last executing test programs: 7m31.432619038s ago: executing program 1 (id=1805): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0) ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) socket(0xa, 0x1, 0x84) r1 = socket(0x2, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@in={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x42}}, 0x55) connect$auto(r1, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x7f) r2 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r2, 0x65, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r3, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7f}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x642}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xe4}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x40) mmap$auto(0x0, 0xa, 0x10d8, 0x410, r0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x4e21, @private=0xa010101}, 0x54) close_range$auto(r2, 0xfffffffffffff000, 0x2) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x40002, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r5, 0x5, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x20, 0x0, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) 7m30.947713773s ago: executing program 1 (id=1808): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) mmap$auto(0x0, 0x7, 0x10000000000df, 0xeb2, 0x401, 0x80000000) r0 = io_uring_setup$auto(0x86, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8da0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000007ffd) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4a, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x325d42, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r5, 0x4138ae84, &(0x7f0000000000)={0x7, 0x179}) ioctl$auto(r1, 0xc0205647, r0) 7m29.524870555s ago: executing program 1 (id=1812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x15}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 7m29.370199758s ago: executing program 1 (id=1813): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r0, 0x1, 0x7, &(0x7f0000000200)='\'\a\xeb\xb6\xc8\vF`\xf6\"8\x06hM\x06K\xa7x\x03\x00.y\xa8\xe5', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x97) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'ip6gretap0\x00'}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000002bc0), 0xffffffff}, 0x6, 0x0) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@_si_pad}, 0x6, &(0x7f0000000340)={{0x1c00000000000000, 0xc}, {0xfffffffffffffff7, 0x7ff}, 0x4, 0x2, 0x4, 0x100000000, 0xffffffffffffffff, 0x100000001, 0x4fcd, 0x2, 0xfffffffffffffbff, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffa}) r4 = socket(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bind$auto(r4, &(0x7f0000000100)=@xdp={0x2c, 0xc, r5, 0x1e}, 0x6b) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'pimreg0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x0, @ANYBLOB="b41e100f5b95a362c656ed3fbb35a3b14878952491f7425b979a6cd8e343ea55bc1949b33e1d", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) 7m28.429537339s ago: executing program 1 (id=1818): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x0) creat$auto(&(0x7f00000002c0)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/nvme/parameters/io_queue_depth\x00', 0x20001, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYBLOB="00c40e00"/13], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r3 = socket(0xa, 0x2, 0x0) cachestat$auto(r3, &(0x7f0000000000)={0x0, 0x7fc}, &(0x7f0000000040)={0x2, 0x0, 0xd6, 0x1, 0x3}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r4 = socket(0xa, 0x3, 0x3a) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r4, 0x8, 0x0, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5516, 0x0}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r6 = open(0x0, 0x0, 0x408) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) getdents$auto(r6, 0x0, 0x400018) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) 7m27.23499219s ago: executing program 1 (id=1823): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x40000000001, 0x0, 0x10000000000000}, 0xfffffffd}, 0x100003, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3f, 0x800, 0x4, 0x8, 0x1000007) io_uring_setup$auto(0x5, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xf, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) acct$auto(&(0x7f00000002c0)='u[,&*}\x00\a\x00\x00\x00\xbf\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-\t\x009(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0\t\x00\x00\x00\x00\x00\x00\x00\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x01\x93h\xe9`B@W\xc2B\x82\xf4\x90\xaf\x15\xb2\"i\a\au\xa1\x05\xdb\xe9N4\x8fX\xa1\x9b\xd2\xd6N\xf6\xa4\xa6\xb0K\x04;\xd8\xb8\xa3\x065G\xfb\x9fV0\xa4\xca\xf9\xb4\xf6kW\x97f\xa1\x19\xb6\x85\xc2\xc0\xffg\x00\xfd\xba\x8b\xa3\xc8\n\\\x13\xe5>\x84yb,p\x05\xb1\xb6X5\xac\x9fj\x825\'\xd7\xb7?c\'M\x8e\xff\xc6\xdd\xe3\vN\xc8|\x96\xa2\xeb9\xa4\x98*(\x12\xc8\xa8\x19\xab\xe8GD\xd0\xcf\x8ek\x98\xe0}&r\x04\x8b\nB\xee\x1e\x86\xb2a\xbfB\xb4\x9a\xed\xaf;RW\xd1\x9a\x98w\xb5\xab\xdf\v\xd7 \x81F\x05\xa1\x81\xa4k\xf1+\xd8\\\xd4\"(\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x897\xce.y\x16\x1e\x10\xb0\x9b\xc0\xd2g\x1b\x01\xd3G\'\xc7CU39A\x02x\x8eA\x1f\xbb>\x00'/430) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) (fail_nth: 2) 7m11.815368788s ago: executing program 32 (id=1823): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x40000000001, 0x0, 0x10000000000000}, 0xfffffffd}, 0x100003, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3f, 0x800, 0x4, 0x8, 0x1000007) io_uring_setup$auto(0x5, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xf, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) acct$auto(&(0x7f00000002c0)='u[,&*}\x00\a\x00\x00\x00\xbf\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-\t\x009(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0\t\x00\x00\x00\x00\x00\x00\x00\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x01\x93h\xe9`B@W\xc2B\x82\xf4\x90\xaf\x15\xb2\"i\a\au\xa1\x05\xdb\xe9N4\x8fX\xa1\x9b\xd2\xd6N\xf6\xa4\xa6\xb0K\x04;\xd8\xb8\xa3\x065G\xfb\x9fV0\xa4\xca\xf9\xb4\xf6kW\x97f\xa1\x19\xb6\x85\xc2\xc0\xffg\x00\xfd\xba\x8b\xa3\xc8\n\\\x13\xe5>\x84yb,p\x05\xb1\xb6X5\xac\x9fj\x825\'\xd7\xb7?c\'M\x8e\xff\xc6\xdd\xe3\vN\xc8|\x96\xa2\xeb9\xa4\x98*(\x12\xc8\xa8\x19\xab\xe8GD\xd0\xcf\x8ek\x98\xe0}&r\x04\x8b\nB\xee\x1e\x86\xb2a\xbfB\xb4\x9a\xed\xaf;RW\xd1\x9a\x98w\xb5\xab\xdf\v\xd7 \x81F\x05\xa1\x81\xa4k\xf1+\xd8\\\xd4\"(\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x897\xce.y\x16\x1e\x10\xb0\x9b\xc0\xd2g\x1b\x01\xd3G\'\xc7CU39A\x02x\x8eA\x1f\xbb>\x00'/430) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) (fail_nth: 2) 7.303306501s ago: executing program 3 (id=3454): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2512000000180001801400020076657468315f746f5f626f6e640000000800060001000000"], 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) bpf$auto_BPF_ENABLE_STATS(0x20, 0x0, 0x9) setsockopt$auto(r2, 0x9, 0x8, &(0x7f0000000000)='\x00', 0xfffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r5, @ANYBLOB="010a27bd7000fcdbdf250500000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto(r7, &(0x7f00000001c0)='7K\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) socket(0x26, 0x2, 0x1) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000140), r2) socket(0x1a, 0x80000, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8050) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) 7.245381222s ago: executing program 2 (id=3455): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r0, 0x1, 0x7, &(0x7f0000000200)='\'\a\xeb\xb6\xc8\vF`\xf6\"8\x06hM\x06K\xa7x\x03\x00.y\xa8\xe5', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x97) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'ip6gretap0\x00'}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000002bc0), 0xffffffff}, 0x6, 0x0) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@_si_pad}, 0x6, &(0x7f0000000340)={{0x1c00000000000000, 0xc}, {0xfffffffffffffff7, 0x7ff}, 0x4, 0x2, 0x4, 0x100000000, 0xffffffffffffffff, 0x100000001, 0x4fcd, 0x2, 0xfffffffffffffbff, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffa}) r4 = socket(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bind$auto(r4, &(0x7f0000000100)=@xdp={0x2c, 0xc, r6, 0x1e}, 0x6b) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'pimreg0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDCTL_DSP_SETSYNCRO(r2, 0x5015, &(0x7f0000000400)="aae4c31170a4f1bc9223c642badf5b27457bcd8da4b5dd21453620d40a91eea57b9187900de6f27c07cb4605f38864ad905a2d12ebec59c9297aa35615f056683bcce7fa81041bbf93bda66a0cb86a3e3eea56e71337b1830576a45571a7c899930668d41c3bf5ca3f1dfd68375d17eba214953fc6d4a32929defc7166bf6eede105b2a2ff214e83af3d9f00") r8 = syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x0, @ANYBLOB="b41e100f5b95a362c656ed3fbb35a3b14878952491f7425b979a6cd8e343ea55bc1949b33e1d", @ANYRES32=r9, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) 6.84570389s ago: executing program 3 (id=3456): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) futex$auto(0x0, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0xbff) 5.848903858s ago: executing program 2 (id=3459): futex$auto(0x0, 0x85, 0x1b4, 0x0, 0x0, 0x80800005) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) write$auto(0xffffffffffffffff, &(0x7f0000000180)='0l80211\x00', 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x20802, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000000c0)="f21a9a3c5c7b03f3492d006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c77eed1672bb713aca464b9bbc23b50000000000000004c635fc08000000152ad1f7fa092703e98f867fefbe1470283d09f6e868f537ce22547d21bd301d757a77633ba27c09072f5127f2f9c0780c6ace813067c43272c56e84c6db276391b2cc83f52156ec61fab5bcd3ca74c584441d7e66b26f24c273716f0b2cce71", 0xa7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/workqueue/cpumask\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getpid() openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/error_log\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000000000000000) r2 = socket(0xa, 0x801, 0x84) ioctl$auto_MEMREADOOB64(0xffffffffffffffff, 0xc0184d16, &(0x7f00000001c0)={0x401, 0x0, 0x7, 0x5}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x121f00, 0x408) write$auto(r3, 0x0, 0xfffffdf1) linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_KEY_SET(r4, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="faff29bd7000ffdbdf2517000b000300000004008c"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x42000) getsockopt$auto(r2, 0x84, 0x6d, 0x0, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101282, 0x0) write$auto_seq_oss_f_ops_seq_oss(r6, &(0x7f0000000040)="86ad180916cd35e093b9901f03de02ef", 0x5d) 5.829536292s ago: executing program 3 (id=3460): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) sysfs$auto(0x2, 0x100000000000036, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r3, 0x4, &(0x7f0000000040)='\xe5\xf1\xd5\t\x94\t1\xe5T@k\x9a\xe0T\x9e$zG=\xd3i\x02\xf97%\x1bx%[\xba\xcb\xe01\xf7$\x14A0\xce\x9e\xf1', &(0x7f0000001680), 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="03000000", @ANYRES16=r5, @ANYBLOB="0100253d7000fddbdf2501000000140007800c0001800800018000000000040089800c0002000600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0xffffffffffffb488, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x4, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x800000000000000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) capget$auto(&(0x7f0000000380)={0x10, 0xffffffffffffffff}, &(0x7f00000003c0)={0xe38, 0x2}) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d40)={&(0x7f00000004c0)={0x17c4, r6, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1d, 0x7, 0x0, 0x1, [@generic="7ad93b0888b5062c63dc4d96c81102b532e602188d1b2711b1"]}, @TIPC_NLA_PUBL={0x123f, 0x3, 0x0, 0x1, [@generic="0e4932773166e46562021e2173a4b128e229e29f32501b535d31d6d5936668a1564f73cf32f6c17f2afaad8cd2ff1a591e95b16b92bf41bc065ab80c290e5838b75831ca599591ebfe6c99b540f3e07d9386e599b83775aaf264865d53f3fb387978482299716441850b086b57469cec47abb8894c86b11ab5bd22ad3de7fc5e743bebe6af779cb3db4030dcb3b10f3c934f6167c52f08c2948c9825a9c86b0ef4b8ba2e67fb5584ca5202a5a94f34bb31dd3a185f8e6a77ce6b63bdc5fa24c7998d9de25c04048f7250b9f4cad693c1e5fc9b701588a9a6fb53b222bd440ef3dbdbd17145fdbcb10e071783c498f29d11e83cd25143437b3ccb415d09614015d6e7faaf9a98ce6f73068b8b17a880197d2be4746bb3f12c8f68dd1977201ac16b57ce0479f69a150e4608ee1a1a6d369ab33952e69d6c63ecb6d16466e5bae5fa632099fde678d105dd350b38b4580cf5795fe0bac71dcc60b1cfe8e299956974f9a129123b4b328c5fbc6583634737a806e0b76290a731c602104e2c081cf6205e6bdd55afeb5a855f672968c0a9c4def7b40f659499deaa4f9df2bd9f84dd59f870d4be749ca5b2967b44182c42a881326588379aadaf45eb05afa74847705beb30c29708041f180143f3437b764a6c9e71b85b46db56a4d290af694cf488227a610bd017f41e8ac26fb366e56d2031f6b4a5466ca72ae5790c2a210b8cc0888fe4247ac9bdd65288e9b150f9e06a0ebfd7e09b3ffdf78bb74579732561ceb195cf1c7178203f6ae56742ffdc52779555d24e2d17bc1df0778fec9f33954671a33bee59130049b1837ee2661b17a1e713f13cc00e985a360f2f84438324665527f091469f2d7fcf7ed2428d93c278935798d37a2d8fa863623550cceb049d861cd513ae240fd22c738fe34e46613b8cd2cafd9d966bf1b43d6c9138c0f8601d0fc10da4f77f974a4304dee69e1c18643f91280c341f8e0a39f3ce381465bb20ca55fff99cdc32ba4e575df544348e1b13757d484922b9dd3baf81db40d9ea8658842030f7f9b697d5ae4460798988d884e2263bd9d988aa23e8197bd1f361d8eb251ca19cf0717de71fb57a56c7be9dc3a843b2e5408c41b546aeab75c179f8aca234e4a0ce704845ac104f07e646ca4d06e5a41a1e1b921c0825860dcf2e5366c6184ce9c8cb2508fa538591d1a72fae768c329c8f3d15f2e08844a731ee88e2c28bd48e7e0c61c19b462cc49da291399b5c4538cbbce7ac984a63a7552dd0615b11ca14439def6c51506a39219f51bf6ebcb01b88fb88fdd8f5c8082b5c9fad6bc7e4156771cfea48a54590ccedda7def7cd5c2c3e0481a2ce7777b0891110568a4635766aceec69e7731804b0dc20182b88fa1cda335cb9d8465123a55ed86f0cb2c34a3a719446517418405b8e13a67eab4c9d6a30534c76ce3e457e3804858a09bd87e8b1f25680045be7975943e745cb64e4b365d8396c6fec1c622aace85404cb704598d84a98a2921bf2d186964fe7abff67242d9f5165d448f09c12b59d6fc9838a9de02cf6e0af32d0024080b0d84f314ae4431321c5f12525a3614d3f055ef72e1c5fea33182241140ae60c25ecad1850ac4a73a0f6b8d924f3861550dd5657735a14eef9726b61eea83a2b08828863233147e59f084008093428caec8cfb164397f07df3f11dfa9136f90e92bd67d709e80fe6f8c286af72215ca0e361b0241935f1b5cb97b3af49be8a9d9e3d1f2ffca0f24176b62351ed129971430dc9f73f916c4aeebcbc64dc727b7848d61982558e585d59ed83ae422c7a3480ce2346121e70a12ad0a00fdbb22127065d4ba6689c412f4a014aa7a9a3fe93d6df893800584b5e18c0a334fe1361f4cce896f70e2953d0684ca030c45859d8a94f573758d48f01e558fe6cc688da35294afd621e3cdc61b4b3ffd5406ec4a24aca97464929663e7ac7326d0f01ddf5885d5967cb4970bac4fa6439e09ec5194a7fe9942cd5070b78a1652d45d9c3e46fa27f4800a52a97375a4f6e4725049bafc72f151573b0fd2de8155a7b042b818e1655fee792c608f24e643ce32f6321bbdb95589d15f1c459b50c60c885cb127546ee6bf2940f765c060d068c4fd44bba3f71490ee37607482a484d46f919853c54b659bfcf6efba76f3f722ec74937e68a3c909f5432e2a1b2ea528bfa0b71f1dcea515aa3b13f18a2912910ec18bb6d4bc3b6755506389252060b83c9cc2a1cd0ec636b6d12139469e45883d6827eb79022d178926fa544708cfbbee80ed873f5ecc177bc20f5d013ae6ca4db0e543ed6c2e61400836c76109b973e84460a7dbfbf5aac2162c2ae66e39497abfa31fa43ddaf009384096d6716670b673514f0e67f50c84a7458614cfa65b9589f5154393609e5e0c21187e69d2f7097a5c573eef879f96896e2c31f0d4b0ddc415a96ed1d740b477d0911249f8837c92b890e68f3f604d789a2bb129e31545e9b2befcb9e61c60782f8e8c767fbaeb67adcce42a2948a56d9050f982241816fb40602377b09e1a03d62ecb569d0b927c5dbe55e613678af3b2bb538525c73d89afee3b20103874c698cc6dc41dae7ab89a6f88c7bc06767a67ceec5a3f32e1d3b0f27e6d82bf4d7a7f0c050dec0cb0f4ecb54c112885fd0ffc982d81edf28392c8fa6974c0edfe85d5bd670237a2ec5f214a18a8d3b72653fcd6dc0b8354b3d282cea06e7bfb2f77f7b93419be1b7f9a0b72a814aebc85463ec460da7dacf653fee54482dd835475c59b15fb9c0ee838db89c519b4436b25286d577bbed8e4539f0901b3541a35fa711b9f58c1c4cebc1c9b7e054d8cd7c0241f3855e70270cd265f8f7fd20db1bd2f244103fe40b28430ace5f03af16e0aeca533825bf10b3522aa3fd57c8184b53f6fd24f29d45acf1422c583652aca7a93fb150f24cf01c4981b78ab6fe5c7a6384d0b1992ae24eeb0035c22df3a786b2c592c3d2ce1acbf743e669d57ab3dd6efe972702faec37927763ee3087eb63c35f500fc30d98043735558161b1ec92b3917c7d3a9ac933bb1e6c90f896a28127760e67a9446637816f607540f290889dc22f73cc4bff0757450dc66a431cc51b13e587aa1fb84a6858475d62b38e37f9b86cd30966c2ce3db3d44109a584563d2c7d5fcc5e9bfce7cc9f6f47bf44ca2ec897611efa71c44fa7a04f65d163162255789d9a13b8472dcc1d859f557c41856fa919ec69e75c11c35c7848b56b4f64444f4e85f93caa899733f468e98fe90226a0e0579656c678c6099c775120bf2e2715fa6ff06996f7882f39dc319a19b0ca5440e93a062ba547eabb80bbc5d61d1ea77ef2fd798d6acacbd423e40b3a8fab8cfacf81848598c586890e5fd18cd26e86b978846a904da4bedef8222818d6b014b9e07c255de02c83b6c7ea5117be68c9ced9ae736422aed06d948fe31c0dee42503290ffffee79ebdc35a85a36f57c87d376ea593a168f3bd5e26f2ac4b5db64b448751ef705bd2969e5c2847df18c908bb231afef4dd44b105fe98de1a203ac90d9fb249e1199472c9aca1474978c895fa66a27a9f139ae97ff18d8e291c597147f521d58fe484d586167a9e03ddb7d50f4abcf173a761b8a407dfcc79925a3f90f648cba6325f8df48afabe26fe7ae6cdde5db90c708d14eee1ab0d7d0d81c9206bcdc3b50bf78741299bdac6ba44fb2c10036d891ae3fd7dc5bc7a8d8613ed7530e15cc882929df734ad4b9f4d2d3b2b9d034d6a03cb2ee4126ab3583cf837946ce315bd269fce53194d9c148881106f6e0986eef97b74aa51464c4ac9f2a52e9bbfd5e746860fe614c1695d1a0b2252e5d5ce743d4e3b156f975c9258ca39ace5321fbb18a7d6c5dcdc2ee2415eb37c1d089562c6b4e9b1bc255480f7df9cb167b656b0dba6543b6f26ab557b07b45e54032a5fd721e881f2b42b246c700559ba5617eeefef018eb1bede3f6774d4124279c85a14595a00bff9fa3a8aaae76b7b77a0cdb1ec7252fc4c439e416857047ab617486f285308e9d69caaaf748cd574faa2b38674847205130e32d4975b6a5cef3f9f76e3507c99eeb330c14be3c1ca86c58abfe16889d37ab3bfd17afb4c09fa89f63cc2d92c90323e6d095b32b4900a6ad9cb9d92a3f71d5c95c99c9e379b05538e401a3c926dbbe8a8b9cd8fa310d0c3db6ca5337f67aea81d3440e1d5063495829403c94d26c7696315e9b81a6a2e2f5acca5de21128764827ac462c2f38f37f907059659e75d6a9ae38cfcbb3e73e6972b01206757cea03b0d94cd37999ef8809de1809d39a1e7893aa00ade6d540212fe94e54207962382ede9a773fe4df77fe1ac4e27805e093cf6b3b95b6431e9232caaf7b62906d9120392650a85796c7e1163f170ebda6764d80a76f6b6c39730dce2f2ffaa30201572446ef277ee9ab54e70f475ff943c2a8c45de508b317f24244b6a66f637f290e7965b2d7ebcfa6deb77856f68a0f34619110af195d5a0bc55cab763264e583ce8ef2910124916db67e08c744f059a6a1692bd0a045fba5e85c75c662e4781a3edb5fa9fa77d5addbf6a22f83ce23c2e3022b611b662fc181531fbfdfb7166b6915015551eb7983226fb8af18bc6e0a17bb259cea5094d5e98d659b0a68472f21bf3fc6bc4c562e0129fac71aea318692db2c369f66f853f06acc7955ea3fe01955cf2efb33bc93f6039aa54da63287c4d27958da61d090f26b8722b04af404a9aa930d663f993afd8155cb4db7d87d0f19f44cdc1db2a4725669e61969630e26b8d69cbf9e1236f52c564e5b3d5558c86779d29488fdd89a54ffea633ddd4a49e615820c9538c937e7f4c2960f1717c3bcf01d6a41e89ab5a5dca82bcab3e35ae701585a8ac1d10e4a8d2a03ac3f807b175c59e0bb5fd9d4feb5291875d376f0172fd19f944fe3142d644f554e17842efd076c4266d0719be27f3f672f0a20ea92b6fc00c405839dbee5d8b2f3adf7012c305a660889164d0b99e810ee85ba93d1ae9f4d3f8978d78d569c66b8e2d2cc0aa970c3b87a1ce85451f142056c14da90f88c99d8bf11942d0faee5dc80714eb4d765c1de29695e43f5bbddc3fe6a341afe9881cdd161115bd115a896e4923d797656f4a4a91beb1f97db4827cb89465bfd6dd6bb95bc728a603d7027e206a83756bd61ffbf3210337086b7bd75842752eeb9c77400ebe36f3777f043d19ca5857bcbd51b377b83e753675303903750ea1da8750119d9b0e4bcdb55c2310173f2467cb4840ddf9f2d7a87dd15ad96b4c20673d8da56b4c0d44615126c487c4b5e0c2894b7868237dad3c3b2c467260d84afef58120dbf39043965c966636bb1fb41d0495adfcae03925184da8876c8603cd418f07664f8445c2dee87a953723cfb24ee538e561c54d43b970eec321ae1ba4a3f8a95656039a73e5bf75d84f27060213e2c9aa3074a3ecdf660c37f986501a39414b615bc906f31e683bce061559a7e8f91693cafe76f6db7defb606417d3022934ac2aa45e5e6b2b589be5e6472828cd4cf1f96274f03b627a0180b6c775651f12e83a545bae8be2cfa354a56a0bbb92ba80503576a81f7b2e4588b474882e20b6e56250ce9a2a12f3b70af514536e9b637a58c202adad644b8d067ba5a9ef60ad6caf2fbf57bc5c5226e75fe3ea49b0cc6a2f109c0cea952ffa6826250d008bddd70ce7a2c9d79c2c9ec3ae2fda20a3130bcc35505ac55308d59be52c3439c6b0b2bde157d6328b47d38f273d25dae0ceee14b3e496eeb54bbe1955e43a151e3352c0", @typed={0x8, 0x142, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x158, 0x0, 0x0, @pid=r7}, @generic="3eb1d57bb0ea7d728b8219e98ff6cff1c5583e0a3b326edf982a81156c033dd28301a87e1f94b76b6721b64695555394d870d09166f38702a8e977695f4bd9f7796a48a414494c4fac8eac4b6fb4eb30da55be4281680585afe36cf889f1117f0f5ca08eb366c8c33733aa695d8ecf86c0f1db286504138beed248c4c07de2cb523e55904a5cd93f07d62f13d24f096171b4b1a7db801e10227718ecdb0a940082068dacb0b8ff5303e6213fdc48a4626785393a21f745e8147ad283ce35a6c360969c763d462fd4f6d7ebe7076be94d009187853f671e89341783558ae23be4", @nested={0xbe, 0x39, 0x0, 0x1, [@nested={0x4, 0x40}, @nested={0x4, 0xb7}, @nested={0x4, 0x11c}, @generic, @generic="e8070b59ef170e1d5ffc45557a00643f5ca91a7a6da7d2e63a17650f8fc59dee2402179c2fd3e22642ac8079d5603fe1a34adc80334d022c2595ec0272b478a74773929397dcb87dcb4e21b672a46800b16322bfff573091f897f5ea61f2aa92db8750d3694a61404141", @nested={0x4, 0xcf}, @typed={0x36, 0x116, 0x0, 0x0, @binary="bee0242825bea4c4ec0c73a9892e835cb07d939284faf4adeeb5bd6b08745ca52ace8022c691552ed1b44ad72de2db170ee2"}, @typed={0x8, 0x156, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="610c5ebcd69a2d719209b36882bf1b019467985e8aad44d3757715ce44baa91051868f3582f731596937027734dc2ebe6235a17739e5535161cbf49a12615aca9bfc8239bee2f6da250354352a3910458da2337a3bfe43fd947e903c75e515abf08b56fddb3f80056ccc8a2093dcbe256a50396005ca0b3986edcb6beb30138bb302a146d77fe540fac130"]}, @TIPC_NLA_MEDIA={0x154, 0x5, 0x0, 0x1, [@nested={0xd9, 0x27, 0x0, 0x1, [@generic="da323a77b68aa1cc5acc49221ca526fd22d111d2a804270fcc78319dba481240256dcadcb5eeaa343379de0a50d9145698f9832e8ddcaf0ede66c8a80785a3040a504e7d692333cbac8f50932b0ff14d524609fa1a4feab8d0ae60d3a3768ba78771f5c7ede0f24624a330a96ce92043fe4112b3393df4ab50e8aaf68e7316c09d0822144916890048ba96b6f116e91c10968ac1b02dc8df46d33bbad1acdba08f55feabdfbd69b94a284cb3fc06fcae5a5b2381c2a1dc6c2bf1a859df17651dc6200ad60a8c822be8823b86250aa668ad", @typed={0x4, 0x2b}]}, @nested={0x24, 0x12b, 0x0, 0x1, [@generic, @typed={0x8, 0xe4, 0x0, 0x0, @fd}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0xf5}]}, @typed={0x50, 0xca, 0x0, 0x0, @binary="7d6567f06fc20d1eed96156c4b03b7df28a322dc7aed709de7b5cdd36448a4e5ff80170e8fcaea6806dcd49602e74467ca16de5e8717a0679459538e93881a9a2773797205095d0cec228e29"}]}, @TIPC_NLA_PUBL={0x3f9, 0x3, 0x0, 0x1, [@generic="d192a7c508ea4d855cc26b780700663e89136d0a6e8cbedf7f518be6a6728816d9b8a83f4be24bd598de0fa4f754b63464aee20e41c7f882c4e6da36bae0c3e6c9df93890f67b9e0575dcf4eff35a511db9e3367", @generic="6860b7d056a060970acbdfb3b6ba34b5a7adad71d8c62ff206520a69f26cd6a8c0cf6a3e16131cf4992735a00fba79e203f63995da7d537d37f7c303e5fe4934883d2a48511f0f2a7812255379bf436b477bc6c655ab8709eff49b0a9e73749ede9616899eedde3a2df94e0122c96eec498e5e0de31d9dabeff9007057de903bd2f80a51beaa90559a1065d8b706d07a9ece099671aba7a934468e927c24a066301fc1363ff1a3a2c4a51f2c48fcf49cc88ad0079b5756ee", @nested={0x208, 0x6a, 0x0, 0x1, [@nested={0x4, 0x77}, @nested={0x4, 0x84}, @nested={0x4, 0x135}, @nested={0x4, 0xa3}, @generic="2dffd9ea8930cfea2291cb211af31d4c091f37aa2c3484f15fd070d442027feab7181036168920b4fcc44d45f666d4768db7ab02eac3b22daaf8476b82877d3824893f5fd0f0a024e4fb6addfaa5a5d3a6c0cc26ac5c4f5de1c90508203e14bf5530d35b955083b88e01a0316d2287f923be443aa4372a28a5aba5bc0a24c95cc8da9decf30f733e6d7e8193a643e88eb75d0c1e6a36e299701759eb9167d64c95e158e62c95d8de358fcc507101e41e4851f07a08", @generic="b7e1a232b2ae842827afb4b1c0b23b35989300ab7bf12df3e41644c78cbce3b3bca40730fddbe323dfd8a9ba1275a000ae7a430171f119927bbf8d966e487f1e948d0e70778c98fc0ae55cb53445ce7e7f2a91d2b5b9ca94a6e25e3f5ac277af2b7b19a777b589c410209ee8b547f2fccd5d2eb4c2540ad05d8a984df042c9f348a6981a8e45e31a850c62364e7195", @generic="4699", @generic="f36224bd52037422a5f6713787fb82c593f8be7080f6e416f5906b656130376f483556d91bd0f9d2eaee3641f641941b12814d7cda8f0873dbf791851b44144d27f764979d7c7d6935b0895661f9e57f6e618e74ce911e9db4f1825f3ebb2b58f5d33898ecc8ab73f3d9f96afd038b5e0b2b8081c8c938221605e9e2aa0eb35dfe0680493adaff101081c133c18c2d3b914ce0d929082ca1cd6f2e44cb774d57077ef5e2d07a888b3d2269c2dcfc"]}, @nested={0x50, 0xae, 0x0, 0x1, [@typed={0x37, 0x88, 0x0, 0x0, @str='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00'}, @typed={0x6, 0x7d, 0x0, 0x0, @str='(\x00'}, @nested={0x4, 0xe8}, @nested={0x4, 0x88}, @nested={0x4, 0x15c}]}, @generic="b33bc782263f280fb705f2093c70233e355b5de6a5bfdaaf847782cd888ee64f710f87d3e3f74a2df927405b1fe6eb69b72e7d309526a93603c836a54a259212c002f8f956e87c31df92adc331c9915c1d2fecf7165bfc45957dde47b0759e0ef9b49cc41ca9addd2458f0f6c7eec2da7bb82bd2439c9492dce567a6ee1362ea86a25e48d296890aaa7b1f414b8979a57b"]}]}, 0x17c4}, 0x1, 0x0, 0x0, 0x4004800}, 0x44854) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r8 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 5.491896277s ago: executing program 3 (id=3461): r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000004440), 0x40000, 0x0) symlink$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink$auto(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000580)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x202500, 0xb8) ioctl$auto_BTRFS_IOC_DEVICES_READY(r0, 0x90009427, &(0x7f0000004480)={@raw=0x7, "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"}) 5.424946012s ago: executing program 3 (id=3462): mmap$auto(0x0, 0x4020209, 0xdf, 0xeb1, 0x401, 0x200008000) ioctl$auto(0xffffffffffffffff, 0x5514, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) flock$auto(0xffffffffffffffff, 0xffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000140)=""/44, 0x2c) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001040)='/dev/binderfs/binder1\x00', 0x0, 0x0) r3 = epoll_create$auto(0x200004) epoll_ctl$auto(r3, 0x1, r2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/video63\x00', 0x0, 0x0) linkat$auto(r0, &(0x7f0000001180)='./file0\x00', r3, &(0x7f00000011c0)='./file0\x00', 0x96a90000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) bpf$auto_BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)=@link_update={r2, @new_prog_fd=r0, 0x73, @old_map_fd=r0}, 0x9313) r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r5, &(0x7f0000000040)=""/4096, 0xfffffe82) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001240), r4) r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r7, &(0x7f0000000240)='\x03W\x96l\x15 \x00 \x00'/21, 0x100000002, 0x100000001) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={&(0x7f0000001400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082cbd7000fddbdf2503000000120001009d6cd9dcbd2180b10c29b22f717f00000c000b00050000000000003c71ddb000aaac870100784781b70bf1dc86a90000", @ANYRESOCT=r6, @ANYRESHEX=r7], 0x48}, 0x1, 0x0, 0x0, 0x4004010}, 0x2040) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 4.910074805s ago: executing program 2 (id=3463): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) shmctl$auto(0x6, 0x3, &(0x7f00000000c0)={{0xfff, 0xffffffffffffffff, 0x0, 0x81, 0xa, 0x5, 0xd52}, 0x5, 0x7, 0x2, 0x4, @inferred, @raw=0x5, 0x7, 0x0, &(0x7f0000000000)="d717f34b31c4ce1c4a4a59a1244278", &(0x7f0000000680)="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"}) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000004c0)={0x4, 0xb5, 0x4, 0x100000000, 0x6, 0x0}) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000001c0)={{0x6, 0xee01, 0xee01, 0x6, 0x0, 0x1, 0x5}, &(0x7f0000000140)=0x9, &(0x7f0000000480)=0x6, 0x0, 0xfffffffffffffffc, 0x5, 0x6, 0x200, 0x400, 0x1, 0xa, @inferred=r2, @raw=0x9}) r4 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r4, 0x0, 0x80000001, 0x0) shmctl$auto_SHM_UNLOCK(0x1fac, 0xc, &(0x7f0000000400)={{0x9, r0, r1, 0x1003, 0x10004, 0x9, 0x200}, 0x400, 0xffffffff7fffffff, 0xffffffffffffffcb, 0x7ff, @inferred=r4, @inferred=r3, 0x9, 0x0, &(0x7f0000000800)="9221de957ba7a7d0b9768ee9b5cda221b149db3a6a58cb2d9ac5d11ed2fb25676521611f2df42a0581037e7a59a56eb50bc22e907b15e38430f097faa600e6248b44d64b62df42091a77820a2bda9ed28e7a635f10b1dbd4291d91353052bd60383b9573ee6a1ba8fd982c36136070949db7789d145c78bb279a7a82ebaa769041d4969365383789a09a8d538542cd85e2d632efc0decfdc424b0a0393015b9c7afb4b34d06deb50c3b937b06e5c2f1f064bedca44fe272f58da98cdc5c361b778572496e292d6af4db6227b7091216cd2eca694653cad30fe0393d8e6e5f5680a758855f0f5929f010e2c217f8ac949d8d6d1b0b13ece59", &(0x7f0000000300)="f55e2daefcfb7ed63920176b62f222dd5f5d8598671ca2b7a00164017a338738dae6e40f6de7d1b726883452b1bb20674eec752d790e9056aaa78efbf7bccea5fa4e446ed49c8dc4b3e4b2c47043fdfd081d0b5e13e017b6b5c6efd17640a77a71b11faefa53578eff7415efc345dedef2bd3587fcb7e916546366d12106b0691c101f48ce6b3c1f93d728863cdc4712bfe49f2c908c416d19316b631c037d6fc819f5de9f241bac347796df5a6d58f2317638853c64e0cea7ad6f496750cb24ae4b0372c08895634dd825e7667b23e0b074d9260bb38e5b3809dba5aa150a3c5551172ca706fa8421e890a9b0042733488b0d8b7ba71ec1"}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x2, 0x80000, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYRES64=r5, @ANYRESDEC=r8, @ANYBLOB="1b0026bd7000fddbdf25030000000400080008000380090012", @ANYBLOB="ffa73016d70762f798e2d943a3db51b824f479cab86a2bfec6168730bbdf3dd8eba35a0bd9c920c959f643078c06f5189fab4a1e37ba0299ee690580cccbc2105b81730e9b064ed4e11d1c076624dd2e1167e7a51cd81ac9c29f13865d059c3058cba4ddb4a6bb618521b6ecc3ee9f437273765c4bd8f64cd7499e9870828546cd2c3d95e38e3cedc30738fbaed1bfc05b7515f9749eec8fd089c57c245ceca8f66bf4b6a98ad499b82c8c419d8deb0431954f3fe274cd7b74692ca3f6"], 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000891) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x4) r9 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) write$auto(r10, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x7e) write$auto(r10, &(0x7f00000001c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!#\xack\xcf\xe9\x9d\xa6\xbc\x17o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf4\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\xa4\xc3\xfe\xa7\x80r\xd9\xe5uE\xcf\x843RG\x84\x9d\x9eE\xd7\xa0\x19\xa3\xc5\xb2o\xe8\xa3K-\x9aO%8\x1e\xba\xca\x85\xd7Q-v\xbf\x1c\xe0\xeeA\xf0ju\xac\xb2\a\x8cU\xae\xed\x1c\xc61\x94\xbb\xe1\x10TY\x06\xe0]j\ac\x87\xf6\xb5\b\x00\x00\x00\x00\x00\x00\x00\xab\xa1\r<=\x1e\x9f\x037\xbd\x16\xdb\x00\x00\x00\x00\x00\x00\x00\xaa\xf9k\xd1\xca2\xf8U\xac\xfctH\b\x03', 0x11) r11 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r11, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(r9, 0x81) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100200400f) 4.578994627s ago: executing program 4 (id=3465): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty17\x00', 0x20001, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000380)="976f09bd68850edbe36136c8dda8a7f1165cca065833fd9b640f0000000000f6c02b55fba44503225c5a3b744483659ef0c4613e29c45e81dc254bfbf94d8d9ee2ab6b2bd118171e0f8b5196a37d4a987e883f68f01b0da50221d5e9bc0b0d91a686f83437ebf120bea1748257fd60f911f4", 0x72) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14ab3f) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0xffffffff, &(0x7f0000000640)={0x10002c, 0x7f, 0x8, @inferred=r1}, 0x9007) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=@bpf_attr_7={@start_id=0x7, 0x2, 0x10000, r2}, 0xac) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101080, 0x0) close_range$auto(r3, r3, 0x6) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) socket(0x2, 0x801, 0x106) unshare$auto(0x40000080) socket(0xa, 0x4, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x20000008000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r6, &(0x7f0000000080)={0x0, 0x1000}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x14b443, 0x0) 3.908183734s ago: executing program 2 (id=3466): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2512000000180001801400020076657468315f746f5f626f6e640000000800060001000000"], 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) bpf$auto_BPF_ENABLE_STATS(0x20, 0x0, 0x9) setsockopt$auto(r2, 0x9, 0x8, &(0x7f0000000000)='\x00', 0xfffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r5, @ANYBLOB="010a27bd7000fcdbdf250500000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto(r7, &(0x7f00000001c0)='7K\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) socket(0x26, 0x2, 0x1) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000140), r2) socket(0x1a, 0x80000, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8050) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) 3.677383464s ago: executing program 0 (id=3467): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5514, 0x1) arch_prctl$auto(0x5005, 0x200000000000006) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2a, 0x80002, 0x75) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0x408c5333, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x2180, 0x0) epoll_create$auto(0x200004) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x402, 0x0) write$auto(r0, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8\xe4\x145\x90e\xd3\xe0);\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x1e\xe1\xdb\x03\x19\xba\xda\x19\xbbW\xc6\x8c\xd54\x0eJ\xcdpq\xedv\x93\x89\r\xb5\xe06:\x85\xc0\x982]dy0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80005}]}, 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) fsconfig$auto_SHMEM_HUGE_FORCE(r3, 0x8000, &(0x7f0000000140)='/dev/binderfs/binder1\x00', &(0x7f0000000300)="fb785e6470e5135fdb12710246521b800e3609dffd33ef8f93cd4b44f6f9ac95e2bf6a592ea4854c8d517de82dc2a0576416293caea98565383c72e8a5d8a368203f7fe930aa1d5b7eb3bfc6a1fcb0c942d63d7e4a3aeca6309a768ff8d2eb7ee07e3c9abf7a0d57a0a64176da3e3489d8a2aadd14695beddad1fdf1447327758941d3204c48a23001e89b68e81ad3b4cf1dd23f2064f503c318834767ca023a08d9bc0a4a92ac32ebe5cdbe39b725325784ac1a51ead6b5eb0bb916fc349671378a6d25b42b3987db7246ba3cdbacd4dff350c2", 0xfffffffffffffffe) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x7, 0xbfb, 0x79, 0x30, 0x3, 0x2}) 3.537268687s ago: executing program 2 (id=3468): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r0, 0x1, 0x7, &(0x7f0000000200)='\'\a\xeb\xb6\xc8\vF`\xf6\"8\x06hM\x06K\xa7x\x03\x00.y\xa8\xe5', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x97) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'ip6gretap0\x00'}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000002bc0), 0xffffffff}, 0x6, 0x0) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@_si_pad}, 0x6, &(0x7f0000000340)={{0x1c00000000000000, 0xc}, {0xfffffffffffffff7, 0x7ff}, 0x4, 0x2, 0x4, 0x100000000, 0xffffffffffffffff, 0x100000001, 0x4fcd, 0x2, 0xfffffffffffffbff, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffa}) r4 = socket(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bind$auto(r4, &(0x7f0000000100)=@xdp={0x2c, 0xc, r6, 0x1e}, 0x6b) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'pimreg0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDCTL_DSP_SETSYNCRO(r2, 0x5015, &(0x7f0000000400)="aae4c31170a4f1bc9223c642badf5b27457bcd8da4b5dd21453620d40a91eea57b9187900de6f27c07cb4605f38864ad905a2d12ebec59c9297aa35615f056683bcce7fa81041bbf93bda66a0cb86a3e3eea56e71337b1830576a45571a7c899930668d41c3bf5ca3f1dfd68375d17eba214953fc6d4a32929defc7166bf6eede105b2a2ff214e83af3d9f00") r8 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x0, @ANYBLOB="b41e100f5b95a362c656ed3fbb35a3b14878952491f7425b979a6cd8e343ea55bc1949b33e1d", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) 3.076121958s ago: executing program 4 (id=3469): socket(0x10, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x88, 0x4, 0x2, 0x36242398, 0xd, 0x3bb, 0x8, 0xffff, 0x1, 0x81, 0x68198}, 0x6f2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12", @ANYBLOB="ed44b03977881b35e45c9314267c258a16544262391e04a152fa9754faaa00d67c93a0d6eaf7c304eeab6ac8222492180eb31321572fbd3059af276791bba7308a8262cc4079a6d8746c86b6c5fb0ce9264a9f7d286477536017765910937345733c2fcd3fdef75fbb45885d66a199e4b0c62aec2cd27ed6f8c5673df86e9d594b57030f40ee8bc1ef895eee5a3800fa07e03bc9ca33b607865cd41673b85cc88f678bc8e86f10205bb6f3b1221ccee120e56a829387d0587042a08e56905d9b849a0ed87721299321614b664d835caa753ffeb633"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r0, 0x40000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x3ffe, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) epoll_create$auto(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r2, 0x0) capset$auto(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) read$auto_msr_fops_msr(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r3, 0x0) close_range$auto(0x2, 0xa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_fd, 0x400000000003}, 0x4) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) 3.0722769s ago: executing program 0 (id=3470): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) sysfs$auto(0x2, 0x100000000000036, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r3, 0x4, &(0x7f0000000040)='\xe5\xf1\xd5\t\x94\t1\xe5T@k\x9a\xe0T\x9e$zG=\xd3i\x02\xf97%\x1bx%[\xba\xcb\xe01\xf7$\x14A0\xce\x9e\xf1', &(0x7f0000001680), 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="03000000", @ANYRES16=r5, @ANYBLOB="0100253d7000fddbdf2501000000140007800c0001800800018000000000040089800c0002000600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0xffffffffffffb488, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x4, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x800000000000000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) capget$auto(&(0x7f0000000380)={0x10, 0xffffffffffffffff}, &(0x7f00000003c0)={0xe38, 0x2}) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d40)={&(0x7f00000004c0)={0x17c4, r6, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1d, 0x7, 0x0, 0x1, [@generic="7ad93b0888b5062c63dc4d96c81102b532e602188d1b2711b1"]}, @TIPC_NLA_PUBL={0x123f, 0x3, 0x0, 0x1, [@generic="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", @typed={0x8, 0x142, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x158, 0x0, 0x0, @pid=r7}, @generic="3eb1d57bb0ea7d728b8219e98ff6cff1c5583e0a3b326edf982a81156c033dd28301a87e1f94b76b6721b64695555394d870d09166f38702a8e977695f4bd9f7796a48a414494c4fac8eac4b6fb4eb30da55be4281680585afe36cf889f1117f0f5ca08eb366c8c33733aa695d8ecf86c0f1db286504138beed248c4c07de2cb523e55904a5cd93f07d62f13d24f096171b4b1a7db801e10227718ecdb0a940082068dacb0b8ff5303e6213fdc48a4626785393a21f745e8147ad283ce35a6c360969c763d462fd4f6d7ebe7076be94d009187853f671e89341783558ae23be4", @nested={0xbe, 0x39, 0x0, 0x1, [@nested={0x4, 0x40}, @nested={0x4, 0xb7}, @nested={0x4, 0x11c}, @generic, @generic="e8070b59ef170e1d5ffc45557a00643f5ca91a7a6da7d2e63a17650f8fc59dee2402179c2fd3e22642ac8079d5603fe1a34adc80334d022c2595ec0272b478a74773929397dcb87dcb4e21b672a46800b16322bfff573091f897f5ea61f2aa92db8750d3694a61404141", @nested={0x4, 0xcf}, @typed={0x36, 0x116, 0x0, 0x0, @binary="bee0242825bea4c4ec0c73a9892e835cb07d939284faf4adeeb5bd6b08745ca52ace8022c691552ed1b44ad72de2db170ee2"}, @typed={0x8, 0x156, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="610c5ebcd69a2d719209b36882bf1b019467985e8aad44d3757715ce44baa91051868f3582f731596937027734dc2ebe6235a17739e5535161cbf49a12615aca9bfc8239bee2f6da250354352a3910458da2337a3bfe43fd947e903c75e515abf08b56fddb3f80056ccc8a2093dcbe256a50396005ca0b3986edcb6beb30138bb302a146d77fe540fac130"]}, @TIPC_NLA_MEDIA={0x154, 0x5, 0x0, 0x1, [@nested={0xd9, 0x27, 0x0, 0x1, [@generic="da323a77b68aa1cc5acc49221ca526fd22d111d2a804270fcc78319dba481240256dcadcb5eeaa343379de0a50d9145698f9832e8ddcaf0ede66c8a80785a3040a504e7d692333cbac8f50932b0ff14d524609fa1a4feab8d0ae60d3a3768ba78771f5c7ede0f24624a330a96ce92043fe4112b3393df4ab50e8aaf68e7316c09d0822144916890048ba96b6f116e91c10968ac1b02dc8df46d33bbad1acdba08f55feabdfbd69b94a284cb3fc06fcae5a5b2381c2a1dc6c2bf1a859df17651dc6200ad60a8c822be8823b86250aa668ad", @typed={0x4, 0x2b}]}, @nested={0x24, 0x12b, 0x0, 0x1, [@generic, @typed={0x8, 0xe4, 0x0, 0x0, @fd}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0xf5}]}, @typed={0x50, 0xca, 0x0, 0x0, @binary="7d6567f06fc20d1eed96156c4b03b7df28a322dc7aed709de7b5cdd36448a4e5ff80170e8fcaea6806dcd49602e74467ca16de5e8717a0679459538e93881a9a2773797205095d0cec228e29"}]}, @TIPC_NLA_PUBL={0x3f9, 0x3, 0x0, 0x1, [@generic="d192a7c508ea4d855cc26b780700663e89136d0a6e8cbedf7f518be6a6728816d9b8a83f4be24bd598de0fa4f754b63464aee20e41c7f882c4e6da36bae0c3e6c9df93890f67b9e0575dcf4eff35a511db9e3367", @generic="6860b7d056a060970acbdfb3b6ba34b5a7adad71d8c62ff206520a69f26cd6a8c0cf6a3e16131cf4992735a00fba79e203f63995da7d537d37f7c303e5fe4934883d2a48511f0f2a7812255379bf436b477bc6c655ab8709eff49b0a9e73749ede9616899eedde3a2df94e0122c96eec498e5e0de31d9dabeff9007057de903bd2f80a51beaa90559a1065d8b706d07a9ece099671aba7a934468e927c24a066301fc1363ff1a3a2c4a51f2c48fcf49cc88ad0079b5756ee", @nested={0x208, 0x6a, 0x0, 0x1, [@nested={0x4, 0x77}, @nested={0x4, 0x84}, @nested={0x4, 0x135}, @nested={0x4, 0xa3}, @generic="2dffd9ea8930cfea2291cb211af31d4c091f37aa2c3484f15fd070d442027feab7181036168920b4fcc44d45f666d4768db7ab02eac3b22daaf8476b82877d3824893f5fd0f0a024e4fb6addfaa5a5d3a6c0cc26ac5c4f5de1c90508203e14bf5530d35b955083b88e01a0316d2287f923be443aa4372a28a5aba5bc0a24c95cc8da9decf30f733e6d7e8193a643e88eb75d0c1e6a36e299701759eb9167d64c95e158e62c95d8de358fcc507101e41e4851f07a08", @generic="b7e1a232b2ae842827afb4b1c0b23b35989300ab7bf12df3e41644c78cbce3b3bca40730fddbe323dfd8a9ba1275a000ae7a430171f119927bbf8d966e487f1e948d0e70778c98fc0ae55cb53445ce7e7f2a91d2b5b9ca94a6e25e3f5ac277af2b7b19a777b589c410209ee8b547f2fccd5d2eb4c2540ad05d8a984df042c9f348a6981a8e45e31a850c62364e7195", @generic="4699", @generic="f36224bd52037422a5f6713787fb82c593f8be7080f6e416f5906b656130376f483556d91bd0f9d2eaee3641f641941b12814d7cda8f0873dbf791851b44144d27f764979d7c7d6935b0895661f9e57f6e618e74ce911e9db4f1825f3ebb2b58f5d33898ecc8ab73f3d9f96afd038b5e0b2b8081c8c938221605e9e2aa0eb35dfe0680493adaff101081c133c18c2d3b914ce0d929082ca1cd6f2e44cb774d57077ef5e2d07a888b3d2269c2dcfc"]}, @nested={0x50, 0xae, 0x0, 0x1, [@typed={0x37, 0x88, 0x0, 0x0, @str='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00'}, @typed={0x6, 0x7d, 0x0, 0x0, @str='(\x00'}, @nested={0x4, 0xe8}, @nested={0x4, 0x88}, @nested={0x4, 0x15c}]}, @generic="b33bc782263f280fb705f2093c70233e355b5de6a5bfdaaf847782cd888ee64f710f87d3e3f74a2df927405b1fe6eb69b72e7d309526a93603c836a54a259212c002f8f956e87c31df92adc331c9915c1d2fecf7165bfc45957dde47b0759e0ef9b49cc41ca9addd2458f0f6c7eec2da7bb82bd2439c9492dce567a6ee1362ea86a25e48d296890aaa7b1f414b8979a57b"]}]}, 0x17c4}, 0x1, 0x0, 0x0, 0x4004800}, 0x44854) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r8 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 2.786028449s ago: executing program 4 (id=3471): mmap$auto(0x400000000000000, 0x2020009, 0x7, 0xfffffffffffff010, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r2 = getpgid(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @inferred=r2}, 0x0, 0x5, 0xd77e, @inferred=r2, @integer={0x4, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0xcbb45acd1943074, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_transaction_log_fops_(0xffffffffffffff9c, 0x0, 0x100, 0x0) 2.517558596s ago: executing program 2 (id=3472): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) sendfile$auto(r0, r0, 0x0, 0x1049) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) read$auto_ptdump_fops_(r1, &(0x7f0000000140)=""/202, 0xca) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = prctl$auto_PR_SET_MM_START_STACK(0x0, 0x5, 0x0, 0x8, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0xf8b}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x6}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x36}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x1}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x9}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0xab6}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x24048080}, 0x4044000) setsockopt$auto(r0, 0x800, 0x5, &(0x7f0000000340)='/dev/dri/card1\x00', 0x4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) getpid() preadv$auto(r2, &(0x7f0000009180)={0x0, 0x80000000}, 0x26, 0x4f9, 0x2) 2.399730742s ago: executing program 0 (id=3473): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0) ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r1 = socket(0x2, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@in={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x42}}, 0x55) connect$auto(r1, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x7f) r2 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r2, 0x65, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r3, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7f}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x642}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xe4}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x40) mmap$auto(0x0, 0xa, 0x10d8, 0x410, r0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x4e21, @private=0xa010101}, 0x54) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x40002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) 2.252232418s ago: executing program 0 (id=3474): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x1, 0x7, &(0x7f0000000200)='\'\a\xeb\xb6\xc8\vF`\xf6\"8\x06hM\x06K\xa7x\x03\x00.y\xa8\xe5', 0xeb66) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x97) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'ip6gretap0\x00'}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000002bc0), 0xffffffff}, 0x6, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bind$auto(r3, &(0x7f0000000100)=@xdp={0x2c, 0xc, r5, 0x1e}, 0x6b) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x0, @ANYBLOB="b41e100f5b95a362c656ed3fbb35a3b14878952491f7425b979a6cd8e343ea55bc1949b3", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) 1.615296943s ago: executing program 3 (id=3475): mmap$auto(0x0, 0x4020209, 0xdf, 0xeb1, 0x401, 0x200008000) ioctl$auto(0xffffffffffffffff, 0x5514, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) flock$auto(0xffffffffffffffff, 0xffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000140)=""/44, 0x2c) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001040)='/dev/binderfs/binder1\x00', 0x0, 0x0) r3 = epoll_create$auto(0x200004) epoll_ctl$auto(r3, 0x1, r2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/video63\x00', 0x0, 0x0) linkat$auto(r0, &(0x7f0000001180)='./file0\x00', r3, &(0x7f00000011c0)='./file0\x00', 0x96a90000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) bpf$auto_BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)=@link_update={r2, @new_prog_fd=r0, 0x73, @old_map_fd=r0}, 0x9313) r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r5, &(0x7f0000000040)=""/4096, 0xfffffe82) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001240), r4) r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r7, &(0x7f0000000240)='\x03W\x96l\x15 \x00 \x00'/21, 0x100000002, 0x100000001) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={&(0x7f0000001400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082cbd7000fddbdf2503000000120001009d6cd9dcbd2180b10c29b22f717f00000c000b00050000000000003c71ddb000aaac870100784781b70bf1dc86a90000", @ANYRESOCT=r6, @ANYRESOCT=r2], 0x48}, 0x1, 0x0, 0x0, 0x4004010}, 0x2040) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1.502322317s ago: executing program 4 (id=3476): r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f00000000c0)={@config_section=0x0, 0x81}) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$auto_TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000080)=0x101b) write$auto_evdev_fops_evdev(r2, &(0x7f0000000100)="0ca4d06959f4e9ac0243efc16d739da190b5e3b609428f443e5c9814060aee7581ff11ccf8f98587c0c050b6e21754444b6d63c008e8a8e855efe47377fdf95f2dc4a2beee362934f65bd781e091f1f5703e3d249d3e9fb8b02ccb2607511b2abae7e568b8ff395bde90", 0x6a) ioctl$auto_LOOP_CTL_GET_FREE(r1, 0x4c82, 0x0) 1.105480689s ago: executing program 4 (id=3477): mmap$auto(0x400000000000000, 0x2020009, 0x7, 0xfffffffffffff010, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r2 = getpgid(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @inferred=r2}, 0x0, 0x5, 0xd77e, @inferred=r2, @integer={0x4, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0xcbb45acd1943074, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 701.93968ms ago: executing program 0 (id=3478): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mprotect$auto(0x0, 0x806121, 0x6) 59.188039ms ago: executing program 4 (id=3479): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2512000000180001801400020076657468315f746f5f626f6e640000000800060001000000"], 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) bpf$auto_BPF_ENABLE_STATS(0x20, 0x0, 0x9) setsockopt$auto(r2, 0x9, 0x8, &(0x7f0000000000)='\x00', 0xfffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r5, @ANYBLOB="010a27bd7000fcdbdf250500000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto(r7, &(0x7f00000001c0)='7K\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) socket(0x26, 0x2, 0x1) r8 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000140), r2) socket(0x1a, 0x80000, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8050) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) 0s ago: executing program 0 (id=3480): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="5a141524fb0c83e937af9891c62aec8ce85cb2c13175a8fd0bf09c9dba904f2c41", @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES16=r0, @ANYRES64=r1, @ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b50", 0xfdef) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20020000) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x9c, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_HT_CAPABILITY={0x82, 0x1f, "3ecf1b053188cdb46b0acaf5c447616eadb31123fb6baab7860fbbcda86ed5b685410f90bb8e958d56af32484529b32f66e2917cc2ede13cdb103dea442db89d0cff613300637b2f5e83726a533ca60be24500c66fbb9186ae2ac27c260afbef0404655c11267a129d4ddc8ffd761f16e4033e2e879fdf3d57eea70233d9"}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) socket(0x2, 0x1, 0x106) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0xa901, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) shutdown$auto(0x200000003, 0x2) kernel console output (not intermixed with test programs): tries to shift op by -2048; fix this program [ 694.699434][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'. [ 694.736761][T16909] openvswitch: HfR: Dropping previously announced user features [ 694.755828][T16912] futex_wake_op: syz.3.2619 tries to shift op by -2048; fix this program [ 695.648177][T16919] futex_wake_op: syz.2.2620 tries to shift op by -2048; fix this program [ 695.987663][T16923] zram: Cannot change disksize for initialized device [ 696.166450][T16928] ptrace attach of "./syz-executor exec"[15993] was attempted by ""[16928] [ 696.224912][T16928] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 697.444191][T16954] futex_wake_op: syz.4.2629 tries to shift op by -2048; fix this program [ 697.481045][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 697.509380][T16948] openvswitch: HfR: Dropping previously announced user features [ 698.737529][T16941] random: crng reseeded on system resumption [ 698.844561][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2630'. [ 698.873501][T16970] openvswitch: HfR: Dropping previously announced user features [ 698.900052][T16972] zram: Cannot change disksize for initialized device [ 700.484144][T16990] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 700.501661][T16996] ptrace attach of "./syz-executor exec"[15993] was attempted by ""[16996] [ 700.511807][T16996] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 700.594159][T16995] tc_dump_action: action bad kind [ 700.805247][T17004] futex_wake_op: syz.0.2640 tries to shift op by -2048; fix this program [ 700.845641][T17002] tc_dump_action: action bad kind [ 700.986015][T17012] bond0: invalid ARP target specified [ 701.009307][T17012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2642'. [ 701.148481][T17006] FAULT_INJECTION: forcing a failure. [ 701.148481][T17006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.174150][T17006] CPU: 1 UID: 0 PID: 17006 Comm: syz.4.2641 Tainted: G U L syzkaller #0 PREEMPT(full) [ 701.174185][T17006] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 701.174191][T17006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 701.174201][T17006] Call Trace: [ 701.174207][T17006] [ 701.174213][T17006] dump_stack_lvl+0x100/0x190 [ 701.174241][T17006] should_fail_ex.cold+0x5/0xa [ 701.174259][T17006] _copy_from_iter+0x1f4/0x1690 [ 701.174284][T17006] ? __pfx__copy_from_iter+0x10/0x10 [ 701.174307][T17006] ? __pfx___might_resched+0x10/0x10 [ 701.174334][T17006] file_tty_write.isra.0+0x45b/0x890 [ 701.174367][T17006] vfs_write+0x6ac/0x1070 [ 701.174383][T17006] ? __pfx_tty_write+0x10/0x10 [ 701.174407][T17006] ? __pfx_vfs_write+0x10/0x10 [ 701.174421][T17006] ? find_held_lock+0x2b/0x80 [ 701.174448][T17006] ksys_write+0x12a/0x250 [ 701.174462][T17006] ? __pfx_ksys_write+0x10/0x10 [ 701.174482][T17006] do_syscall_64+0x106/0xf80 [ 701.174499][T17006] ? clear_bhb_loop+0x40/0x90 [ 701.174517][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.174533][T17006] RIP: 0033:0x7f591979c819 [ 701.174546][T17006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.174560][T17006] RSP: 002b:00007f591a6bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 701.174575][T17006] RAX: ffffffffffffffda RBX: 00007f5919a15fa0 RCX: 00007f591979c819 [ 701.174585][T17006] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 701.174594][T17006] RBP: 00007f591a6bd090 R08: 0000000000000000 R09: 0000000000000000 [ 701.174603][T17006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.174615][T17006] R13: 00007f5919a16038 R14: 00007f5919a15fa0 R15: 00007ffd5a22d628 [ 701.174635][T17006] [ 702.077465][T17018] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 702.092454][T17018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 702.143140][T17018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 702.197207][T17018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 703.184371][ T30] audit: type=1804 audit(1775764108.880:33): pid=17073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2653" name="/newroot/69/file0" dev="tmpfs" ino=370 res=1 errno=0 [ 703.506042][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2651'. [ 703.523868][T17071] openvswitch: HfR: Dropping previously announced user features [ 703.539777][T17080] futex_wake_op: syz.0.2654 tries to shift op by -2048; fix this program [ 703.903016][T17060] kexec: Could not allocate control_code_buffer [ 704.154082][T15995] Bluetooth: hci2: command 0x0c1a tx timeout [ 704.160258][T10320] Bluetooth: hci3: command 0x0c1a tx timeout [ 704.166855][T15995] Bluetooth: hci4: command 0x0406 tx timeout [ 704.234100][T17084] Bluetooth: hci1: command 0x0c1a tx timeout [ 704.483583][T17087] futex_wake_op: syz.2.2655 tries to shift op by -2048; fix this program [ 705.818745][T17109] MTRR 1 not used [ 705.970619][T17114] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2662'. [ 706.447123][T17128] futex_wake_op: syz.2.2668 tries to shift op by -2048; fix this program [ 706.476961][T17126] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 706.633519][T17136] FAULT_INJECTION: forcing a failure. [ 706.633519][T17136] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 706.733210][T17136] CPU: 1 UID: 0 PID: 17136 Comm: syz.4.2669 Tainted: G U L syzkaller #0 PREEMPT(full) [ 706.733264][T17136] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 706.733276][T17136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 706.733295][T17136] Call Trace: [ 706.733305][T17136] [ 706.733317][T17136] dump_stack_lvl+0x100/0x190 [ 706.733370][T17136] should_fail_ex.cold+0x5/0xa [ 706.733401][T17136] ? prepare_alloc_pages+0x16d/0x5f0 [ 706.733440][T17136] should_fail_alloc_page+0xeb/0x140 [ 706.733476][T17136] prepare_alloc_pages+0x1f0/0x5f0 [ 706.733519][T17136] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 706.733572][T17136] ? __pfx_css_rstat_updated+0x10/0x10 [ 706.733611][T17136] ? lock_acquire+0x1cf/0x380 [ 706.733649][T17136] ? find_held_lock+0x2b/0x80 [ 706.733682][T17136] ? rcu_is_watching+0x12/0xc0 [ 706.733729][T17136] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 706.733785][T17136] ? lru_gen_add_folio+0x20f/0x13e0 [ 706.733830][T17136] ? lock_acquire+0x1cf/0x380 [ 706.733870][T17136] ? find_held_lock+0x2b/0x80 [ 706.733900][T17136] ? page_table_check_set+0x49a/0xa10 [ 706.733931][T17136] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 706.733966][T17136] ? policy_nodemask+0xed/0x4f0 [ 706.734002][T17136] alloc_pages_mpol+0x1fb/0x550 [ 706.734034][T17136] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 706.734075][T17136] folio_alloc_mpol_noprof+0x36/0x340 [ 706.734115][T17136] vma_alloc_folio_noprof+0xed/0x1d0 [ 706.734154][T17136] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 706.734203][T17136] do_anonymous_page+0xb3a/0x1fb0 [ 706.734259][T17136] __handle_mm_fault+0x1d48/0x2b60 [ 706.734312][T17136] ? __pfx___handle_mm_fault+0x10/0x10 [ 706.734357][T17136] ? pte_offset_map_lock+0x174/0x320 [ 706.734390][T17136] ? find_held_lock+0x2b/0x80 [ 706.734444][T17136] ? follow_page_pte+0x5b3/0x1400 [ 706.734489][T17136] handle_mm_fault+0x36d/0xa20 [ 706.734539][T17136] __get_user_pages+0xf9c/0x34d0 [ 706.734588][T17136] ? __pfx___get_user_pages+0x10/0x10 [ 706.734634][T17136] populate_vma_page_range+0x267/0x3f0 [ 706.734674][T17136] ? __pfx_populate_vma_page_range+0x10/0x10 [ 706.734711][T17136] ? __pfx_find_vma_intersection+0x10/0x10 [ 706.734747][T17136] ? do_mmap+0x93f/0x12f0 [ 706.734785][T17136] __mm_populate+0x107/0x3a0 [ 706.734828][T17136] ? __pfx___mm_populate+0x10/0x10 [ 706.734869][T17136] ? up_write+0x290/0x4f0 [ 706.734919][T17136] vm_mmap_pgoff+0x37f/0x470 [ 706.734960][T17136] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 706.734998][T17136] ? do_futex+0x192/0x350 [ 706.735038][T17136] ? __pfx_do_futex+0x10/0x10 [ 706.735084][T17136] ksys_mmap_pgoff+0xe1/0x650 [ 706.735116][T17136] ? __x64_sys_futex+0x34f/0x4d0 [ 706.735154][T17136] ? __x64_sys_futex+0x358/0x4d0 [ 706.735194][T17136] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 706.735228][T17136] ? xfd_validate_state+0x129/0x190 [ 706.735279][T17136] __x64_sys_mmap+0x125/0x190 [ 706.735328][T17136] do_syscall_64+0x106/0xf80 [ 706.735359][T17136] ? clear_bhb_loop+0x40/0x90 [ 706.735396][T17136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.735426][T17136] RIP: 0033:0x7f591979c819 [ 706.735452][T17136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.735481][T17136] RSP: 002b:00007f591a69c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 706.735510][T17136] RAX: ffffffffffffffda RBX: 00007f5919a16090 RCX: 00007f591979c819 [ 706.735531][T17136] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 706.735551][T17136] RBP: 00007f5919832c91 R08: 0000000000000002 R09: 0000000000008000 [ 706.735570][T17136] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 706.735587][T17136] R13: 00007f5919a16128 R14: 00007f5919a16090 R15: 00007ffd5a22d628 [ 706.735628][T17136] [ 707.393133][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 707.402793][T17137] openvswitch: HfR: Dropping previously announced user features [ 707.709464][T17142] FAULT_INJECTION: forcing a failure. [ 707.709464][T17142] name failslab, interval 1, probability 0, space 0, times 0 [ 707.745182][T17142] CPU: 1 UID: 0 PID: 17142 Comm: syz.2.2672 Tainted: G U L syzkaller #0 PREEMPT(full) [ 707.745231][T17142] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 707.745244][T17142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 707.745261][T17142] Call Trace: [ 707.745271][T17142] [ 707.745282][T17142] dump_stack_lvl+0x100/0x190 [ 707.745334][T17142] should_fail_ex.cold+0x5/0xa [ 707.745366][T17142] ? sk_prot_alloc+0x10b/0x2a0 [ 707.745398][T17142] should_failslab+0xc2/0x120 [ 707.745431][T17142] __kmalloc_noprof+0xe0/0x850 [ 707.745493][T17142] sk_prot_alloc+0x10b/0x2a0 [ 707.745530][T17142] sk_alloc+0x36/0xe80 [ 707.745576][T17142] __netlink_create+0x5e/0x2c0 [ 707.745619][T17142] ? __wake_up+0x3f/0x60 [ 707.745652][T17142] netlink_create+0x293/0x610 [ 707.745676][T17142] ? __pfx_genl_bind+0x10/0x10 [ 707.745705][T17142] ? __pfx_genl_unbind+0x10/0x10 [ 707.745733][T17142] ? __pfx_genl_release+0x10/0x10 [ 707.745769][T17142] __sock_create+0x339/0x860 [ 707.745812][T17142] __sys_socket+0x14d/0x260 [ 707.745846][T17142] ? exc_page_fault+0x6f/0xd0 [ 707.745876][T17142] ? __pfx___sys_socket+0x10/0x10 [ 707.745915][T17142] ? do_user_addr_fault+0x8d6/0x12f0 [ 707.745949][T17142] __x64_sys_socket+0x72/0xb0 [ 707.745985][T17142] ? lockdep_hardirqs_on+0x78/0x100 [ 707.746015][T17142] do_syscall_64+0x106/0xf80 [ 707.746044][T17142] ? clear_bhb_loop+0x40/0x90 [ 707.746079][T17142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.746108][T17142] RIP: 0033:0x7fbd0f79e087 [ 707.746132][T17142] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.746159][T17142] RSP: 002b:00007fbd105c8f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 707.746187][T17142] RAX: ffffffffffffffda RBX: 00007fbd0fa15fa0 RCX: 00007fbd0f79e087 [ 707.746208][T17142] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 707.746226][T17142] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 707.746245][T17142] R10: 0000200000004440 R11: 0000000000000286 R12: 0000000000000000 [ 707.746263][T17142] R13: 00007fbd0fa16038 R14: 00007fbd0fa15fa0 R15: 00007ffcd7b64e18 [ 707.746302][T17142] [ 709.019383][T17183] ptrace attach of "./syz-executor exec"[15585] was attempted by ""[17183] [ 709.036349][T17183] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 709.106776][ T30] audit: type=1804 audit(1775764114.810:34): pid=17180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2680" name="/newroot/209/file0" dev="tmpfs" ino=1097 res=1 errno=0 [ 709.115387][T17180] bridge0: port 3(veth1_macvtap) entered blocking state [ 709.135645][T17180] bridge0: port 3(veth1_macvtap) entered disabled state [ 709.142937][T17180] veth1_macvtap: entered allmulticast mode [ 709.152688][T17180] veth1_macvtap: left allmulticast mode [ 709.227817][T17188] zram: Cannot change disksize for initialized device [ 709.429583][T17192] syz.4.2684: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 709.446242][T17192] CPU: 1 UID: 0 PID: 17192 Comm: syz.4.2684 Tainted: G U L syzkaller #0 PREEMPT(full) [ 709.446288][T17192] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 709.446300][T17192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 709.446316][T17192] Call Trace: [ 709.446325][T17192] [ 709.446335][T17192] dump_stack_lvl+0x100/0x190 [ 709.446379][T17192] warn_alloc.cold+0x95/0x1c1 [ 709.446423][T17192] ? __pfx_warn_alloc+0x10/0x10 [ 709.446464][T17192] ? __lock_acquire+0x4a5/0x2630 [ 709.446512][T17192] __vmalloc_node_range_noprof+0x1252/0x1530 [ 709.446546][T17192] ? rcu_is_watching+0x12/0xc0 [ 709.446592][T17192] ? trace_contention_end+0x140/0x180 [ 709.446629][T17192] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 709.446660][T17192] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 709.446685][T17192] ? tomoyo_path_number_perm+0x28f/0x580 [ 709.446715][T17192] ? tomoyo_path_number_perm+0x28f/0x580 [ 709.446746][T17192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 709.446775][T17192] ? __pfx___mutex_lock+0x10/0x10 [ 709.446808][T17192] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 709.446835][T17192] ? futex_wait+0x125/0x380 [ 709.446874][T17192] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 709.446900][T17192] __vmalloc_node_noprof+0xad/0xf0 [ 709.446930][T17192] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 709.446960][T17192] dvb_dvr_do_ioctl+0x15d/0x270 [ 709.446993][T17192] dvb_usercopy+0x167/0x340 [ 709.447018][T17192] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 709.447046][T17192] ? __pfx_dvb_usercopy+0x10/0x10 [ 709.447084][T17192] ? __fget_files+0x21f/0x3d0 [ 709.447115][T17192] dvb_dvr_ioctl+0x29/0x40 [ 709.447140][T17192] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 709.447171][T17192] __x64_sys_ioctl+0x18e/0x210 [ 709.447211][T17192] do_syscall_64+0x106/0xf80 [ 709.447235][T17192] ? clear_bhb_loop+0x40/0x90 [ 709.447264][T17192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.447288][T17192] RIP: 0033:0x7f591979c819 [ 709.447309][T17192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.447333][T17192] RSP: 002b:00007f591a6bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 709.447357][T17192] RAX: ffffffffffffffda RBX: 00007f5919a15fa0 RCX: 00007f591979c819 [ 709.447375][T17192] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 709.447391][T17192] RBP: 00007f5919832c91 R08: 0000000000000000 R09: 0000000000000000 [ 709.447406][T17192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.447419][T17192] R13: 00007f5919a16038 R14: 00007f5919a15fa0 R15: 00007ffd5a22d628 [ 709.447452][T17192] [ 709.447677][T17192] Mem-Info: [ 709.680686][T17194] bridge0: port 3(veth1_macvtap) entered blocking state [ 709.695035][ T30] audit: type=1804 audit(1775764115.310:35): pid=17194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2685" name="/newroot/74/file0" dev="tmpfs" ino=399 res=1 errno=0 [ 709.744498][T17194] bridge0: port 3(veth1_macvtap) entered disabled state [ 709.755765][T17192] active_anon:26810 inactive_anon:0 isolated_anon:0 [ 709.755765][T17192] active_file:17784 inactive_file:42095 isolated_file:0 [ 709.755765][T17192] unevictable:768 dirty:1079 writeback:0 [ 709.755765][T17192] slab_reclaimable:12326 slab_unreclaimable:99154 [ 709.755765][T17192] mapped:27220 shmem:6686 pagetables:1247 [ 709.755765][T17192] sec_pagetables:0 bounce:0 [ 709.755765][T17192] kernel_misc_reclaimable:0 [ 709.755765][T17192] free:1283282 free_pcp:19049 free_cma:0 [ 709.808430][T17194] veth1_macvtap: entered allmulticast mode [ 709.817315][T17194] veth1_macvtap: left allmulticast mode [ 709.825826][T17192] Node 0 active_anon:107240kB inactive_anon:0kB active_file:71136kB inactive_file:168244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108880kB dirty:4316kB writeback:0kB shmem:25208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12088kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 709.844046][ T30] audit: type=1804 audit(1775764115.360:36): pid=17194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2685" name="/newroot/74/file0" dev="tmpfs" ino=399 res=1 errno=0 [ 709.914117][T17192] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 709.958372][T17192] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 710.016658][T17192] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 710.022526][T17192] Node 0 DMA32 free:1232232kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102400kB inactive_anon:8kB active_file:71136kB inactive_file:168184kB unevictable:1536kB writepending:4364kB zspages:148kB present:3129332kB managed:2537260kB mlocked:0kB bounce:0kB free_pcp:30820kB local_pcp:18924kB free_cma:0kB [ 710.096227][T17192] lowmem_reserve[]: 0 0 1 1 1 [ 710.101025][T17192] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 710.141241][T17203] futex_wake_op: syz.2.2688 tries to shift op by -2048; fix this program [ 710.165790][T17192] lowmem_reserve[]: 0 0 0 0 0 [ 710.170660][T17192] Node 1 Normal free:3885844kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:50200kB local_pcp:16824kB free_cma:0kB [ 710.208510][T17192] lowmem_reserve[]: 0 0 0 0 0 [ 710.213448][T17192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 710.227292][T17192] Node 0 DMA32: 11062*4kB (UME) 6918*8kB (UME) 3686*16kB (UME) 1360*32kB (UME) 920*64kB (UME) 618*128kB (UM) 429*256kB (UME) 286*512kB (UME) 175*1024kB (UM) 5*2048kB (UM) 109*4096kB (M) = 1232232kB [ 710.248239][T17192] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 710.263639][T17192] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 2*16kB (UM) 2*32kB (U) 2*64kB (UM) 1*128kB (U) 4*256kB (UM) 1*512kB (M) 1*1024kB (U) 2*2048kB (UM) 947*4096kB (UM) = 3885948kB [ 710.282726][T17192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 710.292406][T17192] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 710.306153][T17192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 710.445873][T17192] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 710.455376][T17192] 65502 total pagecache pages [ 710.460194][T17192] 25 pages in swap cache [ 710.464469][T17192] Free swap = 124872kB [ 710.468713][T17192] Total swap = 124996kB [ 710.473006][T17192] 2097051 pages RAM [ 710.477061][T17192] 0 pages HighMem/MovableOnly [ 710.481938][T17192] 430858 pages reserved [ 710.486264][T17192] 0 pages cma reserved [ 710.951140][T17216] FAULT_INJECTION: forcing a failure. [ 710.951140][T17216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.964832][T17216] CPU: 0 UID: 0 PID: 17216 Comm: syz.4.2691 Tainted: G U L syzkaller #0 PREEMPT(full) [ 710.964883][T17216] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 710.964896][T17216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 710.964912][T17216] Call Trace: [ 710.964922][T17216] [ 710.964934][T17216] dump_stack_lvl+0x100/0x190 [ 710.964987][T17216] should_fail_ex.cold+0x5/0xa [ 710.965024][T17216] strncpy_from_user+0x3b/0x2d0 [ 710.965066][T17216] do_getname+0x78/0x390 [ 710.965108][T17216] do_sys_openat2+0xc5/0x1e0 [ 710.965150][T17216] ? __pfx_do_sys_openat2+0x10/0x10 [ 710.965203][T17216] __x64_sys_openat+0x12d/0x210 [ 710.965245][T17216] ? __pfx___x64_sys_openat+0x10/0x10 [ 710.965299][T17216] do_syscall_64+0x106/0xf80 [ 710.965330][T17216] ? clear_bhb_loop+0x40/0x90 [ 710.965368][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.965398][T17216] RIP: 0033:0x7f591979c819 [ 710.965430][T17216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.965460][T17216] RSP: 002b:00007f591a6bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 710.965489][T17216] RAX: ffffffffffffffda RBX: 00007f5919a15fa0 RCX: 00007f591979c819 [ 710.965510][T17216] RDX: 0000000000280200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 710.965531][T17216] RBP: 00007f5919832c91 R08: 0000000000000000 R09: 0000000000000000 [ 710.965550][T17216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.965567][T17216] R13: 00007f5919a16038 R14: 00007f5919a15fa0 R15: 00007ffd5a22d628 [ 710.965605][T17216] [ 711.246661][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'. [ 711.256104][T17219] openvswitch: HfR: Dropping previously announced user features [ 711.541457][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2693'. [ 711.600326][T17228] openvswitch: HfR: Dropping previously announced user features [ 711.732183][T17233] zram: Cannot change disksize for initialized device [ 712.137985][T17239] ptrace attach of "./syz-executor exec"[15809] was attempted by ""[17239] [ 712.148330][T17239] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 712.486568][T17246] futex_wake_op: syz.3.2699 tries to shift op by -2048; fix this program [ 713.044427][T17252] vivid-007: ================= START STATUS ================= [ 713.057820][T17252] vivid-007: Generate PTS: true [ 713.069348][T17252] vivid-007: Generate SCR: true [ 713.078839][T17252] tpg source WxH: 320x240 (Y'CbCr) [ 713.088798][T17252] tpg field: 1 [ 713.092324][T17252] tpg crop: (0,0)/320x240 [ 713.097267][T17252] tpg compose: (0,0)/320x240 [ 713.102044][T17252] tpg colorspace: 8 [ 713.152324][T17252] tpg transfer function: 0/0 [ 713.157244][T17252] tpg Y'CbCr encoding: 0/0 [ 713.161734][T17252] tpg quantization: 0/0 [ 713.168351][T17252] tpg RGB range: 0/2 [ 713.173675][T17252] vivid-007: ================== END STATUS ================== [ 713.662694][T17271] zram: Cannot change disksize for initialized device [ 714.430695][T17084] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 714.430737][T17084] Bluetooth: hci4: unexpected subevent 0x0e length: 725 > 15 [ 714.448791][T17084] Bluetooth: hci4: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 714.653928][T17289] futex_wake_op: syz.2.2709 tries to shift op by -2048; fix this program [ 714.717950][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 714.737310][T17286] openvswitch: HfR: Dropping previously announced user features [ 715.399622][T17296] ptrace attach of "./syz-executor exec"[13359] was attempted by ""[17296] [ 715.437165][T17296] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 716.828654][T17325] netlink: 'syz.0.2717': attribute type 1 has an invalid length. [ 716.855715][T17325] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2717'. [ 716.956961][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2715'. [ 717.161377][T17323] veth0_macvtap: left promiscuous mode [ 717.213042][T17323] macvtap0: entered promiscuous mode [ 717.224789][T17323] macvtap0: entered allmulticast mode [ 717.465885][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 717.510531][T17340] openvswitch: HfR: Dropping previously announced user features [ 717.676986][ T30] audit: type=1804 audit(1775764123.380:37): pid=17353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2722" name="/newroot/84/file0" dev="tmpfs" ino=452 res=1 errno=0 [ 717.886792][ T30] audit: type=1804 audit(1775764123.560:38): pid=17357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2723" name="/newroot/221/file0" dev="tmpfs" ino=1160 res=1 errno=0 [ 718.366285][T17372] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2727'. [ 720.438557][T17416] futex_wake_op: syz.2.2733 tries to shift op by -2048; fix this program [ 720.753826][T17421] futex_wake_op: syz.3.2734 tries to shift op by -2048; fix this program [ 721.519366][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2736'. [ 721.685392][T17432] openvswitch: HfR: Dropping previously announced user features [ 722.244149][ T30] audit: type=1804 audit(1775764127.920:39): pid=17447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2741" name="/newroot/68/file0" dev="tmpfs" ino=370 res=1 errno=0 [ 723.237422][T17468] bond0: invalid ARP target specified [ 723.255779][T17468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2746'. [ 723.277407][T17471] futex_wake_op: syz.0.2747 tries to shift op by -2048; fix this program [ 723.386961][T17473] futex_wake_op: syz.3.2749 tries to shift op by -2048; fix this program [ 723.705742][T17479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2748'. [ 723.774898][T17477] bond0: invalid ARP target specified [ 724.099838][T17486] futex_wake_op: syz.4.2750 tries to shift op by -2048; fix this program [ 724.354812][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2751'. [ 724.364397][T17493] openvswitch: HfR: Dropping previously announced user features [ 724.879710][T17500] zram: Cannot change disksize for initialized device [ 725.513685][T17513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2756'. [ 725.565877][T17512] bond0: invalid ARP target specified [ 726.257475][T17526] futex_wake_op: syz.4.2760 tries to shift op by -2048; fix this program [ 726.694867][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'. [ 726.721941][T17533] futex_wake_op: syz.2.2761 tries to shift op by -2048; fix this program [ 726.731314][T17523] openvswitch: HfR: Dropping previously announced user features [ 727.169798][ T30] audit: type=1804 audit(1775764132.870:40): pid=17537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2762" name="/newroot/234/file0" dev="tmpfs" ino=1226 res=1 errno=0 [ 727.594585][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 727.778704][T17542] openvswitch: HfR: Dropping previously announced user features [ 728.354226][T17556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2767'. [ 728.444452][T17555] bond0: invalid ARP target specified [ 729.077125][ T30] audit: type=1800 audit(1775764134.770:41): pid=17567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2770" name="features" dev="configfs" ino=78879 res=0 errno=0 [ 729.291753][T17569] futex_wake_op: syz.2.2771 tries to shift op by -2048; fix this program [ 729.561343][ T30] audit: type=1804 audit(1775764135.260:42): pid=17574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2772" name="/newroot/236/file0" dev="tmpfs" ino=1237 res=1 errno=0 [ 730.412260][T17595] futex_wake_op: syz.3.2777 tries to shift op by -2048; fix this program [ 730.512078][T17598] bond0: invalid ARP target specified [ 730.550133][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2778'. [ 730.734238][T17601] futex_wake_op: syz.2.2779 tries to shift op by -2048; fix this program [ 732.106458][T17625] futex_wake_op: syz.2.2786 tries to shift op by -2048; fix this program [ 732.152875][T17627] random: crng reseeded on system resumption [ 733.134112][T17645] bond0: invalid ARP target specified [ 733.285887][T17645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2788'. [ 733.543122][T17652] futex_wake_op: syz.2.2792 tries to shift op by -2048; fix this program [ 733.571236][T17655] futex_wake_op: syz.3.2791 tries to shift op by -2048; fix this program [ 733.590593][T17650] ptrace attach of "./syz-executor exec"[13359] was attempted by ""[17650] [ 733.664275][T17650] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 734.835038][T17673] futex_wake_op: syz.2.2794 tries to shift op by -2048; fix this program [ 734.879254][T17676] futex_wake_op: syz.0.2796 tries to shift op by -2048; fix this program [ 735.110197][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2793'. [ 735.300643][T17677] openvswitch: HfR: Dropping previously announced user features [ 736.820496][ T30] audit: type=1804 audit(1775764142.490:43): pid=17711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2802" name="/newroot/242/file0" dev="tmpfs" ino=1270 res=1 errno=0 [ 736.889857][ T30] audit: type=1804 audit(1775764142.500:44): pid=17713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2802" name="/newroot/242/file0" dev="tmpfs" ino=1270 res=1 errno=0 [ 737.370729][T17720] futex_wake_op: syz.3.2806 tries to shift op by -2048; fix this program [ 737.891381][T17725] program syz.4.2805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 738.284173][T17734] futex_wake_op: syz.4.2808 tries to shift op by -2048; fix this program [ 738.769104][T17737] zram: Cannot change disksize for initialized device [ 738.887863][T17742] ptrace attach of "./syz-executor exec"[15809] was attempted by ""[17742] [ 738.908255][T17742] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 739.205270][T17755] random: crng reseeded on system resumption [ 740.667272][T17777] futex_wake_op: syz.2.2817 tries to shift op by -2048; fix this program [ 740.702750][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'. [ 740.810652][T17777] futex_wake_op: syz.2.2817 tries to shift op by -2048; fix this program [ 740.855189][T17778] openvswitch: HfR: Dropping previously announced user features [ 742.915739][T17802] FAULT_INJECTION: forcing a failure. [ 742.915739][T17802] name failslab, interval 1, probability 0, space 0, times 0 [ 743.011321][T17802] CPU: 1 UID: 0 PID: 17802 Comm: syz.4.2820 Tainted: G U L syzkaller #0 PREEMPT(full) [ 743.011361][T17802] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 743.011368][T17802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 743.011378][T17802] Call Trace: [ 743.011384][T17802] [ 743.011396][T17802] dump_stack_lvl+0x100/0x190 [ 743.011425][T17802] should_fail_ex.cold+0x5/0xa [ 743.011444][T17802] should_failslab+0xc2/0x120 [ 743.011462][T17802] __kmalloc_cache_noprof+0x7a/0x6f0 [ 743.011488][T17802] ? refill_pi_state_cache+0x91/0x260 [ 743.011537][T17802] refill_pi_state_cache+0x91/0x260 [ 743.011572][T17802] futex_lock_pi+0x177/0x7b0 [ 743.011596][T17802] ? __pfx_futex_lock_pi+0x10/0x10 [ 743.011619][T17802] ? __pfx___futex_wait+0x10/0x10 [ 743.011658][T17802] ? __pfx_futex_wake_mark+0x10/0x10 [ 743.011685][T17802] ? __get_user_nocheck_8+0x20/0x20 [ 743.011709][T17802] ? do_vfs_ioctl+0x226/0x13e0 [ 743.011733][T17802] do_futex+0x18a/0x350 [ 743.011753][T17802] ? __pfx_do_futex+0x10/0x10 [ 743.011774][T17802] ? find_held_lock+0x2b/0x80 [ 743.011795][T17802] __x64_sys_futex+0x34f/0x4d0 [ 743.011819][T17802] ? __pfx___x64_sys_futex+0x10/0x10 [ 743.011845][T17802] do_syscall_64+0x106/0xf80 [ 743.011861][T17802] ? clear_bhb_loop+0x40/0x90 [ 743.011880][T17802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.011895][T17802] RIP: 0033:0x7f591979c819 [ 743.011909][T17802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.011923][T17802] RSP: 002b:00007f591a69c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 743.011938][T17802] RAX: ffffffffffffffda RBX: 00007f5919a16090 RCX: 00007f591979c819 [ 743.011948][T17802] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 743.011957][T17802] RBP: 00007f5919832c91 R08: 0000000000000000 R09: 000000008000fff5 [ 743.011966][T17802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.011974][T17802] R13: 00007f5919a16128 R14: 00007f5919a16090 R15: 00007ffd5a22d628 [ 743.011994][T17802] [ 743.493286][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 743.770689][T17801] openvswitch: HfR: Dropping previously announced user features [ 743.972292][T17807] FAULT_INJECTION: forcing a failure. [ 743.972292][T17807] name failslab, interval 1, probability 0, space 0, times 0 [ 743.987518][T17807] CPU: 0 UID: 0 PID: 17807 Comm: syz.2.2822 Tainted: G U L syzkaller #0 PREEMPT(full) [ 743.987553][T17807] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 743.987559][T17807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 743.987569][T17807] Call Trace: [ 743.987575][T17807] [ 743.987581][T17807] dump_stack_lvl+0x100/0x190 [ 743.987611][T17807] should_fail_ex.cold+0x5/0xa [ 743.987630][T17807] should_failslab+0xc2/0x120 [ 743.987648][T17807] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 743.987673][T17807] ? __alloc_skb+0x140/0x710 [ 743.987700][T17807] __alloc_skb+0x140/0x710 [ 743.987723][T17807] ? __pfx___alloc_skb+0x10/0x10 [ 743.987751][T17807] tipc_buf_acquire+0x26/0xe0 [ 743.987775][T17807] tipc_msg_create+0x39/0x1d0 [ 743.987810][T17807] tipc_group_proto_xmit+0x150/0x7c0 [ 743.987842][T17807] tipc_group_join+0xda/0x220 [ 743.987859][T17807] ? __pfx_tipc_group_join+0x10/0x10 [ 743.987885][T17807] tipc_setsockopt+0x841/0xe30 [ 743.987906][T17807] ? __pfx_tipc_setsockopt+0x10/0x10 [ 743.987932][T17807] ? __pfx_tipc_setsockopt+0x10/0x10 [ 743.987951][T17807] do_sock_setsockopt+0xf3/0x1d0 [ 743.987972][T17807] __sys_setsockopt+0x119/0x190 [ 743.987999][T17807] __x64_sys_setsockopt+0xbd/0x160 [ 743.988022][T17807] ? do_syscall_64+0x95/0xf80 [ 743.988040][T17807] ? lockdep_hardirqs_on+0x78/0x100 [ 743.988057][T17807] do_syscall_64+0x106/0xf80 [ 743.988072][T17807] ? clear_bhb_loop+0x40/0x90 [ 743.988092][T17807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.988109][T17807] RIP: 0033:0x7fbd0f79c819 [ 743.988123][T17807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.988138][T17807] RSP: 002b:00007fbd105ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 743.988153][T17807] RAX: ffffffffffffffda RBX: 00007fbd0fa15fa0 RCX: 00007fbd0f79c819 [ 743.988164][T17807] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 743.988173][T17807] RBP: 00007fbd0f832c91 R08: 0000000000000014 R09: 0000000000000000 [ 743.988182][T17807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.988191][T17807] R13: 00007fbd0fa16038 R14: 00007fbd0fa15fa0 R15: 00007ffcd7b64e18 [ 743.988211][T17807] [ 744.402640][T17811] futex_wake_op: syz.2.2824 tries to shift op by -2048; fix this program [ 745.681235][T17832] zram: Cannot change disksize for initialized device [ 746.387600][T17843] bond0: invalid ARP target specified [ 746.409919][T17843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2831'. [ 746.422345][T17843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.432474][T17843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.469882][T17843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.479391][T17843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.199327][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.206031][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.024038][T17874] futex_wake_op: syz.3.2839 tries to shift op by -2048; fix this program [ 748.047096][T17860] ima: policy update failed [ 748.052737][ T30] audit: type=1802 audit(1775764153.750:45): pid=17860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2836" res=0 errno=0 [ 748.407740][T17881] futex_wake_op: syz.4.2840 tries to shift op by -2048; fix this program [ 749.394709][T17898] futex_wake_op: syz.3.2843 tries to shift op by -2048; fix this program [ 750.418457][T17916] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input11 [ 750.610797][T17922] futex_wake_op: syz.4.2850 tries to shift op by -2048; fix this program [ 751.162386][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 751.194571][T17929] openvswitch: HfR: Dropping previously announced user features [ 751.224353][T17932] futex_wake_op: syz.3.2852 tries to shift op by -2048; fix this program [ 751.737987][T17941] zram: Cannot change disksize for initialized device [ 752.101142][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2853'. [ 752.225462][T17938] openvswitch: HfR: Dropping previously announced user features [ 752.421113][T17952] futex_wake_op: syz.3.2856 tries to shift op by -2048; fix this program [ 752.473844][T17954] zram: Cannot change disksize for initialized device [ 752.569542][T17958] futex_wake_op: syz.0.2858 tries to shift op by -2048; fix this program [ 752.863888][T17963] bond0: invalid ARP target specified [ 752.876329][T17964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2859'. [ 753.628272][ T30] audit: type=1804 audit(1775764159.310:46): pid=17980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2862" name="/newroot/259/file0" dev="tmpfs" ino=1357 res=1 errno=0 [ 753.942382][ T30] audit: type=1804 audit(1775764159.640:47): pid=17978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2862" name="/newroot/259/file0" dev="tmpfs" ino=1357 res=1 errno=0 [ 754.542079][T18001] futex_wake_op: syz.3.2868 tries to shift op by -2048; fix this program [ 754.571431][T17999] zram: Cannot change disksize for initialized device [ 755.555581][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2872'. [ 755.621867][T18018] openvswitch: HfR: Dropping previously announced user features [ 755.753255][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 755.824303][T18031] openvswitch: HfR: Dropping previously announced user features [ 756.406325][T18043] netlink: 'syz.0.2876': attribute type 10 has an invalid length. [ 756.433233][T18043] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2876'. [ 756.901668][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2879'. [ 756.960333][T18053] openvswitch: HfR: Dropping previously announced user features [ 757.878627][T18064] FAULT_INJECTION: forcing a failure. [ 757.878627][T18064] name failslab, interval 1, probability 0, space 0, times 0 [ 757.902123][T18064] CPU: 1 UID: 0 PID: 18064 Comm: syz.0.2878 Tainted: G U L syzkaller #0 PREEMPT(full) [ 757.902171][T18064] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 757.902183][T18064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 757.902203][T18064] Call Trace: [ 757.902213][T18064] [ 757.902224][T18064] dump_stack_lvl+0x100/0x190 [ 757.902275][T18064] should_fail_ex.cold+0x5/0xa [ 757.902310][T18064] should_failslab+0xc2/0x120 [ 757.902343][T18064] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 757.902387][T18064] ? __mpol_dup+0x74/0x390 [ 757.902431][T18064] __mpol_dup+0x74/0x390 [ 757.902467][T18064] ? __pfx___mpol_dup+0x10/0x10 [ 757.902503][T18064] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 757.902547][T18064] ? sp_alloc+0x27/0x160 [ 757.902591][T18064] sp_alloc+0x4d/0x160 [ 757.902629][T18064] mpol_set_shared_policy+0xa5/0x890 [ 757.902676][T18064] ? __pfx_shmem_set_policy+0x10/0x10 [ 757.902709][T18064] mbind_range+0x339/0x550 [ 757.902751][T18064] do_mbind+0x7dc/0xfd0 [ 757.902797][T18064] ? __might_fault+0xc5/0x140 [ 757.902840][T18064] ? __pfx_do_mbind+0x10/0x10 [ 757.902885][T18064] ? _copy_from_user+0x59/0xd0 [ 757.902933][T18064] ? __pfx_get_nodes+0x10/0x10 [ 757.902980][T18064] kernel_mbind+0x1b7/0x200 [ 757.903023][T18064] ? __pfx_kernel_mbind+0x10/0x10 [ 757.903073][T18064] do_syscall_64+0x106/0xf80 [ 757.903105][T18064] ? clear_bhb_loop+0x40/0x90 [ 757.903142][T18064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.903173][T18064] RIP: 0033:0x7fae5e79c819 [ 757.903198][T18064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.903227][T18064] RSP: 002b:00007fae5f663028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 757.903254][T18064] RAX: ffffffffffffffda RBX: 00007fae5ea16180 RCX: 00007fae5e79c819 [ 757.903274][T18064] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 757.903292][T18064] RBP: 00007fae5e832c91 R08: 0000000000000003 R09: 0000000000000003 [ 757.903309][T18064] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 757.903327][T18064] R13: 00007fae5ea16218 R14: 00007fae5ea16180 R15: 00007fff35a3bc28 [ 757.903370][T18064] [ 758.196061][T18049] zswap: compressor not available [ 758.303241][T18076] futex_wake_op: syz.4.2882 tries to shift op by -2048; fix this program [ 758.482762][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2884'. [ 758.533773][T18082] openvswitch: HfR: Dropping previously announced user features [ 758.756150][T18087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'. [ 758.765723][T18087] openvswitch: HfR: Dropping previously announced user features [ 759.570684][T18096] bond0: invalid ARP target specified [ 759.613346][T18096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2887'. [ 759.929728][T18108] futex_wake_op: syz.4.2891 tries to shift op by -2048; fix this program [ 760.519983][T18118] futex_wake_op: syz.3.2892 tries to shift op by -2048; fix this program [ 760.888571][T18126] futex_wake_op: syz.0.2895 tries to shift op by -2048; fix this program [ 761.030128][ T30] audit: type=1804 audit(1775764166.730:48): pid=18130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2894" name="/newroot/128/file0" dev="tmpfs" ino=679 res=1 errno=0 [ 761.479968][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 761.494781][T18131] openvswitch: HfR: Dropping previously announced user features [ 762.012482][T18142] zram: Cannot change disksize for initialized device [ 762.098789][T18146] futex_wake_op: syz.3.2900 tries to shift op by -2048; fix this program [ 762.675835][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2903'. [ 762.685452][T18159] openvswitch: HfR: Dropping previously announced user features [ 763.344714][T18166] futex_wake_op: syz.3.2904 tries to shift op by -2048; fix this program [ 764.113242][T18177] zram: Cannot change disksize for initialized device [ 764.577370][T18189] FAULT_INJECTION: forcing a failure. [ 764.577370][T18189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.593488][T18189] CPU: 1 UID: 0 PID: 18189 Comm: syz.2.2912 Tainted: G U L syzkaller #0 PREEMPT(full) [ 764.593533][T18189] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 764.593543][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 764.593557][T18189] Call Trace: [ 764.593566][T18189] [ 764.593575][T18189] dump_stack_lvl+0x100/0x190 [ 764.593618][T18189] should_fail_ex.cold+0x5/0xa [ 764.593650][T18189] _copy_from_user+0x2e/0xd0 [ 764.593684][T18189] vmemdup_user+0x6b/0xe0 [ 764.593711][T18189] snd_ctl_elem_add+0xd93/0x1370 [ 764.593749][T18189] ? __might_fault+0xc5/0x140 [ 764.593789][T18189] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 764.593828][T18189] snd_ctl_elem_add_user+0xc5/0x170 [ 764.593859][T18189] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 764.593889][T18189] ? find_held_lock+0x2b/0x80 [ 764.593943][T18189] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 764.593976][T18189] ? do_vfs_ioctl+0x226/0x13e0 [ 764.594017][T18189] snd_ctl_ioctl+0xbdf/0x1330 [ 764.594049][T18189] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 764.594083][T18189] ? find_held_lock+0x2b/0x80 [ 764.594107][T18189] ? __fget_files+0x215/0x3d0 [ 764.594133][T18189] ? hook_file_ioctl_common+0x146/0x410 [ 764.594175][T18189] ? __fget_files+0x21f/0x3d0 [ 764.594212][T18189] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 764.594241][T18189] __x64_sys_ioctl+0x18e/0x210 [ 764.594281][T18189] do_syscall_64+0x106/0xf80 [ 764.594308][T18189] ? clear_bhb_loop+0x40/0x90 [ 764.594340][T18189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.594366][T18189] RIP: 0033:0x7fbd0f79c819 [ 764.594387][T18189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.594412][T18189] RSP: 002b:00007fbd105ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.594437][T18189] RAX: ffffffffffffffda RBX: 00007fbd0fa15fa0 RCX: 00007fbd0f79c819 [ 764.594455][T18189] RDX: 0000200000000140 RSI: 00000000c1105517 RDI: 0000000000000004 [ 764.594471][T18189] RBP: 00007fbd105ca090 R08: 0000000000000000 R09: 0000000000000000 [ 764.594487][T18189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.594503][T18189] R13: 00007fbd0fa16038 R14: 00007fbd0fa15fa0 R15: 00007ffcd7b64e18 [ 764.594537][T18189] [ 764.997086][T18196] futex_wake_op: syz.3.2913 tries to shift op by -2048; fix this program [ 765.730559][T18209] zram: Cannot change disksize for initialized device [ 766.217254][T18218] futex_wake_op: syz.4.2921 tries to shift op by -2048; fix this program [ 766.386174][T18227] FAULT_INJECTION: forcing a failure. [ 766.386174][T18227] name failslab, interval 1, probability 0, space 0, times 0 [ 766.398968][T18227] CPU: 0 UID: 0 PID: 18227 Comm: syz.3.2920 Tainted: G U L syzkaller #0 PREEMPT(full) [ 766.399014][T18227] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 766.399025][T18227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 766.399040][T18227] Call Trace: [ 766.399050][T18227] [ 766.399061][T18227] dump_stack_lvl+0x100/0x190 [ 766.399107][T18227] should_fail_ex.cold+0x5/0xa [ 766.399142][T18227] should_failslab+0xc2/0x120 [ 766.399179][T18227] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 766.399224][T18227] ? __alloc_skb+0x140/0x710 [ 766.399274][T18227] __alloc_skb+0x140/0x710 [ 766.399313][T18227] ? __alloc_skb+0x5b7/0x710 [ 766.399355][T18227] ? __pfx___alloc_skb+0x10/0x10 [ 766.399408][T18227] __pskb_copy_fclone+0xec/0xcb0 [ 766.399439][T18227] ? find_held_lock+0x2b/0x80 [ 766.399467][T18227] ? PageHuge+0x160/0x180 [ 766.399511][T18227] tipc_msg_reassemble+0x34d/0x4f0 [ 766.399555][T18227] ? __pfx_tipc_msg_reassemble+0x10/0x10 [ 766.399597][T18227] ? __might_fault+0x111/0x140 [ 766.399643][T18227] ? lockdep_init_map_type+0x5c/0x250 [ 766.399687][T18227] tipc_mcast_xmit+0x56b/0xfc0 [ 766.399731][T18227] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 766.399769][T18227] ? skb_put+0x138/0x180 [ 766.399837][T18227] ? tipc_send_group_bcast+0x76b/0xa20 [ 766.399870][T18227] tipc_send_group_bcast+0x76b/0xa20 [ 766.399917][T18227] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 766.399957][T18227] ? __pfx_woken_wake_function+0x10/0x10 [ 766.400004][T18227] ? aa_label_sk_perm+0x194/0x5f0 [ 766.400062][T18227] __tipc_sendmsg+0x4a3/0x1ae0 [ 766.400111][T18227] ? __pfx___tipc_sendmsg+0x10/0x10 [ 766.400149][T18227] ? __lock_acquire+0x4a5/0x2630 [ 766.400190][T18227] ? __lock_acquire+0x4a5/0x2630 [ 766.400226][T18227] ? __lock_acquire+0x4a5/0x2630 [ 766.400288][T18227] ? __local_bh_enable_ip+0x9e/0x120 [ 766.400324][T18227] tipc_sendmsg+0x4f/0x70 [ 766.400364][T18227] ____sys_sendmsg+0x9e1/0xb70 [ 766.400397][T18227] ? __pfx_tipc_sendmsg+0x10/0x10 [ 766.400439][T18227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.400481][T18227] ? __pfx__kstrtoull+0x10/0x10 [ 766.400533][T18227] ___sys_sendmsg+0x190/0x1e0 [ 766.400573][T18227] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.400628][T18227] ? find_held_lock+0x2b/0x80 [ 766.400680][T18227] __sys_sendmmsg+0x205/0x430 [ 766.400713][T18227] ? __pfx___sys_sendmmsg+0x10/0x10 [ 766.400754][T18227] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 766.400803][T18227] ? fput+0x79/0x100 [ 766.400836][T18227] ? ksys_write+0x1ac/0x250 [ 766.400863][T18227] ? __pfx_ksys_write+0x10/0x10 [ 766.400898][T18227] __x64_sys_sendmmsg+0x9c/0x100 [ 766.400926][T18227] ? lockdep_hardirqs_on+0x78/0x100 [ 766.400956][T18227] do_syscall_64+0x106/0xf80 [ 766.400984][T18227] ? clear_bhb_loop+0x40/0x90 [ 766.401019][T18227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.401048][T18227] RIP: 0033:0x7fe92379c819 [ 766.401071][T18227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.401098][T18227] RSP: 002b:00007fe9219b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 766.401125][T18227] RAX: ffffffffffffffda RBX: 00007fe923a16180 RCX: 00007fe92379c819 [ 766.401144][T18227] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000004 [ 766.401166][T18227] RBP: 00007fe9219b4090 R08: 0000000000000000 R09: 0000000000000000 [ 766.401184][T18227] R10: 0000000000000230 R11: 0000000000000246 R12: 0000000000000001 [ 766.401201][T18227] R13: 00007fe923a16218 R14: 00007fe923a16180 R15: 00007ffc6669b7a8 [ 766.401239][T18227] [ 767.669857][T18243] futex_wake_op: syz.3.2927 tries to shift op by -2048; fix this program [ 768.479958][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'. [ 768.526558][T18241] openvswitch: HfR: Dropping previously announced user features [ 768.633369][T18251] zram: Cannot change disksize for initialized device [ 768.779657][T18257] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 768.830418][T18261] bond0: invalid ARP target specified [ 768.862369][T18261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2931'. [ 769.048169][T18255] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 769.127324][T18270] futex_wake_op: syz.2.2934 tries to shift op by -2048; fix this program [ 769.730431][T18284] futex_wake_op: syz.4.2937 tries to shift op by -2048; fix this program [ 770.376376][T18292] futex_wake_op: syz.2.2938 tries to shift op by -2048; fix this program [ 770.487417][T18294] futex_wake_op: syz.3.2939 tries to shift op by -2048; fix this program [ 770.950208][T18302] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 771.887680][T18324] futex_wake_op: syz.0.2947 tries to shift op by -2048; fix this program [ 772.939270][T18344] ptrace attach of "./syz-executor exec"[15585] was attempted by ""[18344] [ 772.961322][T18344] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 773.149975][T18351] futex_wake_op: syz.2.2953 tries to shift op by -2048; fix this program [ 774.028531][T18359] ptrace attach of "./syz-executor exec"[15585] was attempted by ""[18359] [ 774.041450][T18359] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 774.299992][T18366] zram: Cannot change disksize for initialized device [ 774.746362][T17084] Bluetooth: hci3: Malformed LE Event: 0x0b [ 775.274569][T18385] bond0: invalid ARP target specified [ 775.298353][T18389] futex_wake_op: syz.3.2964 tries to shift op by -2048; fix this program [ 775.330540][T18385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2963'. [ 776.025251][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2966'. [ 776.144613][T18396] openvswitch: HfR: Dropping previously announced user features [ 776.838959][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 776.858888][T18414] openvswitch: HfR: Dropping previously announced user features [ 777.804917][T18425] FAULT_INJECTION: forcing a failure. [ 777.804917][T18425] name failslab, interval 1, probability 0, space 0, times 0 [ 777.864970][T18425] CPU: 1 UID: 0 PID: 18425 Comm: syz.3.2973 Tainted: G U L syzkaller #0 PREEMPT(full) [ 777.865016][T18425] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 777.865027][T18425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 777.865043][T18425] Call Trace: [ 777.865053][T18425] [ 777.865062][T18425] dump_stack_lvl+0x100/0x190 [ 777.865109][T18425] should_fail_ex.cold+0x5/0xa [ 777.865143][T18425] should_failslab+0xc2/0x120 [ 777.865175][T18425] __kvmalloc_node_noprof+0xfa/0xa00 [ 777.865201][T18425] ? proc_sys_call_handler+0x2c7/0x5a0 [ 777.865238][T18425] proc_sys_call_handler+0x2c7/0x5a0 [ 777.865270][T18425] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 777.865310][T18425] vfs_write+0x6ac/0x1070 [ 777.865339][T18425] ? __pfx_proc_sys_write+0x10/0x10 [ 777.865369][T18425] ? __pfx_vfs_write+0x10/0x10 [ 777.865418][T18425] ksys_write+0x12a/0x250 [ 777.865446][T18425] ? __pfx_ksys_write+0x10/0x10 [ 777.865485][T18425] do_syscall_64+0x106/0xf80 [ 777.865514][T18425] ? clear_bhb_loop+0x40/0x90 [ 777.865548][T18425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.865576][T18425] RIP: 0033:0x7fe92379c819 [ 777.865599][T18425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.865627][T18425] RSP: 002b:00007fe9219d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 777.865654][T18425] RAX: ffffffffffffffda RBX: 00007fe923a16090 RCX: 00007fe92379c819 [ 777.865673][T18425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 777.865690][T18425] RBP: 00007fe9219d5090 R08: 0000000000000000 R09: 0000000000000000 [ 777.865708][T18425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.865725][T18425] R13: 00007fe923a16128 R14: 00007fe923a16090 R15: 00007ffc6669b7a8 [ 777.865763][T18425] [ 778.504285][T18430] futex_wake_op: syz.3.2975 tries to shift op by -2048; fix this program [ 778.552202][T18433] bond0: invalid ARP target specified [ 778.582695][T18433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2974'. [ 779.642610][T18440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'. [ 779.653398][T18440] openvswitch: HfR: Dropping previously announced user features [ 780.317076][T18455] FAULT_INJECTION: forcing a failure. [ 780.317076][T18455] name failslab, interval 1, probability 0, space 0, times 0 [ 780.342287][T18455] CPU: 1 UID: 0 PID: 18455 Comm: syz.4.2983 Tainted: G U L syzkaller #0 PREEMPT(full) [ 780.342315][T18455] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 780.342321][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 780.342331][T18455] Call Trace: [ 780.342336][T18455] [ 780.342343][T18455] dump_stack_lvl+0x100/0x190 [ 780.342371][T18455] should_fail_ex.cold+0x5/0xa [ 780.342390][T18455] should_failslab+0xc2/0x120 [ 780.342408][T18455] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 780.342432][T18455] ? do_getname+0x35/0x390 [ 780.342455][T18455] do_getname+0x35/0x390 [ 780.342476][T18455] acct_on+0x91/0x9e0 [ 780.342500][T18455] ? __pfx_acct_on+0x10/0x10 [ 780.342523][T18455] ? bpf_lsm_capable+0x9/0x10 [ 780.342539][T18455] ? security_capable+0x80/0x260 [ 780.342557][T18455] __x64_sys_acct+0x81/0x1e0 [ 780.342586][T18455] ? lockdep_hardirqs_on+0x78/0x100 [ 780.342603][T18455] do_syscall_64+0x106/0xf80 [ 780.342618][T18455] ? clear_bhb_loop+0x40/0x90 [ 780.342637][T18455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.342652][T18455] RIP: 0033:0x7f591979c819 [ 780.342666][T18455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.342680][T18455] RSP: 002b:00007f591a6bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 780.342696][T18455] RAX: ffffffffffffffda RBX: 00007f5919a15fa0 RCX: 00007f591979c819 [ 780.342706][T18455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 780.342715][T18455] RBP: 00007f591a6bd090 R08: 0000000000000000 R09: 0000000000000000 [ 780.342723][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.342732][T18455] R13: 00007f5919a16038 R14: 00007f5919a15fa0 R15: 00007ffd5a22d628 [ 780.342751][T18455] [ 780.595416][T18468] futex_wake_op: syz.2.2985 tries to shift op by -2048; fix this program [ 781.217464][T18476] bond0: invalid ARP target specified [ 781.310476][T18476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2987'. [ 781.513042][T18483] futex_wake_op: syz.3.2989 tries to shift op by -2048; fix this program [ 781.942377][T18493] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 781.983213][T18495] ptrace attach of "./syz-executor exec"[15585] was attempted by ""[18495] [ 782.078736][T18495] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 782.500470][T18511] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 783.750975][T18536] FAULT_INJECTION: forcing a failure. [ 783.750975][T18536] name failslab, interval 1, probability 0, space 0, times 0 [ 783.763909][T18536] CPU: 1 UID: 0 PID: 18536 Comm: syz.0.3002 Tainted: G U L syzkaller #0 PREEMPT(full) [ 783.763962][T18536] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 783.763974][T18536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 783.763994][T18536] Call Trace: [ 783.764005][T18536] [ 783.764016][T18536] dump_stack_lvl+0x100/0x190 [ 783.764070][T18536] should_fail_ex.cold+0x5/0xa [ 783.764106][T18536] should_failslab+0xc2/0x120 [ 783.764140][T18536] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 783.764186][T18536] ? alloc_empty_file+0x55/0x1c0 [ 783.764225][T18536] ? __pfx_stack_trace_save+0x10/0x10 [ 783.764262][T18536] alloc_empty_file+0x55/0x1c0 [ 783.764301][T18536] path_openat+0xe8/0x31a0 [ 783.764332][T18536] ? kasan_save_stack+0x3f/0x50 [ 783.764359][T18536] ? kasan_save_stack+0x30/0x50 [ 783.764385][T18536] ? kasan_save_track+0x14/0x30 [ 783.764412][T18536] ? __kasan_slab_alloc+0x89/0x90 [ 783.764440][T18536] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 783.764486][T18536] ? do_getname+0x35/0x390 [ 783.764529][T18536] ? do_sys_openat2+0xc5/0x1e0 [ 783.764570][T18536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.764608][T18536] ? __pfx_path_openat+0x10/0x10 [ 783.764656][T18536] do_file_open+0x20e/0x430 [ 783.764693][T18536] ? __pfx_do_file_open+0x10/0x10 [ 783.764754][T18536] ? alloc_fd+0x476/0x790 [ 783.764790][T18536] ? do_getname+0x191/0x390 [ 783.764833][T18536] do_sys_openat2+0x10d/0x1e0 [ 783.764874][T18536] ? __pfx_do_sys_openat2+0x10/0x10 [ 783.764929][T18536] __x64_sys_openat+0x12d/0x210 [ 783.764971][T18536] ? __pfx___x64_sys_openat+0x10/0x10 [ 783.765028][T18536] do_syscall_64+0x106/0xf80 [ 783.765059][T18536] ? clear_bhb_loop+0x40/0x90 [ 783.765095][T18536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.765125][T18536] RIP: 0033:0x7fae5e79c819 [ 783.765150][T18536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.765176][T18536] RSP: 002b:00007fae5f6a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 783.765204][T18536] RAX: ffffffffffffffda RBX: 00007fae5ea15fa0 RCX: 00007fae5e79c819 [ 783.765223][T18536] RDX: 0000000000009400 RSI: 0000200000001e80 RDI: ffffffffffffff9c [ 783.765240][T18536] RBP: 00007fae5e832c91 R08: 0000000000000000 R09: 0000000000000000 [ 783.765255][T18536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.765269][T18536] R13: 00007fae5ea16038 R14: 00007fae5ea15fa0 R15: 00007fff35a3bc28 [ 783.765305][T18536] [ 784.255455][T18548] ptrace attach of "./syz-executor exec"[15585] was attempted by ""[18548] [ 784.268684][T18548] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 784.304368][T18531] FAULT_INJECTION: forcing a failure. [ 784.304368][T18531] name failslab, interval 1, probability 0, space 0, times 0 [ 784.330011][T18531] CPU: 1 UID: 0 PID: 18531 Comm: syz.4.3000 Tainted: G U L syzkaller #0 PREEMPT(full) [ 784.330077][T18531] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 784.330094][T18531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 784.330112][T18531] Call Trace: [ 784.330122][T18531] [ 784.330134][T18531] dump_stack_lvl+0x100/0x190 [ 784.330196][T18531] should_fail_ex.cold+0x5/0xa [ 784.330234][T18531] should_failslab+0xc2/0x120 [ 784.330268][T18531] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 784.330313][T18531] ? vm_area_dup+0x27/0x8e0 [ 784.330363][T18531] vm_area_dup+0x27/0x8e0 [ 784.330406][T18531] __split_vma+0x18c/0xd90 [ 784.330460][T18531] ? __pfx___split_vma+0x10/0x10 [ 784.330512][T18531] ? __mpol_equal+0xaf/0x340 [ 784.330559][T18531] vma_modify+0x1121/0x2250 [ 784.330612][T18531] ? __pfx_vma_modify+0x10/0x10 [ 784.330665][T18531] vma_modify_policy+0x238/0x300 [ 784.330711][T18531] ? __pfx_vma_modify_policy+0x10/0x10 [ 784.330789][T18531] mbind_range+0x175/0x550 [ 784.330832][T18531] do_mbind+0x7dc/0xfd0 [ 784.330878][T18531] ? __might_fault+0xc5/0x140 [ 784.330922][T18531] ? __pfx_do_mbind+0x10/0x10 [ 784.330968][T18531] ? _copy_from_user+0x59/0xd0 [ 784.331016][T18531] ? __pfx_get_nodes+0x10/0x10 [ 784.331056][T18531] kernel_mbind+0x1b7/0x200 [ 784.331097][T18531] ? __pfx_kernel_mbind+0x10/0x10 [ 784.331148][T18531] do_syscall_64+0x106/0xf80 [ 784.331180][T18531] ? clear_bhb_loop+0x40/0x90 [ 784.331216][T18531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.331246][T18531] RIP: 0033:0x7f591979c819 [ 784.331271][T18531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.331301][T18531] RSP: 002b:00007f591a6bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 784.331331][T18531] RAX: ffffffffffffffda RBX: 00007f5919a15fa0 RCX: 00007f591979c819 [ 784.331351][T18531] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 784.331369][T18531] RBP: 00007f5919832c91 R08: 0000000000000003 R09: 0000000000000003 [ 784.331387][T18531] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 784.331405][T18531] R13: 00007f5919a16038 R14: 00007f5919a15fa0 R15: 00007ffd5a22d628 [ 784.331445][T18531] [ 784.629007][T18552] futex_wake_op: syz.2.3006 tries to shift op by -2048; fix this program [ 784.961857][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3007'. [ 784.995700][T18555] openvswitch: HfR: Dropping previously announced user features [ 786.973280][T18590] futex_wake_op: syz.3.3012 tries to shift op by -2048; fix this program [ 788.107953][T18615] FAULT_INJECTION: forcing a failure. [ 788.107953][T18615] name failslab, interval 1, probability 0, space 0, times 0 [ 788.160816][T18615] CPU: 1 UID: 0 PID: 18615 Comm: syz.3.3016 Tainted: G U L syzkaller #0 PREEMPT(full) [ 788.160866][T18615] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 788.160877][T18615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 788.160894][T18615] Call Trace: [ 788.160903][T18615] [ 788.160914][T18615] dump_stack_lvl+0x100/0x190 [ 788.160963][T18615] should_fail_ex.cold+0x5/0xa [ 788.160998][T18615] should_failslab+0xc2/0x120 [ 788.161032][T18615] __kmalloc_cache_noprof+0x7a/0x6f0 [ 788.161072][T18615] ? init_srcu_struct_fields+0xa69/0xfa0 [ 788.161123][T18615] ? read_tsc+0x9/0x20 [ 788.161157][T18615] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 788.161197][T18615] init_srcu_struct_fields+0xa69/0xfa0 [ 788.161247][T18615] kvm_dev_ioctl+0x7b6/0x1a50 [ 788.161289][T18615] ? find_held_lock+0x2b/0x80 [ 788.161319][T18615] ? __fget_files+0x215/0x3d0 [ 788.161348][T18615] ? hook_file_ioctl_common+0x146/0x410 [ 788.161388][T18615] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 788.161427][T18615] ? __fget_files+0x21f/0x3d0 [ 788.161462][T18615] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 788.161499][T18615] __x64_sys_ioctl+0x18e/0x210 [ 788.161548][T18615] do_syscall_64+0x106/0xf80 [ 788.161579][T18615] ? clear_bhb_loop+0x40/0x90 [ 788.161615][T18615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.161646][T18615] RIP: 0033:0x7fe92379c819 [ 788.161671][T18615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.161699][T18615] RSP: 002b:00007fe9219f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 788.161728][T18615] RAX: ffffffffffffffda RBX: 00007fe923a15fa0 RCX: 00007fe92379c819 [ 788.161749][T18615] RDX: 000000001f000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 788.161767][T18615] RBP: 00007fe923832c91 R08: 0000000000000000 R09: 0000000000000000 [ 788.161786][T18615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.161803][T18615] R13: 00007fe923a16038 R14: 00007fe923a15fa0 R15: 00007ffc6669b7a8 [ 788.161842][T18615] [ 788.663382][ T30] audit: type=1800 audit(1775764194.360:49): pid=18626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3021" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 789.405480][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806049f800: rx timeout, send abort [ 789.413985][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806049f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 790.590370][T18653] FAULT_INJECTION: forcing a failure. [ 790.590370][T18653] name failslab, interval 1, probability 0, space 0, times 0 [ 790.629615][T18653] CPU: 1 UID: 0 PID: 18653 Comm: syz.0.3025 Tainted: G U L syzkaller #0 PREEMPT(full) [ 790.629661][T18653] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 790.629672][T18653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 790.629688][T18653] Call Trace: [ 790.629697][T18653] [ 790.629708][T18653] dump_stack_lvl+0x100/0x190 [ 790.629754][T18653] should_fail_ex.cold+0x5/0xa [ 790.629789][T18653] should_failslab+0xc2/0x120 [ 790.629820][T18653] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 790.629861][T18653] ? security_file_alloc+0x34/0x2c0 [ 790.629901][T18653] ? trace_kmem_cache_alloc+0xf3/0x120 [ 790.629939][T18653] security_file_alloc+0x34/0x2c0 [ 790.629976][T18653] init_file+0x95/0x480 [ 790.630011][T18653] alloc_empty_file+0x73/0x1c0 [ 790.630046][T18653] path_openat+0xe8/0x31a0 [ 790.630074][T18653] ? kasan_save_stack+0x3f/0x50 [ 790.630100][T18653] ? kasan_save_stack+0x30/0x50 [ 790.630120][T18653] ? kasan_save_track+0x14/0x30 [ 790.630142][T18653] ? __kasan_slab_alloc+0x89/0x90 [ 790.630166][T18653] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 790.630202][T18653] ? do_getname+0x35/0x390 [ 790.630231][T18653] ? do_sys_openat2+0xc5/0x1e0 [ 790.630265][T18653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.630299][T18653] ? __pfx_path_openat+0x10/0x10 [ 790.630337][T18653] do_file_open+0x20e/0x430 [ 790.630369][T18653] ? __pfx_do_file_open+0x10/0x10 [ 790.630425][T18653] ? alloc_fd+0x476/0x790 [ 790.630455][T18653] ? do_getname+0x191/0x390 [ 790.630491][T18653] do_sys_openat2+0x10d/0x1e0 [ 790.630527][T18653] ? __pfx_do_sys_openat2+0x10/0x10 [ 790.630559][T18653] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 790.630604][T18653] ? __fget_files+0x21f/0x3d0 [ 790.630638][T18653] __x64_sys_openat+0x12d/0x210 [ 790.630676][T18653] ? __pfx___x64_sys_openat+0x10/0x10 [ 790.630713][T18653] ? ksys_write+0x1ac/0x250 [ 790.630752][T18653] do_syscall_64+0x106/0xf80 [ 790.630782][T18653] ? clear_bhb_loop+0x40/0x90 [ 790.630816][T18653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.630844][T18653] RIP: 0033:0x7fae5e79c819 [ 790.630867][T18653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.630893][T18653] RSP: 002b:00007fae5f6a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 790.630919][T18653] RAX: ffffffffffffffda RBX: 00007fae5ea15fa0 RCX: 00007fae5e79c819 [ 790.630938][T18653] RDX: 0000000000000201 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 790.630956][T18653] RBP: 00007fae5f6a5090 R08: 0000000000000000 R09: 0000000000000000 [ 790.630973][T18653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.630989][T18653] R13: 00007fae5ea16038 R14: 00007fae5ea15fa0 R15: 00007fff35a3bc28 [ 790.631027][T18653] [ 791.306331][T18661] zram: Cannot change disksize for initialized device [ 792.138468][T18675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 792.152422][T18675] openvswitch: HfR: Dropping previously announced user features [ 792.243377][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 792.286755][T18676] openvswitch: HfR: Dropping previously announced user features [ 792.636053][T18684] futex_wake_op: syz.4.3033 tries to shift op by -2048; fix this program [ 793.788419][T18704] ptrace attach of "./syz-executor exec"[13359] was attempted by ""[18704] [ 793.799887][T18704] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 795.339059][T18736] FAULT_INJECTION: forcing a failure. [ 795.339059][T18736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.352219][T18736] CPU: 1 UID: 0 PID: 18736 Comm: syz.3.3044 Tainted: G U L syzkaller #0 PREEMPT(full) [ 795.352265][T18736] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 795.352276][T18736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 795.352292][T18736] Call Trace: [ 795.352301][T18736] [ 795.352312][T18736] dump_stack_lvl+0x100/0x190 [ 795.352359][T18736] should_fail_ex.cold+0x5/0xa [ 795.352394][T18736] _copy_from_iter+0x1f4/0x1690 [ 795.352439][T18736] ? __pfx__copy_from_iter+0x10/0x10 [ 795.352483][T18736] ? __pfx___might_resched+0x10/0x10 [ 795.352532][T18736] file_tty_write.isra.0+0x45b/0x890 [ 795.352586][T18736] vfs_write+0x6ac/0x1070 [ 795.352616][T18736] ? __pfx_tty_write+0x10/0x10 [ 795.352661][T18736] ? __pfx_vfs_write+0x10/0x10 [ 795.352686][T18736] ? find_held_lock+0x2b/0x80 [ 795.352738][T18736] ksys_write+0x12a/0x250 [ 795.352765][T18736] ? __pfx_ksys_write+0x10/0x10 [ 795.352804][T18736] do_syscall_64+0x106/0xf80 [ 795.352833][T18736] ? clear_bhb_loop+0x40/0x90 [ 795.352868][T18736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.352896][T18736] RIP: 0033:0x7fe92379c819 [ 795.352920][T18736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.352947][T18736] RSP: 002b:00007fe921993028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 795.352973][T18736] RAX: ffffffffffffffda RBX: 00007fe923a16270 RCX: 00007fe92379c819 [ 795.352992][T18736] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 795.353009][T18736] RBP: 00007fe921993090 R08: 0000000000000000 R09: 0000000000000000 [ 795.353026][T18736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.353043][T18736] R13: 00007fe923a16308 R14: 00007fe923a16270 R15: 00007ffc6669b7a8 [ 795.353079][T18736] [ 795.567188][T18728] size and base must be multiples of 4 kiB [ 795.573039][T18728] CPU: 0 UID: 0 PID: 18728 Comm: syz.0.3045 Tainted: G U L syzkaller #0 PREEMPT(full) [ 795.573064][T18728] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 795.573071][T18728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 795.573080][T18728] Call Trace: [ 795.573086][T18728] [ 795.573092][T18728] dump_stack_lvl+0x100/0x190 [ 795.573120][T18728] mtrr_add.cold+0x74/0x87 [ 795.573138][T18728] mtrr_ioctl+0x25a/0xcf0 [ 795.573161][T18728] ? __pfx_mtrr_ioctl+0x10/0x10 [ 795.573184][T18728] ? find_held_lock+0x2b/0x80 [ 795.573204][T18728] ? __fget_files+0x21f/0x3d0 [ 795.573221][T18728] ? __pfx_mtrr_ioctl+0x10/0x10 [ 795.573243][T18728] proc_reg_unlocked_ioctl+0x229/0x320 [ 795.573266][T18728] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 795.573291][T18728] __x64_sys_ioctl+0x18e/0x210 [ 795.573315][T18728] do_syscall_64+0x106/0xf80 [ 795.573337][T18728] ? clear_bhb_loop+0x40/0x90 [ 795.573356][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.573373][T18728] RIP: 0033:0x7fae5e79c819 [ 795.573387][T18728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.573409][T18728] RSP: 002b:00007fae5f6a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 795.573425][T18728] RAX: ffffffffffffffda RBX: 00007fae5ea15fa0 RCX: 00007fae5e79c819 [ 795.573436][T18728] RDX: 0000000000000002 RSI: 0000000040104d01 RDI: 0000000000000002 [ 795.573445][T18728] RBP: 00007fae5e832c91 R08: 0000000000000000 R09: 0000000000000000 [ 795.573455][T18728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.573464][T18728] R13: 00007fae5ea16038 R14: 00007fae5ea15fa0 R15: 00007fff35a3bc28 [ 795.573485][T18728] [ 795.765278][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3042'. [ 795.822773][T18725] openvswitch: HfR: Dropping previously announced user features [ 796.157893][T18743] zram: Cannot change disksize for initialized device [ 796.227594][T18742] zram: Cannot change disksize for initialized device [ 796.253556][T18745] zram: Cannot change disksize for initialized device [ 796.278166][ T30] audit: type=1804 audit(1775764201.980:50): pid=18748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3050" name="/newroot/306/file0" dev="tmpfs" ino=1602 res=1 errno=0 [ 796.576387][T18758] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 798.204105][T18795] futex_wake_op: syz.4.3059 tries to shift op by -2048; fix this program [ 798.778717][T18800] zram: Cannot change disksize for initialized device [ 800.273343][T18824] futex_wake_op: syz.3.3066 tries to shift op by -2048; fix this program [ 800.945710][T18831] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 801.333075][T18841] futex_wake_op: syz.3.3070 tries to shift op by -2048; fix this program [ 803.197508][T18864] FAULT_INJECTION: forcing a failure. [ 803.197508][T18864] name failslab, interval 1, probability 0, space 0, times 0 [ 803.210428][T18864] CPU: 0 UID: 0 PID: 18864 Comm: syz.0.3075 Tainted: G U L syzkaller #0 PREEMPT(full) [ 803.210474][T18864] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 803.210485][T18864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 803.210502][T18864] Call Trace: [ 803.210511][T18864] [ 803.210522][T18864] dump_stack_lvl+0x100/0x190 [ 803.210568][T18864] should_fail_ex.cold+0x5/0xa [ 803.210602][T18864] should_failslab+0xc2/0x120 [ 803.210633][T18864] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 803.210677][T18864] ? __alloc_skb+0x140/0x710 [ 803.210724][T18864] __alloc_skb+0x140/0x710 [ 803.210763][T18864] ? __alloc_skb+0x5b7/0x710 [ 803.210804][T18864] ? __pfx___alloc_skb+0x10/0x10 [ 803.210855][T18864] netlink_alloc_large_skb+0x69/0x150 [ 803.210888][T18864] netlink_sendmsg+0x680/0xda0 [ 803.210924][T18864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.210954][T18864] ? __import_iovec+0x1d2/0x640 [ 803.210993][T18864] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 803.211028][T18864] ____sys_sendmsg+0x9e1/0xb70 [ 803.211061][T18864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.211095][T18864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 803.211145][T18864] ___sys_sendmsg+0x190/0x1e0 [ 803.211184][T18864] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.211260][T18864] __sys_sendmsg+0x170/0x220 [ 803.211289][T18864] ? __pfx___sys_sendmsg+0x10/0x10 [ 803.211339][T18864] do_syscall_64+0x106/0xf80 [ 803.211368][T18864] ? clear_bhb_loop+0x40/0x90 [ 803.211408][T18864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.211436][T18864] RIP: 0033:0x7fae5e79c819 [ 803.211460][T18864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.211487][T18864] RSP: 002b:00007fae5f6a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.211513][T18864] RAX: ffffffffffffffda RBX: 00007fae5ea15fa0 RCX: 00007fae5e79c819 [ 803.211532][T18864] RDX: 00000000000040d0 RSI: 0000200000000040 RDI: 0000000000000003 [ 803.211549][T18864] RBP: 00007fae5f6a5090 R08: 0000000000000000 R09: 0000000000000000 [ 803.211566][T18864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.211582][T18864] R13: 00007fae5ea16038 R14: 00007fae5ea15fa0 R15: 00007fff35a3bc28 [ 803.211619][T18864] [ 803.634373][T18868] futex_wake_op: syz.3.3078 tries to shift op by -2048; fix this program [ 803.980904][ T30] audit: type=1804 audit(1775764209.680:51): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3076" name="/newroot/169/file0" dev="tmpfs" ino=894 res=1 errno=0 [ 804.743493][T18887] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 805.179002][T18892] futex_wake_op: syz.0.3083 tries to shift op by -2048; fix this program [ 806.206272][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3084'. [ 806.282195][T18900] openvswitch: HfR: Dropping previously announced user features [ 807.123750][ T30] audit: type=1804 audit(1775764212.820:52): pid=18920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3088" name="/newroot/167/file0" dev="tmpfs" ino=877 res=1 errno=0 [ 807.399119][T18923] : Can't lookup blockdev [ 808.260830][T18930] zram: Cannot change disksize for initialized device [ 808.596887][T18936] bond0: invalid ARP target specified [ 808.639697][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.646132][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.780120][T18936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3094'. [ 809.143489][T18945] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 812.142365][T18974] futex_wake_op: syz.0.3101 tries to shift op by -2048; fix this program [ 812.219126][T18976] zram: Cannot change disksize for initialized device [ 813.102668][T18989] futex_wake_op: syz.0.3104 tries to shift op by -2048; fix this program [ 813.429751][T18985] < [ 814.366909][T18999] zram: Cannot change disksize for initialized device [ 815.462798][T19023] ptrace attach of "./syz-executor exec"[15993] was attempted by ""[19023] [ 815.543870][T19023] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1768304430.791700844.1701603686), cmd(5) [ 816.098701][T19031] futex_wake_op: syz.0.3113 tries to shift op by -2048; fix this program [ 816.200088][T19033] futex_wake_op: syz.3.3114 tries to shift op by -2048; fix this program [ 817.320902][ T30] audit: type=1804 audit(1775764223.020:53): pid=19048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3118" name="/newroot/322/file0" dev="tmpfs" ino=1684 res=1 errno=0 [ 818.132801][T19063] ptrace attach of "./syz-executor exec"[15809] was attempted by ""[19063] [ 818.155792][T19063] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1768304430.791700844.1701603686), cmd(5) [ 818.576499][T19072] futex_wake_op: syz.0.3123 tries to shift op by -2048; fix this program [ 819.247097][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3121'. [ 819.260272][T19070] openvswitch: HfR: Dropping previously announced user features [ 819.322552][T19080] zram: Cannot change disksize for initialized device [ 819.802412][T19089] futex_wake_op: syz.2.3126 tries to shift op by -2048; fix this program [ 820.306641][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3125'. [ 820.399091][T19091] openvswitch: HfR: Dropping previously announced user features [ 821.098247][T19108] futex_wake_op: syz.0.3130 tries to shift op by -2048; fix this program [ 821.488291][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 821.527930][T19104] openvswitch: HfR: Dropping previously announced user features [ 821.968449][T19116] futex_wake_op: syz.2.3131 tries to shift op by -2048; fix this program [ 822.778397][T19134] ptrace attach of "./syz-executor exec"[13359] was attempted by ""[19134] [ 823.576925][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'. [ 823.664909][T19142] openvswitch: HfR: Dropping previously announced user features [ 824.969692][ T30] audit: type=1804 audit(1775764230.670:54): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3141" name="/newroot/183/file0" dev="tmpfs" ino=967 res=1 errno=0 [ 825.548615][T19148] < [ 826.188423][ T30] audit: type=1804 audit(1775764231.880:55): pid=19173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3144" name="/newroot/179/file0" dev="tmpfs" ino=937 res=1 errno=0 [ 826.645888][T19178] futex_wake_op: syz.2.3146 tries to shift op by -2048; fix this program [ 826.692603][T19179] ptrace attach of "./syz-executor exec"[15993] was attempted by ""[19179] [ 826.742818][T19179] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 827.494300][T19192] bond0: invalid ARP target specified [ 827.577365][T19192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3148'. [ 827.782369][T19200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3150'. [ 827.791876][T19200] openvswitch: HfR: Dropping previously announced user features [ 827.962209][T19204] zram: Cannot change disksize for initialized device [ 828.422209][T19210] futex_wake_op: syz.0.3153 tries to shift op by -2048; fix this program [ 830.615624][T19233] futex_wake_op: syz.2.3157 tries to shift op by -2048; fix this program [ 830.930298][T19241] futex_wake_op: syz.4.3158 tries to shift op by -2048; fix this program [ 832.010163][T19256] futex_wake_op: syz.4.3160 tries to shift op by -2048; fix this program [ 832.065306][T19258] futex_wake_op: syz.0.3161 tries to shift op by -2048; fix this program [ 832.581252][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'. [ 832.733271][T19252] openvswitch: HfR: Dropping previously announced user features [ 833.058459][ T30] audit: type=1804 audit(1775764238.760:56): pid=19267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3162" name="/newroot/189/file0" dev="tmpfs" ino=992 res=1 errno=0 [ 833.313648][T19273] zram: Cannot change disksize for initialized device [ 833.724301][T19287] futex_wake_op: syz.2.3169 tries to shift op by -2048; fix this program [ 834.876771][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3170'. [ 834.910456][T19295] openvswitch: HfR: Dropping previously announced user features [ 835.126938][T19303] futex_wake_op: syz.4.3172 tries to shift op by -2048; fix this program [ 835.346423][T19308] zram: Cannot change disksize for initialized device [ 835.998348][T19315] futex_wake_op: syz.0.3174 tries to shift op by -2048; fix this program [ 836.027579][T19316] futex_wake_op: syz.2.3175 tries to shift op by -2048; fix this program [ 836.155394][T19319] futex_wake_op: syz.4.3176 tries to shift op by -2048; fix this program [ 836.314445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 838.263102][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3180'. [ 838.272724][T19349] openvswitch: HfR: Dropping previously announced user features [ 838.609555][T19352] bond0: invalid ARP target specified [ 838.648549][T19352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3182'. [ 838.995492][ T30] audit: type=1804 audit(1775764244.700:57): pid=19356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3183" name="/newroot/195/file0" dev="tmpfs" ino=1023 res=1 errno=0 [ 839.101665][T19358] zram: Cannot change disksize for initialized device [ 839.185945][T19365] futex_wake_op: syz.0.3187 tries to shift op by -2048; fix this program [ 840.125265][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 840.152138][T19380] openvswitch: HfR: Dropping previously announced user features [ 840.179331][T19386] zram: Cannot change disksize for initialized device [ 841.060651][T19404] zram: Cannot change disksize for initialized device [ 841.156502][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3192'. [ 841.248203][T19397] openvswitch: HfR: Dropping previously announced user features [ 841.496925][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 841.534353][T19402] openvswitch: HfR: Dropping previously announced user features [ 841.627234][T19414] zram: Cannot change disksize for initialized device [ 842.012761][T19418] futex_wake_op: syz.2.3199 tries to shift op by -2048; fix this program [ 842.133027][T19423] futex_wake_op: syz.0.3200 tries to shift op by -2048; fix this program [ 842.164483][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3198'. [ 842.174245][T19421] openvswitch: HfR: Dropping previously announced user features [ 843.264978][T19439] ptrace attach of "./syz-executor exec"[15809] was attempted by ""[19439] [ 843.279541][T19439] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 843.309700][T19442] futex_wake_op: syz.0.3204 tries to shift op by -2048; fix this program [ 843.636782][T19449] futex_wake_op: syz.3.3205 tries to shift op by -2048; fix this program [ 844.634484][ T30] audit: type=1804 audit(1775764250.320:58): pid=19464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3208" name="/newroot/203/file0" dev="tmpfs" ino=1065 res=1 errno=0 [ 845.047833][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3206'. [ 845.064709][T19461] openvswitch: HfR: Dropping previously announced user features [ 845.270335][T19472] futex_wake_op: syz.3.3210 tries to shift op by -2048; fix this program [ 845.545299][T19477] futex_wake_op: syz.2.3211 tries to shift op by -2048; fix this program [ 846.271843][T19489] zram: Cannot change disksize for initialized device [ 846.736425][T19498] bond0: invalid ARP target specified [ 846.766172][T19498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3216'. [ 848.184261][T19517] futex_wake_op: syz.4.3219 tries to shift op by -2048; fix this program [ 849.309299][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 849.333258][T19525] openvswitch: HfR: Dropping previously announced user features [ 850.318697][T19538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3223'. [ 850.388247][T19538] openvswitch: HfR: Dropping previously announced user features [ 851.493868][T19559] futex_wake_op: syz.3.3228 tries to shift op by -2048; fix this program [ 852.026004][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'. [ 852.070620][T19561] openvswitch: HfR: Dropping previously announced user features [ 852.627051][T19573] futex_wake_op: syz.4.3231 tries to shift op by -2048; fix this program [ 854.132915][T19597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3234'. [ 854.144454][T19597] openvswitch: HfR: Dropping previously announced user features [ 854.916215][T19615] futex_wake_op: syz.2.3240 tries to shift op by -2048; fix this program [ 857.217170][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'. [ 857.258803][T19642] openvswitch: HfR: Dropping previously announced user features [ 858.778253][ T30] audit: type=1804 audit(1775764264.470:59): pid=19676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3248" name="/newroot/354/file0" dev="tmpfs" ino=1848 res=1 errno=0 [ 859.056394][T19686] futex_wake_op: syz.4.3250 tries to shift op by -2048; fix this program [ 860.048443][T19696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3251'. [ 860.264066][T19693] bond0: invalid ARP target specified [ 860.542736][T19699] bond0: invalid ARP target specified [ 860.925549][T19699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3252'. [ 861.202289][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3253'. [ 861.211767][T19703] openvswitch: HfR: Dropping previously announced user features [ 861.573376][T19717] futex_wake_op: syz.3.3258 tries to shift op by -2048; fix this program [ 861.971015][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3254'. [ 862.069796][T19710] openvswitch: HfR: Dropping previously announced user features [ 862.147442][ T30] audit: type=1804 audit(1775764267.850:60): pid=19725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3259" name="/newroot/216/file0" dev="tmpfs" ino=1133 res=1 errno=0 [ 862.531600][T19729] futex_wake_op: syz.0.3261 tries to shift op by -2048; fix this program [ 862.696679][T19735] bond0: invalid ARP target specified [ 862.726160][T19735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3262'. [ 863.199683][T19753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'. [ 863.209368][T19753] openvswitch: HfR: Dropping previously announced user features [ 863.439065][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3266'. [ 863.491656][T19744] openvswitch: HfR: Dropping previously announced user features [ 863.583245][T19758] futex_wake_op: syz.0.3268 tries to shift op by -2048; fix this program [ 864.300378][ T30] audit: type=1804 audit(1775764270.000:61): pid=19766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3270" name="/newroot/361/file0" dev="tmpfs" ino=1884 res=1 errno=0 [ 864.867783][T19774] futex_wake_op: syz.4.3272 tries to shift op by -2048; fix this program [ 865.651659][T19778] FAULT_INJECTION: forcing a failure. [ 865.651659][T19778] name failslab, interval 1, probability 0, space 0, times 0 [ 865.690605][T19778] CPU: 1 UID: 0 PID: 19778 Comm: syz.0.3273 Tainted: G U L syzkaller #0 PREEMPT(full) [ 865.690657][T19778] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 865.690669][T19778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 865.690687][T19778] Call Trace: [ 865.690697][T19778] [ 865.690716][T19778] dump_stack_lvl+0x100/0x190 [ 865.690770][T19778] should_fail_ex.cold+0x5/0xa [ 865.690806][T19778] should_failslab+0xc2/0x120 [ 865.690840][T19778] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 865.690886][T19778] ? vm_area_dup+0x27/0x8e0 [ 865.690934][T19778] vm_area_dup+0x27/0x8e0 [ 865.690977][T19778] __split_vma+0x18c/0xd90 [ 865.691024][T19778] ? __pfx___split_vma+0x10/0x10 [ 865.691073][T19778] ? __mpol_equal+0xaf/0x340 [ 865.691119][T19778] vma_modify+0x1121/0x2250 [ 865.691171][T19778] ? __pfx_vma_modify+0x10/0x10 [ 865.691226][T19778] vma_modify_policy+0x238/0x300 [ 865.691273][T19778] ? __pfx_vma_modify_policy+0x10/0x10 [ 865.691352][T19778] mbind_range+0x175/0x550 [ 865.691395][T19778] do_mbind+0x7dc/0xfd0 [ 865.691442][T19778] ? __might_fault+0xc5/0x140 [ 865.691484][T19778] ? __pfx_do_mbind+0x10/0x10 [ 865.691531][T19778] ? _copy_from_user+0x59/0xd0 [ 865.691579][T19778] ? __pfx_get_nodes+0x10/0x10 [ 865.691616][T19778] kernel_mbind+0x1b7/0x200 [ 865.691659][T19778] ? __pfx_kernel_mbind+0x10/0x10 [ 865.691714][T19778] do_syscall_64+0x106/0xf80 [ 865.691747][T19778] ? clear_bhb_loop+0x40/0x90 [ 865.691784][T19778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.691814][T19778] RIP: 0033:0x7fae5e79c819 [ 865.691839][T19778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.691867][T19778] RSP: 002b:00007fae5f6a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 865.691897][T19778] RAX: ffffffffffffffda RBX: 00007fae5ea15fa0 RCX: 00007fae5e79c819 [ 865.691917][T19778] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 865.691935][T19778] RBP: 00007fae5e832c91 R08: 0000000000000003 R09: 0000000000000003 [ 865.691953][T19778] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 865.691971][T19778] R13: 00007fae5ea16038 R14: 00007fae5ea15fa0 R15: 00007fff35a3bc28 [ 865.692011][T19778] [ 866.087399][T19793] futex_wake_op: syz.4.3276 tries to shift op by -2048; fix this program [ 866.814821][T19811] ptrace attach of "./syz-executor exec"[15993] was attempted by ""[19811] [ 866.899279][T19811] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 868.464866][T19844] futex_wake_op: syz.2.3287 tries to shift op by -2048; fix this program [ 869.822209][T19856] FAULT_INJECTION: forcing a failure. [ 869.822209][T19856] name failslab, interval 1, probability 0, space 0, times 0 [ 869.875412][T19856] CPU: 0 UID: 0 PID: 19856 Comm: syz.0.3288 Tainted: G U L syzkaller #0 PREEMPT(full) [ 869.875460][T19856] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 869.875472][T19856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 869.875487][T19856] Call Trace: [ 869.875496][T19856] [ 869.875507][T19856] dump_stack_lvl+0x100/0x190 [ 869.875555][T19856] should_fail_ex.cold+0x5/0xa [ 869.875589][T19856] should_failslab+0xc2/0x120 [ 869.875621][T19856] __kmalloc_cache_noprof+0x7a/0x6f0 [ 869.875658][T19856] ? trace_pid_list_alloc+0x2fe/0x480 [ 869.875707][T19856] trace_pid_list_alloc+0x2fe/0x480 [ 869.875754][T19856] trace_pid_write+0x110/0x460 [ 869.875800][T19856] ? __pfx_trace_pid_write+0x10/0x10 [ 869.875868][T19856] event_pid_write.isra.0+0x1e4/0x800 [ 869.875902][T19856] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 869.875944][T19856] vfs_write+0x2aa/0x1070 [ 869.875975][T19856] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 869.876009][T19856] ? __pfx_vfs_write+0x10/0x10 [ 869.876037][T19856] ? __fget_files+0x215/0x3d0 [ 869.876087][T19856] ? __fget_files+0x21f/0x3d0 [ 869.876128][T19856] ksys_write+0x12a/0x250 [ 869.876158][T19856] ? __pfx_ksys_write+0x10/0x10 [ 869.876199][T19856] do_syscall_64+0x106/0xf80 [ 869.876231][T19856] ? clear_bhb_loop+0x40/0x90 [ 869.876267][T19856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.876297][T19856] RIP: 0033:0x7fae5e79c819 [ 869.876321][T19856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.876349][T19856] RSP: 002b:00007fae5f6a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 869.876376][T19856] RAX: ffffffffffffffda RBX: 00007fae5ea15fa0 RCX: 00007fae5e79c819 [ 869.876396][T19856] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 869.876414][T19856] RBP: 00007fae5e832c91 R08: 0000000000000000 R09: 0000000000000000 [ 869.876432][T19856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.876450][T19856] R13: 00007fae5ea16038 R14: 00007fae5ea15fa0 R15: 00007fff35a3bc28 [ 869.876490][T19856] [ 870.078787][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.091038][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.342062][T19878] futex_wake_op: syz.3.3291 tries to shift op by -2048; fix this program [ 870.434028][T19878] futex_wake_op: syz.3.3291 tries to shift op by -2048; fix this program [ 870.696917][T19887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 871.215912][T19887] openvswitch: HfR: Dropping previously announced user features [ 871.226267][T19894] ptrace attach of "./syz-executor exec"[15809] was attempted by ""[19894] [ 871.351763][T19894] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 871.519111][T19890] FAULT_INJECTION: forcing a failure. [ 871.519111][T19890] name failslab, interval 1, probability 0, space 0, times 0 [ 871.564699][T19890] CPU: 1 UID: 0 PID: 19890 Comm: syz.4.3294 Tainted: G U L syzkaller #0 PREEMPT(full) [ 871.564728][T19890] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 871.564734][T19890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 871.564744][T19890] Call Trace: [ 871.564750][T19890] [ 871.564756][T19890] dump_stack_lvl+0x100/0x190 [ 871.564785][T19890] should_fail_ex.cold+0x5/0xa [ 871.564804][T19890] should_failslab+0xc2/0x120 [ 871.564821][T19890] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 871.564844][T19890] ? vm_area_dup+0x27/0x8e0 [ 871.564869][T19890] vm_area_dup+0x27/0x8e0 [ 871.564892][T19890] __split_vma+0x18c/0xd90 [ 871.564921][T19890] ? __pfx___split_vma+0x10/0x10 [ 871.564954][T19890] ? __mpol_equal+0xaf/0x340 [ 871.564979][T19890] vma_modify+0x1121/0x2250 [ 871.565007][T19890] ? __pfx_vma_modify+0x10/0x10 [ 871.565034][T19890] vma_modify_policy+0x238/0x300 [ 871.565057][T19890] ? __pfx_vma_modify_policy+0x10/0x10 [ 871.565095][T19890] mbind_range+0x175/0x550 [ 871.565116][T19890] do_mbind+0x7dc/0xfd0 [ 871.565140][T19890] ? __might_fault+0xc5/0x140 [ 871.565161][T19890] ? __pfx_do_mbind+0x10/0x10 [ 871.565186][T19890] ? _copy_from_user+0x59/0xd0 [ 871.565211][T19890] ? __pfx_get_nodes+0x10/0x10 [ 871.565230][T19890] kernel_mbind+0x1b7/0x200 [ 871.565250][T19890] ? __pfx_kernel_mbind+0x10/0x10 [ 871.565275][T19890] do_syscall_64+0x106/0xf80 [ 871.565291][T19890] ? clear_bhb_loop+0x40/0x90 [ 871.565309][T19890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.565332][T19890] RIP: 0033:0x7f591979c819 [ 871.565346][T19890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.565361][T19890] RSP: 002b:00007f591a6bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 871.565376][T19890] RAX: ffffffffffffffda RBX: 00007f5919a15fa0 RCX: 00007f591979c819 [ 871.565387][T19890] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 871.565396][T19890] RBP: 00007f5919832c91 R08: 0000000000000003 R09: 0000000000000003 [ 871.565405][T19890] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 871.565414][T19890] R13: 00007f5919a16038 R14: 00007f5919a15fa0 R15: 00007ffd5a22d628 [ 871.565434][T19890] [ 872.019479][T19907] futex_wake_op: syz.2.3299 tries to shift op by -2048; fix this program [ 872.050128][T19910] futex_wake_op: syz.4.3298 tries to shift op by -2048; fix this program [ 873.818286][T19942] futex_wake_op: syz.4.3304 tries to shift op by -2048; fix this program [ 873.864316][T19944] futex_wake_op: syz.2.3305 tries to shift op by -2048; fix this program [ 875.087765][T19960] ptrace attach of "./syz-executor exec"[13359] was attempted by ""[19960] [ 875.145450][T19960] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 876.616051][T19987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3313'. [ 876.676020][T19984] bond0: invalid ARP target specified [ 877.293664][T20004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3317'. [ 877.338374][T20004] openvswitch: HfR: Dropping previously announced user features [ 877.539325][T20011] futex_wake_op: syz.3.3318 tries to shift op by -2048; fix this program [ 878.414676][ T30] audit: type=1804 audit(1775764284.120:62): pid=20020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3320" name="/newroot/375/file0" dev="tmpfs" ino=1958 res=1 errno=0 [ 878.749786][T20030] futex_wake_op: syz.4.3323 tries to shift op by -2048; fix this program [ 878.776209][ T30] audit: type=1804 audit(1775764284.480:63): pid=20031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3322" name="/newroot/214/file0" dev="tmpfs" ino=1118 res=1 errno=0 [ 879.466802][T20037] bond0: invalid ARP target specified [ 879.497640][T20037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3324'. [ 879.727766][T20040] zram: Cannot change disksize for initialized device [ 880.335572][ T30] audit: type=1804 audit(1775764286.040:64): pid=20049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3327" name="/newroot/217/file0" dev="tmpfs" ino=1134 res=1 errno=0 [ 880.474570][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3326'. [ 880.515885][T20047] openvswitch: HfR: Dropping previously announced user features [ 882.526068][T20070] futex_wake_op: syz.4.3333 tries to shift op by -2048; fix this program [ 883.166070][T20074] futex_wake_op: syz.2.3334 tries to shift op by -2048; fix this program [ 885.991824][T20103] futex_wake_op: syz.4.3340 tries to shift op by -2048; fix this program [ 887.305496][T20126] futex_wake_op: syz.0.3345 tries to shift op by -2048; fix this program [ 888.368369][ T30] audit: type=1804 audit(1775764294.070:65): pid=20137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3347" name="/newroot/234/file0" dev="tmpfs" ino=1227 res=1 errno=0 [ 888.602609][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 888.613253][T20132] openvswitch: HfR: Dropping previously announced user features [ 889.752562][T20152] futex_wake_op: syz.0.3351 tries to shift op by -2048; fix this program [ 890.204022][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3352'. [ 890.246934][T20159] openvswitch: HfR: Dropping previously announced user features [ 891.012751][T20166] zram: Cannot change disksize for initialized device [ 891.081402][T20168] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 3697530745 out of range (51000000..2150000000) [ 893.770338][T20204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3363'. [ 893.780962][T20204] openvswitch: HfR: Dropping previously announced user features [ 893.961809][T20198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'. [ 894.004883][T20198] openvswitch: HfR: Dropping previously announced user features [ 894.349536][T20206] futex_wake_op: syz.2.3364 tries to shift op by -2048; fix this program [ 894.727127][ T30] audit: type=1804 audit(1775764300.420:66): pid=20215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3366" name="/newroot/244/file0" dev="tmpfs" ino=1279 res=1 errno=0 [ 895.336057][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3368'. [ 895.600283][T20224] openvswitch: HfR: Dropping previously announced user features [ 895.615498][T20227] ptrace attach of "./syz-executor exec"[15809] was attempted by ""[20227] [ 895.630235][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3365'. [ 895.696910][T20212] openvswitch: HfR: Dropping previously announced user features [ 895.758081][T20227] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 896.306662][ T30] audit: type=1804 audit(1775764302.010:67): pid=20235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3372" name="/newroot/243/file0" dev="tmpfs" ino=1274 res=1 errno=0 [ 896.565852][T20241] futex_wake_op: syz.3.3375 tries to shift op by -2048; fix this program [ 898.894507][T20261] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3378'. [ 898.916659][T20261] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.925258][T20261] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.255162][ T30] audit: type=1804 audit(1775764306.950:68): pid=20285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3383" name="/newroot/235/file0" dev="tmpfs" ino=1230 res=1 errno=0 [ 902.404071][T20302] futex_wake_op: syz.0.3389 tries to shift op by -2048; fix this program [ 903.160969][T20308] futex_wake_op: syz.4.3390 tries to shift op by -2048; fix this program [ 904.254469][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3392'. [ 904.266186][T20318] openvswitch: HfR: Dropping previously announced user features [ 905.008280][T20340] bond0: invalid ARP target specified [ 905.040695][T20340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3398'. [ 905.296456][T20346] futex_wake_op: syz.4.3400 tries to shift op by -2048; fix this program [ 906.328085][ T30] audit: type=1804 audit(1775764312.030:69): pid=20361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3402" name="/newroot/393/file0" dev="tmpfs" ino=2050 res=1 errno=0 [ 906.515201][T20365] bond0: invalid ARP target specified [ 906.596232][T20365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3403'. [ 907.133124][T20370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3404'. [ 907.156926][T20370] openvswitch: HfR: Dropping previously announced user features [ 907.844725][T20382] futex_wake_op: syz.0.3407 tries to shift op by -2048; fix this program [ 908.025652][T20385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3408'. [ 908.288939][T20380] bond0: invalid ARP target specified [ 908.866916][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3409'. [ 908.968419][T20392] openvswitch: HfR: Dropping previously announced user features [ 908.992279][T20395] futex_wake_op: syz.0.3410 tries to shift op by -2048; fix this program [ 909.978527][T20402] futex_wake_op: syz.4.3411 tries to shift op by -2048; fix this program [ 911.409182][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 911.420941][T20426] openvswitch: HfR: Dropping previously announced user features [ 912.239210][T20439] futex_wake_op: syz.0.3420 tries to shift op by -2048; fix this program [ 912.990137][T20447] futex_wake_op: syz.2.3421 tries to shift op by -2048; fix this program [ 913.779381][T20459] zram: Cannot change disksize for initialized device [ 915.090530][T20482] FAULT_INJECTION: forcing a failure. [ 915.090530][T20482] name failslab, interval 1, probability 0, space 0, times 0 [ 915.114486][T20482] CPU: 0 UID: 0 PID: 20482 Comm: syz.2.3425 Tainted: G U L syzkaller #0 PREEMPT(full) [ 915.114516][T20482] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 915.114522][T20482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 915.114532][T20482] Call Trace: [ 915.114538][T20482] [ 915.114545][T20482] dump_stack_lvl+0x100/0x190 [ 915.114573][T20482] should_fail_ex.cold+0x5/0xa [ 915.114591][T20482] should_failslab+0xc2/0x120 [ 915.114609][T20482] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 915.114632][T20482] ? create_new_namespaces+0x30/0xac0 [ 915.114664][T20482] ? rcu_is_watching+0x12/0xc0 [ 915.114691][T20482] create_new_namespaces+0x30/0xac0 [ 915.114707][T20482] ? bpf_lsm_capable+0x9/0x10 [ 915.114724][T20482] ? security_capable+0x80/0x260 [ 915.114742][T20482] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 915.114767][T20482] ksys_unshare+0x473/0xad0 [ 915.114789][T20482] ? __pfx_ksys_unshare+0x10/0x10 [ 915.114810][T20482] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 915.114832][T20482] ? syscall_user_dispatch+0x76/0x130 [ 915.114855][T20482] __x64_sys_unshare+0x31/0x40 [ 915.114875][T20482] do_syscall_64+0x106/0xf80 [ 915.114891][T20482] ? clear_bhb_loop+0x40/0x90 [ 915.114914][T20482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.114930][T20482] RIP: 0033:0x7fbd0f79c819 [ 915.114944][T20482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.114959][T20482] RSP: 002b:00007fbd10588028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 915.114974][T20482] RAX: ffffffffffffffda RBX: 00007fbd0fa16180 RCX: 00007fbd0f79c819 [ 915.114985][T20482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 915.114993][T20482] RBP: 00007fbd0f832c91 R08: 0000000000000000 R09: 0000000000000000 [ 915.115002][T20482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.115011][T20482] R13: 00007fbd0fa16218 R14: 00007fbd0fa16180 R15: 00007ffcd7b64e18 [ 915.115031][T20482] [ 915.469185][T20488] bond0: invalid ARP target specified [ 916.177484][T20501] futex_wake_op: syz.3.3431 tries to shift op by -2048; fix this program [ 916.673992][T20514] futex_wake_op: syz.4.3435 tries to shift op by -2048; fix this program [ 916.925796][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'. [ 917.043178][T20521] openvswitch: HfR: Dropping previously announced user features [ 917.613143][ T30] audit: type=1804 audit(1775764323.290:70): pid=20525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3438" name="/newroot/255/file0" dev="tmpfs" ino=1336 res=1 errno=0 [ 917.832469][T20527] bond0: invalid ARP target specified [ 919.357730][T20558] futex_wake_op: syz.4.3446 tries to shift op by -2048; fix this program [ 919.482980][T20562] futex_wake_op: syz.3.3447 tries to shift op by -2048; fix this program [ 919.805890][T20570] bond0: invalid ARP target specified [ 920.092250][T20570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3448'. [ 920.424087][T20575] FAULT_INJECTION: forcing a failure. [ 920.424087][T20575] name failslab, interval 1, probability 0, space 0, times 0 [ 920.454741][T20575] CPU: 0 UID: 0 PID: 20575 Comm: syz.4.3449 Tainted: G U L syzkaller #0 PREEMPT(full) [ 920.454768][T20575] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 920.454774][T20575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 920.454783][T20575] Call Trace: [ 920.454788][T20575] [ 920.454794][T20575] dump_stack_lvl+0x100/0x190 [ 920.454822][T20575] should_fail_ex.cold+0x5/0xa [ 920.454840][T20575] ? tomoyo_realpath_from_path+0xb6/0x690 [ 920.454862][T20575] should_failslab+0xc2/0x120 [ 920.454880][T20575] __kmalloc_noprof+0xe0/0x850 [ 920.454921][T20575] tomoyo_realpath_from_path+0xb6/0x690 [ 920.454964][T20575] tomoyo_check_open_permission+0x2af/0x3c0 [ 920.454985][T20575] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 920.455021][T20575] ? lock_acquire+0x1cf/0x380 [ 920.455040][T20575] ? find_held_lock+0x2b/0x80 [ 920.455060][T20575] tomoyo_file_open+0x6b/0x90 [ 920.455075][T20575] security_file_open+0xb5/0x1e0 [ 920.455096][T20575] do_dentry_open+0x5aa/0x1660 [ 920.455118][T20575] vfs_open+0x82/0x3f0 [ 920.455140][T20575] path_openat+0x208c/0x31a0 [ 920.455163][T20575] ? __pfx_path_openat+0x10/0x10 [ 920.455186][T20575] do_file_open+0x20e/0x430 [ 920.455204][T20575] ? __pfx_do_file_open+0x10/0x10 [ 920.455228][T20575] ? __pfx_kfree_link+0x10/0x10 [ 920.455255][T20575] ? alloc_fd+0x476/0x790 [ 920.455279][T20575] ? do_getname+0x191/0x390 [ 920.455300][T20575] do_sys_openat2+0x10d/0x1e0 [ 920.455321][T20575] ? __pfx_do_sys_openat2+0x10/0x10 [ 920.455349][T20575] __x64_sys_openat+0x12d/0x210 [ 920.455370][T20575] ? __pfx___x64_sys_openat+0x10/0x10 [ 920.455398][T20575] do_syscall_64+0x106/0xf80 [ 920.455415][T20575] ? clear_bhb_loop+0x40/0x90 [ 920.455434][T20575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.455450][T20575] RIP: 0033:0x7f591975d04e [ 920.455463][T20575] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 920.455478][T20575] RSP: 002b:00007f591a6bcf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 920.455492][T20575] RAX: ffffffffffffffda RBX: 00007f591a6bd6c0 RCX: 00007f591975d04e [ 920.455502][T20575] RDX: 0000000000000002 RSI: 00007f5919832598 RDI: ffffffffffffff9c [ 920.455511][T20575] RBP: 00007f5919832c91 R08: 0000000000000000 R09: 0000000000000000 [ 920.455523][T20575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 920.455531][T20575] R13: 00007f5919a16038 R14: 00007f5919a15fa0 R15: 00007ffd5a22d628 [ 920.455551][T20575] [ 920.455558][T20575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 920.724216][T20575] FAULT_INJECTION: forcing a failure. [ 920.724216][T20575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.776807][T20575] CPU: 0 UID: 0 PID: 20575 Comm: syz.4.3449 Tainted: G U L syzkaller #0 PREEMPT(full) [ 920.776835][T20575] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 920.776841][T20575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 920.776850][T20575] Call Trace: [ 920.776855][T20575] [ 920.776861][T20575] dump_stack_lvl+0x100/0x190 [ 920.776889][T20575] should_fail_ex.cold+0x5/0xa [ 920.776908][T20575] core_sys_select+0x9b9/0xbb0 [ 920.776928][T20575] ? __pfx_core_sys_select+0x10/0x10 [ 920.776943][T20575] ? get_pid_task+0xfc/0x250 [ 920.776980][T20575] ? ktime_get_ts64+0x2d2/0x3f0 [ 920.776998][T20575] ? read_tsc+0x9/0x20 [ 920.777015][T20575] ? ktime_get_ts64+0x256/0x3f0 [ 920.777034][T20575] kern_select+0x20c/0x270 [ 920.777050][T20575] ? __pfx_kern_select+0x10/0x10 [ 920.777067][T20575] ? __pfx_ksys_write+0x10/0x10 [ 920.777085][T20575] __x64_sys_select+0xbd/0x160 [ 920.777099][T20575] ? do_syscall_64+0x95/0xf80 [ 920.777116][T20575] ? lockdep_hardirqs_on+0x78/0x100 [ 920.777132][T20575] do_syscall_64+0x106/0xf80 [ 920.777147][T20575] ? clear_bhb_loop+0x40/0x90 [ 920.777166][T20575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.777181][T20575] RIP: 0033:0x7f591979c819 [ 920.777194][T20575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.777208][T20575] RSP: 002b:00007f591a6bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 920.777223][T20575] RAX: ffffffffffffffda RBX: 00007f5919a15fa0 RCX: 00007f591979c819 [ 920.777233][T20575] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000001 [ 920.777249][T20575] RBP: 00007f591a6bd090 R08: 0000200000000200 R09: 0000000000000000 [ 920.777258][T20575] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 920.777268][T20575] R13: 00007f5919a16038 R14: 00007f5919a15fa0 R15: 00007ffd5a22d628 [ 920.777287][T20575] [ 921.089648][T20578] FAULT_INJECTION: forcing a failure. [ 921.089648][T20578] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 921.175983][T20578] CPU: 1 UID: 0 PID: 20578 Comm: syz.3.3451 Tainted: G U L syzkaller #0 PREEMPT(full) [ 921.176035][T20578] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 921.176047][T20578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 921.176065][T20578] Call Trace: [ 921.176075][T20578] [ 921.176086][T20578] dump_stack_lvl+0x100/0x190 [ 921.176138][T20578] should_fail_ex.cold+0x5/0xa [ 921.176166][T20578] ? prepare_alloc_pages+0x16d/0x5f0 [ 921.176205][T20578] should_fail_alloc_page+0xeb/0x140 [ 921.176242][T20578] prepare_alloc_pages+0x1f0/0x5f0 [ 921.176277][T20578] ? bpf_ksym_find+0x124/0x1c0 [ 921.176319][T20578] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 921.176369][T20578] ? __kernel_text_address+0xd/0x30 [ 921.176412][T20578] ? unwind_get_return_address+0x59/0xa0 [ 921.176446][T20578] ? arch_stack_walk+0xa6/0xf0 [ 921.176496][T20578] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 921.176543][T20578] ? stack_trace_save+0x8e/0xc0 [ 921.176573][T20578] ? __pfx_stack_trace_save+0x10/0x10 [ 921.176608][T20578] ? stack_depot_save_flags+0x27/0x9d0 [ 921.176657][T20578] ? kasan_save_stack+0x30/0x50 [ 921.176684][T20578] ? kasan_save_track+0x14/0x30 [ 921.176711][T20578] ? __kasan_kmalloc+0xaa/0xb0 [ 921.176737][T20578] ? ring_buffer_read_start+0x149/0x460 [ 921.176781][T20578] ? tracing_open+0x9cd/0xef0 [ 921.176815][T20578] ? do_dentry_open+0x6d8/0x1660 [ 921.176844][T20578] ? vfs_open+0x82/0x3f0 [ 921.176879][T20578] ? path_openat+0x208c/0x31a0 [ 921.176909][T20578] ? do_file_open+0x20e/0x430 [ 921.176938][T20578] ? do_sys_openat2+0x10d/0x1e0 [ 921.176975][T20578] ? __x64_sys_openat+0x12d/0x210 [ 921.177014][T20578] ? do_syscall_64+0x106/0xf80 [ 921.177044][T20578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.177078][T20578] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 921.177111][T20578] ? policy_nodemask+0xed/0x4f0 [ 921.177145][T20578] alloc_pages_mpol+0x1fb/0x550 [ 921.177190][T20578] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 921.177232][T20578] ? ring_buffer_read_start+0x1b9/0x460 [ 921.177274][T20578] ___kmalloc_large_node+0x104/0x150 [ 921.177315][T20578] __kmalloc_large_node_noprof+0x1c/0x70 [ 921.177356][T20578] __kmalloc_noprof+0x5be/0x850 [ 921.177410][T20578] ring_buffer_read_start+0x1b9/0x460 [ 921.177462][T20578] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 921.177507][T20578] ? lockdep_init_map_type+0x5c/0x250 [ 921.177551][T20578] ? ring_buffer_overruns+0x14e/0x1a0 [ 921.177592][T20578] tracing_open+0x9cd/0xef0 [ 921.177637][T20578] do_dentry_open+0x6d8/0x1660 [ 921.177668][T20578] ? __pfx_tracing_open+0x10/0x10 [ 921.177719][T20578] vfs_open+0x82/0x3f0 [ 921.177762][T20578] path_openat+0x208c/0x31a0 [ 921.177809][T20578] ? __pfx_path_openat+0x10/0x10 [ 921.177856][T20578] do_file_open+0x20e/0x430 [ 921.177893][T20578] ? __pfx_do_file_open+0x10/0x10 [ 921.177954][T20578] ? alloc_fd+0x476/0x790 [ 921.177990][T20578] ? do_getname+0x191/0x390 [ 921.178033][T20578] do_sys_openat2+0x10d/0x1e0 [ 921.178074][T20578] ? __pfx_do_sys_openat2+0x10/0x10 [ 921.178118][T20578] ? __fget_files+0x21f/0x3d0 [ 921.178157][T20578] __x64_sys_openat+0x12d/0x210 [ 921.178198][T20578] ? __pfx___x64_sys_openat+0x10/0x10 [ 921.178255][T20578] do_syscall_64+0x106/0xf80 [ 921.178285][T20578] ? clear_bhb_loop+0x40/0x90 [ 921.178321][T20578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.178352][T20578] RIP: 0033:0x7fe92379c819 [ 921.178377][T20578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.178407][T20578] RSP: 002b:00007fe9219f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 921.178436][T20578] RAX: ffffffffffffffda RBX: 00007fe923a15fa0 RCX: 00007fe92379c819 [ 921.178462][T20578] RDX: 1a6b75d638828712 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 921.178482][T20578] RBP: 00007fe923832c91 R08: 0000000000000000 R09: 0000000000000000 [ 921.178500][T20578] R10: 00000000000000ea R11: 0000000000000246 R12: 0000000000000000 [ 921.178518][T20578] R13: 00007fe923a16038 R14: 00007fe923a15fa0 R15: 00007ffc6669b7a8 [ 921.178558][T20578] [ 921.803642][T20588] zram: Cannot change disksize for initialized device [ 922.695156][T20602] FAULT_INJECTION: forcing a failure. [ 922.695156][T20602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 922.738361][T20602] CPU: 1 UID: 0 PID: 20602 Comm: syz.4.3457 Tainted: G U L syzkaller #0 PREEMPT(full) [ 922.738390][T20602] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 922.738396][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 922.738405][T20602] Call Trace: [ 922.738410][T20602] [ 922.738417][T20602] dump_stack_lvl+0x100/0x190 [ 922.738447][T20602] should_fail_ex.cold+0x5/0xa [ 922.738463][T20602] ? prepare_alloc_pages+0x16d/0x5f0 [ 922.738483][T20602] should_fail_alloc_page+0xeb/0x140 [ 922.738501][T20602] prepare_alloc_pages+0x1f0/0x5f0 [ 922.738522][T20602] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 922.738546][T20602] ? finish_task_switch.isra.0+0x205/0xb80 [ 922.738563][T20602] ? lockdep_hardirqs_on+0x78/0x100 [ 922.738580][T20602] ? finish_task_switch.isra.0+0x205/0xb80 [ 922.738596][T20602] ? rcu_is_watching+0x12/0xc0 [ 922.738631][T20602] ? trace_sched_exit_tp+0x13a/0x180 [ 922.738662][T20602] ? __schedule+0x1000/0x6120 [ 922.738686][T20602] ? find_held_lock+0x2b/0x80 [ 922.738717][T20602] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 922.738775][T20602] ? do_raw_spin_lock+0x128/0x260 [ 922.738813][T20602] ? find_held_lock+0x2b/0x80 [ 922.738843][T20602] ? find_held_lock+0x2b/0x80 [ 922.738866][T20602] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 922.738897][T20602] ? policy_nodemask+0xed/0x4f0 [ 922.738931][T20602] alloc_pages_mpol+0x1fb/0x550 [ 922.738964][T20602] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 922.739003][T20602] ? __seq_open_private+0x22/0xd0 [ 922.739041][T20602] ___kmalloc_large_node+0x104/0x150 [ 922.739082][T20602] ? ring_buffer_reset_online_cpus+0x2a7/0x370 [ 922.739116][T20602] __kmalloc_large_node_noprof+0x1c/0x70 [ 922.739148][T20602] ? ring_buffer_record_enable+0x1b/0x30 [ 922.739185][T20602] __kmalloc_noprof+0x5be/0x850 [ 922.739234][T20602] __seq_open_private+0x22/0xd0 [ 922.739276][T20602] tracing_open+0x2a8/0xef0 [ 922.739316][T20602] do_dentry_open+0x6d8/0x1660 [ 922.739346][T20602] ? __pfx_tracing_open+0x10/0x10 [ 922.739389][T20602] vfs_open+0x82/0x3f0 [ 922.739429][T20602] path_openat+0x208c/0x31a0 [ 922.739472][T20602] ? __pfx_path_openat+0x10/0x10 [ 922.739516][T20602] do_file_open+0x20e/0x430 [ 922.739549][T20602] ? __pfx_do_file_open+0x10/0x10 [ 922.739608][T20602] ? alloc_fd+0x476/0x790 [ 922.739640][T20602] ? do_getname+0x191/0x390 [ 922.739679][T20602] do_sys_openat2+0x10d/0x1e0 [ 922.739716][T20602] ? __pfx_do_sys_openat2+0x10/0x10 [ 922.739751][T20602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 922.739789][T20602] ? __fget_files+0x21f/0x3d0 [ 922.739823][T20602] __x64_sys_openat+0x12d/0x210 [ 922.739860][T20602] ? __pfx___x64_sys_openat+0x10/0x10 [ 922.739914][T20602] do_syscall_64+0x106/0xf80 [ 922.739942][T20602] ? clear_bhb_loop+0x40/0x90 [ 922.739977][T20602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.740005][T20602] RIP: 0033:0x7f591979c819 [ 922.740026][T20602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.740050][T20602] RSP: 002b:00007f591a6bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 922.740082][T20602] RAX: ffffffffffffffda RBX: 00007f5919a15fa0 RCX: 00007f591979c819 [ 922.740101][T20602] RDX: 1a6b75d638828712 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 922.740119][T20602] RBP: 00007f591a6bd090 R08: 0000000000000000 R09: 0000000000000000 [ 922.740134][T20602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.740149][T20602] R13: 00007f5919a16038 R14: 00007f5919a15fa0 R15: 00007ffd5a22d628 [ 922.740185][T20602] [ 923.182740][T20604] futex_wake_op: syz.2.3459 tries to shift op by -2048; fix this program [ 923.201052][T20606] bond0: invalid ARP target specified [ 923.232312][T20606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3460'. [ 923.263380][T20608] futex_wake_op: syz.4.3458 tries to shift op by -2048; fix this program [ 923.362359][T20608] futex_wake_op: syz.4.3458 tries to shift op by -2048; fix this program [ 925.223496][T20641] zram: Cannot change disksize for initialized device [ 925.819213][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3468'. [ 925.839507][T20646] openvswitch: HfR: Dropping previously announced user features [ 925.986752][ T30] audit: type=1804 audit(1775764331.690:71): pid=20652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3469" name="/newroot/413/file0" dev="tmpfs" ino=2154 res=1 errno=0 [ 926.184892][T20654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3470'. [ 926.476719][T20653] bond0: invalid ARP target specified [ 927.087251][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3474'. [ 927.105991][T20666] openvswitch: HfR: Dropping previously announced user features [ 929.079310][T20684] zram: Cannot change disksize for initialized device [ 929.437210][T20686] ================================================================== [ 929.437244][T20686] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 929.437301][T20686] Write of size 8 at addr ffffc90004029000 by task syz.0.3480/20686 [ 929.437329][T20686] [ 929.437347][T20686] CPU: 0 UID: 0 PID: 20686 Comm: syz.0.3480 Tainted: G U L syzkaller #0 PREEMPT(full) [ 929.437393][T20686] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 929.437405][T20686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 929.437429][T20686] Call Trace: [ 929.437439][T20686] [ 929.437451][T20686] dump_stack_lvl+0x100/0x190 [ 929.437497][T20686] print_report+0x156/0x4c9 [ 929.437538][T20686] ? _raw_spin_lock_irqsave+0x52/0x60 [ 929.437589][T20686] ? sys_imageblit+0x19fb/0x1d60 [ 929.437634][T20686] kasan_report+0xdf/0x1e0 [ 929.437668][T20686] ? sys_imageblit+0x19fb/0x1d60 [ 929.437716][T20686] sys_imageblit+0x19fb/0x1d60 [ 929.437766][T20686] ? __pfx_sys_imageblit+0x10/0x10 [ 929.437812][T20686] ? prb_read_valid+0x78/0xa0 [ 929.437852][T20686] ? __pfx_prb_read_valid+0x10/0x10 [ 929.437894][T20686] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 929.437931][T20686] soft_cursor+0x524/0xa10 [ 929.437972][T20686] ? fb_get_color_depth+0x120/0x250 [ 929.438010][T20686] bit_cursor+0xe58/0x16f0 [ 929.438053][T20686] ? __pfx_bit_cursor+0x10/0x10 [ 929.438090][T20686] ? __lock_acquire+0x4a5/0x2630 [ 929.438133][T20686] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 929.438165][T20686] ? get_color+0x1da/0x450 [ 929.438197][T20686] ? __pfx_bit_cursor+0x10/0x10 [ 929.438233][T20686] fbcon_cursor+0x43c/0x5e0 [ 929.438266][T20686] ? add_softcursor+0x180/0x290 [ 929.438308][T20686] set_cursor+0x1db/0x250 [ 929.438348][T20686] con_write+0x89/0xb0 [ 929.438374][T20686] do_output_char+0x63b/0x850 [ 929.438407][T20686] n_tty_write+0x528/0x12d0 [ 929.438454][T20686] ? __pfx_n_tty_write+0x10/0x10 [ 929.438491][T20686] ? __pfx_woken_wake_function+0x10/0x10 [ 929.438540][T20686] ? __pfx___might_resched+0x10/0x10 [ 929.438587][T20686] ? __pfx_n_tty_write+0x10/0x10 [ 929.438622][T20686] file_tty_write.isra.0+0x4d2/0x890 [ 929.438674][T20686] redirected_tty_write+0xd4/0x120 [ 929.438720][T20686] vfs_write+0x6ac/0x1070 [ 929.438749][T20686] ? __pfx_redirected_tty_write+0x10/0x10 [ 929.438798][T20686] ? __pfx_vfs_write+0x10/0x10 [ 929.438824][T20686] ? find_held_lock+0x2b/0x80 [ 929.438864][T20686] ksys_write+0x12a/0x250 [ 929.438892][T20686] ? __pfx_ksys_write+0x10/0x10 [ 929.438927][T20686] do_syscall_64+0x106/0xf80 [ 929.438957][T20686] ? clear_bhb_loop+0x40/0x90 [ 929.438991][T20686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.439021][T20686] RIP: 0033:0x7fae5e79c819 [ 929.439045][T20686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.439075][T20686] RSP: 002b:00007fae5f6a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 929.439104][T20686] RAX: ffffffffffffffda RBX: 00007fae5ea15fa0 RCX: 00007fae5e79c819 [ 929.439125][T20686] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 929.439145][T20686] RBP: 00007fae5e832c91 R08: 0000000000000000 R09: 0000000000000000 [ 929.439164][T20686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.439183][T20686] R13: 00007fae5ea16038 R14: 00007fae5ea15fa0 R15: 00007fff35a3bc28 [ 929.439214][T20686] [ 929.439225][T20686] [ 929.439234][T20686] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003d29000 allocated at drm_gem_shmem_vmap_locked+0x54b/0x800 [ 929.439288][T20686] Memory state around the buggy address: [ 929.439305][T20686] ffffc90004028f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 929.439333][T20686] ffffc90004028f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 929.439356][T20686] >ffffc90004029000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 929.439373][T20686] ^ [ 929.439389][T20686] ffffc90004029080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 929.439411][T20686] ffffc90004029100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 929.439434][T20686] ================================================================== [ 929.439458][T20686] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 929.439482][T20686] CPU: 0 UID: 0 PID: 20686 Comm: syz.0.3480 Tainted: G U L syzkaller #0 PREEMPT(full) [ 929.439529][T20686] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 929.439541][T20686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 929.439559][T20686] Call Trace: [ 929.439570][T20686] [ 929.439582][T20686] dump_stack_lvl+0x100/0x190 [ 929.439626][T20686] vpanic+0x552/0x970 [ 929.439654][T20686] ? __pfx_vpanic+0x10/0x10 [ 929.439682][T20686] ? __pfx_vprintk_emit+0x10/0x10 [ 929.439716][T20686] ? sys_imageblit+0x19fb/0x1d60 [ 929.439760][T20686] panic+0xd1/0xe0 [ 929.439787][T20686] ? __pfx_panic+0x10/0x10 [ 929.439819][T20686] ? sys_imageblit+0x19fb/0x1d60 [ 929.439866][T20686] check_panic_on_warn.cold+0x19/0x34 [ 929.439899][T20686] end_report.part.0+0x3a/0x90 [ 929.439940][T20686] kasan_report.cold+0xe/0x18 [ 929.439981][T20686] ? sys_imageblit+0x19fb/0x1d60 [ 929.440031][T20686] sys_imageblit+0x19fb/0x1d60 [ 929.440081][T20686] ? __pfx_sys_imageblit+0x10/0x10 [ 929.440128][T20686] ? prb_read_valid+0x78/0xa0 [ 929.440168][T20686] ? __pfx_prb_read_valid+0x10/0x10 [ 929.440212][T20686] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 929.440248][T20686] soft_cursor+0x524/0xa10 [ 929.440290][T20686] ? fb_get_color_depth+0x120/0x250 [ 929.440328][T20686] bit_cursor+0xe58/0x16f0 [ 929.440370][T20686] ? __pfx_bit_cursor+0x10/0x10 [ 929.440408][T20686] ? __lock_acquire+0x4a5/0x2630 [ 929.440456][T20686] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 929.440489][T20686] ? get_color+0x1da/0x450 [ 929.440521][T20686] ? __pfx_bit_cursor+0x10/0x10 [ 929.440558][T20686] fbcon_cursor+0x43c/0x5e0 [ 929.440592][T20686] ? add_softcursor+0x180/0x290 [ 929.440639][T20686] set_cursor+0x1db/0x250 [ 929.440678][T20686] con_write+0x89/0xb0 [ 929.440706][T20686] do_output_char+0x63b/0x850 [ 929.440739][T20686] n_tty_write+0x528/0x12d0 [ 929.440781][T20686] ? __pfx_n_tty_write+0x10/0x10 [ 929.440816][T20686] ? __pfx_woken_wake_function+0x10/0x10 [ 929.440864][T20686] ? __pfx___might_resched+0x10/0x10 [ 929.440909][T20686] ? __pfx_n_tty_write+0x10/0x10 [ 929.440944][T20686] file_tty_write.isra.0+0x4d2/0x890 [ 929.440996][T20686] redirected_tty_write+0xd4/0x120 [ 929.441042][T20686] vfs_write+0x6ac/0x1070 [ 929.441072][T20686] ? __pfx_redirected_tty_write+0x10/0x10 [ 929.441121][T20686] ? __pfx_vfs_write+0x10/0x10 [ 929.441148][T20686] ? find_held_lock+0x2b/0x80 [ 929.441189][T20686] ksys_write+0x12a/0x250 [ 929.441218][T20686] ? __pfx_ksys_write+0x10/0x10 [ 929.441252][T20686] do_syscall_64+0x106/0xf80 [ 929.441284][T20686] ? clear_bhb_loop+0x40/0x90 [ 929.441318][T20686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.441349][T20686] RIP: 0033:0x7fae5e79c819 [ 929.441372][T20686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.441402][T20686] RSP: 002b:00007fae5f6a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 929.441436][T20686] RAX: ffffffffffffffda RBX: 00007fae5ea15fa0 RCX: 00007fae5e79c819 [ 929.441459][T20686] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 929.441479][T20686] RBP: 00007fae5e832c91 R08: 0000000000000000 R09: 0000000000000000 [ 929.441498][T20686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.441518][T20686] R13: 00007fae5ea16038 R14: 00007fae5ea15fa0 R15: 00007fff35a3bc28 [ 929.441548][T20686] [ 929.441892][T20686] Kernel Offset: disabled