last executing test programs: 8m10.61622417s ago: executing program 3 (id=237): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/rcutree/parameters/do_rcu_barrier\x00', 0x808882, 0x0) r1 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080825bd7000fbdbdf25020000000800020006000000ce08000000ef4ea6ba4c5c9add934fdd02000200000008000200070000000800020080f72500f25d5d3d18a35dae6e82af0c7e90611bcc041f702a89c19df8ea3ffc605243998a5da26ad7be32e0b9bf294882e8e25cbcde9bbc9553a065acc6fc6fa0bfce972d0cb065019e745651000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048840) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) timer_create$auto(0x0, &(0x7f0000000240)={@sival_ptr=&(0x7f0000000080)="a1899076dfb943b286813a3a87c5e4f17f0829f1d0b083d41cd941f1da919b4f8a08", @raw=0x7f, 0x81, @_tid}, &(0x7f0000000280)=0x8) write$auto(r0, &(0x7f00000004c0)='1\x00\\\xa0\x04|\xfd\xca\x12\xfa\b\x1c\xc7k\x923\xe05\"3n\x84n#\xd1\xcaso\v\xf0\xda\xbb\x86\xbcX\xb4\x999\\\xa8&;<\xca\xa8\x05\x9d\x9e-\xc3\x93\xaa\xda\x02\x03\xddUbHu\x01\x00\x00\x00\xac\xa7\x93T\aA\xbd\xc0\xb8K\xd7\xed\xcbP\xa1\xfe\xc7\xa1\x8b\xa7\x02\xad\xbc\xfaq*0F\xff&\xbb+\x9b\xe2\xbfd\xf7\xde\xb40\x1d=\x99\xe2\x06\xbf\x9cNS\xbf\x82\x9c\xfb', 0x2) 8m10.123298766s ago: executing program 3 (id=238): add_key$auto_KEY_SPEC_THREAD_KEYRING(&(0x7f0000001100)='/dev/kvm\x00', &(0x7f0000001140)=',{/\x00', 0x0, 0x703, 0xffffffffffffffff) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0x2, 0x80, 0x10001, 0x5, 0x0, 0x9, 0x3, 0x2, @stream_id=0x2, 0x7, 0x476, 0x0}) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\xff\xf5\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) 8m9.771033095s ago: executing program 3 (id=241): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, 0x0, 0x6a) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@ethernet={0x6, @multicast}, 0x54) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_UI_SET_ABSBIT(r3, 0x40045567, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setfsuid$auto(0x0) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x3b72, 0x0) mount$auto(&(0x7f0000000000)='veth1_vlan\x00', 0x0, &(0x7f0000000240)='hfs\x00\x81\xe2\xde\xa8\xb7\xc4G[*}\xaa{\xf1\x86\xf7d@\xe8Y\xea\xb1H\x01\xff\"^\'6\xba\xa9s\x1d\xf4\xe1i\xc5\xb6_B\xa7KFS\xc1\xa7\x8e*h\xe3\x8b\x7f\xca\xfcNEi\x84?\x82\xff\xf2\xac\xd1\xee\xf4\x9a?\xac\x11\x88\aO\x84\xe6k\a\x9bY\xddx\xb8\xdf\vHv\xb5\f\xbc\b\xc0\xfa\xc0\xfe\xa6\xce\xbd\x03\x00\x93\xdc4\x97\xce\xd5&\x93\xae\x05q\xe9\xa8?\x00\xbdi\x88q\xd0w\xfd@\r\xce\xe4\xadrt`\xf8`b\xbf\xeci\x93a\xc6o\x9ej\xe4\xa3\x9d\xaa\xe1\xe1N\n\xbcq\n[\"5\xd4\xa6\x96#).\xbd\x8aD\x88>8J\v\xb5\x99H\xc5\a\xc9\xcf\xbc\x85\xbf\x85\x81\x0f\x7f8\x11\xdbK\xf3\xc2#\x18 \xdf\x05\xcd\xbb\xc03_\xb7Q@\xf2G', 0x7, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) socket(0x15, 0x5, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x46) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000300), r1) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x240, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@typed={0xc, 0x9f, 0x0, 0x0, @u64=0x3ff}, @nested={0x4, 0x81}]}, @TIPC_NLA_NODE={0x1f7, 0x6, 0x0, 0x1, [@generic="6ee6dd1c97ffd5ad68aaaa3bba8577cbdb8dfceac9f26e73501449024359ed05d28fd20fc419bbd6deb04abb9900132fc8f5671e6d08eac5f10fcfb933beba65677b6d01623f98fa49d2a6a09cccd635552cd48569f6d74bd2ae8b1c9498ec82160cceb7eb500427f82e1d6bb69df866ed6bb4ffa8f1a0f6b25dac63d054bdcea2198e5f840cda192da56205b9215a49c9619f510fb8b1fae0839e0167cc3b2eb4fe80a0dfc8a668ece6c23b", @typed={0xc, 0xb1, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x92}, @generic="a2b3333abf4acf7dc4d5e072f7af1e923ccd9516228676ed64ea28555b4c010dfd2246ab0b36b8c95d28b22da781a8afb43bba6af2e504879f28d82ec1919bba8f9b477f3d87decae5425db0f4b98b648c0cc269ed5ef52b64f0fe1a26a82884e99da4a6de176aca4727850bfb909bb735843e13c771a0f82fd8be5f7abf4c4b9dcb6ce2cfdb4b608f02e766dc957843367f81a99731a48e94731568f17e621823801767715d9aba3d6dad", @typed={0xc, 0xd, 0x0, 0x0, @u64=0x1ff}, @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @generic="8015829537c45b5a85bd99926323ca34b25b0d5087cd6297807f5eee1030f12dff03d3df350877392879feacfc6a91e26acde8b3942961d8fabbd667f859446816354f739da1caff6c2a82004e8deb94adacac6cccb22a835fb783eea6a91c5373d3ae40920901a5c8527765"]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@nested={0xc, 0x93, 0x0, 0x1, [@typed={0x4, 0x5b}, @nested={0x4, 0x19}]}, @typed={0x4, 0xd2, 0x0, 0x0, @binary}, @typed={0xc, 0x91, 0x0, 0x0, @str='ethtool\x00'}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x100}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyc3\x00', 0x40001, 0x0) 8m8.435983692s ago: executing program 3 (id=247): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0xa, 0x0, 0x4) setreuid$auto(0x3, 0x7) socket(0x2c, 0x80003, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x101, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) timerfd_settime$auto(r1, 0x7, 0x0, 0x0) memfd_secret$auto(0x0) mlock$auto(0xfbe8, 0x1000000000000004) write$auto(0xffffffffffffffff, &(0x7f00000004c0)='1\x00\\\xa0\x04|\xfd\xca\x12\xfa\b\x1c\xc7k\x923\xe05\"3n\x84n#\xd1\xcaso\v\xf0\xda\xbb\x86\xbcX\xb4\x999\\\xa8&;<\xca\xa8\x05\x9d\x9e-\xc3\x93\xaa\xda\x02\x03\xddUbHu\x01\x00\x00\x00\xac\xa7\x93T\aA\xbd\xc0\xb8K\xd7\xed\xcbP\xa1\xfe\xc7\xa1\x8b\xa7\x02\xad\xbc\xfaq*0F\xff&\xbb+\x9b\xe2\xbfd\xf7\xde\xb40\x1d=\x99\xe2\x06\xbf\x9cNS\xbf\x82\x9c\xfb', 0x2) 8m8.031910045s ago: executing program 3 (id=248): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8880, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x0) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r1 = bpf$auto(0x4, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0x8, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x6819a}, 0x6f3) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000140), r2) newfstatat$auto(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x7f, 0x5, 0x9, 0x5e, 0xee01, 0xee01, 0x0, 0x824, 0x2c7d452c, 0x0, 0x6a4, 0x6, 0x4, 0x0, 0x2, 0x1, 0x2}, 0xa29) syz_clone(0x20a0000, &(0x7f00000003c0)="ecb8d0c4a8f27816f007d9ffd0633d27fffaa692f7ac8e1766b91f8b020dfb051e9ad7d3a909f4275e27611f3ce714df7718d1e978a0dc04387db707d110e239d96a00147ef7bd511a92dca759fa68d18ab229897b53961c950aa44c53eae922c3d4c74951e58f8c0a4acddabc7a373d1517ccab2d62f958a5033c73038788c1c7902ec4833598b57d7f92464d6ea7eb97aacf617111a0711590b61a61f9a85b27b46fc7355f639d6661688ff6a47abf8aecfe18fca8dcb395f7e5a7b5a3021da21b028f11654ce557af347cbbd5d483", 0xd0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="0a0d83ba9a069ca0567a1efa8010992b84eef6a236b654e1d8b50e1a1899e0d7638d3fcc6c73276bcc3e3ce7890a128eaf") r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) getsockopt$auto_SO_REUSEADDR(0xffffffffffffffff, 0x4, 0x2, &(0x7f0000000000)='-\x00', &(0x7f0000000040)) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) 8m7.315539139s ago: executing program 3 (id=251): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x10000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd8\x00', 0x60640, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="d00bb0bf8e3c6dd29fe7d4ef9aa015070029712234e1ff58cf43f2133e4aee7d7e981339943d92", @ANYRES16=0x0, @ANYBLOB="100027bd7000fedbdf255d0000002100f20085b9fb4677e75ab3657f70d2a08c75410bb369fed9241a848ec7c6337b00000004001e010500c2007c000000c8012480970132800c001b00040000000000000008004100", @ANYRES32=r0, @ANYBLOB="ca49bb01c3819bc7cfa835aeb7fa47324228416372854fd23852c7f16ad219d994c64d722c24aa803aae61ce392ad29d4c99aa0b32d44158b0f6f37bd3f756f6b9eca1ed302f67a76a3d5a9726b2440cd36a80e62af6efa4fa6f8d381ef3593608f4f92116143eec9c51faa59bda30b43aea9fb7fe0f0c95df7387fa211600941e0aef2931b0d92a48a08d8dc762e8a93809677e6700f98e1426c93d4274f0061a2586c33682b13faa966461ba2574e9bf289f8aabc9e8cac6d7e0e77daf17bdd06f3a04003c80210b04d2c78a575c30c558093076dd540f36802149196be1ca3dbe9607972a1e719849e14b591e7a041572138e455f32cdd69c57c099125e8d0eee6d4070d05ce5f9095f4d155ef768519c5255375b76912fbf197aaf45c2797eeb3d8e19761404b7801bf199ded961c9d9a7ea08efeab0ebc450bca55ca0aeb9576cbf7640875eda6d2fffbbb2dabf7b0c4089be259f057cb0cc423b827283306fcb053b79496f3056ca1dca44346522a230658b8fbe81222dc5b33962", @ANYRES32=r1, @ANYRESDEC=r1], 0x234}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0xfffffffd, 0x7fffffff, 0x0, 0x9) recvmmsg$auto(r2, 0x0, 0x401, 0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) socket(0x11, 0x5, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 7m51.268963695s ago: executing program 32 (id=251): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x10000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd8\x00', 0x60640, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="d00bb0bf8e3c6dd29fe7d4ef9aa015070029712234e1ff58cf43f2133e4aee7d7e981339943d92", @ANYRES16=0x0, @ANYBLOB="100027bd7000fedbdf255d0000002100f20085b9fb4677e75ab3657f70d2a08c75410bb369fed9241a848ec7c6337b00000004001e010500c2007c000000c8012480970132800c001b00040000000000000008004100", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC=r1], 0x234}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0xfffffffd, 0x7fffffff, 0x0, 0x9) recvmmsg$auto(r2, 0x0, 0x401, 0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) socket(0x11, 0x5, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 42.44817074s ago: executing program 2 (id=1732): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x4, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x200, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) 42.242223649s ago: executing program 2 (id=1734): r0 = socket(0xa, 0x801, 0x84) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000440)='keyring\x00', 0x0, &(0x7f00000004c0), 0xff, 0xfffffffffffffffd) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r3, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2004c005}, 0x140000e4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_WOL_MODES={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_CREATE_VM(r1, 0x4004ae8b, 0x0) r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30988099a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, 0x0) select$auto(0x81, &(0x7f0000000200)={[0x80000000, 0x1, 0x85, 0x8001, 0x2, 0x3ff, 0x0, 0x4961, 0x9, 0x8000, 0x2, 0x7, 0x7, 0x1, 0x4, 0xdf]}, &(0x7f0000000280)={[0x7, 0x10000, 0xfffffffffffffffd, 0x1, 0x8, 0x8, 0xfffffffffffffffd, 0x6, 0xfffffffffffffffd, 0xe, 0x4, 0x0, 0x3, 0x3, 0x1, 0x8001]}, &(0x7f0000000300)={[0x3b, 0x49f9618c, 0x3, 0x4, 0x8000, 0x8, 0x2, 0x7, 0x80000000, 0x6, 0x400, 0x4, 0x7f, 0x7f, 0x3, 0xd]}, &(0x7f0000000380)={0x9, 0xc1d}) 42.043596984s ago: executing program 2 (id=1735): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC1\x00', 0x62c620, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000004c0)={{@raw=0x5, 0xffffff7d, 0xa, 0xfffffffc, "50ddcc2d0a7b79ca0e62e667b5000000000000000000000000000000000100ffffffffffffffe700", @inferred=0xffffffffffffffff}, 0x1, @integer64=@value=[0x1, 0x9, 0x6b92, 0x200000006, 0xfffffffffffffffe, 0x7fffffff, 0x1, 0x5, 0xc, 0xffffffffffffff30, 0x6, 0x2000000002, 0x8, 0x7be, 0x2, 0x8, 0x2, 0x2, 0xfffffffffffff801, 0xfffffffffffffffc, 0x2, 0x2, 0xffff, 0x6, 0x6, 0xc, 0x1000004, 0x93, 0xaa, 0x4, 0x2, 0x81, 0x7, 0x8003, 0x749, 0x3, 0x4, 0x7, 0x6, 0x400, 0x9186, 0x1000000003, 0x3, 0x1, 0x8, 0x6, 0x345f, 0x503, 0x4, 0x400007fff, 0x3, 0x1, 0xaa7, 0x0, 0xfffffffffffff41f, 0xb0, 0x8000000e36c, 0x22d, 0x9, 0x10000000, 0xaca7, 0x5, 0x9660, 0x9], "bee8fd3b16a97731269aff7312ae1a01006266a3bde1f332e1078696becfd044280e7fb7719d4362b09d9f6cb070bad3af7185ae1e691c585914c0b11dd65468fb68dfc32254d8ed55c8d806a2ef4bba7bc65cd90676ce6dec79ff2f44034ad55049ff128dd27f04ac14d8dbaffacc77596ca0dffa00"}) mremap$auto(0x110c230000, 0x0, 0x2000101, 0x3, 0xf000) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/mem\x00', 0x68200, 0x0) readv$auto(r2, &(0x7f0000000700)={0x0, 0x6}, 0x3) fsopen$auto(0xfffffffffffffffd, 0x8) unshare$auto(0x0) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x5453, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00082dcfbdea4b1580bd7000fddbdf250500000008a092405200000093da3f05bdc2a624eee2f9969b8b21e869e8a2d237a3393344c0e64bf0ae6d1bfec18a4b9aa9a3b6990a49b557cd221ae3f303a2750e21e300080000cb3156081cbe9a75cd1b21096483ae89e72121b369fab13969bb00819062619f5b76eed1a3197ade20b0d1d229263fd86cfbbca75d06b2ac97e8c58ad3e1e7e89390bd02701385cfec1492ebbfec6fc76398e7229c142b206f7073c8aa423f3d6d8926d4cecdb166e4e529e283ed3b5504192eb0b83e5ecc0bbfac973a9a6b6639c9a9821daed67b298d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) socket(0x10, 0x2, 0x0) open_by_handle_at$auto(r0, &(0x7f0000000140)={0xa3, 0x1f5, "c16de251ef28fd3c8c3344e1d61155e496668c6cd3afd5cfc30446470486e025685aaef1ca384331066efa213baf72dba72831a660dbc648aea5444fdc5c2fbe091de795eb0d4dc506da8d538b49c0ea7bfde75b03bba6783392f0c3caa8db5a5c6fb061e02e6b970c85cee3cdc141a5980f7efdcfe1b9703c743faf35ee592d93c28fbb1553b38f84fd6dea91e8f631356449983958778538a744fb896765ac9ebf2e"}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r4 = semctl$auto(0x3, 0x7, 0x13, 0x7) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(r5, 0x5410, r5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r6 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r6, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000180)='/dev/etherd/revalidate\x00', 0x129541, 0x0) write$auto(0x3, 0x0, 0x5) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xffb, 0x400004, 0x4, r4}) 41.630076067s ago: executing program 2 (id=1738): mmap$auto(0x800000000, 0x2, 0xff, 0x800010, 0x7, 0xfffffffffffffff5) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0x401, 0x7ffe) (async) r1 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r1, 0x0, 0x17) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dri/card2\x00', 0xe2ab90acd58d1092, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) pipe2$auto(&(0x7f0000000240)=r0, 0x4) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) (async) mmap$auto(0xff, 0x862, 0xffffffff, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_wait$auto(0x0, 0x0, 0x83, 0xa, 0x0, 0x1) (async) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) (async) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) capset$auto(0x0, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x11, 0x3, @empty}, 0x6a) (async) io_uring_setup$auto(0xf, &(0x7f00000003c0)={0x1000, 0x2, 0x8e, 0x2e, 0x2f6e371f, 0x46, r2, [0x0, 0x100, 0xff], {0x0, 0x30000000, 0x80004, 0x102, 0x9, 0x9, 0x8001, 0x1, 0xfffffffffffffffc}, {0xa, 0xfff, 0x63, 0xc9e, 0x9, 0xe, 0x3, 0x3, 0x9}}) (async) syz_clone3(&(0x7f00000002c0)={0x400, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x3}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180)=""/86, &(0x7f0000000200)=[0x0], 0x1}, 0x58) (async) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={"c88e8e76992f088ae5aa6fa4e7be90d4bcd73b01f445abfbabed717cf0a38b0f", 0x1, 0x1ff, 0x7, 0xb626, 0x0, 0xffffffffffffffff}) r6 = getpgrp(r5) getpriority$auto_PRIO_PROCESS(0x0, r6) (async) r7 = epoll_create$auto(0x8800001) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r8, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) epoll_ctl$auto(r7, 0x1, r3, 0x0) 41.043294009s ago: executing program 2 (id=1740): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xb) setreuid$auto(0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/bond0/queues/tx-6/tx_timeout\x00', 0x2440, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2d, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x900, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/current_tracer\x00', 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x8040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 40.850547524s ago: executing program 2 (id=1743): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) socket(0x2, 0x3, 0x6) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x402202, 0x0) mmap$auto(0x9, 0x800000000000000a, 0x80000000000000df, 0x9b72, r1, 0x6) mincore$auto(0x0, 0x10000, 0x0) setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r4, 0x65, 0x3, 0x0, 0x4) write$auto(r2, 0x0, 0x5) r5 = socket(0x11, 0x5, 0x9) bind$auto(r5, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="264e6e02cbd06d7e0f2389d8a018ad1d31e69ca97ed14074a9d152e37aae517462c38232ab6755d84b60f45ee3de0011b12d6d", @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 25.186035119s ago: executing program 33 (id=1743): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) socket(0x2, 0x3, 0x6) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x402202, 0x0) mmap$auto(0x9, 0x800000000000000a, 0x80000000000000df, 0x9b72, r1, 0x6) mincore$auto(0x0, 0x10000, 0x0) setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r4, 0x65, 0x3, 0x0, 0x4) write$auto(r2, 0x0, 0x5) r5 = socket(0x11, 0x5, 0x9) bind$auto(r5, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="264e6e02cbd06d7e0f2389d8a018ad1d31e69ca97ed14074a9d152e37aae517462c38232ab6755d84b60f45ee3de0011b12d6d", @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 9.598122286s ago: executing program 0 (id=1826): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) r2 = socket(0xa, 0x2, 0x0) write$auto(r1, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) io_uring_setup$auto(0x6, 0x0) ioctl$auto(r3, 0x4, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) r4 = socket(0x29, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x800}, 0x6}, 0xfffffdf9, 0x10, 0x0) ioctl$auto(r4, 0x89f1, 0x24) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x1b72, 0x2, 0x8000) mmap$auto(0x0, 0x672e, 0x4, 0xeb1, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r7 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r8 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000000c0), r2) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r8, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}, @NET_SHAPER_A_HANDLE={0x14, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x5}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x10000}]}, @NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_HANDLE={0x44, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x5}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x4}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x76b}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x8}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xc0000000}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x9}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x6d4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc002}, 0x880) ioctl$auto_FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000080)) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r7, 0x80044dfe, 0x0) 5.893223281s ago: executing program 5 (id=1837): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x9d) fcntl$auto_F_SETPIPE_SZ(r0, 0x407, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x1d, 0xa, 0x2) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r1, 0x2, &(0x7f00000000c0), 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES16, @ANYBLOB="0700000000000000df250a", @ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES16=r4, @ANYBLOB="32733069e2bc58dcf18e836620967b4efd76275d0b07ed6e8d991f16798895b28f40d566ef25b2a9392bea6f0df1824d014c96c74aa5ae1efd091c4dcd1431fb626a0ca09aa5153ccdd4ad75806833dc8bd66fb30626ba7c99d81fabcbaf0d60a8e9f7392fb0b3eda838d44bdba1a871cda8693f6058f8f49e9fe01e32564a102ca995636e66d1511f757f5d5fcd1bf26a1560", @ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4004850}, 0x20000804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000180)={&(0x7f0000000040), 0x2}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x6c0341, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYBLOB='\a\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x201c03, &(0x7f0000000280)={0x0, 0xc4}, 0x100400001, 0x0, 0xfffffffffffffffd, 0x9}, 0x7}, 0x80, 0x0) mmap$auto(0x8004, 0x2020009, 0x3, 0xebe, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x36, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 5.634373446s ago: executing program 1 (id=1839): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x27, 0x4, 0x0) mmap$auto(0x0, 0x0, 0x3, 0x8011, r0, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) (async) setsockopt$auto(0x400000000000003, 0x29, 0x39, 0xffffffffffffffff, 0x0) read$auto_proc_pid_numa_maps_operations_internal(r1, &(0x7f0000000040)=""/62, 0x3e) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x24048004) (async) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x0, 0x0) r3 = getpid() (async) io_getevents$auto(0x24, 0xffffffff, 0x4, 0x0, 0xfffffffffffffffd) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x4, 0x5, 0xebe, 0xfffffffffffffffa, 0x8000) futex_wake$auto(0x0, 0x9, 0xffffffff, 0xa) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="200826bd7000fcdbdf25020000000ce10aa61eaf21cec121991d167a8a20bf8095a879836e92012d37a40ffd9050730b6cf57276a9d076fec8b41e0947f9f902cfa996be431e3040ca6d5a526d91300e9f927ea193500632bb8531d92c67e77bd27ffd8bef6d0e8c885c18a2545d82ac3f97f32a20478f3fe03a81785efd1031b7983ad19baa1c1bcab7de8efe905fe7e7244bba38365f4f4c5eb997088a87853f5570330411499b72e6cc1fc9585d4a32f9b582f43aadb2c8467dd9d560f86294352d33a5"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) waitid$auto_P_PID(0x1, r3, 0x0, 0x1, &(0x7f0000000340)={{0x1, 0x8}, {0x8000000, 0x9}, 0x8, 0x6, 0x4, 0x100000000, 0x9, 0xa, 0x8e21, 0x8, 0x81, 0x0, 0x2, 0x37, 0x4, 0x6}) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) 5.053366586s ago: executing program 4 (id=1840): r0 = ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)=0x400) fcntl$auto_F_GET_RW_HINT(r0, 0x40b, 0x800) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) shmctl$auto_SHM_LOCK(0x7fffffff, 0xb, &(0x7f0000001180)={{0x10000, 0xffffffffffffffff, 0xee00, 0x93, 0x400, 0x40, 0x4}, 0x2, 0x7, 0x9, 0x400, @raw=0x400, @raw=0xfffffffa, 0xffff, 0x0, &(0x7f00000000c0)="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", &(0x7f00000010c0)="fe3792ac16040348403ac1ddfa5c87a1912fe5f81c2922d0f38c3e99a417bf1574012f83cd7eae12f867d16acb64293787acf411c61d1cbef2cd1940ab4f83485bea0e113c3f4dc50cd6d764f76654bf8faa403da2a08259b906c1cad65d0d346a40c77a1c146600b4c880d78148f0dc1f114f9231b4f2b4ad6b4e158d7b13ed33cd3ab6df659e5b356a158de508e57e0f5537b184260dd3d9bb3547d2f22ff1a173f23feb9c3231fd9d6b12e456553bd8e05f4002a02d97"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001200)={'bridge_slave_1\x00', 0x0}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080), 0x6b) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x0) socket(0xa, 0x2, 0x73) socket(0x2, 0x80002, 0x73) fsconfig$auto(0xffffffffffffffff, 0x2, &(0x7f0000000080)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x9c\xbd\xba#_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2:sx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\x00\x00x\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2P\x8a\xb1Vh\x94$\xe9\xea\x0f!G\xb9\xb3\x11\xe1\xae\tg\xc2?8\x8e8\xce\xbf\x01W\xbc\x8b\xab\xa9\x91j\xcd\xb9`F\x02\'\x05\xb1d\xff\xedB\xa5W(q\xfa\xad\x9be\xbfX\x14\xb9\xf8\x1a\xe9\xed\xe6\x1a', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000001540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB="a4020000", @ANYRES16=r1, @ANYBLOB="000228bd7000fddbdf25630000000600f7000c0900006d022c802801608083672bcd2b4eec3509d3ad3e0388b43467ce023e359f7e51a83babab7da35b5bc8cfef4bdb24f7a3c80a0887468e92e18c59009e3bd2317020c770ba721123dfb8e3aa4e75e184e391ab53965cc55dda639d3cadc870ca2746c5494d0aa65b8133ac46770acb107198e4e7ba08008c00", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0800010080000006001a010101000000000000000000"], 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x4044000) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001280), r0) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000001440)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f0000001840)=ANY=[@ANYBLOB="a87c67d0ca117703a11b2f5220a8bb440f13d40ed6d5a32d6bad51cb457e7652792283d955cd59e879efeb9bf30faabeb7e95f18050021f187e9d5a9454bd7e4114eb77ad750098ca61a149b8b4cec098598d16709899d8ba5f1bafa009ae22e6d0ca071", @ANYRES16=r4, @ANYBLOB="100025bd7000ffdbdf250800000008000100", @ANYRES32=r3, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20004004}, 0x8851) 4.698622944s ago: executing program 5 (id=1841): r0 = socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x8, 0x80004000000000df, 0x10004000eb1, r0, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r1 = fsopen$auto(0x0, 0x1) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x7, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x3, 0x6, 0x6, 0x0, 0x80, 0x2a17, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x33e, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x4, 0x80000000, 0x0, 0x0, 0x3, 0x0, 0x27, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x3]}, 0x9, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="2517"], 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x100, 0x0) pread64$auto(r5, 0x0, 0x80000006, 0x3) setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90) r6 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x2, 0x0) read$auto_fops_atomic_t_(r6, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) getsockopt$auto(r1, 0x200, 0x9, &(0x7f0000000040)='/sys/kernel/debug/fail_page_alloc/times\x00', &(0x7f0000000140)=0x5da) write$auto_mtd_fops_mtdchar(r1, &(0x7f0000000380)="d8630513a27789227c1587ea0515285306ddd2d78191dd24ffbf76eee3a64036518a5531e218f3b698866cccf28073eb6861824c2e6f4f8db2ad6156a2c231e7619ff698a9a6d9ea5ff38b14012bb4a69a894ff39946ffbdce52d58fd625e5431777093dd6995286c856e02953d33c0428f428b90fdcee783f0c77d35158177c3d976800c664f080b3674a99b24b758943dc4bf9726277f3fc48ccee3eb8f7aeae0d3fbc22fbb2af7f5b190302ab8f5386be3667ed080378552d3271a63c063013ef1006f39f27d05c02df07460e8e1034d753abd0d3c2aff0aa8859891c992089", 0xe1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000600)={0x6, 0x4, 0x401, 0x6, &(0x7f00000004c0)="01413744b709b6039abedc3b4df588eca40aa9f314da5d2c9e0fa117c8fbe5e6290f04e61d8b4e7840fa96be647e74dfc0", 0x2, 0x6, 0x5, @number_of_packets=0x9, 0x6, 0xffff, &(0x7f0000000500)="327557931a9710720ff742359b83d64eabd45134e24c836ed415731e681c61674604cfa966c3ef464c94b2cd0032b268ea730587590e05efacb8aaf73272b2cb12050eb5c20a04f41b8f137e3671c93ee6562a027e9e8ff70f5ce1a67a4d5f06e65e7bc4092ae7eb4b3ded1637f3334de8b7049d004556b7fca283ee1a9fac0c0796de8d4d8834c9f0ee49b76f61b504f6c3f7f91dad996237489e4f206e6c1af5ec530e01e68550616a10382c39db97fd73b4c3559806a277d9f0606edb54c26ef0f4915cd25df6a39b88f95ab214e85e61b2163106260813a179", [{0x74, 0x3, 0x1000}, {0x35bb, 0x473029c, 0x1}, {0xe, 0x4, 0x6}]}) connect$auto(0xffffffffffffffff, 0x0, 0x3d) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x4, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x31c, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'bond_slave_1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NET_SHAPER_A_HANDLE={0x34, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x6}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x1}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x400}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x8}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x6}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x8}]}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x9}]}, @NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_HANDLE={0x4}, @NET_SHAPER_A_HANDLE={0x14, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8}, @NET_SHAPER_A_HANDLE_SCOPE={0x8}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48004}, 0x4044000) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/cmdline\x00', 0x400, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x6302}, 0x5}, 0x3, 0x0) 4.41281654s ago: executing program 1 (id=1842): mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffffb, 0x7ffe) (async) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x2080, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x101200, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r1 = pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) tee$auto(r2, r1, 0x5, 0x8) (async) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) set_mempolicy$auto(0x4006, &(0x7f0000000240)=0x7fffffffffffffff, 0x7fffffff) (async) get_mempolicy$auto(0x0, 0x0, 0x400, 0x7, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x80000000) unshare$auto(0x4000007c) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) (async) mmap$auto(0x1002, 0x400000000009, 0x4, 0x200000eb0, r2, 0x701cf82c) unshare$auto(0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22b42, 0x0) (async) read$auto_ptdump_fops_(0xffffffffffffffff, &(0x7f00000000c0)=""/32, 0x20) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x41, 0x5, 0x0, 0x1, 0x8000000000000000) write$auto(r3, &(0x7f0000000400), 0x100000a3d9) (async) socketpair$auto(0x1, 0x2, 0x10000000, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/sctp/eps\x00', 0x181800, 0x0) 4.299380437s ago: executing program 4 (id=1843): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r3, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0xfa1d1e222abcfda0, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x4b}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) 4.216337449s ago: executing program 5 (id=1844): mmap$auto(0x0, 0x400008, 0xde, 0x2000000000009b70, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) 4.016596177s ago: executing program 1 (id=1845): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000180), r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) io_uring_setup$auto(0x89, 0x0) r1 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x10000) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/uid_map\x00', 0x8081, 0x0) writev$auto(r2, &(0x7f0000000140)={0x0, 0x6}, 0x5) prctl$auto(0x43, 0x17, 0x0, 0x10, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2b, 0x1, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101802, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x4, 0xfffffeff}, 0x800009}, 0x3, 0x20000000) sendmsg$auto_NL80211_CMD_STOP_NAN(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r3], 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x841) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x8, 0x5, 0x7ff, 0x7fb, 0x0}) r5 = socket(0x11, 0x2, 0x40000e) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ipvlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0x54, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e32e9f6a", @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf25110000004000018008000100", @ANYRES32=r8, @ANYBLOB="08000300332700001400020073697430000000000000000000000000080003000700000008000100", @ANYRES32=r9, @ANYBLOB="08000300030000007c000180140002007465616d3000000000000000000000001400020064756d6d7930000000000000000000000800030001000000140002006272696467655f736c6176655f31000008000300070000001400020076657468315f766c616e000000000000080003000500000008000300ffff000008000100", @ANYRES32=0x0, @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x4020, 0x0) close_range$auto(0x0, 0x5, 0x0) 3.900660979s ago: executing program 0 (id=1846): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB="cfac00000000f6002500", @ANYRES16, @ANYBLOB="010027bd7000ffdbdf251000000018000180140002007465616d5f736c6176655f310000000008000c007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_int=0x81, 0x1}}}) 3.689551467s ago: executing program 5 (id=1847): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="890727bd7000ffdbdf251f0000000800020005000000080003007c00000000000d0009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004840) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r3, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x100000, 0xa00006, 0x800000000400001, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r4, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/kvm\x00', 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) 3.220375024s ago: executing program 4 (id=1848): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8880, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x0) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) r1 = bpf$auto(0x4, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0x8, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x6819a}, 0x6f3) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000140), r2) newfstatat$auto(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x7f, 0x5, 0x9, 0x5e, 0xee01, 0xee01, 0x0, 0x824, 0x2c7d452c, 0x0, 0x6a4, 0x6, 0x4, 0x0, 0x2, 0x1, 0x2}, 0xa29) syz_clone(0x20a0000, &(0x7f00000003c0)="ecb8d0c4a8f27816f007d9ffd0633d27fffaa692f7ac8e1766b91f8b020dfb051e9ad7d3a909f4275e27611f3ce714df7718d1e978a0dc04387db707d110e239d96a00147ef7bd511a92dca759fa68d18ab229897b53961c950aa44c53eae922c3d4c74951e58f8c0a4acddabc7a373d1517ccab2d62f958a5033c73038788c1c7902ec4833598b57d7f92464d6ea7eb97aacf617111a0711590b61a61f9a85b27b46fc7355f639d6661688ff6a47abf8aecfe18fca8dcb395f7e5a7b5a3021da21b028f11654ce557af347cbbd5d483", 0xd0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="0a0d83ba9a069ca0567a1efa8010992b84eef6a236b654e1d8b50e1a1899e0d7638d3fcc6c73276bcc3e3ce7890a128eaf") r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) getsockopt$auto_SO_REUSEADDR(0xffffffffffffffff, 0x4, 0x2, &(0x7f0000000000)='-\x00', &(0x7f0000000040)) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) 2.71027298s ago: executing program 0 (id=1849): r0 = socket(0xa, 0x2, 0x73) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x3}, 0x6f3) (async) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) recvmmsg$auto(r0, 0x0, 0x1da, 0x3, 0x0) 2.244827718s ago: executing program 0 (id=1850): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x287102, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="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", 0x132) (async) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cabea2d3acdc6854e36342b72e38cdb37fd4b61107cdae019c6139ce8761b5edfafa9297286e61bc1f4f76db1db63a0c3f09b4694c73a62d141e67963f89258e7b20e3e754047f97b296fe83e473ec5db31107d77a89afc1679c231ce06bc0d5b888a0b8735f40e8260af4ebf3bb6ae388905f44c35e3759c849277310af080cfd6beed2131e8c1dcfe0840101f3e9cfbbab5a2692475ad1daece2ce887da429e941b28a2b514a23b5f49079b3588bdb488d6d2200b436b0073d5d9ea38c653c4d4222d947d62932873fe751fec79dfb9cf000000000000000000000000f6aa5ea243", 0x132) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) mmap$auto(0x2000000, 0x400008, 0xe3, 0x15, 0xffffffffffffffff, 0x3) r1 = socketpair$auto(0x1e, 0x40, 0x8000000000000000, 0x0) mmap$auto(0xfffffffffffffffe, 0x1, 0x9, 0xcf5a, 0xfffffffffffffffa, 0x5) mmap$auto(0x0, 0x40009, 0x5, 0x9b7f, 0x7, 0x27ffe) mmap$auto(0x0, 0xe983, 0x3, 0x10eb1, 0xffffffffffffffff, 0x20000008000) syz_clone3(&(0x7f0000000340)={0x2000000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000340)={0x2000000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/pci/drivers/vmwgfx/new_id\x00', 0xa001, 0x0) r2 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x4f14c2, 0x0) read$auto(r2, 0x0, 0x58b22256) (async) read$auto(r2, 0x0, 0x58b22256) write$auto(0x3, 0x0, 0xfdef) r3 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r3, 0x0, 0xfffffdf1) (async) write$auto(r3, 0x0, 0xfffffdf1) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000180)='/dev/binderfs/binder1\x00', 0x181041, 0x0) ioctl$auto_BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000001c0)) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x00\x02aIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x3d, 0x8) (async) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x00\x02aIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x3d, 0x8) mprotect$auto(0x0, 0x8000000000000001, 0x8) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, r2, 0x2100) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(r5, 0xae41, r1) 2.168229759s ago: executing program 1 (id=1851): mmap$auto(0x4, 0x4020009, 0xdb, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x18000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2.08590997s ago: executing program 4 (id=1852): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/140, 0x8c) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) r1 = prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r1, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4dc8e2f56ac8a0bc5866") landlock_restrict_self$auto(r0, 0xfffffffe) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) (async) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) (async, rerun: 32) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) (async) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) (async) socket(0x15, 0x5, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dmmidi2\x00', 0x401, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) write$auto(r3, 0x0, 0x2da) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x40000080) semctl$auto_SETVAL(0x2, 0x5, 0x10, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) (async, rerun: 32) rt_sigsuspend$auto(0x0, 0x8) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.818198296s ago: executing program 1 (id=1853): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x800019, 0xf, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000300)="dd") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0xfffffffd, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0x10080c, 0x18007}, {0x8}}, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0xa, 0x12000000, 0xfffffffa, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) r3 = socket(0xa, 0x3, 0x3b) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto_SO_CNX_ADVICE(r3, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r4) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b9effc6a4f747d5f75db0ad20000", @ANYRES16=r5, @ANYBLOB="000226bd7000fbdbdf25660000000400fd0004003c00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xc8, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x91, 0xbb, "1b0c49885df0cdc5032655af6b505fb0313c74062f35b5798c2f608f38ddff194c2e5c5a4c8d02725a6e1f0a16f04305cc84798bd372c87b741a11040c67a2736fefd76b59db342714b1a0c31a16c5e95f0b34f5a40430d567b398c02195a3152433514de3b465e733f6d98e884b97420c8062dae35647c4e1f3a4e22220fe89409a1e35622b66a933eaefa330"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "121324831f3129cebe475836e06aa4c37cf72cc535dd075d7a40"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8041) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, 0x0, 0x20) 1.316584597s ago: executing program 4 (id=1854): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/smps\x00', 0x22001, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) newfstatat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x80000001, 0x6, 0x7821f460, 0xd, 0xee01, 0x0, 0x0, 0x8e61, 0x8000000000000001, 0x10000, 0x8, 0x4, 0x5d, 0x1000, 0xbb73, 0x4, 0x4}, 0xfffffff9) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x150c, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0xffff7fff}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x7}, @NL80211_ATTR_STA_FLAGS={0x14cc, 0x11, 0x0, 0x1, [@nested={0x10c5, 0x4, 0x0, 0x1, [@generic="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", @generic="a7c69fb6a16a3a58d18c61a07467317e3117a0263c6715509b0b3f378b56ee8421885245536a0c1025a0821d59a163a8e7c8285ded90729ad793cf7e9ff00b2d7702e812e9a8ab098f111d4e0502fbcfbc993fc356db81eeae3f48ea309a53975633d2db52f34bbc119bd75d6cc5e937124d812a7e7a3fca277331e1dc2510d5512e501be5f5f053a4a9f53bd671d1bcaa04507518d25c47ef5ad115ecb5ea7e28a8ea0816bc4a427eb8cb9dad2941eeadf4dc657b0cdec74d3c9e6f9259d033d7"]}, @nested={0x22f, 0xad, 0x0, 0x1, [@nested={0x4, 0x154}, @typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@mcast2}, @generic="3940ad5415d63b61b43da73f50798b36425427a7bee660ad3b044d42285114bb3794e1a09447ebe47f13c8029f853c53d362f85960e1dfd30e7c9451d039400d22e6a9304e85792317b65f5b", @generic="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", @generic="2cab0e57ee2f1053adf559f2a05d5174535d49a059fc23043bbcdd67e1429be4147064bcdcc604cf6ba9b30d230d3aa4a771ebbc3d75ece9957702cd90bb1fd4ddc3e49cf925ed15608f42fe9fdb665bbd297f9b7c4e9658965f2577c97b7f6da809121be2260ad467a14df08692adc29c83726097648b23900fe6e91546fb55e61dffacd02c2215046a9f0053d65f0e67b8cb589e0e3e3147308efc776ec1fc02a0ec40f31716e3c5d288d9bbaeac5a", @typed={0x8, 0x14b, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x38}, @nested={0x4, 0x11d}, @typed={0x8, 0xe0, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x155}]}, @nested={0x1c8, 0xf8, 0x0, 0x1, [@generic="418735d2462fce86c9bc0578e54e054244e78e0eaa979ae0aecbff899f9dc700bb0964e8f7e2b4236aedf9d0a8f89d7c5a4cba4f29c6d525adbfe1fa454db497d5cdc968867e61e18b5814ea", @generic="2a74738f83a6f95dfad2ae563c3e0b1b4b60137e3db362a8caa17a46f37a1779ebf1fde60a8a02599ed87e3af18f691b6a59dce9f78a506ddde387ae2c27a0785d3a6b0498", @nested={0x4, 0xdd}, @typed={0x4, 0xbe}, @generic="c696a5480dac11f76d2de0c6babb10a1c795f15d9d4192f1c8261cecb17fd715178b412094453f7721c52336cd89612444b07cf74b41bd9b05e50e6df63ae5b9ccca2c72171971546223aeab36ecce0d396ca91397c773edca4d8e0ecf7eb9bf28e97596a3373978edf4ff9ad498e217f82fe88683acf799bb1d96dc9acfc13a1616e567e192c07eb02c1363a42807f5106fa22b65cb5d90582cc3992cbcc1029a937c50cccd86d91891b8042342d3fa557d2168e9764757af6e260c9fdc98083e4f9ccf5ba494a444aeb5ebaaaf56dd7eba5c", @typed={0x4, 0xd4}, @generic="ebc41a0c8cb2c04a92c821c666729bfb46969c45a76ad094b4fc4ebe9e87139e8ea651e922bfef558249590cdd9afe4695fe32a3a530ca63391a53752ceb2601438656d8ed1d0c3aec5e4f03372d8fabc0949916"]}, @typed={0x8, 0xe6, 0x0, 0x0, @uid=r3}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x1}]}, 0x150c}, 0x1, 0x0, 0x0, 0x20040814}, 0x20004041) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/smps\x00', 0x22001, 0x0) (async) write$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) newfstatat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x80000001, 0x6, 0x7821f460, 0xd, 0xee01, 0x0, 0x0, 0x8e61, 0x8000000000000001, 0x10000, 0x8, 0x4, 0x5d, 0x1000, 0xbb73, 0x4, 0x4}, 0xfffffff9) (async) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x150c, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0xffff7fff}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x7}, @NL80211_ATTR_STA_FLAGS={0x14cc, 0x11, 0x0, 0x1, [@nested={0x10c5, 0x4, 0x0, 0x1, [@generic="888eb9c6d693f0313f485fc8ffb56587ff433672cd11feb07971a9426d9bcc0f277a2771cef4b6b2bd0a8fbedca4e3fde2f4f5a691cf6e8993ef730ef2726569b8521ebb3c54dde3ab9ae9f21c8e0b77b308392a9ff0c358b9ea974c2a801b589d0f0b5fa44a00802c9e16a9dd440f853cab80a718d04492eb8a1beb978ee1cb17e508fbf2e909864eafb407f37d7bb7454b2576c601458c2235dac5b2631dba86d0e8b13cae40f5f3a4b1ee4f6f0d7d8b2f92cc9b022e835f24e4626bfc11b894faf85b2bb0f15a2bf5f653072e9cbbc2cdd59d1d4d07b918b6b53e8c21e46e768e591059c34ec37f9c0851f293b607e55fe9d7a98ab8980c101350669cd85379ac9d14415ec2f40b65bd51073c00dec6da28272eaea3852200c2f585db70097e75871347d678f39176846da59718b8dadbcca75a32f552b5e831618b227f0e951f598eb674bfaa67181f46da4dea6e48b575eda18b5ab254f003886f8369815473f7f6528d76ebfc49ebe0e31a7e788b9b4c4f30330282bfcd13fe06c4297d307f26502ae3bae03477b13cadec7409629b76b77d2e73e2d92b3b9da6ff30520ec721d684ec9c7706d61b7bad578b13adfac00e1e6f94b834b0ec4747c5b1b550a418c57759c895b5d031b60f4bed84fc722c3c371e093a7b3cce1847fdde4c2ee22eb6b17ac42a6d9870b14452e0945a7ff3bb420c13b23ae7fc1a3c16f51464df745992cd6f06c60bf2abd19410e3c324039c1608630d6d45f903a8d0e424c969883fa9127686857c09dd668ff6c708b1e885f65de25393bfe1d120f669b2c609006681d0ba4568df3ffd9a936409c88f27b8c1208e7f8851e4f24e88b473fc027b4b8092bd99fbb4b9023dd40b68c48ae6c507513df05da68b587cb029a6f2b30c1a43e6e5bf8c4e8befa2e9c10b722625b71f986d4dcfa886a4ae12552d5b8156b30b5b111e7dc31d582bb176e45a47f2c0c7474556629e2346fcc9af2923b85a65581eefc0574b59ca8c574aed60d14b3195bcecb41fd1bcc845f016056a056d1e2541a558ea3044c196c2b424985459f4b8f607e660475d2214620c676442302f6983010656ebd64c8a4a938143f6ac105cc050ce2baa6d5da7e34da5ddbb802f4c08628f0364980032458ba6f29f06a58cb0cc8e3d3abb96ff4afd6d5661c14148452061ef9c10d365d7fe4f11afe0a9f13a69c7557c30a59973e7deb666a46916841499e545a2ec2e4f667a4d242aaafa2318df9abea93eddaede89de4b9e2e9b7f44cf66e11331ef94680481be5a674c39389ba8bdb0161122f7572acbb5dc2cdf43d466efee60f199809ee2d16ef83f660d660f804b8ddb9432ca58523d454e3d32419f4d7e07607b413bc470088a985ba1ae8e6a4a608fb5d57b6c872176144f9c212cd00d69b5bafa79a0e1bcea4c98237f8325cdeac0c615c2ecb92adde1546e0dbd7bc30b79a076b96225504f9efe3b36b743331e113cffe4255cbb246a2555069f5c617da895684a170af8b84e5642ddcbd17de0fd1191ba892155b72050db3927adec00e8e0df57ec491c034e5bf75a49ebb74dea5beb622f8609737760402fd24727023aaa56aa03b902ba717a9181dede494bbc127430e3d563d3bd70aa9d5ca39c10cdd476e63ac6d0958b7ed2d88e48b3342859472f0d8125dc38067ea07be7bb4baa762bc0e6528477fcba5ecb264ae13de9a50c7da05e1cee8afcff091bc8838962e6fdf7553f1845968b2d8fe82ba6fbb78a2133eed18a4b707e1a2dfd195aec4950c147a2923e410e819d6cc9b275bb7c0be756faf694c8455eb7a142a17ef89b37aa700ade7af12526aad0abe0c2bfd429c99a72bc8aa96d8ebe9381110ebf765c2960b5718d51e156d975d75b25a76ebf9ad24f84281df9f3ae2c0e109313a3b135290fe2160eae27373b8085d00062f54843991c79868650614e46203742977edc2f58db966533c82f6cda3fa5cfe5884f346684e94fc3d40995e677de7c9147b967cfea7bf08389ffe7d817399c5acb41cc47fb0818daace0c2759e1c190b27a858deee2b1616a1ced31cab8d54be9254e1268abc9afb10544311c8370f8d4f2059a1ca091711a2dc99c8c40661384070dc42f36db3c5da5a9471fc5c968f208fa2f24938d785a919c2ebae306c0f41a7eb13576e6a215156045bb8136654fda9ca2769efd32e53c4c6228e2e598dce0102c34723c82f57684a1e2ae7233b15648e0a7a4723040f3c4cfecb719d754bd896e7d7e7a2a17d780546e4c5da6168383ab40c6f75b61d723252dbfa54dab87421e339c0f7631c35f4b7449049a0d9afaa69ea6c1784c28619927a3f497e9662018c1400008a88cecfc83cbc4e644dd2673e5e3c37a605b2d5676357dc8d2202428825a29c405fc22795c417227c39232e1664ff5774d1072aae2deb0674f789d8dee761a27757d0a01b44adc8ff153c589b29452e158d9233225b14f3220180042f059ec787bc40383d64d5d435ae27aaa21389f93298b3e8dc253085efd7509d24172570de034995aaa6f9dbe23a018e3e97ce6b257f1c7c4f3cf5fc0b617a4a29445779d02e5de08ea51891408bc65742db8cb9535de75075c4259fad5d48535f95c6b7a11f3d3a6658b8bbee36927a282619f6233fe941b8bba041e549bf333148d5b5d36dbeb5d4d0d4968b85287eff5d2be51d0dede0d4790464726a742267f493d9a54356082aa139b5a6a8f718731a66e15664fea52aede32a0dfe2022ec677c352a5532c0e5fa77fa8ec24c11249e3450c3779a43ac65c57a18c47dbd4b8fea86a7d6204e4ae56f82855026e2b4744d956aa7c3abdfc11393504f49a3dc847908021f2278aa01d7a53bdb694feeabf5225087a3185077002fa0777a6fa6ab2c63a6125a2887f83e3cac982f2e8b502e3b12acd7664038fbb86d371c2818fa32c97c79c32e45864c824c2cba1b15335b691cacc825a4950650d1b167084baf8f5294aef1594cd25ab5c03c003a9c986d4b60bbe228e996c4c7fc9621a5d297913a47794345f9cc21f53e8f13e79c201c04089833e044032a62658d88ebc623255b3d85580b0bbc9c3f79d6f87e9dae1797e8e29055d49b3fae007f3edff05abc075fcf6a448af0c745934639d42f5bdc32529d87859be04e51b303e32f4be596976df86c51883cae6654c86fe7a7b7a66f492eefb3c88a2fee19e752b3f6b474d81e39768be79c0f77e123b6880118bc1f0eb4f489dc02dd64c83d1df2759147358113ae39dd679a7d69c3a591d3a603a035ad3c085672ffb33336700e16edf2a693e34cf3aaee01facda98fb8525d2847570eade6895a7a6f84cc30ea21b3fae3255ce5068a7a693cfef95b0a1bd4a9c1ea4797cd7e7d584a8c10da2452c1084b4faa508dcfe371a702fe245f3ca103b7ba64f69382efc82d56b8d93d2cf499ec336678c2865c946bed2be4cac753dc78b825d6cdd0305b4a9dc22957136466b9b7261cf6ad8d572de493f967060950e046491123ff2b31ac8f537a6b1d0410b09f11525b567076dad6db81e38c77cbb4a55ad941cb8ca121d0c8ead7db3b914cb2a0371954013fd6961000c5cd5c96cb3d1cdfa178cbc61c760145a2f07d4ee6744074da8453fd6b26154f4290a9e10bad1b575a9ea2e2b242e780f020bd2caa7655fc87eec6f584035a18248364835d4d568e2cb4be81514a174d6c3dcb652a667a8757e760ffb54bed1c1f9616d54a6ac975357d8aa909b4796802b647374fd444701ec6bdb904e2bb3f667580fd1af8271191c5cb9bdede1f263c5a6e6b7f317e923b19cf71155911d4ef70885db699fc8b1d578dac661c55332f7956a57127a97e22a02ae51c879dfcc6ef80afc774994e068d725553c30639ccfe9743985a8a8e0bef21216f3ba23b168b3a091948d3f2965e80d2db675ec74806b2d20839fd65e4fd67cc1af8c8468785f3d37a2e42f50cb593b04055d5f0f0208a64f59ba7606a9140115a63b0d674fdcdb0a184fcc610bad3a5b06e0a459a2827404e041a6ddf974d08377ab2ce28a8c72c76d96509c4111eb40e6c560d0ed9f83ca196c4e276c8c336627400a04e85f9eb73df5b03645ac4c4c8f368df92b0de4c565e1902529d170813cd590a3ba8b9e86cfd104dc791c670ed3b53ca5554682790fd451abc7fc6c668886ed8799a82b6c28ede641b95933ef6e28afcf5a26a6b83127e021597c1c9ab5f785f4f0423188fb9be77fd9ff874722c61c24f87f8ccff72c5261ee9ff1a5852e766756d024ffefc501d10fab74f782715e0670a25273c7fc19578f3f3ebbf064c298e9ce22a8a2e10cb351559b269dc22205aebecac8aa04b38a39a0cc195d34e3cf6fa706aab3facca6095c2eda0aedd1bf4790e7d4fb2d6581c8031ad7b8cf0edd211f3dbe5a8dd5b386c386ed9ff6489a9633913df16117f5ec651f44b1f6c1cdb6b70c379bd76665b418fe0ad64baa290ccd3df60b4543688b85730ebdd42ab703c91e9fa72b574a1f580ca4bfa4e4a2bf9d5635ec2f9983b8d874a744753784db9d7c575e78c71ce7a0018107fd5da1545ffad1d3c16364b7c954989e4fea9930b78b5d64c88b480a041ca7d25c77a15973b72ecd42add3eba59fd572e6bc737d08513c4268356ecea84ddf8787824c0e4d881807c8f8c37df6ccda989fc0450ef68dbc0380adeec059f5908143a7ca2e541535233ac326b60fa753906d9e810db9bb32123ef51c616ef60849b0c1b3b8e3e09c435cdb7b982b7322843e9f4a72e8227c623a46db79c520c14da5339f384e3fc15e30ec258a0395366a246ec0f9d36b342210c1d34f277924920105d3c65cf665f211de0f89b53ea435d3b2ea05d7c75635c7a64f15b5d089ef623ddd3987ce0ee14e0950beefeb744fdc876f3f2264c3dc4cbbeaa594196b6ca55625145f6785c3ac9023a91b0638d101f245f0e30738d79407a900f405d3cf2c491597158cf13ef4fdb5198a95498d72f0222ce7fa870fd21f16f042b4638abf8c11b9ff716110a403fd5b3b0ec666650f2be439b9a0f5ee0aa21cb1e62af3386f1a7bb5aebee3f3b2076adcf4bb880748a80c5fdd10c11abaad264d56ca29bc9287009a89b25e6490d3ac53048b26c0182883ddd3c051553ddb271d12f5a3e2350ffcc56bfa787b81d60aa8812136103e2d5d6af6e2a25ae44d7b253a32f89c2a1d8fb49c0538e5aafb741b30c65985d0657add07aa50bec7e75ba88f398217930a8afdbcc273ab496e52208d9948fe3f5efc7736289cb6f1902445dd7b6a98772d92c0605624e432a85fb4d8db623e731cdc1096f35d2a02444c9725dc847b3b0f133ee9028e1afc833e8402c3b7f9e35cdeb5b5241c964f1d0d262f44fe6225bfbf832de6a6a955d7ef64e9f8e8b23457bf2646dfd9d7b0fb9d6cbc06c3c416537bdf1b8d725952c26b714a847aedd19fd1f71313877f3bbc1b7784d707ffa8a21bb38eaa637eee9652c612c9b0e6200f9f51c6dc2a93d36f7bfa328c12b90c26760bf5db894a18bbd1e3f7ab95643743f67a816f7b265a423000391274ddda6c7172a01a2d7581aa5d2288caa0971d37c74af6be442e020c5a7a138a772b3989495b694b072c3a6002dedb1378115205f2bd7a1efcca76c33382f1db4e8c8d67ad3c38846978ec8b93b97c479fc96960f10df49266e6b771cfc8d97aec68023969d28689153b398bf97b3b6bb0476540e6ea852eda246a12390f1de225f5c72cd4acb4967225f70dfcf89a7f2185c154d224470a236283fb7c08c056ae3ee758a", @generic="a7c69fb6a16a3a58d18c61a07467317e3117a0263c6715509b0b3f378b56ee8421885245536a0c1025a0821d59a163a8e7c8285ded90729ad793cf7e9ff00b2d7702e812e9a8ab098f111d4e0502fbcfbc993fc356db81eeae3f48ea309a53975633d2db52f34bbc119bd75d6cc5e937124d812a7e7a3fca277331e1dc2510d5512e501be5f5f053a4a9f53bd671d1bcaa04507518d25c47ef5ad115ecb5ea7e28a8ea0816bc4a427eb8cb9dad2941eeadf4dc657b0cdec74d3c9e6f9259d033d7"]}, @nested={0x22f, 0xad, 0x0, 0x1, [@nested={0x4, 0x154}, @typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@mcast2}, @generic="3940ad5415d63b61b43da73f50798b36425427a7bee660ad3b044d42285114bb3794e1a09447ebe47f13c8029f853c53d362f85960e1dfd30e7c9451d039400d22e6a9304e85792317b65f5b", @generic="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", @generic="2cab0e57ee2f1053adf559f2a05d5174535d49a059fc23043bbcdd67e1429be4147064bcdcc604cf6ba9b30d230d3aa4a771ebbc3d75ece9957702cd90bb1fd4ddc3e49cf925ed15608f42fe9fdb665bbd297f9b7c4e9658965f2577c97b7f6da809121be2260ad467a14df08692adc29c83726097648b23900fe6e91546fb55e61dffacd02c2215046a9f0053d65f0e67b8cb589e0e3e3147308efc776ec1fc02a0ec40f31716e3c5d288d9bbaeac5a", @typed={0x8, 0x14b, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x38}, @nested={0x4, 0x11d}, @typed={0x8, 0xe0, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x155}]}, @nested={0x1c8, 0xf8, 0x0, 0x1, [@generic="418735d2462fce86c9bc0578e54e054244e78e0eaa979ae0aecbff899f9dc700bb0964e8f7e2b4236aedf9d0a8f89d7c5a4cba4f29c6d525adbfe1fa454db497d5cdc968867e61e18b5814ea", @generic="2a74738f83a6f95dfad2ae563c3e0b1b4b60137e3db362a8caa17a46f37a1779ebf1fde60a8a02599ed87e3af18f691b6a59dce9f78a506ddde387ae2c27a0785d3a6b0498", @nested={0x4, 0xdd}, @typed={0x4, 0xbe}, @generic="c696a5480dac11f76d2de0c6babb10a1c795f15d9d4192f1c8261cecb17fd715178b412094453f7721c52336cd89612444b07cf74b41bd9b05e50e6df63ae5b9ccca2c72171971546223aeab36ecce0d396ca91397c773edca4d8e0ecf7eb9bf28e97596a3373978edf4ff9ad498e217f82fe88683acf799bb1d96dc9acfc13a1616e567e192c07eb02c1363a42807f5106fa22b65cb5d90582cc3992cbcc1029a937c50cccd86d91891b8042342d3fa557d2168e9764757af6e260c9fdc98083e4f9ccf5ba494a444aeb5ebaaaf56dd7eba5c", @typed={0x4, 0xd4}, @generic="ebc41a0c8cb2c04a92c821c666729bfb46969c45a76ad094b4fc4ebe9e87139e8ea651e922bfef558249590cdd9afe4695fe32a3a530ca63391a53752ceb2601438656d8ed1d0c3aec5e4f03372d8fabc0949916"]}, @typed={0x8, 0xe6, 0x0, 0x0, @uid=r3}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x1}]}, 0x150c}, 0x1, 0x0, 0x0, 0x20040814}, 0x20004041) (async) 1.17468024s ago: executing program 5 (id=1855): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) connect$auto(0x3, 0x0, 0xf8a) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) socket(0x2, 0x80802, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) r1 = socket(0x2b, 0x1, 0x0) r2 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x7, &(0x7f0000000080)="145e8e46b42e1f939b6a00cae8f6548ff4bee19a69270a7885f4fc862a3d5c32228fa7bd3e124ea32cde17b8b147904c1685fa17c51c7ecb2c73b8c036c175ad6b98") fsconfig$auto_FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000100)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', &(0x7f0000000180)="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", 0x80000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x4000000, 0x2020008, 0x8, 0xeb4, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x54) 974.564739ms ago: executing program 0 (id=1856): mmap$auto(0x2000000, 0x8, 0x9, 0xfa31, 0x400, 0x5) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x202000c, 0x2, 0xeb1, 0xfffffffffffffffa, 0xb1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x725981, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) socket(0xa, 0x2, 0x0) write$auto(r0, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event2\x00', 0x2c080, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) io_uring_setup$auto(0x6, 0x0) ioctl$auto(r1, 0x4, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x1b72, 0x2, 0x8000) mmap$auto(0x80, 0x672e, 0x5, 0xeb1, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r2, 0x80044dfe, 0x0) io_getevents$auto(0x409, 0xd9d, 0x8, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 460.768062ms ago: executing program 4 (id=1857): r0 = socket(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="1b0026bd7400fddbdf2503000000040008005400038004000f800400110008001e00", @ANYRES32=0x0, @ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) socket(0x11, 0x3, 0x9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x100000002) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x173080, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000700)={@inferred=r0, "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"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r4, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r5) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r6, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) getpgid(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) socket(0x15, 0x801, 0x2106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0xffffffffffff8381) 378.186666ms ago: executing program 5 (id=1858): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB="cfac00000000f6002500", @ANYRES16, @ANYBLOB="010027bd7000ffdbdf251000000018000180140002007465616d5f736c6176655f310000000008000c007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_int=0x81, 0x1}}}) 330.768213ms ago: executing program 0 (id=1859): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r0 = socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) capget$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b41, 0x7) (async) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$auto(0x3, 0x541b, 0x10000000000402) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xb, 0x0) move_pages$auto(r2, 0x0, &(0x7f0000000380)=&(0x7f0000000080)="0ddfa56648de5fde003c998e0beb3d695f2df34409adfaecfdaf92c4a44fb2ecb0f5a9082ad8348e41ee11745d85115a0ff1aa7313b8570e91855d8f35e50d53b730f078232b38f52217a40f3b56e29db392f6be3ad6bd2c80191e56e6bc07a4bf597b6b1eb7dc83352ad7f0e2dc8b843f86dbf18900", &(0x7f00000003c0)=0x1, &(0x7f0000000400)=0x15806859, 0x9) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r3) write$auto(0x3, 0x0, 0xfffffdef) (async) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 0s ago: executing program 1 (id=1860): sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010200f787a64e595ed43300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0x7b2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x5, 0x8) r1 = socket(0x11, 0x3, 0x9) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/tags\x00', 0x80000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000080)=""/63, 0x3f) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xc, 0x1044c}) r3 = getpgid$auto(0x0) writev$auto(r0, &(0x7f0000000140)={&(0x7f00000002c0)="e8554c815be9e10ccc036b4dc86431c175e8d28779e1ae786797f939bce5be3971f664d4522ed9081b7fb5b097617f00e31c23b3a313a3f832b3fb338b0f78bc6cc2d662b236a494f8e0a4f737e84742e09f7c0d5170efd47867158bfa4a7a93bbba84abca8a4b2645bfdd6eab676e5757e7904017d5de85ca60e777b78e3fdd40e570170e0c8bbbed2635b164b8c96d06154ba7de49", 0x8}, 0xfffffffffffffffa) getpgrp(r3) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x4, 0x0, r3, 0x6f8, 0x0) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d2", 0x14}, 0x6, &(0x7f0000000180), 0x5, 0x1001}, 0x5}, 0x2, 0x100) ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, &(0x7f00000000c0)=0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x18, 0x5, 0x2) r4 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) ftruncate$auto(r4, 0x10000000004) getsockopt$auto_SO_GET_FILTER(r4, 0xc, 0x1a, &(0x7f0000000440)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', &(0x7f0000000480)=0x40) socket(0x1d, 0x2, 0x7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf25100000000c00018008000100", @ANYRES32, @ANYBLOB="080006"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="72010000", @ANYBLOB="e44262fc265feed5d4b47e74841067bd20a519abab075d22cbfba84a3fdbc6182843ab5ae69c074ab9497a49d71a2d5510b67af1e88361e9108e9d54111853b8dd4ca9af545ff319fe237e556877bdd01b2c2585c49d9a091a9769380ab4571cf578fa5f6357a97ed5b63b741c7be5cec8174391b5b29acb35b219fd6ea59b745b2bb9c72e358f8491ed8263c18ffe09281ba045a50ce2d2ff181a7f120e8e698db6e58498203d2de11445"], 0x1ac}}, 0x20008041) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) kernel console output (not intermixed with test programs): reating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.164340][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.206427][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.296051][ T24] cfg80211: failed to load regulatory.db [ 92.347891][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.377811][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.800129][ T5931] FAULT_INJECTION: forcing a failure. [ 92.800129][ T5931] name failslab, interval 1, probability 0, space 0, times 1 [ 92.865716][ T5931] CPU: 0 UID: 0 PID: 5931 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 92.865757][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 92.865775][ T5931] Call Trace: [ 92.865785][ T5931] [ 92.865797][ T5931] dump_stack_lvl+0x100/0x190 [ 92.865847][ T5931] should_fail_ex.cold+0x5/0xa [ 92.865883][ T5931] ? snd_pcm_plugin_build+0x434/0x650 [ 92.865924][ T5931] should_failslab+0xc2/0x120 [ 92.865958][ T5931] __kmalloc_noprof+0xe0/0x850 [ 92.866009][ T5931] snd_pcm_plugin_build+0x434/0x650 [ 92.866048][ T5931] ? snd_pcm_plugin_build+0x4b7/0x650 [ 92.866095][ T5931] snd_pcm_plugin_build_linear+0x254/0x850 [ 92.866147][ T5931] ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10 [ 92.866197][ T5931] ? snd_pcm_hw_params+0x262/0x1cb0 [ 92.866248][ T5931] snd_pcm_plug_format_plugins+0x536/0x1430 [ 92.866298][ T5931] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 92.866343][ T5931] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 92.866396][ T5931] snd_pcm_oss_change_params_locked+0x2e3c/0x39f0 [ 92.866455][ T5931] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 92.866497][ T5931] ? __pfx___mutex_lock+0x10/0x10 [ 92.866568][ T5931] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 92.866618][ T5931] snd_pcm_oss_ioctl+0x1c08/0x3720 [ 92.866661][ T5931] ? __fget_files+0x215/0x3d0 [ 92.866688][ T5931] ? hook_file_ioctl_common+0x146/0x410 [ 92.866727][ T5931] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 92.866773][ T5931] ? __fget_files+0x21f/0x3d0 [ 92.866811][ T5931] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 92.866854][ T5931] __x64_sys_ioctl+0x18e/0x210 [ 92.866906][ T5931] do_syscall_64+0x106/0xf80 [ 92.866935][ T5931] ? clear_bhb_loop+0x40/0x90 [ 92.866973][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.867001][ T5931] RIP: 0033:0x7f27d399c819 [ 92.867028][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.867052][ T5931] RSP: 002b:00007f27d47d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.867079][ T5931] RAX: ffffffffffffffda RBX: 00007f27d3c15fa0 RCX: 00007f27d399c819 [ 92.867098][ T5931] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 92.867114][ T5931] RBP: 00007f27d3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 92.867129][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.867145][ T5931] R13: 00007f27d3c16038 R14: 00007f27d3c15fa0 R15: 00007fffa6fb7c38 [ 92.867182][ T5931] [ 93.968404][ T5831] Bluetooth: hci0: command tx timeout [ 93.973998][ T5831] Bluetooth: hci3: command tx timeout [ 93.979123][ T5836] Bluetooth: hci1: command tx timeout [ 93.980497][ T5831] Bluetooth: hci2: command tx timeout [ 94.328962][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.069914][ T5967] process 'syz.3.15' launched './file0' with NULL argv: empty string added [ 95.860537][ T13] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 96.332975][ T6003] random: crng reseeded on system resumption [ 98.966455][ T6048] Zero length message leads to an empty skb [ 99.670922][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.737005][ T6057] cougar: G6 mapped to space [ 100.641718][ T6075] syz.1.44 uses obsolete (PF_INET,SOCK_PACKET) [ 100.652113][ T6075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 100.755669][ T6057] netlink: 346 bytes leftover after parsing attributes in process `syz.0.37'. [ 100.835805][ T6083] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 101.499078][ T6091] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.312121][ T6120] futex_wake_op: syz.1.52 tries to shift op by -2048; fix this program [ 102.341932][ T6120] futex_wake_op: syz.1.52 tries to shift op by -2048; fix this program [ 102.382044][ T6120] 0x000000000001-0x000000020000 : "" [ 102.470043][ T6120] ftl_cs: FTL header corrupt! [ 103.682021][ T30] audit: type=1800 audit(1775259771.203:2): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="dbroot" dev="configfs" ino=8112 res=0 errno=0 [ 103.718946][ T5831] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 103.723530][ T6145] netlink: 'syz.3.57': attribute type 4 has an invalid length. [ 104.622989][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 105.444509][ T6165] FAULT_INJECTION: forcing a failure. [ 105.444509][ T6165] name failslab, interval 1, probability 0, space 0, times 0 [ 105.458304][ T6165] CPU: 1 UID: 0 PID: 6165 Comm: syz.3.63 Not tainted syzkaller #0 PREEMPT(full) [ 105.458347][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.458363][ T6165] Call Trace: [ 105.458374][ T6165] [ 105.458386][ T6165] dump_stack_lvl+0x100/0x190 [ 105.458440][ T6165] should_fail_ex.cold+0x5/0xa [ 105.458476][ T6165] ? constrain_params_by_rules+0x175/0xcc0 [ 105.458520][ T6165] should_failslab+0xc2/0x120 [ 105.458555][ T6165] __kmalloc_noprof+0xe0/0x850 [ 105.458602][ T6165] ? kasan_quarantine_put+0x104/0x240 [ 105.458648][ T6165] ? lockdep_hardirqs_on+0x78/0x100 [ 105.458697][ T6165] constrain_params_by_rules+0x175/0xcc0 [ 105.458754][ T6165] ? constrain_params_by_rules+0xa22/0xcc0 [ 105.458798][ T6165] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 105.458846][ T6165] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 105.458970][ T6165] snd_pcm_hw_refine+0x7e7/0xad0 [ 105.459020][ T6165] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 105.459084][ T6165] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 105.459138][ T6165] ? snd_pcm_hw_param_value+0x27b/0x5b0 [ 105.459182][ T6165] snd_pcm_hw_param_first+0x2b0/0x680 [ 105.459222][ T6165] ? trace_hw_mask_param+0x84/0x240 [ 105.459263][ T6165] snd_pcm_hw_params+0x496/0x1cb0 [ 105.459315][ T6165] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 105.459363][ T6165] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 105.459409][ T6165] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 105.459458][ T6165] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 105.459506][ T6165] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 105.459566][ T6165] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 105.459608][ T6165] ? __pfx___mutex_lock+0x10/0x10 [ 105.459669][ T6165] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 105.459725][ T6165] snd_pcm_oss_ioctl+0x1c08/0x3720 [ 105.459769][ T6165] ? __fget_files+0x215/0x3d0 [ 105.459797][ T6165] ? hook_file_ioctl_common+0x146/0x410 [ 105.459839][ T6165] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 105.459893][ T6165] ? __fget_files+0x21f/0x3d0 [ 105.459931][ T6165] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 105.459973][ T6165] __x64_sys_ioctl+0x18e/0x210 [ 105.460022][ T6165] do_syscall_64+0x106/0xf80 [ 105.460052][ T6165] ? clear_bhb_loop+0x40/0x90 [ 105.460091][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.460120][ T6165] RIP: 0033:0x7f27d399c819 [ 105.460148][ T6165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.460176][ T6165] RSP: 002b:00007f27d47d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.460205][ T6165] RAX: ffffffffffffffda RBX: 00007f27d3c15fa0 RCX: 00007f27d399c819 [ 105.460224][ T6165] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 105.460242][ T6165] RBP: 00007f27d3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 105.460260][ T6165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.460277][ T6165] R13: 00007f27d3c16038 R14: 00007f27d3c15fa0 R15: 00007fffa6fb7c38 [ 105.460316][ T6165] [ 107.009396][ T6174] FAULT_INJECTION: forcing a failure. [ 107.009396][ T6174] name failslab, interval 1, probability 0, space 0, times 0 [ 107.125315][ T6174] CPU: 1 UID: 0 PID: 6174 Comm: syz.1.65 Not tainted syzkaller #0 PREEMPT(full) [ 107.125355][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.125372][ T6174] Call Trace: [ 107.125382][ T6174] [ 107.125403][ T6174] dump_stack_lvl+0x100/0x190 [ 107.125454][ T6174] should_fail_ex.cold+0x5/0xa [ 107.125490][ T6174] should_failslab+0xc2/0x120 [ 107.125523][ T6174] __kmalloc_cache_noprof+0x7a/0x6f0 [ 107.125565][ T6174] ? open_substream+0xec/0x9e0 [ 107.125612][ T6174] open_substream+0xec/0x9e0 [ 107.125649][ T6174] ? lockdep_hardirqs_on+0x78/0x100 [ 107.125682][ T6174] rawmidi_open_priv+0x595/0x6f0 [ 107.125733][ T6174] snd_rawmidi_open+0x4c9/0xba0 [ 107.125784][ T6174] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 107.125831][ T6174] ? __pfx_default_wake_function+0x10/0x10 [ 107.125867][ T6174] ? kobject_get_unless_zero+0x156/0x200 [ 107.125907][ T6174] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 107.125951][ T6174] snd_open+0x22d/0x4c0 [ 107.125986][ T6174] ? __pfx_snd_open+0x10/0x10 [ 107.126020][ T6174] chrdev_open+0x234/0x6a0 [ 107.126050][ T6174] ? __pfx_apparmor_file_open+0x10/0x10 [ 107.126083][ T6174] ? __pfx_chrdev_open+0x10/0x10 [ 107.126116][ T6174] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 107.126158][ T6174] do_dentry_open+0x6d8/0x1660 [ 107.126188][ T6174] ? __pfx_chrdev_open+0x10/0x10 [ 107.126229][ T6174] vfs_open+0x82/0x3f0 [ 107.126272][ T6174] path_openat+0x208c/0x31a0 [ 107.126317][ T6174] ? __pfx_path_openat+0x10/0x10 [ 107.126364][ T6174] do_file_open+0x20e/0x430 [ 107.126407][ T6174] ? __pfx_do_file_open+0x10/0x10 [ 107.126467][ T6174] ? alloc_fd+0x476/0x790 [ 107.126502][ T6174] ? do_getname+0x191/0x390 [ 107.126544][ T6174] do_sys_openat2+0x10d/0x1e0 [ 107.126584][ T6174] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.126639][ T6174] __x64_sys_openat+0x12d/0x210 [ 107.126679][ T6174] ? __pfx___x64_sys_openat+0x10/0x10 [ 107.126736][ T6174] do_syscall_64+0x106/0xf80 [ 107.126764][ T6174] ? clear_bhb_loop+0x40/0x90 [ 107.126800][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.126829][ T6174] RIP: 0033:0x7f74f619c819 [ 107.126852][ T6174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.126879][ T6174] RSP: 002b:00007f74f6fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.126906][ T6174] RAX: ffffffffffffffda RBX: 00007f74f6416180 RCX: 00007f74f619c819 [ 107.126925][ T6174] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 107.126942][ T6174] RBP: 00007f74f6232c91 R08: 0000000000000000 R09: 0000000000000000 [ 107.126959][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.126976][ T6174] R13: 00007f74f6416218 R14: 00007f74f6416180 R15: 00007ffcf4b6b718 [ 107.127015][ T6174] [ 109.193593][ T3541] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 109.763664][ T6202] zswap: compressor not available [ 110.231297][ T6220] Unable to find swap-space signature [ 110.981378][ T6235] FAULT_INJECTION: forcing a failure. [ 110.981378][ T6235] name failslab, interval 1, probability 0, space 0, times 0 [ 111.005314][ T6235] CPU: 1 UID: 0 PID: 6235 Comm: syz.0.85 Not tainted syzkaller #0 PREEMPT(full) [ 111.005361][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 111.005379][ T6235] Call Trace: [ 111.005390][ T6235] [ 111.005402][ T6235] dump_stack_lvl+0x100/0x190 [ 111.005456][ T6235] should_fail_ex.cold+0x5/0xa [ 111.005495][ T6235] ? snd_pcm_plugin_build+0x434/0x650 [ 111.005540][ T6235] should_failslab+0xc2/0x120 [ 111.005576][ T6235] __kmalloc_noprof+0xe0/0x850 [ 111.005634][ T6235] snd_pcm_plugin_build+0x434/0x650 [ 111.005677][ T6235] ? snd_pcm_plugin_build+0x4b7/0x650 [ 111.005734][ T6235] snd_pcm_plugin_build_linear+0x254/0x850 [ 111.005788][ T6235] ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10 [ 111.005841][ T6235] ? snd_pcm_hw_params+0x262/0x1cb0 [ 111.005896][ T6235] snd_pcm_plug_format_plugins+0x536/0x1430 [ 111.005949][ T6235] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 111.006003][ T6235] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 111.006059][ T6235] snd_pcm_oss_change_params_locked+0x2e3c/0x39f0 [ 111.006122][ T6235] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 111.006165][ T6235] ? __pfx___mutex_lock+0x10/0x10 [ 111.006229][ T6235] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 111.006280][ T6235] snd_pcm_oss_ioctl+0x1c08/0x3720 [ 111.006325][ T6235] ? __fget_files+0x215/0x3d0 [ 111.006356][ T6235] ? hook_file_ioctl_common+0x146/0x410 [ 111.006398][ T6235] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 111.006445][ T6235] ? __fget_files+0x21f/0x3d0 [ 111.006506][ T6235] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 111.006552][ T6235] __x64_sys_ioctl+0x18e/0x210 [ 111.006604][ T6235] do_syscall_64+0x106/0xf80 [ 111.006634][ T6235] ? clear_bhb_loop+0x40/0x90 [ 111.006673][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.006713][ T6235] RIP: 0033:0x7f8b4af9c819 [ 111.006739][ T6235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.006768][ T6235] RSP: 002b:00007f8b4bde8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.006797][ T6235] RAX: ffffffffffffffda RBX: 00007f8b4b215fa0 RCX: 00007f8b4af9c819 [ 111.006817][ T6235] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 111.006835][ T6235] RBP: 00007f8b4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 111.006853][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.006872][ T6235] R13: 00007f8b4b216038 R14: 00007f8b4b215fa0 R15: 00007ffd59df0fc8 [ 111.006915][ T6235] [ 111.251015][ T6234] netlink: 338 bytes leftover after parsing attributes in process `syz.2.84'. [ 111.563960][ T6234] netlink: 338 bytes leftover after parsing attributes in process `syz.2.84'. [ 111.575945][ T6234] netlink: 338 bytes leftover after parsing attributes in process `syz.2.84'. [ 113.760536][ T6263] cgroup: fork rejected by pids controller in /syz2 [ 115.310672][ T6348] FAULT_INJECTION: forcing a failure. [ 115.310672][ T6348] name failslab, interval 1, probability 0, space 0, times 0 [ 115.401539][ T6348] CPU: 1 UID: 0 PID: 6348 Comm: syz.1.94 Not tainted syzkaller #0 PREEMPT(full) [ 115.401578][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 115.401593][ T6348] Call Trace: [ 115.401612][ T6348] [ 115.401623][ T6348] dump_stack_lvl+0x100/0x190 [ 115.401672][ T6348] should_fail_ex.cold+0x5/0xa [ 115.401707][ T6348] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 115.401739][ T6348] should_failslab+0xc2/0x120 [ 115.401770][ T6348] __kmalloc_noprof+0xe0/0x850 [ 115.401824][ T6348] kernfs_fop_write_iter+0x26a/0x5f0 [ 115.401862][ T6348] vfs_write+0x6ac/0x1070 [ 115.401893][ T6348] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 115.401930][ T6348] ? __pfx_vfs_write+0x10/0x10 [ 115.401986][ T6348] ksys_write+0x12a/0x250 [ 115.402015][ T6348] ? __pfx_ksys_write+0x10/0x10 [ 115.402056][ T6348] do_syscall_64+0x106/0xf80 [ 115.402084][ T6348] ? clear_bhb_loop+0x40/0x90 [ 115.402119][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.402150][ T6348] RIP: 0033:0x7f74f619c819 [ 115.402189][ T6348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.402214][ T6348] RSP: 002b:00007f74f6ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.402241][ T6348] RAX: ffffffffffffffda RBX: 00007f74f6415fa0 RCX: 00007f74f619c819 [ 115.402259][ T6348] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000003 [ 115.402275][ T6348] RBP: 00007f74f6ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 115.402291][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.402307][ T6348] R13: 00007f74f6416038 R14: 00007f74f6415fa0 R15: 00007ffcf4b6b718 [ 115.402345][ T6348] [ 116.168350][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 118.031123][ T6373] FAULT_INJECTION: forcing a failure. [ 118.031123][ T6373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 118.040306][ T6398] FAULT_INJECTION: forcing a failure. [ 118.040306][ T6398] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.125533][ T6398] CPU: 1 UID: 0 PID: 6398 Comm: syz.0.105 Not tainted syzkaller #0 PREEMPT(full) [ 118.125572][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 118.125588][ T6398] Call Trace: [ 118.125598][ T6398] [ 118.125609][ T6398] dump_stack_lvl+0x100/0x190 [ 118.125669][ T6398] should_fail_ex.cold+0x5/0xa [ 118.125705][ T6398] _copy_from_iter+0x1f4/0x1690 [ 118.125753][ T6398] ? __pfx__copy_from_iter+0x10/0x10 [ 118.125789][ T6398] ? rcu_is_watching+0x12/0xc0 [ 118.125835][ T6398] ? trace_kmalloc+0x101/0x130 [ 118.125865][ T6398] ? __kasan_kmalloc+0xaa/0xb0 [ 118.125894][ T6398] ? __kmalloc_noprof+0x320/0x850 [ 118.125946][ T6398] kernfs_fop_write_iter+0x186/0x5f0 [ 118.125987][ T6398] vfs_write+0x6ac/0x1070 [ 118.126017][ T6398] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 118.126054][ T6398] ? __pfx_vfs_write+0x10/0x10 [ 118.126107][ T6398] ksys_write+0x12a/0x250 [ 118.126136][ T6398] ? __pfx_ksys_write+0x10/0x10 [ 118.126174][ T6398] do_syscall_64+0x106/0xf80 [ 118.126203][ T6398] ? clear_bhb_loop+0x40/0x90 [ 118.126238][ T6398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.126266][ T6398] RIP: 0033:0x7f8b4af9c819 [ 118.126290][ T6398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.126315][ T6398] RSP: 002b:00007f8b4bde8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.126343][ T6398] RAX: ffffffffffffffda RBX: 00007f8b4b215fa0 RCX: 00007f8b4af9c819 [ 118.126362][ T6398] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000003 [ 118.126379][ T6398] RBP: 00007f8b4bde8090 R08: 0000000000000000 R09: 0000000000000000 [ 118.126395][ T6398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.126411][ T6398] R13: 00007f8b4b216038 R14: 00007f8b4b215fa0 R15: 00007ffd59df0fc8 [ 118.126450][ T6398] [ 118.142667][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: syz.3.95 Not tainted syzkaller #0 PREEMPT(full) [ 118.142707][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 118.142723][ T6373] Call Trace: [ 118.142732][ T6373] [ 118.142743][ T6373] dump_stack_lvl+0x100/0x190 [ 118.142787][ T6373] should_fail_ex.cold+0x5/0xa [ 118.142814][ T6373] ? prepare_alloc_pages+0x16d/0x5f0 [ 118.142850][ T6373] should_fail_alloc_page+0xeb/0x140 [ 118.142884][ T6373] prepare_alloc_pages+0x1f0/0x5f0 [ 118.142922][ T6373] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 118.142970][ T6373] ? __lock_acquire+0x4a5/0x2630 [ 118.143015][ T6373] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 118.143065][ T6373] ? do_raw_spin_lock+0x128/0x260 [ 118.143103][ T6373] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 118.143141][ T6373] ? find_held_lock+0x2b/0x80 [ 118.143178][ T6373] ? __lock_acquire+0x4a5/0x2630 [ 118.143211][ T6373] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.143241][ T6373] ? policy_nodemask+0xed/0x4f0 [ 118.143274][ T6373] alloc_pages_mpol+0x1fb/0x550 [ 118.143306][ T6373] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 118.143336][ T6373] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 118.143377][ T6373] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 118.143559][ T6373] folio_alloc_mpol_noprof+0x36/0x340 [ 118.143600][ T6373] shmem_alloc_folio+0x135/0x160 [ 118.143637][ T6373] shmem_alloc_and_add_folio+0x371/0xd40 [ 118.143688][ T6373] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 118.143731][ T6373] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 118.143770][ T6373] ? __lock_acquire+0x480/0x2630 [ 118.143812][ T6373] shmem_get_folio_gfp+0x6ab/0x1900 [ 118.143860][ T6373] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 118.143903][ T6373] ? __pfx___might_resched+0x10/0x10 [ 118.143942][ T6373] ? noop_dirty_folio+0xfd/0x160 [ 118.143975][ T6373] shmem_fallocate+0x6d7/0x1060 [ 118.144017][ T6373] ? __pfx_shmem_fallocate+0x10/0x10 [ 118.144040][ T6373] ? aa_file_perm+0x7f3/0x14d0 [ 118.144089][ T6373] ? __lock_acquire+0x4a5/0x2630 [ 118.144150][ T6373] ? __pfx_shmem_fallocate+0x10/0x10 [ 118.144177][ T6373] vfs_fallocate+0x576/0x10d0 [ 118.144210][ T6373] ? __pfx_vfs_fallocate+0x10/0x10 [ 118.144250][ T6373] __x64_sys_fallocate+0xd5/0x140 [ 118.144283][ T6373] do_syscall_64+0x106/0xf80 [ 118.144310][ T6373] ? clear_bhb_loop+0x40/0x90 [ 118.144343][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.144372][ T6373] RIP: 0033:0x7f27d399c819 [ 118.144397][ T6373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.144528][ T6373] RSP: 002b:00007f27d47d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 118.144559][ T6373] RAX: ffffffffffffffda RBX: 00007f27d3c15fa0 RCX: 00007f27d399c819 [ 118.144576][ T6373] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 118.144591][ T6373] RBP: 00007f27d3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 118.144607][ T6373] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 118.144623][ T6373] R13: 00007f27d3c16038 R14: 00007f27d3c15fa0 R15: 00007fffa6fb7c38 [ 118.144660][ T6373] [ 119.949362][ T6429] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 121.696590][ T6456] overlayfs: missing 'lowerdir' [ 122.864532][ T6472] netlink: 54 bytes leftover after parsing attributes in process `syz.1.125'. [ 122.927534][ T36] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 123.483830][ T6480] smpboot: CPU 1 is now offline [ 124.822450][ T6494] FAULT_INJECTION: forcing a failure. [ 124.822450][ T6494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 125.100058][ T6494] CPU: 0 UID: 0 PID: 6494 Comm: syz.1.130 Not tainted syzkaller #0 PREEMPT(full) [ 125.100085][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.100095][ T6494] Call Trace: [ 125.100102][ T6494] [ 125.100109][ T6494] dump_stack_lvl+0x100/0x190 [ 125.100143][ T6494] should_fail_ex.cold+0x5/0xa [ 125.100161][ T6494] ? prepare_alloc_pages+0x16d/0x5f0 [ 125.100186][ T6494] should_fail_alloc_page+0xeb/0x140 [ 125.100209][ T6494] prepare_alloc_pages+0x1f0/0x5f0 [ 125.100235][ T6494] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 125.100269][ T6494] ? __lock_acquire+0x4a5/0x2630 [ 125.100300][ T6494] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 125.100331][ T6494] ? do_raw_spin_lock+0x128/0x260 [ 125.100359][ T6494] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 125.100386][ T6494] ? find_held_lock+0x2b/0x80 [ 125.100410][ T6494] ? __lock_acquire+0x4a5/0x2630 [ 125.100438][ T6494] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.100459][ T6494] ? policy_nodemask+0xed/0x4f0 [ 125.100481][ T6494] alloc_pages_mpol+0x1fb/0x550 [ 125.100502][ T6494] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 125.100523][ T6494] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 125.100553][ T6494] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 125.100593][ T6494] folio_alloc_mpol_noprof+0x36/0x340 [ 125.100618][ T6494] shmem_alloc_folio+0x135/0x160 [ 125.100643][ T6494] shmem_alloc_and_add_folio+0x371/0xd40 [ 125.100678][ T6494] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 125.100708][ T6494] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 125.100736][ T6494] ? __lock_acquire+0x480/0x2630 [ 125.100764][ T6494] shmem_get_folio_gfp+0x6ab/0x1900 [ 125.100797][ T6494] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 125.100828][ T6494] ? __pfx___might_resched+0x10/0x10 [ 125.100855][ T6494] ? noop_dirty_folio+0xfd/0x160 [ 125.100877][ T6494] shmem_fallocate+0x6d7/0x1060 [ 125.100904][ T6494] ? __pfx_shmem_fallocate+0x10/0x10 [ 125.100920][ T6494] ? aa_file_perm+0x7f3/0x14d0 [ 125.100953][ T6494] ? __lock_acquire+0x4a5/0x2630 [ 125.100994][ T6494] ? __pfx_shmem_fallocate+0x10/0x10 [ 125.101011][ T6494] vfs_fallocate+0x576/0x10d0 [ 125.101033][ T6494] ? __pfx_vfs_fallocate+0x10/0x10 [ 125.101058][ T6494] __x64_sys_fallocate+0xd5/0x140 [ 125.101081][ T6494] do_syscall_64+0x106/0xf80 [ 125.101099][ T6494] ? clear_bhb_loop+0x40/0x90 [ 125.101122][ T6494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.101157][ T6494] RIP: 0033:0x7f74f619c819 [ 125.101173][ T6494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.101190][ T6494] RSP: 002b:00007f74f6ff8028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 125.101208][ T6494] RAX: ffffffffffffffda RBX: 00007f74f6415fa0 RCX: 00007f74f619c819 [ 125.101219][ T6494] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 125.101229][ T6494] RBP: 00007f74f6232c91 R08: 0000000000000000 R09: 0000000000000000 [ 125.101239][ T6494] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 125.101249][ T6494] R13: 00007f74f6416038 R14: 00007f74f6415fa0 R15: 00007ffcf4b6b718 [ 125.101276][ T6494] [ 132.157105][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 133.259242][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.265996][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.746168][ T6107] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 137.689499][ T6657] binder: 6656:6657 ioctl 400c620e 200000000140 returned -22 [ 138.080950][ T6667] mmap: syz.2.166 (6667) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.963950][ T6703] FAULT_INJECTION: forcing a failure. [ 139.963950][ T6703] name failslab, interval 1, probability 0, space 0, times 0 [ 140.063028][ T6703] CPU: 0 UID: 0 PID: 6703 Comm: syz.3.171 Not tainted syzkaller #0 PREEMPT(full) [ 140.063053][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 140.063070][ T6703] Call Trace: [ 140.063076][ T6703] [ 140.063083][ T6703] dump_stack_lvl+0x100/0x190 [ 140.063116][ T6703] should_fail_ex.cold+0x5/0xa [ 140.063138][ T6703] should_failslab+0xc2/0x120 [ 140.063160][ T6703] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 140.063188][ T6703] ? taskstats_exit+0x650/0xbd0 [ 140.063214][ T6703] taskstats_exit+0x650/0xbd0 [ 140.063231][ T6703] ? __pfx_acct_update_integrals+0x10/0x10 [ 140.063251][ T6703] ? __pfx_taskstats_exit+0x10/0x10 [ 140.063270][ T6703] ? rcu_read_lock_any_held+0x6a/0xa0 [ 140.063295][ T6703] ? exit_signals+0x395/0xaf0 [ 140.063317][ T6703] do_exit+0x659/0x2b60 [ 140.063345][ T6703] ? __pfx_do_exit+0x10/0x10 [ 140.063370][ T6703] ? do_raw_spin_lock+0x128/0x260 [ 140.063396][ T6703] ? find_held_lock+0x2b/0x80 [ 140.063413][ T6703] ? get_signal+0x7e0/0x21e0 [ 140.063435][ T6703] do_group_exit+0xd5/0x2a0 [ 140.063461][ T6703] get_signal+0x1ec7/0x21e0 [ 140.063489][ T6703] ? __pfx_get_signal+0x10/0x10 [ 140.063509][ T6703] ? do_futex+0x192/0x350 [ 140.063536][ T6703] arch_do_signal_or_restart+0x91/0x770 [ 140.063561][ T6703] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 140.063593][ T6703] ? __pfx___x64_sys_futex+0x10/0x10 [ 140.063626][ T6703] exit_to_user_mode_loop+0x86/0x4a0 [ 140.063654][ T6703] do_syscall_64+0x668/0xf80 [ 140.063672][ T6703] ? clear_bhb_loop+0x40/0x90 [ 140.063695][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.063713][ T6703] RIP: 0033:0x7f27d399c819 [ 140.063729][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.063745][ T6703] RSP: 002b:00007f27d47b20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.063763][ T6703] RAX: fffffffffffffe00 RBX: 00007f27d3c16098 RCX: 00007f27d399c819 [ 140.063774][ T6703] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f27d3c16098 [ 140.063784][ T6703] RBP: 00007f27d3c16090 R08: 0000000000000000 R09: 0000000000000000 [ 140.063795][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.063805][ T6703] R13: 00007f27d3c16128 R14: 00007fffa6fb7b50 R15: 00007fffa6fb7c38 [ 140.063826][ T6703] [ 141.979310][ T6731] input: f as /devices/virtual/input/input6 [ 142.722924][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 142.767853][ T6744] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 142.809124][ T6744] netlink: 'syz.1.178': attribute type 6 has an invalid length. [ 144.823360][ T6778] futex_wake_op: syz.2.187 tries to shift op by -2048; fix this program [ 144.977543][ T6778] futex_wake_op: syz.2.187 tries to shift op by -2048; fix this program [ 145.616659][ T6789] netlink: 338 bytes leftover after parsing attributes in process `syz.3.188'. [ 146.806599][ T6805] FAULT_INJECTION: forcing a failure. [ 146.806599][ T6805] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 146.899506][ T6805] CPU: 0 UID: 0 PID: 6805 Comm: syz.1.193 Not tainted syzkaller #0 PREEMPT(full) [ 146.899534][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 146.899544][ T6805] Call Trace: [ 146.899550][ T6805] [ 146.899557][ T6805] dump_stack_lvl+0x100/0x190 [ 146.899589][ T6805] should_fail_ex.cold+0x5/0xa [ 146.899608][ T6805] ? prepare_alloc_pages+0x16d/0x5f0 [ 146.899632][ T6805] should_fail_alloc_page+0xeb/0x140 [ 146.899655][ T6805] prepare_alloc_pages+0x1f0/0x5f0 [ 146.899681][ T6805] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 146.899716][ T6805] ? __lock_acquire+0x4a5/0x2630 [ 146.899747][ T6805] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 146.899778][ T6805] ? do_raw_spin_lock+0x128/0x260 [ 146.899805][ T6805] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 146.899832][ T6805] ? find_held_lock+0x2b/0x80 [ 146.899856][ T6805] ? __lock_acquire+0x4a5/0x2630 [ 146.899879][ T6805] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 146.899900][ T6805] ? policy_nodemask+0xed/0x4f0 [ 146.899922][ T6805] alloc_pages_mpol+0x1fb/0x550 [ 146.899943][ T6805] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 146.899963][ T6805] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 146.899993][ T6805] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 146.900026][ T6805] folio_alloc_mpol_noprof+0x36/0x340 [ 146.900052][ T6805] shmem_alloc_folio+0x135/0x160 [ 146.900077][ T6805] shmem_alloc_and_add_folio+0x371/0xd40 [ 146.900111][ T6805] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 146.900142][ T6805] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 146.900169][ T6805] ? __lock_acquire+0x480/0x2630 [ 146.900199][ T6805] shmem_get_folio_gfp+0x6ab/0x1900 [ 146.900242][ T6805] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 146.900272][ T6805] ? __pfx___might_resched+0x10/0x10 [ 146.900299][ T6805] ? noop_dirty_folio+0xfd/0x160 [ 146.900321][ T6805] shmem_fallocate+0x6d7/0x1060 [ 146.900349][ T6805] ? __pfx_shmem_fallocate+0x10/0x10 [ 146.900365][ T6805] ? aa_file_perm+0x7f3/0x14d0 [ 146.900399][ T6805] ? __lock_acquire+0x4a5/0x2630 [ 146.900438][ T6805] ? __pfx_shmem_fallocate+0x10/0x10 [ 146.900456][ T6805] vfs_fallocate+0x576/0x10d0 [ 146.900477][ T6805] ? __pfx_vfs_fallocate+0x10/0x10 [ 146.900503][ T6805] __x64_sys_fallocate+0xd5/0x140 [ 146.900525][ T6805] do_syscall_64+0x106/0xf80 [ 146.900543][ T6805] ? clear_bhb_loop+0x40/0x90 [ 146.900566][ T6805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.900584][ T6805] RIP: 0033:0x7f74f619c819 [ 146.900600][ T6805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.900617][ T6805] RSP: 002b:00007f74f6ff8028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 146.900636][ T6805] RAX: ffffffffffffffda RBX: 00007f74f6415fa0 RCX: 00007f74f619c819 [ 146.900648][ T6805] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 146.900658][ T6805] RBP: 00007f74f6232c91 R08: 0000000000000000 R09: 0000000000000000 [ 146.900669][ T6805] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 146.900679][ T6805] R13: 00007f74f6416038 R14: 00007f74f6415fa0 R15: 00007ffcf4b6b718 [ 146.900702][ T6805] [ 155.089395][ T6880] kexec: Could not allocate control_code_buffer [ 156.422380][ T6904] NFSD: Failed to start, no listeners configured. [ 158.156857][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 158.481467][ T6946] HfR: entered promiscuous mode [ 161.647717][ T7006] NFSD: Failed to start, no listeners configured. [ 162.820107][ T7029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 165.192342][ T7061] FAULT_INJECTION: forcing a failure. [ 165.192342][ T7061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.371581][ T7061] CPU: 0 UID: 0 PID: 7061 Comm: syz.1.260 Not tainted syzkaller #0 PREEMPT(full) [ 165.371607][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 165.371618][ T7061] Call Trace: [ 165.371624][ T7061] [ 165.371631][ T7061] dump_stack_lvl+0x100/0x190 [ 165.371664][ T7061] should_fail_ex.cold+0x5/0xa [ 165.371686][ T7061] _copy_from_user+0x2e/0xd0 [ 165.371711][ T7061] copy_clone_args_from_user+0x48d/0x7d0 [ 165.371737][ T7061] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 165.371762][ T7061] ? __pfx_futex_wait+0x10/0x10 [ 165.371797][ T7061] __do_sys_clone3+0xbf/0x290 [ 165.371819][ T7061] ? __pfx___do_sys_clone3+0x10/0x10 [ 165.371851][ T7061] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 165.371897][ T7061] do_syscall_64+0x106/0xf80 [ 165.371915][ T7061] ? clear_bhb_loop+0x40/0x90 [ 165.371938][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.371957][ T7061] RIP: 0033:0x7f74f619c819 [ 165.371973][ T7061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.371990][ T7061] RSP: 002b:00007f74f6fd6ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 165.372008][ T7061] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f74f619c819 [ 165.372019][ T7061] RDX: 00007f74f6fd6f10 RSI: 0000000000000058 RDI: 00007f74f6fd6f10 [ 165.372030][ T7061] RBP: 00007f74f6232c91 R08: 0000000000000000 R09: 0000000000000058 [ 165.372040][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.372050][ T7061] R13: 00007f74f6416128 R14: 00007f74f6416090 R15: 00007ffcf4b6b718 [ 165.372072][ T7061] [ 166.291342][ T7066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 166.370951][ T7066] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 166.403264][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 166.460350][ T7078] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 166.510522][ T7078] netlink: 'syz.1.264': attribute type 6 has an invalid length. [ 166.544317][ T7066] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 166.731404][ T7066] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.801040][ T7066] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 166.990320][ T7066] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.201965][ T7066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.208127][ T7066] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 167.512289][ T7066] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 167.684711][ T7066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.721665][ T7066] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.963762][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.992021][ T7066] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.762176][ T5144] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.242971][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.518995][ T7105] FAULT_INJECTION: forcing a failure. [ 169.518995][ T7105] name failslab, interval 1, probability 0, space 0, times 0 [ 169.647171][ T7105] CPU: 0 UID: 0 PID: 7105 Comm: syz.0.271 Not tainted syzkaller #0 PREEMPT(full) [ 169.647198][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.647209][ T7105] Call Trace: [ 169.647215][ T7105] [ 169.647222][ T7105] dump_stack_lvl+0x100/0x190 [ 169.647255][ T7105] should_fail_ex.cold+0x5/0xa [ 169.647277][ T7105] ? lsm_blob_alloc+0x68/0x90 [ 169.647303][ T7105] should_failslab+0xc2/0x120 [ 169.647324][ T7105] __kmalloc_noprof+0xe0/0x850 [ 169.647352][ T7105] ? trace_kmalloc+0x101/0x130 [ 169.647376][ T7105] lsm_blob_alloc+0x68/0x90 [ 169.647404][ T7105] security_sk_alloc+0x2d/0x290 [ 169.647427][ T7105] sk_prot_alloc+0x12a/0x2a0 [ 169.647450][ T7105] sk_alloc+0x36/0xe80 [ 169.647477][ T7105] __netlink_create+0x5e/0x2c0 [ 169.647506][ T7105] __netlink_kernel_create+0xed/0x750 [ 169.647526][ T7105] ? __pfx___netlink_kernel_create+0x10/0x10 [ 169.647552][ T7105] fib_net_init+0x26d/0x3f0 [ 169.647569][ T7105] ? is_module_address+0x69/0xf0 [ 169.647593][ T7105] ? __pfx_fib_net_init+0x10/0x10 [ 169.647611][ T7105] ? timer_init_key+0x150/0x340 [ 169.647631][ T7105] ? __pfx_nl_fib_input+0x10/0x10 [ 169.647650][ T7105] ? devinet_init_net+0x56c/0x8d0 [ 169.647672][ T7105] ? __pfx_fib_net_init+0x10/0x10 [ 169.647689][ T7105] ops_init+0x1e2/0x5f0 [ 169.647709][ T7105] setup_net+0x118/0x3a0 [ 169.647727][ T7105] ? __pfx_setup_net+0x10/0x10 [ 169.647743][ T7105] ? lockdep_init_map_type+0x5c/0x250 [ 169.647769][ T7105] ? mutex_init_lockep+0x110/0x150 [ 169.647798][ T7105] copy_net_ns+0x46f/0x7c0 [ 169.647820][ T7105] create_new_namespaces+0x3ea/0xac0 [ 169.647846][ T7105] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 169.647869][ T7105] ksys_unshare+0x473/0xad0 [ 169.647894][ T7105] ? __pfx_ksys_unshare+0x10/0x10 [ 169.647926][ T7105] __x64_sys_unshare+0x31/0x40 [ 169.647948][ T7105] do_syscall_64+0x106/0xf80 [ 169.647966][ T7105] ? clear_bhb_loop+0x40/0x90 [ 169.647988][ T7105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.648006][ T7105] RIP: 0033:0x7f8b4af9c819 [ 169.648022][ T7105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.648038][ T7105] RSP: 002b:00007f8b4bde8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 169.648062][ T7105] RAX: ffffffffffffffda RBX: 00007f8b4b215fa0 RCX: 00007f8b4af9c819 [ 169.648073][ T7105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 169.648083][ T7105] RBP: 00007f8b4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 169.648093][ T7105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.648103][ T7105] R13: 00007f8b4b216038 R14: 00007f8b4b215fa0 R15: 00007ffd59df0fc8 [ 169.648126][ T7105] [ 170.313110][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.319388][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.637668][ T7108] misc userio: Invalid payload size [ 170.889887][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.210500][ T36] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 171.327166][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.367499][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.373585][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.924246][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.410686][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.452080][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.755082][ T7207] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 178.866999][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 179.208138][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.216908][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.225416][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.233302][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.242973][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.830920][ T5144] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 181.331178][ T5144] Bluetooth: hci4: command tx timeout [ 182.440823][ T7213] chnl_net:caif_netlink_parms(): no params data found [ 182.537638][ T30] audit: type=1326 audit(1775260873.036:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.1.303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74f619c819 code=0x0 [ 183.019571][ T3541] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 183.409289][ T5144] Bluetooth: hci4: command tx timeout [ 183.682837][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.731809][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.739140][ T7213] bridge_slave_0: entered allmulticast mode [ 183.790838][ T7213] bridge_slave_0: entered promiscuous mode [ 183.839368][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.879285][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.929876][ T7213] bridge_slave_1: entered allmulticast mode [ 183.959616][ T7213] bridge_slave_1: entered promiscuous mode [ 184.101929][ T7213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.159012][ T7213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.457468][ T7213] team0: Port device team_slave_0 added [ 184.485774][ T7213] team0: Port device team_slave_1 added [ 184.633623][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.662981][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.808234][ T7213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.885645][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.935304][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.120105][ T7213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.490735][ T5144] Bluetooth: hci4: command tx timeout [ 185.593082][ T7213] hsr_slave_0: entered promiscuous mode [ 185.599731][ T7213] hsr_slave_1: entered promiscuous mode [ 185.671604][ T7213] debugfs: 'hsr0' already exists in 'hsr' [ 185.677417][ T7213] Cannot create hsr debugfs directory [ 186.541532][ T7279] binder: 7278:7279 unknown command 0 [ 186.546995][ T7279] binder: 7278:7279 ioctl c0306201 200000000000 returned -22 [ 187.529084][ T7213] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.571387][ T5144] Bluetooth: hci4: command tx timeout [ 187.695879][ T7213] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.879323][ T7213] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.178328][ T7213] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.192662][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 190.758406][ T7331] sd 0:0:1:0: PR command failed: 1026 [ 190.792970][ T7331] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 190.863082][ T7331] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 190.913465][ T7326] FAULT_INJECTION: forcing a failure. [ 190.913465][ T7326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.082176][ T7213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.195602][ T7213] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.213890][ T7326] CPU: 0 UID: 0 PID: 7326 Comm: syz.1.316 Not tainted syzkaller #0 PREEMPT(full) [ 191.213916][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.213934][ T7326] Call Trace: [ 191.213941][ T7326] [ 191.213948][ T7326] dump_stack_lvl+0x100/0x190 [ 191.213982][ T7326] should_fail_ex.cold+0x5/0xa [ 191.214001][ T7326] ? prepare_alloc_pages+0x16d/0x5f0 [ 191.214026][ T7326] should_fail_alloc_page+0xeb/0x140 [ 191.214048][ T7326] prepare_alloc_pages+0x1f0/0x5f0 [ 191.214075][ T7326] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 191.214108][ T7326] ? __lock_acquire+0x4a5/0x2630 [ 191.214139][ T7326] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 191.214171][ T7326] ? do_raw_spin_lock+0x128/0x260 [ 191.214199][ T7326] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 191.214226][ T7326] ? find_held_lock+0x2b/0x80 [ 191.214250][ T7326] ? __lock_acquire+0x4a5/0x2630 [ 191.214273][ T7326] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.214294][ T7326] ? policy_nodemask+0xed/0x4f0 [ 191.214316][ T7326] alloc_pages_mpol+0x1fb/0x550 [ 191.214337][ T7326] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 191.214357][ T7326] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 191.214386][ T7326] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 191.214420][ T7326] folio_alloc_mpol_noprof+0x36/0x340 [ 191.214445][ T7326] shmem_alloc_folio+0x135/0x160 [ 191.214470][ T7326] shmem_alloc_and_add_folio+0x371/0xd40 [ 191.214504][ T7326] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 191.214534][ T7326] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 191.214562][ T7326] ? __lock_acquire+0x480/0x2630 [ 191.214589][ T7326] shmem_get_folio_gfp+0x6ab/0x1900 [ 191.214622][ T7326] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 191.214653][ T7326] ? __pfx___might_resched+0x10/0x10 [ 191.214680][ T7326] ? noop_dirty_folio+0xfd/0x160 [ 191.214701][ T7326] shmem_fallocate+0x6d7/0x1060 [ 191.214728][ T7326] ? __pfx_shmem_fallocate+0x10/0x10 [ 191.214744][ T7326] ? aa_file_perm+0x7f3/0x14d0 [ 191.214777][ T7326] ? __lock_acquire+0x4a5/0x2630 [ 191.214816][ T7326] ? __pfx_shmem_fallocate+0x10/0x10 [ 191.214834][ T7326] vfs_fallocate+0x576/0x10d0 [ 191.214856][ T7326] ? __pfx_vfs_fallocate+0x10/0x10 [ 191.214881][ T7326] __x64_sys_fallocate+0xd5/0x140 [ 191.214903][ T7326] do_syscall_64+0x106/0xf80 [ 191.214922][ T7326] ? clear_bhb_loop+0x40/0x90 [ 191.214951][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.214971][ T7326] RIP: 0033:0x7f74f619c819 [ 191.214988][ T7326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.215005][ T7326] RSP: 002b:00007f74f6ff8028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 191.215023][ T7326] RAX: ffffffffffffffda RBX: 00007f74f6415fa0 RCX: 00007f74f619c819 [ 191.215034][ T7326] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 191.215045][ T7326] RBP: 00007f74f6232c91 R08: 0000000000000000 R09: 0000000000000000 [ 191.215055][ T7326] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 191.215065][ T7326] R13: 00007f74f6416038 R14: 00007f74f6415fa0 R15: 00007ffcf4b6b718 [ 191.215089][ T7326] [ 191.968579][ T7213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.996516][ T7213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.033571][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.040816][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.065273][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.072596][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.572463][ T7213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.706056][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.721352][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.352320][ T7213] veth0_vlan: entered promiscuous mode [ 195.418734][ T7213] veth1_vlan: entered promiscuous mode [ 195.517346][ T7213] veth0_macvtap: entered promiscuous mode [ 195.565761][ T7213] veth1_macvtap: entered promiscuous mode [ 195.631082][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.688468][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.882828][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.892066][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.037520][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.085717][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.245036][ T6110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.305687][ T6110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.371255][ T6110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.444845][ T6110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.607630][ T7389] vhci_hcd: not connected 4 [ 198.621101][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 198.882359][ T7392] netlink: 13 bytes leftover after parsing attributes in process `syz.1.324'. [ 201.261007][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.272169][ T7387] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 201.571247][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 201.692835][ T7387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.719859][ T7387] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.743683][ T7387] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.763916][ T7387] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.801083][ T7387] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 203.339921][ T5144] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.742552][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.819495][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.596229][ T85] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 204.661519][ T7435] can0: slcan on ttyS2. [ 205.737393][ T7435] can0 (unregistered): slcan off ttyS2. [ 205.920535][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 207.982644][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.315885][ T7463] FAULT_INJECTION: forcing a failure. [ 208.315885][ T7463] name failslab, interval 1, probability 0, space 0, times 0 [ 208.453141][ T7463] CPU: 0 UID: 0 PID: 7463 Comm: syz.4.337 Not tainted syzkaller #0 PREEMPT(full) [ 208.453172][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 208.453183][ T7463] Call Trace: [ 208.453189][ T7463] [ 208.453197][ T7463] dump_stack_lvl+0x100/0x190 [ 208.453229][ T7463] should_fail_ex.cold+0x5/0xa [ 208.453251][ T7463] should_failslab+0xc2/0x120 [ 208.453272][ T7463] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 208.453292][ T7463] ? key_alloc+0x423/0x1310 [ 208.453316][ T7463] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 208.453348][ T7463] kmemdup_noprof+0x29/0x60 [ 208.453366][ T7463] key_alloc+0x423/0x1310 [ 208.453398][ T7463] ? __pfx_key_alloc+0x10/0x10 [ 208.453428][ T7463] keyring_alloc+0x44/0xc0 [ 208.453456][ T7463] lookup_user_key+0x9b8/0x1300 [ 208.453481][ T7463] ? __pfx_lookup_user_key+0x10/0x10 [ 208.453504][ T7463] ? __pfx_do_futex+0x10/0x10 [ 208.453532][ T7463] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 208.453560][ T7463] ? xfd_validate_state+0x129/0x190 [ 208.453589][ T7463] keyctl_keyring_link+0x22/0xe0 [ 208.453608][ T7463] __do_sys_keyctl+0x1bf/0x5a0 [ 208.453630][ T7463] do_syscall_64+0x106/0xf80 [ 208.453648][ T7463] ? clear_bhb_loop+0x40/0x90 [ 208.453669][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.453688][ T7463] RIP: 0033:0x7f8d04b9c819 [ 208.453726][ T7463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.453743][ T7463] RSP: 002b:00007f8d059af028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 208.453762][ T7463] RAX: ffffffffffffffda RBX: 00007f8d04e15fa0 RCX: 00007f8d04b9c819 [ 208.453774][ T7463] RDX: ffffffffffffffff RSI: ffffffffffffffff RDI: 0000000000000008 [ 208.453785][ T7463] RBP: 00007f8d04c32c91 R08: 0000000000000006 R09: 0000000000000000 [ 208.453796][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.453806][ T7463] R13: 00007f8d04e16038 R14: 00007f8d04e15fa0 R15: 00007ffe46fbb2a8 [ 208.453829][ T7463] [ 209.429876][ T7480] can0: slcan on ttyS2. [ 211.048657][ T7480] can0 (unregistered): slcan off ttyS2. [ 212.626270][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 212.699390][ T7526] netlink: 13 bytes leftover after parsing attributes in process `syz.4.342'. [ 218.781000][ T7580] FAULT_INJECTION: forcing a failure. [ 218.781000][ T7580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.079935][ T7580] CPU: 0 UID: 0 PID: 7580 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(full) [ 219.079965][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 219.079976][ T7580] Call Trace: [ 219.079984][ T7580] [ 219.079992][ T7580] dump_stack_lvl+0x100/0x190 [ 219.080034][ T7580] should_fail_ex.cold+0x5/0xa [ 219.080059][ T7580] ? prepare_alloc_pages+0x16d/0x5f0 [ 219.080085][ T7580] should_fail_alloc_page+0xeb/0x140 [ 219.080110][ T7580] prepare_alloc_pages+0x1f0/0x5f0 [ 219.080137][ T7580] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 219.080175][ T7580] ? __lock_acquire+0x4a5/0x2630 [ 219.080207][ T7580] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 219.080249][ T7580] ? do_raw_spin_lock+0x128/0x260 [ 219.080280][ T7580] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.080309][ T7580] ? find_held_lock+0x2b/0x80 [ 219.080335][ T7580] ? __lock_acquire+0x4a5/0x2630 [ 219.080359][ T7580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.080381][ T7580] ? policy_nodemask+0xed/0x4f0 [ 219.080404][ T7580] alloc_pages_mpol+0x1fb/0x550 [ 219.080426][ T7580] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 219.080447][ T7580] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 219.080477][ T7580] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 219.080511][ T7580] folio_alloc_mpol_noprof+0x36/0x340 [ 219.080557][ T7580] shmem_alloc_folio+0x135/0x160 [ 219.080585][ T7580] shmem_alloc_and_add_folio+0x371/0xd40 [ 219.080620][ T7580] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 219.080652][ T7580] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 219.080686][ T7580] ? __lock_acquire+0x480/0x2630 [ 219.080714][ T7580] shmem_get_folio_gfp+0x6ab/0x1900 [ 219.080749][ T7580] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 219.080790][ T7580] ? __pfx___might_resched+0x10/0x10 [ 219.080820][ T7580] ? noop_dirty_folio+0xfd/0x160 [ 219.080844][ T7580] shmem_fallocate+0x6d7/0x1060 [ 219.080872][ T7580] ? __pfx_shmem_fallocate+0x10/0x10 [ 219.080888][ T7580] ? aa_file_perm+0x7f3/0x14d0 [ 219.080922][ T7580] ? __lock_acquire+0x4a5/0x2630 [ 219.080969][ T7580] ? __pfx_shmem_fallocate+0x10/0x10 [ 219.080988][ T7580] vfs_fallocate+0x576/0x10d0 [ 219.081014][ T7580] ? __pfx_vfs_fallocate+0x10/0x10 [ 219.081041][ T7580] __x64_sys_fallocate+0xd5/0x140 [ 219.081065][ T7580] do_syscall_64+0x106/0xf80 [ 219.081084][ T7580] ? clear_bhb_loop+0x40/0x90 [ 219.081108][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.081129][ T7580] RIP: 0033:0x7f8b4af9c819 [ 219.081152][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.081170][ T7580] RSP: 002b:00007f8b4bde8028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 219.081188][ T7580] RAX: ffffffffffffffda RBX: 00007f8b4b215fa0 RCX: 00007f8b4af9c819 [ 219.081200][ T7580] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 219.081211][ T7580] RBP: 00007f8b4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 219.081222][ T7580] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 219.081233][ T7580] R13: 00007f8b4b216038 R14: 00007f8b4b215fa0 R15: 00007ffd59df0fc8 [ 219.081258][ T7580] [ 224.738129][ T7634] syz.4.364 (7634) used greatest stack depth: 19672 bytes left [ 226.631249][ T7672] netlink: 28 bytes leftover after parsing attributes in process `syz.2.375'. [ 227.751289][ T7684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.380'. [ 227.924407][ T7684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.025561][ T7684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.276119][ T7684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.392350][ T7684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.606422][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 238.367794][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.406'. [ 238.555102][ T7852] bridge_slave_1: left allmulticast mode [ 238.585601][ T7852] bridge_slave_1: left promiscuous mode [ 238.616659][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.685824][ T7852] bridge_slave_0: left allmulticast mode [ 238.735702][ T7852] bridge_slave_0: left promiscuous mode [ 238.756544][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.225296][ T7874] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 250.967891][ T8016] cgroup: fork rejected by pids controller in /syz1 [ 251.167154][ T8073] netlink: 334 bytes leftover after parsing attributes in process `syz.4.440'. [ 252.884347][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 253.293402][ T8185] netlink: 146 bytes leftover after parsing attributes in process `syz.2.447'. [ 254.004073][ T8213] FAULT_INJECTION: forcing a failure. [ 254.004073][ T8213] name failslab, interval 1, probability 0, space 0, times 0 [ 254.096855][ T8213] CPU: 0 UID: 0 PID: 8213 Comm: syz.0.452 Not tainted syzkaller #0 PREEMPT(full) [ 254.096882][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 254.096892][ T8213] Call Trace: [ 254.096899][ T8213] [ 254.096907][ T8213] dump_stack_lvl+0x100/0x190 [ 254.096941][ T8213] should_fail_ex.cold+0x5/0xa [ 254.096964][ T8213] ? drm_atomic_state_init+0xf4/0x490 [ 254.096996][ T8213] should_failslab+0xc2/0x120 [ 254.097017][ T8213] __kmalloc_noprof+0xe0/0x850 [ 254.097051][ T8213] drm_atomic_state_init+0xf4/0x490 [ 254.097075][ T8213] ? kasan_save_track+0x14/0x30 [ 254.097095][ T8213] drm_atomic_state_alloc+0xd3/0x120 [ 254.097121][ T8213] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 254.097151][ T8213] ? trace_contention_end+0x140/0x180 [ 254.097178][ T8213] ? __mutex_lock+0x26a/0x1b90 [ 254.097199][ T8213] ? __mutex_lock+0x26a/0x1b90 [ 254.097218][ T8213] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 254.097247][ T8213] ? drm_master_internal_acquire+0x21/0x80 [ 254.097295][ T8213] drm_client_modeset_commit_locked+0x14d/0x580 [ 254.097327][ T8213] drm_client_modeset_commit+0x4f/0x80 [ 254.097356][ T8213] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 254.097388][ T8213] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 254.097419][ T8213] drm_fbdev_client_restore+0x1b/0x30 [ 254.097442][ T8213] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 254.097463][ T8213] drm_client_dev_restore+0x205/0x2a0 [ 254.097502][ T8213] drm_release+0x2c6/0x360 [ 254.097529][ T8213] ? __pfx_drm_release+0x10/0x10 [ 254.097554][ T8213] __fput+0x3ff/0xb40 [ 254.097582][ T8213] task_work_run+0x150/0x240 [ 254.097612][ T8213] ? __pfx_task_work_run+0x10/0x10 [ 254.097646][ T8213] exit_to_user_mode_loop+0x100/0x4a0 [ 254.097674][ T8213] do_syscall_64+0x668/0xf80 [ 254.097691][ T8213] ? clear_bhb_loop+0x40/0x90 [ 254.097714][ T8213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.097733][ T8213] RIP: 0033:0x7f8b4af9c819 [ 254.097749][ T8213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.097765][ T8213] RSP: 002b:00007f8b4bde8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 254.097783][ T8213] RAX: 0000000000000000 RBX: 00007f8b4b215fa0 RCX: 00007f8b4af9c819 [ 254.097794][ T8213] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 254.097804][ T8213] RBP: 00007f8b4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 254.097814][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.097824][ T8213] R13: 00007f8b4b216038 R14: 00007f8b4b215fa0 R15: 00007ffd59df0fc8 [ 254.097847][ T8213] [ 256.169788][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.176199][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.119502][ T6104] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.930531][ T8295] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[8295] [ 259.359534][ T8303] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 261.501978][ T8355] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[8355] [ 262.227548][ T8345] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 262.265133][ T8345] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 262.300333][ T8345] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 262.381227][ T8345] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 262.468500][ T8365] ovs_: entered promiscuous mode [ 263.297229][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 264.331159][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 264.338017][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 264.409793][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 264.657704][ T30] audit: type=1804 audit(1775260955.125:4): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.495" name="file0" dev="tmpfs" ino=292 res=1 errno=0 [ 265.150306][ T8433] Invalid ELF header magic: != ELF [ 266.381833][ T8470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.509'. [ 266.590002][ T6110] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.684408][ T8470] veth1_macvtap: left promiscuous mode [ 266.728930][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 266.829404][ T6110] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.843230][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.510'. [ 267.014569][ T6110] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.129084][ T6110] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.573884][ T6110] bridge_slave_1: left allmulticast mode [ 267.599537][ T6110] bridge_slave_1: left promiscuous mode [ 267.634530][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.702568][ T6110] bridge_slave_0: left allmulticast mode [ 267.737449][ T6110] bridge_slave_0: left promiscuous mode [ 267.807569][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.872979][ T6110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.976771][ T6110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.073474][ T6110] bond0 (unregistering): Released all slaves [ 269.256773][ T6110] HfR: left promiscuous mode [ 269.863148][ T8570] ptrace attach of "./syz-executor exec"[7213] was attempted by "./syz-executor exec"[8570] [ 271.689453][ T8581] cgroup: fork rejected by pids controller in /syz0 [ 273.183070][ T8676] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 275.421161][ T6110] hsr_slave_0: left promiscuous mode [ 275.430125][ T6110] hsr_slave_1: left promiscuous mode [ 275.436885][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.446432][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.454584][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.463024][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.492362][ T6110] veth1_macvtap: left promiscuous mode [ 275.505050][ T6110] veth0_macvtap: left promiscuous mode [ 275.514558][ T6110] veth1_vlan: left promiscuous mode [ 275.522274][ T6110] veth0_vlan: left promiscuous mode [ 276.053425][ T6110] team0 (unregistering): Port device team_slave_1 removed [ 276.107718][ T6110] team0 (unregistering): Port device team_slave_0 removed [ 277.407892][ T8743] netlink: 350 bytes leftover after parsing attributes in process `syz.4.544'. [ 277.497531][ T8748] netlink: 350 bytes leftover after parsing attributes in process `syz.4.544'. [ 277.977370][ T8760] netlink: 146 bytes leftover after parsing attributes in process `syz.4.548'. [ 280.109923][ T8817] syz.2.554 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 281.093263][ T8826] netlink: 'syz.4.557': attribute type 1 has an invalid length. [ 281.129174][ T8827] FAULT_INJECTION: forcing a failure. [ 281.129174][ T8827] name fail_futex, interval 1, probability 0, space 0, times 1 [ 281.198182][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.0.558 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.198213][ T8827] Tainted: [L]=SOFTLOCKUP [ 281.198219][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 281.198229][ T8827] Call Trace: [ 281.198236][ T8827] [ 281.198242][ T8827] dump_stack_lvl+0x100/0x190 [ 281.198276][ T8827] should_fail_ex.cold+0x5/0xa [ 281.198298][ T8827] get_futex_key+0x1d2/0x1620 [ 281.198324][ T8827] ? __pfx_get_futex_key+0x10/0x10 [ 281.198355][ T8827] futex_wait_setup+0x83/0x510 [ 281.198398][ T8827] __futex_wait+0x19f/0x300 [ 281.198429][ T8827] ? __pfx___futex_wait+0x10/0x10 [ 281.198462][ T8827] ? __pfx_futex_wake_mark+0x10/0x10 [ 281.198494][ T8827] ? __hrtimer_setup+0x178/0x280 [ 281.198521][ T8827] ? ktime_add_safe+0x60/0x70 [ 281.198548][ T8827] futex_wait+0xed/0x380 [ 281.198577][ T8827] ? __pfx_futex_wait+0x10/0x10 [ 281.198604][ T8827] ? __lock_acquire+0x4a5/0x2630 [ 281.198631][ T8827] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 281.198664][ T8827] do_futex+0x1ef/0x350 [ 281.198689][ T8827] ? __pfx_do_futex+0x10/0x10 [ 281.198713][ T8827] ? ktime_get+0x200/0x300 [ 281.198731][ T8827] ? lockdep_hardirqs_on+0x78/0x100 [ 281.198750][ T8827] ? read_tsc+0x9/0x20 [ 281.198774][ T8827] __x64_sys_futex+0x34f/0x4d0 [ 281.198802][ T8827] ? __pfx___x64_sys_futex+0x10/0x10 [ 281.198835][ T8827] do_syscall_64+0x106/0xf80 [ 281.198853][ T8827] ? clear_bhb_loop+0x40/0x90 [ 281.198875][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.198894][ T8827] RIP: 0033:0x7f8b4af9c819 [ 281.198911][ T8827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.198928][ T8827] RSP: 002b:00007ffd59df1128 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.198950][ T8827] RAX: ffffffffffffffda RBX: 000000000004498b RCX: 00007f8b4af9c819 [ 281.198961][ T8827] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8b4b215fac [ 281.198971][ T8827] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 281.198981][ T8827] R10: 00007ffd59df1230 R11: 0000000000000246 R12: 00007ffd59df1250 [ 281.198992][ T8827] R13: 00007f8b4b215fac R14: 00000000000449bd R15: 00007ffd59df1230 [ 281.199014][ T8827] [ 282.558376][ T8856] FAULT_INJECTION: forcing a failure. [ 282.558376][ T8856] name failslab, interval 1, probability 0, space 0, times 0 [ 282.607046][ T8856] CPU: 0 UID: 0 PID: 8856 Comm: syz.0.562 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.607077][ T8856] Tainted: [L]=SOFTLOCKUP [ 282.607084][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 282.607095][ T8856] Call Trace: [ 282.607101][ T8856] [ 282.607108][ T8856] dump_stack_lvl+0x100/0x190 [ 282.607143][ T8856] should_fail_ex.cold+0x5/0xa [ 282.607169][ T8856] should_failslab+0xc2/0x120 [ 282.607191][ T8856] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 282.607219][ T8856] ? acpi_ut_create_generic_state+0x61/0xc0 [ 282.607249][ T8856] acpi_ut_create_generic_state+0x61/0xc0 [ 282.607279][ T8856] acpi_ps_push_scope+0x42/0x280 [ 282.607305][ T8856] acpi_ps_parse_loop+0x334/0x24a0 [ 282.607330][ T8856] ? __kmalloc_noprof+0x277/0x850 [ 282.607360][ T8856] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 282.607392][ T8856] ? acpi_ut_status_exit+0x111/0x1c0 [ 282.607419][ T8856] ? acpi_ds_call_control_method+0x435/0xab0 [ 282.607451][ T8856] acpi_ps_parse_aml+0x81e/0x1120 [ 282.607479][ T8856] acpi_ps_execute_method+0x5c4/0xe90 [ 282.607510][ T8856] acpi_ns_evaluate+0x640/0x1670 [ 282.607543][ T8856] acpi_evaluate_object+0x420/0xe00 [ 282.607563][ T8856] ? kasan_save_stack+0x30/0x50 [ 282.607579][ T8856] ? kasan_save_track+0x14/0x30 [ 282.607600][ T8856] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 282.607629][ T8856] acpi_evaluate_integer+0xdf/0x220 [ 282.607658][ T8856] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 282.607696][ T8856] ? __pfx_status_show+0x10/0x10 [ 282.607716][ T8856] status_show+0xa0/0x120 [ 282.607735][ T8856] ? __pfx_status_show+0x10/0x10 [ 282.607761][ T8856] dev_attr_show+0x52/0xa0 [ 282.607786][ T8856] ? __pfx_dev_attr_show+0x10/0x10 [ 282.607814][ T8856] sysfs_kf_seq_show+0x217/0x3a0 [ 282.607851][ T8856] seq_read_iter+0x32f/0x1270 [ 282.607892][ T8856] kernfs_fop_read_iter+0x46c/0x610 [ 282.607916][ T8856] ? rw_verify_area+0xce/0x6d0 [ 282.607943][ T8856] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 282.607967][ T8856] vfs_read+0x825/0xb30 [ 282.607989][ T8856] ? __pfx_vfs_read+0x10/0x10 [ 282.608023][ T8856] ksys_read+0x12a/0x250 [ 282.608042][ T8856] ? __pfx_ksys_read+0x10/0x10 [ 282.608067][ T8856] do_syscall_64+0x106/0xf80 [ 282.608084][ T8856] ? clear_bhb_loop+0x40/0x90 [ 282.608107][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.608126][ T8856] RIP: 0033:0x7f8b4af9c819 [ 282.608142][ T8856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.608159][ T8856] RSP: 002b:00007f8b4bde8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.608177][ T8856] RAX: ffffffffffffffda RBX: 00007f8b4b215fa0 RCX: 00007f8b4af9c819 [ 282.608189][ T8856] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 282.608199][ T8856] RBP: 00007f8b4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 282.608209][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.608219][ T8856] R13: 00007f8b4b216038 R14: 00007f8b4b215fa0 R15: 00007ffd59df0fc8 [ 282.608243][ T8856] [ 282.914258][ T8857] FAULT_INJECTION: forcing a failure. [ 282.914258][ T8857] name failslab, interval 1, probability 0, space 0, times 0 [ 282.927828][ T8857] CPU: 0 UID: 0 PID: 8857 Comm: syz.0.562 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.927860][ T8857] Tainted: [L]=SOFTLOCKUP [ 282.927868][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 282.927878][ T8857] Call Trace: [ 282.927885][ T8857] [ 282.927901][ T8857] dump_stack_lvl+0x100/0x190 [ 282.927934][ T8857] should_fail_ex.cold+0x5/0xa [ 282.927956][ T8857] should_failslab+0xc2/0x120 [ 282.927977][ T8857] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 282.928005][ T8857] ? sk_prot_alloc+0x60/0x2a0 [ 282.928030][ T8857] sk_prot_alloc+0x60/0x2a0 [ 282.928053][ T8857] sk_alloc+0x36/0xe80 [ 282.928081][ T8857] rds_create+0x9e/0x5f0 [ 282.928106][ T8857] __sock_create+0x339/0x860 [ 282.928132][ T8857] __sys_socket+0x14d/0x260 [ 282.928155][ T8857] ? __pfx___sys_socket+0x10/0x10 [ 282.928184][ T8857] __x64_sys_socket+0x72/0xb0 [ 282.928215][ T8857] ? lockdep_hardirqs_on+0x78/0x100 [ 282.928235][ T8857] do_syscall_64+0x106/0xf80 [ 282.928260][ T8857] ? clear_bhb_loop+0x40/0x90 [ 282.928283][ T8857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.928310][ T8857] RIP: 0033:0x7f8b4af9c819 [ 282.928326][ T8857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.928343][ T8857] RSP: 002b:00007f8b4bdc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 282.928361][ T8857] RAX: ffffffffffffffda RBX: 00007f8b4b216090 RCX: 00007f8b4af9c819 [ 282.928372][ T8857] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 282.928383][ T8857] RBP: 00007f8b4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 282.928394][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.928404][ T8857] R13: 00007f8b4b216128 R14: 00007f8b4b216090 R15: 00007ffd59df0fc8 [ 282.928427][ T8857] [ 283.132650][ T8856] ACPI Error: Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 283.143832][ T8856] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 284.949430][ T8874] libceph: secret too big 125 [ 286.325627][ T8897] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 286.374401][ T8897] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 286.431767][ T8897] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 286.486830][ T8897] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 287.048245][ T8933] netlink: 13 bytes leftover after parsing attributes in process `syz.1.581'. [ 287.851266][ T8953] can: request_module (can-proto-0) failed. [ 288.343121][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 288.421726][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 288.503117][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 288.509208][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.363465][ T9022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.594'. [ 290.453936][ T9019] futex_wake_op: syz.2.595 tries to shift op by -2048; fix this program [ 291.359784][ T9041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.599'. [ 292.188225][ T9036] kexec: Could not allocate control_code_buffer [ 292.319864][ T9072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'. [ 292.394093][ T9070] bond0: invalid ARP target specified [ 292.497126][ T9072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.536888][ T9072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.638573][ T9072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.689267][ T9072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.917962][ T5831] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 296.344148][ T9163] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 296.533479][ T9167] Invalid ELF header magic: != ELF [ 297.346564][ T30] audit: type=1804 audit(1775260987.799:5): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.624" name="file0" dev="tmpfs" ino=855 res=1 errno=0 [ 298.320867][ T3455] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 299.809020][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 300.104785][ T9224] netlink: 330 bytes leftover after parsing attributes in process `syz.1.635'. [ 302.475832][ T9285] Invalid ELF header magic: != ELF [ 307.064234][ T9348] : Can't lookup blockdev [ 308.898390][ T9364] ovs_: entered promiscuous mode [ 317.657955][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.664376][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.893519][ T6108] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 323.541194][ T9570] futex_wake_op: syz.4.711 tries to shift op by -2048; fix this program [ 327.460834][ T9640] futex_wake_op: syz.2.722 tries to shift op by -2048; fix this program [ 327.888809][ T9647] ptrace attach of "./syz-executor exec"[5821] was attempted by "7Б\x1bAaWЧ9tt}DT3_6ߣMU7o8LԣVLxc\x0d?pHs)Qt't*\x5c^¨hzehD9'%=«ؐ3FPL++@+5,2]켖\x22wot}1|,mt~ĸ/L}zI3dD-|f` (TO4S0S.r`ӭ\x1bqp0b n'-7vn!doIi,ZZkiȍ+5ɀT(I;JCGjL\x0bbo\x0a19C3lӔ!RJC`NIg^[Y7kM%4}ޔWRz)GǏvTEXY\x1b_OG\x09πe(X\x0dJqČ&lX,<`CQw\x5c9IxOhޯCƂ/g$-9NFUp\x0dtfވK!/ΦSL XU:|.St\x07U8HJ\x0cr6/F\x22k܀AD^A\x0bZ@:m\x0d#ou\x0965r Yr\x22[! W\x5c4Q_x_X\x0c^41\x093\x09A:=-SX 渺0nb\x0aT;H*r &v)L.hąEDe\x0ce\x0bӯG(J\x0a5yT0467󈈫3&i1MG\x0deQ-/Yх%'W5\x07&w|͊0l:A7B)i̴D@ r$r [ 331.953168][ T9678] futex_wake_op: syz.1.739 tries to shift op by -2048; fix this program [ 335.277949][ T9735] i2c i2c-0: delete_device: Can't find device in list [ 335.426044][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 335.547136][ T9735] netlink: 54041 bytes leftover after parsing attributes in process `syz.0.751'. [ 336.631600][ T9761] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 336.640991][ T9755] FAULT_INJECTION: forcing a failure. [ 336.640991][ T9755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 336.712480][ T9761] netlink: 330 bytes leftover after parsing attributes in process `syz.2.756'. [ 336.805270][ T9755] CPU: 0 UID: 0 PID: 9755 Comm: syz.0.762 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.805309][ T9755] Tainted: [L]=SOFTLOCKUP [ 336.805316][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 336.805326][ T9755] Call Trace: [ 336.805333][ T9755] [ 336.805340][ T9755] dump_stack_lvl+0x100/0x190 [ 336.805373][ T9755] should_fail_ex.cold+0x5/0xa [ 336.805394][ T9755] get_futex_key+0x1d2/0x1620 [ 336.805420][ T9755] ? __pfx_get_futex_key+0x10/0x10 [ 336.805444][ T9755] ? update_se+0x94/0x760 [ 336.805471][ T9755] futex_wait_setup+0x83/0x510 [ 336.805505][ T9755] __futex_wait+0x19f/0x300 [ 336.805535][ T9755] ? __pfx___futex_wait+0x10/0x10 [ 336.805562][ T9755] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 336.805590][ T9755] ? lockdep_hardirqs_on+0x78/0x100 [ 336.805610][ T9755] ? __pfx_futex_wake_mark+0x10/0x10 [ 336.805642][ T9755] ? find_held_lock+0x2b/0x80 [ 336.805659][ T9755] ? futex_wake+0x456/0x530 [ 336.805690][ T9755] futex_wait+0xed/0x380 [ 336.805718][ T9755] ? __pfx_futex_wait+0x10/0x10 [ 336.805758][ T9755] do_futex+0x1ef/0x350 [ 336.805783][ T9755] ? __pfx_do_futex+0x10/0x10 [ 336.805818][ T9755] __x64_sys_futex+0x34f/0x4d0 [ 336.805846][ T9755] ? __pfx___x64_sys_futex+0x10/0x10 [ 336.805879][ T9755] do_syscall_64+0x106/0xf80 [ 336.805896][ T9755] ? clear_bhb_loop+0x40/0x90 [ 336.805918][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.805936][ T9755] RIP: 0033:0x7f8b4af9c819 [ 336.805959][ T9755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.805976][ T9755] RSP: 002b:00007f8b4bde80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 336.805993][ T9755] RAX: ffffffffffffffda RBX: 00007f8b4b215fa8 RCX: 00007f8b4af9c819 [ 336.806004][ T9755] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8b4b215fa8 [ 336.806014][ T9755] RBP: 00007f8b4b215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 336.806024][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.806034][ T9755] R13: 00007f8b4b216038 R14: 00007ffd59df0ee0 R15: 00007ffd59df0fc8 [ 336.806056][ T9755] [ 337.605846][ T9767] netlink: 342 bytes leftover after parsing attributes in process `syz.2.757'. [ 342.955002][ T9857] .^: entered promiscuous mode [ 343.600159][ T9870] netlink: 342 bytes leftover after parsing attributes in process `syz.1.778'. [ 344.292024][ T9872] netlink: 56 bytes leftover after parsing attributes in process `syz.2.779'. [ 355.821743][ T9998] FAULT_INJECTION: forcing a failure. [ 355.821743][ T9998] name fail_futex, interval 1, probability 0, space 0, times 0 [ 355.867148][ T9998] CPU: 0 UID: 0 PID: 9998 Comm: syz.0.806 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.867179][ T9998] Tainted: [L]=SOFTLOCKUP [ 355.867185][ T9998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 355.867196][ T9998] Call Trace: [ 355.867202][ T9998] [ 355.867209][ T9998] dump_stack_lvl+0x100/0x190 [ 355.867242][ T9998] should_fail_ex.cold+0x5/0xa [ 355.867265][ T9998] get_futex_key+0x295/0x1620 [ 355.867291][ T9998] ? __pfx_get_futex_key+0x10/0x10 [ 355.867312][ T9998] ? lock_acquire+0x1cf/0x380 [ 355.867351][ T9998] futex_wake+0xea/0x530 [ 355.867381][ T9998] ? __pfx_futex_wake+0x10/0x10 [ 355.867410][ T9998] ? exit_mm_release+0x19/0x30 [ 355.867439][ T9998] do_futex+0x32b/0x350 [ 355.867463][ T9998] ? __pfx_do_futex+0x10/0x10 [ 355.867486][ T9998] ? __might_fault+0xc5/0x140 [ 355.867519][ T9998] mm_release+0x24a/0x2f0 [ 355.867539][ T9998] do_exit+0x704/0x2b60 [ 355.867566][ T9998] ? __pfx_do_exit+0x10/0x10 [ 355.867591][ T9998] ? do_raw_spin_lock+0x128/0x260 [ 355.867617][ T9998] ? find_held_lock+0x2b/0x80 [ 355.867635][ T9998] ? get_signal+0x7e0/0x21e0 [ 355.867657][ T9998] do_group_exit+0xd5/0x2a0 [ 355.867683][ T9998] get_signal+0x1ec7/0x21e0 [ 355.867708][ T9998] ? ksys_write+0x190/0x250 [ 355.867727][ T9998] ? __pfx_get_signal+0x10/0x10 [ 355.867748][ T9998] ? do_futex+0x192/0x350 [ 355.867775][ T9998] arch_do_signal_or_restart+0x91/0x770 [ 355.867798][ T9998] ? __do_sys_kcmp+0x74b/0xd70 [ 355.867832][ T9998] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 355.867862][ T9998] ? __pfx___x64_sys_futex+0x10/0x10 [ 355.867892][ T9998] exit_to_user_mode_loop+0x86/0x4a0 [ 355.867919][ T9998] do_syscall_64+0x668/0xf80 [ 355.867937][ T9998] ? clear_bhb_loop+0x40/0x90 [ 355.867959][ T9998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.867978][ T9998] RIP: 0033:0x7f8b4af9c819 [ 355.867994][ T9998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.868011][ T9998] RSP: 002b:00007f8b4bdc70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 355.868029][ T9998] RAX: fffffffffffffe00 RBX: 00007f8b4b216098 RCX: 00007f8b4af9c819 [ 355.868040][ T9998] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8b4b216098 [ 355.868051][ T9998] RBP: 00007f8b4b216090 R08: 0000000000000000 R09: 0000000000000000 [ 355.868061][ T9998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.868071][ T9998] R13: 00007f8b4b216128 R14: 00007ffd59df0ee0 R15: 00007ffd59df0fc8 [ 355.868093][ T9998] [ 356.553239][T10008] FAULT_INJECTION: forcing a failure. [ 356.553239][T10008] name failslab, interval 1, probability 0, space 0, times 0 [ 356.586076][T10008] CPU: 0 UID: 0 PID: 10008 Comm: syz.0.808 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.586112][T10008] Tainted: [L]=SOFTLOCKUP [ 356.586119][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 356.586129][T10008] Call Trace: [ 356.586137][T10008] [ 356.586144][T10008] dump_stack_lvl+0x100/0x190 [ 356.586178][T10008] should_fail_ex.cold+0x5/0xa [ 356.586201][T10008] should_failslab+0xc2/0x120 [ 356.586223][T10008] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 356.586251][T10008] ? acpi_ps_alloc_op+0x29d/0x360 [ 356.586280][T10008] acpi_ps_alloc_op+0x29d/0x360 [ 356.586304][T10008] ? acpi_ut_status_exit+0x111/0x1c0 [ 356.586330][T10008] acpi_ps_create_op+0x4b3/0xd10 [ 356.586354][T10008] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 356.586378][T10008] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 356.586410][T10008] acpi_ps_parse_loop+0xa65/0x24a0 [ 356.586436][T10008] ? rcu_is_watching+0x12/0xc0 [ 356.586464][T10008] ? acpi_ut_trace+0x1d7/0x2a0 [ 356.586488][T10008] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 356.586510][T10008] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 356.586537][T10008] ? acpi_ut_create_thread_state+0x6d/0x170 [ 356.586567][T10008] acpi_ps_parse_aml+0x81e/0x1120 [ 356.586595][T10008] acpi_ps_execute_method+0x5c4/0xe90 [ 356.586625][T10008] acpi_ns_evaluate+0x640/0x1670 [ 356.586658][T10008] acpi_evaluate_object+0x420/0xe00 [ 356.586677][T10008] ? kasan_save_stack+0x30/0x50 [ 356.586693][T10008] ? kasan_save_track+0x14/0x30 [ 356.586714][T10008] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 356.586742][T10008] acpi_evaluate_integer+0xdf/0x220 [ 356.586772][T10008] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 356.586810][T10008] ? __pfx_status_show+0x10/0x10 [ 356.586830][T10008] status_show+0xa0/0x120 [ 356.586850][T10008] ? __pfx_status_show+0x10/0x10 [ 356.586887][T10008] dev_attr_show+0x52/0xa0 [ 356.586912][T10008] ? __pfx_dev_attr_show+0x10/0x10 [ 356.586936][T10008] sysfs_kf_seq_show+0x217/0x3a0 [ 356.586966][T10008] seq_read_iter+0x32f/0x1270 [ 356.587006][T10008] kernfs_fop_read_iter+0x46c/0x610 [ 356.587028][T10008] ? rw_verify_area+0xce/0x6d0 [ 356.587055][T10008] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 356.587078][T10008] vfs_read+0x825/0xb30 [ 356.587099][T10008] ? __pfx_vfs_read+0x10/0x10 [ 356.587133][T10008] ksys_read+0x12a/0x250 [ 356.587151][T10008] ? __pfx_ksys_read+0x10/0x10 [ 356.587176][T10008] do_syscall_64+0x106/0xf80 [ 356.587193][T10008] ? clear_bhb_loop+0x40/0x90 [ 356.587216][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.587235][T10008] RIP: 0033:0x7f8b4af9c819 [ 356.587252][T10008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.587268][T10008] RSP: 002b:00007f8b4bde8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.587286][T10008] RAX: ffffffffffffffda RBX: 00007f8b4b215fa0 RCX: 00007f8b4af9c819 [ 356.587297][T10008] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 356.587307][T10008] RBP: 00007f8b4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 356.587316][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.587327][T10008] R13: 00007f8b4b216038 R14: 00007f8b4b215fa0 R15: 00007ffd59df0fc8 [ 356.587350][T10008] [ 356.587368][T10008] ACPI Error: [ 356.991420][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.809'. [ 357.516393][T10008] Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 357.889435][ T5831] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9 [ 361.791444][T10101] ======================================================= [ 361.791444][T10101] WARNING: The mand mount option has been deprecated and [ 361.791444][T10101] and is ignored by this kernel. Remove the mand [ 361.791444][T10101] option from the mount to silence this warning. [ 361.791444][T10101] ======================================================= [ 364.480950][T10157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.835'. [ 366.508174][T10201] FAULT_INJECTION: forcing a failure. [ 366.508174][T10201] name failslab, interval 1, probability 0, space 0, times 0 [ 366.644274][T10201] CPU: 0 UID: 0 PID: 10201 Comm: syz.0.844 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.644306][T10201] Tainted: [L]=SOFTLOCKUP [ 366.644312][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 366.644322][T10201] Call Trace: [ 366.644328][T10201] [ 366.644335][T10201] dump_stack_lvl+0x100/0x190 [ 366.644368][T10201] should_fail_ex.cold+0x5/0xa [ 366.644389][T10201] should_failslab+0xc2/0x120 [ 366.644411][T10201] __kmalloc_cache_noprof+0x7a/0x6f0 [ 366.644437][T10201] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 366.644467][T10201] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 366.644494][T10201] ? __mutex_lock+0x26a/0x1b90 [ 366.644514][T10201] ? tomoyo_path_number_perm+0x46d/0x580 [ 366.644537][T10201] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 366.644562][T10201] ? kasan_quarantine_put+0x104/0x240 [ 366.644592][T10201] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 366.644626][T10201] ? __pfx___mutex_lock+0x10/0x10 [ 366.644644][T10201] ? find_held_lock+0x2b/0x80 [ 366.644661][T10201] ? tomoyo_path_number_perm+0x28f/0x580 [ 366.644684][T10201] ? tomoyo_path_number_perm+0x28f/0x580 [ 366.644719][T10201] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 366.644740][T10201] ? futex_wait+0x125/0x380 [ 366.644774][T10201] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 366.644811][T10201] snd_pcm_oss_get_formats+0x7d/0x350 [ 366.644834][T10201] ? do_vfs_ioctl+0x226/0x13e0 [ 366.644861][T10201] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 366.644893][T10201] snd_pcm_oss_ioctl+0x1719/0x3720 [ 366.644919][T10201] ? find_held_lock+0x2b/0x80 [ 366.644936][T10201] ? __fget_files+0x215/0x3d0 [ 366.644954][T10201] ? hook_file_ioctl_common+0x146/0x410 [ 366.644978][T10201] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 366.645005][T10201] ? __fget_files+0x21f/0x3d0 [ 366.645026][T10201] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 366.645052][T10201] __x64_sys_ioctl+0x18e/0x210 [ 366.645081][T10201] do_syscall_64+0x106/0xf80 [ 366.645098][T10201] ? clear_bhb_loop+0x40/0x90 [ 366.645120][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.645139][T10201] RIP: 0033:0x7f8b4af9c819 [ 366.645154][T10201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.645171][T10201] RSP: 002b:00007f8b4bdc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.645189][T10201] RAX: ffffffffffffffda RBX: 00007f8b4b216090 RCX: 00007f8b4af9c819 [ 366.645200][T10201] RDX: 0000000000000000 RSI: 000000008004500b RDI: 0000000000000003 [ 366.645210][T10201] RBP: 00007f8b4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 366.645220][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.645230][T10201] R13: 00007f8b4b216128 R14: 00007f8b4b216090 R15: 00007ffd59df0fc8 [ 366.645252][T10201] [ 367.927597][T10212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.848'. [ 368.066773][T10061] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 368.505011][T10212] veth0_macvtap: left promiscuous mode [ 368.601894][T10212] macvtap0: entered promiscuous mode [ 368.651141][T10212] macvtap0: entered allmulticast mode [ 373.966202][ T30] audit: type=1804 audit(1775261064.381:6): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.865" name="file0" dev="tmpfs" ino=1179 res=1 errno=0 [ 377.463062][ T30] audit: type=1800 audit(1775261067.869:7): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.877" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 377.606262][ T30] audit: type=1804 audit(1775261067.919:8): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.875" name="file0" dev="tmpfs" ino=871 res=1 errno=0 [ 378.812098][T10066] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 379.123582][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.137018][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.345057][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.884'. [ 383.227091][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 383.361768][ T30] audit: type=1804 audit(1775261073.776:9): pid=10410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.889" name="/newroot/204/file0" dev="tmpfs" ino=1096 res=1 errno=0 [ 383.571853][ T30] audit: type=1326 audit(1775261073.986:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.1.894" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74f619c819 code=0x0 [ 384.321813][T10442] Setting dangerous option i915.mitigations - tainting kernel [ 384.655328][T10445] Setting dangerous option i915.mitigations - tainting kernel [ 389.439068][T10500] futex_wake_op: syz.2.908 tries to shift op by -2048; fix this program [ 392.654481][T10538] kernel profiling enabled (shift: 1) [ 394.675441][T10560] netlink: NAT attribute has 4 unknown bytes [ 394.752919][T10561] netlink: 334 bytes leftover after parsing attributes in process `syz.2.923'. [ 398.903620][ T5916] Process accounting resumed [ 399.185092][T10639] Invalid ELF header magic: != ELF [ 400.345140][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.944'. [ 400.442503][T10652] ipvlan1: entered promiscuous mode [ 400.472806][T10652] ipvlan1: entered allmulticast mode [ 400.489296][T10652] veth0_vlan: entered allmulticast mode [ 401.616388][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 408.142047][T10772] FAULT_INJECTION: forcing a failure. [ 408.142047][T10772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.299982][T10772] CPU: 0 UID: 0 PID: 10772 Comm: syz.0.967 Tainted: G U L syzkaller #0 PREEMPT(full) [ 408.300017][T10772] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 408.300023][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 408.300034][T10772] Call Trace: [ 408.300040][T10772] [ 408.300047][T10772] dump_stack_lvl+0x100/0x190 [ 408.300080][T10772] should_fail_ex.cold+0x5/0xa [ 408.300103][T10772] _copy_from_user+0x2e/0xd0 [ 408.300128][T10772] restore_altstack+0x98/0x170 [ 408.300154][T10772] ? __pfx_restore_altstack+0x10/0x10 [ 408.300180][T10772] ? _raw_spin_unlock_irq+0x23/0x50 [ 408.300207][T10772] ? lockdep_hardirqs_on+0x78/0x100 [ 408.300226][T10772] ? _raw_spin_unlock_irq+0x2e/0x50 [ 408.300256][T10772] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 408.300280][T10772] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 408.300319][T10772] do_syscall_64+0x106/0xf80 [ 408.300338][T10772] ? clear_bhb_loop+0x40/0x90 [ 408.300360][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.300379][T10772] RIP: 0033:0x7f8b4af3db99 [ 408.300395][T10772] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 408.300412][T10772] RSP: 002b:00007f8b4bdc6a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 408.300430][T10772] RAX: ffffffffffffffda RBX: 00007f8b4b216090 RCX: 00007f8b4af3db99 [ 408.300442][T10772] RDX: 00007f8b4bdc6a80 RSI: 00007f8b4bdc6bb0 RDI: 0000000000000011 [ 408.300452][T10772] RBP: 00007f8b4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 408.300469][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.300479][T10772] R13: 00007f8b4b216128 R14: 00007f8b4b216090 R15: 00007ffd59df0fc8 [ 408.300501][T10772] [ 409.035152][T10779] Invalid ELF header magic: != ELF [ 409.376420][T10783] netlink: 342 bytes leftover after parsing attributes in process `syz.1.971'. [ 411.159840][T10794] Invalid ELF header magic: != ELF [ 412.144793][T10810] __vm_enough_memory: pid: 10810, comm: syz.2.976, bytes: 4398046457856 not enough memory for the allocation [ 414.024467][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.980'. [ 416.249270][T10878] FAULT_INJECTION: forcing a failure. [ 416.249270][T10878] name fail_futex, interval 1, probability 0, space 0, times 0 [ 416.313377][T10878] CPU: 0 UID: 0 PID: 10878 Comm: syz.0.991 Tainted: G U L syzkaller #0 PREEMPT(full) [ 416.313409][T10878] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 416.313416][T10878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 416.313426][T10878] Call Trace: [ 416.313432][T10878] [ 416.313439][T10878] dump_stack_lvl+0x100/0x190 [ 416.313471][T10878] should_fail_ex.cold+0x5/0xa [ 416.313493][T10878] get_futex_key+0x1d2/0x1620 [ 416.313519][T10878] ? __pfx_get_futex_key+0x10/0x10 [ 416.313542][T10878] ? __fget_files+0x215/0x3d0 [ 416.313562][T10878] ? __fget_files+0x215/0x3d0 [ 416.313586][T10878] futex_wake+0xea/0x530 [ 416.313620][T10878] ? __pfx_futex_wake+0x10/0x10 [ 416.313648][T10878] ? __sys_sendmmsg+0x367/0x430 [ 416.313688][T10878] ? __pfx___sys_sendmmsg+0x10/0x10 [ 416.313721][T10878] do_futex+0x32b/0x350 [ 416.313746][T10878] ? __pfx_do_futex+0x10/0x10 [ 416.313776][T10878] __x64_sys_futex+0x34f/0x4d0 [ 416.313804][T10878] ? __pfx___x64_sys_futex+0x10/0x10 [ 416.313838][T10878] do_syscall_64+0x106/0xf80 [ 416.313856][T10878] ? clear_bhb_loop+0x40/0x90 [ 416.313878][T10878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.313896][T10878] RIP: 0033:0x7f8b4af9c819 [ 416.313911][T10878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.313928][T10878] RSP: 002b:00007f8b4bde80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 416.313945][T10878] RAX: ffffffffffffffda RBX: 00007f8b4b215fa8 RCX: 00007f8b4af9c819 [ 416.313956][T10878] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8b4b215fac [ 416.313966][T10878] RBP: 00007f8b4b215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 416.313977][T10878] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 416.313987][T10878] R13: 00007f8b4b216038 R14: 00007ffd59df0ee0 R15: 00007ffd59df0fc8 [ 416.314009][T10878] [ 422.135714][T10948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1010'. [ 422.178281][T10948] bridge_slave_1: left allmulticast mode [ 422.204629][T10948] bridge_slave_1: left promiscuous mode [ 422.235958][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.298065][T10948] bridge_slave_0: left allmulticast mode [ 422.322956][T10948] bridge_slave_0: left promiscuous mode [ 422.351997][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.193163][T10979] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 424.257127][T10979] cec cec26: uevent: failed to send synthetic uevent: -22 Ijn9_UVQ8j@:Un M%[ 427.942163][T11048] FAULT_INJECTION: forcing a failure. [ 427.942163][T11048] name fail_futex, interval 1, probability 0, space 0, times 0 [ 428.000028][T11048] CPU: 0 UID: 0 PID: 11048 Comm: syz.0.1030 Tainted: G U L syzkaller #0 PREEMPT(full) [ 428.000059][T11048] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 428.000066][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 428.000076][T11048] Call Trace: [ 428.000082][T11048] [ 428.000089][T11048] dump_stack_lvl+0x100/0x190 [ 428.000121][T11048] should_fail_ex.cold+0x5/0xa [ 428.000143][T11048] get_futex_key+0x1d2/0x1620 [ 428.000168][T11048] ? __pfx_get_futex_key+0x10/0x10 [ 428.000191][T11048] ? do_mmap+0x93f/0x12f0 [ 428.000211][T11048] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 428.000236][T11048] futex_wake+0xea/0x530 [ 428.000266][T11048] ? __pfx_futex_wake+0x10/0x10 [ 428.000304][T11048] do_futex+0x32b/0x350 [ 428.000337][T11048] ? __pfx_do_futex+0x10/0x10 [ 428.000363][T11048] ? fput+0x79/0x100 [ 428.000386][T11048] __x64_sys_futex+0x34f/0x4d0 [ 428.000411][T11048] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 428.000432][T11048] ? __pfx___x64_sys_futex+0x10/0x10 [ 428.000464][T11048] do_syscall_64+0x106/0xf80 [ 428.000482][T11048] ? clear_bhb_loop+0x40/0x90 [ 428.000504][T11048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.000523][T11048] RIP: 0033:0x7f8b4af9c819 [ 428.000538][T11048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.000554][T11048] RSP: 002b:00007f8b4bde80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 428.000572][T11048] RAX: ffffffffffffffda RBX: 00007f8b4b215fa8 RCX: 00007f8b4af9c819 [ 428.000583][T11048] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8b4b215fac [ 428.000593][T11048] RBP: 00007f8b4b215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 428.000604][T11048] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 428.000614][T11048] R13: 00007f8b4b216038 R14: 00007ffd59df0ee0 R15: 00007ffd59df0fc8 [ 428.000637][T11048] [ 431.278372][ T6105] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 433.267572][T11104] tipc: Started in network mode [ 433.305152][T11104] tipc: Node identity ffffffff, cluster identity 4711 [ 433.334592][T11104] tipc: Node number set to 4294967295 [ 434.835746][T11125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'. [ 435.126394][T11131] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1050'. [ 435.398964][T11125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.500617][T11125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.558291][T11125] bond0 (unregistering): Released all slaves [ 436.847982][T11167] NFSD: Failed to start, no listeners configured. [ 440.593863][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.600447][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.280927][ T5831] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 446.724186][T11271] bridge0: port 3(team0) entered blocking state [ 446.814698][T11271] bridge0: port 3(team0) entered disabled state [ 446.836268][T11271] team0: entered allmulticast mode [ 446.874126][T11271] team_slave_0: entered allmulticast mode [ 446.879887][T11271] team_slave_1: entered allmulticast mode [ 446.930685][T11271] team0: entered promiscuous mode [ 446.951284][T11271] team_slave_0: entered promiscuous mode [ 446.979131][T11271] team_slave_1: entered promiscuous mode [ 447.004824][T11271] bridge0: port 3(team0) entered blocking state [ 447.011403][T11271] bridge0: port 3(team0) entered forwarding state [ 452.777532][ T6105] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 453.652826][ T30] audit: type=1804 audit(1775261144.021:11): pid=11441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1115" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=25 res=1 errno=0 [ 454.952238][T11457] Setting dangerous option i915.mitigations - tainting kernel [ 455.065919][T11460] netlink: 'syz.4.1120': attribute type 19 has an invalid length. [ 455.125074][T11460] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1120'. [ 461.471260][T11582] : entered promiscuous mode [ 461.772917][T11591] Invalid ELF header magic: != ELF [ 462.652779][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 463.893566][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 464.561179][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1153'. [ 465.561524][T11630] kexec: Could not allocate control_code_buffer [ 466.680624][T11667] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1163'. [ 474.246719][T11799] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1192'. [ 475.557424][T11829] delete_channel: no stack [ 475.737114][T11840] openvswitch: netlink: Message has 8 unknown bytes. [ 477.054767][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 477.150507][T11867] can: request_module (can-proto-0) failed. [ 478.511086][T11912] NFSD: Failed to start, no listeners configured. [ 484.483429][T12078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1254'. [ 484.548694][T12062] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1253'. [ 484.651288][T12062] Setting dangerous option i915.mitigations - tainting kernel [ 486.941724][T12126] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 487.271460][T12136] netlink: 'syz.0.1267': attribute type 27 has an invalid length. [ 487.309361][T12136] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1267'. [ 489.173724][T12155] vivid-003: ================= START STATUS ================= [ 489.181709][T12155] vivid-003: Radio HW Seek Mode: Bounded [ 489.228187][T12155] vivid-003: Radio Programmable HW Seek: false [ 489.257791][T12155] vivid-003: RDS Rx I/O Mode: Block I/O [ 489.283089][T12155] vivid-003: Generate RBDS Instead of RDS: false [ 489.322385][T12155] vivid-003: RDS Reception: true [ 489.327491][T12155] vivid-003: RDS Program Type: 0 inactive [ 489.392404][T12155] vivid-003: RDS PS Name: inactive [ 489.397661][T12155] vivid-003: RDS Radio Text: inactive [ 489.422640][T12155] vivid-003: RDS Traffic Announcement: false inactive [ 489.429462][T12155] vivid-003: RDS Traffic Program: false inactive [ 489.516546][T12155] vivid-003: RDS Music: false inactive [ 489.552497][T12155] vivid-003: ================== END STATUS ================== [ 491.686342][T12185] Invalid ELF header magic: != ELF [ 493.605723][T12214] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 498.171328][ T5831] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 501.305696][T12372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1328'. [ 502.064727][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.071399][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.714013][T12416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1341'. [ 504.454403][T12404] __vm_enough_memory: pid: 12404, comm: syz.0.1338, bytes: 4398046511104 not enough memory for the allocation [ 505.538552][T12455] netlink: 672 bytes leftover after parsing attributes in process `syz.4.1351'. [ 505.968776][T12462] Setting dangerous option i915.mitigations - tainting kernel [ 507.272739][T12493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1360'. [ 507.315818][T12495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1360'. [ 507.883988][T12514] Setting dangerous option i915.mitigations - tainting kernel [ 507.896753][T12302] Bluetooth: hci0: unknown advertising packet type: 0xea [ 508.064309][T12517] netlink: 266 bytes leftover after parsing attributes in process `syz.1.1366'. [ 512.460351][T12621] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1384'. [ 513.596210][T12638] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1389'. [ 516.595693][T12696] zswap: compressor not available [ 517.656580][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1408'. [ 518.333097][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1410'. [ 521.123549][T12774] nbd: must specify a device to reconfigure [ 521.496430][T12796] futex_wake_op: syz.0.1425 tries to shift op by -2048; fix this program [ 521.546578][T12796] random: crng reseeded on system resumption [ 521.816820][T12803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1426'. [ 521.946959][T12811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1429'. [ 521.993336][T12811] veth0_macvtap: left promiscuous mode [ 522.011240][T12812] futex_wake_op: syz.4.1428 tries to shift op by -2048; fix this program [ 522.037462][T12811] macvtap0: entered promiscuous mode [ 522.046882][T12811] macvtap0: entered allmulticast mode [ 522.153339][T12812] futex_wake_op: syz.4.1428 tries to shift op by -2048; fix this program [ 522.433173][T12820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1432'. [ 525.761303][T12906] netlink: 346 bytes leftover after parsing attributes in process `syz.4.1448'. [ 525.944035][T12906] block nbd2: not configured, cannot reconfigure [ 527.396531][T12931] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1454'. [ 527.632303][T12941] futex_wake_op: syz.2.1456 tries to shift op by -2048; fix this program [ 527.681952][T12941] futex_wake_op: syz.2.1456 tries to shift op by -2048; fix this program [ 527.813891][T12945] futex_wake_op: syz.2.1456 tries to shift op by -2048; fix this program [ 527.987578][ T36] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 529.866820][T12982] futex_wake_op: syz.4.1464 tries to shift op by -2048; fix this program [ 532.297232][T13001] NFSD: Failed to start, no listeners configured. [ 535.894793][T13047] futex_wake_op: syz.2.1474 tries to shift op by -2048; fix this program [ 536.025498][T13047] futex_wake_op: syz.2.1474 tries to shift op by -2048; fix this program [ 541.549241][T13108] netlink: 74 bytes leftover after parsing attributes in process `syz.4.1488'. [ 541.787318][T12302] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 541.795888][T12302] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 542.926539][T13131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1492'. [ 543.502609][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 544.233312][T13159] base or size exceeds the MTRR width [ 548.057428][T13212] Invalid ELF header magic: != ELF [ 550.626451][T13221] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 551.095415][T13226] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1515'. [ 553.199613][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 561.668794][T13394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1550'. [ 561.774664][T13394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.833881][T13394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.960690][T13394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.003649][T13394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.100472][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 562.929897][T13426] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1557'. [ 563.535099][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.543052][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.323994][T13455] lo: entered allmulticast mode [ 564.352063][T13455] lo: left allmulticast mode [ 566.940915][T13496] can: request_module (can-proto-0) failed. [ 568.168055][T13511] __vm_enough_memory: pid: 13511, comm: syz.2.1581, bytes: 4398046511104 not enough memory for the allocation [ 571.121816][T13568] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1593'. [ 573.768969][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 576.036166][T13632] Unable to find swap-space signature [ 580.054413][T13703] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1617'. [ 580.357924][T13709] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1619'. [ 582.109481][T13726] zswap: compressor not available [ 582.148545][T13734] Setting dangerous option i915.mitigations - tainting kernel [ 582.372605][T13743] netlink: 'syz.4.1626': attribute type 19 has an invalid length. [ 582.505238][T13743] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1626'. [ 582.834931][ T30] audit: type=1800 audit(1775261273.136:12): pid=13749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1627" name="dbroot" dev="configfs" ino=41444 res=0 errno=0 [ 583.619188][T13761] futex_wake_op: syz.1.1630 tries to shift op by -2048; fix this program [ 583.687546][T13761] futex_wake_op: syz.1.1630 tries to shift op by -2048; fix this program [ 583.996698][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'. [ 587.295411][ T7759] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 588.303157][T13863] netlink: 'syz.1.1651': attribute type 2 has an invalid length. [ 588.518887][T13868] can: request_module (can-proto-0) failed. [ 588.871293][T13885] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 590.007527][T13900] openvswitch: netlink: Multiple metadata blocks provided [ 591.092282][T13934] program syz.0.1666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.287380][T13940] capability: warning: `syz.4.1668' uses 32-bit capabilities (legacy support in use) [ 595.985682][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1684'. [ 595.996604][T14009] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1683'. [ 596.255951][T14007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.336862][T14007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.404015][T14007] bond0 (unregistering): Released all slaves [ 597.112528][T14028] smc: net device dummy0 erased user defined pnetid DUMMY0 [ 597.777560][T14041] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 601.552752][T14093] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 601.646957][T14095] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1704'. [ 601.820083][T14105] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1704'. [ 603.011177][T14119] futex_wake_op: syz.1.1708 tries to shift op by -2048; fix this program [ 603.140002][T14119] futex_wake_op: syz.1.1708 tries to shift op by -2048; fix this program [ 603.286528][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'. [ 604.975267][T14146] Unable to find swap-space signature [ 610.911729][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 616.258984][ T6104] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 625.000433][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.007892][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.313130][T12302] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 625.337683][T12302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 625.361293][T12302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 625.373073][T12302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 625.380598][T12302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 627.471414][ T5144] Bluetooth: hci3: command tx timeout [ 627.670220][ T77] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.267271][ T77] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.581216][T14431] chnl_net:caif_netlink_parms(): no params data found [ 628.696865][ T77] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.839513][ T77] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.039774][ T77] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.130091][ T5144] Bluetooth: Frame is too long (len 122, expected len 4) [ 629.552904][ T5144] Bluetooth: hci3: command tx timeout [ 629.644771][T14431] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.669977][T14431] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.690678][T14431] bridge_slave_0: entered allmulticast mode [ 629.707004][T14431] bridge_slave_0: entered promiscuous mode [ 629.744269][T14431] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.785604][T14431] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.817161][T14431] bridge_slave_1: entered allmulticast mode [ 629.860481][T14431] bridge_slave_1: entered promiscuous mode [ 629.895619][ T77] bridge_slave_1: left allmulticast mode [ 629.904990][ T77] bridge_slave_1: left promiscuous mode [ 629.932535][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.951514][ T77] bridge_slave_0: left allmulticast mode [ 629.974880][ T77] bridge_slave_0: left promiscuous mode [ 629.993922][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.686479][ T77] ovs_: left promiscuous mode [ 630.808176][T14431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.851204][ T77] : left promiscuous mode [ 631.008426][T14431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.095943][ T77] tipc: Left network mode [ 631.211650][T14431] team0: Port device team_slave_0 added [ 631.255692][T14431] team0: Port device team_slave_1 added [ 631.379858][T14431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.413323][T14431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.533120][T14431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.598616][T14431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.622174][T14431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.656128][ T5144] Bluetooth: hci3: command tx timeout [ 631.709095][T14431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.015785][T14431] hsr_slave_0: entered promiscuous mode [ 632.054965][T14431] hsr_slave_1: entered promiscuous mode [ 632.091664][T14431] debugfs: 'hsr0' already exists in 'hsr' [ 632.113186][T14431] Cannot create hsr debugfs directory [ 632.259092][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'. [ 632.833467][ T77] hsr_slave_0: left promiscuous mode [ 632.922594][ T77] hsr_slave_1: left promiscuous mode [ 632.952628][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.997392][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.086322][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.123587][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.179110][ T77] veth1_macvtap: left promiscuous mode [ 633.202766][ T77] veth1_vlan: left promiscuous mode [ 633.228749][ T77] veth0_vlan: left promiscuous mode [ 633.715405][ T5144] Bluetooth: hci3: command tx timeout [ 633.938806][ T77] team0 (unregistering): Port device team_slave_1 removed [ 633.988308][ T77] team0 (unregistering): Port device team_slave_0 removed [ 635.003416][T14431] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 635.094356][T14431] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 635.234310][T14431] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 635.319317][T14431] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 636.177091][T14431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.248638][T14431] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.286038][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.293272][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.359864][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.367276][ T6112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.104247][T14636] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1813'. [ 637.228772][T14431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.818678][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 638.221048][T14676] block nbd7: not configured, cannot reconfigure [ 638.301390][T14431] veth0_vlan: entered promiscuous mode [ 638.355665][T14431] veth1_vlan: entered promiscuous mode [ 638.495298][T14431] veth0_macvtap: entered promiscuous mode [ 638.572611][T14431] veth1_macvtap: entered promiscuous mode [ 638.650755][T14431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.704931][T14431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.753744][ T6113] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.789215][ T6113] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.845231][ T6113] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.881198][ T6113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.113143][ T6112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.169144][ T6112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.285350][ T6112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.326992][ T6112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.413053][ T30] audit: type=1800 audit(1775262352.687:13): pid=14692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1820" name="lu_gp_id" dev="configfs" ino=46434 res=0 errno=0 [ 639.817755][T14711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1823'. [ 640.688856][T14732] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b1215a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 640.704955][T14732] Call Trace: [ 640.708267][T14732] [ 640.711238][T14732] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 640.717962][T14732] ? irqentry_exit+0x180/0x670 [ 640.722753][T14732] ? lockdep_hardirqs_on+0x78/0x100 [ 640.728063][T14732] mce_cpu_restart+0xd5/0x1f0 [ 640.732761][T14732] ? __pfx_mce_cpu_restart+0x10/0x10 [ 640.738224][T14732] smp_call_function_many_cond+0x11fc/0x1500 [ 640.744340][T14732] ? __pfx_mce_cpu_restart+0x10/0x10 [ 640.750093][T14732] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 640.756448][T14732] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 640.762355][T14732] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 640.768843][T14732] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 640.774938][T14732] ? __timer_delete_sync+0x151/0x1c0 [ 640.780291][T14732] ? __pfx_mce_cpu_restart+0x10/0x10 [ 640.785619][T14732] on_each_cpu_cond_mask+0x40/0x90 [ 640.790745][T14732] set_bank+0x240/0x3a0 [ 640.794932][T14732] ? __pfx_set_bank+0x10/0x10 [ 640.799633][T14732] ? find_held_lock+0x2b/0x80 [ 640.804315][T14732] ? sysfs_file_kobj+0xe4/0x290 [ 640.809362][T14732] ? sysfs_file_kobj+0xe4/0x290 [ 640.814358][T14732] ? __pfx_set_bank+0x10/0x10 [ 640.819366][T14732] dev_attr_store+0x58/0x80 [ 640.823998][T14732] ? __pfx_dev_attr_store+0x10/0x10 [ 640.829245][T14732] sysfs_kf_write+0xf2/0x150 [ 640.833907][T14732] kernfs_fop_write_iter+0x3e0/0x5f0 [ 640.839298][T14732] ? __pfx_sysfs_kf_write+0x10/0x10 [ 640.844543][T14732] vfs_write+0x6ac/0x1070 [ 640.849112][T14732] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 640.854948][T14732] ? __pfx_vfs_write+0x10/0x10 [ 640.859762][T14732] ksys_write+0x12a/0x250 [ 640.864391][T14732] ? __pfx_ksys_write+0x10/0x10 [ 640.869275][T14732] do_syscall_64+0x106/0xf80 [ 640.873969][T14732] ? clear_bhb_loop+0x40/0x90 [ 640.878665][T14732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.884916][T14732] RIP: 0033:0x7f8b4af9c819 [ 640.889340][T14732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.909927][T14732] RSP: 002b:00007f8b4bde8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 640.918581][T14732] RAX: ffffffffffffffda RBX: 00007f8b4b215fa0 RCX: 00007f8b4af9c819 [ 640.927019][T14732] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000006 [ 640.935551][T14732] RBP: 00007f8b4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 640.943628][T14732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.951689][T14732] R13: 00007f8b4b216038 R14: 00007f8b4b215fa0 R15: 00007ffd59df0fc8 [ 640.959848][T14732] [ 642.116987][ T6113] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 646.534035][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1847'. [ 647.201536][T14817] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 647.376125][T14817] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 647.820956][T14817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 647.881502][T14817] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 647.964886][T14817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 648.060168][T14817] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 648.241472][T14817] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 648.369637][T14839] binder: 14835:14839 ioctl c00c620f 2000000001c0 returned -22 [ 649.244445][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 649.871883][T14883] ================================================================== [ 649.871898][T14883] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 649.871941][T14883] Write of size 8 at addr ffffc90004319360 by task syz.0.1859/14883 [ 649.871957][T14883] [ 649.871968][T14883] CPU: 0 UID: 0 PID: 14883 Comm: syz.0.1859 Tainted: G U L syzkaller #0 PREEMPT(full) [ 649.871995][T14883] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 649.872002][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 649.872014][T14883] Call Trace: [ 649.872021][T14883] [ 649.872029][T14883] dump_stack_lvl+0x100/0x190 [ 649.872057][T14883] print_report+0x156/0x4c9 [ 649.872082][T14883] ? _raw_spin_lock_irqsave+0x52/0x60 [ 649.872110][T14883] ? __virt_addr_valid+0x81/0x620 [ 649.872136][T14883] ? sys_imageblit+0x19fb/0x1d60 [ 649.872163][T14883] kasan_report+0xdf/0x1e0 [ 649.872189][T14883] ? sys_imageblit+0x19fb/0x1d60 [ 649.872219][T14883] sys_imageblit+0x19fb/0x1d60 [ 649.872249][T14883] ? __pfx_sys_imageblit+0x10/0x10 [ 649.872277][T14883] ? prb_read_valid+0x78/0xa0 [ 649.872302][T14883] ? __pfx_prb_read_valid+0x10/0x10 [ 649.872329][T14883] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 649.872351][T14883] soft_cursor+0x524/0xa10 [ 649.872376][T14883] ? fb_get_color_depth+0x120/0x250 [ 649.872399][T14883] bit_cursor+0xe58/0x16f0 [ 649.872425][T14883] ? __pfx_bit_cursor+0x10/0x10 [ 649.872448][T14883] ? __lock_acquire+0x4a5/0x2630 [ 649.872474][T14883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 649.872494][T14883] ? get_color+0x1da/0x450 [ 649.872512][T14883] ? __pfx_bit_cursor+0x10/0x10 [ 649.872534][T14883] fbcon_cursor+0x43c/0x5e0 [ 649.872554][T14883] ? add_softcursor+0x200/0x290 [ 649.872580][T14883] set_cursor+0x1db/0x250 [ 649.872605][T14883] con_write+0x89/0xb0 [ 649.872621][T14883] n_tty_write+0x44f/0x12d0 [ 649.872646][T14883] ? __pfx_n_tty_write+0x10/0x10 [ 649.872667][T14883] ? __pfx_woken_wake_function+0x10/0x10 [ 649.872696][T14883] ? __pfx___might_resched+0x10/0x10 [ 649.872725][T14883] ? __pfx_n_tty_write+0x10/0x10 [ 649.872746][T14883] file_tty_write.isra.0+0x4d2/0x890 [ 649.872777][T14883] redirected_tty_write+0xd4/0x120 [ 649.872806][T14883] vfs_write+0x6ac/0x1070 [ 649.872824][T14883] ? __pfx_redirected_tty_write+0x10/0x10 [ 649.872854][T14883] ? __pfx_vfs_write+0x10/0x10 [ 649.872870][T14883] ? find_held_lock+0x2b/0x80 [ 649.872893][T14883] ksys_write+0x12a/0x250 [ 649.872910][T14883] ? __pfx_ksys_write+0x10/0x10 [ 649.872936][T14883] do_syscall_64+0x106/0xf80 [ 649.872954][T14883] ? clear_bhb_loop+0x40/0x90 [ 649.872974][T14883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.872994][T14883] RIP: 0033:0x7f8b4af9c819 [ 649.873009][T14883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.873027][T14883] RSP: 002b:00007f8b4bda6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 649.873045][T14883] RAX: ffffffffffffffda RBX: 00007f8b4b216180 RCX: 00007f8b4af9c819 [ 649.873057][T14883] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 649.873068][T14883] RBP: 00007f8b4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 649.873079][T14883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.873089][T14883] R13: 00007f8b4b216218 R14: 00007f8b4b216180 R15: 00007ffd59df0fc8 [ 649.873109][T14883] [ 649.873117][T14883] [ 649.873124][T14883] The buggy address belongs to a vmalloc virtual mapping [ 649.873139][T14883] Memory state around the buggy address: [ 649.873148][T14883] ffffc90004319200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 649.873162][T14883] ffffc90004319280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 649.873174][T14883] >ffffc90004319300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 649.873184][T14883] ^ [ 649.873194][T14883] ffffc90004319380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 649.873207][T14883] ffffc90004319400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 649.873216][T14883] ================================================================== [ 649.882466][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 649.963909][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout [ 649.963960][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 649.983457][T14883] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 649.983479][T14883] CPU: 0 UID: 0 PID: 14883 Comm: syz.0.1859 Tainted: G U L syzkaller #0 PREEMPT(full) [ 649.983508][T14883] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 649.983515][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 649.983526][T14883] Call Trace: [ 649.983533][T14883] [ 649.983540][T14883] dump_stack_lvl+0x100/0x190 [ 649.983572][T14883] vpanic+0x552/0x970 [ 649.983589][T14883] ? __pfx_vpanic+0x10/0x10 [ 649.983609][T14883] ? sys_imageblit+0x19fb/0x1d60 [ 649.983637][T14883] panic+0xd1/0xe0 [ 649.983653][T14883] ? __pfx_panic+0x10/0x10 [ 649.983671][T14883] ? sys_imageblit+0x19fb/0x1d60 [ 649.983698][T14883] ? preempt_schedule_common+0x42/0xc0 [ 649.983729][T14883] ? check_panic_on_warn+0x1f/0x90 [ 649.983757][T14883] check_panic_on_warn.cold+0x19/0x34 [ 649.983777][T14883] end_report.part.0+0x3a/0x90 [ 649.983802][T14883] kasan_report.cold+0xe/0x18 [ 649.983828][T14883] ? sys_imageblit+0x19fb/0x1d60 [ 649.983858][T14883] sys_imageblit+0x19fb/0x1d60 [ 649.983889][T14883] ? __pfx_sys_imageblit+0x10/0x10 [ 649.983918][T14883] ? prb_read_valid+0x78/0xa0 [ 649.983943][T14883] ? __pfx_prb_read_valid+0x10/0x10 [ 649.983975][T14883] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 649.983997][T14883] soft_cursor+0x524/0xa10 [ 649.984023][T14883] ? fb_get_color_depth+0x120/0x250 [ 649.984046][T14883] bit_cursor+0xe58/0x16f0 [ 649.984071][T14883] ? __pfx_bit_cursor+0x10/0x10 [ 649.984094][T14883] ? __lock_acquire+0x4a5/0x2630 [ 649.984120][T14883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 649.984140][T14883] ? get_color+0x1da/0x450 [ 649.984159][T14883] ? __pfx_bit_cursor+0x10/0x10 [ 649.984181][T14883] fbcon_cursor+0x43c/0x5e0 [ 649.984202][T14883] ? add_softcursor+0x200/0x290 [ 649.984228][T14883] set_cursor+0x1db/0x250 [ 649.984252][T14883] con_write+0x89/0xb0 [ 649.984268][T14883] n_tty_write+0x44f/0x12d0 [ 649.984293][T14883] ? __pfx_n_tty_write+0x10/0x10 [ 649.984315][T14883] ? __pfx_woken_wake_function+0x10/0x10 [ 649.984345][T14883] ? __pfx___might_resched+0x10/0x10 [ 649.984374][T14883] ? __pfx_n_tty_write+0x10/0x10 [ 649.984395][T14883] file_tty_write.isra.0+0x4d2/0x890 [ 649.984426][T14883] redirected_tty_write+0xd4/0x120 [ 649.984456][T14883] vfs_write+0x6ac/0x1070 [ 649.984473][T14883] ? __pfx_redirected_tty_write+0x10/0x10 [ 649.984508][T14883] ? __pfx_vfs_write+0x10/0x10 [ 649.984524][T14883] ? find_held_lock+0x2b/0x80 [ 649.984547][T14883] ksys_write+0x12a/0x250 [ 649.984564][T14883] ? __pfx_ksys_write+0x10/0x10 [ 649.984585][T14883] do_syscall_64+0x106/0xf80 [ 649.984602][T14883] ? clear_bhb_loop+0x40/0x90 [ 649.984623][T14883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.984641][T14883] RIP: 0033:0x7f8b4af9c819 [ 649.984656][T14883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.984676][T14883] RSP: 002b:00007f8b4bda6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 649.984694][T14883] RAX: ffffffffffffffda RBX: 00007f8b4b216180 RCX: 00007f8b4af9c819 [ 649.984707][T14883] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 649.984718][T14883] RBP: 00007f8b4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 649.984729][T14883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.984740][T14883] R13: 00007f8b4b216218 R14: 00007f8b4b216180 R15: 00007ffd59df0fc8 [ 649.984756][T14883] [ 649.984818][T14883] Kernel Offset: disabled