last executing test programs: 51.660339528s ago: executing program 1 (id=994): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x515400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb0, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x8a8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0xffffffffffffffff, 0x400008, 0x2, 0x18, r2, 0x8000) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x800, 0xf) socket(0x26, 0xa, 0x84) mmap$auto(0x0, 0x400, 0xffffffff, 0xdc, r0, 0x7ffc) prctl$auto(0xe, 0x100, 0x0, 0x20000005, 0x5) madvise$auto(0x10000000000001, 0x200, 0xbfffffc) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x8, 0xe, 0xfffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 50.253316586s ago: executing program 1 (id=1002): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/sched_rt_period_us\x00', 0x103a02, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xebe, 0x40000000000a5, 0x7) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop14\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3fc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7ffb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r4 = eventfd$auto(0xfffffffc) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000000c0)=""/79, 0x4f) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) msgget$auto(0x9f24, 0x4) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x800000000000005) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram7\x00', 0x210401, 0x0) sendfile$auto(0x3, r5, 0x0, 0x400000000006) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x400500, 0x4, 0x5, 0x1000000000007) 49.28906669s ago: executing program 1 (id=1007): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x22}, 0x0) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r0, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x5, 0x202000a, 0x87cf, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x6) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0xffffffffffffffff, 0x300000000000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, 0x0, 0x80400, 0x0) io_uring_setup$auto(0x5, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_GET_TXSC(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="9ddf28bd6c89fbdbdf2500"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) getsockopt$auto_SO_RCVBUF(0xffffffffffffffff, 0x9, 0x8, 0x0, &(0x7f00000000c0)=0x9) mmap$auto(0xf5e, 0x2020001, 0x80000002, 0x4fa, 0xfffffffffffffffa, 0x7ffb) socket(0x15, 0x5, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, r3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) rt_sigpending$auto(0x0, 0x7ffffffff000) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) socket(0x25, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6c) msgctl$auto_IPC_SET(0x3e54, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) 47.745086756s ago: executing program 1 (id=1008): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) timer_create$auto(0x9, 0x0, 0x0) sysfs$auto(0x2, 0x100000000000038, 0x0) r0 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000a40)=""/4096, 0x1000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) 46.718880475s ago: executing program 1 (id=1014): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) r1 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0xb, 0x8ff9, 0x10400, 0x1000006, 0x4, 0x3, r0, [0x0, 0x0, 0x100000], {0x7, 0x200004, 0x4, 0x2a3, 0x100, 0x3, 0x40100101, 0x6, 0x5}, {0x400000f8, 0x4, 0x9, 0xd, 0x3, 0x40, 0x60, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async) socketpair$auto(0x6, 0x2, 0x20000007, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x9, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0x8001, 0xa, 0xae, 0x200000c, 0xffffffffffffff81, 0xffffffff, 0x7fffffffffffffff, 0x200008000, 0x1000, 0xc, 0x9, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter$auto(0x3, 0x4, 0xffffffff, 0x6, 0x0, 0x2) setsockopt$auto_SO_SNDBUFFORCE(r1, 0x1000, 0x20, &(0x7f0000000040)='}\x00', 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) socket(0xa, 0x2, 0x0) (async) r5 = socket(0xa, 0x801, 0x84) epoll_ctl$auto_EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r2, 0x3314, 0x0) 46.216033705s ago: executing program 1 (id=1017): bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) (async) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x50, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x80}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xa}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x3a, 0x5, "bf3b49c37804e8010cdbd3173a360fee2ebca04f786134878f2423314a148988c30ad9d3484077a2b13edbb8843cd472454c2a1136ec"}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x40c1) (async) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) (async) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = socket(0xa, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r2, 0x400454ca, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x190, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_NAN_FUNC={0x17c, 0xf0, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @u32=0x2}, @typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@remote}, @typed={0xc, 0x2f, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x134, 0xa, 0x0, 0x1, [@generic="f21c12a1aa8bcf02fad80b9e13a53d5b9886f43432438a76a09f559f7cf36a5ca819bc44778ba5a71ee2e1eadf10c45a2e083c270146963c5ed1ff2571cd065b2c82feeee9684fb272714ae4a0cdc75058fc80741e266f5a637dc82e16b12ebe8619b2c09a4603ec5905f89fa046e1a747d4fba9fc51d8", @generic="194a705f151e1bc50d8e8ddd41ccbb0dd4a0bf2a30feb4e4bd4821f9e1b7c377602d58bd9dbb733d550d6c157505a25d1eefe4ccef2ae293fc2efc86ef690ce71de5b8aff4884799ff132653c7632e5be5629740c89cebe48e62f09a156629f6c107b6cff5a6d615f5765a60cee5824bc391b218d90bc50ef75223442a2d9a9e4a38478df1765f70c4a48f0a131c6934c6e6f3289fdc0dbcf41e02e3c4c38080f405da85c22d951f11151ed27120b9c7b11b234c65122fecad"]}, @typed={0x8, 0x153, 0x0, 0x0, @fd=r0}, @typed={0x14, 0xa8, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x43}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x13, r2, 0x7fffffffffffffff) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7k\x00\x00\x00\x00X\xb9\x0e\x11\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xf5\\\xad4\t\xca\x03\xe4\x15\v]\x00'/58, 0x82) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffedf, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='j'], 0x1ac}}, 0x20000040) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 31.148536719s ago: executing program 32 (id=1017): bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) (async) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x50, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x80}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xa}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x3a, 0x5, "bf3b49c37804e8010cdbd3173a360fee2ebca04f786134878f2423314a148988c30ad9d3484077a2b13edbb8843cd472454c2a1136ec"}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x40c1) (async) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) (async) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = socket(0xa, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r2, 0x400454ca, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x190, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_NAN_FUNC={0x17c, 0xf0, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @u32=0x2}, @typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@remote}, @typed={0xc, 0x2f, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x134, 0xa, 0x0, 0x1, [@generic="f21c12a1aa8bcf02fad80b9e13a53d5b9886f43432438a76a09f559f7cf36a5ca819bc44778ba5a71ee2e1eadf10c45a2e083c270146963c5ed1ff2571cd065b2c82feeee9684fb272714ae4a0cdc75058fc80741e266f5a637dc82e16b12ebe8619b2c09a4603ec5905f89fa046e1a747d4fba9fc51d8", @generic="194a705f151e1bc50d8e8ddd41ccbb0dd4a0bf2a30feb4e4bd4821f9e1b7c377602d58bd9dbb733d550d6c157505a25d1eefe4ccef2ae293fc2efc86ef690ce71de5b8aff4884799ff132653c7632e5be5629740c89cebe48e62f09a156629f6c107b6cff5a6d615f5765a60cee5824bc391b218d90bc50ef75223442a2d9a9e4a38478df1765f70c4a48f0a131c6934c6e6f3289fdc0dbcf41e02e3c4c38080f405da85c22d951f11151ed27120b9c7b11b234c65122fecad"]}, @typed={0x8, 0x153, 0x0, 0x0, @fd=r0}, @typed={0x14, 0xa8, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x43}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x13, r2, 0x7fffffffffffffff) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7k\x00\x00\x00\x00X\xb9\x0e\x11\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xf5\\\xad4\t\xca\x03\xe4\x15\v]\x00'/58, 0x82) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffedf, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='j'], 0x1ac}}, 0x20000040) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 11.158237795s ago: executing program 0 (id=1109): sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2404c800) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x8}, 0x80000001) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=&(0x7f0000000280)="b6430e05cc418dce02dc65d20009011f736fc6e93c3f8ace328de68d3c284bb8a9f0d9f6b85e3de515ec5eea4816a0fb8a2b58967852493736417327509d4f47cbdf2b0d1648d40109fe13586de8680b0b8f25906817012e1f616308f6960bea749d7af92c11324327acfd7d8703f0339faf52e6b0fb4ed99999612851e4d66981787dd658ae3154f95e3de047d5bfd741d9cc2d53bebc9e40b3df27a8dbe7f1ccc1c8281b361eeb41730dbc3532640eab17c70f06", 0x800c000, 0x4800c000, 0x80000000}, 0x4) sysfs$auto(0x2, 0x23, 0x0) fsopen$auto(0x0, 0x1) r0 = socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x106) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) write$auto(r2, &(0x7f0000000340)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\xff\xcf\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x\x00\x80\x00\x00\x00\x00\x00\x00-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\x9a\xc4\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44o\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\x03\x00@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xbb\x7f\xa5\x87\x02\x87\xbbR\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xcau6^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1Tz\xc1;Pw!\x8b\xf5{\xc7Zf/7\xf7h\xe2f\x1d\xa2\x11U\x91v\xf8Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VEv\xeb>\xffY\xe7\xc7\xe1,\xe7`\xe3\xc4\x95\xe52\x9d\x1e`#\xd8\xd7M\xc7\x15\x00\x00\x00\x00\x00\x00E\xd0e\x0eM\xa9Q\xac\x0eX]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x00'/551, 0xcd) r3 = getpgid(0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x3c4, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x34, 0x19, 0x0, 0x1, [@generic="fe299241fa553feeac4e5eff22e525ca52fb2e3433f687c02078af4871ce672ca5ced5b9a624e6c970b3fe0badd977b7"]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5e}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x35c, 0x19, 0x0, 0x1, [@nested={0x34e, 0xc9, 0x0, 0x1, [@generic="f4acc5ff365ddfa57cd4a0f3f53424ddc49f2be3b34a990984d4ed092510e7b0b20ec2b2db33d4be486e8b4bd9f211fcaf249fc25b2ba0e1b35ff18b7c", @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r3}, @generic="a2ed79076256ccbf2f31aacfd32ca9a8005456fa9bb7d8", @generic="2c3f0aa0cadc13eecbae93813854178cf57ca4185ca0fdc43efc2e771bdf91f935b6988634b695dc41cc83efa23e3cf7fb941105523d1fbb6bb78629d9b580d1a99f5ea6c3b16329d947a94ea18af45dd38a7fc5a243f04fcd21b5986d50d36d7e99d65c54ebf9ff5b54c9942eb4e998089838617eb9eb0e0a3657b32910b7412bd97f3b95eec900c8e33ef986c91b26090332a8049e89fa7e1cfc54eab554eedf3f01b07fc2e2ef46140755c2fdcfae8762ab889ac88862969bb0c987604d005b1d0da1a32379805ff2aaefd305029e6d737eb005c6f63e25fd380ef2ccf08a23d7b762d396623833685bff9ba8939212a45d5be9352209b2f83a50f858d37ee918eaa165b2cc54c5fab7e0a6864388dea1d3da27473897fc8c44e33c1c5d94a5477b0261cd34933a618f7c0cf262c7cbca5c639259c9d0732241ee8edeac8f60deecd780e4bd9c5d935b2efea8024e90fa64c08b274fd863e3f6d07775fd9d8939119b9699d0f548965e06bc90862d22dacbb1a80e41ec3fdeb580fd7a264c388f0a247424040034c0b75db5dbb77c727fac623ae9727e12b97c24c9142143d64f3f3d9b40949c2913b8efdf98e634d4d5d5c6f8271f1ef0f34513c22201629e7bbae6162a6172a1246d1b37bd43c01af8cd9a37019755cf0e482b387fdd12785ffc16b65f8c5c4dc89a9cdc90bbef26da1f1b15df22094872c0b6160465e804b241c7cf5c6b165b9bb8279787b566187a35842771b5e4454924415740c621103a55a73d856bc58097c20349ba7e8d43bfcf7753375a70875e0ed45b3db2a2186c0eabdb4f9da255bc3c6f593d2f40a5dc61a835cca5ed187c1b3347512e2004abdd72a0d33f7f296b5ed1c745b913942a5e9ac6c939df59", @nested={0x4, 0x60}, @nested={0x4, 0x3f}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@remote}, @generic="26f292b007b4f086e248ea9a393d5f28d136fec95027752c7414a5697dbb8e278261e9ec5770d610bef233d22608bc97fe9dc1bcc6542f194a40266a0882da110a7ad5d2cf750b5219e5cf8e27", @nested={0x4, 0x113}]}, @typed={0x8, 0xab, 0x0, 0x0, @uid=0xee01}]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xcc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x8800}, 0x4040080) r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r4, &(0x7f0000000180)='!:-', 0x3) r5 = openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats_csv\x00', 0x20000, 0x0) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r5, &(0x7f0000000140)=""/136, 0x88) r6 = getpid() ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r6, 0x80) prctl$auto(0x3e, 0x5, r6, 0x1, 0x6a02) unshare$auto(0x40000080) mmap$auto(0x8, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x59, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x8) 8.64348499s ago: executing program 4 (id=1111): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0xff7fffff, 0xb0d, 0xa7db6b6) r0 = socket(0x28, 0x1, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) socket(0x2, 0x3, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3) bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x800000000003, 0x1, 0x7, 0x11, 0xdd, 0x0) r1 = epoll_create$auto(0x7) epoll_wait$auto(r1, 0x0, 0xe007, 0xe8a4e409) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x1000, 0x0, 0x1f, 0x3}, 0x800009}, 0x3, 0x20000000) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/swaps\x00', 0x40000, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000300)={0x400, 0x1, {0x3, 0x8cf, 0xe, {0x9, 0xfffa}, {0x7ff, 0xff}, @rumble={0x7, 0xb7}}, {0x7, 0x9, 0x8, {0xffff, 0x5}, {0x2, 0x3}, @rumble={0x400, 0x4}}}) r3 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) pwrite64$auto(r3, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<\xbc\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x522c) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000010c0)=""/4082, 0xff2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x2, 0x0, 0x10, &(0x7f0000000280)=0x14) 8.58996724s ago: executing program 0 (id=1112): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) (async, rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) r2 = prctl$auto(0x7, 0x85, 0x0, 0x1, 0xfffffffffffffffc) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005"], 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x1) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) (async) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) (async) mmap$auto(0x6, 0x400004, 0x1, 0x19, 0xffffffffffffffff, 0x8000) (async, rerun: 32) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0xa8881, 0x0) (rerun: 32) ioctl$auto(r3, 0x901064ac, 0x5) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (rerun: 32) r6 = fcntl$auto_F_DUPFD_CLOEXEC(0xffffffffffffffff, 0x406, r2) ioctl$auto(r6, 0x4b64, r1) (async) pread64$auto(0xffffffffffffffff, &(0x7f0000000380)='\x00\x92?;O%\x1d6\xfdN\x99\xdd\xfa\x9f/D\v\xcd\xde\xdc\xa4\xe8/f\x829\xe1\x8e\xa6\xa9\xdf\xd4\x0eA5\xe3:J\xd0\x1c$f\xc1d\xf2\x06\x90\n\x9c\xd7<\xa9\xae\x0fe\xf1O[\xebx\xdd\x11=\xd6\x11mb\xdd\x8f\x9e\xb8H\xb99F9P\xa7L\xec\t\xe7c\x01j\xc5\x81@\x04\x9f\xe4\xec~P\xde\xc4\x96\xd0b)\x02\xaaT\x7f\v\x80\xa7Z\x7f\xb0\xd4\x87\x1el\xdf\x81\x16J\x0f6\xb5\xb9i\xe4\xe7\xf6\x19\x820\xe0X0x0}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xfffffffffffffffc) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0xe2}, 0x6, 0x5, 0x100000004, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r5) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000240)=ANY=[@ANYRES8=r5, @ANYRES16=r6, @ANYRESDEC=r4], 0x30}, 0x1, 0x0, 0x0, 0x48080}, 0x40040) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0) bpf$auto(0x0, &(0x7f0000000180)=@link_create={@prog_fd=r3, @target_ifindex=r2, 0xd, 0x3420, @perf_event={0x1}}, 0x6f4) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 5.335036151s ago: executing program 3 (id=1118): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd12\x00', 0x2d8e01, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020008, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/oss\x00', 0xba040, 0x0) read$auto(r0, 0x0, 0x35cb) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_RNDADDENTROPY2(r2, 0x40085203, &(0x7f0000000440)=[0xfff, 0xedc0]) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) sendfile$auto(r3, r2, 0x0, 0x400000000004) close_range$auto(0x2, 0x8, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr9\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x540b, r4) r5 = socket(0xa, 0x1, 0x84) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x8006e) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyu1\x00', 0x18001, 0x0) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.963668319s ago: executing program 0 (id=1119): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x0, 0x28, 0x0, 0xc) write$auto_console_fops_tty_io(r0, &(0x7f00000000c0)="c80d1b5d399b58116143ff9d524529f94c9b16d4a3444befb1767965a7b84b407741f36c8abe079d5f089ad5f0be89ae4b277ef6417c16a45b8e3a9907ed045a695e6517db43475709e0ffcc1d40689b503600d12f142b098f80864904cbc8c703c0ee645564962683e5a24d167cbdb9b145a1ee2552dac57b50bee0bbe351584981c54da4b181f84727739c8e727cabecadffb6cf34d025c6b2035316a45970e6a95f3856f1353395320a1b9da849fa42ce63d95bf6900fe217af", 0xbb) mprotect$auto(0x4, 0x100, 0x70) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x50100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmctl$auto_IPC_INFO(0x5, 0x3, 0x0) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) mmap$auto(0x20000, 0x20009, 0x2, 0xeb4, r2, 0xa) io_uring_setup$auto(0x6, 0x0) fstatfs$auto(0x3, 0x0) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) 4.913894203s ago: executing program 4 (id=1120): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0xa, 0x1) r1 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000, 0xffffffffffffffff}, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'pimreg\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x81}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000000) r8 = socket(0x10, 0x2, 0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r10, r9, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r12, 0x2f}, 0x22) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_COALESCE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_COALESCE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8e}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24003851}, 0x11) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto(0xc8, 0x400454d4, 0xe) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000000)={"c6d941de", 0x9, 0xa, 0x4, 0xba4, 0x9, "e0df04d5092c678a0d86ea857944d4", "99f35be5", "d3c919b1", "da0f7a2d", ["8371bacfa8c41b0db904b158", "07e6a435f33a2c3a0cc847ec", "81373bb3e67287b2f49bc2be", "2a1585973098ff06bc312915"]}) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r1, 0x0) 4.609455137s ago: executing program 4 (id=1121): close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x2, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @private=0xa010101}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r0) setsockopt$auto(0x3, 0x10000000084, 0x83, 0x0, 0x8) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/error_log\x00', 0x14280, 0x0) socket(0x10, 0x2, 0xc) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x54c8, 0x9) socket(0xa, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) socketpair$auto(0x4004, 0x2, 0xfff, 0x0) ioctl$auto(r2, 0xc0105303, r2) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) landlock_create_ruleset$auto(0x0, 0x8000000000000002, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 4.057174285s ago: executing program 4 (id=1122): mmap$auto(0x0, 0x100000001, 0x2, 0xeb1, 0x401, 0x67) mmap$auto(0x3, 0x80002020009, 0x7, 0xfa, 0xffffffffffffffff, 0x400) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/can/rcvlist_err\x00', 0x5cd440, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, r1, 0xfffffffd) socket(0x2, 0x3, 0x100) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r5}, 0x18) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f00000000c0)={0x0, 0x4000000009}, 0x7, 0x0, 0x1, 0x4}, 0x2}, 0x10000, 0x1, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x2000009}, 0x9}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sg0\x00', 0x141040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) pidfd_open$auto(0x1, 0x0) socket(0xf, 0x4, 0x4) r6 = socket(0xa, 0x3, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r6, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0xa802, 0x0) 3.872750131s ago: executing program 3 (id=1123): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) removexattr$auto(&(0x7f0000000500)='./cgroup\x00', &(0x7f0000001f00)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf!\xfbf\xeeMf\xc5\x88&6\xca`\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\x81\xc3\xc7\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\xef\x14!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xd3[\xb9\xf3\x1e\xf0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3.\xa0\xfc\xae\xed6T\x91\xf2,\xba*\xea\xf8\xd5\xfaH\xfe\xcf\xe2\xe2\xfe\x91\xe7X\xe4\xae\x03\xbf8\xa6Rr\x96y\xea\xf0\xde\x8a\xd5\xa2`\x89\xac\n\xa6\xbc\x9a\xe2|\xb1\x04:\x1a\xe4L\x04p&\xba(\x9f\xda\xab0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fedbdf250500000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000) sysfs$auto(0x2, 0x4000000003b, 0x8) 2.616872951s ago: executing program 0 (id=1126): mmap$auto(0xfffffffffffffffb, 0x400008, 0x5, 0x9b72, 0x2, 0x7ffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff) setfsuid$auto(0xee00) getsid$auto(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x200005) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) connect$auto(0x3, &(0x7f0000000000)=@nfc={0x27, r0, 0xffffffffffffffff, 0x2}, 0xfffffffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0x28e) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/wchan\x00', 0x2400, 0x0) read$auto_proc_single_file_operations_base(r2, &(0x7f0000000200)=""/225, 0xe1) mmap$auto(0x0, 0x800000000008, 0x80004000000000df, 0x10004000eb1, 0xffffffffffffffff, 0x8000008000) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x20082, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c0a, 0x0) syz_clone3(&(0x7f0000000500)={0x10000, &(0x7f0000000380)=0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000400), {0x23}, &(0x7f0000000340)=""/55, 0x37, &(0x7f0000000480)=""/26, &(0x7f00000004c0), 0x0, {r2}}, 0x58) process_madvise$auto_MADV_COLLAPSE(r4, &(0x7f0000000640)={&(0x7f0000000580)="2788bdeb154cc0851fe05b5c2a850124b354203996c81c70794b569d3d774c9c4562db30d9ddc9da3d78a5eba69449d614046fcf63f4906f509aaebdd1f85dbdb16a6ebf73607af6635d4852a0724a4a858a1782e080ee470f6ae12e443a1e015d65f6c2459688b016644eb35436c98aae137e1823880129cc557a3fcd38f40f1303eaf45ab2260ddadb57199276f1c57ba9844c2b700d6401b2310e6f0f80e9ed"}, 0x8001, 0x19, 0x200) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2.317620398s ago: executing program 2 (id=1127): mmap$auto(0x7f, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x2, 0x500000000, 0x2, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vivid.0/video4linux/video70/dev\x00', 0x2002, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0xca801, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x7fffffff, 0xffffffffffffff3f, 0x4000000000df, 0x411, 0x200000401, 0x12000000000c004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup$auto(0x8, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@token_create={0x7, 0xffffffffffffffff}, 0x6) r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_qrtr_tun_ops_tun(r2, &(0x7f0000000300)="01000000d80746ebe4fa29705e2e6540f64b000003000000a7e9ce67feffffffb096b449", 0x24) mlockall$auto(0x7) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, 0x0) mmap$auto(0x7ff, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd7, 0x3, 0xfffff004) io_uring_setup$auto(0x9, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) write$auto(r0, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xffffffffffffff5a, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf25300000000500a20004000000"], 0x1c}}, 0x20000085) process_vm_writev$auto(0x0, &(0x7f0000000280)={0x0, 0x600000000}, 0x1, &(0x7f0000000340)={0x0, 0x9249}, 0x8, 0x0) sendfile$auto(r0, r0, 0x0, 0x8000) 1.861436224s ago: executing program 3 (id=1128): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40103d0b, 0x0) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000100), 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown$auto(r1, 0x0, 0x0) io_uring_setup$auto(0x1d48, 0x0) unshare$auto(0x40000080) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$auto_check_wx_fops_(r2, &(0x7f0000000100)=""/192, 0xc0) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x5429, 0x0) process_madvise$auto_MADV_PAGEOUT(0xffffffffffffffff, 0x0, 0x4, 0x15, 0x5) sendto$auto(0xffffffffffffffff, 0x0, 0x8000000008000, 0x0, 0x0, 0x80) mmap$auto(0x0, 0xe983, 0xdf, 0xebf, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) mmap$auto(0x7, 0x4020009, 0x10000df, 0xeb1, 0x401, 0x8000) landlock_restrict_self$auto(0xffffffffffffffff, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x21, 0x2, 0x2) prctl$auto_PR_GET_TSC(0x19, 0xa, 0x0, 0x0, 0xd) clone$auto(0xfffffffffffffffb, 0x8, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x3, 0x4) mmap$auto(0x3ff, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002) fcntl$auto(0x3, 0x8, 0x9ec0000000000000) io_uring_setup$auto(0xada5, &(0x7f00000001c0)={0x1, 0xfffffff8, 0x0, 0xfffffbff, 0x8, 0x80, 0xffffffffffffffff, [0x7f, 0x10000, 0x5], {0x592b, 0x200008, 0xfffffffa, 0x2, 0x100, 0xa0, 0x28000, 0xb50, 0x8}, {0x7, 0x7, 0x9, 0x4, 0x1c544e24, 0x9, 0x5, 0x3, 0x6}}) 1.087981555s ago: executing program 2 (id=1129): ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x401, 0xffffffffffffffff}) ioctl$auto_XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f00000001c0)={&(0x7f0000000040)=0x100, 0xce, &(0x7f0000000080)="e20ef4a7e3500c91e6bf12ac6e786d5a0985a1bd0afb9623e0908ad46e1114466ab60a1882fae81beb60a923edcf4be13d7e21196e1b4776a0bd728cd96564eeb0a30917b547d1032e81b686d43fc92ce52328355279289cf8a10aba4a2a73878e28daf6ef2d8874679e9ce4aa93b5f678e1a544e3bef23ace66b714913110d8bf9fd558bc3866830ceec4943c83ee37bf024ff87c31707eda76b6c3c9114c244ea3c76294ef107e9047cb321d3398edb55fc62aba4142f3262d4e997a1274edab9eaac7edf76d1a76d198bcfe4bf8df218cd387b9d42793bcd0ca39910de194e2258acf7012091a789273f8", &(0x7f0000000180)}) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video68\x00', 0x80301, 0x0) bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f0000000240)=@bpf_attr_5={@target_fd=0xffffffffffffffff, r1, 0x6, 0x5, r1, @relative_fd=r1}, 0x5) r6 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000340), r0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) (async) shmctl$auto_SHM_STAT_ANY(0x1, 0xf, &(0x7f00000004c0)={{0x80000000, 0xee01, 0xee00, 0x4, 0x5, 0xc, 0xc0}, 0x2, 0x0, 0xc9, 0x1, @inferred=0xffffffffffffffff, @inferred=0x0, 0x8000, 0x0, &(0x7f00000003c0)="9f77f2282891b160f84765973dda9d6d3c0a9ad6ad8f8a4462256d7a4626cd7659d36ebc34133274448154eef3fc143b023bf527db4addfbd8df15193ba13c7d4309304fd42cc970cc6d633cbe934417", &(0x7f0000000440)="b09fdbbe3b6a92e8bd2e110df9ac9bd51adc619006123cdf58e9d93017ff08231c4c5fe817446e132fb538666ffe67e9ac96e6ade1750c061cde8be7f5ec6fc3a332c7e684d01cd66bb7e1c9bebe0e5cd10536356be82b01f881b5c93fec93320118bbf525463908ab8da749ac45ed3ee45d9e92396695b5e0"}) (async) shmctl$auto(0x1, 0x3, &(0x7f0000000680)={{0xffffffc0, 0xffffffffffffffff, 0x0, 0x81, 0x8, 0x2, 0x3}, 0x8000, 0x6, 0x5, 0x0, @raw=0x2, @raw=0x1, 0xca, 0x0, &(0x7f0000000540)="f690e9f3160f1566e920ae420063003c52a880b6e4bfca4139852e791b9a98af0189d8bd0e0f4b4be8408b27796330e669d2abe619a681a72436ace14e87c14ceb3849223b544ffe30576b65fa8845c2f0c57902f76f5ac807ee23", &(0x7f00000005c0)="15fc35386cdbd361202e33d73cc838040c62963ad469518a9fdd6b522c10a322c8d84daa99ac16664226f22fd6801c2cf7c35c696352191a97b9a403c12b1b9fbf0650fc9517c9da1b65b6deced4f3c495cafb6d3a0cbe730c8843d33e30dbb642f6307e55cdcbbc279aaae33eb11e66ee60483340762104edcc00e8f0c4b6120245881c26"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'ip6gretap0\x00', 0x0}) sendmsg$auto_NCSI_CMD_SEND_CMD(r4, &(0x7f0000000c00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000740)={0x480, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NCSI_ATTR_IFINDEX={0x8, 0x1, r7}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x4}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xa0ed}, @NCSI_ATTR_PACKAGE_LIST={0x439, 0x2, 0x0, 0x1, [@generic="949aceae43b57ada147a989a62c92e25ad50321a2e409e3c21f9847bf0f2b15ef7f868e7783299b7b73b738864488c66c0282e99d88d2317028b898cac06cd4350ecb59795b9ae4ad0cb6ff57af812514daeda71", @nested={0x81, 0xe, 0x0, 0x1, [@nested={0x4, 0xee}, @nested={0x4, 0x2a}, @nested={0x4, 0xb}, @generic="8ad6d98589728c24c1581dfb119067450bb42ebba40ac9d408c64400375c06a95d2be18f5f7c95af85378c7e4c8fae97ffec5dce340473b4f7745bfda840c4644cd29ecf4ae6cf4ab23f3e99b17638de3238b9466d33168a064865e4cf207e093e1be27c81e44064c5", @typed={0x8, 0xe6, 0x0, 0x0, @uid=r8}]}, @nested={0xda, 0x42, 0x0, 0x1, [@nested={0x4, 0x12}, @generic="fab1980eb6b7e6e48f7640d98e39d6744df141ed01e88a45d4b1005cc12e7d89984fd08460c99d9c92814e2c7de646fbc7f5a94cb7b4b1e7d5a5fca0dbb53795943f9cbbe563ee6fde4e5faee6722a6cad68cc218db4cc7775c4597067b09e240679eea65fb83e08cd95dd56a16f1a5d8105f9f66ddd15e38b6e2b98ee1088196c598b3f4f00490e684599d252e551a728835c81e3c2d41ab948a3614a73d20be3876e5dc699fa9e6ff1a64223e16222e9ff856961c17b76e150c8f420047fe2ac3eb1c395f779631926a50dfd796b1f8807"]}, @nested={0x110, 0x159, 0x0, 0x1, [@nested={0x4, 0x14f}, @typed={0xe8, 0x36, 0x0, 0x0, @binary="e22c0afa1b02c84c20dba73b9b410d66f3a3fe2292f784d297b956f378bad62a993468c8d0da061d63694001f8606259efb8b3575999a2130051afc70d5f013547aad8d3e635cc1fa186bdd314c506704dd63c012cb2eb436f3fd4966a64e3b1cb711397e380d674d79a4e4a39787ba6a19420aa8a5778031d8be7dc5cedbe24b058b6fbf5be6e08026861c21942d493db1a207d621cba223372ae86e6a0b10dc55a1d7c257aad04c62ad3fb177758951fc41010e123ee3f464bb221fcc30f9944dd03cebfc5d30b94add08625be19ae79ddf426812b87308b96679fdb50bebc41934f7d"}, @nested={0x4, 0xf8}, @typed={0x8, 0xbd, 0x0, 0x0, @uid=r11}, @typed={0xc, 0xf3, 0x0, 0x0, @u64}, @nested={0x4, 0x157}, @nested={0x4, 0x5f}]}, @generic="8561bba8f306ff5ee5a004897b782034b24005a3b4cf0078d164deda71798c4de0a0ed80691be33ec36b4ef919f8306e3196ae1695329a20d16d1641dcdb0cd2441d71d6475f81c41c78654667af2e5f7252065351860fcd1becb24738ba7d7d10b443dea6a18241c42ce255a82ac547af19cec8d2208f489f571a1e68ab87b4481954af0711e4dacb7f0c3b4d0a672bea61dc28651a24cd2110c4cda14638b2f6", @nested={0x68, 0xa0, 0x0, 0x1, [@generic="d0013f74fa20faff3d1aa0d751d56a3109fdcacce0cc546eb46cfe51908333a0c34083735495940612aeac49d65ba553bca3c348efe2d6cb9a58b235b74187b8e319d618c65eed4058417842921352b42285023dd7d87bac82f67bfe5e729cd095026b86"]}, @typed={0xc, 0x24, 0x0, 0x0, @u64=0x8}, @nested={0x53, 0xe5, 0x0, 0x1, [@generic="127bf3bb962a73b0ffc0d8523a0d0bf0292b09c583255642c52c80861dd4d783b22a44d25c2410a8e9b48deb6da1eb008898a5d9fbc29384a2bd08372ea60e8c0b55edab4589d6", @nested={0x4, 0x56}, @nested={0x4, 0xde}]}, @typed={0x8, 0xb, 0x0, 0x0, @ipv4=@multicast1}]}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x80}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x10}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r12}]}, 0x480}, 0x1, 0x0, 0x0, 0x40}, 0x4040800) r13 = ioctl$auto_TIOCGPTPEER2(r4, 0x5441, 0x0) (async) ioctl$auto_VFIO_IOMMU_GET_INFO(r3, 0x3b70, 0x0) (async) ioctl$auto_FITHAW(r3, 0xc0045878, 0x6) r14 = waitid$auto_P_PGID(0x2, r9, &(0x7f0000000c40)={@_si_pad}, 0x9ec, &(0x7f0000000cc0)={{0x800, 0x100000001}, {0x9, 0x4}, 0x2, 0x9, 0x80000001, 0x8e07, 0x1382800000, 0xfff, 0xffffffffffff0000, 0x0, 0x0, 0x861f, 0xfffffffffffffffd, 0x6, 0xed}) get_robust_list$auto(r14, &(0x7f0000000f00)=&(0x7f0000000ec0)={{&(0x7f0000000d80)}, 0xd3, &(0x7f0000000e80)={&(0x7f0000000e40)={&(0x7f0000000e00)={&(0x7f0000000dc0)}}}}, &(0x7f0000000f40)=0x7) r15 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000fc0), r4) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, r15, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x83d7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ptrace$auto(0xd8e7, r10, 0x4, 0x2) ioctl$auto_VHOST_SET_LOG_FD2(r5, 0x4004af07, &(0x7f00000010c0)=r2) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001100), r0) removexattr$auto(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)='@)\x00') r16 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f00000011c0)=0x3) (async) r17 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000001240), r3) sendmsg$auto_IPVS_CMD_SET_SERVICE(r16, &(0x7f0000001b80)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4d129bc3f60e4505}, 0xc, &(0x7f0000001b40)={&(0x7f0000001280)={0x8b4, r17, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x224, 0x3, 0x0, 0x1, [@generic="0f82c797d2cbb0b2eeb14f48a2b7cd59b210a7b9a619665a", @nested={0xc, 0x15e, 0x0, 0x1, [@nested={0x4, 0xeb}, @nested={0x4, 0x43}]}, @generic="e1cbe1129c60eae999c51534a3232b7f35e0516a6318fa6de3cafbd51f6cd0af", @nested={0x1c, 0x93, 0x0, 0x1, [@nested={0x4, 0x87}, @nested={0x4, 0x136}, @nested={0x4, 0x138}, @typed={0x8, 0x105, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x11c}]}, @typed={0xdd, 0xd6, 0x0, 0x0, @binary="07699df5017c57ca27e5bf128af3cb90dd28d617fe961f73d6b48793f9c61e96bb22177ff1880d4ea4d1d96b2ea383c4863979c563688d55180eea25bb088dc19ec7ff826aaeac67240dd9aa96b76a27ef3e3da6b9417711f6901bbc4f08a5152c025cc82a8c49bc33ed0e03a971dd6d975b35f4d62a4231c1876c1d4d587c5565b06d95ff3866b5b15bca92fce659ef00c594511eef260e48b584e7a97f63d29f932d0392e722ea5512d7cb2eee805a8a8a60aa7ec820418af44225e58d75645f356e04db751262481ead75e556671f515985776cf56a9484"}, @nested={0xe0, 0x81, 0x0, 0x1, [@generic="207d89c6e226fbe8c51221f5e21c9882587022e5497205f2bad9804ac65ea98ec79b183723f22f4d2f45c1c65392690f0ac4f1c3efff4bc9d0296af011358e483b6605bbb0488dbe45ffdd64f9fa5fba9081c3a5079285cc6ceeb33ce9db2a07d58336e36023c74986824fdfcc0eb82c7fcd14476dbab7353ae98b658c41fea8cc37c76b08f43859255e72fb1f48bd0e9d895211a92eb6d43023d62acd045bee6e4df4eb2b2743493d0d0b8313fc22ef618186aec93b43f6cefb7d063fdc4ec18ee6993665f9b344", @nested={0x4, 0x134}, @typed={0x8, 0xee, 0x0, 0x0, @fd=r13}, @nested={0x4, 0x7}, @nested={0x4, 0x60}]}]}, @IPVS_CMD_ATTR_DEST={0x673, 0x2, 0x0, 0x1, [@nested={0x2af, 0x10, 0x0, 0x1, [@nested={0x4, 0x21}, @generic="328dc59167386b0936d1e2870c33d26a089af372264f8ef2f8d2962882551577e12e05a9fe9ab9ca24c61cda30ccdcd4c70c5ef0c686dab5ef25e1673a2bc839aa2cf3a7b25e7b04748da3b4efbfdb03792f3d4d94dfe0dcecd3d8619f1f14ad680ff1570283bd5df5eb5e6c50d7a8109d13f986071c3e8759dfebfa7c45a8ca2f4b674deb40d223c3ccd60c96442a4931c050890ce9b00c14f3", @generic="f0b1621ae42eaab38c1651c0c455837cba08c48b98c38ee4f4d7bae8f6ff9085fc0109c048a15e0077f638ec363807a4530a6797507b321a805f7a3a4bf7a4bd605b606ffbe8630ceca4856feafedecc0197bb05dc164f160ad268d69b7896b3d4464ca0d893c9f81e1ba415414c3e1829086f8e74b3aa1fdc9dcb3fa5d6bdfc1f951a89b610d8c98d6edf4c7e49021decea9a1958f339912e6dcee507dfb2bc8929804352743eb8e603647bd24cdd50ff3de92e8c498b290ace9ee9bdffa9a7a9985b4d3f8ee7db5b7af9140fc608afcf64d673bb", @nested={0x4, 0x96}, @generic="4887ce43834442092778b8c244852f2846c6087cc195c9ca5f5cd90332de861a9c7b90e26ce6ef741634e05b720042e7f3e6d7335a2b982d7e0cb8b7a3942a17d9c137b02b9f26f1ea37eaab5b7305e0915f6c9e0049499665efdcd576e0926454d62188ce536565723beefb6e67e483f70a526e6d2b33382542d49afc14c244b86511a5f06c9f3c952bdb88a880ea54672c5299af1de846bb5d17be39ebcd7436b7b434677a2de42ad063ab33c570", @nested={0x4, 0xf6}, @generic="cabfef99395971db43e9d3910eb3172a47de5b12ffd271e4063b2255a3359a6f77f41eb0c395140570cb450cdc7914a1f541b2b537694e73cbaa38485ec447450579", @typed={0x1f, 0xfc, 0x0, 0x0, @binary="7611f5c81f5f9f0e0da9f87269247162a380fbefb222d0f9258480"}, @generic="b506ac0ec368305a71bf58bac8d6b654f409da10343ef66a94914f", @nested={0x4, 0x74}]}, @nested={0x37, 0x103, 0x0, 0x1, [@typed={0x8, 0xab, 0x0, 0x0, @fd=r5}, @generic="9f5e884c132eab9768c02def89bca2fcdd5f88ac85d39d59e85fd9629ecc1a28dd9168c98cb268a449d19b"]}, @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="5952e88f32d3a6ae8bea2726214d431fe10e06a30cc14777bb80866655ffb802dba753311a77862553793a7faba428e32a9f3d8d606054ab4689412b72939d57061a7b43a5499bf114ac5635485e609df8b2f6ce63eebc7353f07ca49f91391a949e58f5110e7344b601c261e16a2a7cfbaef904f32269f3231626f8b41054eb9caa448cd56ad36881d18586b8ca7d96b18fa503b143b13401a0cff0e574c9f1f0ab6c2461b97a8ea689a429c118a5b3053336f960d38b8e757c7dff66e5a4c3", @nested={0x14e, 0x10c, 0x0, 0x1, [@generic="9ea0a07040f905dff194585b6d967459a072899f86470a4d848785ca4dd6b7c6835097485beb1f06a4921a32b90f2b342702b935911fc8d806671407386078e3a027f026b864a557fd5d07dfd4cdbfc222350f87d84620ab947961830ce75c0f0ed6ea0d6908faece0375fcce0b091f9b897719c1ae25472f4db8d39d517edec5f38048d33a9a8c97a6ad6a74d3837e7728b291f8d92ec50403f31a646e5ff2fbccad9", @generic="9d2b66f515af670ca5f8fb51e11e9aac718f18f89235382ff29f0c5606959d51e1addb48357ea0c92f49cdfecff6fb5185c5da1db7eff41c16e0e5ae932990ffb9161cd3239e00082d2425b1cac783fe58ba7996f6f80cc498320512f3682b6eb9f00484724d2e155cd0ad78b0d4ae36649a7041ab4ef43c7ad622e219ad3d68258085090697b5b4534a3b0e0f0376d88a5dc868a83ad5b6423253cfa39d23f2df996de9afe703"]}, @generic="035563fb0e172a4d909b76c99c21aae2955b759f080a6ddc0050271039a1769f76c0d2ac43bd7c8b7f1b4061b22089d4ba436a1a682095a1b2c3bd49adf802f85ddf1c39db9d20196191745e5834b5ab0a2e9336f91188b6ed27cd4b542f74ccb4bec9d8b7a2ec1b6829a18b519c24350cbed8", @generic="6da3d8bf7a5a6533aaad0cb0199487f7763a4a2af6ff78a82d9cc8a9f220e8b497910be070c1b6721ec828c7e9f4ca249018da9fc36a0e8f4f2dc6757d024bdce38a1a0e32bd4c425afe90126ffb8e5bd7edf31eb39b159b2a0f6163543916dd2275aceec42c5f4aebd30958aa8c873aff97ac2159dd1563e1c21436add1eb3154f61eb752b5a917f793e0fba2370b51f2410df0df2429b8e199b3fd5a42eda27085ba2610d06a0eaa4a69dc66c32390903729d607ed948a38bffa62dfd951d6d8ae448f467588b5dabe65da0c4220cf359dda123ba0e9d4e828b1c185743638a400ed2f5036818e433d83504f3eca72"]}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000001bc0), r16) (async) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/kernel/debug/tracing/error_log\x00', 0x40000, 0x0) ioctl$auto_TIOCNOTTY2(r13, 0x5422, &(0x7f0000001c40)="e63ed7f0dfa07e804c363fcf64155bc03a3f7fe645bb655f716ec772e70d1b446f19c34901d2ca") (async) pread64$auto(r3, &(0x7f0000001c80)='\x00', 0x9, 0x60e) (async) io_uring_setup$auto(0x6, &(0x7f0000001cc0)={0x6, 0x7, 0x1, 0x73, 0x9c, 0x0, r0, [0x398, 0x800, 0x5], {0x7, 0x2, 0x4, 0x3, 0x4, 0x0, 0xffffff7f, 0x7f, 0x8}, {0x9, 0xfffffbff, 0x100, 0x1, 0x6, 0x6, 0x5, 0x5, 0x5}}) sendmsg$auto_SMC_NETLINK_GET_STATS(r18, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d80)={0xbc, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, "3b34d0f34c00f408a71bb848dba2692172965889947d2ca0abbafd88e848d83da46606745056a0b5777c154d10db8085bcc6a596af33cafcd3d1ceabc59ff2da8abb1731d706dc4dfddbe63973393e5b1f5d0d51f3f41ec315da442f0c425a369f9bc715b99b722e4a43ee137db85e22be614cfbb2ca199c2377d1d5a5faad3e230130de1f32af335d892249c4434946bb3fb50a65ae72e3a5d86ef5b09ccad6b07a8fc0eb"}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 915.932864ms ago: executing program 2 (id=1130): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x402, 0x0) ioctl$auto(0x3, 0xc0585611, r0) 809.389355ms ago: executing program 2 (id=1131): mmap$auto(0x7000, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x402, 0x0) ioctl$auto(0x3, 0x40045613, r0) 665.554927ms ago: executing program 2 (id=1132): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x8000000000006, 0x3, 0x4, 0x2a) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto_VHOST_GET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af24, &(0x7f0000000300)={0x5b, 0x7}) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rate_ctrl_alg\x00', 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x41) mmap$auto(0x0, 0x2020008, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x10, 0x2, 0x98f) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000000036eb72e173ec9fa84a514a3e3fe42314e20bc6e771f11c29857dff9a9d014c7073e9758bf9cfa99d655b0ca409dbf35712bb38fd0aeb5030ee68bdd454b5eb710aa8fdc52c7cd02f7799d56c52beb527f328ddbeb9af1d2485a2256088c74537d8a2ab21d688ae584bb4e2089a510347c26d73e7afd8d84105b77f3552134d0adee6112178610fb2f245f91bcc16be02b304b6b6690fae4f00b63e4210b124fdde0000000000", @ANYRES16, @ANYRES32=r1, @ANYRES16=r1, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) poll$auto(&(0x7f0000000140)={r3, 0x16b, 0x5}, 0x3, 0x4) sendmsg$auto_WG_CMD_SET_DEVICE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4075000057ab8798"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x810) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x30017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0xffffffffffffffff}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x6271d3a4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 460.547805ms ago: executing program 0 (id=1133): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) (async) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv4/conf/veth0_to_hsr/drop_gratuitous_arp\x00', 0x4380c0, 0x0) (async) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/cache/index2/size\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/4111, 0x100f) (async) unshare$auto(0x40000080) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000001140), r6) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYBLOB="080001002e535200140002"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) (async) fsconfig$auto_SHMEM_HUGE_DENY(r4, 0x9, &(0x7f0000000140)='\x00', 0x0, 0xffffffffffffffff) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) (async) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/wlan0/max_desync_factor\x00', 0x42402, 0x0) read$auto(r8, 0x0, 0x1ff) r9 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x80201, 0x0) writev$auto(r9, &(0x7f0000005f00)={0x0, 0x4}, 0x6) (async) sendfile$auto(r3, r3, 0x0, 0x7fffe000) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000100)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) quotactl_fd$auto(0xffffffffffffffff, 0x200, 0x0, 0x0) (async) ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) r10 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/ieee80211/phy4/reset\x00', 0x2641, 0x0) write$auto(r10, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p81\xb6\xbb\xd8D\xde\x0eR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~\b\x00\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xcf\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xf6n\x82\xd4\xd6\xcc\xc19\x95+\x94\xb0f\xbb\x85\xf9\x98\xf8\x85Z\x19\xc0\x8a:(\xf6\x7fR^&cU\xfc\xae\x87\xf2\\\x02\xd3\xe9\x9f\xeb&l\x86D\x98\xa0\xc0 \xcec\xa3\x13\xf7\x02\a\x9d\x9d\x8e\x81\x8eu\xc73\x9f\x02\xe7 \x03\x9c\xab\xbe\x85-\a\"H\x87\x12A\xdc\xedF\xa3t\x91\x9f!\x8c\xd1A\xe7\x95\xa7\"\x8c\xb5\x1b\x80\x12u\x90AI\xc2\xbao3Ob\x94\xfa\'\x8d\x0f\xc6&\x94C\xa6|~\xebn-\x17\x1e+-\xdc\xe6f0cm\xf2\t\xb4:\x93g}/%\xc2\xe5\x8c\xd8\xc1+T\xe9@ys\xa8\xf0\xf3\xd3\x1e\x93\xe5\xbe\xb5\xee\xbf\xb2\xbb\x1dP\xbb\xa2$\xd5`\x01\xf0G\xa8\xf2`\x9e\x98\xa6+xX6M>\x8fq\xab\xaa\xe4\x87\xa1\xaa\x1d\xee\xb1[\x9e\x03\xdd\x11\x1dTg\x1b\x91\x86\x05\xf6\xa5 1\xbeSL\x19\x80\x9f.\n\xa4\xa80\xd8\xeb\x86\xf1s\xea\x17\xb4\x1a@\xa3\x15\xd9\x8fE\xc5\x00\x00\x00\x00', 0x1) 138.493646ms ago: executing program 4 (id=1134): preadv$auto(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) pread64$auto(r0, &(0x7f0000000040)='veth1\x00', 0x200000000004, 0x4) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) mremap$auto(0x803, 0x1, 0x4, 0x7, 0xffff) write$auto_rfkill_fops_core(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone3(0x0, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x9, 0x0, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x25c, 0x8000000000df, 0x9b72, 0xffffffffffffffff, 0x808000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) r3 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x40000000, 0x1, r1, 0xa, 0xffffffffffffa036) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000000c0)={0x9e, 0x80}) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) r5 = mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u50xffffffffffffffff}, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) madvise$auto(0x101, 0x3, 0x8000) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000100)=""/4081, 0xff1) prctl$auto(0xbb, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x11, 0x6, 0x38) setreuid$auto(0xffffffffffffffff, 0x8) ioctl$auto(r4, 0x890c, 0x1) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) kexec_load$auto(0x4, 0x4, 0x0, 0x1000000000004) ioctl$auto_SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, 0x0) epoll_create$auto(0x1) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, r2, 0x8) unshare$auto(0x8000000) semget$auto(0x3, 0x2e4a, 0x7) r5 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x25c, 0x8000000000df, 0x9b72, 0xffffffffffffffff, 0x808000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r5, 0x84, 0x81, 0x0, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x2, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) kernel console output (not intermixed with test programs): 8692][ T7648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.318716][ T7648] RSP: 002b:00007fe59f122028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 184.318742][ T7648] RAX: ffffffffffffffda RBX: 00007fe59e425fa0 RCX: 00007fe59e19de59 [ 184.318760][ T7648] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 184.318783][ T7648] RBP: 00007fe59f122090 R08: 0000000000000000 R09: 0000000000000000 [ 184.318800][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.318816][ T7648] R13: 00007fe59e426038 R14: 00007fe59e425fa0 R15: 00007fffc1d8bb08 [ 184.318854][ T7648] [ 184.773542][ T7652] FAULT_INJECTION: forcing a failure. [ 184.773542][ T7652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.786740][ T7652] CPU: 1 UID: 0 PID: 7652 Comm: syz.0.355 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.786789][ T7652] Tainted: [L]=SOFTLOCKUP [ 184.786799][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 184.786816][ T7652] Call Trace: [ 184.786825][ T7652] [ 184.786835][ T7652] dump_stack_lvl+0x100/0x190 [ 184.786868][ T7652] should_fail_ex.cold+0x5/0xa [ 184.786895][ T7652] _copy_from_iter+0x1f4/0x1690 [ 184.786931][ T7652] ? __asan_memset+0x23/0x50 [ 184.786955][ T7652] ? __pfx__copy_from_iter+0x10/0x10 [ 184.786987][ T7652] ? __pfx___alloc_skb+0x10/0x10 [ 184.787030][ T7652] netlink_sendmsg+0x808/0xda0 [ 184.787073][ T7652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.787114][ T7652] ? apparmor_socket_sendmsg+0x15b/0x270 [ 184.787156][ T7652] __sys_sendto+0x48b/0x4e0 [ 184.787178][ T7652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.787214][ T7652] ? __pfx___sys_sendto+0x10/0x10 [ 184.787251][ T7652] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 184.787302][ T7652] __x64_sys_sendto+0xe0/0x1c0 [ 184.787327][ T7652] ? do_syscall_64+0x90/0x840 [ 184.787348][ T7652] ? lockdep_hardirqs_on+0x78/0x100 [ 184.787384][ T7652] do_syscall_64+0x115/0x840 [ 184.787404][ T7652] ? clear_bhb_loop+0x40/0x90 [ 184.787434][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.787460][ T7652] RIP: 0033:0x7f253055e68e [ 184.787480][ T7652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.787502][ T7652] RSP: 002b:00007f25313ace88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 184.787525][ T7652] RAX: ffffffffffffffda RBX: 00007f25313ae6c0 RCX: 00007f253055e68e [ 184.787541][ T7652] RDX: 0000000000000020 RSI: 00007f25313ad000 RDI: 0000000000000005 [ 184.787556][ T7652] RBP: 0000000000000000 R08: 00007f25313acf04 R09: 000000000000000c [ 184.787570][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 184.787584][ T7652] R13: 00007f25313acf58 R14: 00007f25313ad000 R15: 0000000000000000 [ 184.787614][ T7652] [ 185.136082][ T7659] type: 768 invalid [ 185.574659][ T7667] blktrace: Concurrent blktraces are not allowed on nbd5 [ 188.249850][ T7725] futex_wake_op: syz.3.368 tries to shift op by -2048; fix this program [ 188.266419][ T7725] futex_wake_op: syz.3.368 tries to shift op by -2048; fix this program [ 188.349171][ T7721] 0x000000000001-0x000000020000 : "" [ 188.620852][ T7721] ftl_cs: FTL header corrupt! [ 190.641829][ T7764] random: crng reseeded on system resumption [ 190.825462][ T7764] hub 1-0:1.0: USB hub found [ 190.879111][ T7764] hub 1-0:1.0: 1 port detected [ 191.306530][ T5627] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 192.399635][ T7792] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 192.712073][ T7797] netlink: 338 bytes leftover after parsing attributes in process `syz.2.385'. [ 192.849937][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.860464][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.869569][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.878709][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.888025][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.941634][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.218472][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.304838][ T7809] ubi0: attaching mtd0 [ 193.354735][ T7809] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 193.372498][ T7809] eraseblock attaching information dump: [ 193.441588][ T7809] ec 1 [ 193.477465][ T7809] pnum 0 [ 193.486870][ T7809] lnum 0 [ 193.495318][ T7809] scrub 0 [ 193.498767][ T29] audit: type=1800 audit(1784223355.616:18): pid=7814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.387" name="members" dev="configfs" ino=21143 res=0 errno=0 [ 193.555380][ T7809] sqnum 1 [ 193.572521][ T7818] ALSA: mixer_oss: invalid OSS volume '\' [ 193.582981][ T7809] Volume identifier header dump: [ 193.608400][ T7809] magic 55424921 [ 193.618427][ T7809] version 1 [ 193.623501][ T7809] vol_type 1 [ 193.638894][ T7809] copy_flag 0 [ 193.645620][ T7809] compat 5 [ 193.653033][ T7809] vol_id 2147479551 [ 193.673653][ T7809] lnum 0 [ 193.685898][ T7809] data_size 0 [ 193.698441][ T7809] used_ebs 0 [ 193.703533][ T7809] data_pad 0 [ 193.713243][ T7809] sqnum 1 [ 193.732087][ T7809] hdr_crc 65b3bd2d [ 193.758672][ T7809] Volume identifier header hexdump: [ 193.944626][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.994091][ T7822] FAULT_INJECTION: forcing a failure. [ 193.994091][ T7822] name failslab, interval 1, probability 0, space 0, times 0 [ 194.012066][ T7822] CPU: 1 UID: 0 PID: 7822 Comm: syz.0.388 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.012112][ T7822] Tainted: [L]=SOFTLOCKUP [ 194.012122][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 194.012139][ T7822] Call Trace: [ 194.012147][ T7822] [ 194.012156][ T7822] dump_stack_lvl+0x100/0x190 [ 194.012194][ T7822] should_fail_ex.cold+0x5/0xa [ 194.012228][ T7822] should_failslab+0xc2/0x120 [ 194.012265][ T7822] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 194.012304][ T7822] ? cache_create_net+0x2b/0x1f0 [ 194.012342][ T7822] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 194.012377][ T7822] kmemdup_noprof+0x29/0x60 [ 194.012408][ T7822] cache_create_net+0x2b/0x1f0 [ 194.012441][ T7822] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 194.012470][ T7822] gss_svc_init_net+0x69/0x640 [ 194.012499][ T7822] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 194.012534][ T7822] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 194.012566][ T7822] ops_init+0x1e2/0x5f0 [ 194.012603][ T7822] setup_net+0x118/0x3a0 [ 194.012640][ T7822] ? __pfx_setup_net+0x10/0x10 [ 194.012677][ T7822] ? mutex_init_lockdep+0xf1/0x120 [ 194.012728][ T7822] copy_net_ns+0x46f/0x7c0 [ 194.012770][ T7822] create_new_namespaces+0x3ea/0xac0 [ 194.012825][ T7822] unshare_nsproxy_namespaces+0xf2/0x220 [ 194.012858][ T7822] ksys_unshare+0x438/0xab0 [ 194.012894][ T7822] ? __pfx_ksys_unshare+0x10/0x10 [ 194.012930][ T7822] ? v4l2_ioctl+0x1c5/0x250 [ 194.012986][ T7822] __x64_sys_unshare+0x31/0x40 [ 194.013019][ T7822] do_syscall_64+0x115/0x840 [ 194.013045][ T7822] ? clear_bhb_loop+0x40/0x90 [ 194.013081][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.013109][ T7822] RIP: 0033:0x7f253059de59 [ 194.013131][ T7822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.013153][ T7822] RSP: 002b:00007f25313ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 194.013175][ T7822] RAX: ffffffffffffffda RBX: 00007f2530826090 RCX: 00007f253059de59 [ 194.013189][ T7822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 194.013202][ T7822] RBP: 00007f2530633e6f R08: 0000000000000000 R09: 0000000000000000 [ 194.013216][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.013229][ T7822] R13: 00007f2530826128 R14: 00007f2530826090 R15: 00007ffce48c71f8 [ 194.013259][ T7822] [ 194.316473][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.323336][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.331564][ T7809] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 194.359839][ T7820] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 194.597313][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.953114][ T5627] Bluetooth: hci3: command tx timeout [ 195.215615][ T60] bridge_slave_1: left allmulticast mode [ 195.226063][ T60] bridge_slave_1: left promiscuous mode [ 195.241201][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.298870][ T60] bridge_slave_0: left allmulticast mode [ 195.306093][ T60] bridge_slave_0: left promiscuous mode [ 195.312056][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.705341][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.726577][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.749129][ T60] bond0 (unregistering): Released all slaves [ 195.937009][ T7831] : entered promiscuous mode [ 196.887676][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.897667][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.905449][ T7799] bridge_slave_0: entered allmulticast mode [ 196.917036][ T7799] bridge_slave_0: entered promiscuous mode [ 197.032425][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 197.039708][ T5627] Bluetooth: hci3: command tx timeout [ 197.079026][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.093707][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.113446][ T7799] bridge_slave_1: entered allmulticast mode [ 197.131875][ T7799] bridge_slave_1: entered promiscuous mode [ 197.335261][ T60] hsr_slave_0: left promiscuous mode [ 197.344876][ T60] hsr_slave_1: left promiscuous mode [ 197.351039][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.359845][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.388455][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.396422][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.432340][ T60] veth0_macvtap: left promiscuous mode [ 197.446500][ T60] veth1_vlan: left promiscuous mode [ 197.459197][ T60] veth0_vlan: left promiscuous mode [ 197.926978][ T60] team0 (unregistering): Port device team_slave_1 removed [ 197.977005][ T60] team0 (unregistering): Port device team_slave_0 removed [ 198.194995][ T7799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.320158][ T7799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.533980][ T7799] team0: Port device team_slave_0 added [ 198.553699][ T7799] team0: Port device team_slave_1 added [ 198.747257][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.758129][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.801165][ T7799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.900031][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.917918][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.970925][ T7799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.111706][ T5627] Bluetooth: hci3: command tx timeout [ 199.429721][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 199.705779][ T7799] hsr_slave_0: entered promiscuous mode [ 199.724128][ T7799] hsr_slave_1: entered promiscuous mode [ 199.744436][ T7799] debugfs: 'hsr0' already exists in 'hsr' [ 199.760456][ T7799] Cannot create hsr debugfs directory [ 199.820640][ T7898] random: crng reseeded on system resumption [ 200.793262][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 200.875334][ T7926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.398'. [ 201.059949][ T29] audit: type=1800 audit(1784288900.182:19): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.399" name="members" dev="configfs" ino=22537 res=0 errno=0 [ 201.192092][ T5627] Bluetooth: hci3: command tx timeout [ 202.153204][ T7946] random: crng reseeded on system resumption [ 202.769051][ T7932] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 202.959111][ T7799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 202.995758][ T7799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 203.025752][ T7799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.075439][ T7799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.123529][ T7799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.165903][ T7799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.179851][ T7799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.226573][ T7799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 203.239456][ T7964] [U] ^\ [ 203.519978][ T7799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.580869][ T7799] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.598989][ T29] audit: type=1804 audit(1784288902.702:20): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.406" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=18 res=1 errno=0 [ 203.600417][ T7988] ima: policy update failed [ 203.657026][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.664247][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.673350][ T29] audit: type=1802 audit(1784288902.782:21): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.406" res=0 errno=0 [ 203.716398][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.723652][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.967567][ T8000] vivid-007: ================= START STATUS ================= [ 203.988443][ T8000] vivid-007: Generate PTS: true [ 204.000298][ T8000] vivid-007: Generate SCR: true [ 204.016047][ T8000] tpg source WxH: 320x240 (Y'CbCr) [ 204.030144][ T8000] tpg field: 1 [ 204.038448][ T8000] tpg crop: (0,0)/320x240 [ 204.054465][ T8000] tpg compose: (0,0)/320x240 [ 204.065474][ T8000] tpg colorspace: 8 [ 204.097428][ T8000] tpg transfer function: 0/0 [ 204.108487][ T8000] tpg Y'CbCr encoding: 0/0 [ 204.113617][ T8000] tpg quantization: 0/0 [ 204.117925][ T8000] tpg RGB range: 0/2 [ 204.122403][ T8000] vivid-007: ================== END STATUS ================== [ 205.224371][ T29] audit: type=1800 audit(1784288904.352:22): pid=8050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.413" name="members" dev="configfs" ino=23765 res=0 errno=0 [ 205.732671][ T7799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.973128][ T7799] veth0_vlan: entered promiscuous mode [ 206.003470][ T7799] veth1_vlan: entered promiscuous mode [ 206.049109][ T7799] veth0_macvtap: entered promiscuous mode [ 206.064296][ T7799] veth1_macvtap: entered promiscuous mode [ 206.175598][ T8034] Process accounting resumed [ 206.207975][ T7799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.252146][ T7799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.312603][ T3355] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.335426][ T3355] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.363476][ T3355] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.385849][ T3355] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.403696][ T8054] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 206.404949][ T8068] [U] ^\ [ 206.612655][ T3355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.641117][ T3355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.730466][ T6872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.746816][ T6872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.969271][ T8078] netlink: 342 bytes leftover after parsing attributes in process `syz.3.417'. [ 207.105854][ T8088] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 207.946009][ T8099] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 208.897925][ T29] audit: type=1800 audit(1784288908.022:23): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.424" name="members" dev="configfs" ino=23282 res=0 errno=0 [ 209.365734][ T8127] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 209.987468][ T8120] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 210.763661][ T8141] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 211.684286][ T8142] Process accounting resumed [ 211.705916][ T8155] netlink: 338 bytes leftover after parsing attributes in process `syz.2.430'. [ 213.129209][ T29] audit: type=1800 audit(1784288912.252:24): pid=8189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.437" name="members" dev="configfs" ino=24635 res=0 errno=0 [ 214.000318][ T8198] [U] 0="/ [ 214.028240][ T8198] [U] [ 214.034486][ T8198] [U] EeQ@ [ 214.314252][ T8191] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 214.677003][ T8195] [U]  [ 215.027693][ T29] audit: type=1800 audit(1784288914.152:25): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.440" name="dbroot" dev="configfs" ino=24226 res=0 errno=0 [ 215.493081][ T8196] kexec: Could not allocate control_code_buffer [ 216.100281][ T8224] FAULT_INJECTION: forcing a failure. [ 216.100281][ T8224] name failslab, interval 1, probability 0, space 0, times 0 [ 216.131199][ T8224] CPU: 1 UID: 0 PID: 8224 Comm: syz.0.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.131236][ T8224] Tainted: [L]=SOFTLOCKUP [ 216.131241][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 216.131250][ T8224] Call Trace: [ 216.131255][ T8224] [ 216.131261][ T8224] dump_stack_lvl+0x100/0x190 [ 216.131286][ T8224] should_fail_ex.cold+0x5/0xa [ 216.131307][ T8224] should_failslab+0xc2/0x120 [ 216.131343][ T8224] kmem_cache_alloc_noprof+0x91/0x6a0 [ 216.131374][ T8224] ? alloc_uid+0xe2/0x4c0 [ 216.131407][ T8224] ? alloc_uid+0x13d/0x4c0 [ 216.131431][ T8224] alloc_uid+0x13d/0x4c0 [ 216.131447][ T8224] ? __pfx_alloc_uid+0x10/0x10 [ 216.131464][ T8224] ? bpf_lsm_capable+0x9/0x10 [ 216.131478][ T8224] ? security_capable+0x80/0x260 [ 216.131502][ T8224] __sys_setreuid+0x63c/0xb00 [ 216.131527][ T8224] do_syscall_64+0x115/0x840 [ 216.131541][ T8224] ? clear_bhb_loop+0x40/0x90 [ 216.131560][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.131576][ T8224] RIP: 0033:0x7f253059de59 [ 216.131590][ T8224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.131604][ T8224] RSP: 002b:00007f253138d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 216.131619][ T8224] RAX: ffffffffffffffda RBX: 00007f2530826180 RCX: 00007f253059de59 [ 216.131629][ T8224] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 216.131637][ T8224] RBP: 00007f2530633e6f R08: 0000000000000000 R09: 0000000000000000 [ 216.131646][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.131654][ T8224] R13: 00007f2530826218 R14: 00007f2530826180 R15: 00007ffce48c71f8 [ 216.131673][ T8224] [ 217.776391][ T29] audit: type=1800 audit(1784288916.902:26): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.448" name="members" dev="configfs" ino=24363 res=0 errno=0 [ 218.596664][ T8256] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 218.719521][ T8269] netlink: 326 bytes leftover after parsing attributes in process `syz.2.451'. [ 219.369511][ T8281] netlink: 2388 bytes leftover after parsing attributes in process `syz.3.453'. [ 219.684461][ T8284] futex_wake_op: syz.0.454 tries to shift op by -2048; fix this program [ 219.702224][ T8284] 0x000000000001-0x000000020000 : "" [ 219.766336][ T8284] ftl_cs: FTL header corrupt! [ 220.220762][ T8285] kfence: disabled [ 221.182995][ T29] audit: type=1800 audit(1784288920.302:27): pid=8311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.457" name="members" dev="configfs" ino=24982 res=0 errno=0 [ 221.546968][ T29] audit: type=1800 audit(1784288920.672:28): pid=8322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.462" name="members" dev="configfs" ino=25851 res=0 errno=0 [ 221.612080][ T8319] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 222.036260][ T8331] netlink: 2388 bytes leftover after parsing attributes in process `syz.1.464'. [ 222.776500][ T8323] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 223.227600][ T29] audit: type=1804 audit(1784288922.352:29): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.470" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 223.526680][ T8360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'. [ 223.692921][ T8338] kexec: Could not allocate control_code_buffer [ 223.867903][ T8359] zswap: compressor not available [ 224.714599][ T8377] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 225.929467][ T29] audit: type=1800 audit(1784288925.052:30): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.477" name="members" dev="configfs" ino=26151 res=0 errno=0 [ 226.595238][ T8391] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 228.409347][ T8408] kexec: Could not allocate control_code_buffer [ 228.764370][ T8433] [U] 0="/ [ 228.778455][ T8433] [U] [ 228.791964][ T8433] [U] EeQ@ [ 229.297497][ T8439] netlink: 1 bytes leftover after parsing attributes in process `syz.3.485'. [ 229.630690][ T8429] [U]  [ 230.264046][ T8430] kexec: Could not allocate control_code_buffer [ 230.456537][ T29] audit: type=1800 audit(1784288929.582:31): pid=8464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.489" name="members" dev="configfs" ino=26703 res=0 errno=0 [ 230.726727][ T8470] random: crng reseeded on system resumption [ 231.486275][ T8481] vivid-007: ================= START STATUS ================= [ 231.544474][ T8481] vivid-007: Generate PTS: true [ 231.552025][ T8481] vivid-007: Generate SCR: true [ 231.576701][ T8481] tpg source WxH: 320x240 (Y'CbCr) [ 231.603533][ T8481] tpg field: 1 [ 231.619972][ T8481] tpg crop: (0,0)/320x240 [ 231.649339][ T8481] tpg compose: (0,0)/320x240 [ 231.676779][ T8481] tpg colorspace: 8 [ 231.693945][ T8481] tpg transfer function: 0/0 [ 231.722155][ T8481] tpg Y'CbCr encoding: 0/0 [ 231.739667][ T8481] tpg quantization: 0/0 [ 231.744174][ T8481] tpg RGB range: 0/2 [ 231.769016][ T8481] vivid-007: ================== END STATUS ================== [ 232.915107][ T29] audit: type=1800 audit(1784288932.042:32): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.501" name="members" dev="configfs" ino=26810 res=0 errno=0 [ 233.587426][ T8525] vivid-007: ================= START STATUS ================= [ 233.623065][ T8522] smpboot: CPU 1 is now offline [ 233.650688][ T8525] vivid-007: Generate PTS: true [ 233.676580][ T8525] vivid-007: Generate SCR: true [ 233.697544][ T8525] tpg source WxH: 320x240 (Y'CbCr) [ 233.729194][ T8525] tpg field: 1 [ 233.757123][ T8525] tpg crop: (0,0)/320x240 [ 233.778598][ T8525] tpg compose: (0,0)/320x240 [ 233.797783][ T8525] tpg colorspace: 8 [ 233.815332][ T8525] tpg transfer function: 0/0 [ 233.836385][ T8525] tpg Y'CbCr encoding: 0/0 [ 233.872524][ T8525] tpg quantization: 0/0 [ 233.895445][ T8525] tpg RGB range: 0/2 [ 233.917671][ T8525] vivid-007: ================== END STATUS ================== [ 234.346686][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.508'. [ 234.426713][ T8536] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.503: iget: checksum invalid [ 234.548231][ T8563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.509'. [ 234.578715][ T8536] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 234.618462][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.509'. [ 234.645167][ T8536] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.503: iget: checksum invalid [ 234.728159][ T8536] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 234.934873][ T8536] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.503: iget: checksum invalid [ 235.033715][ T8536] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 235.100568][ T8536] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.503: iget: checksum invalid [ 235.163201][ T8536] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 235.210406][ T8536] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 235.287762][ T8536] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 235.805766][ T29] audit: type=1800 audit(1784288934.932:33): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.512" name="members" dev="configfs" ino=27132 res=0 errno=0 [ 236.584405][ T8597] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 237.258185][ T8574] Process accounting paused [ 237.420678][ T8603] [U] ^\ [ 238.060355][ T8589] kexec: Could not allocate control_code_buffer [ 240.042039][ T8660] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 240.062402][ T8648] ubi0: attaching mtd0 [ 240.163523][ T8648] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 240.260212][ T8648] eraseblock attaching information dump: [ 240.307363][ T8648] ec 1 [ 240.336647][ T8648] pnum 0 [ 240.398003][ T8648] lnum 0 [ 240.439375][ T8648] scrub 0 [ 240.473908][ T8648] sqnum 1 [ 240.514393][ T8648] Volume identifier header dump: [ 240.576855][ T8648] magic 55424921 [ 240.635279][ T8648] version 1 [ 240.689721][ T8648] vol_type 1 [ 240.744959][ T8648] copy_flag 0 [ 240.798626][ T8648] compat 5 [ 240.853814][ T8648] vol_id 2147479551 [ 240.928722][ T8648] lnum 0 [ 240.945420][ T8671] netlink: 'syz.2.528': attribute type 1 has an invalid length. [ 240.973014][ T8648] data_size 0 [ 241.016730][ T8648] used_ebs 0 [ 241.054870][ T8648] data_pad 0 [ 241.079297][ T8648] sqnum 1 [ 241.116739][ T8648] hdr_crc 65b3bd2d [ 241.155212][ T8648] Volume identifier header hexdump: [ 241.372613][ T8678] netlink: 338 bytes leftover after parsing attributes in process `syz.3.530'. [ 241.425186][ T8648] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 242.086378][ T8687] Process accounting paused [ 242.677709][ T8674] kexec: Could not allocate control_code_buffer [ 242.981156][ T8701] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.005408][ T8715] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 243.027001][ T8701] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.086458][ T8701] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.156518][ T8701] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.217634][ T8701] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 243.228760][ T8720] futex_wake_op: syz.2.538 tries to shift op by -2048; fix this program [ 243.284107][ T8723] 0x000000000001-0x000000020000 : "" [ 243.332955][ T8723] ftl_cs: FTL header corrupt! [ 243.384791][ T8701] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 244.631538][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.031708][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.113436][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.191855][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.943046][ T8767] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 246.992287][ T8766] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 247.013394][ T8766] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.039633][ T8766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 247.063914][ T8766] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 247.589133][ T8771] [U] 0="/ [ 247.611044][ T8771] [U] [ 247.636279][ T8771] [U] EeQ@ [ 248.306579][ T8769] [U]  [ 248.717931][ T8781] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 249.031512][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 249.037676][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 249.085840][ T8770] kexec: Could not allocate control_code_buffer [ 249.111468][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.117510][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 250.728151][ T8808] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.762242][ T8808] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.795861][ T8808] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 250.837398][ T8808] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.384317][ T8842] [U] 0="/ [ 251.469593][ T8842] [U] [ 251.529592][ T8842] [U] EeQ@ [ 251.719212][ T8834] FAULT_INJECTION: forcing a failure. [ 251.719212][ T8834] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 251.823603][ T8834] CPU: 0 UID: 0 PID: 8834 Comm: syz.0.560 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.823629][ T8834] Tainted: [L]=SOFTLOCKUP [ 251.823635][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 251.823654][ T8834] Call Trace: [ 251.823660][ T8834] [ 251.823666][ T8834] dump_stack_lvl+0x100/0x190 [ 251.823690][ T8834] should_fail_ex.cold+0x5/0xa [ 251.823704][ T8834] ? prepare_alloc_pages+0x16d/0x5f0 [ 251.823727][ T8834] should_fail_alloc_page+0xeb/0x140 [ 251.823747][ T8834] prepare_alloc_pages+0x1f0/0x5f0 [ 251.823767][ T8834] ? __pfx_stack_trace_save+0x10/0x10 [ 251.823790][ T8834] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 251.823815][ T8834] ? zswap_entry_free+0x38e/0x640 [ 251.823836][ T8834] ? kasan_save_stack+0x3f/0x50 [ 251.823852][ T8834] ? kasan_save_stack+0x30/0x50 [ 251.823866][ T8834] ? kasan_save_track+0x14/0x30 [ 251.823881][ T8834] ? kasan_save_free_info+0x3b/0x70 [ 251.823903][ T8834] ? __kasan_slab_free+0x5f/0x80 [ 251.823928][ T8834] ? kmem_cache_free+0x127/0x6b0 [ 251.823950][ T8834] ? zswap_entry_free+0x38e/0x640 [ 251.823978][ T8834] ? zswap_load+0x427/0x7c0 [ 251.823997][ T8834] ? swap_read_folio+0xab7/0x2ec0 [ 251.824019][ T8834] ? swap_cache_read_folio+0xae/0x140 [ 251.824039][ T8834] ? swap_cluster_readahead+0x387/0x5f0 [ 251.824053][ T8834] ? swapin_readahead+0x159/0x1200 [ 251.824067][ T8834] ? do_swap_page+0xf98/0x5780 [ 251.824086][ T8834] ? __handle_mm_fault+0x192f/0x2a00 [ 251.824107][ T8834] ? handle_mm_fault+0x37b/0xa30 [ 251.824131][ T8834] ? do_user_addr_fault+0x5a3/0x12f0 [ 251.824149][ T8834] ? exc_page_fault+0x6f/0xd0 [ 251.824170][ T8834] ? asm_exc_page_fault+0x26/0x30 [ 251.824186][ T8834] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 251.824219][ T8834] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.824240][ T8834] ? policy_nodemask+0xed/0x4f0 [ 251.824260][ T8834] alloc_pages_mpol+0x1fb/0x540 [ 251.824280][ T8834] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 251.824299][ T8834] ? do_raw_spin_lock+0x128/0x260 [ 251.824313][ T8834] ? find_held_lock+0x2b/0x80 [ 251.824329][ T8834] ? swap_cache_alloc_folio+0x374/0xc50 [ 251.824346][ T8834] folio_alloc_mpol_noprof+0x36/0x260 [ 251.824369][ T8834] swap_cache_alloc_folio+0x3d7/0xc50 [ 251.824388][ T8834] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 251.824403][ T8834] ? swap_cache_get_folio+0x28d/0x360 [ 251.824418][ T8834] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 251.824433][ T8834] ? find_held_lock+0x2b/0x80 [ 251.824455][ T8834] ? mlock_drain_local+0x254/0x4e0 [ 251.824469][ T8834] ? mlock_drain_local+0x254/0x4e0 [ 251.824487][ T8834] swap_cache_read_folio+0x47/0x140 [ 251.824505][ T8834] swap_cluster_readahead+0x387/0x5f0 [ 251.824525][ T8834] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 251.824543][ T8834] ? madvise_collapse+0x42c/0x750 [ 251.824571][ T8834] ? __lock_acquire+0x49f/0x1a40 [ 251.824591][ T8834] ? get_vma_policy+0x23d/0x3b0 [ 251.824612][ T8834] swapin_readahead+0x159/0x1200 [ 251.824634][ T8834] ? __pfx_swapin_readahead+0x10/0x10 [ 251.824653][ T8834] ? swap_table_get+0x10d/0x2c0 [ 251.824676][ T8834] ? swap_cache_get_folio+0x28d/0x360 [ 251.824690][ T8834] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 251.824705][ T8834] ? __pfx_softleaf_type+0x10/0x10 [ 251.824723][ T8834] ? do_swap_page+0xf98/0x5780 [ 251.824743][ T8834] do_swap_page+0xf98/0x5780 [ 251.824776][ T8834] ? __pfx_do_swap_page+0x10/0x10 [ 251.824805][ T8834] ? __lock_acquire+0x49f/0x1a40 [ 251.824826][ T8834] ? rwsem_wake.isra.0+0xb8/0x100 [ 251.824843][ T8834] ? rcu_is_watching+0x12/0xc0 [ 251.824859][ T8834] ? __pte_offset_map+0x179/0x310 [ 251.824879][ T8834] __handle_mm_fault+0x192f/0x2a00 [ 251.824906][ T8834] ? reacquire_held_locks+0xce/0x1e0 [ 251.824927][ T8834] ? __pfx___handle_mm_fault+0x10/0x10 [ 251.824952][ T8834] ? lock_vma_under_rcu+0x17c/0x590 [ 251.824985][ T8834] handle_mm_fault+0x37b/0xa30 [ 251.825010][ T8834] do_user_addr_fault+0x5a3/0x12f0 [ 251.825035][ T8834] exc_page_fault+0x6f/0xd0 [ 251.825058][ T8834] asm_exc_page_fault+0x26/0x30 [ 251.825073][ T8834] RIP: 0033:0x7f253046413d [ 251.825087][ T8834] Code: fe ff 48 83 c4 78 5b 5d 41 5c 41 5e c3 48 8b 44 24 20 48 8b 5c 24 08 48 8b b0 88 00 00 00 8b 78 08 48 8d 53 30 e8 93 39 ff ff <48> 89 83 88 00 00 00 e9 35 fe ff ff 0f 1f 80 00 00 00 00 8b 7c 24 [ 251.825101][ T8834] RSP: 002b:00007f25313cf050 EFLAGS: 00010206 [ 251.825113][ T8834] RAX: ffffffffffffffff RBX: 00007f2530825fa0 RCX: 00007f2530633e6f [ 251.825123][ T8834] RDX: 0000000000000000 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 251.825133][ T8834] RBP: 00007f2530633e6f R08: 0000000000000000 R09: 0000000000000000 [ 251.825142][ T8834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.825150][ T8834] R13: 00007f2530826038 R14: 00007f2530825fa0 R15: 00007ffce48c71f8 [ 251.825171][ T8834] [ 252.308955][ T8836] [U]  [ 252.340044][ T8838] kexec: Could not allocate control_code_buffer [ 252.863913][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.870994][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 252.877147][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 252.883244][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.470016][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 253.678839][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'. [ 253.838424][ T8859] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.565: iget: checksum invalid [ 253.998648][ T8859] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 254.107101][ T8859] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.565: iget: checksum invalid [ 254.131934][ T8874] hub 1-0:1.0: USB hub found [ 254.149895][ T8874] hub 1-0:1.0: 1 port detected [ 254.182463][ T8859] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 254.256250][ T8859] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.565: iget: checksum invalid [ 254.304154][ T8859] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 254.351655][ T8859] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.565: iget: checksum invalid [ 254.423508][ T8859] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 254.476299][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.482824][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.500270][ T8859] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 254.525336][ T8859] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 256.112896][ T8906] [U] 0="/ [ 256.130701][ T8906] [U] [ 256.141433][ T8906] [U] EeQ@ [ 256.610830][ T8917] FAULT_INJECTION: forcing a failure. [ 256.610830][ T8917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.657668][ T8917] CPU: 0 UID: 0 PID: 8917 Comm: syz.2.575 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.657696][ T8917] Tainted: [L]=SOFTLOCKUP [ 256.657702][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 256.657712][ T8917] Call Trace: [ 256.657717][ T8917] [ 256.657723][ T8917] dump_stack_lvl+0x100/0x190 [ 256.657745][ T8917] should_fail_ex.cold+0x5/0xa [ 256.657760][ T8917] ? prepare_alloc_pages+0x16d/0x5f0 [ 256.657783][ T8917] should_fail_alloc_page+0xeb/0x140 [ 256.657804][ T8917] prepare_alloc_pages+0x1f0/0x5f0 [ 256.657828][ T8917] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 256.657844][ T8917] ? __pfx_stack_trace_save+0x10/0x10 [ 256.657866][ T8917] ? __lock_acquire+0x49f/0x1a40 [ 256.657888][ T8917] ? kasan_save_stack+0x3f/0x50 [ 256.657904][ T8917] ? kasan_save_stack+0x30/0x50 [ 256.657919][ T8917] ? kasan_save_track+0x14/0x30 [ 256.657941][ T8917] ? __kasan_slab_alloc+0x89/0x90 [ 256.657958][ T8917] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 256.657975][ T8917] ? pte_alloc_one+0x82/0x3d0 [ 256.657996][ T8917] ? __pte_alloc+0x6d/0x3e0 [ 256.658014][ T8917] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 256.658032][ T8917] ? __lock_acquire+0x49f/0x1a40 [ 256.658056][ T8917] ? __lock_acquire+0x49f/0x1a40 [ 256.658081][ T8917] ? __lock_acquire+0x49f/0x1a40 [ 256.658103][ T8917] ? __lock_acquire+0x49f/0x1a40 [ 256.658123][ T8917] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 256.658146][ T8917] ? policy_nodemask+0xed/0x4f0 [ 256.658167][ T8917] alloc_pages_mpol+0x1fb/0x540 [ 256.658187][ T8917] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 256.658211][ T8917] alloc_pages_noprof+0x1a/0x160 [ 256.658233][ T8917] pte_alloc_one+0x1c/0x3d0 [ 256.658254][ T8917] __pte_alloc+0x6d/0x3e0 [ 256.658271][ T8917] ? __pfx___pte_alloc+0x10/0x10 [ 256.658287][ T8917] ? __pfx___might_resched+0x10/0x10 [ 256.658307][ T8917] ? copy_page_range+0x1c4a/0x5b20 [ 256.658332][ T8917] copy_page_range+0x3dd8/0x5b20 [ 256.658375][ T8917] ? mas_wr_store_entry+0xa1/0x1e80 [ 256.658393][ T8917] ? __pfx_copy_page_range+0x10/0x10 [ 256.658422][ T8917] ? __pfx___might_resched+0x10/0x10 [ 256.658445][ T8917] ? dup_mmap+0xcfe/0x21b0 [ 256.658465][ T8917] ? down_write+0x146/0x1f0 [ 256.658482][ T8917] ? up_write+0x2e5/0x5c0 [ 256.658498][ T8917] dup_mmap+0xd44/0x21b0 [ 256.658525][ T8917] ? __pfx_dup_mmap+0x10/0x10 [ 256.658544][ T8917] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 256.658569][ T8917] ? __lock_acquire+0x49f/0x1a40 [ 256.658590][ T8917] ? find_held_lock+0x2b/0x80 [ 256.658605][ T8917] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 256.658640][ T8917] copy_process+0x4588/0x8030 [ 256.658667][ T8917] ? __pfx_copy_process+0x10/0x10 [ 256.658688][ T8917] ? _copy_from_user+0x59/0xd0 [ 256.658713][ T8917] kernel_clone+0x176/0x9d0 [ 256.658731][ T8917] ? __pfx_kernel_clone+0x10/0x10 [ 256.658747][ T8917] ? futex_private_hash_put+0x115/0x1c0 [ 256.658775][ T8917] ? __pfx_futex_wake+0x10/0x10 [ 256.658796][ T8917] __do_sys_clone3+0x214/0x290 [ 256.658813][ T8917] ? __pfx___do_sys_clone3+0x10/0x10 [ 256.658855][ T8917] do_syscall_64+0x115/0x840 [ 256.658869][ T8917] ? clear_bhb_loop+0x40/0x90 [ 256.658887][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.658902][ T8917] RIP: 0033:0x7fe59e19de59 [ 256.658916][ T8917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.658931][ T8917] RSP: 002b:00007fe59f121ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 256.658952][ T8917] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe59e19de59 [ 256.658961][ T8917] RDX: 00007fe59f121f10 RSI: 0000000000000058 RDI: 00007fe59f121f10 [ 256.658971][ T8917] RBP: 00007fe59e233e6f R08: 0000000000000000 R09: 0000000000000058 [ 256.658980][ T8917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.658988][ T8917] R13: 00007fe59e426038 R14: 00007fe59e425fa0 R15: 00007fffc1d8bb08 [ 256.659009][ T8917] [ 257.047709][ T8904] [U]  [ 257.177518][ T8905] kexec: Could not allocate control_code_buffer [ 257.661616][ T8928] netlink: 342 bytes leftover after parsing attributes in process `syz.2.576'. [ 258.277290][ T8923] kexec: Could not allocate control_code_buffer [ 259.088554][ T29] audit: type=1800 audit(1784288958.212:34): pid=8951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.583" name="members" dev="configfs" ino=30934 res=0 errno=0 [ 259.441607][ T8955] [U] ^\ [ 259.558471][ T8949] Invalid ELF header magic: != ELF [ 259.964567][ T8951] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 260.177599][ T8966] FAULT_INJECTION: forcing a failure. [ 260.177599][ T8966] name failslab, interval 1, probability 0, space 0, times 0 [ 260.239127][ T8966] CPU: 0 UID: 0 PID: 8966 Comm: syz.2.587 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.239155][ T8966] Tainted: [L]=SOFTLOCKUP [ 260.239161][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 260.239171][ T8966] Call Trace: [ 260.239176][ T8966] [ 260.239182][ T8966] dump_stack_lvl+0x100/0x190 [ 260.239204][ T8966] should_fail_ex.cold+0x5/0xa [ 260.239222][ T8966] should_failslab+0xc2/0x120 [ 260.239242][ T8966] kmem_cache_alloc_noprof+0x91/0x6a0 [ 260.239261][ T8966] ? __mpol_dup+0x74/0x390 [ 260.239285][ T8966] __mpol_dup+0x74/0x390 [ 260.239305][ T8966] ? __pfx___mpol_dup+0x10/0x10 [ 260.239334][ T8966] mbind_range+0x2ad/0x550 [ 260.239357][ T8966] do_mbind+0x7dc/0xfd0 [ 260.239384][ T8966] ? __pfx_do_mbind+0x10/0x10 [ 260.239406][ T8966] ? find_held_lock+0x2b/0x80 [ 260.239423][ T8966] ? ksys_write+0x190/0x250 [ 260.239452][ T8966] ? __pfx_get_nodes+0x10/0x10 [ 260.239474][ T8966] kernel_mbind+0x1b7/0x200 [ 260.239497][ T8966] ? __pfx_kernel_mbind+0x10/0x10 [ 260.239529][ T8966] do_syscall_64+0x115/0x840 [ 260.239543][ T8966] ? clear_bhb_loop+0x40/0x90 [ 260.239560][ T8966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.239576][ T8966] RIP: 0033:0x7fe59e19de59 [ 260.239590][ T8966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.239604][ T8966] RSP: 002b:00007fe59f122028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 260.239620][ T8966] RAX: ffffffffffffffda RBX: 00007fe59e425fa0 RCX: 00007fe59e19de59 [ 260.239630][ T8966] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 260.239638][ T8966] RBP: 00007fe59e233e6f R08: 0000002000000006 R09: 0000000000000002 [ 260.239655][ T8966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.239664][ T8966] R13: 00007fe59e426038 R14: 00007fe59e425fa0 R15: 00007fffc1d8bb08 [ 260.239685][ T8966] [ 261.174074][ T8984] zswap: compressor not available [ 261.418581][ T8987] zswap: compressor not available [ 261.532625][ T8992] FAULT_INJECTION: forcing a failure. [ 261.532625][ T8992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.610665][ T8992] CPU: 0 UID: 0 PID: 8992 Comm: syz.0.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.610693][ T8992] Tainted: [L]=SOFTLOCKUP [ 261.610699][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 261.610708][ T8992] Call Trace: [ 261.610714][ T8992] [ 261.610719][ T8992] dump_stack_lvl+0x100/0x190 [ 261.610742][ T8992] should_fail_ex.cold+0x5/0xa [ 261.610759][ T8992] _copy_from_user+0x2e/0xd0 [ 261.610780][ T8992] copy_msghdr_from_user+0x9f/0x4c0 [ 261.610804][ T8992] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 261.610829][ T8992] ? rcu_is_watching+0x12/0xc0 [ 261.610845][ T8992] ? ___sys_sendmsg+0x19d/0x1e0 [ 261.610865][ T8992] ? kfree+0x1e5/0x6c0 [ 261.610889][ T8992] ___sys_sendmsg+0x106/0x1e0 [ 261.610911][ T8992] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.610933][ T8992] ? futex_hash+0x311/0x400 [ 261.610969][ T8992] ? __pfx___might_resched+0x10/0x10 [ 261.610994][ T8992] __sys_sendmmsg+0x20c/0x440 [ 261.611013][ T8992] ? __pfx___sys_sendmmsg+0x10/0x10 [ 261.611036][ T8992] ? __pfx_do_futex+0x10/0x10 [ 261.611052][ T8992] ? __fget_files+0x215/0x3d0 [ 261.611081][ T8992] ? xfd_validate_state+0x129/0x190 [ 261.611101][ T8992] __x64_sys_sendmmsg+0x9c/0x100 [ 261.611118][ T8992] ? lockdep_hardirqs_on+0x78/0x100 [ 261.611141][ T8992] do_syscall_64+0x115/0x840 [ 261.611154][ T8992] ? clear_bhb_loop+0x40/0x90 [ 261.611172][ T8992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.611188][ T8992] RIP: 0033:0x7f253059de59 [ 261.611201][ T8992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.611214][ T8992] RSP: 002b:00007f25313cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 261.611229][ T8992] RAX: ffffffffffffffda RBX: 00007f2530825fa0 RCX: 00007f253059de59 [ 261.611239][ T8992] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 261.611248][ T8992] RBP: 00007f2530633e6f R08: 0000000000000000 R09: 0000000000000000 [ 261.611257][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.611265][ T8992] R13: 00007f2530826038 R14: 00007f2530825fa0 R15: 00007ffce48c71f8 [ 261.611285][ T8992] [ 261.897454][ T8999] zswap: compressor not available [ 261.916826][ T8996] zswap: compressor not available [ 262.283795][ T9015] [U] 0="/ [ 262.306615][ T9015] [U] [ 262.320234][ T9015] [U] EeQ@ [ 262.988098][ T9013] [U]  [ 263.842848][ T9014] kexec: Could not allocate control_code_buffer [ 264.090991][ T9034] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 264.195976][ T29] audit: type=1800 audit(1784288963.322:35): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.596" name="members" dev="configfs" ino=31579 res=0 errno=0 [ 265.150520][ T9042] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 265.395054][ T9067] syz.3.600 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 265.698001][ T9070] [U] ^\ [ 266.254923][ T9082] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 266.385312][ T9082] pci 0000:00:01.3: PCI INT A: no GSI [ 267.283046][ T9081] Process accounting resumed [ 267.520430][ T29] audit: type=1800 audit(1784288966.642:36): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.609" name="members" dev="configfs" ino=32031 res=0 errno=0 [ 268.354618][ T9109] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 268.577720][ T9110] FAULT_INJECTION: forcing a failure. [ 268.577720][ T9110] name failslab, interval 1, probability 0, space 0, times 0 [ 268.830345][ T9110] CPU: 0 UID: 0 PID: 9110 Comm: syz.2.607 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.830371][ T9110] Tainted: [L]=SOFTLOCKUP [ 268.830377][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 268.830387][ T9110] Call Trace: [ 268.830393][ T9110] [ 268.830399][ T9110] dump_stack_lvl+0x100/0x190 [ 268.830422][ T9110] should_fail_ex.cold+0x5/0xa [ 268.830439][ T9110] should_failslab+0xc2/0x120 [ 268.830459][ T9110] __kmalloc_cache_noprof+0x91/0x6c0 [ 268.830483][ T9110] ? ip_vs_protocol_net_init+0xbe/0x300 [ 268.830502][ T9110] ip_vs_protocol_net_init+0xbe/0x300 [ 268.830520][ T9110] __ip_vs_init+0x239/0x520 [ 268.830540][ T9110] ? __pfx___ip_vs_init+0x10/0x10 [ 268.830557][ T9110] ops_init+0x1e2/0x5f0 [ 268.830578][ T9110] setup_net+0x118/0x3a0 [ 268.830595][ T9110] ? __pfx_setup_net+0x10/0x10 [ 268.830613][ T9110] ? mutex_init_lockdep+0xf1/0x120 [ 268.830639][ T9110] copy_net_ns+0x46f/0x7c0 [ 268.830660][ T9110] create_new_namespaces+0x3ea/0xac0 [ 268.830687][ T9110] unshare_nsproxy_namespaces+0xf2/0x220 [ 268.830704][ T9110] ksys_unshare+0x438/0xab0 [ 268.830723][ T9110] ? __pfx_ksys_unshare+0x10/0x10 [ 268.830747][ T9110] __x64_sys_unshare+0x31/0x40 [ 268.830764][ T9110] do_syscall_64+0x115/0x840 [ 268.830778][ T9110] ? clear_bhb_loop+0x40/0x90 [ 268.830796][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.830811][ T9110] RIP: 0033:0x7fe59e19de59 [ 268.830825][ T9110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.830840][ T9110] RSP: 002b:00007fe59f0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 268.830854][ T9110] RAX: ffffffffffffffda RBX: 00007fe59e426270 RCX: 00007fe59e19de59 [ 268.830864][ T9110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 268.830873][ T9110] RBP: 00007fe59e233e6f R08: 0000000000000000 R09: 0000000000000000 [ 268.830882][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.830891][ T9110] R13: 00007fe59e426308 R14: 00007fe59e426270 R15: 00007fffc1d8bb08 [ 268.830918][ T9110] [ 269.283771][ T9125] vivid-007: ================= START STATUS ================= [ 269.298090][ T9125] vivid-007: Generate PTS: true [ 269.303180][ T9125] vivid-007: Generate SCR: true [ 269.308109][ T9125] tpg source WxH: 320x240 (Y'CbCr) [ 269.313323][ T9125] tpg field: 1 [ 269.316687][ T9125] tpg crop: (0,0)/320x240 [ 269.321090][ T9125] tpg compose: (0,0)/320x240 [ 269.326170][ T9125] tpg colorspace: 8 [ 269.335308][ T9125] tpg transfer function: 0/0 [ 269.350333][ T9125] tpg Y'CbCr encoding: 0/0 [ 269.367710][ T9125] tpg quantization: 0/0 [ 269.378742][ T9125] tpg RGB range: 0/2 [ 269.389844][ T9125] vivid-007: ================== END STATUS ================== [ 272.629825][ T29] audit: type=1800 audit(1784288971.752:37): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.624" name="members" dev="configfs" ino=32439 res=0 errno=0 [ 272.932368][ T9138] Process accounting resumed [ 273.934057][ T9195] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 273.942090][ T9212] [U] 0="/ [ 273.956269][ T9212] [U] [ 273.978001][ T9212] [U] EeQ@ [ 274.435811][ T9211] [U]  [ 274.466555][ T9203] kexec: Could not allocate control_code_buffer [ 274.643806][ T9219] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 274.818368][ T9228] netlink: 25 bytes leftover after parsing attributes in process `syz.1.630'. [ 275.747488][ T9247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.633'. [ 275.871963][ T9247] bond0: (slave bond_slave_0): Releasing backup interface [ 278.448802][ T9312] random: crng reseeded on system resumption [ 278.594465][ T29] audit: type=1800 audit(1784288977.722:38): pid=9310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.645" name="lu_gp_id" dev="configfs" ino=32976 res=0 errno=0 [ 279.911634][ T9336] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 281.140881][ T9365] [U] ^\ [ 281.578787][ T9372] futex_wake_op: syz.1.656 tries to shift op by -2048; fix this program [ 281.665669][ T9372] futex_wake_op: syz.1.656 tries to shift op by -2048; fix this program [ 281.726634][ T9378] 0x000000000001-0x000000020000 : "" [ 281.861234][ T9378] ftl_cs: FTL header corrupt! [ 283.527850][ T9400] FAULT_INJECTION: forcing a failure. [ 283.527850][ T9400] name failslab, interval 1, probability 0, space 0, times 0 [ 283.560012][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.0.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.560039][ T9400] Tainted: [L]=SOFTLOCKUP [ 283.560045][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 283.560055][ T9400] Call Trace: [ 283.560060][ T9400] [ 283.560066][ T9400] dump_stack_lvl+0x100/0x190 [ 283.560089][ T9400] should_fail_ex.cold+0x5/0xa [ 283.560107][ T9400] should_failslab+0xc2/0x120 [ 283.560126][ T9400] kmem_cache_alloc_noprof+0x91/0x6a0 [ 283.560144][ T9400] ? vm_area_alloc+0x1f/0x160 [ 283.560169][ T9400] vm_area_alloc+0x1f/0x160 [ 283.560190][ T9400] __mmap_region+0x1033/0x2db0 [ 283.560216][ T9400] ? __pfx___mmap_region+0x10/0x10 [ 283.560243][ T9400] ? down_write+0x146/0x1f0 [ 283.560268][ T9400] ? __lock_acquire+0x49f/0x1a40 [ 283.560290][ T9400] ? do_raw_spin_unlock+0x145/0x1e0 [ 283.560306][ T9400] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 283.560344][ T9400] ? lockdep_hardirqs_on+0x78/0x100 [ 283.560366][ T9400] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 283.560408][ T9400] ? preempt_schedule_thunk+0x16/0x40 [ 283.560433][ T9400] mmap_region+0x35d/0x620 [ 283.560450][ T9400] ? __pfx_mmap_region+0x10/0x10 [ 283.560465][ T9400] ? shmem_get_unmapped_area+0x141/0x960 [ 283.560494][ T9400] ? cap_mmap_addr+0x4b/0x120 [ 283.560516][ T9400] ? bpf_lsm_mmap_addr+0x9/0x30 [ 283.560538][ T9400] ? security_mmap_addr+0x71/0x1e0 [ 283.560556][ T9400] ? __get_unmapped_area+0x255/0x3e0 [ 283.560578][ T9400] do_mmap+0xc63/0x12f0 [ 283.560601][ T9400] ? __pfx_do_mmap+0x10/0x10 [ 283.560620][ T9400] ? __pfx_down_write_killable+0x10/0x10 [ 283.560639][ T9400] vm_mmap_pgoff+0x29e/0x470 [ 283.560661][ T9400] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 283.560683][ T9400] ? __pfx_do_futex+0x10/0x10 [ 283.560701][ T9400] ksys_mmap_pgoff+0xe4/0x610 [ 283.560720][ T9400] ? __x64_sys_futex+0x358/0x4d0 [ 283.560735][ T9400] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 283.560753][ T9400] ? xfd_validate_state+0x129/0x190 [ 283.560773][ T9400] __x64_sys_mmap+0x125/0x190 [ 283.560791][ T9400] do_syscall_64+0x115/0x840 [ 283.560804][ T9400] ? clear_bhb_loop+0x40/0x90 [ 283.560822][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.560838][ T9400] RIP: 0033:0x7f253059de59 [ 283.560852][ T9400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.560865][ T9400] RSP: 002b:00007f25313cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 283.560883][ T9400] RAX: ffffffffffffffda RBX: 00007f2530825fa0 RCX: 00007f253059de59 [ 283.560893][ T9400] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000200000000000 [ 283.560902][ T9400] RBP: 00007f2530633e6f R08: ffffffffffffffff R09: 0000000000008000 [ 283.560912][ T9400] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 283.560921][ T9400] R13: 00007f2530826038 R14: 00007f2530825fa0 R15: 00007ffce48c71f8 [ 283.560940][ T9400] [ 285.135753][ T9406] Process accounting resumed [ 285.526688][ T9445] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 288.630512][ T9512] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 289.277728][ T9521] vivid-007: ================= START STATUS ================= [ 289.337435][ T9521] vivid-007: Generate PTS: true [ 289.363949][ T9521] vivid-007: Generate SCR: true [ 289.386629][ T9521] tpg source WxH: 320x240 (Y'CbCr) [ 289.410497][ T9521] tpg field: 1 [ 289.429045][ T9521] tpg crop: (0,0)/320x240 [ 289.447599][ T9521] tpg compose: (0,0)/320x240 [ 289.471466][ T9521] tpg colorspace: 8 [ 289.495307][ T9521] tpg transfer function: 0/0 [ 289.516257][ T9521] tpg Y'CbCr encoding: 0/0 [ 289.537382][ T9521] tpg quantization: 0/0 [ 289.559705][ T9521] tpg RGB range: 0/2 [ 289.581049][ T9521] vivid-007: ================== END STATUS ================== [ 290.050574][ T9538] FAULT_INJECTION: forcing a failure. [ 290.050574][ T9538] name failslab, interval 1, probability 0, space 0, times 0 [ 290.122477][ T9538] CPU: 0 UID: 0 PID: 9538 Comm: syz.1.687 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.122505][ T9538] Tainted: [L]=SOFTLOCKUP [ 290.122510][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 290.122520][ T9538] Call Trace: [ 290.122525][ T9538] [ 290.122531][ T9538] dump_stack_lvl+0x100/0x190 [ 290.122552][ T9538] should_fail_ex.cold+0x5/0xa [ 290.122570][ T9538] should_failslab+0xc2/0x120 [ 290.122591][ T9538] __kmalloc_cache_noprof+0x91/0x6c0 [ 290.122616][ T9538] ? trace_pid_list_alloc+0x2fe/0x480 [ 290.122639][ T9538] trace_pid_list_alloc+0x2fe/0x480 [ 290.122660][ T9538] trace_pid_write+0x110/0x460 [ 290.122680][ T9538] ? __pfx_trace_pid_write+0x10/0x10 [ 290.122711][ T9538] event_pid_write.isra.0+0x1e4/0x7d0 [ 290.122734][ T9538] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 290.122760][ T9538] vfs_write+0x2aa/0x1050 [ 290.122790][ T9538] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 290.122813][ T9538] ? __pfx_vfs_write+0x10/0x10 [ 290.122835][ T9538] ? __fget_files+0x215/0x3d0 [ 290.122862][ T9538] ? __fget_files+0x21f/0x3d0 [ 290.122894][ T9538] ksys_write+0x12a/0x250 [ 290.122916][ T9538] ? __pfx_ksys_write+0x10/0x10 [ 290.122944][ T9538] do_syscall_64+0x115/0x840 [ 290.122958][ T9538] ? clear_bhb_loop+0x40/0x90 [ 290.122976][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.122993][ T9538] RIP: 0033:0x7eff4eb9de59 [ 290.123007][ T9538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.123021][ T9538] RSP: 002b:00007eff4fa95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 290.123035][ T9538] RAX: ffffffffffffffda RBX: 00007eff4ee25fa0 RCX: 00007eff4eb9de59 [ 290.123045][ T9538] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 290.123054][ T9538] RBP: 00007eff4ec33e6f R08: 0000000000000000 R09: 0000000000000000 [ 290.123063][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.123072][ T9538] R13: 00007eff4ee26038 R14: 00007eff4ee25fa0 R15: 00007fffc40d1618 [ 290.123092][ T9538] [ 290.814024][ T29] audit: type=1800 audit(1784288989.922:39): pid=9548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.688" name="members" dev="configfs" ino=34259 res=0 errno=0 [ 291.347732][ T9564] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 292.078063][ T9575] [U] ^\ [ 292.187265][ T9581] Device name cannot be null; rc = [-22] [ 292.300564][ T9578] [U] ^\ [ 292.535763][ T9572] Process accounting resumed [ 294.848136][ T9632] Process accounting resumed [ 295.493933][ T29] audit: type=1800 audit(1784288994.622:40): pid=9668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.707" name="members" dev="configfs" ino=34851 res=0 errno=0 [ 295.921034][ T9674] vivid-007: ================= START STATUS ================= [ 295.958333][ T9674] vivid-007: Generate PTS: true [ 295.988537][ T9674] vivid-007: Generate SCR: true [ 296.022485][ T9674] tpg source WxH: 320x240 (Y'CbCr) [ 296.053682][ T9674] tpg field: 1 [ 296.077268][ T9674] tpg crop: (0,0)/320x240 [ 296.106924][ T9674] tpg compose: (0,0)/320x240 [ 296.161211][ T9674] tpg colorspace: 8 [ 296.189355][ T9674] tpg transfer function: 0/0 [ 296.240031][ T9674] tpg Y'CbCr encoding: 0/0 [ 296.266162][ T9674] tpg quantization: 0/0 [ 296.289591][ T9674] tpg RGB range: 0/2 [ 296.320264][ T9674] vivid-007: ================== END STATUS ================== [ 296.452931][ T9688] deleting an unspecified loop device is not supported. [ 297.333149][ T9679] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 299.526348][ T9757] HfR: entered promiscuous mode [ 299.544718][ T5627] Bluetooth: hci0: unknown advertising packet type: 0xea [ 299.544757][ T5627] Bluetooth: hci0: unknown advertising packet type: 0x32 [ 299.553888][ T5627] Bluetooth: hci0: unknown advertising packet type: 0x6f [ 299.725225][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.722'. [ 299.935781][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.722'. [ 300.260751][ T9763] openvswitch: HfR: Dropping previously announced user features [ 300.348235][ T9782] netlink: 334 bytes leftover after parsing attributes in process `syz.3.726'. [ 300.525374][ T9798] usb usb3: usbfs: process 9798 (syz.1.728) did not claim interface 0 before use [ 301.107609][ T29] audit: type=1800 audit(1784289000.232:41): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.730" name="members" dev="configfs" ino=35603 res=0 errno=0 [ 301.129549][ T9798] openvswitch: netlink: Key type 7444 is out of range max 32 [ 302.282759][ T9812] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 303.407182][ T9856] HSR: entered promiscuous mode [ 303.460665][ T9833] Process accounting paused [ 303.841117][ T9866] [U] 0="/ [ 303.884114][ T9866] [U] [ 303.931691][ T9866] [U] EeQ@ [ 304.443015][ T9851] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 304.543891][ T9860] [U]  [ 304.677379][ T5627] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 305.065622][ T9886] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 305.089781][ T9862] kexec: Could not allocate control_code_buffer [ 305.984298][ T9900] netlink: 'syz.1.747': attribute type 4 has an invalid length. [ 306.047587][ T9900] netlink: 314 bytes leftover after parsing attributes in process `syz.1.747'. [ 306.302569][ T9904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.749'. [ 308.384629][ T9945] ubi0: attaching mtd0 [ 308.414308][ T9945] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 308.432481][ T9933] kexec: Could not allocate control_code_buffer [ 308.453236][ T9945] eraseblock attaching information dump: [ 308.497423][ T9945] ec 1 [ 308.515439][ T9945] pnum 0 [ 308.537041][ T9945] lnum 0 [ 308.553933][ T9945] scrub 0 [ 308.569914][ T9945] sqnum 1 [ 308.587128][ T9945] Volume identifier header dump: [ 308.612096][ T9945] magic 55424921 [ 308.628528][ T9945] version 1 [ 308.645090][ T9945] vol_type 1 [ 308.655575][ T9945] copy_flag 0 [ 308.668873][ T9945] compat 5 [ 308.678807][ T9945] vol_id 2147479551 [ 308.692713][ T9945] lnum 0 [ 308.700032][ T9945] data_size 0 [ 308.708107][ T9945] used_ebs 0 [ 308.719544][ T9945] data_pad 0 [ 308.732511][ T9945] sqnum 1 [ 308.747381][ T9945] hdr_crc 65b3bd2d [ 308.769352][ T9945] Volume identifier header hexdump: [ 308.970624][ T9945] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 309.032728][ T9964] [U] ^\ [ 309.257421][ T9974] vivid-007: ================= START STATUS ================= [ 309.299480][ T9974] vivid-007: Generate PTS: true [ 309.327996][ T9974] vivid-007: Generate SCR: true [ 309.356895][ T9974] tpg source WxH: 320x240 (Y'CbCr) [ 309.394916][ T9974] tpg field: 1 [ 309.418239][ T9974] tpg crop: (0,0)/320x240 [ 309.445864][ T9974] tpg compose: (0,0)/320x240 [ 309.481030][ T9974] tpg colorspace: 8 [ 309.506067][ T9974] tpg transfer function: 0/0 [ 309.528146][ T9974] tpg Y'CbCr encoding: 0/0 [ 309.546170][ T9974] tpg quantization: 0/0 [ 309.564716][ T9974] tpg RGB range: 0/2 [ 309.577693][ T9974] vivid-007: ================== END STATUS ================== [ 310.165514][T10007] usb usb20: check_ctrlrecip: process 10007 (syz.1.766) requesting ep 01 but needs 81 [ 310.220817][T10007] usb usb20: usbfs: process 10007 (syz.1.766) did not claim interface 0 before use [ 310.447104][T10014] netlink: 342 bytes leftover after parsing attributes in process `syz.2.767'. [ 311.959121][T10062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.771'. [ 312.853805][T10077] [U] ^\ [ 314.329902][T10130] vivid-007: ================= START STATUS ================= [ 314.361677][T10130] vivid-007: Generate PTS: true [ 314.386873][T10130] vivid-007: Generate SCR: true [ 314.408140][T10130] tpg source WxH: 320x240 (Y'CbCr) [ 314.426975][T10130] tpg field: 1 [ 314.436930][T10130] tpg crop: (0,0)/320x240 [ 314.455224][T10130] tpg compose: (0,0)/320x240 [ 314.485800][T10130] tpg colorspace: 8 [ 314.505633][T10130] tpg transfer function: 0/0 [ 314.527384][T10130] tpg Y'CbCr encoding: 0/0 [ 314.561119][T10130] tpg quantization: 0/0 [ 314.589902][T10130] tpg RGB range: 0/2 [ 314.611727][T10130] vivid-007: ================== END STATUS ================== [ 315.568049][T10156] Process accounting paused [ 316.747581][T10172] [U] ^\ [ 317.153734][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 317.197158][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.208808][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.727250][T10195] FAULT_INJECTION: forcing a failure. [ 317.727250][T10195] name failslab, interval 1, probability 0, space 0, times 0 [ 318.025227][T10195] CPU: 0 UID: 0 PID: 10195 Comm: syz.3.790 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.025254][T10195] Tainted: [L]=SOFTLOCKUP [ 318.025259][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 318.025271][T10195] Call Trace: [ 318.025276][T10195] [ 318.025282][T10195] dump_stack_lvl+0x100/0x190 [ 318.025303][T10195] should_fail_ex.cold+0x5/0xa [ 318.025320][T10195] should_failslab+0xc2/0x120 [ 318.025339][T10195] kmem_cache_alloc_noprof+0x91/0x6a0 [ 318.025356][T10195] ? sk_prot_alloc+0x60/0x2a0 [ 318.025379][T10195] sk_prot_alloc+0x60/0x2a0 [ 318.025400][T10195] sk_alloc+0x36/0xe80 [ 318.025416][T10195] inet_create+0x3a0/0x1060 [ 318.025433][T10195] ? inet_create+0x94/0x1060 [ 318.025450][T10195] __sock_create+0x339/0x860 [ 318.025475][T10195] __sys_socket+0x14d/0x260 [ 318.025497][T10195] ? __pfx___sys_socket+0x10/0x10 [ 318.025523][T10195] __x64_sys_socket+0x72/0xb0 [ 318.025544][T10195] ? lockdep_hardirqs_on+0x78/0x100 [ 318.025568][T10195] do_syscall_64+0x115/0x840 [ 318.025580][T10195] ? clear_bhb_loop+0x40/0x90 [ 318.025598][T10195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.025613][T10195] RIP: 0033:0x7efd4859de59 [ 318.025626][T10195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.025640][T10195] RSP: 002b:00007efd49433028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 318.025657][T10195] RAX: ffffffffffffffda RBX: 00007efd48826360 RCX: 00007efd4859de59 [ 318.025667][T10195] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 318.025676][T10195] RBP: 00007efd48633e6f R08: 0000000000000000 R09: 0000000000000000 [ 318.025685][T10195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.025693][T10195] R13: 00007efd488263f8 R14: 00007efd48826360 R15: 00007ffd4a987078 [ 318.025715][T10195] [ 319.624562][T10255] netlink: 342 bytes leftover after parsing attributes in process `syz.0.800'. [ 320.973829][T10273] FAULT_INJECTION: forcing a failure. [ 320.973829][T10273] name failslab, interval 1, probability 0, space 0, times 0 [ 321.265862][T10273] CPU: 0 UID: 0 PID: 10273 Comm: syz.3.803 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.265888][T10273] Tainted: [L]=SOFTLOCKUP [ 321.265894][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 321.265903][T10273] Call Trace: [ 321.265908][T10273] [ 321.265914][T10273] dump_stack_lvl+0x100/0x190 [ 321.265935][T10273] should_fail_ex.cold+0x5/0xa [ 321.265952][T10273] should_failslab+0xc2/0x120 [ 321.265971][T10273] kmem_cache_alloc_noprof+0x91/0x6a0 [ 321.265988][T10273] ? __pfx_map_id_range_down+0x10/0x10 [ 321.266006][T10273] ? rcu_is_watching+0x12/0xc0 [ 321.266022][T10273] ? security_inode_alloc+0x3b/0x2c0 [ 321.266041][T10273] security_inode_alloc+0x3b/0x2c0 [ 321.266056][T10273] inode_init_always_gfp+0xc77/0xfb0 [ 321.266082][T10273] alloc_inode+0x8e/0x250 [ 321.266099][T10273] new_inode+0x22/0x1c0 [ 321.266118][T10273] proc_pid_make_inode+0x22/0x160 [ 321.266140][T10273] proc_pident_instantiate+0x85/0x310 [ 321.266163][T10273] proc_fill_cache+0x2a3/0x3a0 [ 321.266184][T10273] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 321.266206][T10273] ? __pfx_proc_fill_cache+0x10/0x10 [ 321.266233][T10273] proc_pident_readdir+0x1bc/0x530 [ 321.266258][T10273] iterate_dir+0x296/0xae0 [ 321.266281][T10273] __x64_sys_getdents+0x13b/0x2b0 [ 321.266301][T10273] ? __pfx___x64_sys_getdents+0x10/0x10 [ 321.266322][T10273] ? __pfx_filldir+0x10/0x10 [ 321.266347][T10273] do_syscall_64+0x115/0x840 [ 321.266361][T10273] ? clear_bhb_loop+0x40/0x90 [ 321.266379][T10273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.266394][T10273] RIP: 0033:0x7efd4859de59 [ 321.266407][T10273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.266421][T10273] RSP: 002b:00007efd49496028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 321.266436][T10273] RAX: ffffffffffffffda RBX: 00007efd48826090 RCX: 00007efd4859de59 [ 321.266446][T10273] RDX: 000000000000a2b0 RSI: 0000000000000000 RDI: 0000000000000005 [ 321.266455][T10273] RBP: 00007efd48633e6f R08: 0000000000000000 R09: 0000000000000000 [ 321.266463][T10273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.266472][T10273] R13: 00007efd48826128 R14: 00007efd48826090 R15: 00007ffd4a987078 [ 321.266492][T10273] [ 322.001249][T10286] [U] 0="/ [ 322.034623][T10286] [U] [ 322.049560][T10286] [U] EeQ@ [ 322.737048][T10297] random: crng reseeded on system resumption [ 323.130531][T10283] [U]  [ 323.271570][T10292] Process accounting paused [ 323.868142][T10304] Process accounting resumed [ 324.137163][T10284] kexec: Could not allocate control_code_buffer [ 325.371925][T10342] input: f as /devices/virtual/input/input11 [ 326.211744][T10326] Process accounting paused [ 326.842118][T10358] futex_wake_op: syz.3.820 tries to shift op by -2048; fix this program [ 326.975290][T10360] ubi0: attaching mtd0 [ 327.029339][T10360] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 327.093352][T10360] eraseblock attaching information dump: [ 327.136007][T10360] ec 1 [ 327.161097][T10360] pnum 0 [ 327.189840][T10360] lnum 0 [ 327.239985][T10360] scrub 0 [ 327.280281][T10360] sqnum 1 [ 327.324733][T10360] Volume identifier header dump: [ 327.371126][T10360] magic 55424921 [ 327.423939][T10360] version 1 [ 327.472977][T10360] vol_type 1 [ 327.544839][T10360] copy_flag 0 [ 327.618794][T10360] compat 5 [ 327.636909][T10360] vol_id 2147479551 [ 327.669236][T10360] lnum 0 [ 327.709292][T10360] data_size 0 [ 327.745773][T10360] used_ebs 0 [ 327.781087][T10360] data_pad 0 [ 327.811260][T10360] sqnum 1 [ 327.850684][T10360] hdr_crc 65b3bd2d [ 327.896490][T10360] Volume identifier header hexdump: [ 328.300486][T10360] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 328.652495][ T29] audit: type=1800 audit(1784289027.772:42): pid=10393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.828" name="members" dev="configfs" ino=38984 res=0 errno=0 [ 330.059308][T10406] [U] ^\ [ 330.245316][T10420] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 330.665312][T10397] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 331.243828][T10443] [U] 0="/ [ 331.306893][T10443] [U] [ 331.311545][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'. [ 331.362943][T10443] [U] EeQ@ [ 331.910434][T10434] [U]  [ 332.456082][T10437] kexec: Could not allocate control_code_buffer [ 334.143719][T10505] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 334.953063][T10483] Process accounting resumed [ 335.654323][T10513] nbd: socks must be embedded in a SOCK_ITEM attr [ 336.800985][T10542] netlink: 186 bytes leftover after parsing attributes in process `syz.0.856'. [ 337.366070][T10548] [U] 0="/ [ 337.400193][T10548] [U] [ 337.437840][T10548] [U] EeQ@ [ 338.436716][T10544] [U]  [ 338.446764][T10574] vivid-007: ================= START STATUS ================= [ 338.483669][T10574] vivid-007: Generate PTS: true [ 338.506220][T10574] vivid-007: Generate SCR: true [ 338.527920][T10574] tpg source WxH: 320x240 (Y'CbCr) [ 338.559589][T10574] tpg field: 1 [ 338.580425][T10574] tpg crop: (0,0)/320x240 [ 338.597265][T10574] tpg compose: (0,0)/320x240 [ 338.627519][T10574] tpg colorspace: 8 [ 338.659288][T10574] tpg transfer function: 0/0 [ 338.729759][T10574] tpg Y'CbCr encoding: 0/0 [ 338.765923][T10574] tpg quantization: 0/0 [ 338.791209][T10574] tpg RGB range: 0/2 [ 338.834328][T10574] vivid-007: ================== END STATUS ================== [ 339.096648][T10545] kexec: Could not allocate control_code_buffer [ 339.105464][T10583] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 339.384330][ T29] audit: type=1804 audit(1784289038.502:43): pid=10597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.866" name="/newroot/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger" dev="tracefs" ino=19680823 res=1 errno=0 [ 339.628747][T10602] [U] 0="/ [ 339.667065][T10602] [U] [ 339.700148][T10602] [U] EeQ@ [ 340.225133][T10593] [U]  [ 340.449038][ T29] audit: type=1800 audit(1784289039.572:44): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.871" name="members" dev="configfs" ino=40610 res=0 errno=0 [ 340.725438][T10595] kexec: Could not allocate control_code_buffer [ 341.106046][T10627] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 341.923354][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 342.467642][T10647] [U] ^@ [ 342.528339][T10653] writes to the poll attribute are ignored. [ 342.567175][T10653] please use driver specific parameters instead. [ 342.773183][T10665] netlink: 'syz.0.879': attribute type 1 has an invalid length. [ 342.839443][T10665] netlink: 33 bytes leftover after parsing attributes in process `syz.0.879'. [ 345.254560][T10711] zswap: compressor not available [ 347.359291][T10752] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 347.612708][T10713] Process accounting resumed [ 347.656522][T10758] blktrace: Concurrent blktraces are not allowed on nbd5 [ 348.381087][T10783] Line length is too long: Should be less than 4094 [ 350.362660][ T5627] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 351.336289][T10813] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 351.764599][T10866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'. [ 352.373794][T10879] sd 0:0:1:0: PR command failed: 1026 [ 352.420797][T10879] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 352.471770][T10879] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 352.582246][ T29] audit: type=1800 audit(1784290074.696:45): pid=10884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.905" name="members" dev="configfs" ino=42126 res=0 errno=0 [ 354.353838][T10925] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 354.568110][T10925] File: /dev/nullb0 PID: 10925 Comm: syz.3.911 [ 355.114626][T10890] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 355.260144][T10890] Process accounting paused [ 355.978909][T10968] netlink: 326 bytes leftover after parsing attributes in process `syz.3.921'. [ 356.110933][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 356.147141][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 356.668972][T10964] Process accounting resumed [ 356.935882][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.924'. [ 359.152877][T11021] [U] 0="/ [ 359.177824][T11021] [U] [ 359.193417][T11021] [U] EeQ@ [ 359.311600][T11016] random: crng reseeded on system resumption [ 359.740711][T11022] hub 1-0:1.0: USB hub found [ 359.768763][T11022] hub 1-0:1.0: 1 port detected [ 359.911576][T11019] [U]  [ 360.538145][T11020] kexec: Could not allocate control_code_buffer [ 361.089501][ T29] audit: type=1800 audit(1784290083.201:46): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.935" name="members" dev="configfs" ino=43114 res=0 errno=0 [ 361.392753][T11047] hub 1-0:1.0: USB hub found [ 361.419512][T11047] hub 1-0:1.0: 1 port detected [ 361.953745][T11045] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 362.518399][T11073] vivid-007: ================= START STATUS ================= [ 362.579280][T11073] vivid-007: Generate PTS: true [ 362.607312][T11073] vivid-007: Generate SCR: true [ 362.650796][T11073] tpg source WxH: 320x240 (Y'CbCr) [ 362.675926][T11073] tpg field: 1 [ 362.709536][T11073] tpg crop: (0,0)/320x240 [ 362.734890][T11073] tpg compose: (0,0)/320x240 [ 362.790196][T11073] tpg colorspace: 8 [ 362.814883][T11073] tpg transfer function: 0/0 [ 362.839396][T11073] tpg Y'CbCr encoding: 0/0 [ 362.868202][T11073] tpg quantization: 0/0 [ 362.893392][T11073] tpg RGB range: 0/2 [ 362.911126][T11073] vivid-007: ================== END STATUS ================== [ 363.097670][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.106764][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 363.680289][ T29] audit: type=1800 audit(1784290085.790:47): pid=11098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.945" name="members" dev="configfs" ino=43529 res=0 errno=0 [ 364.237003][T11099] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 365.056879][T11113] FAULT_INJECTION: forcing a failure. [ 365.056879][T11113] name failslab, interval 1, probability 0, space 0, times 0 [ 365.117054][T11113] CPU: 0 UID: 0 PID: 11113 Comm: syz.0.950 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.117081][T11113] Tainted: [L]=SOFTLOCKUP [ 365.117086][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 365.117105][T11113] Call Trace: [ 365.117137][T11113] [ 365.117144][T11113] dump_stack_lvl+0x100/0x190 [ 365.117210][T11113] should_fail_ex.cold+0x5/0xa [ 365.117246][T11113] should_failslab+0xc2/0x120 [ 365.117279][T11113] __kvmalloc_node_noprof+0x116/0x970 [ 365.117302][T11113] ? vmemdup_user+0x2a/0xe0 [ 365.117328][T11113] vmemdup_user+0x2a/0xe0 [ 365.117343][T11113] map_lookup_elem+0x764/0x890 [ 365.117379][T11113] ? bpf_lsm_bpf+0x9/0x10 [ 365.117397][T11113] __sys_bpf+0xc9b/0x4e80 [ 365.117417][T11113] ? __pfx___sys_bpf+0x10/0x10 [ 365.117431][T11113] ? __pfx_futex_hash+0x10/0x10 [ 365.117467][T11113] ? futex_wait+0x11e/0x370 [ 365.117485][T11113] ? __pfx_futex_wait+0x10/0x10 [ 365.117507][T11113] ? __do_sys_clone3+0xd9/0x290 [ 365.117532][T11113] ? __pfx___do_sys_clone3+0x10/0x10 [ 365.117548][T11113] ? ksys_write+0x190/0x250 [ 365.117589][T11113] ? __x64_sys_futex+0x34f/0x4d0 [ 365.117602][T11113] ? __x64_sys_futex+0x358/0x4d0 [ 365.117619][T11113] ? xfd_validate_state+0x129/0x190 [ 365.117646][T11113] ? __x64_sys_bpf+0xce/0x140 [ 365.117659][T11113] __x64_sys_bpf+0xce/0x140 [ 365.117674][T11113] ? do_syscall_64+0x90/0x840 [ 365.117745][T11113] do_syscall_64+0x115/0x840 [ 365.117759][T11113] ? clear_bhb_loop+0x40/0x90 [ 365.117785][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.117808][T11113] RIP: 0033:0x7f253059de59 [ 365.117822][T11113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.117838][T11113] RSP: 002b:00007f25313cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 365.117885][T11113] RAX: ffffffffffffffda RBX: 00007f2530825fa0 RCX: 00007f253059de59 [ 365.117895][T11113] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 0000000000000001 [ 365.117905][T11113] RBP: 00007f2530633e6f R08: 0000000000000000 R09: 0000000000000000 [ 365.117914][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.117923][T11113] R13: 00007f2530826038 R14: 00007f2530825fa0 R15: 00007ffce48c71f8 [ 365.117943][T11113] [ 365.426093][T11113] ubi0: attaching mtd0 [ 365.431758][T11113] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 365.439725][T11113] eraseblock attaching information dump: [ 365.445495][T11113] ec 1 [ 365.448783][T11113] pnum 0 [ 365.452067][T11113] lnum 0 [ 365.455392][T11113] scrub 0 [ 365.458736][T11113] sqnum 1 [ 365.462000][T11113] Volume identifier header dump: [ 365.466945][T11113] magic 55424921 [ 365.470970][T11113] version 1 [ 365.474368][T11113] vol_type 1 [ 365.478821][T11113] copy_flag 0 [ 365.482259][T11113] compat 5 [ 365.485663][T11113] vol_id 2147479551 [ 365.489809][T11113] lnum 0 [ 365.493240][T11113] data_size 0 [ 365.496591][T11113] used_ebs 0 [ 365.499940][T11113] data_pad 0 [ 365.503364][T11113] sqnum 1 [ 365.506717][T11113] hdr_crc 65b3bd2d [ 365.510675][T11113] Volume identifier header hexdump: [ 365.672597][T11113] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 365.720379][T11111] Process accounting paused [ 366.025629][ T29] audit: type=1800 audit(1784290088.129:48): pid=11138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.956" name="members" dev="configfs" ino=43869 res=0 errno=0 [ 366.656955][T11145] netlink: 'syz.2.958': attribute type 4 has an invalid length. [ 366.656973][T11145] netlink: 86 bytes leftover after parsing attributes in process `syz.2.958'. [ 367.104666][T11139] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 367.689343][T11147] Process accounting resumed [ 367.907095][T11161] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 368.228313][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'. [ 369.578099][T11213] [U] 0="/ [ 369.596459][T11213] [U] [ 369.621830][T11213] [U] EeQ@ [ 370.147105][T11208] [U]  [ 370.235183][T11227] FAULT_INJECTION: forcing a failure. [ 370.235183][T11227] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 370.295285][T11227] CPU: 0 UID: 0 PID: 11227 Comm: syz.0.972 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.295312][T11227] Tainted: [L]=SOFTLOCKUP [ 370.295317][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 370.295327][T11227] Call Trace: [ 370.295332][T11227] [ 370.295339][T11227] dump_stack_lvl+0x100/0x190 [ 370.295361][T11227] should_fail_ex.cold+0x5/0xa [ 370.295376][T11227] ? prepare_alloc_pages+0x16d/0x5f0 [ 370.295419][T11227] should_fail_alloc_page+0xeb/0x140 [ 370.295440][T11227] prepare_alloc_pages+0x1f0/0x5f0 [ 370.295463][T11227] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 370.295483][T11227] ? find_held_lock+0x2b/0x80 [ 370.295506][T11227] ? is_bpf_text_address+0x8a/0x1a0 [ 370.295526][T11227] ? is_bpf_text_address+0x8a/0x1a0 [ 370.295545][T11227] ? bpf_ksym_find+0x124/0x1c0 [ 370.295559][T11227] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 370.295580][T11227] ? is_bpf_text_address+0x94/0x1a0 [ 370.295598][T11227] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 370.295613][T11227] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 370.295630][T11227] ? __kernel_text_address+0xd/0x30 [ 370.295654][T11227] ? unwind_get_return_address+0x59/0xa0 [ 370.295674][T11227] ? arch_stack_walk+0xa6/0xf0 [ 370.295701][T11227] ? __pfx_stack_trace_save+0x10/0x10 [ 370.295720][T11227] ? stack_depot_save_flags+0x27/0x9d0 [ 370.295810][T11227] ? rcu_is_watching+0x12/0xc0 [ 370.295832][T11227] ? trace_sched_exit_tp+0x120/0x160 [ 370.295850][T11227] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 370.295875][T11227] ? policy_nodemask+0xed/0x4f0 [ 370.295895][T11227] alloc_pages_mpol+0x1fb/0x540 [ 370.295915][T11227] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 370.295939][T11227] alloc_pages_noprof+0x1a/0x160 [ 370.295961][T11227] get_free_pages_noprof+0x10/0xb0 [ 370.295978][T11227] __kasan_populate_vmalloc+0xa0/0x210 [ 370.295998][T11227] alloc_vmap_area+0x95d/0x2bb0 [ 370.296022][T11227] ? kasan_save_track+0x14/0x30 [ 370.296038][T11227] ? __kasan_kmalloc+0xaa/0xb0 [ 370.296054][T11227] ? __pfx_alloc_vmap_area+0x10/0x10 [ 370.296073][T11227] ? __get_vm_area_node+0x101/0x330 [ 370.296094][T11227] __get_vm_area_node+0x1ca/0x330 [ 370.296116][T11227] __vmalloc_node_range_noprof+0x228/0x1630 [ 370.296143][T11227] ? kernel_clone+0x176/0x9d0 [ 370.296158][T11227] ? rcu_is_watching+0x12/0xc0 [ 370.296179][T11227] ? kernel_clone+0x176/0x9d0 [ 370.296207][T11227] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 370.296231][T11227] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 370.296257][T11227] ? trace_kmem_cache_alloc+0xdd/0x100 [ 370.296280][T11227] ? kernel_clone+0x176/0x9d0 [ 370.296295][T11227] __vmalloc_node_noprof+0xad/0xf0 [ 370.296316][T11227] ? kernel_clone+0x176/0x9d0 [ 370.296333][T11227] copy_process+0x7fb/0x8030 [ 370.296351][T11227] ? __pfx___futex_wait+0x10/0x10 [ 370.296369][T11227] ? futex_hash+0x311/0x400 [ 370.296395][T11227] ? __pfx_copy_process+0x10/0x10 [ 370.296420][T11227] kernel_clone+0x176/0x9d0 [ 370.296435][T11227] ? find_held_lock+0x2b/0x80 [ 370.296452][T11227] ? __pfx_kernel_clone+0x10/0x10 [ 370.296472][T11227] ? ksys_write+0x190/0x250 [ 370.296499][T11227] __do_sys_clone+0xd9/0x120 [ 370.296515][T11227] ? __pfx___do_sys_clone+0x10/0x10 [ 370.296530][T11227] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 370.296622][T11227] do_syscall_64+0x115/0x840 [ 370.296635][T11227] ? clear_bhb_loop+0x40/0x90 [ 370.296654][T11227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.296669][T11227] RIP: 0033:0x7f253059de59 [ 370.296684][T11227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.296698][T11227] RSP: 002b:00007f25313cefd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 370.296714][T11227] RAX: ffffffffffffffda RBX: 00007f2530825fa0 RCX: 00007f253059de59 [ 370.296724][T11227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 370.296733][T11227] RBP: 00007f2530633e6f R08: 0000000000000000 R09: 0000000000000000 [ 370.296742][T11227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 370.296752][T11227] R13: 00007f2530826038 R14: 00007f2530825fa0 R15: 00007ffce48c71f8 [ 370.296772][T11227] [ 370.302098][T11227] syz.0.972: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 371.044509][T11209] kexec: Could not allocate control_code_buffer [ 371.307599][ T5627] Bluetooth: hci3: unexpected event 0x34 length: 726 > 6 [ 371.378279][T11233] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 371.911010][T11227] ,cpuset=/,mems_allowed=0-1 [ 371.939294][T11227] CPU: 0 UID: 0 PID: 11227 Comm: syz.0.972 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.939321][T11227] Tainted: [L]=SOFTLOCKUP [ 371.939326][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 371.939335][T11227] Call Trace: [ 371.939340][T11227] [ 371.939346][T11227] dump_stack_lvl+0x100/0x190 [ 371.939368][T11227] warn_alloc.cold+0x94/0xa8 [ 371.939403][T11227] ? __pfx_warn_alloc+0x10/0x10 [ 371.939417][T11227] ? lockdep_hardirqs_on+0x78/0x100 [ 371.939443][T11227] ? __get_vm_area_node+0x2cd/0x330 [ 371.939467][T11227] ? __get_vm_area_node+0x208/0x330 [ 371.939489][T11227] __vmalloc_node_range_noprof+0xccd/0x1630 [ 371.939510][T11227] ? rcu_is_watching+0x12/0xc0 [ 371.939532][T11227] ? kernel_clone+0x176/0x9d0 [ 371.939552][T11227] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 371.939574][T11227] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 371.939600][T11227] ? trace_kmem_cache_alloc+0xdd/0x100 [ 371.939622][T11227] ? kernel_clone+0x176/0x9d0 [ 371.939637][T11227] __vmalloc_node_noprof+0xad/0xf0 [ 371.939658][T11227] ? kernel_clone+0x176/0x9d0 [ 371.939675][T11227] copy_process+0x7fb/0x8030 [ 371.939693][T11227] ? __pfx___futex_wait+0x10/0x10 [ 371.939711][T11227] ? futex_hash+0x311/0x400 [ 371.939738][T11227] ? __pfx_copy_process+0x10/0x10 [ 371.939763][T11227] kernel_clone+0x176/0x9d0 [ 371.939778][T11227] ? find_held_lock+0x2b/0x80 [ 371.939796][T11227] ? __pfx_kernel_clone+0x10/0x10 [ 371.939816][T11227] ? ksys_write+0x190/0x250 [ 371.939843][T11227] __do_sys_clone+0xd9/0x120 [ 371.939859][T11227] ? __pfx___do_sys_clone+0x10/0x10 [ 371.939875][T11227] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 371.939914][T11227] do_syscall_64+0x115/0x840 [ 371.939927][T11227] ? clear_bhb_loop+0x40/0x90 [ 371.939946][T11227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.939962][T11227] RIP: 0033:0x7f253059de59 [ 371.939975][T11227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.939989][T11227] RSP: 002b:00007f25313cefd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 371.940004][T11227] RAX: ffffffffffffffda RBX: 00007f2530825fa0 RCX: 00007f253059de59 [ 371.940015][T11227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 371.940023][T11227] RBP: 00007f2530633e6f R08: 0000000000000000 R09: 0000000000000000 [ 371.940033][T11227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 371.940041][T11227] R13: 00007f2530826038 R14: 00007f2530825fa0 R15: 00007ffce48c71f8 [ 371.940066][T11227] [ 371.940143][T11227] Mem-Info: [ 373.073866][T11227] active_anon:24719 inactive_anon:88 isolated_anon:0 [ 373.073866][T11227] active_file:1106 inactive_file:53982 isolated_file:0 [ 373.073866][T11227] unevictable:768 dirty:736 writeback:0 [ 373.073866][T11227] slab_reclaimable:11567 slab_unreclaimable:95041 [ 373.073866][T11227] mapped:25217 shmem:6265 pagetables:1265 [ 373.073866][T11227] sec_pagetables:0 bounce:0 [ 373.073866][T11227] kernel_misc_reclaimable:0 [ 373.073866][T11227] free:1282873 free_pcp:30679 free_cma:0 [ 373.360569][T11227] Node 0 active_anon:85148kB inactive_anon:352kB active_file:4424kB inactive_file:215800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100868kB dirty:2940kB writeback:0kB shmem:9796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12096kB pagetables:5104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 373.596475][T11227] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 373.786450][T11227] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 373.834087][T11262] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.978: iget: checksum invalid [ 373.913773][T11262] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 373.936761][T11227] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 373.962563][T11227] Node 0 DMA32 free:1184032kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:114100kB inactive_anon:344kB active_file:4424kB inactive_file:215808kB unevictable:1536kB writepending:2828kB zspages:1228kB present:3129332kB managed:2532568kB mlocked:0kB bounce:0kB free_pcp:86476kB local_pcp:86476kB free_cma:0kB [ 374.074182][T11262] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.978: iget: checksum invalid [ 374.141485][T11227] lowmem_reserve[]: 0 0 0 0 0 [ 374.168442][T11262] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 374.187435][T11227] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:396kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.275270][T11262] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.978: iget: checksum invalid [ 374.310441][T11262] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 374.336516][T11227] lowmem_reserve[]: 0 0 0 0 0 [ 374.356963][T11227] Node 1 Normal free:3924084kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:28148kB local_pcp:28148kB free_cma:0kB [ 374.413893][T11262] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.978: iget: checksum invalid [ 374.471659][T11262] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 374.522321][T11262] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 374.533416][T11227] lowmem_reserve[]: 0 0 0 0 0 [ 374.555040][T11227] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 374.591879][T11262] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 374.625879][T11227] Node 0 DMA32: 3013*4kB (UME) 1545*8kB (UM) 3251*16kB (UM) 2086*32kB (UME) 843*64kB (UM) 467*128kB (UM) 159*256kB (UME) 58*512kB (UME) 27*1024kB (UME) 10*2048kB (UME) 210*4096kB (UM) = 1235596kB [ 374.764153][T11227] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 374.857825][T11227] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 0*16kB 1*32kB (M) 3*64kB (UM) 1*128kB (M) 1*256kB (M) 3*512kB (UM) 0*1024kB 1*2048kB (M) 957*4096kB (UM) = 3924084kB [ 374.926286][T11227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.980594][T11227] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 375.011820][T11227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.038300][T11227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 375.075802][T11227] 56450 total pagecache pages [ 375.105522][T11227] 86 pages in swap cache [ 375.127280][T11227] Free swap = 114800kB [ 375.162356][T11227] Total swap = 124996kB [ 375.189762][T11227] 2097051 pages RAM [ 375.215743][T11227] 0 pages HighMem/MovableOnly [ 375.252731][T11227] 432195 pages reserved [ 375.282612][T11227] 0 pages cma reserved [ 375.385616][T11227] Process accounting resumed [ 375.506034][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.986'. [ 376.213723][T11318] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 376.745157][ T29] audit: type=1800 audit(1784290098.854:49): pid=11335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.995" name="dbroot" dev="configfs" ino=45363 res=0 errno=0 [ 378.213589][T11369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1004'. [ 378.342567][T11369] team0: Port device team_slave_1 removed [ 378.652329][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.666170][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.295091][ T5627] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 381.651551][T11425] [U] 0="/ [ 381.671710][T11425] [U] [ 381.686272][T11425] [U] EeQ@ [ 382.464442][T11422] [U]  [ 382.655134][T11448] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 382.739472][T11449] netlink: 'syz.3.1018': attribute type 4 has an invalid length. [ 383.305500][T11451] random: crng reseeded on system resumption [ 384.457919][T11486] vivid-007: ================= START STATUS ================= [ 384.486078][T11486] vivid-007: Generate PTS: true [ 384.503782][T11486] vivid-007: Generate SCR: true [ 384.521100][T11486] tpg source WxH: 320x240 (Y'CbCr) [ 384.544904][T11486] tpg field: 1 [ 384.560093][T11486] tpg crop: (0,0)/320x240 [ 384.582784][T11486] tpg compose: (0,0)/320x240 [ 384.607185][T11486] tpg colorspace: 8 [ 384.628354][T11486] tpg transfer function: 0/0 [ 384.645973][T11486] tpg Y'CbCr encoding: 0/0 [ 384.681456][T11486] tpg quantization: 0/0 [ 384.697773][T11486] tpg RGB range: 0/2 [ 384.714153][T11486] vivid-007: ================== END STATUS ================== [ 385.159996][T11511] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 385.425095][T11498] Process accounting resumed [ 386.611552][T11532] [U] 0="/ [ 386.649454][T11532] [U] [ 386.670001][T11532] [U] EeQ@ [ 387.244491][T11530] [U]  [ 387.438125][T11541] vivid-007: ================= START STATUS ================= [ 387.478663][T11541] vivid-007: Generate PTS: true [ 387.505887][T11541] vivid-007: Generate SCR: true [ 387.536320][T11541] tpg source WxH: 320x240 (Y'CbCr) [ 387.561362][T11541] tpg field: 1 [ 387.578959][T11541] tpg crop: (0,0)/320x240 [ 387.621302][T11541] tpg compose: (0,0)/320x240 [ 387.643092][T11541] tpg colorspace: 8 [ 387.706791][T11541] tpg transfer function: 0/0 [ 387.740679][T11541] tpg Y'CbCr encoding: 0/0 [ 387.754386][T11531] kexec: Could not allocate control_code_buffer [ 387.766057][T11541] tpg quantization: 0/0 [ 387.784768][T11541] tpg RGB range: 0/2 [ 387.804048][T11541] vivid-007: ================== END STATUS ================== [ 388.239279][T11550] [U] ^\ [ 388.309380][T11560] FAULT_INJECTION: forcing a failure. [ 388.309380][T11560] name failslab, interval 1, probability 0, space 0, times 0 [ 388.383694][T11560] CPU: 0 UID: 0 PID: 11560 Comm: syz.3.1042 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.383721][T11560] Tainted: [L]=SOFTLOCKUP [ 388.383727][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 388.383736][T11560] Call Trace: [ 388.383742][T11560] [ 388.383749][T11560] dump_stack_lvl+0x100/0x190 [ 388.383772][T11560] should_fail_ex.cold+0x5/0xa [ 388.383790][T11560] should_failslab+0xc2/0x120 [ 388.383809][T11560] __kmalloc_cache_noprof+0x91/0x6c0 [ 388.383834][T11560] ? io_uring_setup.cold+0x6c/0x1c2e [ 388.383858][T11560] io_uring_setup.cold+0x6c/0x1c2e [ 388.383878][T11560] ? find_held_lock+0x2b/0x80 [ 388.383895][T11560] ? ksys_write+0x190/0x250 [ 388.383915][T11560] ? ksys_write+0x190/0x250 [ 388.383935][T11560] ? __pfx_io_uring_setup+0x10/0x10 [ 388.384049][T11560] ? do_futex+0x190/0x440 [ 388.384065][T11560] ? __pfx_do_futex+0x10/0x10 [ 388.384089][T11560] ? xfd_validate_state+0x129/0x190 [ 388.384110][T11560] __x64_sys_io_uring_setup+0xc2/0x170 [ 388.384136][T11560] do_syscall_64+0x115/0x840 [ 388.384150][T11560] ? clear_bhb_loop+0x40/0x90 [ 388.384169][T11560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.384185][T11560] RIP: 0033:0x7efd4859de59 [ 388.384199][T11560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.384214][T11560] RSP: 002b:00007efd49496028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 388.384228][T11560] RAX: ffffffffffffffda RBX: 00007efd48826090 RCX: 00007efd4859de59 [ 388.384238][T11560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000891 [ 388.384247][T11560] RBP: 00007efd48633e6f R08: 0000000000000000 R09: 0000000000000000 [ 388.384255][T11560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.384264][T11560] R13: 00007efd48826128 R14: 00007efd48826090 R15: 00007ffd4a987078 [ 388.384284][T11560] [ 391.003151][ T29] audit: type=1804 audit(1784290113.096:50): pid=11582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1046" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 391.289690][T11588] vivid-007: ================= START STATUS ================= [ 391.324987][T11588] vivid-007: Generate PTS: true [ 391.348424][T11588] vivid-007: Generate SCR: true [ 391.370665][T11588] tpg source WxH: 320x240 (Y'CbCr) [ 391.395169][T11588] tpg field: 1 [ 391.410699][T11588] tpg crop: (0,0)/320x240 [ 391.430202][T11588] tpg compose: (0,0)/320x240 [ 391.453005][T11588] tpg colorspace: 8 [ 391.470196][T11588] tpg transfer function: 0/0 [ 391.490369][T11588] tpg Y'CbCr encoding: 0/0 [ 391.529787][T11588] tpg quantization: 0/0 [ 391.551151][T11588] tpg RGB range: 0/2 [ 391.568981][T11588] vivid-007: ================== END STATUS ================== [ 391.646812][T11593] [U] 0="/ [ 391.699266][T11593] [U] [ 391.751551][T11593] [U] EeQ@ [ 392.231188][T11586] [U]  [ 393.103526][T11589] kexec: Could not allocate control_code_buffer [ 394.511204][T11645] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1057'. [ 396.307876][T11660] Process accounting resumed [ 396.662318][T11677] [U] ^\ [ 396.993062][T11683] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 397.078892][T11683] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 397.188679][T11683] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 397.822381][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.836799][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.844934][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.854249][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.863405][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 398.315652][ T50] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 398.803751][T11710] FAULT_INJECTION: forcing a failure. [ 398.803751][T11710] name failslab, interval 1, probability 0, space 0, times 0 [ 398.952364][T11710] CPU: 0 UID: 0 PID: 11710 Comm: syz.2.1071 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.952391][T11710] Tainted: [L]=SOFTLOCKUP [ 398.952396][T11710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 398.952405][T11710] Call Trace: [ 398.952411][T11710] [ 398.952418][T11710] dump_stack_lvl+0x100/0x190 [ 398.952446][T11710] should_fail_ex.cold+0x5/0xa [ 398.952464][T11710] should_failslab+0xc2/0x120 [ 398.952484][T11710] kmem_cache_alloc_noprof+0x91/0x6a0 [ 398.952502][T11710] ? mas_preallocate+0x1105/0x14a0 [ 398.952615][T11710] mas_preallocate+0x1105/0x14a0 [ 398.952637][T11710] ? __pfx_mas_preallocate+0x10/0x10 [ 398.952661][T11710] ? vm_area_alloc+0x1f/0x160 [ 398.952683][T11710] ? lockdep_init_map_type+0x5c/0x250 [ 398.952708][T11710] __mmap_region+0x1230/0x2db0 [ 398.952735][T11710] ? __pfx___mmap_region+0x10/0x10 [ 398.952755][T11710] ? __pfx___might_resched+0x10/0x10 [ 398.952789][T11710] ? __lock_acquire+0x49f/0x1a40 [ 398.952823][T11710] ? __lock_acquire+0x49f/0x1a40 [ 398.952853][T11710] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 398.952880][T11710] ? rcu_is_watching+0x12/0xc0 [ 398.952897][T11710] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 398.952912][T11710] ? lockdep_hardirqs_on+0x78/0x100 [ 398.952963][T11710] mmap_region+0x35d/0x620 [ 398.952979][T11710] ? rcu_is_watching+0x12/0xc0 [ 398.952995][T11710] ? __pfx_mmap_region+0x10/0x10 [ 398.953012][T11710] ? cap_mmap_addr+0x4b/0x120 [ 398.953091][T11710] ? bpf_lsm_mmap_addr+0x9/0x30 [ 398.953114][T11710] ? security_mmap_addr+0x71/0x1e0 [ 398.953153][T11710] ? __get_unmapped_area+0x255/0x3e0 [ 398.953175][T11710] do_mmap+0xc63/0x12f0 [ 398.953198][T11710] ? __pfx_do_mmap+0x10/0x10 [ 398.953217][T11710] ? __pfx_down_write_killable+0x10/0x10 [ 398.953233][T11710] ? __pfx_futex_wait+0x10/0x10 [ 398.953254][T11710] vm_mmap_pgoff+0x29e/0x470 [ 398.953276][T11710] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 398.953298][T11710] ? __pfx_do_futex+0x10/0x10 [ 398.953316][T11710] ksys_mmap_pgoff+0xe4/0x610 [ 398.953334][T11710] ? __x64_sys_futex+0x358/0x4d0 [ 398.953350][T11710] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 398.953368][T11710] ? xfd_validate_state+0x129/0x190 [ 398.953388][T11710] __x64_sys_mmap+0x125/0x190 [ 398.953406][T11710] do_syscall_64+0x115/0x840 [ 398.953419][T11710] ? clear_bhb_loop+0x40/0x90 [ 398.953445][T11710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.953460][T11710] RIP: 0033:0x7fe59e19de59 [ 398.953476][T11710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.953491][T11710] RSP: 002b:00007fe59f122028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 398.953506][T11710] RAX: ffffffffffffffda RBX: 00007fe59e425fa0 RCX: 00007fe59e19de59 [ 398.953517][T11710] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 398.953526][T11710] RBP: 00007fe59e233e6f R08: 0000000000000007 R09: 0000040000008000 [ 398.953536][T11710] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 398.953546][T11710] R13: 00007fe59e426038 R14: 00007fe59e425fa0 R15: 00007fffc1d8bb08 [ 398.953566][T11710] [ 399.782347][T11713] ubi0: attaching mtd0 [ 399.818163][T11713] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 399.870467][T11713] eraseblock attaching information dump: [ 399.939608][T11713] ec 1 [ 399.988218][T11713] pnum 0 [ 399.998735][T11713] lnum 0 [ 400.008644][T11713] scrub 0 [ 400.016179][ T50] Bluetooth: hci4: command tx timeout [ 400.028650][T11713] sqnum 1 [ 400.052305][T11713] Volume identifier header dump: [ 400.081519][T11713] magic 55424921 [ 400.093731][T11713] version 1 [ 400.108832][T11713] vol_type 1 [ 400.122028][T11713] copy_flag 0 [ 400.131765][T11713] compat 5 [ 400.148535][T11716] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 400.158024][T11713] vol_id 2147479551 [ 400.201449][T11713] lnum 0 [ 400.211753][T11713] data_size 0 [ 400.229170][T11713] used_ebs 0 [ 400.240892][T11713] data_pad 0 [ 400.263660][T11713] sqnum 1 [ 400.273907][T11713] hdr_crc 65b3bd2d [ 400.323552][T11713] Volume identifier header hexdump: [ 400.535218][T11713] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 401.256723][T11694] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.316699][T11694] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.387104][T11694] bridge_slave_0: entered allmulticast mode [ 401.434048][T11694] bridge_slave_0: entered promiscuous mode [ 401.478097][T11694] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.518175][T11694] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.564098][T11694] bridge_slave_1: entered allmulticast mode [ 401.599688][T11694] bridge_slave_1: entered promiscuous mode [ 401.838546][T11694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.908947][T11694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.088061][T11694] team0: Port device team_slave_0 added [ 402.103389][ T50] Bluetooth: hci4: command tx timeout [ 402.136502][T11694] team0: Port device team_slave_1 added [ 402.187893][T11773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1077'. [ 402.384607][T11773] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.465054][T11773] bridge_slave_0 (unregistering): left allmulticast mode [ 402.495905][T11773] bridge_slave_0 (unregistering): left promiscuous mode [ 402.530523][T11773] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.588137][T11694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.631398][T11694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.776287][T11694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.848651][T11694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.890236][T11694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.053491][T11694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.175578][T11782] blktrace: Concurrent blktraces are not allowed on ram11 [ 403.225425][T11782] blktrace: Concurrent blktraces are not allowed on ram11 [ 403.557599][T11694] hsr_slave_0: entered promiscuous mode [ 403.597897][T11694] hsr_slave_1: entered promiscuous mode [ 403.641400][T11694] debugfs: 'hsr0' already exists in 'hsr' [ 403.679603][T11694] Cannot create hsr debugfs directory [ 404.182925][ T50] Bluetooth: hci4: command tx timeout [ 406.039155][T11694] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.127142][T11694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.168252][T11694] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 406.219571][T11694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.263306][ T50] Bluetooth: hci4: command tx timeout [ 406.466330][T11790] Process accounting paused [ 406.876273][T11694] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.949406][T11694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.995995][T11694] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 407.055315][T11694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.484699][T11813] random: crng reseeded on system resumption [ 408.720751][T11694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.858771][T11694] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.927334][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.934497][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.030280][ T3355] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.037458][ T3355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.107149][T11832] FAULT_INJECTION: forcing a failure. [ 409.107149][T11832] name failslab, interval 1, probability 0, space 0, times 0 [ 409.180083][T11832] CPU: 0 UID: 0 PID: 11832 Comm: syz.0.1088 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.180110][T11832] Tainted: [L]=SOFTLOCKUP [ 409.180115][T11832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 409.180124][T11832] Call Trace: [ 409.180130][T11832] [ 409.180136][T11832] dump_stack_lvl+0x100/0x190 [ 409.180161][T11832] should_fail_ex.cold+0x5/0xa [ 409.180181][T11832] should_failslab+0xc2/0x120 [ 409.180204][T11832] __kmalloc_noprof+0xfc/0x820 [ 409.180222][T11832] ? tomoyo_encode2+0xfb/0x3c0 [ 409.180329][T11832] tomoyo_encode2+0xfb/0x3c0 [ 409.180350][T11832] ? __get_fs_type+0xe3/0x200 [ 409.180379][T11832] tomoyo_encode+0x29/0x50 [ 409.180398][T11832] tomoyo_mount_acl+0x388/0x8b0 [ 409.180416][T11832] ? is_bpf_text_address+0x8a/0x1a0 [ 409.180438][T11832] ? bpf_ksym_find+0x124/0x1c0 [ 409.180455][T11832] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 409.180472][T11832] ? kernel_text_address+0x8d/0x100 [ 409.180492][T11832] ? __lock_acquire+0x49f/0x1a40 [ 409.180523][T11832] ? unwind_get_return_address+0x59/0xa0 [ 409.180564][T11832] ? tomoyo_domain+0xb2/0x150 [ 409.180596][T11832] ? tomoyo_profile+0x47/0x60 [ 409.180643][T11832] tomoyo_mount_permission+0x214/0x460 [ 409.180662][T11832] ? tomoyo_mount_permission+0x1f6/0x460 [ 409.180681][T11832] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 409.180712][T11832] security_sb_mount+0xdd/0x270 [ 409.180730][T11832] path_mount+0x158/0x23d0 [ 409.180748][T11832] ? __pfx_path_mount+0x10/0x10 [ 409.180763][T11832] ? lockdep_hardirqs_on+0x78/0x100 [ 409.180788][T11832] ? putname+0xb1/0x110 [ 409.180807][T11832] ? kmem_cache_free+0x127/0x6b0 [ 409.180837][T11832] ? __x64_sys_mount+0x293/0x310 [ 409.180852][T11832] __x64_sys_mount+0x293/0x310 [ 409.180868][T11832] ? __pfx___x64_sys_mount+0x10/0x10 [ 409.180890][T11832] do_syscall_64+0x115/0x840 [ 409.180907][T11832] ? clear_bhb_loop+0x40/0x90 [ 409.180927][T11832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.180944][T11832] RIP: 0033:0x7f253059de59 [ 409.180959][T11832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.180974][T11832] RSP: 002b:00007f25313cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 409.180989][T11832] RAX: ffffffffffffffda RBX: 00007f2530825fa0 RCX: 00007f253059de59 [ 409.180999][T11832] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 409.181009][T11832] RBP: 00007f2530633e6f R08: 00002000000001c0 R09: 0000000000000000 [ 409.181021][T11832] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 409.181030][T11832] R13: 00007f2530826038 R14: 00007f2530825fa0 R15: 00007ffce48c71f8 [ 409.181050][T11832] [ 409.729671][T11694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.764884][T11694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.974220][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 410.325651][T11842] vivid-007: ================= START STATUS ================= [ 410.353651][T11842] vivid-007: Generate PTS: true [ 410.377695][T11842] vivid-007: Generate SCR: true [ 410.401182][T11842] tpg source WxH: 320x240 (Y'CbCr) [ 410.417594][T11842] tpg field: 1 [ 410.435555][T11842] tpg crop: (0,0)/320x240 [ 410.469805][T11842] tpg compose: (0,0)/320x240 [ 410.498610][T11842] tpg colorspace: 8 [ 410.530230][T11842] tpg transfer function: 0/0 [ 410.543411][T11842] tpg Y'CbCr encoding: 0/0 [ 410.565999][T11842] tpg quantization: 0/0 [ 410.583864][T11842] tpg RGB range: 0/2 [ 410.602535][T11842] vivid-007: ================== END STATUS ================== [ 411.225301][T11694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.568609][T11868] loop6: detected capacity change from 0 to 2097152 [ 411.791407][T11866] [U] 0="/ [ 411.824904][T11866] [U] [ 411.895295][T11866] [U] EeQ@ [ 412.532468][T11863] [U]  [ 412.982869][T11864] kexec: Could not allocate control_code_buffer [ 413.413468][T11886] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 413.918286][T11694] veth0_vlan: entered promiscuous mode [ 414.039360][T11694] veth1_vlan: entered promiscuous mode [ 414.226082][T11694] veth0_macvtap: entered promiscuous mode [ 414.246746][ T29] audit: type=1800 audit(1784290136.335:51): pid=11897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1098" name="members" dev="configfs" ino=48984 res=0 errno=0 [ 414.305049][T11694] veth1_macvtap: entered promiscuous mode [ 414.483839][T11694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.581388][T11694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.726866][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.807810][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.850692][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.956658][T11909] vivid-007: ================= START STATUS ================= [ 414.983605][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.006157][T11909] vivid-007: Generate PTS: true [ 415.026387][T11909] vivid-007: Generate SCR: true [ 415.055328][T11909] tpg source WxH: 320x240 (Y'CbCr) [ 415.083936][T11909] tpg field: 1 [ 415.105591][T11909] tpg crop: (0,0)/320x240 [ 415.132495][T11909] tpg compose: (0,0)/320x240 [ 415.154887][T11907] [U] ^\ [ 415.165478][T11909] tpg colorspace: 8 [ 415.193484][T11909] tpg transfer function: 0/0 [ 415.310883][T11909] tpg Y'CbCr encoding: 0/0 [ 415.342063][T11909] tpg quantization: 0/0 [ 415.368421][T11909] tpg RGB range: 0/2 [ 415.422806][T11909] vivid-007: ================== END STATUS ================== [ 415.454781][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.503642][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.624155][T11908] Process accounting paused [ 415.684295][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.740546][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.842492][T11898] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 415.861250][T11928] FAULT_INJECTION: forcing a failure. [ 415.861250][T11928] name failslab, interval 1, probability 0, space 0, times 0 [ 415.950601][T11928] CPU: 0 UID: 0 PID: 11928 Comm: syz.2.1105 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.950626][T11928] Tainted: [L]=SOFTLOCKUP [ 415.950631][T11928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 415.950641][T11928] Call Trace: [ 415.950646][T11928] [ 415.950651][T11928] dump_stack_lvl+0x100/0x190 [ 415.950673][T11928] should_fail_ex.cold+0x5/0xa [ 415.950693][T11928] should_failslab+0xc2/0x120 [ 415.950713][T11928] __kmalloc_noprof+0xfc/0x820 [ 415.950729][T11928] ? trace_kmem_cache_alloc+0xdd/0x100 [ 415.950748][T11928] ? lsm_blob_alloc+0x68/0x90 [ 415.950772][T11928] lsm_blob_alloc+0x68/0x90 [ 415.950792][T11928] security_prepare_creds+0x2d/0x290 [ 415.950812][T11928] prepare_creds+0x5d6/0x950 [ 415.950835][T11928] set_current_groups+0x15/0xd0 [ 415.950854][T11928] __do_sys_setgroups+0x3e2/0x4f0 [ 415.950873][T11928] ? 0xffffffffff600000 [ 415.950887][T11928] do_syscall_64+0x115/0x840 [ 415.950900][T11928] ? clear_bhb_loop+0x40/0x90 [ 415.950918][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.950933][T11928] RIP: 0033:0x7fe59e19de59 [ 415.950945][T11928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.950966][T11928] RSP: 002b:00007fe59f101028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 415.950981][T11928] RAX: ffffffffffffffda RBX: 00007fe59e426090 RCX: 00007fe59e19de59 [ 415.950991][T11928] RDX: 0000000000000000 RSI: ffffffffff600000 RDI: 0000000c00000000 [ 415.951001][T11928] RBP: 00007fe59e233e6f R08: 0000000000000000 R09: 0000000000000000 [ 415.951009][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.951018][T11928] R13: 00007fe59e426128 R14: 00007fe59e426090 R15: 00007fffc1d8bb08 [ 415.951033][T11928] ? 0xffffffffff600000 [ 415.951047][T11928] [ 416.547051][T11937] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 416.582508][T11937] FAULT_INJECTION: forcing a failure. [ 416.582508][T11937] name failslab, interval 1, probability 0, space 0, times 0 [ 416.612000][T11938] binder: 11936:11938 ioctl c00c620f 200000006f80 returned -22 [ 416.638861][T11937] CPU: 0 UID: 0 PID: 11937 Comm: syz.2.1106 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.638889][T11937] Tainted: [L]=SOFTLOCKUP [ 416.638894][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 416.638904][T11937] Call Trace: [ 416.638911][T11937] [ 416.638917][T11937] dump_stack_lvl+0x100/0x190 [ 416.638939][T11937] should_fail_ex.cold+0x5/0xa [ 416.638955][T11937] should_failslab+0xc2/0x120 [ 416.638975][T11937] __kmalloc_node_noprof+0x101/0x830 [ 416.638990][T11937] ? __fget_files+0x215/0x3d0 [ 416.639012][T11937] ? load_msg+0x43/0x4a0 [ 416.639094][T11937] load_msg+0x43/0x4a0 [ 416.639116][T11937] do_mq_timedsend+0x3ce/0xc40 [ 416.639164][T11937] ? __pfx_do_mq_timedsend+0x10/0x10 [ 416.639188][T11937] ? __mutex_unlock_slowpath+0x35d/0x930 [ 416.639217][T11937] ? __fget_files+0x21f/0x3d0 [ 416.639243][T11937] __x64_sys_mq_timedsend+0x1cd/0x260 [ 416.639265][T11937] ? ksys_write+0x1ac/0x250 [ 416.639287][T11937] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 416.639316][T11937] do_syscall_64+0x115/0x840 [ 416.639329][T11937] ? clear_bhb_loop+0x40/0x90 [ 416.639346][T11937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.639361][T11937] RIP: 0033:0x7fe59e19de59 [ 416.639375][T11937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.639388][T11937] RSP: 002b:00007fe59f101028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 416.639403][T11937] RAX: ffffffffffffffda RBX: 00007fe59e426090 RCX: 00007fe59e19de59 [ 416.639414][T11937] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000007 [ 416.639422][T11937] RBP: 00007fe59f101090 R08: 0000000000000000 R09: 0000000000000000 [ 416.639431][T11937] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 416.639440][T11937] R13: 00007fe59e426128 R14: 00007fe59e426090 R15: 00007fffc1d8bb08 [ 416.639459][T11937] [ 416.867792][T11435] Process accounting paused [ 417.076841][T11945] [U] 0="/ [ 417.087144][T11945] [U] [ 417.107154][T11945] [U] EeQ@ [ 417.772766][T11943] [U]  [ 418.307242][T11952] zswap: compressor not available [ 418.464492][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.786185][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.912722][T11944] kexec: Could not allocate control_code_buffer [ 419.062755][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.177074][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.930507][T11984] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1113'. [ 421.062875][ T57] bridge_slave_1: left allmulticast mode [ 421.096323][ T57] bridge_slave_1: left promiscuous mode [ 421.134248][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.211983][ T57] bridge_slave_0: left allmulticast mode [ 421.247622][ T57] bridge_slave_0: left promiscuous mode [ 421.283422][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.782695][T12005] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 422.008524][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.040570][ T57] bond0 (unregistering): Released all slaves [ 422.180840][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 422.290143][ T57] HfR: left promiscuous mode [ 422.528176][ T57] HSR: left promiscuous mode [ 423.602170][ T57] hsr_slave_0: left promiscuous mode [ 423.659286][ T57] hsr_slave_1: left promiscuous mode [ 423.699355][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.758919][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.829494][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.896587][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.009507][ T57] veth1_macvtap: left promiscuous mode [ 424.051214][ T57] veth0_macvtap: left promiscuous mode [ 424.069257][T12046] random: crng reseeded on system resumption [ 424.110407][ T57] veth1_vlan: left promiscuous mode [ 424.151231][ T57] veth0_vlan: left promiscuous mode [ 424.346439][T12055] openvswitch: netlink: Duplicate key (type 15). [ 425.313368][ T57] team0 (unregistering): Port device team_slave_1 removed [ 425.393653][ T57] team0 (unregistering): Port device team_slave_0 removed [ 425.979568][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 427.392956][T12092] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 427.733147][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'. [ 427.967088][T12122] netlink: 'syz.0.1133': attribute type 2 has an invalid length. [ 428.000091][T12091] Process accounting paused [ 428.157377][T12132] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 428.168228][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 428.361137][T12123] ------------[ cut here ]------------ [ 428.366973][T12123] !list_empty(&local->chanctx_list) [ 428.367003][T12123] WARNING: net/mac80211/pm.c:171 at __ieee80211_suspend+0x105f/0x12c0, CPU#0: syz.0.1133/12123 [ 428.383959][T12123] Modules linked in: [ 428.389037][T12123] CPU: 0 UID: 0 PID: 12123 Comm: syz.0.1133 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.400031][T12123] Tainted: [L]=SOFTLOCKUP [ 428.404435][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 428.414612][T12123] RIP: 0010:__ieee80211_suspend+0x105f/0x12c0 [ 428.421373][T12123] Code: 0f 0b 90 e9 8f f8 ff ff e8 be 98 b9 f6 90 0f 0b 90 e9 64 f7 ff ff e8 b0 98 b9 f6 90 0f 0b 90 e9 be f6 ff ff e8 a2 98 b9 f6 90 <0f> 0b 90 e9 50 fc ff ff e8 94 98 b9 f6 48 8b 54 24 10 48 b8 00 00 [ 428.442029][T12123] RSP: 0018:ffffc90005667c38 EFLAGS: 00010293 [ 428.448785][T12123] RAX: 0000000000000000 RBX: ffff88805c6a2c10 RCX: ffffffff8b22f144 [ 428.456813][T12123] RDX: ffff88802777dd00 RSI: ffffffff8b4f901e RDI: ffff88802777dd00 [ 428.465325][T12123] RBP: ffff88805c6a0f40 R08: 0000000000000001 R09: 0000000000000000 [ 428.473388][T12123] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 428.481432][T12123] R13: ffffed100b8d41f2 R14: ffff88805c6a2a10 R15: 0000000000000001 [ 428.489443][T12123] FS: 00007f25313ae6c0(0000) GS:ffff888123df1000(0000) knlGS:0000000000000000 [ 428.498414][T12123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.505082][T12123] CR2: 0000001b34afdff8 CR3: 000000005494a000 CR4: 00000000003526f0 [ 428.513046][T12123] Call Trace: [ 428.516455][T12123] [ 428.519417][T12123] reset_write+0x7a/0x290 [ 428.523819][T12123] short_proxy_write+0x133/0x1a0 [ 428.529487][T12123] vfs_write+0x2aa/0x1050 [ 428.534324][T12123] ? __pfx_short_proxy_write+0x10/0x10 [ 428.539788][T12123] ? __pfx_vfs_write+0x10/0x10 [ 428.544596][T12123] ? __fget_files+0x215/0x3d0 [ 428.549273][T12123] ? __fget_files+0x21f/0x3d0 [ 428.553977][T12123] ksys_write+0x12a/0x250 [ 428.558345][T12123] ? __pfx_ksys_write+0x10/0x10 [ 428.563287][T12123] do_syscall_64+0x115/0x840 [ 428.567912][T12123] ? clear_bhb_loop+0x40/0x90 [ 428.572581][T12123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.578499][T12123] RIP: 0033:0x7f253059de59 [ 428.582906][T12123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.603829][T12123] RSP: 002b:00007f25313ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.612675][T12123] RAX: ffffffffffffffda RBX: 00007f2530826090 RCX: 00007f253059de59 [ 428.620735][T12123] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 000000000000000a [ 428.629524][T12123] RBP: 00007f2530633e6f R08: 0000000000000000 R09: 0000000000000000 [ 428.638100][T12123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.646133][T12123] R13: 00007f2530826128 R14: 00007f2530826090 R15: 00007ffce48c71f8 [ 428.654159][T12123] [ 428.657254][T12123] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 428.664531][T12123] CPU: 0 UID: 0 PID: 12123 Comm: syz.0.1133 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.675461][T12123] Tainted: [L]=SOFTLOCKUP [ 428.679773][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 428.689817][T12123] Call Trace: [ 428.693085][T12123] [ 428.695998][T12123] dump_stack_lvl+0x100/0x190 [ 428.700667][T12123] vpanic+0x552/0x970 [ 428.704636][T12123] ? __pfx_vpanic+0x10/0x10 [ 428.709141][T12123] panic+0xd1/0xe0 [ 428.712846][T12123] ? __pfx_panic+0x10/0x10 [ 428.717252][T12123] ? check_panic_on_warn+0x1f/0x90 [ 428.722370][T12123] check_panic_on_warn.cold+0x19/0x34 [ 428.727748][T12123] ? __ieee80211_suspend+0x105f/0x12c0 [ 428.733202][T12123] __warn.cold+0x191/0x318 [ 428.737629][T12123] __report_bug+0x30f/0x440 [ 428.742236][T12123] ? __ieee80211_suspend+0x105f/0x12c0 [ 428.747681][T12123] ? __pfx___report_bug+0x10/0x10 [ 428.752696][T12123] ? dput+0x24/0x30 [ 428.756492][T12123] ? end_dirop+0x82/0xa0 [ 428.760734][T12123] ? __debugfs_create_file+0x400/0x4f0 [ 428.766250][T12123] ? debugfs_create_file_short+0x41/0x60 [ 428.771884][T12123] ? __ieee80211_suspend+0x105f/0x12c0 [ 428.777345][T12123] report_bug+0xb2/0x220 [ 428.781604][T12123] ? __ieee80211_suspend+0x105f/0x12c0 [ 428.787050][T12123] handle_bug+0x16a/0x2a0 [ 428.791370][T12123] exc_invalid_op+0x17/0x50 [ 428.795860][T12123] asm_exc_invalid_op+0x1a/0x20 [ 428.800699][T12123] RIP: 0010:__ieee80211_suspend+0x105f/0x12c0 [ 428.806778][T12123] Code: 0f 0b 90 e9 8f f8 ff ff e8 be 98 b9 f6 90 0f 0b 90 e9 64 f7 ff ff e8 b0 98 b9 f6 90 0f 0b 90 e9 be f6 ff ff e8 a2 98 b9 f6 90 <0f> 0b 90 e9 50 fc ff ff e8 94 98 b9 f6 48 8b 54 24 10 48 b8 00 00 [ 428.826370][T12123] RSP: 0018:ffffc90005667c38 EFLAGS: 00010293 [ 428.832423][T12123] RAX: 0000000000000000 RBX: ffff88805c6a2c10 RCX: ffffffff8b22f144 [ 428.840379][T12123] RDX: ffff88802777dd00 RSI: ffffffff8b4f901e RDI: ffff88802777dd00 [ 428.848345][T12123] RBP: ffff88805c6a0f40 R08: 0000000000000001 R09: 0000000000000000 [ 428.856314][T12123] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 428.864270][T12123] R13: ffffed100b8d41f2 R14: ffff88805c6a2a10 R15: 0000000000000001 [ 428.872230][T12123] ? trace_drv_return_void+0x1a4/0x210 [ 428.877785][T12123] ? __ieee80211_suspend+0x105e/0x12c0 [ 428.883235][T12123] ? __ieee80211_suspend+0x105e/0x12c0 [ 428.888700][T12123] reset_write+0x7a/0x290 [ 428.893034][T12123] short_proxy_write+0x133/0x1a0 [ 428.897958][T12123] vfs_write+0x2aa/0x1050 [ 428.902280][T12123] ? __pfx_short_proxy_write+0x10/0x10 [ 428.907722][T12123] ? __pfx_vfs_write+0x10/0x10 [ 428.912477][T12123] ? __fget_files+0x215/0x3d0 [ 428.917149][T12123] ? __fget_files+0x21f/0x3d0 [ 428.921820][T12123] ksys_write+0x12a/0x250 [ 428.926141][T12123] ? __pfx_ksys_write+0x10/0x10 [ 428.931074][T12123] do_syscall_64+0x115/0x840 [ 428.935647][T12123] ? clear_bhb_loop+0x40/0x90 [ 428.940310][T12123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.946187][T12123] RIP: 0033:0x7f253059de59 [ 428.950586][T12123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.970176][T12123] RSP: 002b:00007f25313ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.978576][T12123] RAX: ffffffffffffffda RBX: 00007f2530826090 RCX: 00007f253059de59 [ 428.986548][T12123] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 000000000000000a [ 428.994503][T12123] RBP: 00007f2530633e6f R08: 0000000000000000 R09: 0000000000000000 [ 429.002456][T12123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.010409][T12123] R13: 00007f2530826128 R14: 00007f2530826090 R15: 00007ffce48c71f8 [ 429.018393][T12123] [ 429.021470][T12123] Kernel Offset: disabled [ 429.025793][T12123] Rebooting in 86400 seconds..