last executing test programs: 19m35.906924533s ago: executing program 0 (id=70): socket(0x2a, 0x80000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x6a) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, &(0x7f0000000040)="9dc4e29815c3dd855a4340428a12ae12c859250e55d63ef492651f515f9a76", 0x1f) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) open(&(0x7f0000000800)='./file1\x00', 0x163ac1, 0x82) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = bpf$auto(0x5, &(0x7f00000003c0)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b4d, 0x9) r5 = socket(0x28, 0x4, 0x84) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@ethernet={0x306, @local}, 0x6a) connect$auto(r5, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x800054) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="42bf", 0x2) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r2, @ANYRESOCT, @ANYRES8, @ANYRES16=r3, @ANYRESHEX, @ANYBLOB="de2226424ecd338c2a7d7e9ab6b1692609176f3156f5b69843e3d8c9eb80b3a39ac2ac65fbbd662aed71f79092d0c7f0c813449df0a869e6744d994122cf1657ecabacc04e2758ba00a3afdfd032b5416c6b24fe4107aae14b9d588fa215e391889a0c2fa9cb2f296012d7dc7ee36bb8b868c82726ff9e52e834a9d553ec705b2cd00e7e3b6cdd40b54201aacd08c092b04e87ea9748a6905d3267f009ebe321fff308ebd08e96b7938e378f886985b5248a4b5f90c52ee9f02f33cad741954c4997b216ba", @ANYRES8], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r6 = socket(0x10, 0x2, 0x6) getsockopt$auto(r6, 0x2, 0x0, &(0x7f0000000180)='%\x00', &(0x7f00000001c0)=0x8) 19m35.012554544s ago: executing program 0 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002a80), r0) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_HEADER={0x4}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x881}, 0xc810) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x3}, 0x3) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\x7f\\9\xa7\x1b\x95\xafQ;CL\"\x01\x88\x06\xae\xa9W\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\x05*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\xd6\xf8.a\xa8\xc4#Lz\">\xa9\xc7U1\rt\x00'/250, 0xfded, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/disk\x00', 0xc0082, 0x0) write$auto(r3, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,D\xbf&\x9eb|\n\xee\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbb\xbb\xf9\xcdz\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x1d\x88mr\xfd\xf1\x1b;\xabt\xd1a}\x10\xab\xeb_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:kJr\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\x15/\xf9\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\aA\xe9(\x00\x00\x00\x00\x00N\xb5J\xc8A\xc7m\xbf\x19\xae\x9d\xcaR\x0f\xa8\xdf\xe4M\xe1>k\x93\x01\xe5\xba(\x96K\xc1=d3\xe00u\"`]\xb3\x11a\x1cSn\xe7\x87\x84\x93\xe4\x90]\x86\x10\xe5\xacK\x99\xc1$\x91\x05\x00\x00\x00O\x01xc\xa8\x9a\x1bK\x00\x00\xf6\xa2\x8a\x7f4\f[BLH$6\xfb,\xd8\xd3\xd0\x8b\xb3yA.\xb4\xbc\td\x9d\\\xd0\xff\xd2Y\xc4\x9fT\xb2\xd5\r\xf1#\xd5\xf2\x9cU\xd1:+\xb63\xae\xc1\xf7\xe1\xd4\x879?\xdd\xd6\xd4\xa3\xc7\xd8 S\xfc:\xe1{\x16\\h\x9d\xbc#KEC\x1a\xf9KH`\x82e:_\x9b\xf1\xc1\x8e\xf0\xc46\x98\xd6u\x90\x18\x8f\xe8\xc3%\x8e9\xab\x7f\x0e\n\xb2\xa4\xef\x90\xb16\x04\xbc\xc9\xdc\xad,\xcc\xad}DY\x1d\x1fv\x90\x97u\xa1\xfb\x13\xa93\xb6XJ\x84\xe3\xc1)\x98\xae5q\xa5L\x87\x1aq\x1d0\xf1\xcb\xe5\xf4F!*\xf9\xb3,w\"\xf2\xd0\xd1Vj\xd0\x06\xcc\xbc\xee0\x98.\xd9dC\x8e9\xfdM\\\xc5&\\\x9b\x81\x88t\xa4\x9f\xd1P\xd2e\x9c\xf9\xd2\xaf\x00\x00\x00\x00\x00\x00\x00 \x00'/478, 0x8000000000b) chdir$auto(&(0x7f0000000000)='./file0\x00') 19m34.772432696s ago: executing program 0 (id=77): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) sysfs$auto(0x2, 0x3e, 0x0) (async) fsopen$auto(0x0, 0x1) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x800, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) io_uring_setup$auto(0x2, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) (async) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sg0\x00', 0x103002, 0x0) (async) mmap$auto(0x0, 0x7ff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0x5, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) io_uring_setup$auto(0x3, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xc048aec8, r3) (async) write$auto_sg_fops_sg(r2, &(0x7f0000000040)="01000000000d0000624c492f4aa7d4bbe91b3ddc84d02747403bbca33c95be8fb08baf91e29260d0deefa78dc1e77a5d", 0x30) 19m33.861428416s ago: executing program 0 (id=79): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x8a603, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r1, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) 19m33.09767735s ago: executing program 0 (id=82): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x2000, 0x0) ioctl$auto_tracing_buffers_fops_trace(r1, 0x0, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) lstat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x4, 0x8000000000000001, 0x21, 0x2, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x9, 0xdae, 0x9, 0x1000, 0xffffffffffffffff, 0x7, 0x9, 0xff, 0x3}) 19m31.033747933s ago: executing program 0 (id=92): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x34dc82, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x8, 0x1) fcntl$auto(r0, 0x11, 0x2) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto_TUNSETVNETLE2(r3, 0x400454dc, &(0x7f0000000040)=0x2) write$auto(0x3, 0x0, 0xfdf3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x11, 0x2, 0x7ffe) ioctl$auto(r4, 0x8910, 0x24) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x17a, 0x9, 0x1}]}) 19m15.917570223s ago: executing program 32 (id=92): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x34dc82, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x8, 0x1) fcntl$auto(r0, 0x11, 0x2) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto_TUNSETVNETLE2(r3, 0x400454dc, &(0x7f0000000040)=0x2) write$auto(0x3, 0x0, 0xfdf3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x11, 0x2, 0x7ffe) ioctl$auto(r4, 0x8910, 0x24) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x17a, 0x9, 0x1}]}) 13m29.313508632s ago: executing program 1 (id=1352): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/uprobe/format/ref_ctr_offset\x00', 0x700, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x2000000000040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/id/id\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4088, 0xff8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video31\x00', 0x169200, 0x0) ioctl$auto(r1, 0xc040564b, r1) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x541b, 0x38) mmap$auto(0x0, 0x2020009, 0x6, 0xebe, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) getsid$auto(0xffffffffffffffff) socket(0x9, 0xa, 0x6fffffff) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0xfffff958) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r2, &(0x7f0000000000)='system.posix_acl_access\x00') 13m27.800641813s ago: executing program 1 (id=1359): open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='hfs\x00\x81\xe2\xde\xa8\xb7\xc4G[*}\xaa{\xf1\x86\xf7d@\xe8Y\xea\xb1H\x01\xff\"^\'6\xba\xa9s\x1d\xf4\xe1i\xc5\xb6_B\xa7KFS\xc1\xa7\x8e*h\xe3\x8b\x7f\xca\xfcNEi\x84?\x82\xff\xf2\xac\xd1\xee\xf4\x9a?\xac\x11\x88\aO\x84\xe6k\a\x9bY\xddx\xb8\xdf\vHv\xb5\f\xbc\b\xc0\xfa\xc0\xfe\xa6\xce\xbd\x03\x00\x93\xdc4\x97\xce\xd5&\x93\xae\x05q\xe9\xa8?\x00\xbdi\x88q\xd0w\xfd@\r\xce\xe4\xadrt`\xf8`b\xbf\xeci\x93a\xc6o\x9ej\xe4\xa3\x9d\xaa\xe1\xe1N\n\xbcq\n[\"5\xd4\xa6\x96#).\xbd\x8aD\x88>8J\v\xb5\x99H\xc5\a\xc9\xcf\xbc\x85\xbf\x85\x81\x0f\x7f8\x11\xdbK\xf3\xc2#\x18 \xdf\x05\xcd\xbb\xc03_\xb7Q@\xf2G', 0x7, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0x9) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x11, 0x3, 0x80000000) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x8) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr15/ifindex\x00', 0x40800, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb) (async) getsockopt$auto(0x3, 0x200000000001, 0x3f, 0x0, 0x0) (async) socket(0xa, 0x1, 0x6) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0x0) (async, rerun: 64) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (rerun: 64) 13m25.78616771s ago: executing program 1 (id=1366): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0xa, 0x5, 0x0) (async) getsockopt$auto(0x6, 0x40000000029, 0x4a, 0xfffffffffffffffe, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) (async) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fddbdf250e0000000500120040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dma\x00', 0x142182, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/178, 0xb2) (async, rerun: 64) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x24000010) (async, rerun: 64) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) setresuid$auto(0x0, 0x7, 0x8080) (async) bpf$auto(0x3, &(0x7f00000001c0)=@query={@target_fd, 0x1, 0x86e6, 0x9, 0x63, @count=0x4, 0x0, 0x6, 0x2, 0x10004, 0xb716}, 0xc) (async) bpf$auto(0x0, &(0x7f00000001c0)=@token_create={0x1}, 0x6f6) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @broadcast}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) setsockopt$auto(0x3, 0x8000000000000006, 0x22, 0x0, 0x7ffffc) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r2, 0x8000) (async, rerun: 32) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) io_setup$auto(0x7ffe, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13m15.042313136s ago: executing program 1 (id=1381): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b72, r1) r2 = pidfd_open$auto(0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x2342, 0x0) select$auto(0xd, &(0x7f0000000080)={[0x800, 0x0, 0x0, 0x7, 0x3241, 0xb8, 0x1, 0x7f, 0x0, 0x9, 0x40, 0x1, 0xffffffffffffffff, 0x3, 0x6b, 0x7]}, &(0x7f0000000280)={[0x7, 0x401, 0x8, 0x17, 0x2, 0x8, 0x800005, 0xfffffffffffffffe, 0x6f3e, 0x8, 0x401, 0xb1, 0x7fff, 0xffff, 0x0, 0x8]}, &(0x7f00000001c0)={[0x3, 0x8000, 0x4, 0xfffffffffffffff8, 0x46b7, 0x4, 0xfffffffffffffc32, 0x8, 0x7, 0x3, 0x3ff, 0x8, 0x101, 0xa, 0x401, 0x9]}, &(0x7f0000000240)={0x0, 0x7}) socket(0xa, 0x1, 0x100) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setsockopt$auto(0x4, 0x0, 0x485, 0xfffffffffffffffe, 0x0) setns(r2, 0x60020000) syz_clone3(&(0x7f0000000300)={0x153326100, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0xa7) mount_setattr$auto(r2, &(0x7f0000000000)='./file0\x00', 0x81, &(0x7f0000000040)={0xf, 0x0, 0x1ff, @raw=0xffff}, 0x1) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x184, 0x9, 0x0, 0x0) 13m13.87253088s ago: executing program 1 (id=1384): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) unshare$auto(0xd) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clock_adjtime$auto(0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r2 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r1, 0x5393, r2) memfd_create$auto(0x0, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_frmr_depth\x00', 0x40302, 0x0) read$auto(0x3, 0x0, 0x8080) chroot$auto(0xfffffffffffffffd) 13m8.058943328s ago: executing program 1 (id=1401): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x82a02, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x82a02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0x11, 0x0, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0x7fffffff) (async) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) (async) getrandom$auto(0x0, 0x6000000, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002ebd7000dddb6f3469dd000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) sendmsg$auto_NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0x2, 0x7, 0x2e) 12m52.975936372s ago: executing program 33 (id=1401): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x82a02, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x82a02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0x11, 0x0, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0x7fffffff) (async) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) (async) getrandom$auto(0x0, 0x6000000, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002ebd7000dddb6f3469dd000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) sendmsg$auto_NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0x2, 0x7, 0x2e) 7.528601477s ago: executing program 3 (id=4101): r0 = socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='*', @ANYRES16, @ANYBLOB="010029bd"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="010600"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715b2d"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) 6.438450141s ago: executing program 2 (id=4106): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) 6.309478804s ago: executing program 3 (id=4107): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8002) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) write$auto(0x3, 0x0, 0xfdef) shutdown$auto(0x200000003, 0x2) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) r1 = socket(0x2, 0x801, 0x106) getsockopt$auto(r1, 0x11c, 0x3, 0x0, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) (async) close_range$auto(0x2, 0xa, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) r2 = ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)={0x101, 0x1, 0x40}}) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) (async) socketpair$auto(0x100200, 0xd, 0x7fffffff, 0x0) (async) accept$auto(0x3, 0x0, 0x0) (async) ioctl$auto_TUNGETVNETLE2(r2, 0x800454dd, &(0x7f0000000100)=0x1) 6.239576676s ago: executing program 2 (id=4108): sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x149) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x2, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, 0x0) write$auto(0x3, 0x0, 0x5c8) 5.400072686s ago: executing program 3 (id=4111): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0xa, 0x2, 0x3a) (async) r0 = socket(0x11, 0x2, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x8}) (async) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x4, &(0x7f00000000c0), 0x5, 0x1000}, 0x5}, 0x2, 0x100fe) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) (async) madvise$auto(0x337, 0x7, 0x2) (async) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x400, 0x0) preadv$auto(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) (async) prctl$auto(0xa, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/vulnerabilities/spec_store_bypass\x00', 0x101800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001080)=""/98, 0x62) (async) setreuid$auto(0x0, 0x0) (async) futex$auto(0x0, 0x5, 0x2, 0x0, 0x0, 0x1ffffffd) 4.833447815s ago: executing program 5 (id=4113): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0x800) 4.714450986s ago: executing program 4 (id=4114): r0 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x808c0, 0x0) write$auto(r0, &(0x7f0000000040)='.\x00', 0x6) (async) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0ro\x00', 0x2482, 0x0) ioctl$auto_BLKRRPART2(r1, 0x125f, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE_EXT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x402, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x4004000) (async) fcntl$auto_F_GETOWN(r0, 0x9, 0x1) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.2/usb13/13-0:1.0/usb13-port7/power/runtime_active_time\x00', 0x2, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)=r1) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x13c, r5, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_AUTH_DATA={0x20, 0x9c, "3ae9728a909ed5ede73590fbea49ef76715b859bfbc7040e618c5884"}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MLO_TTLM_ULINK={0xfc, 0x149, "f69df9be79ea50fe32881c0c417331e2869ccb60a3c857122f1320889bdab934b11e2c941b6616db675b517b6c23c55131f6a607abb39317e94a8b8a3373e33315b8376263e500800bd797c9b806b1dd7594520352514f3dd783faf5db303ee0cb84fa8ae6397fd3f35dc6f58449f2061b159981ac31f27c0dc70c139df4ec0f06959f9dbae8eed39d6a141b20e21105673b5fed8c4d34e105f110fca9e8ac91e59f5db231bfc31274a23d9da0c20dffdc5a6dba081d8868e2006404e227841ddc16b1cc504e936decc68a298a007cae725b18acce51a9ff5355c254e542ecb57e27d130bc701f27863dec8c28f7b8b5a6d076e8b69844c1"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'veth1_to_bridge\x00', 0x0}) (async) r7 = syz_clone(0xb4840000, &(0x7f0000000580)="6b728eadbbf4ab06243de4c4438d2ce9a44d4ce5aadbaa0e20025c8439da3e7803da0bf83a1d80f90cced69112445cac25b6ca20ecbc30ac5ca4", 0x3a, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="1e8ff0d7dfde3727c5cc5231248b035f5f0b88ea1c164f3e1f14a485e4f151c387833743d0eb71ef9a7f39434f30b2dfbfd918019452cc340ebf001c183543070665411f92e6e037425cd63b6b42dfbf9b9bea72ee50a669a128b94e4606287c2e60163a") (async) r8 = geteuid() (async) ioctl$auto_VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000006c0)={0x0, r0}) sendmsg$auto_NL80211_CMD_SET_BSS(r4, &(0x7f0000003300)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x201a}, 0xc, &(0x7f00000032c0)={&(0x7f0000000700)={0x2ba4, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xc5, 0x1a, "41a929e24c09ff325db86df211fae14d9a8e7b3c9ca68fd367340e2263f5d7eb890c38e298788114dd2cf69803e552a19970c5f27cbc2e31b600543741f65b6e0c70c452a89073bf7072a47151f299023b760ec3a0315ddb55cb3065270c34528194fb78de611242d9a0fb9068a806eab47c87b7ff86f8455899e50e18fd4e52b241f6fa3e37aabc38a6de47dd903305fac27305b7ba8fd7d8228743cbef7be8bc0b3b600b83212903cb16014651971d22318e765cf15e2f5e544d2e7dbee1d4d1"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x13b0, 0x124, 0x0, 0x1, [@generic="c702c7f76f7cd0e67c87035c0af716", @generic="7b9b8080661d012918c9abc09fee78d719d3c8edc3660cbdb0901ba75541f59697511679d15c01f6d05776e7dc61f813d6b69abcb0cd89156f3395b1ebbb0707feaa95d3bc52ad333309c012fe19c1bafcebec3215410e5f285c0800ebd50e44b998faf8c58cc38978a8d508575272a5d9d340c6ca510ed370a7cf82b7774a0bd57c89d7a91c42dd", @generic="e2cae77cfa487b720b00f18d145bf21b913f0b7a5b19bf5593ef2b47b152d843982fcb63d06f0fde94e7", @typed={0x6, 0x121, 0x0, 0x0, @str='I\x00'}, @nested={0xfa, 0x4b, 0x0, 0x1, [@generic="89cb0e554b0627c3d435fb2706b9876d1c3514c738904ca2bed454b2346d1c27156f67b291640f1b578a4c55bebd9bfaaed58dc66735db4cc66728", @typed={0x8, 0xcb, 0x0, 0x0, @u32}, @generic="7a28558fa204f7f14227cfe0d8e4fb08978f4842a8db0d6995eb691097bf4d6aad2c0f8d01ab12e9a923cb9f556f8c9504333c30509798bae59ff1b27a6d9aaf8c240d123b964feee37b4601c5be2141e69ae60238a00d33550fdc6d592576087eca32778f62d4170d5e224f2b311f0abd6c2ec81d88156a0e6deec82e224314af295d889b7986cbde11fe2463ebb723f749958ac9ce9f477dd37ec545a415c2439d3821c5525116d545e6465bf9ef", @nested={0x4, 0x45}]}, @generic="d56ed926529a58da05ca303a5fb176c013fa7cf1586b95476531d90c6cc344f44a9cb232a20d4ccb2792eb57d9dfe79ec6c4d6d317ff52fe7e55de849ad74d31fc46bd2f203ab881c7", @nested={0x10f6, 0xea, 0x0, 0x1, [@typed={0x6, 0xd6, 0x0, 0x0, @str='-\x00'}, @nested={0x4, 0xc1}, @nested={0x4, 0x109}, @generic="89e8a07e885540c4d22aa827b06c82d26258bf381d2bca347a4e08d22ea1055c4ca303bc8f79b8ce7748", @typed={0xad, 0x103, 0x0, 0x0, @binary="9d2fb5ee7e96617eade11a74fd5e6529cacf6a4789d7850057418330d68e4b9f1daf153296df331fc6d6d78ae8ec6360f8ffa0e7fd6ea87287449ed0d41914bd92c655af6bd028cda0acef038839c0c2d1a7bbcd6dc23d94fb5217c043450a3bf0001931ccf572995b5e2065a662c8985693acbdbc3c055743c5c1d52dbb582c5ab04432728e27982f77340fefe6b0ff440c97dd7c0b125e4d8417ee8b12d6fc0a9c093648fe8cb7c3"}, @nested={0x4, 0xea}, @generic="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", @nested={0x4, 0x136}]}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r7}, @generic="901f4135b7414d8ba8fd5604440b512926170d6aacf9aeafc52d191fa607c06b90438ba1dfefdd0c2cd6bea6ac81e629e8109962bc0c078b1045bcda22552a24c05fe354bdd3eef793137b46c6b96bda3878b475a993d4571642100a99474d45662bce90d4bdcb46a90058702dc334fca31061ce1d0984f04ecf6aec1522296bef5f88ff55841057db41c4d1c711f0aa9f65b4e9d2d639f847e2c0847bd2"]}, @NL80211_ATTR_PMKID={0x5d, 0x55, "25759832845f966a946054f8b2b8a56b7451e9973d9d7fe62a44552ba9443ef96e95eded89a66f20db2bc07c2aaa95d0b1295797b54ed0f9517dee543520a52f6d7388bafb7beec9501600b5f9d8a8c510377349635b2474f4"}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x3}, @NL80211_ATTR_KEY={0x12d1, 0x50, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x7b}]}, @typed={0x8, 0xe4, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x2d, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x70, 0x0, 0x0, @fd=r1}, @generic="851ed08ac8a7f9c199cc0037b237e89469b3b6f19b7cd94bbbe48ca7d370f1512a05fc12c04f7caf69401cddb9fde7ed9df04c4e168d4febf7967b63b998a45a9f4021f290915e00e8fbd7fb8c09392110a20c43d39ef7ed4426890c5b1df09d6aae017dd33c8ae9649006ee644baca0c23348d466f164b2675bf9acb989f98026e2f68604bd6b19f1e50eae9ab1da2e09", @typed={0x8, 0x154, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x4, 0x13e}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r9}, @nested={0x1207, 0x2b, 0x0, 0x1, [@nested={0x4, 0xe4}, @nested={0x4, 0x45}, @generic="2fd5ace24a0fb4b46c4d9764895cad8120c15d165831df3378f7e93e7fcc804ff6c01967a18d6bc7f5c38a735890c21d713b7ff83dcab590e309530e360c8723050c56d1be6b409e18e13bab71de44e12a0896b2b101569b324c190333157909d3a268992f491d62b8d8caf5ce6d52edd3f6671a075a85b06b7ebfba7332f2cca3a777ff87ba72ddc3d3acf64743a0b0a8b6357a794ba44b1f3de353fd", @nested={0x4, 0x72}, @generic="2fe9c031444776e3151bea7ff051590eb3fdfae560d5a7e9346a5841c3ffdd639798080382d29082023cce9c236e42e9575a8f441a724aef0fae5822345edf5157c9f6f3c79e97222869e1930e844e855793f0003b120c44bafab11e72fb9deb074722a4fcb2ba2bc7d7bea6217df1c93c7bd5b8b458907496aedfddb920c9db3f98bc3f9f2f006e0d735c4d3afcb97b7e3895f850f3605f1e333d2ea838c8998a85025ee68ae7e2b84dffc5294bcd4901af3afc567567bd623f1bc3d238d4bdde2003943b359966fb544b4d427dabbf09cfc61fb24ca7af2df6a1bda9c4b786f241485210b71b", @generic="c5b0709c4295592d0094adccf5dc053cf079dd2475efac802be666eb6cbf23a6d28d57d55fc3bacde1ae756bd0823f330c88e99e53d7e2f088e44af1db954d7f16f903f748b2ca89fcba6bddcc3c3b8b364fc30564c9ed15c5a935ff80f889c088872c825b43b2f1a4a90957bb0054", @nested={0x4, 0x8a}, @generic="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"]}]}, @NL80211_ATTR_BEACON_HEAD={0x3d1, 0xe, "e55dc95f504d8d43bf1378e40ea26090b9a9b7c8bde7095f35e064439bad1bcc7b6730681432fd728ddc8b5b58ef1e65f77e1a3eb499f2c0e1c7e64ecf97e016c8e494983c7d0f9c1f973aba948e64c3107990089e1c01a325bd281e8663986235b088938dd3a830e2629995daaef906021e6a4f5b4b8cd3d89124b24daaf80f9b1e37e6bbbc1fe8e28e92f92457e7cfe6a592f2d6dbf3718a759cd178adbf71f04e689cd1f87d744afdef5349fbc0cc1dbb3b36e0fd569df08b2cbac9165ff0a5168e3525be9193424ab8f7da64a8c018997ccd1f460b1772c6dd6381552cc46d927e17b1fb68b3b87212e77b40af6074861ec810bddb86e734a67a67a503e170e60988791d9f887a91bacf3c638c7aba6513cd5ee3f816232c2a80d77ae95300c939de574620d575cf5ec57fd65c25156526ef6d284012c04eff727591e76174a282b0494dbd4d4dc9eb2242c5432b897a3fa78717f109f22973e10e149b1f574ab73fdc769f314062da72d1848e2b2454ae6203de194be4606d732bd45cc6af92485078f35ff64eddf7131e19b00f97a4863d658b3dc175ca818ab136762573b744f23d6bf85c79f2aef51869043d729a996a219cf7ca78bfac7e1c3c757f2bb8627a5b8dcb197184ba200ae1dd7f7a39a3a3898ce1620a9556bbde02bb603bda9c7074599fbc2badb878b2122bed510f12c9eaa0578e8e8203147c5e302c3bb7cb09f8a8e93c5bdca70365761e9820d6705af5fb79dbe8f34ce093775a9ce12dc67e6997ec1912c204dc4a9058669e401583bd941e47c5b5643c6df0efff0d7109a430aa968cc3d8872f03dbebb277763bbebfb55edab7d9a1fc2814c4288853d98ff5145bb11d6a0e81846ea454c90f127526e5d5d412a4a5751fec50099355bcc2940151a6286fbcc5624a395444cad1fdea6ab341be342cc6aaff3079f32b3dc3ba74285c58af84151915f9879f03bfe20e3e0e1e1aa1103559b0cc39eefa2d273dcaccda2c1255862d1643789d9608bdc6e760a3aa963707cb03f0799eb21f5f5fa875c4f09d8e7a12c6d1a205cecc724b68cb2a31c77f302671831c3bb9ace4c16815a28b7ed64c0f3d2b4ee876eeac074e45d9c88797711ac567c4afae0c9518878fbc25a0eb26443c3873365efae6c474ae5fe0ef2686317755c5f81c57c77e2547d6bad89de07c1d5163862b3a19620b317dc16a52efd507bd5c9981feb5db5f3ed96b71a9de5fb58f7e8e9b203873ed2b7ede47ebe5fc6dc2a51e02ee69bc47bb4aa3706a254c7c11666eb9442aebd51312f527e231564aabaef6c67b1a4ba7b8000aa9566e8ced2bbaf333d3c4dbac7e1a86cc91922ab43551d157439c58ae704f81f413e2b9"}]}, 0x2ba4}, 0x1, 0x0, 0x0, 0x20000054}, 0x801) (async) r10 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x0, 0x0) write$auto(r10, &(0x7f0000003380)='nl80211\x00', 0x8) (async) r11 = getsockopt$auto(r0, 0x7fffffff, 0x2, &(0x7f00000033c0)='SMBD_GENL\x00', &(0x7f0000003400)=0x800) r12 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000003480), r11) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r11, &(0x7f00000035c0)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x2810200}, 0xc, &(0x7f0000003580)={&(0x7f00000034c0)={0x84, r12, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x41, 0x4, "41e224357654d361e53386abfeda8e810008acd7153b7b1fd7785d74d48162d7ea7c57e50c42fc232432843ad0a9816fdaaca57f835115b30dcdc3c8d8"}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x45}, 0x10) (async) sendmsg$auto_NL80211_CMD_GET_KEY(r11, &(0x7f00000036c0)={&(0x7f0000003600), 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x2c, r5, 0x106, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x80}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x4}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000850) (async) sendfile$auto(r4, r3, &(0x7f0000003700)=0x313, 0x0) (async) mmap$auto(0x8000, 0xfffffffffffffffe, 0x0, 0x1d, r9, 0x3ff) (async) ioctl$auto__ctl_fops_dm_ioctl(r4, 0x90b, &(0x7f0000003740)="b604b43ce4707a4a82c37427014f4e89b13e7827f35e4cb6afe06f5f288a7349c74669f3650328b6337743d5e838f72f78a36471453a") (async) ioctl$auto_SNAPSHOT_S2RAM(r4, 0x330b, 0x0) (async) r13 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000037c0), r4) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000038c0)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003880)={&(0x7f0000003800)={0x44, r13, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x88}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x4}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x3ff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) (async) sendmsg$auto_SEG6_CMD_SETHMAC(r11, &(0x7f0000003a40)={&(0x7f0000003900), 0xc, &(0x7f0000003a00)={&(0x7f0000003940)={0x94, r12, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @SEG6_ATTR_SECRET={0x5d, 0x4, "5b88fb4c6440bf792f9f3661f22bff47d785ff48cb291e536fbde935f8309b68076d73c7d8fa123e1eebba9e46563419b5fd4ff7f9b514b315dd41a781ff895ec7aff638b2013c300a3e2cded8f0929d3a993f4959b6ed1ec6"}, @SEG6_ATTR_SECRET={0xb, 0x4, "7ee523a47a1c44"}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000003a80)='/dev/mtd0ro\x00', 0x10000, 0x0) 4.482497734s ago: executing program 4 (id=4115): mmap$auto(0x1, 0x4, 0x3, 0x40eb1, 0x401, 0x300000000000) (async) r0 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x40000002c55, 0x0) setsockopt$auto(r0, 0x10000000084, 0x7f, 0x0, 0xad4) 4.302070544s ago: executing program 2 (id=4116): r0 = socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='*', @ANYRES16, @ANYBLOB="010029bd"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="010600"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715b2d"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) 4.191599445s ago: executing program 4 (id=4117): mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x1, 0xfffffeff) r2 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pread64$auto(r2, 0x0, 0x2, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x191340, 0x0) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1fffeffd, 0x7fff, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x1000000009, r0, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r4 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_evm_key_ops_evm_secfs(r0, &(0x7f0000000580)=""/192, 0xc0) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x1d0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7e}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_IE={0x19e, 0x2a, "1056ed0ea20cf740dd5da79fae87869a190d35a169db486b3703439e4ed00b17028a9ee917bba26bc7c502b9b6fe544d700070560a8ec49c57d4a5f36e4b58d68e932f4271cb5a8b281679fc47ba8c316283d096d99b7fed34e9339fb54d224d45ebfc1421a0891e86b68b499e1da2b728360874de2fd578898720563eb3a87d3c5f0d0925e9db1bb0ea24ceae4bb0c7bd6726d20800632cf46ce4e2dd0cd10420e520660563728cbdae626e4c8b3f4092b7a0ffb104fd8801fe03fcf2ae2854cc855f17e3cd1328b70b6de0224bcbde44be8bfbdd541471dab9643c9c84b9066a4657be74b7767d554c5388e7d26ee30534ddb11c581506bd9e06fb7a2ea20093ce4278329809923e47d4361dd79931dcd3a7a3eb3c8d0ad000c0ed2e36ed57e7699012cc587b90468f7d2b052f626f91d46ab1ab6375ed21ecf6c8136581f0f1004e31fb3b2659eec18a35742532f4583dd718ceba2e4b740b0e1fe25fa132ec76f41ff68d61e1d607fff1adb97a31d9a11f426e237b44d0971817a9d32955e8dfcb5dd0edf283900824825ef7480e995f7efd62d893a159b6"}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x40}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000050}, 0x22004021) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) writev$auto(0xffffffffffffffff, 0x0, 0x8) madvise$auto(0x1d, 0x0, 0x9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000000300)='\t', 0x1) 4.145386616s ago: executing program 5 (id=4118): close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram15\x00', 0x127a02, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfs\x00', 0x181000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvmet_rdma/parameters/srq_size\x00', 0x183841, 0x0) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/94, 0x5e) mbind$auto(0x2000, 0x100000004, 0x10000c000, 0x0, 0x6, 0x2) sendfile$auto(r2, 0x3, 0x0, 0x400000000006) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000002540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002500)={&(0x7f0000000200)={0x22fc, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCAT={0x2004, 0xb, 0x0, 0x1, [@generic="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", @generic="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"]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x7fffffff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7}, @NLBL_CIPSOV4_A_TAGLST={0x170, 0x4, 0x0, 0x1, [@typed={0x8, 0x15c, 0x0, 0x0, @fd=r1}, @generic="a5cb9253df4a36b826df6da43ee0fd673d1e3d9d39c560fcb8d72ae85a36dcaf08575877b84146e6662c0c6e44e7135ba28dfa9f290c5de172718486afbde436223d25f64c053713853addfbd2b0bb89b1ba1dc94ebb443c1ec4f6acb6d88060dc600d5d", @nested={0xec, 0xfa, 0x0, 0x1, [@typed={0xd9, 0x38, 0x0, 0x0, @str='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C'}, @typed={0x8, 0x9c, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x21}]}, @nested={0x14, 0x145, 0x0, 0x1, [@nested={0x4, 0xdd}, @typed={0x9, 0x4, 0x0, 0x0, @str='*,]-\x00'}]}]}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc}, @NLBL_CIPSOV4_A_MLSCAT={0xa3, 0xb, 0x0, 0x1, [@nested={0x10, 0x138, 0x0, 0x1, [@nested={0x4, 0x40}, @nested={0x4, 0x87}, @nested={0x4, 0x143}]}, @generic="36cc4ca01534079749247d408d112171682c1e6802ac28462c13554e7799c338df33fd0f9668f0122a90ce059edd068975006798ca4b23e038f5378bd51995773c6b802a47243c6b22cbf057f69ff2c97b2996b85591e227b9b61433d12f85479643d0b9529ff3b9fd7d1e406720ddc4bd5ce36fd35470c4a4c0ba3e947323575e974acb752478d2052fe7a143e033"]}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfff}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [@generic="68466d8fa53d13b2aaf7d290707db5d26f4d52345f604a611db691fe9fcbe10699f71f465427359f23f3171baf579f31201c9274c42ff1154c6f913041c08c9b7d7ba56413a63883e920313ced3cf7528de81c71b54a00de0bf12c5e01943ac691e9174cb58a274ae8f6bfce49ad68eab30209c799f507c91341c663fce36d4fd303e96098d940b6258ac8378adad0b42de5d57e2da2c72e6d45c87faa9f5bad0058df6c97510180f2d5130a"]}]}, 0x22fc}, 0x1, 0x0, 0x0, 0x24}, 0x20044000) 3.990476793s ago: executing program 3 (id=4119): linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x21003b46, 0x2, 0x0, 0x0, 0x6) bpf$auto(0x0, &(0x7f0000000040)=@raw_tracepoint={0x0, r0, 0x0, 0x3}, 0x8a4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r3, 0x3, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) 3.816854525s ago: executing program 2 (id=4120): r0 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) fstat$auto(r0, 0x0) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fcntl$auto_F_SET_RW_HINT(r0, 0x40c, 0xb) socket(0x5, 0x4, 0x7) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x22002, 0x0) read$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000200)=""/81, 0x51) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0xfdef) 3.734177971s ago: executing program 5 (id=4121): r0 = socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r0, 0x1, 0x5, &(0x7f0000000000)='!\x00', 0x7) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/route/flush\x00', 0x80401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) 3.402831863s ago: executing program 2 (id=4122): r0 = socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000140)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715b2d"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) mmap$auto(0x2, 0x4020009, 0x9, 0x2c11, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys1\x00', 0x800, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0x2000df, 0x100000009b72, r3, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x20000, 0x0) mmap$auto(0x0, 0x100000000010000, 0xe0, 0x11, r4, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0xffffffffffff0005, 0x15) close_range$auto(r3, r2, 0x6) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x401782, 0x0) sendfile$auto(r5, 0xffffffffffffffff, 0x0, 0x45) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x1, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x80000000, 0x2020009, 0x2e, 0x252, 0xfffffffffffffffa, 0x4) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) 3.022102035s ago: executing program 4 (id=4123): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/media11\x00', 0x1, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) connect$auto(0xffffffffffffffff, 0x0, 0x3a) setitimer$auto(0x1, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) writev$auto(0x3, &(0x7f0000000140)={0x0, 0xdc7}, 0x4) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000003dc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf2503000000040001800c00cf90a34bafbec2a847e2"], 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x840) r2 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x65, 0x6, 0x0, 0xd) socket(0x10, 0x80000, 0x4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x54, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES64=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x20004845}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) syz_clone(0xe2008900, &(0x7f0000000300)="d7f409f589409579cfe81280c9396b3df7f42ec8e436a7c2147edd64e8322f32d44be783110a2b05caa94a5d042934c00f86e85fd4d1eceeb9c2efc1d7dc63c68d892ddc65ed8bc44c7e0effdc86f9fddb5905373d58a96d0dc60cfe478a96e9780cf136063a2793c0c097df1de3099d96c01c24ccc109b1c7d687ecbd39eb36320063b86b9753211bba021ab0fa3f4393bd73d7b9e90992310b85a48dea36e1f34069d0dfeaf4307f0594c66297a687e7b5102fb8accf2ee20e8f639a978d739aa6006afa11311b95c1be7706c3e77182e826ddedc1e653cfe0", 0xda, &(0x7f0000000280), &(0x7f0000000400), &(0x7f00000005c0)="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") ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0xffffffffc0603d0f, 0x0) r5 = socket(0x15, 0x5, 0x0) setsockopt$auto(r5, 0x114, 0x8, 0x0, 0x4) shmget$auto(0x6, 0xbc54, 0xcee) io_uring_setup$auto(0x3ff, 0x0) 2.918367814s ago: executing program 3 (id=4124): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = fanotify_init$auto(0x1f53, 0x2000000000002) fanotify_mark$auto(0x400000000000, 0x1, 0xf2b, r0, 0x0) openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x119000, 0x0) (async) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x119000, 0x0) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/gss_krb5_enctypes\x00', 0x1c9180, 0x0) read$auto_tracing_stats_fops_trace(r4, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x3c, r3, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xc, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) socket(0x10, 0x2, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000002c0)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24048000}, 0x4) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) statx$auto(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x5, 0x10001, 0x0) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r5, 0x0, 0x48c5) (async) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r5, 0x0, 0x48c5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) (async) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752000000000000560357dc3d92a55872775ec80f3de71bd1b400007d0800cdd9690cac4138553e"], 0x2f0}, 0x1, 0x0, 0x0, 0x80f4}, 0xd0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x54, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x54, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) timer_create$auto(0x9, 0x0, 0x0) (async) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x2, 0x10007}, {0x9}}, 0x0) 2.655954745s ago: executing program 4 (id=4125): sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x149) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x2, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, 0x0) write$auto(0x3, 0x0, 0x5c8) 1.934893301s ago: executing program 5 (id=4126): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0x800) 1.70637223s ago: executing program 3 (id=4127): move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x7ef3837b7f62005, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptybc\x00', 0x80, 0x0) ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0) fstat$auto(0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop10/queue/max_integrity_segments\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4020aeb2, r1) socket(0x1d, 0x1, 0x7fff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x2000000c, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r3 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005880)='/proc/sys/kernel/panic_print\x00', 0x80801, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0) write$auto(r4, 0x0, 0x0) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) mprotect$auto(0x40000000000004, 0x8000000000000005, 0x4000000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) read$auto_dfs_cpu_ops_debugfs(0xffffffffffffffff, &(0x7f0000000040)=""/29, 0x1d) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.655491707s ago: executing program 2 (id=4128): socket(0x2, 0x1, 0x106) socket(0x2, 0x3, 0xa) setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) prctl$auto_PR_SCHED_CORE_GET(0x47a, 0x0, 0x0, 0x5, 0xa) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x100000, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) shmctl$auto_SHM_STAT(0x5, 0xd, &(0x7f0000000140)={{0x10001, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x3, 0x6}, 0x5, 0x9, 0x1, 0x9, @inferred, @inferred, 0x0, 0x0, &(0x7f0000000000)="a92cc5b95cbadeeec0c80a78f129b552aff38f501076b376c850e3181d7ab078b9c2a74d949545259b5a23079c5ddb423ec48eaac2ce48768e1ea76aa84b74416a50", &(0x7f0000000100)="899f6eff00"}) msgctl$auto_IPC_SET(0x7f7, 0x1, &(0x7f0000000300)={{0xffc, 0xee00, 0xee01, 0x6, 0x40, 0x81, 0x786}, &(0x7f00000001c0)=0x54, &(0x7f0000000200)=0x53, 0x100, 0x5, 0xd48b, 0x4053, 0x3, 0xffff, 0xc, 0xff, @raw=0x4}) setregid$auto(r5, r6) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x200007, 0x19) 1.421931279s ago: executing program 5 (id=4129): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) (async, rerun: 64) r2 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) copy_file_range$auto(r2, &(0x7f0000000100)=0x4, r3, &(0x7f0000000180)=0x6, 0x8, 0x1) (async) bpf$auto_BPF_LINK_UPDATE(0x26, &(0x7f0000000180)=@bpf_attr_3={0x4, 0x9, 0x8000000000000001, 0x6, 0x10, 0x0, 0x7fffffffffffffff, 0x4, 0x80000001, "ff5f89c5a44800", 0x0, 0x4c7, 0xffffffffffffffff, 0xc, 0x401, 0xa, 0x86, 0x8, 0x5, 0x71e, @attach_prog_fd, 0x80000005, 0x5, 0x7, 0x10000, 0x7}, 0x3fd) (async, rerun: 64) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 64) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x4b564d03, 0x3, 0x3e}]}) 1.210451087s ago: executing program 5 (id=4130): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x2, 0x2, 0x1, 0x6, 0x1000000000000004, 0x7, 0x39, 0x3, 0x2fffffffffffffe, 0x80000005, 0x7a142c64, 0x6d3c, 0x5, 0x7f, 0xa260]}, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x2480, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0be4f2597d8b11ed14dfa636bad65cae9c0d21", 0x16, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x2a02c0, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xad7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x6, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x4000004, 0x6}, 0x40018, 0x4) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r4}, 0x6f4) read$auto(r3, 0x0, 0x20) socket(0x1d, 0x0, 0x1ff) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48043, 0x0) write$auto(r5, 0x0, 0x6) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)="b2", 0x1) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r1, r7, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 0s ago: executing program 4 (id=4131): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x43, &(0x7f0000000040)='\xa1\x00', 0x4) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x9f, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f) (async) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f) mmap$auto(0x0, 0x4120008, 0x46, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4120008, 0x46, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r0, &(0x7f0000000240)='/3Cocw\x00\x03\x00\x00\x00\x17\x00\x00\x00ipt3\x00\xc3\xa9[/\xd4>p\xaeL@N&-\x1d\xb7\x86\xdc\xa8_3.\xa1\\\xee\xc7\xb4*8\xd6\xc04KDh\xc9\xce\xbe\x16\xca\xaaO\'\xfb\v\b\vM\x00e\xd6\xb9z\xdc\x12\x8f\x9d\x88\xad\xaav1\v\x06\xe79\xb9C\f\x875j\x00\x14\xa7\x7f\x1d\xf0\xf5\xc4\xe4nLc%\x80\xa95\xc3\xc2\xf0}\x05A\xa7\\\x9fC1\x9ci\x13\xbeq\xc8\'\xb8\x8amW\xf9\xe5\xf1\x1a\xe1\x8eTS\x97\xfbx\xb9#\xd9\x03\xcbz\x11\xb2\x04\\\xc0w\xeaS\xad8I$\xa0\x8c\xc4[\x04\xa4\x9a\x8b\xf5og\xee', 0x34b, 0xffff) (async) pread64$auto(r0, &(0x7f0000000240)='/3Cocw\x00\x03\x00\x00\x00\x17\x00\x00\x00ipt3\x00\xc3\xa9[/\xd4>p\xaeL@N&-\x1d\xb7\x86\xdc\xa8_3.\xa1\\\xee\xc7\xb4*8\xd6\xc04KDh\xc9\xce\xbe\x16\xca\xaaO\'\xfb\v\b\vM\x00e\xd6\xb9z\xdc\x12\x8f\x9d\x88\xad\xaav1\v\x06\xe79\xb9C\f\x875j\x00\x14\xa7\x7f\x1d\xf0\xf5\xc4\xe4nLc%\x80\xa95\xc3\xc2\xf0}\x05A\xa7\\\x9fC1\x9ci\x13\xbeq\xc8\'\xb8\x8amW\xf9\xe5\xf1\x1a\xe1\x8eTS\x97\xfbx\xb9#\xd9\x03\xcbz\x11\xb2\x04\\\xc0w\xeaS\xad8I$\xa0\x8c\xc4[\x04\xa4\x9a\x8b\xf5og\xee', 0x34b, 0xffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) signalfd4$auto(r4, &(0x7f00000000c0), 0x2, 0x6) (async) signalfd4$auto(r4, &(0x7f00000000c0), 0x2, 0x6) r5 = socket(0x2a, 0x2, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000001380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f00000013c0)={0x1030, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC_HINT={0x1004, 0xc8, "61e78e6230baaeae9fe240372cf9e8ac1ca9fa826eea05b3eef8a9a3ee15db4933df8069998d8feeebab5aec77027f21c67430fc867fd427f9b2cdb08be473c47f4a3e5be072b52da21559e6939c68cddba59c2a11844ae717e4ae61bbc55ea790b533a3e99d76b68d049a43bd0d59ccb92a3c0c92ebe6055c5dd636caa9a3c65c36cbcc5ae7b1f07339661b4485dbaec1d58eb29581db4bc56bbc984a7d726c67fecfa533d4c45a720465355c2dc5091dd67c8c30b47e77d36cd84f0af81f26083eb15b099cf60d97588a9d89641b1fff871e609ce623d51e8e4e1168fe70ea30f1a6db345a87389adfa023564e7f480c15ccf9481627233f1a1276c2193e11ccd80b95a3982d36ca402b9553c2d4499cba7b1f1c17c0e5d70fff154ca542c284fae4d10a2b6a073dea38b3afcf21b96fc60ffacd2a7d135b8e0f0b8bcf64d5c3f00a1f44e2ece19dc1831a39dc848a58bf1ddc229bc8fa922041653e9276f240326fe4742a606c616550e32875d6f383b74a3f311a4b6098833c7f830db0bbf96a9effa8cc06dbcd713bc7c2298751417d850be3e78e1cbb35864438066e6eeae1fe257c706abeaebcfb9442917d2b08a27f4098a2832026de27665321be6f312d6cfdff8f3bc84c4d1024f892140095b82002883df50823106c711bc41b403dc1dc63d4a03d3c5610ae246d64ea22d9817c5d5c47c96ab384935c46a74b20ae719d26149c2c95708d3926a7f3ed9d0890f48421f76b50e0b5723ac5b2e3d8c1d31adc8c06664ffbd9d0be3ccddc7190c3bf2b49b59eccbdd2bbbfbf3dc8e4a77f62374afb6c95595460666ee05672a3ece8c7d9fb00c5934f526867bfafe571e6214e96d04a67dcd2586d5e273f939c3ab5dece7add4f650a083ff803be0ad20421e3ccc008360bf370b381022f762f2967247e7cf4008d9a22c6ac35ed069c7fd9667d99153131141c1ae1a0d34a14860c0fa9c75782a25c1db65aa1390ee03c4568de0f591125c122e474aced779a6d3afee9e59497252283dbce9b58713761847aea392d69428a2bb0f6f673dd16cb7472e5afec03a713a9f9a1e0d05220a826b03221a23c6e18baef890bb068f72afdcddb9313ff0149dc431fc71af6dcb9ecfe21180403a96a52fb9fe1d2e35fdf34b7c3b0dc84de4aeb39bcadb80d62379ef485d1ed39ab5ef6120e3e86d5fa7479ab4e711eabb06ccb2380adf1224aaf828c600732ca05bfe4a62b3c094ba0ec063d6657b62177dce7a512a1eac38d800bbf0939811b399ebeb70f19bc2ed0e1ffef0e4ad463c51afefb83e6d8f2673949ab066b5e91c210b55ba230bf45c6ba5cfb024693a75273795aac5893147d836b813a0a34b9e7f23f462c3094bdc52a7b7783296ff1946240a5f22468e6e2386de3cbefc1620960ea450455ed99eebc6c68627855e89ec9cf63b765655dbe15f0f0e24f6d9abfa3a8eb8a1f0bd9f49fe9be53b642c81b957f0d11477be2966328fc5c165b604c126ed4d633c7afaefcbc743b1621281316dc6ec0ba220fa53c43085800ec32958c6e589da7cf918edf94fb3b4f3ba1bd3fba3cb9595f3446979b8e477a068f38e99372166e4bf9b33f33a383cb58128078faaa580f14ca1fbac99243cca6b2fb479a2472ef127b864dab5574a8053eedf45e7df4d7fe64ae331949ea7ae02eb825816ddcd9587cdf500123a70630f2e015791c1a5216302be708f2cc4cad6f79aae0d882ecec2f4e326239fb17599ac3ef313849ea3a66c1e70e48388b607ae50415c1a8219b9710495ceb60bff04efc2b27967bf25c8a19c723ea0177a987fdbbe3b0048bb079e4cb259ab83ad20ff7dd5a028dc42dec153908c7ceacc7688a3d79f3bafebf154fd16211e2f1ae8083d0ed3c702ea5fe103377a6ae698063b33fc7d365339739da19ae28b8440493463f8510386ef9ef3ab48fc71cde8ba9b9782f44476ac2575f446576215b7a08d8152db239306427b39f3d54bc88cf017dd374998c2af274a953718c43205184fce68057d12afc74b22441312762e1b19ce4076cbc7badf8d828de68bb0925909a8348021acdfca22b62dd612adad136b2c5bba459239eb61d31256e4a826e244c6150f3796caf79b05af26c737c32923881a7405106190a48c0d61c930cef2595e30098a8801402d059f56356be51b25fb186cac63a37224475c32631941ffcfa77159009989f2dfd4f4c5fa4ecf3b902372386322181f31791b18bf13d9e5bcacae36c1822e5a14dbcb42d01a353b7e16d16f2925dc894bb7d9bda1f03521f2d82a37f38ca91564ecb0a907825dfc337ee2b10304448ee8f2373e27d5fa7a63e3986408cc24c59bb8741c18d7cbbc61a46e903e601df13237014796bddb1e31759413454ae3998b0ec5cc98d3052e7116a3e1efea0bb8a53471f7d8162049ff15720c1c61caff48f73b626e3c1985e7a2df65e7065c7b0e15e06612d82ec52afac6f14b36eedbd70e6c4693bf035696ce685c2e28be736c75cb0671479bb208797ff9c184f6bc73d620ac197733ba84b1751dc7200fcf453d27c9c6a87b132c7d8cea01cdc6b630a4c688f73de0498a6db4f987cf5c8ee605f894877fd86b7a9346f6c716c8842da25dae91752b88360df8c8b8eb3baf5eaaaa814edf2f250e2080391e4eee7e25cdf689c52c98a4fda1033a80ae94475227466c3cb4a35d7a091f0b8d45d305d2898ea418f44c731e4b82c403e4bd89c2a1d9923b33bfd3e97088359328b00f0469b16c2e3eb406422df2ca668ece714b25f15140e91c49926967b778df790f63ee30e3c5b0c0cbe18209b682b88730e38f4ead8815dca7073a7e0308fd58d7b501fb3c2eafc846a252345fb3fa6e29711e27208898d75314fed3d57ecde00995b088ed7caf62a58048e04bb17c54843f01ccac5cabc04d52b93196caa6ea327563033a6763cbe63f7837d27c4ba9388952fbbb212e10350faf7cec9042c6e784853ccfcc4aa90bf385174c1728a77d103b1426df607784e676178340ca2b68a4edf0effd33ea4510269d2cacc1c112b571f06993171c585c7f0a13c40aa1642c56fd30bafbe04380ec31723d9565147efd924db7f2da092fbc724446323ec2659df4b9bc707f3dfabadfa15b6fb1fbc6ee27635c6350b6ee6c65e6571f94336e0bcf08d3aee55fb8851a6abbbd5e62019b1c58b9b02b34bf79e60272a78e12f9679b677553d24e5b75caac6316fe8b1eb64981e9f9bdf9cc4675899aa793e93846eac0038dc74869c8e0c3cf7a86954e17a860f39ce961baf254fcad8c7bad7b7a642ae87621b7e0321f28ad2711f85865c916129638f6d0f67973096b278036e5a98f6a3474b703780b9b154ec6236d5f8bae07580ca175738ed8d11dd52b4330d72d9e131afc365b83dea350897095dcb7c798784716c2ad009efa7377f1c78c0ae7978360a6c6016881e31089977a24eb74a093675ae6c7e30888f61992c6dc9c33b2d38b100718753b3f81d18d6d101f3388dba58d5e8ae3edf049edd7c9cd67ec8fe5185e57e1a6e684eb66f65aa4780bbd870c5f58c78097b09ec330eb804f255cf6333980323df9e7203140c4c2f9d6ab2537bbbed3ab6dd51325f2e4c01267c0ae000027bf00ec186918df0f29a83bb91fc759b1d17069933889fa737efb7e11c468caf3c4a8d7b534bd5f2cba27fc40b51d38e25e351815f5fec6fa43a1e7b5eadcdb4915563d6d7784a89e6e162218319789b5d75d7a68f5586bd3f63d085d7a0d8cfa55cf40553592142d0fed23d96e607db577f25e859d930ed3a9172f2b645e869f0a7f8cea93ac0144b3372c05b7c8704632fe08d4aa081e2ca6e4b7cf599f6aeffe03fa31206329cdeaf37b943a5861861eabc5f55aea867b6df01c777310c5a3fbb790bfb15ca359ba270b03ac4d64dd52056ae1365f834d57e532f7adda8d4b9a39ce3d15a3422e7dcdf728270f52f5f286842c25f296deb98ca6571a6322768e8506dd871efcd10c337ecb1154ee7c8d95680bac9c86eade227bda9e6f8fdecc3c2c16f19a9b858fd7b52e4cf91834d9c71b8f3347a6b6c8219d4012f368aebd0a983f04710d7d33d59be173e49911ce9ef0d4f160ccef792e29afdf89f142a6ab1cf4ef8a96738c5730a536ebc87f5f526cccc0d30d9e913ac599fb1640bfd4909f759785eb74acbf29b5645b2f8d087d88f80213e2f6ee32a1607a6ecbf851ce03479add657db854fc1fdbfb14de7ed6d508065bb66aa508918ebf269ecd19fd5f268edb805333259894be99e362a48aa20437a3242f5491ce8e7443036635e3e87b7acdc9b838cc95c66f08b1452e92c2b456a86a1ebaa180daa337067b6b2db605fdb36fa6fdfd1571fc97c1bd6a7c7540bb5ed8ba48f8c363d37fbcd013641a536292e72b62d9e002d6fdc8476f63fcbaea22861bc4b524bb5186795a72c3be4bb0741c79b09eccc277deb23c5a1adfbb650765dd9fab9649f1740c4822baa759fdd07fe687a4d73977393bd2c3003e558eda0e157f0a78f50e01df8d283707a18a2fffc7c68d8b8aa72408aee4fcb685645e802f16947514924fa434d335eaf07cbab2411d005ad2f80424a345dc2708aff6b15bbab0a2662d58f56a9dbf2c1a9a2a78c647c8d1ffef2cdc06bf6872fcb98daf296a5250fce33528ede2317545a038f7d76680977656e49936544eb8828388ea609cf09bef65c9f8af4918c3e327807655122645bb3304cd2517311310f0843ecda71a649892b24bbd64fb3c26ad5eb882d1440c6fa1484d1ed57e5550b2f5e04f1095d19ddd644952812d91026e2c50f3e9cbed5bbab47c7be0f6ffd44e5752c60656e5e725aa4540c150f866da51d862010e76b79edfe099ed9ab653e674cb5e19038f75a8f707f80eff173ff01a6f9dfd2438b5fe1646a95443b63af930e6b7e953cd9e8e1fd2b5b98d2bcb0671dbc404b275e8f93b6172d3d41aec51499a3b7f36b03a5cf946cb5e62d11693467a4db2eb55e951f5d854bd0a8beceda7c90a011d62dd163fdca0a75ede1a8295025be89407b55812c2316b6b298769833fe61a07e111e522dceb046786536ff8f6a2c5890067ea7aa867862e20da3eddeb1b5db3b4f4e1c1d1d722665791ec70e761e33faf23228614e04816ff63d9c18e0d24afd270a2a4be82f2bdf9c02e7cae191ba65c40969ea967e543e1f7bad84b0ba56aa68092c12fe799a70cfd97adfe40b32bd8d28ee757afcd3691a3c5b30c216ac4625a375baff40e07ee28f6dda02e2809066673614e776bfbba01627636345321df9a4c6760b97d028f76af05ba9756b626457d305c3cd0994890c26c4f6b7f9afc675d0583842d8b2e08bcc13021e05670376398cc19cb9cb86ff0915be9482bd053eb2182f08bb4bc061cdd6f8f978c981a011edec19d5dd4427902c428e05db8aa04fc579567565ba6321bd45cf664ead91609d622c72b60365a2144a15367ff3dc0dfd54626a238baf4b7a432e43fa3a421bdc8813fa553112f9b9a51b4443c82685b740721bd6c9facc198e49dcc1629653beb12c1bb408d5918ed3b09a785c21a8f4df280a9370978212d6d31fb25d9955fe63718bcb7fd71c66b956b17b46b94caa4ccaaf96d4f027e45ed65672413a2746a85725358911ed71cb0c40996e3cabcc3cf950d0e182db37a1000307d9a4eb8e351b06ce6ddce01cbb0fe3c9d4befb2811d8dc8f022e2aace5079f6529b474daf612ee3ef147d881f49356fcc193e7b80cb08e2cca87a602f591d80e1ce7a31dad73441ffa546f3955"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xf5}]}, 0x1030}, 0x1, 0x0, 0x0, 0x100000c0}, 0x40000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, 0x0, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) kernel console output (not intermixed with test programs): 402674][ T9884] __kasan_slab_alloc+0x69/0x90 [ 1049.440506][ T9884] __kmalloc_noprof+0x2b9/0x850 [ 1049.457613][ T9957] netlink: 354 bytes leftover after parsing attributes in process `syz.2.3427'. [ 1049.468885][ T9884] tomoyo_realpath_from_path+0xb6/0x690 [ 1049.507942][ T9884] tomoyo_path_perm+0x276/0x460 [ 1049.525753][ T9884] security_inode_getattr+0x116/0x280 [ 1049.556946][ T9884] vfs_fstat+0x4b/0xe0 [ 1049.582732][ T9884] __do_sys_newfstat+0x8b/0x110 [ 1049.643570][ T9884] do_syscall_64+0x106/0xf80 [ 1049.684371][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.715876][T10011] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1054.746666][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.753167][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.379285][T10169] WARNING! power/level is deprecated; use power/control instead [ 1055.506217][T10172] nfs: Unknown parameter ''u3EVuҀtȢqC!Yt`#$5 UQaM' Yu6K@ q [ 1060.189747][T10294] dump_stack_lvl+0x100/0x190 [ 1060.189777][T10294] should_fail_ex.cold+0x5/0xa [ 1060.189802][T10294] should_failslab+0xc2/0x120 [ 1060.189819][T10294] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1060.189837][T10294] ? create_filter_start.constprop.0+0x81/0x310 [ 1060.189863][T10294] ? rcu_is_watching+0x12/0xc0 [ 1060.189888][T10294] create_filter_start.constprop.0+0x81/0x310 [ 1060.189913][T10294] create_filter+0xb5/0x210 [ 1060.189936][T10294] ? __pfx_create_filter+0x10/0x10 [ 1060.189961][T10294] ? find_held_lock+0x2b/0x80 [ 1060.189977][T10294] apply_event_filter+0x220/0x500 [ 1060.190000][T10294] ? __pfx_apply_event_filter+0x10/0x10 [ 1060.190028][T10294] event_filter_write+0x16d/0x290 [ 1060.190046][T10294] vfs_write+0x2aa/0x1070 [ 1060.190069][T10294] ? __pfx_event_filter_write+0x10/0x10 [ 1060.190088][T10294] ? __pfx_vfs_write+0x10/0x10 [ 1060.190109][T10294] ? __fget_files+0x215/0x3d0 [ 1060.190135][T10294] ? __fget_files+0x21f/0x3d0 [ 1060.190162][T10294] ksys_write+0x12a/0x250 [ 1060.190184][T10294] ? __pfx_ksys_write+0x10/0x10 [ 1060.190211][T10294] do_syscall_64+0x106/0xf80 [ 1060.190228][T10294] ? clear_bhb_loop+0x40/0x90 [ 1060.190247][T10294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.190263][T10294] RIP: 0033:0x7f56a8b9c629 [ 1060.190277][T10294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.190292][T10294] RSP: 002b:00007f56a9a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1060.190307][T10294] RAX: ffffffffffffffda RBX: 00007f56a8e16090 RCX: 00007f56a8b9c629 [ 1060.190318][T10294] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1060.190327][T10294] RBP: 00007f56a8c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1060.190337][T10294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.190346][T10294] R13: 00007f56a8e16128 R14: 00007f56a8e16090 R15: 00007ffc63690858 [ 1060.190367][T10294] [ 1060.962869][T10316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3450'. [ 1061.078896][T10314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3450'. [ 1063.949766][T10428] nvme_fabrics: missing parameter 'transport=%s' [ 1064.030548][T10428] nvme_fabrics: missing parameter 'nqn=%s' [ 1065.603125][T10470] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input59 [ 1067.842642][T10607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3467'. [ 1070.539814][T10747] FAULT_INJECTION: forcing a failure. [ 1070.539814][T10747] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.644515][T10747] CPU: 0 UID: 0 PID: 10747 Comm: syz.3.3480 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1070.644546][T10747] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1070.644553][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1070.644563][T10747] Call Trace: [ 1070.644569][T10747] [ 1070.644576][T10747] dump_stack_lvl+0x100/0x190 [ 1070.644604][T10747] should_fail_ex.cold+0x5/0xa [ 1070.644622][T10747] should_failslab+0xc2/0x120 [ 1070.644639][T10747] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1070.644657][T10747] ? create_filter_start.constprop.0+0x81/0x310 [ 1070.644690][T10747] ? rcu_is_watching+0x12/0xc0 [ 1070.644717][T10747] create_filter_start.constprop.0+0x81/0x310 [ 1070.644743][T10747] create_filter+0xb5/0x210 [ 1070.644766][T10747] ? __pfx_create_filter+0x10/0x10 [ 1070.644790][T10747] ? find_held_lock+0x2b/0x80 [ 1070.644807][T10747] apply_event_filter+0x220/0x500 [ 1070.644830][T10747] ? __pfx_apply_event_filter+0x10/0x10 [ 1070.644858][T10747] event_filter_write+0x16d/0x290 [ 1070.644876][T10747] vfs_write+0x2aa/0x1070 [ 1070.644899][T10747] ? __pfx_event_filter_write+0x10/0x10 [ 1070.644918][T10747] ? __pfx_vfs_write+0x10/0x10 [ 1070.644939][T10747] ? __fget_files+0x215/0x3d0 [ 1070.644965][T10747] ? __fget_files+0x21f/0x3d0 [ 1070.644992][T10747] ksys_write+0x12a/0x250 [ 1070.645014][T10747] ? __pfx_ksys_write+0x10/0x10 [ 1070.645041][T10747] do_syscall_64+0x106/0xf80 [ 1070.645058][T10747] ? clear_bhb_loop+0x40/0x90 [ 1070.645076][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.645092][T10747] RIP: 0033:0x7feab799c629 [ 1070.645107][T10747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.645122][T10747] RSP: 002b:00007feab5bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1070.645137][T10747] RAX: ffffffffffffffda RBX: 00007feab7c16180 RCX: 00007feab799c629 [ 1070.645148][T10747] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1070.645157][T10747] RBP: 00007feab7a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1070.645166][T10747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.645174][T10747] R13: 00007feab7c16218 R14: 00007feab7c16180 R15: 00007ffe4ba6a078 [ 1070.645196][T10747] [ 1073.336483][T10869] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1074.002113][T10906] nfs: Unknown parameter ''u3EVuҀtȢqC!Yt`#$5 UQaM' Yu6K@ q [ 1076.668815][T10994] dump_stack_lvl+0x100/0x190 [ 1076.668844][T10994] should_fail_ex.cold+0x5/0xa [ 1076.668863][T10994] ? process_preds+0x4c2/0x1d90 [ 1076.668885][T10994] should_failslab+0xc2/0x120 [ 1076.668900][T10994] __kmalloc_noprof+0xe0/0x850 [ 1076.668926][T10994] process_preds+0x4c2/0x1d90 [ 1076.668952][T10994] ? create_filter_start.constprop.0+0x134/0x310 [ 1076.668977][T10994] create_filter+0x140/0x210 [ 1076.669000][T10994] ? __pfx_create_filter+0x10/0x10 [ 1076.669023][T10994] ? find_held_lock+0x2b/0x80 [ 1076.669040][T10994] apply_event_filter+0x220/0x500 [ 1076.669070][T10994] ? __pfx_apply_event_filter+0x10/0x10 [ 1076.669099][T10994] event_filter_write+0x16d/0x290 [ 1076.669119][T10994] vfs_write+0x2aa/0x1070 [ 1076.669142][T10994] ? __pfx_event_filter_write+0x10/0x10 [ 1076.669162][T10994] ? __pfx_vfs_write+0x10/0x10 [ 1076.669184][T10994] ? __fget_files+0x215/0x3d0 [ 1076.669210][T10994] ? __fget_files+0x21f/0x3d0 [ 1076.669237][T10994] ksys_write+0x12a/0x250 [ 1076.669259][T10994] ? __pfx_ksys_write+0x10/0x10 [ 1076.669286][T10994] do_syscall_64+0x106/0xf80 [ 1076.669302][T10994] ? clear_bhb_loop+0x40/0x90 [ 1076.669321][T10994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.669337][T10994] RIP: 0033:0x7f56a8b9c629 [ 1076.669351][T10994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.669366][T10994] RSP: 002b:00007f56a9a70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1076.669381][T10994] RAX: ffffffffffffffda RBX: 00007f56a8e15fa0 RCX: 00007f56a8b9c629 [ 1076.669391][T10994] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1076.669400][T10994] RBP: 00007f56a8c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1076.669409][T10994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1076.669419][T10994] R13: 00007f56a8e16038 R14: 00007f56a8e15fa0 R15: 00007ffc63690858 [ 1076.669440][T10994] [ 1077.548600][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3509'. [ 1080.910739][T11132] aoe: could not set interface list: too many interfaces [ 1081.049824][T11157] aoe: could not set interface list: too many interfaces [ 1081.611410][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3524'. [ 1082.116260][T11196] FAULT_INJECTION: forcing a failure. [ 1082.116260][T11196] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.380620][T11201] cgroup: fork rejected by pids controller in /syz3 [ 1082.847146][T11196] CPU: 0 UID: 0 PID: 11196 Comm: syz.3.3525 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1082.847175][T11196] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1082.847182][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1082.847191][T11196] Call Trace: [ 1082.847196][T11196] [ 1082.847204][T11196] dump_stack_lvl+0x100/0x190 [ 1082.847232][T11196] should_fail_ex.cold+0x5/0xa [ 1082.847250][T11196] ? tomoyo_encode2+0xfb/0x3c0 [ 1082.847270][T11196] should_failslab+0xc2/0x120 [ 1082.847285][T11196] __kmalloc_noprof+0xe0/0x850 [ 1082.847306][T11196] ? rcu_is_watching+0x12/0xc0 [ 1082.847332][T11196] tomoyo_encode2+0xfb/0x3c0 [ 1082.847350][T11196] tomoyo_encode+0x29/0x50 [ 1082.847364][T11196] tomoyo_realpath_from_path+0x18c/0x690 [ 1082.847385][T11196] tomoyo_check_open_permission+0x2af/0x3c0 [ 1082.847408][T11196] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1082.847455][T11196] ? lock_acquire+0x1cf/0x380 [ 1082.847474][T11196] ? find_held_lock+0x2b/0x80 [ 1082.847493][T11196] tomoyo_file_open+0x6b/0x90 [ 1082.847512][T11196] security_file_open+0xb5/0x1e0 [ 1082.847527][T11196] do_dentry_open+0x5aa/0x1660 [ 1082.847557][T11196] vfs_open+0x82/0x3f0 [ 1082.847576][T11196] path_openat+0x208c/0x31a0 [ 1082.847597][T11196] ? __pfx_path_openat+0x10/0x10 [ 1082.847618][T11196] do_file_open+0x20e/0x430 [ 1082.847634][T11196] ? __pfx_do_file_open+0x10/0x10 [ 1082.847658][T11196] ? __pfx_kfree_link+0x10/0x10 [ 1082.847687][T11196] ? alloc_fd+0x476/0x790 [ 1082.847712][T11196] ? do_getname+0x191/0x390 [ 1082.847732][T11196] do_sys_openat2+0x10d/0x1e0 [ 1082.847750][T11196] ? __pfx_do_sys_openat2+0x10/0x10 [ 1082.847775][T11196] __x64_sys_openat+0x12d/0x210 [ 1082.847793][T11196] ? __pfx___x64_sys_openat+0x10/0x10 [ 1082.847819][T11196] do_syscall_64+0x106/0xf80 [ 1082.847835][T11196] ? clear_bhb_loop+0x40/0x90 [ 1082.847855][T11196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.847871][T11196] RIP: 0033:0x7feab799c629 [ 1082.847885][T11196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.847900][T11196] RSP: 002b:00007feab5bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1082.847915][T11196] RAX: ffffffffffffffda RBX: 00007feab7c16090 RCX: 00007feab799c629 [ 1082.847925][T11196] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1082.847935][T11196] RBP: 00007feab7a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1082.847944][T11196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.847952][T11196] R13: 00007feab7c16128 R14: 00007feab7c16090 R15: 00007ffe4ba6a078 [ 1082.847972][T11196] [ 1083.393633][T11196] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1084.690970][T11290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.730199][T22671] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.748584][T11320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3532'. [ 1089.050289][ T29] audit: type=1800 audit(4294971565.414:29): pid=11335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3537" name="lu_gp_id" dev="configfs" ino=439176 res=0 errno=0 [ 1092.435216][T11397] bond0: invalid ARP target specified [ 1096.715717][T11484] netlink: 'syz.4.3552': attribute type 2 has an invalid length. [ 1098.059705][T11513] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1098.132830][T11513] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1101.299383][T11578] FAULT_INJECTION: forcing a failure. [ 1101.299383][T11578] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.352913][T11578] CPU: 0 UID: 0 PID: 11578 Comm: syz.5.3562 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1101.352942][T11578] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1101.352948][T11578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1101.352957][T11578] Call Trace: [ 1101.352963][T11578] [ 1101.352969][T11578] dump_stack_lvl+0x100/0x190 [ 1101.352997][T11578] should_fail_ex.cold+0x5/0xa [ 1101.353015][T11578] should_failslab+0xc2/0x120 [ 1101.353031][T11578] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1101.353052][T11578] ? do_getname+0x35/0x390 [ 1101.353073][T11578] do_getname+0x35/0x390 [ 1101.353092][T11578] user_path_at+0x26/0x60 [ 1101.353114][T11578] __x64_sys_mount+0x1fb/0x310 [ 1101.353131][T11578] ? __pfx___x64_sys_mount+0x10/0x10 [ 1101.353152][T11578] do_syscall_64+0x106/0xf80 [ 1101.353168][T11578] ? clear_bhb_loop+0x40/0x90 [ 1101.353187][T11578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.353203][T11578] RIP: 0033:0x7f0679b9c629 [ 1101.353216][T11578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.353231][T11578] RSP: 002b:00007f067a9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1101.353246][T11578] RAX: ffffffffffffffda RBX: 00007f0679e15fa0 RCX: 00007f0679b9c629 [ 1101.353256][T11578] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000000000000000 [ 1101.353266][T11578] RBP: 00007f067a9f6090 R08: 0000200000000340 R09: 0000000000000000 [ 1101.353275][T11578] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1101.353284][T11578] R13: 00007f0679e16038 R14: 00007f0679e15fa0 R15: 00007ffc93c20a08 [ 1101.353303][T11578] [ 1102.497783][T11586] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3564'. [ 1102.560406][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3564'. [ 1105.539368][T11229] syz.3.3525 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1106.823657][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.3.3525 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1106.823686][T11229] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1106.823692][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1106.823711][T11229] Call Trace: [ 1106.823717][T11229] [ 1106.823724][T11229] dump_stack_lvl+0x100/0x190 [ 1106.823751][T11229] dump_header+0xfb/0x606 [ 1106.823768][T11229] oom_kill_process.cold+0xd/0x330 [ 1106.823786][T11229] out_of_memory+0x340/0x14f0 [ 1106.823812][T11229] ? __pfx_out_of_memory+0x10/0x10 [ 1106.823838][T11229] mem_cgroup_out_of_memory+0xc6/0x130 [ 1106.823859][T11229] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1106.823877][T11229] ? find_held_lock+0x2b/0x80 [ 1106.823896][T11229] ? do_raw_spin_unlock+0x145/0x1e0 [ 1106.823918][T11229] ? _raw_spin_unlock+0x28/0x50 [ 1106.823944][T11229] try_charge_memcg+0x652/0xc90 [ 1106.824008][T11229] ? __pfx_try_charge_memcg+0x10/0x10 [ 1106.824023][T11229] ? find_held_lock+0x2b/0x80 [ 1106.824036][T11229] ? rcu_read_unlock+0x17/0x60 [ 1106.824054][T11229] ? rcu_read_unlock+0x17/0x60 [ 1106.824075][T11229] charge_memcg+0xa6/0x280 [ 1106.824090][T11229] __mem_cgroup_charge+0x2b/0x1e0 [ 1106.824108][T11229] shmem_alloc_and_add_folio+0x451/0xd40 [ 1106.824135][T11229] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1106.824158][T11229] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1106.824184][T11229] shmem_get_folio_gfp+0x6ab/0x1900 [ 1106.824209][T11229] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1106.824232][T11229] ? timestamp_truncate+0x22e/0x2f0 [ 1106.824250][T11229] shmem_write_begin+0x1a4/0x420 [ 1106.824273][T11229] ? __pfx_shmem_write_begin+0x10/0x10 [ 1106.824293][T11229] ? rcu_is_watching+0x12/0xc0 [ 1106.824317][T11229] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1106.824337][T11229] generic_perform_write+0x292/0xa40 [ 1106.824364][T11229] ? __pfx_generic_perform_write+0x10/0x10 [ 1106.824383][T11229] ? __mark_inode_dirty+0x55c/0x1790 [ 1106.824404][T11229] ? mnt_put_write_access_file+0x4e/0x100 [ 1106.824428][T11229] ? file_update_time_flags+0x373/0x500 [ 1106.824447][T11229] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1106.824462][T11229] shmem_file_write_iter+0x10e/0x140 [ 1106.824478][T11229] __kernel_write_iter+0x2ac/0x920 [ 1106.824502][T11229] ? __pfx___kernel_write_iter+0x10/0x10 [ 1106.824524][T11229] ? __up_read+0x2c5/0x700 [ 1106.824547][T11229] ? dump_user_range+0x73b/0xb50 [ 1106.824567][T11229] dump_user_range+0x3f9/0xb50 [ 1106.824587][T11229] ? __pfx_dump_user_range+0x10/0x10 [ 1106.824609][T11229] ? __pfx_writenote+0x10/0x10 [ 1106.824630][T11229] elf_core_dump+0x2d5f/0x3d10 [ 1106.824658][T11229] ? __pfx_elf_core_dump+0x10/0x10 [ 1106.824681][T11229] ? find_held_lock+0x2b/0x80 [ 1106.824695][T11229] ? 0xffffffffff600000 [ 1106.824713][T11229] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1106.824728][T11229] ? lockdep_hardirqs_on+0x78/0x100 [ 1106.824773][T11229] ? vfs_coredump+0x27bc/0x5570 [ 1106.824786][T11229] vfs_coredump+0x27bc/0x5570 [ 1106.824809][T11229] ? __pfx_vfs_coredump+0x10/0x10 [ 1106.824826][T11229] ? __lock_acquire+0x4a5/0x2630 [ 1106.824852][T11229] ? lock_acquire+0x1cf/0x380 [ 1106.824878][T11229] ? is_bpf_text_address+0x8a/0x1a0 [ 1106.824902][T11229] ? bpf_ksym_find+0x124/0x1c0 [ 1106.824924][T11229] ? __kernel_text_address+0xd/0x30 [ 1106.824945][T11229] ? unwind_get_return_address+0x59/0xa0 [ 1106.824966][T11229] ? arch_stack_walk+0xa6/0xf0 [ 1106.824988][T11229] ? __sigqueue_free+0xbe/0x2a0 [ 1106.825007][T11229] ? stack_trace_save+0x8e/0xc0 [ 1106.825022][T11229] ? __pfx_stack_trace_save+0x10/0x10 [ 1106.825036][T11229] ? kasan_save_stack+0x3f/0x50 [ 1106.825058][T11229] ? stack_depot_save_flags+0x27/0x9d0 [ 1106.825083][T11229] ? __lock_acquire+0x4a5/0x2630 [ 1106.825134][T11229] ? proc_coredump_connector+0x2d3/0x4f0 [ 1106.825151][T11229] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1106.825173][T11229] ? rcu_is_watching+0x12/0xc0 [ 1106.825197][T11229] get_signal+0x1f2a/0x21e0 [ 1106.825221][T11229] ? __pfx_get_signal+0x10/0x10 [ 1106.825235][T11229] ? find_held_lock+0x2b/0x80 [ 1106.825248][T11229] ? bad_area_access_error+0xab/0x1d0 [ 1106.825271][T11229] ? fixup_vdso_exception+0x2d1/0x370 [ 1106.825293][T11229] arch_do_signal_or_restart+0x91/0x770 [ 1106.825313][T11229] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1106.825337][T11229] ? do_user_addr_fault+0x8d6/0x12f0 [ 1106.825365][T11229] irqentry_exit+0x1f8/0x670 [ 1106.825383][T11229] asm_exc_page_fault+0x26/0x30 [ 1106.825398][T11229] RIP: 0033:0x11 [ 1106.825409][T11229] Code: Unable to access opcode bytes at 0xffffffffffffffe7. [ 1106.825417][T11229] RSP: 002b:000000000000000a EFLAGS: 00010202 [ 1106.825429][T11229] RAX: 0000000000000000 RBX: 00007feab7c1ea80 RCX: 00007feab799c629 [ 1106.825439][T11229] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b48 [ 1106.825448][T11229] RBP: 00007feab7a32b39 R08: 0000000000000005 R09: 0000000000000000 [ 1106.825458][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.825466][T11229] R13: 00007feab7c16218 R14: 00007feab7c16180 R15: 00007ffe4ba6a078 [ 1106.825487][T11229] [ 1107.351827][T11229] memory: usage 307200kB, limit 307200kB, failcnt 21793 [ 1107.359002][T11229] memory+swap: usage 432048kB, limit 9007199254740988kB, failcnt 0 [ 1107.367079][T11229] kmem: usage 5016kB, limit 9007199254740988kB, failcnt 0 [ 1107.374207][T11229] Memory cgroup stats for /syz3: [ 1107.374426][T11229] cache 304902144 [ 1107.383047][T11229] rss 4390912 [ 1107.386320][T11229] rss_huge 4194304 [ 1107.390021][T11229] shmem 304898048 [ 1107.393725][T11229] mapped_file 127455232 [ 1107.397858][T11229] dirty 0 [ 1107.400774][T11229] writeback 0 [ 1107.404069][T11229] workingset_refault_anon 13421 [ 1107.409193][T11229] workingset_refault_file 3176 [ 1107.413997][T11229] swap 127844352 [ 1107.417612][T11229] swapcached 182878208 [ 1107.421712][T11229] pgpgin 1229429 [ 1107.425237][T11229] pgpgout 1233527 [ 1107.428846][T11229] pgfault 521058 [ 1107.432439][T11229] pgmajfault 1703 [ 1107.436065][T11229] inactive_anon 258932736 [ 1107.440387][T11229] active_anon 50499584 [ 1107.444497][T11229] inactive_file 4096 [ 1107.448386][T11229] active_file 0 [ 1107.451937][T11229] unevictable 0 [ 1107.455676][T11229] hierarchical_memory_limit 314572800 [ 1107.461187][T11229] hierarchical_memsw_limit 9223372036854771712 [ 1107.467385][T11229] total_cache 304902144 [ 1107.471522][T11229] total_rss 4390912 [ 1107.475822][T11229] total_rss_huge 4194304 [ 1107.480046][T11229] total_shmem 304898048 [ 1107.484215][T11229] total_mapped_file 127455232 [ 1107.488891][T11229] total_dirty 0 [ 1107.492367][T11229] total_writeback 0 [ 1107.496151][T11229] total_workingset_refault_anon 13421 [ 1107.501497][T11229] total_workingset_refault_file 3176 [ 1107.506778][T11229] total_swap 127844352 [ 1107.511098][T11229] total_swapcached 182878208 [ 1107.515715][T11229] total_pgpgin 1229429 [ 1107.519798][T11229] total_pgpgout 1233527 [ 1107.524068][T11229] total_pgfault 521058 [ 1107.528135][T11229] total_pgmajfault 1703 [ 1107.532381][T11229] total_inactive_anon 258932736 [ 1107.537271][T11229] total_active_anon 50499584 [ 1107.542002][T11229] total_inactive_file 4096 [ 1107.546488][T11229] total_active_file 0 [ 1107.550548][T11229] total_unevictable 0 [ 1107.554565][T11229] anon_cost 14602 [ 1107.558363][T11229] file_cost 370 [ 1107.561867][T11229] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3525,pid=11230,uid=0 [ 1107.578613][T11229] Memory cgroup out of memory: Killed process 11230 (syz.3.3525) total-vm:164844kB, anon-rss:5432kB, file-rss:21572kB, shmem-rss:62804kB, UID:0 pgtables:248kB oom_score_adj:1000 [ 1108.325408][T11626] FAULT_INJECTION: forcing a failure. [ 1108.325408][T11626] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1108.652645][T11626] CPU: 0 UID: 0 PID: 11626 Comm: syz.3.3569 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1108.652674][T11626] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1108.652680][T11626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1108.652689][T11626] Call Trace: [ 1108.652695][T11626] [ 1108.652702][T11626] dump_stack_lvl+0x100/0x190 [ 1108.652730][T11626] should_fail_ex.cold+0x5/0xa [ 1108.652756][T11626] get_futex_key+0x1d2/0x1620 [ 1108.652777][T11626] ? __pfx_get_futex_key+0x10/0x10 [ 1108.652796][T11626] ? update_se+0x94/0x760 [ 1108.652818][T11626] futex_wait_setup+0x81/0x500 [ 1108.652845][T11626] __futex_wait+0x19f/0x300 [ 1108.652868][T11626] ? __pfx___futex_wait+0x10/0x10 [ 1108.652888][T11626] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1108.652904][T11626] ? lockdep_hardirqs_on+0x78/0x100 [ 1108.652923][T11626] ? __pfx_futex_wake_mark+0x10/0x10 [ 1108.652948][T11626] ? find_held_lock+0x2b/0x80 [ 1108.652962][T11626] ? futex_wake+0x456/0x530 [ 1108.652987][T11626] futex_wait+0xed/0x380 [ 1108.653009][T11626] ? __pfx_futex_wait+0x10/0x10 [ 1108.653034][T11626] ? __lock_acquire+0x4a5/0x2630 [ 1108.653054][T11626] ? file_init_path+0x48e/0x670 [ 1108.653072][T11626] do_futex+0x1ef/0x350 [ 1108.653091][T11626] ? __pfx_do_futex+0x10/0x10 [ 1108.653109][T11626] ? lock_acquire+0x1cf/0x380 [ 1108.653127][T11626] ? find_held_lock+0x2b/0x80 [ 1108.653140][T11626] ? fd_install+0x223/0x580 [ 1108.653164][T11626] __x64_sys_futex+0x34f/0x4d0 [ 1108.653184][T11626] ? fd_install+0x24f/0x580 [ 1108.653205][T11626] ? __pfx___x64_sys_futex+0x10/0x10 [ 1108.653231][T11626] do_syscall_64+0x106/0xf80 [ 1108.653248][T11626] ? clear_bhb_loop+0x40/0x90 [ 1108.653266][T11626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.653282][T11626] RIP: 0033:0x7feab799c629 [ 1108.653296][T11626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.653311][T11626] RSP: 002b:00007feab5bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1108.653326][T11626] RAX: ffffffffffffffda RBX: 00007feab7c16098 RCX: 00007feab799c629 [ 1108.653335][T11626] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feab7c16098 [ 1108.653344][T11626] RBP: 00007feab7c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.653353][T11626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.653362][T11626] R13: 00007feab7c16128 R14: 00007ffe4ba69f90 R15: 00007ffe4ba6a078 [ 1108.653381][T11626] [ 1109.697218][T11662] FAULT_INJECTION: forcing a failure. [ 1109.697218][T11662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.808903][T11662] CPU: 0 UID: 0 PID: 11662 Comm: syz.2.3571 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1109.808931][T11662] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1109.808938][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1109.808947][T11662] Call Trace: [ 1109.808953][T11662] [ 1109.808960][T11662] dump_stack_lvl+0x100/0x190 [ 1109.808989][T11662] should_fail_ex.cold+0x5/0xa [ 1109.809007][T11662] strncpy_from_user+0x3b/0x2d0 [ 1109.809032][T11662] do_getname+0x78/0x390 [ 1109.809053][T11662] user_path_at+0x26/0x60 [ 1109.809075][T11662] __x64_sys_mount+0x1fb/0x310 [ 1109.809093][T11662] ? __pfx___x64_sys_mount+0x10/0x10 [ 1109.809115][T11662] do_syscall_64+0x106/0xf80 [ 1109.809131][T11662] ? clear_bhb_loop+0x40/0x90 [ 1109.809150][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.809166][T11662] RIP: 0033:0x7feaeeb9c629 [ 1109.809179][T11662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.809194][T11662] RSP: 002b:00007feaefa46028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1109.809209][T11662] RAX: ffffffffffffffda RBX: 00007feaeee15fa0 RCX: 00007feaeeb9c629 [ 1109.809219][T11662] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000000000000000 [ 1109.809228][T11662] RBP: 00007feaefa46090 R08: 0000200000000340 R09: 0000000000000000 [ 1109.809237][T11662] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1109.809246][T11662] R13: 00007feaeee16038 R14: 00007feaeee15fa0 R15: 00007ffe926183c8 [ 1109.809265][T11662] [ 1111.295872][T11709] [U] [ 1111.298685][T11709] [U] [ 1111.301374][T11709] [U] [ 1111.304047][T11709] [U] [ 1111.380393][T11709] [U] [ 1111.383106][T11709] [U] [ 1111.385777][T11709] [U] [ 1111.388446][T11709] [U] [ 1111.516913][T11709] [U] [ 1111.519627][T11709] [U] [ 1111.522301][T11709] [U] [ 1111.524970][T11709] [U] [ 1111.612275][T11709] [U] [ 1111.614988][T11709] [U] [ 1111.617704][T11709] [U] [ 1111.620383][T11709] [U] [ 1111.629073][T11736] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 1111.712815][T11709] [U] [ 1112.869610][T11786] nfs: Unknown parameter ''u3EVuҀtȢqC!Yt`#$5 UQaM' Yu6K@ q [ 1120.831871][T12081] dump_stack_lvl+0x100/0x190 [ 1120.831900][T12081] should_fail_ex.cold+0x5/0xa [ 1120.831920][T12081] should_failslab+0xc2/0x120 [ 1120.831936][T12081] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1120.831960][T12081] ? vidtv_psi_short_event_desc_init+0x429/0x5f0 [ 1120.831990][T12081] kstrdup+0x51/0xe0 [ 1120.832013][T12081] vidtv_psi_short_event_desc_init+0x429/0x5f0 [ 1120.832041][T12081] vidtv_psi_desc_clone+0x33f/0x5d0 [ 1120.832065][T12081] vidtv_channel_si_init+0x764/0x18d0 [ 1120.832089][T12081] vidtv_mux_init+0x526/0xbf0 [ 1120.832109][T12081] vidtv_start_feed+0x33e/0x4c0 [ 1120.832130][T12081] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1120.832152][T12081] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1120.832178][T12081] ? mark_held_locks+0x40/0x70 [ 1120.832200][T12081] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1120.832220][T12081] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1120.832246][T12081] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1120.832269][T12081] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1120.832292][T12081] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 1120.832315][T12081] dvb_demux_do_ioctl+0xe64/0x1200 [ 1120.832342][T12081] dvb_usercopy+0x167/0x340 [ 1120.832360][T12081] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1120.832383][T12081] ? __pfx_dvb_usercopy+0x10/0x10 [ 1120.832409][T12081] ? __fget_files+0x21f/0x3d0 [ 1120.832435][T12081] dvb_demux_ioctl+0x29/0x40 [ 1120.832454][T12081] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1120.832473][T12081] __x64_sys_ioctl+0x18e/0x210 [ 1120.832502][T12081] do_syscall_64+0x106/0xf80 [ 1120.832519][T12081] ? clear_bhb_loop+0x40/0x90 [ 1120.832538][T12081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.832556][T12081] RIP: 0033:0x7feab799c629 [ 1120.832570][T12081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.832586][T12081] RSP: 002b:00007feab877e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1120.832602][T12081] RAX: ffffffffffffffda RBX: 00007feab7c15fa0 RCX: 00007feab799c629 [ 1120.832612][T12081] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 1120.832621][T12081] RBP: 00007feab7a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1120.832631][T12081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.832640][T12081] R13: 00007feab7c16038 R14: 00007feab7c15fa0 R15: 00007ffe4ba6a078 [ 1120.832661][T12081] [ 1122.153006][T12147] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3615'. [ 1122.265239][T12135] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3615'. [ 1122.820840][T12174] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input66 [ 1123.916026][T12219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3626'. [ 1124.009688][T12216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3626'. [ 1124.298891][T12234] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3630'. [ 1124.326941][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3629'. [ 1124.362495][T12236] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3631'. [ 1125.503302][T12260] FAULT_INJECTION: forcing a failure. [ 1125.503302][T12260] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1125.601060][T12260] CPU: 0 UID: 0 PID: 12260 Comm: syz.5.3637 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1125.601089][T12260] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1125.601096][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1125.601106][T12260] Call Trace: [ 1125.601112][T12260] [ 1125.601118][T12260] dump_stack_lvl+0x100/0x190 [ 1125.601146][T12260] should_fail_ex.cold+0x5/0xa [ 1125.601164][T12260] get_futex_key+0x1d2/0x1620 [ 1125.601187][T12260] ? __pfx_get_futex_key+0x10/0x10 [ 1125.601206][T12260] ? _parse_integer_limit+0x17f/0x1d0 [ 1125.601229][T12260] futex_wait_setup+0x81/0x500 [ 1125.601256][T12260] __futex_wait+0x19f/0x300 [ 1125.601279][T12260] ? __pfx___futex_wait+0x10/0x10 [ 1125.601304][T12260] ? __pfx_futex_wake_mark+0x10/0x10 [ 1125.601328][T12260] ? futex_hash+0x2c5/0x380 [ 1125.601350][T12260] futex_wait+0xed/0x380 [ 1125.601372][T12260] ? __pfx_futex_wait+0x10/0x10 [ 1125.601398][T12260] ? ksys_write+0x190/0x250 [ 1125.601418][T12260] ? ksys_write+0x190/0x250 [ 1125.601448][T12260] do_futex+0x1ef/0x350 [ 1125.601466][T12260] ? __pfx_do_futex+0x10/0x10 [ 1125.601490][T12260] __x64_sys_futex+0x34f/0x4d0 [ 1125.601510][T12260] ? fput+0x79/0x100 [ 1125.601525][T12260] ? __pfx___x64_sys_futex+0x10/0x10 [ 1125.601543][T12260] ? ksys_write+0x1ac/0x250 [ 1125.601564][T12260] ? __pfx_ksys_write+0x10/0x10 [ 1125.601590][T12260] do_syscall_64+0x106/0xf80 [ 1125.601607][T12260] ? clear_bhb_loop+0x40/0x90 [ 1125.601625][T12260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.601641][T12260] RIP: 0033:0x7f0679b9c629 [ 1125.601654][T12260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.601669][T12260] RSP: 002b:00007f067a9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1125.601684][T12260] RAX: ffffffffffffffda RBX: 00007f0679e15fa8 RCX: 00007f0679b9c629 [ 1125.601694][T12260] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0679e15fa8 [ 1125.601703][T12260] RBP: 00007f0679e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.601712][T12260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.601721][T12260] R13: 00007f0679e16038 R14: 00007ffc93c20920 R15: 00007ffc93c20a08 [ 1125.601741][T12260] [ 1126.551357][T12300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3639'. [ 1126.727141][T12290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3639'. [ 1127.534512][T12316] netlink: 350 bytes leftover after parsing attributes in process `syz.5.3643'. [ 1128.033480][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3645'. [ 1128.105032][T12329] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3645'. [ 1129.383307][T12355] FAULT_INJECTION: forcing a failure. [ 1129.383307][T12355] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.471666][T12355] CPU: 0 UID: 0 PID: 12355 Comm: syz.2.3651 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1129.471694][T12355] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1129.471700][T12355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1129.471709][T12355] Call Trace: [ 1129.471715][T12355] [ 1129.471721][T12355] dump_stack_lvl+0x100/0x190 [ 1129.471748][T12355] should_fail_ex.cold+0x5/0xa [ 1129.471767][T12355] should_failslab+0xc2/0x120 [ 1129.471782][T12355] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1129.471803][T12355] ? taskstats_exit+0x650/0xbd0 [ 1129.471829][T12355] taskstats_exit+0x650/0xbd0 [ 1129.471852][T12355] ? __pfx_acct_update_integrals+0x10/0x10 [ 1129.471882][T12355] ? __pfx_taskstats_exit+0x10/0x10 [ 1129.471906][T12355] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1129.471931][T12355] ? exit_signals+0x395/0xaf0 [ 1129.471948][T12355] do_exit+0x5ca/0x2aa0 [ 1129.471970][T12355] ? __pfx_do_exit+0x10/0x10 [ 1129.471993][T12355] ? do_raw_spin_lock+0x128/0x260 [ 1129.472014][T12355] ? find_held_lock+0x2b/0x80 [ 1129.472028][T12355] ? get_signal+0x7e0/0x21e0 [ 1129.472047][T12355] do_group_exit+0xd5/0x2a0 [ 1129.472069][T12355] get_signal+0x1ec7/0x21e0 [ 1129.472088][T12355] ? ksys_write+0x190/0x250 [ 1129.472111][T12355] ? __pfx_get_signal+0x10/0x10 [ 1129.472128][T12355] ? do_futex+0x192/0x350 [ 1129.472149][T12355] arch_do_signal_or_restart+0x91/0x770 [ 1129.472168][T12355] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1129.472192][T12355] ? __pfx___x64_sys_futex+0x10/0x10 [ 1129.472210][T12355] ? ksys_write+0x1ac/0x250 [ 1129.472235][T12355] exit_to_user_mode_loop+0x86/0x4a0 [ 1129.472256][T12355] do_syscall_64+0x668/0xf80 [ 1129.472272][T12355] ? clear_bhb_loop+0x40/0x90 [ 1129.472291][T12355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.472306][T12355] RIP: 0033:0x7feaeeb9c629 [ 1129.472320][T12355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.472335][T12355] RSP: 002b:00007feaefa460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1129.472350][T12355] RAX: fffffffffffffe00 RBX: 00007feaeee15fa8 RCX: 00007feaeeb9c629 [ 1129.472360][T12355] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feaeee15fa8 [ 1129.472370][T12355] RBP: 00007feaeee15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1129.472379][T12355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.472388][T12355] R13: 00007feaeee16038 R14: 00007ffe926182e0 R15: 00007ffe926183c8 [ 1129.472407][T12355] [ 1130.416981][T12366] FAULT_INJECTION: forcing a failure. [ 1130.416981][T12366] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.479565][T12366] CPU: 0 UID: 0 PID: 12366 Comm: syz.4.3653 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1130.479594][T12366] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1130.479601][T12366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1130.479611][T12366] Call Trace: [ 1130.479617][T12366] [ 1130.479624][T12366] dump_stack_lvl+0x100/0x190 [ 1130.479653][T12366] should_fail_ex.cold+0x5/0xa [ 1130.479672][T12366] should_failslab+0xc2/0x120 [ 1130.479687][T12366] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1130.479708][T12366] ? ptlock_alloc+0x1f/0x70 [ 1130.479731][T12366] ptlock_alloc+0x1f/0x70 [ 1130.479750][T12366] pte_alloc_one+0x84/0x3e0 [ 1130.479768][T12366] __pte_alloc+0x6d/0x3f0 [ 1130.479782][T12366] ? __pfx___pte_alloc+0x10/0x10 [ 1130.479796][T12366] ? _raw_spin_unlock+0x28/0x50 [ 1130.479820][T12366] ? __pmd_alloc+0x6aa/0x9c0 [ 1130.479837][T12366] walk_pgd_range+0xb83/0x1eb0 [ 1130.479861][T12366] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1130.479877][T12366] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 1130.479894][T12366] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1130.479912][T12366] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1130.479928][T12366] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1130.479944][T12366] ? __pfx_walk_pgd_range+0x10/0x10 [ 1130.479970][T12366] __walk_page_range+0x163/0x820 [ 1130.479994][T12366] ? find_vma+0xbf/0x140 [ 1130.480015][T12366] ? __pfx_find_vma+0x10/0x10 [ 1130.480039][T12366] ? walk_page_test+0x78/0x180 [ 1130.480060][T12366] walk_page_range_mm_unsafe+0x563/0xa10 [ 1130.480085][T12366] ? __pfx_walk_page_range_mm_unsafe+0x10/0x10 [ 1130.480113][T12366] ? __anon_vma_prepare+0x2e2/0x5e0 [ 1130.480134][T12366] madvise_guard_install+0x2f9/0x7c0 [ 1130.480155][T12366] ? __pfx_madvise_guard_install+0x10/0x10 [ 1130.480173][T12366] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 1130.480187][T12366] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 1130.480202][T12366] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 1130.480220][T12366] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1130.480241][T12366] madvise_vma_behavior+0x11f1/0x3050 [ 1130.480261][T12366] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1130.480277][T12366] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 1130.480297][T12366] ? mas_prev+0x9b/0xf0 [ 1130.480314][T12366] ? __pfx_mas_prev+0x10/0x10 [ 1130.480336][T12366] ? find_vma_prev+0xd8/0x150 [ 1130.480350][T12366] ? lock_vma_under_rcu+0x1f9/0x590 [ 1130.480369][T12366] ? __pfx_find_vma_prev+0x10/0x10 [ 1130.480388][T12366] ? find_held_lock+0x2b/0x80 [ 1130.480402][T12366] ? madvise_do_behavior+0x1ea/0x510 [ 1130.480418][T12366] ? madvise_do_behavior+0x1ea/0x510 [ 1130.480437][T12366] madvise_walk_vmas+0x2fe/0xa90 [ 1130.480457][T12366] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1130.480474][T12366] ? find_held_lock+0x2b/0x80 [ 1130.480490][T12366] madvise_do_behavior+0x1ea/0x510 [ 1130.480506][T12366] ? futex_private_hash_put+0x107/0x1c0 [ 1130.480532][T12366] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1130.480549][T12366] ? futex_wake+0x1ad/0x530 [ 1130.480577][T12366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1130.480605][T12366] do_madvise+0x195/0x240 [ 1130.480622][T12366] ? __pfx_do_madvise+0x10/0x10 [ 1130.480638][T12366] ? do_futex+0x192/0x350 [ 1130.480674][T12366] __x64_sys_madvise+0xa9/0x110 [ 1130.480690][T12366] ? lockdep_hardirqs_on+0x78/0x100 [ 1130.480707][T12366] do_syscall_64+0x106/0xf80 [ 1130.480722][T12366] ? clear_bhb_loop+0x40/0x90 [ 1130.480741][T12366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.480757][T12366] RIP: 0033:0x7f56a8b9c629 [ 1130.480771][T12366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.480786][T12366] RSP: 002b:00007f56a9a70028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1130.480802][T12366] RAX: ffffffffffffffda RBX: 00007f56a8e15fa0 RCX: 00007f56a8b9c629 [ 1130.480813][T12366] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 1130.480822][T12366] RBP: 00007f56a8c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1130.480832][T12366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.480841][T12366] R13: 00007f56a8e16038 R14: 00007f56a8e15fa0 R15: 00007ffc63690858 [ 1130.480862][T12366] [ 1131.967127][T12378] nfs: Unknown parameter ''u3EVuҀtȢqC!Yt`#$5 UQaM' Yu6K@ q 11 [ 1133.493510][T12456] nfs: Unknown parameter ''u3EVuҀtȢqC!Yt`#$5 UQaM' Yu6K@ q [ 1134.107826][T12477] dump_stack_lvl+0x100/0x190 [ 1134.107854][T12477] should_fail_ex.cold+0x5/0xa [ 1134.107874][T12477] get_futex_key+0x1d2/0x1620 [ 1134.107895][T12477] ? __pfx_get_futex_key+0x10/0x10 [ 1134.107913][T12477] ? update_se+0x94/0x760 [ 1134.107934][T12477] futex_wait_setup+0x81/0x500 [ 1134.107962][T12477] __futex_wait+0x19f/0x300 [ 1134.107986][T12477] ? __pfx___futex_wait+0x10/0x10 [ 1134.108007][T12477] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1134.108022][T12477] ? lockdep_hardirqs_on+0x78/0x100 [ 1134.108041][T12477] ? __pfx_futex_wake_mark+0x10/0x10 [ 1134.108065][T12477] ? find_held_lock+0x2b/0x80 [ 1134.108079][T12477] ? futex_wake+0x456/0x530 [ 1134.108104][T12477] futex_wait+0xed/0x380 [ 1134.108126][T12477] ? __pfx_futex_wait+0x10/0x10 [ 1134.108153][T12477] ? ksys_write+0x190/0x250 [ 1134.108184][T12477] ? ksys_write+0x190/0x250 [ 1134.108210][T12477] do_futex+0x1ef/0x350 [ 1134.108229][T12477] ? __pfx_do_futex+0x10/0x10 [ 1134.108254][T12477] __x64_sys_futex+0x34f/0x4d0 [ 1134.108275][T12477] ? fput+0x79/0x100 [ 1134.108290][T12477] ? __pfx___x64_sys_futex+0x10/0x10 [ 1134.108308][T12477] ? ksys_write+0x1ac/0x250 [ 1134.108329][T12477] ? __pfx_ksys_write+0x10/0x10 [ 1134.108356][T12477] do_syscall_64+0x106/0xf80 [ 1134.108372][T12477] ? clear_bhb_loop+0x40/0x90 [ 1134.108390][T12477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.108406][T12477] RIP: 0033:0x7feab799c629 [ 1134.108419][T12477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.108435][T12477] RSP: 002b:00007feab5bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1134.108450][T12477] RAX: ffffffffffffffda RBX: 00007feab7c16098 RCX: 00007feab799c629 [ 1134.108460][T12477] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feab7c16098 [ 1134.108469][T12477] RBP: 00007feab7c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.108478][T12477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.108487][T12477] R13: 00007feab7c16128 R14: 00007ffe4ba69f90 R15: 00007ffe4ba6a078 [ 1134.108511][T12477] [ 1135.210135][T12511] netlink: 'syz.3.3669': attribute type 2 has an invalid length. [ 1135.786964][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3671'. [ 1136.131960][T12537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3671'. [ 1136.344987][T12565] nfs: Unknown parameter ''u3EVuҀtȢqC!Yt`#$5 UQaM' Yu6K@ q [ 1143.610934][T12886] dump_stack_lvl+0x100/0x190 [ 1143.610962][T12886] should_fail_ex.cold+0x5/0xa [ 1143.610982][T12886] get_futex_key+0x1d2/0x1620 [ 1143.611002][T12886] ? __pfx_get_futex_key+0x10/0x10 [ 1143.611020][T12886] ? sock_write_iter+0x339/0x610 [ 1143.611042][T12886] ? __pfx_sock_write_iter+0x10/0x10 [ 1143.611066][T12886] futex_wake+0xea/0x530 [ 1143.611089][T12886] ? __pfx_futex_wake+0x10/0x10 [ 1143.611114][T12886] ? vfs_write+0x15d/0x1070 [ 1143.611136][T12886] ? __pfx_sock_write_iter+0x10/0x10 [ 1143.611158][T12886] do_futex+0x32b/0x350 [ 1143.611187][T12886] ? __pfx_do_futex+0x10/0x10 [ 1143.611211][T12886] __x64_sys_futex+0x34f/0x4d0 [ 1143.611232][T12886] ? fput+0x79/0x100 [ 1143.611247][T12886] ? __pfx___x64_sys_futex+0x10/0x10 [ 1143.611266][T12886] ? ksys_write+0x1ac/0x250 [ 1143.611288][T12886] ? __pfx_ksys_write+0x10/0x10 [ 1143.611315][T12886] do_syscall_64+0x106/0xf80 [ 1143.611331][T12886] ? clear_bhb_loop+0x40/0x90 [ 1143.611349][T12886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.611365][T12886] RIP: 0033:0x7feaeeb9c629 [ 1143.611379][T12886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.611394][T12886] RSP: 002b:00007feaefa460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1143.611410][T12886] RAX: ffffffffffffffda RBX: 00007feaeee15fa8 RCX: 00007feaeeb9c629 [ 1143.611420][T12886] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feaeee15fac [ 1143.611434][T12886] RBP: 00007feaeee15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1143.611443][T12886] R10: 00000000000005c8 R11: 0000000000000246 R12: 0000000000000000 [ 1143.611452][T12886] R13: 00007feaeee16038 R14: 00007ffe926182e0 R15: 00007ffe926183c8 [ 1143.611472][T12886] [ 1145.302560][T12923] nfs: Unknown parameter ''u3EVuҀtȢqC!Yt`#$5 UQaM' Yu6K@ q [ 1153.368146][T13237] dump_stack_lvl+0x100/0x190 [ 1153.368174][T13237] should_fail_ex.cold+0x5/0xa [ 1153.368193][T13237] should_failslab+0xc2/0x120 [ 1153.368209][T13237] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1153.368230][T13237] ? ptlock_alloc+0x1f/0x70 [ 1153.368252][T13237] ptlock_alloc+0x1f/0x70 [ 1153.368270][T13237] pte_alloc_one+0x84/0x3e0 [ 1153.368287][T13237] __pte_alloc+0x6d/0x3f0 [ 1153.368301][T13237] ? __pfx___pte_alloc+0x10/0x10 [ 1153.368316][T13237] ? do_raw_spin_lock+0x128/0x260 [ 1153.368337][T13237] ? find_held_lock+0x2b/0x80 [ 1153.368352][T13237] do_anonymous_page+0x13cc/0x1fb0 [ 1153.368372][T13237] ? do_huge_pmd_anonymous_page+0x7ee/0x1a60 [ 1153.368394][T13237] ? __pmd_alloc+0x6aa/0x9c0 [ 1153.368411][T13237] __handle_mm_fault+0x1d42/0x2b60 [ 1153.368433][T13237] ? mt_find+0x45e/0x8e0 [ 1153.368451][T13237] ? __pfx___handle_mm_fault+0x10/0x10 [ 1153.368469][T13237] ? __pfx_mt_find+0x10/0x10 [ 1153.368496][T13237] ? find_vma+0xbf/0x140 [ 1153.368518][T13237] ? __pfx_find_vma+0x10/0x10 [ 1153.368541][T13237] handle_mm_fault+0x36d/0xa20 [ 1153.368563][T13237] do_user_addr_fault+0x74c/0x12f0 [ 1153.368592][T13237] exc_page_fault+0x6f/0xd0 [ 1153.368608][T13237] asm_exc_page_fault+0x26/0x30 [ 1153.368624][T13237] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1153.368646][T13237] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1153.368661][T13237] RSP: 0018:ffffc9000516fce8 EFLAGS: 00050202 [ 1153.368674][T13237] RAX: 0000000000000001 RBX: 0000000000000048 RCX: 0000000000000048 [ 1153.368683][T13237] RDX: 0000000000000001 RSI: ffffc9000516fdb0 RDI: 0000000000000000 [ 1153.368693][T13237] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000a2dfbe [ 1153.368702][T13237] R10: ffffc9000516fdf7 R11: 0000000000000000 R12: ffffc9000516fdb0 [ 1153.368711][T13237] R13: 0000000000000048 R14: 00007ffffffff000 R15: 0000000000000000 [ 1153.368731][T13237] _copy_to_user+0xa4/0xd0 [ 1153.368755][T13237] ksys_shmctl.constprop.0+0x2f1/0x390 [ 1153.368777][T13237] ? __pfx_ksys_shmctl.constprop.0+0x10/0x10 [ 1153.368794][T13237] ? do_futex+0x192/0x350 [ 1153.368813][T13237] ? __pfx_do_futex+0x10/0x10 [ 1153.368838][T13237] ? __x64_sys_futex+0x34f/0x4d0 [ 1153.368869][T13237] do_syscall_64+0x106/0xf80 [ 1153.368884][T13237] ? clear_bhb_loop+0x40/0x90 [ 1153.368902][T13237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.368917][T13237] RIP: 0033:0x7feaeeb9c629 [ 1153.368931][T13237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.368945][T13237] RSP: 002b:00007feaefa46028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 1153.368959][T13237] RAX: ffffffffffffffda RBX: 00007feaeee15fa0 RCX: 00007feaeeb9c629 [ 1153.368969][T13237] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 1153.368978][T13237] RBP: 00007feaeec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1153.368987][T13237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.368995][T13237] R13: 00007feaeee16038 R14: 00007feaeee15fa0 R15: 00007ffe926183c8 [ 1153.369017][T13237] [ 1153.935928][T13257] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3741'. [ 1153.945924][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3741'. [ 1154.415424][T13303] futex_wake_op: syz.4.3745 tries to shift op by -2048; fix this program [ 1154.501122][ T6213] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13 [ 1155.637803][T13393] FAULT_INJECTION: forcing a failure. [ 1155.637803][T13393] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.776577][T13393] CPU: 0 UID: 0 PID: 13393 Comm: syz.2.3751 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1155.776607][T13393] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1155.776614][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1155.776624][T13393] Call Trace: [ 1155.776630][T13393] [ 1155.776637][T13393] dump_stack_lvl+0x100/0x190 [ 1155.776665][T13393] should_fail_ex.cold+0x5/0xa [ 1155.776684][T13393] should_failslab+0xc2/0x120 [ 1155.776700][T13393] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1155.776724][T13393] ? create_filter_start.constprop.0+0x81/0x310 [ 1155.776748][T13393] ? rcu_is_watching+0x12/0xc0 [ 1155.776775][T13393] create_filter_start.constprop.0+0x81/0x310 [ 1155.776804][T13393] create_filter+0xb5/0x210 [ 1155.776826][T13393] ? __pfx_create_filter+0x10/0x10 [ 1155.776849][T13393] ? find_held_lock+0x2b/0x80 [ 1155.776866][T13393] apply_event_filter+0x220/0x500 [ 1155.776889][T13393] ? __pfx_apply_event_filter+0x10/0x10 [ 1155.776917][T13393] event_filter_write+0x16d/0x290 [ 1155.776942][T13393] vfs_write+0x2aa/0x1070 [ 1155.776967][T13393] ? __pfx_event_filter_write+0x10/0x10 [ 1155.776987][T13393] ? __pfx_vfs_write+0x10/0x10 [ 1155.777008][T13393] ? __fget_files+0x215/0x3d0 [ 1155.777037][T13393] ? __fget_files+0x21f/0x3d0 [ 1155.777064][T13393] ksys_write+0x12a/0x250 [ 1155.777085][T13393] ? __pfx_ksys_write+0x10/0x10 [ 1155.777113][T13393] do_syscall_64+0x106/0xf80 [ 1155.777129][T13393] ? clear_bhb_loop+0x40/0x90 [ 1155.777147][T13393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.777163][T13393] RIP: 0033:0x7feaeeb9c629 [ 1155.777176][T13393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.777194][T13393] RSP: 002b:00007feaefa46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1155.777209][T13393] RAX: ffffffffffffffda RBX: 00007feaeee15fa0 RCX: 00007feaeeb9c629 [ 1155.777220][T13393] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1155.777229][T13393] RBP: 00007feaeec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1155.777238][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.777247][T13393] R13: 00007feaeee16038 R14: 00007feaeee15fa0 R15: 00007ffe926183c8 [ 1155.777268][T13393] [ 1156.620352][T13431] FAULT_INJECTION: forcing a failure. [ 1156.620352][T13431] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.680558][T13431] CPU: 0 UID: 0 PID: 13431 Comm: syz.5.3752 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1156.680589][T13431] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1156.680596][T13431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1156.680605][T13431] Call Trace: [ 1156.680612][T13431] [ 1156.680619][T13431] dump_stack_lvl+0x100/0x190 [ 1156.680647][T13431] should_fail_ex.cold+0x5/0xa [ 1156.680666][T13431] should_failslab+0xc2/0x120 [ 1156.680682][T13431] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1156.680700][T13431] ? create_filter_start.constprop.0+0x81/0x310 [ 1156.680724][T13431] ? rcu_is_watching+0x12/0xc0 [ 1156.680750][T13431] create_filter_start.constprop.0+0x81/0x310 [ 1156.680784][T13431] create_filter+0xb5/0x210 [ 1156.680807][T13431] ? __pfx_create_filter+0x10/0x10 [ 1156.680832][T13431] ? find_held_lock+0x2b/0x80 [ 1156.680850][T13431] apply_event_filter+0x220/0x500 [ 1156.680873][T13431] ? __pfx_apply_event_filter+0x10/0x10 [ 1156.680901][T13431] event_filter_write+0x16d/0x290 [ 1156.680920][T13431] vfs_write+0x2aa/0x1070 [ 1156.680942][T13431] ? __pfx_event_filter_write+0x10/0x10 [ 1156.680961][T13431] ? __pfx_vfs_write+0x10/0x10 [ 1156.680983][T13431] ? __fget_files+0x215/0x3d0 [ 1156.681012][T13431] ? __fget_files+0x21f/0x3d0 [ 1156.681039][T13431] ksys_write+0x12a/0x250 [ 1156.681061][T13431] ? __pfx_ksys_write+0x10/0x10 [ 1156.681088][T13431] do_syscall_64+0x106/0xf80 [ 1156.681105][T13431] ? clear_bhb_loop+0x40/0x90 [ 1156.681124][T13431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.681140][T13431] RIP: 0033:0x7f0679b9c629 [ 1156.681154][T13431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.681171][T13431] RSP: 002b:00007f067a9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1156.681186][T13431] RAX: ffffffffffffffda RBX: 00007f0679e16180 RCX: 00007f0679b9c629 [ 1156.681197][T13431] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1156.681206][T13431] RBP: 00007f0679c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1156.681215][T13431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1156.681224][T13431] R13: 00007f0679e16218 R14: 00007f0679e16180 R15: 00007ffc93c20a08 [ 1156.681244][T13431] [ 1157.490191][T13425] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1157.576819][T13425] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1157.699576][T13425] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1158.183574][T13461] [U] [ 1158.186419][T13461] [U] [ 1158.189117][T13461] [U] [ 1158.191815][T13461] [U] [ 1158.248051][T13461] [U] [ 1158.250759][T13461] [U] [ 1158.253437][T13461] [U] [ 1158.256137][T13461] [U] [ 1158.314931][T13465] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3754'. [ 1158.379792][T13461] [U] [ 1158.382508][T13461] [U] [ 1158.385207][T13461] [U] [ 1158.387877][T13461] [U] [ 1158.445641][T13461] [U] [ 1159.696591][T13434] zswap: compressor  not available [ 1160.102372][T13499] nfs: Unknown parameter ''u3EVuҀtȢqC!Yt`#$5 UQaM' Yu6K@ q [ 1172.479143][T14005] dump_stack_lvl+0x100/0x190 [ 1172.479190][T14005] should_fail_ex.cold+0x5/0xa [ 1172.479209][T14005] should_failslab+0xc2/0x120 [ 1172.479225][T14005] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1172.479244][T14005] ? create_filter_start.constprop.0+0x81/0x310 [ 1172.479271][T14005] ? rcu_is_watching+0x12/0xc0 [ 1172.479296][T14005] create_filter_start.constprop.0+0x81/0x310 [ 1172.479321][T14005] create_filter+0xb5/0x210 [ 1172.479344][T14005] ? __pfx_create_filter+0x10/0x10 [ 1172.479368][T14005] ? find_held_lock+0x2b/0x80 [ 1172.479384][T14005] apply_event_filter+0x220/0x500 [ 1172.479407][T14005] ? __pfx_apply_event_filter+0x10/0x10 [ 1172.479435][T14005] event_filter_write+0x16d/0x290 [ 1172.479454][T14005] vfs_write+0x2aa/0x1070 [ 1172.479477][T14005] ? __pfx_event_filter_write+0x10/0x10 [ 1172.479496][T14005] ? __pfx_vfs_write+0x10/0x10 [ 1172.479518][T14005] ? __fget_files+0x215/0x3d0 [ 1172.479544][T14005] ? __fget_files+0x21f/0x3d0 [ 1172.479571][T14005] ksys_write+0x12a/0x250 [ 1172.479593][T14005] ? __pfx_ksys_write+0x10/0x10 [ 1172.479620][T14005] do_syscall_64+0x106/0xf80 [ 1172.479637][T14005] ? clear_bhb_loop+0x40/0x90 [ 1172.479655][T14005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.479671][T14005] RIP: 0033:0x7f56a8b9c629 [ 1172.479690][T14005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.479706][T14005] RSP: 002b:00007f56a9a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1172.479724][T14005] RAX: ffffffffffffffda RBX: 00007f56a8e16090 RCX: 00007f56a8b9c629 [ 1172.479734][T14005] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1172.479744][T14005] RBP: 00007f56a8c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1172.479753][T14005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.479763][T14005] R13: 00007f56a8e16128 R14: 00007f56a8e16090 R15: 00007ffc63690858 [ 1172.479784][T14005] [ 1173.970886][T14045] random: crng reseeded on system resumption [ 1174.397440][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3825'. [ 1174.478309][T14058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3825'. [ 1174.988967][ T6213] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1175.640839][T14127] nfs: Unknown parameter '' [ 1175.786634][T14112] zswap: compressor not available [ 1176.769433][T14162] program syz.5.3833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1177.328006][T14188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3837'. [ 1177.350636][T14180] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1177.455560][T14179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3837'. [ 1177.653540][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.659978][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.731248][T14218] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1178.870456][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3840'. [ 1178.990691][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3840'. [ 1179.207580][ T6213] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1183.582569][T14379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1183.605806][T14379] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1183.641481][T14379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1183.674080][T14379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1183.701912][T14379] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1183.753893][T14379] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1184.930225][ T6213] Bluetooth: hci3: command 0x0c1a tx timeout [ 1185.653390][ T6213] Bluetooth: hci1: command 0x0c1a tx timeout [ 1185.729556][ T6213] Bluetooth: hci2: command 0x0c1a tx timeout [ 1185.809387][ T6213] Bluetooth: hci0: command 0x0c1a tx timeout [ 1186.696939][T14532] zswap: compressor not available [ 1187.010014][ T6213] Bluetooth: hci3: command 0x0c1a tx timeout [ 1187.610328][T14608] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3871'. [ 1187.668011][T14615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1187.720925][T14608] bridge_slave_0: left allmulticast mode [ 1187.771822][T14608] bridge_slave_0: left promiscuous mode [ 1187.810520][ T6213] Bluetooth: hci2: command 0x0c1a tx timeout [ 1187.864589][T14608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.568860][T14655] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1190.898255][T14796] FAULT_INJECTION: forcing a failure. [ 1190.898255][T14796] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.966079][T14796] CPU: 0 UID: 0 PID: 14796 Comm: syz.3.3888 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1190.966113][T14796] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1190.966119][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1190.966129][T14796] Call Trace: [ 1190.966135][T14796] [ 1190.966142][T14796] dump_stack_lvl+0x100/0x190 [ 1190.966169][T14796] should_fail_ex.cold+0x5/0xa [ 1190.966189][T14796] should_failslab+0xc2/0x120 [ 1190.966215][T14796] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1190.966235][T14796] ? create_filter_start.constprop.0+0x81/0x310 [ 1190.966260][T14796] ? rcu_is_watching+0x12/0xc0 [ 1190.966285][T14796] create_filter_start.constprop.0+0x81/0x310 [ 1190.966310][T14796] create_filter+0xb5/0x210 [ 1190.966332][T14796] ? __pfx_create_filter+0x10/0x10 [ 1190.966356][T14796] ? find_held_lock+0x2b/0x80 [ 1190.966373][T14796] apply_event_filter+0x220/0x500 [ 1190.966396][T14796] ? __pfx_apply_event_filter+0x10/0x10 [ 1190.966427][T14796] event_filter_write+0x16d/0x290 [ 1190.966446][T14796] vfs_write+0x2aa/0x1070 [ 1190.966469][T14796] ? __pfx_event_filter_write+0x10/0x10 [ 1190.966488][T14796] ? __pfx_vfs_write+0x10/0x10 [ 1190.966509][T14796] ? __fget_files+0x215/0x3d0 [ 1190.966535][T14796] ? __fget_files+0x21f/0x3d0 [ 1190.966563][T14796] ksys_write+0x12a/0x250 [ 1190.966584][T14796] ? __pfx_ksys_write+0x10/0x10 [ 1190.966612][T14796] do_syscall_64+0x106/0xf80 [ 1190.966628][T14796] ? clear_bhb_loop+0x40/0x90 [ 1190.966647][T14796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.966663][T14796] RIP: 0033:0x7feab799c629 [ 1190.966678][T14796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.966693][T14796] RSP: 002b:00007feab5bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1190.966708][T14796] RAX: ffffffffffffffda RBX: 00007feab7c16090 RCX: 00007feab799c629 [ 1190.966719][T14796] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1190.966728][T14796] RBP: 00007feab7a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1190.966737][T14796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1190.966746][T14796] R13: 00007feab7c16128 R14: 00007feab7c16090 R15: 00007ffe4ba6a078 [ 1190.966766][T14796] [ 1192.499383][ T6213] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 1192.585172][T14858] FAULT_INJECTION: forcing a failure. [ 1192.585172][T14858] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.599461][T14860] netlink: zone id is out of range [ 1192.604581][T14860] netlink: zone id is out of range [ 1192.665208][T14858] CPU: 0 UID: 0 PID: 14858 Comm: syz.5.3893 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1192.665250][T14858] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1192.665256][T14858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1192.665267][T14858] Call Trace: [ 1192.665273][T14858] [ 1192.665280][T14858] dump_stack_lvl+0x100/0x190 [ 1192.665308][T14858] should_fail_ex.cold+0x5/0xa [ 1192.665328][T14858] should_failslab+0xc2/0x120 [ 1192.665344][T14858] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1192.665362][T14858] ? create_filter_start.constprop.0+0x81/0x310 [ 1192.665387][T14858] ? rcu_is_watching+0x12/0xc0 [ 1192.665412][T14858] create_filter_start.constprop.0+0x81/0x310 [ 1192.665437][T14858] create_filter+0xb5/0x210 [ 1192.665460][T14858] ? __pfx_create_filter+0x10/0x10 [ 1192.665484][T14858] ? find_held_lock+0x2b/0x80 [ 1192.665506][T14858] apply_event_filter+0x220/0x500 [ 1192.665530][T14858] ? __pfx_apply_event_filter+0x10/0x10 [ 1192.665559][T14858] event_filter_write+0x16d/0x290 [ 1192.665579][T14858] vfs_write+0x2aa/0x1070 [ 1192.665603][T14858] ? __pfx_event_filter_write+0x10/0x10 [ 1192.665622][T14858] ? __pfx_vfs_write+0x10/0x10 [ 1192.665643][T14858] ? __fget_files+0x215/0x3d0 [ 1192.665669][T14858] ? __fget_files+0x21f/0x3d0 [ 1192.665696][T14858] ksys_write+0x12a/0x250 [ 1192.665718][T14858] ? __pfx_ksys_write+0x10/0x10 [ 1192.665746][T14858] do_syscall_64+0x106/0xf80 [ 1192.665762][T14858] ? clear_bhb_loop+0x40/0x90 [ 1192.665781][T14858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.665797][T14858] RIP: 0033:0x7f0679b9c629 [ 1192.665811][T14858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.665826][T14858] RSP: 002b:00007f067a9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1192.665842][T14858] RAX: ffffffffffffffda RBX: 00007f0679e15fa0 RCX: 00007f0679b9c629 [ 1192.665852][T14858] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1192.665861][T14858] RBP: 00007f0679c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1192.665872][T14858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.665881][T14858] R13: 00007f0679e16038 R14: 00007f0679e15fa0 R15: 00007ffc93c20a08 [ 1192.665903][T14858] [ 1192.668971][T14861] netlink: zone id is out of range [ 1193.953207][T14901] block2mtd: illegal erase size [ 1194.072354][T14860] netlink: zone id is out of range [ 1194.129499][T14860] netlink: zone id is out of range [ 1194.134961][T14860] FAULT_INJECTION: forcing a failure. [ 1194.134961][T14860] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.290337][T14860] CPU: 0 UID: 0 PID: 14860 Comm: syz.3.3894 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1194.290367][T14860] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1194.290373][T14860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1194.290384][T14860] Call Trace: [ 1194.290390][T14860] [ 1194.290396][T14860] dump_stack_lvl+0x100/0x190 [ 1194.290424][T14860] should_fail_ex.cold+0x5/0xa [ 1194.290444][T14860] should_failslab+0xc2/0x120 [ 1194.290459][T14860] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1194.290478][T14860] ? ovs_ct_limit_cmd_set+0x30a/0xa70 [ 1194.290503][T14860] ovs_ct_limit_cmd_set+0x30a/0xa70 [ 1194.290525][T14860] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1194.290546][T14860] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 1194.290568][T14860] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 1194.290593][T14860] genl_family_rcv_msg_doit+0x214/0x300 [ 1194.290616][T14860] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1194.290637][T14860] ? genl_get_cmd+0x3ef/0x720 [ 1194.290660][T14860] ? bpf_lsm_capable+0x9/0x10 [ 1194.290675][T14860] ? security_capable+0x80/0x260 [ 1194.290695][T14860] ? ns_capable+0xd2/0xf0 [ 1194.290711][T14860] genl_rcv_msg+0x560/0x800 [ 1194.290734][T14860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1194.290756][T14860] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1194.290782][T14860] netlink_rcv_skb+0x159/0x420 [ 1194.290801][T14860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1194.290822][T14860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1194.290847][T14860] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1194.290882][T14860] genl_rcv+0x28/0x40 [ 1194.290908][T14860] netlink_unicast+0x5aa/0x870 [ 1194.290936][T14860] ? __pfx_netlink_unicast+0x10/0x10 [ 1194.290954][T14860] ? __asan_memset+0x23/0x50 [ 1194.290973][T14860] ? __build_skb_around+0x278/0x390 [ 1194.290997][T14860] ? is_vmalloc_addr+0x86/0xa0 [ 1194.291019][T14860] netlink_sendmsg+0x8b0/0xda0 [ 1194.291041][T14860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.291058][T14860] ? __import_iovec+0x1d2/0x640 [ 1194.291083][T14860] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1194.291106][T14860] ____sys_sendmsg+0xa54/0xc30 [ 1194.291129][T14860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1194.291153][T14860] ? __pfx_futex_wake_mark+0x10/0x10 [ 1194.291179][T14860] ___sys_sendmsg+0x190/0x1e0 [ 1194.291201][T14860] ? __pfx____sys_sendmsg+0x10/0x10 [ 1194.291246][T14860] __sys_sendmsg+0x170/0x220 [ 1194.291263][T14860] ? __pfx___sys_sendmsg+0x10/0x10 [ 1194.291279][T14860] ? __x64_sys_futex+0x34f/0x4d0 [ 1194.291309][T14860] do_syscall_64+0x106/0xf80 [ 1194.291325][T14860] ? clear_bhb_loop+0x40/0x90 [ 1194.291344][T14860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.291360][T14860] RIP: 0033:0x7feab799c629 [ 1194.291374][T14860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.291388][T14860] RSP: 002b:00007feab877e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1194.291404][T14860] RAX: ffffffffffffffda RBX: 00007feab7c15fa0 RCX: 00007feab799c629 [ 1194.291415][T14860] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000006 [ 1194.291429][T14860] RBP: 00007feab7a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1194.291437][T14860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.291446][T14860] R13: 00007feab7c16038 R14: 00007feab7c15fa0 R15: 00007ffe4ba6a078 [ 1194.291466][T14860] [ 1194.296055][T14861] netlink: zone id is out of range [ 1195.710901][T14958] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input67 [ 1196.473431][T14861] netlink: zone id is out of range [ 1196.531367][T14861] netlink: zone id is out of range [ 1196.565851][T14861] netlink: zone id is out of range [ 1196.607897][T14861] netlink: zone id is out of range [ 1196.613893][T15001] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1196.966784][T15031] FAULT_INJECTION: forcing a failure. [ 1196.966784][T15031] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.097985][T15031] CPU: 0 UID: 0 PID: 15031 Comm: syz.3.3911 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1197.098014][T15031] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1197.098020][T15031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1197.098030][T15031] Call Trace: [ 1197.098036][T15031] [ 1197.098043][T15031] dump_stack_lvl+0x100/0x190 [ 1197.098071][T15031] should_fail_ex.cold+0x5/0xa [ 1197.098090][T15031] ? lsm_blob_alloc+0x68/0x90 [ 1197.098107][T15031] should_failslab+0xc2/0x120 [ 1197.098123][T15031] __kmalloc_noprof+0xe0/0x850 [ 1197.098144][T15031] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1197.098163][T15031] lsm_blob_alloc+0x68/0x90 [ 1197.098179][T15031] security_prepare_creds+0x2d/0x290 [ 1197.098196][T15031] prepare_creds+0x5d6/0x950 [ 1197.098220][T15031] __sys_setfsgid+0xe3/0x3b0 [ 1197.098238][T15031] do_syscall_64+0x106/0xf80 [ 1197.098255][T15031] ? clear_bhb_loop+0x40/0x90 [ 1197.098274][T15031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.098290][T15031] RIP: 0033:0x7feab799c629 [ 1197.098304][T15031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.098319][T15031] RSP: 002b:00007feab877e028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 1197.098334][T15031] RAX: ffffffffffffffda RBX: 00007feab7c15fa0 RCX: 00007feab799c629 [ 1197.098345][T15031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 1197.098354][T15031] RBP: 00007feab7a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1197.098363][T15031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1197.098372][T15031] R13: 00007feab7c16038 R14: 00007feab7c15fa0 R15: 00007ffe4ba6a078 [ 1197.098392][T15031] [ 1199.831662][T15110] program syz.5.3919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1199.888377][T15121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3921'. [ 1200.019120][T15121] team0 (unregistering): Port device team_slave_1 removed [ 1200.750697][T15164] FAULT_INJECTION: forcing a failure. [ 1200.750697][T15164] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.839780][T15164] CPU: 0 UID: 0 PID: 15164 Comm: syz.2.3923 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1200.839810][T15164] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1200.839816][T15164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1200.839826][T15164] Call Trace: [ 1200.839832][T15164] [ 1200.839839][T15164] dump_stack_lvl+0x100/0x190 [ 1200.839868][T15164] should_fail_ex.cold+0x5/0xa [ 1200.839887][T15164] should_failslab+0xc2/0x120 [ 1200.839903][T15164] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1200.839922][T15164] ? create_filter_start.constprop.0+0x81/0x310 [ 1200.839945][T15164] ? rcu_is_watching+0x12/0xc0 [ 1200.839970][T15164] create_filter_start.constprop.0+0x81/0x310 [ 1200.839995][T15164] create_filter+0xb5/0x210 [ 1200.840018][T15164] ? __pfx_create_filter+0x10/0x10 [ 1200.840042][T15164] ? find_held_lock+0x2b/0x80 [ 1200.840058][T15164] apply_event_filter+0x220/0x500 [ 1200.840081][T15164] ? __pfx_apply_event_filter+0x10/0x10 [ 1200.840109][T15164] event_filter_write+0x16d/0x290 [ 1200.840128][T15164] vfs_write+0x2aa/0x1070 [ 1200.840151][T15164] ? __pfx_event_filter_write+0x10/0x10 [ 1200.840169][T15164] ? __pfx_vfs_write+0x10/0x10 [ 1200.840191][T15164] ? __fget_files+0x215/0x3d0 [ 1200.840225][T15164] ? __fget_files+0x21f/0x3d0 [ 1200.840253][T15164] ksys_write+0x12a/0x250 [ 1200.840276][T15164] ? __pfx_ksys_write+0x10/0x10 [ 1200.840305][T15164] do_syscall_64+0x106/0xf80 [ 1200.840321][T15164] ? clear_bhb_loop+0x40/0x90 [ 1200.840340][T15164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.840356][T15164] RIP: 0033:0x7feaeeb9c629 [ 1200.840370][T15164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.840384][T15164] RSP: 002b:00007feaefa46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1200.840400][T15164] RAX: ffffffffffffffda RBX: 00007feaeee15fa0 RCX: 00007feaeeb9c629 [ 1200.840410][T15164] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1200.840419][T15164] RBP: 00007feaeec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1200.840428][T15164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.840438][T15164] R13: 00007feaeee16038 R14: 00007feaeee15fa0 R15: 00007ffe926183c8 [ 1200.840459][T15164] [ 1201.545575][T15190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1201.705438][T15188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1202.647786][T15228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3926'. [ 1204.420675][T15304] netlink: 'syz.2.3929': attribute type 1 has an invalid length. [ 1205.593004][T15362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3934'. [ 1205.771192][T15356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3934'. [ 1207.445500][T15431] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3939'. [ 1210.558759][T15587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3945'. [ 1210.657437][T15583] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3945'. [ 1212.757238][T15680] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3955'. [ 1213.074292][T15710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3956'. [ 1213.166899][T15708] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3956'. [ 1214.688973][T22610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1214.710034][T22610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1214.719032][T22610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1214.729175][T22610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1214.736960][T22610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1216.394621][T15830] Invalid ELF header magic: != ELF [ 1216.439457][T15825] Invalid ELF header magic: != ELF [ 1216.558869][T15839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3968'. [ 1216.627747][T15836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3968'. [ 1216.743452][T22682] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.770317][T22610] Bluetooth: hci4: command tx timeout [ 1217.030003][T15744] chnl_net:caif_netlink_parms(): no params data found [ 1217.543356][T15871] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1217.628374][T15873] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1217.715051][T22682] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.199616][T15890] futex_wake_op: syz.2.3973 tries to shift op by -2048; fix this program [ 1218.234765][T22682] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.335025][T15890] futex_wake_op: syz.2.3973 tries to shift op by -2048; fix this program [ 1218.632098][T15744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.684320][T15744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.731047][T15744] bridge_slave_0: entered allmulticast mode [ 1218.774724][T15744] bridge_slave_0: entered promiscuous mode [ 1218.849387][T22610] Bluetooth: hci4: command tx timeout [ 1219.061815][T15937] ubi0: attaching mtd1 [ 1219.076303][T22682] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.091888][T15936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3976'. [ 1219.124054][T15937] ubi0: scanning is finished [ 1219.209761][T15937] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1219.249258][T15744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.257066][T15744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.351308][T15744] bridge_slave_1: entered allmulticast mode [ 1219.402066][T15744] bridge_slave_1: entered promiscuous mode [ 1219.519546][T15936] bridge_slave_0: left allmulticast mode [ 1219.559190][T15936] bridge_slave_0: left promiscuous mode [ 1219.636795][T15936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.002877][T15937] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 1220.117314][T15744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.182402][T15744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.620734][T15744] team0: Port device team_slave_0 added [ 1220.933021][T22610] Bluetooth: hci4: command tx timeout [ 1221.202642][T15744] team0: Port device team_slave_1 added [ 1223.009354][T22610] Bluetooth: hci4: command tx timeout [ 1223.070827][T22682] ovs_: left promiscuous mode [ 1223.485297][T15744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.531135][T15744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.699960][T15744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.789565][T15744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.828693][T15744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.015685][T15744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.837744][T15744] hsr_slave_0: entered promiscuous mode [ 1224.890159][T15744] hsr_slave_1: entered promiscuous mode [ 1224.896165][T15744] debugfs: 'hsr0' already exists in 'hsr' [ 1224.956042][T15744] Cannot create hsr debugfs directory [ 1225.986043][T16238] ima: policy update failed [ 1226.063729][ T29] audit: type=1802 audit(4294971702.387:30): pid=16238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3987" res=0 errno=0 [ 1226.213272][T16219] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1227.898674][T22682] hsr_slave_0: left promiscuous mode [ 1227.927979][T22682] hsr_slave_1: left promiscuous mode [ 1227.952809][T22682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1227.998947][T22682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.036797][T22682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1228.082386][T22682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.167102][T22682] veth1_macvtap: left promiscuous mode [ 1228.198003][T22682] veth0_macvtap: left promiscuous mode [ 1228.231393][T22682] veth1_vlan: left promiscuous mode [ 1228.256713][T22682] veth0_vlan: left promiscuous mode [ 1232.202474][T15744] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1232.292249][T15744] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1232.365379][T15744] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1232.442080][T15744] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1232.819671][T16437] futex_wake_op: syz.3.3995 tries to shift op by -2048; fix this program [ 1232.885096][T16437] futex_wake_op: syz.3.3995 tries to shift op by -2048; fix this program [ 1232.896190][T22610] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1233.278125][T15744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.436190][T15744] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.530377][T22673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.537508][T22673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.655502][T22690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.662675][T22690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.869469][T16500] FAULT_INJECTION: forcing a failure. [ 1233.869469][T16500] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.990638][T16500] CPU: 0 UID: 0 PID: 16500 Comm: syz.2.3998 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1233.990667][T16500] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1233.990673][T16500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1233.990686][T16500] Call Trace: [ 1233.990693][T16500] [ 1233.990701][T16500] dump_stack_lvl+0x100/0x190 [ 1233.990729][T16500] should_fail_ex.cold+0x5/0xa [ 1233.990753][T16500] should_failslab+0xc2/0x120 [ 1233.990769][T16500] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1233.990794][T16500] ? __v4l2_subdev_state_alloc+0x53/0x410 [ 1233.990823][T16500] __v4l2_subdev_state_alloc+0x53/0x410 [ 1233.990848][T16500] subdev_open+0xa6/0x510 [ 1233.990872][T16500] v4l2_open+0x1d2/0x490 [ 1233.990891][T16500] ? __pfx_v4l2_open+0x10/0x10 [ 1233.990909][T16500] chrdev_open+0x234/0x6a0 [ 1233.990924][T16500] ? __pfx_apparmor_file_open+0x10/0x10 [ 1233.990945][T16500] ? __pfx_chrdev_open+0x10/0x10 [ 1233.990960][T16500] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1233.990988][T16500] do_dentry_open+0x6d8/0x1660 [ 1233.991012][T16500] ? __pfx_chrdev_open+0x10/0x10 [ 1233.991031][T16500] vfs_open+0x82/0x3f0 [ 1233.991050][T16500] path_openat+0x208c/0x31a0 [ 1233.991068][T16500] ? futex_unqueue+0x13d/0x2c0 [ 1233.991087][T16500] ? stack_depot_save_flags+0x27/0x9d0 [ 1233.991111][T16500] ? __pfx_path_openat+0x10/0x10 [ 1233.991127][T16500] ? kasan_save_stack+0x3f/0x50 [ 1233.991147][T16500] ? kasan_save_stack+0x30/0x50 [ 1233.991167][T16500] ? kasan_save_track+0x14/0x30 [ 1233.991187][T16500] ? __kasan_slab_alloc+0x89/0x90 [ 1233.991208][T16500] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1233.991228][T16500] ? do_getname+0x35/0x390 [ 1233.991246][T16500] do_file_open+0x20e/0x430 [ 1233.991262][T16500] ? __pfx_do_file_open+0x10/0x10 [ 1233.991291][T16500] ? find_held_lock+0x2b/0x80 [ 1233.991305][T16500] ? __might_fault+0xc5/0x140 [ 1233.991324][T16500] ? __might_fault+0xc5/0x140 [ 1233.991345][T16500] file_open_name+0x198/0x3b0 [ 1233.991363][T16500] ? __pfx_file_open_name+0x10/0x10 [ 1233.991385][T16500] ? do_getname+0x191/0x390 [ 1233.991403][T16500] acct_on+0xa4/0x9e0 [ 1233.991428][T16500] ? __pfx_acct_on+0x10/0x10 [ 1233.991450][T16500] ? bpf_lsm_capable+0x9/0x10 [ 1233.991464][T16500] ? security_capable+0x80/0x260 [ 1233.991487][T16500] __x64_sys_acct+0x81/0x1e0 [ 1233.991508][T16500] ? lockdep_hardirqs_on+0x78/0x100 [ 1233.991525][T16500] do_syscall_64+0x106/0xf80 [ 1233.991541][T16500] ? clear_bhb_loop+0x40/0x90 [ 1233.991560][T16500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.991576][T16500] RIP: 0033:0x7feaeeb9c629 [ 1233.991591][T16500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.991606][T16500] RSP: 002b:00007feaefa46028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1233.991621][T16500] RAX: ffffffffffffffda RBX: 00007feaeee15fa0 RCX: 00007feaeeb9c629 [ 1233.991632][T16500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1233.991641][T16500] RBP: 00007feaeec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1233.991652][T16500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1233.991661][T16500] R13: 00007feaeee16038 R14: 00007feaeee15fa0 R15: 00007ffe926183c8 [ 1233.991682][T16500] [ 1235.903858][T16533] FAULT_INJECTION: forcing a failure. [ 1235.903858][T16533] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.932113][T16517] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1235.938417][T16517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1236.028258][T16533] CPU: 0 UID: 0 PID: 16533 Comm: syz.3.4001 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1236.028288][T16533] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1236.028295][T16533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1236.028304][T16533] Call Trace: [ 1236.028310][T16533] [ 1236.028317][T16533] dump_stack_lvl+0x100/0x190 [ 1236.028355][T16533] should_fail_ex.cold+0x5/0xa [ 1236.028375][T16533] should_failslab+0xc2/0x120 [ 1236.028391][T16533] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1236.028414][T16533] ? create_filter_start.constprop.0+0x15b/0x310 [ 1236.028442][T16533] kstrdup+0x51/0xe0 [ 1236.028465][T16533] create_filter_start.constprop.0+0x15b/0x310 [ 1236.028490][T16533] create_filter+0xb5/0x210 [ 1236.028512][T16533] ? __pfx_create_filter+0x10/0x10 [ 1236.028536][T16533] ? find_held_lock+0x2b/0x80 [ 1236.028558][T16533] apply_event_filter+0x220/0x500 [ 1236.028582][T16533] ? __pfx_apply_event_filter+0x10/0x10 [ 1236.028612][T16533] event_filter_write+0x16d/0x290 [ 1236.028631][T16533] vfs_write+0x2aa/0x1070 [ 1236.028655][T16533] ? __pfx_event_filter_write+0x10/0x10 [ 1236.028674][T16533] ? __pfx_vfs_write+0x10/0x10 [ 1236.028695][T16533] ? __fget_files+0x215/0x3d0 [ 1236.028721][T16533] ? __fget_files+0x21f/0x3d0 [ 1236.028749][T16533] ksys_write+0x12a/0x250 [ 1236.028770][T16533] ? __pfx_ksys_write+0x10/0x10 [ 1236.028797][T16533] do_syscall_64+0x106/0xf80 [ 1236.028814][T16533] ? clear_bhb_loop+0x40/0x90 [ 1236.028832][T16533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.028848][T16533] RIP: 0033:0x7feab799c629 [ 1236.028862][T16533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.028877][T16533] RSP: 002b:00007feab877e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1236.028893][T16533] RAX: ffffffffffffffda RBX: 00007feab7c15fa0 RCX: 00007feab799c629 [ 1236.028903][T16533] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1236.028912][T16533] RBP: 00007feab7a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1236.028921][T16533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1236.028930][T16533] R13: 00007feab7c16038 R14: 00007feab7c15fa0 R15: 00007ffe4ba6a078 [ 1236.028951][T16533] [ 1236.252186][T16517] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1236.258110][T16517] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1236.780507][T16517] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1236.786465][T16517] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1237.069794][T16517] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1237.696197][T15744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.972083][T22610] Bluetooth: hci2: command 0x0c1a tx timeout [ 1237.978118][T22610] Bluetooth: hci1: command 0x0c1a tx timeout [ 1238.180855][T16605] usb usb36: usbfs: process 16605 (syz.4.4005) did not claim interface 0 before use [ 1238.696987][T22610] Bluetooth: hci0: command 0x0c1a tx timeout [ 1238.854547][T22610] Bluetooth: hci4: command 0x0c1a tx timeout [ 1239.099659][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.106088][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.241347][T15744] veth0_vlan: entered promiscuous mode [ 1239.364333][T15744] veth1_vlan: entered promiscuous mode [ 1239.512430][ T29] audit: type=1800 audit(4294971715.847:31): pid=16665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4008" name="features" dev="configfs" ino=544081 res=0 errno=0 [ 1240.208831][T15744] veth0_macvtap: entered promiscuous mode [ 1240.422589][T15744] veth1_macvtap: entered promiscuous mode [ 1240.467817][T15744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.575869][T15744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.658192][T22682] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.707219][T22682] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.773814][ T6213] Bluetooth: hci0: command 0x0c1a tx timeout [ 1240.849757][T22682] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.934402][ T6213] Bluetooth: hci4: command 0x0c1a tx timeout [ 1240.965339][T22682] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.249651][T22610] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1241.479629][T22672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.536038][T22672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.676524][T22692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.732019][T22692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.036881][T16757] netlink: 'syz.5.3961': attribute type 1 has an invalid length. [ 1242.097826][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4020'. [ 1242.409845][T16764] netlink: 504 bytes leftover after parsing attributes in process `syz.5.4014'. [ 1242.463831][T16764] netlink: 350 bytes leftover after parsing attributes in process `syz.5.4014'. [ 1243.011266][T22610] Bluetooth: hci4: command 0x0c1a tx timeout [ 1243.095778][T16780] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1244.891644][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4025'. [ 1245.886658][T16912] vivid-007: ================= START STATUS ================= [ 1245.983845][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4028'. [ 1246.050002][T16912] vivid-007: Generate PTS: true [ 1246.054884][T16912] vivid-007: Generate SCR: true [ 1246.110274][T16912] tpg source WxH: 320x240 (Y'CbCr) [ 1246.151584][T16912] tpg field: 1 [ 1246.162128][T16912] tpg crop: (0,0)/320x240 [ 1246.195305][T16912] tpg compose: (0,0)/320x240 [ 1246.229574][T16912] tpg colorspace: 8 [ 1246.246061][T16912] tpg transfer function: 0/0 [ 1246.293014][T16912] tpg Y'CbCr encoding: 0/0 [ 1246.318238][T16912] tpg quantization: 0/0 [ 1246.362444][T16912] tpg RGB range: 0/2 [ 1246.384415][T16912] vivid-007: ================== END STATUS ================== [ 1247.845398][T16977] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1249.558031][T17057] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1249.619603][T17057] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1249.778978][T17057] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1249.840619][T17057] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1250.682055][T17076] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1251.063039][T17099] FAULT_INJECTION: forcing a failure. [ 1251.063039][T17099] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.087762][T17098] netlink: 'syz.5.4046': attribute type 4 has an invalid length. [ 1251.135080][T17098] netlink: 'syz.5.4046': attribute type 5 has an invalid length. [ 1251.151847][T17099] CPU: 0 UID: 0 PID: 17099 Comm: syz.4.4045 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1251.151877][T17099] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1251.151883][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1251.151893][T17099] Call Trace: [ 1251.151899][T17099] [ 1251.151906][T17099] dump_stack_lvl+0x100/0x190 [ 1251.151936][T17099] should_fail_ex.cold+0x5/0xa [ 1251.151956][T17099] should_failslab+0xc2/0x120 [ 1251.151980][T17099] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1251.152000][T17099] ? create_filter_start.constprop.0+0x1c4/0x310 [ 1251.152024][T17099] ? __asan_memcpy+0x3c/0x60 [ 1251.152048][T17099] create_filter_start.constprop.0+0x1c4/0x310 [ 1251.152073][T17099] create_filter+0xb5/0x210 [ 1251.152103][T17099] ? __pfx_create_filter+0x10/0x10 [ 1251.152127][T17099] ? find_held_lock+0x2b/0x80 [ 1251.152145][T17099] apply_event_filter+0x220/0x500 [ 1251.152168][T17099] ? __pfx_apply_event_filter+0x10/0x10 [ 1251.152197][T17099] event_filter_write+0x16d/0x290 [ 1251.152215][T17099] vfs_write+0x2aa/0x1070 [ 1251.152238][T17099] ? __pfx_event_filter_write+0x10/0x10 [ 1251.152263][T17099] ? __pfx_vfs_write+0x10/0x10 [ 1251.152285][T17099] ? __fget_files+0x215/0x3d0 [ 1251.152313][T17099] ? __fget_files+0x21f/0x3d0 [ 1251.152341][T17099] ksys_write+0x12a/0x250 [ 1251.152363][T17099] ? __pfx_ksys_write+0x10/0x10 [ 1251.152392][T17099] do_syscall_64+0x106/0xf80 [ 1251.152409][T17099] ? clear_bhb_loop+0x40/0x90 [ 1251.152428][T17099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.152444][T17099] RIP: 0033:0x7f56a8b9c629 [ 1251.152458][T17099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1251.152474][T17099] RSP: 002b:00007f56a9a70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1251.152490][T17099] RAX: ffffffffffffffda RBX: 00007f56a8e15fa0 RCX: 00007f56a8b9c629 [ 1251.152500][T17099] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1251.152510][T17099] RBP: 00007f56a8c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1251.152518][T17099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1251.152527][T17099] R13: 00007f56a8e16038 R14: 00007f56a8e15fa0 R15: 00007ffc63690858 [ 1251.152548][T17099] [ 1251.503723][T17098] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4046'. [ 1251.765969][T22610] Bluetooth: hci1: command 0x0c1a tx timeout [ 1251.772091][T22610] Bluetooth: hci2: command 0x0c1a tx timeout [ 1251.876531][ T6213] Bluetooth: hci0: command 0x0c1a tx timeout [ 1251.939516][T17112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1251.975751][T17114] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4049'. [ 1251.984920][ T6213] Bluetooth: hci4: command 0x0c1a tx timeout [ 1252.038112][T17102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1252.088237][T17108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1252.127366][T17111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4049'. [ 1253.784478][T17125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1253.795151][T17125] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1253.843623][T17125] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1253.915081][T17125] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1254.506795][T17159] FAULT_INJECTION: forcing a failure. [ 1254.506795][T17159] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.600602][T17159] CPU: 0 UID: 0 PID: 17159 Comm: syz.3.4056 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1254.600631][T17159] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1254.600638][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1254.600648][T17159] Call Trace: [ 1254.600654][T17159] [ 1254.600661][T17159] dump_stack_lvl+0x100/0x190 [ 1254.600696][T17159] should_fail_ex.cold+0x5/0xa [ 1254.600716][T17159] should_failslab+0xc2/0x120 [ 1254.600732][T17159] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1254.600751][T17159] ? create_filter_start.constprop.0+0x1c4/0x310 [ 1254.600775][T17159] ? __asan_memcpy+0x3c/0x60 [ 1254.600797][T17159] create_filter_start.constprop.0+0x1c4/0x310 [ 1254.600822][T17159] create_filter+0xb5/0x210 [ 1254.600844][T17159] ? __pfx_create_filter+0x10/0x10 [ 1254.600868][T17159] ? find_held_lock+0x2b/0x80 [ 1254.600885][T17159] apply_event_filter+0x220/0x500 [ 1254.600907][T17159] ? __pfx_apply_event_filter+0x10/0x10 [ 1254.600935][T17159] event_filter_write+0x16d/0x290 [ 1254.600954][T17159] vfs_write+0x2aa/0x1070 [ 1254.600977][T17159] ? __pfx_event_filter_write+0x10/0x10 [ 1254.600996][T17159] ? __pfx_vfs_write+0x10/0x10 [ 1254.601017][T17159] ? __fget_files+0x215/0x3d0 [ 1254.601044][T17159] ? __fget_files+0x21f/0x3d0 [ 1254.601071][T17159] ksys_write+0x12a/0x250 [ 1254.601093][T17159] ? __pfx_ksys_write+0x10/0x10 [ 1254.601120][T17159] do_syscall_64+0x106/0xf80 [ 1254.601137][T17159] ? clear_bhb_loop+0x40/0x90 [ 1254.601156][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.601172][T17159] RIP: 0033:0x7feab799c629 [ 1254.601186][T17159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.601201][T17159] RSP: 002b:00007feab877e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1254.601217][T17159] RAX: ffffffffffffffda RBX: 00007feab7c15fa0 RCX: 00007feab799c629 [ 1254.601228][T17159] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1254.601237][T17159] RBP: 00007feab7a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1254.601246][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1254.601255][T17159] R13: 00007feab7c16038 R14: 00007feab7c15fa0 R15: 00007ffe4ba6a078 [ 1254.601275][T17159] [ 1255.839359][ T6213] Bluetooth: hci2: command 0x0c1a tx timeout [ 1255.845380][ T6213] Bluetooth: hci1: command 0x0c1a tx timeout [ 1255.899392][T22610] Bluetooth: hci0: command 0x0c1a tx timeout [ 1255.990363][T22610] Bluetooth: hci4: command 0x0c1a tx timeout [ 1256.584295][T17196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4063'. [ 1256.712231][T17187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4063'. [ 1256.759542][T17193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4063'. [ 1257.176535][T17210] FAULT_INJECTION: forcing a failure. [ 1257.176535][T17210] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.261655][T17210] CPU: 0 UID: 0 PID: 17210 Comm: syz.3.4067 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1257.261691][T17210] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1257.261698][T17210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1257.261708][T17210] Call Trace: [ 1257.261714][T17210] [ 1257.261721][T17210] dump_stack_lvl+0x100/0x190 [ 1257.261749][T17210] should_fail_ex.cold+0x5/0xa [ 1257.261769][T17210] should_failslab+0xc2/0x120 [ 1257.261785][T17210] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1257.261803][T17210] ? proc_self_get_link+0x189/0x1f0 [ 1257.261828][T17210] proc_self_get_link+0x189/0x1f0 [ 1257.261848][T17210] pick_link+0xac2/0x13c0 [ 1257.261868][T17210] ? __pfx_proc_self_get_link+0x10/0x10 [ 1257.261891][T17210] step_into_slowpath+0x9ba/0xf90 [ 1257.261916][T17210] ? __pfx_step_into_slowpath+0x10/0x10 [ 1257.261940][T17210] ? lookup_fast+0x2da/0x600 [ 1257.261958][T17210] ? inode_permission+0x374/0x620 [ 1257.261979][T17210] link_path_walk+0xf28/0x1cc0 [ 1257.262006][T17210] path_openat+0x1be/0x31a0 [ 1257.262020][T17210] ? kasan_save_stack+0x3f/0x50 [ 1257.262040][T17210] ? kasan_save_stack+0x30/0x50 [ 1257.262060][T17210] ? kasan_save_track+0x14/0x30 [ 1257.262080][T17210] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1257.262106][T17210] ? __pfx_path_openat+0x10/0x10 [ 1257.262127][T17210] do_file_open+0x20e/0x430 [ 1257.262143][T17210] ? __pfx_do_file_open+0x10/0x10 [ 1257.262188][T17210] ? alloc_fd+0x476/0x790 [ 1257.262214][T17210] ? do_getname+0x191/0x390 [ 1257.262234][T17210] do_sys_openat2+0x10d/0x1e0 [ 1257.262253][T17210] ? __pfx_do_sys_openat2+0x10/0x10 [ 1257.262278][T17210] __x64_sys_openat+0x12d/0x210 [ 1257.262297][T17210] ? __pfx___x64_sys_openat+0x10/0x10 [ 1257.262322][T17210] do_syscall_64+0x106/0xf80 [ 1257.262339][T17210] ? clear_bhb_loop+0x40/0x90 [ 1257.262357][T17210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.262374][T17210] RIP: 0033:0x7feab799c629 [ 1257.262388][T17210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.262403][T17210] RSP: 002b:00007feab877e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1257.262419][T17210] RAX: ffffffffffffffda RBX: 00007feab7c15fa0 RCX: 00007feab799c629 [ 1257.262429][T17210] RDX: 0000000000000201 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1257.262439][T17210] RBP: 00007feab7a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1257.262448][T17210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1257.262457][T17210] R13: 00007feab7c16038 R14: 00007feab7c15fa0 R15: 00007ffe4ba6a078 [ 1257.262479][T17210] [ 1258.110490][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1258.839853][T17286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4073'. [ 1259.246259][T17302] FAULT_INJECTION: forcing a failure. [ 1259.246259][T17302] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.440283][T17302] CPU: 0 UID: 0 PID: 17302 Comm: syz.3.4077 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1259.440313][T17302] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1259.440320][T17302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1259.440331][T17302] Call Trace: [ 1259.440337][T17302] [ 1259.440343][T17302] dump_stack_lvl+0x100/0x190 [ 1259.440371][T17302] should_fail_ex.cold+0x5/0xa [ 1259.440390][T17302] ? ops_init+0x77/0x5f0 [ 1259.440406][T17302] should_failslab+0xc2/0x120 [ 1259.440421][T17302] __kmalloc_noprof+0xe0/0x850 [ 1259.440442][T17302] ? mutex_init_lockep+0x110/0x150 [ 1259.440467][T17302] ops_init+0x77/0x5f0 [ 1259.440488][T17302] setup_net+0x118/0x3a0 [ 1259.440505][T17302] ? __pfx_setup_net+0x10/0x10 [ 1259.440521][T17302] ? lockdep_init_map_type+0x5c/0x250 [ 1259.440542][T17302] ? mutex_init_lockep+0x110/0x150 [ 1259.440565][T17302] copy_net_ns+0x46f/0x7c0 [ 1259.440588][T17302] create_new_namespaces+0x3ea/0xac0 [ 1259.440609][T17302] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1259.440626][T17302] ksys_unshare+0x455/0xab0 [ 1259.440646][T17302] ? __pfx_ksys_unshare+0x10/0x10 [ 1259.440672][T17302] __x64_sys_unshare+0x31/0x40 [ 1259.440689][T17302] do_syscall_64+0x106/0xf80 [ 1259.440706][T17302] ? clear_bhb_loop+0x40/0x90 [ 1259.440724][T17302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.440739][T17302] RIP: 0033:0x7feab799c629 [ 1259.440754][T17302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.440769][T17302] RSP: 002b:00007feab877e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1259.440785][T17302] RAX: ffffffffffffffda RBX: 00007feab7c15fa0 RCX: 00007feab799c629 [ 1259.440795][T17302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1259.440804][T17302] RBP: 00007feab7a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1259.440814][T17302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.440823][T17302] R13: 00007feab7c16038 R14: 00007feab7c15fa0 R15: 00007ffe4ba6a078 [ 1259.440843][T17302] [ 1259.873046][T17337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4078'. [ 1261.329866][T17420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4089'. [ 1261.424058][T17413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4089'. [ 1263.332945][ T29] audit: type=1804 audit(4294971739.667:32): pid=17465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4097" name="/newroot/418/file0" dev="tmpfs" ino=2241 res=1 errno=0 [ 1263.444051][T17454] zram0: detected capacity change from 8 to 0 [ 1263.495245][ T29] audit: type=1804 audit(4294971739.767:33): pid=17467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4097" name="/newroot/418/file0" dev="tmpfs" ino=2241 res=1 errno=0 [ 1264.184348][T17481] zswap: compressor not available [ 1264.560225][T17530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4101'. [ 1264.651733][T17518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4101'. [ 1264.668915][T17529] HfR: entered promiscuous mode [ 1264.799892][T17540] netlink: 'syz.4.4103': attribute type 4 has an invalid length. [ 1264.940233][T17540] netlink: 314 bytes leftover after parsing attributes in process `syz.4.4103'. [ 1265.428871][T17566] FAULT_INJECTION: forcing a failure. [ 1265.428871][T17566] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.542327][T17566] CPU: 0 UID: 0 PID: 17566 Comm: syz.2.4108 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1265.542358][T17566] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1265.542364][T17566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1265.542399][T17566] Call Trace: [ 1265.542405][T17566] [ 1265.542412][T17566] dump_stack_lvl+0x100/0x190 [ 1265.542441][T17566] should_fail_ex.cold+0x5/0xa [ 1265.542461][T17566] should_failslab+0xc2/0x120 [ 1265.542477][T17566] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1265.542503][T17566] ? create_filter_start.constprop.0+0x1c4/0x310 [ 1265.542529][T17566] ? __asan_memcpy+0x3c/0x60 [ 1265.542552][T17566] create_filter_start.constprop.0+0x1c4/0x310 [ 1265.542578][T17566] create_filter+0xb5/0x210 [ 1265.542601][T17566] ? __pfx_create_filter+0x10/0x10 [ 1265.542624][T17566] ? find_held_lock+0x2b/0x80 [ 1265.542642][T17566] apply_event_filter+0x220/0x500 [ 1265.542665][T17566] ? __pfx_apply_event_filter+0x10/0x10 [ 1265.542693][T17566] event_filter_write+0x16d/0x290 [ 1265.542711][T17566] vfs_write+0x2aa/0x1070 [ 1265.542734][T17566] ? __pfx_event_filter_write+0x10/0x10 [ 1265.542753][T17566] ? __pfx_vfs_write+0x10/0x10 [ 1265.542774][T17566] ? __fget_files+0x215/0x3d0 [ 1265.542801][T17566] ? __fget_files+0x21f/0x3d0 [ 1265.542828][T17566] ksys_write+0x12a/0x250 [ 1265.542849][T17566] ? __pfx_ksys_write+0x10/0x10 [ 1265.542877][T17566] do_syscall_64+0x106/0xf80 [ 1265.542893][T17566] ? clear_bhb_loop+0x40/0x90 [ 1265.542912][T17566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.542928][T17566] RIP: 0033:0x7feaeeb9c629 [ 1265.542942][T17566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.542957][T17566] RSP: 002b:00007feaefa46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1265.542972][T17566] RAX: ffffffffffffffda RBX: 00007feaeee15fa0 RCX: 00007feaeeb9c629 [ 1265.542982][T17566] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1265.542992][T17566] RBP: 00007feaeec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1265.543001][T17566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.543010][T17566] R13: 00007feaeee16038 R14: 00007feaeee15fa0 R15: 00007ffe926183c8 [ 1265.543031][T17566] [ 1267.415526][T17635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1267.497545][T17630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1268.339512][T17648] zswap: compressor not available [ 1268.350062][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4122'. [ 1268.430960][T17659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4122'. [ 1268.994897][T17672] FAULT_INJECTION: forcing a failure. [ 1268.994897][T17672] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.078837][T17672] CPU: 0 UID: 0 PID: 17672 Comm: syz.4.4125 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1269.078868][T17672] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1269.078874][T17672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1269.078884][T17672] Call Trace: [ 1269.078891][T17672] [ 1269.078897][T17672] dump_stack_lvl+0x100/0x190 [ 1269.078925][T17672] should_fail_ex.cold+0x5/0xa [ 1269.078945][T17672] should_failslab+0xc2/0x120 [ 1269.078960][T17672] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1269.078979][T17672] ? create_filter_start.constprop.0+0x81/0x310 [ 1269.079004][T17672] ? rcu_is_watching+0x12/0xc0 [ 1269.079029][T17672] create_filter_start.constprop.0+0x81/0x310 [ 1269.079055][T17672] create_filter+0xb5/0x210 [ 1269.079077][T17672] ? __pfx_create_filter+0x10/0x10 [ 1269.079100][T17672] ? find_held_lock+0x2b/0x80 [ 1269.079117][T17672] apply_event_filter+0x220/0x500 [ 1269.079140][T17672] ? __pfx_apply_event_filter+0x10/0x10 [ 1269.079169][T17672] event_filter_write+0x16d/0x290 [ 1269.079187][T17672] vfs_write+0x2aa/0x1070 [ 1269.079210][T17672] ? __pfx_event_filter_write+0x10/0x10 [ 1269.079230][T17672] ? __pfx_vfs_write+0x10/0x10 [ 1269.079263][T17672] ? __fget_files+0x215/0x3d0 [ 1269.079290][T17672] ? __fget_files+0x21f/0x3d0 [ 1269.079318][T17672] ksys_write+0x12a/0x250 [ 1269.079341][T17672] ? __pfx_ksys_write+0x10/0x10 [ 1269.079368][T17672] do_syscall_64+0x106/0xf80 [ 1269.079385][T17672] ? clear_bhb_loop+0x40/0x90 [ 1269.079404][T17672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.079419][T17672] RIP: 0033:0x7f56a8b9c629 [ 1269.079434][T17672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.079449][T17672] RSP: 002b:00007f56a9a70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1269.079464][T17672] RAX: ffffffffffffffda RBX: 00007f56a8e15fa0 RCX: 00007f56a8b9c629 [ 1269.079477][T17672] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1269.079488][T17672] RBP: 00007f56a8c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1269.079497][T17672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.079505][T17672] R13: 00007f56a8e16038 R14: 00007f56a8e15fa0 R15: 00007ffc63690858 [ 1269.079526][T17672] [ 1270.192198][T17708] FAULT_INJECTION: forcing a failure. [ 1270.192198][T17708] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.367574][T17708] CPU: 0 UID: 0 PID: 17708 Comm: syz.2.4128 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1270.367604][T17708] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1270.367610][T17708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1270.367620][T17708] Call Trace: [ 1270.367626][T17708] [ 1270.367633][T17708] dump_stack_lvl+0x100/0x190 [ 1270.367661][T17708] should_fail_ex.cold+0x5/0xa [ 1270.367680][T17708] should_failslab+0xc2/0x120 [ 1270.367696][T17708] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1270.367715][T17708] ? sctp_endpoint_new+0xfc/0xb20 [ 1270.367733][T17708] ? __debug_object_init+0x2de/0x3d0 [ 1270.367757][T17708] sctp_endpoint_new+0xfc/0xb20 [ 1270.367777][T17708] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 1270.367795][T17708] ? lockdep_init_map_type+0x5c/0x250 [ 1270.367816][T17708] ? lockdep_init_map_type+0x5c/0x250 [ 1270.367838][T17708] sctp_init_sock+0xe2b/0x1300 [ 1270.367855][T17708] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 1270.367872][T17708] sctp_v6_init_sock+0x16/0x70 [ 1270.367887][T17708] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 1270.367904][T17708] inet6_create+0xb21/0x12b0 [ 1270.367922][T17708] ? inet6_create+0x7f/0x12b0 [ 1270.367940][T17708] __sock_create+0x339/0x860 [ 1270.367965][T17708] inet_ctl_sock_create+0x94/0x230 [ 1270.367987][T17708] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 1270.368007][T17708] ? timer_init_key+0x150/0x340 [ 1270.368027][T17708] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 1270.368042][T17708] sctp_ctrlsock_init+0x40/0xd0 [ 1270.368058][T17708] ops_init+0x1e2/0x5f0 [ 1270.368078][T17708] setup_net+0x118/0x3a0 [ 1270.368096][T17708] ? __pfx_setup_net+0x10/0x10 [ 1270.368113][T17708] ? lockdep_init_map_type+0x5c/0x250 [ 1270.368132][T17708] ? mutex_init_lockep+0x110/0x150 [ 1270.368155][T17708] copy_net_ns+0x46f/0x7c0 [ 1270.368176][T17708] create_new_namespaces+0x3ea/0xac0 [ 1270.368196][T17708] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1270.368214][T17708] ksys_unshare+0x455/0xab0 [ 1270.368234][T17708] ? __pfx_ksys_unshare+0x10/0x10 [ 1270.368260][T17708] __x64_sys_unshare+0x31/0x40 [ 1270.368277][T17708] do_syscall_64+0x106/0xf80 [ 1270.368293][T17708] ? clear_bhb_loop+0x40/0x90 [ 1270.368312][T17708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.368337][T17708] RIP: 0033:0x7feaeeb9c629 [ 1270.368352][T17708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.368367][T17708] RSP: 002b:00007feaefa46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1270.368382][T17708] RAX: ffffffffffffffda RBX: 00007feaeee15fa0 RCX: 00007feaeeb9c629 [ 1270.368392][T17708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1270.368401][T17708] RBP: 00007feaeec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1270.368410][T17708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.368419][T17708] R13: 00007feaeee16038 R14: 00007feaeee15fa0 R15: 00007ffe926183c8 [ 1270.368439][T17708] [ 1271.250157][T17710] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 1271.911779][T17737] ================================================================== [ 1271.911797][T17737] BUG: KASAN: use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 1271.911831][T17737] Read of size 256 at addr ffff8880849f23c0 by task syz.5.4130/17737 [ 1271.911845][T17737] [ 1271.911857][T17737] CPU: 0 UID: 0 PID: 17737 Comm: syz.5.4130 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1271.911881][T17737] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1271.911887][T17737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1271.911898][T17737] Call Trace: [ 1271.911904][T17737] [ 1271.911911][T17737] dump_stack_lvl+0x100/0x190 [ 1271.911933][T17737] print_report+0x156/0x4c9 [ 1271.911954][T17737] ? __virt_addr_valid+0x81/0x620 [ 1271.911972][T17737] ? __phys_addr+0xe8/0x180 [ 1271.911990][T17737] ? fbcon_prepare_logo+0x94e/0xc60 [ 1271.912010][T17737] kasan_report+0xdf/0x1e0 [ 1271.912025][T17737] ? fbcon_prepare_logo+0x94e/0xc60 [ 1271.912047][T17737] kasan_check_range+0x10f/0x1e0 [ 1271.912063][T17737] __asan_memcpy+0x23/0x60 [ 1271.912082][T17737] fbcon_prepare_logo+0x94e/0xc60 [ 1271.912106][T17737] fbcon_init+0x10a0/0x1820 [ 1271.912128][T17737] visual_init+0x320/0x620 [ 1271.912156][T17737] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1271.912176][T17737] store_bind+0x609/0x730 [ 1271.912193][T17737] ? __pfx_store_bind+0x10/0x10 [ 1271.912208][T17737] dev_attr_store+0x58/0x80 [ 1271.912229][T17737] ? __pfx_dev_attr_store+0x10/0x10 [ 1271.912251][T17737] sysfs_kf_write+0xf2/0x150 [ 1271.912268][T17737] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1271.912281][T17737] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1271.912298][T17737] iter_file_splice_write+0x830/0x10a0 [ 1271.912326][T17737] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1271.912350][T17737] ? __pfx_copy_splice_read+0x10/0x10 [ 1271.912376][T17737] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1271.912399][T17737] direct_splice_actor+0x192/0x6c0 [ 1271.912421][T17737] splice_direct_to_actor+0x345/0xa30 [ 1271.912444][T17737] ? __pfx_direct_splice_actor+0x10/0x10 [ 1271.912467][T17737] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1271.912492][T17737] do_splice_direct+0x174/0x240 [ 1271.912513][T17737] ? __pfx_do_splice_direct+0x10/0x10 [ 1271.912535][T17737] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1271.912558][T17737] ? rw_verify_area+0xce/0x6d0 [ 1271.912577][T17737] do_sendfile+0xadc/0xe20 [ 1271.912599][T17737] ? __pfx_do_sendfile+0x10/0x10 [ 1271.912620][T17737] ? __x64_sys_futex+0x34f/0x4d0 [ 1271.912638][T17737] ? __x64_sys_futex+0x358/0x4d0 [ 1271.912657][T17737] __x64_sys_sendfile64+0x1d8/0x220 [ 1271.912672][T17737] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1271.912690][T17737] do_syscall_64+0x106/0xf80 [ 1271.912707][T17737] ? clear_bhb_loop+0x40/0x90 [ 1271.912723][T17737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.912739][T17737] RIP: 0033:0x7f31e7b9c629 [ 1271.912753][T17737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.912768][T17737] RSP: 002b:00007f31e89f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1271.912784][T17737] RAX: ffffffffffffffda RBX: 00007f31e7e16450 RCX: 00007f31e7b9c629 [ 1271.912795][T17737] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000007 [ 1271.912805][T17737] RBP: 00007f31e7c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1271.912815][T17737] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1271.912824][T17737] R13: 00007f31e7e164e8 R14: 00007f31e7e16450 R15: 00007ffe2b42ef88 [ 1271.912839][T17737] [ 1271.912845][T17737] [ 1271.912850][T17737] The buggy address belongs to the physical page: [ 1271.912857][T17737] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880849f2200 pfn:0x849f2 [ 1271.912872][T17737] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1271.912885][T17737] page_type: f0(buddy) [ 1271.912899][T17737] raw: 00fff00000000000 ffffea000084b008 ffffea0000b1ff08 0000000000000000 [ 1271.912913][T17737] raw: ffff8880849f2200 0000000000000001 00000000f0000000 0000000000000000 [ 1271.912922][T17737] page dumped because: kasan: bad access detected [ 1271.912936][T17737] page_owner tracks the page as freed [ 1271.912942][T17737] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x10cc0(GFP_KERNEL|__GFP_NORETRY), pid 7518, tgid 7517 (syz.2.3193), ts 1002916465008, free_ts 1003368646697 [ 1271.912967][T17737] post_alloc_hook+0x153/0x170 [ 1271.912985][T17737] get_page_from_freelist+0x111d/0x3140 [ 1271.913004][T17737] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1271.913023][T17737] alloc_pages_mpol+0x1fb/0x550 [ 1271.913036][T17737] alloc_pages_noprof+0x131/0x390 [ 1271.913048][T17737] kimage_alloc_pages+0x72/0x380 [ 1271.913069][T17737] kimage_alloc_control_pages+0x157/0xa20 [ 1271.913083][T17737] do_kexec_load+0x275/0x810 [ 1271.913096][T17737] __x64_sys_kexec_load+0x1bf/0x230 [ 1271.913111][T17737] do_syscall_64+0x106/0xf80 [ 1271.913126][T17737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.913140][T17737] page last free pid 7518 tgid 7517 stack trace: [ 1271.913155][T17737] __free_frozen_pages+0x7e1/0x10d0 [ 1271.913171][T17737] kimage_free_page_list+0x130/0x240 [ 1271.913185][T17737] kimage_alloc_control_pages+0x3f2/0xa20 [ 1271.913199][T17737] do_kexec_load+0x275/0x810 [ 1271.913213][T17737] __x64_sys_kexec_load+0x1bf/0x230 [ 1271.913228][T17737] do_syscall_64+0x106/0xf80 [ 1271.913243][T17737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.913258][T17737] [ 1271.913262][T17737] Memory state around the buggy address: [ 1271.913270][T17737] ffff8880849f2280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1271.913280][T17737] ffff8880849f2300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1271.913291][T17737] >ffff8880849f2380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1271.913299][T17737] ^ [ 1271.913308][T17737] ffff8880849f2400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1271.913318][T17737] ffff8880849f2480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1271.913326][T17737] ================================================================== [ 1271.960484][T17737] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1271.960505][T17737] CPU: 0 UID: 0 PID: 17737 Comm: syz.5.4130 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1271.960531][T17737] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1271.960538][T17737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1271.960548][T17737] Call Trace: [ 1271.960554][T17737] [ 1271.960561][T17737] dump_stack_lvl+0x100/0x190 [ 1271.960588][T17737] vpanic+0x552/0x970 [ 1271.960604][T17737] ? __pfx_vpanic+0x10/0x10 [ 1271.960620][T17737] ? fbcon_prepare_logo+0x94e/0xc60 [ 1271.960642][T17737] panic+0xd1/0xe0 [ 1271.960656][T17737] ? __pfx_panic+0x10/0x10 [ 1271.960670][T17737] ? fbcon_prepare_logo+0x94e/0xc60 [ 1271.960691][T17737] ? preempt_schedule_common+0x42/0xc0 [ 1271.960710][T17737] check_panic_on_warn.cold+0x19/0x34 [ 1271.960726][T17737] end_report.part.0+0x3a/0x90 [ 1271.960747][T17737] kasan_report.cold+0xe/0x18 [ 1271.960767][T17737] ? fbcon_prepare_logo+0x94e/0xc60 [ 1271.960790][T17737] kasan_check_range+0x10f/0x1e0 [ 1271.960807][T17737] __asan_memcpy+0x23/0x60 [ 1271.960826][T17737] fbcon_prepare_logo+0x94e/0xc60 [ 1271.960850][T17737] fbcon_init+0x10a0/0x1820 [ 1271.960873][T17737] visual_init+0x320/0x620 [ 1271.960895][T17737] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1271.960914][T17737] store_bind+0x609/0x730 [ 1271.960931][T17737] ? __pfx_store_bind+0x10/0x10 [ 1271.960946][T17737] dev_attr_store+0x58/0x80 [ 1271.960968][T17737] ? __pfx_dev_attr_store+0x10/0x10 [ 1271.960989][T17737] sysfs_kf_write+0xf2/0x150 [ 1271.961007][T17737] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1271.961022][T17737] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1271.961040][T17737] iter_file_splice_write+0x830/0x10a0 [ 1271.961068][T17737] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1271.961093][T17737] ? __pfx_copy_splice_read+0x10/0x10 [ 1271.961122][T17737] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1271.961153][T17737] direct_splice_actor+0x192/0x6c0 [ 1271.961176][T17737] splice_direct_to_actor+0x345/0xa30 [ 1271.961200][T17737] ? __pfx_direct_splice_actor+0x10/0x10 [ 1271.961224][T17737] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1271.961249][T17737] do_splice_direct+0x174/0x240 [ 1271.961271][T17737] ? __pfx_do_splice_direct+0x10/0x10 [ 1271.961294][T17737] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1271.961318][T17737] ? rw_verify_area+0xce/0x6d0 [ 1271.961338][T17737] do_sendfile+0xadc/0xe20 [ 1271.961360][T17737] ? __pfx_do_sendfile+0x10/0x10 [ 1271.961382][T17737] ? __x64_sys_futex+0x34f/0x4d0 [ 1271.961401][T17737] ? __x64_sys_futex+0x358/0x4d0 [ 1271.961420][T17737] __x64_sys_sendfile64+0x1d8/0x220 [ 1271.961441][T17737] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1271.961460][T17737] do_syscall_64+0x106/0xf80 [ 1271.961476][T17737] ? clear_bhb_loop+0x40/0x90 [ 1271.961494][T17737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.961510][T17737] RIP: 0033:0x7f31e7b9c629 [ 1271.961526][T17737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.961542][T17737] RSP: 002b:00007f31e89f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1271.961558][T17737] RAX: ffffffffffffffda RBX: 00007f31e7e16450 RCX: 00007f31e7b9c629 [ 1271.961568][T17737] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000007 [ 1271.961578][T17737] RBP: 00007f31e7c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1271.961588][T17737] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1271.961597][T17737] R13: 00007f31e7e164e8 R14: 00007f31e7e16450 R15: 00007ffe2b42ef88 [ 1271.961613][T17737] [ 1271.961679][T17737] Kernel Offset: disabled