last executing test programs: 2m33.431609137s ago: executing program 3 (id=890): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x0, 0x0) sendfile$auto(r0, r0, 0x0, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{0x0, 0x5a7, &(0x7f0000000000)={&(0x7f0000000300)="669b0c0c4afa", 0x28}, 0x1, 0x0, 0x5, 0x100001}, 0x2}, 0x2, 0x8) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101041, 0x0) poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108) write$auto(r2, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x20000003) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r3 = socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(r3, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57) write$auto(0x3, 0x0, 0x3f00) write$auto_fops_ulong_ro_(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) io_uring_register$auto(0x2, 0x11, 0x0, 0x83) r4 = timerfd_create$auto(0x0, 0xfffffffc) close_range$auto(r1, r4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket(0x15, 0x5, 0x0) getsockopt$auto(r5, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) ioctl$auto(0x1, 0x890c, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x101001, 0x0) mmap$auto(0x0, 0x20089, 0xb17a, 0x12, 0x3fd, 0x8000) write$auto(r1, 0x0, 0x36357265) wait4$auto(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$auto_I2C_RDWR(r6, 0x707, &(0x7f0000000180)) 2m32.946987465s ago: executing program 3 (id=892): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x266b80, 0x0) r0 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000900), 0x101000, 0x0) lseek$auto(r1, 0x5, 0x1) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x80000001, 0x810003, 0x400000001000, 0x8000000008011, 0x3, 0x8000) r2 = socket(0xa, 0x3, 0x3a) r3 = setfsgid$auto(0x0) setresgid$auto(r3, r3, r3) fsconfig$auto(r2, 0x10001, &(0x7f0000000000)='([\x00', &(0x7f0000000080)="d2756e613c590d0dc4d91cf842e2ab1a3c766faacbcad8bac8f6f633f5d2509be00eef8aedee1d4a5298bc2fa8685fe3316d8aa3a5ff7b7883a58ee9c36b8edaa96eac21f34973b7b091b7b9ff3c7ae98d285102aef2b6bbf53439312e", r3) r4 = getuid() keyctl$auto(0x3, 0xee00, r4, r3, 0x7) close$auto(r2) io_uring_register$auto(r2, 0x8, 0x0, 0x0) r5 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ubifs/chk_lprops\x00', 0x40400, 0x0) read$auto_dfs_global_fops_debug(r5, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, 0x0, 0xfde5) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000100)={0x886d, 0xfffffffffffffe00, 0x0, 0x1, 0x2, 0x4, 0xc0000, 0x0, 0x1, 0x4, 0x4, 0x4, 0x3, 0x4, 0x2}) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) madvise$auto(0x0, 0xffffffffffff0005, 0x8000017) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x200000000, 0x20009, 0x4000000000df, 0xeb5, 0x401, 0x8002) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x28, 0x1, 0x0) 2m30.00674898s ago: executing program 3 (id=902): socket(0x27, 0x80802, 0x0) r0 = mq_open$auto(&(0x7f0000000380)='\x1cm\xeb\x9e\xbc\f\x0e\xed\xe5-\xbf\xb7\xdd\xf7#\xe3\xed\xcf8bJ\xc6\xaa2\x80w\xae\xef\xb5\x8aSU\\f\xed\x06J4\xe0\xb9Ig\xb9\x8b\x17\x01\x91\x82\x85\xeb\r\x87N\xf9q\xf97\xd6z\"\x1fog\xe2O\xb7\xdd\xa0L\xed\xe7\xfc\xe8F\xb7W\xf9\x83\xbf\x00\xdb\xf9\xc2\xec\v\xdd\xb8\xbf\xe8\xf8u\xa5-\x14l\x8e},r| \x00\xcc\xcev)\xc0\xdd\xd8\x04\xcd\xf5\x16\xcb/\x1d\xad\x8e\xcdR%', 0x4, 0x0, 0x0) mq_notify$auto(r0, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r0, 0x0, @_sigev_thread={0x0, 0x0}}) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xa, 0x9b72, 0xc, 0x800008000) writev$auto(0x4, 0x0, 0x1) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x460342, 0x100) copy_file_range$auto(r2, &(0x7f0000000040)=0xfffffffffffffff9, r2, 0x0, 0x8000000000000002, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) waitid$auto_P_PIDFD(0x3, r4, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x8, 0xf8, @_sigchld={0x0, 0x0, 0x2, 0x3, 0x4}}}, 0xb3b, &(0x7f0000000440)={{0x0, 0x82}, {0x8, 0x2}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0x3, 0x3, 0x501, 0xffc, 0x0, 0x3, 0x9, 0xc, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/napi_defer_hard_irqs\x00', 0xc2481, 0x0) write$auto(r5, &(0x7f0000000200)='7\x00\\\xa0\x042\a\xc3\xd0\x11\x03\aKk+\xf4\xcd\x12\xa6\x85\xd6Y\xe6\xc3I)\xaa\x8f\xa5\xc3\x94\xaf\x18\xf9]\xdd\xc3\x91m\xc9{;\b\x04\x94\xf18', 0x7) recvmsg$auto(r5, 0x0, 0xc4ae9ced) 2m28.215958124s ago: executing program 3 (id=907): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x9, 0x1, 0x0, 0x1, 0x3) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x6, 0x15) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0x2, 0x0) r1 = socket(0x2b, 0x1, 0x5) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywf\x00', 0x515101, 0x0) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x1}, 0x5, 0x20000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x67c0}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x72154480, 0x0, 0x0, 0x0, 0x0, 0x0) 2m25.984381574s ago: executing program 3 (id=918): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r1, 0x5404, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r1, 0x5404, 0x0) mmap$auto(0xfffffffffffffffc, 0x20009, 0x4000000000df, 0xebd, 0x401, 0x8000) getsockname$auto(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r2, 0x4, &(0x7f0000000100)='\x00', &(0x7f0000000140), 0xffffff9c) ioctl$auto_FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000003c0)={0xaaaf, 0x2, 0x6, 0x4f, '\x00', [{0x5, 0x256, 0x9, 0x537, 0x6, 0xe}, {0x76a, 0x40, 0x3ff, 0x9, 0x3, 0x4}], [{0xf8, 0x0, 0x7fff, 0x4, 0x1, 0x9}, {0x6, 0x0, 0x5, 0xc, 0x2000000000008, 0x6}, {0x5, 0x1, 0x1, 0x6a, 0x400, 0xffffffffffffffc0}, {0x1, 0x4, 0x80, 0xd95, 0x5, 0x1}, {0x1447, 0x3, 0x5, 0x400, 0xacc, 0x1}, {0x7, 0x929b, 0x8, 0x2, 0x3ffd}, {0x7fffffff, 0xb14, 0x0, 0x2d9f7627, 0x4, 0x4d}]}) pread64$auto(r0, 0x0, 0x8001, 0x7) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) lsm_get_self_attr$auto(0x64, &(0x7f0000000080)={0x0, 0x1, 0x7fffffffffffbfff}, &(0x7f0000002440)=0x1f9, 0x0) socket(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r4 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r4, 0x0, 0x81000002) r5 = open(0x0, 0x518282, 0x78e22799f4a46e8e) write$auto_proc_timens_offsets_operations_base(r5, &(0x7f0000000100)="7c1d635e", 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) connect$auto(r3, &(0x7f0000000000)=@l2={0x1f, 0x7fff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40}, 0x3) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000001880)=""/4101, 0x1005) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x121c40, 0x0) 2m25.463835805s ago: executing program 3 (id=923): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8800, 0x0) socket(0x2, 0x2, 0x1) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cpu/0/msr\x00', 0x8142, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/smaps\x00', 0x400, 0x0) io_uring_setup$auto(0xc, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x42201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:160/strict_limit\x00', 0x103a42, 0x0) sendfile$auto(r1, r1, 0x0, 0x9) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x5e7743, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r3 = socket(0x22, 0x800, 0x8000) getsockopt$auto(r3, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x40106f52, r2) mknodat$auto(r0, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file1\x00', 0x4) 2m24.913793443s ago: executing program 32 (id=923): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8800, 0x0) socket(0x2, 0x2, 0x1) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cpu/0/msr\x00', 0x8142, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/smaps\x00', 0x400, 0x0) io_uring_setup$auto(0xc, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x42201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:160/strict_limit\x00', 0x103a42, 0x0) sendfile$auto(r1, r1, 0x0, 0x9) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x5e7743, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r3 = socket(0x22, 0x800, 0x8000) getsockopt$auto(r3, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x40106f52, r2) mknodat$auto(r0, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file1\x00', 0x4) 5.95225103s ago: executing program 2 (id=1346): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x400000003d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) exit$auto(0x5eb) close_range$auto(0x2, 0x8, 0x0) 5.943748141s ago: executing program 1 (id=1347): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0) ioctl$auto(r1, 0xc0184d03, r1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, 0x0) sendmmsg$auto(r0, 0x0, 0x0, 0x6) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc040564a, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) close_range$auto(0x2, 0x8, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x40181, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x180483, 0x0) 4.976186573s ago: executing program 2 (id=1353): getcpu$auto(&(0x7f0000000000)=0xc82d, &(0x7f0000000040)=0xdaa, &(0x7f0000000080)={[0x1, 0x3, 0xa, 0x100000001, 0x4, 0x80000001, 0x9b42, 0x4, 0x81, 0x4, 0x2, 0x90d, 0x5, 0x5]}) (async) getcpu$auto(&(0x7f0000000000)=0xc82d, &(0x7f0000000040)=0xdaa, &(0x7f0000000080)={[0x1, 0x3, 0xa, 0x100000001, 0x4, 0x80000001, 0x9b42, 0x4, 0x81, 0x4, 0x2, 0x90d, 0x5, 0x5]}) getcpu$auto(&(0x7f0000000100)=0xffff2373, &(0x7f0000000140)=0x4, &(0x7f0000000180)={[0x29a5, 0xf1, 0x0, 0x10001, 0x8, 0x7, 0xc824, 0x3, 0x9, 0x4, 0x4, 0x3, 0x100, 0x2, 0x816e, 0x10]}) (async) getcpu$auto(&(0x7f0000000100)=0xffff2373, &(0x7f0000000140)=0x4, &(0x7f0000000180)={[0x29a5, 0xf1, 0x0, 0x10001, 0x8, 0x7, 0xc824, 0x3, 0x9, 0x4, 0x4, 0x3, 0x100, 0x2, 0x816e, 0x10]}) r0 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim6/ports/1/bpf_tc_non_bound_accept\x00', 0x501402, 0x0) r1 = prctl$auto_PR_SET_MM_START_BRK(0x0, 0x6, 0xffffffffffffffff, 0x5, 0x6) ioctl$auto(r0, 0x8, r1) (async) ioctl$auto(r0, 0x8, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)={0x9, 0x8, [0x3ff, 0x33, 0x8, 0x7, 0xc, 0x7fffffff, 0x100, 0x5, 0x6]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x8}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8, 0x2, r5}, @HSR_A_IF1_AGE={0x8, 0x3, 0x1}, @HSR_A_IF1_AGE={0x8, 0x3, 0x9}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c800}, 0xb358c24d949f15b7) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000004c0), r3) shmctl$auto_IPC_STAT(0x9, 0x2, &(0x7f0000000680)={{0x8000, 0xffffffffffffffff, 0xffffffffffffffff, 0x8001, 0x3ff, 0x3, 0x5}, 0xfffffffb, 0x1, 0x36f1de1b, 0x8000, @raw=0x8, @raw=0x4, 0x8, 0x0, &(0x7f0000000500)="4808166931caeb11626899fb5e6eaec61f6b64fa9ccd36070752d90b5d43999a98e9e417c796f2c2c42fb6989bb6e638ea58dfe3d3cca0ca87b6bda97785e02e12a8eb1db859387fc7a932cf30f2a0fee460502def3c80677af672fe9748a15e8269ee27a68a785315992589ceb4d4bc945607107ca8084255dfc020589c61f62689ecd770a4ac984f0696acba1fe0d03f5423885fa1cf36917f54e29c3bf371b7bace30", &(0x7f00000005c0)="c344d09f54373da098c56c7de2f6937a313571037c11363d1d1614390e2fb2e4a31f99391e147af060369e44c3f285011e1f73c615fe33a127c0563fa2d45f2be55e309ef0a23c518a465e3ae2097fcef62f88a80db817532955b9d45faa6840e015313012184ec02801a9c0285326369d2e5b7f7c87beed49e562dd6b4aaaf8baab1b8b02924e2837a1f2075f75cac4f753faa9091194"}) shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f00000008c0)={{0x2, 0x0, 0xee00, 0x4112, 0x10001, 0x80}, 0x0, 0x7, 0x12, 0x4, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000700)="e0bb43ffcd3243b3d799d339d8d32c518ca0c25dbc79a8e35d593932d40172eccded116e29044f03cafcc091adcbd19a414d644495ce99222d96422aef869b23767feef422e097025d4deb326a4201c1597df784eaa1da56cfd18a592db25b0a2ba46436f40db6750f3e47fda2f6284ffe4355f4de6788407c9b5380022d8414a06b31a65bae2c85c06abeb07a6bd68723500f55f1e857aa43e844da15250435ca74bdbf4fd3d4e89a8086", &(0x7f00000007c0)="ac7cf6d56b26901a0b02b64c2d7d266d2512fd80b0d36fd2e1c5ea6e28aa8d05a722cf41146b64353dc120af54ce4ee91743605bee5c045282923aa56fc2084073a6b00ca38e7434d6bea456ac939c74bf0fd2ee3b25ac559047798d18b264baee490596fbbe58d0f918e75cad86bff35832299a0969704de063cd8a17b584c4156058e5e9b33330c437ead5346ff52cc169b8d76c7f1b138b54bfbfa01f0b47f89721d4f6f83d9b9ac4bf1edb578e62250b5eb217e539ef2c676e2284c394389e4d12a99751574fb9b9"}) sendmsg$auto_OVS_FLOW_CMD_SET(r6, &(0x7f0000000fc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000940)={0x608, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x2}, @OVS_FLOW_ATTR_MASK={0x512, 0x7, 0x0, 0x1, [@generic="cc8252d703076ce27b34ffb12e01b0b984dc50cfb2e7062196de155e68517dea8fb1be1e2165944c5c2161056f345787121d95d771aaad12522ad8461e00af6159dce163e4f47956494cf017", @typed={0x8, 0x4c, 0x0, 0x0, @uid=r8}, @generic="ccf3f77fbbe629e7320577d1c4f4ac3851c3c4778d723908d595b2a4bd31f19b6eedc29c7bfe24c8aeb63acccb22a93c2e0050170ba63b945b7ccdb0e0cc2f104aa1233a6627394f7b8a1f1701a3816101c634f0a62024c8e4ee78b3bc86f342f788eb1b0214d12ce6a3a8d6ececba805ffd487cc8adef23ea25a7ba5b4b92415fe5f81cc522c19a329bd26a72359b149ee73c2a31b6cff585259d7288c91d091185b17f784fa778e3281b7e0aa230bac95cf1bd68416b42c594ccb4f10ade719bb79f6badf218c5ace6ab579e9c1eb69e2eca0b77ba1e32cd60a3e52c94162158607a2e0ce16361358c95f2", @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="3575db8ee7549e22e6e88e28434cbf0e1e2d24c3cb4e397f5499aac0dada5ede033dd527df266e9777845cd20f212b8e69a4f4c9ee5509820b4751", @nested={0xaa, 0x12, 0x0, 0x1, [@typed={0x8, 0x13d, 0x0, 0x0, @uid=r10}, @typed={0x8, 0x100, 0x0, 0x0, @fd=r1}, @generic="e48fce78120abde4b91ab3322c520fdff44e094a0ef3f62de1d66233edb6515b7a11585c115e71b9bc76c3c3d214d9cbaa1a983775c999609c600c0757844b2950d3a790fadd6a584a474038ccb99410c7c30b03c16db8490872820b7e8859ea642370351d4429cdd3ef5d7882b84350921cb794b245e5ab1a5c896c805dae7b4917ead4fe9c", @nested={0x4, 0xac}, @typed={0xc, 0xbc, 0x0, 0x0, @u64=0xffffffffffffffac}]}, @generic="21afc52818e0d2fec98032e43a764afbcb7cce28ce02387ab437639d477f9ea0b9b59d67ca5dc4a477dd18f5c570df4e9b59f11430628e7798ff7574a2b2980fc4c85bb69795ab8a1a00bb067b5b9ebd8399e1f88aafedf3d6a57e4e4fdfac33617e268cb76f3246fc647dc29af3a1bf410606e59d6e54d03971458e35b0cd4cfcb360bb609f115b871e758e501f14e7c9fbbec066c93d28caed708c16dc51dadc37b48d0a850960c9bb044eeca909ef19b505f0b237901b", @nested={0x13a, 0x12a, 0x0, 0x1, [@generic="21a48d8fb4d9e03084f01811675376b1432f353926fe4347aebd479bf848d9b0d9a670acfbf9eb59a7df6295bbf5127733663a6caed5616042702c5a1df6b7d5d77916b4bef8d6fd71da39465d9072ce688b86830b6c0ea7191134ee52", @generic="9c8e120a69ef5d10f2d8c7172dd2670121b9a6c93a739b70c6bf89c7aa49dfb0078994b811a268e5c28215659adc7de07aacf6036f03b4ee3640928992b809d7254b18a5cb42249962da336cf3029d31d3b007541bf35cbb5e34b761de1d5e9548c27ab28350577f7d62", @generic="8076f4f4feec24051e70ccde0ad9b10830d8a2dcbe5e9442d4a8809f27103abe3efe9d242e0beeef98331758a98ec209cce73143c21784693d63e254ead6a739ee24a31472ff07a00c35f28ef6aad5882b1748c61cfbdf54be35b811481de3fc0550313525cfc17fa28ae6371137ac"]}, @typed={0x8, 0xc5, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="2f2df4429ba70d35bb09f486acdc199fc200c0edfebc4f4bdbe590c84b095b2253c45bac9d25937e16ff2619be2768bf377fcfdb002e2ab1313741845bec9d330ac2c08ccd3b37155f0496c04daabf83a2e8ee64813b5e0560e0d7d95dc6cddd2ee06c18007aec229069688e97547f3233e8212b3e8353bacf318ef7d73913b1f9c5f9311672dc04cb360d899f890725c025ec287dc75d4be9286251c9b23539c022f75f4c5a72b8e4cab50c577508526c5bce0af969cfc910b284a0979250f6afcb98922137d25a99aa854226ce8725169b8612a3de73"]}, @OVS_FLOW_ATTR_ACTIONS={0xc9, 0x2, 0x0, 0x1, [@generic="cdc44b4c946323fa1ab0935ab73e85997c83f0768f40005162e1ede015c1e3ab1a041acdcc935d462683fe22daeac01854b85fb2e45aad0f60ab6d4c24bbe60317e20aaf7e349ab597258cbe3639f704540ead6b3b0f32e089908e338c542ad53e2097c13f075b4c2069070fbb9b0fab960907349ac51399c8872d6d2247d0b62b914a02ff986f8ed715cb7d65eb682fbd3b3fd244df17a8bf89928a2235618ef2cda4afe1b4052d9c9a8039188b904bb519de877c477b0cb882abb1b97fa3f90bd9ae5b2c"]}, @OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x608}, 0x1, 0x0, 0x0, 0x400}, 0x1) (async) sendmsg$auto_OVS_FLOW_CMD_SET(r6, &(0x7f0000000fc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000940)={0x608, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x2}, @OVS_FLOW_ATTR_MASK={0x512, 0x7, 0x0, 0x1, [@generic="cc8252d703076ce27b34ffb12e01b0b984dc50cfb2e7062196de155e68517dea8fb1be1e2165944c5c2161056f345787121d95d771aaad12522ad8461e00af6159dce163e4f47956494cf017", @typed={0x8, 0x4c, 0x0, 0x0, @uid=r8}, @generic="ccf3f77fbbe629e7320577d1c4f4ac3851c3c4778d723908d595b2a4bd31f19b6eedc29c7bfe24c8aeb63acccb22a93c2e0050170ba63b945b7ccdb0e0cc2f104aa1233a6627394f7b8a1f1701a3816101c634f0a62024c8e4ee78b3bc86f342f788eb1b0214d12ce6a3a8d6ececba805ffd487cc8adef23ea25a7ba5b4b92415fe5f81cc522c19a329bd26a72359b149ee73c2a31b6cff585259d7288c91d091185b17f784fa778e3281b7e0aa230bac95cf1bd68416b42c594ccb4f10ade719bb79f6badf218c5ace6ab579e9c1eb69e2eca0b77ba1e32cd60a3e52c94162158607a2e0ce16361358c95f2", @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="3575db8ee7549e22e6e88e28434cbf0e1e2d24c3cb4e397f5499aac0dada5ede033dd527df266e9777845cd20f212b8e69a4f4c9ee5509820b4751", @nested={0xaa, 0x12, 0x0, 0x1, [@typed={0x8, 0x13d, 0x0, 0x0, @uid=r10}, @typed={0x8, 0x100, 0x0, 0x0, @fd=r1}, @generic="e48fce78120abde4b91ab3322c520fdff44e094a0ef3f62de1d66233edb6515b7a11585c115e71b9bc76c3c3d214d9cbaa1a983775c999609c600c0757844b2950d3a790fadd6a584a474038ccb99410c7c30b03c16db8490872820b7e8859ea642370351d4429cdd3ef5d7882b84350921cb794b245e5ab1a5c896c805dae7b4917ead4fe9c", @nested={0x4, 0xac}, @typed={0xc, 0xbc, 0x0, 0x0, @u64=0xffffffffffffffac}]}, @generic="21afc52818e0d2fec98032e43a764afbcb7cce28ce02387ab437639d477f9ea0b9b59d67ca5dc4a477dd18f5c570df4e9b59f11430628e7798ff7574a2b2980fc4c85bb69795ab8a1a00bb067b5b9ebd8399e1f88aafedf3d6a57e4e4fdfac33617e268cb76f3246fc647dc29af3a1bf410606e59d6e54d03971458e35b0cd4cfcb360bb609f115b871e758e501f14e7c9fbbec066c93d28caed708c16dc51dadc37b48d0a850960c9bb044eeca909ef19b505f0b237901b", @nested={0x13a, 0x12a, 0x0, 0x1, [@generic="21a48d8fb4d9e03084f01811675376b1432f353926fe4347aebd479bf848d9b0d9a670acfbf9eb59a7df6295bbf5127733663a6caed5616042702c5a1df6b7d5d77916b4bef8d6fd71da39465d9072ce688b86830b6c0ea7191134ee52", @generic="9c8e120a69ef5d10f2d8c7172dd2670121b9a6c93a739b70c6bf89c7aa49dfb0078994b811a268e5c28215659adc7de07aacf6036f03b4ee3640928992b809d7254b18a5cb42249962da336cf3029d31d3b007541bf35cbb5e34b761de1d5e9548c27ab28350577f7d62", @generic="8076f4f4feec24051e70ccde0ad9b10830d8a2dcbe5e9442d4a8809f27103abe3efe9d242e0beeef98331758a98ec209cce73143c21784693d63e254ead6a739ee24a31472ff07a00c35f28ef6aad5882b1748c61cfbdf54be35b811481de3fc0550313525cfc17fa28ae6371137ac"]}, @typed={0x8, 0xc5, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="2f2df4429ba70d35bb09f486acdc199fc200c0edfebc4f4bdbe590c84b095b2253c45bac9d25937e16ff2619be2768bf377fcfdb002e2ab1313741845bec9d330ac2c08ccd3b37155f0496c04daabf83a2e8ee64813b5e0560e0d7d95dc6cddd2ee06c18007aec229069688e97547f3233e8212b3e8353bacf318ef7d73913b1f9c5f9311672dc04cb360d899f890725c025ec287dc75d4be9286251c9b23539c022f75f4c5a72b8e4cab50c577508526c5bce0af969cfc910b284a0979250f6afcb98922137d25a99aa854226ce8725169b8612a3de73"]}, @OVS_FLOW_ATTR_ACTIONS={0xc9, 0x2, 0x0, 0x1, [@generic="cdc44b4c946323fa1ab0935ab73e85997c83f0768f40005162e1ede015c1e3ab1a041acdcc935d462683fe22daeac01854b85fb2e45aad0f60ab6d4c24bbe60317e20aaf7e349ab597258cbe3639f704540ead6b3b0f32e089908e338c542ad53e2097c13f075b4c2069070fbb9b0fab960907349ac51399c8872d6d2247d0b62b914a02ff986f8ed715cb7d65eb682fbd3b3fd244df17a8bf89928a2235618ef2cda4afe1b4052d9c9a8039188b904bb519de877c477b0cb882abb1b97fa3f90bd9ae5b2c"]}, @OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x608}, 0x1, 0x0, 0x0, 0x400}, 0x1) r12 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000001040), r2) sendmsg$auto_OVS_VPORT_CMD_GET(r2, &(0x7f0000002140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002100)={&(0x7f0000001080)={0x1044, r12, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0xf267}, @OVS_VPORT_ATTR_OPTIONS={0x1028, 0x4, 0x0, 0x1, [@typed={0x8, 0xdc, 0x0, 0x0, @fd=r1}, @nested={0x1010, 0x91, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @uid=0xee00}, @generic="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", @nested={0x4, 0x15d}]}, @typed={0xc, 0xaf, 0x0, 0x0, @u64=0x8}]}]}, 0x1044}, 0x1, 0x0, 0x0, 0x200480d0}, 0x8000) shmctl$auto_SHM_STAT_ANY(0x27, 0xf, &(0x7f0000002240)={{0x7ff, r8, r9, 0x8, 0x81, 0x4, 0x5}, 0x7fffffff, 0x1, 0x4, 0x0, @raw=0x5, @raw=0x1, 0x10, 0x0, &(0x7f0000002180)="d39b29", &(0x7f00000021c0)="3b16f3673661beff69822b673ae80ce7abfcb3773412a078418e21f6b45e8f1f56aaabea36b0f5953d6f698d238b3aded691571cfd7b5e107a3ec2c6ee5300b1f831ffcd46051e51a16b27c4a26bf3b8fcbf0b2673a84923ce"}) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000022c0)='/proc/swaps\x00', 0x80800, 0x0) ioctl$auto_TUNGETVNETBE(r1, 0x800454df, &(0x7f0000002300)=0x2) ioctl$auto_VHOST_SET_LOG_FD2(r1, 0x4004af07, &(0x7f0000002340)=r0) close_range$auto(r0, r13, 0xffffffff) getsockopt$auto_SO_PEERGROUPS(r0, 0xbd, 0x3b, &(0x7f0000002380)='\xff!-/\x00', &(0x7f00000023c0)=0xfffffff5) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r1, 0xc4, &(0x7f0000002400)='/proc/swaps\x00', &(0x7f0000002440)="38bb467576d00ca5685149eb73811ceaa98597de2e999f15c37b246a9a368e9af040dab510497e26c3fdfe9c48132a523a18170131954199f8c7cd23bc339755b42ee0c7da22f71de4d9d5ec6aedc43dc9dc3f2d2881aed1cf50cb88257b67843fe9d383c7c47dcef6da089115079d584dc36ef015bbfc4f2d84917530ecd4c8ea9861ba92318cb3091acf31ed447a50f0a14d669662e80d33967d6223910967ced0a15086b52edcb0f489", 0x2) (async) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r1, 0xc4, &(0x7f0000002400)='/proc/swaps\x00', &(0x7f0000002440)="38bb467576d00ca5685149eb73811ceaa98597de2e999f15c37b246a9a368e9af040dab510497e26c3fdfe9c48132a523a18170131954199f8c7cd23bc339755b42ee0c7da22f71de4d9d5ec6aedc43dc9dc3f2d2881aed1cf50cb88257b67843fe9d383c7c47dcef6da089115079d584dc36ef015bbfc4f2d84917530ecd4c8ea9861ba92318cb3091acf31ed447a50f0a14d669662e80d33967d6223910967ced0a15086b52edcb0f489", 0x2) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f00000025c0)={@sival_ptr=&(0x7f0000002500)="6a921d3b66a44354221aa7046fd0005470520e638da78ddb561936c43195ff70f3dcc666488f1aab8d0466883776012eb665d83b5905bbfdf65536b5b3363b5b6381c4126610c079a49f8e858842e6d7957f9a53ed64427372fab032eec8dcdac8d94106f4df0b7103428581d872d1c46da64302c139e1977c9f3eb728454a91e2626354ed9b0d44c0ea9716ae14431f88cf57903a28d9fb50908e589ddd15ef74ae6fcfd3", @inferred=r13, 0x8}, &(0x7f0000002600)=0x400) (async) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f00000025c0)={@sival_ptr=&(0x7f0000002500)="6a921d3b66a44354221aa7046fd0005470520e638da78ddb561936c43195ff70f3dcc666488f1aab8d0466883776012eb665d83b5905bbfdf65536b5b3363b5b6381c4126610c079a49f8e858842e6d7957f9a53ed64427372fab032eec8dcdac8d94106f4df0b7103428581d872d1c46da64302c139e1977c9f3eb728454a91e2626354ed9b0d44c0ea9716ae14431f88cf57903a28d9fb50908e589ddd15ef74ae6fcfd3", @inferred=r13, 0x8}, &(0x7f0000002600)=0x400) ioctl$auto_XFS_IOC_FREESP(r14, 0x4030580b, &(0x7f0000002640)={0x8001, 0x4, 0xfffffffffffffffd, 0xc, 0x0, r11}) capset$auto(&(0x7f0000002680)={0x752, r15}, &(0x7f00000026c0)={0x1, 0x2000000, 0xffff}) (async) capset$auto(&(0x7f0000002680)={0x752, r15}, &(0x7f00000026c0)={0x1, 0x2000000, 0xffff}) mbind$auto(0x3, 0x8, 0x9, &(0x7f0000002700)=0x8000, 0x2, 0xffff8000) (async) mbind$auto(0x3, 0x8, 0x9, &(0x7f0000002700)=0x8000, 0x2, 0xffff8000) 4.8865367s ago: executing program 2 (id=1354): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14200000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf253d000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) r3 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) r5 = getpgid(0x0) prctl$auto(0x4e20, 0xe13a, r5, 0xffffffff, 0x3) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000700)={0x18, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x63a002, 0x0) msync$auto(0x9, 0x8000000000000000, 0x1) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r7, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) unshare$auto(0x40000080) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r3) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x3c, r8, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x63e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c4093}, 0x40) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) getcwd$auto(&(0x7f0000000000)='(}\x00', 0x1) getrandom$auto(&(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0x3, 0x4) 4.492171207s ago: executing program 0 (id=1355): socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x1b9, 0x3, 0x1b, 0xfffffffffffffffa, 0x80000008000) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x6, 0x84) kexec_load$auto(0x5, 0x0, &(0x7f0000000100)={@kbuf=0x0, 0x0, 0x200, 0x4080000000}, 0x4) sysfs$auto(0x2, 0x23, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x3, 0x1) 4.462502399s ago: executing program 1 (id=1356): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x11e, 0x1, 0xfffffffffffffffe, 0x0) getsockopt$auto(r0, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4008000) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0x705400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2862, 0x0) r4 = prctl$auto(0x1000, 0x1, 0x0, 0x8, 0x0) write$auto(r2, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) read$auto_ext4_dir_operations_ext4(r4, &(0x7f0000000340)=""/9, 0x9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, r3, 0x40) unlink$auto(&(0x7f00000002c0)='./file0\x00') syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x9814}, 0x3, 0x7) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) migrate_pages$auto(0x0, 0xa, 0x0, &(0x7f0000000140)=0x2) ioctl$auto_VHOST_SET_LOG_FD2(r5, 0x4004af07, &(0x7f00000003c0)) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 3.751674418s ago: executing program 2 (id=1359): r0 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000000)="8bacd589207a7ca7433cfe1c8531ec8ca12842897d8bd4716fdf31eff517c2712242adb0c2e3298c0f085f85066c2a759413fc19ebb68ddd5a23feed88f04e674a33365ae8b4335cedccd1c4ee98257d3235d1a0e0c71f470cca86fe31e80954c387ea87b06920f37b9afed7203b3702f5f1823dc3012a9e25c311c2d864a3ccbf8320bf4714b6640ef2ae144da4357e23b7ae58232db044cc388d") r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) sendmsg$auto_NL80211_CMD_DEL_KEY(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x308, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1ff}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2df, 0x6e, 0x0, 0x1, [@generic="2942a462ba394d4e659d4785de888620eb862118de5242c75c5e240cf6b6b5edc3c168ecab02477bc71b9b1984f0d9576e8cbcf2c1bb0867e4ce566d6671f24980d64ad7e89b90824b0a6be1d16ddc408d94b0b6c7b67cbd0964a022d6492ab7c29ccb868af1a72d3990d8094cc992259e77cb52181f2aaaacfe207dcf8156945faf771175e0e9802f65a646ca0d426e7587d23e76c0a36127d53ff0ae0ce92bf843160e4709595fbd8a94401950081f5ff9e8234ecee5912b0f140d13d94494ed87091c5f59b72b9437a002dd6393bd1ac0fc19dbaef813f51019afcadc8fbaef56d003951b570c6998eb763b2ecf17a4ba966816a2266192da", @generic="9a1c6f86541d83db0fa65049964341aee546a9f2cea1b8f283955ab0e7e3fc65007f81fdad321549c8a33db6db95de52a3ea2fd1391b92c257c69b87e12cc345a07588a77040ec61c31f213b8602a24adb5288b39a5ab33acccb3df6c6afe3ab153121cbb1ae4f5995934a0dc85d9641e74406ae88237ee604538d40551d744c6e1857dfc879d1eda3cbff33cd799c2413be54b1e5", @typed={0x8, 0xcd, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x143, 0x8, 0x0, 0x1, [@typed={0x8, 0xc3, 0x0, 0x0, @fd=r2}, @generic="202e99928e89cc74febf4aea2d19bb4ca8066e9f36e29aa67939a346778e920f9207058b0dda492c9a151461f2e1d97c1e3934d5254720daee1dbda48dcb84d4f85301ffc654a86cc4f3867b1dd4481930152ee17496e5c5e2d5c5ac7904d168de2e5b854c1313bdb5c79ff3187d9502ff0d7dd52d5fb626d29384b74e2e488084b9febff62aa6bf86b49da2d57bca58fc15ed881a31db3e4b8e6c31361da8ecc98ca29c5cefa832d4544df6d407c71774ce802d801ba9db6ea16425c686e39bbb3a8df50ab0ce8a3ae00e175c3e2bfcbdc9ff2e995536768dc2e8", @typed={0x59, 0xf6, 0x0, 0x0, @binary="0cb4b20c8fb1a675d6e57d853a332b0955e651b28eeab099127ed73a0256b443ae1a0d9194c9c19505c5d0ed960e8312bdee72bac9cd8d59a3a18d8b1ec611005eb8d99627468d726fd2a81dd9105eeaca64dd6cb3"}]}]}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x60}]}, 0x308}, 0x1, 0x0, 0x0, 0x20040005}, 0x44000) mkdirat$auto(r0, &(0x7f0000000540)='./file0\x00', 0x1) r3 = io_uring_setup$auto(0x7fff, &(0x7f0000000580)={0xe, 0x8, 0xe1, 0x24, 0x0, 0x3, r0, [0x2, 0x16, 0x44], {0x7fffffff, 0x3, 0xfffffffb, 0x800, 0x9, 0xfffffcff, 0x10001, 0x81, 0x8}, {0x9, 0x800, 0x3, 0x7, 0x8, 0x7fffffff, 0x3, 0xffff, 0x8000000000000001}}) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000600), r0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio1\x00', 0x204000, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000680)="d5246e82eaa1b62cb46373a5ff8a27da248d3ac5f92905093654651b7c53039d16925673bb8aea3a42f6ce8a09ba8c8532f3843d4ba1acfa088f11203818f329e3f878eca871ff578ddbe245144852e950e43856649fecd5eb58") setsockopt$auto(r4, 0xed, 0x80000000, &(0x7f0000000700)='l2tp\x00', 0x9) read$auto_bridges_fops_(r4, &(0x7f0000000740)=""/8, 0x8) unshare$auto(0x4) r6 = socket(0x1, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000980)={&(0x7f0000000780), 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x150, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_SSIDS={0x131, 0x2d, 0x0, 0x1, [@typed={0x8, 0xa9, 0x0, 0x0, @fd=r4}, @generic="19a52a24c289eb159632361db1d28301b574b8ce03c64143a87035ba466de493f7a3d5057d33", @generic="a76e670cd616c55402f4b95a31bba1f4bc1dcdc0819ab42633e93bc1eca36474c84fde48b75161f7af461499a3db6343", @generic="fdf831698953d647e629d4810f", @generic="ac58c168a8487ea56598b5a196c6b9d0ea21f2b94ef97a65d33b2ca6d8c36cba5426428d822a333d4535bf389ad565bf89e985021c2735a0e8ee4cd915874465c578c0c606a84656c3704a26071e53112b5604ec0571fc1f25ccece714579fcb4413e19eae3798c592668c5cf3dba72cec3497a807f21fae735927d57ac4341f627c15070a1602b11d42023934089746f06c9a5da6cf5ecd6af23f58e50bfcc463c89f38c5cde804d23180109eb22fe335f8", @typed={0xc, 0xbf, 0x0, 0x0, @u64=0x10}, @typed={0x4, 0x9f}]}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f00000009c0)="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", 0x3) r7 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f00000019c0)='/sys/kernel/debug/ieee80211/phy3/hwsim/rx_rssi\x00', 0x2402, 0x0) close_range$auto(r7, r5, 0x78) readlink$auto(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)='l2tp\x00', 0x800) fadvise64$auto_POSIX_FADV_DONTNEED(r6, 0x6, 0x7, 0x4) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f0000001a80)=@bpf_attr_7={@link_id=0xbd06, 0x9, 0x3, r4}, 0x2) lsm_get_self_attr$auto(0x400, &(0x7f0000001b40)={0x404b, 0x1, 0x3, 0xc, "b81ef815542dbb69d746b62c"}, &(0x7f0000001b80)=0xc28a12b, 0x1) process_madvise$auto_MADV_FREE(r3, &(0x7f0000001c80)={&(0x7f0000001bc0)="ab9352849851233b78f49e1bdfef9371798a3c448b7e144f981ccdc78c74ab2670ffbb365deaa69e93633381ebc082ca80ab6840f08252364ee7e5e5130598b22a1afe3180659708429779e5ea414517ce7daae09e68bd7a6b07dd1fda9d0abcca91b4a1f8f0bc0de26685a93feaf7a0f6470cee807714fe3b0afb67c9ffab6a39068456015474fbab8c1daee5b178583eaa06a283fbd462c62aa1f6e063146365ad2b5842e318f79f09", 0x5}, 0x0, 0x8, 0x6) ioctl$auto_RNDCLEARPOOL2(r4, 0x5206, 0x0) ioctl$auto_XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, &(0x7f0000001cc0)={0x7, 0x2, 0x4, 0xa, 0x5}) io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000001d00)="c058508aa8ef1b2f0ebfea4b8f093aa9d76c08f506d9bbbc7bc89ce693c0e1b226b32a53db45a77ccee73ecc3f94f31b6a83fab8a92c59738aba247b81e6eea4b0978e431628bcabac7a49581962a1c3cf90ca3ab3d72fddbd318bd465a317f5382b14c65ab235cd1d7b5ac699f781d0da5af89c5c999fdc98bf9e219ba66ecc17b6b977463785c8e026f21215bc97", 0x8) ioctl$auto_XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000001dc0)={r2, 0x7}) fsopen$auto(&(0x7f0000001e00)='/dev/audio1\x00', 0x7) poll$auto(&(0x7f0000001e40)={r8, 0x8, 0x3}, 0x5e000000, 0x80) ioctl$auto_BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000001ec0)={@raw=0x8, 0x51, &(0x7f0000001e80), 0x2, 0x8, 0xd, "7e9b23351dc33bf7717bf6936b6b72f71992bfa0534531596ece09b1"}) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_DISABLE_HT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4c8c0) 3.735076802s ago: executing program 0 (id=1360): r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r0, 0x0, 0xffffff7f, 0x8000000000009) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) (async) r1 = socket(0x2, 0x3, 0xa) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="000229bd7000fbdbdf251f00000005002f010900000004006900800000000400930004004401"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000100)={0x544, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x530, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x529, 0x2, "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"}]}]}, 0x544}, 0x1, 0x0, 0x0, 0x4800}, 0x2000000) (async) socket(0x2, 0x1, 0x106) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) (async) lstat$auto(0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, 0x0) listen$auto(0x3, 0x81) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) 3.456603769s ago: executing program 0 (id=1361): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x200007, 0x8) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f00000002c0)="06a1f7bb16f81b18c75bba10364b2b43efade5a9fef65e8cba91629684e24e9012362e6f7621dda06775d495247bffd802edbe6936a3d60d7197486748a7ca1dbba3263ecc6f5d767c247ba51887180a1ea82a0ba08e579f51b654b5807d910c2cc2b9a2e30234d92ffc6c2dc1fc6c4308f9fa311915ede69fe215eaaccba42e3cbbd8ed8daf77928b11be75e2e7b0f1b21045546b66d819903a254c168adfa0d50bf32a0d86c6274a618b346c5a9f63f5d5b0401c51c88ef282b5d8195626fe0749013c32a20163e61e6c5bc2bffb8ab5adda9eabfa9d55f0406788cacc20867c02743abb7b0ef7fe7871b91661642558035c211261ec", 0xffffffffffffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0xd00, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon33\x00', 0x121200, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x206200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="08002dbd5f00eddbdf250e0000000500120040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram7\x00', 0x6af970bd8aeafe47, 0x0) ioctl$auto_HDIO_GETGEO(r4, 0x301, &(0x7f00000003c0)="a097ac3a533408960b39941b04e7d20c2897ecd48b6c61586266259f4e1617d478e0b24ecc4eed27ee2fb710b1352bbb8c0858c499cca02f1e6d5370e397b95d0ce2f8e855ce0dd8a06f5abf90241e5105d0f7a6f69169fa834c77e62141a1556ee63ce29e9a0844e9134fe77149d5009c7419c2bd4245f65c77c92555fecb6b1e918269d62a7c67ec1902d52fb89c4cc4589acc7dd2c2b86aa5d7bff0958b3ae909a1d5433345216c505bd124e7ed0a175cf02fd8fbc0c79dcc3f7891be51e978184870e62c023dd403e59c8a6be122fdc688ccf1b28be08eb2424d778d7c56e738e6ca425063ded6a40cbfcdf2") fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) r5 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000200), 0x101080, 0x0) bpf$auto(0x7, &(0x7f00000004c0)=@test={r5, 0xe, 0x9, 0x8, 0x1, 0x0, 0xfffffb8b, 0x3, 0x8, 0xffffb2f5, 0x5, 0x5, 0x6, 0x2, 0x5}, 0x80000000) write$auto_sg_fops_sg(r1, &(0x7f0000000240)="4a0200000000040000000000000000000700924d1b3c5d2e00000000fdd2adc245a4fe3a61af156016d2e122228118b035ab6f7e46cbe922896e7e796fec3370fd6cf2d037d9f213d48b743bd7804490341927d618b20f562edf1261d0", 0x5d) 2.966612038s ago: executing program 1 (id=1364): syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x800, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) mmap$auto(0x0, 0x202000c, 0x1, 0xeb1, r0, 0x8000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) lsm_set_self_attr$auto(0x5, 0x0, 0x0, 0x7) timer_settime$auto(0xffffffff, 0x8, &(0x7f00000000c0)={{0x8}, {0x0, 0x87}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x1, 0x0) getsockopt$auto(r1, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1010}, 0x800) syz_clone(0x60011, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/devpath\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000040)=""/44, 0x2c) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r8, 0x0, 0x20) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x400, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 2.567575453s ago: executing program 2 (id=1366): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x82001, 0x0) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x8b6) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x70db03, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0xa4, 0xd, 0xb0, @raw=0x7fff}}) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) select$auto(0xfffffffb, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x400000000000005, 0x4, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) execve$auto(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="1200"], 0x1ac}, 0x1, 0x0, 0x0, 0x20008041}, 0x20000081) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000340), r4) 2.528771286s ago: executing program 4 (id=1367): mmap$auto(0x0, 0x7ffd, 0xfffffffffffffff1, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = io_uring_setup$auto(0xc, 0x0) pipe2$auto(0x0, 0x80) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x143d9faf41f77a0d, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) setgroups$auto(0xa1, &(0x7f0000000000)=0xc) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x80442, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000540)='eI\f/', 0x4) r3 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_tx\x00', 0x0, 0x0) ioctl$auto_RNDRESEEDCRNG(0xffffffffffffffff, 0x5207, 0x0) landlock_create_ruleset$auto(&(0x7f00000009c0)={0x9, 0xe, 0x7}, 0x101, 0x200) r4 = open(&(0x7f0000000280)='./bus\x00', 0x40bc2, 0x1c0) sendfile$auto(r4, r3, &(0x7f0000000340)=0x400000000, 0x800000006238) process_madvise$auto_MADV_PAGEOUT(0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x15, 0x4005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) setsockopt$auto_SO_DEVMEM_DONTNEED(r5, 0x2, 0x50, &(0x7f0000000100)='&$@+\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000c40)=ANY=[@ANYBLOB="74010000", @ANYRES16=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x48090) ioctl$auto_RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)=[0x4002, 0x3]) write$auto(0xffffffffffffffff, 0x0, 0xf) 2.160354859s ago: executing program 4 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14200000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf253d000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) r3 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) r5 = getpgid(0x0) prctl$auto(0x4e20, 0xe13a, r5, 0xffffffff, 0x3) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000700)={0x18, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x63a002, 0x0) msync$auto(0x9, 0x8000000000000000, 0x1) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r7, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) unshare$auto(0x40000080) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r3) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x3c, r8, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x63e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c4093}, 0x40) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) getcwd$auto(&(0x7f0000000000)='(}\x00', 0x1) getrandom$auto(&(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0x3, 0x4) 1.763364552s ago: executing program 1 (id=1369): mmap$auto(0x0, 0x402000a, 0x1006, 0xeb1, 0x401, 0x8000) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rr_timeslice_ms\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000080)='+\\#', 0x3747, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, 0x0, 0x58) quotactl$auto(0x9, 0x0, 0x62a0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r2) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x24082, 0x0) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000002c0)={0x1c, r3, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 1.760372661s ago: executing program 0 (id=1377): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x5, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x3, 0x202000d, 0x6, 0x800000080001e, 0xffffffffffffffff, 0xe10000000) mmap$auto(0x4, 0x4020009, 0xdb, 0x200000000010, 0x401, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x147f00, 0x166) getsockname$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x8) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e20, @local}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r0, 0x7ffffffe, 0x0) quotactl_fd$auto(r1, 0x200, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x1, 0xe981, 0xdf, 0xeb1, 0x401, 0x8004) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x2) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r3, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u50x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c79f25bd7000ffdbdf250ee4000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0xc031}, 0x44) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x4, 0x84) setsockopt$auto(0x3, 0x9, 0xa, 0x0, 0x20) r6 = getpgid(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x7f, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred=r6, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(r3, 0x8, 0xfffffffe) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) sendmmsg$auto(r2, &(0x7f0000000240)={{&(0x7f0000000040)="8510a9d12437d5d8b675cd260a3a614350ca0e72dc58194ce113d7660cf8eac5afaa78503c8ed4bf4a8b75c6e06f1302ce91786a19f9a343a2", 0x3, &(0x7f0000000180)={&(0x7f00000000c0)="3d1eb9362d4f008044f789855409e5fdf41514c809b1f03dcd96519ae4af78583ee011adb70e9c73075830ea3279f3deb46576981c7bc10d78a934", 0x5}, 0x0, &(0x7f00000001c0)="34522021abfa382d659a2e256e44834c5acaef4a1542ee7339886ea59e976743a0177bddf75fc95a0dec98a02704c52f6d055cc4f5eb97f951f4a1b5e9c2481392e500472a39d2b51318c347db3e6bc13f7a", 0xadd, 0x4}, 0x1}, 0x7, 0x2) getpid() socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f000000a500), 0xffffffffffffffff) 966.258732ms ago: executing program 2 (id=1373): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028075b99d85b63fa7000000000ac28e8420c003a93024a854b687fdfa08b1d7da22971d00d448d46ee234f1cf55020587a18e1ac0f05d398761095cf6d5a360718c98a6705fe6b7f9bda28a348fac4e7619c778a1062ba592e2865219ccdda3ad4eb35db55317bf4427eafe7d22dbcab283ebdb387a260a8185793b7de95406d074907eb086eee32da3b5ef91ffa82369f83b103808838524a226673dba9f559d7c43af01238e73eccdd012ffe"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) r0 = wait4$auto(0x0, 0x0, 0xf, &(0x7f0000000140)={{0x9}, {0xffffffffffffffff, 0x1000000009}, 0x2, 0x800080000001, 0x1, 0x1000, 0x5, 0x7, 0x5, 0x5, 0xb11c, 0x8, 0xfffffffffffffffd, 0x7, 0xffff, 0x801c0000000}) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRESDEC, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c0001800800034c54a504072792246f02f6b0af2a11b06c2469e47e"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250a"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) getrandom$auto(0x0, 0x6000000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyd4\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b4b, r3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = socket(0x2, 0x3, 0x2) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000027, 0xf5ff, 0x8}, 0x0, 0x208, 0x0) mmap$auto(0xfffffffffffffffd, 0x20009, 0x4000020000df, 0xeb1, 0x401, 0x8002) sendmmsg$auto(r4, 0x0, 0x8, 0x311) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) 776.754459ms ago: executing program 4 (id=1374): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) (async) r1 = socket(0x2a, 0x2, 0x3) connect$auto(r1, 0x0, 0x52) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x23, 0x44b5fc7767f18a4b, 0x10008) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe$auto(0x0) (async) madvise$auto(0x0, 0x200007, 0x19) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/orangefs/stats/reads\x00', 0x2002, 0x0) write$auto(r3, &(0x7f0000000100)='\x15!\xa8^J/\xddCx4\xa1\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x9e\x14\xe4\xa5\xfe\xb5', 0x5) (async) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000540)="258fde12f001", 0x6) 678.312936ms ago: executing program 1 (id=1375): mmap$auto(0x1, 0x2020009, 0x3, 0xeb3, 0xffffffffffffffff, 0x8004) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim5/psample/enable\x00', 0x169a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) io_uring_setup$auto(0x6, 0x0) getpid() unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) unshare$auto(0x40000080) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x9, &(0x7f00000000c0)={0x7, 0x9}, 0x80000000, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x3, 0x3, 0x3, 0x83, 0x6}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) 510.916715ms ago: executing program 4 (id=1376): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/oom_adj\x00', 0x49402, 0x0) read$auto(r1, 0x0, 0x9a28) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000100)={0x0, 0x7}, 0x4000000000007) memfd_secret$auto(0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r3, 0x0, 0x4) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r4 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="720100", @ANYBLOB="13"], 0x1ac}}, 0x4004) getsockopt$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)='+\x00', &(0x7f0000000140)=0x3ff) getsockopt$auto_SO_NOFCS(r0, 0x68c, 0x2b, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = setfsuid$auto(0xee01) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$auto_TIPC_NL_MON_PEER_GET(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000280)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x2c, 0x141, 0x0, 0x1, [@nested={0x20, 0xfa, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@local}, @nested={0x14, 0x126, 0x0, 0x1, [@nested={0x4, 0x99}, @nested={0x4, 0x10}, @nested={0x4, 0x6e}, @nested={0x4, 0x163}]}]}, @typed={0x8, 0x25, 0x0, 0x0, @uid=r6}]}, @typed={0x8, 0xcc, 0x0, 0x0, @u32}]}]}, 0x50}}, 0x10000801) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 459.177164ms ago: executing program 0 (id=1378): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x6) mkdir$auto(0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x20ae82, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x5) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) inotify_init1$auto(0x5615) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x3, 0x0, 0x4b34) read$auto(0xffffffffffffffff, 0x0, 0x200000001f44) waitid$auto_P_ALL(0x0, 0x3, &(0x7f0000000080)={@siginfo_0_0={0x7, 0x7fff}}, 0x7, &(0x7f0000000380)={{0x8000000000000001, 0x7}, {0x0, 0x5}, 0x87, 0x4, 0xffffffff, 0x837, 0x9, 0xfffffffffffffffe, 0x0, 0x293, 0x1, 0x3b8, 0x3f, 0x6, 0xcf8, 0x66}) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x8, 0x0, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff) fcntl$auto_F_GETLEASE(0xffffffffffffffff, 0x401, 0xfffffffffffffff8) unshare$auto(0x40000080) mmap$auto(0x0, 0x202000d, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0\x00', 0xaa002, 0x0) signalfd4$auto(0xffffffff, &(0x7f00000002c0)={0x8000}, 0x8, 0x0) select$auto(0x804, 0x0, &(0x7f0000000100)={[0x9, 0x0, 0x0, 0x80000300, 0x1, 0x0, 0x2, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0xd, 0x7ff, 0xc, 0x20000000008, 0x4000000000006]}, 0x0, 0x0) 0s ago: executing program 4 (id=1379): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x4) sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x845) mmap$auto(0x0, 0x202000b, 0xfffffffffffffffe, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = userfaultfd$auto(0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = epoll_create$auto(0x4) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/58, 0x3a) r4 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2000, 0x0) ioctl$auto_FIONREAD(r4, 0x541b, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x9, 0xd3e, 0x3, 0x949b, 0x2, 0x95f4da0a, 0x7f3, 0x79, 0x8000000000000001, 0x2a61, 0x14, 0x8, 0x1209, 0xe09, 0x4]}, 0x0) write$auto(r3, &(0x7f0000000400)=' \x00\x00\x00\xf7\xff\xff\xff\xff\xff\xff\xff', 0x100000a3d9) select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1fa, 0xfffffffffffffffe, 0x8f, 0x3, 0x9487, 0x8, 0x15f4da09, 0x0, 0xfffffffffffffff7, 0x20000000000005e, 0x6, 0x1040000000000007, 0x6d41, 0x3, 0x7, 0x7]}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40ebf, 0x401, 0x300020000000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff02c}}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.clone_children\x00', 0xb02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) r6 = geteuid() sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000440)={0x51c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4f2, 0x6e, 0x0, 0x1, [@nested={0x8c, 0x32, 0x0, 0x1, [@typed={0x16, 0x6b, 0x0, 0x0, @str='/dev/snd/midiC2D2\x00'}, @typed={0x49, 0xd8, 0x0, 0x0, @binary="e5689eade39003322275e98a736a5537b50a1409128f3f3a7658c788b692c14c21159c73790aa076e92c25807455cc63ce4d4cd35f894131bc3285e6162acede74e686d99e"}, @nested={0x4, 0xac}, @nested={0x4, 0x107}, @nested={0x4, 0x7e}, @typed={0x8, 0x81, 0x0, 0x0, @u32=0x9}, @typed={0x9, 0x152, 0x0, 0x0, @str='.&\\\\\x00'}, @nested={0x4, 0x129}]}, @nested={0x94, 0x119, 0x0, 0x1, [@nested={0x4, 0x36}, @generic="122fec3914edee1ba768c98d7d5897fd448392d0cedf0bc46cf66ea4cdca68e163b88778f8ca53aa77061110a89dc50454124c0353f6993a8ff9d8bd3dca2d62340e3a3a1d225a6e1d1e9d2729c37192225b7dee7152cb31f40ab753d05459ed30d2b77cb786f12ae7af1601962c39d9", @typed={0x14, 0xa3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @typed={0x8, 0xe1, 0x0, 0x0, @u32=0xfffffff8}]}, @typed={0x57, 0x4a, 0x0, 0x0, @binary="32d740d5e4623ae9c2dbc603f5178eaafb5a023f8691d4bdff38518e0b8a1aae565d343f7e5926775a58e64c682c4b95b7e338a258918c6f6df32deb28bf4b1b49f056eb0b9d3e3c0a8ba67c6ed10d31ddc6d5"}, @nested={0x152, 0x9f, 0x0, 0x1, [@nested={0x4, 0x13d}, @generic="b4bfa0e7e8ba50ffc41013bfaf6f5b216840b0cc0ce79266fd7c60be2d437d", @generic="4e32e6ac61b6e76b7816b584b06010beee7e65ff9f62dd199a83871f63a791d7187ae369b3b3af865e1480b04da88ebb8fc819d93748c3650c3da67cac46caab799de501e8da526033810260b7356e80ca296605fc148bb5fe32ec3861c9fb1d2fa47c06c0cb995c21a5b65680c8eaba12052c42b6fe747ff6bb9819fa386557f0a46876a7c1cb484fb7719eccf0cf168456c82154228bf6185321df15d4c407152b91988383b4b4d4268a46a8a4baacf16d7c51e9681fb9825f6ae4547a0689e9d40b0af28546a69353e490a743139438fa75a7923c747c9836a1", @nested={0x4, 0x123}, @generic="4a9f2899fb9a6e8d14a20bda671ac99b56ae54b730da396593013d5f2d7c21df4d7270d20fd3ab8fa3d2220ef165678fe266bdcabed91215eec20df058924d934791f718f4b8625c", @nested={0x4, 0x141}]}, @typed={0x8, 0x133, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x163}, @typed={0x8, 0x14b, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x14, 0xc9, 0x0, 0x1, [@typed={0x8, 0x115, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x6e, 0x0, 0x0, @fd=r1}]}, @generic="662e5004237cbaf96ba91b06f923e01493ac444e9c7cef7dc375d8c1b79e611e27634eba0bb7f0049cc8d9a7bf3d06e34bc869a8e07d16c056aa392b22e3f6d0a9d2c205505535d97e2093a5d57c1d7a725069c418b5a3a285750128e60344f8daad32f8a6390849db40e0f02555ae8357286acaba5dead819ed41e0e0dc6d6aa8e94bc81cd6cb7a7cca81886deacab7a678b13873f53c7eb1acd7959f4a17d1533f", @nested={0x158, 0x7b, 0x0, 0x1, [@typed={0x8, 0x62, 0x0, 0x0, @u32=0x1}, @typed={0x8a, 0x123, 0x0, 0x0, @binary="0de77c35fc8f668ecd3728fb1190132fce5932ba333e638592ea5564e8faf44dcd015af5d9feafae07287689a097c53210d8b06a560d46e62ff9dbacc9023660d1f3fdd0fa12b68cb6f1e34e360fb51cc267c64bab762aa0e02c0866f452d26f45ad2febc7e4e0181c9be24476a3d0ea3d0220c94c27b3aea41610b960521be3b026c0be81eb"}, @typed={0x14, 0xb9, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x13e, 0x0, 0x0, @u32}, @nested={0x4, 0x169}, @generic="089ecffe1e9eed911c2d8179db568300a71c66e3febd035d0297844e4f8928dba2116aef80bd956418ac474622b4ed22abba5abd4efff91016ee9a30877b470b51aa97581aa0d39f99dc262993453112756fb1746ac3743f50ccc18f4aeb52747e26c9758f59220b47c3119417b492df6932d4f0b0eb964c033f1d94dd3915cd69e2bdaa74e902add5c64629ae5cd4ab8892c434aa9faf0d1e18712737e97d10"]}]}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "1f20457d55656fe6ff82aaf3"}]}, 0x51c}, 0x1, 0x0, 0x0, 0x24040040}, 0x2004d8c0) unshare$auto(0x40000080) semctl$auto(0xfffffff6, 0x10000, 0x7, 0xffffffffffff8001) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 0] tomoyo_encode+0x29/0x50 [ 266.267546][ T9440] tomoyo_realpath_from_path+0x18c/0x690 [ 266.267570][ T9440] tomoyo_check_open_permission+0x2af/0x3c0 [ 266.267588][ T9440] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 266.267607][ T9440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.267626][ T9440] ? hook_file_open+0x24e/0x7a0 [ 266.267656][ T9440] ? path_get+0x61/0x80 [ 266.267677][ T9440] tomoyo_file_open+0x6b/0x90 [ 266.267691][ T9440] security_file_open+0xb5/0x1e0 [ 266.267710][ T9440] do_dentry_open+0x588/0x14d0 [ 266.267732][ T9440] vfs_open+0x82/0x3f0 [ 266.267754][ T9440] path_openat+0x208c/0x31a0 [ 266.267776][ T9440] ? stack_depot_save_flags+0x27/0x9d0 [ 266.267798][ T9440] ? __pfx_path_openat+0x10/0x10 [ 266.267817][ T9440] ? kasan_save_stack+0x3f/0x50 [ 266.267830][ T9440] ? kasan_save_stack+0x30/0x50 [ 266.267843][ T9440] ? kasan_save_track+0x14/0x30 [ 266.267855][ T9440] ? __kasan_slab_alloc+0x89/0x90 [ 266.267869][ T9440] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 266.267889][ T9440] ? do_getname+0x35/0x390 [ 266.267911][ T9440] do_file_open+0x20e/0x430 [ 266.267929][ T9440] ? __pfx_do_file_open+0x10/0x10 [ 266.267962][ T9440] ? find_held_lock+0x2b/0x80 [ 266.267979][ T9440] ? __might_fault+0xc5/0x140 [ 266.267999][ T9440] ? __might_fault+0xc5/0x140 [ 266.268021][ T9440] file_open_name+0x198/0x3b0 [ 266.268049][ T9440] ? __pfx_file_open_name+0x10/0x10 [ 266.268072][ T9440] ? do_getname+0x191/0x390 [ 266.268093][ T9440] acct_on+0xa4/0x9e0 [ 266.268115][ T9440] ? __pfx_acct_on+0x10/0x10 [ 266.268137][ T9440] ? bpf_lsm_capable+0x9/0x10 [ 266.268152][ T9440] ? security_capable+0x80/0x260 [ 266.268169][ T9440] __x64_sys_acct+0x81/0x1e0 [ 266.268184][ T9440] ? lockdep_hardirqs_on+0x78/0x100 [ 266.268203][ T9440] do_syscall_64+0x115/0x840 [ 266.268222][ T9440] ? clear_bhb_loop+0x40/0x90 [ 266.268239][ T9440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.268253][ T9440] RIP: 0033:0x7f012ad9ce59 [ 266.268266][ T9440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.268280][ T9440] RSP: 002b:00007f012bd0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 266.268294][ T9440] RAX: ffffffffffffffda RBX: 00007f012b016090 RCX: 00007f012ad9ce59 [ 266.268303][ T9440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 266.268312][ T9440] RBP: 00007f012bd0c090 R08: 0000000000000000 R09: 0000000000000000 [ 266.268320][ T9440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.268328][ T9440] R13: 00007f012b016128 R14: 00007f012b016090 R15: 00007fffe24113f8 [ 266.268347][ T9440] [ 266.759996][ T9440] ERROR: Out of memory at tomoyo_realpath_from_path. [ 272.574223][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 273.749055][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'. [ 273.760785][ T9586] nbd: must specify a size in bytes for the device [ 273.776173][ T30] audit: type=1800 audit(1781233320.131:6): pid=9586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.676" name="features" dev="configfs" ino=29558 res=0 errno=0 [ 273.960477][ T9582] pim6reg: entered allmulticast mode [ 276.816167][ T9680] netlink: 146 bytes leftover after parsing attributes in process `syz.1.695'. [ 280.746763][ T9776] netlink: 334 bytes leftover after parsing attributes in process `syz.3.709'. [ 281.778523][ T9548] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 282.131716][ T9811] capability: warning: `syz.2.716' uses deprecated v2 capabilities in a way that may be insecure [ 282.440078][ T9800] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 282.499055][ T9800] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 282.521243][ T9800] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 282.548936][ T9800] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 282.565958][ T9833] usb usb15: usbfs: interface 0 claimed by hub while 'syz.2.720' sets config #0 [ 282.583518][ T9800] page dumped because: unmovable page [ 282.609928][ T9800] page_owner tracks the page as allocated [ 282.626081][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.718'. [ 282.638411][ T9800] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1559689760, free_ts 0 [ 282.653204][ T9800] register_early_stack+0x74/0xaf [ 282.658328][ T9800] init_page_owner+0x4c/0xa10 [ 282.665128][ T9800] page_ext_init+0x71d/0x780 [ 282.670578][ T9800] mm_core_init+0x229/0x270 [ 282.675388][ T9800] page_owner free stack trace missing [ 283.287446][ T9841] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 285.119717][ T9870] Process accounting resumed [ 285.377704][ T9892] FAULT_INJECTION: forcing a failure. [ 285.377704][ T9892] name fail_futex, interval 1, probability 0, space 0, times 0 [ 285.411555][ T9892] CPU: 0 UID: 0 PID: 9892 Comm: syz.3.732 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.411634][ T9892] Tainted: [L]=SOFTLOCKUP [ 285.411644][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.411662][ T9892] Call Trace: [ 285.411671][ T9892] [ 285.411681][ T9892] dump_stack_lvl+0x100/0x190 [ 285.411735][ T9892] should_fail_ex.cold+0x5/0xa [ 285.411772][ T9892] get_futex_key+0x1d2/0x1510 [ 285.411820][ T9892] ? __pfx_get_futex_key+0x10/0x10 [ 285.411862][ T9892] ? find_held_lock+0x2b/0x80 [ 285.411907][ T9892] ? futex_wake+0x456/0x530 [ 285.411950][ T9892] futex_wake+0xea/0x530 [ 285.411983][ T9892] ? __fget_files+0x215/0x3d0 [ 285.412020][ T9892] ? __pfx_futex_wake+0x10/0x10 [ 285.412055][ T9892] ? __fget_files+0x21f/0x3d0 [ 285.412101][ T9892] do_futex+0x32b/0x350 [ 285.412131][ T9892] ? __pfx_do_futex+0x10/0x10 [ 285.412157][ T9892] ? iput+0x3a/0x40 [ 285.412196][ T9892] ? __pfx_do_sendfile+0x10/0x10 [ 285.412233][ T9892] __x64_sys_futex+0x34f/0x4d0 [ 285.412266][ T9892] ? __pfx___x64_sys_futex+0x10/0x10 [ 285.412295][ T9892] ? ksys_write+0x1ac/0x250 [ 285.412325][ T9892] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 285.412362][ T9892] ? rcu_is_watching+0x12/0xc0 [ 285.412399][ T9892] do_syscall_64+0x115/0x840 [ 285.412438][ T9892] ? clear_bhb_loop+0x40/0x90 [ 285.412473][ T9892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.412501][ T9892] RIP: 0033:0x7f73e099ce59 [ 285.412524][ T9892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.412549][ T9892] RSP: 002b:00007f73e19360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 285.412575][ T9892] RAX: ffffffffffffffda RBX: 00007f73e0c15fa8 RCX: 00007f73e099ce59 [ 285.412592][ T9892] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f73e0c15fac [ 285.412610][ T9892] RBP: 00007f73e0c15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 285.412626][ T9892] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 285.412642][ T9892] R13: 00007f73e0c16038 R14: 00007ffdc1d98b80 R15: 00007ffdc1d98c68 [ 285.412682][ T9892] [ 289.731735][ T9539] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 289.740859][ T9539] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 291.735682][T10019] Process accounting resumed [ 294.998087][T10136] FAULT_INJECTION: forcing a failure. [ 294.998087][T10136] name failslab, interval 1, probability 0, space 0, times 0 [ 295.011167][T10136] CPU: 1 UID: 0 PID: 10136 Comm: syz.3.769 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.011214][T10136] Tainted: [L]=SOFTLOCKUP [ 295.011224][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 295.011242][T10136] Call Trace: [ 295.011250][T10136] [ 295.011261][T10136] dump_stack_lvl+0x100/0x190 [ 295.011315][T10136] should_fail_ex.cold+0x5/0xa [ 295.011352][T10136] should_failslab+0xc2/0x120 [ 295.011385][T10136] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 295.011430][T10136] ? shmem_alloc_inode+0x25/0x50 [ 295.011467][T10136] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 295.011500][T10136] shmem_alloc_inode+0x25/0x50 [ 295.011527][T10136] alloc_inode+0x68/0x250 [ 295.011566][T10136] new_inode+0x22/0x1c0 [ 295.011605][T10136] ? trace_kmem_cache_alloc+0xd5/0x100 [ 295.011642][T10136] shmem_get_inode+0x1e3/0xfb0 [ 295.011678][T10136] ? __pfx_shmem_get_inode+0x10/0x10 [ 295.011728][T10136] __shmem_file_setup+0x382/0x460 [ 295.011767][T10136] ? __pfx___shmem_file_setup+0x10/0x10 [ 295.011809][T10136] ? vm_area_alloc+0x1f/0x160 [ 295.011850][T10136] shmem_zero_setup+0x96/0x1b0 [ 295.011892][T10136] __mmap_region+0x2509/0x2dd0 [ 295.011941][T10136] ? __pfx___mmap_region+0x10/0x10 [ 295.011986][T10136] ? __lock_acquire+0x4a5/0x2630 [ 295.012052][T10136] ? __lock_acquire+0x4a5/0x2630 [ 295.012095][T10136] ? do_raw_spin_unlock+0x145/0x1e0 [ 295.012125][T10136] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 295.012178][T10136] ? find_held_lock+0x2b/0x80 [ 295.012214][T10136] ? rcu_is_watching+0x12/0xc0 [ 295.012261][T10136] ? rcu_is_watching+0x12/0xc0 [ 295.012290][T10136] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 295.012322][T10136] ? lockdep_hardirqs_on+0x78/0x100 [ 295.012408][T10136] mmap_region+0x35d/0x620 [ 295.012434][T10136] ? rcu_is_watching+0x12/0xc0 [ 295.012466][T10136] ? __pfx_mmap_region+0x10/0x10 [ 295.012495][T10136] ? cap_mmap_addr+0x4b/0x120 [ 295.012520][T10136] ? bpf_lsm_mmap_addr+0x9/0x30 [ 295.012546][T10136] ? security_mmap_addr+0x71/0x1e0 [ 295.012582][T10136] ? __get_unmapped_area+0x255/0x3e0 [ 295.012621][T10136] do_mmap+0xc63/0x12f0 [ 295.012661][T10136] ? __pfx_do_mmap+0x10/0x10 [ 295.012694][T10136] ? __pfx_down_write_killable+0x10/0x10 [ 295.012745][T10136] vm_mmap_pgoff+0x29e/0x470 [ 295.012788][T10136] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 295.012826][T10136] ? do_futex+0x192/0x350 [ 295.012856][T10136] ? __pfx_do_futex+0x10/0x10 [ 295.012903][T10136] ksys_mmap_pgoff+0xe4/0x610 [ 295.012936][T10136] ? __x64_sys_futex+0x358/0x4d0 [ 295.012965][T10136] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 295.012994][T10136] ? xfd_validate_state+0x129/0x190 [ 295.013021][T10136] ? ksys_write+0x1ac/0x250 [ 295.013059][T10136] __x64_sys_mmap+0x125/0x190 [ 295.013093][T10136] do_syscall_64+0x115/0x840 [ 295.013128][T10136] ? clear_bhb_loop+0x40/0x90 [ 295.013161][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.013189][T10136] RIP: 0033:0x7f73e099ce59 [ 295.013209][T10136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.013235][T10136] RSP: 002b:00007f73e1936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 295.013261][T10136] RAX: ffffffffffffffda RBX: 00007f73e0c15fa0 RCX: 00007f73e099ce59 [ 295.013280][T10136] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 295.013297][T10136] RBP: 00007f73e0a32d6f R08: 0000000000000003 R09: 0000000000008000 [ 295.013314][T10136] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 295.013331][T10136] R13: 00007f73e0c16038 R14: 00007f73e0c15fa0 R15: 00007ffdc1d98c68 [ 295.013369][T10136] [ 296.132986][T10151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.772'. [ 296.549362][T10156] netlink: 25 bytes leftover after parsing attributes in process `syz.2.774'. [ 297.258008][ T9548] Bluetooth: hci2: unexpected subevent 0x01 length: 252 > 18 [ 297.790875][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.778'. [ 298.792893][T10225] FAULT_INJECTION: forcing a failure. [ 298.792893][T10225] name failslab, interval 1, probability 0, space 0, times 0 [ 298.849827][T10225] CPU: 0 UID: 0 PID: 10225 Comm: syz.2.787 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.849875][T10225] Tainted: [L]=SOFTLOCKUP [ 298.849885][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.849913][T10225] Call Trace: [ 298.849923][T10225] [ 298.849934][T10225] dump_stack_lvl+0x100/0x190 [ 298.849989][T10225] should_fail_ex.cold+0x5/0xa [ 298.850026][T10225] ? tomoyo_encode2+0xfb/0x3c0 [ 298.850064][T10225] should_failslab+0xc2/0x120 [ 298.850098][T10225] __kmalloc_noprof+0xe0/0x850 [ 298.850141][T10225] ? d_absolute_path+0x136/0x1b0 [ 298.850175][T10225] tomoyo_encode2+0xfb/0x3c0 [ 298.850224][T10225] tomoyo_encode+0x29/0x50 [ 298.850262][T10225] tomoyo_realpath_from_path+0x18c/0x690 [ 298.850311][T10225] tomoyo_check_open_permission+0x2af/0x3c0 [ 298.850349][T10225] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 298.850400][T10225] ? hook_file_open+0x24e/0x7a0 [ 298.850461][T10225] ? path_get+0x61/0x80 [ 298.850503][T10225] tomoyo_file_open+0x6b/0x90 [ 298.850532][T10225] security_file_open+0xb5/0x1e0 [ 298.850588][T10225] do_dentry_open+0x588/0x14d0 [ 298.850640][T10225] vfs_open+0x82/0x3f0 [ 298.850689][T10225] path_openat+0x208c/0x31a0 [ 298.850737][T10225] ? __pfx_path_openat+0x10/0x10 [ 298.850787][T10225] do_file_open+0x20e/0x430 [ 298.850826][T10225] ? __pfx_do_file_open+0x10/0x10 [ 298.850887][T10225] ? alloc_fd+0x476/0x790 [ 298.850926][T10225] ? do_getname+0x191/0x390 [ 298.850971][T10225] do_sys_openat2+0x10d/0x1e0 [ 298.851011][T10225] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.851062][T10225] __x64_sys_openat+0x12d/0x210 [ 298.851105][T10225] ? __pfx___x64_sys_openat+0x10/0x10 [ 298.851147][T10225] ? ksys_write+0x1ac/0x250 [ 298.851184][T10225] ? rcu_is_watching+0x12/0xc0 [ 298.851217][T10225] do_syscall_64+0x115/0x840 [ 298.851254][T10225] ? clear_bhb_loop+0x40/0x90 [ 298.851286][T10225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.851315][T10225] RIP: 0033:0x7f9e32f9ce59 [ 298.851338][T10225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.851372][T10225] RSP: 002b:00007f9e33ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 298.851397][T10225] RAX: ffffffffffffffda RBX: 00007f9e33215fa0 RCX: 00007f9e32f9ce59 [ 298.851416][T10225] RDX: 0000000000044000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 298.851436][T10225] RBP: 00007f9e33032d6f R08: 0000000000000000 R09: 0000000000000000 [ 298.851453][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.851468][T10225] R13: 00007f9e33216038 R14: 00007f9e33215fa0 R15: 00007ffdb69d2358 [ 298.851505][T10225] [ 298.852183][T10225] ERROR: Out of memory at tomoyo_realpath_from_path. [ 299.300935][T10188] Bluetooth: hci2: command 0x2016 tx timeout [ 299.386639][T10222] ubi0: attaching mtd0 [ 299.622764][T10222] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 299.699811][T10222] ubi0: scanning is finished [ 300.199462][T10222] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 300.264823][T10222] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 300.371698][T10222] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 300.411416][T10222] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 300.444072][T10222] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 300.548413][T10222] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 300.640857][T10222] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 4218927236 [ 300.743632][T10222] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 300.866548][T10227] ubi0: detaching mtd0 [ 300.870981][T10257] ubi0: background thread "ubi_bgt0d" started, PID 10257 [ 300.912566][T10257] ubi0: scrubbed PEB 0 (LEB 2147479551:0), data moved to PEB 31 [ 300.942215][T10227] ubi0: mtd0 is detached [ 301.369601][T10188] Bluetooth: hci2: command 0x2016 tx timeout [ 302.685605][ T30] audit: type=1800 audit(1781233349.041:7): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.800" name="dbroot" dev="configfs" ino=33124 res=0 errno=0 [ 303.230562][ T30] audit: type=1804 audit(1781233349.591:8): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.799" name="/newroot/188/file0" dev="tmpfs" ino=1004 res=1 errno=0 [ 303.278699][ T30] audit: type=1804 audit(1781233349.591:9): pid=10318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.799" name="/newroot/188/file0" dev="tmpfs" ino=1004 res=1 errno=0 [ 303.655911][T10326] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 304.189568][T10349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.249978][T10349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.274032][T10349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.312377][T10349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.429404][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 305.105432][T10377] netlink: 25 bytes leftover after parsing attributes in process `syz.1.815'. [ 306.251305][ T9548] Bluetooth: hci1: command 0x0406 tx timeout [ 306.328878][T10188] Bluetooth: hci3: command 0x2016 tx timeout [ 306.335429][T10188] Bluetooth: hci0: command 0x2016 tx timeout [ 306.342727][ T9539] Bluetooth: hci2: command 0x2016 tx timeout [ 307.583668][T10411] netlink: 338 bytes leftover after parsing attributes in process `syz.2.823'. [ 307.617427][T10414] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 307.645051][T10409] FAULT_INJECTION: forcing a failure. [ 307.645051][T10409] name failslab, interval 1, probability 0, space 0, times 0 [ 307.661714][T10409] CPU: 0 UID: 0 PID: 10409 Comm: syz.0.822 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.661761][T10409] Tainted: [L]=SOFTLOCKUP [ 307.661772][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.661789][T10409] Call Trace: [ 307.661798][T10409] [ 307.661808][T10409] dump_stack_lvl+0x100/0x190 [ 307.661863][T10409] should_fail_ex.cold+0x5/0xa [ 307.661901][T10409] should_failslab+0xc2/0x120 [ 307.661945][T10409] __kmalloc_cache_node_noprof+0x7d/0x770 [ 307.661977][T10409] ? __alloc_workqueue+0x711/0x1980 [ 307.662015][T10409] ? lockdep_init_map_type+0x5c/0x250 [ 307.662068][T10409] __alloc_workqueue+0x711/0x1980 [ 307.662119][T10409] alloc_workqueue_noprof+0xc7/0x130 [ 307.662159][T10409] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 307.662205][T10409] ? __pfx___debug_object_init+0x10/0x10 [ 307.662253][T10409] nci_register_device+0x21e/0xb80 [ 307.662289][T10409] ? __pfx_nci_register_device+0x10/0x10 [ 307.662326][T10409] ? lockdep_init_map_type+0x5c/0x250 [ 307.662378][T10409] virtual_ncidev_open+0x141/0x220 [ 307.662410][T10409] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 307.662439][T10409] misc_open+0x26d/0x450 [ 307.662469][T10409] ? __pfx_misc_open+0x10/0x10 [ 307.662497][T10409] chrdev_open+0x234/0x6a0 [ 307.662531][T10409] ? __pfx_apparmor_file_open+0x10/0x10 [ 307.662562][T10409] ? __pfx_chrdev_open+0x10/0x10 [ 307.662601][T10409] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 307.662647][T10409] do_dentry_open+0x6ab/0x14d0 [ 307.662681][T10409] ? __pfx_chrdev_open+0x10/0x10 [ 307.662728][T10409] vfs_open+0x82/0x3f0 [ 307.662771][T10409] path_openat+0x208c/0x31a0 [ 307.662814][T10409] ? __pfx_path_openat+0x10/0x10 [ 307.662864][T10409] do_file_open+0x20e/0x430 [ 307.662903][T10409] ? __pfx_do_file_open+0x10/0x10 [ 307.662974][T10409] ? alloc_fd+0x476/0x790 [ 307.663013][T10409] ? do_getname+0x191/0x390 [ 307.663059][T10409] do_sys_openat2+0x10d/0x1e0 [ 307.663101][T10409] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.663147][T10409] ? __sys_sendmsg+0x18f/0x220 [ 307.663184][T10409] __x64_sys_openat+0x12d/0x210 [ 307.663228][T10409] ? __pfx___x64_sys_openat+0x10/0x10 [ 307.663279][T10409] ? rcu_is_watching+0x12/0xc0 [ 307.663315][T10409] do_syscall_64+0x115/0x840 [ 307.663354][T10409] ? clear_bhb_loop+0x40/0x90 [ 307.663389][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.663415][T10409] RIP: 0033:0x7f012ad9ce59 [ 307.663437][T10409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.663466][T10409] RSP: 002b:00007f012bd2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.663493][T10409] RAX: ffffffffffffffda RBX: 00007f012b015fa0 RCX: 00007f012ad9ce59 [ 307.663512][T10409] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 307.663530][T10409] RBP: 00007f012ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 307.663547][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.663564][T10409] R13: 00007f012b016038 R14: 00007f012b015fa0 R15: 00007fffe24113f8 [ 307.663603][T10409] [ 308.841365][T10430] netlink: 350 bytes leftover after parsing attributes in process `syz.3.827'. [ 308.860102][T10428] netlink: 350 bytes leftover after parsing attributes in process `syz.3.827'. [ 308.968310][T10443] hub 1-0:1.0: USB hub found [ 308.984121][T10443] hub 1-0:1.0: 1 port detected [ 310.522406][T10479] FAULT_INJECTION: forcing a failure. [ 310.522406][T10479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.549371][T10479] CPU: 0 UID: 0 PID: 10479 Comm: syz.1.836 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.549410][T10479] Tainted: [L]=SOFTLOCKUP [ 310.549419][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.549434][T10479] Call Trace: [ 310.549442][T10479] [ 310.549452][T10479] dump_stack_lvl+0x100/0x190 [ 310.549499][T10479] should_fail_ex.cold+0x5/0xa [ 310.549529][T10479] _copy_from_user+0x2e/0xd0 [ 310.549564][T10479] get_timespec64+0x8b/0x1b0 [ 310.549599][T10479] ? __pfx_get_timespec64+0x10/0x10 [ 310.549633][T10479] ? lockdep_hardirqs_on+0x78/0x100 [ 310.549699][T10479] __x64_sys_futex+0x21a/0x4d0 [ 310.549739][T10479] ? __pfx___x64_sys_futex+0x10/0x10 [ 310.549772][T10479] ? rcu_is_watching+0x12/0xc0 [ 310.549803][T10479] do_syscall_64+0x115/0x840 [ 310.549834][T10479] ? clear_bhb_loop+0x40/0x90 [ 310.549864][T10479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.549890][T10479] RIP: 0033:0x7f539bd9ce59 [ 310.549911][T10479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.549934][T10479] RSP: 002b:00007fff0c26dae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 310.549958][T10479] RAX: ffffffffffffffda RBX: 000000000004bcdd RCX: 00007f539bd9ce59 [ 310.549974][T10479] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f539c015fac [ 310.549989][T10479] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 310.550004][T10479] R10: 00007fff0c26dbf0 R11: 0000000000000246 R12: 00007fff0c26dc10 [ 310.550021][T10479] R13: 00007f539c015fac R14: 000000000004bd0f R15: 00007fff0c26dbf0 [ 310.550056][T10479] [ 311.224205][T10500] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 311.867655][T10520] netlink: 25 bytes leftover after parsing attributes in process `syz.1.842'. [ 312.478489][T10547] FAULT_INJECTION: forcing a failure. [ 312.478489][T10547] name failslab, interval 1, probability 0, space 0, times 0 [ 312.518125][T10547] CPU: 1 UID: 0 PID: 10547 Comm: syz.1.846 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.518170][T10547] Tainted: [L]=SOFTLOCKUP [ 312.518179][T10547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.518196][T10547] Call Trace: [ 312.518205][T10547] [ 312.518220][T10547] dump_stack_lvl+0x100/0x190 [ 312.518274][T10547] should_fail_ex.cold+0x5/0xa [ 312.518311][T10547] should_failslab+0xc2/0x120 [ 312.518345][T10547] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 312.518376][T10547] ? vidtv_psi_desc_clone+0x3aa/0x5d0 [ 312.518419][T10547] kmemdup_noprof+0x29/0x60 [ 312.518449][T10547] vidtv_psi_desc_clone+0x3aa/0x5d0 [ 312.518489][T10547] vidtv_channel_si_init+0x12c9/0x18f0 [ 312.518543][T10547] vidtv_mux_init+0x526/0xbf0 [ 312.518602][T10547] vidtv_start_feed+0x34e/0x500 [ 312.518634][T10547] ? __pfx_vidtv_start_feed+0x10/0x10 [ 312.518667][T10547] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 312.518721][T10547] dmx_section_feed_start_filtering+0x3a8/0x660 [ 312.518769][T10547] dvb_dmxdev_filter_start+0x767/0xdd0 [ 312.518811][T10547] dvb_demux_do_ioctl+0xe64/0x1200 [ 312.518855][T10547] dvb_usercopy+0x167/0x340 [ 312.518894][T10547] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 312.518923][T10547] ? __pfx_dvb_usercopy+0x10/0x10 [ 312.518976][T10547] ? __fget_files+0x21f/0x3d0 [ 312.519014][T10547] dvb_demux_ioctl+0x29/0x40 [ 312.519037][T10547] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 312.519064][T10547] __x64_sys_ioctl+0x18e/0x210 [ 312.519097][T10547] do_syscall_64+0x115/0x840 [ 312.519136][T10547] ? clear_bhb_loop+0x40/0x90 [ 312.519172][T10547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.519202][T10547] RIP: 0033:0x7f539bd9ce59 [ 312.519227][T10547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.519256][T10547] RSP: 002b:00007f539cc40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.519282][T10547] RAX: ffffffffffffffda RBX: 00007f539c016090 RCX: 00007f539bd9ce59 [ 312.519299][T10547] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 312.519315][T10547] RBP: 00007f539be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 312.519332][T10547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.519348][T10547] R13: 00007f539c016128 R14: 00007f539c016090 R15: 00007fff0c26d988 [ 312.519389][T10547] [ 313.698222][T10561] futex_wake_op: syz.2.848 tries to shift op by -2048; fix this program [ 313.746850][T10561] 0x000000000001-0x000000020000 : "" [ 313.916194][T10561] ftl_cs: FTL header corrupt! [ 316.168241][T10627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.861'. [ 316.232839][T10627] geneve0: entered promiscuous mode [ 316.245178][T10627] geneve0: entered allmulticast mode [ 316.638302][T10644] random: crng reseeded on system resumption [ 317.197220][T10658] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 317.228209][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.235093][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.715959][T10670] FAULT_INJECTION: forcing a failure. [ 317.715959][T10670] name fail_futex, interval 1, probability 0, space 0, times 0 [ 317.737673][T10670] CPU: 1 UID: 0 PID: 10670 Comm: syz.1.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.737718][T10670] Tainted: [L]=SOFTLOCKUP [ 317.737728][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.737745][T10670] Call Trace: [ 317.737754][T10670] [ 317.737765][T10670] dump_stack_lvl+0x100/0x190 [ 317.737820][T10670] should_fail_ex.cold+0x5/0xa [ 317.737857][T10670] get_futex_key+0x1d2/0x1510 [ 317.737905][T10670] ? __pfx_get_futex_key+0x10/0x10 [ 317.737965][T10670] futex_wake+0xea/0x530 [ 317.738000][T10670] ? rcu_is_watching+0x12/0xc0 [ 317.738032][T10670] ? __pfx_futex_wake+0x10/0x10 [ 317.738067][T10670] ? kasan_quarantine_put+0x104/0x240 [ 317.738102][T10670] ? putname+0xb1/0x110 [ 317.738135][T10670] ? kmem_cache_free+0x127/0x6c0 [ 317.738182][T10670] do_futex+0x32b/0x350 [ 317.738241][T10670] ? __pfx_do_futex+0x10/0x10 [ 317.738279][T10670] __x64_sys_futex+0x34f/0x4d0 [ 317.738311][T10670] ? __x64_sys_open+0xfe/0x1d0 [ 317.738351][T10670] ? __pfx___x64_sys_futex+0x10/0x10 [ 317.738385][T10670] ? rcu_is_watching+0x12/0xc0 [ 317.738420][T10670] do_syscall_64+0x115/0x840 [ 317.738459][T10670] ? clear_bhb_loop+0x40/0x90 [ 317.738490][T10670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.738516][T10670] RIP: 0033:0x7f539bd9ce59 [ 317.738538][T10670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.738567][T10670] RSP: 002b:00007f539cc610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 317.738592][T10670] RAX: ffffffffffffffda RBX: 00007f539c015fa8 RCX: 00007f539bd9ce59 [ 317.738608][T10670] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f539c015fac [ 317.738624][T10670] RBP: 00007f539c015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 317.738638][T10670] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 317.738653][T10670] R13: 00007f539c016038 R14: 00007fff0c26d8a0 R15: 00007fff0c26d988 [ 317.738687][T10670] [ 318.009313][ T9548] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 319.122467][T10689] ubi0: attaching mtd0 [ 319.223331][T10689] ubi0: scanning is finished [ 319.824677][T10689] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 320.956206][T10700] ubi0: attaching mtd0 [ 320.993484][T10717] random: crng reseeded on system resumption [ 321.017152][T10700] ubi0: scanning is finished [ 321.240399][T10700] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 321.289093][T10700] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 321.358660][T10700] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 321.406502][T10700] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 321.483424][T10700] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 321.602570][T10700] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 321.760218][T10700] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 4218927236 [ 321.834987][T10700] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 321.850346][T10699] ubi0: detaching mtd0 [ 321.857921][T10728] ubi0: background thread "ubi_bgt0d" started, PID 10728 [ 321.895526][T10699] ubi0: mtd0 is detached [ 321.935023][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'. [ 322.537735][T10745] futex_wake_op: syz.1.887 tries to shift op by -2048; fix this program [ 322.548218][T10745] 0x000000000001-0x000000020000 : "" [ 322.599361][T10745] ftl_cs: FTL header corrupt! [ 324.356205][T10715] Process accounting paused [ 326.491498][T10830] futex_wake_op: syz.3.902 tries to shift op by -2048; fix this program [ 326.557619][T10830] 0x000000000001-0x000000020000 : "" [ 326.578578][T10830] ftl_cs: FTL header corrupt! [ 327.368821][ T30] audit: type=1800 audit(1781233373.721:10): pid=10853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.913" name="lu_gp_id" dev="configfs" ino=36241 res=0 errno=0 [ 328.068015][T10861] ubi0: attaching mtd0 [ 328.207292][T10861] ubi0: scanning is finished [ 328.759428][T10861] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 328.782579][T10861] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 328.792958][T10861] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 328.803094][T10861] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 328.814614][T10861] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 328.821874][T10861] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 328.830834][T10861] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 4218927236 [ 328.845645][T10861] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 328.856452][T10900] ubi0: background thread "ubi_bgt0d" started, PID 10900 [ 329.497170][T10908] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 329.772493][T10886] ubi: mtd0 is already attached to ubi0 [ 329.780868][T10886] ubi0: detaching mtd0 [ 329.833074][T10886] ubi0: mtd0 is detached [ 329.955577][T10916] FAULT_INJECTION: forcing a failure. [ 329.955577][T10916] name failslab, interval 1, probability 0, space 0, times 0 [ 329.981679][T10916] CPU: 1 UID: 0 PID: 10916 Comm: syz.1.915 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.981728][T10916] Tainted: [L]=SOFTLOCKUP [ 329.981738][T10916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.981756][T10916] Call Trace: [ 329.981766][T10916] [ 329.981776][T10916] dump_stack_lvl+0x100/0x190 [ 329.981830][T10916] should_fail_ex.cold+0x5/0xa [ 329.981866][T10916] ? tomoyo_realpath_from_path+0xb6/0x690 [ 329.981907][T10916] should_failslab+0xc2/0x120 [ 329.981941][T10916] __kmalloc_noprof+0xe0/0x850 [ 329.981984][T10916] ? kfree+0x1dd/0x6c0 [ 329.982029][T10916] tomoyo_realpath_from_path+0xb6/0x690 [ 329.982079][T10916] tomoyo_check_open_permission+0x2af/0x3c0 [ 329.982117][T10916] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 329.982167][T10916] ? hook_file_open+0x24e/0x7a0 [ 329.982237][T10916] ? path_get+0x61/0x80 [ 329.982279][T10916] tomoyo_file_open+0x6b/0x90 [ 329.982307][T10916] security_file_open+0xb5/0x1e0 [ 329.982346][T10916] do_dentry_open+0x588/0x14d0 [ 329.982391][T10916] vfs_open+0x82/0x3f0 [ 329.982435][T10916] path_openat+0x208c/0x31a0 [ 329.982482][T10916] ? __pfx_path_openat+0x10/0x10 [ 329.982533][T10916] do_file_open+0x20e/0x430 [ 329.982571][T10916] ? __pfx_do_file_open+0x10/0x10 [ 329.982635][T10916] ? alloc_fd+0x476/0x790 [ 329.982672][T10916] ? do_getname+0x191/0x390 [ 329.982717][T10916] do_sys_openat2+0x10d/0x1e0 [ 329.982762][T10916] ? __pfx_do_sys_openat2+0x10/0x10 [ 329.982820][T10916] __x64_sys_openat+0x12d/0x210 [ 329.982862][T10916] ? __pfx___x64_sys_openat+0x10/0x10 [ 329.982895][T10916] ? ksys_write+0x1ac/0x250 [ 329.982925][T10916] ? rcu_is_watching+0x12/0xc0 [ 329.982954][T10916] do_syscall_64+0x115/0x840 [ 329.982985][T10916] ? clear_bhb_loop+0x40/0x90 [ 329.983012][T10916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.983035][T10916] RIP: 0033:0x7f539bd9ce59 [ 329.983055][T10916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.983077][T10916] RSP: 002b:00007f539cc61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 329.983100][T10916] RAX: ffffffffffffffda RBX: 00007f539c015fa0 RCX: 00007f539bd9ce59 [ 329.983115][T10916] RDX: 0000000000040001 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 329.983130][T10916] RBP: 00007f539be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 329.983143][T10916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.983156][T10916] R13: 00007f539c016038 R14: 00007f539c015fa0 R15: 00007fff0c26d988 [ 329.983187][T10916] [ 329.985404][T10916] ERROR: Out of memory at tomoyo_realpath_from_path. [ 330.566466][T10930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.917'. [ 330.635541][T10930] ipvlan1: entered promiscuous mode [ 330.657989][T10930] ipvlan1: entered allmulticast mode [ 330.691662][T10930] veth0_vlan: entered allmulticast mode [ 331.129133][ T9775] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.478085][ T9775] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 syzkaller syzkaller login: [ 331.634455][ T9775] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.882150][ T9775] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.910995][T10188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.936223][T10188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.945607][T10188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.955414][T10188] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.964124][T10188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.611170][T10970] nbd: must specify at least one socket [ 332.701812][T10970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'. [ 332.822378][ T9775] bridge_slave_1: left allmulticast mode [ 332.836285][ T9775] bridge_slave_1: left promiscuous mode [ 332.855667][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.908220][ T9775] bridge_slave_0: left allmulticast mode [ 332.924079][ T9775] bridge_slave_0: left promiscuous mode [ 332.948068][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.690898][ T9775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.725330][ T9775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.742468][ T9775] bond0 (unregistering): Released all slaves [ 333.785616][T10970] bond0: (slave bond_slave_0): Releasing backup interface [ 333.852917][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 334.088774][ T9548] Bluetooth: hci3: command tx timeout [ 334.764882][T11011] FAULT_INJECTION: forcing a failure. [ 334.764882][T11011] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 334.830261][ T9775] hsr_slave_0: left promiscuous mode [ 334.847692][ T9775] hsr_slave_1: left promiscuous mode [ 334.854762][T11011] CPU: 0 UID: 0 PID: 11011 Comm: syz.2.932 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.854788][T11011] Tainted: [L]=SOFTLOCKUP [ 334.854801][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.854811][T11011] Call Trace: [ 334.854816][T11011] [ 334.854822][T11011] dump_stack_lvl+0x100/0x190 [ 334.854852][T11011] should_fail_ex.cold+0x5/0xa [ 334.854869][T11011] ? prepare_alloc_pages+0x16d/0x5f0 [ 334.854889][T11011] should_fail_alloc_page+0xeb/0x140 [ 334.854908][T11011] prepare_alloc_pages+0x1f0/0x5f0 [ 334.854929][T11011] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 334.854954][T11011] ? __pfx_stack_trace_save+0x10/0x10 [ 334.854974][T11011] ? stack_depot_save_flags+0x27/0x9d0 [ 334.854997][T11011] ? hrtimer_reprogram+0x165/0x6c0 [ 334.855012][T11011] ? timerqueue_linked_add+0x260/0x430 [ 334.855029][T11011] ? kasan_save_stack+0x3f/0x50 [ 334.855051][T11011] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 334.855098][T11011] ? __lock_acquire+0x4a5/0x2630 [ 334.855122][T11011] ? __lock_acquire+0x4a5/0x2630 [ 334.855143][T11011] ? __css_rstat_updated+0x1ce/0x5a0 [ 334.855170][T11011] ? lock_acquire+0x1b1/0x370 [ 334.855191][T11011] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 334.855214][T11011] ? policy_nodemask+0xed/0x4f0 [ 334.855232][T11011] alloc_pages_mpol+0x1fb/0x540 [ 334.855250][T11011] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 334.855269][T11011] ? __lock_acquire+0x4a5/0x2630 [ 334.855293][T11011] folio_alloc_mpol_noprof+0x36/0x260 [ 334.855314][T11011] vma_alloc_folio_noprof+0xed/0x1d0 [ 334.855333][T11011] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 334.855358][T11011] do_anonymous_page+0xb46/0x2050 [ 334.855381][T11011] ? rcu_read_unlock+0x2d/0xb0 [ 334.855407][T11011] __handle_mm_fault+0x1d2c/0x2a00 [ 334.855430][T11011] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 334.855448][T11011] ? __pfx___handle_mm_fault+0x10/0x10 [ 334.855471][T11011] ? pte_offset_map_lock+0x174/0x320 [ 334.855487][T11011] ? find_held_lock+0x2b/0x80 [ 334.855511][T11011] ? follow_page_pte+0x4d0/0x13f0 [ 334.855531][T11011] handle_mm_fault+0x37b/0xa30 [ 334.855556][T11011] __get_user_pages+0x1178/0x32a0 [ 334.855585][T11011] ? __pfx___get_user_pages+0x10/0x10 [ 334.855609][T11011] populate_vma_page_range+0x267/0x3f0 [ 334.855629][T11011] ? __pfx_populate_vma_page_range+0x10/0x10 [ 334.855648][T11011] ? __pfx_find_vma_intersection+0x10/0x10 [ 334.855667][T11011] ? do_mmap+0x93f/0x12f0 [ 334.855687][T11011] __mm_populate+0x107/0x3a0 [ 334.855708][T11011] ? __pfx___mm_populate+0x10/0x10 [ 334.855729][T11011] ? up_write+0x28c/0x4f0 [ 334.855745][T11011] vm_mmap_pgoff+0x37f/0x470 [ 334.855766][T11011] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 334.855786][T11011] ? do_futex+0x192/0x350 [ 334.855809][T11011] ? __pfx_do_futex+0x10/0x10 [ 334.855823][T11011] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.855851][T11011] ksys_mmap_pgoff+0xe4/0x610 [ 334.855869][T11011] ? __x64_sys_futex+0x358/0x4d0 [ 334.855884][T11011] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 334.855902][T11011] ? xfd_validate_state+0x129/0x190 [ 334.855916][T11011] ? exit_to_user_mode_loop+0xf3/0x670 [ 334.855941][T11011] __x64_sys_mmap+0x125/0x190 [ 334.855959][T11011] do_syscall_64+0x115/0x840 [ 334.855980][T11011] ? clear_bhb_loop+0x40/0x90 [ 334.855999][T11011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.856015][T11011] RIP: 0033:0x7f9e32f9ce59 [ 334.856029][T11011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.856043][T11011] RSP: 002b:00007f9e33ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 334.856059][T11011] RAX: ffffffffffffffda RBX: 00007f9e33215fa0 RCX: 00007f9e32f9ce59 [ 334.856070][T11011] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 334.856080][T11011] RBP: 00007f9e33032d6f R08: 0000000000000007 R09: 0000000000028000 [ 334.856089][T11011] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 334.856098][T11011] R13: 00007f9e33216038 R14: 00007f9e33215fa0 R15: 00007ffdb69d2358 [ 334.856118][T11011] [ 335.262296][ T9775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.270696][ T9775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.280285][ T9775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.287729][ T9775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.323497][ T9775] veth1_macvtap: left promiscuous mode [ 335.330487][ T9775] veth0_macvtap: left promiscuous mode [ 335.336039][ T9775] veth1_vlan: left promiscuous mode [ 335.342966][ T9775] veth0_vlan: left promiscuous mode [ 335.786167][ T9775] team0 (unregistering): Port device team_slave_1 removed [ 335.837051][ T9775] team0 (unregistering): Port device team_slave_0 removed [ 336.064625][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 336.170374][ T9548] Bluetooth: hci3: command tx timeout [ 336.784619][T11051] netlink: 318 bytes leftover after parsing attributes in process `syz.1.938'. [ 336.794258][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.808983][T10956] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.827228][T10956] bridge_slave_0: entered allmulticast mode [ 336.851118][T10956] bridge_slave_0: entered promiscuous mode [ 336.920786][T10956] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.941787][T10956] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.965702][T10956] bridge_slave_1: entered allmulticast mode [ 336.988182][T10956] bridge_slave_1: entered promiscuous mode [ 337.364639][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 337.406786][T10956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.430062][T10956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.587199][T10956] team0: Port device team_slave_0 added [ 337.596733][T10956] team0: Port device team_slave_1 added [ 337.663757][T10956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.683172][T10956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.739302][T10956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.815508][T10956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.827901][T10956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.888665][T10956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.135676][T10956] hsr_slave_0: entered promiscuous mode [ 338.164432][T10956] hsr_slave_1: entered promiscuous mode [ 338.180004][T10956] debugfs: 'hsr0' already exists in 'hsr' [ 338.196286][T10956] Cannot create hsr debugfs directory [ 338.250982][ T9548] Bluetooth: hci3: command tx timeout [ 338.933643][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 339.497305][T10956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 339.568017][T10956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.597397][T10956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 339.639624][T10956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.657533][T10956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 339.686942][T10956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.695437][T10956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 339.717292][T10956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.944327][T10956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.084586][T10956] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.145321][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.152478][ T9778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.207961][ T9769] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.215118][ T9769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.329320][ T9548] Bluetooth: hci3: command tx timeout [ 341.212636][T10956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.764342][T10956] veth0_vlan: entered promiscuous mode [ 341.794430][T10956] veth1_vlan: entered promiscuous mode [ 341.863649][T10956] veth0_macvtap: entered promiscuous mode [ 341.876770][T10956] veth1_macvtap: entered promiscuous mode [ 341.920271][T10956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.967297][T10956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.003986][ T9775] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.041213][ T9775] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.095241][ T9775] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.150640][ T9775] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.307419][ T9769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.332684][ T9769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.383865][ T9542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.395753][ T9542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.755464][T11163] FAULT_INJECTION: forcing a failure. [ 342.755464][T11163] name failslab, interval 1, probability 0, space 0, times 0 [ 342.773052][T11163] CPU: 0 UID: 0 PID: 11163 Comm: syz.0.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.773097][T11163] Tainted: [L]=SOFTLOCKUP [ 342.773106][T11163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 342.773122][T11163] Call Trace: [ 342.773131][T11163] [ 342.773142][T11163] dump_stack_lvl+0x100/0x190 [ 342.773194][T11163] should_fail_ex.cold+0x5/0xa [ 342.773235][T11163] ? tomoyo_realpath_from_path+0xb6/0x690 [ 342.773276][T11163] should_failslab+0xc2/0x120 [ 342.773306][T11163] __kmalloc_noprof+0xe0/0x850 [ 342.773345][T11163] ? kfree+0x1dd/0x6c0 [ 342.773391][T11163] tomoyo_realpath_from_path+0xb6/0x690 [ 342.773437][T11163] tomoyo_check_open_permission+0x2af/0x3c0 [ 342.773470][T11163] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 342.773521][T11163] ? hook_file_open+0x24e/0x7a0 [ 342.773585][T11163] ? path_get+0x61/0x80 [ 342.773632][T11163] tomoyo_file_open+0x6b/0x90 [ 342.773661][T11163] security_file_open+0xb5/0x1e0 [ 342.773701][T11163] do_dentry_open+0x588/0x14d0 [ 342.773746][T11163] vfs_open+0x82/0x3f0 [ 342.773793][T11163] path_openat+0x208c/0x31a0 [ 342.773842][T11163] ? __pfx_path_openat+0x10/0x10 [ 342.773893][T11163] do_file_open+0x20e/0x430 [ 342.773932][T11163] ? __pfx_do_file_open+0x10/0x10 [ 342.773966][T11163] ? lockdep_hardirqs_on+0x78/0x100 [ 342.774034][T11163] ? alloc_fd+0x476/0x790 [ 342.774072][T11163] ? do_getname+0x191/0x390 [ 342.774117][T11163] do_sys_openat2+0x10d/0x1e0 [ 342.774161][T11163] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.774226][T11163] __x64_sys_openat+0x12d/0x210 [ 342.774271][T11163] ? __pfx___x64_sys_openat+0x10/0x10 [ 342.774309][T11163] ? ksys_write+0x1ac/0x250 [ 342.774346][T11163] ? rcu_is_watching+0x12/0xc0 [ 342.774384][T11163] do_syscall_64+0x115/0x840 [ 342.774422][T11163] ? clear_bhb_loop+0x40/0x90 [ 342.774458][T11163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.774488][T11163] RIP: 0033:0x7f012ad9ce59 [ 342.774513][T11163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.774541][T11163] RSP: 002b:00007f012bd2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 342.774568][T11163] RAX: ffffffffffffffda RBX: 00007f012b015fa0 RCX: 00007f012ad9ce59 [ 342.774585][T11163] RDX: 0000000000040001 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 342.774603][T11163] RBP: 00007f012ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 342.774620][T11163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.774636][T11163] R13: 00007f012b016038 R14: 00007f012b015fa0 R15: 00007fffe24113f8 [ 342.774675][T11163] [ 342.774714][T11163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 343.344998][T11170] netlink: 266 bytes leftover after parsing attributes in process `syz.2.948'. [ 343.417057][T11170] Setting dangerous option i915.mitigations - tainting kernel [ 344.150669][T11184] FAULT_INJECTION: forcing a failure. [ 344.150669][T11184] name failslab, interval 1, probability 0, space 0, times 0 [ 344.258664][T11184] CPU: 1 UID: 0 PID: 11184 Comm: syz.0.953 Tainted: G U L syzkaller #0 PREEMPT(full) [ 344.258713][T11184] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 344.258723][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.258739][T11184] Call Trace: [ 344.258748][T11184] [ 344.258759][T11184] dump_stack_lvl+0x100/0x190 [ 344.258812][T11184] should_fail_ex.cold+0x5/0xa [ 344.258846][T11184] should_failslab+0xc2/0x120 [ 344.258880][T11184] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 344.258927][T11184] ? __alloc_skb+0x140/0x710 [ 344.258961][T11184] __alloc_skb+0x140/0x710 [ 344.258984][T11184] ? __alloc_skb+0x5b7/0x710 [ 344.259009][T11184] ? __pfx___alloc_skb+0x10/0x10 [ 344.259046][T11184] inet6_ifmcaddr_notify+0xd6/0x1d0 [ 344.259088][T11184] ? __pfx_inet6_ifmcaddr_notify+0x10/0x10 [ 344.259144][T11184] __ipv6_dev_mc_dec+0x297/0x340 [ 344.259179][T11184] ipv6_mc_destroy_dev+0x534/0x690 [ 344.259212][T11184] ? __local_bh_enable_ip+0x9e/0x120 [ 344.259252][T11184] addrconf_ifdown.isra.0+0x148a/0x1b70 [ 344.259305][T11184] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 344.259359][T11184] addrconf_notify+0x4a3/0x1ba0 [ 344.259416][T11184] ? __pfx_tls_dev_event+0x10/0x10 [ 344.259448][T11184] ? __pfx_addrconf_notify+0x10/0x10 [ 344.259495][T11184] ? ip6mr_device_event+0x1c4/0x230 [ 344.259542][T11184] notifier_call_chain+0x99/0x400 [ 344.259588][T11184] call_netdevice_notifiers_info+0xbe/0x110 [ 344.259624][T11184] unregister_netdevice_many_notify+0x118f/0x24f0 [ 344.259670][T11184] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 344.259725][T11184] unregister_netdevice_queue+0x30b/0x3c0 [ 344.259760][T11184] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 344.259794][T11184] ? __pfx_locks_remove_file+0x10/0x10 [ 344.259843][T11184] ppp_release+0x125/0x150 [ 344.259888][T11184] ? __pfx_ppp_release+0x10/0x10 [ 344.259930][T11184] __fput+0x3ff/0xb50 [ 344.259979][T11184] task_work_run+0x150/0x240 [ 344.260008][T11184] ? __pfx_task_work_run+0x10/0x10 [ 344.260040][T11184] ? rcu_is_watching+0x12/0xc0 [ 344.260077][T11184] exit_to_user_mode_loop+0x157/0x670 [ 344.260121][T11184] ? rcu_is_watching+0x12/0xc0 [ 344.260156][T11184] do_syscall_64+0x652/0x840 [ 344.260195][T11184] ? clear_bhb_loop+0x40/0x90 [ 344.260231][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.260261][T11184] RIP: 0033:0x7f012ad9ce59 [ 344.260285][T11184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.260313][T11184] RSP: 002b:00007f012bd2d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 344.260339][T11184] RAX: 0000000000000000 RBX: 00007f012b015fa0 RCX: 00007f012ad9ce59 [ 344.260358][T11184] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 344.260375][T11184] RBP: 00007f012ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 344.260398][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.260416][T11184] R13: 00007f012b016038 R14: 00007f012b015fa0 R15: 00007fffe24113f8 [ 344.260456][T11184] syzkaller syzkaller login: [ 345.402521][T11212] FAULT_INJECTION: forcing a failure. [ 345.402521][T11212] name fail_futex, interval 1, probability 0, space 0, times 0 [ 345.448685][T11212] CPU: 1 UID: 0 PID: 11212 Comm: syz.4.958 Tainted: G U L syzkaller #0 PREEMPT(full) [ 345.448733][T11212] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 345.448744][T11212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.448762][T11212] Call Trace: [ 345.448771][T11212] [ 345.448781][T11212] dump_stack_lvl+0x100/0x190 [ 345.448831][T11212] should_fail_ex.cold+0x5/0xa [ 345.448864][T11212] get_futex_key+0x1d2/0x1510 [ 345.448908][T11212] ? __pfx_get_futex_key+0x10/0x10 [ 345.448956][T11212] ? get_futex_key+0x4e8/0x1510 [ 345.449009][T11212] futex_wait_setup+0x83/0x510 [ 345.449054][T11212] futex_wait_requeue_pi+0x240/0x890 [ 345.449102][T11212] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 345.449139][T11212] ? __futex_wait+0x256/0x300 [ 345.449178][T11212] ? __pfx___futex_wait+0x10/0x10 [ 345.449212][T11212] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 345.449281][T11212] ? __pfx_futex_wake_mark+0x10/0x10 [ 345.449325][T11212] ? __fget_files+0x21f/0x3d0 [ 345.449365][T11212] do_futex+0x24f/0x350 [ 345.449395][T11212] ? __pfx_do_futex+0x10/0x10 [ 345.449436][T11212] __x64_sys_futex+0x34f/0x4d0 [ 345.449468][T11212] ? fput+0x79/0x100 [ 345.449504][T11212] ? __pfx___x64_sys_futex+0x10/0x10 [ 345.449530][T11212] ? ksys_write+0x1ac/0x250 [ 345.449558][T11212] ? __pfx_ksys_write+0x10/0x10 [ 345.449584][T11212] ? exit_to_user_mode_loop+0xf3/0x670 [ 345.449623][T11212] ? rcu_is_watching+0x12/0xc0 [ 345.449654][T11212] do_syscall_64+0x115/0x840 [ 345.449689][T11212] ? clear_bhb_loop+0x40/0x90 [ 345.449723][T11212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.449752][T11212] RIP: 0033:0x7f634fb9ce59 [ 345.449775][T11212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.449804][T11212] RSP: 002b:00007f6350a6d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 345.449831][T11212] RAX: ffffffffffffffda RBX: 00007f634fe15fa0 RCX: 00007f634fb9ce59 [ 345.449850][T11212] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000200000000080 [ 345.449866][T11212] RBP: 00007f634fc32d6f R08: 0000000000000000 R09: 00000000fffffffa [ 345.449881][T11212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.449895][T11212] R13: 00007f634fe16038 R14: 00007f634fe15fa0 R15: 00007ffe793e0638 [ 345.449928][T11212] [ 345.800899][T11217] FAULT_INJECTION: forcing a failure. [ 345.800899][T11217] name failslab, interval 1, probability 0, space 0, times 0 [ 345.817738][T11217] CPU: 1 UID: 0 PID: 11217 Comm: syz.2.960 Tainted: G U L syzkaller #0 PREEMPT(full) [ 345.817781][T11217] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 345.817792][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.817806][T11217] Call Trace: [ 345.817815][T11217] [ 345.817825][T11217] dump_stack_lvl+0x100/0x190 [ 345.817880][T11217] should_fail_ex.cold+0x5/0xa [ 345.817914][T11217] ? tomoyo_realpath_from_path+0xb6/0x690 [ 345.817956][T11217] should_failslab+0xc2/0x120 [ 345.817991][T11217] __kmalloc_noprof+0xe0/0x850 [ 345.818044][T11217] ? kfree+0x1dd/0x6c0 [ 345.818089][T11217] tomoyo_realpath_from_path+0xb6/0x690 [ 345.818137][T11217] tomoyo_check_open_permission+0x2af/0x3c0 [ 345.818173][T11217] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 345.818221][T11217] ? hook_file_open+0x24e/0x7a0 [ 345.818282][T11217] ? path_get+0x61/0x80 [ 345.818322][T11217] tomoyo_file_open+0x6b/0x90 [ 345.818351][T11217] security_file_open+0xb5/0x1e0 [ 345.818389][T11217] do_dentry_open+0x588/0x14d0 [ 345.818434][T11217] vfs_open+0x82/0x3f0 [ 345.818480][T11217] path_openat+0x208c/0x31a0 [ 345.818527][T11217] ? __pfx_path_openat+0x10/0x10 [ 345.818581][T11217] do_file_open+0x20e/0x430 [ 345.818616][T11217] ? __pfx_do_file_open+0x10/0x10 [ 345.818676][T11217] ? alloc_fd+0x476/0x790 [ 345.818715][T11217] ? do_getname+0x191/0x390 [ 345.818759][T11217] do_sys_openat2+0x10d/0x1e0 [ 345.818800][T11217] ? __pfx_do_sys_openat2+0x10/0x10 [ 345.818853][T11217] __x64_sys_openat+0x12d/0x210 [ 345.818896][T11217] ? __pfx___x64_sys_openat+0x10/0x10 [ 345.818936][T11217] ? ksys_write+0x1ac/0x250 [ 345.818967][T11217] ? rcu_is_watching+0x12/0xc0 [ 345.818998][T11217] do_syscall_64+0x115/0x840 [ 345.819044][T11217] ? clear_bhb_loop+0x40/0x90 [ 345.819077][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.819102][T11217] RIP: 0033:0x7f9e32f9ce59 [ 345.819124][T11217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.819149][T11217] RSP: 002b:00007f9e33ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 345.819173][T11217] RAX: ffffffffffffffda RBX: 00007f9e33215fa0 RCX: 00007f9e32f9ce59 [ 345.819191][T11217] RDX: 0000000000040001 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 345.819208][T11217] RBP: 00007f9e33032d6f R08: 0000000000000000 R09: 0000000000000000 [ 345.819225][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.819240][T11217] R13: 00007f9e33216038 R14: 00007f9e33215fa0 R15: 00007ffdb69d2358 [ 345.819275][T11217] [ 346.087041][T11217] ERROR: Out of memory at tomoyo_realpath_from_path. [ 346.789707][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'. syzkaller syzkaller login: [ 347.628364][T11247] FAULT_INJECTION: forcing a failure. [ 347.628364][T11247] name failslab, interval 1, probability 0, space 0, times 0 [ 347.663783][T11247] CPU: 1 UID: 0 PID: 11247 Comm: syz.1.965 Tainted: G U L syzkaller #0 PREEMPT(full) [ 347.663814][T11247] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 347.663820][T11247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 347.663829][T11247] Call Trace: [ 347.663835][T11247] [ 347.663841][T11247] dump_stack_lvl+0x100/0x190 [ 347.663871][T11247] should_fail_ex.cold+0x5/0xa [ 347.663890][T11247] should_failslab+0xc2/0x120 [ 347.663913][T11247] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 347.663938][T11247] ? __kernfs_new_node+0xd2/0x9f0 [ 347.663958][T11247] __kernfs_new_node+0xd2/0x9f0 [ 347.663976][T11247] ? __pfx___kernfs_new_node+0x10/0x10 [ 347.663997][T11247] ? find_held_lock+0x2b/0x80 [ 347.664014][T11247] ? kernfs_root+0xee/0x2a0 [ 347.664030][T11247] ? kernfs_root+0xee/0x2a0 [ 347.664057][T11247] kernfs_new_node+0x11b/0x1a0 [ 347.664080][T11247] __kernfs_create_file+0x53/0x350 [ 347.664105][T11247] sysfs_add_file_mode_ns+0x207/0x3c0 [ 347.664125][T11247] internal_create_group+0x593/0xfb0 [ 347.664148][T11247] ? __pfx_internal_create_group+0x10/0x10 [ 347.664168][T11247] ? kernfs_create_link+0x1bd/0x240 [ 347.664192][T11247] internal_create_groups+0x9d/0x150 [ 347.664211][T11247] device_add+0xf5b/0x1950 [ 347.664229][T11247] ? __pfx_device_add+0x10/0x10 [ 347.664245][T11247] ? lockdep_init_map_type+0x5c/0x250 [ 347.664268][T11247] ? __init_waitqueue_head+0xca/0x150 [ 347.664289][T11247] netdev_register_kobject+0x1a9/0x3d0 [ 347.664312][T11247] register_netdevice+0x151c/0x24b0 [ 347.664333][T11247] ? __pfx_register_netdevice+0x10/0x10 [ 347.664353][T11247] ? __pfx_loopback_net_init+0x10/0x10 [ 347.664377][T11247] register_netdev+0x34/0x50 [ 347.664393][T11247] loopback_net_init+0x7a/0x170 [ 347.664416][T11247] ? __pfx_loopback_net_init+0x10/0x10 [ 347.664437][T11247] ops_init+0x1e2/0x5f0 [ 347.664455][T11247] setup_net+0x118/0x3a0 [ 347.664471][T11247] ? __pfx_setup_net+0x10/0x10 [ 347.664487][T11247] ? mutex_init_lockdep+0xf1/0x120 [ 347.664505][T11247] copy_net_ns+0x46f/0x7c0 [ 347.664524][T11247] create_new_namespaces+0x3ea/0xac0 [ 347.664547][T11247] unshare_nsproxy_namespaces+0xf2/0x220 [ 347.664567][T11247] ksys_unshare+0x438/0xab0 [ 347.664589][T11247] ? __pfx_ksys_unshare+0x10/0x10 [ 347.664608][T11247] ? xfd_validate_state+0x129/0x190 [ 347.664629][T11247] __x64_sys_unshare+0x31/0x40 [ 347.664649][T11247] do_syscall_64+0x115/0x840 [ 347.664669][T11247] ? clear_bhb_loop+0x40/0x90 [ 347.664688][T11247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.664704][T11247] RIP: 0033:0x7f539bd9ce59 [ 347.664718][T11247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.664733][T11247] RSP: 002b:00007f539cc61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 347.664748][T11247] RAX: ffffffffffffffda RBX: 00007f539c015fa0 RCX: 00007f539bd9ce59 [ 347.664758][T11247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 347.664767][T11247] RBP: 00007f539be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 347.664777][T11247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.664786][T11247] R13: 00007f539c016038 R14: 00007f539c015fa0 R15: 00007fff0c26d988 [ 347.664808][T11247] [ 348.202909][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 348.918112][T11269] netlink: 50 bytes leftover after parsing attributes in process `syz.4.971'. [ 349.004590][T11269] Setting dangerous option i915.mitigations - tainting kernel [ 351.801585][T11323] random: crng reseeded on system resumption [ 352.452329][T11326] hub 1-0:1.0: USB hub found [ 352.516308][T11326] hub 1-0:1.0: 1 port detected [ 353.459955][T11348] FAULT_INJECTION: forcing a failure. [ 353.459955][T11348] name failslab, interval 1, probability 0, space 0, times 0 [ 353.485082][T11348] CPU: 0 UID: 0 PID: 11348 Comm: syz.4.976 Tainted: G U L syzkaller #0 PREEMPT(full) [ 353.485132][T11348] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 353.485143][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.485160][T11348] Call Trace: [ 353.485169][T11348] [ 353.485179][T11348] dump_stack_lvl+0x100/0x190 [ 353.485234][T11348] should_fail_ex.cold+0x5/0xa [ 353.485272][T11348] should_failslab+0xc2/0x120 [ 353.485307][T11348] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 353.485350][T11348] ? __kernfs_new_node+0xd2/0x9f0 [ 353.485389][T11348] __kernfs_new_node+0xd2/0x9f0 [ 353.485425][T11348] ? __pfx___kernfs_new_node+0x10/0x10 [ 353.485466][T11348] ? find_held_lock+0x2b/0x80 [ 353.485501][T11348] ? kernfs_root+0xee/0x2a0 [ 353.485529][T11348] ? kernfs_root+0xee/0x2a0 [ 353.485565][T11348] kernfs_new_node+0x11b/0x1a0 [ 353.485604][T11348] __kernfs_create_file+0x53/0x350 [ 353.485657][T11348] sysfs_add_file_mode_ns+0x207/0x3c0 [ 353.485701][T11348] internal_create_group+0x593/0xfb0 [ 353.485745][T11348] ? __pfx_internal_create_group+0x10/0x10 [ 353.485784][T11348] ? kernfs_create_link+0x1bd/0x240 [ 353.485832][T11348] internal_create_groups+0x9d/0x150 [ 353.485869][T11348] device_add+0x71a/0x1950 [ 353.485903][T11348] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.485943][T11348] ? __pfx_device_add+0x10/0x10 [ 353.485974][T11348] ? lockdep_init_map_type+0x5c/0x250 [ 353.486021][T11348] ? __init_waitqueue_head+0xca/0x150 [ 353.486062][T11348] netdev_register_kobject+0x1a9/0x3d0 [ 353.486105][T11348] register_netdevice+0x151c/0x24b0 [ 353.486146][T11348] ? __pfx_register_netdevice+0x10/0x10 [ 353.486186][T11348] ? __pfx_loopback_net_init+0x10/0x10 [ 353.486231][T11348] register_netdev+0x34/0x50 [ 353.486261][T11348] loopback_net_init+0x7a/0x170 [ 353.486306][T11348] ? __pfx_loopback_net_init+0x10/0x10 [ 353.486368][T11348] ops_init+0x1e2/0x5f0 [ 353.486402][T11348] setup_net+0x118/0x3a0 [ 353.486431][T11348] ? __pfx_setup_net+0x10/0x10 [ 353.486460][T11348] ? mutex_init_lockdep+0xf1/0x120 [ 353.486496][T11348] copy_net_ns+0x46f/0x7c0 [ 353.486534][T11348] create_new_namespaces+0x3ea/0xac0 [ 353.486610][T11348] unshare_nsproxy_namespaces+0xf2/0x220 [ 353.486655][T11348] ksys_unshare+0x438/0xab0 [ 353.486699][T11348] ? __pfx_ksys_unshare+0x10/0x10 [ 353.486737][T11348] ? xfd_validate_state+0x129/0x190 [ 353.486779][T11348] __x64_sys_unshare+0x31/0x40 [ 353.486819][T11348] do_syscall_64+0x115/0x840 [ 353.486857][T11348] ? clear_bhb_loop+0x40/0x90 [ 353.486900][T11348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.486929][T11348] RIP: 0033:0x7f634fb9ce59 [ 353.486954][T11348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.486981][T11348] RSP: 002b:00007f6350a6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 353.487009][T11348] RAX: ffffffffffffffda RBX: 00007f634fe15fa0 RCX: 00007f634fb9ce59 [ 353.487029][T11348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 353.487046][T11348] RBP: 00007f634fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 353.487062][T11348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.487077][T11348] R13: 00007f634fe16038 R14: 00007f634fe15fa0 R15: 00007ffe793e0638 [ 353.487110][T11348] [ 354.938201][T11354] Process accounting resumed [ 355.328932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 355.512325][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 357.965472][T11418] netlink: 50 bytes leftover after parsing attributes in process `syz.1.987'. [ 358.019207][T11417] Setting dangerous option i915.mitigations - tainting kernel [ 358.774082][T11433] random: crng reseeded on system resumption [ 358.785338][T11429] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 358.991249][T11433] hub 1-0:1.0: USB hub found [ 359.007534][T11433] hub 1-0:1.0: 1 port detected [ 359.503652][T11437] FAULT_INJECTION: forcing a failure. [ 359.503652][T11437] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 359.548737][T11437] CPU: 1 UID: 0 PID: 11437 Comm: syz.4.992 Tainted: G U L syzkaller #0 PREEMPT(full) [ 359.548790][T11437] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 359.548802][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.548823][T11437] Call Trace: [ 359.548833][T11437] [ 359.548844][T11437] dump_stack_lvl+0x100/0x190 [ 359.548899][T11437] should_fail_ex.cold+0x5/0xa [ 359.548929][T11437] ? prepare_alloc_pages+0x16d/0x5f0 [ 359.548969][T11437] should_fail_alloc_page+0xeb/0x140 [ 359.549006][T11437] prepare_alloc_pages+0x1f0/0x5f0 [ 359.549043][T11437] ? mark_held_locks+0x40/0x70 [ 359.549090][T11437] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 359.549141][T11437] ? __pfx_do_sync_core+0x10/0x10 [ 359.549191][T11437] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 359.549232][T11437] ? __pfx_text_poke_memcpy+0x10/0x10 [ 359.549268][T11437] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 359.549320][T11437] ? find_held_lock+0x2b/0x80 [ 359.549354][T11437] ? jump_label_update+0x37a/0x550 [ 359.549388][T11437] ? jump_label_update+0x37a/0x550 [ 359.549434][T11437] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 359.549477][T11437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 359.549519][T11437] ? policy_nodemask+0xed/0x4f0 [ 359.549556][T11437] alloc_pages_mpol+0x1fb/0x540 [ 359.549592][T11437] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 359.549637][T11437] alloc_pages_noprof+0x1a/0x160 [ 359.549676][T11437] kvm_arch_vcpu_create+0x2aa/0xac0 [ 359.549720][T11437] kvm_vm_ioctl+0x756/0x4050 [ 359.549770][T11437] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 359.549827][T11437] ? kasan_quarantine_put+0x104/0x240 [ 359.549851][T11437] ? lockdep_hardirqs_on+0x78/0x100 [ 359.549890][T11437] ? find_held_lock+0x2b/0x80 [ 359.549921][T11437] ? tomoyo_path_number_perm+0x28f/0x580 [ 359.549955][T11437] ? tomoyo_path_number_perm+0x28f/0x580 [ 359.549996][T11437] ? tomoyo_path_number_perm+0x188/0x580 [ 359.550033][T11437] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 359.550067][T11437] ? futex_wait+0x11e/0x370 [ 359.550112][T11437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 359.550164][T11437] ? do_vfs_ioctl+0x226/0x13e0 [ 359.550193][T11437] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 359.550233][T11437] ? find_held_lock+0x2b/0x80 [ 359.550267][T11437] ? __fget_files+0x215/0x3d0 [ 359.550298][T11437] ? hook_file_ioctl_common+0x149/0x410 [ 359.550341][T11437] ? __fget_files+0x21f/0x3d0 [ 359.550379][T11437] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 359.550417][T11437] __x64_sys_ioctl+0x18e/0x210 [ 359.550447][T11437] do_syscall_64+0x115/0x840 [ 359.550483][T11437] ? clear_bhb_loop+0x40/0x90 [ 359.550519][T11437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.550549][T11437] RIP: 0033:0x7f634fb9ce59 [ 359.550572][T11437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.550600][T11437] RSP: 002b:00007f6350a6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.550636][T11437] RAX: ffffffffffffffda RBX: 00007f634fe15fa0 RCX: 00007f634fb9ce59 [ 359.550655][T11437] RDX: 0000000000000004 RSI: 000000000000ae41 RDI: 0000000000000003 [ 359.550673][T11437] RBP: 00007f634fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 359.550690][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.550708][T11437] R13: 00007f634fe16038 R14: 00007f634fe15fa0 R15: 00007ffe793e0638 [ 359.550746][T11437] [ 361.107016][T11443] kexec: Could not allocate control_code_buffer syzkaller syzkaller login: [ 362.778333][T11497] FAULT_INJECTION: forcing a failure. [ 362.778333][T11497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 362.805427][T11497] CPU: 0 UID: 0 PID: 11497 Comm: syz.1.1003 Tainted: G U L syzkaller #0 PREEMPT(full) [ 362.805479][T11497] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 362.805491][T11497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.805508][T11497] Call Trace: [ 362.805517][T11497] [ 362.805529][T11497] dump_stack_lvl+0x100/0x190 [ 362.805584][T11497] should_fail_ex.cold+0x5/0xa [ 362.805636][T11497] ? prepare_alloc_pages+0x16d/0x5f0 [ 362.805677][T11497] should_fail_alloc_page+0xeb/0x140 [ 362.805715][T11497] prepare_alloc_pages+0x1f0/0x5f0 [ 362.805753][T11497] ? mark_held_locks+0x40/0x70 [ 362.805798][T11497] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 362.805849][T11497] ? __pfx_do_sync_core+0x10/0x10 [ 362.805900][T11497] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 362.805944][T11497] ? __pfx_text_poke_memcpy+0x10/0x10 [ 362.805981][T11497] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 362.806033][T11497] ? find_held_lock+0x2b/0x80 [ 362.806067][T11497] ? jump_label_update+0x37a/0x550 [ 362.806100][T11497] ? jump_label_update+0x37a/0x550 [ 362.806150][T11497] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 362.806194][T11497] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.806237][T11497] ? policy_nodemask+0xed/0x4f0 [ 362.806275][T11497] alloc_pages_mpol+0x1fb/0x540 [ 362.806311][T11497] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 362.806356][T11497] alloc_pages_noprof+0x1a/0x160 [ 362.806395][T11497] kvm_arch_vcpu_create+0x2aa/0xac0 [ 362.806438][T11497] kvm_vm_ioctl+0x756/0x4050 [ 362.806489][T11497] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 362.806552][T11497] ? kasan_quarantine_put+0x104/0x240 [ 362.806580][T11497] ? lockdep_hardirqs_on+0x78/0x100 [ 362.806621][T11497] ? find_held_lock+0x2b/0x80 [ 362.806652][T11497] ? tomoyo_path_number_perm+0x28f/0x580 [ 362.806686][T11497] ? tomoyo_path_number_perm+0x28f/0x580 [ 362.806726][T11497] ? tomoyo_path_number_perm+0x188/0x580 [ 362.806764][T11497] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 362.806797][T11497] ? futex_wait+0x11e/0x370 [ 362.806837][T11497] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.806882][T11497] ? do_vfs_ioctl+0x226/0x13e0 [ 362.806912][T11497] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 362.806951][T11497] ? find_held_lock+0x2b/0x80 [ 362.806984][T11497] ? __fget_files+0x215/0x3d0 [ 362.807015][T11497] ? hook_file_ioctl_common+0x149/0x410 [ 362.807056][T11497] ? __fget_files+0x21f/0x3d0 [ 362.807092][T11497] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 362.807131][T11497] __x64_sys_ioctl+0x18e/0x210 [ 362.807163][T11497] do_syscall_64+0x115/0x840 [ 362.807199][T11497] ? clear_bhb_loop+0x40/0x90 [ 362.807231][T11497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.807259][T11497] RIP: 0033:0x7f539bd9ce59 [ 362.807280][T11497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.807308][T11497] RSP: 002b:00007f539cc40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.807332][T11497] RAX: ffffffffffffffda RBX: 00007f539c016090 RCX: 00007f539bd9ce59 [ 362.807352][T11497] RDX: 0000000000000004 RSI: 000000000000ae41 RDI: 0000000000000003 [ 362.807368][T11497] RBP: 00007f539be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 362.807385][T11497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.807401][T11497] R13: 00007f539c016128 R14: 00007f539c016090 R15: 00007fff0c26d988 [ 362.807437][T11497] [ 362.813465][T11492] FAULT_INJECTION: forcing a failure. [ 362.813465][T11492] name failslab, interval 1, probability 0, space 0, times 0 [ 362.931216][T11494] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1002'. [ 362.940384][T11492] CPU: 1 UID: 0 PID: 11492 Comm: syz.2.1002 Tainted: G U L syzkaller #0 PREEMPT(full) [ 362.940430][T11492] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 362.940441][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.940456][T11492] Call Trace: [ 362.940465][T11492] [ 362.940475][T11492] dump_stack_lvl+0x100/0x190 [ 362.940526][T11492] should_fail_ex.cold+0x5/0xa [ 362.940561][T11492] should_failslab+0xc2/0x120 [ 362.940593][T11492] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 362.940636][T11492] ? ioctx_alloc+0x1b9/0x21a0 [ 362.940730][T11492] ioctx_alloc+0x1b9/0x21a0 [ 362.940766][T11492] ? __sock_release+0x184/0x260 [ 362.940805][T11492] ? find_held_lock+0x2b/0x80 [ 362.940840][T11492] ? __pfx_ioctx_alloc+0x10/0x10 [ 362.940887][T11492] __x64_sys_io_setup+0xc9/0x220 [ 362.940927][T11492] do_syscall_64+0x115/0x840 [ 362.940965][T11492] ? clear_bhb_loop+0x40/0x90 [ 362.940998][T11492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.941026][T11492] RIP: 0033:0x7f9e32f9ce59 [ 362.941049][T11492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.941075][T11492] RSP: 002b:00007f9e33ed5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 362.941100][T11492] RAX: ffffffffffffffda RBX: 00007f9e33215fa0 RCX: 00007f9e32f9ce59 [ 362.941119][T11492] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 362.941136][T11492] RBP: 00007f9e33032d6f R08: 0000000000000000 R09: 0000000000000000 [ 362.941153][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.941169][T11492] R13: 00007f9e33216038 R14: 00007f9e33215fa0 R15: 00007ffdb69d2358 [ 362.941205][T11492] [ 363.060741][T11500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1004'. [ 363.632223][T11507] random: crng reseeded on system resumption [ 364.323567][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 364.857767][T11535] FAULT_INJECTION: forcing a failure. [ 364.857767][T11535] name failslab, interval 1, probability 0, space 0, times 0 [ 364.890412][T11535] CPU: 1 UID: 0 PID: 11535 Comm: syz.1.1014 Tainted: G U L syzkaller #0 PREEMPT(full) [ 364.890440][T11535] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 364.890445][T11535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.890455][T11535] Call Trace: [ 364.890461][T11535] [ 364.890470][T11535] dump_stack_lvl+0x100/0x190 [ 364.890523][T11535] should_fail_ex.cold+0x5/0xa [ 364.890544][T11535] should_failslab+0xc2/0x120 [ 364.890562][T11535] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 364.890584][T11535] ? ioctx_alloc+0x1b9/0x21a0 [ 364.890608][T11535] ioctx_alloc+0x1b9/0x21a0 [ 364.890626][T11535] ? __sock_release+0x184/0x260 [ 364.890648][T11535] ? find_held_lock+0x2b/0x80 [ 364.890666][T11535] ? __pfx_ioctx_alloc+0x10/0x10 [ 364.890691][T11535] __x64_sys_io_setup+0xc9/0x220 [ 364.890714][T11535] do_syscall_64+0x115/0x840 [ 364.890734][T11535] ? clear_bhb_loop+0x40/0x90 [ 364.890759][T11535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.890775][T11535] RIP: 0033:0x7f539bd9ce59 [ 364.890789][T11535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.890803][T11535] RSP: 002b:00007f539cc61028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 364.890818][T11535] RAX: ffffffffffffffda RBX: 00007f539c015fa0 RCX: 00007f539bd9ce59 [ 364.890828][T11535] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 364.890838][T11535] RBP: 00007f539be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 364.890847][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.890856][T11535] R13: 00007f539c016038 R14: 00007f539c015fa0 R15: 00007fff0c26d988 [ 364.890876][T11535] [ 366.082163][T11548] FAULT_INJECTION: forcing a failure. [ 366.082163][T11548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 366.119222][T11548] CPU: 0 UID: 0 PID: 11548 Comm: syz.0.1015 Tainted: G U L syzkaller #0 PREEMPT(full) [ 366.119270][T11548] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 366.119281][T11548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 366.119298][T11548] Call Trace: [ 366.119308][T11548] [ 366.119318][T11548] dump_stack_lvl+0x100/0x190 [ 366.119368][T11548] should_fail_ex.cold+0x5/0xa [ 366.119396][T11548] ? prepare_alloc_pages+0x16d/0x5f0 [ 366.119434][T11548] should_fail_alloc_page+0xeb/0x140 [ 366.119469][T11548] prepare_alloc_pages+0x1f0/0x5f0 [ 366.119489][T11548] ? mark_held_locks+0x40/0x70 [ 366.119514][T11548] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 366.119541][T11548] ? __pfx_do_sync_core+0x10/0x10 [ 366.119566][T11548] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 366.119587][T11548] ? __pfx_text_poke_memcpy+0x10/0x10 [ 366.119606][T11548] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 366.119633][T11548] ? find_held_lock+0x2b/0x80 [ 366.119651][T11548] ? jump_label_update+0x37a/0x550 [ 366.119669][T11548] ? jump_label_update+0x37a/0x550 [ 366.119699][T11548] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 366.119722][T11548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 366.119745][T11548] ? policy_nodemask+0xed/0x4f0 [ 366.119765][T11548] alloc_pages_mpol+0x1fb/0x540 [ 366.119784][T11548] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 366.119806][T11548] alloc_pages_noprof+0x1a/0x160 [ 366.119826][T11548] kvm_arch_vcpu_create+0x2aa/0xac0 [ 366.119848][T11548] kvm_vm_ioctl+0x756/0x4050 [ 366.119873][T11548] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 366.119904][T11548] ? kasan_quarantine_put+0x104/0x240 [ 366.119918][T11548] ? lockdep_hardirqs_on+0x78/0x100 [ 366.119939][T11548] ? find_held_lock+0x2b/0x80 [ 366.119956][T11548] ? tomoyo_path_number_perm+0x28f/0x580 [ 366.119975][T11548] ? tomoyo_path_number_perm+0x28f/0x580 [ 366.119999][T11548] ? tomoyo_path_number_perm+0x188/0x580 [ 366.120018][T11548] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 366.120035][T11548] ? futex_wait+0x11e/0x370 [ 366.120057][T11548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 366.120079][T11548] ? do_vfs_ioctl+0x226/0x13e0 [ 366.120094][T11548] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 366.120114][T11548] ? find_held_lock+0x2b/0x80 [ 366.120131][T11548] ? __fget_files+0x215/0x3d0 [ 366.120147][T11548] ? hook_file_ioctl_common+0x149/0x410 [ 366.120169][T11548] ? __fget_files+0x21f/0x3d0 [ 366.120188][T11548] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 366.120207][T11548] __x64_sys_ioctl+0x18e/0x210 [ 366.120223][T11548] do_syscall_64+0x115/0x840 [ 366.120243][T11548] ? clear_bhb_loop+0x40/0x90 [ 366.120261][T11548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.120276][T11548] RIP: 0033:0x7f012ad9ce59 [ 366.120289][T11548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.120304][T11548] RSP: 002b:00007f012bd2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.120319][T11548] RAX: ffffffffffffffda RBX: 00007f012b015fa0 RCX: 00007f012ad9ce59 [ 366.120329][T11548] RDX: 0000000000000004 RSI: 000000000000ae41 RDI: 0000000000000003 [ 366.120338][T11548] RBP: 00007f012ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 366.120347][T11548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.120356][T11548] R13: 00007f012b016038 R14: 00007f012b015fa0 R15: 00007fffe24113f8 [ 366.120375][T11548] [ 366.804565][T11557] hub 1-0:1.0: USB hub found [ 366.840755][T11557] hub 1-0:1.0: 1 port detected [ 367.344807][T11579] FAULT_INJECTION: forcing a failure. [ 367.344807][T11579] name fail_futex, interval 1, probability 0, space 0, times 0 [ 367.426992][T11571] smpboot: CPU 1 is now offline [ 367.518150][T11579] CPU: 0 UID: 0 PID: 11579 Comm: syz.2.1021 Tainted: G U L syzkaller #0 PREEMPT(full) [ 367.518181][T11579] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 367.518187][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.518197][T11579] Call Trace: [ 367.518202][T11579] [ 367.518208][T11579] dump_stack_lvl+0x100/0x190 [ 367.518238][T11579] should_fail_ex.cold+0x5/0xa [ 367.518258][T11579] get_futex_key+0x1d2/0x1510 [ 367.518291][T11579] ? __pfx_get_futex_key+0x10/0x10 [ 367.518315][T11579] ? vfs_writev+0x1d5/0xe10 [ 367.518330][T11579] ? kfree+0x1dd/0x6c0 [ 367.518355][T11579] futex_wake+0xea/0x530 [ 367.518374][T11579] ? __pfx_futex_wake+0x10/0x10 [ 367.518392][T11579] ? find_held_lock+0x2b/0x80 [ 367.518411][T11579] ? do_writev+0x214/0x340 [ 367.518430][T11579] do_futex+0x32b/0x350 [ 367.518445][T11579] ? __pfx_do_futex+0x10/0x10 [ 367.518462][T11579] ? __fget_files+0x21f/0x3d0 [ 367.518481][T11579] __x64_sys_futex+0x34f/0x4d0 [ 367.518498][T11579] ? __pfx___x64_sys_futex+0x10/0x10 [ 367.518514][T11579] ? __pfx_do_writev+0x10/0x10 [ 367.518533][T11579] ? rcu_is_watching+0x12/0xc0 [ 367.518552][T11579] do_syscall_64+0x115/0x840 [ 367.518572][T11579] ? clear_bhb_loop+0x40/0x90 [ 367.518591][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.518607][T11579] RIP: 0033:0x7f9e32f9ce59 [ 367.518620][T11579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.518634][T11579] RSP: 002b:00007f9e33e930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 367.518650][T11579] RAX: ffffffffffffffda RBX: 00007f9e33216188 RCX: 00007f9e32f9ce59 [ 367.518659][T11579] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9e3321618c [ 367.518668][T11579] RBP: 00007f9e33216180 R08: 0000000000000001 R09: 0000000000000000 [ 367.518678][T11579] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 367.518686][T11579] R13: 00007f9e33216218 R14: 00007ffdb69d2270 R15: 00007ffdb69d2358 [ 367.518706][T11579] [ 367.908463][T11586] FAULT_INJECTION: forcing a failure. [ 367.908463][T11586] name failslab, interval 1, probability 0, space 0, times 0 [ 367.921188][T11586] CPU: 0 UID: 0 PID: 11586 Comm: syz.0.1023 Tainted: G U L syzkaller #0 PREEMPT(full) [ 367.921215][T11586] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 367.921220][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.921230][T11586] Call Trace: [ 367.921237][T11586] [ 367.921244][T11586] dump_stack_lvl+0x100/0x190 [ 367.921274][T11586] should_fail_ex.cold+0x5/0xa [ 367.921294][T11586] should_failslab+0xc2/0x120 [ 367.921312][T11586] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 367.921335][T11586] ? ioctx_alloc+0x1b9/0x21a0 [ 367.921359][T11586] ioctx_alloc+0x1b9/0x21a0 [ 367.921380][T11586] ? __sock_release+0x184/0x260 [ 367.921402][T11586] ? find_held_lock+0x2b/0x80 [ 367.921422][T11586] ? __pfx_ioctx_alloc+0x10/0x10 [ 367.921448][T11586] __x64_sys_io_setup+0xc9/0x220 [ 367.921477][T11586] do_syscall_64+0x115/0x840 [ 367.921498][T11586] ? clear_bhb_loop+0x40/0x90 [ 367.921517][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.921533][T11586] RIP: 0033:0x7f012ad9ce59 [ 367.921547][T11586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.921562][T11586] RSP: 002b:00007f012bceb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 367.921576][T11586] RAX: ffffffffffffffda RBX: 00007f012b016180 RCX: 00007f012ad9ce59 [ 367.921587][T11586] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 367.921597][T11586] RBP: 00007f012ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 367.921607][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.921616][T11586] R13: 00007f012b016218 R14: 00007f012b016180 R15: 00007fffe24113f8 [ 367.921635][T11586] [ 367.925299][T11586] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1023'. syzkaller syzkaller login: [ 368.690448][ T30] audit: type=1800 audit(1781233415.051:11): pid=11605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1027" name="lu_gp_id" dev="configfs" ino=43468 res=0 errno=0 [ 369.644258][T11631] random: crng reseeded on system resumption [ 371.466563][T11665] ima: policy update failed [ 371.505621][ T30] audit: type=1802 audit(1781233417.861:12): pid=11665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1041" res=0 errno=0 [ 372.050841][T11670] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.113927][T11677] random: crng reseeded on system resumption [ 372.631574][T11670] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.868448][T11670] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.111332][T11670] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.332545][T11670] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.660658][T11688] [ 374.694856][T11713] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1054'. [ 375.401647][T11728] zswap: compressor 000 not available [ 375.583522][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'. [ 378.649830][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.656244][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.410446][T11798] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1071'. [ 380.371823][T11824] FAULT_INJECTION: forcing a failure. [ 380.371823][T11824] name failslab, interval 1, probability 0, space 0, times 0 [ 380.467872][T11824] CPU: 0 UID: 0 PID: 11824 Comm: syz.1.1075 Tainted: G U L syzkaller #0 PREEMPT(full) [ 380.467901][T11824] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 380.467907][T11824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 380.467917][T11824] Call Trace: [ 380.467922][T11824] [ 380.467928][T11824] dump_stack_lvl+0x100/0x190 [ 380.467959][T11824] should_fail_ex.cold+0x5/0xa [ 380.467979][T11824] should_failslab+0xc2/0x120 [ 380.467997][T11824] __kmalloc_cache_noprof+0x7a/0x6f0 [ 380.468018][T11824] ? snd_seq_prioq_new+0x3f/0x110 [ 380.468032][T11824] ? lockdep_init_map_type+0x5c/0x250 [ 380.468058][T11824] snd_seq_prioq_new+0x3f/0x110 [ 380.468073][T11824] snd_seq_queue_alloc+0x153/0x540 [ 380.468098][T11824] snd_seq_ioctl_create_queue+0xa9/0x370 [ 380.468117][T11824] call_seq_client_ctl+0xa3/0x130 [ 380.468136][T11824] snd_seq_kernel_client_ctl+0x77/0xd0 [ 380.468154][T11824] alloc_seq_queue+0xdb/0x180 [ 380.468173][T11824] ? __pfx_alloc_seq_queue+0x10/0x10 [ 380.468202][T11824] ? find_held_lock+0x2b/0x80 [ 380.468221][T11824] ? mark_held_locks+0x40/0x70 [ 380.468245][T11824] snd_seq_oss_open+0x2b2/0xa10 [ 380.468267][T11824] odev_open+0x6f/0x90 [ 380.468282][T11824] ? __pfx_odev_open+0x10/0x10 [ 380.468299][T11824] soundcore_open+0x2e3/0x5a0 [ 380.468319][T11824] ? __pfx_soundcore_open+0x10/0x10 [ 380.468337][T11824] chrdev_open+0x234/0x6a0 [ 380.468354][T11824] ? __pfx_apparmor_file_open+0x10/0x10 [ 380.468371][T11824] ? __pfx_chrdev_open+0x10/0x10 [ 380.468390][T11824] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 380.468418][T11824] do_dentry_open+0x6ab/0x14d0 [ 380.468436][T11824] ? __pfx_chrdev_open+0x10/0x10 [ 380.468458][T11824] vfs_open+0x82/0x3f0 [ 380.468482][T11824] path_openat+0x208c/0x31a0 [ 380.468507][T11824] ? __pfx_path_openat+0x10/0x10 [ 380.468532][T11824] do_file_open+0x20e/0x430 [ 380.468560][T11824] ? __pfx_do_file_open+0x10/0x10 [ 380.468592][T11824] ? alloc_fd+0x476/0x790 [ 380.468612][T11824] ? do_getname+0x191/0x390 [ 380.468636][T11824] do_sys_openat2+0x10d/0x1e0 [ 380.468658][T11824] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.468687][T11824] __x64_sys_openat+0x12d/0x210 [ 380.468709][T11824] ? __pfx___x64_sys_openat+0x10/0x10 [ 380.468731][T11824] ? exit_to_user_mode_loop+0xf3/0x670 [ 380.468757][T11824] ? rcu_is_watching+0x12/0xc0 [ 380.468776][T11824] do_syscall_64+0x115/0x840 [ 380.468796][T11824] ? clear_bhb_loop+0x40/0x90 [ 380.468814][T11824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.468829][T11824] RIP: 0033:0x7f539bd9ce59 [ 380.468843][T11824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.468858][T11824] RSP: 002b:00007f539cc61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.468872][T11824] RAX: ffffffffffffffda RBX: 00007f539c015fa0 RCX: 00007f539bd9ce59 [ 380.468882][T11824] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 380.468893][T11824] RBP: 00007f539be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 380.468902][T11824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.468911][T11824] R13: 00007f539c016038 R14: 00007f539c015fa0 R15: 00007fff0c26d988 [ 380.468932][T11824] [ 381.266690][T11839] sysfs_service_op_store: Client not running :-5: [ 382.992840][T11863] zswap: compressor 000 not available [ 383.286649][T11856] kexec: Could not allocate control_code_buffer [ 383.474085][T11881] nbd: must specify at least one socket [ 384.222667][T11907] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0e09a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 384.238359][T11907] Call Trace: [ 384.241628][T11907] [ 384.244545][T11907] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 384.251213][T11907] ? __pfx___schedule+0x10/0x10 [ 384.256054][T11907] ? irqentry_exit+0x24d/0x970 [ 384.260809][T11907] mce_cpu_restart+0xd5/0x1f0 [ 384.265474][T11907] ? __pfx_mce_cpu_restart+0x10/0x10 [ 384.270746][T11907] smp_call_function_many_cond+0x13d4/0x1700 [ 384.276722][T11907] ? __pfx_mce_cpu_restart+0x10/0x10 [ 384.281994][T11907] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 384.287790][T11907] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 384.294106][T11907] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 384.300084][T11907] ? __timer_delete_sync+0x151/0x1c0 [ 384.305357][T11907] ? __pfx_mce_cpu_restart+0x10/0x10 [ 384.310630][T11907] on_each_cpu_cond_mask+0x40/0x90 [ 384.315738][T11907] set_bank+0x240/0x3a0 [ 384.319877][T11907] ? __pfx_set_bank+0x10/0x10 [ 384.324542][T11907] ? find_held_lock+0x2b/0x80 [ 384.329212][T11907] ? sysfs_file_kobj+0xe4/0x290 [ 384.334057][T11907] ? sysfs_file_kobj+0xe4/0x290 [ 384.338900][T11907] ? __pfx_set_bank+0x10/0x10 [ 384.343584][T11907] dev_attr_store+0x58/0x80 [ 384.348079][T11907] ? __pfx_dev_attr_store+0x10/0x10 [ 384.353263][T11907] sysfs_kf_write+0xf2/0x150 [ 384.357846][T11907] kernfs_fop_write_iter+0x3e0/0x5f0 [ 384.363119][T11907] ? __pfx_sysfs_kf_write+0x10/0x10 [ 384.368315][T11907] vfs_write+0x6ac/0x1070 [ 384.372635][T11907] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 384.378452][T11907] ? __pfx_vfs_write+0x10/0x10 [ 384.383214][T11907] ksys_write+0x12a/0x250 [ 384.387527][T11907] ? __pfx_ksys_write+0x10/0x10 [ 384.392365][T11907] ? rcu_is_watching+0x12/0xc0 [ 384.397202][T11907] do_syscall_64+0x115/0x840 [ 384.401783][T11907] ? clear_bhb_loop+0x40/0x90 [ 384.406537][T11907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.412414][T11907] RIP: 0033:0x7f539bd9ce59 [ 384.416815][T11907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.436411][T11907] RSP: 002b:00007f539cc61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.444816][T11907] RAX: ffffffffffffffda RBX: 00007f539c015fa0 RCX: 00007f539bd9ce59 [ 384.452774][T11907] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 384.460738][T11907] RBP: 00007f539be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 384.468705][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.476663][T11907] R13: 00007f539c016038 R14: 00007f539c015fa0 R15: 00007fff0c26d988 [ 384.484649][T11907] [ 384.723238][T11913] hub 1-0:1.0: USB hub found [ 384.755307][T11913] hub 1-0:1.0: 1 port detected [ 385.000168][T11925] Process accounting paused [ 385.192057][ T30] audit: type=1800 audit(1781233431.551:13): pid=11929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1105" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 385.323044][T11932] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1097'. [ 386.103171][T11951] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1102'. [ 386.415642][T11957] sd 0:0:1:0: PR command failed: 1026 [ 386.441442][T11957] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 386.473666][T11957] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 386.609730][T11957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1103'. [ 388.320413][T11999] sysfs_service_op_store: Client not running :-5: [ 390.633089][T12049] can: request_module (can-proto-4) failed. [ 392.397461][T12087] FAULT_INJECTION: forcing a failure. [ 392.397461][T12087] name failslab, interval 1, probability 0, space 0, times 0 [ 392.486840][T12092] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1133'. [ 392.601291][T12087] CPU: 0 UID: 0 PID: 12087 Comm: syz.1.1129 Tainted: G U L syzkaller #0 PREEMPT(full) [ 392.601319][T12087] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 392.601325][T12087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.601336][T12087] Call Trace: [ 392.601342][T12087] [ 392.601348][T12087] dump_stack_lvl+0x100/0x190 [ 392.601383][T12087] should_fail_ex.cold+0x5/0xa [ 392.601404][T12087] should_failslab+0xc2/0x120 [ 392.601422][T12087] __kmalloc_cache_noprof+0x7a/0x6f0 [ 392.601445][T12087] ? subdev_open+0x7f/0x510 [ 392.601466][T12087] subdev_open+0x7f/0x510 [ 392.601483][T12087] v4l2_open+0x1d2/0x490 [ 392.601510][T12087] ? __pfx_v4l2_open+0x10/0x10 [ 392.601533][T12087] chrdev_open+0x234/0x6a0 [ 392.601552][T12087] ? __pfx_apparmor_file_open+0x10/0x10 [ 392.601569][T12087] ? __pfx_chrdev_open+0x10/0x10 [ 392.601588][T12087] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 392.601620][T12087] do_dentry_open+0x6ab/0x14d0 [ 392.601638][T12087] ? __pfx_chrdev_open+0x10/0x10 [ 392.601662][T12087] vfs_open+0x82/0x3f0 [ 392.601686][T12087] path_openat+0x208c/0x31a0 [ 392.601708][T12087] ? futex_unqueue+0x13d/0x2c0 [ 392.601723][T12087] ? stack_depot_save_flags+0x27/0x9d0 [ 392.601747][T12087] ? __pfx_path_openat+0x10/0x10 [ 392.601767][T12087] ? kasan_save_stack+0x3f/0x50 [ 392.601782][T12087] ? kasan_save_stack+0x30/0x50 [ 392.601796][T12087] ? kasan_save_track+0x14/0x30 [ 392.601809][T12087] ? __kasan_slab_alloc+0x89/0x90 [ 392.601824][T12087] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 392.601846][T12087] ? do_getname+0x35/0x390 [ 392.601869][T12087] do_file_open+0x20e/0x430 [ 392.601888][T12087] ? __pfx_do_file_open+0x10/0x10 [ 392.601922][T12087] ? find_held_lock+0x2b/0x80 [ 392.601939][T12087] ? __might_fault+0xc5/0x140 [ 392.601960][T12087] ? __might_fault+0xc5/0x140 [ 392.601983][T12087] file_open_name+0x198/0x3b0 [ 392.602005][T12087] ? __pfx_file_open_name+0x10/0x10 [ 392.602030][T12087] ? do_getname+0x191/0x390 [ 392.602053][T12087] acct_on+0xa4/0x9e0 [ 392.602071][T12087] ? __pfx_acct_on+0x10/0x10 [ 392.602089][T12087] ? bpf_lsm_capable+0x9/0x10 [ 392.602104][T12087] ? security_capable+0x80/0x260 [ 392.602121][T12087] __x64_sys_acct+0x81/0x1e0 [ 392.602138][T12087] ? lockdep_hardirqs_on+0x78/0x100 [ 392.602158][T12087] do_syscall_64+0x115/0x840 [ 392.602178][T12087] ? clear_bhb_loop+0x40/0x90 [ 392.602197][T12087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.602212][T12087] RIP: 0033:0x7f539bd9ce59 [ 392.602226][T12087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.602241][T12087] RSP: 002b:00007f539cc1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 392.602257][T12087] RAX: ffffffffffffffda RBX: 00007f539c016180 RCX: 00007f539bd9ce59 [ 392.602267][T12087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 392.602277][T12087] RBP: 00007f539be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 392.602286][T12087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.602295][T12087] R13: 00007f539c016218 R14: 00007f539c016180 R15: 00007fff0c26d988 [ 392.602315][T12087] [ 393.812119][T12116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1135'. [ 395.590855][T12147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1140'. [ 395.639153][T12147] bridge_slave_1: left allmulticast mode [ 395.663800][T12147] bridge_slave_1: left promiscuous mode [ 395.692793][T12147] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.763660][T12147] bridge_slave_0: left allmulticast mode [ 395.788074][T12147] bridge_slave_0: left promiscuous mode [ 395.817499][T12147] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.310183][T12165] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[10956] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[12165] [ 397.199857][T12191] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 260 [ 398.531480][ T9548] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 399.245848][T12241] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 403.592865][ T9548] Bluetooth: hci2: unexpected event 0x0f length: 7 > 4 [ 403.592895][ T9548] Bluetooth: hci2: unexpected event for opcode 0x647c [ 408.691351][ T9548] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 408.939883][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 411.833199][T12406] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 415.916767][T12466] kexec: Could not allocate control_code_buffer [ 416.455328][T12475] Process accounting resumed [ 416.587163][T12492] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 417.546056][T12492] netlink: 948 bytes leftover after parsing attributes in process `syz.2.1203'. [ 417.644454][T12492] nbd: must specify a size in bytes for the device [ 418.779974][T12521] binder: 12518:12521 unknown command 0 [ 418.813478][T12521] binder: 12518:12521 ioctl c0306201 0 returned -22 [ 421.411671][T12538] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 426.252126][T12624] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1228'. [ 426.325894][T12624] FAULT_INJECTION: forcing a failure. [ 426.325894][T12624] name failslab, interval 1, probability 0, space 0, times 0 [ 426.325952][T12624] CPU: 0 UID: 0 PID: 12624 Comm: syz.1.1228 Tainted: G U L syzkaller #0 PREEMPT(full) [ 426.325976][T12624] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 426.325982][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 426.325991][T12624] Call Trace: [ 426.325996][T12624] [ 426.326002][T12624] dump_stack_lvl+0x100/0x190 [ 426.326033][T12624] should_fail_ex.cold+0x5/0xa [ 426.326053][T12624] should_failslab+0xc2/0x120 [ 426.326079][T12624] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 426.326102][T12624] ? __kernfs_new_node+0xd2/0x9f0 [ 426.326119][T12624] ? kstrdup+0xb3/0xe0 [ 426.326136][T12624] __kernfs_new_node+0xd2/0x9f0 [ 426.326155][T12624] ? __pfx___kernfs_new_node+0x10/0x10 [ 426.326176][T12624] ? find_held_lock+0x2b/0x80 [ 426.326194][T12624] ? kernfs_root+0xee/0x2a0 [ 426.326209][T12624] ? kernfs_root+0xee/0x2a0 [ 426.326229][T12624] kernfs_new_node+0x11b/0x1a0 [ 426.326250][T12624] kernfs_create_dir_ns+0x4c/0x1a0 [ 426.326272][T12624] sysfs_create_dir_ns+0x13a/0x2b0 [ 426.326288][T12624] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 426.326302][T12624] ? find_held_lock+0x2b/0x80 [ 426.326319][T12624] ? kobject_add_internal+0x25f/0x930 [ 426.326334][T12624] ? kobject_add_internal+0x25f/0x930 [ 426.326350][T12624] ? wiphy_namespace+0x12/0x50 [ 426.326368][T12624] ? device_namespace+0x76/0xa0 [ 426.326386][T12624] kobject_add_internal+0x2c8/0x930 [ 426.326404][T12624] kobject_add+0x16a/0x1e0 [ 426.326418][T12624] ? __pfx_kobject_add+0x10/0x10 [ 426.326436][T12624] ? kobject_put+0xb9/0x640 [ 426.326464][T12624] device_add+0x294/0x1950 [ 426.326483][T12624] ? __pfx_device_add+0x10/0x10 [ 426.326499][T12624] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 426.326520][T12624] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 426.326548][T12624] wiphy_register+0x1edd/0x2d90 [ 426.326565][T12624] ? __rtnl_unlock+0xb9/0xf0 [ 426.326588][T12624] ? __pfx_wiphy_register+0x10/0x10 [ 426.326607][T12624] ? __asan_memset+0x23/0x50 [ 426.326628][T12624] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 426.326659][T12624] ieee80211_register_hw+0x3055/0x4570 [ 426.326691][T12624] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 426.326713][T12624] ? __pfx___debug_object_init+0x10/0x10 [ 426.326736][T12624] ? find_held_lock+0x2b/0x80 [ 426.326755][T12624] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 426.326775][T12624] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 426.326799][T12624] ? __hrtimer_setup+0x208/0x330 [ 426.326816][T12624] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 426.326847][T12624] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 426.326875][T12624] hwsim_new_radio_nl+0xc5f/0x1370 [ 426.326893][T12624] ? rcu_is_watching+0x12/0xc0 [ 426.326911][T12624] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 426.326935][T12624] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 426.326958][T12624] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 426.326985][T12624] genl_family_rcv_msg_doit+0x214/0x300 [ 426.327008][T12624] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 426.327030][T12624] ? genl_get_cmd+0x3e7/0x760 [ 426.327054][T12624] ? bpf_lsm_capable+0x9/0x10 [ 426.327075][T12624] ? security_capable+0x80/0x260 [ 426.327091][T12624] ? ns_capable+0xd2/0xf0 [ 426.327111][T12624] genl_rcv_msg+0x560/0x800 [ 426.327136][T12624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.327158][T12624] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 426.327184][T12624] netlink_rcv_skb+0x159/0x420 [ 426.327203][T12624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.327225][T12624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.327252][T12624] ? netlink_deliver_tap+0x1ae/0xcc0 [ 426.327273][T12624] genl_rcv+0x28/0x40 [ 426.327292][T12624] netlink_unicast+0x585/0x850 [ 426.327314][T12624] ? __pfx_netlink_unicast+0x10/0x10 [ 426.327339][T12624] netlink_sendmsg+0x8b0/0xda0 [ 426.327361][T12624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.327380][T12624] ? __import_iovec+0x1d2/0x640 [ 426.327402][T12624] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 426.327421][T12624] ____sys_sendmsg+0x9e1/0xb70 [ 426.327439][T12624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.327460][T12624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.327483][T12624] ? __pfx_futex_wake_mark+0x10/0x10 [ 426.327504][T12624] ___sys_sendmsg+0x190/0x1e0 [ 426.327525][T12624] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.327569][T12624] __sys_sendmsg+0x170/0x220 [ 426.327585][T12624] ? __pfx___sys_sendmsg+0x10/0x10 [ 426.327600][T12624] ? __x64_sys_futex+0x34f/0x4d0 [ 426.327623][T12624] ? rcu_is_watching+0x12/0xc0 [ 426.327642][T12624] do_syscall_64+0x115/0x840 [ 426.327661][T12624] ? clear_bhb_loop+0x40/0x90 [ 426.327679][T12624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.327695][T12624] RIP: 0033:0x7f539bd9ce59 [ 426.327709][T12624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.327724][T12624] RSP: 002b:00007f539cc61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.327739][T12624] RAX: ffffffffffffffda RBX: 00007f539c015fa0 RCX: 00007f539bd9ce59 [ 426.327750][T12624] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000006 [ 426.327759][T12624] RBP: 00007f539be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 426.327769][T12624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.327778][T12624] R13: 00007f539c016038 R14: 00007f539c015fa0 R15: 00007fff0c26d988 [ 426.327798][T12624] [ 426.338231][T12624] kobject: kobject_add_internal failed for phy24 (error: -12 parent: ieee80211) [ 426.473894][T12632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1229'. [ 429.607793][T12677] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 429.650642][T12657] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 431.932076][T12700] pim6reg: entered allmulticast mode [ 431.943703][T12686] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 431.970182][T12686] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 431.993565][T12686] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 432.011050][T12686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 432.038372][T12686] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 432.057819][T12686] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 432.072804][T12705] sg_write: data in/out 262108/231 bytes for SCSI command 0x22-- guessing data in; [ 432.072804][T12705] program syz.4.1242 not setting count and/or reply_len properly [ 432.250572][ T9548] Bluetooth: hci1: command 0x0406 tx timeout [ 434.008859][ T9548] Bluetooth: hci0: command 0x2016 tx timeout [ 434.008890][ T9548] Bluetooth: hci2: command 0x2016 tx timeout [ 434.088700][T10188] Bluetooth: hci3: command 0x0c1a tx timeout [ 434.333900][T12722] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 434.334116][T12722] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 434.348832][T12722] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 434.349001][T12722] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 434.889985][T10188] Bluetooth: hci1: command 0x0406 tx timeout [ 436.124385][T12771] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1249'. [ 436.408992][T10188] Bluetooth: hci3: command 0x0c1a tx timeout [ 436.415078][ T9548] Bluetooth: hci0: command 0x2016 tx timeout [ 436.421190][T10396] Bluetooth: hci2: command 0x2016 tx timeout [ 437.194304][T12787] sg_write: data in/out 262108/231 bytes for SCSI command 0x22-- guessing data in; [ 437.194304][T12787] program syz.0.1254 not setting count and/or reply_len properly [ 438.488853][T10188] Bluetooth: hci3: command 0x0c1a tx timeout [ 440.098251][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.111309][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.556187][T12830] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 441.593304][T12830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 441.622464][T12830] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 441.647683][T12830] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 442.488757][T10188] Bluetooth: hci1: command 0x0406 tx timeout [ 443.566117][T12863] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1263'. [ 443.611365][T10188] Bluetooth: hci2: command 0x2016 tx timeout [ 443.650487][T12875] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[12875] [ 443.689667][T10188] Bluetooth: hci3: command 0x0c1a tx timeout [ 443.696718][T10396] Bluetooth: hci0: command 0x2016 tx timeout [ 444.364419][T12891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1271'. [ 444.856739][T12904] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1272'. [ 445.144005][T12907] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 445.144027][T12907] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 447.492933][T12916] Process accounting paused [ 448.103255][T12930] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 448.542996][T12941] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1280'. [ 449.753564][T12973] Process accounting resumed [ 450.531326][ T30] audit: type=1804 audit(1781233496.891:14): pid=12981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1286" name="/newroot/313/file0" dev="tmpfs" ino=1666 res=1 errno=0 [ 450.564984][T12984] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 450.651836][ T30] audit: type=1804 audit(1781233496.921:15): pid=12991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1286" name="/newroot/313/file0" dev="tmpfs" ino=1666 res=1 errno=0 [ 450.715651][T12984] File: /dev/nullb0 PID: 12984 Comm: syz.4.1288 [ 453.046615][ T30] audit: type=1800 audit(1781233499.391:16): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1292" name="dbroot" dev="configfs" ino=51214 res=0 errno=0 [ 453.527632][T13024] zswap: compressor 000 not available [ 456.815259][ T30] audit: type=1804 audit(1781233503.171:17): pid=13047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1305" name="/newroot/344/file0" dev="tmpfs" ino=1814 res=1 errno=0 [ 456.908648][ T30] audit: type=1804 audit(1781233503.261:18): pid=13058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1305" name="/newroot/344/file0" dev="tmpfs" ino=1814 res=1 errno=0 [ 457.719211][ T30] audit: type=1800 audit(1781233504.081:19): pid=13087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1304" name="dbroot" dev="configfs" ino=51781 res=0 errno=0 [ 459.522561][T13111] zswap: compressor 000 not available [ 459.897318][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1311'. [ 460.116984][ T9777] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1309 with max blocks 10 with error 74 [ 460.225652][ T9777] EXT4-fs (sda1): This should not happen!! Data will be lost [ 460.225652][ T9777] [ 460.263911][T13128] futex_wake_op: syz.4.1312 tries to shift op by -2048; fix this program [ 460.342087][T13128] 0x000000000001-0x000000020000 : "" [ 460.415358][T13130] blktrace: Concurrent blktraces are not allowed on loop2 [ 460.504243][T13128] ftl_cs: FTL header corrupt! [ 461.006615][T13136] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 461.668140][T13150] warning: `syz.0.1316' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 461.888291][T13160] FAULT_INJECTION: forcing a failure. [ 461.888291][T13160] name failslab, interval 1, probability 0, space 0, times 0 [ 461.972741][T13159] FAULT_INJECTION: forcing a failure. [ 461.972741][T13159] name failslab, interval 1, probability 0, space 0, times 0 [ 462.011530][T13160] CPU: 0 UID: 0 PID: 13160 Comm: syz.4.1317 Tainted: G U L syzkaller #0 PREEMPT(full) [ 462.011562][T13160] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 462.011568][T13160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.011577][T13160] Call Trace: [ 462.011583][T13160] [ 462.011589][T13160] dump_stack_lvl+0x100/0x190 [ 462.011619][T13160] should_fail_ex.cold+0x5/0xa [ 462.011639][T13160] should_failslab+0xc2/0x120 [ 462.011657][T13160] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 462.011674][T13160] ? kstrdup_const+0x63/0x80 [ 462.011694][T13160] kstrdup+0x51/0xe0 [ 462.011710][T13160] kstrdup_const+0x63/0x80 [ 462.011726][T13160] alloc_vfsmnt+0xe5/0x6a0 [ 462.011746][T13160] ? __pfx___might_resched+0x10/0x10 [ 462.011768][T13160] clone_mnt+0x4b/0x930 [ 462.011787][T13160] copy_tree+0xfc/0xbf0 [ 462.011804][T13160] ? __pfx_down_write+0x10/0x10 [ 462.011831][T13160] copy_mnt_ns+0x3fa/0x1180 [ 462.011855][T13160] ? __pfx_copy_mnt_ns+0x10/0x10 [ 462.011877][T13160] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 462.011898][T13160] ? create_new_namespaces+0x30/0xac0 [ 462.011916][T13160] ? rcu_is_watching+0x12/0xc0 [ 462.011935][T13160] create_new_namespaces+0xd3/0xac0 [ 462.011952][T13160] ? bpf_lsm_capable+0x9/0x10 [ 462.011968][T13160] ? security_capable+0x80/0x260 [ 462.011984][T13160] unshare_nsproxy_namespaces+0xf2/0x220 [ 462.012004][T13160] ksys_unshare+0x438/0xab0 [ 462.012026][T13160] ? __pfx_ksys_unshare+0x10/0x10 [ 462.012077][T13160] ? xfd_validate_state+0x129/0x190 [ 462.012092][T13160] ? ksys_write+0x1ac/0x250 [ 462.012116][T13160] __x64_sys_unshare+0x31/0x40 [ 462.012136][T13160] do_syscall_64+0x115/0x840 [ 462.012155][T13160] ? clear_bhb_loop+0x40/0x90 [ 462.012173][T13160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.012188][T13160] RIP: 0033:0x7f634fb9ce59 [ 462.012202][T13160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.012217][T13160] RSP: 002b:00007f6350a0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 462.012232][T13160] RAX: ffffffffffffffda RBX: 00007f634fe16270 RCX: 00007f634fb9ce59 [ 462.012242][T13160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 462.012250][T13160] RBP: 00007f634fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 462.012260][T13160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.012268][T13160] R13: 00007f634fe16308 R14: 00007f634fe16270 R15: 00007ffe793e0638 [ 462.012288][T13160] [ 462.605259][T13159] CPU: 0 UID: 0 PID: 13159 Comm: syz.0.1316 Tainted: G U L syzkaller #0 PREEMPT(full) [ 462.605288][T13159] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 462.605294][T13159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.605304][T13159] Call Trace: [ 462.605310][T13159] [ 462.605316][T13159] dump_stack_lvl+0x100/0x190 [ 462.605347][T13159] should_fail_ex.cold+0x5/0xa [ 462.605367][T13159] should_failslab+0xc2/0x120 [ 462.605385][T13159] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 462.605409][T13159] ? __d_alloc+0x34/0xa40 [ 462.605433][T13159] __d_alloc+0x34/0xa40 [ 462.605461][T13159] d_alloc+0x4a/0x1e0 [ 462.605483][T13159] lookup_one_qstr_excl+0x171/0x250 [ 462.605508][T13159] start_dirop+0x59/0xb0 [ 462.605525][T13159] simple_start_creating+0xf9/0x110 [ 462.605544][T13159] ? __pfx_simple_start_creating+0x10/0x10 [ 462.605562][T13159] ? mntput+0x70/0xa0 [ 462.605577][T13159] ? simple_pin_fs+0xa3/0x190 [ 462.605593][T13159] debugfs_start_creating.part.0+0x82/0x170 [ 462.605610][T13159] __debugfs_create_file+0xb3/0x4f0 [ 462.605628][T13159] debugfs_create_file_full+0x41/0x60 [ 462.605645][T13159] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 462.605661][T13159] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 462.605674][T13159] ? ida_alloc_range+0x70d/0x830 [ 462.605711][T13159] ? lockdep_init_map_type+0x5c/0x250 [ 462.605737][T13159] preinit_net.part.0+0x252/0x920 [ 462.605755][T13159] copy_net_ns+0x339/0x7c0 [ 462.605775][T13159] create_new_namespaces+0x3ea/0xac0 [ 462.605797][T13159] unshare_nsproxy_namespaces+0xf2/0x220 [ 462.605817][T13159] ksys_unshare+0x438/0xab0 [ 462.605839][T13159] ? __pfx_ksys_unshare+0x10/0x10 [ 462.605858][T13159] ? xfd_validate_state+0x129/0x190 [ 462.605872][T13159] ? ksys_write+0x1ac/0x250 [ 462.605894][T13159] __x64_sys_unshare+0x31/0x40 [ 462.605914][T13159] do_syscall_64+0x115/0x840 [ 462.605934][T13159] ? clear_bhb_loop+0x40/0x90 [ 462.605952][T13159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.605967][T13159] RIP: 0033:0x7f012ad9ce59 [ 462.605981][T13159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.605996][T13159] RSP: 002b:00007f012bd0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 462.606011][T13159] RAX: ffffffffffffffda RBX: 00007f012b016090 RCX: 00007f012ad9ce59 [ 462.606022][T13159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 462.606031][T13159] RBP: 00007f012ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 462.606040][T13159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.606049][T13159] R13: 00007f012b016128 R14: 00007f012b016090 R15: 00007fffe24113f8 [ 462.606069][T13159] [ 464.816253][T13196] random: crng reseeded on system resumption [ 465.593569][T13214] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1324'. [ 465.979194][T13227] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 466.487141][T13239] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd23 [ 467.465775][T13246] synth uevent: /bus/usb/drivers/igorplugusb: unknown uevent action string [ 468.256636][T13274] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1338'. [ 470.714101][T13343] FAULT_INJECTION: forcing a failure. [ 470.714101][T13343] name failslab, interval 1, probability 0, space 0, times 0 [ 470.778484][T13343] CPU: 0 UID: 8 PID: 13343 Comm: syz.0.1348 Tainted: G U L syzkaller #0 PREEMPT(full) [ 470.778510][T13343] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 470.778518][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.778527][T13343] Call Trace: [ 470.778532][T13343] [ 470.778538][T13343] dump_stack_lvl+0x100/0x190 [ 470.778567][T13343] should_fail_ex.cold+0x5/0xa [ 470.778585][T13343] should_failslab+0xc2/0x120 [ 470.778603][T13343] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 470.778625][T13343] ? taskstats_exit+0x67b/0xc10 [ 470.778643][T13343] ? rcu_is_watching+0x12/0xc0 [ 470.778662][T13343] taskstats_exit+0x67b/0xc10 [ 470.778680][T13343] ? __pfx_acct_update_integrals+0x10/0x10 [ 470.778699][T13343] ? __pfx_taskstats_exit+0x10/0x10 [ 470.778718][T13343] ? rcu_read_lock_any_held+0x6a/0xa0 [ 470.778735][T13343] ? exit_signals+0x395/0xaf0 [ 470.778754][T13343] do_exit+0x65c/0x2af0 [ 470.778777][T13343] ? __pfx_do_exit+0x10/0x10 [ 470.778796][T13343] ? do_raw_spin_lock+0x128/0x260 [ 470.778811][T13343] ? find_held_lock+0x2b/0x80 [ 470.778827][T13343] ? get_signal+0x7e5/0x2210 [ 470.778845][T13343] do_group_exit+0xd5/0x2a0 [ 470.778866][T13343] get_signal+0x20ff/0x2210 [ 470.778887][T13343] ? putname+0xb1/0x110 [ 470.778906][T13343] ? __pfx_get_signal+0x10/0x10 [ 470.778924][T13343] ? do_futex+0x192/0x350 [ 470.778940][T13343] arch_do_signal_or_restart+0x91/0x7a0 [ 470.778962][T13343] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 470.778985][T13343] ? __x64_sys_openat+0x12d/0x210 [ 470.779007][T13343] ? rcu_is_watching+0x12/0xc0 [ 470.779025][T13343] exit_to_user_mode_loop+0x98/0x670 [ 470.779046][T13343] ? rcu_is_watching+0x12/0xc0 [ 470.779063][T13343] do_syscall_64+0x652/0x840 [ 470.779082][T13343] ? clear_bhb_loop+0x40/0x90 [ 470.779099][T13343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.779113][T13343] RIP: 0033:0x7f012ad9ce59 [ 470.779126][T13343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.779139][T13343] RSP: 002b:00007f012bd2d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 470.779154][T13343] RAX: fffffffffffffe00 RBX: 00007f012b015fa8 RCX: 00007f012ad9ce59 [ 470.779163][T13343] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f012b015fa8 [ 470.779171][T13343] RBP: 00007f012b015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 470.779180][T13343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.779188][T13343] R13: 00007f012b016038 R14: 00007fffe2411310 R15: 00007fffe24113f8 [ 470.779206][T13343] [ 473.469376][T13390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 473.544405][T13390] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 473.585825][T13399] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 473.585825][T13399] program syz.0.1361 not setting count and/or reply_len properly [ 473.607520][T13390] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 473.636261][T13390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 474.069057][T13422] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1367'. [ 474.728892][T10188] Bluetooth: hci1: command 0x0406 tx timeout [ 475.388479][T13457] netlink: 'syz.1.1371': attribute type 11 has an invalid length. [ 475.609357][T10188] Bluetooth: hci2: command 0x2016 tx timeout [ 475.688844][T10188] Bluetooth: hci3: command 0x0c1a tx timeout [ 475.694977][T10396] Bluetooth: hci0: command 0x2016 tx timeout [ 475.901131][T13474] FAULT_INJECTION: forcing a failure. [ 475.901131][T13474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.960757][T13474] CPU: 0 UID: 0 PID: 13474 Comm: syz.4.1376 Tainted: G U L syzkaller #0 PREEMPT(full) [ 475.960787][T13474] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 475.960794][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.960803][T13474] Call Trace: [ 475.960809][T13474] [ 475.960815][T13474] dump_stack_lvl+0x100/0x190 [ 475.960846][T13474] should_fail_ex.cold+0x5/0xa [ 475.960866][T13474] strncpy_from_user+0x3b/0x2d0 [ 475.960890][T13474] do_getname+0x78/0x390 [ 475.960915][T13474] do_sys_openat2+0xc5/0x1e0 [ 475.960960][T13474] ? __pfx_do_sys_openat2+0x10/0x10 [ 475.960984][T13474] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.961009][T13474] __x64_sys_openat+0x12d/0x210 [ 475.961031][T13474] ? __pfx___x64_sys_openat+0x10/0x10 [ 475.961053][T13474] ? exit_to_user_mode_loop+0xf3/0x670 [ 475.961079][T13474] ? rcu_is_watching+0x12/0xc0 [ 475.961099][T13474] do_syscall_64+0x115/0x840 [ 475.961118][T13474] ? clear_bhb_loop+0x40/0x90 [ 475.961135][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.961150][T13474] RIP: 0033:0x7f634fb9ce59 [ 475.961163][T13474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.961178][T13474] RSP: 002b:00007f6350a6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 475.961193][T13474] RAX: ffffffffffffffda RBX: 00007f634fe15fa0 RCX: 00007f634fb9ce59 [ 475.961202][T13474] RDX: 0000000000080000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 475.961211][T13474] RBP: 00007f634fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 475.961221][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.961230][T13474] R13: 00007f634fe16038 R14: 00007f634fe15fa0 R15: 00007ffe793e0638 [ 475.961250][T13474] [ 475.963769][T13476] ubi0: attaching mtd0 [ 476.443406][T13483] ------------[ cut here ]------------ [ 476.449146][T13483] read > cnt + 1 [ 476.449166][T13483] WARNING: kernel/trace/ring_buffer.c:762 at ring_buffer_nr_dirty_pages+0x207/0x290, CPU#0: syz.4.1379/13483 [ 476.464242][T13483] Modules linked in: [ 476.468313][T13483] CPU: 0 UID: 0 PID: 13483 Comm: syz.4.1379 Tainted: G U L syzkaller #0 PREEMPT(full) [ 476.479243][T13483] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 476.484418][T13483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 476.494462][T13483] RIP: 0010:ring_buffer_nr_dirty_pages+0x207/0x290 [ 476.500966][T13483] Code: 83 c3 01 48 89 ee 48 89 df e8 65 f4 fb ff 48 39 eb 72 11 31 db eb cc e8 37 fa fb ff 90 0f 0b 90 31 db eb bf e8 2a fa fb ff 90 <0f> 0b 90 31 db eb b2 4c 89 e7 e8 da e6 68 00 e9 f8 fe ff ff 4c 89 [ 476.520565][T13483] RSP: 0018:ffffc90004f6f5c0 EFLAGS: 00010087 [ 476.526620][T13483] RAX: 0000000000000105 RBX: 0000000000000001 RCX: ffffc900065da000 [ 476.534576][T13483] RDX: 0000000000080000 RSI: ffffffff820c0336 RDI: ffff88807669be00 [ 476.542534][T13483] RBP: 0000000000000002 R08: 0000000000000006 R09: 0000000000000001 [ 476.550489][T13483] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 476.558449][T13483] R13: ffff88813fe95000 R14: ffff88813fe4e0a8 R15: ffff88813fe95000 [ 476.566410][T13483] FS: 00007f6350a4c6c0(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 476.575327][T13483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.581897][T13483] CR2: 0000001b31400ff8 CR3: 000000007ba00000 CR4: 00000000003526f0 [ 476.589860][T13483] Call Trace: [ 476.593157][T13483] [ 476.596079][T13483] rb_watermark_hit+0x1f5/0x300 [ 476.600938][T13483] ? __pfx___pollwait+0x10/0x10 [ 476.605865][T13483] ring_buffer_poll_wait+0x2b2/0x490 [ 476.611147][T13483] tracing_buffers_poll+0x1cf/0x250 [ 476.616336][T13483] ? __pfx_tracing_buffers_poll+0x10/0x10 [ 476.622045][T13483] do_select+0xd54/0x1850 [ 476.626385][T13483] ? __pfx_do_select+0x10/0x10 [ 476.631141][T13483] ? hrtimer_start_range_ns+0x860/0x1a50 [ 476.636769][T13483] ? __pfx___pollwait+0x10/0x10 [ 476.641611][T13483] ? __pfx_pollwake+0x10/0x10 [ 476.646301][T13483] ? __pfx_pollwake+0x10/0x10 [ 476.650968][T13483] ? __pfx_pollwake+0x10/0x10 [ 476.655742][T13483] ? find_held_lock+0x2b/0x80 [ 476.660408][T13483] ? __might_fault+0xc5/0x140 [ 476.665078][T13483] ? __might_fault+0xc5/0x140 [ 476.669754][T13483] ? core_sys_select+0x55b/0xbb0 [ 476.674686][T13483] core_sys_select+0x55b/0xbb0 [ 476.679452][T13483] ? __pfx_core_sys_select+0x10/0x10 [ 476.684743][T13483] ? do_futex+0x192/0x350 [ 476.689068][T13483] ? __pfx_do_futex+0x10/0x10 [ 476.693734][T13483] kern_select+0x1d0/0x280 [ 476.698143][T13483] ? __pfx_kern_select+0x10/0x10 [ 476.703075][T13483] ? xfd_validate_state+0x129/0x190 [ 476.708263][T13483] __x64_sys_select+0xbd/0x160 [ 476.713011][T13483] ? do_syscall_64+0x90/0x840 [ 476.717679][T13483] ? lockdep_hardirqs_on+0x78/0x100 [ 476.722869][T13483] do_syscall_64+0x115/0x840 [ 476.727461][T13483] ? clear_bhb_loop+0x40/0x90 [ 476.732146][T13483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.738051][T13483] RIP: 0033:0x7f634fb9ce59 [ 476.742464][T13483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.762146][T13483] RSP: 002b:00007f6350a4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 476.770551][T13483] RAX: ffffffffffffffda RBX: 00007f634fe16090 RCX: 00007f634fb9ce59 [ 476.778515][T13483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 476.786469][T13483] RBP: 00007f634fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 476.794510][T13483] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 476.802464][T13483] R13: 00007f634fe16128 R14: 00007f634fe16090 R15: 00007ffe793e0638 [ 476.810515][T13483] [ 476.813562][T13483] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 476.820824][T13483] CPU: 0 UID: 0 PID: 13483 Comm: syz.4.1379 Tainted: G U L syzkaller #0 PREEMPT(full) [ 476.831759][T13483] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 476.836980][T13483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 476.847212][T13483] Call Trace: [ 476.850492][T13483] [ 476.853409][T13483] dump_stack_lvl+0x100/0x190 [ 476.858187][T13483] vpanic+0x552/0x970 [ 476.862155][T13483] ? __pfx_vpanic+0x10/0x10 [ 476.866649][T13483] panic+0xd1/0xe0 [ 476.870352][T13483] ? __pfx_panic+0x10/0x10 [ 476.874762][T13483] check_panic_on_warn.cold+0x19/0x34 [ 476.880118][T13483] ? ring_buffer_nr_dirty_pages+0x207/0x290 [ 476.886002][T13483] __warn.cold+0x191/0x328 [ 476.890409][T13483] __report_bug+0x296/0x3d0 [ 476.894904][T13483] ? ring_buffer_nr_dirty_pages+0x207/0x290 [ 476.900788][T13483] ? __pfx___report_bug+0x10/0x10 [ 476.905809][T13483] ? __lock_acquire+0x4a5/0x2630 [ 476.910768][T13483] ? setid_policy_lookup+0x10c/0x350 [ 476.916058][T13483] ? ring_buffer_nr_dirty_pages+0x207/0x290 [ 476.921945][T13483] report_bug+0xb2/0x220 [ 476.926180][T13483] ? ring_buffer_nr_dirty_pages+0x207/0x290 [ 476.932061][T13483] handle_bug+0x16a/0x2a0 [ 476.936381][T13483] exc_invalid_op+0x17/0x50 [ 476.940872][T13483] asm_exc_invalid_op+0x1a/0x20 [ 476.945709][T13483] RIP: 0010:ring_buffer_nr_dirty_pages+0x207/0x290 [ 476.952206][T13483] Code: 83 c3 01 48 89 ee 48 89 df e8 65 f4 fb ff 48 39 eb 72 11 31 db eb cc e8 37 fa fb ff 90 0f 0b 90 31 db eb bf e8 2a fa fb ff 90 <0f> 0b 90 31 db eb b2 4c 89 e7 e8 da e6 68 00 e9 f8 fe ff ff 4c 89 [ 476.971803][T13483] RSP: 0018:ffffc90004f6f5c0 EFLAGS: 00010087 [ 476.977865][T13483] RAX: 0000000000000105 RBX: 0000000000000001 RCX: ffffc900065da000 [ 476.985823][T13483] RDX: 0000000000080000 RSI: ffffffff820c0336 RDI: ffff88807669be00 [ 476.993786][T13483] RBP: 0000000000000002 R08: 0000000000000006 R09: 0000000000000001 [ 477.001744][T13483] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 477.009700][T13483] R13: ffff88813fe95000 R14: ffff88813fe4e0a8 R15: ffff88813fe95000 [ 477.017666][T13483] ? ring_buffer_nr_dirty_pages+0x206/0x290 [ 477.023560][T13483] rb_watermark_hit+0x1f5/0x300 [ 477.028403][T13483] ? __pfx___pollwait+0x10/0x10 [ 477.033244][T13483] ring_buffer_poll_wait+0x2b2/0x490 [ 477.038524][T13483] tracing_buffers_poll+0x1cf/0x250 [ 477.043715][T13483] ? __pfx_tracing_buffers_poll+0x10/0x10 [ 477.049423][T13483] do_select+0xd54/0x1850 [ 477.053754][T13483] ? __pfx_do_select+0x10/0x10 [ 477.058532][T13483] ? hrtimer_start_range_ns+0x860/0x1a50 [ 477.064153][T13483] ? __pfx___pollwait+0x10/0x10 [ 477.069015][T13483] ? __pfx_pollwake+0x10/0x10 [ 477.073681][T13483] ? __pfx_pollwake+0x10/0x10 [ 477.078347][T13483] ? __pfx_pollwake+0x10/0x10 [ 477.083034][T13483] ? find_held_lock+0x2b/0x80 [ 477.087801][T13483] ? __might_fault+0xc5/0x140 [ 477.092575][T13483] ? __might_fault+0xc5/0x140 [ 477.097275][T13483] ? core_sys_select+0x55b/0xbb0 [ 477.102215][T13483] core_sys_select+0x55b/0xbb0 [ 477.106978][T13483] ? __pfx_core_sys_select+0x10/0x10 [ 477.112280][T13483] ? do_futex+0x192/0x350 [ 477.116719][T13483] ? __pfx_do_futex+0x10/0x10 [ 477.121404][T13483] kern_select+0x1d0/0x280 [ 477.125809][T13483] ? __pfx_kern_select+0x10/0x10 [ 477.130737][T13483] ? xfd_validate_state+0x129/0x190 [ 477.135931][T13483] __x64_sys_select+0xbd/0x160 [ 477.140686][T13483] ? do_syscall_64+0x90/0x840 [ 477.145376][T13483] ? lockdep_hardirqs_on+0x78/0x100 [ 477.150597][T13483] do_syscall_64+0x115/0x840 [ 477.155178][T13483] ? clear_bhb_loop+0x40/0x90 [ 477.159852][T13483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.165738][T13483] RIP: 0033:0x7f634fb9ce59 [ 477.170143][T13483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.189826][T13483] RSP: 002b:00007f6350a4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 477.198317][T13483] RAX: ffffffffffffffda RBX: 00007f634fe16090 RCX: 00007f634fb9ce59 [ 477.206276][T13483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 477.214232][T13483] RBP: 00007f634fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 477.222189][T13483] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 477.230146][T13483] R13: 00007f634fe16128 R14: 00007f634fe16090 R15: 00007ffe793e0638 [ 477.238121][T13483] [ 477.241187][T13483] Kernel Offset: disabled [ 477.245500][T13483] Rebooting in 86400 seconds..