last executing test programs: 19m13.522361684s ago: executing program 3 (id=1243): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = fcntl$auto_F_DUPFD_CLOEXEC(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$auto_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) r1 = socket(0x2b, 0x80000, 0x200) r2 = prctl$auto_PR_SYS_DISPATCH_OFF(0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x8) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(r0, 0x40305824, &(0x7f00000000c0)={0xfffc, 0x59, 0x6, 0x7fff, 0x1, 0xffffffffffffffff}) sendmsg$auto_OVS_VPORT_CMD_NEW(r2, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000100)={0x79c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_OPTIONS={0x96, 0x4, 0x0, 0x1, [@typed={0xb, 0x136, 0x0, 0x0, @str='}$:\x01:(\x00'}, @generic="82c10e903c4629ab4981ab048cbe00332e7babc0a93f3810caa01acd212d881a9f870ca2d2068296823fa01c1a509ab67089f722769c2588266340f479be2738f199cdd58ca55bae1c0792525e950b926266022eb3851245e5482125d0f5fa680daa4c2a7d237801823d06d2452fca91837ccfaf6e8ce3386f37d1b2006351bbfbbd62571d2f"]}, @OVS_VPORT_ATTR_UPCALL_STATS={0x658, 0xa, 0x0, 0x1, [@generic, @nested={0x143, 0xc, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="cd3c89091036014e57ee979f22f47eff8377bb5de4d27c828786e090fb1f3d3b89dc4afe34f9ea1f39228d6a22d70da8e7d9d02f29aa45eb752e5733f40f20f8f00fc0246c7f8dd5086b6462c4a0944da9ba3fa81b4b9b34d4ed7f302d7542032ec8d8bb1a4916b371eea9f0ef6498931af6a4fc24f6d8461d749227ad86a78e7f9cb4f14e7e3830e41a8239ef21aa3b188f9a3d77b17f4633599cfbe71da5bbea9866fe5adc74ed3bde2c5de6c09706fcb7d55d50032ac35ead42bd", @generic="b8610cd05367515018a83b4c19ea6b89a2a315a321a1b9c77ae88bc93fa0fc34637c218663bfdc8b380c044bd18ec85145727c89da7206497f8e15c0b019845ba3c19ef6839425f38e192d301d146a188ddd5d35947c82a50d82667f72801c362f648313e632764c6ac142", @nested={0x4, 0x15}]}, @nested={0x2a3, 0xc0, 0x0, 0x1, [@generic="a77d6381568e9ac02e6cbe645d6a489aa04bfba49b9f4f1b8177d8ffaf3eb043717ba6f48b7f45fa5fe1ad2ad966034b3563b7579b8934394233e11059f00918b38aa4746a41085c6e06abe0e0ea9cf3ca24d4610237e45d01915cef05af2fa77082e9cc4717f20771467154c9bd205442ee63c375f639772237c1d2412724ebe78a4b83", @generic="32805459b95efa06fb7ee418201dde87e05a6df35fe0501529eceee869c8273c1caebcffdb6194b67f904ec5e2de69968d427298902b70eae5ca3f51c1636da535c1df4db2c6535befa5f6e8994ac51a12b27f14f86d9dfe615f9e745b044df35e8612cf7f20ca", @typed={0x4, 0xcd}, @generic="ad54c5c733265c04c427306ebe68469be44b1ab1c2336989f77cfba9476e6da049e9f8399343bd94ce1b04ef945d93112cc6f8018784869f8236e9bef8290d5fee6b6e8544c1bd6142e22a0cb13f829b4e0428b9fba75f5029545e166b054c692ac9d28f38c3c6d779abaa4b9b9820facbdc446f69fc758d340b9f0f4a10e3063707b3dc0db4645bd10b3c2d66cf661efd3204ffddabe3180ec100f00eabad783f2c63fe9a590dff321b73fd8e9c5802956f1f478465af44e1d8995565dabb70", @generic="2cf240c4292e933e2a6dee7b7415a828ed937fa73c10ed23ec1d052ea5ab074d3235b23530a3b55694b81a0f57c5dc482a3d9aa44a28c1023356e3dfa62dae95eef3ba12d57705065c488ac8ab092de2db88e340e16068e9ce6541fd6b8e726447e1e048d4a2", @nested={0x4, 0x123}, @generic="57d87fd187d6796a1fb44086146ce1d1f848a0426300c400d13e6a00c37763023dcc00721759ec8f9c57b7b52849ee1e22fa0fb21acf8fa2e8793c4b6555116c9512675ba0f4ac2324e6dabd6446dc4a180c2a23901f6e50133a158b10a9b575092f3843b3c5b1f264d6c1f8e4c0de94ea9a5e367c7477cd5c50a017ea9e9788b975ad75497e"]}, @nested={0x26c, 0x10c, 0x0, 0x1, [@generic="4c4fe3cbc76206f92260ddcdffa8cd1d0691473f70bf7dffe3b5e6f9f827d47433f267409e716961332e5b99123726f4de515d7d2ade79123a9b7a3e5b31e17697d102af57bae86ce2fd5ee018078eeb752a644809bd8187c4a6d6d4b0f2f6100199aa1f04cb36f72b81c7129e8d08f22783fa40d121ca6fde94e52bd8e61e61726915f33988c7a9b715aa0f13fb233897dcb686c2e904298cc2553793fe0128311765f7dc4406434b478893bbe1d3b40f9960a0d158073df49bbd555588f8914b56868ebac75d126c31fe0d3752cd0bc4a863fb4916a1a9b899", @typed={0x8, 0x126, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x13e, 0x0, 0x0, @pid=r5}, @generic="807e61d542c881b14ac19b182afe5335928351b6a55e0a264db5bff5d41d371cd1bbee3d60685d7ec237e07de6e3949798490cb29fb9e3e0a28dffefa904657894b17a04f52c603a3d2255d597f2f8870f36f3eba4505b64e9ee73a8a89ead34066ce82e8c1e119baa03a899540aed4488a4dd5fef81ab2b7416a37b1e1f44123064cbd7706f732ea5e15133d61a12b95285976fd90af00d47c309089e264dd098d3af564b8f8c05c81330a96210741ece7ddb024f8be56e595fe1e3805848b25f0de09a924b4f32cdd1e5896780a2976b892a4a4a5a370ac1effda9a376eaaded81d913cd08a4eadc63afb9932a5b9c", @generic="ee48006e39c84906a441a40e7de7aac8299f038e7b7169618753cbfcf89ef6c7e07981be0a26ed0051b4c0b7f021a409adb438060581d4d659489a991269219fba04c26e56a02314ad7c8fb1b19e2a914c235e36", @nested={0x4, 0x87}, @typed={0x8, 0xfb, 0x0, 0x0, @u32=0x5}, @generic="82f494fdf39d68f1a389b32c23558315391503c23d64ffdea392b28babb4706db392b8adc467cabf7784", @nested={0x4, 0xd6}]}]}, @OVS_VPORT_ATTR_NAME={0x5, 0x3, '\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x9}, @OVS_VPORT_ATTR_UPCALL_STATS={0x80, 0xa, 0x0, 0x1, [@generic="b61739cf1fa918235e7b3ece3bf752e0ba15ceffe3c6cab65d24486d46f43122c665a8df4c8ca5c0ef0b967c918aaa078ecf04173c76e38daffb4056caea323bd5c125299d5fbe4f5e8551d38eb84b1b2b3076c2a16e01396578134aaaa1bd51930923e4706404269e96d338bb918bd6", @typed={0xc, 0x110, 0x0, 0x0, @u64=0x3}]}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x79c}, 0x1, 0x0, 0x0, 0x2804}, 0x4000001) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000b80)="b3ad3ede582aa829e1a13356a30e0371971228d1cbe14fdc42524c45b607507f86078101ae32a092087d29c7c9e0ddffcec57df0cb0dc8a2f2bc34", 0x7) process_vm_readv$auto(r5, &(0x7f0000000c00)={&(0x7f0000000bc0)="69a52b25507a64cb71d5242bedfab7c3d9684e607380741a916e3967edcb0ba1d71ef8925bb3138807162f4ffe33e8f367556c3630204872", 0x8}, 0x5af83ac9, &(0x7f0000000d40)={&(0x7f0000000c40)="0bfd44b90f892b53b284238ac2b6bdc920eca99bee2a6fe3835b7059ba72cfe7a4541f1316c3e44e10a456e69a2a1eec565f1d1d331b94b65de47d5c17b6beaa6d9a87e03d46d0bffc3d09394c2a264e90570d89c773220213ba70189f7e046a2dc7172cebbbdbf28590cae9fbc51610720878415875714b8c18409c785a81ba9fa7868ef43281118afcb59f79f6663198a6e9a50f3d2aaf6e"}, 0xc211, 0x6) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x18, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000ec0)='ns/mnt\x00') sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4040040) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), r0) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x64, r7, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x9}, @NL80211_ATTR_BSSID={0x3d, 0xf5, "6da26b767beb1b7cf8291383d04713831913b253ea31d3eb81a3566fba796af67058355f09afedab8c982b1e11e7c0a529387b98566066791f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x40000) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001500)={{r2, &(0x7f00000011c0)="be08ec0a6b93bc8f677c71e4738810d442da44ea2e067b25040bdc06a22b596fc66f6c1ef8d4ccecb8ed33a92e7aba22", 0x4f, &(0x7f0000001200), 0x5, &(0x7f0000001300)="8ac513ae48b0c03c6191c5f8eafe08323892235cc3ff47af10ac14f389073051a11a3860a5115b390c575b11ed756c87c7eb3ef5758275eb0c48b3ffbde8bbc068f52182115b5375968372e27cd7abd77df33265e562aa8d998053d70509ea3f612c68ed2b9203bc7877191b5942126b8ac646a046e85fb76dca06991fa3f76f48d03f6ca3", &(0x7f00000013c0)=0x10001}, {[0x7, 0x7f, 0x8, 0x3]}, 0x1000, 0x1, &(0x7f0000001400)="314ef14f97ce1d3fba1b67d419e0bdd81deda942c0936b1e190e56f69a4aeeb4fec76c63b98467409ded0227f838b88bf03e2f6f03232efebae51f5edeee682236027f8d677c9e7966c952981185912bd822f686f896d8bf9283ed12f91ddb393acd915e54072f13c372e41f570e08ce8e4862903f67344f4d31d735320a11bea396fdd171d2d8414db07deff69bbed783d1e8f4979b2d183a5fb07c67324cbedbc48ae719d7bb91ee2f542841823c601625052692a00724e100228ce5076d49ea91eaa0294896f65afd3007b1db656a10748ca069666f866516edc092ab1502876b19833915824c58e7abcfb4"}) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000001580)='/dev/media6\x00', 0x2000, 0x0) rseq$auto(&(0x7f00000015c0)={0xf3a, 0xb, 0x1ff, 0x5, 0x7, 0x8, "3b2535d2dba965ec9b746e34f0ad98902328a57f98d558112d46464d44daa10b32d06703ec584c84796870e9902b7ee4b5e3fc56a6ac3c"}, 0xb6, 0x7, 0xff5e) setsockopt$auto_SO_RCVBUFFORCE(r8, 0x4, 0x21, &(0x7f0000001640)='&\'\xcf\x00', 0x0) r9 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000001680)=@bpf_attr_5={@target_fd=r6, r0, 0xb, 0xffffffff, r6, @relative_fd=r0, 0x6}, 0x1) mmap$auto(0x5, 0xa58b, 0x3, 0x1d, r10, 0x5) syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/mnt\x00') ioctl$auto_NS_GET_OWNER_UID(r9, 0xb704, 0x0) acct$auto(&(0x7f00000017c0)='/dev/media6\x00') 19m13.354167169s ago: executing program 3 (id=1247): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon8\x00', 0x0, 0x0) read$auto_mon_fops_binary_mon_bin(r1, 0x0, 0x2f) ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$auto(0x3, &(0x7f00000005c0)="9de3f224c05bc4b3e592f7cb4c886b2a2bc3f49d5e0017bde47c567d117f8814c3a154590af426bcc6", 0x9) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8003, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0) setfsuid$auto(0xee01) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd70941214f9274fcdb10000000000000002ff070004"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 19m12.930238958s ago: executing program 3 (id=1250): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/driver/serial\x00', 0x20000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x41, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x8000000000000004, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xc000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="aa069200", @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) pread64$auto(r0, &(0x7f00000000c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\xe4\x8a\x00\x00$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq\xf5\x9eP\xfcd\xd93\x9f%\r\x80/:\x87\xc3\x1c:;g\x18\xe5\xdeU#\xd2\xa8\x9a\xd8Yeo\xd9\x8f\xea\x12M#\x824\xa7\x95B\xc6\xb0\xf82\xf0Rp\x1b i\xa4p\xa7\xec\t\xc7}_\xd0\x8dy\x9b\xe1\x98\t\x9f\x90\xe4', 0x100003ffd, 0x6) 19m11.396785344s ago: executing program 3 (id=1259): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000280)='\t', 0x1) socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$auto(0x3, 0x0, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/libceph/parameters/supported_features\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000003940)=""/4119, 0x1017) 19m11.303448452s ago: executing program 3 (id=1261): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x400, 0x0) epoll_create$auto(0x20003f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) 19m10.778221834s ago: executing program 3 (id=1264): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = fcntl$auto_F_DUPFD_CLOEXEC(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$auto_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) r1 = socket(0x2b, 0x80000, 0x200) r2 = prctl$auto_PR_SYS_DISPATCH_OFF(0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x8) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(r0, 0x40305824, &(0x7f00000000c0)={0xfffc, 0x59, 0x6, 0x7fff, 0x1, 0xffffffffffffffff}) sendmsg$auto_OVS_VPORT_CMD_NEW(r2, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000100)={0x79c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_OPTIONS={0x96, 0x4, 0x0, 0x1, [@typed={0xb, 0x136, 0x0, 0x0, @str='}$:\x01:(\x00'}, @generic="82c10e903c4629ab4981ab048cbe00332e7babc0a93f3810caa01acd212d881a9f870ca2d2068296823fa01c1a509ab67089f722769c2588266340f479be2738f199cdd58ca55bae1c0792525e950b926266022eb3851245e5482125d0f5fa680daa4c2a7d237801823d06d2452fca91837ccfaf6e8ce3386f37d1b2006351bbfbbd62571d2f"]}, @OVS_VPORT_ATTR_UPCALL_STATS={0x658, 0xa, 0x0, 0x1, [@generic, @nested={0x143, 0xc, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="cd3c89091036014e57ee979f22f47eff8377bb5de4d27c828786e090fb1f3d3b89dc4afe34f9ea1f39228d6a22d70da8e7d9d02f29aa45eb752e5733f40f20f8f00fc0246c7f8dd5086b6462c4a0944da9ba3fa81b4b9b34d4ed7f302d7542032ec8d8bb1a4916b371eea9f0ef6498931af6a4fc24f6d8461d749227ad86a78e7f9cb4f14e7e3830e41a8239ef21aa3b188f9a3d77b17f4633599cfbe71da5bbea9866fe5adc74ed3bde2c5de6c09706fcb7d55d50032ac35ead42bd", @generic="b8610cd05367515018a83b4c19ea6b89a2a315a321a1b9c77ae88bc93fa0fc34637c218663bfdc8b380c044bd18ec85145727c89da7206497f8e15c0b019845ba3c19ef6839425f38e192d301d146a188ddd5d35947c82a50d82667f72801c362f648313e632764c6ac142", @nested={0x4, 0x15}]}, @nested={0x2a3, 0xc0, 0x0, 0x1, [@generic="a77d6381568e9ac02e6cbe645d6a489aa04bfba49b9f4f1b8177d8ffaf3eb043717ba6f48b7f45fa5fe1ad2ad966034b3563b7579b8934394233e11059f00918b38aa4746a41085c6e06abe0e0ea9cf3ca24d4610237e45d01915cef05af2fa77082e9cc4717f20771467154c9bd205442ee63c375f639772237c1d2412724ebe78a4b83", @generic="32805459b95efa06fb7ee418201dde87e05a6df35fe0501529eceee869c8273c1caebcffdb6194b67f904ec5e2de69968d427298902b70eae5ca3f51c1636da535c1df4db2c6535befa5f6e8994ac51a12b27f14f86d9dfe615f9e745b044df35e8612cf7f20ca", @typed={0x4, 0xcd}, @generic="ad54c5c733265c04c427306ebe68469be44b1ab1c2336989f77cfba9476e6da049e9f8399343bd94ce1b04ef945d93112cc6f8018784869f8236e9bef8290d5fee6b6e8544c1bd6142e22a0cb13f829b4e0428b9fba75f5029545e166b054c692ac9d28f38c3c6d779abaa4b9b9820facbdc446f69fc758d340b9f0f4a10e3063707b3dc0db4645bd10b3c2d66cf661efd3204ffddabe3180ec100f00eabad783f2c63fe9a590dff321b73fd8e9c5802956f1f478465af44e1d8995565dabb70", @generic="2cf240c4292e933e2a6dee7b7415a828ed937fa73c10ed23ec1d052ea5ab074d3235b23530a3b55694b81a0f57c5dc482a3d9aa44a28c1023356e3dfa62dae95eef3ba12d57705065c488ac8ab092de2db88e340e16068e9ce6541fd6b8e726447e1e048d4a2", @nested={0x4, 0x123}, @generic="57d87fd187d6796a1fb44086146ce1d1f848a0426300c400d13e6a00c37763023dcc00721759ec8f9c57b7b52849ee1e22fa0fb21acf8fa2e8793c4b6555116c9512675ba0f4ac2324e6dabd6446dc4a180c2a23901f6e50133a158b10a9b575092f3843b3c5b1f264d6c1f8e4c0de94ea9a5e367c7477cd5c50a017ea9e9788b975ad75497e"]}, @nested={0x26c, 0x10c, 0x0, 0x1, [@generic="4c4fe3cbc76206f92260ddcdffa8cd1d0691473f70bf7dffe3b5e6f9f827d47433f267409e716961332e5b99123726f4de515d7d2ade79123a9b7a3e5b31e17697d102af57bae86ce2fd5ee018078eeb752a644809bd8187c4a6d6d4b0f2f6100199aa1f04cb36f72b81c7129e8d08f22783fa40d121ca6fde94e52bd8e61e61726915f33988c7a9b715aa0f13fb233897dcb686c2e904298cc2553793fe0128311765f7dc4406434b478893bbe1d3b40f9960a0d158073df49bbd555588f8914b56868ebac75d126c31fe0d3752cd0bc4a863fb4916a1a9b899", @typed={0x8, 0x126, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x13e, 0x0, 0x0, @pid=r5}, @generic="807e61d542c881b14ac19b182afe5335928351b6a55e0a264db5bff5d41d371cd1bbee3d60685d7ec237e07de6e3949798490cb29fb9e3e0a28dffefa904657894b17a04f52c603a3d2255d597f2f8870f36f3eba4505b64e9ee73a8a89ead34066ce82e8c1e119baa03a899540aed4488a4dd5fef81ab2b7416a37b1e1f44123064cbd7706f732ea5e15133d61a12b95285976fd90af00d47c309089e264dd098d3af564b8f8c05c81330a96210741ece7ddb024f8be56e595fe1e3805848b25f0de09a924b4f32cdd1e5896780a2976b892a4a4a5a370ac1effda9a376eaaded81d913cd08a4eadc63afb9932a5b9c", @generic="ee48006e39c84906a441a40e7de7aac8299f038e7b7169618753cbfcf89ef6c7e07981be0a26ed0051b4c0b7f021a409adb438060581d4d659489a991269219fba04c26e56a02314ad7c8fb1b19e2a914c235e36", @nested={0x4, 0x87}, @typed={0x8, 0xfb, 0x0, 0x0, @u32=0x5}, @generic="82f494fdf39d68f1a389b32c23558315391503c23d64ffdea392b28babb4706db392b8adc467cabf7784", @nested={0x4, 0xd6}]}]}, @OVS_VPORT_ATTR_NAME={0x5, 0x3, '\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x9}, @OVS_VPORT_ATTR_UPCALL_STATS={0x80, 0xa, 0x0, 0x1, [@generic="b61739cf1fa918235e7b3ece3bf752e0ba15ceffe3c6cab65d24486d46f43122c665a8df4c8ca5c0ef0b967c918aaa078ecf04173c76e38daffb4056caea323bd5c125299d5fbe4f5e8551d38eb84b1b2b3076c2a16e01396578134aaaa1bd51930923e4706404269e96d338bb918bd6", @typed={0xc, 0x110, 0x0, 0x0, @u64=0x3}]}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x79c}, 0x1, 0x0, 0x0, 0x2804}, 0x4000001) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000b80)="b3ad3ede582aa829e1a13356a30e0371971228d1cbe14fdc42524c45b607507f86078101ae32a092087d29c7c9e0ddffcec57df0cb0dc8a2f2bc34", 0x7) process_vm_readv$auto(r5, &(0x7f0000000c00)={&(0x7f0000000bc0)="69a52b25507a64cb71d5242bedfab7c3d9684e607380741a916e3967edcb0ba1d71ef8925bb3138807162f4ffe33e8f367556c3630204872", 0x8}, 0x5af83ac9, &(0x7f0000000d40)={&(0x7f0000000c40)="0bfd44b90f892b53b284238ac2b6bdc920eca99bee2a6fe3835b7059ba72cfe7a4541f1316c3e44e10a456e69a2a1eec565f1d1d331b94b65de47d5c17b6beaa6d9a87e03d46d0bffc3d09394c2a264e90570d89c773220213ba70189f7e046a2dc7172cebbbdbf28590cae9fbc51610720878415875714b8c18409c785a81ba9fa7868ef43281118afcb59f79f6663198a6e9a50f3d2aaf6eb1350157b960504a92f4e3bdf4c1bd4921b27b370e4861"}, 0xc211, 0x6) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x18, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000ec0)='ns/mnt\x00') sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4040040) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), r0) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x64, r7, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x9}, @NL80211_ATTR_BSSID={0x3d, 0xf5, "6da26b767beb1b7cf8291383d04713831913b253ea31d3eb81a3566fba796af67058355f09afedab8c982b1e11e7c0a529387b98566066791f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x40000) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001500)={{r2, &(0x7f00000011c0)="be08ec0a6b93bc8f677c71e4738810d442da44ea2e067b25040bdc06a22b596fc66f6c1ef8d4ccecb8ed33a92e7aba22", 0x4f, &(0x7f0000001200), 0x5, &(0x7f0000001300)="8ac513ae48b0c03c6191c5f8eafe08323892235cc3ff47af10ac14f389073051a11a3860a5115b390c575b11ed756c87c7eb3ef5758275eb0c48b3ffbde8bbc068f52182115b5375968372e27cd7abd77df33265e562aa8d998053d70509ea3f612c68ed2b9203bc7877191b5942126b8ac646a046e85fb76dca06991fa3f76f48d03f6ca3", &(0x7f00000013c0)=0x10001}, {[0x7, 0x7f, 0x8, 0x3]}, 0x1000, 0x1, &(0x7f0000001400)="314ef14f97ce1d3fba1b67d419e0bdd81deda942c0936b1e190e56f69a4aeeb4fec76c63b98467409ded0227f838b88bf03e2f6f03232efebae51f5edeee682236027f8d677c9e7966c952981185912bd822f686f896d8bf9283ed12f91ddb393acd915e54072f13c372e41f570e08ce8e4862903f67344f4d31d735320a11bea396fdd171d2d8414db07deff69bbed783d1e8f4979b2d183a5fb07c67324cbedbc48ae719d7bb91ee2f542841823c601625052692a00724e100228ce5076d49ea91eaa0294896f65afd3007b1db656a10748ca069666f866516edc092ab1502876b19833915824c58e7abcfb4"}) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000001580)='/dev/media6\x00', 0x2000, 0x0) rseq$auto(&(0x7f00000015c0)={0xf3a, 0xb, 0x1ff, 0x5, 0x7, 0x8, "3b2535d2dba965ec9b746e34f0ad98902328a57f98d558112d46464d44daa10b32d06703ec584c84796870e9902b7ee4b5e3fc56a6ac3c"}, 0xb6, 0x7, 0xff5e) setsockopt$auto_SO_RCVBUFFORCE(r8, 0x4, 0x21, &(0x7f0000001640)='&\'\xcf\x00', 0x0) r9 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000001680)=@bpf_attr_5={@target_fd=r6, r0, 0xb, 0xffffffff, r6, @relative_fd=r0, 0x6}, 0x1) mmap$auto(0x5, 0xa58b, 0x3, 0x1d, r10, 0x5) syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/mnt\x00') ioctl$auto_NS_GET_OWNER_UID(r9, 0xb704, 0x0) acct$auto(&(0x7f00000017c0)='/dev/media6\x00') 18m55.595744113s ago: executing program 32 (id=1264): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = fcntl$auto_F_DUPFD_CLOEXEC(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$auto_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) r1 = socket(0x2b, 0x80000, 0x200) r2 = prctl$auto_PR_SYS_DISPATCH_OFF(0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x8) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(r0, 0x40305824, &(0x7f00000000c0)={0xfffc, 0x59, 0x6, 0x7fff, 0x1, 0xffffffffffffffff}) sendmsg$auto_OVS_VPORT_CMD_NEW(r2, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000100)={0x79c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_OPTIONS={0x96, 0x4, 0x0, 0x1, [@typed={0xb, 0x136, 0x0, 0x0, @str='}$:\x01:(\x00'}, @generic="82c10e903c4629ab4981ab048cbe00332e7babc0a93f3810caa01acd212d881a9f870ca2d2068296823fa01c1a509ab67089f722769c2588266340f479be2738f199cdd58ca55bae1c0792525e950b926266022eb3851245e5482125d0f5fa680daa4c2a7d237801823d06d2452fca91837ccfaf6e8ce3386f37d1b2006351bbfbbd62571d2f"]}, @OVS_VPORT_ATTR_UPCALL_STATS={0x658, 0xa, 0x0, 0x1, [@generic, @nested={0x143, 0xc, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="cd3c89091036014e57ee979f22f47eff8377bb5de4d27c828786e090fb1f3d3b89dc4afe34f9ea1f39228d6a22d70da8e7d9d02f29aa45eb752e5733f40f20f8f00fc0246c7f8dd5086b6462c4a0944da9ba3fa81b4b9b34d4ed7f302d7542032ec8d8bb1a4916b371eea9f0ef6498931af6a4fc24f6d8461d749227ad86a78e7f9cb4f14e7e3830e41a8239ef21aa3b188f9a3d77b17f4633599cfbe71da5bbea9866fe5adc74ed3bde2c5de6c09706fcb7d55d50032ac35ead42bd", @generic="b8610cd05367515018a83b4c19ea6b89a2a315a321a1b9c77ae88bc93fa0fc34637c218663bfdc8b380c044bd18ec85145727c89da7206497f8e15c0b019845ba3c19ef6839425f38e192d301d146a188ddd5d35947c82a50d82667f72801c362f648313e632764c6ac142", @nested={0x4, 0x15}]}, @nested={0x2a3, 0xc0, 0x0, 0x1, [@generic="a77d6381568e9ac02e6cbe645d6a489aa04bfba49b9f4f1b8177d8ffaf3eb043717ba6f48b7f45fa5fe1ad2ad966034b3563b7579b8934394233e11059f00918b38aa4746a41085c6e06abe0e0ea9cf3ca24d4610237e45d01915cef05af2fa77082e9cc4717f20771467154c9bd205442ee63c375f639772237c1d2412724ebe78a4b83", @generic="32805459b95efa06fb7ee418201dde87e05a6df35fe0501529eceee869c8273c1caebcffdb6194b67f904ec5e2de69968d427298902b70eae5ca3f51c1636da535c1df4db2c6535befa5f6e8994ac51a12b27f14f86d9dfe615f9e745b044df35e8612cf7f20ca", @typed={0x4, 0xcd}, @generic="ad54c5c733265c04c427306ebe68469be44b1ab1c2336989f77cfba9476e6da049e9f8399343bd94ce1b04ef945d93112cc6f8018784869f8236e9bef8290d5fee6b6e8544c1bd6142e22a0cb13f829b4e0428b9fba75f5029545e166b054c692ac9d28f38c3c6d779abaa4b9b9820facbdc446f69fc758d340b9f0f4a10e3063707b3dc0db4645bd10b3c2d66cf661efd3204ffddabe3180ec100f00eabad783f2c63fe9a590dff321b73fd8e9c5802956f1f478465af44e1d8995565dabb70", @generic="2cf240c4292e933e2a6dee7b7415a828ed937fa73c10ed23ec1d052ea5ab074d3235b23530a3b55694b81a0f57c5dc482a3d9aa44a28c1023356e3dfa62dae95eef3ba12d57705065c488ac8ab092de2db88e340e16068e9ce6541fd6b8e726447e1e048d4a2", @nested={0x4, 0x123}, @generic="57d87fd187d6796a1fb44086146ce1d1f848a0426300c400d13e6a00c37763023dcc00721759ec8f9c57b7b52849ee1e22fa0fb21acf8fa2e8793c4b6555116c9512675ba0f4ac2324e6dabd6446dc4a180c2a23901f6e50133a158b10a9b575092f3843b3c5b1f264d6c1f8e4c0de94ea9a5e367c7477cd5c50a017ea9e9788b975ad75497e"]}, @nested={0x26c, 0x10c, 0x0, 0x1, [@generic="4c4fe3cbc76206f92260ddcdffa8cd1d0691473f70bf7dffe3b5e6f9f827d47433f267409e716961332e5b99123726f4de515d7d2ade79123a9b7a3e5b31e17697d102af57bae86ce2fd5ee018078eeb752a644809bd8187c4a6d6d4b0f2f6100199aa1f04cb36f72b81c7129e8d08f22783fa40d121ca6fde94e52bd8e61e61726915f33988c7a9b715aa0f13fb233897dcb686c2e904298cc2553793fe0128311765f7dc4406434b478893bbe1d3b40f9960a0d158073df49bbd555588f8914b56868ebac75d126c31fe0d3752cd0bc4a863fb4916a1a9b899", @typed={0x8, 0x126, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x13e, 0x0, 0x0, @pid=r5}, @generic="807e61d542c881b14ac19b182afe5335928351b6a55e0a264db5bff5d41d371cd1bbee3d60685d7ec237e07de6e3949798490cb29fb9e3e0a28dffefa904657894b17a04f52c603a3d2255d597f2f8870f36f3eba4505b64e9ee73a8a89ead34066ce82e8c1e119baa03a899540aed4488a4dd5fef81ab2b7416a37b1e1f44123064cbd7706f732ea5e15133d61a12b95285976fd90af00d47c309089e264dd098d3af564b8f8c05c81330a96210741ece7ddb024f8be56e595fe1e3805848b25f0de09a924b4f32cdd1e5896780a2976b892a4a4a5a370ac1effda9a376eaaded81d913cd08a4eadc63afb9932a5b9c", @generic="ee48006e39c84906a441a40e7de7aac8299f038e7b7169618753cbfcf89ef6c7e07981be0a26ed0051b4c0b7f021a409adb438060581d4d659489a991269219fba04c26e56a02314ad7c8fb1b19e2a914c235e36", @nested={0x4, 0x87}, @typed={0x8, 0xfb, 0x0, 0x0, @u32=0x5}, @generic="82f494fdf39d68f1a389b32c23558315391503c23d64ffdea392b28babb4706db392b8adc467cabf7784", @nested={0x4, 0xd6}]}]}, @OVS_VPORT_ATTR_NAME={0x5, 0x3, '\x00'}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x9}, @OVS_VPORT_ATTR_UPCALL_STATS={0x80, 0xa, 0x0, 0x1, [@generic="b61739cf1fa918235e7b3ece3bf752e0ba15ceffe3c6cab65d24486d46f43122c665a8df4c8ca5c0ef0b967c918aaa078ecf04173c76e38daffb4056caea323bd5c125299d5fbe4f5e8551d38eb84b1b2b3076c2a16e01396578134aaaa1bd51930923e4706404269e96d338bb918bd6", @typed={0xc, 0x110, 0x0, 0x0, @u64=0x3}]}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x79c}, 0x1, 0x0, 0x0, 0x2804}, 0x4000001) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000b80)="b3ad3ede582aa829e1a13356a30e0371971228d1cbe14fdc42524c45b607507f86078101ae32a092087d29c7c9e0ddffcec57df0cb0dc8a2f2bc34", 0x7) process_vm_readv$auto(r5, &(0x7f0000000c00)={&(0x7f0000000bc0)="69a52b25507a64cb71d5242bedfab7c3d9684e607380741a916e3967edcb0ba1d71ef8925bb3138807162f4ffe33e8f367556c3630204872", 0x8}, 0x5af83ac9, &(0x7f0000000d40)={&(0x7f0000000c40)="0bfd44b90f892b53b284238ac2b6bdc920eca99bee2a6fe3835b7059ba72cfe7a4541f1316c3e44e10a456e69a2a1eec565f1d1d331b94b65de47d5c17b6beaa6d9a87e03d46d0bffc3d09394c2a264e90570d89c773220213ba70189f7e046a2dc7172cebbbdbf28590cae9fbc51610720878415875714b8c18409c785a81ba9fa7868ef43281118afcb59f79f6663198a6e9a50f3d2aaf6eb1350157b960504a92f4e3bdf4c1bd4921b27b370e4861"}, 0xc211, 0x6) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x18, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000ec0)='ns/mnt\x00') sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4040040) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), r0) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x64, r7, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x9}, @NL80211_ATTR_BSSID={0x3d, 0xf5, "6da26b767beb1b7cf8291383d04713831913b253ea31d3eb81a3566fba796af67058355f09afedab8c982b1e11e7c0a529387b98566066791f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x40000) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001500)={{r2, &(0x7f00000011c0)="be08ec0a6b93bc8f677c71e4738810d442da44ea2e067b25040bdc06a22b596fc66f6c1ef8d4ccecb8ed33a92e7aba22", 0x4f, &(0x7f0000001200), 0x5, &(0x7f0000001300)="8ac513ae48b0c03c6191c5f8eafe08323892235cc3ff47af10ac14f389073051a11a3860a5115b390c575b11ed756c87c7eb3ef5758275eb0c48b3ffbde8bbc068f52182115b5375968372e27cd7abd77df33265e562aa8d998053d70509ea3f612c68ed2b9203bc7877191b5942126b8ac646a046e85fb76dca06991fa3f76f48d03f6ca3", &(0x7f00000013c0)=0x10001}, {[0x7, 0x7f, 0x8, 0x3]}, 0x1000, 0x1, &(0x7f0000001400)="314ef14f97ce1d3fba1b67d419e0bdd81deda942c0936b1e190e56f69a4aeeb4fec76c63b98467409ded0227f838b88bf03e2f6f03232efebae51f5edeee682236027f8d677c9e7966c952981185912bd822f686f896d8bf9283ed12f91ddb393acd915e54072f13c372e41f570e08ce8e4862903f67344f4d31d735320a11bea396fdd171d2d8414db07deff69bbed783d1e8f4979b2d183a5fb07c67324cbedbc48ae719d7bb91ee2f542841823c601625052692a00724e100228ce5076d49ea91eaa0294896f65afd3007b1db656a10748ca069666f866516edc092ab1502876b19833915824c58e7abcfb4"}) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000001580)='/dev/media6\x00', 0x2000, 0x0) rseq$auto(&(0x7f00000015c0)={0xf3a, 0xb, 0x1ff, 0x5, 0x7, 0x8, "3b2535d2dba965ec9b746e34f0ad98902328a57f98d558112d46464d44daa10b32d06703ec584c84796870e9902b7ee4b5e3fc56a6ac3c"}, 0xb6, 0x7, 0xff5e) setsockopt$auto_SO_RCVBUFFORCE(r8, 0x4, 0x21, &(0x7f0000001640)='&\'\xcf\x00', 0x0) r9 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000001680)=@bpf_attr_5={@target_fd=r6, r0, 0xb, 0xffffffff, r6, @relative_fd=r0, 0x6}, 0x1) mmap$auto(0x5, 0xa58b, 0x3, 0x1d, r10, 0x5) syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/mnt\x00') ioctl$auto_NS_GET_OWNER_UID(r9, 0xb704, 0x0) acct$auto(&(0x7f00000017c0)='/dev/media6\x00') 2m55.982980237s ago: executing program 1 (id=5510): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', &(0x7f0000001cc0)='\x00', 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async, rerun: 64) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000000040)='^\xdf\x00', &(0x7f0000000080)='{[.\\]\x00', &(0x7f0000000100)="12a7d85900987a21ad01e1b0f571e59d3c108fe76099907ca69851c3096f1e7b28d258f149f2677cc1e8da", 0x7, 0xfffffffffffffffc) (rerun: 64) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x1000) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) io_uring_register$auto(0x2, 0x1e, 0x0, 0x1) (rerun: 64) sendfile$auto(r0, r0, 0x0, 0x71) (async) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) 2m55.791225488s ago: executing program 1 (id=5512): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0x7f, 0x0, 0x8000000000008000, 0x2}, 0x4}, 0x800008, 0x8) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) mlock$auto(0x100000001, 0xfffffff7fffffff8) r0 = socket(0xa, 0x801, 0x84) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x20942, 0x0) time$auto(0x0) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) listen$auto(0x3, 0x400000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='5', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0) writev$auto(r3, &(0x7f00000002c0)={&(0x7f0000000480)="3472517ba6", 0x5}, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) quotactl$auto(0x9, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0xee01, &(0x7f0000000300)="5f865082dea48a5120697f1dfdfa25db5140bcc1c80a4f634aef6ed739ad5affcd6f11ed4a2e1dee4629f12a309107c8b5e85c181b27ff528bafd3812dd61942749b4248a7036e5274710b58c36fe105369e60270fd2f140dbfe94955295d1e21c7769b2b0b95f2f1be3a3b7ea4b3be9d5956d567fb43d3d00d42dd5bec3a6ac6415813c95e04dc443356fda27596f3f4d6f8341ed7db017854aca8dcc9de3ccdaed1427c6d2ed8649ed3aed4e4396f34302073707b5fb9575491eb59771f1a66bb0cdfa0807ab") execveat$auto(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x10000) getsockopt$auto(r0, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040004) mmap$auto(0x0, 0x7, 0xffffffff, 0x9b7f, 0x2, 0x20000000000002) getpgrp(0x0) prctl$auto_PR_SET_MEMORY_MERGE(0x43, 0x1, 0x7, 0x16e7, 0x92e) epoll_create$auto(0x20009) mmap$auto(0x0, 0x5, 0x2, 0x91, 0x401, 0x300000000000) 2m55.616810435s ago: executing program 1 (id=5514): socket(0x2, 0x5, 0x106) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socket(0x2, 0x801, 0x106) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00a'], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x7) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x5) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeep\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_4={0x7, r5, 0x5, r5}, 0x92) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) socket(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x20008804) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000280)=0x0) sendto$auto(r7, &(0x7f0000000180)="b03188399fe6c630a0e6e9b47e7cdf95ed6db3740c77c6e4de1bba028e746f6e53b45fe99e1671935cd1bf714c986cf5e0b12652266aaeb0a487c221e7a3986a1335b52576ce78ed4aac413528c30f05de3e549aa4743b3599b036e373822e6f7d1bd0e621f1d1", 0x8000000000000000, 0x7, &(0x7f0000000300)=@nfc={0x27, r8, 0x0, 0x1}, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x121802, 0x0) 2m54.807351179s ago: executing program 1 (id=5521): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x1c5082, 0x18) open_by_handle_at$auto(r0, &(0x7f0000000140)={0x8, 0x30001, "b190a905237d4b53"}, 0x42) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) r1 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_SNDRV_PCM_IOCTL_DROP2(0xffffffffffffffff, 0x4143, 0x0) prctl$auto(0x403e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a3, 0x7000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, r1, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x1, 0x106) bind$auto(0x3, 0x0, 0x69) connect$auto(0x3, 0x0, 0x54) connect$auto(r2, &(0x7f0000000080)=@l2tp={0x2, 0x0, @remote, 0x2}, 0x8) madvise$auto(0x0, 0x2003f0, 0x17) 2m54.255086555s ago: executing program 1 (id=5525): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/mm/ksm/pages_skipped\x00', 0x40c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000800)=""/184, 0xb8) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0x7f, 0x0, 0x8000000000008000, 0x2}, 0x4}, 0x800008, 0x8) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) mlock$auto(0x100000001, 0xfffffff7fffffff8) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) getsockopt$auto(r1, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040004) mmap$auto(0x0, 0x7, 0xffffffff, 0x9b7f, 0x2, 0x20000000000002) getpgrp(0x0) prctl$auto_PR_SET_MEMORY_MERGE(0x43, 0x1, 0x7, 0x16e7, 0x92e) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) epoll_create$auto(0x20009) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socket(0x2, 0xa, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 2m54.045503103s ago: executing program 1 (id=5527): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) 2m38.544710966s ago: executing program 33 (id=5527): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) 2m4.21061284s ago: executing program 0 (id=5787): r0 = prctl$auto_PR_SET_SECCOMP(0x16, 0x6, 0x8, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_START_POLL(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x840141, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/veth0_to_bond/forwarding\x00', 0x2ae303, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x8, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x5408, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x480007d, 0x0) mmap$auto(0x0, 0x30009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x3, 0x8) 2m3.94877424s ago: executing program 0 (id=5790): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x10, 0x386, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x5, 0x7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/long_retry_limit\x00', 0x400, 0x0) read$auto_long_retry_limit_ops_(r1, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_clone(0x23926000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x1, 0x9) sysfs$auto(0x2, 0xd, 0x0) r2 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af24, r3) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000300)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86z\xb2\xfdI\x99\x00\x00\x00\x00 \x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x01\x00\x00\x00\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x3) read$auto_udf_dir_operations_udfdecl(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="77454f9c14ab8d8640b1631e985bee9c01e7869f6e88e853adb52f276a", @ANYRESOCT=r6, @ANYBLOB="bac130f84597e1f10500"/22, @ANYRES32=0x0, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) 2m3.469454013s ago: executing program 0 (id=5795): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) shutdown$auto(0x200000003, 0x2) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) link$auto(&(0x7f0000001200)='./file0\x00', 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', 0x0}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x80002, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r5, @ANYBLOB="1b0026bd7000fddbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r4], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/ubi/parameters/mtd\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000003480)=""/247, 0xf7) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) fcntl$auto(0x3, 0x400, 0x0) r8 = wait4$auto(0x0, &(0x7f0000000100)=0xc, 0x0, &(0x7f00000001c0)={{0xd, 0x9}, {0x10001, 0xfff}, 0xffffffffffffffff, 0xe8d, 0x3ff, 0xffffffffffffff01, 0x78, 0xa7a, 0x3, 0x1, 0x2, 0x1ff, 0xfffffffffffffff9, 0x4, 0x0, 0x4}) fcntl$auto(r7, 0x2, r8) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010037bd7000ffdbdf25100000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x20009, 0xe3, 0x200100000eb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) 2m2.863691981s ago: executing program 0 (id=5796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r1, 0x77bed28568c43d3b, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}]}, 0x30}, 0x1, 0x6000}, 0x80) 2m2.504829037s ago: executing program 0 (id=5799): socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r0, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x0, 0x15, 0x0, 0x28) 2m2.440477844s ago: executing program 0 (id=5800): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x83) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x2ab83, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000010, 0x400, 0x718c1257}]}) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x406a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_VRING_ENDIAN2(r2, 0x4008af13, &(0x7f0000000100)={0x7ff, 0x5}) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000000)=0xfffffff9) setuid$auto(0xe) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0xfd, 0x400008, 0xdd, 0x59ff, r1, 0x2) io_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m47.32437132s ago: executing program 34 (id=5800): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x83) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x2ab83, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000010, 0x400, 0x718c1257}]}) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x406a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_VRING_ENDIAN2(r2, 0x4008af13, &(0x7f0000000100)={0x7ff, 0x5}) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000000)=0xfffffff9) setuid$auto(0xe) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0xfd, 0x400008, 0xdd, 0x59ff, r1, 0x2) io_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.422239163s ago: executing program 4 (id=6359): io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x1000, 0x6, 0x1, 0xffffffff, 0xff35, 0xffffffffffffffff, [0x0, 0x0, 0x800000], {0x8, 0x1, 0x7, 0x6, 0x8000100, 0x7fff, 0x8000105, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x8, 0x52, 0x8, 0x47302, 0x3d, 0x8, 0x7, 0x8001}}) 5.219376547s ago: executing program 4 (id=6362): mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) getpid() ioctl$auto_BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) mmap$auto(0x0, 0x20009, 0x20000000007ff, 0x40000000000ebe, 0x401, 0x8000) socket(0x26, 0x2, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x200000000810008, 0xffb, 0x8000000008011, 0x3, 0x7ffe) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0x3f, 0xffffffffffffffff, 0x8004) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r2) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000003d00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000024c0)="a458f4e5e5f4bcc7fad26fd67f02b7cd05e6589800c28ef8f8202c09b2638f3653c6ed3b849812627a484d93e7ca38bb6c75b1d0f95ba576d7f2aba7a6e17d8a748fa2c2b65445121fdb006e371bc9da60cdd2378cf6a100a75f14aee91714b49cf0714f88fa5e59aae9bcf9c237ad19523f31da1c288cdf62813dd7d4d35f4f653b02ee9be0d662a5b8c4b2abd40ce043cd48819ea9eaa38e675e316b30542f9931634b3a830a7b54d420ab67826dddb406fed3bed2b77ecb0a7d4e2af6b59bab4910255fc1c235940b6f7f253131c3cd2ac263c02923997e0d75105d0d2cf679ea39a73b46233a7ae8e3bbfb0d80046e233f9d8c5560fe1c960668ebcbe0f83692592c77c17cd13221d12f7101576ebed9672885ab88780d1e19fac43722706ec0ba321cbad1a4655b89cf162edf24d1fefcae46d1249c3454cec842f32115775e6874e5cd7ded5dd35826f4cd5305cb3ef22976a7038ab5b6c2f47ab885ca72fac9790238d313859fab15b48ac55d1f572eedc5696e7699164709ec83e685df236a03296471157171e45fc876d86da156922a730e921b1db59737aa99d3c340400112561338a371d1046b32398ad4d770d08435561793bb629ea9c546540c8f54fed75b9e2e96a93bbbe986a8f4979193d7542319a3420287a1ac0a39444fc1abbf0a42bcff5cfa283d15f6c6e299a21abb3a375b3e1ddbb02e6159c9457952209b24c1bf943c54670ae8c2e47f56c96fddee1f2e1632fabde9bcd0bf1ae29eaa6cd2eba33477d8c8731f44173d7c9f6671a951d3e53e696f8f9879f9a974f7e2966e75142cda07e655b6d2eabea316f895785acf3bc931bf224e07110af85ec024d81e326efd5d258d42f731858bb0cb93c93b9030cb34b2a95e7844c018230d92b285d8cbe8bee6a92fd4243e53fa90f4635ecfdb49081d198b4146014cfc4419497fb921b2f61e23ce527374349012778e08f814df03867fee8247ee26c549c0597f94afc17d785b61e1725fa64bc12f1affe87e9117e71290bce5f75ad394817234f97c49fbc63a4d811719871c0a2d5db42d5f8ec45959a8464af57cca0566f6bd41d693f1fb5c96e4c6a6f97f50f459f7793e6046d1b535de78802b9fd9953dafe263ab3d693c0fee0283e70c610e2cfc0e3cb3854dd9d02d700eb666d80dadef740e5f274c2a8ba5fafe1898378022c3d51249710e4f4081b3e2f53670250d3ad7a06eeb02ee94505f7fc8d2c5e9a984a6ab7c1b761f517919a2f44c6bfeaf840c359627be82c08c5769921720bbd883aa74003d8dafec23f539b6b26205d931dcbd381c61430e58954ccd8bef6e8ff18243d769b9139e86d83ee72e5a8c7ac6dc0c997faf9b347947a40e7ef33686c2ee0b49d7c58148e4c8f73fcab6c5597f71feef03fc47db06955299b166bff481c71499fe92fde4e754db5ac71e1c8471ecd1d15fc9c48ce2d01fcdec9b8a9c4cd5d591f590a521dd39d3354e7e2750f7260fe89c02bb3bddd30f11be772eb95752246632df16474832514493cb6c50e8fc6b37dbc263cf970f0ab0d1221245082e91e90f55ad8354eb735038335b42e2571267b07cf71225010aab65145e443b50099b2bd4bfbf546a411e733e97d54db91e84448f966469b796425bbd144f83694b9e05b756fbba36cc6075ad8f30edb0847be6934482d6e19950af47db60a96ca5eef83faf4a1f628daa8dafc78cc2607fa0fcf6fc0ad00c64efb2c223c70bf7a8414c290d13793a5fc81b10a5bb5e8dd7ca2f81f5556d231bf2cfbf1923285aba060c1c88882107e14fddcaaf3eaea37a0bb7216050585c886b6c3fad247d85ccd458dfb746d3d0f6e517adf50a31fc96530950f186943de01ff77d98273875b727cfaf927820d52ee3a63fea63b2d39b1f2c6c2d985e62b96e4ec129207e488a2f91356ba91a8d8bd5b63718d087dfc183e56ceb924afae5f3a12d8c53bb21b8593965b1d68aa52ca985fa510d279ffc470468e3aec2d7524d80826a94e48a6ca4d11e5fc3d5776efc1a696b04c391c872eb2f42fcf6b84e6498f5d0520600f9f68a36d3c535b9d7cfc1d45415374adb90f1e6d300a99f2b5f6f77594c336ddc9b171c4875247201b05ab171a7d4418dcfffcee9996be2cd77e9d7e92965d28e1458df6d184ba7d9cd55d5994a00e692d7674f2ae01d6dd56c3e4b5aa1c0f27ae4c4cbbfe7289743b7c5f9ba7300891f4c83f414318e77de74d84d33b7f83c456e198b99d64e8b7caad5bcd618993764bb24178a990d736edf4965346c2ac76c99b22a5114ec39bc818d6a469b0d4f1aeaf955c14d7a3a5b787141d465a55d71b6138a8dc8cb1d303371c97d8479cb09545bf4a08fa99ab7ea21b3b3a95f4b052e261baf2be0131ce619ecd352904fc2486735edf6d2df283f1e2dae7432557bd8c899b397e769088797f337b3aa1867a9728148f9c63f643ce41f19906640e50764b1a6286beabe9f9e074ca60552f1212aad80b22cbbb45c6e6f00f51020df928756caa3cf374342257807d6daea4e74a79c6144fae4f78915303542b7a5d48a17179a4a43ab18631b06d81c01409277dac0d58ff48c86f679e9c0c56aa8ca6c7591078d6bee3ff9857e099145cf0775ef0ee006f9697e4c69efe0ff72543d70d8ac9faba1eec24ba9f9a3e30fa5d324ba137aaa7175a529c13a8fc321d92472c9b19c941e701f7225664b05613cb07b0705112105ab3c28b00af1b6f930f3d903ee6cc164d77d5d2a0b16667cfb6b329b53b30d8d9a826ba7430d519b1b7f537ed2df08845eb5df7737fe3554f3d96144b42bfd92cc5daab42446f3d46272a00f2457d39ef3e9ea37362d402f6287ea6f485f68ffbe383e21089c313171f6c33f8a7055299ab7cfc5d974c487d992cac1ca53c05c1e9bdb38f6ca0ed6d4e0d8ab7b6197fdd1b4b95e6a466c8d9336c571ea1743e96e0b88da75520b8adddcaa932336fa02f63ce1a7eb909507f778ca3b5f2a736f396528d06ea86f63d3e45f545d262cadd337d321023ae0e5052ba4c0028dbd19765b0097039a64d58a8998ef7afba341b42d6b227cad8f4c4025a766dee22a0cfde5f8c0581d4442a7aac906a0db5fad825611e487228aed5eec17f08d887a34d2b7c6c25f77412ee9941d5dec68a0464a1b0fd6eede1aa1b50579a93f205943dfd626204b9ca493c5aaececd17df71ac200cf7331a8bfbeddb6cd95b0b3016e56de0a9eeadf8d8c3591ae061e743f7c1ca4522bf55b2d80f3ba5df92d81433552dad6fd744ea71903b15a6374613b2a64a533cf6fa974273e7e5359f47428d7620d98d877faadad739a9a761713832ea70da990271b575e7cff075714d563b5b752ab50a7e1a1b5e689ff210503faabb37b8aa1d845825ab2488cfcb6a22010a55c4c045745f186ba8f42bc5a4dd06831da770670209ba568016459c50aef30c8aba754e341183817ad9b386e6b4e194cf66b76c9ea6313491d99d7e7a6d5c92bcec000c58794de2acfc4c490392a68f61e60bf664287e7020e4f30d897d916eb73dd4965b100f3c528cf2a46d43fca6351fc8c6c50fee04340b1f2fdf382a257eab0d964e7a2f0b1b7b9bc017117d8ebb40816b5515c88f7682c02b92b01d9fe884c963846f64800463830d83605a2ea32510dfbaaa29af264f60e8f72f307880f595715637dd799de8d77b0c7131bc04d44ce06b82a0f355e09e3d580124167e62fb12c584dc9553f3f91c86afffe6d871784c56c687b48b14bc974c65f18468eb3806be71c563a8af3075e4d9ff2c55ebab74ac4d384bc7f012dd39e373f74bab4ec597caa798112958890c00de56da95293e578490fb0e1e8fa63e1db877e75c7da1e394e37f8a971f7fe1354a800fff0c23aa66d990acf8fc7524d52a0c4f7b66459cb1811719afec92b7bd88e43569559f7f5fd41196c8ead0c70e13cb05b1155aab093a58b0d4652ce5ca005f868cf38fbefd401ddc9a747447ca6ea90b277688ef780461d14c5186b5a724cf50e5e3a7453e7ac4e79f07851317ae57911529daaa03d6745df50c78b868cb60757828b00d5215b8d67733e2ab1366afacbec2fae934460a1e364275715fc2fe5b911240d59d94084b3386d130c9f52d844858bd36c866b2ca215c02aaff1c4be7a5d2329e00e5ad58de3e87c862402ff5d3632b1f871461f57f6194057ccde4d1d4adc08b0da2778896aa95ef376c53818fafa74872e2f99af03edfe5e8d8e030816a01fa193007f84a627991f24f9054d0347082c2c27294d8bea1422b5847a3bfd2684f5708013d6f3c4d41baca139ebab799b0f2d15eeb4a5fd195b892d331bd1db3f0ec4ddc225e52ef8a326ccd4b86995bf90ceffd0a18d37806ee49d09f072ddab15df82556c459daf45705ebfd358c4eb7547add41da3364d90fcdd36759ebfeda88080a7f6d24ebb0e29e3a1b830e773a2c6d312472375b0428a221e03e2a1810a1c3cc8cde61e5359eefbb7324f4a6b04a2da87bce311a319ae8a842a518135750779d022b1a5321eb779d318d17387a7b7a739620594b090a2e550442c3debdc07a7a5283acc99539834c47ccf7635557a3066b81b32135df2e34c509dbf66dc0276e1e57977b45d77d41db78981883cf8ce8a738c04753911e957bf044e0bdbb1e9a72a7b5f884b61293e2f2756a32f6ef292a95e8484e101194a8c7e90f1e41fddf7d6af09dff5e308a2fbf5f0158d45bc87341ce3414c4b26cbc47ba43b2c2ad9ce6068df85d30fa994bf55cca9c327501c5335711988d3b4b5552c4fb9e9b6601a63cbb0a72ecdac3848ca4870814e0b8dee48a0ab5b14224c71f12cd648a3a39cba8e68f1562c1ad4966b7099015039518de65178c6a5e409166cc49d53b0f053773535421dfe289bd7c7fc2172dd4c5820ea3d2bbfd5bfd056a4d249a803440eada02f46e6fb9db13c74dad1303ca88b0a5091e196837eedd6a1dcd00e95fee39f252e3fb3afcb28d1db702bec482f19f7a5a327a522354e7bdbb3619697cd5c6e5b098b9a3c11478ef2b6467d22d0409e43bcb6552aaf47890c30077e56e77bfc53bc77fba63a324586f3172014b98dfac4ad686c83e611b89b1591a88dc4402d5cb60366455174cf0b84d0685454265a4a7d023b588ae491e6dac119433b2610170a8dc52a0c9f60cec85fe7fea415bf61e50c315b00c70a240a56345e1030731c4144d128e8dab606b1bda54874452af20ed7d6f3350b477417857884a6a6972b9696e92464b762da5739e400850df7ad82c63efb359d3a96b5a4a2f385432b6fa54c54a37678013d1774107b168b32225172d1081aa093def6e5ed6c05767128a4ebd0913ab03d200de072e81dbbc7b0c947ee3e34f6795211e632651852cb9cd7c2de1ef54d20ef625a193ed13061030c9a2e7f8c5674cbde924e25c8f97b6add0f4f89ef2b16ff418581aebd9f962f671a6adff28acf04edd01a96f69e0671780bdf40a19e9a3a235289771738cd32d1ef14509d11781d17608251fb7fa1b9d3c8646497ba0ce8890a2f0bd6e485959ceb8edf74981ef1c0ad7fc4f67bc4c941daef39fefbbdfa39979cf0e6454d565e8e90f8f4ac565a42dde87e16d4ad0977e1e67f88f560131ddaacc8a1f9db08441e6a9ddabae4b19441ef451ae9d9a854b193eb337d68830637f3ae81738bcc1a016077efe7692e146018b417d1199a14a79eecdcb00b0477f83627be935cc3a16a90b59b501d02be6091623c94f0fcf3e74616da0bbd767384c47fbe393c08", 0xff8) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) statmount$auto(0x0, &(0x7f00000009c0)={0xa, 0x929, 0x4001, 0x4000005, 0x4, 0x100717e, 0x3, 0xffffffff, 0x7, 0x7fd, 0xfffffffe, 0x80000004, 0x4, 0x200000000001, 0x3, 0xfffffffffffffffb, 0x8000000008, 0x0, 0x2, 0x9, 0x844, 0xc, 0x21fff, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, [0xa, 0x4, 0xffffffffffffffff, 0x0, 0x80000007, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe6559c7, 0x200000000000, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x62, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x100000000], "319721c64ccd121f020f6490bb9cf23be91049a104250c4f895d928a4f5550e89cded5e30543d13a3a43b527ee8bc544df84be8c0a8f3632003bfd77df1ef94a8a5fbeae68ec744ff3c764efb730637796ed877040559d8a0121"}, 0xa, 0xfffffffe) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r5, 0x40045566, 0xffffffffffffffff) unshare$auto(0x6a6) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) write$auto_proc_clear_refs_operations_internal(r0, &(0x7f0000000000)="73d6cc4fdf406742386dd72ff1428a506f5cd946a3", 0x15) 4.659597714s ago: executing program 4 (id=6365): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x280242, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)="f9a80b411df2e67f9416adb32e5f8ebe60") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) write$auto_ctl_device_fops_user(r1, &(0x7f0000000300)="0afcdf8eb0d50f1dbabf32062d9b3656d7691f92d3a6925d82b8fff1c24df86c272395d09d23aeaad0db6d154e2e41a384b81c367840632b70a433ed3debb564a91d165ebd91e9fa7b564fe5044878a78648bd53b59992bb6177b85bc34f7ffa2bcf61d2f52b1e4f", 0x68) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getsockopt$auto_SO_MEMINFO(r0, 0x84e0, 0x37, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_delete$auto(0x1) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) close_range$auto(0x0, 0x5, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0x14, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)={0x7}) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000000)) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x87, 0x9, 0xfffffffe) madvise$auto(0x0, 0x2003f2, 0x15) r5 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYRESHEX=r5], 0x3c}}, 0x24048084) 4.302953233s ago: executing program 2 (id=6368): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x12042, 0x0) ioctl$auto_TUNSETGROUP(r9, 0x400454ce, &(0x7f0000000240)=0x374) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001180)={0x1eb8, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1b0, 0x2, 0x0, 0x1, [@nested={0x28, 0x30, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xd1}, @nested={0x4, 0x13}, @typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@private0}]}, @generic="7b543a2288e807eb7762955da5ab9678afde7ab70d0bf61baea12915f6917890b13c3ad5ea8cf910622d2f94a524cbd2", @typed={0xc, 0x6b, 0x0, 0x0, @u64=0xa}, @nested={0xfb, 0xc, 0x0, 0x1, [@generic="a6a0b4e761dd34b693f6d9dccfa34ac00076588d3abeecd191797ff61aca28da0ae595439be36563dffdfc601369dfed3aad7303408e65f906acd74c45ec353f392abf7de1f2d8e4953975d3995588a4b6ba3db2470a946d1aae031a8aa030514cc57277e45ae71523771a101a6433f087c06476139dfbc25478111e7469f74881e508b37efe1e55b95c05264f09645a5e5bbee1c6f3d09624f8803994bd944dce4ff01e7b9f2b673b49ca3500d57511a8b17587522204d8f9d0ee4b0df717910a8db5a7e6a6a1c8aff8636e80a4b0f6f08ede56f123e93a2e753e06d685d0c1f4a5eda587d593df00f7c005c0976f434e5441e6029f28"]}, @typed={0x4, 0x73}, @generic="700283e7751b321c5fde2cbf8ddc04d0a7b6872051aae350a946c2f6275fd11bbb4289df18796fcf4d161392d2ba071242791d803d6be4b249e29b3944852011b04ddb51dadbe358"]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1782, 0x2, 0x0, 0x1, [@generic="d3096835a2124565", @generic="611b2a49467f66a79b7cf061b5e487eca39fb55eede05af846feb4bb3ac9bf8ed3e271579ace4453365c6e1d6c9059", @typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@local}, @generic="75e80d9627a7a68dbcb747e6a4b517fbeaa0c93b4aa4ab10bcdc35987205bd3d01a631314f1a38a5b439c0a7b1ccf9a59b35066a5583c84da70da2808379e9ed5cae0e7c5ed18c1095ef0d87de5a3a61cba7bfd397e18d20b2abcb3d59e3cc98d2207f49e09d17e3227301e58198e0b459e17de9721e853d4541f8cd71a6f5161463a435ee7234954d393c8476525b945e36c603f1d2f87b8fcbbac4b9d584c41045a30d15e896f27976ea93c717da0c4df828f6204c05900a944e57fd", @nested={0x4, 0x5f}, @typed={0x4, 0x12b}, @nested={0x3dc, 0x6c, 0x0, 0x1, [@generic="d7796198d8745fa11558b66dd97e2b4379f6fbb859ccbbe10b73dbddf32680dd7436ef1717dccf394aeb67ee2b97efaae68347b28895b8012a2d67927a4223bc140aa9a07926acaef41d06ec4cdf59e0b9bd995472e2762f6de7047e99932223ab6a4f89fac8efcfc3505681c70c3f893144c1464d535e05688681b7008877cfa3c5c693edeb583a1ab9597a8f098398aab89cbfd14de63c9316c4c4e2fb967653f0e4009d7d491365d0a71f53b60c449155fcfc5b4d464e5027f7747ebb673eb95364a9b040e170ee2d07d6358f91fa9291fa3deaf3855bbc9aef4482696e70c1ebed37ffb399cdf85135915202d3d3fdef734bb5438116", @typed={0x14, 0xeb, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @nested={0x2c7, 0x8, 0x0, 0x1, [@nested={0x14, 0x8c, 0x0, 0x1, [@nested={0x10, 0x115, 0x0, 0x1, [@typed={0x4, 0x1c}, @typed={0x8, 0x11d, 0x0, 0x0, @pid}]}]}, @nested={0x1a6, 0xa6, 0x0, 0x1, [@nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0xca}]}, @generic="701ded23689cf6635ce19bf2d09f456bde6ac8c937642f2f7cb0191a94dfc82418e76efc2e894e33e07d81007e6055ab9b5459b28aa9", @nested={0x164, 0x2f, 0x0, 0x1, [@typed={0x14, 0x113, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0xb, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x16}, @generic="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"]}]}, @typed={0xc, 0x115, 0x0, 0x0, @u64=0xffffffffffff8000}, @generic="088ffb9f9f7c0313a4623504b35b6a78a09104392876a6d663694d8f06cab7c83ea69d2dfc7de8d20b0a232806f5e99bfe126aecc84841af3930372f1d145bc5ab507a12415b297935d964a9b84a07167d09a1c013a28352c62aba7c055bce3b2a6a46423a3e5894c5909ca77895a405fa6bd9ca79b65c71901f31a7aee62e9f0379c93fd7f9102e0b789352e2dfaf5389eda1995e8a822d8f3b88831979cc8e00f7856659750a03810abc412fb5d3a63147681ccb546fd5b71c5d24c919bd3dbd9fcfa4ef36ddc0c896a5b031d95227d0014a408571df3cacb893ec596f6461e6e7944b2d7c82", @typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@private2}]}, @nested={0x4, 0x2b}]}, @nested={0x122a, 0xe, 0x0, 0x1, [@generic="bf9ca3d12b7887a0d6632d03ca50e084a81401e1c8444ab5ed44093dadeb5df95aa4952013a244318dba265260b3b069d587ab1de01c99cbd3cfa799fdc5e4e7318ff3c19649d21193c7034307c9855798f66b1b501d733076db8b51e46dd283595695288d95698559afae5e44236df3869c4e03a6cba49e230bc78156ca9b401f66488f0ab35b7756c76037a0347bf2968e3753e53e6796b8ef1572dccc008d25c3c89ff43507126c03bfc4190d0c263f6121ec1b3f1b3952b18c4b5853c96dcdb3bfea7e1ebb3c7b69df887ae519f687a34658edf3c5562d5ef6269677be48bc22", @nested={0x4, 0x135}, @generic="99eff8bd101dc75e0c3d912176c5bdc3e0cc2eba1ab2afb9e83162d8a3151ce600275ffc9386a973535497dc92b75d9f181b8359011b7ee91b829f45c4d258fcb9eed6807bc35dd1341d4d190c7c24b6931ff9be10c04cb144dd8815dcc1b76ad9de2884746a003dad868ab9511b0f99219983", @generic="5432ef96fb84e7f930074bb32f7ae149df3a696cf898954f69b60a3508246538c146b631d0e0c46330ef2999e58b7b68b6e0f8a4f8e782cf509bf7bdd49c3fef0e8892db386fbaece560de81f86ec4119604ad7761d8de590d7bf537b0e02217d0c8047c2f59f146b6e1188f919d727148bffa34847741673cd6f36e4f627280be6b184a8a3f28ff292c112be79b565bbd9d15395aadd260b9bb3033de3d3f798c3720f72bc821295f8abc3102c00c1c8682b6d8a5", @generic="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", @nested={0x4, 0x8}, @nested={0x4, 0x81}, @nested={0x4, 0x3}, @typed={0xc, 0x101, 0x0, 0x0, @u64=0x100}]}, @generic="c7810c2725899cc60469b24489a4eea13cbec47a7df0ab04a9588f8175e367cd80ef668556f8460c4a08ed265d38ad1e332b7fb5b2ca0b1fdc05496e1c8fe09c185b5d9f205fc4c90d4087f3742e2cd0653ae0fadf9d46255f3b5d0ca597081b437e080000000000004e0721a72734eced6a"]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb2, 0x2, 0x0, 0x1, [@typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}, @generic="a3ab044ba966901e033968d85232808ee135968b274564f1a14ddec8601d2b7510dc93309148a2e473d353ea6ef698e7c85ed19c1090d5a8493a47993b5d64bfa384deb01cc3e7c7f8c2f466e1ba8d0e9b5fe8356b520b7e3ce2f5ec293e0d2d024cea86e1fb0fdabda91df286a60cc2da94adec95bb68647a8e9f33d573d2a144b6ad5467a965a1c847", @nested={0x10, 0xf6, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x12b}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x414, 0x2, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @u32=0x2}, @nested={0x1c1, 0xc8, 0x0, 0x1, [@nested={0x118, 0x5f, 0x0, 0x1, [@nested={0x4, 0x13a}, @nested={0x4, 0x105}, @typed={0x8, 0xc5, 0x0, 0x0, @u32=0x4}, @typed={0x6, 0x115, 0x0, 0x0, @binary="73b6"}, @typed={0x4, 0x140}, @generic="d7302c4db68a2566f1caf3175ce0d6aa0247da820352b0e8b578904afdc3e21f564c4cc7cd53362394b2874f345897f75c84d1c65d818711dffbd2d061ae581cbc3438e7273d138f6f9d1cf8cb414c5e07e585621589d64bb47a6aceb764eb7bb47bc9d7903e5fd0a5c8a3e046449e706ed4e5dd68cc1c8172ece486295ca06fa0b89a660d213d335a82f9a73c0e9804a46e74363b1bea2c8ad1170af74505e55507b76978474f5d29501a6b096a53135c239efa3d9d5adc478da38257ed7fb7f80c9b4bad382b39a255f6be489dfb543288791749efb2e710e39c6173ae50bcea59a43719f11648ed1a13a199f692576aa767b940a33f3a"]}, @generic="5ec89aa1c9f5889b166c32efd77d69e37ba2ffc8c76bfd09bcf7994e9538239fbd0b4b3d016194a73c3333876bef6287f1c047adf6834d2f7d3d7195d3cdd6d3d986ee7984bca391870012aca98926798aa758d68cabd0eb6ddc368dc6190d917c7d589575e5cfb640b38b4566d4b74c59044e1a9a04d2deb3b093484985de02c511fc6ff5a2a33c3c8100"/149, @typed={0x8, 0x71, 0x0, 0x0, @pid}, @typed={0x8, 0x9f, 0x0, 0x0, @u32=0x3}]}, @nested={0x243, 0x121, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @fd=r1}, @generic="519a56b6309d5e2a54c52a750dd49ef143549cc7070e77d3e3301fcd64e6e317ae1e0ecc55537e2de981d10bafaf21088600d4adb02d0bdca8abe9168334abbd544ab661b630c51e89bfd537d8a841f7c0b9a93a44d6136272efd66f11f00b1ed3a2290cc8b2f53d2e", @generic="c6256b0d95dff6b41bb2e5fc0046088ca9bd605a11ca375613359506d5beb96caf329669419cbd679585570de22576ae828bd49daa3237096143b4928beb7220d089651a35acb8be6b4f5f6cf47570a957c917000648fc93fbddde5bd13771ed390907c15e3e21467749769a396047f5296eb27b1debb8ef23b1cb936e3e4860e4c965aa431b3823307992bcac600c3457b0a8151cb84e3018032126746d40ace867a9585b8d7559fc5ea13a1322cd2e64cb34e386819ffe50f72b1a2560acf71ebd7b70882d2069519d5be09bf448aecc4457cc2f1ed25f89439552201475adef1a", @nested={0x88, 0x134, 0x0, 0x1, [@nested={0x4, 0x11f}, @nested={0x4, 0x16}, @nested={0x4, 0x96}, @generic="6a8a68dce1913a209e318f07ab4243c3cbbfd94805251c", @generic="eab93c7d11c52110e5d3aef3b0f1c4c561038a6a8b9abddf0b112f96ead9aafca24fbfb1da8cfd84fbfd2bfaee2d569abfc380d903b8b6b1b27bc60a99a6455938b3036d491aceba39fc7ee21b93815fb5e6c2bb692085903444597869", @nested={0x4, 0x7f}]}, @generic="54cc3e8fd86d171c0d12c917549d34e58af10747a05aa2f7ebc9f53691574a7968220bd1014bc98a3ee3833b469476a7cf194b65acd242cd5288ccd73a5f37bc0afc655cc881ff98ca7651d360c51db085a3ed5e902ba8898422dd2f", @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x1eb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x3f00, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r2, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r10 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r10, &(0x7f0000000d40)=""/16, 0x10) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/power/connected_duration\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r11, &(0x7f0000003480)=""/247, 0xf7) 3.657672235s ago: executing program 6 (id=6372): openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/loginuid\x00', 0x753884497ef37d9b, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rt_acct\x00', 0x840, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/138, 0x8a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/5/smp_affinity\x00', 0x129542, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x1c, 0x10, 0x8, 0x7fb, &(0x7f00000002c0)}) writev$auto(0x3, &(0x7f00000001c0)={0x0, 0x3}, 0x7) 3.442896709s ago: executing program 6 (id=6373): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x21, 0x1, 0x6) socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80a040, 0x0) socket(0x2, 0x1, 0x0) r1 = prctl$auto(0x4d, 0x1, 0x0, 0x0, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r0, &(0x7f0000000a80)={0x0, 0xfffffffffffffffe}, 0x5) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) sendmsg$auto_IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9060}, @IPVS_CMD_ATTR_DAEMON={0x47, 0x3, 0x0, 0x1, [@generic="acd44d532ac041729bfd4ae81ad1486cb7a4e0ffb4985690dc71449108c6eed0155db3f808ce566b420ed32ce9d34b369dc3e1a4fdacc4fce4f46fcd32dd17fe54b2f5"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x4040084) socket(0x11, 0x80003, 0x300) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0x18, 0x1000007, 0x5f, 0x4, 0x7}, 0x6f3) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000500)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x7, 0x6d3f, 0x9, 0x6, 0x6]}, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 3.141719073s ago: executing program 2 (id=6375): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x8000000400, 0x200004007ffffffd, 0x4010006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nullb0/rqos/wbt/unknown_cnt\x00', 0x800, 0x0) socket(0x15, 0xa, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000000)={0xffffffff, 0x1, 0xf7d, 0x70, 0x1, 0x1}) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0xd, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000300)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\xfd\xf9\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x5) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x5) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x18, 0x1, 0x15) setfsgid$auto(0xffffffffffffffff) statx$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x9, 0xdd, &(0x7f0000000140)={0x100, 0x8, 0x803, 0x81, 0xffffffffffffffff, 0x0, 0x7, 0x2, 0xfffffffffffff2d3, 0x4, 0x5, 0x4, {0x6, 0x9}, {0x7, 0x8a03}, {0xac, 0x39b0}, {0x2, 0x7}, 0x5, 0x10, 0x101, 0x3, 0xd, 0xf, 0xfffff784, 0x8, 0xc, 0xffff, 0x3, 0x8, [0x5, 0x5, 0x100000001, 0x4aa, 0x101, 0x8df4, 0x6, 0x1ff, 0x80]}) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) 2.97105838s ago: executing program 5 (id=6376): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x133c03, 0x0) mmap$auto(0x10, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(r0, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) lchown$auto(0x0, 0xee01, 0xee00) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) socketpair$auto(0x7, 0x2, 0xfb9, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) socketpair$auto(0x809, 0x2, 0x9, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto(0x3, 0x80047456, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x10, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_overcommit_hugepages\x00', 0x1c9282, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x80, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28282, 0x0) 2.848932389s ago: executing program 4 (id=6377): select$auto(0x32, 0x0, 0x0, &(0x7f00000001c0)={[0x5, 0x10000, 0xffff, 0x9, 0x6, 0xfffffffffffffffd, 0x1, 0x4, 0x8, 0xfffffffffffffff9, 0x4, 0x10, 0x2, 0x0, 0x6, 0x6]}, 0x0) socket(0xa, 0x5, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x0, 0x11, 0xfffffffffffffffa, 0x8000) io_uring_register$auto(0x2, 0x11, 0x0, 0x83) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x4201, 0x0) read$auto(r1, 0x0, 0x9a28) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r1, 0x300000000000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x401}, 0x6, 0x0) 2.412088748s ago: executing program 6 (id=6378): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) socket(0x2, 0x1, 0x106) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x480, 0x0) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x4) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) 2.006654764s ago: executing program 5 (id=6379): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x10, 0x386, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x5, 0x7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/long_retry_limit\x00', 0x400, 0x0) read$auto_long_retry_limit_ops_(r1, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_clone(0x23926000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x1, 0x9) r2 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af24, r3) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000300)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86z\xb2\xfdI\x99\x00\x00\x00\x00 \x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x01\x00\x00\x00\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x3) read$auto_udf_dir_operations_udfdecl(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="77454f9c14ab8d8640b1631e985bee9c01e7869f6e88e853adb52f276a", @ANYRESOCT=r6, @ANYBLOB="bac130f84597e1f10500"/22, @ANYRES32=0x0, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x808882, 0x0) write$auto(r7, &(0x7f00000004c0)='1\x00\\\xa0\x04|\xfd\xca\x12\xfa\b\x1c\xc7k\x923\xe05\"3n\x84n#\xd1\xcaso\v\xf0\xda\xbb\x86\xbcX\xb4\x999\\\xa8&;<\xca\xa8\x05\x9d\x9e-\xc3\x93\xaa\xda\x02\x03\xddUbHu\x01\x00\x00\x00\xac\xa7\x93T\aA\xbd\xc0\xb8K\xd7\xed\xcbP\xa1\xfe\xc7\xa1\x8b\xa7\x02\xad\xbc\xfaq*0F\xff&\xbb+\x9b\xe2\xbfd\xf7\xde\xb40\x1d=\x99\xe2\x06\xbf\x9cNS\xbf\x82\x9c\xfb', 0x3) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/video35/name\x00', 0x10f801, 0x0) write$auto(r8, 0x0, 0x9) 1.957380727s ago: executing program 2 (id=6380): openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0xa, 0x800, 0x1) rt_sigpending$auto(0x0, 0x8) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x55) accept$auto(0x3, 0x0, 0x0) setrlimit$auto(0x6, &(0x7f0000000140)={0x0, 0x6}) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x82842, 0x85) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x800, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) io_uring_setup$auto(0x55, &(0x7f0000000100)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400b, 0xffffffffffffffff, [], {0x6, 0x80006, 0x8c48, 0x7, 0x3, 0x7f, 0x0, 0x2}, {0x100, 0x9, 0x53, 0x81, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0xffffffff}}) socket(0x23, 0x2, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0xfdfdffffffffffff) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x7, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.882093303s ago: executing program 4 (id=6381): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r4, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf250400"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) brk$auto(0xffffffffffffff66) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/anon_fault_alloc\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x0, 0x2, 0x1000002) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x9}, &(0x7f00000002c0)={0x10000}, 0x8) mprotect$auto(0x110c230000, 0xa588, 0x6) msgctl$auto_IPC_RMID(0x1, 0x0, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS1\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r7, 0x5412, &(0x7f0000000840)="13") 1.7428303s ago: executing program 5 (id=6382): fchmodat2$auto(0xffffffffffffffff, 0x0, 0x9, 0x0) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff2d, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x4c, r1, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4056}, 0x24048084) mmap$auto(0x1, 0x8, 0x10000000000df, 0x1d, 0x401, 0x1000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x0, 0x20, 0x0, 0x20) r4 = socket(0x2, 0x1, 0x106) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r7, &(0x7f0000000100)={&(0x7f0000000000), 0x2}, 0x3, 0x11, 0x3) ioctl$auto_SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000440)) gettid() write$auto(r5, 0x0, 0x100000a3d9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto_MADV_DODUMP(0x8, 0x5, 0x11) openat$auto_full_fops_mem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r8, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000080)={0x6, 0x0}) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/eps\x00', 0x280, 0x0) pread64$auto(r9, 0x0, 0x5, 0x8d) ioctl$auto_PPPIOCSPASS(r8, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x1, 0x3, 0x1, @inferred=r4}}) 1.511768925s ago: executing program 5 (id=6383): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x6, 0x0, 0x1, 0x0, 0x8000000000008000, 0x2}, 0x4}, 0x800008, 0x80000000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) mlock$auto(0x100000001, 0xfffffff7fffffff8) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x8084, 0x6, 0x0, &(0x7f0000000000)=0xffff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x44000) mmap$auto(0x0, 0x7, 0xffffffff, 0x9b7f, 0x2, 0x20000000000002) getpgrp(0x0) prctl$auto_PR_SET_MEMORY_MERGE(0x43, 0x1, 0x7, 0x16e7, 0x92e) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x6) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x20009) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) 1.459575499s ago: executing program 6 (id=6384): mmap$auto(0x0, 0x20009, 0xdf, 0x10, 0xffffffffffffffff, 0x8000) socket(0x2, 0x3, 0xa) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x101, 0x2020009, 0x3, 0x2000000003ff, 0xfffffffffffffffa, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)={0x2c, r3, 0x6c5679fc7dece1a9, 0x70bd2b, 0x25dfdbff, {0x1, 0x0, 0x4000}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x20008010) mprotect$auto(0x0, 0x806121, 0x6) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x10) r4 = socket(0x10, 0x2, 0x4) bpf$auto(0x6, &(0x7f00000001c0)=@test={r4, 0x10004, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x10000, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0xc) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/conf/ip_vti0/accept_redirects\x00', 0x0, 0x0) sendmsg$auto_BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24b9b2fc", @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf2512000000080027000e0000000800130005000000060025009209000008000b000e000000140007006d6163766c616e30000000000000000008003100000200000500330007000000080015000000008008001c0006000000"], 0x68}, 0x1, 0x0, 0x0, 0x824}, 0x4040095) socket(0x1, 0x5, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, r5, [], {0x9, 0x9, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000007, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x10000, 0x40, 0x104, 0x8, 0xfffffffc}}) 1.4471403s ago: executing program 2 (id=6385): mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) getpid() socket(0xa, 0x3, 0xff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x129542, 0x0) dup3$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40088c0}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xb, 0x2, 0x100000001, 0x9, 0x0, 0x0, 0x0, 0xfa9a, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x8000000005, 0x0, 0x7, 0x4, 0x3}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (fail_nth: 5) 1.31277484s ago: executing program 6 (id=6386): mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4020aed2, r0) 964.543831ms ago: executing program 4 (id=6387): process_mrelease$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x20, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_target_port\x00', 0x2a001, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000f7dbdf250100003f06000200010000000500070058000000080009000500000008000a000800000014001f0000000000000000000000000000000001140020000000000000000000ffffffffffff00005cf21fc8865a3f794b324d73c88aadb2e2e1a8d48865549e0848213e2d983973858e4a402a4f9d368f1624dbc8c6c2c737ad435f1f5e"], 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x531, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004805}, 0x8) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE_EXT(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000810) r6 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r6, 0x40087543, 0x0) write$auto(r4, &(0x7f0000000040)='.G+*@sys\x00', 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = pidfd_open$auto(0x1, 0x0) setns(r7, 0x60020000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 899.424092ms ago: executing program 2 (id=6388): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0x19, 0x0, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syslog$auto(0x2, &(0x7f0000000100)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\x04S1\x8a\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2*\xb3%\x8f\xfcQg\xc5(.\x18\xc2\x8cr\xces\x04|X\xfd\xff\x92\xcc\xbew\x0f\x81\x92\xb57J\xd6\x8e\xafFG\xa7\xff\xa4\b\xbb\xae\x18\x16\x8db\x8f>q3\xdd!\xd0\xf2\'\xf0O\xed\xb9}\xe2\xba\f\x97\xb2\x0fP\xd9\xd6\x03\xb2\x86S*\x98b\x89\xa1`\x0f\xedhq<\xcbC\xe1\x7fK<\xb2J\xb0\x17\x1d\xe0\xedhTx\xa5\xc9\xd46\xfb\x1d\xb8\xca\xb9r\xb5\x1c\x7f\x14e\x95(5b\v\x8b\x18\xf7\a\x02\xbaI?1\xdf\x92\xc4\x83#\xff\x90\xb7\x9c\xd0u\xcf\x12\xc0\x95d\xeb_U\n*l\xb7\x134Zu9\xd2V.i\xc7\xf97\xf8m\n\xda\xc8\xe9\"\xcb\x87Z\x86\x93\x10o1\xe1\xfcB\x94j4\n\x0f)P\xad\xf7-\xdf&\x19\x84\xdb\xca\x8b\x9c\xafT\xc5<9\x1e\v\x9en\'\x85\n\b\xf6\xc6\x95\x99<\x86\xb6\xed\x13\xdeS6\x05\x81\x16{\x93\xa5\xb7mL\xe7\xb7t\x85\xc5\bv\x18\xc9aay\xcc\xbd9c\xaay\xffn>\xba\xe7\\\x87\x8c}\x90\xf7', 0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0x21) getdents$auto(r1, 0x0, 0x401) r2 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000240)={@config_section=0x0, 0xfa}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/workqueue/parameters/watchdog_thresh\x00', 0x1e2142, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fff) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r4, 0x4008af00, 0x0) 825.039507ms ago: executing program 6 (id=6389): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) (async) timer_create$auto(0x9, 0x0, 0x0) (async) read$auto(0x3, 0x0, 0x8080) (async) socket(0xa, 0x1, 0x100) (async) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e066bb0a054c9e474be535fd29da", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"}) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r1) (async) process_mrelease$auto(0xffffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x84480, 0x0) (async) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) (async) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) (async) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) (async) socket(0x2, 0x1, 0x106) (async) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r3, 0x8000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x101, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xfffffbffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 487.643724ms ago: executing program 5 (id=6390): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x10, 0x386, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x5, 0x7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/long_retry_limit\x00', 0x400, 0x0) read$auto_long_retry_limit_ops_(r1, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_clone(0x23926000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x1, 0x9) r2 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af24, r3) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000300)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86z\xb2\xfdI\x99\x00\x00\x00\x00 \x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x01\x00\x00\x00\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x3) read$auto_udf_dir_operations_udfdecl(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="77454f9c14ab8d8640b1631e985bee9c01e7869f6e88e853adb52f276a", @ANYRESOCT=r6, @ANYBLOB="bac130f84597e1f10500"/22, @ANYRES32=0x0, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x808882, 0x0) write$auto(r7, &(0x7f00000004c0)='1\x00\\\xa0\x04|\xfd\xca\x12\xfa\b\x1c\xc7k\x923\xe05\"3n\x84n#\xd1\xcaso\v\xf0\xda\xbb\x86\xbcX\xb4\x999\\\xa8&;<\xca\xa8\x05\x9d\x9e-\xc3\x93\xaa\xda\x02\x03\xddUbHu\x01\x00\x00\x00\xac\xa7\x93T\aA\xbd\xc0\xb8K\xd7\xed\xcbP\xa1\xfe\xc7\xa1\x8b\xa7\x02\xad\xbc\xfaq*0F\xff&\xbb+\x9b\xe2\xbfd\xf7\xde\xb40\x1d=\x99\xe2\x06\xbf\x9cNS\xbf\x82\x9c\xfb', 0x3) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/video35/name\x00', 0x10f801, 0x0) write$auto(r8, 0x0, 0x9) 236.937832ms ago: executing program 5 (id=6391): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000100)=@query={@target_ifindex, 0x200, 0x5, 0x1, 0x6, @count, 0x0, 0x1, 0x100000000, 0x3, 0x7}, 0x80) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r2, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x5) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x200448c0) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) read$auto(r3, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10104018}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0xf6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000000) r4 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/features/extended_error\x00', 0x4001, 0x0) close_range$auto(0x0, r4, 0x401) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x92802, 0x0) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, 0x8000000000000000, 0x0) signalfd4$auto(r5, &(0x7f0000000080)={0x2}, 0x4, 0x0) 0s ago: executing program 2 (id=6392): mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = pipe$auto(0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(r0, r1, 0x0, 0xee39) (fail_nth: 3) kernel console output (not intermixed with test programs): b+0xc2/0x120 [ 1333.353707][T28377] __kmalloc_noprof+0xeb/0x910 [ 1333.353723][T28377] ? lsm_blob_alloc+0x68/0x90 [ 1333.353749][T28377] ? lsm_blob_alloc+0x68/0x90 [ 1333.353768][T28377] lsm_blob_alloc+0x68/0x90 [ 1333.353787][T28377] security_sk_alloc+0x2f/0x270 [ 1333.353804][T28377] sk_prot_alloc+0xfb/0x2a0 [ 1333.353820][T28377] sk_alloc+0x36/0xe30 [ 1333.353843][T28377] inet_create+0x3a1/0x1040 [ 1333.353875][T28377] ? inet_create+0x93/0x1040 [ 1333.353909][T28377] __sock_create+0x339/0x8a0 [ 1333.353930][T28377] udp_sock_create4+0xa6/0x450 [ 1333.353946][T28377] ? __pfx_udp_sock_create4+0x10/0x10 [ 1333.353962][T28377] ? lockdep_hardirqs_on+0x7c/0x110 [ 1333.353976][T28377] ? crng_make_state+0x48e/0x6c0 [ 1333.353993][T28377] rxrpc_open_socket+0x4f5/0x6b0 [ 1333.354012][T28377] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 1333.354039][T28377] ? rcu_is_watching+0x12/0xc0 [ 1333.354060][T28377] rxrpc_lookup_local+0xa01/0x1220 [ 1333.354092][T28377] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1333.354116][T28377] rxrpc_sendmsg+0x37e/0x680 [ 1333.354138][T28377] sock_write_iter+0x566/0x610 [ 1333.354154][T28377] ? __pfx_sock_write_iter+0x10/0x10 [ 1333.354175][T28377] ? bpf_lsm_file_permission+0x9/0x10 [ 1333.354191][T28377] ? security_file_permission+0x71/0x210 [ 1333.354209][T28377] ? rw_verify_area+0xcf/0x6c0 [ 1333.354229][T28377] vfs_write+0x7d3/0x11d0 [ 1333.354248][T28377] ? __pfx_sock_write_iter+0x10/0x10 [ 1333.354264][T28377] ? __pfx_vfs_write+0x10/0x10 [ 1333.354280][T28377] ? find_held_lock+0x2b/0x80 [ 1333.354316][T28377] ksys_write+0x1f8/0x250 [ 1333.354336][T28377] ? __pfx_ksys_write+0x10/0x10 [ 1333.354361][T28377] do_syscall_64+0xcd/0xf80 [ 1333.354377][T28377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.354392][T28377] RIP: 0033:0x7fc50d78f7c9 [ 1333.354404][T28377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1333.354417][T28377] RSP: 002b:00007fc50e700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1333.354431][T28377] RAX: ffffffffffffffda RBX: 00007fc50d9e5fa0 RCX: 00007fc50d78f7c9 [ 1333.354441][T28377] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1333.354449][T28377] RBP: 00007fc50d813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1333.354458][T28377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1333.354466][T28377] R13: 00007fc50d9e6038 R14: 00007fc50d9e5fa0 R15: 00007ffd8585c458 [ 1333.354487][T28377] [ 1333.830211][T28375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.936776][T28380] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1333.947795][T28380] nbd: must specify a device to reconfigure [ 1334.025862][T14245] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1402 with max blocks 16 with error 117 [ 1334.072238][T14245] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1334.072238][T14245] [ 1334.180100][T28388] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1334.204395][T28388] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1335.210182][T28414] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1335.276083][T28414] nbd: must specify a device to reconfigure [ 1335.857042][T28431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5711'. [ 1336.826563][T28456] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1336.888037][T28456] nbd: must specify a device to reconfigure [ 1338.885642][T28498] program syz.0.5731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1338.929039][T28496] program syz.0.5731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1339.025936][T28491] ima: policy update failed [ 1339.045774][ T30] audit: type=1802 audit(4295027573.849:90): pid=28491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.5731" res=0 errno=0 [ 1339.167110][T28508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5734'. [ 1339.209006][T28508] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5734'. [ 1339.381280][T28515] FAULT_INJECTION: forcing a failure. [ 1339.381280][T28515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1339.453973][T28515] CPU: 0 UID: 0 PID: 28515 Comm: syz.5.5736 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1339.454002][T28515] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1339.454008][T28515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1339.454015][T28515] Call Trace: [ 1339.454021][T28515] [ 1339.454027][T28515] dump_stack_lvl+0x16c/0x1f0 [ 1339.454045][T28515] should_fail_ex+0x512/0x640 [ 1339.454065][T28515] _copy_to_user+0x32/0xd0 [ 1339.454083][T28515] simple_read_from_buffer+0xcb/0x170 [ 1339.454104][T28515] proc_fail_nth_read+0x197/0x240 [ 1339.454120][T28515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1339.454135][T28515] ? rw_verify_area+0xcf/0x6c0 [ 1339.454152][T28515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1339.454166][T28515] vfs_read+0x1e4/0xcf0 [ 1339.454185][T28515] ? __pfx___mutex_lock+0x10/0x10 [ 1339.454202][T28515] ? __pfx_vfs_read+0x10/0x10 [ 1339.454226][T28515] ? __fget_files+0x20e/0x3c0 [ 1339.454250][T28515] ksys_read+0x12a/0x250 [ 1339.454269][T28515] ? __pfx_ksys_read+0x10/0x10 [ 1339.454293][T28515] do_syscall_64+0xcd/0xf80 [ 1339.454308][T28515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.454323][T28515] RIP: 0033:0x7f091978e1dc [ 1339.454335][T28515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1339.454348][T28515] RSP: 002b:00007f091a53f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1339.454361][T28515] RAX: ffffffffffffffda RBX: 00007f09199e6090 RCX: 00007f091978e1dc [ 1339.454371][T28515] RDX: 000000000000000f RSI: 00007f091a53f0a0 RDI: 0000000000000009 [ 1339.454379][T28515] RBP: 00007f091a53f090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.454387][T28515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.454395][T28515] R13: 00007f09199e6128 R14: 00007f09199e6090 R15: 00007ffd9f44c5a8 [ 1339.454414][T28515] [ 1340.588047][T28550] program syz.2.5746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1340.669512][T28550] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1340.978196][ T30] audit: type=1800 audit(4295027575.738:91): pid=28565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5749" name="members" dev="configfs" ino=146194 res=0 errno=0 [ 1341.534307][T28574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5752'. [ 1341.729561][T28574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.797552][T28574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.873399][T28574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1341.920872][T28574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.269002][T28594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1343.337293][T28594] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1343.401264][T28594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1343.475368][T28594] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1343.548349][T28594] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1343.632515][T28594] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1344.538645][T28639] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1345.117722][ T7182] Bluetooth: hci2: command 0x0c1a tx timeout [ 1345.360890][ T7182] Bluetooth: hci3: command 0x0c1a tx timeout [ 1345.438264][ T7182] Bluetooth: hci1: command 0x0c1a tx timeout [ 1345.517932][ T7182] Bluetooth: hci0: command 0x0c1a tx timeout [ 1346.639659][T28695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.730706][T28695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.752263][T28698] ptrace attach of "./syz-executor exec"[21374] was attempted by ""[28698] [ 1347.598869][ T7182] Bluetooth: hci0: command 0x0c1a tx timeout [ 1348.678983][T28739] FAULT_INJECTION: forcing a failure. [ 1348.678983][T28739] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.804945][T28739] CPU: 0 UID: 0 PID: 28739 Comm: syz.2.5794 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1348.804974][T28739] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1348.804981][T28739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1348.804989][T28739] Call Trace: [ 1348.804994][T28739] [ 1348.805000][T28739] dump_stack_lvl+0x16c/0x1f0 [ 1348.805019][T28739] should_fail_ex+0x512/0x640 [ 1348.805037][T28739] ? fs_reclaim_acquire+0xae/0x150 [ 1348.805060][T28739] should_failslab+0xc2/0x120 [ 1348.805082][T28739] __kmalloc_noprof+0xeb/0x910 [ 1348.805097][T28739] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1348.805122][T28739] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1348.805140][T28739] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1348.805162][T28739] ? tomoyo_profile+0x47/0x60 [ 1348.805176][T28739] tomoyo_path_number_perm+0x245/0x580 [ 1348.805193][T28739] ? tomoyo_path_number_perm+0x237/0x580 [ 1348.805211][T28739] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1348.805228][T28739] ? find_held_lock+0x2b/0x80 [ 1348.805262][T28739] ? find_held_lock+0x2b/0x80 [ 1348.805279][T28739] ? hook_file_ioctl_common+0x144/0x410 [ 1348.805300][T28739] ? __fget_files+0x20e/0x3c0 [ 1348.805323][T28739] security_file_ioctl+0x9b/0x240 [ 1348.805342][T28739] __x64_sys_ioctl+0xb7/0x210 [ 1348.805361][T28739] do_syscall_64+0xcd/0xf80 [ 1348.805377][T28739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.805397][T28739] RIP: 0033:0x7f2f8638f7c9 [ 1348.805409][T28739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1348.805423][T28739] RSP: 002b:00007f2f8724f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.805436][T28739] RAX: ffffffffffffffda RBX: 00007f2f865e5fa0 RCX: 00007f2f8638f7c9 [ 1348.805445][T28739] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000004 [ 1348.805454][T28739] RBP: 00007f2f8724f090 R08: 0000000000000000 R09: 0000000000000000 [ 1348.805462][T28739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1348.805469][T28739] R13: 00007f2f865e6038 R14: 00007f2f865e5fa0 R15: 00007fff2bddb0a8 [ 1348.805488][T28739] [ 1348.805495][T28739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1349.354332][T28758] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 1349.585664][T28765] futex_wake_op: syz.4.5798 tries to shift op by -2048; fix this program [ 1349.636141][T28765] No such timeout policy "" [ 1349.656214][T28765] netlink: Failed to associated timeout policy '' [ 1349.682446][ T7182] Bluetooth: hci0: command 0x0c1a tx timeout [ 1351.662871][T28796] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1351.669341][T28796] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1351.829033][T28800] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1351.948028][T28800] nvme_fabrics: unknown parameter or missing value '10' in ctrl creation request [ 1352.685816][T28811] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1352.743380][T28811] nbd: must specify a device to reconfigure [ 1354.324460][T28835] delete_channel: no stack [ 1354.711644][T28843] nbd: must specify a device to reconfigure [ 1356.186007][T28878] nbd: must specify a device to reconfigure [ 1357.472676][T28904] vhci_hcd: not connected 4 [ 1357.514973][T28904] FAULT_INJECTION: forcing a failure. [ 1357.514973][T28904] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.561647][T28904] CPU: 0 UID: 0 PID: 28904 Comm: syz.5.5837 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1357.561678][T28904] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1357.561687][T28904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1357.561700][T28904] Call Trace: [ 1357.561706][T28904] [ 1357.561713][T28904] dump_stack_lvl+0x16c/0x1f0 [ 1357.561733][T28904] should_fail_ex+0x512/0x640 [ 1357.561750][T28904] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1357.561769][T28904] should_failslab+0xc2/0x120 [ 1357.561790][T28904] __kmalloc_cache_noprof+0x80/0x800 [ 1357.561806][T28904] ? alloc_netdev_mqs+0xed3/0x1550 [ 1357.561829][T28904] ? alloc_netdev_mqs+0xed3/0x1550 [ 1357.561848][T28904] alloc_netdev_mqs+0xed3/0x1550 [ 1357.561872][T28904] __tun_chr_ioctl+0x193e/0x4880 [ 1357.561888][T28904] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1357.561908][T28904] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1357.561926][T28904] ? hook_file_ioctl_common+0x144/0x410 [ 1357.561947][T28904] ? __fget_files+0x20e/0x3c0 [ 1357.561968][T28904] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1357.561985][T28904] __x64_sys_ioctl+0x18e/0x210 [ 1357.562003][T28904] do_syscall_64+0xcd/0xf80 [ 1357.562017][T28904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.562031][T28904] RIP: 0033:0x7f091978f7c9 [ 1357.562044][T28904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.562056][T28904] RSP: 002b:00007f091a560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.562070][T28904] RAX: ffffffffffffffda RBX: 00007f09199e5fa0 RCX: 00007f091978f7c9 [ 1357.562078][T28904] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000006 [ 1357.562087][T28904] RBP: 00007f0919813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1357.562095][T28904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1357.562102][T28904] R13: 00007f09199e6038 R14: 00007f09199e5fa0 R15: 00007ffd9f44c5a8 [ 1357.562122][T28904] [ 1360.506586][T26539] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1391 with max blocks 27 with error 117 [ 1360.605286][T26539] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1360.605286][T26539] [ 1360.676707][T26539] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 2 with max blocks 1 with error 117 [ 1360.743290][T26539] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1360.743290][T26539] [ 1360.814657][T26539] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 5 with max blocks 3 with error 117 [ 1360.909283][T26539] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1360.909283][T26539] [ 1363.326552][T28999] FAULT_INJECTION: forcing a failure. [ 1363.326552][T28999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.437230][T28999] CPU: 0 UID: 0 PID: 28999 Comm: syz.5.5865 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1363.437259][T28999] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1363.437265][T28999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1363.437273][T28999] Call Trace: [ 1363.437278][T28999] [ 1363.437292][T28999] dump_stack_lvl+0x16c/0x1f0 [ 1363.437311][T28999] should_fail_ex+0x512/0x640 [ 1363.437332][T28999] _copy_from_user+0x2e/0xd0 [ 1363.437349][T28999] copy_msghdr_from_user+0x98/0x160 [ 1363.437369][T28999] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1363.437396][T28999] ___sys_sendmsg+0xfe/0x1d0 [ 1363.437416][T28999] ? __pfx____sys_sendmsg+0x10/0x10 [ 1363.437455][T28999] __sys_sendmsg+0x16d/0x220 [ 1363.437475][T28999] ? __pfx___sys_sendmsg+0x10/0x10 [ 1363.437499][T28999] ? syscall_user_dispatch+0x78/0x140 [ 1363.437521][T28999] do_syscall_64+0xcd/0xf80 [ 1363.437537][T28999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.437551][T28999] RIP: 0033:0x7f091978f7c9 [ 1363.437564][T28999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.437577][T28999] RSP: 002b:00007f091a560038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.437592][T28999] RAX: ffffffffffffffda RBX: 00007f09199e5fa0 RCX: 00007f091978f7c9 [ 1363.437601][T28999] RDX: 000000000004c848 RSI: 0000200000006140 RDI: 0000000000000003 [ 1363.437610][T28999] RBP: 00007f091a560090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.437618][T28999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.437626][T28999] R13: 00007f09199e6038 R14: 00007f09199e5fa0 R15: 00007ffd9f44c5a8 [ 1363.437644][T28999] [ 1364.553543][T29023] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.2), cmd(10) [ 1364.994691][T29035] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1365.069577][T29035] nbd: must specify a device to reconfigure [ 1365.239914][T20095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1365.261768][T20095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1365.272093][T20095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1365.281350][T20095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1365.291890][T20095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1366.086205][T29040] chnl_net:caif_netlink_parms(): no params data found [ 1366.117141][T29058] can: request_module (can-proto-5) failed. [ 1366.428341][T29070] nbd: must specify a device to reconfigure [ 1366.670744][T29040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.712591][T29040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.749167][T29040] bridge_slave_0: entered allmulticast mode [ 1366.810839][T29040] bridge_slave_0: entered promiscuous mode [ 1366.884644][T29040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.925651][T29040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.974315][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.981263][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.993297][T29040] bridge_slave_1: entered allmulticast mode [ 1367.035651][T29040] bridge_slave_1: entered promiscuous mode [ 1367.311975][T29040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.369107][T20095] Bluetooth: hci4: command tx timeout [ 1367.425754][T29040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.601013][T29040] team0: Port device team_slave_0 added [ 1367.746110][T29040] team0: Port device team_slave_1 added [ 1368.260751][T26540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.382617][T29040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.414909][T29040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.581180][T29040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.626626][T29095] NFSD: Failed to start, no listeners configured. [ 1368.654040][T29040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.689498][T29040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.778586][T29040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.923113][T26540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.058756][T29102] nbd: must specify a device to reconfigure [ 1369.081302][T26540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.164659][T29040] hsr_slave_0: entered promiscuous mode [ 1369.189194][T29040] hsr_slave_1: entered promiscuous mode [ 1369.220371][T29040] debugfs: 'hsr0' already exists in 'hsr' [ 1369.251018][T29040] Cannot create hsr debugfs directory [ 1369.366758][T26540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.450846][T20095] Bluetooth: hci4: command tx timeout [ 1369.873712][T29129] netlink: Setting conntrack mark requires 'commit' flag. [ 1369.963921][T26540] bridge_slave_1: left allmulticast mode [ 1369.989896][T26540] bridge_slave_1: left promiscuous mode [ 1369.998183][T26540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.090398][T29131] nbd: must specify a device to reconfigure [ 1370.125032][T26540] bridge_slave_0: left allmulticast mode [ 1370.160585][T26540] bridge_slave_0: left promiscuous mode [ 1370.189666][T26540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.531126][T20095] Bluetooth: hci4: command tx timeout [ 1371.733001][T26540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1371.788847][T26540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1371.825803][T26540] bond0 (unregistering): Released all slaves [ 1372.475235][T29040] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1372.649246][T29040] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1372.719895][T29040] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1372.904511][T29040] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1373.094439][T26540] hsr_slave_0: left promiscuous mode [ 1373.174878][T26540] hsr_slave_1: left promiscuous mode [ 1373.272475][T26540] veth1_macvtap: left promiscuous mode [ 1373.278014][T26540] veth0_macvtap: left promiscuous mode [ 1373.341768][T26540] veth1_vlan: left promiscuous mode [ 1373.358783][T26540] veth0_vlan: left promiscuous mode [ 1373.611872][T20095] Bluetooth: hci4: command tx timeout [ 1374.610431][T26540] team0 (unregistering): Port device team_slave_0 removed [ 1375.788070][T29040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.912549][T29040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.991555][T15011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.998737][T15011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.105927][T15011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.113091][T15011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.260343][T29040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1378.440072][T29267] kexec: Could not allocate control_code_buffer [ 1378.496682][T29296] FAULT_INJECTION: forcing a failure. [ 1378.496682][T29296] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1378.565592][T29296] CPU: 0 UID: 0 PID: 29296 Comm: syz.5.5940 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1378.565620][T29296] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1378.565627][T29296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1378.565635][T29296] Call Trace: [ 1378.565640][T29296] [ 1378.565646][T29296] dump_stack_lvl+0x16c/0x1f0 [ 1378.565664][T29296] should_fail_ex+0x512/0x640 [ 1378.565684][T29296] get_futex_key+0x1085/0x15f0 [ 1378.565702][T29296] ? __pfx_get_futex_key+0x10/0x10 [ 1378.565723][T29296] futex_wake+0xea/0x530 [ 1378.565744][T29296] ? __pfx_futex_wake+0x10/0x10 [ 1378.565770][T29296] do_futex+0x1e3/0x350 [ 1378.565786][T29296] ? __pfx_do_futex+0x10/0x10 [ 1378.565800][T29296] ? __might_fault+0xe3/0x190 [ 1378.565821][T29296] mm_release+0x24e/0x300 [ 1378.565840][T29296] do_exit+0x69e/0x2bd0 [ 1378.565857][T29296] ? __pfx_do_exit+0x10/0x10 [ 1378.565870][T29296] ? do_raw_spin_lock+0x12c/0x2b0 [ 1378.565886][T29296] ? find_held_lock+0x2b/0x80 [ 1378.565906][T29296] do_group_exit+0xd3/0x2a0 [ 1378.565921][T29296] get_signal+0x2671/0x26d0 [ 1378.565940][T29296] ? __pfx_futex_wake+0x10/0x10 [ 1378.565960][T29296] ? vfs_write+0x15d/0x11d0 [ 1378.565981][T29296] ? __pfx_get_signal+0x10/0x10 [ 1378.566001][T29296] ? do_futex+0x122/0x350 [ 1378.566017][T29296] arch_do_signal_or_restart+0x8f/0x7a0 [ 1378.566038][T29296] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1378.566062][T29296] ? __pfx___x64_sys_futex+0x10/0x10 [ 1378.566081][T29296] exit_to_user_mode_loop+0x8c/0x540 [ 1378.566101][T29296] do_syscall_64+0x4ee/0xf80 [ 1378.566116][T29296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.566130][T29296] RIP: 0033:0x7f091978f7c9 [ 1378.566142][T29296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1378.566156][T29296] RSP: 002b:00007f091a5600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1378.566169][T29296] RAX: 0000000000000001 RBX: 00007f09199e5fa8 RCX: 00007f091978f7c9 [ 1378.566178][T29296] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f09199e5fac [ 1378.566186][T29296] RBP: 00007f09199e5fa0 R08: 00007f091a561000 R09: 0000000000000000 [ 1378.566195][T29296] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1378.566203][T29296] R13: 00007f09199e6038 R14: 00007ffd9f44c4c0 R15: 00007ffd9f44c5a8 [ 1378.566221][T29296] [ 1378.571540][T29300] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1378.992220][T29040] veth0_vlan: entered promiscuous mode [ 1379.121353][T29040] veth1_vlan: entered promiscuous mode [ 1379.330511][T29040] veth0_macvtap: entered promiscuous mode [ 1379.384410][T29040] veth1_macvtap: entered promiscuous mode [ 1379.457954][T29040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1379.515780][T29040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1379.586055][T15011] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.618064][T15011] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.643895][T29300] nbd: must specify a device to reconfigure [ 1379.699119][T15011] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.759916][T15011] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.897881][T15011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.957892][T15011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.062892][T15011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.103545][T15011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.755307][T29392] __vm_enough_memory: pid: 29392, comm: syz.2.5958, bytes: 4398046511104 not enough memory for the allocation [ 1382.755604][T29404] netlink: 'syz.6.5960': attribute type 28 has an invalid length. [ 1382.793310][T29414] netlink: 'syz.6.5960': attribute type 28 has an invalid length. [ 1382.973652][T29404] netlink: 334 bytes leftover after parsing attributes in process `syz.6.5960'. [ 1383.047834][T29414] netlink: 334 bytes leftover after parsing attributes in process `syz.6.5960'. [ 1383.461846][ T8611] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1402 with max blocks 1 with error 117 [ 1383.542630][ T8611] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1383.542630][ T8611] [ 1383.600690][ T8611] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 2 with max blocks 8 with error 117 [ 1383.634305][T29432] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1383.679975][ T8611] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1383.679975][ T8611] [ 1383.700200][T29432] nbd: must specify a device to reconfigure [ 1383.761830][ T8611] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 5 with max blocks 2 with error 117 [ 1383.818863][ T8611] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1383.818863][ T8611] [ 1383.893781][ T30] audit: type=1326 audit(4295027618.667:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29438 comm="syz.2.5972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f8638f7c9 code=0x0 [ 1385.422330][T29478] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.5981: iget: checksum invalid [ 1385.655599][T29478] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1385.883370][T29478] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.5981: iget: checksum invalid [ 1386.166718][T29478] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1386.397570][T29478] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.5981: iget: checksum invalid [ 1386.568840][T29478] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1386.749003][T29478] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.5981: iget: checksum invalid [ 1386.887469][T29478] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1386.975520][T29478] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1387.090130][T29478] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1387.483744][T29528] FAULT_INJECTION: forcing a failure. [ 1387.483744][T29528] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.536511][T29528] CPU: 0 UID: 0 PID: 29528 Comm: syz.6.5994 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1387.536540][T29528] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1387.536547][T29528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1387.536555][T29528] Call Trace: [ 1387.536562][T29528] [ 1387.536569][T29528] dump_stack_lvl+0x16c/0x1f0 [ 1387.536588][T29528] should_fail_ex+0x512/0x640 [ 1387.536606][T29528] ? __kvmalloc_node_noprof+0x129/0xa40 [ 1387.536627][T29528] should_failslab+0xc2/0x120 [ 1387.536654][T29528] __kvmalloc_node_noprof+0x14a/0xa40 [ 1387.536674][T29528] ? io_alloc_cache_init+0x38/0x170 [ 1387.536692][T29528] ? io_alloc_cache_init+0x38/0x170 [ 1387.536704][T29528] ? __init_waitqueue_head+0xca/0x150 [ 1387.536721][T29528] io_alloc_cache_init+0x38/0x170 [ 1387.536735][T29528] io_uring_setup+0x5cc/0x1f80 [ 1387.536756][T29528] ? __pfx_io_uring_setup+0x10/0x10 [ 1387.536776][T29528] ? __mutex_unlock_slowpath+0x161/0x790 [ 1387.536793][T29528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1387.536814][T29528] ? fput+0x70/0xf0 [ 1387.536828][T29528] ? ksys_write+0x1ac/0x250 [ 1387.536847][T29528] ? __pfx_ksys_write+0x10/0x10 [ 1387.536869][T29528] __x64_sys_io_uring_setup+0xc2/0x170 [ 1387.536889][T29528] do_syscall_64+0xcd/0xf80 [ 1387.536904][T29528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.536919][T29528] RIP: 0033:0x7f0b3af8f7c9 [ 1387.536930][T29528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1387.536944][T29528] RSP: 002b:00007f0b3bdc9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1387.536957][T29528] RAX: ffffffffffffffda RBX: 00007f0b3b1e5fa0 RCX: 00007f0b3af8f7c9 [ 1387.536966][T29528] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000d364 [ 1387.536974][T29528] RBP: 00007f0b3bdc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1387.536983][T29528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1387.536990][T29528] R13: 00007f0b3b1e6038 R14: 00007f0b3b1e5fa0 R15: 00007ffe65067668 [ 1387.537008][T29528] [ 1390.184094][T29593] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1390.252197][T29593] nbd: must specify a device to reconfigure [ 1391.826889][T29620] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 1392.498721][T29631] nbd: must specify a device to reconfigure [ 1393.477509][T29664] binder: binder_mmap: 29662 0-1000 bad vm_flags failed -1 [ 1393.916691][T29673] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1393.982644][T29673] nbd: must specify a device to reconfigure [ 1396.236678][T29722] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1396.446635][T15011] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1412 with max blocks 6 with error 117 [ 1396.542850][T15011] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1396.542850][T15011] [ 1397.618423][T29743] FAULT_INJECTION: forcing a failure. [ 1397.618423][T29743] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.937121][T29743] CPU: 0 UID: 0 PID: 29743 Comm: syz.6.6043 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1397.937151][T29743] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1397.937157][T29743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1397.937166][T29743] Call Trace: [ 1397.937172][T29743] [ 1397.937178][T29743] dump_stack_lvl+0x16c/0x1f0 [ 1397.937197][T29743] should_fail_ex+0x512/0x640 [ 1397.937214][T29743] ? fs_reclaim_acquire+0xae/0x150 [ 1397.937238][T29743] should_failslab+0xc2/0x120 [ 1397.937259][T29743] __kmalloc_noprof+0xeb/0x910 [ 1397.937275][T29743] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1397.937299][T29743] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1397.937317][T29743] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1397.937341][T29743] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1397.937359][T29743] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1397.937393][T29743] ? lock_acquire+0x179/0x330 [ 1397.937407][T29743] ? find_held_lock+0x2b/0x80 [ 1397.937425][T29743] ? mnt_get_write_access+0x52/0x2f0 [ 1397.937442][T29743] tomoyo_file_open+0x6b/0x90 [ 1397.937456][T29743] security_file_open+0x84/0x1e0 [ 1397.937474][T29743] do_dentry_open+0x597/0x1590 [ 1397.937495][T29743] ? security_inode_permission+0xbf/0x260 [ 1397.937515][T29743] vfs_open+0x82/0x3f0 [ 1397.937532][T29743] path_openat+0x2078/0x3140 [ 1397.937558][T29743] ? __pfx_path_openat+0x10/0x10 [ 1397.937584][T29743] do_filp_open+0x20b/0x470 [ 1397.937604][T29743] ? __pfx_do_filp_open+0x10/0x10 [ 1397.937637][T29743] ? alloc_fd+0x471/0x7d0 [ 1397.937671][T29743] do_sys_openat2+0x121/0x290 [ 1397.937687][T29743] ? __pfx_do_sys_openat2+0x10/0x10 [ 1397.937711][T29743] __x64_sys_openat+0x174/0x210 [ 1397.937727][T29743] ? __pfx___x64_sys_openat+0x10/0x10 [ 1397.937750][T29743] do_syscall_64+0xcd/0xf80 [ 1397.937765][T29743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.937779][T29743] RIP: 0033:0x7f0b3af8f7c9 [ 1397.937791][T29743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1397.937804][T29743] RSP: 002b:00007f0b3bdc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1397.937817][T29743] RAX: ffffffffffffffda RBX: 00007f0b3b1e5fa0 RCX: 00007f0b3af8f7c9 [ 1397.937826][T29743] RDX: 000000000002ab42 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1397.937835][T29743] RBP: 00007f0b3b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1397.937843][T29743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1397.937851][T29743] R13: 00007f0b3b1e6038 R14: 00007f0b3b1e5fa0 R15: 00007ffe65067668 [ 1397.937870][T29743] [ 1397.937877][T29743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1405.503734][ T7178] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 1405.552162][ T7182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1405.563536][ T7182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1405.573792][ T7182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1405.583244][ T7182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1405.592999][ T7182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1406.435814][T29870] FAULT_INJECTION: forcing a failure. [ 1406.435814][T29870] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.571232][T29870] CPU: 0 UID: 0 PID: 29870 Comm: syz.6.6071 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1406.571261][T29870] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1406.571268][T29870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1406.571277][T29870] Call Trace: [ 1406.571282][T29870] [ 1406.571288][T29870] dump_stack_lvl+0x16c/0x1f0 [ 1406.571308][T29870] should_fail_ex+0x512/0x640 [ 1406.571326][T29870] ? fs_reclaim_acquire+0xae/0x150 [ 1406.571350][T29870] should_failslab+0xc2/0x120 [ 1406.571370][T29870] __kmalloc_noprof+0xeb/0x910 [ 1406.571387][T29870] ? ima_alloc_init_template+0x19d/0x720 [ 1406.571406][T29870] ? ima_alloc_init_template+0x19d/0x720 [ 1406.571420][T29870] ima_alloc_init_template+0x19d/0x720 [ 1406.571437][T29870] ? take_dentry_name_snapshot+0x319/0x7d0 [ 1406.571455][T29870] ima_store_measurement+0x1eb/0x5c0 [ 1406.571473][T29870] ? __pfx_ima_store_measurement+0x10/0x10 [ 1406.571487][T29870] ? release_dentry_name_snapshot+0x10/0x90 [ 1406.571508][T29870] ? ima_d_path+0x12b/0x2a0 [ 1406.571527][T29870] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1406.571558][T29870] process_measurement+0x17fa/0x22d0 [ 1406.571581][T29870] ? __pfx_process_measurement+0x10/0x10 [ 1406.571594][T29870] ? kasan_save_stack+0x42/0x60 [ 1406.571612][T29870] ? kasan_save_track+0x14/0x30 [ 1406.571630][T29870] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1406.571651][T29870] ? find_held_lock+0x2b/0x80 [ 1406.571669][T29870] ? aa_file_perm+0x29e/0x1560 [ 1406.571709][T29870] ima_file_mmap+0x1b6/0x1e0 [ 1406.571723][T29870] ? __pfx_ima_file_mmap+0x10/0x10 [ 1406.571741][T29870] security_mmap_file+0x88c/0x990 [ 1406.571760][T29870] vm_mmap_pgoff+0xec/0x470 [ 1406.571781][T29870] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1406.571798][T29870] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1406.571814][T29870] ? hugetlbfs_get_inode+0x31f/0x700 [ 1406.571834][T29870] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1406.571856][T29870] __x64_sys_mmap+0x125/0x190 [ 1406.571873][T29870] do_syscall_64+0xcd/0xf80 [ 1406.571888][T29870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.571902][T29870] RIP: 0033:0x7f0b3af8f7c9 [ 1406.571914][T29870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.571927][T29870] RSP: 002b:00007f0b3bda8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1406.571941][T29870] RAX: ffffffffffffffda RBX: 00007f0b3b1e6090 RCX: 00007f0b3af8f7c9 [ 1406.571950][T29870] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1406.571958][T29870] RBP: 00007f0b3b013f91 R08: 0000000000000005 R09: 0000300000000000 [ 1406.571966][T29870] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1406.571974][T29870] R13: 00007f0b3b1e6128 R14: 00007f0b3b1e6090 R15: 00007ffe65067668 [ 1406.571994][T29870] [ 1406.573883][ T30] audit: type=1804 audit(4295039113.340:93): pid=29870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.6.6071" name="anon_hugepage" dev="hugetlbfs" ino=153482 res=0 errno=0 [ 1407.672353][ T7182] Bluetooth: hci3: command tx timeout [ 1407.977771][T26545] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.035399][T29901] FAULT_INJECTION: forcing a failure. [ 1408.035399][T29901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1408.067597][T29864] chnl_net:caif_netlink_parms(): no params data found [ 1408.163729][T29901] CPU: 0 UID: 0 PID: 29901 Comm: syz.6.6076 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1408.163765][T29901] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1408.163775][T29901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1408.163784][T29901] Call Trace: [ 1408.163789][T29901] [ 1408.163794][T29901] dump_stack_lvl+0x16c/0x1f0 [ 1408.163813][T29901] should_fail_ex+0x512/0x640 [ 1408.163833][T29901] _copy_from_user+0x2e/0xd0 [ 1408.163851][T29901] get_user_ifreq+0x77/0x1c0 [ 1408.163873][T29901] sock_ioctl+0x586/0x6b0 [ 1408.163888][T29901] ? __pfx_sock_ioctl+0x10/0x10 [ 1408.163902][T29901] ? hook_file_ioctl_common+0x144/0x410 [ 1408.163923][T29901] ? __fget_files+0x20e/0x3c0 [ 1408.163945][T29901] ? __pfx_sock_ioctl+0x10/0x10 [ 1408.163960][T29901] __x64_sys_ioctl+0x18e/0x210 [ 1408.163979][T29901] do_syscall_64+0xcd/0xf80 [ 1408.163995][T29901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.164009][T29901] RIP: 0033:0x7f0b3af8f7c9 [ 1408.164021][T29901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1408.164034][T29901] RSP: 002b:00007f0b3bdc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1408.164048][T29901] RAX: ffffffffffffffda RBX: 00007f0b3b1e5fa0 RCX: 00007f0b3af8f7c9 [ 1408.164058][T29901] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000004 [ 1408.164066][T29901] RBP: 00007f0b3bdc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.164074][T29901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1408.164082][T29901] R13: 00007f0b3b1e6038 R14: 00007f0b3b1e5fa0 R15: 00007ffe65067668 [ 1408.164101][T29901] [ 1408.414585][T29904] FAULT_INJECTION: forcing a failure. [ 1408.414585][T29904] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.428084][T29904] CPU: 0 UID: 0 PID: 29904 Comm: syz.5.6077 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1408.428114][T29904] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1408.428122][T29904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1408.428131][T29904] Call Trace: [ 1408.428136][T29904] [ 1408.428143][T29904] dump_stack_lvl+0x16c/0x1f0 [ 1408.428163][T29904] should_fail_ex+0x512/0x640 [ 1408.428181][T29904] ? fs_reclaim_acquire+0xae/0x150 [ 1408.428206][T29904] should_failslab+0xc2/0x120 [ 1408.428227][T29904] kmem_cache_alloc_noprof+0x83/0x770 [ 1408.428243][T29904] ? __pfx_map_id_range_down+0x10/0x10 [ 1408.428262][T29904] ? security_inode_alloc+0x3b/0x2b0 [ 1408.428281][T29904] ? security_inode_alloc+0x3b/0x2b0 [ 1408.428295][T29904] security_inode_alloc+0x3b/0x2b0 [ 1408.428310][T29904] inode_init_always_gfp+0xced/0x1040 [ 1408.428333][T29904] alloc_inode+0x86/0x240 [ 1408.428349][T29904] sock_alloc+0x40/0x280 [ 1408.428382][T29904] __sock_create+0xc2/0x8a0 [ 1408.428401][T29904] __sys_socket+0x14d/0x260 [ 1408.428417][T29904] ? __pfx___sys_socket+0x10/0x10 [ 1408.428433][T29904] ? do_user_addr_fault+0x843/0x1370 [ 1408.428454][T29904] __x64_sys_socket+0x72/0xb0 [ 1408.428468][T29904] ? lockdep_hardirqs_on+0x7c/0x110 [ 1408.428483][T29904] do_syscall_64+0xcd/0xf80 [ 1408.428497][T29904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.428512][T29904] RIP: 0033:0x7f09197916e7 [ 1408.428524][T29904] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1408.428538][T29904] RSP: 002b:00007f091a53dfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1408.428552][T29904] RAX: ffffffffffffffda RBX: 00007f09199e6090 RCX: 00007f09197916e7 [ 1408.428561][T29904] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1408.428569][T29904] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1408.428577][T29904] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000000 [ 1408.428586][T29904] R13: 00007f09199e6128 R14: 00007f09199e6090 R15: 00007ffd9f44c5a8 [ 1408.428604][T29904] [ 1408.428629][T29904] socket: no more sockets [ 1408.887191][T26545] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.072864][T26545] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.106887][T29910] random: crng reseeded on system resumption [ 1409.298761][T26545] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.624185][T29864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.652450][T29864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.670909][T29864] bridge_slave_0: entered allmulticast mode [ 1409.687395][T29864] bridge_slave_0: entered promiscuous mode [ 1409.716531][ T7182] Bluetooth: hci3: command tx timeout [ 1409.845075][T29864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.881556][T29864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.919012][T29864] bridge_slave_1: entered allmulticast mode [ 1409.944053][T29938] futex_wake_op: syz.2.6083 tries to shift op by -2048; fix this program [ 1409.963147][T29864] bridge_slave_1: entered promiscuous mode [ 1410.025807][T29938] futex_wake_op: syz.2.6083 tries to shift op by -2048; fix this program [ 1410.140919][T29942] 0x000000000001-0x000000020000 : "" [ 1410.152743][T29864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.241651][T29942] ftl_cs: FTL header corrupt! [ 1410.292473][T29864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.516021][T26545] bridge_slave_1: left allmulticast mode [ 1410.545921][T26545] bridge_slave_1: left promiscuous mode [ 1410.590738][T26545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.639404][T26545] bridge_slave_0: left allmulticast mode [ 1410.684993][T26545] bridge_slave_0: left promiscuous mode [ 1410.720138][T26545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.753644][T26545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.772840][T26545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.791674][ T7182] Bluetooth: hci3: command tx timeout [ 1411.801386][T26545] bond0 (unregistering): Released all slaves [ 1411.976320][T29864] team0: Port device team_slave_0 added [ 1412.025546][T29864] team0: Port device team_slave_1 added [ 1412.166962][T29864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.215067][T29864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.382266][T29864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.491326][T29864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.498276][T29864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.624869][T29864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.923953][T29980] FAULT_INJECTION: forcing a failure. [ 1412.923953][T29980] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.975765][T29864] hsr_slave_0: entered promiscuous mode [ 1412.996341][T29864] hsr_slave_1: entered promiscuous mode [ 1413.007196][T29980] CPU: 0 UID: 0 PID: 29980 Comm: syz.6.6090 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1413.007227][T29980] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1413.007235][T29980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1413.007244][T29980] Call Trace: [ 1413.007249][T29980] [ 1413.007256][T29980] dump_stack_lvl+0x16c/0x1f0 [ 1413.007276][T29980] should_fail_ex+0x512/0x640 [ 1413.007297][T29980] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1413.007319][T29980] should_failslab+0xc2/0x120 [ 1413.007343][T29980] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1413.007361][T29980] ? __lock_acquire+0x436/0x2890 [ 1413.007375][T29980] ? __alloc_skb+0x156/0x410 [ 1413.007398][T29980] ? __alloc_skb+0x156/0x410 [ 1413.007414][T29980] __alloc_skb+0x156/0x410 [ 1413.007432][T29980] ? __pfx___alloc_skb+0x10/0x10 [ 1413.007458][T29980] tcp_stream_alloc_skb+0x34/0x670 [ 1413.007479][T29980] tcp_write_xmit+0x8b0/0x8710 [ 1413.007511][T29980] ? __sk_mem_schedule+0xd0/0x100 [ 1413.007536][T29980] tcp_sendmsg_locked+0x36d0/0x42a0 [ 1413.007568][T29980] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1413.007589][T29980] ? do_raw_spin_lock+0x12c/0x2b0 [ 1413.007607][T29980] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1413.007629][T29980] ? __local_bh_enable_ip+0xa4/0x120 [ 1413.007652][T29980] tcp_sendmsg+0x2e/0x50 [ 1413.007669][T29980] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1413.007686][T29980] inet_sendmsg+0xb9/0x140 [ 1413.007707][T29980] sock_write_iter+0x509/0x610 [ 1413.007724][T29980] ? __pfx_sock_write_iter+0x10/0x10 [ 1413.007751][T29980] ? bpf_lsm_file_permission+0x9/0x10 [ 1413.007772][T29980] ? security_file_permission+0x71/0x210 [ 1413.007793][T29980] ? rw_verify_area+0xcf/0x6c0 [ 1413.007815][T29980] vfs_write+0x7d3/0x11d0 [ 1413.007837][T29980] ? __pfx_sock_write_iter+0x10/0x10 [ 1413.007855][T29980] ? __pfx_vfs_write+0x10/0x10 [ 1413.007874][T29980] ? do_futex+0x122/0x350 [ 1413.007908][T29980] ? __x64_sys_futex+0x1e0/0x4c0 [ 1413.007926][T29980] ? __x64_sys_futex+0x1e9/0x4c0 [ 1413.007949][T29980] ksys_write+0x1f8/0x250 [ 1413.007972][T29980] ? __pfx_ksys_write+0x10/0x10 [ 1413.007998][T29980] do_syscall_64+0xcd/0xf80 [ 1413.008015][T29980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.008034][T29980] RIP: 0033:0x7f0b3af8f7c9 [ 1413.008049][T29980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1413.008063][T29980] RSP: 002b:00007f0b3bdc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1413.008079][T29980] RAX: ffffffffffffffda RBX: 00007f0b3b1e5fa0 RCX: 00007f0b3af8f7c9 [ 1413.008090][T29980] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1413.008099][T29980] RBP: 00007f0b3b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1413.008108][T29980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1413.008116][T29980] R13: 00007f0b3b1e6038 R14: 00007f0b3b1e5fa0 R15: 00007ffe65067668 [ 1413.008137][T29980] [ 1413.319349][T29864] debugfs: 'hsr0' already exists in 'hsr' [ 1413.325179][T29864] Cannot create hsr debugfs directory [ 1413.598797][T26545] hsr_slave_0: left promiscuous mode [ 1413.605186][T26545] hsr_slave_1: left promiscuous mode [ 1413.611669][T26545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1413.619673][T26545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.627896][T26545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1413.653659][T26545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.876170][T26545] veth1_macvtap: left promiscuous mode [ 1413.881889][T26545] veth0_macvtap: left promiscuous mode [ 1413.918780][ T7182] Bluetooth: hci3: command tx timeout [ 1413.946009][T26545] veth1_vlan: left promiscuous mode [ 1413.951309][T26545] veth0_vlan: left promiscuous mode [ 1413.994173][T29999] netlink: 'syz.2.6094': attribute type 8 has an invalid length. [ 1415.076251][T30015] FAULT_INJECTION: forcing a failure. [ 1415.076251][T30015] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.101749][T30015] CPU: 0 UID: 0 PID: 30015 Comm: syz.5.6098 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1415.101780][T30015] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1415.101787][T30015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1415.101796][T30015] Call Trace: [ 1415.101803][T30015] [ 1415.101810][T30015] dump_stack_lvl+0x16c/0x1f0 [ 1415.101830][T30015] should_fail_ex+0x512/0x640 [ 1415.101847][T30015] ? __kmalloc_noprof+0xca/0x910 [ 1415.101866][T30015] should_failslab+0xc2/0x120 [ 1415.101888][T30015] __kmalloc_noprof+0xeb/0x910 [ 1415.101903][T30015] ? sk_prot_alloc+0x1a8/0x2a0 [ 1415.101920][T30015] ? sk_prot_alloc+0x1a8/0x2a0 [ 1415.101931][T30015] sk_prot_alloc+0x1a8/0x2a0 [ 1415.101945][T30015] sk_alloc+0x36/0xe30 [ 1415.101963][T30015] __netlink_create+0x5e/0x2c0 [ 1415.101980][T30015] ? __wake_up+0x3f/0x60 [ 1415.102000][T30015] netlink_create+0x39e/0x620 [ 1415.102018][T30015] ? __pfx_genl_bind+0x10/0x10 [ 1415.102030][T30015] ? __pfx_genl_unbind+0x10/0x10 [ 1415.102041][T30015] ? __pfx_genl_release+0x10/0x10 [ 1415.102056][T30015] __sock_create+0x339/0x8a0 [ 1415.102074][T30015] __sys_socket+0x14d/0x260 [ 1415.102087][T30015] ? __fget_files+0x20e/0x3c0 [ 1415.102105][T30015] ? __pfx___sys_socket+0x10/0x10 [ 1415.102120][T30015] ? xfd_validate_state+0x61/0x180 [ 1415.102137][T30015] __x64_sys_socket+0x72/0xb0 [ 1415.102150][T30015] ? lockdep_hardirqs_on+0x7c/0x110 [ 1415.102163][T30015] do_syscall_64+0xcd/0xf80 [ 1415.102178][T30015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.102192][T30015] RIP: 0033:0x7f091978f7c9 [ 1415.102204][T30015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.102217][T30015] RSP: 002b:00007f091a560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1415.102230][T30015] RAX: ffffffffffffffda RBX: 00007f09199e5fa0 RCX: 00007f091978f7c9 [ 1415.102239][T30015] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1415.102247][T30015] RBP: 00007f0919813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1415.102255][T30015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.102262][T30015] R13: 00007f09199e6038 R14: 00007f09199e5fa0 R15: 00007ffd9f44c5a8 [ 1415.102281][T30015] [ 1415.477029][T26545] team0 (unregistering): Port device team_slave_1 removed [ 1415.529846][T26545] team0 (unregistering): Port device team_slave_0 removed [ 1417.368508][ T30] audit: type=1800 audit(4295039124.134:94): pid=30057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6106" name="members" dev="configfs" ino=154771 res=0 errno=0 [ 1417.433359][T29864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1417.548836][T29864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1417.647551][T29864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1417.698772][T29864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1417.786877][ T7182] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1417.809247][ T7182] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1418.001941][T29864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.061147][T29864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.102133][T26534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.109608][T26534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1418.180273][T26534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.187536][T26534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.397568][T30087] FAULT_INJECTION: forcing a failure. [ 1418.397568][T30087] name failslab, interval 1, probability 0, space 0, times 0 [ 1418.462702][T30087] CPU: 0 UID: 0 PID: 30087 Comm: syz.6.6109 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1418.462732][T30087] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1418.462738][T30087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1418.462746][T30087] Call Trace: [ 1418.462751][T30087] [ 1418.462757][T30087] dump_stack_lvl+0x16c/0x1f0 [ 1418.462776][T30087] should_fail_ex+0x512/0x640 [ 1418.462793][T30087] ? fs_reclaim_acquire+0xae/0x150 [ 1418.462822][T30087] should_failslab+0xc2/0x120 [ 1418.462844][T30087] __kmalloc_noprof+0xeb/0x910 [ 1418.462860][T30087] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1418.462883][T30087] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1418.462901][T30087] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1418.462922][T30087] ? tomoyo_profile+0x47/0x60 [ 1418.462937][T30087] tomoyo_path_number_perm+0x245/0x580 [ 1418.462953][T30087] ? tomoyo_path_number_perm+0x237/0x580 [ 1418.462975][T30087] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1418.462993][T30087] ? find_held_lock+0x2b/0x80 [ 1418.463027][T30087] ? find_held_lock+0x2b/0x80 [ 1418.463043][T30087] ? hook_file_ioctl_common+0x144/0x410 [ 1418.463064][T30087] ? __fget_files+0x20e/0x3c0 [ 1418.463088][T30087] security_file_ioctl+0x9b/0x240 [ 1418.463106][T30087] __x64_sys_ioctl+0xb7/0x210 [ 1418.463124][T30087] do_syscall_64+0xcd/0xf80 [ 1418.463140][T30087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.463154][T30087] RIP: 0033:0x7f0b3af8f7c9 [ 1418.463165][T30087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1418.463179][T30087] RSP: 002b:00007f0b3bdc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1418.463192][T30087] RAX: ffffffffffffffda RBX: 00007f0b3b1e5fa0 RCX: 00007f0b3af8f7c9 [ 1418.463201][T30087] RDX: 0000200000000100 RSI: 00000000c0109207 RDI: 0000000000000003 [ 1418.463210][T30087] RBP: 00007f0b3bdc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1418.463218][T30087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1418.463226][T30087] R13: 00007f0b3b1e6038 R14: 00007f0b3b1e5fa0 R15: 00007ffe65067668 [ 1418.463244][T30087] [ 1418.463250][T30087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1419.171211][T29864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1421.196763][T29864] veth0_vlan: entered promiscuous mode [ 1421.359709][T29864] veth1_vlan: entered promiscuous mode [ 1421.782946][T29864] veth0_macvtap: entered promiscuous mode [ 1421.833985][T29864] veth1_macvtap: entered promiscuous mode [ 1421.971977][T29864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1422.052053][T29864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1422.142684][ T8619] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.192665][ T8619] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.275171][ T8619] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.295597][T30152] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input116 [ 1422.332462][ T8619] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.706413][T26539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.714409][T26539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.903458][T26534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.938242][T26534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.465714][T30180] netlink: 'syz.4.6126': attribute type 11 has an invalid length. [ 1423.512034][T30180] netlink: 'syz.4.6126': attribute type 11 has an invalid length. [ 1423.552767][T30180] netlink: 'syz.4.6126': attribute type 11 has an invalid length. [ 1423.604840][T30180] netlink: 'syz.4.6126': attribute type 11 has an invalid length. [ 1424.393649][T30202] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1424.815513][T30219] FAULT_INJECTION: forcing a failure. [ 1424.815513][T30219] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.828876][T30219] CPU: 0 UID: 0 PID: 30219 Comm: syz.6.6133 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1424.828905][T30219] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1424.828911][T30219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1424.828919][T30219] Call Trace: [ 1424.828927][T30219] [ 1424.828935][T30219] dump_stack_lvl+0x16c/0x1f0 [ 1424.828957][T30219] should_fail_ex+0x512/0x640 [ 1424.828979][T30219] should_failslab+0xc2/0x120 [ 1424.829001][T30219] kmem_cache_alloc_noprof+0x83/0x770 [ 1424.829019][T30219] ? dst_alloc+0x99/0x1a0 [ 1424.829041][T30219] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1424.829059][T30219] ? dst_alloc+0x99/0x1a0 [ 1424.829075][T30219] dst_alloc+0x99/0x1a0 [ 1424.829099][T30219] ip6_pol_route+0x96b/0x1250 [ 1424.829124][T30219] ? __pfx_ip6_pol_route+0x10/0x10 [ 1424.829146][T30219] ? __lock_acquire+0x436/0x2890 [ 1424.829164][T30219] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1424.829180][T30219] fib6_rule_lookup+0x386/0x720 [ 1424.829198][T30219] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1424.829214][T30219] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1424.829237][T30219] ? lock_acquire+0x179/0x330 [ 1424.829258][T30219] ip6_route_output_flags+0x1d0/0x640 [ 1424.829275][T30219] icmp6_send+0x2389/0x3c50 [ 1424.829301][T30219] ? __pfx_icmp6_send+0x10/0x10 [ 1424.829314][T30219] ? __pfx_xfrm_policy_lookup_bytype+0x10/0x10 [ 1424.829346][T30219] ? xfrm_lookup_with_ifid+0x8b4/0x1e40 [ 1424.829373][T30219] ? find_held_lock+0x2b/0x80 [ 1424.829397][T30219] ? ip6_link_failure+0x31/0x5a0 [ 1424.829411][T30219] ip6_link_failure+0x31/0x5a0 [ 1424.829426][T30219] ? __pfx_ip6_link_failure+0x10/0x10 [ 1424.829439][T30219] xfrmi_xmit+0x4e5/0x22e0 [ 1424.829464][T30219] ? __pfx_xfrmi_xmit+0x10/0x10 [ 1424.829492][T30219] ? rcu_lockdep_current_cpu_online+0x35/0x150 [ 1424.829516][T30219] dev_hard_start_xmit+0x97/0x6e0 [ 1424.829537][T30219] __dev_queue_xmit+0x6d7/0x46c0 [ 1424.829556][T30219] ? find_held_lock+0x2b/0x80 [ 1424.829578][T30219] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1424.829595][T30219] ? _copy_from_iter+0x161/0x16c0 [ 1424.829620][T30219] ? packet_parse_headers+0x79a/0xb10 [ 1424.829637][T30219] ? packet_parse_headers+0x7a6/0xb10 [ 1424.829653][T30219] ? packet_parse_headers+0x21d/0xb10 [ 1424.829673][T30219] ? __pfx_packet_parse_headers+0x10/0x10 [ 1424.829697][T30219] ? skb_copy_datagram_from_iter+0x4f0/0x740 [ 1424.829721][T30219] ? dev_get_by_index+0x17c/0x380 [ 1424.829743][T30219] packet_xmit+0x23e/0x350 [ 1424.829761][T30219] packet_sendmsg+0x26e3/0x54a0 [ 1424.829787][T30219] ? __lock_acquire+0x436/0x2890 [ 1424.829801][T30219] ? __lock_acquire+0x436/0x2890 [ 1424.829818][T30219] ? aa_sk_perm+0x2f2/0xae0 [ 1424.829838][T30219] ? __pfx_packet_sendmsg+0x10/0x10 [ 1424.829854][T30219] ? __pfx_aa_sk_perm+0x10/0x10 [ 1424.829876][T30219] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1424.829895][T30219] ____sys_sendmsg+0xa5d/0xc30 [ 1424.829912][T30219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1424.829930][T30219] ? __pfx__kstrtoull+0x10/0x10 [ 1424.829953][T30219] ___sys_sendmsg+0x134/0x1d0 [ 1424.829982][T30219] ? __pfx____sys_sendmsg+0x10/0x10 [ 1424.830011][T30219] ? find_held_lock+0x2b/0x80 [ 1424.830041][T30219] __sys_sendmmsg+0x200/0x420 [ 1424.830062][T30219] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1424.830088][T30219] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1424.830111][T30219] ? fput+0x70/0xf0 [ 1424.830125][T30219] ? ksys_write+0x1ac/0x250 [ 1424.830144][T30219] ? __pfx_ksys_write+0x10/0x10 [ 1424.830167][T30219] __x64_sys_sendmmsg+0x9c/0x100 [ 1424.830186][T30219] ? lockdep_hardirqs_on+0x7c/0x110 [ 1424.830204][T30219] do_syscall_64+0xcd/0xf80 [ 1424.830219][T30219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.830234][T30219] RIP: 0033:0x7f0b3af8f7c9 [ 1424.830247][T30219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1424.830261][T30219] RSP: 002b:00007f0b3bdc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1424.830274][T30219] RAX: ffffffffffffffda RBX: 00007f0b3b1e5fa0 RCX: 00007f0b3af8f7c9 [ 1424.830284][T30219] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000004 [ 1424.830294][T30219] RBP: 00007f0b3bdc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.830304][T30219] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1424.830312][T30219] R13: 00007f0b3b1e6038 R14: 00007f0b3b1e5fa0 R15: 00007ffe65067668 [ 1424.830332][T30219] [ 1425.922574][T30223] hub 1-0:1.0: USB hub found [ 1425.962281][T30223] hub 1-0:1.0: 1 port detected [ 1426.266642][T30240] blktrace: Concurrent blktraces are not allowed on loop2 [ 1426.914513][ T7182] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 1427.167873][T21836] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 2 with max blocks 2 with error 117 [ 1427.301249][T21836] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1427.301249][T21836] [ 1427.371171][T21836] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 3 with max blocks 1 with error 117 [ 1427.473860][T21836] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1427.473860][T21836] [ 1428.443919][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.450538][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.137834][ T7182] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 1429.681414][T30321] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.4.6158: 7 [ 1430.402477][T30339] can0: slcan on pty83. [ 1430.511550][T30338] can0 (unregistered): slcan off pty83. [ 1431.539170][T30373] futex_wake_op: syz.2.6171 tries to shift op by -2048; fix this program [ 1431.612775][T30373] futex_wake_op: syz.2.6171 tries to shift op by -2048; fix this program [ 1431.736717][T30369] zswap: compressor not available [ 1432.180298][T30398] netlink: 334 bytes leftover after parsing attributes in process `syz.4.6175'. [ 1432.274927][T30398] IPv6: NLM_F_CREATE should be specified when creating new route [ 1432.433207][T30404] FAULT_INJECTION: forcing a failure. [ 1432.433207][T30404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1432.536859][T30404] CPU: 0 UID: 0 PID: 30404 Comm: syz.5.6173 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1432.536887][T30404] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1432.536894][T30404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1432.536903][T30404] Call Trace: [ 1432.536908][T30404] [ 1432.536914][T30404] dump_stack_lvl+0x16c/0x1f0 [ 1432.536933][T30404] should_fail_ex+0x512/0x640 [ 1432.536954][T30404] _copy_from_user+0x2e/0xd0 [ 1432.536971][T30404] sctp_getsockopt+0x1e92/0x7050 [ 1432.536999][T30404] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1432.537018][T30404] ? find_held_lock+0x2b/0x80 [ 1432.537037][T30404] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1432.537053][T30404] ? __lock_acquire+0x436/0x2890 [ 1432.537076][T30404] ? __lock_acquire+0x436/0x2890 [ 1432.537089][T30404] ? get_pid_task+0xfc/0x250 [ 1432.537110][T30404] ? find_held_lock+0x2b/0x80 [ 1432.537126][T30404] ? __might_fault+0xe3/0x190 [ 1432.537142][T30404] ? __might_fault+0xe3/0x190 [ 1432.537155][T30404] ? __might_fault+0x13b/0x190 [ 1432.537177][T30404] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1432.537191][T30404] do_sock_getsockopt+0x324/0x410 [ 1432.537206][T30404] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1432.537218][T30404] ? __fget_files+0x204/0x3c0 [ 1432.537246][T30404] __sys_getsockopt+0x123/0x1b0 [ 1432.537268][T30404] __x64_sys_getsockopt+0xbd/0x160 [ 1432.537286][T30404] ? do_syscall_64+0x91/0xf80 [ 1432.537299][T30404] ? lockdep_hardirqs_on+0x7c/0x110 [ 1432.537313][T30404] do_syscall_64+0xcd/0xf80 [ 1432.537327][T30404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.537341][T30404] RIP: 0033:0x7f091978f7c9 [ 1432.537352][T30404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1432.537368][T30404] RSP: 002b:00007f091a53f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1432.537382][T30404] RAX: ffffffffffffffda RBX: 00007f09199e6090 RCX: 00007f091978f7c9 [ 1432.537392][T30404] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003 [ 1432.537399][T30404] RBP: 00007f091a53f090 R08: 0000000000000000 R09: 0000000000000000 [ 1432.537408][T30404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1432.537415][T30404] R13: 00007f09199e6128 R14: 00007f09199e6090 R15: 00007ffd9f44c5a8 [ 1432.537439][T30404] [ 1433.326408][T30426] FAULT_INJECTION: forcing a failure. [ 1433.326408][T30426] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1433.422265][T30426] CPU: 0 UID: 0 PID: 30426 Comm: syz.5.6183 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1433.422295][T30426] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1433.422302][T30426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1433.422311][T30426] Call Trace: [ 1433.422317][T30426] [ 1433.422323][T30426] dump_stack_lvl+0x16c/0x1f0 [ 1433.422342][T30426] should_fail_ex+0x512/0x640 [ 1433.422363][T30426] get_futex_key+0x1d0/0x15f0 [ 1433.422382][T30426] ? __pfx_get_futex_key+0x10/0x10 [ 1433.422398][T30426] ? __pfx_shmem_get_unmapped_area+0x10/0x10 [ 1433.422414][T30426] ? __get_unmapped_area+0x267/0x3f0 [ 1433.422435][T30426] futex_wake+0xea/0x530 [ 1433.422455][T30426] ? __pfx_futex_wake+0x10/0x10 [ 1433.422476][T30426] ? up_write+0x282/0x4e0 [ 1433.422493][T30426] do_futex+0x1e3/0x350 [ 1433.422509][T30426] ? __pfx_do_futex+0x10/0x10 [ 1433.422525][T30426] ? find_held_lock+0x2b/0x80 [ 1433.422544][T30426] __x64_sys_futex+0x1e0/0x4c0 [ 1433.422561][T30426] ? __pfx___x64_sys_futex+0x10/0x10 [ 1433.422575][T30426] ? ksys_mmap_pgoff+0x85/0x5c0 [ 1433.422593][T30426] ? xfd_validate_state+0x61/0x180 [ 1433.422612][T30426] do_syscall_64+0xcd/0xf80 [ 1433.422626][T30426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.422640][T30426] RIP: 0033:0x7f091978f7c9 [ 1433.422653][T30426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1433.422666][T30426] RSP: 002b:00007f091a5600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1433.422679][T30426] RAX: ffffffffffffffda RBX: 00007f09199e5fa8 RCX: 00007f091978f7c9 [ 1433.422688][T30426] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f09199e5fac [ 1433.422696][T30426] RBP: 00007f09199e5fa0 R08: 00007f091a561000 R09: 0000000000000000 [ 1433.422704][T30426] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1433.422712][T30426] R13: 00007f09199e6038 R14: 00007ffd9f44c4c0 R15: 00007ffd9f44c5a8 [ 1433.422730][T30426] [ 1433.744831][T30436] netlink: 'syz.2.6185': attribute type 1 has an invalid length. [ 1433.753690][T30436] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1434.746237][T30465] FAULT_INJECTION: forcing a failure. [ 1434.746237][T30465] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.979044][T30465] CPU: 0 UID: 0 PID: 30465 Comm: syz.6.6189 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1434.979072][T30465] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1434.979080][T30465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1434.979089][T30465] Call Trace: [ 1434.979096][T30465] [ 1434.979102][T30465] dump_stack_lvl+0x16c/0x1f0 [ 1434.979123][T30465] should_fail_ex+0x512/0x640 [ 1434.979141][T30465] ? fs_reclaim_acquire+0xae/0x150 [ 1434.979166][T30465] should_failslab+0xc2/0x120 [ 1434.979187][T30465] __kmalloc_noprof+0xeb/0x910 [ 1434.979205][T30465] ? ima_alloc_init_template+0xb5/0x720 [ 1434.979226][T30465] ? ima_alloc_init_template+0xb5/0x720 [ 1434.979241][T30465] ima_alloc_init_template+0xb5/0x720 [ 1434.979258][T30465] ? take_dentry_name_snapshot+0x319/0x7d0 [ 1434.979277][T30465] ima_store_measurement+0x1eb/0x5c0 [ 1434.979295][T30465] ? __pfx_ima_store_measurement+0x10/0x10 [ 1434.979311][T30465] ? release_dentry_name_snapshot+0x10/0x90 [ 1434.979332][T30465] ? ima_d_path+0x12b/0x2a0 [ 1434.979353][T30465] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1434.979377][T30465] process_measurement+0x17fa/0x22d0 [ 1434.979399][T30465] ? __pfx_process_measurement+0x10/0x10 [ 1434.979419][T30465] ? kasan_save_stack+0x42/0x60 [ 1434.979439][T30465] ? kasan_save_track+0x14/0x30 [ 1434.979458][T30465] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1434.979481][T30465] ? find_held_lock+0x2b/0x80 [ 1434.979501][T30465] ? aa_file_perm+0x29e/0x1560 [ 1434.979542][T30465] ima_file_mmap+0x1b6/0x1e0 [ 1434.979556][T30465] ? __pfx_ima_file_mmap+0x10/0x10 [ 1434.979575][T30465] security_mmap_file+0x88c/0x990 [ 1434.979595][T30465] vm_mmap_pgoff+0xec/0x470 [ 1434.979617][T30465] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1434.979634][T30465] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1434.979651][T30465] ? hugetlbfs_get_inode+0x31f/0x700 [ 1434.979671][T30465] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1434.979700][T30465] __x64_sys_mmap+0x125/0x190 [ 1434.979718][T30465] do_syscall_64+0xcd/0xf80 [ 1434.979734][T30465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.979748][T30465] RIP: 0033:0x7f0b3af8f7c9 [ 1434.979761][T30465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1434.979774][T30465] RSP: 002b:00007f0b3bda8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1434.979788][T30465] RAX: ffffffffffffffda RBX: 00007f0b3b1e6090 RCX: 00007f0b3af8f7c9 [ 1434.979797][T30465] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1434.979806][T30465] RBP: 00007f0b3b013f91 R08: 0000000000000005 R09: 0000300000000000 [ 1434.979815][T30465] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1434.979824][T30465] R13: 00007f0b3b1e6128 R14: 00007f0b3b1e6090 R15: 00007ffe65067668 [ 1434.979844][T30465] [ 1434.979988][ T30] audit: type=1804 audit(4295039141.735:95): pid=30465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.6.6189" name="anon_hugepage" dev="hugetlbfs" ino=157083 res=0 errno=0 [ 1435.393426][T30477] FAULT_INJECTION: forcing a failure. [ 1435.393426][T30477] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.464895][T30477] CPU: 0 UID: 0 PID: 30477 Comm: syz.2.6193 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1435.464928][T30477] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1435.464935][T30477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1435.464944][T30477] Call Trace: [ 1435.464949][T30477] [ 1435.464956][T30477] dump_stack_lvl+0x16c/0x1f0 [ 1435.464974][T30477] should_fail_ex+0x512/0x640 [ 1435.464992][T30477] ? __kvmalloc_node_noprof+0x129/0xa40 [ 1435.465014][T30477] should_failslab+0xc2/0x120 [ 1435.465036][T30477] __kvmalloc_node_noprof+0x14a/0xa40 [ 1435.465053][T30477] ? __pfx___mutex_lock+0x10/0x10 [ 1435.465069][T30477] ? traverse.part.0.constprop.0+0x397/0x650 [ 1435.465093][T30477] ? traverse.part.0.constprop.0+0x397/0x650 [ 1435.465111][T30477] traverse.part.0.constprop.0+0x397/0x650 [ 1435.465130][T30477] ? find_held_lock+0x2b/0x80 [ 1435.465152][T30477] seq_read_iter+0x93c/0x12d0 [ 1435.465170][T30477] ? aa_file_perm+0x2ad/0x1560 [ 1435.465197][T30477] seq_read+0x3a3/0x570 [ 1435.465215][T30477] ? __pfx_seq_read+0x10/0x10 [ 1435.465236][T30477] ? get_pid_task+0xfc/0x250 [ 1435.465256][T30477] ? __pfx_seq_read+0x10/0x10 [ 1435.465273][T30477] proc_reg_read+0x240/0x330 [ 1435.465291][T30477] ? __pfx_proc_reg_read+0x10/0x10 [ 1435.465309][T30477] vfs_read+0x1e4/0xcf0 [ 1435.465333][T30477] ? __pfx_vfs_read+0x10/0x10 [ 1435.465350][T30477] ? find_held_lock+0x2b/0x80 [ 1435.465367][T30477] ? __fget_files+0x204/0x3c0 [ 1435.465390][T30477] ? __fget_files+0x20e/0x3c0 [ 1435.465407][T30477] ? __fget_files+0x170/0x3c0 [ 1435.465431][T30477] __x64_sys_pread64+0x1eb/0x250 [ 1435.465451][T30477] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1435.465477][T30477] do_syscall_64+0xcd/0xf80 [ 1435.465492][T30477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.465507][T30477] RIP: 0033:0x7f2f8638f7c9 [ 1435.465519][T30477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1435.465531][T30477] RSP: 002b:00007f2f8724f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1435.465545][T30477] RAX: ffffffffffffffda RBX: 00007f2f865e5fa0 RCX: 00007f2f8638f7c9 [ 1435.465554][T30477] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 1435.465562][T30477] RBP: 00007f2f8724f090 R08: 0000000000000000 R09: 0000000000000000 [ 1435.465570][T30477] R10: 0000000000000809 R11: 0000000000000246 R12: 0000000000000001 [ 1435.465578][T30477] R13: 00007f2f865e6038 R14: 00007f2f865e5fa0 R15: 00007fff2bddb0a8 [ 1435.465597][T30477] [ 1436.223581][T30490] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input117 [ 1436.244810][T30489] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1406 with max blocks 12 with error 117 [ 1436.354364][T30489] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1436.354364][T30489] [ 1436.656390][T30502] netlink: Setting conntrack mark requires 'commit' flag. [ 1437.137664][T30511] FAULT_INJECTION: forcing a failure. [ 1437.137664][T30511] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.193287][T30511] CPU: 0 UID: 0 PID: 30511 Comm: syz.5.6204 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1437.193318][T30511] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1437.193324][T30511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1437.193333][T30511] Call Trace: [ 1437.193339][T30511] [ 1437.193346][T30511] dump_stack_lvl+0x16c/0x1f0 [ 1437.193366][T30511] should_fail_ex+0x512/0x640 [ 1437.193384][T30511] ? fs_reclaim_acquire+0xae/0x150 [ 1437.193408][T30511] should_failslab+0xc2/0x120 [ 1437.193430][T30511] __kmalloc_noprof+0xeb/0x910 [ 1437.193447][T30511] ? ima_alloc_init_template+0x19d/0x720 [ 1437.193471][T30511] ? ima_alloc_init_template+0x19d/0x720 [ 1437.193486][T30511] ima_alloc_init_template+0x19d/0x720 [ 1437.193503][T30511] ? take_dentry_name_snapshot+0x319/0x7d0 [ 1437.193529][T30511] ima_store_measurement+0x1eb/0x5c0 [ 1437.193549][T30511] ? __pfx_ima_store_measurement+0x10/0x10 [ 1437.193565][T30511] ? release_dentry_name_snapshot+0x10/0x90 [ 1437.193588][T30511] ? ima_d_path+0x12b/0x2a0 [ 1437.193608][T30511] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1437.193633][T30511] process_measurement+0x17fa/0x22d0 [ 1437.193654][T30511] ? __pfx_process_measurement+0x10/0x10 [ 1437.193667][T30511] ? kasan_save_stack+0x42/0x60 [ 1437.193684][T30511] ? kasan_save_track+0x14/0x30 [ 1437.193701][T30511] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1437.193722][T30511] ? find_held_lock+0x2b/0x80 [ 1437.193741][T30511] ? aa_file_perm+0x29e/0x1560 [ 1437.193785][T30511] ima_file_mmap+0x1b6/0x1e0 [ 1437.193799][T30511] ? __pfx_ima_file_mmap+0x10/0x10 [ 1437.193818][T30511] security_mmap_file+0x88c/0x990 [ 1437.193837][T30511] vm_mmap_pgoff+0xec/0x470 [ 1437.193859][T30511] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1437.193876][T30511] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1437.193893][T30511] ? hugetlbfs_get_inode+0x31f/0x700 [ 1437.193914][T30511] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1437.193936][T30511] __x64_sys_mmap+0x125/0x190 [ 1437.193954][T30511] do_syscall_64+0xcd/0xf80 [ 1437.193969][T30511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.193984][T30511] RIP: 0033:0x7f091978f7c9 [ 1437.193996][T30511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1437.194010][T30511] RSP: 002b:00007f091a53f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1437.194023][T30511] RAX: ffffffffffffffda RBX: 00007f09199e6090 RCX: 00007f091978f7c9 [ 1437.194032][T30511] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1437.194041][T30511] RBP: 00007f0919813f91 R08: 0000000000000005 R09: 0000300000000000 [ 1437.194050][T30511] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1437.194058][T30511] R13: 00007f09199e6128 R14: 00007f09199e6090 R15: 00007ffd9f44c5a8 [ 1437.194078][T30511] [ 1438.147912][ T30] audit: type=1804 audit(4295039144.904:96): pid=30511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.5.6204" name="anon_hugepage" dev="hugetlbfs" ino=157310 res=0 errno=0 [ 1438.347125][T30534] [U] [ 1438.349954][T30534] [U] [ 1438.352646][T30534] [U] [ 1438.355438][T30534] [U] [ 1438.431879][T30534] [U] [ 1438.434686][T30534] [U] ¨0fjŽ{™ÞöŒƒ´»x,æNóªdV9ÅæÈ±«Eó#;r±–ân‰‚âM'0ÅÞÿ«6t²b÷¡~Ñà‡üÜø?iV%ïÜ›|$=E’ÒiI [ 1438.444644][T30534] [U] çw«#õ8~[ð½âÆ"›¡Æœ«kìß×™åÄúªUNÁˆéÚ Á-SryNÃ~ÝQׯ-ñÈYn¾X [ 1438.452358][T30534] [U] zå¾C×î-¢g©˜©ä䕼­8ÏL ÞïFiáŸY™j¡Ã.nŸ×™îÛ)äz5Y"3…Φ­]Êʼn颸#¶yûŒ>¶2èo·úù¨j‡|Ód6øÄ‘£pfoUø‘Gmh?°ö£ønF:¥Ð— “CÔ·Ž ÕZ_o#p#¡fÊ© [ 1438.466926][T30534] [U] VjA á““5 ?Íû¨ý5XÚ‡Pzæû¶Ú‰(c3YÏóÃò=F5ËD‹bŸÊ6¶©Î´·~œ!ÇúS9Ô¨EZ0Ö¥c¿À Š$ÆÄ$à𨠀·’Àø ˆ%¼l³ÂOSÐÀky[…,­¤+>,’ÜÚ]þ[æÝÐ …ZÜ%ôl‰‹Ä.uâma [ 1438.482017][T30534] [U] dï6œ­¶úÊ:7:.Ù:A™0¾ÅÈÐc”œWñšÄ‚€0a®¬¿ÚG;léc$–þ,ØáðÛrßÞ® [ 1438.503951][T30534] [U] ´î¿;éÙR#l ã˜ZÚ9gq6•^\ªðÞ„+¦q$¸'½Î~7ÚË8â¸w#G3‡cb—­Âžy¸_x Ø=.5™vcˆýPü¼L¦`rÕ«Ì”‹"øuÉhVZK°÷Ì#}ï4Ò¯b¾Ðd.Hþò0YŸüù¥î¯~^!ë e"üt·'à‹xá6X&‘¡®Ï€Kr½s›]r]l`–+â7ƒ«Çž‘M†šií‰o†eO_缬ßt>Óõ’ºŒÏ¥áiˆKTDye¥°`!¦Æ’€êúÇpôø6ÄžqðÉaÈ\~¢O‘[ÆãÞëÊ^ [ 1438.568443][T30534] [U] iTî=âÞ‘,:’þšN?¹FC½¥$ÞÆTÖ_Ñ÷é"ñ0e¡­¸ïP±ü®ávéT üëÝ×4.šÎÍó/‘wNåƒp¯ÒÈëæãß ù®:ÁÓoýÙ3ó¨ã$pˆ9„J‚¤˜¾#¸‚B4Å ´6Snɶ¾A›šE;•ø2Þ@UEHîäÁ44Á]i:{u-%å ‹˜Söžr˜kïïµ…ª”)Ô«Év²tïY]å“Ghoá9έ¯÷áʸ&Ýëòx}9C"³ƒó—ëhSùŠ9¥_Än“v-|8ó*­Œ#þxx;¯Åã5©áwŸ<Óôîèú óñÓm¶Ãò³—e9/É©zÔsüFžî”›.¶ \=áÊÉIËrålÇý–LtE‹ [ 1438.910754][T30546] FAULT_INJECTION: forcing a failure. [ 1438.910754][T30546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1438.994519][T30546] CPU: 0 UID: 0 PID: 30546 Comm: syz.5.6214 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1438.994547][T30546] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1438.994554][T30546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1438.994568][T30546] Call Trace: [ 1438.994574][T30546] [ 1438.994580][T30546] dump_stack_lvl+0x16c/0x1f0 [ 1438.994599][T30546] should_fail_ex+0x512/0x640 [ 1438.994619][T30546] should_fail_alloc_page+0xe7/0x130 [ 1438.994642][T30546] prepare_alloc_pages+0x401/0x670 [ 1438.994666][T30546] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1438.994686][T30546] ? stack_trace_save+0x8e/0xc0 [ 1438.994707][T30546] ? __pfx_stack_trace_save+0x10/0x10 [ 1438.994728][T30546] ? stack_depot_save_flags+0x29/0x9b0 [ 1438.994749][T30546] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1438.994765][T30546] ? kasan_save_track+0x14/0x30 [ 1438.994783][T30546] ? __kmalloc_noprof+0x33d/0x910 [ 1438.994798][T30546] ? do_splice_read+0x285/0x370 [ 1438.994817][T30546] ? splice_file_to_pipe+0x109/0x120 [ 1438.994836][T30546] ? do_sendfile+0x400/0xe50 [ 1438.994857][T30546] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1438.994869][T30546] ? do_syscall_64+0xcd/0xf80 [ 1438.994882][T30546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.994909][T30546] alloc_pages_bulk_noprof+0x77a/0x1410 [ 1438.994932][T30546] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1438.994954][T30546] ? __kmalloc_noprof+0x35d/0x910 [ 1438.994969][T30546] ? copy_splice_read+0x1a8/0xc20 [ 1438.994991][T30546] copy_splice_read+0x1e1/0xc20 [ 1438.995011][T30546] ? __lock_acquire+0x436/0x2890 [ 1438.995025][T30546] ? __pfx_aa_file_perm+0x10/0x10 [ 1438.995055][T30546] ? __pfx_copy_splice_read+0x10/0x10 [ 1438.995083][T30546] ? __fget_files+0x204/0x3c0 [ 1438.995104][T30546] ? __pfx_copy_splice_read+0x10/0x10 [ 1438.995122][T30546] do_splice_read+0x285/0x370 [ 1438.995144][T30546] splice_file_to_pipe+0x109/0x120 [ 1438.995166][T30546] do_sendfile+0x400/0xe50 [ 1438.995188][T30546] ? __pfx_do_sendfile+0x10/0x10 [ 1438.995206][T30546] ? __fget_files+0x20e/0x3c0 [ 1438.995230][T30546] __x64_sys_sendfile64+0x1d8/0x220 [ 1438.995243][T30546] ? ksys_write+0x1ac/0x250 [ 1438.995261][T30546] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1438.995281][T30546] do_syscall_64+0xcd/0xf80 [ 1438.995295][T30546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.995308][T30546] RIP: 0033:0x7f091978f7c9 [ 1438.995320][T30546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1438.995333][T30546] RSP: 002b:00007f091a560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1438.995346][T30546] RAX: ffffffffffffffda RBX: 00007f09199e5fa0 RCX: 00007f091978f7c9 [ 1438.995355][T30546] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 1438.995363][T30546] RBP: 00007f091a560090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.995371][T30546] R10: 000000000000ee39 R11: 0000000000000246 R12: 0000000000000001 [ 1438.995379][T30546] R13: 00007f09199e6038 R14: 00007f09199e5fa0 R15: 00007ffd9f44c5a8 [ 1438.995398][T30546] [ 1439.594555][T30534] [U] ~°1ížý‡I[)ì]R¾w ;ç^Wù‚'ôðg¢>·Ù*ƹXyÓ˜rJ.°²s¡rí.±2Ü\¥Ù¹¯/3 Õ£ˆVüïÕ¶‡ xãâu¼ý+{óakÒ¢ÀdÅÄrÔ§¬©»¹ ±þ‰:UBv¦'n+-òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ\ [ 1439.641964][T30534] [U] òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ\ [ 1439.689644][T30534] [U] òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ\ [ 1439.736899][T30534] [U] òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ\ [ 1439.844224][T30534] [U] òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ [ 1440.761403][ T30] audit: type=1800 audit(4295039147.512:97): pid=30576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6220" name="members" dev="configfs" ino=157848 res=0 errno=0 [ 1442.245903][T30614] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6234'. [ 1443.282031][T30639] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1443.302408][T30639] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1443.379599][T30639] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1443.432817][T30642] FAULT_INJECTION: forcing a failure. [ 1443.432817][T30642] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.459852][T30639] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1443.470265][T30642] CPU: 0 UID: 0 PID: 30642 Comm: syz.5.6243 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1443.470294][T30642] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1443.470301][T30642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1443.470310][T30642] Call Trace: [ 1443.470316][T30642] [ 1443.470322][T30642] dump_stack_lvl+0x16c/0x1f0 [ 1443.470341][T30642] should_fail_ex+0x512/0x640 [ 1443.470359][T30642] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1443.470378][T30642] should_failslab+0xc2/0x120 [ 1443.470400][T30642] __kmalloc_cache_noprof+0x80/0x800 [ 1443.470414][T30642] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1443.470438][T30642] ? sctp_endpoint_new+0xfc/0xb20 [ 1443.470455][T30642] ? sctp_endpoint_new+0xfc/0xb20 [ 1443.470468][T30642] sctp_endpoint_new+0xfc/0xb20 [ 1443.470484][T30642] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 1443.470498][T30642] ? lockdep_init_map_type+0x5c/0x270 [ 1443.470514][T30642] ? lockdep_init_map_type+0x5c/0x270 [ 1443.470530][T30642] sctp_init_sock+0xe2b/0x1310 [ 1443.470543][T30642] ? __pfx_sctp_init_sock+0x10/0x10 [ 1443.470557][T30642] inet_create+0x939/0x1040 [ 1443.470575][T30642] ? inet_create+0x93/0x1040 [ 1443.470594][T30642] __sock_create+0x339/0x8a0 [ 1443.470613][T30642] __sys_socket+0x14d/0x260 [ 1443.470626][T30642] ? fput+0x70/0xf0 [ 1443.470639][T30642] ? __pfx___sys_socket+0x10/0x10 [ 1443.470654][T30642] ? syscall_user_dispatch+0x78/0x140 [ 1443.470674][T30642] __x64_sys_socket+0x72/0xb0 [ 1443.470689][T30642] do_syscall_64+0xcd/0xf80 [ 1443.470703][T30642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.470717][T30642] RIP: 0033:0x7f091978f7c9 [ 1443.470729][T30642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1443.470742][T30642] RSP: 002b:00007f091a560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1443.470757][T30642] RAX: ffffffffffffffda RBX: 00007f09199e5fa0 RCX: 00007f091978f7c9 [ 1443.470768][T30642] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 1443.470777][T30642] RBP: 00007f0919813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1443.470785][T30642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1443.470793][T30642] R13: 00007f09199e6038 R14: 00007f09199e5fa0 R15: 00007ffd9f44c5a8 [ 1443.470811][T30642] [ 1443.475333][T30639] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1445.327711][ T7182] Bluetooth: hci1: command 0x0c1a tx timeout [ 1445.407657][ T7182] Bluetooth: hci0: command 0x0c1a tx timeout [ 1445.488098][ T7182] Bluetooth: hci4: command 0x0c1a tx timeout [ 1445.811247][T30639] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1445.837961][T30639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1445.857289][T30639] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1445.889149][T30639] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1446.529855][T30686] can: request_module (can-proto-0) failed. [ 1446.656486][T30686] random: crng reseeded on system resumption [ 1447.411239][ T7182] Bluetooth: hci1: command 0x0c1a tx timeout [ 1447.569990][ T7182] Bluetooth: hci4: command 0x0c1a tx timeout [ 1447.890726][ T7182] Bluetooth: hci3: command 0x0c1a tx timeout [ 1448.093152][T30730] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6268'. [ 1449.651615][ T7182] Bluetooth: hci4: command 0x0c1a tx timeout [ 1449.962554][T30771] FAULT_INJECTION: forcing a failure. [ 1449.962554][T30771] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.981960][ T7182] Bluetooth: hci3: command 0x0c1a tx timeout [ 1450.092030][T30771] CPU: 0 UID: 0 PID: 30771 Comm: syz.2.6280 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1450.092059][T30771] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1450.092066][T30771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1450.092075][T30771] Call Trace: [ 1450.092081][T30771] [ 1450.092087][T30771] dump_stack_lvl+0x16c/0x1f0 [ 1450.092107][T30771] should_fail_ex+0x512/0x640 [ 1450.092125][T30771] ? fs_reclaim_acquire+0xae/0x150 [ 1450.092148][T30771] should_failslab+0xc2/0x120 [ 1450.092169][T30771] __kmalloc_noprof+0xeb/0x910 [ 1450.092185][T30771] ? ima_alloc_init_template+0xb5/0x720 [ 1450.092204][T30771] ? ima_alloc_init_template+0xb5/0x720 [ 1450.092218][T30771] ima_alloc_init_template+0xb5/0x720 [ 1450.092235][T30771] ? take_dentry_name_snapshot+0x319/0x7d0 [ 1450.092253][T30771] ima_store_measurement+0x1eb/0x5c0 [ 1450.092277][T30771] ? __pfx_ima_store_measurement+0x10/0x10 [ 1450.092297][T30771] ? release_dentry_name_snapshot+0x10/0x90 [ 1450.092318][T30771] ? ima_d_path+0x12b/0x2a0 [ 1450.092338][T30771] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1450.092362][T30771] process_measurement+0x17fa/0x22d0 [ 1450.092382][T30771] ? __pfx_process_measurement+0x10/0x10 [ 1450.092394][T30771] ? kasan_save_stack+0x42/0x60 [ 1450.092412][T30771] ? kasan_save_track+0x14/0x30 [ 1450.092428][T30771] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1450.092449][T30771] ? find_held_lock+0x2b/0x80 [ 1450.092467][T30771] ? aa_file_perm+0x29e/0x1560 [ 1450.092507][T30771] ima_file_mmap+0x1b6/0x1e0 [ 1450.092530][T30771] ? __pfx_ima_file_mmap+0x10/0x10 [ 1450.092549][T30771] security_mmap_file+0x88c/0x990 [ 1450.092569][T30771] vm_mmap_pgoff+0xec/0x470 [ 1450.092590][T30771] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1450.092606][T30771] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1450.092623][T30771] ? hugetlbfs_get_inode+0x31f/0x700 [ 1450.092643][T30771] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1450.092665][T30771] __x64_sys_mmap+0x125/0x190 [ 1450.092682][T30771] do_syscall_64+0xcd/0xf80 [ 1450.092697][T30771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.092711][T30771] RIP: 0033:0x7f2f8638f7c9 [ 1450.092724][T30771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1450.092737][T30771] RSP: 002b:00007f2f8722e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1450.092751][T30771] RAX: ffffffffffffffda RBX: 00007f2f865e6090 RCX: 00007f2f8638f7c9 [ 1450.092761][T30771] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1450.092769][T30771] RBP: 00007f2f86413f91 R08: 0000000000000005 R09: 0000300000000000 [ 1450.092778][T30771] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1450.092787][T30771] R13: 00007f2f865e6128 R14: 00007f2f865e6090 R15: 00007fff2bddb0a8 [ 1450.092806][T30771] [ 1451.611358][ T30] audit: type=1804 audit(4295039158.357:98): pid=30771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.6280" name="anon_hugepage" dev="hugetlbfs" ino=158796 res=0 errno=0 [ 1452.051286][ T7182] Bluetooth: hci3: command 0x0c1a tx timeout [ 1453.248218][T30813] FAULT_INJECTION: forcing a failure. [ 1453.248218][T30813] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.263657][T30816] FAULT_INJECTION: forcing a failure. [ 1453.263657][T30816] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.302414][T30816] CPU: 0 UID: 0 PID: 30816 Comm: syz.2.6292 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1453.302445][T30816] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1453.302451][T30816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1453.302460][T30816] Call Trace: [ 1453.302466][T30816] [ 1453.302473][T30816] dump_stack_lvl+0x16c/0x1f0 [ 1453.302492][T30816] should_fail_ex+0x512/0x640 [ 1453.302512][T30816] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1453.302531][T30816] should_failslab+0xc2/0x120 [ 1453.302553][T30816] kmem_cache_alloc_noprof+0x83/0x770 [ 1453.302569][T30816] ? seq_open+0x55/0x170 [ 1453.302588][T30816] ? seq_open+0x55/0x170 [ 1453.302601][T30816] seq_open+0x55/0x170 [ 1453.302617][T30816] blk_mq_debugfs_open+0x106/0x1b0 [ 1453.302638][T30816] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 1453.302654][T30816] full_proxy_open_regular+0x1b9/0x350 [ 1453.302677][T30816] do_dentry_open+0x748/0x1590 [ 1453.302696][T30816] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1453.302720][T30816] vfs_open+0x82/0x3f0 [ 1453.302737][T30816] path_openat+0x2078/0x3140 [ 1453.302763][T30816] ? __pfx_path_openat+0x10/0x10 [ 1453.302788][T30816] do_filp_open+0x20b/0x470 [ 1453.302808][T30816] ? __pfx_do_filp_open+0x10/0x10 [ 1453.302840][T30816] ? alloc_fd+0x471/0x7d0 [ 1453.302874][T30816] do_sys_openat2+0x121/0x290 [ 1453.302891][T30816] ? __pfx_do_sys_openat2+0x10/0x10 [ 1453.302915][T30816] __x64_sys_openat+0x174/0x210 [ 1453.302932][T30816] ? __pfx___x64_sys_openat+0x10/0x10 [ 1453.302956][T30816] do_syscall_64+0xcd/0xf80 [ 1453.302972][T30816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.302986][T30816] RIP: 0033:0x7f2f8638f7c9 [ 1453.302998][T30816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1453.303013][T30816] RSP: 002b:00007f2f8724f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1453.303027][T30816] RAX: ffffffffffffffda RBX: 00007f2f865e5fa0 RCX: 00007f2f8638f7c9 [ 1453.303036][T30816] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1453.303045][T30816] RBP: 00007f2f86413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1453.303053][T30816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1453.303061][T30816] R13: 00007f2f865e6038 R14: 00007f2f865e5fa0 R15: 00007fff2bddb0a8 [ 1453.303080][T30816] [ 1453.821867][T30813] CPU: 0 UID: 0 PID: 30813 Comm: syz.6.6291 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1453.821898][T30813] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1453.821905][T30813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1453.821914][T30813] Call Trace: [ 1453.821920][T30813] [ 1453.821926][T30813] dump_stack_lvl+0x16c/0x1f0 [ 1453.821946][T30813] should_fail_ex+0x512/0x640 [ 1453.821964][T30813] ? fs_reclaim_acquire+0xae/0x150 [ 1453.821988][T30813] should_failslab+0xc2/0x120 [ 1453.822009][T30813] __kmalloc_noprof+0xeb/0x910 [ 1453.822024][T30813] ? ima_alloc_init_template+0xb5/0x720 [ 1453.822043][T30813] ? ima_alloc_init_template+0xb5/0x720 [ 1453.822066][T30813] ima_alloc_init_template+0xb5/0x720 [ 1453.822084][T30813] ? take_dentry_name_snapshot+0x319/0x7d0 [ 1453.822104][T30813] ima_store_measurement+0x1eb/0x5c0 [ 1453.822123][T30813] ? __pfx_ima_store_measurement+0x10/0x10 [ 1453.822138][T30813] ? release_dentry_name_snapshot+0x10/0x90 [ 1453.822158][T30813] ? ima_d_path+0x12b/0x2a0 [ 1453.822178][T30813] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1453.822202][T30813] process_measurement+0x17fa/0x22d0 [ 1453.822223][T30813] ? __pfx_process_measurement+0x10/0x10 [ 1453.822235][T30813] ? kasan_save_stack+0x42/0x60 [ 1453.822252][T30813] ? kasan_save_track+0x14/0x30 [ 1453.822269][T30813] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1453.822289][T30813] ? find_held_lock+0x2b/0x80 [ 1453.822307][T30813] ? aa_file_perm+0x29e/0x1560 [ 1453.822347][T30813] ima_file_mmap+0x1b6/0x1e0 [ 1453.822361][T30813] ? __pfx_ima_file_mmap+0x10/0x10 [ 1453.822379][T30813] security_mmap_file+0x88c/0x990 [ 1453.822398][T30813] vm_mmap_pgoff+0xec/0x470 [ 1453.822419][T30813] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1453.822435][T30813] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1453.822452][T30813] ? hugetlbfs_get_inode+0x31f/0x700 [ 1453.822472][T30813] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1453.822494][T30813] __x64_sys_mmap+0x125/0x190 [ 1453.822511][T30813] do_syscall_64+0xcd/0xf80 [ 1453.822526][T30813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.822541][T30813] RIP: 0033:0x7f0b3af8f7c9 [ 1453.822554][T30813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1453.822567][T30813] RSP: 002b:00007f0b3bda8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1453.822580][T30813] RAX: ffffffffffffffda RBX: 00007f0b3b1e6090 RCX: 00007f0b3af8f7c9 [ 1453.822589][T30813] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1453.822597][T30813] RBP: 00007f0b3b013f91 R08: 0000000000000005 R09: 0000300000000000 [ 1453.822605][T30813] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1453.822613][T30813] R13: 00007f0b3b1e6128 R14: 00007f0b3b1e6090 R15: 00007ffe65067668 [ 1453.822633][T30813] [ 1454.212532][ T30] audit: type=1804 audit(4295039160.576:99): pid=30813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.6.6291" name="anon_hugepage" dev="hugetlbfs" ino=158989 res=0 errno=0 [ 1454.877965][T30843] FAULT_INJECTION: forcing a failure. [ 1454.877965][T30843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1454.946641][T30843] CPU: 0 UID: 0 PID: 30843 Comm: syz.4.6297 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1454.946670][T30843] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1454.946676][T30843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1454.946685][T30843] Call Trace: [ 1454.946690][T30843] [ 1454.946703][T30843] dump_stack_lvl+0x16c/0x1f0 [ 1454.946721][T30843] should_fail_ex+0x512/0x640 [ 1454.946742][T30843] _copy_to_user+0x32/0xd0 [ 1454.946760][T30843] simple_read_from_buffer+0xcb/0x170 [ 1454.946781][T30843] proc_fail_nth_read+0x197/0x240 [ 1454.946797][T30843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1454.946812][T30843] ? rw_verify_area+0xcf/0x6c0 [ 1454.946830][T30843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1454.946844][T30843] vfs_read+0x1e4/0xcf0 [ 1454.946863][T30843] ? __pfx___mutex_lock+0x10/0x10 [ 1454.946880][T30843] ? __pfx_vfs_read+0x10/0x10 [ 1454.946903][T30843] ? __fget_files+0x20e/0x3c0 [ 1454.946928][T30843] ksys_read+0x12a/0x250 [ 1454.946947][T30843] ? __pfx_ksys_read+0x10/0x10 [ 1454.946971][T30843] do_syscall_64+0xcd/0xf80 [ 1454.946986][T30843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.947001][T30843] RIP: 0033:0x7f878b58e1dc [ 1454.947013][T30843] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1454.947027][T30843] RSP: 002b:00007f878c415030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1454.947040][T30843] RAX: ffffffffffffffda RBX: 00007f878b7e5fa0 RCX: 00007f878b58e1dc [ 1454.947049][T30843] RDX: 000000000000000f RSI: 00007f878c4150a0 RDI: 0000000000000005 [ 1454.947058][T30843] RBP: 00007f878c415090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.947066][T30843] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000002 [ 1454.947074][T30843] R13: 00007f878b7e6038 R14: 00007f878b7e5fa0 R15: 00007ffd51561b08 [ 1454.947093][T30843] [ 1457.154138][T30879] netlink: 25 bytes leftover after parsing attributes in process `syz.6.6304'. [ 1457.175561][T30882] binder: 30881:30882 ioctl c018620c 0 returned -1 [ 1457.962733][T30898] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1459.269541][T14245] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 2 with max blocks 3 with error 117 [ 1459.323382][T14245] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1459.323382][T14245] [ 1459.370392][T14245] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 3 with max blocks 7 with error 117 [ 1459.397073][T14245] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1459.397073][T14245] [ 1459.813758][T30926] zswap: compressor not available [ 1459.860914][T30944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6320'. [ 1459.981622][T30944] can: request_module (can-proto-0) failed. [ 1461.558485][T31004] netlink: 'syz.2.6332': attribute type 3 has an invalid length. [ 1462.634312][T31023] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1462.900595][T31032] FAULT_INJECTION: forcing a failure. [ 1462.900595][T31032] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.951842][T31032] CPU: 0 UID: 0 PID: 31032 Comm: syz.6.6338 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1462.951872][T31032] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1462.951878][T31032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1462.951887][T31032] Call Trace: [ 1462.951892][T31032] [ 1462.951898][T31032] dump_stack_lvl+0x16c/0x1f0 [ 1462.951917][T31032] should_fail_ex+0x512/0x640 [ 1462.951935][T31032] ? __kvmalloc_node_noprof+0x129/0xa40 [ 1462.951957][T31032] should_failslab+0xc2/0x120 [ 1462.951978][T31032] __kvmalloc_node_noprof+0x14a/0xa40 [ 1462.951997][T31032] ? kfree+0x27d/0x6e0 [ 1462.952022][T31032] ? snd_pcm_oss_change_params_locked+0x1e96/0x3ad0 [ 1462.952045][T31032] ? snd_pcm_oss_change_params_locked+0x1e96/0x3ad0 [ 1462.952060][T31032] snd_pcm_oss_change_params_locked+0x1e96/0x3ad0 [ 1462.952085][T31032] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1462.952117][T31032] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1462.952133][T31032] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1462.952147][T31032] snd_pcm_oss_sync+0x1de/0x840 [ 1462.952161][T31032] ? kmem_cache_free+0x171/0x770 [ 1462.952179][T31032] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1462.952195][T31032] snd_pcm_oss_release+0x28b/0x310 [ 1462.952210][T31032] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1462.952225][T31032] __fput+0x402/0xb70 [ 1462.952243][T31032] task_work_run+0x150/0x240 [ 1462.952260][T31032] ? __pfx_task_work_run+0x10/0x10 [ 1462.952276][T31032] ? __do_sys_close_range+0x278/0x730 [ 1462.952304][T31032] exit_to_user_mode_loop+0xfb/0x540 [ 1462.952324][T31032] do_syscall_64+0x4ee/0xf80 [ 1462.952340][T31032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.952354][T31032] RIP: 0033:0x7f0b3af8f7c9 [ 1462.952367][T31032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.952380][T31032] RSP: 002b:00007f0b3bdc9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1462.952394][T31032] RAX: 0000000000000000 RBX: 00007f0b3b1e5fa0 RCX: 00007f0b3af8f7c9 [ 1462.952403][T31032] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1462.952410][T31032] RBP: 00007f0b3b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1462.952419][T31032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1462.952427][T31032] R13: 00007f0b3b1e6038 R14: 00007f0b3b1e5fa0 R15: 00007ffe65067668 [ 1462.952447][T31032] [ 1463.720166][ T30] audit: type=1800 audit(4295039170.461:100): pid=31051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6343" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1463.747571][T31051] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 1464.360497][T31059] sp0: Synchronizing with TNC [ 1464.719791][T31066] FAULT_INJECTION: forcing a failure. [ 1464.719791][T31066] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.754840][T31066] CPU: 0 UID: 0 PID: 31066 Comm: syz.4.6346 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1464.754888][T31066] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1464.754900][T31066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1464.754916][T31066] Call Trace: [ 1464.754926][T31066] [ 1464.754937][T31066] dump_stack_lvl+0x16c/0x1f0 [ 1464.754975][T31066] should_fail_ex+0x512/0x640 [ 1464.755007][T31066] ? fs_reclaim_acquire+0xae/0x150 [ 1464.755050][T31066] should_failslab+0xc2/0x120 [ 1464.755083][T31066] __kmalloc_noprof+0xeb/0x910 [ 1464.755109][T31066] ? ima_alloc_init_template+0xb5/0x720 [ 1464.755143][T31066] ? ima_alloc_init_template+0xb5/0x720 [ 1464.755168][T31066] ima_alloc_init_template+0xb5/0x720 [ 1464.755200][T31066] ? take_dentry_name_snapshot+0x319/0x7d0 [ 1464.755233][T31066] ima_store_measurement+0x1eb/0x5c0 [ 1464.755265][T31066] ? __pfx_ima_store_measurement+0x10/0x10 [ 1464.755291][T31066] ? release_dentry_name_snapshot+0x10/0x90 [ 1464.755328][T31066] ? ima_d_path+0x12b/0x2a0 [ 1464.755369][T31066] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1464.755415][T31066] process_measurement+0x17fa/0x22d0 [ 1464.755456][T31066] ? __pfx_process_measurement+0x10/0x10 [ 1464.755480][T31066] ? kasan_save_stack+0x42/0x60 [ 1464.755511][T31066] ? kasan_save_track+0x14/0x30 [ 1464.755541][T31066] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1464.755580][T31066] ? find_held_lock+0x2b/0x80 [ 1464.755612][T31066] ? aa_file_perm+0x29e/0x1560 [ 1464.755686][T31066] ima_file_mmap+0x1b6/0x1e0 [ 1464.755712][T31066] ? __pfx_ima_file_mmap+0x10/0x10 [ 1464.755744][T31066] security_mmap_file+0x88c/0x990 [ 1464.755778][T31066] vm_mmap_pgoff+0xec/0x470 [ 1464.755816][T31066] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1464.755846][T31066] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1464.755876][T31066] ? hugetlbfs_get_inode+0x31f/0x700 [ 1464.755913][T31066] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1464.755953][T31066] __x64_sys_mmap+0x125/0x190 [ 1464.755992][T31066] do_syscall_64+0xcd/0xf80 [ 1464.756022][T31066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.756048][T31066] RIP: 0033:0x7f878b58f7c9 [ 1464.756070][T31066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1464.756094][T31066] RSP: 002b:00007f878c3f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1464.756120][T31066] RAX: ffffffffffffffda RBX: 00007f878b7e6090 RCX: 00007f878b58f7c9 [ 1464.756137][T31066] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1464.756153][T31066] RBP: 00007f878b613f91 R08: 0000000000000005 R09: 0000300000000000 [ 1464.756168][T31066] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1464.756182][T31066] R13: 00007f878b7e6128 R14: 00007f878b7e6090 R15: 00007ffd51561b08 [ 1464.756214][T31066] [ 1465.035461][ T30] audit: type=1804 audit(4295039171.650:101): pid=31066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.4.6346" name="anon_hugepage" dev="hugetlbfs" ino=19366 res=0 errno=0 [ 1465.201246][T31069] sp0: Synchronizing with TNC [ 1465.906876][T31089] FAULT_INJECTION: forcing a failure. [ 1465.906876][T31089] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.928748][T31089] CPU: 1 UID: 0 PID: 31089 Comm: syz.4.6352 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1465.928796][T31089] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1465.928808][T31089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1465.928822][T31089] Call Trace: [ 1465.928831][T31089] [ 1465.928842][T31089] dump_stack_lvl+0x16c/0x1f0 [ 1465.928882][T31089] should_fail_ex+0x512/0x640 [ 1465.928912][T31089] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1465.928948][T31089] should_failslab+0xc2/0x120 [ 1465.928985][T31089] kmem_cache_alloc_noprof+0x83/0x770 [ 1465.929014][T31089] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1465.929045][T31089] ? acpi_ut_create_generic_state+0x61/0xc0 [ 1465.929082][T31089] ? acpi_ut_create_generic_state+0x61/0xc0 [ 1465.929111][T31089] acpi_ut_create_generic_state+0x61/0xc0 [ 1465.929142][T31089] acpi_ds_result_push+0x2b7/0x660 [ 1465.929170][T31089] ? acpi_ds_obj_stack_pop+0x105/0x270 [ 1465.929204][T31089] acpi_ds_evaluate_name_path+0x229/0x4b0 [ 1465.929234][T31089] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 1465.929262][T31089] ? acpi_ps_get_next_namepath+0x202/0xa10 [ 1465.929289][T31089] ? acpi_ut_trace_ptr+0x191/0x2a0 [ 1465.929321][T31089] acpi_ds_exec_end_op+0xd99/0x1da0 [ 1465.929347][T31089] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 1465.929372][T31089] acpi_ps_parse_loop+0x5a6/0x2470 [ 1465.929407][T31089] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1465.929432][T31089] ? kmem_cache_alloc_noprof+0x2af/0x770 [ 1465.929457][T31089] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1465.929484][T31089] ? acpi_ut_create_thread_state+0x6d/0x170 [ 1465.929522][T31089] acpi_ps_parse_aml+0x817/0x1170 [ 1465.929558][T31089] acpi_ps_execute_method+0x5c4/0xe90 [ 1465.929600][T31089] acpi_ns_evaluate+0x98c/0x16d0 [ 1465.929641][T31089] acpi_evaluate_object+0x4ca/0xdf0 [ 1465.929667][T31089] ? ksys_read+0x12a/0x250 [ 1465.929703][T31089] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1465.929735][T31089] ? __pfx___might_resched+0x10/0x10 [ 1465.929773][T31089] acpi_evaluate_integer+0xdd/0x230 [ 1465.929811][T31089] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1465.929872][T31089] ? __pfx_status_show+0x10/0x10 [ 1465.929898][T31089] status_show+0xa0/0x120 [ 1465.929928][T31089] ? __pfx_status_show+0x10/0x10 [ 1465.929965][T31089] dev_attr_show+0x56/0xe0 [ 1465.930000][T31089] ? __pfx_dev_attr_show+0x10/0x10 [ 1465.930032][T31089] sysfs_kf_seq_show+0x216/0x3e0 [ 1465.930064][T31089] seq_read_iter+0x50e/0x12d0 [ 1465.930114][T31089] kernfs_fop_read_iter+0x46c/0x610 [ 1465.930153][T31089] ? rw_verify_area+0xcf/0x6c0 [ 1465.930188][T31089] vfs_read+0x8bf/0xcf0 [ 1465.930226][T31089] ? __pfx_vfs_read+0x10/0x10 [ 1465.930283][T31089] ksys_read+0x12a/0x250 [ 1465.930340][T31089] ? __pfx_ksys_read+0x10/0x10 [ 1465.930387][T31089] do_syscall_64+0xcd/0xf80 [ 1465.930412][T31089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.930437][T31089] RIP: 0033:0x7f878b58f7c9 [ 1465.930457][T31089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1465.930481][T31089] RSP: 002b:00007f878c415038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1465.930505][T31089] RAX: ffffffffffffffda RBX: 00007f878b7e5fa0 RCX: 00007f878b58f7c9 [ 1465.930524][T31089] RDX: 0000000000000075 RSI: 0000200000000140 RDI: 0000000000000005 [ 1465.930540][T31089] RBP: 00007f878b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1465.930553][T31089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1465.930567][T31089] R13: 00007f878b7e6038 R14: 00007f878b7e5fa0 R15: 00007ffd51561b08 [ 1465.930602][T31089] [ 1465.930629][T31089] ACPI Error: Failed to extend the result stack (20250807/dswstate-130) [ 1466.395162][T31089] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 1466.656482][T31108] device-mapper: ioctl: Invalid ioctl structure: uuid ž, name , dev 3ff [ 1466.882320][ T30] audit: type=1800 audit(4295039173.619:102): pid=31122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6362" name="dbroot" dev="configfs" ino=160068 res=0 errno=0 [ 1466.910011][T31120] [U] [ 1466.912862][T31120] [U] [ 1466.915665][T31120] [U] [ 1466.918371][T31120] [U] [ 1466.935036][T31120] [U] [ 1466.937820][T31120] [U] [ 1466.940549][T31120] [U] [ 1466.943274][T31120] [U] [ 1466.946912][T31120] [U] [ 1466.949658][T31120] [U] [ 1466.952387][T31120] [U] [ 1466.955107][T31120] [U] [ 1466.971594][T31120] [U] [ 1466.974407][T31120] [U] [ 1466.977145][T31120] [U] [ 1466.977644][T31124] FAULT_INJECTION: forcing a failure. [ 1466.977644][T31124] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1466.979878][T31120] [U] [ 1467.009355][T31120] [U] [ 1467.012196][T31120] [U] [ 1467.014930][T31120] [U] [ 1467.017658][T31120] [U] [ 1467.024023][T31132] tipc: Started in network mode [ 1467.031295][T31132] tipc: Node identity ffffffff, cluster identity 4711 [ 1467.042856][T31132] tipc: Node number set to 4294967295 [ 1467.067769][T31124] CPU: 0 UID: 0 PID: 31124 Comm: syz.2.6361 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1467.067815][T31124] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1467.067829][T31124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1467.067845][T31124] Call Trace: [ 1467.067854][T31124] [ 1467.067863][T31124] dump_stack_lvl+0x16c/0x1f0 [ 1467.067893][T31124] should_fail_ex+0x512/0x640 [ 1467.067925][T31124] get_futex_key+0x1d0/0x15f0 [ 1467.067955][T31124] ? __pfx_get_futex_key+0x10/0x10 [ 1467.067980][T31124] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1467.068017][T31124] futex_wake+0xea/0x530 [ 1467.068047][T31124] ? __handle_mm_fault+0x5a8/0x2bb0 [ 1467.068079][T31124] ? __pfx_futex_wake+0x10/0x10 [ 1467.068108][T31124] ? css_rstat_updated+0x1d1/0x590 [ 1467.068153][T31120] [U] [ 1467.068150][T31124] do_futex+0x1e3/0x350 [ 1467.068178][T31124] ? __pfx_do_futex+0x10/0x10 [ 1467.068200][T31124] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1467.068229][T31124] ? count_memcg_events+0x122/0x290 [ 1467.068265][T31124] __x64_sys_futex+0x1e0/0x4c0 [ 1467.068294][T31124] ? exc_page_fault+0x64/0xc0 [ 1467.068317][T31124] ? __pfx___x64_sys_futex+0x10/0x10 [ 1467.068356][T31124] do_syscall_64+0xcd/0xf80 [ 1467.068386][T31124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.068411][T31124] RIP: 0033:0x7f2f8638f7c9 [ 1467.068433][T31124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1467.068459][T31124] RSP: 002b:00007f2f8724f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1467.068492][T31124] RAX: ffffffffffffffda RBX: 00007f2f865e5fa8 RCX: 00007f2f8638f7c9 [ 1467.068511][T31124] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2f865e5fac [ 1467.068527][T31124] RBP: 00007f2f865e5fa0 R08: 00007f2f87250000 R09: 0000000000000000 [ 1467.068543][T31124] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1467.068559][T31124] R13: 00007f2f865e6038 R14: 00007fff2bddafc0 R15: 00007fff2bddb0a8 [ 1467.068595][T31124] [ 1467.271011][T31120] [U] [ 1467.273704][T31120] [U] [ 1467.276393][T31120] [U] [ 1467.399362][T31120] [U] [ 1467.402311][T31120] [U] [ 1467.405019][T31120] [U] [ 1467.407711][T31120] [U] [ 1467.420887][T31120] [U] [ 1467.423626][T31120] [U] [ 1467.426384][T31120] [U] [ 1467.429092][T31120] [U] [ 1467.442771][T31120] [U] [ 1467.445505][T31120] [U] [ 1467.448199][T31120] [U] [ 1467.450884][T31120] [U] [ 1467.469280][T31120] [U] [ 1467.472051][T31120] [U] [ 1467.474866][T31120] [U] [ 1467.477576][T31120] [U] [ 1467.487379][T31120] [U] [ 1467.490132][T31120] [U] [ 1467.492909][T31120] [U] [ 1467.495637][T31120] [U] [ 1467.499597][T31120] [U] [ 1467.502371][T31120] [U] [ 1467.505092][T31120] [U] [ 1467.507808][T31120] [U] [ 1467.511769][T31120] [U] [ 1467.514675][T31120] [U] [ 1467.517397][T31120] [U] [ 1467.520112][T31120] [U] [ 1467.547633][T31120] [U] [ 1467.550392][T31120] [U] [ 1467.553114][T31120] [U] [ 1467.555899][T31120] [U] [ 1467.585304][T31120] [U] [ 1467.588063][T31120] [U] [ 1467.590794][T31120] [U] [ 1467.593775][T31120] [U] [ 1467.624727][T31120] [U] [ 1467.627482][T31120] [U] [ 1467.630202][T31120] [U] [ 1467.632920][T31120] [U] [ 1467.707822][T31120] [U] [ 1467.710676][T31120] [U] [ 1467.713395][T31120] [U] [ 1467.716108][T31120] [U] [ 1467.819078][T31120] [U] [ 1467.821955][T31120] [U] [ 1467.824685][T31120] [U] [ 1467.827412][T31120] [U] [ 1467.927486][T31120] [U] [ 1467.930238][T31120] [U] [ 1467.932965][T31120] [U] [ 1467.935692][T31120] [U] [ 1467.959309][T31120] [U] [ 1467.962051][T31120] [U] [ 1467.964751][T31120] [U] [ 1467.967437][T31120] [U] [ 1468.002543][T31120] [U] [ 1468.085233][T31164] : Can't lookup blockdev [ 1469.480001][T31193] FAULT_INJECTION: forcing a failure. [ 1469.480001][T31193] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.505369][T31193] CPU: 0 UID: 0 PID: 31193 Comm: syz.4.6377 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1469.505418][T31193] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1469.505430][T31193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1469.505445][T31193] Call Trace: [ 1469.505454][T31193] [ 1469.505464][T31193] dump_stack_lvl+0x16c/0x1f0 [ 1469.505494][T31193] should_fail_ex+0x512/0x640 [ 1469.505525][T31193] ? fs_reclaim_acquire+0xae/0x150 [ 1469.505567][T31193] should_failslab+0xc2/0x120 [ 1469.505606][T31193] __kmalloc_noprof+0xeb/0x910 [ 1469.505634][T31193] ? ima_alloc_init_template+0x19d/0x720 [ 1469.505670][T31193] ? ima_alloc_init_template+0x19d/0x720 [ 1469.505697][T31193] ima_alloc_init_template+0x19d/0x720 [ 1469.505729][T31193] ? take_dentry_name_snapshot+0x319/0x7d0 [ 1469.505763][T31193] ima_store_measurement+0x1eb/0x5c0 [ 1469.505795][T31193] ? __pfx_ima_store_measurement+0x10/0x10 [ 1469.505822][T31193] ? release_dentry_name_snapshot+0x10/0x90 [ 1469.505874][T31193] ? ima_d_path+0x12b/0x2a0 [ 1469.505911][T31193] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1469.505956][T31193] process_measurement+0x17fa/0x22d0 [ 1469.505995][T31193] ? __pfx_process_measurement+0x10/0x10 [ 1469.506019][T31193] ? kasan_save_stack+0x42/0x60 [ 1469.506051][T31193] ? kasan_save_track+0x14/0x30 [ 1469.506082][T31193] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1469.506138][T31193] ? find_held_lock+0x2b/0x80 [ 1469.506171][T31193] ? aa_file_perm+0x29e/0x1560 [ 1469.506256][T31193] ima_file_mmap+0x1b6/0x1e0 [ 1469.506284][T31193] ? __pfx_ima_file_mmap+0x10/0x10 [ 1469.506321][T31193] security_mmap_file+0x88c/0x990 [ 1469.506358][T31193] vm_mmap_pgoff+0xec/0x470 [ 1469.506397][T31193] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1469.506427][T31193] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1469.506457][T31193] ? hugetlbfs_get_inode+0x31f/0x700 [ 1469.506493][T31193] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1469.506533][T31193] __x64_sys_mmap+0x125/0x190 [ 1469.506563][T31193] do_syscall_64+0xcd/0xf80 [ 1469.506593][T31193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.506619][T31193] RIP: 0033:0x7f878b58f7c9 [ 1469.506642][T31193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1469.506666][T31193] RSP: 002b:00007f878c3f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1469.506692][T31193] RAX: ffffffffffffffda RBX: 00007f878b7e6090 RCX: 00007f878b58f7c9 [ 1469.506710][T31193] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1469.506727][T31193] RBP: 00007f878b613f91 R08: 0000000000000005 R09: 0000300000000000 [ 1469.506743][T31193] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1469.506759][T31193] R13: 00007f878b7e6128 R14: 00007f878b7e6090 R15: 00007ffd51561b08 [ 1469.506797][T31193] [ 1469.513542][ T30] audit: type=1804 audit(4295039176.248:103): pid=31193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.4.6377" name="anon_hugepage" dev="hugetlbfs" ino=160379 res=0 errno=0 [ 1470.296979][T31216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6381'. [ 1470.685297][T31226] FAULT_INJECTION: forcing a failure. [ 1470.685297][T31226] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.766201][T31226] CPU: 1 UID: 0 PID: 31226 Comm: syz.2.6385 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1470.766244][T31226] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1470.766255][T31226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1470.766269][T31226] Call Trace: [ 1470.766279][T31226] [ 1470.766289][T31226] dump_stack_lvl+0x16c/0x1f0 [ 1470.766321][T31226] should_fail_ex+0x512/0x640 [ 1470.766353][T31226] should_failslab+0xc2/0x120 [ 1470.766393][T31226] __kmalloc_noprof+0xeb/0x910 [ 1470.766419][T31226] ? switchdev_deferred_enqueue+0x2b/0x2a0 [ 1470.766452][T31226] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 1470.766486][T31226] ? switchdev_deferred_enqueue+0x2b/0x2a0 [ 1470.766516][T31226] switchdev_deferred_enqueue+0x2b/0x2a0 [ 1470.766552][T31226] switchdev_port_attr_set+0xb5/0x100 [ 1470.766588][T31226] __set_ageing_time+0xc2/0x140 [ 1470.766614][T31226] ? __pfx___set_ageing_time+0x10/0x10 [ 1470.766649][T31226] ? bpf_lsm_capable+0x9/0x10 [ 1470.766678][T31226] ? security_capable+0x7e/0x260 [ 1470.766703][T31226] br_set_ageing_time+0x53/0x140 [ 1470.766726][T31226] ? ns_capable+0xd7/0x110 [ 1470.766756][T31226] br_dev_siocdevprivate+0x1068/0x1650 [ 1470.766784][T31226] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 1470.766824][T31226] ? lock_acquire+0x179/0x330 [ 1470.766852][T31226] ? __pfx___might_resched+0x10/0x10 [ 1470.766891][T31226] ? netdev_name_node_lookup+0x127/0x180 [ 1470.766921][T31226] ? __mutex_lock+0x27b/0x1ca0 [ 1470.766950][T31226] dev_ifsioc+0x8ee/0x1ee0 [ 1470.766984][T31226] ? __pfx_dev_ifsioc+0x10/0x10 [ 1470.767009][T31226] ? __pfx___mutex_lock+0x10/0x10 [ 1470.767042][T31226] ? dev_load+0x8e/0x240 [ 1470.767076][T31226] dev_ioctl+0x1b2/0x1060 [ 1470.767106][T31226] sock_ioctl+0x5b3/0x6b0 [ 1470.767131][T31226] ? __pfx_sock_ioctl+0x10/0x10 [ 1470.767152][T31226] ? hook_file_ioctl_common+0x144/0x410 [ 1470.767188][T31226] ? __fget_files+0x20e/0x3c0 [ 1470.767224][T31226] ? __pfx_sock_ioctl+0x10/0x10 [ 1470.767249][T31226] __x64_sys_ioctl+0x18e/0x210 [ 1470.767279][T31226] do_syscall_64+0xcd/0xf80 [ 1470.767304][T31226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.767329][T31226] RIP: 0033:0x7f2f8638f7c9 [ 1470.767349][T31226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1470.767381][T31226] RSP: 002b:00007f2f8724f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.767401][T31226] RAX: ffffffffffffffda RBX: 00007f2f865e5fa0 RCX: 00007f2f8638f7c9 [ 1470.767414][T31226] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000004 [ 1470.767425][T31226] RBP: 00007f2f8724f090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.767436][T31226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.767447][T31226] R13: 00007f2f865e6038 R14: 00007f2f865e5fa0 R15: 00007fff2bddb0a8 [ 1470.767473][T31226] [ 1471.214415][T31236] QAT: Device 250 not found [ 1471.935750][ T9] smpboot: CPU 1 is now offline [ 1472.116446][T31261] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1472.152277][T31264] FAULT_INJECTION: forcing a failure. [ 1472.152277][T31264] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.180563][T31237] ------------[ cut here ]------------ [ 1472.182487][T31237] [ 1472.182496][T31237] ====================================================== [ 1472.182505][T31237] WARNING: possible circular locking dependency detected [ 1472.182518][T31237] syzkaller #0 Tainted: G U I L [ 1472.182531][T31237] ------------------------------------------------------ [ 1472.182539][T31237] syz.6.6389/31237 is trying to acquire lock: [ 1472.182551][T31237] ffffffff8e2d6a40 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 1472.182611][T31237] [ 1472.182611][T31237] but task is already holding lock: [ 1472.182618][T31237] ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1472.182671][T31237] [ 1472.182671][T31237] which lock already depends on the new lock. [ 1472.182671][T31237] [ 1472.182679][T31237] [ 1472.182679][T31237] the existing dependency chain (in reverse order) is: [ 1472.182687][T31237] [ 1472.182687][T31237] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1472.182715][T31237] _raw_spin_lock_nested+0x31/0x40 [ 1472.182746][T31237] raw_spin_rq_lock_nested+0x29/0x130 [ 1472.182772][T31237] task_rq_lock+0xcf/0x490 [ 1472.182798][T31237] cgroup_move_task+0x81/0x2a0 [ 1472.182827][T31237] css_set_move_task+0x288/0x5f0 [ 1472.182857][T31237] cgroup_post_fork+0x201/0x9e0 [ 1472.182888][T31237] copy_process+0x56b6/0x7430 [ 1472.182917][T31237] kernel_clone+0xfc/0x910 [ 1472.182945][T31237] user_mode_thread+0xc8/0x110 [ 1472.182973][T31237] rest_init+0x23/0x2b0 [ 1472.182995][T31237] start_kernel+0x3ef/0x4d0 [ 1472.183098][T31237] x86_64_start_reservations+0x18/0x30 [ 1472.183148][T31237] x86_64_start_kernel+0x130/0x190 [ 1472.183173][T31237] common_startup_64+0x13e/0x148 [ 1472.183198][T31237] [ 1472.183198][T31237] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1472.183233][T31237] _raw_spin_lock_irqsave+0x3a/0x60 [ 1472.183264][T31237] try_to_wake_up+0xb7/0x1860 [ 1472.183289][T31237] __wake_up_common+0x135/0x1f0 [ 1472.183310][T31237] __wake_up+0x31/0x60 [ 1472.183337][T31237] tty_port_default_wakeup+0x4d/0x60 [ 1472.183359][T31237] serial8250_tx_chars+0x68e/0x860 [ 1472.183390][T31237] serial8250_handle_irq+0x761/0xcb0 [ 1472.183411][T31237] serial8250_default_handle_irq+0x9e/0x270 [ 1472.183434][T31237] serial8250_interrupt+0xf8/0x1d0 [ 1472.183457][T31237] __handle_irq_event_percpu+0x236/0x890 [ 1472.183486][T31237] handle_irq_event+0xab/0x1e0 [ 1472.183511][T31237] handle_edge_irq+0x3ca/0x9e0 [ 1472.183536][T31237] __common_interrupt+0xd0/0x2f0 [ 1472.183565][T31237] common_interrupt+0x61/0xe0 [ 1472.183590][T31237] asm_common_interrupt+0x26/0x40 [ 1472.183612][T31237] [ 1472.183612][T31237] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1472.183640][T31237] _raw_spin_lock_irqsave+0x3a/0x60 [ 1472.183669][T31237] __wake_up+0x1c/0x60 [ 1472.183695][T31237] tty_port_default_wakeup+0x4d/0x60 [ 1472.183715][T31237] serial8250_tx_chars+0x68e/0x860 [ 1472.183746][T31237] serial8250_handle_irq+0x761/0xcb0 [ 1472.183768][T31237] serial8250_default_handle_irq+0x9e/0x270 [ 1472.183790][T31237] serial8250_interrupt+0xf8/0x1d0 [ 1472.183813][T31237] __handle_irq_event_percpu+0x236/0x890 [ 1472.183840][T31237] handle_irq_event+0xab/0x1e0 [ 1472.183865][T31237] handle_edge_irq+0x3ca/0x9e0 [ 1472.183890][T31237] __common_interrupt+0xd0/0x2f0 [ 1472.183918][T31237] common_interrupt+0xba/0xe0 [ 1472.183943][T31237] asm_common_interrupt+0x26/0x40 [ 1472.183964][T31237] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1472.183994][T31237] uart_write+0x2a4/0xb30 [ 1472.184011][T31237] n_tty_write+0x434/0x1280 [ 1472.184033][T31237] file_tty_write.constprop.0+0x503/0x9b0 [ 1472.184063][T31237] redirected_tty_write+0xd4/0x120 [ 1472.184092][T31237] vfs_write+0x7d3/0x11d0 [ 1472.184121][T31237] ksys_write+0x12a/0x250 [ 1472.184148][T31237] do_syscall_64+0xcd/0xf80 [ 1472.184167][T31237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.184189][T31237] [ 1472.184189][T31237] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1472.184217][T31237] _raw_spin_lock_irqsave+0x3a/0x60 [ 1472.184252][T31237] serial8250_console_write+0x181/0x1890 [ 1472.184275][T31237] console_flush_one_record+0x796/0xc60 [ 1472.184303][T31237] console_unlock+0xef/0x240 [ 1472.184327][T31237] vprintk_emit+0x407/0x6b0 [ 1472.184353][T31237] _printk+0xc7/0x100 [ 1472.184373][T31237] register_console+0x823/0x1210 [ 1472.184399][T31237] univ8250_console_init+0x5f/0x90 [ 1472.184454][T31237] console_init+0x152/0x600 [ 1472.184523][T31237] start_kernel+0x298/0x4d0 [ 1472.184545][T31237] x86_64_start_reservations+0x18/0x30 [ 1472.184571][T31237] x86_64_start_kernel+0x130/0x190 [ 1472.184596][T31237] common_startup_64+0x13e/0x148 [ 1472.184620][T31237] [ 1472.184620][T31237] -> #0 (console_owner){-.-.}-{0:0}: [ 1472.184649][T31237] __lock_acquire+0x1669/0x2890 [ 1472.184673][T31237] lock_acquire+0x179/0x330 [ 1472.184692][T31237] console_lock_spinning_enable+0x72/0x80 [ 1472.184718][T31237] console_flush_one_record+0x73f/0xc60 [ 1472.184746][T31237] console_unlock+0xef/0x240 [ 1472.184770][T31237] vprintk_emit+0x407/0x6b0 [ 1472.184796][T31237] _printk+0xc7/0x100 [ 1472.184816][T31237] __report_bug+0x3a6/0x520 [ 1472.184844][T31237] report_bug+0xb2/0x220 [ 1472.184871][T31237] handle_bug+0x127/0x260 [ 1472.184892][T31237] exc_invalid_op+0x17/0x50 [ 1472.184915][T31237] asm_exc_invalid_op+0x1a/0x20 [ 1472.184935][T31237] update_rq_clock+0x34a/0xc70 [ 1472.184962][T31237] __schedule+0x20fd/0x5ee0 [ 1472.184990][T31237] preempt_schedule_irq+0x51/0x90 [ 1472.185021][T31237] irqentry_exit+0x1d8/0x8c0 [ 1472.185041][T31237] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1472.185063][T31237] stack_depot_save_flags+0xaf/0x9b0 [ 1472.185089][T31237] save_stack+0x16d/0x1f0 [ 1472.185115][T31237] __reset_page_owner+0x84/0x1a0 [ 1472.185143][T31237] __free_frozen_pages+0x7df/0x1170 [ 1472.185164][T31237] vfree+0x1fd/0xb50 [ 1472.185181][T31237] snd_dma_free_pages+0xd2/0x130 [ 1472.185212][T31237] snd_pcm_lib_free_pages+0x172/0x390 [ 1472.185244][T31237] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 1472.185273][T31237] snd_pcm_release_substream+0x5b/0x70 [ 1472.185299][T31237] snd_pcm_oss_release+0x135/0x310 [ 1472.185323][T31237] __fput+0x402/0xb70 [ 1472.185342][T31237] task_work_run+0x150/0x240 [ 1472.185365][T31237] exit_to_user_mode_loop+0xfb/0x540 [ 1472.185389][T31237] do_syscall_64+0x4ee/0xf80 [ 1472.185409][T31237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.185430][T31237] [ 1472.185430][T31237] other info that might help us debug this: [ 1472.185430][T31237] [ 1472.185437][T31237] Chain exists of: [ 1472.185437][T31237] console_owner --> &p->pi_lock --> &rq->__lock [ 1472.185437][T31237] [ 1472.185470][T31237] Possible unsafe locking scenario: [ 1472.185470][T31237] [ 1472.185476][T31237] CPU0 CPU1 [ 1472.185483][T31237] ---- ---- [ 1472.185489][T31237] lock(&rq->__lock); [ 1472.185503][T31237] lock(&p->pi_lock); [ 1472.185519][T31237] lock(&rq->__lock); [ 1472.185534][T31237] lock(console_owner); [ 1472.185548][T31237] [ 1472.185548][T31237] *** DEADLOCK *** [ 1472.185548][T31237] [ 1472.185553][T31237] 4 locks held by syz.6.6389/31237: [ 1472.185567][T31237] #0: ffff88802ff6aae0 (&pcm->open_mutex){+.+.}-{4:4}, at: snd_pcm_oss_release+0xfb/0x310 [ 1472.185620][T31237] #1: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1472.185677][T31237] #2: ffffffff8e3b6e80 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1472.185726][T31237] #3: ffffffff8e3b6ef8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0x103/0xc60 [ 1472.185783][T31237] [ 1472.185783][T31237] stack backtrace: [ 1472.185818][T31237] CPU: 0 UID: 0 PID: 31237 Comm: syz.6.6389 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1472.185872][T31237] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1472.185883][T31237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1472.185899][T31237] Call Trace: [ 1472.185908][T31237] [ 1472.185918][T31237] dump_stack_lvl+0x116/0x1f0 [ 1472.185941][T31237] print_circular_bug+0x275/0x340 [ 1472.185975][T31237] check_noncircular+0x146/0x160 [ 1472.186012][T31237] __lock_acquire+0x1669/0x2890 [ 1472.186040][T31237] lock_acquire+0x179/0x330 [ 1472.186061][T31237] ? console_lock_spinning_enable+0x61/0x80 [ 1472.186090][T31237] ? console_lock_spinning_enable+0x4a/0x80 [ 1472.186121][T31237] console_lock_spinning_enable+0x72/0x80 [ 1472.186149][T31237] ? console_lock_spinning_enable+0x61/0x80 [ 1472.186177][T31237] console_flush_one_record+0x73f/0xc60 [ 1472.186210][T31237] ? __pfx_console_flush_one_record+0x10/0x10 [ 1472.186246][T31237] ? __lock_acquire+0x436/0x2890 [ 1472.186271][T31237] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1472.186303][T31237] console_unlock+0xef/0x240 [ 1472.186330][T31237] ? __pfx_console_unlock+0x10/0x10 [ 1472.186359][T31237] ? do_raw_spin_unlock+0xe0/0x230 [ 1472.186386][T31237] ? _printk+0xc7/0x100 [ 1472.186408][T31237] ? __down_trylock_console_sem+0xb0/0x140 [ 1472.186435][T31237] vprintk_emit+0x407/0x6b0 [ 1472.186463][T31237] ? __pfx_vprintk_emit+0x10/0x10 [ 1472.186494][T31237] _printk+0xc7/0x100 [ 1472.186515][T31237] ? __pfx__printk+0x10/0x10 [ 1472.186542][T31237] ? __report_bug+0x396/0x520 [ 1472.186571][T31237] ? __report_bug+0x385/0x520 [ 1472.186601][T31237] __report_bug+0x3a6/0x520 [ 1472.186629][T31237] ? update_rq_clock+0x34a/0xc70 [ 1472.186659][T31237] ? __pfx___report_bug+0x10/0x10 [ 1472.186688][T31237] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1472.186718][T31237] ? lockdep_hardirqs_on+0x7c/0x110 [ 1472.186739][T31237] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1472.186770][T31237] ? rcu_is_watching+0x12/0xc0 [ 1472.186799][T31237] ? trace_sched_exit_tp+0xd1/0x110 [ 1472.186832][T31237] ? __schedule+0x10b9/0x5ee0 [ 1472.186864][T31237] ? update_rq_clock+0x34a/0xc70 [ 1472.186893][T31237] report_bug+0xb2/0x220 [ 1472.186922][T31237] ? update_rq_clock+0x34a/0xc70 [ 1472.186950][T31237] handle_bug+0x127/0x260 [ 1472.186975][T31237] exc_invalid_op+0x17/0x50 [ 1472.186999][T31237] asm_exc_invalid_op+0x1a/0x20 [ 1472.187021][T31237] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 1472.187051][T31237] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 18 6c ee 09 a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 1472.187073][T31237] RSP: 0018:ffffc9000caaf768 EFLAGS: 00010046 [ 1472.187091][T31237] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 1472.187107][T31237] RDX: 0000000000000000 RSI: ffffffff8daa5ea0 RDI: ffffffff8bf2b600 [ 1472.187123][T31237] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff211205a [ 1472.187139][T31237] R10: ffffffff908902d7 R11: 0000000000000001 R12: ffffffff90893354 [ 1472.187155][T31237] R13: ffffffff8dd66760 R14: ffff88801dea3d00 R15: ffff8880b853adc0 [ 1472.187180][T31237] ? update_rq_clock+0x99/0xc70 [ 1472.187211][T31237] __schedule+0x20fd/0x5ee0 [ 1472.187257][T31237] ? __pfx___schedule+0x10/0x10 [ 1472.187289][T31237] ? mark_held_locks+0x49/0x80 [ 1472.187312][T31237] preempt_schedule_irq+0x51/0x90 [ 1472.187345][T31237] irqentry_exit+0x1d8/0x8c0 [ 1472.187366][T31237] ? rcu_is_watching+0x12/0xc0 [ 1472.187397][T31237] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1472.187420][T31237] RIP: 0010:stack_depot_save_flags+0xaf/0x9b0 [ 1472.187448][T31237] Code: 41 89 f9 41 29 fa 8d 1c 07 41 c1 c1 06 45 31 d1 44 89 cf 44 29 c8 41 01 d9 c1 c7 08 31 f8 29 c3 89 df 89 c3 44 01 c8 c1 c3 10 <31> fb 89 df 41 29 d9 01 c3 c1 cf 0d 41 31 f9 44 29 c8 89 c7 44 89 [ 1472.187470][T31237] RSP: 0018:ffffc9000caafa28 EFLAGS: 00000a12 [ 1472.187488][T31237] RAX: 00000000771e1de3 RBX: 000000000b6eb494 RCX: ffffc9000caafae8 [ 1472.187505][T31237] RDX: ffffffff81000130 RSI: 0000000000000006 RDI: 0000000020e9bbeb [ 1472.187520][T31237] RBP: 000000000000000c R08: 0000000000000001 R09: 00000000c28a1275 [ 1472.187536][T31237] R10: 0000000009956597 R11: ffff8880299829b0 R12: 0000000000000001 [ 1472.187552][T31237] R13: 0000000000002000 R14: 000000000000000c R15: ffffc9000caafaa0 [ 1472.187572][T31237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.187609][T31237] ? stack_depot_save_flags+0x29/0x9b0 [ 1472.187635][T31237] ? __lock_acquire+0x436/0x2890 [ 1472.187659][T31237] save_stack+0x16d/0x1f0 [ 1472.187687][T31237] ? __pfx_save_stack+0x10/0x10 [ 1472.187715][T31237] ? __free_frozen_pages+0x7df/0x1170 [ 1472.187737][T31237] ? vfree+0x1fd/0xb50 [ 1472.187755][T31237] ? snd_dma_free_pages+0xd2/0x130 [ 1472.187786][T31237] ? snd_pcm_lib_free_pages+0x172/0x390 [ 1472.187814][T31237] ? snd_pcm_release_substream.part.0+0x2a8/0x340 [ 1472.187844][T31237] ? snd_pcm_release_substream+0x5b/0x70 [ 1472.187872][T31237] ? snd_pcm_oss_release+0x135/0x310 [ 1472.187896][T31237] ? __fput+0x402/0xb70 [ 1472.187917][T31237] ? task_work_run+0x150/0x240 [ 1472.187939][T31237] ? exit_to_user_mode_loop+0xfb/0x540 [ 1472.187965][T31237] ? do_syscall_64+0x4ee/0xf80 [ 1472.187985][T31237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.188010][T31237] ? page_ext_put+0x3e/0xd0 [ 1472.188041][T31237] __reset_page_owner+0x84/0x1a0 [ 1472.188073][T31237] __free_frozen_pages+0x7df/0x1170 [ 1472.188098][T31237] ? ___free_pages+0xcd/0x220 [ 1472.188121][T31237] vfree+0x1fd/0xb50 [ 1472.188145][T31237] ? __pfx_snd_dma_vmalloc_free+0x10/0x10 [ 1472.188176][T31237] snd_dma_free_pages+0xd2/0x130 [ 1472.188209][T31237] snd_pcm_lib_free_pages+0x172/0x390 [ 1472.188242][T31237] ? __pfx_loopback_hw_free+0x10/0x10 [ 1472.188272][T31237] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 1472.188304][T31237] snd_pcm_release_substream+0x5b/0x70 [ 1472.188333][T31237] snd_pcm_oss_release+0x135/0x310 [ 1472.188358][T31237] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1472.188383][T31237] __fput+0x402/0xb70 [ 1472.188408][T31237] task_work_run+0x150/0x240 [ 1472.188433][T31237] ? __pfx_task_work_run+0x10/0x10 [ 1472.188456][T31237] ? __do_sys_close_range+0x278/0x730 [ 1472.188494][T31237] exit_to_user_mode_loop+0xfb/0x540 [ 1472.188523][T31237] do_syscall_64+0x4ee/0xf80 [ 1472.188546][T31237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.188569][T31237] RIP: 0033:0x7f0b3af8f7c9 [ 1472.188588][T31237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1472.188610][T31237] RSP: 002b:00007ffe650677c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1472.188631][T31237] RAX: 0000000000000000 RBX: 00007f0b3b1e7da0 RCX: 00007f0b3af8f7c9 [ 1472.188647][T31237] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1472.188661][T31237] RBP: 00007f0b3b1e7da0 R08: 0000000000000000 R09: 0000001d65067abf [ 1472.188676][T31237] R10: 00007f0b3b1e7cb0 R11: 0000000000000246 R12: 00000000001675b0 [ 1472.188692][T31237] R13: 00007f0b3b1e6450 R14: ffffffffffffffff R15: 00007ffe650678e0 [ 1472.188717][T31237] [ 1473.651866][T31237] WARNING: kernel/sched/sched.h:1571 at update_rq_clock+0x34a/0xc70, CPU#0: syz.6.6389/31237 [ 1473.662045][T31237] Modules linked in: [ 1473.665944][T31237] CPU: 0 UID: 0 PID: 31237 Comm: syz.6.6389 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1473.676982][T31237] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1473.684339][T31237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1473.694423][T31237] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 1473.699978][T31237] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 18 6c ee 09 a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 1473.719783][T31237] RSP: 0018:ffffc9000caaf768 EFLAGS: 00010046 [ 1473.725859][T31237] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 1473.733934][T31237] RDX: 0000000000000000 RSI: ffffffff8daa5ea0 RDI: ffffffff8bf2b600 [ 1473.741932][T31237] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff211205a [ 1473.750028][T31237] R10: ffffffff908902d7 R11: 0000000000000001 R12: ffffffff90893354 [ 1473.758115][T31237] R13: ffffffff8dd66760 R14: ffff88801dea3d00 R15: ffff8880b853adc0 [ 1473.766197][T31237] FS: 000055557eeae500(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 1473.775303][T31237] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1473.782075][T31237] CR2: 00007f45b2ecb7c4 CR3: 000000004434e000 CR4: 00000000003526f0 [ 1473.790150][T31237] Call Trace: [ 1473.793446][T31237] [ 1473.796396][T31237] __schedule+0x20fd/0x5ee0 [ 1473.800942][T31237] ? __pfx___schedule+0x10/0x10 [ 1473.805995][T31237] ? mark_held_locks+0x49/0x80 [ 1473.810761][T31237] preempt_schedule_irq+0x51/0x90 [ 1473.815916][T31237] irqentry_exit+0x1d8/0x8c0 [ 1473.820698][T31237] ? rcu_is_watching+0x12/0xc0 [ 1473.825560][T31237] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1473.831031][T31237] RIP: 0010:stack_depot_save_flags+0xaf/0x9b0 [ 1473.837292][T31237] Code: 41 89 f9 41 29 fa 8d 1c 07 41 c1 c1 06 45 31 d1 44 89 cf 44 29 c8 41 01 d9 c1 c7 08 31 f8 29 c3 89 df 89 c3 44 01 c8 c1 c3 10 <31> fb 89 df 41 29 d9 01 c3 c1 cf 0d 41 31 f9 44 29 c8 89 c7 44 89 [ 1473.857270][T31237] RSP: 0018:ffffc9000caafa28 EFLAGS: 00000a12 [ 1473.863452][T31237] RAX: 00000000771e1de3 RBX: 000000000b6eb494 RCX: ffffc9000caafae8 [ 1473.871600][T31237] RDX: ffffffff81000130 RSI: 0000000000000006 RDI: 0000000020e9bbeb [ 1473.879684][T31237] RBP: 000000000000000c R08: 0000000000000001 R09: 00000000c28a1275 [ 1473.887656][T31237] R10: 0000000009956597 R11: ffff8880299829b0 R12: 0000000000000001 [ 1473.895713][T31237] R13: 0000000000002000 R14: 000000000000000c R15: ffffc9000caafaa0 [ 1473.903701][T31237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.909792][T31237] ? stack_depot_save_flags+0x29/0x9b0 [ 1473.915256][T31237] ? __lock_acquire+0x436/0x2890 [ 1473.920300][T31237] save_stack+0x16d/0x1f0 [ 1473.924827][T31237] ? __pfx_save_stack+0x10/0x10 [ 1473.929689][T31237] ? __free_frozen_pages+0x7df/0x1170 [ 1473.935246][T31237] ? vfree+0x1fd/0xb50 [ 1473.939314][T31237] ? snd_dma_free_pages+0xd2/0x130 [ 1473.944440][T31237] ? snd_pcm_lib_free_pages+0x172/0x390 [ 1473.949997][T31237] ? snd_pcm_release_substream.part.0+0x2a8/0x340 [ 1473.956524][T31237] ? snd_pcm_release_substream+0x5b/0x70 [ 1473.962258][T31237] ? snd_pcm_oss_release+0x135/0x310 [ 1473.967545][T31237] ? __fput+0x402/0xb70 [ 1473.972056][T31237] ? task_work_run+0x150/0x240 [ 1473.976832][T31237] ? exit_to_user_mode_loop+0xfb/0x540 [ 1473.982389][T31237] ? do_syscall_64+0x4ee/0xf80 [ 1473.987245][T31237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.993317][T31237] ? page_ext_put+0x3e/0xd0 [ 1473.997831][T31237] __reset_page_owner+0x84/0x1a0 [ 1474.002876][T31237] __free_frozen_pages+0x7df/0x1170 [ 1474.008092][T31237] ? ___free_pages+0xcd/0x220 [ 1474.012810][T31237] vfree+0x1fd/0xb50 [ 1474.017156][T31237] ? __pfx_snd_dma_vmalloc_free+0x10/0x10 [ 1474.022904][T31237] snd_dma_free_pages+0xd2/0x130 [ 1474.027854][T31237] snd_pcm_lib_free_pages+0x172/0x390 [ 1474.033259][T31237] ? __pfx_loopback_hw_free+0x10/0x10 [ 1474.038652][T31237] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 1474.044908][T31237] snd_pcm_release_substream+0x5b/0x70 [ 1474.050377][T31237] snd_pcm_oss_release+0x135/0x310 [ 1474.055506][T31237] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1474.061493][T31237] __fput+0x402/0xb70 [ 1474.065653][T31237] task_work_run+0x150/0x240 [ 1474.070261][T31237] ? __pfx_task_work_run+0x10/0x10 [ 1474.075396][T31237] ? __do_sys_close_range+0x278/0x730 [ 1474.080813][T31237] exit_to_user_mode_loop+0xfb/0x540 [ 1474.086230][T31237] do_syscall_64+0x4ee/0xf80 [ 1474.090843][T31237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.096853][T31237] RIP: 0033:0x7f0b3af8f7c9 [ 1474.101291][T31237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1474.121247][T31237] RSP: 002b:00007ffe650677c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1474.129751][T31237] RAX: 0000000000000000 RBX: 00007f0b3b1e7da0 RCX: 00007f0b3af8f7c9 [ 1474.137726][T31237] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1474.145695][T31237] RBP: 00007f0b3b1e7da0 R08: 0000000000000000 R09: 0000001d65067abf [ 1474.153666][T31237] R10: 00007f0b3b1e7cb0 R11: 0000000000000246 R12: 00000000001675b0 [ 1474.161634][T31237] R13: 00007f0b3b1e6450 R14: ffffffffffffffff R15: 00007ffe650678e0 [ 1474.169796][T31237] [ 1474.172989][T31237] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1474.180308][T31237] CPU: 0 UID: 0 PID: 31237 Comm: syz.6.6389 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1474.191434][T31237] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1474.198891][T31237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1474.209040][T31237] Call Trace: [ 1474.212388][T31237] [ 1474.215342][T31237] dump_stack_lvl+0x3d/0x1f0 [ 1474.220112][T31237] vpanic+0x640/0x6f0 [ 1474.224185][T31237] ? update_rq_clock+0x34a/0xc70 [ 1474.229145][T31237] panic+0xca/0xd0 [ 1474.232871][T31237] ? __pfx_panic+0x10/0x10 [ 1474.237296][T31237] ? check_panic_on_warn+0x1f/0xb0 [ 1474.242500][T31237] check_panic_on_warn+0xab/0xb0 [ 1474.247530][T31237] __warn+0x108/0x3c0 [ 1474.251787][T31237] __report_bug+0x2a0/0x520 [ 1474.256378][T31237] ? update_rq_clock+0x34a/0xc70 [ 1474.261353][T31237] ? __pfx___report_bug+0x10/0x10 [ 1474.266703][T31237] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1474.272728][T31237] ? lockdep_hardirqs_on+0x7c/0x110 [ 1474.277946][T31237] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1474.284572][T31237] ? rcu_is_watching+0x12/0xc0 [ 1474.289359][T31237] ? trace_sched_exit_tp+0xd1/0x110 [ 1474.294626][T31237] ? __schedule+0x10b9/0x5ee0 [ 1474.299354][T31237] ? update_rq_clock+0x34a/0xc70 [ 1474.304391][T31237] report_bug+0xb2/0x220 [ 1474.308647][T31237] ? update_rq_clock+0x34a/0xc70 [ 1474.313606][T31237] handle_bug+0x127/0x260 [ 1474.317943][T31237] exc_invalid_op+0x17/0x50 [ 1474.322449][T31237] asm_exc_invalid_op+0x1a/0x20 [ 1474.327301][T31237] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 1474.332862][T31237] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 18 6c ee 09 a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 1474.352874][T31237] RSP: 0018:ffffc9000caaf768 EFLAGS: 00010046 [ 1474.359034][T31237] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 1474.367186][T31237] RDX: 0000000000000000 RSI: ffffffff8daa5ea0 RDI: ffffffff8bf2b600 [ 1474.375948][T31237] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff211205a [ 1474.384127][T31237] R10: ffffffff908902d7 R11: 0000000000000001 R12: ffffffff90893354 [ 1474.392448][T31237] R13: ffffffff8dd66760 R14: ffff88801dea3d00 R15: ffff8880b853adc0 [ 1474.400538][T31237] ? update_rq_clock+0x99/0xc70 [ 1474.405492][T31237] __schedule+0x20fd/0x5ee0 [ 1474.410022][T31237] ? __pfx___schedule+0x10/0x10 [ 1474.414997][T31237] ? mark_held_locks+0x49/0x80 [ 1474.419887][T31237] preempt_schedule_irq+0x51/0x90 [ 1474.425022][T31237] irqentry_exit+0x1d8/0x8c0 [ 1474.429618][T31237] ? rcu_is_watching+0x12/0xc0 [ 1474.434401][T31237] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1474.439877][T31237] RIP: 0010:stack_depot_save_flags+0xaf/0x9b0 [ 1474.446039][T31237] Code: 41 89 f9 41 29 fa 8d 1c 07 41 c1 c1 06 45 31 d1 44 89 cf 44 29 c8 41 01 d9 c1 c7 08 31 f8 29 c3 89 df 89 c3 44 01 c8 c1 c3 10 <31> fb 89 df 41 29 d9 01 c3 c1 cf 0d 41 31 f9 44 29 c8 89 c7 44 89 [ 1474.466016][T31237] RSP: 0018:ffffc9000caafa28 EFLAGS: 00000a12 [ 1474.472177][T31237] RAX: 00000000771e1de3 RBX: 000000000b6eb494 RCX: ffffc9000caafae8 [ 1474.480153][T31237] RDX: ffffffff81000130 RSI: 0000000000000006 RDI: 0000000020e9bbeb [ 1474.488211][T31237] RBP: 000000000000000c R08: 0000000000000001 R09: 00000000c28a1275 [ 1474.496196][T31237] R10: 0000000009956597 R11: ffff8880299829b0 R12: 0000000000000001 [ 1474.504248][T31237] R13: 0000000000002000 R14: 000000000000000c R15: ffffc9000caafaa0 [ 1474.512311][T31237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.518570][T31237] ? stack_depot_save_flags+0x29/0x9b0 [ 1474.524819][T31237] ? __lock_acquire+0x436/0x2890 [ 1474.529763][T31237] save_stack+0x16d/0x1f0 [ 1474.534315][T31237] ? __pfx_save_stack+0x10/0x10 [ 1474.539190][T31237] ? __free_frozen_pages+0x7df/0x1170 [ 1474.544823][T31237] ? vfree+0x1fd/0xb50 [ 1474.548893][T31237] ? snd_dma_free_pages+0xd2/0x130 [ 1474.554034][T31237] ? snd_pcm_lib_free_pages+0x172/0x390 [ 1474.560023][T31237] ? snd_pcm_release_substream.part.0+0x2a8/0x340 [ 1474.566441][T31237] ? snd_pcm_release_substream+0x5b/0x70 [ 1474.572253][T31237] ? snd_pcm_oss_release+0x135/0x310 [ 1474.577559][T31237] ? __fput+0x402/0xb70 [ 1474.581720][T31237] ? task_work_run+0x150/0x240 [ 1474.586514][T31237] ? exit_to_user_mode_loop+0xfb/0x540 [ 1474.591988][T31237] ? do_syscall_64+0x4ee/0xf80 [ 1474.596758][T31237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.603006][T31237] ? page_ext_put+0x3e/0xd0 [ 1474.607700][T31237] __reset_page_owner+0x84/0x1a0 [ 1474.612657][T31237] __free_frozen_pages+0x7df/0x1170 [ 1474.618034][T31237] ? ___free_pages+0xcd/0x220 [ 1474.622715][T31237] vfree+0x1fd/0xb50 [ 1474.626622][T31237] ? __pfx_snd_dma_vmalloc_free+0x10/0x10 [ 1474.632389][T31237] snd_dma_free_pages+0xd2/0x130 [ 1474.637438][T31237] snd_pcm_lib_free_pages+0x172/0x390 [ 1474.642901][T31237] ? __pfx_loopback_hw_free+0x10/0x10 [ 1474.648283][T31237] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 1474.654539][T31237] snd_pcm_release_substream+0x5b/0x70 [ 1474.660004][T31237] snd_pcm_oss_release+0x135/0x310 [ 1474.665120][T31237] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1474.670757][T31237] __fput+0x402/0xb70 [ 1474.674835][T31237] task_work_run+0x150/0x240 [ 1474.679441][T31237] ? __pfx_task_work_run+0x10/0x10 [ 1474.684556][T31237] ? __do_sys_close_range+0x278/0x730 [ 1474.690032][T31237] exit_to_user_mode_loop+0xfb/0x540 [ 1474.695328][T31237] do_syscall_64+0x4ee/0xf80 [ 1474.700012][T31237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.705909][T31237] RIP: 0033:0x7f0b3af8f7c9 [ 1474.710325][T31237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1474.730546][T31237] RSP: 002b:00007ffe650677c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1474.739322][T31237] RAX: 0000000000000000 RBX: 00007f0b3b1e7da0 RCX: 00007f0b3af8f7c9 [ 1474.747561][T31237] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1474.755539][T31237] RBP: 00007f0b3b1e7da0 R08: 0000000000000000 R09: 0000001d65067abf [ 1474.763511][T31237] R10: 00007f0b3b1e7cb0 R11: 0000000000000246 R12: 00000000001675b0 [ 1474.771745][T31237] R13: 00007f0b3b1e6450 R14: ffffffffffffffff R15: 00007ffe650678e0 [ 1474.779992][T31237] [ 1474.783835][T31237] Kernel Offset: disabled [ 1474.788357][T31237] Rebooting in 86400 seconds..