last executing test programs: 4m4.215127572s ago: executing program 1 (id=31): socket(0x2a, 0x2, 0x6) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0xfffffff9, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) accept$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x40006, 0x4, 0x9b72, 0x7, 0x28000) eventfd$auto(0x4) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001040)={0x80, 0x8, 0x304, 0xea, 0x101, 0x6, &(0x7f00000001c0)}) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4004af07, r3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sendmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0xc4, 0x7f}, 0x800}, 0x4, 0x4008) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\\\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') 4m2.715806194s ago: executing program 1 (id=36): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0xa, 0x0, 0x4) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x40000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r1) write$auto(0x3, 0x0, 0xfffffdef) 4m2.29939919s ago: executing program 1 (id=38): select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9b, 0x9, 0xd, 0x250, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xf6d, 0x21, 0x100000005]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x20000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) mmap$auto(0x2, 0xfffffffffffffffd, 0x400, 0x1d, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x55) r0 = socket(0xa, 0x2, 0x8) r1 = socketpair$auto(0x6, 0x4, 0x7, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5c8) write$auto(0xffffffffffffffff, 0x0, 0x8000000000b) close_range$auto(r0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0xb3) close_range$auto(r1, r1, 0x3) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) timer_settime$auto(0xde66, 0xffff8000, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 4m1.234900323s ago: executing program 1 (id=39): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) fsopen$auto(0x0, 0x1) prctl$auto(0x38, 0x3, r0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) setsockopt$auto(r4, 0x100, 0x5, &(0x7f0000000040)='#)@$$:]+)]\x00', 0x8001) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) unshare$auto(0x2000000000000003) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_STATION(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x3c, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "5256441b633b87bba3bd6e38e194879ade12e8512ef3ab6a65fae7f2ee80ef36de7ef6f3"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) 3m57.03519154s ago: executing program 1 (id=46): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0x2d, 0x2, 0x0) connect$auto(0x3, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e12906ac249866027b483", @ANYRES32, @ANYRES32, @ANYBLOB="9f6f9a91c108436233cec9df3a1f33f8748ad7d764a5d96d1096f6221f28cc8e37ab90f95fd2d82f4f8427348007ccde6960b832de9033339fef7502841f5d329d61bd933597f0af4505a985574f17ba2f5806f2524b7e7d048f628624ccbc756e76f3ff4861530706467b47a0f93329815523eb6695bf0a07a96b4a3607ce02180c1bf6e1cb2d8fe5860aaa30114d39aa62eef625a901a9666b75b8e775f1a55461f3d4801be1fbf361b41e25bf4cdc62079e99415377cd"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = socket(0x18, 0xa, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) mmap$auto(0x9, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x202, 0x0) r3 = prctl$auto_PR_SET_MM_START_CODE(0x9, 0x1, 0xffffffffffffffff, 0x6, 0x9) ioctl$auto_FIOCLEX(r3, 0x5451, 0x5) fchdir$auto(0xffffffffffffffff) mremap$auto(0x0, 0x4, 0x4, 0xb, 0x100000000) r4 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000080)={{@raw=0x2, 0x7ff, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @raw=0x4}, 0xfffffffc, 0x3, 0x2, @inferred=r4, @reserved="e42e90ddb38d869b175d1b915c3c90cfd5432f78273fc67b86715fff21e5342cc3a7550bc2405c792781bf6cd12930c8402b9d2e8bb6104f5ead0c47d1a03d7c4cc761b890222e94d3fb0110709206a1080de0b7db3cce39e1c658e4ee09398fc9bd8230314d8c821eb56b017c132c8c40b87e3ff6fceb67f0e99c156f0e2d44", "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x10000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r1, 0x300000000000) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x8, 0x400008, 0x28, 0x10, 0xffffffffffffffff, 0x3fd) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x6, 0x2) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20443, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) 3m54.066974665s ago: executing program 1 (id=52): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x8fffffffffd, 0xed5a, r0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r1, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x100480, 0x0) personality$auto(0x40004010410ffc) mmap$auto(0x5, 0x2020009, 0x3, 0x411, 0xffffffffffffffff, 0x8003) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'wg0\x00'}) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={r2, @new_prog_fd=r1, 0x2, @old_map_fd=r0}, 0xf) bpf$auto(0x4, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x3ff, 0x8}, 0x9) ioctl$auto_TIOCMSET2(r3, 0x5418, 0x0) ioctl$auto(0x3, 0x5420, 0x38) ioctl$auto(0x3, 0x5404, 0x38) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x17fffffffefff}, 0x200000000007) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x5) ioctl$auto_TIOCGICOUNT2(r2, 0x545d, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x230902, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 3m38.940629683s ago: executing program 32 (id=52): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x8fffffffffd, 0xed5a, r0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r1, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x100480, 0x0) personality$auto(0x40004010410ffc) mmap$auto(0x5, 0x2020009, 0x3, 0x411, 0xffffffffffffffff, 0x8003) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'wg0\x00'}) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={r2, @new_prog_fd=r1, 0x2, @old_map_fd=r0}, 0xf) bpf$auto(0x4, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x3ff, 0x8}, 0x9) ioctl$auto_TIOCMSET2(r3, 0x5418, 0x0) ioctl$auto(0x3, 0x5420, 0x38) ioctl$auto(0x3, 0x5404, 0x38) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x17fffffffefff}, 0x200000000007) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x5) ioctl$auto_TIOCGICOUNT2(r2, 0x545d, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x230902, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 1m44.509974827s ago: executing program 0 (id=536): r0 = userfaultfd$auto(0x1) read$auto_rng_chrdev_ops_core(r0, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/batadv_slave_1/promote_secondaries\x00', 0x40000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) r3 = pipe$auto(0x0) splice$auto(0x4, 0x0, r3, 0x0, 0x80000004, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/pcmC0D0p\x00', 0xc0942, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) r5 = epoll_create$auto(0x8) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) sendfile$auto(r1, r2, 0x0, 0x5) unshare$auto(0x1) r6 = socket(0xa, 0x1, 0x84) ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, &(0x7f0000000080)=0x1) getsockopt$auto(r6, 0x8, 0x56, 0x0, &(0x7f0000000040)=0x1000026) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)) r9 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_TDLS_OPER(r9, 0x0, 0x91) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r10, @ANYBLOB="00002dbd7000fedbdf2505000000e80003800800c200e000000204002a000400110008002e00", @ANYRES32=r9, @ANYRESHEX=0x0, @ANYRESDEC=r7, @ANYBLOB="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", @ANYRESHEX=r10, @ANYRESDEC=r0], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1m43.304314407s ago: executing program 0 (id=541): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x1) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdee) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) mprotect$auto(0x0, 0x8000000000000001, 0x8) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x10000, 0x1, 0x0, 0xc000000000000, 0x1000) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/udp_hash_entries\x00', 0x8000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x9, 0x0, [{0x40000118, 0x400}]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) bpf$auto(0x0, 0x0, 0x92) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) mmap$auto(0xfffffffffffffffd, 0x9, 0x3, 0x15, r5, 0x8004) socket(0xa, 0x80807, 0x0) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 1m41.70164408s ago: executing program 0 (id=547): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop14/mq/0/nr_tags\x00', 0x48380, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/86, 0x56) r1 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000000)=0x80000001) write$auto_drm_connector_fops_drm_debugfs(r1, &(0x7f00000001c0)="ef35cf46cef0f6a7eb012769305223a2b7677212c30800000000000000188aab00"/49, 0x31) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_AP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4850}, 0x4000000) getsockopt$auto(r1, 0x8, 0xb7a, &(0x7f0000000100)='\x00', &(0x7f0000000180)=0x86d) 1m40.862751299s ago: executing program 0 (id=552): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x6) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400a) 1m39.89863755s ago: executing program 0 (id=554): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}, 0x1, 0x0, 0x0, 0xa00}, 0x40000) 1m38.775644327s ago: executing program 0 (id=556): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyq5\x00', 0x200, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000040)=0xdd8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x29, 0x2, 0x0) ioctl$auto(r1, 0x89a1, 0x24) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcb, 0x0, 0x4) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123001, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x9, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x2000966, 0x3, @raw=0x403, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df576c85b023b6deb06dbb68aec3f51e29bcc8b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673e637f2f5fde573fa4d4328a9ea0be7eccec0adb4f642cbb53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"}) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x801, 0x0) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x6, 0xebf, 0xfffffffffffffffa, 0x8000) epoll_create$auto(0x2) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) 1m23.691213975s ago: executing program 33 (id=556): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyq5\x00', 0x200, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000040)=0xdd8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x29, 0x2, 0x0) ioctl$auto(r1, 0x89a1, 0x24) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcb, 0x0, 0x4) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123001, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x9, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x2000966, 0x3, @raw=0x403, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df576c85b023b6deb06dbb68aec3f51e29bcc8b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673e637f2f5fde573fa4d4328a9ea0be7eccec0adb4f642cbb53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"}) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x801, 0x0) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x6, 0xebf, 0xfffffffffffffffa, 0x8000) epoll_create$auto(0x2) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) 1m3.706682473s ago: executing program 3 (id=649): r0 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/Writeback-1/output_bpc\x00', 0x101000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x8937, 0x24) (async) ioctl$auto_PPPIOCGIDLE64(r1, 0x8010743f, 0x0) (async) lseek$auto(r0, 0x7fffffffffffffff, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) (async) sendmsg$auto_NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x13c, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x102, 0xcd, "3caaafda5becec913020ac245eb810037fc2871260fc2e9fdac2e7a26269b9796f57496e9cf2cd3238a79a6c526fa9342e13add04cebd27699be0e96a2ad7c61471f6e1f705d45b57113d71bdcad1d1bdc7716368a78e9adfbf93855d73ff1ab2299c951492225614049ed4e09c84f03c225dd52f485257bbd183dbdd642eb2fea909a26b19e26b06fd417bf9f7ffa27d3ebb739cf469de98a28ca222dce511988d5d8bebc82383466ac59a2b91748c72dba781787395492c0476ae20446fd4c0a9b447e84cf953049b421ba8edd5708236c3500761e5b4b340e798c81b8d12bc1fe585a9e125f78f03bfc3b69f394a116fbdbb857180586e7f5ea51e194"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d658fd36e63808a50df55b3b18948aee45d5e3b6feabeb29"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) ioperm$auto(0x3, 0xe, 0x2000000000000149) ioctl$auto(r4, 0x7, r5) (async) close_range$auto(0x2, 0x8, 0x0) (async) r7 = socketcall$auto(0xa, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_CREATE_VM(r6, 0xae80, 0x0) (async) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) 1m2.786268217s ago: executing program 3 (id=650): unshare$auto(0x40000080) r0 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(r0, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffff9, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x5) r1 = clone$auto(0x20003b48, 0x2, 0x0, 0x0, 0x5) msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f0000000440)={{0xfffffff2, 0x0, 0xffffffffffffffff, 0x7f, 0x5, 0x4, 0x7}, &(0x7f0000000380)=0x2, &(0x7f0000000500), 0x9, 0x80, 0x7, 0x4, 0x0, 0x38, 0x0, 0x22f0, @inferred=r1, @inferred=r1}) fcntl$auto(0xffffffffffffffff, 0x9, r1) mmap$auto(0x0, 0x7, 0x6, 0x8012, 0x3, 0x8300f004) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x200007, 0x19) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0) r3 = semctl$auto(0x88a, 0x0, 0xfffffffa, 0x6) rt_tgsigqueueinfo$auto(0x0, r2, 0x7000000, &(0x7f0000000180)={@siginfo_0_0={0x5d, 0x5, 0xff, @_kill={r3}}}) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x309a00, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x20040804) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m1.469346598s ago: executing program 3 (id=655): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x20000080) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) r2 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40aa2, 0x0) r3 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000018c0), 0x55) setsockopt$auto(r3, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) io_uring_setup$auto(0x59, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0xfffffffffffeffff, 0xc, 0x1, 0x948d, 0x3, 0x15f4da0a, 0x3, 0x3, 0x60, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x4, 0x6]}, 0x0) write$auto(r1, &(0x7f0000000040)=',/*@\x00', 0xf2) ioctl$auto(r0, 0x7fffffff, r2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, 0x0, 0xa01, 0x70bd27, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_PID={0x8}, @TASKSTATS_CMD_ATTR_TGID={0x8}, @TASKSTATS_CMD_ATTR_TGID={0x8}, @TASKSTATS_CMD_ATTR_TGID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20000840) setfsuid$auto(0xee00) socket(0xa, 0x1, 0x0) socket(0x18, 0x3, 0x2) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) pread64$auto(r4, 0x0, 0x200000000003, 0x5511f446) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m0.125140399s ago: executing program 3 (id=658): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r0, 0x40095505, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0p/sub3/info\x00', 0x504c1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) pread64$auto(r1, 0x0, 0x202, 0x7) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) 59.685627953s ago: executing program 3 (id=659): mmap$auto(0x0, 0x20012, 0xdd, 0x20eb1, 0xffffffffffffffff, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg1\x00', 0x141000, 0x0) r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) writev$auto(r1, 0x0, 0x101) r2 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x54de82, 0x0) r3 = socket(0xa, 0x3, 0x5) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x143402, 0x0) write$auto(r4, &(0x7f0000000000)='[-%\x00', 0x200000000000003) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r5 = getpid() bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x800) process_vm_readv$auto(r5, 0x0, 0x1, &(0x7f0000000040)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) rename$auto(0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b49, 0x9) madvise$auto(0x2000, 0x20499d, 0x9) sendmmsg$auto(r3, &(0x7f0000000180)={{&(0x7f0000000040), 0xb5, 0x0, 0x0, 0x0, 0x8, 0x80000000}, 0x5}, 0x1, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) sendfile$auto(r2, r2, 0x0, 0x7ffc) r7 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0) r8 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r8, 0x4008af21, &(0x7f0000000100)={0x8, r0}) pwrite64$auto(r7, 0x0, 0x0, 0x3) 56.732485646s ago: executing program 3 (id=668): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) semctl$auto_SEM_STAT(0x0, 0x80000000, 0x12, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x1, 0x7fff, 0x0, 0x6, 0x8) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250800000014000400767863616e31000000000000000000000c0006000400000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0xffffffff, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r1, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) pipe2$auto(&(0x7f00000000c0)=r0, 0xfffffff7) mmap$auto(0x2, 0x400000000a00006, 0x1e, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200100, 0x0) write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) set_tid_address$auto(0x0) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="080226bd7000fedbdf2503000000040008000400038012000100898771f1c19f1779048590822ad9000070000380640044000552f6d3eda20877eaa488f35e11ba8a0f282980dbe3cbbc3ae8626202b952013306406fc8c07e75e2b9543cce22842b00bc15baf98d303611387eb632a3fd2a64bdcca4801999fa43f4b8b79a7274f6140a32756d90a14516d25c0cdc12a78308004900", @ANYRES32=0x0, @ANYBLOB="a48b741db3990256cc19e991767f5af75d26f798cef6613353fa225ab2b7c8193928ad6119"], 0xa0}, 0x1, 0x0, 0x0, 0x4040001}, 0x4800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1c, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000000080)='\x00\x00', 0x2) mmap$auto(0x4, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) 41.570387426s ago: executing program 34 (id=668): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) semctl$auto_SEM_STAT(0x0, 0x80000000, 0x12, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x1, 0x7fff, 0x0, 0x6, 0x8) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250800000014000400767863616e31000000000000000000000c0006000400000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0xffffffff, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r1, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) pipe2$auto(&(0x7f00000000c0)=r0, 0xfffffff7) mmap$auto(0x2, 0x400000000a00006, 0x1e, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200100, 0x0) write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) set_tid_address$auto(0x0) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="080226bd7000fedbdf2503000000040008000400038012000100898771f1c19f1779048590822ad9000070000380640044000552f6d3eda20877eaa488f35e11ba8a0f282980dbe3cbbc3ae8626202b952013306406fc8c07e75e2b9543cce22842b00bc15baf98d303611387eb632a3fd2a64bdcca4801999fa43f4b8b79a7274f6140a32756d90a14516d25c0cdc12a78308004900", @ANYRES32=0x0, @ANYBLOB="a48b741db3990256cc19e991767f5af75d26f798cef6613353fa225ab2b7c8193928ad6119"], 0xa0}, 0x1, 0x0, 0x0, 0x4040001}, 0x4800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1c, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000000080)='\x00\x00', 0x2) mmap$auto(0x4, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) 5.102182624s ago: executing program 4 (id=774): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c00"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio27\x00', 0x20500, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x100000000000fff}, 0x3fffffffffd, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video40\x00', 0x101, 0x0) ioctl$auto(r5, 0xc0485619, r4) ioctl$auto(r2, 0xc0305602, r1) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r8 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r8, &(0x7f0000000340)=""/179, 0xb3) 5.01883769s ago: executing program 5 (id=775): prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1a, 0x2, 0x0) (async) mmap$auto(0x9, 0xfffffffeffff8001, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x44009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r0, 0x0, 0xfffffdf1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) (async) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) (async) mprotect$auto(0x0, 0x8000000000000001, 0x8) (async) semctl$auto_IPC_INFO(0x1000, 0x9, 0x3, 0xb) 4.679531434s ago: executing program 5 (id=776): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x6a2a02, 0xd) write$auto_trace_options_fops_trace(r0, &(0x7f00000000c0)="2cc18a26a0ab006df75ac2dffaebe2afa223f6834c6e78c49fc2ba7c94bffb48fb532dd879300bb564ee3949d339b708f09ebc35fac70af79f76bebaa4eb9c630594a1e71a0c4e689d19db25b9592d9ab9263a2b45b2ebc013c073df73df68968a6bcb6f54310e942eb5d90cc5c60607de2fe9db1ef5ca5f45230ba99c39e26d6af6f9e78e462e9da61e9b724b6f6c37b4fca03367ed94ec5a26f7f421ef4c4d2225dfe4170f279ea7e5e9c20f56c8c2fd2e45d59ced58843b3d54ae038a61ecd2d60321f90efa54bb64686b66ed565f255a32a01ec6af60971607ee6948dc08afb18f12f4e8", 0xe6) move_pages$auto(0x1, 0x20028, 0x0, 0x0, 0x0, 0x8000000000000000) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop8\x00', 0x2c381, 0x0) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x1, 0x5421, 0xa) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) (async) open(&(0x7f0000000040)='./file0\x00', 0x6a2a02, 0xd) (async) write$auto_trace_options_fops_trace(r0, &(0x7f00000000c0)="2cc18a26a0ab006df75ac2dffaebe2afa223f6834c6e78c49fc2ba7c94bffb48fb532dd879300bb564ee3949d339b708f09ebc35fac70af79f76bebaa4eb9c630594a1e71a0c4e689d19db25b9592d9ab9263a2b45b2ebc013c073df73df68968a6bcb6f54310e942eb5d90cc5c60607de2fe9db1ef5ca5f45230ba99c39e26d6af6f9e78e462e9da61e9b724b6f6c37b4fca03367ed94ec5a26f7f421ef4c4d2225dfe4170f279ea7e5e9c20f56c8c2fd2e45d59ced58843b3d54ae038a61ecd2d60321f90efa54bb64686b66ed565f255a32a01ec6af60971607ee6948dc08afb18f12f4e8", 0xe6) (async) move_pages$auto(0x1, 0x20028, 0x0, 0x0, 0x0, 0x8000000000000000) (async) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop8\x00', 0x2c381, 0x0) (async) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto(0x1, 0x5421, 0xa) (async) 4.210205722s ago: executing program 5 (id=777): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x902, 0x0) ioctl$auto(0x3, 0x81484d11, 0x38) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) socket(0x2, 0x80802, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x0) socket(0x2b, 0x1, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, 0x0) open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x891}, 0x4) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) 4.195643796s ago: executing program 6 (id=778): sendto$auto(0x3, 0x0, 0x13, 0x7, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x8}}, 0x20) (async) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) (async) open(0x0, 0x1014c3, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) (async) r2 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(r1, 0xc1205531, r2) (async) r3 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000440)="b4cfbaa27e5dba", 0x12}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) (async) r5 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) pread64$auto(r5, 0x0, 0x7ff, 0x800) (async) symlink$auto(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') mount$auto(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xf, 0x0) r6 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1c\x00', 0x101102, 0x0) r7 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) setsockopt$auto(r7, 0x6, 0xd, &(0x7f0000000140)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00}\xc9\xd0ghB\x8a\n\x8bw\xc8\x9f\x8f\xd1\xd0\xc3i\xd4\x8cO\x90\xaf?J\t\xce%\xcb\xb7Sq)\x12k\xb6\xa7(\\Vpm\xc6Q6\xe2\x0f\xae\xd6\x15\\\xf3\xefOA\xf1G\n\xd6u\x9b\x18+\x83\xc9g*v@\x90\xc6\xc2\xb9\n\a]\x86VDLp\xa2\xb0\xbd`\x144\xb2', 0x4) ioctl$auto_SNDRV_PCM_IOCTL_START2(r6, 0x4142, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x14) (async) r8 = socket(0xa, 0x3, 0x3a) ioctl$auto(r8, 0x8982, 0x1) (async) getdents$auto(r4, &(0x7f0000000080)={0x6, 0x8, 0x4, "c7008b34ce127418eb9cb5cbb80eaee6ec857c568437e6249853b4b59951c2e30f0fec71ea66f97b48063edddc682e2c23633cb0600eda79350be8f87ebca655f0182bb2927516980d2e38e98ccc293f4c11e158b4541f43e2a7c8e693877a8475022f805516a80fc4cabca7caf1"}, 0x8) (async) write$auto_tty_fops_tty_io(r4, &(0x7f0000000180)="976f29bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cda1b9fb125fbc752544c11d1640e59f86de019c613761b5d384219a3f53e519954888ce5cf54846c8e07", 0x7f) 4.002497765s ago: executing program 4 (id=780): close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x306, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r0 = socket(0x22, 0x2, 0x1) fstat$auto(r0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x161342, 0x13d) write$auto(r1, 0x0, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto(r2, 0x3b87, 0x38) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) socket(0x23, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) 3.662307839s ago: executing program 6 (id=781): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) timer_create$auto(0x2, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000a40)=""/4096, 0x1000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) 3.618471961s ago: executing program 2 (id=782): close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) r0 = socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x2, 0x1) r3 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), r0) r4 = fcntl$getown(r1, 0x9) shmctl$auto_SHM_UNLOCK(0x10001, 0xc, &(0x7f00000001c0)={{0x9, 0xee01, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xf7}, 0x9, 0x2, 0x9, 0x8, @raw=0x5, @raw=0x800, 0x7, 0x0, &(0x7f0000000080)="de8a67b41a6481c40db54ae75c18d3551febf899034caef11262bec2f55dda67cceef16525ea40dfa95bd224fb30bbe9a27bc96ecaffe10480859b6fb94c363c045b143216170975b3a1906056729addbf69b1b14ac0719e6ff35872a001a9f9f8bae5da90d0e0afdc47a1", &(0x7f0000000100)="88ec56355231bce6a141308bfafdd2e625a3e23e29f39ad4ed5549cf58d2e688e41ee88f23914d5ca68e2f0117b778b24019a4c8d24fab8ea0b401df696b9cd63a4164670603b3a61f408f395bee56cfe9dcb5b20676d552af84c62f6fc5bdc767b52df1ee2451f5d997fd5ab20b605402a16ff1c19e3c4110624dceb8160c75dcf88abca3a82f5d44ee18753503bd81fcdcc131bbb86a5d1326f7a8fb644fdb6981700f83dbd0"}) r6 = setfsuid$auto(0xee00) r7 = setfsuid$auto(0xee01) setresuid$auto(r6, r7, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r8) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000340)={0x34, r9, 0x1, 0x70bd2a, 0x25dfdc01, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="74060000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0400f380080063007b25280008004900", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\b\x00~\x00', @ANYRES32=r8, @ANYBLOB="0e75e8d8a84cddc5a57ce0a9af8d009d80de25f1fa0c6990cac183cb682ad1009b5fe6d23da6e2d54ffecb821e9e4d1bd5129e98fcd6b79d1517066665bc2da4c5b27caf0b81d29ef23eb8479e1c5f55068e2fd197833d603ca64ba5410c00028004002080040040800000004ebf172709ccc963dc884619fad90a33d9357ddb44f9a73e1c3aba25252fab5ee1c5fbc05eaa20badb3a21ca636ff3b212cadb43f7d3ced9d75692b7f3d74b82644fa5d84f39e63ad2863adada3ea24b34378db520429eeaa06c6541c73e8ec8fc887cca410d35cae03fd35ed79cc48fc478e8bdb26a43ab3e44a9f8d0de3e17910b5e16fa13be1daf59"], 0x674}, 0x1, 0x0, 0x0, 0x94}, 0x90) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_4={0x17, r2, 0x4, r2}, 0x7ff) 3.311604042s ago: executing program 2 (id=783): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) 2.913223677s ago: executing program 4 (id=784): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72014000", @ANYBLOB='T'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)="ae0841ce09c6476fbaaae14eb1849f0067964d63f3ccb4d298a1892b08311ac90d9dcd5cf12c4855b8d94bcf6b89fcc278a51f76bc0b387b003d9b6007781f5dcf7e2f725cca2d4144fd3b42", 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x4008) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x400000000000001, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x6517, 0xfc, 0x404, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000140)="3318cb") ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000180)={0x1, [{0x8, 0x7}, {0xc000000000000, 0x800}, {0x4a, 0xab}, {0x7, 0x9}, {0x3, 0x8}, {0x0, 0x5bc}, {0x80000000, 0x97b}, {0x23e, 0x272e}, {0x5, 0xa1}, {0x5}, {0x2, 0x5}, {0x200, 0x1}, {0x3, 0x1}, {0x3, 0xb}, {0xf, 0xefc}, {0x4, 0x9}, {0x100000, 0x9}, {0xfffffffffffffff9, 0x1}, {0x8, 0x800}, {0x7fffffffffffffff, 0x3}, {0x2, 0xf}, {0x1, 0xfffffffffffffffc}, {0x3, 0xe6b1}, {0x0, 0xfffffffffffffffb}, {0x2, 0xf50e}, {0x71, 0x1dd1}, {0x5, 0x7}, {0x6, 0x3}, {0x654, 0x5}, {0x4, 0x6}, {0x7fffffff, 0x3}, {0x8001, 0x1}, {0x2c, 0x32b}, {0xdb9c517, 0x5}, {0x2, 0xfffffffffffffff8}, {0xffffffffffffff7f, 0x1}, {0x7fffffffffffffff, 0x7}, {0x9, 0x1}, {0x10000, 0x7}, {0xe07a, 0x2}, {0x8, 0x1}, {0xfffffffffffffffc, 0x1}, {0x7, 0x9ff7}, {0x80000000}, {0x3, 0xc}, {0xfffffffffffffe00, 0x7}, {0xe58, 0x3696}, {0x7, 0x499806eb}, {0x7fffffffffffffff, 0x2}, {0x3, 0x3}, {0x2, 0x3}, {0x1, 0x6}, {0x1000, 0xc}, {0x4, 0x10000}, {0x7, 0x82}, {0xffffffffffffffff, 0x7}, {0xfe, 0x5}, {0x2, 0xeff}, {0xb, 0x4}, {0x0, 0x9}, {0x80, 0x80}, {0x40, 0xfffffffffffffffc}, {0x7, 0xffffffffffffff1c}, {0x1, 0xd020}, {0xffffffff, 0xffffffffffffaef2}, {0x4, 0x80}, {0xfffffffffffffff7, 0x10001}, {0x1, 0x3}, {0xffffffffffffe31e, 0xc}, {0x4, 0x5}, {0x3, 0xe}, {0x7, 0x1}, {0x10001, 0x4}, {0xf0c0, 0xffffffffffffff8d}, {0x2, 0x10}, {0xc72, 0xb3}, {0x8, 0x1000000}, {0x104, 0x1}, {0x8}, {0xbc9e, 0x7}, {0x6, 0x7}, {0x40, 0xd}, {0x10000, 0x6}, {0x6, 0x7fffffffffffffff}, {0x9, 0x9}, {0x3, 0x8}, {0x8, 0x19f}, {0x6, 0x80}, {0x9, 0x80000007}, {0x5, 0x2}, {0x6, 0x5}, {0x7fffffff, 0x7}, {0x6, 0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x7}, {0xbe, 0x6}, {0xa00000000000000, 0x11}, {0x81, 0xb}, {0x9, 0x80000000}, {0x2fc, 0x6e}, {0xd, 0xd}, {0x3, 0x8}, {0x9, 0x7}, {0x5, 0x101}, {0x7, 0x8}, {0x5, 0x4}, {0x3, 0x1}, {0x8, 0xffff}, {0xd, 0x7}, {0x3, 0x5}, {0x8, 0xffffffffffffffff}, {0x0, 0x80000000}, {0x0, 0x3}, {0x0, 0x1003}, {0xfff, 0x2}, {0x7fffffffffffffff, 0x10001}, {0x8, 0x7fffffff}, {0x8, 0x1ff}, {0x8, 0x1}, {0x9a, 0x5}, {0xffffffffffffffff}, {0x7fffffffffffffff, 0x6}, {0xff, 0x8000000000000000}, {0x9a, 0xdb7}, {0x9, 0x2}, {0xe48, 0xa0cc}, {0x0, 0x7}, {0x3, 0x8c85}, {0x4, 0x8}, {0xd009, 0x400}, {0x5, 0xf}, {0x4, 0x101}, {0x1, 0x3}, {0x5, 0x1}, {0x80}, {0xfffffffffffffffe, 0x10f}, {0x4, 0x2}, {0xcc, 0x6}, {0x2, 0x1ff}, {0x0, 0x1}, {0x1, 0x8}, {0x9, 0x1}, {0x7f, 0xd1c}, {0x0, 0x5d}, {0x49, 0x9}, {0xfffffffffffffc00, 0x401}, {0x4, 0xffffffffffff5dd7}, {0x2, 0x5}, {0x4, 0x9}, {0x8000000000000001}, {0xffffffffffffffff, 0x1}, {0x7, 0xa9}, {0xfffffffffffffffd, 0x7fffffff}, {0xe7b, 0x2}, {0x3, 0x3}, {0x900, 0x101}, {0x2, 0x8}, {0xd, 0x4}, {0x5, 0x40}, {0x5, 0xfffffffffffffffd}, {0x400, 0x49d}, {0x10, 0x2e7}, {}, {0x0, 0x7fffffff}, {0x8, 0x7}, {0x7, 0x5}, {0x1}, {0x6, 0x5}, {0x5, 0x7}, {0x1, 0x1ff}, {0x0, 0xe53}, {0x1, 0x9}, {0xffffffffffffffff, 0x5}, {0x3, 0x7ff}, {0xfffffffffffffffe}, {0x7, 0x4}, {0x7, 0x7fff}, {0x1, 0xcf01}, {0x10, 0x9}, {0xb73a, 0xffff}, {0x5, 0xc2d0}, {0x9}, {0xff, 0x3}, {0xfffffffffffffffb, 0x5}, {0x7fffffffffffffff, 0x1}, {0x0, 0x955f}, {0x10001, 0x3}, {0x2, 0x800}, {0x9, 0x8a4e}, {0xfff, 0x4}, {0x80, 0x751}, {0x9, 0x3}, {0x2, 0x2}, {0x100000001, 0x7}, {0x1, 0x7}, {0x2, 0x8}, {0x1, 0x4}, {0x8ce, 0xec9}, {0x81f0, 0x6}, {0xecc6, 0x4}, {0xad34, 0x8}, {0x4, 0x6}, {0x400, 0x9}, {0x7, 0x5}, {0x6a699d66, 0xbd2f}, {0x2, 0x2}, {0x0, 0x80000000}, {0x3, 0xfffffffffffffff6}, {0xfffffffffffffff7, 0x2}, {0xb, 0x2}, {0xc000000000, 0x31d1}, {0x2, 0x9}, {0x400000, 0xcac6}, {0x9}, {0xa, 0x9}, {0x759efbea, 0x2de}, {0xfffffffffffffff8, 0x16d4}, {0x1, 0x7}, {0x0, 0x54}, {0x9, 0x6}, {0x66, 0x40}, {0xffffffff, 0x4}, {0xbc6a, 0x4}, {0x1, 0x401}, {0xeb4, 0x8000000000000001}, {0x101, 0x6}, {0x2, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0xfffffffeffffffff, 0x9}, {0xb87, 0xffffffffffffffff}, {0x3, 0x9}, {0x2, 0x3ff}, {0xc, 0x7}, {0x5, 0x8}, {0x4, 0x14}, {0x7a0, 0x9}, {0xfffffffffffffffa, 0x6}, {0x7, 0x8}, {0x400, 0x9}, {0x4, 0x6}, {0x5}, {0x1, 0x3}, {0x41, 0xf}, {0x6f9, 0x5}, {0x80e, 0x6d1}, {0xffffffffffffffff, 0x123}, {0x9, 0x80000000}, {0x1, 0x3}, {0x401, 0x8}, {0xffffeffffffffffb, 0x2}, {0x9, 0x3}], 0x3, "d7bb1364a6e565"}) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40000, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x109002, 0x0) 2.818575666s ago: executing program 2 (id=785): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto_SO_BUSY_POLL(r0, 0x6, 0x2e, &(0x7f0000000000)='!]\x00', 0x400000) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x2284, r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x416, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x121d03, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.521646846s ago: executing program 6 (id=786): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram4\x00', 0x14be02, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x3, 0x2) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x200000000000, 0x806122, 0xc) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x10000, 0x0) sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2}) r0 = socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) socket(0x2c, 0x3, 0x0) socket(0x11, 0x2, 0x73) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x70003, 0x0) fanotify_init$auto(0x5, 0x0) socketpair$auto(0xfffffffd, 0x6, 0x7, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty5\x00', 0x403, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x2000000}, 0x68) ioctl$auto_TCFLSH2(r1, 0x400455c8, 0x0) 2.443723392s ago: executing program 5 (id=787): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x43ffd, 0x0) (async) r1 = socket(0xa, 0x5, 0x84) (async) mmap$auto(0x6, 0x8, 0x7, 0x9b72, 0x2, 0x8000) (async) uname$auto(0x0) mmap$auto(0x2, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/vhci_hcd.9/usb27/27-0:1.0/usb27-port6/power/runtime_active_time\x00', 0x480302, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x60f42, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x2, r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare$auto(0x40000080) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x10001) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000240)={0x0, 0x7}, 0x2) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x0, 0x0) (async) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r5, 0x41015500, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x0, 0x0) (async) unshare$auto(0x40000080) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy13/netdev:wlan0/state\x00', 0x200, 0x0) (async, rerun: 64) setsockopt$auto(r1, 0x10000000084, 0x1c, 0x0, 0x3ff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xca200100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5801ff03", @ANYRES16=r7, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x400c000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x8802, 0x0) write$auto(r8, &(0x7f0000000140)='\x91[', 0x6) 1.685757305s ago: executing program 2 (id=788): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x306, 0x0) mmap$auto(0x0, 0x128009, 0x1000000e2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001080)=""/4143, 0x102f) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) socket(0x23, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 1.42650371s ago: executing program 6 (id=789): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r2 = socket(0x10, 0x2, 0x6) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x5, 0x400a) (fail_nth: 4) 1.262208813s ago: executing program 5 (id=790): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x9, 0x8, 0x0, 0x1, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x0, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x2) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x7ff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x7) mmap$auto(0x0, 0x3, 0x100000df, 0x400000000e31, 0xffffffffffffffff, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8003) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x1f, 0x0, 0x8) ioctl$auto_EVIOCGEFFECTS(r1, 0x80044584, 0x0) socket(0x11, 0xa, 0x300) r2 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/min_free_kbytes\x00', 0x202, 0x0) pwrite64$auto(r3, &(0x7f0000000040)='/pro\x19\x06.Or\x85\xbd\xbd\xce\x88F\xedvc/sys/u\a\x00\x00\x00\x00\x00\x9d[f^notif', 0x8, 0xf) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x13, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x94e9) adjtimex$auto(&(0x7f0000000100)={0xfffffff5, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x5, 0x800401, 0x0, 0x2, 0x14b, 0xc5, {0x8000000000000001, 0x10}, 0x1, 0x64d1, 0x7, 0x6, 0x0, 0x2, 0x6, 0x7b, 0x2, 0x0, 0xfffffffe}) sysfs$auto(0x2, 0x3c, 0x0) syslog$auto_SYSLOG_ACTION_READ_CLEAR(0x4, 0x0, 0x8001) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) 1.016939953s ago: executing program 6 (id=791): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x20008000) io_uring_setup$auto(0x6, 0x0) sendto$auto(r0, 0x0, 0xb, 0xc, &(0x7f0000000000), 0x1c) 917.287428ms ago: executing program 4 (id=792): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x198, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NAME_TABLE={0x181, 0x8, 0x0, 0x1, [@generic="4ee3e2228f072f775509c37cd7cecb289e14439e215648c9db21880740644d3881e08835cd40082d24f12f077f8b5ddf776a13f2fff3884f0532bf81c8616b70684282f7ba9b3cd0d345824ebb8a457bc10751506b1b17fa47d59e2a9f8466080e16f7b2739caa149594a6f18206edc6a3ffc337e8430bca88c4b6fe0996ca8aa4739b75041cb8a4c04c470de0e9c576bc49bffe9e6d351131f2", @generic="57440c89bf4ca0c9fe186a252b604605c03b3b37fdcc215336e090873ba894644dc3ba50d2e3da7b064d666e58278ffdba80674353fca24d8989514570b32f89856a7f533e2e4264f46265bd948e4e9ca1447c3a030829a16229686da16a127d8539b81395ef6d1d886f2fee927ee982922475dd421eda37d8a330ce967820316863a3df91a9321231c8ed5f6bb5e8f5c69534e866eb74ee7f618946efc6aade15965caddec732e6cc277a01c6dbd0362f016736cd3536b707628c1f10b8823afffc3be3e29ba2640ee73369", @generic="afd5551217c0a6decce4be24f89a72", @typed={0x8, 0x121, 0x0, 0x0, @fd}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x8010}, 0x4000840) (async) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x198, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NAME_TABLE={0x181, 0x8, 0x0, 0x1, [@generic="4ee3e2228f072f775509c37cd7cecb289e14439e215648c9db21880740644d3881e08835cd40082d24f12f077f8b5ddf776a13f2fff3884f0532bf81c8616b70684282f7ba9b3cd0d345824ebb8a457bc10751506b1b17fa47d59e2a9f8466080e16f7b2739caa149594a6f18206edc6a3ffc337e8430bca88c4b6fe0996ca8aa4739b75041cb8a4c04c470de0e9c576bc49bffe9e6d351131f2", @generic="57440c89bf4ca0c9fe186a252b604605c03b3b37fdcc215336e090873ba894644dc3ba50d2e3da7b064d666e58278ffdba80674353fca24d8989514570b32f89856a7f533e2e4264f46265bd948e4e9ca1447c3a030829a16229686da16a127d8539b81395ef6d1d886f2fee927ee982922475dd421eda37d8a330ce967820316863a3df91a9321231c8ed5f6bb5e8f5c69534e866eb74ee7f618946efc6aade15965caddec732e6cc277a01c6dbd0362f016736cd3536b707628c1f10b8823afffc3be3e29ba2640ee73369", @generic="afd5551217c0a6decce4be24f89a72", @typed={0x8, 0x121, 0x0, 0x0, @fd}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x8010}, 0x4000840) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket(0x2, 0x5, 0x0) (async) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) sendto$auto(r0, 0x0, 0x6f9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r2}, 0x36) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 611.430122ms ago: executing program 2 (id=793): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffefffe, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = fanotify_init$auto(0x5, 0x2000000000002) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x12ba7e, 0x1c9) fanotify_mark$auto(0x0, 0x451, 0x9, r1, 0x0) fanotify_mark$auto(r0, 0x452, 0x800000a, r1, 0x0) r2 = gettid() r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x5523, r3) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x3, 0x6) r5 = socket(0x2, 0x1, 0x0) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) prctl$auto_SIGCONT(0xb437, 0x12, r2, 0x23a, 0x200) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x1ffffffc) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, 0x0, 0x5, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x400) shmctl$auto_SHM_UNLOCK(0x11b, 0xc, &(0x7f00000002c0)={{0x3, 0xee00, 0x0, 0x7, 0x5, 0xfffffff7, 0xa00}, 0x7, 0x7fffffffffffffff, 0x7, 0x3, @raw=0x4, @inferred=r2, 0x7ff, 0x0, &(0x7f0000000680)="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", &(0x7f0000000280)="1f4607"}) ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000340)={0x491e, @inferred=r3, @inferred=r4, 0x1ff, 0xb, '\x00', {0x20010000, 0xbd7, 0x6, 0xee00, 0xffffffffffffffff, 0x3b7, 0x2, 0x8, {0xa4, 0xffffffff}, {0x7, 0xffff0001}, {0x0, 0x101}, 0x7fff, 0xffff, 0xfffffe5d, 0x80000000, 0x4, 0xfff, 0xf6b, 0x9, 0x2, 0xebcc, '\x00', 0x7, 0x2abb, 0x9, 0xb}}) newfstatat$auto(r0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)={0x1, 0x5, 0x6, 0x80000000, r6, r7, 0x0, 0xffff, 0x2, 0x4, 0x0, 0x40, 0x0, 0x0, 0xa, 0x9, 0x8001}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0x80000eb1, 0xfffffffffffffffa, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r8, 0x5419, 0x0) r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ram14\x00', 0x377202, 0x0) sendfile$auto(0x3, r9, 0x0, 0x400000000006) writev$auto(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0)="7d86f99e03b7bc6ad73a72a5365db8e7bbbec64561fd280d449faaf39f35bfe0cf4d2f737f92b72090ac00fec25be2dfdc5dc24bae07ce8a6252261537d65ae6213817a882bb797fcd7722b9e06ff4bdf4b71101d45c5509d309aef950984839e63309c667a0c8be88499dbf585e41d085b46e59f672deb0222637b2056a5b9f85", 0x2}, 0x6) shutdown$auto(r5, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 521.678973ms ago: executing program 6 (id=794): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) r2 = setfsuid$auto(0xffffffffffffffff) r3 = io_uring_setup$auto(0x1d48, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, 0x0, 0x8840) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mq_notify$auto(r4, &(0x7f0000001140)={@sival_int=0x80000000, @inferred, 0xdf0, @_sigev_thread={0x0, 0x0}}) bpf$auto(0x12, &(0x7f0000000040)=@bpf_attr_1={0x84a5, 0x0, @next_key=0x8e66, 0x9}, 0x80) sendmsg$auto_NL80211_CMD_SET_KEY(r0, &(0x7f0000001a80)={&(0x7f0000000000), 0xc, &(0x7f0000001a40)={&(0x7f0000000280)={0x17b4, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x3}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1368, 0x84, 0x0, 0x1, [@typed={0x8, 0x14c, 0x0, 0x0, @uid=r2}, @nested={0x14, 0x8, 0x0, 0x1, [@nested={0x4, 0x87}, @nested={0x4, 0x49}, @nested={0x4, 0x112}, @nested={0x4, 0x9}]}, @nested={0x10cd, 0x155, 0x0, 0x1, [@nested={0x4, 0xea}, @typed={0xc, 0x9b, 0x0, 0x0, @u64=0x1}, @generic="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", @generic="139abfa701eedd0d3043b8def4c7b97fda29d9721d06158bbc48ea9adebc1d3fb752272823b7bbc54ccf823e29a1412dd0983eadf7225c0f2909bb66ad9f3c65795f5a04d6a1f211c5f1c1e59b34c3dcdba2315850ae46f054ad66fc1ddf7e1dc589cd07a7ba9901692e6db69c59af165b9ea38a5aee5ac6a85f8c0bc179635b6205362502be0ad890868e268fefb90c9ddc06cabd22d4772654d878b110471a455164308a819ac2cb7fbe151c905a868b96573184", @nested={0x4, 0x7b}]}, @generic="4086d304e1800b549934990bf2c02b63d044d47423131ca4b36d41b6d2929494f2b420875a0b6fedeb58d472a1e14235249627a1caa3cc35e42ad6e54defa6da1360ec4b75d2407da350e0c9290e0426b459ba3c4436315c39cf4ae56cb4d2c3e4e9a46e5f14dfa072c31fe558de22a75a906e75c40f59979294", @nested={0xe0, 0x10b, 0x0, 0x1, [@nested={0x4, 0x3a}, @typed={0x8, 0x156, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0x29, 0x0, 0x0, @u64=0x5}, @generic="b6c418832a3a73f99e1416da39f3ea26ca1da2e0f8c8cf401519abdec077ba9849b2345287b4483a160d87352b08c13b5eb90572c897edfdc6fd1c1e9bdc8819af103a1efdd4bebbc6f969b143c2a209bf1086348d00507d837cbdcc2b38f8a7d232449432d50792e8098ef05c3babe3a50e415f353d118ad6ad40c4425e3a8a706b9e44499320b7407b83477eee0f8cd35d9ef11220c6a3bcd3637cf45bdc7684825a164ec68bc7e32e26b0c1854e9b62606ad2b55d3836bfce3d147e19f925d7a48caf"]}, @nested={0x10, 0xc7, 0x0, 0x1, [@typed={0x4, 0xbe}, @nested={0x4, 0xa}, @nested={0x4, 0x69}]}, @nested={0x10, 0x127, 0x0, 0x1, [@typed={0x9, 0x28, 0x0, 0x0, @str='+-$+\x00'}, @generic]}, @generic="670ca68e7906e39618ada90fa3f63823e80b16f2afb98e7cb7082cb2676b6fe5766c1a8c87ea264296211a183ea7d4992e6ed122970c3c9db1fdd0687013404e7ab3d9e682f4f22ef7028063b8d3bbc1c5c19f86e594bb195d7f5acb6319d8e64e59a41cfea4f5cddfd44c3beb5c5966237a3ecb11db7903b31519374242dccbfc111ff5b2e3a10d5ca6f0c5082e1a2f47971b7d63bfbcb3467aff32a53f46d97155db733b", @generic="ab8dbac958ac36a20c7a09bd1f29baddb9e3f919ffb51ffad02a5eb384e5a15dd2ffd2a06e9b916809131db6be9e01e88a07dca782f7a80a594b4bb1892170e4b0996aebd44397253fb61fce9451a5ff60", @typed={0x8, 0x152, 0x0, 0x0, @u32=0x4}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfff9}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_MESH_CONFIG={0x2bd, 0x23, 0x0, 0x1, [@generic="1a2de8cc34dac259bdcfa01a97061cf70f780f453b30deac9f111afa161bbc7647be8ecb25f6a2b16eebdf9483102b92aac13af5e70cdf2a86178b6d0453edbec1ed8f2ed5fb2c1f9a963ddbe4be75a44fc9b5b83161f1c36abcea2f199da02261a5a5a72598fc5e3d0290108ecf7a3163e8bb06422047f3a0ccd7bebc81087dc031d33554b8e02ea19381b963f4bd8617c09b767e47d8db80b2df03affed19d336930d3c746018ad0651850f1162c058162d0227e334462f16ea2448c3029b83f2b484916fdf52be3c4390677179d7a47d9e4046445384ae8e012b2ef79dc110af5f7246ebac8454d7e0075d8ec8795694c4f7e92", @nested={0x1c3, 0xb6, 0x0, 0x1, [@generic="7adb3f4ddcacf2ba202c4727f9c024743ed343b55b3c36e1a15a0425bc69f221bbf316f996758b65fa3a64710e3d481c1281d90c9a8fff14f143893db95c1ed0a03ebe5393fa72df4b5af09455cdfffa3303982b8191fea33ec81a5dc09c0b285289f1", @nested={0x4, 0x8b}, @nested={0x4, 0x3b}, @typed={0x8, 0x105, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="7e300b0f6e59433ac7d493a48ae82477e6da43005fa800e8057b91006821649e873b22bf576d46f3cc20c4cacf9cda470d01d1b5e9bd15ace019e0f8f22c00f6abd175620373ae9e8e3225e845c2366a1b0938cde2db559a3f9ad33b1feccd2c38", @generic="32e851a923bce0a8f3d24148dd15cdd33d7dcf81ebeffae48b7b9ed96adc6b93bc577ec4d643585b9dd555b8fae60ecc5fa568947ebdd79e67977528e5142865c9f17bd91f865a079c6aa9c52a712d4a9d43e3da661d83dc98b62d8c8166339f56cde797155c291a75bbc219271ccfcd0544ebbb73dee2b263dc931ba161ce2d9f6f6ef4171f7c943f000e3bb46fe352658fcab8adfa7464fa4c33f22ba76e43f12275144665c11e3366a0bd4e0e5ee10b9b79ded004b07763008d74419b937561506c6ba5efabaa9d0943c5432de2475853cb84f65d3153994ace3d30c80813d630b1b579b8d79c7afaaa"]}]}, @NL80211_ATTR_REG_RULES={0x145, 0x22, 0x0, 0x1, [@generic="eb89dd02494d2bb67fb714bab7d54d1f", @generic="f18a0096687dea323472210e3c0dd2be20d8c3aaae384b0682e0c1f08d338615b433dd05b3258291b28362890f49cf733a4f9d91dfea721198", @typed={0x4, 0xce}, @typed={0xf3, 0xda, 0x0, 0x0, @binary="bf4c9f5578303db5f7f08d1aa767c1b4104b488808c45d8322db993001ed6ad12b093b268c1677049f1c56fe4e0fb75a65a22bd5692f7b908bd2871c21bc8e7c7de265a3bbfb37372dc1191dd430eafa023d6401c16f36fa17ec3261d4c0e739e0730a3eb7a6eb6270136f28dffd320a2538b75571ed2314ee4390ff25de719cd060a115e764d74752f4e0b43bb68cad4a5e655f8b0a9398517f765c29f1338f74235d1e6824c5b47672027a2f286fb6de5f15a3bc51de1f07a49e8f113cb828d45778283f42d206dc6e9867e5c57c6422091b2ec0dad08625b315abdfaf7a1629f53f501194aff88f92a9a56ba6ca"}]}]}, 0x17b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048000) mmap$auto(0x0, 0x400005, 0xe3, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/rawdata_compression_level\x00', 0x2a0a00, 0x0) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2000, 0x0) readv$auto(r5, &(0x7f0000000a80)={0x0, 0xffff}, 0x100) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000005d40), 0x8600, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r6, 0xffffffffffffffff, 0x6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0xe07, 0x8000000000000001, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0x4]}, 0x0) getsockopt$auto(r0, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x10009b) 381.770297ms ago: executing program 4 (id=795): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7k\x00\x00\x00\x00X\xb9\x0e\x11\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xf5\\\xad4\t\xca\x03\xe4\x15\v]\x00'/58, 0x82) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf25030000000810030003020000060007000080000008000200", @ANYRES32=0x0, @ANYRESHEX=r0], 0x68}, 0x1, 0x0, 0x0, 0x44014}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 94.762089ms ago: executing program 5 (id=796): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x29, 0x30, 0x0, 0x8f) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001200)={0x29b0, r7, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_SCAN_SSIDS={0x299c, 0x2d, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @ipv4=@local}, @generic="7a8ed785d0e203c0e42cf101a6ee0c9f1f5f02a2ccc91f8698abe754de40fff2e3f5bfc21a1dc712bb23d8675f928c74992ebe0eb802f51554e98c92e41f4777a2c5e42d2c73e774903360ca25e3b608f11038235ed4842b95c23de0f0dc9a93aaf416ac32038e35ed4e", @generic="11aa42a84c51c7fad69a48f9cbed7c0965afd60ee0e1721af0d2c68f3efe97c8f9ab7069dda1b029364a3757b84484e52836e74d89a6dfd3eb09d788f5358d6cdb55d4e28b8cd0b6d86c75175d25769c4ba20c7229ff03c60ed2d0a710b0211b7b050a48b26d8473fc1ccf135e907cb49dc871f738f2dc4a5a1ada7a884e3d6c49d17c98b034d5d264555c00f250ee7e61e15b4e16a5c023dd15c4c53fc29d4029e59189128197bd0ae6b697f63ef874bc5f6d538079f126f6", @nested={0x10, 0xf4, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @uid}, @nested={0x4, 0xc4}]}, @nested={0xf0, 0x12f, 0x0, 0x1, [@typed={0x8, 0x15, 0x0, 0x0, @ipv4=@multicast2}, @generic="fb34851b2b88800cb3f9a03d3aa1f91421f31ad58ce9a2221c5354f2b790a8781d14f024b7dfc412f0c8247fd2cb5cf4a61cd020ea727eff649cf0cee63493c80f5352c0fccd0d4a6c1a97971ebddfc6b8a2e8e100fa5e7de0b1949db06ff295dd4febc9c8163bf2740f8ee85b810a052ca5b4029a29884fc12aa1c37517193e2b0124c1bafc264a18175d37d6e7490306fabeeb430964a8c61474407b24d380232fab2f889d3a1f86640185", @nested={0x4, 0x156}, @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x14, 0x158, 0x0, 0x0, @ipv6=@empty}, @typed={0xc, 0x10, 0x0, 0x0, @u64=0x40}]}, @nested={0x26aa, 0xfa, 0x0, 0x1, [@typed={0x28, 0x1a, 0x0, 0x0, @binary="8cf6ca9b1c041e2271de034d5be529bfb941449c558d9b40107c4eac84cd2b4724829430"}, @generic="08835b1f673528b1df025aa24ec4f12d7abf3f5c902ff2ddb5f80f6dcdcb67b767cd4fa966fd39e3dc1b5b940e0aacf57c90f97883273dd5cfa5abfa5d5ab1db192157721d2a898a8e59788be9134f7ad2109281acf6c75de843591104527f44134fe824fde2e2bf4d775a5282661bbf9a1a5d227a8d42c645f5e853e717bb284e6d5ce8b26a22db90870cd3", @generic="2f6eee8e69196685bd740c02c520be24be12eeea270684462e76f3306b39313b9ad95f2c85f7b21e2b7d54348fa3fa8c4ea0ac9ef3b4473caacf8c241423c8d417ea26969938a9906c362808a85a7cc136e8fca196eba3b2be0a50f5bcf725a602a41169473d012237fab53beec5c62c9d38a03b7c70", @generic="dcca24ccc3e5238a49dbfdf5b8c24c873ce74308cdf3013bb412a26d954b2be501c9af242c86dcc2a272492494b0a934176237871d8e165fee1ccd331a7c3c5fc9", @nested={0x4, 0x7f}, @generic="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", @nested={0x1423, 0xf, 0x0, 0x1, [@generic="9dce7d44371c75cd081ddcdc098db6c10b3535382d935e6bbbfebc8abf8bfee39eb3d2b7fdfdf239ec53a371ab60bfe2bae70912c7b2513d5b1c842c90d46bd86cc0f3276bfbe6b3476035ae3106ffe5f4fbcfa9d189863a392947fd2bd85fab4da1b8c703207956135fc897641141c84fb3", @generic="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", @nested={0x61, 0x14, 0x0, 0x1, [@generic="10b0828328ca7060b602a047060b9bfe4bed3588b70f5634a1984cca4b86f08f5ec101a2fc30f2fecfd096bdb1337be875612b1d94c1b728df66ba8f9b955d94bc6a1ee22e077b82307fb66d54dbad4efaa19693864c86bd19de1cb2cb"]}, @nested={0x4, 0x109}, @generic="87024e7b472e88be8574e14d14180f97edcd0952c3d08a048bc5257d0526d75fa827aab950ab894ee113312eff4cd98caf6f6b6ad65ed79ee29cad90e2db327e4befa521c3ff607a67ed03ef25d4e9f5554f6bd517821920dc051dd341364aea4232d3f6ca51d47eb57e9fc63ac892a06f4020f93cbd3a51ac3f7c93b71f28849ba738c92a", @typed={0x8, 0x7a, 0x0, 0x0, @uid}, @typed={0x5, 0x8, 0x0, 0x0, @str='\x00'}, @nested={0x205, 0x13b, 0x0, 0x1, [@nested={0x137, 0x2c, 0x0, 0x1, [@generic="04e9985fa61b9184e6a940f5284bf4f91c8e7398eafeedd9271a5b286b8d0bcf246257028134938bfae714464a46fd88a1b1ea4d5f95429bdfd1f68319e9fa377145d9830884aded02c40e1d0474d6d837", @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x8a, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xb4, 0x0, 0x0, @pid}, @generic="b98cd8829c9c70a11a6a196c308c49f9be9473c97ac0d9f79b1044a23e9d77f4b50e77e5a5a36ead2867a0965b6bb247504eb3e4f00fc74989dff4d83cbf8ab561567ea69f1e0de7", @generic="8afa5310c6318bc9eecabcb512b5292fb5418176192854ab77bc8e41effcc998d568204baea98124e291b37a9d4e4fb9308e72af34b69355d6793c7ef7c428e9cb390dcd1faebd4eb8ef8ecf66684719b7a804b4eeb8ddcd97c192bd34dd29b24adf31c73d2f445b87f6a2c0cc9dfa201f39ce1dd905"]}, @generic="1f71a4b28dd0dc75ebc2cd324622708899f017ba740cb82c626dced9955bc09e0a1a2134dd3042ed869c59ef46550ded16e4e6fee43e74cb248b620899a32cf64b5cd7aa1ec45b3cf28e920fe106498a736628871de107658118df7b0282901cbacd82d24f924ac44aae021f6b9b7c1808dc419cea121957b4df331555a0b075ec65fafc2f3b194de27f01dbc19ac7b018162239dd68e1e69ec3989a61ffcaaac9780840c445017075ead36b07d4fa23e9", @typed={0x8, 0x95, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x1, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@remote}]}, @typed={0xa8, 0x70, 0x0, 0x0, @binary="52babaee92d4dab04a957f6021735a1ccb4502c88b50ee459ba8c20f01f4b0d22efbae3aa290cfabc292b115258cd0706fd4873fbf63d20a2288842495c3c20b93f76b3f9b8278aa9f04a447a7eb3afc0ea80d95df69a1dde4303a0941ab3370c52e9aeee5b9906137b1ea4c5026e6c0c2c33c4ec86490e2c63f25096cf384c638732398cdb778eac0763a132c95f4d06f1941ffaf0c3b561269d55e33bc61066e588378"}]}, @generic="626a0e802524be06cb9902512bdf78da660efcf4b5dbadc289bb22d3cb8cb7d95a86c9538d174efffc54341d5b2165ca038a3df691ca2a930dd325e0393895908f29b3e813d2d02cd79e357002f71ffbaeeed9fdbfc2664e879570cfa4c7aab0ddb27fecd27e921b6ca005a828b7867490c80b24815826a809ec7b760d3e2893b161a12e3c9da541f0efce0a58130798e03bc55fec1faa5c47b22cab7c48108ebba91f7c1549750f941df42773e8f25a568396aa40da8c020ab47aae63aa34c225f4ce1ca47e5f1c2963ff18d4d2d1054fcd760350cab9aff1892ab92e2f1a424d552c6295555cc60164d823cdce04", @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0x50, 0x0, 0x0, @str='nl80211\x00'}]}, @nested={0xf, 0xa, 0x0, 0x1, [@typed={0x4, 0x145}, @generic="46fe51096c3275"]}, @generic="2fe3a704991865452ac26b6a3edaa3c8ab46edc0a4e3a5425ed8ed48916e37654f029a876846ab51fdc595911ffeec55c2b298c5add5b8f5d95c9be7f30bad44c590132223ba8f51a2298bbb28e747381f89dc99cf17c28d9e126dc0f4cb8305d89d398454abcb3d0bacc1a0de4d34de358cfd777de2c0dfc58dc51d1a9cb6faa10a57406d356bbfeafe7904b57d7d1b7730a96c6d4c27c302896dea1f2cf4349bcd7811ee25f93b8d9d8f89473c47fc06"]}]}, 0x29b0}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r7, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x7}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x80000001}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "16459ab46944cf59ace96185394bad8983f5d51641d833841590"}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x240008d0}, 0x4001) setsockopt$auto(r1, 0x110, 0x7, 0x0, 0x4) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) 44.058767ms ago: executing program 4 (id=797): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) socketpair$auto(0x100, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x43403d05, 0x0) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) process_vm_readv$auto(r0, &(0x7f0000000100)={&(0x7f0000000000)="75695f71fcf2652b30ba35a8e2b86c8911d9303d2f0ed92dde819ec44cd6396e745a6e5e74e95e3b1cfab6ac8499cd0de1086012da26d24f1ccb1feaea56f4355ee0e401ab79348190ff2301e6b1cfd1394a2805e9f3bfb4a3d382d044065a3cc24536a89cefdac9ed8e2fc2bdc4b6ed4e6a5bf766a721d5d3708a5dff80139b50eeef98da430a79ae67ba90c271c03dc0496370d615403757e31cda90417675fe3ab24af0ac11367d23718218e1cb42d424bd71446dddfda72026d487e1588f433a57862ef2cee51d7c8234ff245e627fcef2ed9d63853a6e1c471c63153aacf3850b834630b6", 0x5}, 0x2, &(0x7f0000000200)={&(0x7f0000000140)="1d78a579469b8d24fb146df6ccf7bcb1d7d0574eda9779c3be131d5c6b961a0a8e2f341f5a3f15004f4789e15437dd0fdea23c8e80accbc3b10d1169c18709aedaae82e350eff005b36dbb477321c9fbb41ee9ef2fc61817adf8cf877a8526c7c6dc4e141ac69c0d74a2096256b4983d94e01dfdb2fd634184c93005d0c7b38a12a0f2f7ee39957bb79a1dfe8939c272dc8b4739c07254186e9cbe14c486ee631d1facdf9d174762f1c4", 0x1}, 0x0, 0x7) (async, rerun: 32) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 0s ago: executing program 2 (id=798): waitid$auto_P_PID(0x1, 0x0, 0x0, 0x5, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x20000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r3], 0x28}}, 0x40480d0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7100f97bf53b7200000408000300", @ANYRES32=r7], 0x24}, 0x1, 0x300, 0x0, 0x404c0c0}, 0x80) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, r6, 0x7f, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x4000000002, 0x3}, 0x9) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x121882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x4, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r9 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r6, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf4, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_DATA={0xcc, 0x1f, "f86fb566adc47acde27ccb566e6ddb595fefca6136790005e553d5ba011ad983b5079c1dc1336bb821dc4c3598eb8bf21e4d18454c93a0baea4af815e39e9ac22937be930bcb6c7f1f2c39747bb68b6389c2b11fe29ed9c5e1eb2d005795a06d8d57126f0739a42924792ab60e6dab609d074dc1d291006ea4c9222e19e76ea9f068c7af3e0eb5c9aa331f0c60a191bb2257892df0dc284ac7b0c0d5a42c685401288553c5ab413395258d3c8a57fcaccca19d1b69a416da8ff9042dc6418752596e52dc7872a68f"}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0xff}, @NFC_ATTR_DEVICE_NAME={0xc, 0x2, ')\'[+]}!&'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000024}, 0x40) write$auto_lru_gen_rw_fops_vmscan(r9, &(0x7f0000000080)="9379", 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x17) kernel console output (not intermixed with test programs): e fail_futex, interval 1, probability 0, space 0, times 1 [ 151.901859][ T6694] CPU: 1 UID: 0 PID: 6694 Comm: syz.3.143 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.901896][ T6694] Tainted: [L]=SOFTLOCKUP [ 151.901903][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 151.901917][ T6694] Call Trace: [ 151.901924][ T6694] [ 151.901932][ T6694] dump_stack_lvl+0x100/0x190 [ 151.901974][ T6694] should_fail_ex.cold+0x5/0xa [ 151.902001][ T6694] get_futex_key+0x295/0x1620 [ 151.902034][ T6694] ? __pfx_get_futex_key+0x10/0x10 [ 151.902061][ T6694] ? lock_acquire+0x1cf/0x380 [ 151.902101][ T6694] futex_wake+0xea/0x530 [ 151.902140][ T6694] ? __pfx_futex_wake+0x10/0x10 [ 151.902176][ T6694] ? exit_mm_release+0x19/0x30 [ 151.902214][ T6694] do_futex+0x32b/0x350 [ 151.902245][ T6694] ? __pfx_do_futex+0x10/0x10 [ 151.902274][ T6694] ? __might_fault+0xc5/0x140 [ 151.902317][ T6694] mm_release+0x24a/0x2f0 [ 151.902341][ T6694] do_exit+0x704/0x2b60 [ 151.902377][ T6694] ? __pfx_do_exit+0x10/0x10 [ 151.902408][ T6694] ? do_raw_spin_lock+0x128/0x260 [ 151.902443][ T6694] ? find_held_lock+0x2b/0x80 [ 151.902465][ T6694] ? get_signal+0x7e0/0x21e0 [ 151.902492][ T6694] do_group_exit+0xd5/0x2a0 [ 151.902526][ T6694] get_signal+0x1ec7/0x21e0 [ 151.902567][ T6694] ? __pfx_get_signal+0x10/0x10 [ 151.902594][ T6694] ? do_futex+0x192/0x350 [ 151.902628][ T6694] arch_do_signal_or_restart+0x91/0x770 [ 151.902657][ T6694] ? __pfx___might_resched+0x10/0x10 [ 151.902693][ T6694] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 151.902731][ T6694] ? __pfx___x64_sys_futex+0x10/0x10 [ 151.902769][ T6694] exit_to_user_mode_loop+0x86/0x4a0 [ 151.902804][ T6694] do_syscall_64+0x668/0xf80 [ 151.902828][ T6694] ? clear_bhb_loop+0x40/0x90 [ 151.902855][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.902879][ T6694] RIP: 0033:0x7f89a5b9c819 [ 151.902897][ T6694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.902919][ T6694] RSP: 002b:00007f89a6ac60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.902940][ T6694] RAX: fffffffffffffe00 RBX: 00007f89a5e15fa8 RCX: 00007f89a5b9c819 [ 151.902955][ T6694] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f89a5e15fa8 [ 151.902969][ T6694] RBP: 00007f89a5e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 151.902982][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.902995][ T6694] R13: 00007f89a5e16038 R14: 00007fff86fabff0 R15: 00007fff86fac0d8 [ 151.903024][ T6694] [ 154.130482][ T6748] syz.2.159 uses obsolete (PF_INET,SOCK_PACKET) [ 154.493072][ T6753] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 154.575310][ T6753] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 155.193312][ T6758] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 156.005281][ T6771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.164'. [ 156.842681][ T6800] netlink: 98 bytes leftover after parsing attributes in process `syz.4.170'. [ 158.631981][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 158.895594][ T29] audit: type=1800 audit(1775747725.630:5): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.177" name="lu_gp_id" dev="configfs" ino=13142 res=0 errno=0 [ 158.916378][ T6839] kstrtoul() returned -22 for lu_gp_id [ 159.553589][ T6852] netlink: 98 bytes leftover after parsing attributes in process `syz.2.181'. [ 159.893102][ T6860] vivid-007: ================= START STATUS ================= [ 159.929351][ T6860] vivid-007: Generate PTS: true [ 159.934353][ T6860] vivid-007: Generate SCR: true [ 159.994330][ T6860] tpg source WxH: 320x240 (Y'CbCr) [ 160.012274][ T6860] tpg field: 1 [ 160.015729][ T6860] tpg crop: (0,0)/320x240 [ 160.082322][ T6860] tpg compose: (0,0)/320x240 [ 160.128326][ T6860] tpg colorspace: 8 [ 160.159475][ T6860] tpg transfer function: 0/0 [ 160.198368][ T6860] tpg Y'CbCr encoding: 0/0 [ 160.228357][ T6860] tpg quantization: 0/0 [ 160.242944][ T6860] tpg RGB range: 0/2 [ 160.309167][ T6860] vivid-007: ================== END STATUS ================== [ 161.950220][ T6890] block loop4: the capability attribute has been deprecated. [ 162.163008][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 162.167597][ T6898] binder: 6897:6898 ioctl 400c620e 0 returned -14 [ 162.215689][ T6896] sctp: [Deprecated]: syz.2.191 (pid 6896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.215689][ T6896] Use struct sctp_sack_info instead [ 162.734685][ T6912] FAULT_INJECTION: forcing a failure. [ 162.734685][ T6912] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.766760][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.4.194 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.766816][ T6912] Tainted: [L]=SOFTLOCKUP [ 162.766828][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 162.766846][ T6912] Call Trace: [ 162.766856][ T6912] [ 162.766869][ T6912] dump_stack_lvl+0x100/0x190 [ 162.766929][ T6912] should_fail_ex.cold+0x5/0xa [ 162.766962][ T6912] ? prepare_alloc_pages+0x16d/0x5f0 [ 162.767008][ T6912] should_fail_alloc_page+0xeb/0x140 [ 162.767050][ T6912] prepare_alloc_pages+0x1f0/0x5f0 [ 162.767098][ T6912] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 162.767163][ T6912] ? reacquire_held_locks+0xce/0x1e0 [ 162.767219][ T6912] ? folio_lock_anon_vma_read+0x348/0xe30 [ 162.767274][ T6912] ? folio_lock_anon_vma_read+0x348/0xe30 [ 162.767327][ T6912] ? __up_read+0x2c5/0x700 [ 162.767379][ T6912] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 162.767435][ T6912] ? __pfx___up_read+0x10/0x10 [ 162.767484][ T6912] ? rmap_walk_anon+0x561/0x870 [ 162.767567][ T6912] __folio_alloc_noprof+0x13/0x2f0 [ 162.767623][ T6912] alloc_migration_target+0x1d7/0x6d0 [ 162.767670][ T6912] migrate_pages_batch+0x4f2/0x4530 [ 162.767718][ T6912] ? __pfx_alloc_migration_target+0x10/0x10 [ 162.767774][ T6912] ? walk_pgd_range+0x1133/0x1dd0 [ 162.767806][ T6912] ? __pfx_migrate_pages_batch+0x10/0x10 [ 162.767879][ T6912] migrate_pages_sync+0x12c/0x880 [ 162.767926][ T6912] ? __pfx_alloc_migration_target+0x10/0x10 [ 162.767979][ T6912] ? __pfx_migrate_pages_sync+0x10/0x10 [ 162.768020][ T6912] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 162.768072][ T6912] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 162.768119][ T6912] migrate_pages+0x1aae/0x28a0 [ 162.768168][ T6912] ? __pfx_alloc_migration_target+0x10/0x10 [ 162.768229][ T6912] ? __pfx_migrate_pages+0x10/0x10 [ 162.768273][ T6912] ? queue_pages_range+0x11e/0x180 [ 162.768309][ T6912] ? __up_read+0x2c5/0x700 [ 162.768360][ T6912] ? __pfx___up_read+0x10/0x10 [ 162.768408][ T6912] ? do_migrate_pages+0x451/0x740 [ 162.768445][ T6912] ? do_migrate_pages+0x451/0x740 [ 162.768493][ T6912] do_migrate_pages+0x488/0x740 [ 162.768544][ T6912] ? __pfx_do_migrate_pages+0x10/0x10 [ 162.768591][ T6912] ? rcu_is_watching+0x12/0xc0 [ 162.768646][ T6912] ? cap_capable+0x107/0x460 [ 162.768679][ T6912] ? get_task_mm+0xc2/0xf0 [ 162.768715][ T6912] ? security_capable+0xbd/0x260 [ 162.768755][ T6912] kernel_migrate_pages+0x560/0x700 [ 162.768795][ T6912] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 162.768835][ T6912] ? xfd_validate_state+0x129/0x190 [ 162.768894][ T6912] __x64_sys_migrate_pages+0x96/0x100 [ 162.768935][ T6912] ? lockdep_hardirqs_on+0x78/0x100 [ 162.768972][ T6912] do_syscall_64+0x106/0xf80 [ 162.769008][ T6912] ? clear_bhb_loop+0x40/0x90 [ 162.769051][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.769086][ T6912] RIP: 0033:0x7fefd199c819 [ 162.769114][ T6912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.769147][ T6912] RSP: 002b:00007fefd2917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 162.769180][ T6912] RAX: ffffffffffffffda RBX: 00007fefd1c15fa0 RCX: 00007fefd199c819 [ 162.769210][ T6912] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 162.769230][ T6912] RBP: 00007fefd1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 162.769251][ T6912] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 162.769272][ T6912] R13: 00007fefd1c16038 R14: 00007fefd1c15fa0 R15: 00007ffe60805648 [ 162.769312][ T6912] [ 163.897562][ T6924] netlink: 98 bytes leftover after parsing attributes in process `syz.4.197'. [ 164.780163][ T6944] FAULT_INJECTION: forcing a failure. [ 164.780163][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 164.820352][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: syz.2.200 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.820404][ T6944] Tainted: [L]=SOFTLOCKUP [ 164.820416][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.820435][ T6944] Call Trace: [ 164.820445][ T6944] [ 164.820458][ T6944] dump_stack_lvl+0x100/0x190 [ 164.820516][ T6944] should_fail_ex.cold+0x5/0xa [ 164.820557][ T6944] should_failslab+0xc2/0x120 [ 164.820595][ T6944] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 164.820650][ T6944] ? ptlock_alloc+0x1f/0x70 [ 164.820706][ T6944] ptlock_alloc+0x1f/0x70 [ 164.820754][ T6944] pte_alloc_one+0x82/0x3d0 [ 164.820795][ T6944] do_fault+0x88e/0x18e0 [ 164.820835][ T6944] ? __pmd_alloc+0x3fb/0x950 [ 164.820880][ T6944] __handle_mm_fault+0x1815/0x2b60 [ 164.820935][ T6944] ? mt_find+0x45e/0x8e0 [ 164.820964][ T6944] ? __pfx___handle_mm_fault+0x10/0x10 [ 164.820998][ T6944] ? __pfx_mt_find+0x10/0x10 [ 164.821042][ T6944] ? find_vma+0xbf/0x140 [ 164.821066][ T6944] ? __pfx_find_vma+0x10/0x10 [ 164.821094][ T6944] handle_mm_fault+0x36d/0xa20 [ 164.821134][ T6944] do_user_addr_fault+0x74c/0x12f0 [ 164.821166][ T6944] exc_page_fault+0x6f/0xd0 [ 164.821192][ T6944] asm_exc_page_fault+0x26/0x30 [ 164.821215][ T6944] RIP: 0010:copy_iovec_from_user+0xcf/0x140 [ 164.821254][ T6944] Code: 0f 85 87 00 00 00 4c 89 6b 08 49 83 ec 01 31 ff 48 83 c5 10 4c 89 e6 48 83 c3 10 e8 4b f7 15 fd 4d 85 e4 74 57 e8 61 fc 15 fd <4c> 8b 6d 08 e8 58 fc 15 fd 4c 8b 7d 00 e8 4f fc 15 fd 31 ff 4c 89 [ 164.821277][ T6944] RSP: 0018:ffffc90004877b20 EFLAGS: 00050283 [ 164.821296][ T6944] RAX: 0000000000000034 RBX: ffff8880348ac000 RCX: ffffc900069f9000 [ 164.821312][ T6944] RDX: 0000000000080000 RSI: ffffffff84f2471f RDI: ffff8880297e3d00 [ 164.821327][ T6944] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 164.821340][ T6944] R10: 0000000000001010 R11: 0000000000000000 R12: 0000000000000101 [ 164.821354][ T6944] R13: 0000000000001010 R14: dffffc0000000000 R15: 0000000000000000 [ 164.821377][ T6944] ? copy_iovec_from_user+0xcf/0x140 [ 164.821415][ T6944] iovec_from_user+0xc1/0x140 [ 164.821451][ T6944] __import_iovec+0x81/0x640 [ 164.821489][ T6944] import_iovec+0x82/0xb0 [ 164.821524][ T6944] vfs_writev+0x197/0xe10 [ 164.821545][ T6944] ? rcu_is_watching+0x12/0xc0 [ 164.821583][ T6944] ? trace_contention_end+0x140/0x180 [ 164.821622][ T6944] ? __pfx_vfs_writev+0x10/0x10 [ 164.821642][ T6944] ? fdget_pos+0x2aa/0x380 [ 164.821689][ T6944] ? __fget_files+0x21f/0x3d0 [ 164.821720][ T6944] ? do_writev+0x13e/0x340 [ 164.821739][ T6944] do_writev+0x13e/0x340 [ 164.821761][ T6944] ? __pfx_do_writev+0x10/0x10 [ 164.821790][ T6944] do_syscall_64+0x106/0xf80 [ 164.821815][ T6944] ? clear_bhb_loop+0x40/0x90 [ 164.821843][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.821867][ T6944] RIP: 0033:0x7f1920f9c819 [ 164.821886][ T6944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.821908][ T6944] RSP: 002b:00007f1921e4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 164.821929][ T6944] RAX: ffffffffffffffda RBX: 00007f1921215fa0 RCX: 00007f1920f9c819 [ 164.821944][ T6944] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000004 [ 164.821958][ T6944] RBP: 00007f1921032c91 R08: 0000000000000000 R09: 0000000000000000 [ 164.821972][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.821985][ T6944] R13: 00007f1921216038 R14: 00007f1921215fa0 R15: 00007ffcb8a71d68 [ 164.822016][ T6944] [ 165.019574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 169.575983][ T7048] netlink: 98 bytes leftover after parsing attributes in process `syz.0.213'. [ 170.046594][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.220'. [ 171.620950][ T7090] netlink: 342 bytes leftover after parsing attributes in process `syz.2.225'. [ 171.704181][ T7090] netlink: 214 bytes leftover after parsing attributes in process `syz.2.225'. [ 171.933029][ T7097] sd 0:0:1:0: PR command failed: 1026 [ 171.943300][ T7097] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 171.957313][ T7097] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 174.974509][ T7140] block nbd8: Unsupported socket: should be TCP or UNIX. [ 175.333847][ T7156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 176.175607][ T7183] netlink: 342 bytes leftover after parsing attributes in process `syz.3.248'. [ 176.205807][ T7183] netlink: 214 bytes leftover after parsing attributes in process `syz.3.248'. [ 176.660810][ T7196] netlink: 342 bytes leftover after parsing attributes in process `syz.3.250'. [ 178.288598][ T7234] smpboot: CPU 1 is now offline [ 178.879809][ T7238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.923235][ T7238] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 179.045405][ T7238] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 179.145547][ T7238] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.177854][ T7238] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 179.230871][ T7238] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 179.292715][ T7238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.320196][ T7238] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 179.361315][ T7238] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 179.389464][ T7238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 179.416722][ T7238] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 179.439630][ T7238] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 179.992708][ T7247] FAULT_INJECTION: forcing a failure. [ 179.992708][ T7247] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.074357][ T7247] CPU: 0 UID: 0 PID: 7247 Comm: syz.4.258 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.074395][ T7247] Tainted: [L]=SOFTLOCKUP [ 180.074403][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 180.074420][ T7247] Call Trace: [ 180.074428][ T7247] [ 180.074440][ T7247] dump_stack_lvl+0x100/0x190 [ 180.074489][ T7247] should_fail_ex.cold+0x5/0xa [ 180.074514][ T7247] ? prepare_alloc_pages+0x16d/0x5f0 [ 180.074546][ T7247] should_fail_alloc_page+0xeb/0x140 [ 180.074588][ T7247] prepare_alloc_pages+0x1f0/0x5f0 [ 180.074620][ T7247] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 180.074659][ T7247] ? __pfx_rwsem_wake.isra.0+0x10/0x10 [ 180.074697][ T7247] ? __pfx___might_resched+0x10/0x10 [ 180.074732][ T7247] ? rcu_is_watching+0x12/0xc0 [ 180.074772][ T7247] ? __up_read+0x2c5/0x700 [ 180.074807][ T7247] ? __pfx___up_read+0x10/0x10 [ 180.074840][ T7247] ? __rmap_walk_file+0x5c5/0x680 [ 180.074868][ T7247] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 180.074912][ T7247] ? __rmap_walk_file+0x50f/0x680 [ 180.074946][ T7247] ? rmap_walk_file+0x1dd/0x2a0 [ 180.074986][ T7247] __folio_alloc_noprof+0x13/0x2f0 [ 180.075023][ T7247] alloc_migration_target+0x1d7/0x6d0 [ 180.075055][ T7247] migrate_pages_batch+0x4f2/0x4530 [ 180.075086][ T7247] ? __pfx_alloc_migration_target+0x10/0x10 [ 180.075123][ T7247] ? walk_pgd_range+0x1133/0x1dd0 [ 180.075145][ T7247] ? __pfx_migrate_pages_batch+0x10/0x10 [ 180.075194][ T7247] migrate_pages_sync+0x12c/0x880 [ 180.075225][ T7247] ? __pfx_alloc_migration_target+0x10/0x10 [ 180.075260][ T7247] ? __pfx_migrate_pages_sync+0x10/0x10 [ 180.075287][ T7247] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 180.075322][ T7247] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 180.075350][ T7247] migrate_pages+0x1aae/0x28a0 [ 180.075389][ T7247] ? __pfx_alloc_migration_target+0x10/0x10 [ 180.075424][ T7247] ? __pfx_migrate_pages+0x10/0x10 [ 180.075455][ T7247] ? queue_pages_range+0x11e/0x180 [ 180.075487][ T7247] ? __up_read+0x2c5/0x700 [ 180.075542][ T7247] ? __pfx___up_read+0x10/0x10 [ 180.075577][ T7247] ? do_migrate_pages+0x451/0x740 [ 180.075603][ T7247] ? do_migrate_pages+0x451/0x740 [ 180.075636][ T7247] do_migrate_pages+0x488/0x740 [ 180.075672][ T7247] ? __pfx_do_migrate_pages+0x10/0x10 [ 180.075705][ T7247] ? rcu_is_watching+0x12/0xc0 [ 180.075743][ T7247] ? cap_capable+0x107/0x460 [ 180.075766][ T7247] ? get_task_mm+0xc2/0xf0 [ 180.075791][ T7247] ? security_capable+0xbd/0x260 [ 180.075818][ T7247] kernel_migrate_pages+0x560/0x700 [ 180.075846][ T7247] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 180.075874][ T7247] ? xfd_validate_state+0x129/0x190 [ 180.075917][ T7247] __x64_sys_migrate_pages+0x96/0x100 [ 180.075946][ T7247] ? lockdep_hardirqs_on+0x78/0x100 [ 180.075971][ T7247] do_syscall_64+0x106/0xf80 [ 180.075995][ T7247] ? clear_bhb_loop+0x40/0x90 [ 180.076025][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.076050][ T7247] RIP: 0033:0x7fefd199c819 [ 180.076070][ T7247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.076093][ T7247] RSP: 002b:00007fefd2917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 180.076115][ T7247] RAX: ffffffffffffffda RBX: 00007fefd1c15fa0 RCX: 00007fefd199c819 [ 180.076131][ T7247] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 180.076145][ T7247] RBP: 00007fefd1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 180.076159][ T7247] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 180.076173][ T7247] R13: 00007fefd1c16038 R14: 00007fefd1c15fa0 R15: 00007ffe60805648 [ 180.076202][ T7247] [ 180.502702][ T7252] FAULT_INJECTION: forcing a failure. [ 180.502702][ T7252] name failslab, interval 1, probability 0, space 0, times 0 [ 180.515654][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: syz.3.261 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.515690][ T7252] Tainted: [L]=SOFTLOCKUP [ 180.515698][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 180.515711][ T7252] Call Trace: [ 180.515720][ T7252] [ 180.515730][ T7252] dump_stack_lvl+0x100/0x190 [ 180.515770][ T7252] should_fail_ex.cold+0x5/0xa [ 180.515799][ T7252] should_failslab+0xc2/0x120 [ 180.515825][ T7252] __kmalloc_cache_noprof+0x7a/0x6f0 [ 180.515858][ T7252] ? sctp_add_bind_addr+0xae/0x3e0 [ 180.515895][ T7252] ? __sctp_v6_cmp_addr+0x206/0x530 [ 180.515924][ T7252] sctp_add_bind_addr+0xae/0x3e0 [ 180.515965][ T7252] sctp_copy_local_addr_list+0x349/0x550 [ 180.515995][ T7252] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 180.516024][ T7252] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 180.516051][ T7252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 180.516080][ T7252] sctp_bind_addr_copy+0xe0/0x530 [ 180.516123][ T7252] sctp_connect_new_asoc+0x1c9/0x770 [ 180.516157][ T7252] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 180.516187][ T7252] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 180.516214][ T7252] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 180.516251][ T7252] __sctp_connect+0x3e7/0xc70 [ 180.516287][ T7252] ? __pfx___sctp_connect+0x10/0x10 [ 180.516320][ T7252] ? __pfx_sctp_inet_connect+0x10/0x10 [ 180.516352][ T7252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 180.516379][ T7252] ? __pfx_sctp_inet_connect+0x10/0x10 [ 180.516408][ T7252] sctp_inet_connect+0x15f/0x220 [ 180.516471][ T7252] __sys_connect_file+0x141/0x1a0 [ 180.516510][ T7252] __sys_connect+0x141/0x170 [ 180.516545][ T7252] ? __pfx___sys_connect+0x10/0x10 [ 180.516617][ T7252] __x64_sys_connect+0x72/0xb0 [ 180.516667][ T7252] ? lockdep_hardirqs_on+0x78/0x100 [ 180.516691][ T7252] do_syscall_64+0x106/0xf80 [ 180.516733][ T7252] ? clear_bhb_loop+0x40/0x90 [ 180.516763][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.516788][ T7252] RIP: 0033:0x7f89a5b9c819 [ 180.516808][ T7252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.516831][ T7252] RSP: 002b:00007f89a6ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 180.516853][ T7252] RAX: ffffffffffffffda RBX: 00007f89a5e15fa0 RCX: 00007f89a5b9c819 [ 180.516868][ T7252] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 180.516883][ T7252] RBP: 00007f89a5c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 180.516896][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.516910][ T7252] R13: 00007f89a5e16038 R14: 00007f89a5e15fa0 R15: 00007fff86fac0d8 [ 180.516941][ T7252] [ 181.119925][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.295500][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.304803][ T5147] Bluetooth: hci3: unexpected subevent 0x03 length: 253 > 9 [ 181.392026][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.421205][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 183.178613][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.341775][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.418459][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.505377][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 184.620757][ T7312] netlink: 13320 bytes leftover after parsing attributes in process `syz.2.273'. [ 185.261793][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.418604][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.466656][ T7328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.276'. [ 185.499836][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.578482][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.866809][ T7328] syz.3.276 (7328) used greatest stack depth: 19672 bytes left [ 186.919021][ T7358] netlink: 98 bytes leftover after parsing attributes in process `syz.0.283'. [ 189.510390][ T7398] zswap: compressor not available [ 190.785126][ T7443] netlink: 98 bytes leftover after parsing attributes in process `syz.3.304'. [ 190.804610][ T7430] zswap: compressor not available [ 194.542174][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.548698][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.909474][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.326'. [ 197.722386][ T7589] netlink: 98 bytes leftover after parsing attributes in process `syz.0.332'. [ 198.029007][ T7586] zswap: compressor not available [ 198.232285][ T7604] ======================================================= [ 198.232285][ T7604] WARNING: The mand mount option has been deprecated and [ 198.232285][ T7604] and is ignored by this kernel. Remove the mand [ 198.232285][ T7604] option from the mount to silence this warning. [ 198.232285][ T7604] ======================================================= [ 199.684182][ T7621] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 200.231217][ T7630] netlink: 342 bytes leftover after parsing attributes in process `syz.3.342'. [ 200.258033][ T7630] netlink: 342 bytes leftover after parsing attributes in process `syz.3.342'. [ 200.417626][ T7633] netlink: 98 bytes leftover after parsing attributes in process `syz.4.343'. [ 200.451173][ T7635] netlink: 98 bytes leftover after parsing attributes in process `syz.0.344'. [ 200.804393][ T7644] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 200.856044][ T7640] sp0: Synchronizing with TNC [ 201.633432][ T7650] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 202.238456][ T5832] Bluetooth: hci4: unexpected event 0x3e length: 508 > 260 [ 202.238488][ T5832] Bluetooth: hci4: unexpected subevent 0x02 length: 507 > 260 [ 202.253606][ T5832] Bluetooth: hci4: Dropping invalid advertising data [ 202.261613][ T5832] Bluetooth: hci4: unknown advertising packet type: 0xe9 [ 203.682518][ T7695] netlink: 98 bytes leftover after parsing attributes in process `syz.3.360'. [ 203.841078][ T7698] netlink: 98 bytes leftover after parsing attributes in process `syz.4.361'. [ 204.110975][ T7710] FAULT_INJECTION: forcing a failure. [ 204.110975][ T7710] name failslab, interval 1, probability 0, space 0, times 0 [ 204.189298][ T7710] CPU: 0 UID: 0 PID: 7710 Comm: syz.0.365 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.189336][ T7710] Tainted: [L]=SOFTLOCKUP [ 204.189344][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 204.189357][ T7710] Call Trace: [ 204.189364][ T7710] [ 204.189373][ T7710] dump_stack_lvl+0x100/0x190 [ 204.189417][ T7710] should_fail_ex.cold+0x5/0xa [ 204.189444][ T7710] should_failslab+0xc2/0x120 [ 204.189471][ T7710] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 204.189507][ T7710] ? sk_prot_alloc+0x60/0x2a0 [ 204.189541][ T7710] sk_prot_alloc+0x60/0x2a0 [ 204.189570][ T7710] sk_alloc+0x36/0xe80 [ 204.189607][ T7710] inet_create+0x3a0/0x1060 [ 204.189639][ T7710] ? inet_create+0x94/0x1060 [ 204.189673][ T7710] __sock_create+0x339/0x860 [ 204.189708][ T7710] __sys_socket+0x14d/0x260 [ 204.189739][ T7710] ? __pfx___sys_socket+0x10/0x10 [ 204.189779][ T7710] __x64_sys_socket+0x72/0xb0 [ 204.189809][ T7710] ? lockdep_hardirqs_on+0x78/0x100 [ 204.189835][ T7710] do_syscall_64+0x106/0xf80 [ 204.189858][ T7710] ? clear_bhb_loop+0x40/0x90 [ 204.189886][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.189910][ T7710] RIP: 0033:0x7f52e199c819 [ 204.189929][ T7710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.189951][ T7710] RSP: 002b:00007f52e28ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 204.189973][ T7710] RAX: ffffffffffffffda RBX: 00007f52e1c15fa0 RCX: 00007f52e199c819 [ 204.189988][ T7710] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002 [ 204.190001][ T7710] RBP: 00007f52e1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 204.190014][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.190036][ T7710] R13: 00007f52e1c16038 R14: 00007f52e1c15fa0 R15: 00007ffccbb77368 [ 204.190065][ T7710] [ 204.455440][ T7714] netlink: 342 bytes leftover after parsing attributes in process `syz.4.366'. [ 205.390883][ T7733] netlink: 98 bytes leftover after parsing attributes in process `syz.2.372'. [ 208.133195][ T7795] netlink: 98 bytes leftover after parsing attributes in process `syz.4.384'. [ 208.473666][ T7803] netlink: 342 bytes leftover after parsing attributes in process `syz.0.385'. [ 210.602447][ T7857] netlink: 98 bytes leftover after parsing attributes in process `syz.4.395'. [ 210.868736][ T7863] netlink: 342 bytes leftover after parsing attributes in process `syz.2.396'. [ 211.190987][ T7877] FAULT_INJECTION: forcing a failure. [ 211.190987][ T7877] name failslab, interval 1, probability 0, space 0, times 0 [ 211.313255][ T7877] CPU: 0 UID: 0 PID: 7877 Comm: syz.2.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.313291][ T7877] Tainted: [L]=SOFTLOCKUP [ 211.313299][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 211.313313][ T7877] Call Trace: [ 211.313320][ T7877] [ 211.313328][ T7877] dump_stack_lvl+0x100/0x190 [ 211.313368][ T7877] should_fail_ex.cold+0x5/0xa [ 211.313396][ T7877] should_failslab+0xc2/0x120 [ 211.313423][ T7877] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 211.313460][ T7877] ? ptlock_alloc+0x1f/0x70 [ 211.313498][ T7877] ptlock_alloc+0x1f/0x70 [ 211.313530][ T7877] pte_alloc_one+0x82/0x3d0 [ 211.313558][ T7877] do_fault+0x88e/0x18e0 [ 211.313585][ T7877] ? __pmd_alloc+0x3fb/0x950 [ 211.313623][ T7877] __handle_mm_fault+0x1815/0x2b60 [ 211.313661][ T7877] ? mt_find+0x45e/0x8e0 [ 211.313689][ T7877] ? __pfx___handle_mm_fault+0x10/0x10 [ 211.313721][ T7877] ? __pfx_mt_find+0x10/0x10 [ 211.313763][ T7877] ? find_vma+0xbf/0x140 [ 211.313786][ T7877] ? __pfx_find_vma+0x10/0x10 [ 211.313812][ T7877] handle_mm_fault+0x36d/0xa20 [ 211.313860][ T7877] do_user_addr_fault+0x74c/0x12f0 [ 211.313911][ T7877] exc_page_fault+0x6f/0xd0 [ 211.313936][ T7877] asm_exc_page_fault+0x26/0x30 [ 211.313961][ T7877] RIP: 0010:copy_iovec_from_user+0xcf/0x140 [ 211.313993][ T7877] Code: 0f 85 87 00 00 00 4c 89 6b 08 49 83 ec 01 31 ff 48 83 c5 10 4c 89 e6 48 83 c3 10 e8 4b f7 15 fd 4d 85 e4 74 57 e8 61 fc 15 fd <4c> 8b 6d 08 e8 58 fc 15 fd 4c 8b 7d 00 e8 4f fc 15 fd 31 ff 4c 89 [ 211.314016][ T7877] RSP: 0018:ffffc90005477b20 EFLAGS: 00050283 [ 211.314034][ T7877] RAX: 0000000000000034 RBX: ffff888033e4c000 RCX: ffffc900069f9000 [ 211.314049][ T7877] RDX: 0000000000080000 RSI: ffffffff84f2471f RDI: ffff88802edd3d00 [ 211.314064][ T7877] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 211.314078][ T7877] R10: 0000000000001010 R11: 0000000000000000 R12: 0000000000000101 [ 211.314092][ T7877] R13: 0000000000001010 R14: dffffc0000000000 R15: 0000000000000000 [ 211.314115][ T7877] ? copy_iovec_from_user+0xcf/0x140 [ 211.314153][ T7877] iovec_from_user+0xc1/0x140 [ 211.314188][ T7877] __import_iovec+0x81/0x640 [ 211.314227][ T7877] import_iovec+0x82/0xb0 [ 211.314262][ T7877] vfs_writev+0x197/0xe10 [ 211.314282][ T7877] ? rcu_is_watching+0x12/0xc0 [ 211.314321][ T7877] ? trace_contention_end+0x140/0x180 [ 211.314360][ T7877] ? __pfx_vfs_writev+0x10/0x10 [ 211.314379][ T7877] ? fdget_pos+0x2aa/0x380 [ 211.314426][ T7877] ? __fget_files+0x21f/0x3d0 [ 211.314457][ T7877] ? do_writev+0x13e/0x340 [ 211.314476][ T7877] do_writev+0x13e/0x340 [ 211.314498][ T7877] ? __pfx_do_writev+0x10/0x10 [ 211.314527][ T7877] do_syscall_64+0x106/0xf80 [ 211.314551][ T7877] ? clear_bhb_loop+0x40/0x90 [ 211.314580][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.314604][ T7877] RIP: 0033:0x7f1920f9c819 [ 211.314631][ T7877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.314653][ T7877] RSP: 002b:00007f1921e4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 211.314674][ T7877] RAX: ffffffffffffffda RBX: 00007f1921215fa0 RCX: 00007f1920f9c819 [ 211.314689][ T7877] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000004 [ 211.314702][ T7877] RBP: 00007f1921032c91 R08: 0000000000000000 R09: 0000000000000000 [ 211.314716][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.314730][ T7877] R13: 00007f1921216038 R14: 00007f1921215fa0 R15: 00007ffcb8a71d68 [ 211.314761][ T7877] [ 213.397470][ T29] audit: type=1326 audit(4294967339.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.401" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefd199c819 code=0x0 [ 213.488273][ T5832] Bluetooth: hci4: unexpected subevent 0x04 length: 122 > 11 [ 215.343961][ T7952] FAULT_INJECTION: forcing a failure. [ 215.343961][ T7952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.406348][ T7952] CPU: 0 UID: 0 PID: 7952 Comm: syz.0.410 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.406385][ T7952] Tainted: [L]=SOFTLOCKUP [ 215.406393][ T7952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.406407][ T7952] Call Trace: [ 215.406414][ T7952] [ 215.406423][ T7952] dump_stack_lvl+0x100/0x190 [ 215.406465][ T7952] should_fail_ex.cold+0x5/0xa [ 215.406495][ T7952] _copy_from_iter+0x1f4/0x1690 [ 215.406535][ T7952] ? __pfx__copy_from_iter+0x10/0x10 [ 215.406566][ T7952] ? trace_kmalloc+0x101/0x130 [ 215.406592][ T7952] ? __kasan_kmalloc+0xaa/0xb0 [ 215.406616][ T7952] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 215.406638][ T7952] ? proc_sys_call_handler+0x2c7/0x5a0 [ 215.406660][ T7952] ? proc_sys_call_handler+0x131/0x5a0 [ 215.406690][ T7952] proc_sys_call_handler+0x3ed/0x5a0 [ 215.406716][ T7952] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 215.406749][ T7952] vfs_write+0x6ac/0x1070 [ 215.406773][ T7952] ? __pfx_proc_sys_write+0x10/0x10 [ 215.406799][ T7952] ? __pfx_vfs_write+0x10/0x10 [ 215.406820][ T7952] ? find_held_lock+0x2b/0x80 [ 215.406863][ T7952] __x64_sys_pwrite64+0x1eb/0x250 [ 215.406903][ T7952] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 215.406946][ T7952] do_syscall_64+0x106/0xf80 [ 215.406971][ T7952] ? clear_bhb_loop+0x40/0x90 [ 215.407001][ T7952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.407030][ T7952] RIP: 0033:0x7f52e199c819 [ 215.407049][ T7952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.407072][ T7952] RSP: 002b:00007f52e28ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 215.407094][ T7952] RAX: ffffffffffffffda RBX: 00007f52e1c15fa0 RCX: 00007f52e199c819 [ 215.407110][ T7952] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 000000000000000b [ 215.407124][ T7952] RBP: 00007f52e1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 215.407138][ T7952] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 215.407151][ T7952] R13: 00007f52e1c16038 R14: 00007f52e1c15fa0 R15: 00007ffccbb77368 [ 215.407182][ T7952] [ 215.716648][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'. [ 216.433803][ T29] audit: type=1800 audit(4294967342.360:7): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.408" name="lu_gp_id" dev="configfs" ino=19977 res=0 errno=0 [ 216.467963][ T7987] kstrtoul() returned -22 for lu_gp_id [ 217.855029][ T8000] usb usb4: usbfs: process 8000 (syz.0.421) did not claim interface 0 before use [ 218.075337][ T8000] FAULT_INJECTION: forcing a failure. [ 218.075337][ T8000] name failslab, interval 1, probability 0, space 0, times 0 [ 218.195320][ T8000] CPU: 0 UID: 0 PID: 8000 Comm: syz.0.421 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.195358][ T8000] Tainted: [L]=SOFTLOCKUP [ 218.195366][ T8000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 218.195380][ T8000] Call Trace: [ 218.195388][ T8000] [ 218.195397][ T8000] dump_stack_lvl+0x100/0x190 [ 218.195438][ T8000] should_fail_ex.cold+0x5/0xa [ 218.195467][ T8000] should_failslab+0xc2/0x120 [ 218.195495][ T8000] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 218.195533][ T8000] ? __proc_create+0x2cb/0x8c0 [ 218.195569][ T8000] __proc_create+0x2cb/0x8c0 [ 218.195594][ T8000] ? __pfx___proc_create+0x10/0x10 [ 218.195630][ T8000] ? _raw_write_unlock+0x28/0x50 [ 218.195654][ T8000] ? proc_register+0x559/0x8a0 [ 218.195681][ T8000] proc_create_reg+0x75/0x170 [ 218.195707][ T8000] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 218.195732][ T8000] proc_create_net_single+0x86/0x180 [ 218.195759][ T8000] ? __pfx_proc_create_net_single+0x10/0x10 [ 218.195787][ T8000] ? round_jiffies+0x10a/0x160 [ 218.195820][ T8000] can_init_proc+0x1e1/0x4b0 [ 218.195844][ T8000] can_pernet_init+0x1e4/0x370 [ 218.195883][ T8000] ? __pfx_can_pernet_init+0x10/0x10 [ 218.195919][ T8000] ops_init+0x1e2/0x5f0 [ 218.195948][ T8000] setup_net+0x118/0x3a0 [ 218.195973][ T8000] ? __pfx_setup_net+0x10/0x10 [ 218.195996][ T8000] ? lockdep_init_map_type+0x5c/0x250 [ 218.196031][ T8000] ? mutex_init_lockep+0x110/0x150 [ 218.196077][ T8000] copy_net_ns+0x46f/0x7c0 [ 218.196107][ T8000] create_new_namespaces+0x3ea/0xac0 [ 218.196141][ T8000] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 218.196171][ T8000] ksys_unshare+0x473/0xad0 [ 218.196206][ T8000] ? __pfx_ksys_unshare+0x10/0x10 [ 218.196248][ T8000] __x64_sys_unshare+0x31/0x40 [ 218.196279][ T8000] do_syscall_64+0x106/0xf80 [ 218.196302][ T8000] ? clear_bhb_loop+0x40/0x90 [ 218.196332][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.196360][ T8000] RIP: 0033:0x7f52e199c819 [ 218.196379][ T8000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.196402][ T8000] RSP: 002b:00007f52e28ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 218.196425][ T8000] RAX: ffffffffffffffda RBX: 00007f52e1c15fa0 RCX: 00007f52e199c819 [ 218.196440][ T8000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 218.196454][ T8000] RBP: 00007f52e1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 218.196468][ T8000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.196482][ T8000] R13: 00007f52e1c16038 R14: 00007f52e1c15fa0 R15: 00007ffccbb77368 [ 218.196512][ T8000] [ 219.488659][ T8029] FAULT_INJECTION: forcing a failure. [ 219.488659][ T8029] name failslab, interval 1, probability 0, space 0, times 0 [ 219.608269][ T8029] CPU: 0 UID: 0 PID: 8029 Comm: syz.3.427 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.608307][ T8029] Tainted: [L]=SOFTLOCKUP [ 219.608315][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 219.608329][ T8029] Call Trace: [ 219.608337][ T8029] [ 219.608346][ T8029] dump_stack_lvl+0x100/0x190 [ 219.608388][ T8029] should_fail_ex.cold+0x5/0xa [ 219.608417][ T8029] should_failslab+0xc2/0x120 [ 219.608445][ T8029] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 219.608490][ T8029] ? alloc_empty_file+0x55/0x1c0 [ 219.608529][ T8029] alloc_empty_file+0x55/0x1c0 [ 219.608563][ T8029] alloc_file_pseudo+0x13a/0x230 [ 219.608597][ T8029] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 219.608629][ T8029] ? alloc_fd+0x476/0x790 [ 219.608655][ T8029] ? do_raw_spin_unlock+0x145/0x1e0 [ 219.608697][ T8029] __anon_inode_getfile+0xe8/0x280 [ 219.608732][ T8029] anon_inode_getfile_fmode+0x37/0xa0 [ 219.608765][ T8029] do_eventfd+0x159/0x2b0 [ 219.608802][ T8029] __x64_sys_eventfd+0x32/0x50 [ 219.608838][ T8029] do_syscall_64+0x106/0xf80 [ 219.608863][ T8029] ? clear_bhb_loop+0x40/0x90 [ 219.608893][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.608918][ T8029] RIP: 0033:0x7f89a5b9c819 [ 219.608937][ T8029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.608961][ T8029] RSP: 002b:00007f89a6ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 219.608984][ T8029] RAX: ffffffffffffffda RBX: 00007f89a5e15fa0 RCX: 00007f89a5b9c819 [ 219.609000][ T8029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000100 [ 219.609014][ T8029] RBP: 00007f89a5c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 219.609028][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.609043][ T8029] R13: 00007f89a5e16038 R14: 00007f89a5e15fa0 R15: 00007fff86fac0d8 [ 219.609073][ T8029] [ 220.259834][ T29] audit: type=1800 audit(4294967346.180:8): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.433" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 221.174273][ T8063] syz.3.432 (8063) used greatest stack depth: 19544 bytes left [ 221.553322][ T8082] futex_wake_op: syz.0.436 tries to shift op by -2048; fix this program [ 222.606411][ T8093] netlink: 98 bytes leftover after parsing attributes in process `syz.0.440'. [ 222.896077][ T8076] kexec: Could not allocate control_code_buffer [ 223.139974][ T8108] FAULT_INJECTION: forcing a failure. [ 223.139974][ T8108] name fail_futex, interval 1, probability 0, space 0, times 0 [ 223.208487][ T8108] CPU: 0 UID: 0 PID: 8108 Comm: syz.2.443 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.208527][ T8108] Tainted: [L]=SOFTLOCKUP [ 223.208536][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 223.208550][ T8108] Call Trace: [ 223.208558][ T8108] [ 223.208567][ T8108] dump_stack_lvl+0x100/0x190 [ 223.208608][ T8108] should_fail_ex.cold+0x5/0xa [ 223.208638][ T8108] get_futex_key+0x1d2/0x1620 [ 223.208675][ T8108] ? __pfx_get_futex_key+0x10/0x10 [ 223.208717][ T8108] ? update_se+0x94/0x760 [ 223.208750][ T8108] ? psi_group_change+0x457/0xa20 [ 223.208788][ T8108] futex_wait_setup+0x83/0x510 [ 223.208834][ T8108] __futex_wait+0x19f/0x300 [ 223.208878][ T8108] ? __pfx___futex_wait+0x10/0x10 [ 223.208914][ T8108] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 223.208954][ T8108] ? lockdep_hardirqs_on+0x78/0x100 [ 223.208982][ T8108] ? __pfx_futex_wake_mark+0x10/0x10 [ 223.209030][ T8108] ? find_held_lock+0x2b/0x80 [ 223.209054][ T8108] ? futex_wake+0x456/0x530 [ 223.209098][ T8108] futex_wait+0xed/0x380 [ 223.209137][ T8108] ? __pfx_futex_wait+0x10/0x10 [ 223.209189][ T8108] ? do_writev+0x214/0x340 [ 223.209217][ T8108] do_futex+0x1ef/0x350 [ 223.209251][ T8108] ? __pfx_do_futex+0x10/0x10 [ 223.209282][ T8108] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.209318][ T8108] ? __fget_files+0x21f/0x3d0 [ 223.209345][ T8108] __x64_sys_futex+0x34f/0x4d0 [ 223.209380][ T8108] ? __x64_sys_openat+0x12d/0x210 [ 223.209415][ T8108] ? __pfx___x64_sys_futex+0x10/0x10 [ 223.209459][ T8108] do_syscall_64+0x106/0xf80 [ 223.209483][ T8108] ? clear_bhb_loop+0x40/0x90 [ 223.209513][ T8108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.209537][ T8108] RIP: 0033:0x7f1920f9c819 [ 223.209557][ T8108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.209581][ T8108] RSP: 002b:00007f1921e4a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 223.209604][ T8108] RAX: ffffffffffffffda RBX: 00007f1921215fa8 RCX: 00007f1920f9c819 [ 223.209620][ T8108] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1921215fa8 [ 223.209634][ T8108] RBP: 00007f1921215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 223.209649][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.209663][ T8108] R13: 00007f1921216038 R14: 00007ffcb8a71c80 R15: 00007ffcb8a71d68 [ 223.209693][ T8108] [ 224.902573][ T8130] FAULT_INJECTION: forcing a failure. [ 224.902573][ T8130] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.970739][ T8130] CPU: 0 UID: 0 PID: 8130 Comm: syz.4.447 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.970778][ T8130] Tainted: [L]=SOFTLOCKUP [ 224.970786][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 224.970800][ T8130] Call Trace: [ 224.970808][ T8130] [ 224.970818][ T8130] dump_stack_lvl+0x100/0x190 [ 224.970859][ T8130] should_fail_ex.cold+0x5/0xa [ 224.970883][ T8130] ? prepare_alloc_pages+0x16d/0x5f0 [ 224.970916][ T8130] should_fail_alloc_page+0xeb/0x140 [ 224.970945][ T8130] prepare_alloc_pages+0x1f0/0x5f0 [ 224.970980][ T8130] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 224.971037][ T8130] ? __lock_acquire+0x4a5/0x2630 [ 224.971079][ T8130] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 224.971122][ T8130] ? do_raw_spin_lock+0x128/0x260 [ 224.971161][ T8130] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 224.971205][ T8130] ? find_held_lock+0x2b/0x80 [ 224.971238][ T8130] ? __lock_acquire+0x4a5/0x2630 [ 224.971270][ T8130] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.971297][ T8130] ? policy_nodemask+0xed/0x4f0 [ 224.971326][ T8130] alloc_pages_mpol+0x1fb/0x550 [ 224.971355][ T8130] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 224.971382][ T8130] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 224.971405][ T8130] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 224.971434][ T8130] folio_alloc_mpol_noprof+0x36/0x340 [ 224.971468][ T8130] shmem_alloc_folio+0x135/0x160 [ 224.971502][ T8130] shmem_alloc_and_add_folio+0x371/0xd40 [ 224.971549][ T8130] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 224.971590][ T8130] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 224.971637][ T8130] shmem_get_folio_gfp+0x6ab/0x1900 [ 224.971683][ T8130] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 224.971724][ T8130] ? filemap_map_pages+0xe4c/0x2010 [ 224.971767][ T8130] shmem_fault+0x1f9/0xa20 [ 224.971808][ T8130] ? __pfx_shmem_fault+0x10/0x10 [ 224.971852][ T8130] ? __pfx_filemap_map_pages+0x10/0x10 [ 224.971899][ T8130] __do_fault+0x10d/0x550 [ 224.971926][ T8130] do_fault+0xabb/0x18e0 [ 224.971960][ T8130] __handle_mm_fault+0x1815/0x2b60 [ 224.971999][ T8130] ? mt_find+0x45e/0x8e0 [ 224.972034][ T8130] ? __pfx___handle_mm_fault+0x10/0x10 [ 224.972068][ T8130] ? __pfx_mt_find+0x10/0x10 [ 224.972112][ T8130] ? find_vma+0xbf/0x140 [ 224.972136][ T8130] ? __pfx_find_vma+0x10/0x10 [ 224.972164][ T8130] handle_mm_fault+0x36d/0xa20 [ 224.972204][ T8130] do_user_addr_fault+0x74c/0x12f0 [ 224.972237][ T8130] exc_page_fault+0x6f/0xd0 [ 224.972262][ T8130] asm_exc_page_fault+0x26/0x30 [ 224.972286][ T8130] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 224.972327][ T8130] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 224.972351][ T8130] RSP: 0018:ffffc900039b7428 EFLAGS: 00050202 [ 224.972369][ T8130] RAX: 0000000000000001 RBX: 000000000000ff04 RCX: 0000000000004f04 [ 224.972384][ T8130] RDX: 0000000000000001 RSI: 000000000000b000 RDI: ffff88804f78b010 [ 224.972400][ T8130] RBP: ffffc900039b7b40 R08: 0000000000000001 R09: ffffed1009ef1fe2 [ 224.972415][ T8130] R10: ffff88804f78ff13 R11: 0000000000000000 R12: 0000000000000000 [ 224.972430][ T8130] R13: 0000000000000000 R14: 000000000000ff04 R15: ffffc900039b7b48 [ 224.972460][ T8130] _copy_from_iter+0x498/0x1690 [ 224.972500][ T8130] ? __pfx__copy_from_iter+0x10/0x10 [ 224.972532][ T8130] ? sctp_addto_chunk+0xfa/0x2a0 [ 224.972571][ T8130] ? __asan_memcpy+0x3c/0x60 [ 224.972607][ T8130] ? sctp_make_datafrag_empty+0x1a4/0x230 [ 224.972648][ T8130] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 224.972693][ T8130] sctp_user_addto_chunk+0x84/0x240 [ 224.972721][ T8130] sctp_datamsg_from_user+0x60b/0x1360 [ 224.972773][ T8130] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 224.972800][ T8130] ? __asan_memmove+0x30/0x60 [ 224.972836][ T8130] ? sctp_assoc_set_primary+0x276/0x310 [ 224.972866][ T8130] ? sctp_assoc_add_peer+0x252/0x14f0 [ 224.972901][ T8130] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 224.972928][ T8130] ? sctp_connect_new_asoc+0x41e/0x770 [ 224.972962][ T8130] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 224.973001][ T8130] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.973049][ T8130] sctp_sendmsg+0x1185/0x22b0 [ 224.973089][ T8130] ? __pfx_sctp_sendmsg+0x10/0x10 [ 224.973120][ T8130] ? __lock_acquire+0x4a5/0x2630 [ 224.973156][ T8130] ? aa_sk_perm+0x309/0xaa0 [ 224.973192][ T8130] ? __pfx_aa_sk_perm+0x10/0x10 [ 224.973230][ T8130] ? __pfx_sctp_sendmsg+0x10/0x10 [ 224.973263][ T8130] inet_sendmsg+0x11c/0x140 [ 224.973297][ T8130] ____sys_sendmsg+0x98d/0xb70 [ 224.973326][ T8130] ? __pfx_inet_sendmsg+0x10/0x10 [ 224.973359][ T8130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.973394][ T8130] ? futex_unqueue+0x133/0x2c0 [ 224.973432][ T8130] ___sys_sendmsg+0x190/0x1e0 [ 224.973467][ T8130] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.973498][ T8130] ? __pfx___futex_wait+0x10/0x10 [ 224.973534][ T8130] ? get_pid_task+0xfc/0x250 [ 224.973578][ T8130] ? find_held_lock+0x2b/0x80 [ 224.973619][ T8130] __sys_sendmmsg+0x205/0x430 [ 224.973647][ T8130] ? __pfx___sys_sendmmsg+0x10/0x10 [ 224.973678][ T8130] ? __pfx_do_futex+0x10/0x10 [ 224.973725][ T8130] ? xfd_validate_state+0x129/0x190 [ 224.973768][ T8130] __x64_sys_sendmmsg+0x9c/0x100 [ 224.973807][ T8130] ? lockdep_hardirqs_on+0x78/0x100 [ 224.973833][ T8130] do_syscall_64+0x106/0xf80 [ 224.973858][ T8130] ? clear_bhb_loop+0x40/0x90 [ 224.973926][ T8130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.973952][ T8130] RIP: 0033:0x7fefd199c819 [ 224.973972][ T8130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.973994][ T8130] RSP: 002b:00007fefd2917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 224.974016][ T8130] RAX: ffffffffffffffda RBX: 00007fefd1c15fa0 RCX: 00007fefd199c819 [ 224.974038][ T8130] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000005 [ 224.974052][ T8130] RBP: 00007fefd1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 224.974067][ T8130] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 224.974081][ T8130] R13: 00007fefd1c16038 R14: 00007fefd1c15fa0 R15: 00007ffe60805648 [ 224.974112][ T8130] [ 225.588490][ T8133] nbd: must specify a size in bytes for the device [ 227.079053][ T8144] ima: policy update failed [ 227.096263][ T29] audit: type=1802 audit(4294967353.020:9): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.452" res=0 errno=0 [ 231.394993][ T8236] ubi0: attaching mtd0 [ 231.421333][ T8236] ubi0: scanning is finished [ 231.443937][ T8236] ubi0: empty MTD device detected [ 231.721312][ T8246] FAULT_INJECTION: forcing a failure. [ 231.721312][ T8246] name failslab, interval 1, probability 0, space 0, times 0 [ 231.800351][ T8246] CPU: 0 UID: 0 PID: 8246 Comm: syz.0.472 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.800389][ T8246] Tainted: [L]=SOFTLOCKUP [ 231.800397][ T8246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 231.800410][ T8246] Call Trace: [ 231.800419][ T8246] [ 231.800428][ T8246] dump_stack_lvl+0x100/0x190 [ 231.800468][ T8246] should_fail_ex.cold+0x5/0xa [ 231.800496][ T8246] ? tomoyo_realpath_from_path+0xb6/0x690 [ 231.800532][ T8246] should_failslab+0xc2/0x120 [ 231.800559][ T8246] __kmalloc_noprof+0xe0/0x850 [ 231.800602][ T8246] tomoyo_realpath_from_path+0xb6/0x690 [ 231.800645][ T8246] tomoyo_path_number_perm+0x23c/0x580 [ 231.800673][ T8246] ? tomoyo_path_number_perm+0x22e/0x580 [ 231.800704][ T8246] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 231.800762][ T8246] ? find_held_lock+0x2b/0x80 [ 231.800785][ T8246] ? __fget_files+0x215/0x3d0 [ 231.800807][ T8246] ? hook_file_ioctl_common+0x146/0x410 [ 231.800843][ T8246] ? __fget_files+0x21f/0x3d0 [ 231.800871][ T8246] security_file_ioctl+0xd3/0x230 [ 231.800902][ T8246] __x64_sys_ioctl+0xb7/0x210 [ 231.800940][ T8246] do_syscall_64+0x106/0xf80 [ 231.800965][ T8246] ? clear_bhb_loop+0x40/0x90 [ 231.800995][ T8246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.801019][ T8246] RIP: 0033:0x7f52e199c819 [ 231.801037][ T8246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.801060][ T8246] RSP: 002b:00007f52e28ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.801082][ T8246] RAX: ffffffffffffffda RBX: 00007f52e1c16090 RCX: 00007f52e199c819 [ 231.801098][ T8246] RDX: 0000000000000024 RSI: 00000000000089f0 RDI: 0000000000000005 [ 231.801112][ T8246] RBP: 00007f52e28ad090 R08: 0000000000000000 R09: 0000000000000000 [ 231.801125][ T8246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.801139][ T8246] R13: 00007f52e1c16128 R14: 00007f52e1c16090 R15: 00007ffccbb77368 [ 231.801169][ T8246] [ 231.801179][ T8246] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.152679][ T8236] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 232.196818][ T8236] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 232.228204][ T8236] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 232.235243][ T8236] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 232.278588][ T8236] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 232.285445][ T8236] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 232.349022][ T8236] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 99120742 [ 232.409147][ T8236] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 232.491210][ T8250] ubi0: background thread "ubi_bgt0d" started, PID 8250 [ 233.083698][ T8268] netlink: 202 bytes leftover after parsing attributes in process `syz.4.475'. [ 233.127112][ T8265] netlink: 146 bytes leftover after parsing attributes in process `syz.2.476'. [ 233.661345][ T8282] netlink: 342 bytes leftover after parsing attributes in process `syz.0.480'. [ 233.969404][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 234.176861][ T8291] netlink: 'syz.0.483': attribute type 27 has an invalid length. [ 234.248532][ T8291] netlink: 334 bytes leftover after parsing attributes in process `syz.0.483'. [ 236.462447][ T8206] delete_channel: no stack [ 236.530787][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.488'. [ 236.588955][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.751232][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.016994][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 241.505106][ T8389] netlink: 98 bytes leftover after parsing attributes in process `syz.2.507'. [ 241.615425][ T8390] netlink: 98 bytes leftover after parsing attributes in process `syz.0.506'. [ 244.854946][ T8423] netlink: 98 bytes leftover after parsing attributes in process `syz.2.516'. [ 247.999651][ T8464] bond0: option lp_interval: invalid value (0) [ 248.072069][ T8464] bond0: option lp_interval: allowed values 1 - 2147483647 [ 248.145385][ T8466] netlink: 98 bytes leftover after parsing attributes in process `syz.4.526'. [ 250.820932][ T8496] netlink: 342 bytes leftover after parsing attributes in process `syz.3.533'. [ 251.374376][ T8498] could not allocate digest TFM handle [ 251.481314][ T8508] tipc: Started in network mode [ 251.523207][ T8508] tipc: Node identity ffffffff, cluster identity 4711 [ 251.576295][ T8508] tipc: Node number set to 4294967295 [ 251.990165][ T8514] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[8514] [ 252.141322][ T8519] vivid-007: ================= START STATUS ================= [ 252.213222][ T8519] vivid-007: Generate PTS: true [ 252.312919][ T8519] vivid-007: Generate SCR: true [ 252.351425][ T8519] tpg source WxH: 320x240 (Y'CbCr) [ 252.450465][ T8519] tpg field: 1 [ 252.488231][ T8519] tpg crop: (0,0)/320x240 [ 252.534508][ T8519] tpg compose: (0,0)/320x240 [ 252.601097][ T8519] tpg colorspace: 8 [ 252.652693][ T8519] tpg transfer function: 0/0 [ 252.731179][ T8519] tpg Y'CbCr encoding: 0/0 [ 252.772432][ T8519] tpg quantization: 0/0 [ 252.876215][ T8519] tpg RGB range: 0/2 [ 252.929237][ T8519] vivid-007: ================== END STATUS ================== [ 253.200970][ T8538] netlink: 226 bytes leftover after parsing attributes in process `syz.2.542'. [ 254.512503][ T8565] netlink: 342 bytes leftover after parsing attributes in process `syz.3.549'. [ 255.000500][ T8569] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 255.908239][ T8583] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 255.985503][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.992514][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.549054][ T8590] vivid-007: ================= START STATUS ================= [ 256.633742][ T8590] vivid-007: Generate PTS: true [ 256.674109][ T8590] vivid-007: Generate SCR: true [ 256.729936][ T8590] tpg source WxH: 320x240 (Y'CbCr) [ 256.758988][ T8590] tpg field: 1 [ 256.772011][ T8590] tpg crop: (0,0)/320x240 [ 256.776394][ T8590] tpg compose: (0,0)/320x240 [ 256.835911][ T8590] tpg colorspace: 8 [ 256.862179][ T8590] tpg transfer function: 0/0 [ 256.898198][ T8590] tpg Y'CbCr encoding: 0/0 [ 256.902658][ T8590] tpg quantization: 0/0 [ 256.975338][ T8590] tpg RGB range: 0/2 [ 257.008230][ T8590] vivid-007: ================== END STATUS ================== [ 257.382051][ T8584] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 258.573949][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'. [ 259.964117][ T8630] FAULT_INJECTION: forcing a failure. [ 259.964117][ T8630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.014029][ T8630] CPU: 0 UID: 0 PID: 8630 Comm: syz.2.562 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.014066][ T8630] Tainted: [L]=SOFTLOCKUP [ 260.014074][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 260.014087][ T8630] Call Trace: [ 260.014094][ T8630] [ 260.014103][ T8630] dump_stack_lvl+0x100/0x190 [ 260.014142][ T8630] should_fail_ex.cold+0x5/0xa [ 260.014169][ T8630] _copy_from_user+0x2e/0xd0 [ 260.014200][ T8630] copy_msghdr_from_user+0x9f/0x4f0 [ 260.014233][ T8630] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 260.014270][ T8630] ? __lock_acquire+0x4a5/0x2630 [ 260.014305][ T8630] ___sys_recvmsg+0xdd/0x1a0 [ 260.014335][ T8630] ? __pfx____sys_recvmsg+0x10/0x10 [ 260.014369][ T8630] ? find_held_lock+0x2b/0x80 [ 260.014407][ T8630] do_recvmmsg+0x301/0x760 [ 260.014445][ T8630] ? __pfx_do_recvmmsg+0x10/0x10 [ 260.014474][ T8630] ? ksys_write+0x190/0x250 [ 260.014495][ T8630] ? ksys_write+0x190/0x250 [ 260.014521][ T8630] ? __mutex_unlock_slowpath+0x15c/0x790 [ 260.014555][ T8630] ? __fget_files+0x21f/0x3d0 [ 260.014584][ T8630] __x64_sys_recvmmsg+0x22a/0x280 [ 260.014609][ T8630] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 260.014640][ T8630] do_syscall_64+0x106/0xf80 [ 260.014663][ T8630] ? clear_bhb_loop+0x40/0x90 [ 260.014691][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.014715][ T8630] RIP: 0033:0x7f1920f9c819 [ 260.014733][ T8630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.014755][ T8630] RSP: 002b:00007f1921e4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 260.014777][ T8630] RAX: ffffffffffffffda RBX: 00007f1921215fa0 RCX: 00007f1920f9c819 [ 260.014792][ T8630] RDX: 00000000fffffff9 RSI: 0000200000000140 RDI: 0000000000000004 [ 260.014806][ T8630] RBP: 00007f1921e4a090 R08: 0000000000000000 R09: 0000000000000000 [ 260.014819][ T8630] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 260.014832][ T8630] R13: 00007f1921216038 R14: 00007f1921215fa0 R15: 00007ffcb8a71d68 [ 260.014860][ T8630] [ 261.231134][ T8640] FAULT_INJECTION: forcing a failure. [ 261.231134][ T8640] name failslab, interval 1, probability 0, space 0, times 0 [ 261.318606][ T8640] CPU: 0 UID: 0 PID: 8640 Comm: syz.3.566 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.318646][ T8640] Tainted: [L]=SOFTLOCKUP [ 261.318654][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 261.318669][ T8640] Call Trace: [ 261.318676][ T8640] [ 261.318686][ T8640] dump_stack_lvl+0x100/0x190 [ 261.318729][ T8640] should_fail_ex.cold+0x5/0xa [ 261.318759][ T8640] should_failslab+0xc2/0x120 [ 261.318787][ T8640] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 261.318826][ T8640] ? vm_area_dup+0x27/0x8e0 [ 261.318859][ T8640] ? validate_mm+0x392/0x4e0 [ 261.318899][ T8640] vm_area_dup+0x27/0x8e0 [ 261.318935][ T8640] __split_vma+0x18c/0xd90 [ 261.318972][ T8640] ? vms_complete_munmap_vmas+0x7ac/0xdd0 [ 261.319010][ T8640] ? __pfx___split_vma+0x10/0x10 [ 261.319061][ T8640] vms_gather_munmap_vmas+0x1c6/0x1500 [ 261.319105][ T8640] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 261.319147][ T8640] ? mas_walk+0x6ef/0x9b0 [ 261.319180][ T8640] __mmap_region+0x492/0x2a50 [ 261.319222][ T8640] ? __pfx___mmap_region+0x10/0x10 [ 261.319265][ T8640] ? __lock_acquire+0x4a5/0x2630 [ 261.319307][ T8640] ? update_cfs_rq_load_avg+0x51/0x550 [ 261.319346][ T8640] ? lock_acquire+0x1cf/0x380 [ 261.319378][ T8640] ? find_held_lock+0x2b/0x80 [ 261.319401][ T8640] ? finish_task_switch.isra.0+0x200/0xb80 [ 261.319428][ T8640] ? finish_task_switch.isra.0+0x200/0xb80 [ 261.319457][ T8640] ? rcu_is_watching+0x12/0xc0 [ 261.319496][ T8640] ? finish_task_switch.isra.0+0x205/0xb80 [ 261.319522][ T8640] ? lockdep_hardirqs_on+0x78/0x100 [ 261.319547][ T8640] ? finish_task_switch.isra.0+0x205/0xb80 [ 261.319575][ T8640] ? rcu_is_watching+0x12/0xc0 [ 261.319664][ T8640] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 261.319703][ T8640] mmap_region+0x30a/0x3e0 [ 261.319747][ T8640] do_mmap+0xc63/0x12f0 [ 261.319780][ T8640] ? __pfx_do_mmap+0x10/0x10 [ 261.319809][ T8640] ? __pfx_down_write_killable+0x10/0x10 [ 261.319845][ T8640] __do_sys_remap_file_pages+0x8d4/0xa10 [ 261.319882][ T8640] ? __pfx___might_resched+0x10/0x10 [ 261.319923][ T8640] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 261.319953][ T8640] ? __x64_sys_futex+0x34f/0x4d0 [ 261.319986][ T8640] ? __x64_sys_futex+0x358/0x4d0 [ 261.320021][ T8640] ? xfd_validate_state+0x129/0x190 [ 261.320068][ T8640] do_syscall_64+0x106/0xf80 [ 261.320093][ T8640] ? clear_bhb_loop+0x40/0x90 [ 261.320122][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.320147][ T8640] RIP: 0033:0x7f89a5b9c819 [ 261.320167][ T8640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.320191][ T8640] RSP: 002b:00007f89a6ac6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 261.320213][ T8640] RAX: ffffffffffffffda RBX: 00007f89a5e15fa0 RCX: 00007f89a5b9c819 [ 261.320229][ T8640] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000006a27 [ 261.320244][ T8640] RBP: 00007f89a5c32c91 R08: 0000000000000004 R09: 0000000000000000 [ 261.320258][ T8640] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 261.320272][ T8640] R13: 00007f89a5e16038 R14: 00007f89a5e15fa0 R15: 00007fff86fac0d8 [ 261.320308][ T8640] [ 261.726975][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 261.735981][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 262.881827][ T8673] FAULT_INJECTION: forcing a failure. [ 262.881827][ T8673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.948486][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.2.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.948524][ T8673] Tainted: [L]=SOFTLOCKUP [ 262.948532][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.948546][ T8673] Call Trace: [ 262.948553][ T8673] [ 262.948562][ T8673] dump_stack_lvl+0x100/0x190 [ 262.948602][ T8673] should_fail_ex.cold+0x5/0xa [ 262.948631][ T8673] _copy_to_iter+0x5a4/0x1720 [ 262.948667][ T8673] ? __pfx__copy_to_iter+0x10/0x10 [ 262.948695][ T8673] ? rcu_is_watching+0x12/0xc0 [ 262.948733][ T8673] ? trace_contention_end+0x140/0x180 [ 262.948775][ T8673] simple_copy_to_iter+0x46/0x90 [ 262.948809][ T8673] __skb_datagram_iter+0x129/0x900 [ 262.948839][ T8673] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 262.948880][ T8673] skb_copy_datagram_iter+0xa1/0x270 [ 262.948916][ T8673] unix_stream_read_actor+0x7b/0xc0 [ 262.948942][ T8673] unix_stream_read_generic+0xeae/0x2c80 [ 262.948990][ T8673] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 262.949019][ T8673] ? __lock_acquire+0x4a5/0x2630 [ 262.949067][ T8673] unix_stream_recvmsg+0x190/0x1c0 [ 262.949097][ T8673] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 262.949127][ T8673] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 262.949152][ T8673] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 262.949178][ T8673] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 262.949205][ T8673] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 262.949244][ T8673] sock_recvmsg+0x1a4/0x1f0 [ 262.949274][ T8673] ____sys_recvmsg+0x218/0x640 [ 262.949312][ T8673] ? __pfx_____sys_recvmsg+0x10/0x10 [ 262.949352][ T8673] ? __lock_acquire+0x4a5/0x2630 [ 262.949388][ T8673] ___sys_recvmsg+0x16a/0x1a0 [ 262.949420][ T8673] ? __pfx____sys_recvmsg+0x10/0x10 [ 262.949454][ T8673] ? find_held_lock+0x2b/0x80 [ 262.949495][ T8673] do_recvmmsg+0x301/0x760 [ 262.949533][ T8673] ? __pfx_do_recvmmsg+0x10/0x10 [ 262.949563][ T8673] ? ksys_write+0x190/0x250 [ 262.949585][ T8673] ? ksys_write+0x190/0x250 [ 262.949611][ T8673] ? __mutex_unlock_slowpath+0x15c/0x790 [ 262.949647][ T8673] ? __fget_files+0x21f/0x3d0 [ 262.949677][ T8673] __x64_sys_recvmmsg+0x22a/0x280 [ 262.949703][ T8673] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 262.949736][ T8673] do_syscall_64+0x106/0xf80 [ 262.949759][ T8673] ? clear_bhb_loop+0x40/0x90 [ 262.949787][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.949811][ T8673] RIP: 0033:0x7f1920f9c819 [ 262.949830][ T8673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.949853][ T8673] RSP: 002b:00007f1921e4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 262.949875][ T8673] RAX: ffffffffffffffda RBX: 00007f1921215fa0 RCX: 00007f1920f9c819 [ 262.949890][ T8673] RDX: 00000000fffffff9 RSI: 0000200000000140 RDI: 0000000000000004 [ 262.949905][ T8673] RBP: 00007f1921e4a090 R08: 0000000000000000 R09: 0000000000000000 [ 262.949919][ T8673] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 262.949932][ T8673] R13: 00007f1921216038 R14: 00007f1921215fa0 R15: 00007ffcb8a71d68 [ 262.949962][ T8673] [ 263.969437][ T8684] netlink: 342 bytes leftover after parsing attributes in process `syz.2.574'. [ 265.818935][ T8712] kAFS: unparsable volume name [ 266.007238][ T8718] netlink: 98 bytes leftover after parsing attributes in process `syz.3.582'. [ 266.084781][ T8715] netlink: 'syz.2.580': attribute type 28 has an invalid length. [ 266.158553][ T8715] netlink: 334 bytes leftover after parsing attributes in process `syz.2.580'. [ 266.333264][ T8727] netlink: 342 bytes leftover after parsing attributes in process `syz.4.583'. [ 266.935724][ T8739] Invalid ELF header magic: != ELF [ 266.965281][ T8739] netlink: 330 bytes leftover after parsing attributes in process `syz.3.588'. [ 267.170365][ T8743] bond0: no command found in slaves file - use +ifname or -ifname [ 267.256500][ T8747] FAULT_INJECTION: forcing a failure. [ 267.256500][ T8747] name failslab, interval 1, probability 0, space 0, times 0 [ 267.332856][ T8747] CPU: 0 UID: 0 PID: 8747 Comm: syz.3.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.332896][ T8747] Tainted: [L]=SOFTLOCKUP [ 267.332904][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.332919][ T8747] Call Trace: [ 267.332927][ T8747] [ 267.332935][ T8747] dump_stack_lvl+0x100/0x190 [ 267.332978][ T8747] should_fail_ex.cold+0x5/0xa [ 267.333008][ T8747] should_failslab+0xc2/0x120 [ 267.333036][ T8747] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 267.333075][ T8747] ? ptlock_alloc+0x1f/0x70 [ 267.333115][ T8747] ptlock_alloc+0x1f/0x70 [ 267.333148][ T8747] pte_alloc_one+0x82/0x3d0 [ 267.333177][ T8747] do_fault+0x88e/0x18e0 [ 267.333206][ T8747] ? __pmd_alloc+0x3fb/0x950 [ 267.333239][ T8747] __handle_mm_fault+0x1815/0x2b60 [ 267.333278][ T8747] ? mt_find+0x45e/0x8e0 [ 267.333307][ T8747] ? __pfx___handle_mm_fault+0x10/0x10 [ 267.333341][ T8747] ? __pfx_mt_find+0x10/0x10 [ 267.333385][ T8747] ? find_vma+0xbf/0x140 [ 267.333410][ T8747] ? __pfx_find_vma+0x10/0x10 [ 267.333437][ T8747] handle_mm_fault+0x36d/0xa20 [ 267.333479][ T8747] do_user_addr_fault+0x74c/0x12f0 [ 267.333512][ T8747] exc_page_fault+0x6f/0xd0 [ 267.333537][ T8747] asm_exc_page_fault+0x26/0x30 [ 267.333561][ T8747] RIP: 0010:copy_iovec_from_user+0xcf/0x140 [ 267.333595][ T8747] Code: 0f 85 87 00 00 00 4c 89 6b 08 49 83 ec 01 31 ff 48 83 c5 10 4c 89 e6 48 83 c3 10 e8 4b f7 15 fd 4d 85 e4 74 57 e8 61 fc 15 fd <4c> 8b 6d 08 e8 58 fc 15 fd 4c 8b 7d 00 e8 4f fc 15 fd 31 ff 4c 89 [ 267.333619][ T8747] RSP: 0018:ffffc90004e2fb20 EFLAGS: 00050283 [ 267.333638][ T8747] RAX: 0000000000000034 RBX: ffff88807ad04000 RCX: ffffc9000ee41000 [ 267.333654][ T8747] RDX: 0000000000080000 RSI: ffffffff84f2471f RDI: ffff888030171e80 [ 267.333670][ T8747] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 267.333684][ T8747] R10: 0000000000001010 R11: 0000000000000000 R12: 0000000000000101 [ 267.333707][ T8747] R13: 0000000000001010 R14: dffffc0000000000 R15: 0000000000000000 [ 267.333731][ T8747] ? copy_iovec_from_user+0xcf/0x140 [ 267.333770][ T8747] iovec_from_user+0xc1/0x140 [ 267.333807][ T8747] __import_iovec+0x81/0x640 [ 267.333847][ T8747] import_iovec+0x82/0xb0 [ 267.333883][ T8747] vfs_writev+0x197/0xe10 [ 267.333904][ T8747] ? rcu_is_watching+0x12/0xc0 [ 267.333950][ T8747] ? trace_contention_end+0x140/0x180 [ 267.333991][ T8747] ? __pfx_vfs_writev+0x10/0x10 [ 267.334011][ T8747] ? fdget_pos+0x2aa/0x380 [ 267.334059][ T8747] ? __fget_files+0x21f/0x3d0 [ 267.334090][ T8747] ? do_writev+0x13e/0x340 [ 267.334110][ T8747] do_writev+0x13e/0x340 [ 267.334133][ T8747] ? __pfx_do_writev+0x10/0x10 [ 267.334163][ T8747] do_syscall_64+0x106/0xf80 [ 267.334187][ T8747] ? clear_bhb_loop+0x40/0x90 [ 267.334217][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.334241][ T8747] RIP: 0033:0x7f89a5b9c819 [ 267.334260][ T8747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.334283][ T8747] RSP: 002b:00007f89a6ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 267.334305][ T8747] RAX: ffffffffffffffda RBX: 00007f89a5e15fa0 RCX: 00007f89a5b9c819 [ 267.334321][ T8747] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000005 [ 267.334335][ T8747] RBP: 00007f89a5c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 267.334350][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.334364][ T8747] R13: 00007f89a5e16038 R14: 00007f89a5e15fa0 R15: 00007fff86fac0d8 [ 267.334395][ T8747] [ 268.163482][ T8754] netlink: 342 bytes leftover after parsing attributes in process `syz.2.593'. [ 268.195206][ T8750] FAULT_INJECTION: forcing a failure. [ 268.195206][ T8750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.238644][ T8750] CPU: 0 UID: 0 PID: 8750 Comm: syz.4.592 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.238685][ T8750] Tainted: [L]=SOFTLOCKUP [ 268.238693][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 268.238707][ T8750] Call Trace: [ 268.238714][ T8750] [ 268.238723][ T8750] dump_stack_lvl+0x100/0x190 [ 268.238763][ T8750] should_fail_ex.cold+0x5/0xa [ 268.238791][ T8750] _copy_from_user+0x2e/0xd0 [ 268.238823][ T8750] copy_msghdr_from_user+0x9f/0x4f0 [ 268.238856][ T8750] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 268.238891][ T8750] ? rcu_is_watching+0x12/0xc0 [ 268.238927][ T8750] ? ___sys_recvmsg+0x177/0x1a0 [ 268.238956][ T8750] ? kfree+0x2ec/0x6b0 [ 268.238991][ T8750] ___sys_recvmsg+0xdd/0x1a0 [ 268.239025][ T8750] ? __pfx____sys_recvmsg+0x10/0x10 [ 268.239073][ T8750] ? __pfx___might_resched+0x10/0x10 [ 268.239118][ T8750] do_recvmmsg+0x301/0x760 [ 268.239163][ T8750] ? __pfx_do_recvmmsg+0x10/0x10 [ 268.239194][ T8750] ? ksys_write+0x190/0x250 [ 268.239219][ T8750] ? ksys_write+0x190/0x250 [ 268.239246][ T8750] ? __mutex_unlock_slowpath+0x15c/0x790 [ 268.239287][ T8750] ? __fget_files+0x21f/0x3d0 [ 268.239319][ T8750] __x64_sys_recvmmsg+0x22a/0x280 [ 268.239346][ T8750] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 268.239385][ T8750] do_syscall_64+0x106/0xf80 [ 268.239410][ T8750] ? clear_bhb_loop+0x40/0x90 [ 268.239440][ T8750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.239465][ T8750] RIP: 0033:0x7fefd199c819 [ 268.239484][ T8750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.239508][ T8750] RSP: 002b:00007fefd2917028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 268.239531][ T8750] RAX: ffffffffffffffda RBX: 00007fefd1c15fa0 RCX: 00007fefd199c819 [ 268.239546][ T8750] RDX: 00000000fffffff9 RSI: 0000200000000140 RDI: 0000000000000004 [ 268.239561][ T8750] RBP: 00007fefd2917090 R08: 0000000000000000 R09: 0000000000000000 [ 268.239575][ T8750] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 268.239589][ T8750] R13: 00007fefd1c16038 R14: 00007fefd1c15fa0 R15: 00007ffe60805648 [ 268.239624][ T8750] [ 269.054714][ T29] audit: type=1326 audit(4294967394.980:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.598" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89a5b9c819 code=0x0 [ 269.149156][ T8776] FAULT_INJECTION: forcing a failure. [ 269.149156][ T8776] name failslab, interval 1, probability 0, space 0, times 0 [ 269.285568][ T8776] CPU: 0 UID: 0 PID: 8776 Comm: syz.3.598 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.285606][ T8776] Tainted: [L]=SOFTLOCKUP [ 269.285614][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 269.285629][ T8776] Call Trace: [ 269.285636][ T8776] [ 269.285645][ T8776] dump_stack_lvl+0x100/0x190 [ 269.285705][ T8776] should_fail_ex.cold+0x5/0xa [ 269.285734][ T8776] ? __register_sysctl_table+0xac/0x1650 [ 269.285773][ T8776] should_failslab+0xc2/0x120 [ 269.285800][ T8776] __kmalloc_noprof+0xe0/0x850 [ 269.285843][ T8776] __register_sysctl_table+0xac/0x1650 [ 269.285868][ T8776] ? is_module_address+0x5f/0xf0 [ 269.285904][ T8776] ? __pfx___register_sysctl_table+0x10/0x10 [ 269.285947][ T8776] ? is_module_address+0x69/0xf0 [ 269.285978][ T8776] ? register_net_sysctl_sz+0x222/0x430 [ 269.286010][ T8776] ? __asan_memcpy+0x3c/0x60 [ 269.286048][ T8776] sysctl_core_net_init+0xe6/0x290 [ 269.286084][ T8776] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 269.286117][ T8776] ops_init+0x1e2/0x5f0 [ 269.286145][ T8776] setup_net+0x118/0x3a0 [ 269.286170][ T8776] ? __pfx_setup_net+0x10/0x10 [ 269.286193][ T8776] ? lockdep_init_map_type+0x5c/0x250 [ 269.286228][ T8776] ? mutex_init_lockep+0x110/0x150 [ 269.286283][ T8776] copy_net_ns+0x46f/0x7c0 [ 269.286313][ T8776] create_new_namespaces+0x3ea/0xac0 [ 269.286347][ T8776] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 269.286377][ T8776] ksys_unshare+0x473/0xad0 [ 269.286410][ T8776] ? __pfx_ksys_unshare+0x10/0x10 [ 269.286453][ T8776] __x64_sys_unshare+0x31/0x40 [ 269.286489][ T8776] do_syscall_64+0x106/0xf80 [ 269.286514][ T8776] ? clear_bhb_loop+0x40/0x90 [ 269.286545][ T8776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.286574][ T8776] RIP: 0033:0x7f89a5b9c819 [ 269.286594][ T8776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.286619][ T8776] RSP: 002b:00007f89a6a84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 269.286642][ T8776] RAX: ffffffffffffffda RBX: 00007f89a5e16180 RCX: 00007f89a5b9c819 [ 269.286659][ T8776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 269.286673][ T8776] RBP: 00007f89a5c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 269.286688][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.286702][ T8776] R13: 00007f89a5e16218 R14: 00007f89a5e16180 R15: 00007fff86fac0d8 [ 269.286735][ T8776] [ 270.186761][ T8784] syz.4.600 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 270.211316][ T8784] program syz.4.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.005235][ T8788] HfR: entered promiscuous mode [ 271.252592][ T8793] netlink: 'syz.4.602': attribute type 11 has an invalid length. [ 271.278382][ T8792] netlink: 'syz.4.602': attribute type 11 has an invalid length. [ 271.587263][ T8796] random: crng reseeded on system resumption [ 271.839415][ T8804] netlink: 342 bytes leftover after parsing attributes in process `syz.2.604'. [ 272.873183][ T8819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.607'. [ 272.894960][ T8823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.908326][ T8823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.916757][ T8823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.933807][ T8823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.943472][ T8823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.642891][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.610'. [ 273.844123][ T8830] ip6gretap0: entered promiscuous mode [ 275.018413][ T8823] Bluetooth: hci1: command tx timeout [ 275.062744][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 275.182323][ T8844] FAULT_INJECTION: forcing a failure. [ 275.182323][ T8844] name failslab, interval 1, probability 0, space 0, times 0 [ 275.258338][ T8844] CPU: 0 UID: 0 PID: 8844 Comm: syz.2.612 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.258377][ T8844] Tainted: [L]=SOFTLOCKUP [ 275.258386][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 275.258400][ T8844] Call Trace: [ 275.258408][ T8844] [ 275.258417][ T8844] dump_stack_lvl+0x100/0x190 [ 275.258460][ T8844] should_fail_ex.cold+0x5/0xa [ 275.258489][ T8844] ? snd_pcm_plugin_build+0x64/0x650 [ 275.258527][ T8844] should_failslab+0xc2/0x120 [ 275.258555][ T8844] __kmalloc_noprof+0xe0/0x850 [ 275.258594][ T8844] ? __mutex_unlock_slowpath+0x15c/0x790 [ 275.258628][ T8844] snd_pcm_plugin_build+0x64/0x650 [ 275.258664][ T8844] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 275.258708][ T8844] snd_pcm_plugin_build_linear+0x254/0x850 [ 275.258748][ T8844] ? wake_up_all_idle_cpus+0xf9/0x180 [ 275.258776][ T8844] ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10 [ 275.258820][ T8844] ? snd_pcm_hw_params+0x262/0x1cb0 [ 275.258864][ T8844] snd_pcm_plug_format_plugins+0x71a/0x1430 [ 275.258905][ T8844] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 275.258948][ T8844] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 275.259002][ T8844] snd_pcm_oss_change_params_locked+0x2e3c/0x39f0 [ 275.259051][ T8844] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 275.259087][ T8844] ? __pfx___mutex_lock+0x10/0x10 [ 275.259135][ T8844] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 275.259186][ T8844] snd_pcm_oss_ioctl+0x1c08/0x3720 [ 275.259224][ T8844] ? __fget_files+0x215/0x3d0 [ 275.259247][ T8844] ? hook_file_ioctl_common+0x146/0x410 [ 275.259279][ T8844] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 275.259316][ T8844] ? __fget_files+0x21f/0x3d0 [ 275.259343][ T8844] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 275.259378][ T8844] __x64_sys_ioctl+0x18e/0x210 [ 275.259416][ T8844] do_syscall_64+0x106/0xf80 [ 275.259440][ T8844] ? clear_bhb_loop+0x40/0x90 [ 275.259469][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.259493][ T8844] RIP: 0033:0x7f1920f9c819 [ 275.259512][ T8844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.259535][ T8844] RSP: 002b:00007f1921e4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.259557][ T8844] RAX: ffffffffffffffda RBX: 00007f1921215fa0 RCX: 00007f1920f9c819 [ 275.259572][ T8844] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000006 [ 275.259586][ T8844] RBP: 00007f1921032c91 R08: 0000000000000000 R09: 0000000000000000 [ 275.259600][ T8844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.259614][ T8844] R13: 00007f1921216038 R14: 00007f1921215fa0 R15: 00007ffcb8a71d68 [ 275.259643][ T8844] [ 275.952427][ T8855] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 276.146625][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.157666][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.165465][ T8817] bridge_slave_0: entered allmulticast mode [ 276.173363][ T8817] bridge_slave_0: entered promiscuous mode [ 276.181936][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.189487][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.204419][ T8817] bridge_slave_1: entered allmulticast mode [ 276.213919][ T8817] bridge_slave_1: entered promiscuous mode [ 276.256372][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.283119][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.364156][ T8817] team0: Port device team_slave_0 added [ 276.382717][ T8817] team0: Port device team_slave_1 added [ 276.453315][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.473719][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.577848][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.631769][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.660733][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.730309][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.906272][ T8817] hsr_slave_0: entered promiscuous mode [ 276.922144][ T8817] hsr_slave_1: entered promiscuous mode [ 277.098284][ T8823] Bluetooth: hci1: command tx timeout [ 277.922360][ T8881] netlink: 4394 bytes leftover after parsing attributes in process `syz.4.622'. [ 279.095338][ T8897] bdi 7:2: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 279.179288][ T8823] Bluetooth: hci1: command tx timeout [ 279.268175][ T8817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.371389][ T8817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.519120][ T8817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 279.644137][ T8817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.747554][ T8923] block2mtd: illegal erase size [ 280.794248][ T8922] block2mtd: illegal erase size [ 280.822793][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.970420][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.060380][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.067591][ T8153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.110723][ T8927] netlink: 98 bytes leftover after parsing attributes in process `syz.2.630'. [ 281.160174][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.167370][ T8163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.258792][ T8823] Bluetooth: hci1: command tx timeout [ 281.391212][ T8817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.969158][ T8943] blktrace: Concurrent blktraces are not allowed on loop2 [ 282.260477][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.678889][ T8951] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 283.873238][ T8817] veth0_vlan: entered promiscuous mode [ 284.016970][ T8817] veth1_vlan: entered promiscuous mode [ 284.284087][ T8971] FAULT_INJECTION: forcing a failure. [ 284.284087][ T8971] name failslab, interval 1, probability 0, space 0, times 0 [ 284.356006][ T8971] CPU: 0 UID: 0 PID: 8971 Comm: syz.4.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.356046][ T8971] Tainted: [L]=SOFTLOCKUP [ 284.356054][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 284.356069][ T8971] Call Trace: [ 284.356077][ T8971] [ 284.356087][ T8971] dump_stack_lvl+0x100/0x190 [ 284.356129][ T8971] should_fail_ex.cold+0x5/0xa [ 284.356159][ T8971] should_failslab+0xc2/0x120 [ 284.356187][ T8971] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 284.356227][ T8971] ? ptlock_alloc+0x1f/0x70 [ 284.356266][ T8971] ptlock_alloc+0x1f/0x70 [ 284.356300][ T8971] pte_alloc_one+0x82/0x3d0 [ 284.356329][ T8971] do_fault+0x88e/0x18e0 [ 284.356358][ T8971] ? __pmd_alloc+0x3fb/0x950 [ 284.356391][ T8971] __handle_mm_fault+0x1815/0x2b60 [ 284.356430][ T8971] ? mt_find+0x45e/0x8e0 [ 284.356459][ T8971] ? __pfx___handle_mm_fault+0x10/0x10 [ 284.356493][ T8971] ? __pfx_mt_find+0x10/0x10 [ 284.356537][ T8971] ? find_vma+0xbf/0x140 [ 284.356561][ T8971] ? __pfx_find_vma+0x10/0x10 [ 284.356589][ T8971] handle_mm_fault+0x36d/0xa20 [ 284.356630][ T8971] do_user_addr_fault+0x74c/0x12f0 [ 284.356663][ T8971] exc_page_fault+0x6f/0xd0 [ 284.356689][ T8971] asm_exc_page_fault+0x26/0x30 [ 284.356726][ T8971] RIP: 0010:copy_iovec_from_user+0xcf/0x140 [ 284.356758][ T8971] Code: 0f 85 87 00 00 00 4c 89 6b 08 49 83 ec 01 31 ff 48 83 c5 10 4c 89 e6 48 83 c3 10 e8 4b f7 15 fd 4d 85 e4 74 57 e8 61 fc 15 fd <4c> 8b 6d 08 e8 58 fc 15 fd 4c 8b 7d 00 e8 4f fc 15 fd 31 ff 4c 89 [ 284.356781][ T8971] RSP: 0018:ffffc90003377b20 EFLAGS: 00050283 [ 284.356799][ T8971] RAX: 0000000000000034 RBX: ffff88805de28000 RCX: ffffc900055f1000 [ 284.356815][ T8971] RDX: 0000000000080000 RSI: ffffffff84f2471f RDI: ffff888027699e80 [ 284.356830][ T8971] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 284.356844][ T8971] R10: 0000000000001010 R11: 0000000000000000 R12: 0000000000000101 [ 284.356858][ T8971] R13: 0000000000001010 R14: dffffc0000000000 R15: 0000000000000000 [ 284.356881][ T8971] ? copy_iovec_from_user+0xcf/0x140 [ 284.356917][ T8971] iovec_from_user+0xc1/0x140 [ 284.356952][ T8971] __import_iovec+0x81/0x640 [ 284.356996][ T8971] import_iovec+0x82/0xb0 [ 284.357051][ T8971] vfs_writev+0x197/0xe10 [ 284.357072][ T8971] ? rcu_is_watching+0x12/0xc0 [ 284.357111][ T8971] ? trace_contention_end+0x140/0x180 [ 284.357163][ T8971] ? __pfx_vfs_writev+0x10/0x10 [ 284.357183][ T8971] ? fdget_pos+0x2aa/0x380 [ 284.357216][ T8971] ? lock_acquire+0x5e/0x380 [ 284.357257][ T8971] ? __fget_files+0x21f/0x3d0 [ 284.357286][ T8971] ? do_writev+0x13e/0x340 [ 284.357305][ T8971] do_writev+0x13e/0x340 [ 284.357327][ T8971] ? __pfx_do_writev+0x10/0x10 [ 284.357356][ T8971] do_syscall_64+0x106/0xf80 [ 284.357379][ T8971] ? clear_bhb_loop+0x40/0x90 [ 284.357408][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.357432][ T8971] RIP: 0033:0x7fefd199c819 [ 284.357450][ T8971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.357472][ T8971] RSP: 002b:00007fefd2917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 284.357511][ T8971] RAX: ffffffffffffffda RBX: 00007fefd1c15fa0 RCX: 00007fefd199c819 [ 284.357527][ T8971] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000005 [ 284.357541][ T8971] RBP: 00007fefd1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 284.357555][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.357569][ T8971] R13: 00007fefd1c16038 R14: 00007fefd1c15fa0 R15: 00007ffe60805648 [ 284.357600][ T8971] [ 287.744282][ T8817] veth0_macvtap: entered promiscuous mode [ 287.963979][ T8817] veth1_macvtap: entered promiscuous mode [ 288.070683][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.153944][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.520461][ T8187] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.551655][ T8187] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.842629][ T8187] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.885253][ T8187] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.260333][ T8187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.318227][ T8187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.690424][ T8534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.768302][ T8534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.373803][ T9009] FAULT_INJECTION: forcing a failure. [ 290.373803][ T9009] name failslab, interval 1, probability 0, space 0, times 0 [ 290.466883][ T9009] CPU: 0 UID: 0 PID: 9009 Comm: syz.4.647 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.466923][ T9009] Tainted: [L]=SOFTLOCKUP [ 290.466931][ T9009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 290.466945][ T9009] Call Trace: [ 290.466954][ T9009] [ 290.466963][ T9009] dump_stack_lvl+0x100/0x190 [ 290.467005][ T9009] should_fail_ex.cold+0x5/0xa [ 290.467035][ T9009] should_failslab+0xc2/0x120 [ 290.467062][ T9009] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 290.467101][ T9009] ? ptlock_alloc+0x1f/0x70 [ 290.467141][ T9009] ptlock_alloc+0x1f/0x70 [ 290.467175][ T9009] pte_alloc_one+0x82/0x3d0 [ 290.467204][ T9009] do_fault+0x88e/0x18e0 [ 290.467253][ T9009] ? __pmd_alloc+0x3fb/0x950 [ 290.467286][ T9009] __handle_mm_fault+0x1815/0x2b60 [ 290.467326][ T9009] ? mt_find+0x45e/0x8e0 [ 290.467356][ T9009] ? __pfx___handle_mm_fault+0x10/0x10 [ 290.467397][ T9009] ? __pfx_mt_find+0x10/0x10 [ 290.467441][ T9009] ? find_vma+0xbf/0x140 [ 290.467465][ T9009] ? __pfx_find_vma+0x10/0x10 [ 290.467493][ T9009] handle_mm_fault+0x36d/0xa20 [ 290.467535][ T9009] do_user_addr_fault+0x74c/0x12f0 [ 290.467567][ T9009] exc_page_fault+0x6f/0xd0 [ 290.467593][ T9009] asm_exc_page_fault+0x26/0x30 [ 290.467616][ T9009] RIP: 0010:copy_iovec_from_user+0xcf/0x140 [ 290.467649][ T9009] Code: 0f 85 87 00 00 00 4c 89 6b 08 49 83 ec 01 31 ff 48 83 c5 10 4c 89 e6 48 83 c3 10 e8 4b f7 15 fd 4d 85 e4 74 57 e8 61 fc 15 fd <4c> 8b 6d 08 e8 58 fc 15 fd 4c 8b 7d 00 e8 4f fc 15 fd 31 ff 4c 89 [ 290.467672][ T9009] RSP: 0018:ffffc90005217b20 EFLAGS: 00050283 [ 290.467691][ T9009] RAX: 0000000000000034 RBX: ffff888026724000 RCX: ffffc900055f1000 [ 290.467707][ T9009] RDX: 0000000000080000 RSI: ffffffff84f2471f RDI: ffff888027a19e80 [ 290.467722][ T9009] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 290.467737][ T9009] R10: 0000000000001010 R11: 0000000000000000 R12: 0000000000000101 [ 290.467751][ T9009] R13: 0000000000001010 R14: dffffc0000000000 R15: 0000000000000000 [ 290.467775][ T9009] ? copy_iovec_from_user+0xcf/0x140 [ 290.467813][ T9009] iovec_from_user+0xc1/0x140 [ 290.467849][ T9009] __import_iovec+0x81/0x640 [ 290.467889][ T9009] import_iovec+0x82/0xb0 [ 290.467924][ T9009] vfs_writev+0x197/0xe10 [ 290.467945][ T9009] ? rcu_is_watching+0x12/0xc0 [ 290.467984][ T9009] ? trace_contention_end+0x140/0x180 [ 290.468024][ T9009] ? __pfx_vfs_writev+0x10/0x10 [ 290.468043][ T9009] ? fdget_pos+0x2aa/0x380 [ 290.468097][ T9009] ? __fget_files+0x21f/0x3d0 [ 290.468128][ T9009] ? do_writev+0x13e/0x340 [ 290.468148][ T9009] do_writev+0x13e/0x340 [ 290.468170][ T9009] ? __pfx_do_writev+0x10/0x10 [ 290.468201][ T9009] do_syscall_64+0x106/0xf80 [ 290.468226][ T9009] ? clear_bhb_loop+0x40/0x90 [ 290.468256][ T9009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.468280][ T9009] RIP: 0033:0x7fefd199c819 [ 290.468299][ T9009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.468322][ T9009] RSP: 002b:00007fefd2917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 290.468344][ T9009] RAX: ffffffffffffffda RBX: 00007fefd1c15fa0 RCX: 00007fefd199c819 [ 290.468359][ T9009] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000005 [ 290.468373][ T9009] RBP: 00007fefd1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 290.468393][ T9009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.468407][ T9009] R13: 00007fefd1c16038 R14: 00007fefd1c15fa0 R15: 00007ffe60805648 [ 290.468438][ T9009] [ 291.403221][ T9016] futex_wake_op: syz.2.646 tries to shift op by -2048; fix this program [ 291.475232][ T9016] futex_wake_op: syz.2.646 tries to shift op by -2048; fix this program [ 292.054873][ T9027] netlink: 334 bytes leftover after parsing attributes in process `syz.5.648'. [ 296.149572][ T9088] FAULT_INJECTION: forcing a failure. [ 296.149572][ T9088] name failslab, interval 1, probability 0, space 0, times 0 [ 296.250995][ T9088] CPU: 0 UID: 0 PID: 9088 Comm: syz.3.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.251034][ T9088] Tainted: [L]=SOFTLOCKUP [ 296.251042][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 296.251056][ T9088] Call Trace: [ 296.251064][ T9088] [ 296.251072][ T9088] dump_stack_lvl+0x100/0x190 [ 296.251114][ T9088] should_fail_ex.cold+0x5/0xa [ 296.251142][ T9088] should_failslab+0xc2/0x120 [ 296.251187][ T9088] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 296.251225][ T9088] ? ptlock_alloc+0x1f/0x70 [ 296.251264][ T9088] ptlock_alloc+0x1f/0x70 [ 296.251297][ T9088] pte_alloc_one+0x82/0x3d0 [ 296.251325][ T9088] do_fault+0x88e/0x18e0 [ 296.251353][ T9088] ? __pmd_alloc+0x3fb/0x950 [ 296.251385][ T9088] __handle_mm_fault+0x1815/0x2b60 [ 296.251425][ T9088] ? mt_find+0x45e/0x8e0 [ 296.251453][ T9088] ? __pfx___handle_mm_fault+0x10/0x10 [ 296.251486][ T9088] ? __pfx_mt_find+0x10/0x10 [ 296.251529][ T9088] ? find_vma+0xbf/0x140 [ 296.251553][ T9088] ? __pfx_find_vma+0x10/0x10 [ 296.251581][ T9088] handle_mm_fault+0x36d/0xa20 [ 296.251621][ T9088] do_user_addr_fault+0x74c/0x12f0 [ 296.251653][ T9088] exc_page_fault+0x6f/0xd0 [ 296.251678][ T9088] asm_exc_page_fault+0x26/0x30 [ 296.251701][ T9088] RIP: 0010:copy_iovec_from_user+0xcf/0x140 [ 296.251733][ T9088] Code: 0f 85 87 00 00 00 4c 89 6b 08 49 83 ec 01 31 ff 48 83 c5 10 4c 89 e6 48 83 c3 10 e8 4b f7 15 fd 4d 85 e4 74 57 e8 61 fc 15 fd <4c> 8b 6d 08 e8 58 fc 15 fd 4c 8b 7d 00 e8 4f fc 15 fd 31 ff 4c 89 [ 296.251757][ T9088] RSP: 0018:ffffc90004cbfb20 EFLAGS: 00050283 [ 296.251777][ T9088] RAX: 0000000000000034 RBX: ffff88807da88000 RCX: ffffc9000ee41000 [ 296.251792][ T9088] RDX: 0000000000080000 RSI: ffffffff84f2471f RDI: ffff88807cf10000 [ 296.251808][ T9088] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 296.251831][ T9088] R10: 0000000000001010 R11: 0000000000000000 R12: 0000000000000101 [ 296.251846][ T9088] R13: 0000000000001010 R14: dffffc0000000000 R15: 0000000000000000 [ 296.251871][ T9088] ? copy_iovec_from_user+0xcf/0x140 [ 296.251909][ T9088] iovec_from_user+0xc1/0x140 [ 296.251945][ T9088] __import_iovec+0x81/0x640 [ 296.251983][ T9088] import_iovec+0x82/0xb0 [ 296.252019][ T9088] vfs_writev+0x197/0xe10 [ 296.252040][ T9088] ? rcu_is_watching+0x12/0xc0 [ 296.252079][ T9088] ? trace_contention_end+0x140/0x180 [ 296.252118][ T9088] ? __pfx_vfs_writev+0x10/0x10 [ 296.252138][ T9088] ? fdget_pos+0x2aa/0x380 [ 296.252185][ T9088] ? __fget_files+0x21f/0x3d0 [ 296.252216][ T9088] ? do_writev+0x13e/0x340 [ 296.252236][ T9088] do_writev+0x13e/0x340 [ 296.252258][ T9088] ? __pfx_do_writev+0x10/0x10 [ 296.252288][ T9088] do_syscall_64+0x106/0xf80 [ 296.252312][ T9088] ? clear_bhb_loop+0x40/0x90 [ 296.252341][ T9088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.252365][ T9088] RIP: 0033:0x7f89a5b9c819 [ 296.252384][ T9088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.252407][ T9088] RSP: 002b:00007f89a6ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 296.252428][ T9088] RAX: ffffffffffffffda RBX: 00007f89a5e15fa0 RCX: 00007f89a5b9c819 [ 296.252444][ T9088] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000005 [ 296.252458][ T9088] RBP: 00007f89a5c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 296.252472][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.252486][ T9088] R13: 00007f89a5e16038 R14: 00007f89a5e15fa0 R15: 00007fff86fac0d8 [ 296.252517][ T9088] [ 298.594650][ T9116] can: request_module (can-proto-4) failed. [ 298.909381][ T9111] sg_write: data in/out 220/90 bytes for SCSI command 0x0-- guessing data in; [ 298.909381][ T9111] program syz.5.665 not setting count and/or reply_len properly [ 300.739678][ T9141] netlink: 342 bytes leftover after parsing attributes in process `syz.5.671'. [ 302.423008][ T9157] FAULT_INJECTION: forcing a failure. [ 302.423008][ T9157] name failslab, interval 1, probability 0, space 0, times 0 [ 302.511080][ T9157] CPU: 0 UID: 0 PID: 9157 Comm: syz.4.673 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.511120][ T9157] Tainted: [L]=SOFTLOCKUP [ 302.511128][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 302.511143][ T9157] Call Trace: [ 302.511150][ T9157] [ 302.511159][ T9157] dump_stack_lvl+0x100/0x190 [ 302.511239][ T9157] should_fail_ex.cold+0x5/0xa [ 302.511270][ T9157] should_failslab+0xc2/0x120 [ 302.511302][ T9157] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 302.511342][ T9157] ? sock_alloc_inode+0x25/0x1c0 [ 302.511375][ T9157] ? __pfx_sock_alloc_inode+0x10/0x10 [ 302.511405][ T9157] sock_alloc_inode+0x25/0x1c0 [ 302.511433][ T9157] alloc_inode+0x68/0x250 [ 302.511468][ T9157] sock_alloc+0x44/0x280 [ 302.511492][ T9157] ? security_socket_create+0x7f/0x250 [ 302.511520][ T9157] __sock_create+0xc2/0x860 [ 302.511557][ T9157] __sys_socket+0x14d/0x260 [ 302.511589][ T9157] ? __pfx___sys_socket+0x10/0x10 [ 302.511631][ T9157] __x64_sys_socket+0x72/0xb0 [ 302.511662][ T9157] ? lockdep_hardirqs_on+0x78/0x100 [ 302.511688][ T9157] do_syscall_64+0x106/0xf80 [ 302.511712][ T9157] ? clear_bhb_loop+0x40/0x90 [ 302.511742][ T9157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.511767][ T9157] RIP: 0033:0x7fefd199c819 [ 302.511787][ T9157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.511811][ T9157] RSP: 002b:00007fefd2917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 302.511834][ T9157] RAX: ffffffffffffffda RBX: 00007fefd1c15fa0 RCX: 00007fefd199c819 [ 302.511850][ T9157] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 302.511864][ T9157] RBP: 00007fefd1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 302.511879][ T9157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.511893][ T9157] R13: 00007fefd1c16038 R14: 00007fefd1c15fa0 R15: 00007ffe60805648 [ 302.511924][ T9157] [ 302.511945][ T9157] socket: no more sockets [ 305.044043][ T9178] netlink: 334 bytes leftover after parsing attributes in process `syz.5.677'. [ 305.129421][ T9180] netlink: 334 bytes leftover after parsing attributes in process `syz.5.677'. [ 305.424189][ T9176] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 305.542692][ T9176] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 305.616562][ T9176] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 305.637035][ T9191] zram0: detected capacity change from 0 to 16 [ 305.758399][ T9176] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 305.905228][ T9176] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 305.951291][ T9176] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 306.078485][ T9176] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 306.799350][ T9203] netlink: 342 bytes leftover after parsing attributes in process `syz.2.680'. [ 307.539764][ T8187] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.579788][ T8823] Bluetooth: hci2: command 0x0c1a tx timeout [ 307.622069][ T9214] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 307.658603][ T8823] Bluetooth: hci3: command 0x0c1a tx timeout [ 307.821344][ T8823] Bluetooth: hci4: command 0x0c1a tx timeout [ 307.906143][ T8154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.980541][ T8823] Bluetooth: hci1: command 0x0c1a tx timeout [ 308.200225][ T8154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.376056][ T9223] netlink: 342 bytes leftover after parsing attributes in process `syz.5.687'. [ 308.474688][ T8154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.765795][ T8154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.183933][ T8154] bridge_slave_1: left allmulticast mode [ 309.227010][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 309.248623][ T8154] bridge_slave_1: left promiscuous mode [ 309.255984][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.365815][ T8154] bridge_slave_0: left allmulticast mode [ 309.418766][ T8154] bridge_slave_0: left promiscuous mode [ 309.418990][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.058237][ T8823] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.249028][ T9252] openvswitch: netlink: Message has 4 unknown bytes. [ 311.016794][ T8154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.129402][ T8154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.190700][ T8154] bond0 (unregistering): Released all slaves [ 311.424034][ T9231] openvswitch: HfR: Dropping previously announced user features [ 311.486974][ T9229] i: entered promiscuous mode [ 312.138342][ T8823] Bluetooth: hci1: command 0x0c1a tx timeout [ 312.173835][ T9278] netlink: 342 bytes leftover after parsing attributes in process `syz.4.695'. [ 312.559501][ T8154] hsr_slave_0: left promiscuous mode [ 312.596022][ T8154] hsr_slave_1: left promiscuous mode [ 312.631748][ T8154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.675317][ T8154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.727010][ T8154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.784433][ T8154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.068833][ T8154] veth1_macvtap: left promiscuous mode [ 313.099141][ T8154] veth0_macvtap: left promiscuous mode [ 313.134255][ T8154] veth1_vlan: left promiscuous mode [ 313.173374][ T8154] veth0_vlan: left promiscuous mode [ 314.736794][ T8154] team0 (unregistering): Port device team_slave_1 removed [ 314.865237][ T8154] team0 (unregistering): Port device team_slave_0 removed [ 314.976883][ T8152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.984289][ T8152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.987606][ T8152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.998469][ T8152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.998980][ T8152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.018258][ T8152] Bluetooth: hci0: command tx timeout [ 317.422871][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.458995][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.665674][ T9305] chnl_net:caif_netlink_parms(): no params data found [ 318.040035][ T9336] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 318.291001][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.358202][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.365450][ T9305] bridge_slave_0: entered allmulticast mode [ 318.478250][ T9305] bridge_slave_0: entered promiscuous mode [ 318.539500][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.547281][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.616506][ T9305] bridge_slave_1: entered allmulticast mode [ 318.671093][ T9305] bridge_slave_1: entered promiscuous mode [ 318.895248][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.967474][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.110556][ T8152] Bluetooth: hci0: command tx timeout [ 319.349912][ T9305] team0: Port device team_slave_0 added [ 319.379731][ T9305] team0: Port device team_slave_1 added [ 319.488011][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.488032][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.537012][ T9305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.856158][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.917680][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.161725][ T9305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.183906][ T8152] Bluetooth: hci0: command tx timeout [ 321.535842][ T9305] hsr_slave_0: entered promiscuous mode [ 321.608984][ T9305] hsr_slave_1: entered promiscuous mode [ 321.615199][ T9305] debugfs: 'hsr0' already exists in 'hsr' [ 321.701592][ T9305] Cannot create hsr debugfs directory [ 322.949166][ T9406] ovs_?: entered promiscuous mode [ 323.091955][ T9305] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 323.168605][ T9305] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 323.258590][ T8152] Bluetooth: hci0: command tx timeout [ 323.453535][ T9305] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 323.524571][ T9305] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.901959][ T9424] vhci_hcd vhci_hcd.2: invalid port number 135 [ 323.947079][ T9305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.967790][ T9424] vhci_hcd vhci_hcd.2: invalid port number 135 [ 324.056420][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.204612][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.211982][ T8154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.298015][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.305338][ T8154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.627783][ T9305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.196351][ T9305] veth0_vlan: entered promiscuous mode [ 330.295825][ T9305] veth1_vlan: entered promiscuous mode [ 330.499188][ T9305] veth0_macvtap: entered promiscuous mode [ 330.541404][ T9305] veth1_macvtap: entered promiscuous mode [ 330.634591][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.715515][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.050012][ T8155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.082240][ T8155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.276675][ T8155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.286940][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.718'. [ 331.323654][ T8155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.371160][ T9470] openvswitch: HfR: Dropping previously announced user features [ 331.445100][ T9476] netlink: 342 bytes leftover after parsing attributes in process `syz.5.720'. [ 331.566561][ T8154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.613748][ T8154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.756951][ T8155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.822969][ T8155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.049953][ T9509] FAULT_INJECTION: forcing a failure. [ 334.049953][ T9509] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 334.184010][ T9509] CPU: 0 UID: 0 PID: 9509 Comm: syz.5.727 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.184050][ T9509] Tainted: [L]=SOFTLOCKUP [ 334.184059][ T9509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 334.184076][ T9509] Call Trace: [ 334.184084][ T9509] [ 334.184094][ T9509] dump_stack_lvl+0x100/0x190 [ 334.184137][ T9509] should_fail_ex.cold+0x5/0xa [ 334.184162][ T9509] ? prepare_alloc_pages+0x16d/0x5f0 [ 334.184195][ T9509] should_fail_alloc_page+0xeb/0x140 [ 334.184224][ T9509] prepare_alloc_pages+0x1f0/0x5f0 [ 334.184258][ T9509] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 334.184302][ T9509] ? __pfx_css_rstat_updated+0x10/0x10 [ 334.184333][ T9509] ? kasan_save_stack+0x3f/0x50 [ 334.184354][ T9509] ? kasan_save_stack+0x30/0x50 [ 334.184375][ T9509] ? kasan_save_track+0x14/0x30 [ 334.184403][ T9509] ? rcu_is_watching+0x12/0xc0 [ 334.184443][ T9509] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 334.184490][ T9509] ? lru_gen_add_folio+0x20f/0x13e0 [ 334.184521][ T9509] ? lock_acquire+0x1cf/0x380 [ 334.184554][ T9509] ? find_held_lock+0x2b/0x80 [ 334.184576][ T9509] ? page_table_check_set+0x49a/0xa10 [ 334.184601][ T9509] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 334.184628][ T9509] ? policy_nodemask+0xed/0x4f0 [ 334.184657][ T9509] alloc_pages_mpol+0x1fb/0x550 [ 334.184691][ T9509] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 334.184727][ T9509] folio_alloc_mpol_noprof+0x36/0x340 [ 334.184761][ T9509] vma_alloc_folio_noprof+0xed/0x1d0 [ 334.184793][ T9509] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 334.184834][ T9509] do_anonymous_page+0xb3a/0x1fb0 [ 334.184880][ T9509] __handle_mm_fault+0x1d48/0x2b60 [ 334.184924][ T9509] ? __pfx___handle_mm_fault+0x10/0x10 [ 334.184961][ T9509] ? pte_offset_map_lock+0x174/0x320 [ 334.184993][ T9509] ? find_held_lock+0x2b/0x80 [ 334.185026][ T9509] ? follow_page_pte+0x5b3/0x1400 [ 334.185062][ T9509] handle_mm_fault+0x36d/0xa20 [ 334.185102][ T9509] __get_user_pages+0xf9c/0x34d0 [ 334.185143][ T9509] ? __pfx___get_user_pages+0x10/0x10 [ 334.185181][ T9509] populate_vma_page_range+0x267/0x3f0 [ 334.185215][ T9509] ? __pfx_populate_vma_page_range+0x10/0x10 [ 334.185246][ T9509] ? __pfx_find_vma_intersection+0x10/0x10 [ 334.185275][ T9509] ? do_mmap+0x93f/0x12f0 [ 334.185306][ T9509] __mm_populate+0x107/0x3a0 [ 334.185338][ T9509] ? __pfx___mm_populate+0x10/0x10 [ 334.185371][ T9509] ? up_write+0x290/0x4f0 [ 334.185410][ T9509] vm_mmap_pgoff+0x37f/0x470 [ 334.185443][ T9509] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 334.185474][ T9509] ? do_futex+0x192/0x350 [ 334.185507][ T9509] ? __pfx_do_futex+0x10/0x10 [ 334.185545][ T9509] ksys_mmap_pgoff+0xe1/0x650 [ 334.185572][ T9509] ? __x64_sys_futex+0x34f/0x4d0 [ 334.185604][ T9509] ? __x64_sys_futex+0x358/0x4d0 [ 334.185638][ T9509] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 334.185665][ T9509] ? xfd_validate_state+0x129/0x190 [ 334.185706][ T9509] __x64_sys_mmap+0x125/0x190 [ 334.185747][ T9509] do_syscall_64+0x106/0xf80 [ 334.185772][ T9509] ? clear_bhb_loop+0x40/0x90 [ 334.185802][ T9509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.185828][ T9509] RIP: 0033:0x7f4c4d99c819 [ 334.185848][ T9509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.185872][ T9509] RSP: 002b:00007f4c4bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 334.185902][ T9509] RAX: ffffffffffffffda RBX: 00007f4c4dc15fa0 RCX: 00007f4c4d99c819 [ 334.185918][ T9509] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 334.185932][ T9509] RBP: 00007f4c4da32c91 R08: 0000000000000007 R09: 0000000800008000 [ 334.185947][ T9509] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 334.185962][ T9509] R13: 00007f4c4dc16038 R14: 00007f4c4dc15fa0 R15: 00007ffc8112f408 [ 334.185997][ T9509] [ 338.427183][ T9514] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 338.759180][ T9561] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 339.371728][ T9572] FAULT_INJECTION: forcing a failure. [ 339.371728][ T9572] name failslab, interval 1, probability 0, space 0, times 0 [ 339.488279][ T9572] CPU: 0 UID: 0 PID: 9572 Comm: syz.2.737 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.488318][ T9572] Tainted: [L]=SOFTLOCKUP [ 339.488326][ T9572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.488341][ T9572] Call Trace: [ 339.488349][ T9572] [ 339.488358][ T9572] dump_stack_lvl+0x100/0x190 [ 339.488405][ T9572] should_fail_ex.cold+0x5/0xa [ 339.488435][ T9572] should_failslab+0xc2/0x120 [ 339.488470][ T9572] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 339.488510][ T9572] ? ptlock_alloc+0x1f/0x70 [ 339.488551][ T9572] ptlock_alloc+0x1f/0x70 [ 339.488584][ T9572] pte_alloc_one+0x82/0x3d0 [ 339.488613][ T9572] do_fault+0x88e/0x18e0 [ 339.488642][ T9572] ? __pmd_alloc+0x3fb/0x950 [ 339.488675][ T9572] __handle_mm_fault+0x1815/0x2b60 [ 339.488714][ T9572] ? mt_find+0x45e/0x8e0 [ 339.488744][ T9572] ? __pfx___handle_mm_fault+0x10/0x10 [ 339.488778][ T9572] ? __pfx_mt_find+0x10/0x10 [ 339.488822][ T9572] ? find_vma+0xbf/0x140 [ 339.488846][ T9572] ? __pfx_find_vma+0x10/0x10 [ 339.488875][ T9572] handle_mm_fault+0x36d/0xa20 [ 339.488915][ T9572] do_user_addr_fault+0x74c/0x12f0 [ 339.488948][ T9572] exc_page_fault+0x6f/0xd0 [ 339.488973][ T9572] asm_exc_page_fault+0x26/0x30 [ 339.488997][ T9572] RIP: 0010:copy_iovec_from_user+0xcf/0x140 [ 339.489029][ T9572] Code: 0f 85 87 00 00 00 4c 89 6b 08 49 83 ec 01 31 ff 48 83 c5 10 4c 89 e6 48 83 c3 10 e8 4b f7 15 fd 4d 85 e4 74 57 e8 61 fc 15 fd <4c> 8b 6d 08 e8 58 fc 15 fd 4c 8b 7d 00 e8 4f fc 15 fd 31 ff 4c 89 [ 339.489053][ T9572] RSP: 0018:ffffc90004cbfb20 EFLAGS: 00050283 [ 339.489073][ T9572] RAX: 0000000000000034 RBX: ffff88807ad04000 RCX: ffffc900069f9000 [ 339.489089][ T9572] RDX: 0000000000080000 RSI: ffffffff84f2471f RDI: ffff88802c7b5b80 [ 339.489104][ T9572] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 339.489118][ T9572] R10: 0000000000001010 R11: 0000000000000000 R12: 0000000000000101 [ 339.489132][ T9572] R13: 0000000000001010 R14: dffffc0000000000 R15: 0000000000000000 [ 339.489156][ T9572] ? copy_iovec_from_user+0xcf/0x140 [ 339.489194][ T9572] iovec_from_user+0xc1/0x140 [ 339.489230][ T9572] __import_iovec+0x81/0x640 [ 339.489270][ T9572] import_iovec+0x82/0xb0 [ 339.489305][ T9572] vfs_writev+0x197/0xe10 [ 339.489327][ T9572] ? rcu_is_watching+0x12/0xc0 [ 339.489366][ T9572] ? trace_contention_end+0x140/0x180 [ 339.489406][ T9572] ? __pfx_vfs_writev+0x10/0x10 [ 339.489426][ T9572] ? fdget_pos+0x2aa/0x380 [ 339.489483][ T9572] ? __fget_files+0x21f/0x3d0 [ 339.489515][ T9572] ? do_writev+0x13e/0x340 [ 339.489535][ T9572] do_writev+0x13e/0x340 [ 339.489557][ T9572] ? __pfx_do_writev+0x10/0x10 [ 339.489588][ T9572] do_syscall_64+0x106/0xf80 [ 339.489613][ T9572] ? clear_bhb_loop+0x40/0x90 [ 339.489642][ T9572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.489666][ T9572] RIP: 0033:0x7f1920f9c819 [ 339.489686][ T9572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.489709][ T9572] RSP: 002b:00007f1921e4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 339.489730][ T9572] RAX: ffffffffffffffda RBX: 00007f1921215fa0 RCX: 00007f1920f9c819 [ 339.489746][ T9572] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000005 [ 339.489760][ T9572] RBP: 00007f1921032c91 R08: 0000000000000000 R09: 0000000000000000 [ 339.489774][ T9572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.489788][ T9572] R13: 00007f1921216038 R14: 00007f1921215fa0 R15: 00007ffcb8a71d68 [ 339.489819][ T9572] [ 339.855289][ T9577] block2mtd: illegal erase size [ 340.771027][ T9590] FAULT_INJECTION: forcing a failure. [ 340.771027][ T9590] name failslab, interval 1, probability 0, space 0, times 0 [ 340.806377][ T9590] CPU: 0 UID: 0 PID: 9590 Comm: syz.2.740 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.806416][ T9590] Tainted: [L]=SOFTLOCKUP [ 340.806424][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 340.806439][ T9590] Call Trace: [ 340.806447][ T9590] [ 340.806456][ T9590] dump_stack_lvl+0x100/0x190 [ 340.806498][ T9590] should_fail_ex.cold+0x5/0xa [ 340.806528][ T9590] should_failslab+0xc2/0x120 [ 340.806556][ T9590] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 340.806594][ T9590] ? ptlock_alloc+0x1f/0x70 [ 340.806646][ T9590] ptlock_alloc+0x1f/0x70 [ 340.806678][ T9590] pte_alloc_one+0x82/0x3d0 [ 340.806706][ T9590] do_fault+0x88e/0x18e0 [ 340.806739][ T9590] __handle_mm_fault+0x1815/0x2b60 [ 340.806778][ T9590] ? mt_find+0x45e/0x8e0 [ 340.806808][ T9590] ? __pfx___handle_mm_fault+0x10/0x10 [ 340.806840][ T9590] ? __pfx_mt_find+0x10/0x10 [ 340.806883][ T9590] ? find_vma+0xbf/0x140 [ 340.806906][ T9590] ? __pfx_find_vma+0x10/0x10 [ 340.806933][ T9590] handle_mm_fault+0x36d/0xa20 [ 340.806972][ T9590] do_user_addr_fault+0x74c/0x12f0 [ 340.807024][ T9590] exc_page_fault+0x6f/0xd0 [ 340.807050][ T9590] asm_exc_page_fault+0x26/0x30 [ 340.807074][ T9590] RIP: 0010:copy_iovec_from_user+0xcf/0x140 [ 340.807106][ T9590] Code: 0f 85 87 00 00 00 4c 89 6b 08 49 83 ec 01 31 ff 48 83 c5 10 4c 89 e6 48 83 c3 10 e8 4b f7 15 fd 4d 85 e4 74 57 e8 61 fc 15 fd <4c> 8b 6d 08 e8 58 fc 15 fd 4c 8b 7d 00 e8 4f fc 15 fd 31 ff 4c 89 [ 340.807130][ T9590] RSP: 0018:ffffc90004e3fb20 EFLAGS: 00050283 [ 340.807150][ T9590] RAX: 0000000000000034 RBX: ffff88804c8f0000 RCX: ffffc900069f9000 [ 340.807165][ T9590] RDX: 0000000000080000 RSI: ffffffff84f2471f RDI: ffff8880203b1e80 [ 340.807180][ T9590] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 340.807195][ T9590] R10: 0000000000001010 R11: 0000000000000000 R12: 0000000000000101 [ 340.807209][ T9590] R13: 0000000000001010 R14: dffffc0000000000 R15: 0000000000000000 [ 340.807232][ T9590] ? copy_iovec_from_user+0xcf/0x140 [ 340.807271][ T9590] iovec_from_user+0xc1/0x140 [ 340.807306][ T9590] __import_iovec+0x81/0x640 [ 340.807353][ T9590] import_iovec+0x82/0xb0 [ 340.807389][ T9590] vfs_writev+0x197/0xe10 [ 340.807410][ T9590] ? rcu_is_watching+0x12/0xc0 [ 340.807449][ T9590] ? trace_contention_end+0x140/0x180 [ 340.807492][ T9590] ? __pfx_vfs_writev+0x10/0x10 [ 340.807514][ T9590] ? fdget_pos+0x2aa/0x380 [ 340.807562][ T9590] ? __fget_files+0x21f/0x3d0 [ 340.807592][ T9590] ? do_writev+0x13e/0x340 [ 340.807612][ T9590] do_writev+0x13e/0x340 [ 340.807634][ T9590] ? __pfx_do_writev+0x10/0x10 [ 340.807664][ T9590] do_syscall_64+0x106/0xf80 [ 340.807688][ T9590] ? clear_bhb_loop+0x40/0x90 [ 340.807717][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.807744][ T9590] RIP: 0033:0x7f1920f9c819 [ 340.807763][ T9590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.807786][ T9590] RSP: 002b:00007f1921e4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 340.807808][ T9590] RAX: ffffffffffffffda RBX: 00007f1921215fa0 RCX: 00007f1920f9c819 [ 340.807824][ T9590] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000005 [ 340.807837][ T9590] RBP: 00007f1921032c91 R08: 0000000000000000 R09: 0000000000000000 [ 340.807851][ T9590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.807871][ T9590] R13: 00007f1921216038 R14: 00007f1921215fa0 R15: 00007ffcb8a71d68 [ 340.807902][ T9590] [ 341.561178][ T29] audit: type=1326 audit(4294967466.730:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.4.739" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefd199c819 code=0x0 [ 343.011137][ T9616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.745'. [ 343.168535][ T9618] netlink: 146 bytes leftover after parsing attributes in process `syz.5.745'. [ 345.910851][ T9683] FAULT_INJECTION: forcing a failure. [ 345.910851][ T9683] name failslab, interval 1, probability 0, space 0, times 0 [ 345.992613][ T9683] CPU: 0 UID: 0 PID: 9683 Comm: syz.4.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.992653][ T9683] Tainted: [L]=SOFTLOCKUP [ 345.992662][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 345.992677][ T9683] Call Trace: [ 345.992685][ T9683] [ 345.992694][ T9683] dump_stack_lvl+0x100/0x190 [ 345.992737][ T9683] should_fail_ex.cold+0x5/0xa [ 345.992766][ T9683] should_failslab+0xc2/0x120 [ 345.992795][ T9683] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 345.992844][ T9683] ? ptlock_alloc+0x1f/0x70 [ 345.992901][ T9683] ptlock_alloc+0x1f/0x70 [ 345.992935][ T9683] pte_alloc_one+0x82/0x3d0 [ 345.992963][ T9683] do_fault+0x88e/0x18e0 [ 345.992992][ T9683] ? __pmd_alloc+0x3fb/0x950 [ 345.993024][ T9683] __handle_mm_fault+0x1815/0x2b60 [ 345.993063][ T9683] ? mt_find+0x45e/0x8e0 [ 345.993100][ T9683] ? __pfx___handle_mm_fault+0x10/0x10 [ 345.993134][ T9683] ? __pfx_mt_find+0x10/0x10 [ 345.993178][ T9683] ? find_vma+0xbf/0x140 [ 345.993202][ T9683] ? __pfx_find_vma+0x10/0x10 [ 345.993230][ T9683] handle_mm_fault+0x36d/0xa20 [ 345.993271][ T9683] do_user_addr_fault+0x74c/0x12f0 [ 345.993317][ T9683] exc_page_fault+0x6f/0xd0 [ 345.993341][ T9683] asm_exc_page_fault+0x26/0x30 [ 345.993364][ T9683] RIP: 0010:copy_iovec_from_user+0xcf/0x140 [ 345.993395][ T9683] Code: 0f 85 87 00 00 00 4c 89 6b 08 49 83 ec 01 31 ff 48 83 c5 10 4c 89 e6 48 83 c3 10 e8 4b f7 15 fd 4d 85 e4 74 57 e8 61 fc 15 fd <4c> 8b 6d 08 e8 58 fc 15 fd 4c 8b 7d 00 e8 4f fc 15 fd 31 ff 4c 89 [ 345.993418][ T9683] RSP: 0018:ffffc900050e7b20 EFLAGS: 00050283 [ 345.993443][ T9683] RAX: 00000000000000fd RBX: ffff888054bd8000 RCX: ffffc900055f1000 [ 345.993459][ T9683] RDX: 0000000000080000 RSI: ffffffff84f2471f RDI: ffff888034a53d00 [ 345.993474][ T9683] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 345.993507][ T9683] R10: 0000000000001010 R11: 0000000000000000 R12: 0000000000000101 [ 345.993521][ T9683] R13: 0000000000001010 R14: dffffc0000000000 R15: 0000000000000000 [ 345.993548][ T9683] ? copy_iovec_from_user+0xcf/0x140 [ 345.993587][ T9683] iovec_from_user+0xc1/0x140 [ 345.993622][ T9683] __import_iovec+0x81/0x640 [ 345.993661][ T9683] import_iovec+0x82/0xb0 [ 345.993697][ T9683] vfs_writev+0x197/0xe10 [ 345.993718][ T9683] ? rcu_is_watching+0x12/0xc0 [ 345.993758][ T9683] ? trace_contention_end+0x140/0x180 [ 345.993797][ T9683] ? __pfx_vfs_writev+0x10/0x10 [ 345.993817][ T9683] ? fdget_pos+0x2aa/0x380 [ 345.993865][ T9683] ? __fget_files+0x21f/0x3d0 [ 345.993896][ T9683] ? do_writev+0x13e/0x340 [ 345.993916][ T9683] do_writev+0x13e/0x340 [ 345.993937][ T9683] ? __pfx_do_writev+0x10/0x10 [ 345.993968][ T9683] do_syscall_64+0x106/0xf80 [ 345.993992][ T9683] ? clear_bhb_loop+0x40/0x90 [ 345.994022][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.994045][ T9683] RIP: 0033:0x7fefd199c819 [ 345.994065][ T9683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.994093][ T9683] RSP: 002b:00007fefd2917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 345.994115][ T9683] RAX: ffffffffffffffda RBX: 00007fefd1c15fa0 RCX: 00007fefd199c819 [ 345.994131][ T9683] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000005 [ 345.994145][ T9683] RBP: 00007fefd1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 345.994160][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.994173][ T9683] R13: 00007fefd1c16038 R14: 00007fefd1c15fa0 R15: 00007ffe60805648 [ 345.994204][ T9683] [ 348.423438][ T9705] serio: Serial port pty6 [ 348.737069][ T9701] Process accounting resumed [ 349.066288][ T9740] netlink: 93 bytes leftover after parsing attributes in process `syz.6.766'. [ 349.135771][ T9740] netlink: 93 bytes leftover after parsing attributes in process `syz.6.766'. [ 349.186679][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 349.253654][ T9732] netlink: 93 bytes leftover after parsing attributes in process `syz.6.766'. [ 349.274584][ T9738] netlink: 354 bytes leftover after parsing attributes in process `syz.4.769'. [ 349.758194][ T9754] futex_wake_op: syz.6.771 tries to shift op by -2048; fix this program [ 349.809392][ T9754] futex_wake_op: syz.6.771 tries to shift op by -2048; fix this program [ 349.908752][ T9755] 0x000000000001-0x000000020000 : "" [ 350.121345][ T9755] ftl_cs: FTL header corrupt! [ 350.901294][ T9773] netlink: 330 bytes leftover after parsing attributes in process `syz.4.774'. [ 352.221013][ T9787] random: crng reseeded on system resumption [ 352.253845][ T9802] can0: slcan on ttyS2. [ 352.388794][ T9810] can0 (unregistered): slcan off ttyS2. [ 352.460873][ T9790] ima: policy update failed [ 352.497422][ T29] audit: type=1802 audit(4294967478.420:12): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.780" res=0 errno=0 [ 354.129986][ T29] audit: type=1804 audit(4294967480.030:13): pid=9839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.784" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=19 res=1 errno=0 [ 354.425721][ T9845] mkiss: ax0: crc mode is auto. [ 355.886776][ T9878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'. [ 356.004227][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 356.071512][ T9881] ================================================================== [ 356.071538][ T9881] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 356.071585][ T9881] Write of size 8 at addr ffffc90004389000 by task syz.5.796/9881 [ 356.071605][ T9881] [ 356.071619][ T9881] CPU: 0 UID: 0 PID: 9881 Comm: syz.5.796 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.071664][ T9881] Tainted: [L]=SOFTLOCKUP [ 356.071673][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 356.071687][ T9881] Call Trace: [ 356.071695][ T9881] [ 356.071704][ T9881] dump_stack_lvl+0x100/0x190 [ 356.071740][ T9881] print_report+0x156/0x4c9 [ 356.071772][ T9881] ? _raw_spin_lock_irqsave+0x52/0x60 [ 356.071819][ T9881] ? sys_imageblit+0x19fb/0x1d60 [ 356.071855][ T9881] kasan_report+0xdf/0x1e0 [ 356.071881][ T9881] ? sys_imageblit+0x19fb/0x1d60 [ 356.071920][ T9881] sys_imageblit+0x19fb/0x1d60 [ 356.071961][ T9881] ? __pfx_sys_imageblit+0x10/0x10 [ 356.072000][ T9881] ? prb_read_valid+0x78/0xa0 [ 356.072050][ T9881] ? __pfx_prb_read_valid+0x10/0x10 [ 356.072086][ T9881] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 356.072116][ T9881] soft_cursor+0x524/0xa10 [ 356.072150][ T9881] ? fb_get_color_depth+0x120/0x250 [ 356.072181][ T9881] bit_cursor+0xe58/0x16f0 [ 356.072216][ T9881] ? __pfx_bit_cursor+0x10/0x10 [ 356.072248][ T9881] ? __lock_acquire+0x4a5/0x2630 [ 356.072283][ T9881] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 356.072308][ T9881] ? get_color+0x1da/0x450 [ 356.072333][ T9881] ? __pfx_bit_cursor+0x10/0x10 [ 356.072363][ T9881] fbcon_cursor+0x43c/0x5e0 [ 356.072403][ T9881] ? add_softcursor+0x180/0x290 [ 356.072437][ T9881] set_cursor+0x1db/0x250 [ 356.072468][ T9881] con_write+0x89/0xb0 [ 356.072488][ T9881] do_output_char+0x63b/0x850 [ 356.072515][ T9881] n_tty_write+0x528/0x12d0 [ 356.072547][ T9881] ? __pfx_n_tty_write+0x10/0x10 [ 356.072575][ T9881] ? __pfx_woken_wake_function+0x10/0x10 [ 356.072614][ T9881] ? __pfx___might_resched+0x10/0x10 [ 356.072650][ T9881] ? __pfx_n_tty_write+0x10/0x10 [ 356.072678][ T9881] file_tty_write.isra.0+0x4d2/0x890 [ 356.072719][ T9881] redirected_tty_write+0xd4/0x120 [ 356.072757][ T9881] vfs_write+0x6ac/0x1070 [ 356.072779][ T9881] ? __pfx_redirected_tty_write+0x10/0x10 [ 356.072825][ T9881] ? __pfx_vfs_write+0x10/0x10 [ 356.072846][ T9881] ? find_held_lock+0x2b/0x80 [ 356.072877][ T9881] ksys_write+0x12a/0x250 [ 356.072899][ T9881] ? __pfx_ksys_write+0x10/0x10 [ 356.072926][ T9881] do_syscall_64+0x106/0xf80 [ 356.072950][ T9881] ? clear_bhb_loop+0x40/0x90 [ 356.072976][ T9881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.073000][ T9881] RIP: 0033:0x7f4c4d99c819 [ 356.073019][ T9881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.073042][ T9881] RSP: 002b:00007f4c4bbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.073065][ T9881] RAX: ffffffffffffffda RBX: 00007f4c4dc16090 RCX: 00007f4c4d99c819 [ 356.073080][ T9881] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 356.073095][ T9881] RBP: 00007f4c4da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 356.073109][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.073123][ T9881] R13: 00007f4c4dc16128 R14: 00007f4c4dc16090 R15: 00007ffc8112f408 [ 356.073146][ T9881] [ 356.073154][ T9881] [ 356.073160][ T9881] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004089000 allocated at drm_gem_shmem_vmap_locked+0x54b/0x800 [ 356.073203][ T9881] Memory state around the buggy address: [ 356.073215][ T9881] ffffc90004388f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.073238][ T9881] ffffc90004388f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.073255][ T9881] >ffffc90004389000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 356.073268][ T9881] ^ [ 356.073280][ T9881] ffffc90004389080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 356.073297][ T9881] ffffc90004389100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 356.073310][ T9881] ================================================================== [ 356.073329][ T9881] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 356.073346][ T9881] CPU: 0 UID: 0 PID: 9881 Comm: syz.5.796 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.073379][ T9881] Tainted: [L]=SOFTLOCKUP [ 356.073387][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 356.073402][ T9881] Call Trace: [ 356.073409][ T9881] [ 356.073417][ T9881] dump_stack_lvl+0x100/0x190 [ 356.073453][ T9881] vpanic+0x552/0x970 [ 356.073476][ T9881] ? __pfx_vpanic+0x10/0x10 [ 356.073498][ T9881] ? __pfx_vprintk_emit+0x10/0x10 [ 356.073524][ T9881] ? sys_imageblit+0x19fb/0x1d60 [ 356.073560][ T9881] panic+0xd1/0xe0 [ 356.073581][ T9881] ? __pfx_panic+0x10/0x10 [ 356.073606][ T9881] ? sys_imageblit+0x19fb/0x1d60 [ 356.073644][ T9881] check_panic_on_warn.cold+0x19/0x34 [ 356.073669][ T9881] end_report.part.0+0x3a/0x90 [ 356.073701][ T9881] kasan_report.cold+0xe/0x18 [ 356.073734][ T9881] ? sys_imageblit+0x19fb/0x1d60 [ 356.073773][ T9881] sys_imageblit+0x19fb/0x1d60 [ 356.073820][ T9881] ? __pfx_sys_imageblit+0x10/0x10 [ 356.073858][ T9881] ? prb_read_valid+0x78/0xa0 [ 356.073890][ T9881] ? __pfx_prb_read_valid+0x10/0x10 [ 356.073926][ T9881] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 356.073955][ T9881] soft_cursor+0x524/0xa10 [ 356.073989][ T9881] ? fb_get_color_depth+0x120/0x250 [ 356.074018][ T9881] bit_cursor+0xe58/0x16f0 [ 356.074052][ T9881] ? __pfx_bit_cursor+0x10/0x10 [ 356.074082][ T9881] ? __lock_acquire+0x4a5/0x2630 [ 356.074116][ T9881] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 356.074140][ T9881] ? get_color+0x1da/0x450 [ 356.074165][ T9881] ? __pfx_bit_cursor+0x10/0x10 [ 356.074193][ T9881] fbcon_cursor+0x43c/0x5e0 [ 356.074219][ T9881] ? add_softcursor+0x180/0x290 [ 356.074252][ T9881] set_cursor+0x1db/0x250 [ 356.074283][ T9881] con_write+0x89/0xb0 [ 356.074303][ T9881] do_output_char+0x63b/0x850 [ 356.074328][ T9881] n_tty_write+0x528/0x12d0 [ 356.074361][ T9881] ? __pfx_n_tty_write+0x10/0x10 [ 356.074388][ T9881] ? __pfx_woken_wake_function+0x10/0x10 [ 356.074426][ T9881] ? __pfx___might_resched+0x10/0x10 [ 356.074462][ T9881] ? __pfx_n_tty_write+0x10/0x10 [ 356.074489][ T9881] file_tty_write.isra.0+0x4d2/0x890 [ 356.074529][ T9881] redirected_tty_write+0xd4/0x120 [ 356.074566][ T9881] vfs_write+0x6ac/0x1070 [ 356.074588][ T9881] ? __pfx_redirected_tty_write+0x10/0x10 [ 356.074627][ T9881] ? __pfx_vfs_write+0x10/0x10 [ 356.074647][ T9881] ? find_held_lock+0x2b/0x80 [ 356.074678][ T9881] ksys_write+0x12a/0x250 [ 356.074699][ T9881] ? __pfx_ksys_write+0x10/0x10 [ 356.074726][ T9881] do_syscall_64+0x106/0xf80 [ 356.074749][ T9881] ? clear_bhb_loop+0x40/0x90 [ 356.074796][ T9881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.074831][ T9881] RIP: 0033:0x7f4c4d99c819 [ 356.074849][ T9881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.074872][ T9881] RSP: 002b:00007f4c4bbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.074894][ T9881] RAX: ffffffffffffffda RBX: 00007f4c4dc16090 RCX: 00007f4c4d99c819 [ 356.074910][ T9881] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 356.074925][ T9881] RBP: 00007f4c4da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 356.074940][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.074956][ T9881] R13: 00007f4c4dc16128 R14: 00007f4c4dc16090 R15: 00007ffc8112f408 [ 356.074979][ T9881] [ 356.075045][ T9881] Kernel Offset: disabled