3d0 [ 938.649544][T22783] ? __fget_files+0x21f/0x3d0 [ 938.649564][T22783] security_file_ioctl+0xd3/0x230 [ 938.649583][T22783] __x64_sys_ioctl+0xb7/0x210 [ 938.649600][T22783] do_syscall_64+0x115/0x840 [ 938.649621][T22783] ? clear_bhb_loop+0x40/0x90 [ 938.649640][T22783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.649655][T22783] RIP: 0033:0x7f077659ce59 [ 938.649669][T22783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.649683][T22783] RSP: 002b:00007f0777395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 938.649698][T22783] RAX: ffffffffffffffda RBX: 00007f0776815fa0 RCX: 00007f077659ce59 [ 938.649709][T22783] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000007 [ 938.649718][T22783] RBP: 00007f0777395090 R08: 0000000000000000 R09: 0000000000000000 [ 938.649727][T22783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.649735][T22783] R13: 00007f0776816038 R14: 00007f0776815fa0 R15: 00007ffcd43ab558 [ 938.649755][T22783] [ 938.649768][T22783] ERROR: Out of memory at tomoyo_realpath_from_path. [ 941.242729][T22818] Process accounting paused [ 941.678182][T22848] random: crng reseeded on system resumption [ 941.743703][T22849] HfR: entered promiscuous mode [ 941.922138][T22854] FAULT_INJECTION: forcing a failure. [ 941.922138][T22854] name failslab, interval 1, probability 0, space 0, times 0 [ 942.056815][T22854] CPU: 0 UID: 0 PID: 22854 Comm: syz.1.3375 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.056841][T22854] Tainted: [L]=SOFTLOCKUP [ 942.056847][T22854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 942.056855][T22854] Call Trace: [ 942.056861][T22854] [ 942.056867][T22854] dump_stack_lvl+0x100/0x190 [ 942.056888][T22854] should_fail_ex.cold+0x5/0xa [ 942.056907][T22854] should_failslab+0xc2/0x120 [ 942.056926][T22854] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 942.056950][T22854] ? security_file_alloc+0x34/0x2c0 [ 942.056970][T22854] ? trace_kmem_cache_alloc+0xd5/0x100 [ 942.056991][T22854] security_file_alloc+0x34/0x2c0 [ 942.057011][T22854] init_file+0x95/0x480 [ 942.057033][T22854] alloc_empty_file+0x79/0x1c0 [ 942.057055][T22854] alloc_file_pseudo+0x13a/0x230 [ 942.057078][T22854] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 942.057100][T22854] ? alloc_fd+0x476/0x790 [ 942.057121][T22854] sock_alloc_file+0x50/0x210 [ 942.057140][T22854] __sys_socket+0x1c0/0x260 [ 942.057160][T22854] ? __pfx___sys_socket+0x10/0x10 [ 942.057180][T22854] ? ksys_write+0x1ac/0x250 [ 942.057201][T22854] __x64_sys_socket+0x72/0xb0 [ 942.057221][T22854] ? lockdep_hardirqs_on+0x78/0x100 [ 942.057242][T22854] do_syscall_64+0x115/0x840 [ 942.057262][T22854] ? clear_bhb_loop+0x40/0x90 [ 942.057280][T22854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.057295][T22854] RIP: 0033:0x7f62b019ce59 [ 942.057308][T22854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.057323][T22854] RSP: 002b:00007f62b111b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 942.057337][T22854] RAX: ffffffffffffffda RBX: 00007f62b0415fa0 RCX: 00007f62b019ce59 [ 942.057348][T22854] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002 [ 942.057357][T22854] RBP: 00007f62b0232d6f R08: 0000000000000000 R09: 0000000000000000 [ 942.057366][T22854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.057375][T22854] R13: 00007f62b0416038 R14: 00007f62b0415fa0 R15: 00007fff58d09b18 [ 942.057394][T22854] [ 942.524214][T22861] random: crng reseeded on system resumption [ 942.677485][T22864] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3377'. [ 943.896666][T22901] overlayfs: missing 'lowerdir' [ 944.870799][T22913] FAULT_INJECTION: forcing a failure. [ 944.870799][T22913] name failslab, interval 1, probability 0, space 0, times 0 [ 945.024394][T22913] CPU: 0 UID: 0 PID: 22913 Comm: syz.0.3387 Tainted: G L syzkaller #0 PREEMPT(full) [ 945.024422][T22913] Tainted: [L]=SOFTLOCKUP [ 945.024428][T22913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 945.024444][T22913] Call Trace: [ 945.024450][T22913] [ 945.024457][T22913] dump_stack_lvl+0x100/0x190 [ 945.024479][T22913] should_fail_ex.cold+0x5/0xa [ 945.024500][T22913] should_failslab+0xc2/0x120 [ 945.024523][T22913] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 945.024539][T22913] ? setup_mq_sysctls+0x5d/0x240 [ 945.024619][T22913] ? mq_init_ns+0x3a0/0x820 [ 945.024637][T22913] kmemdup_noprof+0x29/0x60 [ 945.024656][T22913] setup_mq_sysctls+0x5d/0x240 [ 945.024673][T22913] ? mq_init_ns+0x4de/0x820 [ 945.024690][T22913] copy_ipcs+0x524/0x7e0 [ 945.024708][T22913] create_new_namespaces+0x20a/0xac0 [ 945.024728][T22913] ? security_capable+0x80/0x260 [ 945.024747][T22913] copy_namespaces+0x468/0x5e0 [ 945.024766][T22913] copy_process+0x3531/0x7ed0 [ 945.024785][T22913] ? futex_unqueue+0x133/0x2c0 [ 945.024815][T22913] ? __pfx_copy_process+0x10/0x10 [ 945.024848][T22913] ? _copy_from_user+0x59/0xd0 [ 945.024873][T22913] kernel_clone+0x176/0x9e0 [ 945.024895][T22913] ? __pfx_kernel_clone+0x10/0x10 [ 945.024919][T22913] ? __pfx_futex_wait+0x10/0x10 [ 945.024943][T22913] __do_sys_clone3+0x214/0x290 [ 945.024962][T22913] ? __pfx___do_sys_clone3+0x10/0x10 [ 945.025002][T22913] ? rcu_is_watching+0x12/0xc0 [ 945.025021][T22913] do_syscall_64+0x115/0x840 [ 945.025042][T22913] ? clear_bhb_loop+0x40/0x90 [ 945.025060][T22913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.025077][T22913] RIP: 0033:0x7ff01f59ce59 [ 945.025090][T22913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.025105][T22913] RSP: 002b:00007ff02037cef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 945.025121][T22913] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff01f59ce59 [ 945.025132][T22913] RDX: 00007ff02037cf10 RSI: 0000000000000058 RDI: 00007ff02037cf10 [ 945.025142][T22913] RBP: 00007ff01f632d6f R08: 0000000000000000 R09: 0000000000000058 [ 945.025151][T22913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.025160][T22913] R13: 00007ff01f816128 R14: 00007ff01f816090 R15: 00007ffe8de330b8 [ 945.025180][T22913] [ 945.535505][T22921] random: crng reseeded on system resumption [ 946.761826][T22910] Process accounting paused [ 947.831279][T22947] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 948.528546][T22987] random: crng reseeded on system resumption [ 951.040109][T23035] openvswitch: HfR: Dropping previously announced user features [ 952.130191][T23047] random: crng reseeded on system resumption [ 952.191834][T23047] FAULT_INJECTION: forcing a failure. [ 952.191834][T23047] name failslab, interval 1, probability 0, space 0, times 0 [ 952.294868][T23047] CPU: 0 UID: 0 PID: 23047 Comm: syz.0.3414 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.294893][T23047] Tainted: [L]=SOFTLOCKUP [ 952.294899][T23047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 952.294908][T23047] Call Trace: [ 952.294913][T23047] [ 952.294920][T23047] dump_stack_lvl+0x100/0x190 [ 952.294941][T23047] should_fail_ex.cold+0x5/0xa [ 952.294961][T23047] should_failslab+0xc2/0x120 [ 952.294980][T23047] __kmalloc_cache_noprof+0x7a/0x6f0 [ 952.295002][T23047] ? alloc_pipe_info+0x10e/0x590 [ 952.295021][T23047] ? find_held_lock+0x2b/0x80 [ 952.295042][T23047] alloc_pipe_info+0x10e/0x590 [ 952.295063][T23047] splice_direct_to_actor+0x78f/0xa30 [ 952.295083][T23047] ? __lock_acquire+0x4a5/0x2630 [ 952.295104][T23047] ? __pfx_direct_splice_actor+0x10/0x10 [ 952.295124][T23047] ? __pfx_aa_file_perm+0x10/0x10 [ 952.295148][T23047] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 952.295173][T23047] do_splice_direct+0x174/0x240 [ 952.295192][T23047] ? __pfx_do_splice_direct+0x10/0x10 [ 952.295211][T23047] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 952.295232][T23047] ? rw_verify_area+0xce/0x6d0 [ 952.295248][T23047] do_sendfile+0xadc/0xe20 [ 952.295268][T23047] ? __pfx_do_sendfile+0x10/0x10 [ 952.295284][T23047] ? __fget_files+0x21f/0x3d0 [ 952.295307][T23047] __x64_sys_sendfile64+0x1d8/0x220 [ 952.295327][T23047] ? ksys_write+0x1ac/0x250 [ 952.295343][T23047] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 952.295366][T23047] ? rcu_is_watching+0x12/0xc0 [ 952.295385][T23047] do_syscall_64+0x115/0x840 [ 952.295406][T23047] ? clear_bhb_loop+0x40/0x90 [ 952.295425][T23047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.295440][T23047] RIP: 0033:0x7ff01f59ce59 [ 952.295453][T23047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.295467][T23047] RSP: 002b:00007ff02039e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 952.295482][T23047] RAX: ffffffffffffffda RBX: 00007ff01f815fa0 RCX: 00007ff01f59ce59 [ 952.295492][T23047] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 952.295501][T23047] RBP: 00007ff02039e090 R08: 0000000000000000 R09: 0000000000000000 [ 952.295510][T23047] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 952.295519][T23047] R13: 00007ff01f816038 R14: 00007ff01f815fa0 R15: 00007ffe8de330b8 [ 952.295538][T23047] [ 955.025525][T23088] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 955.037915][T23091] random: crng reseeded on system resumption [ 956.384522][T23118] kAFS: No cell specified [ 956.405255][T23119] random: crng reseeded on system resumption [ 956.480514][T23123] FAULT_INJECTION: forcing a failure. [ 956.480514][T23123] name failslab, interval 1, probability 0, space 0, times 0 [ 956.635921][T23123] CPU: 0 UID: 0 PID: 23123 Comm: syz.0.3431 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.635947][T23123] Tainted: [L]=SOFTLOCKUP [ 956.635953][T23123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 956.635962][T23123] Call Trace: [ 956.635968][T23123] [ 956.635974][T23123] dump_stack_lvl+0x100/0x190 [ 956.635994][T23123] should_fail_ex.cold+0x5/0xa [ 956.636014][T23123] ? copy_splice_read+0x1a3/0xb90 [ 956.636032][T23123] should_failslab+0xc2/0x120 [ 956.636051][T23123] __kmalloc_noprof+0xe0/0x850 [ 956.636069][T23123] copy_splice_read+0x1a3/0xb90 [ 956.636092][T23123] ? __pfx_copy_splice_read+0x10/0x10 [ 956.636112][T23123] ? look_up_lock_class+0x55/0x120 [ 956.636137][T23123] ? lockdep_init_map_type+0x5c/0x250 [ 956.636162][T23123] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 956.636181][T23123] ? __pfx_copy_splice_read+0x10/0x10 [ 956.636199][T23123] do_splice_read+0x285/0x370 [ 956.636219][T23123] splice_direct_to_actor+0x2a1/0xa30 [ 956.636240][T23123] ? __pfx_direct_splice_actor+0x10/0x10 [ 956.636262][T23123] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 956.636286][T23123] do_splice_direct+0x174/0x240 [ 956.636305][T23123] ? __pfx_do_splice_direct+0x10/0x10 [ 956.636324][T23123] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 956.636345][T23123] ? rw_verify_area+0xce/0x6d0 [ 956.636362][T23123] do_sendfile+0xadc/0xe20 [ 956.636382][T23123] ? __pfx_do_sendfile+0x10/0x10 [ 956.636398][T23123] ? __fget_files+0x21f/0x3d0 [ 956.636423][T23123] __x64_sys_sendfile64+0x1d8/0x220 [ 956.636442][T23123] ? ksys_write+0x1ac/0x250 [ 956.636459][T23123] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 956.636481][T23123] ? rcu_is_watching+0x12/0xc0 [ 956.636500][T23123] do_syscall_64+0x115/0x840 [ 956.636520][T23123] ? clear_bhb_loop+0x40/0x90 [ 956.636539][T23123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.636560][T23123] RIP: 0033:0x7ff01f59ce59 [ 956.636574][T23123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.636588][T23123] RSP: 002b:00007ff02037d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 956.636603][T23123] RAX: ffffffffffffffda RBX: 00007ff01f816090 RCX: 00007ff01f59ce59 [ 956.636614][T23123] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 956.636622][T23123] RBP: 00007ff02037d090 R08: 0000000000000000 R09: 0000000000000000 [ 956.636631][T23123] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 956.636640][T23123] R13: 00007ff01f816128 R14: 00007ff01f816090 R15: 00007ffe8de330b8 [ 956.636659][T23123] [ 957.723392][T23139] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 957.724456][T23138] ima: policy update failed [ 957.882887][ T30] audit: type=1802 audit(4294967296.231:116): pid=23138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3437" res=0 errno=0 [ 958.527183][T23150] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3439'. [ 958.632210][T23150] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3439'. [ 962.152454][T23193] openvswitch: netlink: Key type 29 is not supported [ 964.387205][T23222] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 964.394328][T23224] random: crng reseeded on system resumption [ 964.662561][ T30] audit: type=1800 audit(4294967303.046:117): pid=23228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3457" name="dbroot" dev="configfs" ino=106941 res=0 errno=0 [ 964.817017][T23222] netlink: 'syz.1.3457': attribute type 1 has an invalid length. [ 965.336497][T23221] ima: policy update failed [ 965.343572][ T30] audit: type=1802 audit(4294967303.729:118): pid=23221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3457" res=0 errno=0 [ 965.690558][T23242] random: crng reseeded on system resumption [ 966.318776][T23254] random: crng reseeded on system resumption [ 968.066231][T23279] random: crng reseeded on system resumption [ 968.099458][T23283] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3470'. [ 969.205321][T23309] random: crng reseeded on system resumption [ 969.847124][T23325] FAULT_INJECTION: forcing a failure. [ 969.847124][T23325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.901847][T23325] CPU: 0 UID: 0 PID: 23325 Comm: syz.4.3478 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.901872][T23325] Tainted: [L]=SOFTLOCKUP [ 969.901878][T23325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 969.901888][T23325] Call Trace: [ 969.901893][T23325] [ 969.901900][T23325] dump_stack_lvl+0x100/0x190 [ 969.901921][T23325] should_fail_ex.cold+0x5/0xa [ 969.901940][T23325] _copy_to_user+0x32/0xd0 [ 969.901963][T23325] simple_read_from_buffer+0xcb/0x170 [ 969.901983][T23325] proc_fail_nth_read+0x1af/0x230 [ 969.902007][T23325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 969.902031][T23325] ? rw_verify_area+0xce/0x6d0 [ 969.902046][T23325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 969.902070][T23325] vfs_read+0x1e4/0xb30 [ 969.902089][T23325] ? __pfx_vfs_read+0x10/0x10 [ 969.902105][T23325] ? __fget_files+0x215/0x3d0 [ 969.902126][T23325] ? __fget_files+0x21f/0x3d0 [ 969.902149][T23325] ksys_read+0x12a/0x250 [ 969.902165][T23325] ? __pfx_ksys_read+0x10/0x10 [ 969.902183][T23325] ? rcu_is_watching+0x12/0xc0 [ 969.902203][T23325] do_syscall_64+0x115/0x840 [ 969.902223][T23325] ? clear_bhb_loop+0x40/0x90 [ 969.902242][T23325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.902257][T23325] RIP: 0033:0x7fc90935d68e [ 969.902270][T23325] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 969.902284][T23325] RSP: 002b:00007fc90a1effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 969.902299][T23325] RAX: ffffffffffffffda RBX: 00007fc90a1f06c0 RCX: 00007fc90935d68e [ 969.902310][T23325] RDX: 000000000000000f RSI: 00007fc90a1f00a0 RDI: 0000000000000005 [ 969.902319][T23325] RBP: 00007fc90a1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 969.902327][T23325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.902336][T23325] R13: 00007fc909616128 R14: 00007fc909616090 R15: 00007fff8bd2f5f8 [ 969.902356][T23325] [ 971.192933][T23317] Process accounting resumed [ 971.363284][T23333] vhci_hcd vhci_hcd.2: invalid port number 194 [ 971.417093][T23333] vhci_hcd vhci_hcd.2: invalid port number 194 [ 973.040678][T23373] random: crng reseeded on system resumption [ 976.123851][T23428] HfR: entered promiscuous mode [ 977.186895][T23412] Process accounting resumed [ 977.316533][T23453] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 977.538715][T23460] random: crng reseeded on system resumption [ 978.671064][T23472] warning: `syz.0.3506' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 978.847571][T23472] FAULT_INJECTION: forcing a failure. [ 978.847571][T23472] name failslab, interval 1, probability 0, space 0, times 0 [ 979.002878][T23472] CPU: 0 UID: 0 PID: 23472 Comm: syz.0.3506 Tainted: G L syzkaller #0 PREEMPT(full) [ 979.002906][T23472] Tainted: [L]=SOFTLOCKUP [ 979.002912][T23472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 979.002923][T23472] Call Trace: [ 979.002928][T23472] [ 979.002935][T23472] dump_stack_lvl+0x100/0x190 [ 979.002956][T23472] should_fail_ex.cold+0x5/0xa [ 979.002977][T23472] should_failslab+0xc2/0x120 [ 979.002996][T23472] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 979.003020][T23472] ? alloc_inode+0x68/0x250 [ 979.003043][T23472] ? simple_start_creating+0xb0/0x110 [ 979.003061][T23472] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 979.003089][T23472] alloc_inode+0x68/0x250 [ 979.003112][T23472] new_inode+0x22/0x1c0 [ 979.003135][T23472] __debugfs_create_file+0x105/0x4f0 [ 979.003154][T23472] debugfs_create_file_full+0x41/0x60 [ 979.003173][T23472] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 979.003189][T23472] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 979.003204][T23472] ? ida_alloc_range+0x70d/0x830 [ 979.003243][T23472] ? lockdep_init_map_type+0x5c/0x250 [ 979.003272][T23472] preinit_net.part.0+0x252/0x920 [ 979.003292][T23472] copy_net_ns+0x339/0x7c0 [ 979.003312][T23472] create_new_namespaces+0x3ea/0xac0 [ 979.003338][T23472] unshare_nsproxy_namespaces+0xf2/0x220 [ 979.003359][T23472] ksys_unshare+0x438/0xab0 [ 979.003382][T23472] ? __pfx_ksys_unshare+0x10/0x10 [ 979.003401][T23472] ? xfd_validate_state+0x129/0x190 [ 979.003416][T23472] ? ksys_write+0x1ac/0x250 [ 979.003439][T23472] __x64_sys_unshare+0x31/0x40 [ 979.003459][T23472] do_syscall_64+0x115/0x840 [ 979.003480][T23472] ? clear_bhb_loop+0x40/0x90 [ 979.003498][T23472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.003514][T23472] RIP: 0033:0x7ff01f59ce59 [ 979.003528][T23472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.003542][T23472] RSP: 002b:00007ff02039e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 979.003558][T23472] RAX: ffffffffffffffda RBX: 00007ff01f815fa0 RCX: 00007ff01f59ce59 [ 979.003568][T23472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 979.003577][T23472] RBP: 00007ff01f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 979.003586][T23472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.003595][T23472] R13: 00007ff01f816038 R14: 00007ff01f815fa0 R15: 00007ffe8de330b8 [ 979.003616][T23472] [ 979.020706][T23472] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88803cd9d000' [ 979.540926][T23484] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3508'. [ 981.929392][T23524] futex_wake_op: syz.1.3517 tries to shift op by -1; fix this program [ 984.548457][T23575] FAULT_INJECTION: forcing a failure. [ 984.548457][T23575] name fail_futex, interval 1, probability 0, space 0, times 0 [ 984.672720][T23575] CPU: 0 UID: 0 PID: 23575 Comm: syz.0.3530 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.672747][T23575] Tainted: [L]=SOFTLOCKUP [ 984.672753][T23575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 984.672763][T23575] Call Trace: [ 984.672769][T23575] [ 984.672776][T23575] dump_stack_lvl+0x100/0x190 [ 984.672798][T23575] should_fail_ex.cold+0x5/0xa [ 984.672815][T23575] ? __bad_area_nosemaphore+0x320/0x3f0 [ 984.672836][T23575] get_futex_key+0x1d2/0x1510 [ 984.672862][T23575] ? __pfx_get_futex_key+0x10/0x10 [ 984.672886][T23575] ? find_held_lock+0x2b/0x80 [ 984.672904][T23575] ? __kfree_rcu_sheaf+0x195/0x710 [ 984.672921][T23575] ? __kfree_rcu_sheaf+0x195/0x710 [ 984.672941][T23575] futex_wake+0xea/0x530 [ 984.672967][T23575] ? __pfx_futex_wake+0x10/0x10 [ 984.672987][T23575] ? posix_timer_unhash_and_free+0x352/0x3e0 [ 984.673006][T23575] ? do_timer_create+0x746/0x1480 [ 984.673025][T23575] do_futex+0x32b/0x350 [ 984.673044][T23575] ? __pfx_do_futex+0x10/0x10 [ 984.673058][T23575] ? __fget_files+0x215/0x3d0 [ 984.673080][T23575] __x64_sys_futex+0x34f/0x4d0 [ 984.673098][T23575] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 984.673117][T23575] ? __pfx___x64_sys_futex+0x10/0x10 [ 984.673137][T23575] ? rcu_is_watching+0x12/0xc0 [ 984.673156][T23575] do_syscall_64+0x115/0x840 [ 984.673178][T23575] ? clear_bhb_loop+0x40/0x90 [ 984.673196][T23575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.673212][T23575] RIP: 0033:0x7ff01f59ce59 [ 984.673226][T23575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.673240][T23575] RSP: 002b:00007ff02039e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 984.673255][T23575] RAX: ffffffffffffffda RBX: 00007ff01f815fa8 RCX: 00007ff01f59ce59 [ 984.673265][T23575] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff01f815fac [ 984.673274][T23575] RBP: 00007ff01f815fa0 R08: 0000000000000001 R09: 0000000000000000 [ 984.673283][T23575] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 984.673293][T23575] R13: 00007ff01f816038 R14: 00007ffe8de32fd0 R15: 00007ffe8de330b8 [ 984.673313][T23575] [ 985.441693][T23585] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 989.654676][T23636] random: crng reseeded on system resumption [ 990.441071][T23653] netlink: 241 bytes leftover after parsing attributes in process `syz.3.3549'. [ 990.814694][T23662] syz.4.3551 (23662): drop_caches: 0 [ 990.942339][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 990.948847][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 991.249457][T23668] random: crng reseeded on system resumption [ 992.222618][T23689] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 992.478898][T23694] netlink: 'syz.4.3559': attribute type 10 has an invalid length. [ 992.515608][T23694] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3559'. [ 994.773433][T23721] random: crng reseeded on system resumption [ 995.005915][T23721] ovs_: entered promiscuous mode [ 995.846461][T23741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3570'. syzkaller syzkaller login: [ 999.545184][T23818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3592'. [ 999.556464][T23818] netlink: 'syz.3.3592': attribute type 1 has an invalid length. [ 999.556482][T23818] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3592'. [ 999.610140][T23818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3592'. [ 1001.112122][T23835] Process accounting paused [ 1002.272096][T23850] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1002.370911][T23850] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1002.397059][T23850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1002.425853][T23850] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1002.925477][T23892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3608'. [ 1003.023522][T23892] tc_dump_action: action bad kind [ 1003.443352][T23895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3608'. [ 1003.594448][ T7938] Bluetooth: hci4: command 0x0c1a tx timeout [ 1003.963127][T23915] nfs: Unknown parameter '/sys/devices/virtual/bdi/43:416/min_ratio' [ 1004.087712][T23917] FAULT_INJECTION: forcing a failure. [ 1004.087712][T23917] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.165788][T23917] CPU: 0 UID: 0 PID: 23917 Comm: syz.4.3614 Tainted: G L syzkaller #0 PREEMPT(full) [ 1004.165816][T23917] Tainted: [L]=SOFTLOCKUP [ 1004.165822][T23917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1004.165831][T23917] Call Trace: [ 1004.165837][T23917] [ 1004.165844][T23917] dump_stack_lvl+0x100/0x190 [ 1004.165866][T23917] should_fail_ex.cold+0x5/0xa [ 1004.165886][T23917] should_failslab+0xc2/0x120 [ 1004.165906][T23917] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1004.165937][T23917] ? alloc_inode+0x68/0x250 [ 1004.165962][T23917] ? simple_start_creating+0xb0/0x110 [ 1004.165981][T23917] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1004.166007][T23917] alloc_inode+0x68/0x250 [ 1004.166029][T23917] new_inode+0x22/0x1c0 [ 1004.166053][T23917] __debugfs_create_file+0x105/0x4f0 [ 1004.166071][T23917] debugfs_create_file_full+0x41/0x60 [ 1004.166089][T23917] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1004.166106][T23917] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1004.166137][T23917] ? lockdep_init_map_type+0x5c/0x250 [ 1004.166164][T23917] preinit_net.part.0+0x43b/0x920 [ 1004.166183][T23917] copy_net_ns+0x339/0x7c0 [ 1004.166203][T23917] create_new_namespaces+0x3ea/0xac0 [ 1004.166227][T23917] unshare_nsproxy_namespaces+0xf2/0x220 [ 1004.166247][T23917] ksys_unshare+0x438/0xab0 [ 1004.166270][T23917] ? __pfx_ksys_unshare+0x10/0x10 [ 1004.166289][T23917] ? xfd_validate_state+0x129/0x190 [ 1004.166304][T23917] ? ksys_write+0x1ac/0x250 [ 1004.166326][T23917] __x64_sys_unshare+0x31/0x40 [ 1004.166346][T23917] do_syscall_64+0x115/0x840 [ 1004.166367][T23917] ? clear_bhb_loop+0x40/0x90 [ 1004.166385][T23917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.166400][T23917] RIP: 0033:0x7fc90939ce59 [ 1004.166416][T23917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.166430][T23917] RSP: 002b:00007fc90a211028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1004.166446][T23917] RAX: ffffffffffffffda RBX: 00007fc909615fa0 RCX: 00007fc90939ce59 [ 1004.166456][T23917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1004.166466][T23917] RBP: 00007fc909432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1004.166476][T23917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.166485][T23917] R13: 00007fc909616038 R14: 00007fc909615fa0 R15: 00007fff8bd2f5f8 [ 1004.166505][T23917] [ 1004.530798][ C0] vcan0: j1939_tp_rxtimer: 0xffff888037aa1000: rx timeout, send abort [ 1004.547424][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888037aa1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1004.686704][T23917] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88803cd982f8' [ 1004.779952][ T7938] Bluetooth: hci3: command 0x041b tx timeout [ 1004.786168][ T7938] Bluetooth: hci5: command 0x0c1a tx timeout [ 1004.792156][ T7938] Bluetooth: hci1: command 0x0c1a tx timeout [ 1006.141723][T23948] FAULT_INJECTION: forcing a failure. [ 1006.141723][T23948] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.222652][T23948] CPU: 0 UID: 0 PID: 23948 Comm: syz.4.3619 Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.222679][T23948] Tainted: [L]=SOFTLOCKUP [ 1006.222685][T23948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1006.222696][T23948] Call Trace: [ 1006.222702][T23948] [ 1006.222708][T23948] dump_stack_lvl+0x100/0x190 [ 1006.222730][T23948] should_fail_ex.cold+0x5/0xa [ 1006.222758][T23948] should_failslab+0xc2/0x120 [ 1006.222780][T23948] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1006.222802][T23948] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 1006.222842][T23948] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 1006.222868][T23948] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 1006.222893][T23948] vidtv_mux_init+0x748/0xbf0 [ 1006.222918][T23948] vidtv_start_feed+0x34e/0x500 [ 1006.222935][T23948] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1006.222953][T23948] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1006.222981][T23948] dmx_section_feed_start_filtering+0x3a8/0x660 [ 1006.223007][T23948] dvb_dmxdev_filter_start+0x767/0xdd0 [ 1006.223029][T23948] dvb_demux_do_ioctl+0xe64/0x1200 [ 1006.223051][T23948] dvb_usercopy+0x167/0x340 [ 1006.223074][T23948] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1006.223091][T23948] ? __pfx_dvb_usercopy+0x10/0x10 [ 1006.223121][T23948] ? __fget_files+0x21f/0x3d0 [ 1006.223143][T23948] dvb_demux_ioctl+0x29/0x40 [ 1006.223156][T23948] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1006.223171][T23948] __x64_sys_ioctl+0x18e/0x210 [ 1006.223188][T23948] do_syscall_64+0x115/0x840 [ 1006.223209][T23948] ? clear_bhb_loop+0x40/0x90 [ 1006.223227][T23948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.223243][T23948] RIP: 0033:0x7fc90939ce59 [ 1006.223256][T23948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.223270][T23948] RSP: 002b:00007fc90a211028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1006.223285][T23948] RAX: ffffffffffffffda RBX: 00007fc909615fa0 RCX: 00007fc90939ce59 [ 1006.223296][T23948] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 000000000000000a [ 1006.223305][T23948] RBP: 00007fc909432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1006.223314][T23948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.223323][T23948] R13: 00007fc909616038 R14: 00007fc909615fa0 R15: 00007fff8bd2f5f8 [ 1006.223343][T23948] [ 1007.259331][T23941] Process accounting paused [ 1007.947488][T23969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'. [ 1008.016114][T23969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'. [ 1008.418824][T23979] syz.4.3628 (23979): attempted to duplicate a private mapping with mremap. This is not supported. [ 1009.298541][T23994] ovs_: entered promiscuous mode [ 1011.542074][T24002] Process accounting resumed [ 1011.677028][T24036] random: crng reseeded on system resumption [ 1012.492832][T24055] input: jJǸ-9%vJ86 as /devices/virtual/input/input13 [ 1013.796767][T18123] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1014.495426][T24091] zswap: compressor not available [ 1014.608384][T24111] ICMPv6: process `syz.1.3645' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 1014.857459][T24113] FAULT_INJECTION: forcing a failure. [ 1014.857459][T24113] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.127027][T24113] CPU: 0 UID: 0 PID: 24113 Comm: syz.1.3645 Tainted: G L syzkaller #0 PREEMPT(full) [ 1015.127054][T24113] Tainted: [L]=SOFTLOCKUP [ 1015.127060][T24113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.127069][T24113] Call Trace: [ 1015.127075][T24113] [ 1015.127082][T24113] dump_stack_lvl+0x100/0x190 [ 1015.127108][T24113] should_fail_ex.cold+0x5/0xa [ 1015.127129][T24113] should_failslab+0xc2/0x120 [ 1015.127150][T24113] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1015.127174][T24113] ? __d_alloc+0x34/0xa40 [ 1015.127194][T24113] ? lockdep_init_map_type+0x5c/0x250 [ 1015.127221][T24113] __d_alloc+0x34/0xa40 [ 1015.127243][T24113] d_alloc_pseudo+0x1c/0xc0 [ 1015.127257][T24113] alloc_file_pseudo+0xcf/0x230 [ 1015.127280][T24113] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1015.127303][T24113] ? alloc_fd+0x476/0x790 [ 1015.127323][T24113] sock_alloc_file+0x50/0x210 [ 1015.127343][T24113] __sys_socket+0x1c0/0x260 [ 1015.127364][T24113] ? __pfx___sys_socket+0x10/0x10 [ 1015.127384][T24113] ? ksys_write+0x1ac/0x250 [ 1015.127405][T24113] __x64_sys_socket+0x72/0xb0 [ 1015.127425][T24113] ? lockdep_hardirqs_on+0x78/0x100 [ 1015.127446][T24113] do_syscall_64+0x115/0x840 [ 1015.127466][T24113] ? clear_bhb_loop+0x40/0x90 [ 1015.127485][T24113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.127501][T24113] RIP: 0033:0x7f62b019ce59 [ 1015.127515][T24113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.127530][T24113] RSP: 002b:00007f62b10b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1015.127546][T24113] RAX: ffffffffffffffda RBX: 00007f62b0416270 RCX: 00007f62b019ce59 [ 1015.127556][T24113] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1015.127566][T24113] RBP: 00007f62b0232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1015.127575][T24113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.127585][T24113] R13: 00007f62b0416308 R14: 00007f62b0416270 R15: 00007fff58d09b18 [ 1015.127605][T24113] [ 1015.910429][T18123] Bluetooth: hci3: command 0x041b tx timeout [ 1016.544687][T24150] blktrace: Concurrent blktraces are not allowed on sda1 [ 1016.588555][ T5297] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1017.927127][T24086] Bluetooth: hci3: command 0x041b tx timeout [ 1020.441782][ T30] audit: type=1800 audit(4294967359.116:119): pid=24207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3667" name="members" dev="configfs" ino=113268 res=0 errno=0 [ 1020.560105][T24198] Process accounting resumed [ 1020.669663][T23870] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 1020.904036][ T30] audit: type=1800 audit(4294967359.578:120): pid=24213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3669" name="lu_gp_id" dev="configfs" ino=113305 res=0 errno=0 [ 1021.023383][T24217] vivid-007: ================= START STATUS ================= [ 1021.088055][T24217] vivid-007: Generate PTS: true [ 1021.122450][T24217] vivid-007: Generate SCR: true [ 1021.158661][T24217] tpg source WxH: 320x240 (Y'CbCr) [ 1021.194275][T24217] tpg field: 1 [ 1021.243452][T24217] tpg crop: (0,0)/320x240 [ 1021.290821][T24217] tpg compose: (0,0)/320x240 [ 1021.290856][T24217] tpg colorspace: 8 [ 1021.290863][T24217] tpg transfer function: 0/0 [ 1021.290884][T24217] tpg Y'CbCr encoding: 0/0 [ 1021.290893][T24217] tpg quantization: 0/0 [ 1021.290901][T24217] tpg RGB range: 0/2 [ 1021.290909][T24217] vivid-007: ================== END STATUS ================== [ 1021.553714][T24221] Console: switching to colour frame buffer device 13x6 [ 1021.917547][T24231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1022.313579][T24242] can0: slcan on pty155. [ 1022.557625][T24242] can0 (unregistered): slcan off pty155. [ 1023.352044][T24283] random: crng reseeded on system resumption [ 1024.799982][T24321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3685'. [ 1025.281894][T24312] futex_wake_op: syz.4.3687 tries to shift op by -2048; fix this program [ 1025.311728][T24333] random: crng reseeded on system resumption [ 1025.603272][T24312] futex_wake_op: syz.4.3687 tries to shift op by -2048; fix this program [ 1025.708845][T24312] futex_wake_op: syz.4.3687 tries to shift op by -2048; fix this program [ 1026.014404][T24343] nfs4: Unknown parameter '#&\' [ 1026.061860][T24343] nfs4: Unknown parameter '#&\' [ 1026.111832][T24343] nfs4: Unknown parameter '#&\' [ 1026.133973][T24343] nfs4: Unknown parameter '#&\' [ 1026.164555][T24343] nfs4: Unknown parameter '#&\' [ 1026.204207][T24343] nfs4: Unknown parameter '#&\' [ 1026.241941][T24343] nfs4: Unknown parameter '#&\' [ 1026.292081][T24343] nfs4: Unknown parameter '#&\' [ 1026.333415][T24343] nfs4: Unknown parameter '#&\' [ 1026.381166][T24343] nfs4: Unknown parameter '#&\' [ 1026.429651][T24343] nfs4: Unknown parameter '#&\' [ 1026.482335][T24343] nfs4: Unknown parameter '#&\' [ 1026.513161][T24343] nfs4: Unknown parameter '#&\' [ 1026.561427][T24343] nfs4: Unknown parameter '#&\' [ 1026.587294][T24343] nfs4: Unknown parameter '#&\' [ 1026.632279][T24343] nfs4: Unknown parameter '#&\' [ 1026.669119][T24343] nfs4: Unknown parameter '#&\' [ 1026.701323][T24343] nfs4: Unknown parameter '#&\' [ 1026.875162][T24360] random: crng reseeded on system resumption [ 1027.882991][T24382] FAULT_INJECTION: forcing a failure. [ 1027.882991][T24382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1027.950073][T24382] CPU: 0 UID: 0 PID: 24382 Comm: syz.1.3701 Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.950099][T24382] Tainted: [L]=SOFTLOCKUP [ 1027.950105][T24382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1027.950115][T24382] Call Trace: [ 1027.950120][T24382] [ 1027.950126][T24382] dump_stack_lvl+0x100/0x190 [ 1027.950147][T24382] should_fail_ex.cold+0x5/0xa [ 1027.950173][T24382] _copy_from_user+0x2e/0xd0 [ 1027.950197][T24382] get_timespec64+0x8b/0x1b0 [ 1027.950219][T24382] ? __pfx_get_timespec64+0x10/0x10 [ 1027.950240][T24382] ? lockdep_hardirqs_on+0x78/0x100 [ 1027.950267][T24382] __x64_sys_futex+0x21a/0x4d0 [ 1027.950286][T24382] ? __pfx___x64_sys_futex+0x10/0x10 [ 1027.950305][T24382] ? rcu_is_watching+0x12/0xc0 [ 1027.950326][T24382] do_syscall_64+0x115/0x840 [ 1027.950346][T24382] ? clear_bhb_loop+0x40/0x90 [ 1027.950364][T24382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.950379][T24382] RIP: 0033:0x7f62b019ce59 [ 1027.950392][T24382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.950405][T24382] RSP: 002b:00007fff58d09c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1027.950420][T24382] RAX: ffffffffffffffda RBX: 00000000000fb79c RCX: 00007f62b019ce59 [ 1027.950431][T24382] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f62b0415fac [ 1027.950440][T24382] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 1027.950448][T24382] R10: 00007fff58d09d80 R11: 0000000000000246 R12: 00007fff58d09da0 [ 1027.950458][T24382] R13: 00007f62b0415fac R14: 00000000000fb7ce R15: 00007fff58d09d80 [ 1027.950476][T24382] [ 1029.478899][T24418] random: crng reseeded on system resumption [ 1029.834290][T24416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3709'. [ 1030.535587][T24442] openvswitch: HfR: Dropping previously announced user features [ 1031.900354][T24474] random: crng reseeded on system resumption [ 1032.113823][T24457] Process accounting resumed [ 1032.179243][T24482] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 1034.265143][T24529] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1034.265143][T24529] The task syz.1.3733 (24529) triggered the difference, watch for misbehavior. [ 1037.929273][T24609] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1038.580282][T24509] Process accounting resumed [ 1039.449939][T24633] [U] 0="/ [ 1039.471042][T24633] [U] [ 1039.488801][T24633] [U] EeQ@ [ 1039.557450][T24632] [U]  [ 1040.058069][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3761'. [ 1040.135813][T24657] netlink: 54041 bytes leftover after parsing attributes in process `syz.3.3761'. [ 1044.605229][T24767] HfR: entered promiscuous mode [ 1044.918390][T24780] nvme_fcloop: unknown parameter or missing value '' [ 1044.955546][T24782] random: crng reseeded on system resumption [ 1045.497371][T24798] ================================================================== [ 1045.497410][T24798] BUG: KASAN: slab-use-after-free in fb_mode_is_equal+0x280/0x2f0 [ 1045.497495][T24798] Read of size 4 at addr ffff88802e9b579c by task syz.0.3790/24798 [ 1045.497509][T24798] [ 1045.497521][T24798] CPU: 0 UID: 0 PID: 24798 Comm: syz.0.3790 Tainted: G L syzkaller #0 PREEMPT(full) [ 1045.497543][T24798] Tainted: [L]=SOFTLOCKUP [ 1045.497549][T24798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1045.497558][T24798] Call Trace: [ 1045.497564][T24798] [ 1045.497571][T24798] dump_stack_lvl+0x100/0x190 [ 1045.497587][T24798] print_report+0x13d/0x4b0 [ 1045.497609][T24798] ? __virt_addr_valid+0x239/0x430 [ 1045.497633][T24798] ? fb_mode_is_equal+0x280/0x2f0 [ 1045.497647][T24798] kasan_report+0xdf/0x1d0 [ 1045.497665][T24798] ? fb_mode_is_equal+0x280/0x2f0 [ 1045.497681][T24798] fb_mode_is_equal+0x280/0x2f0 [ 1045.497696][T24798] fbcon_mode_deleted+0x146/0x1e0 [ 1045.497736][T24798] fb_set_var+0xe76/0x11b0 [ 1045.497779][T24798] ? __pfx_stack_trace_save+0x10/0x10 [ 1045.497802][T24798] ? __pfx_fb_set_var+0x10/0x10 [ 1045.497823][T24798] ? __lock_acquire+0x4a5/0x2630 [ 1045.497847][T24798] ? kasan_save_track+0x14/0x30 [ 1045.497861][T24798] ? kasan_save_free_info+0x3b/0x70 [ 1045.497881][T24798] ? __kasan_slab_free+0x5f/0x80 [ 1045.497896][T24798] ? kfree+0x223/0x6c0 [ 1045.497927][T24798] ? lock_acquire+0x1b1/0x370 [ 1045.497950][T24798] ? trace_contention_end+0x122/0x170 [ 1045.497967][T24798] ? __mutex_lock+0x26d/0x1b10 [ 1045.497988][T24798] ? do_fb_ioctl+0x1e3/0x7e0 [ 1045.498005][T24798] ? __lock_acquire+0x4a5/0x2630 [ 1045.498031][T24798] ? is_console_locked+0x9/0x20 [ 1045.498051][T24798] ? fbcon_info_from_console+0xf9/0x1d0 [ 1045.498072][T24798] ? fbcon_modechange_possible+0x35a/0x4d0 [ 1045.498094][T24798] do_fb_ioctl+0x734/0x7e0 [ 1045.498110][T24798] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1045.498130][T24798] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1045.498158][T24798] ? __fget_files+0x21f/0x3d0 [ 1045.498176][T24798] fb_ioctl+0xe5/0x150 [ 1045.498192][T24798] ? __pfx_fb_ioctl+0x10/0x10 [ 1045.498208][T24798] __x64_sys_ioctl+0x18e/0x210 [ 1045.498223][T24798] do_syscall_64+0x115/0x840 [ 1045.498243][T24798] ? clear_bhb_loop+0x40/0x90 [ 1045.498260][T24798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.498275][T24798] RIP: 0033:0x7ff01f59ce59 [ 1045.498287][T24798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.498303][T24798] RSP: 002b:00007ff02039e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1045.498318][T24798] RAX: ffffffffffffffda RBX: 00007ff01f815fa0 RCX: 00007ff01f59ce59 [ 1045.498329][T24798] RDX: 0000200000000180 RSI: 0000000000004601 RDI: 0000000000000011 [ 1045.498339][T24798] RBP: 00007ff01f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1045.498350][T24798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.498359][T24798] R13: 00007ff01f816038 R14: 00007ff01f815fa0 R15: 00007ffe8de330b8 [ 1045.498374][T24798] [ 1045.498380][T24798] [ 1045.498384][T24798] Allocated by task 24351: [ 1045.498424][T24798] kasan_save_stack+0x30/0x50 [ 1045.498442][T24798] kasan_save_track+0x14/0x30 [ 1045.498455][T24798] __kasan_kmalloc+0xaa/0xb0 [ 1045.498469][T24798] __kmalloc_noprof+0x301/0x850 [ 1045.498482][T24798] cfg80211_inform_single_bss_data+0x557/0x1de0 [ 1045.498526][T24798] cfg80211_inform_bss_data+0x237/0x3a00 [ 1045.498540][T24798] cfg80211_inform_bss_frame_data+0x247/0x780 [ 1045.498554][T24798] ieee80211_bss_info_update+0x310/0xab0 [ 1045.498570][T24798] ieee80211_scan_rx+0x4e6/0xb60 [ 1045.498583][T24798] __ieee80211_rx_handle_packet+0x7da/0xe20 [ 1045.498648][T24798] ieee80211_rx_list+0xd32/0x1fc0 [ 1045.498664][T24798] ieee80211_rx_napi+0xdc/0x400 [ 1045.498679][T24798] ieee80211_handle_queued_frames+0xc8/0x120 [ 1045.498724][T24798] tasklet_action_common+0x2de/0x3d0 [ 1045.498744][T24798] handle_softirqs+0x1ea/0xa00 [ 1045.498760][T24798] __irq_exit_rcu+0x162/0x210 [ 1045.498776][T24798] irq_exit_rcu+0x9/0x30 [ 1045.498792][T24798] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1045.498811][T24798] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1045.498826][T24798] [ 1045.498830][T24798] Freed by task 15: [ 1045.498837][T24798] kasan_save_stack+0x30/0x50 [ 1045.498850][T24798] kasan_save_track+0x14/0x30 [ 1045.498864][T24798] kasan_save_free_info+0x3b/0x70 [ 1045.498882][T24798] __kasan_slab_free+0x5f/0x80 [ 1045.498896][T24798] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 1045.498922][T24798] rcu_free_sheaf+0x1a/0xe0 [ 1045.498936][T24798] rcu_core+0x5a2/0x10d0 [ 1045.498949][T24798] handle_softirqs+0x1ea/0xa00 [ 1045.498965][T24798] run_ksoftirqd+0x38/0x60 [ 1045.498981][T24798] smpboot_thread_fn+0x3d3/0xaa0 [ 1045.499000][T24798] kthread+0x370/0x450 [ 1045.499019][T24798] ret_from_fork+0x72b/0xd50 [ 1045.499034][T24798] ret_from_fork_asm+0x1a/0x30 [ 1045.499051][T24798] [ 1045.499055][T24798] The buggy address belongs to the object at ffff88802e9b5780 [ 1045.499055][T24798] which belongs to the cache kmalloc-96 of size 96 [ 1045.499067][T24798] The buggy address is located 28 bytes inside of [ 1045.499067][T24798] freed 96-byte region [ffff88802e9b5780, ffff88802e9b57e0) [ 1045.499082][T24798] [ 1045.499085][T24798] The buggy address belongs to the physical page: [ 1045.499123][T24798] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802e9b5a80 pfn:0x2e9b5 [ 1045.499146][T24798] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1045.499187][T24798] page_type: f5(slab) [ 1045.499202][T24798] raw: 00fff00000000200 ffff88813fe30280 ffffea0000a305d0 ffffea0001d834d0 [ 1045.499239][T24798] raw: ffff88802e9b5a80 000000080020000e 00000000f5000000 0000000000000000 [ 1045.499249][T24798] page dumped because: kasan: bad access detected [ 1045.499262][T24798] page_owner tracks the page as allocated [ 1045.499267][T24798] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 57, tgid 57 (kworker/u8:4), ts 91272205376, free_ts 85204950943 [ 1045.499294][T24798] post_alloc_hook+0xfd/0x120 [ 1045.499315][T24798] get_page_from_freelist+0x11a6/0x3410 [ 1045.499338][T24798] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1045.499360][T24798] new_slab+0xa6/0x6c0 [ 1045.499377][T24798] refill_objects+0x277/0x420 [ 1045.499397][T24798] __pcs_replace_empty_main+0x375/0x650 [ 1045.499418][T24798] __kmalloc_noprof+0x688/0x850 [ 1045.499430][T24798] cfg80211_inform_single_bss_data+0x557/0x1de0 [ 1045.499445][T24798] cfg80211_inform_bss_data+0x237/0x3a00 [ 1045.499458][T24798] cfg80211_inform_bss_frame_data+0x247/0x780 [ 1045.499472][T24798] ieee80211_bss_info_update+0x310/0xab0 [ 1045.499486][T24798] ieee80211_ibss_rx_queued_mgmt+0x1922/0x2f80 [ 1045.499523][T24798] ieee80211_iface_work+0xbff/0x13e0 [ 1045.499538][T24798] cfg80211_wiphy_work+0x410/0x570 [ 1045.499553][T24798] process_one_work+0xa0e/0x1980 [ 1045.499566][T24798] worker_thread+0x5ef/0xe50 [ 1045.499578][T24798] page last free pid 5633 tgid 5633 stack trace: [ 1045.499587][T24798] __free_frozen_pages+0x794/0x10a0 [ 1045.499605][T24798] rcu_core+0x5a2/0x10d0 [ 1045.499617][T24798] handle_softirqs+0x1ea/0xa00 [ 1045.499633][T24798] __irq_exit_rcu+0x162/0x210 [ 1045.499648][T24798] irq_exit_rcu+0x9/0x30 [ 1045.499664][T24798] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1045.499682][T24798] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1045.499698][T24798] [ 1045.499701][T24798] Memory state around the buggy address: [ 1045.499709][T24798] ffff88802e9b5680: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 1045.499719][T24798] ffff88802e9b5700: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1045.499730][T24798] >ffff88802e9b5780: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1045.499738][T24798] ^ [ 1045.499746][T24798] ffff88802e9b5800: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1045.499756][T24798] ffff88802e9b5880: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1045.499769][T24798] ================================================================== [ 1045.522398][T24798] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1045.522418][T24798] CPU: 0 UID: 0 PID: 24798 Comm: syz.0.3790 Tainted: G L syzkaller #0 PREEMPT(full) [ 1045.522441][T24798] Tainted: [L]=SOFTLOCKUP [ 1045.522448][T24798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1045.522458][T24798] Call Trace: [ 1045.522464][T24798] [ 1045.522470][T24798] dump_stack_lvl+0x100/0x190 [ 1045.522490][T24798] vpanic+0x552/0x970 [ 1045.522506][T24798] ? __pfx_vpanic+0x10/0x10 [ 1045.522520][T24798] ? mark_held_locks+0x40/0x70 [ 1045.522544][T24798] ? fb_mode_is_equal+0x280/0x2f0 [ 1045.522559][T24798] panic+0xd1/0xe0 [ 1045.522572][T24798] ? __pfx_panic+0x10/0x10 [ 1045.522587][T24798] ? fb_mode_is_equal+0x280/0x2f0 [ 1045.522601][T24798] ? preempt_schedule_common+0x42/0xc0 [ 1045.522623][T24798] check_panic_on_warn.cold+0x19/0x34 [ 1045.522639][T24798] end_report.part.0+0x3a/0x90 [ 1045.522660][T24798] kasan_report.cold+0xe/0x18 [ 1045.522682][T24798] ? fb_mode_is_equal+0x280/0x2f0 [ 1045.522699][T24798] fb_mode_is_equal+0x280/0x2f0 [ 1045.522713][T24798] fbcon_mode_deleted+0x146/0x1e0 [ 1045.522729][T24798] fb_set_var+0xe76/0x11b0 [ 1045.522750][T24798] ? __pfx_stack_trace_save+0x10/0x10 [ 1045.522769][T24798] ? __pfx_fb_set_var+0x10/0x10 [ 1045.522790][T24798] ? __lock_acquire+0x4a5/0x2630 [ 1045.522812][T24798] ? kasan_save_track+0x14/0x30 [ 1045.522828][T24798] ? kasan_save_free_info+0x3b/0x70 [ 1045.522848][T24798] ? __kasan_slab_free+0x5f/0x80 [ 1045.522862][T24798] ? kfree+0x223/0x6c0 [ 1045.522882][T24798] ? lock_acquire+0x1b1/0x370 [ 1045.522913][T24798] ? trace_contention_end+0x122/0x170 [ 1045.522931][T24798] ? __mutex_lock+0x26d/0x1b10 [ 1045.522953][T24798] ? do_fb_ioctl+0x1e3/0x7e0 [ 1045.522970][T24798] ? __lock_acquire+0x4a5/0x2630 [ 1045.522998][T24798] ? is_console_locked+0x9/0x20 [ 1045.523018][T24798] ? fbcon_info_from_console+0xf9/0x1d0 [ 1045.523039][T24798] ? fbcon_modechange_possible+0x35a/0x4d0 [ 1045.523061][T24798] do_fb_ioctl+0x734/0x7e0 [ 1045.523078][T24798] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1045.523098][T24798] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1045.523126][T24798] ? __fget_files+0x21f/0x3d0 [ 1045.523144][T24798] fb_ioctl+0xe5/0x150 [ 1045.523160][T24798] ? __pfx_fb_ioctl+0x10/0x10 [ 1045.523176][T24798] __x64_sys_ioctl+0x18e/0x210 [ 1045.523192][T24798] do_syscall_64+0x115/0x840 [ 1045.523212][T24798] ? clear_bhb_loop+0x40/0x90 [ 1045.523228][T24798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.523243][T24798] RIP: 0033:0x7ff01f59ce59 [ 1045.523257][T24798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.523272][T24798] RSP: 002b:00007ff02039e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1045.523288][T24798] RAX: ffffffffffffffda RBX: 00007ff01f815fa0 RCX: 00007ff01f59ce59 [ 1045.523298][T24798] RDX: 0000200000000180 RSI: 0000000000004601 RDI: 0000000000000011 [ 1045.523309][T24798] RBP: 00007ff01f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1045.523319][T24798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.523328][T24798] R13: 00007ff01f816038 R14: 00007ff01f815fa0 R15: 00007ffe8de330b8 [ 1045.523343][T24798] [ 1045.523465][T24798] Kernel Offset: disabled